ICBob
Greetings,
I have installed and configured a server on a Debian Bigmem server: 2.6.32-5-686-bigmem
OpenVPN 2.2.1 i486-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on May 16 2017
My server config is pretty standard,
------------------------------------------
local 192.168.1.1
port 1194
proto udp
dev tun
management localhost 7505
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS xxx.xx.xxx.xxx"
push "dhcp-option DNS xxx.xxx.xxx.xxx"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 6[/size]
---------------------------------------
Server starts seems ok.
Client is Windows 7 Pro Openvpn-GUI v11.7.0.0
My Client.config
---------------------------------------
client
dev tun
proto udp
remote xxx.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca C:\\Installs\\client\\ca.crt
cert C:\\Installs\\client\\client_1.crt
key C:\\Installs\\client\\client_1.key
remote-cert-tls server
cipher AES-256-CBC
verb 6
---------------------------------------
Seems ok, when connection starts, it shows what appears ok, then this bit:
------------------------
Tue Jul 25 19:24:33 2017 us=936062 MANAGEMENT: >STATE:1501028673,WAIT,,,,,,
Tue Jul 25 19:24:33 2017 us=936062 UDP WRITE [14] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jul 25 19:24:33 2017 us=936062 UDP READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Jul 25 19:24:33 2017 us=998566 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 19:24:33 2017 us=998566 UDP READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Jul 25 19:24:35 2017 us=45497 UDP WRITE [14] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jul 25 19:24:35 2017 us=92375 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 19:24:35 2017 us=92375 UDP READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Jul 25 19:24:39 2017 us=280094 UDP WRITE [14] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jul 25 19:24:39 2017 us=342597 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 19:24:39 2017 us=342597 UDP READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Jul 25 19:24:47 2017 us=593028 UDP WRITE [14] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jul 25 19:24:47 2017 us=655532 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 19:24:47 2017 us=655532 UDP READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Jul 25 19:25:03 2017 us=250097 UDP WRITE [14] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Jul 25 19:25:03 2017 us=296975 read UDP: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 25 19:25:03 2017 us=296975 UDP READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Jul 25 19:25:33 2017 us=220415 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 25 19:25:33 2017 us=220415 TLS Error: TLS handshake failed
Tue Jul 25 19:25:33 2017 us=220415 TCP/UDP: Closing socket
Tue Jul 25 19:25:33 2017 us=220415 SIGUSR1[soft,tls-error] received, process restarting
Tue Jul 25 19:25:33 2017 us=220415 MANAGEMENT: >STATE:1501028733,RECONNECTING,tls-error,,,,,
Tue Jul 25 19:25:33 2017 us=220415 Restart pause, 5 second(s)
------------------------------
I am at a loss as to troubleshooting, when I tcpdump the udp packets on the client eth, I get nothing.
Apparently there is a TUN/TAP adapter installed during the client install, but no indication as to configuration.
I have searched and setting it up seems to be some kind of leftover cold war secret.
Obviously this needs to bridge somehow to the eth or it's going nowhere.
Thanks for any help in advance.
