Hello,
I (think) I followed the instructions in easyrsa and created the server and client certificates. I also generated a 2048 bit Diffie-Hellman file. The only "code" I did not replace from the original ovpn files is the <tls-auth> (-----BEGIN OpenVPN Static key V1-----) files.
My original ovpn file had the various certificates embedded within them. I retained this. I changed no other setting.
Below is the log on the client when I try to connect.
Fri Jan 05 21:10:05 2018 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Fri Jan 05 21:10:05 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Jan 05 21:10:05 2018 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Fri Jan 05 21:10:05 2018 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Jan 05 21:10:05 2018 Need hold release from management interface, waiting...
Fri Jan 05 21:10:05 2018 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Jan 05 21:10:05 2018 MANAGEMENT: CMD 'state on'
Fri Jan 05 21:10:05 2018 MANAGEMENT: CMD 'log all on'
Fri Jan 05 21:10:05 2018 MANAGEMENT: CMD 'echo all on'
Fri Jan 05 21:10:05 2018 MANAGEMENT: CMD 'hold off'
Fri Jan 05 21:10:05 2018 MANAGEMENT: CMD 'hold release'
Fri Jan 05 21:10:10 2018 MANAGEMENT: CMD 'password [...]'
Fri Jan 05 21:10:10 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Jan 05 21:10:10 2018 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 05 21:10:10 2018 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Jan 05 21:10:10 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]21x.xxx.xxx.x80:1175
Fri Jan 05 21:10:10 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Jan 05 21:10:10 2018 UDP link local: (not bound)
Fri Jan 05 21:10:10 2018 UDP link remote: [AF_INET]21x.xxx.xxx.x80:1175
Fri Jan 05 21:10:10 2018 MANAGEMENT: >STATE:1515183010,WAIT,,,,,,
Fri Jan 05 21:11:11 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 05 21:11:11 2018 TLS Error: TLS handshake failed
Fri Jan 05 21:11:11 2018 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 05 21:11:11 2018 MANAGEMENT: >STATE:1515183071,RECONNECTING,tls-error,,,,,
Fri Jan 05 21:11:11 2018 Restart pause, 5 second(s)
Fri Jan 05 21:11:16 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]21x.xxx.xxx.x80:1175
Fri Jan 05 21:11:16 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Jan 05 21:11:16 2018 UDP link local: (not bound)
Fri Jan 05 21:11:16 2018 UDP link remote: [AF_INET]21x.xxx.xxx.x80:1175
Fri Jan 05 21:11:16 2018 MANAGEMENT: >STATE:1515183076,WAIT,,,,,,
Fri Jan 05 21:11:18 2018 SIGTERM[hard,] received, process exiting
Fri Jan 05 21:11:18 2018 MANAGEMENT: >STATE:1515183078,EXITING,SIGTERM,,,,,
Thanks for any help to sort out the problem.
Regards,
Al
