Hi,
Server (2.3.10-1ubuntu2.1) on public IP, client (2.4.4-xenial0) behind NAT with no outgoing ports blocked. Same server is running other OpenVPN links without any problems, including ipv6 over ipv4 links. Unfortunately this time won't establish connection with client for some reason.
Log from the server:
Tue Jan 30 16:55:55 2018 us=939851 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017
Tue Jan 30 16:55:55 2018 us=939863 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Tue Jan 30 16:55:55 2018 us=955134 Diffie-Hellman initialized with 4096 bit key
Tue Jan 30 16:55:55 2018 us=955474 PRNG init md=SHA1 size=36
Tue Jan 30 16:55:55 2018 us=955543 Control Channel Authentication: using '/etc/openvpn/vpn/ta-fi.key' as a OpenVPN static key file
Tue Jan 30 16:55:55 2018 us=955560 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 30 16:55:55 2018 us=955572 Outgoing Control Channel Authentication: HMAC KEY: 3bf00365 44d47019 a6ef7f8c ff3c0d3e aa5a6d2d
Tue Jan 30 16:55:55 2018 us=955579 Outgoing Control Channel Authentication: HMAC size=20 block_size=20
Tue Jan 30 16:55:55 2018 us=955587 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 30 16:55:55 2018 us=955597 Incoming Control Channel Authentication: HMAC KEY: d73f9b48 18200aee 92d61ba9 5d4e24cd 8ccd7df7
Tue Jan 30 16:55:55 2018 us=955604 Incoming Control Channel Authentication: HMAC size=20 block_size=20
Tue Jan 30 16:55:55 2018 us=955613 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Tue Jan 30 16:55:55 2018 us=955621 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 28 bytes
Tue Jan 30 16:55:55 2018 us=955645 LZO compression initialized
Tue Jan 30 16:55:55 2018 us=955658 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:55:55 2018 us=955691 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:55:55 2018 us=955702 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:55:55 2018 us=955727 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:55:55 2018 us=955738 Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan 30 16:55:55 2018 us=955752 MTU DYNAMIC mtu=1450, flags=2, 1558 -> 1450
Tue Jan 30 16:55:55 2018 us=955768 Socket Buffers: R=[262144->262144] S=[262144->262144]
Tue Jan 30 16:55:55 2018 us=969808 ROUTE_GATEWAY 1.2.3.33/255.255.255.224 IFACE=eth0 HWADDR=84:2b:2b:13:3c:b0
Tue Jan 30 16:55:55 2018 us=970296 TUN/TAP device tun2 opened
Tue Jan 30 16:55:55 2018 us=970324 TUN/TAP TX queue length set to 100
Tue Jan 30 16:55:55 2018 us=970340 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jan 30 16:55:55 2018 us=970368 /sbin/ip link set dev tun2 up mtu 1500
Tue Jan 30 16:55:55 2018 us=971655 /sbin/ip addr add dev tun2 local 10.8.0.10 peer 10.8.0.11
Tue Jan 30 16:55:55 2018 us=972612 /sbin/ip route add 192.168.200.0/24 via 10.8.0.11
Tue Jan 30 16:55:55 2018 us=973341 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Jan 30 16:55:55 2018 us=973391 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.11 10.8.0.10,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan 30 16:55:55 2018 us=973401 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.10 10.8.0.11,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan 30 16:55:55 2018 us=973419 Local Options hash (VER=V4): 'a8547aca'
Tue Jan 30 16:55:55 2018 us=973431 Expected Remote Options hash (VER=V4): 'c9b9c14e'
Tue Jan 30 16:55:55 2018 us=973447 UDPv4 link local (bound): [AF_INET]1.2.3.60:1196
Tue Jan 30 16:55:55 2018 us=973455 UDPv4 link remote: [undef]
Tue Jan 30 16:55:55 2018 us=973536 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:55:55 2018 us=973550 SENT PING
Tue Jan 30 16:56:05 2018 us=310171 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:56:05 2018 us=310244 SENT PING
Tue Jan 30 16:56:15 2018 us=450573 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:56:15 2018 us=450643 SENT PING
Tue Jan 30 16:56:26 2018 us=30596 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:56:26 2018 us=30665 SENT PING
Tue Jan 30 16:56:36 2018 us=850654 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:56:36 2018 us=850717 SENT PING
Tue Jan 30 16:56:46 2018 us=378970 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:56:46 2018 us=379024 SENT PING
Tue Jan 30 16:56:56 2018 us=84240 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:56:56 2018 us=84342 SENT PING
Tue Jan 30 16:57:06 2018 us=452489 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:57:06 2018 us=452534 SENT PING
Tue Jan 30 16:57:16 2018 us=140519 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:57:16 2018 us=140593 SENT PING
Tue Jan 30 16:57:26 2018 us=203695 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:57:26 2018 us=203776 SENT PING
Tue Jan 30 16:57:36 2018 us=5642 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:57:36 2018 us=5709 SENT PING
Tue Jan 30 16:57:46 2018 us=46285 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:57:46 2018 us=46360 SENT PING
Tue Jan 30 16:57:55 2018 us=798263 [UNDEF] Inactivity timeout (--ping-restart), restarting
Tue Jan 30 16:57:55 2018 us=798358 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798430 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798446 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798454 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798475 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798484 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798491 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798498 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798506 TCP/UDP: Closing socket
Tue Jan 30 16:57:55 2018 us=798524 PID packet_id_free
Tue Jan 30 16:57:55 2018 us=798540 SIGUSR1[soft,ping-restart] received, process restarting
Tue Jan 30 16:57:55 2018 us=798552 Restart pause, 2 second(s)
Tue Jan 30 16:57:57 2018 us=813160 Re-using SSL/TLS context
Tue Jan 30 16:57:57 2018 us=813221 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Tue Jan 30 16:57:57 2018 us=813232 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 28 bytes
Tue Jan 30 16:57:57 2018 us=813261 LZO compression initialized
Tue Jan 30 16:57:57 2018 us=813281 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:57:57 2018 us=813317 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:57:57 2018 us=813328 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:57:57 2018 us=813349 PID packet_id_init tcp_mode=0 seq_backtrack=64 time_backtrack=15
Tue Jan 30 16:57:57 2018 us=813361 Control Channel MTU parms [ L:1558 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan 30 16:57:57 2018 us=813374 MTU DYNAMIC mtu=1450, flags=2, 1558 -> 1450
Tue Jan 30 16:57:57 2018 us=813390 Socket Buffers: R=[262144->262144] S=[262144->262144]
Tue Jan 30 16:57:57 2018 us=813410 Preserving previous TUN/TAP instance: tun2
Tue Jan 30 16:57:57 2018 us=813427 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Jan 30 16:57:57 2018 us=813446 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.11 10.8.0.10,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan 30 16:57:57 2018 us=813454 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,ifconfig 10.8.0.10 10.8.0.11,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan 30 16:57:57 2018 us=813470 Local Options hash (VER=V4): 'a8547aca'
Tue Jan 30 16:57:57 2018 us=813481 Expected Remote Options hash (VER=V4): 'c9b9c14e'
Tue Jan 30 16:57:57 2018 us=813494 UDPv4 link local (bound): [AF_INET]1.2.3.60:1196
Tue Jan 30 16:57:57 2018 us=813502 UDPv4 link remote: [undef]
Tue Jan 30 16:57:57 2018 us=813576 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:57:57 2018 us=813587 SENT PING
Tue Jan 30 16:58:07 2018 us=632547 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 16:58:07 2018 us=632620 SENT PING
Client log:
Tue Jan 30 18:56:14 2018 us=150767 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017
Tue Jan 30 18:56:14 2018 us=150786 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Tue Jan 30 18:56:14 2018 us=152035 WARNING: using --pull/--client and --ifconfig together is probably not what you want
Tue Jan 30 18:56:14 2018 us=153147 PRNG init md=SHA1 size=36
Tue Jan 30 18:56:14 2018 us=153319 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 30 18:56:14 2018 us=153357 Outgoing Control Channel Authentication: HMAC KEY: d73f9b48 18200aee 92d61ba9 5d4e24cd 8ccd7df7
Tue Jan 30 18:56:14 2018 us=153383 Outgoing Control Channel Authentication: HMAC size=20 block_size=20
Tue Jan 30 18:56:14 2018 us=153412 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan 30 18:56:14 2018 us=153441 Incoming Control Channel Authentication: HMAC KEY: 3bf00365 44d47019 a6ef7f8c ff3c0d3e aa5a6d2d
Tue Jan 30 18:56:14 2018 us=153465 Incoming Control Channel Authentication: HMAC size=20 block_size=20
Tue Jan 30 18:56:14 2018 us=153491 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 28 bytes
Tue Jan 30 18:56:14 2018 us=153516 LZO compression initializing
Tue Jan 30 18:56:14 2018 us=153573 PID packet_id_init seq_backtrack=64 time_backtrack=15
Tue Jan 30 18:56:14 2018 us=153644 PID packet_id_init seq_backtrack=64 time_backtrack=15
Tue Jan 30 18:56:14 2018 us=153676 PID packet_id_init seq_backtrack=64 time_backtrack=15
Tue Jan 30 18:56:14 2018 us=153795 PID packet_id_init seq_backtrack=64 time_backtrack=15
Tue Jan 30 18:56:14 2018 us=153930 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan 30 18:56:14 2018 us=153982 MTU DYNAMIC mtu=1450, flags=2, 1622 -> 1450
Tue Jan 30 18:56:14 2018 us=154387 RESOLVE_REMOTE flags=0x0901 phase=1 rrs=0 sig=-1 status=0
Tue Jan 30 18:56:14 2018 us=154411 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Tue Jan 30 18:56:14 2018 us=154430 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Tue Jan 30 18:56:14 2018 us=154443 calc_options_string_link_mtu: link-mtu 1622 -> 1558
Tue Jan 30 18:56:14 2018 us=154474 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Tue Jan 30 18:56:14 2018 us=154504 calc_options_string_link_mtu: link-mtu 1622 -> 1558
Tue Jan 30 18:56:14 2018 us=154523 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan 30 18:56:14 2018 us=154536 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan 30 18:56:14 2018 us=154553 TCP/UDP: Preserving recently used remote address: [AF_INET]1.2.3.60:1196
Tue Jan 30 18:56:14 2018 us=154580 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Jan 30 18:56:14 2018 us=154615 UDP link local (bound): [AF_INET][undef]:1196
Tue Jan 30 18:56:14 2018 us=154630 UDP link remote: [AF_INET]1.2.3.60:1196
Tue Jan 30 18:56:14 2018 us=154749 TLS Warning: no data channel send key available: [key#0 state=S_INITIAL id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 18:56:14 2018 us=154770 SENT PING
Tue Jan 30 18:56:14 2018 us=154809 UDP WRITE [42] to [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Tue Jan 30 18:56:14 2018 us=201958 UDP READ [14] from [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_SERVER_V2 kid=0
Tue Jan 30 18:56:14 2018 us=202028 TLS: Initial packet from [AF_INET]1.2.3.60:1196, sid=c91ea42f 4ef269c8
Tue Jan 30 18:56:14 2018 us=202073 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]1.2.3.60:1196
Tue Jan 30 18:56:16 2018 us=417485 UDP READ [14] from [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_SERVER_V2 kid=0
Tue Jan 30 18:56:16 2018 us=417657 TLS: Initial packet from [AF_INET]1.2.3.60:1196, sid=c91ea42f 4ef269c8
Tue Jan 30 18:56:16 2018 us=417706 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]1.2.3.60:1196
Tue Jan 30 18:56:16 2018 us=417774 UDP WRITE [42] to [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2 ] [ ] pid=0 DATA len=0
Tue Jan 30 18:56:19 2018 us=788157 UDP READ [14] from [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_SERVER_V2 kid=0
Tue Jan 30 18:56:19 2018 us=788891 TLS: Initial packet from [AF_INET]1.2.3.60:1196, sid=c91ea42f 4ef269c8
Tue Jan 30 18:56:19 2018 us=788945 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]1.2.3.60:1196
Tue Jan 30 18:56:21 2018 us=17351 UDP WRITE [42] to [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #3 ] [ ] pid=0 DATA len=0
Tue Jan 30 18:56:27 2018 us=917043 UDP READ [14] from [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_SERVER_V2 kid=0
Tue Jan 30 18:56:27 2018 us=917155 TLS: Initial packet from [AF_INET]1.2.3.60:1196, sid=c91ea42f 4ef269c8
Tue Jan 30 18:56:27 2018 us=917177 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]1.2.3.60:1196
Tue Jan 30 18:56:30 2018 us=27523 UDP WRITE [42] to [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #4 ] [ ] pid=0 DATA len=0
Tue Jan 30 18:56:40 2018 us=507116 TLS Warning: no data channel send key available: [key#0 state=S_PRE_START id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 18:56:40 2018 us=507213 SENT PING
Tue Jan 30 18:56:44 2018 us=93688 UDP READ [14] from [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_SERVER_V2 kid=0
Tue Jan 30 18:56:44 2018 us=93785 TLS: Initial packet from [AF_INET]1.2.3.60:1196, sid=c91ea42f 4ef269c8
Tue Jan 30 18:56:44 2018 us=93819 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]1.2.3.60:1196
Tue Jan 30 18:56:46 2018 us=598569 UDP WRITE [42] to [AF_INET]1.2.3.60:1196: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #5 ] [ ] pid=0 DATA len=0
Tue Jan 30 18:56:56 2018 us=271805 TLS Warning: no data channel send key available: [key#0 state=S_PRE_START id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 18:56:56 2018 us=271914 SENT PING
Tue Jan 30 18:57:06 2018 us=118077 TLS Warning: no data channel send key available: [key#0 state=S_PRE_START id=0 sid=00000000 00000000] [key#1 state=S_UNDEF id=0 sid=00000000 00000000] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Tue Jan 30 18:57:06 2018 us=118169 SENT PING
Tue Jan 30 18:57:14 2018 us=560920 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jan 30 18:57:14 2018 us=560960 TLS Error: TLS handshake failed
Tue Jan 30 18:57:14 2018 us=560985 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561072 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561103 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561138 PID packet_id_init seq_backtrack=64 time_backtrack=15
Tue Jan 30 18:57:14 2018 us=561186 PID packet_id_init seq_backtrack=64 time_backtrack=15
Tue Jan 30 18:57:14 2018 us=561256 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561312 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561341 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561364 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561397 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561422 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561445 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561467 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561492 TCP/UDP: Closing socket
Tue Jan 30 18:57:14 2018 us=561537 PID packet_id_free
Tue Jan 30 18:57:14 2018 us=561565 SIGUSR1[soft,tls-error] received, process restarting
Tue Jan 30 18:57:14 2018 us=561611 Restart pause, 5 second(s)
Tue Jan 30 18:57:19 2018 us=561768 Re-using SSL/TLS context
Server config:
cd /etc/openvpn
tls-server
dev tun2
daemon
cipher AES-256-CBC
reneg-sec 0
auth-nocache
comp-lzo
verb 7
local 1.2.3.60
port 1196
proto udp
ifconfig 10.8.0.10 10.8.0.11
route 192.168.200.0 255.255.255.0
keepalive 10 120
script-security 2
persist-key
persist-tun
log-append /var/log/openvpn-site2site.log
status /var/log/openvpn-site2site-status.log
tls-auth /etc/openvpn/vpn/ta.key 0
dh /etc/openvpn/vpn/dh.pem
ca /etc/openvpn/vpn/ca.crt
cert /etc/openvpn/vpn/cert.crt
key /etc/openvpn/vpn/key.key
Client config:
cd /etc/openvpn
client
tls-client
dev tun
verb 7
daemon
cipher AES-256-CBC
reneg-sec 0
remote 1.2.3.60
port 1196
proto udp
ifconfig 10.8.0.11 10.8.0.10
route 10.171.0.0 255.255.0.0
persist-key
persist-tun
auth-nocache
keepalive 10 120
script-security 2
remote-cert-tls server
comp-lzo
log-append /var/log/openvpn.log
status /var/log/openvpn-status.log
tls-auth /etc/openvpn/ta.key 1
ca /etc/openvpn/ca.crt
cert /etc/openvpn/cert-client.crt
key /etc/openvpn/key-client.key
Any idea what is wrong here?
