Persistent TLS Error: TLS key negotiation failed in 60s

reto0110

Hi people,

Thanks for taking the time to read this, I appreciate any hints.

I have spent many hours trying various configurations, including the EASY GUIDE FOR WINDOWS, and the error remains the same:
TLS Error: TLS key negotiation failed to occur within 60 seconds

Finally I'm trying the simplest setup from:

https://opengear.zendesk.com/hc/en-us/articles/216374963-Configuring-a-Windows-OpenVPN-client-or-server

Generating the keys, crt and dh with easy-rsa.

Here is my settings.

So this are my settings (my Windows is in Spanish, sorry):

Server.ovpn, operating System:

server 10.100.10.0 255.255.255.0 
port 1194 
keepalive 10 120 
proto udp 
mssfix 1400 
persist-key 
persist-tun 
dev tun 
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" 
cert "C:\\Program Files\\OpenVPN\\config\\myserv.crt"
key "C:\\Program Files\\OpenVPN\\config\\myserv.key"
dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem" 
comp-lzo

Server Ipconfig

Microsoft Windows [Versión 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. Reservados todos los derechos.

Configuración IP de Windows

   Nombre de host. . . . . . . . . : xxxxxxxxxxx
   Sufijo DNS principal  . . . . . :
   Tipo de nodo. . . . . . . . . . : híbrido
   Enrutamiento IP habilitado. . . : sí
   Proxy WINS habilitado . . . . . : no

[b]Adaptador de Ethernet Conexión de área local 2:

   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : TAP-Windows Adapter V9
   Dirección física. . . . . . . . . . . . . : 00-FF-B3-8E-40-62
   DHCP habilitado . . . . . . . . . . . . . : sí
   Configuración automática habilitada . . . : sí
   Vínculo: dirección IPv6 local. . . : fe80::8df8:483c:d814:e029%17(Preferido)
   Dirección IPv4. . . . . . . . . . . . . . : 10.100.10.1(Preferido)
   Máscara de subred . . . . . . . . . . . . : 255.255.255.252
   Concesión obtenida. . . . . . . . . . . . : sábado, 08 de septiembre de 2018 22:22:49
   La concesión expira . . . . . . . . . . . : domingo, 08 de septiembre de 2019 22:22:49
   Puerta de enlace predeterminada . . . . . :
   Servidor DHCP . . . . . . . . . . . . . . : 10.100.10.2
   IAID DHCPv6 . . . . . . . . . . . . . . . : 436273075
   DUID de cliente DHCPv6. . . . . . . . . . : 00-01-00-01-23-1E-02-95-E8-40-F2-17-3F-22
   Servidores DNS. . . . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS sobre TCP/IP. . . . . . . . . . . : habilitado[/b]

Adaptador de LAN inalámbrica Conexión de red inalámbrica:

   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Atheros AR9002WB-1NG Wireless Network Adapter
   Dirección física. . . . . . . . . . . . . : 00-08-CA-38-C1-94
   DHCP habilitado . . . . . . . . . . . . . : sí
   Configuración automática habilitada . . . : sí
   Vínculo: dirección IPv6 local. . . : fe80::acb3:2dd9:d7b0:6a41%12(Preferido)
   Dirección IPv4. . . . . . . . . . . . . . : 192.168.1.100(Preferido)
   Máscara de subred . . . . . . . . . . . . : 255.255.255.0
   Concesión obtenida. . . . . . . . . . . . : sábado, 08 de septiembre de 2018 6:14:03
   La concesión expira . . . . . . . . . . . : miércoles, 16 de octubre de 2154 4:53:55
   Puerta de enlace predeterminada . . . . . : 192.168.1.1
   Servidor DHCP . . . . . . . . . . . . . . : 192.168.1.1
   IAID DHCPv6 . . . . . . . . . . . . . . . : 301992138
   DUID de cliente DHCPv6. . . . . . . . . . : 00-01-00-01-23-1E-02-95-E8-40-F2-17-3F-22
   Servidores DNS. . . . . . . . . . . . . . : xxxxxxxxxxxxxxxx
   NetBIOS sobre TCP/IP. . . . . . . . . . . : habilitado

Adaptador de Ethernet Conexión de área local:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
   Dirección física. . . . . . . . . . . . . : E8-40-F2-17-3F-22
   DHCP habilitado . . . . . . . . . . . . . : sí
   Configuración automática habilitada . . . : sí

Adaptador de túnel isatap.{B38E4062-457B-4EDF-90B5-4CA48E345C01}:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Adaptador ISATAP de Microsoft
   Dirección física. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuración automática habilitada . . . : sí

Adaptador de túnel isatap.{E660BDD3-6ADD-461B-91AB-9FB9AEA30440}:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Adaptador ISATAP de Microsoft #4
   Dirección física. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuración automática habilitada . . . : sí

Server Log:


Sat Sep 08 22:22:49 2018 Warning on use of --daemon/--inetd: this operating system lacks daemon logging features, therefore when I become a daemon, I
won't be able to log status or error messages
Sat Sep 08 22:22:49 2018 OpenVPN 2.4.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Sat Sep 08 22:22:49 2018 Windows version 6.1 (Windows 7) 32bit
Sat Sep 08 22:22:49 2018 library versions: OpenSSL 1.1.0h  27 Mar 2018, LZO 2.10
Sat Sep 08 22:22:49 2018 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create ro
uting conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat Sep 08 22:22:49 2018 open_tun
Sat Sep 08 22:22:49 2018 TAP-WIN32 device [ConexiÃ³n de Ã¡rea local 2] opened: \\.\Global\{B38E4062-457B-4EDF-90B5-4CA48E345C01}.tap
Sat Sep 08 22:22:49 2018 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.100.10.1/255.255.255.252 on interface {B38E4062-457B-4EDF-90B5-4CA
48E345C01} [DHCP-serv: 10.100.10.2, lease-time: 31536000]
Sat Sep 08 22:22:49 2018 Sleeping for 10 seconds...
Sat Sep 08 22:22:59 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Sep 08 22:22:59 2018 ROUTE: route addition failed using CreateIpForwardEntry: Acceso denegado.   [status=5 if_index=17]
Sat Sep 08 22:22:59 2018 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Sat Sep 08 22:22:59 2018 ERROR: Windows route add command failed [adaptive]: returned error code 1
Sat Sep 08 22:22:59 2018 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Sat Sep 08 22:22:59 2018 setsockopt(IPV6_V6ONLY=0)
Sat Sep 08 22:22:59 2018 UDPv6 link local (bound): [AF_INET6][undef]:1194
Sat Sep 08 22:22:59 2018 UDPv6 link remote: [AF_UNSPEC]
Sat Sep 08 22:22:59 2018 Initialization Sequence Completed

Client.ovpn operating System:

client 
proto udp 
verb 4 
dev tun 
remote *.ddns.net 
port 1194 
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt" 
cert "C:\\Program Files\\OpenVPN\\config\\eltipo.crt" 
key "C:\\Program Files\\OpenVPN\\config\\eltipo.key" 
nobind 
persist-key 
persist-tun 
comp-lzo

Client Ipconfig

Microsoft Windows [Versión 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. Reservados todos los derechos.


Configuración IP de Windows

   Nombre de host. . . . . . . . . : xxxxxxxx
   Sufijo DNS principal  . . . . . :
   Tipo de nodo. . . . . . . . . . : híbrido
   Enrutamiento IP habilitado. . . : sí
   Proxy WINS habilitado . . . . . : no
   Lista de búsqueda de sufijos DNS: xxxxxxxxxxxx

Adaptador de Ethernet Conexión de área local 2:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : TAP-Windows Adapter V9
   Dirección física. . . . . . . . . . . . . : 00-FF-E3-9F-8E-52
   DHCP habilitado . . . . . . . . . . . . . : sí
   Configuración automática habilitada . . . : sí

Adaptador de LAN inalámbrica Conexión de red inalámbrica:

   Sufijo DNS específico para la conexión. . : inter.net.ve
   Descripción . . . . . . . . . . . . . . . : Intel(R) Centrino(R) Wireless-N 1
05
   Dirección física. . . . . . . . . . . . . : 80-9B-20-89-E4-34
   DHCP habilitado . . . . . . . . . . . . . : sí
   Configuración automática habilitada . . . : sí
   Vínculo: dirección IPv6 local. . . : fe80::eca1:bea7:458d:2ed%12(Preferido)
   Dirección IPv4. . . . . . . . . . . . . . : 10.96.100.188(Preferido)
   Máscara de subred . . . . . . . . . . . . : 255.255.255.0
   Concesión obtenida. . . . . . . . . . . . : sábado, 08 de septiembre de 2018
14:40:57 PM
   La concesión expira . . . . . . . . . . . : domingo, 09 de septiembre de 2018
 21:20:08 PM
   Puerta de enlace predeterminada . . . . . : 10.96.100.72
   Servidor DHCP . . . . . . . . . . . . . . : 10.96.100.72
   IAID DHCPv6 . . . . . . . . . . . . . . . : 310418208
   DUID de cliente DHCPv6. . . . . . . . . . : 00-01-00-01-22-CD-95-62-EC-A8-6B-
1C-1E-88
   Servidores DNS. . . . . . . . . . . . . . : 77.242.200.197
   NetBIOS sobre TCP/IP. . . . . . . . . . . : habilitado

Adaptador de Ethernet Conexión de área local:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Realtek PCIe GBE Family Controlle
r
   Dirección física. . . . . . . . . . . . . : EC-A8-6B-1C-1E-88
   DHCP habilitado . . . . . . . . . . . . . : sí
   Configuración automática habilitada . . . : sí

Adaptador de túnel isatap.inter.net.ve:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Adaptador ISATAP de Microsoft
   Dirección física. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuración automática habilitada . . . : sí

Adaptador de túnel isatap.{E39F8E52-ABB4-4FFA-B262-91F59F03015C}:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Adaptador ISATAP de Microsoft #3
   Dirección física. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuración automática habilitada . . . : sí

Adaptador de túnel isatap.{F811AA00-2EAC-4CA5-82D2-9E16705C0636}:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : Adaptador ISATAP de Microsoft #4
   Dirección física. . . . . . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP habilitado . . . . . . . . . . . . . : no
   Configuración automática habilitada . . . : sí

Client Log:

Sat Sep 08 22:30:20 2018 us=967225   mtu_discover_type = -1
Sat Sep 08 22:30:20 2018 us=967225   fragment = 0
Sat Sep 08 22:30:20 2018 us=967225   mssfix = 1450
Sat Sep 08 22:30:20 2018 us=967225   explicit_exit_notification = 0
Sat Sep 08 22:30:20 2018 us=968225 Connection profiles END
Sat Sep 08 22:30:20 2018 us=968225   remote_random = DISABLED
Sat Sep 08 22:30:20 2018 us=968225   ipchange = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=969225   dev = 'tun'
Sat Sep 08 22:30:20 2018 us=969225   dev_type = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=969225   dev_node = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=969225   lladdr = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=970225   topology = 1
Sat Sep 08 22:30:20 2018 us=972225   ifconfig_local = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=972225   ifconfig_remote_netmask = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=974225   ifconfig_noexec = DISABLED
Sat Sep 08 22:30:20 2018 us=975225   ifconfig_nowarn = DISABLED
Sat Sep 08 22:30:20 2018 us=976225   ifconfig_ipv6_local = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=982226   ifconfig_ipv6_netbits = 0
Sat Sep 08 22:30:20 2018 us=984226   ifconfig_ipv6_remote = '[UNDEF]'
Sat Sep 08 22:30:20 2018 us=987226   shaper = 0
Sat Sep 08 22:30:20 2018 us=989226   mtu_test = 0
Sat Sep 08 22:30:20 2018 us=991226   mlock = DISABLED
Sat Sep 08 22:30:20 2018 us=991226   keepalive_ping = 0
Sat Sep 08 22:30:20 2018 us=992226   keepalive_timeout = 0
Sat Sep 08 22:30:20 2018 us=994226   inactivity_timeout = 0
Sat Sep 08 22:30:20 2018 us=995227   ping_send_timeout = 0
Sat Sep 08 22:30:20 2018 us=997227   ping_rec_timeout = 0
Sat Sep 08 22:30:20 2018 us=998227   ping_rec_timeout_action = 0
Sat Sep 08 22:30:21 2018 us=2227   ping_timer_remote = DISABLED
Sat Sep 08 22:30:21 2018 us=4227   remap_sigusr1 = 0
Sat Sep 08 22:30:21 2018 us=5227   persist_tun = ENABLED
Sat Sep 08 22:30:21 2018 us=6227   persist_local_ip = DISABLED
Sat Sep 08 22:30:21 2018 us=8227   persist_remote_ip = DISABLED
Sat Sep 08 22:30:21 2018 us=9227   persist_key = ENABLED
Sat Sep 08 22:30:21 2018 us=11227   passtos = DISABLED
Sat Sep 08 22:30:21 2018 us=12227   resolve_retry_seconds = 1000000000
Sat Sep 08 22:30:21 2018 us=14228   resolve_in_advance = DISABLED
Sat Sep 08 22:30:21 2018 us=15228   username = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=17228   groupname = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=18228   chroot_dir = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=21228   cd_dir = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=23228   writepid = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=24228   up_script = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=25228   down_script = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=26228   down_pre = DISABLED
Sat Sep 08 22:30:21 2018 us=26228   up_restart = DISABLED
Sat Sep 08 22:30:21 2018 us=28228   up_delay = DISABLED
Sat Sep 08 22:30:21 2018 us=29228   daemon = DISABLED
Sat Sep 08 22:30:21 2018 us=31229   inetd = 0
Sat Sep 08 22:30:21 2018 us=32229   log = DISABLED
Sat Sep 08 22:30:21 2018 us=33229   suppress_timestamps = DISABLED
Sat Sep 08 22:30:21 2018 us=39229   machine_readable_output = DISABLED
Sat Sep 08 22:30:21 2018 us=40229   nice = 0
Sat Sep 08 22:30:21 2018 us=41229   verbosity = 4
Sat Sep 08 22:30:21 2018 us=42229   mute = 0
Sat Sep 08 22:30:21 2018 us=43229   gremlin = 0
Sat Sep 08 22:30:21 2018 us=45229   status_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=46229   status_file_version = 1
Sat Sep 08 22:30:21 2018 us=53230   status_file_update_freq = 60
Sat Sep 08 22:30:21 2018 us=55230   occ = ENABLED
Sat Sep 08 22:30:21 2018 us=57230   rcvbuf = 0
Sat Sep 08 22:30:21 2018 us=57230   sndbuf = 0
Sat Sep 08 22:30:21 2018 us=58230   sockflags = 0
Sat Sep 08 22:30:21 2018 us=60230   fast_io = DISABLED
Sat Sep 08 22:30:21 2018 us=61230   comp.alg = 2
Sat Sep 08 22:30:21 2018 us=69231   comp.flags = 1
Sat Sep 08 22:30:21 2018 us=69231   route_script = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=69231   route_default_gateway = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=70231   route_default_metric = 0
Sat Sep 08 22:30:21 2018 us=70231   route_noexec = DISABLED
Sat Sep 08 22:30:21 2018 us=70231   route_delay = 5
Sat Sep 08 22:30:21 2018 us=70231   route_delay_window = 30
Sat Sep 08 22:30:21 2018 us=70231   route_delay_defined = ENABLED
Sat Sep 08 22:30:21 2018 us=71231   route_nopull = DISABLED
Sat Sep 08 22:30:21 2018 us=71231   route_gateway_via_dhcp = DISABLED
Sat Sep 08 22:30:21 2018 us=71231   allow_pull_fqdn = DISABLED
Sat Sep 08 22:30:21 2018 us=71231   management_addr = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=72231   management_port = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=72231   management_user_pass = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=72231   management_log_history_cache = 250
Sat Sep 08 22:30:21 2018 us=74231   management_echo_buffer_size = 100
Sat Sep 08 22:30:21 2018 us=76231   management_write_peer_info_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=77231   management_client_user = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=78231   management_client_group = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=84232   management_flags = 0
Sat Sep 08 22:30:21 2018 us=87232   shared_secret_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=89232   key_direction = not set
Sat Sep 08 22:30:21 2018 us=90232   ciphername = 'AES-128-CBC'
Sat Sep 08 22:30:21 2018 us=91232   ncp_enabled = ENABLED
Sat Sep 08 22:30:21 2018 us=92232   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sat Sep 08 22:30:21 2018 us=93232   authname = 'SHA1'
Sat Sep 08 22:30:21 2018 us=95232   prng_hash = 'SHA1'
Sat Sep 08 22:30:21 2018 us=96232   prng_nonce_secret_len = 16
Sat Sep 08 22:30:21 2018 us=98232   keysize = 0
Sat Sep 08 22:30:21 2018 us=99232   engine = DISABLED
Sat Sep 08 22:30:21 2018 us=103233   replay = ENABLED
Sat Sep 08 22:30:21 2018 us=107233   mute_replay_warnings = DISABLED
Sat Sep 08 22:30:21 2018 us=107233   replay_window = 64
Sat Sep 08 22:30:21 2018 us=108233   replay_time = 15
Sat Sep 08 22:30:21 2018 us=110233   packet_id_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=111233   use_iv = ENABLED
Sat Sep 08 22:30:21 2018 us=112233   test_crypto = DISABLED
Sat Sep 08 22:30:21 2018 us=114233   tls_server = DISABLED
Sat Sep 08 22:30:21 2018 us=120234   tls_client = ENABLED
Sat Sep 08 22:30:21 2018 us=122234   key_method = 2
Sat Sep 08 22:30:21 2018 us=123234   ca_file = 'C:\Program Files\OpenVPN\config\ca.crt'
Sat Sep 08 22:30:21 2018 us=124234   ca_path = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=125234   dh_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=127234   cert_file = 'C:\Program Files\OpenVPN\config\eltipo.crt'
Sat Sep 08 22:30:21 2018 us=128234   extra_certs_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=130234   priv_key_file = 'C:\Program Files\OpenVPN\config\eltipo.key'
Sat Sep 08 22:30:21 2018 us=135235   pkcs12_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=137235   cryptoapi_cert = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=139235   cipher_list = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=140235   tls_cert_profile = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=141235   tls_verify = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=142235   tls_export_cert = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=151235   verify_x509_type = 0
Sat Sep 08 22:30:21 2018 us=153236   verify_x509_name = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=155236   crl_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=156236   ns_cert_type = 0
Sat Sep 08 22:30:21 2018 us=157236   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=159236   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=160236   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=161236   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=166236   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=168236   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=171237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=172237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=173237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=174237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=175237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=177237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=183237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=184237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=187237   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=188238   remote_cert_ku[i] = 0
Sat Sep 08 22:30:21 2018 us=189238   remote_cert_eku = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=191238   ssl_flags = 0
Sat Sep 08 22:30:21 2018 us=192238   tls_timeout = 2
Sat Sep 08 22:30:21 2018 us=197238   renegotiate_bytes = -1
Sat Sep 08 22:30:21 2018 us=198238   renegotiate_packets = 0
Sat Sep 08 22:30:21 2018 us=199238   renegotiate_seconds = 3600
Sat Sep 08 22:30:21 2018 us=201238   handshake_window = 60
Sat Sep 08 22:30:21 2018 us=203238   transition_window = 3600
Sat Sep 08 22:30:21 2018 us=204238   single_session = DISABLED
Sat Sep 08 22:30:21 2018 us=205239   push_peer_info = DISABLED
Sat Sep 08 22:30:21 2018 us=206239   tls_exit = DISABLED
Sat Sep 08 22:30:21 2018 us=208239   tls_auth_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=209239   tls_crypt_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=211239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=212239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=213239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=215239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=216239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=217239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=219239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=221239   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=222240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=223240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=225240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=226240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=228240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=229240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=231240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=232240   pkcs11_protected_authentication = DISABLED
Sat Sep 08 22:30:21 2018 us=234240   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=235240   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=237240   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=238240   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=239240   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=240241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=241241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=244241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=245241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=246241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=248241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=249241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=250241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=252241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=253241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=255241   pkcs11_private_mode = 00000000
Sat Sep 08 22:30:21 2018 us=256241   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=257242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=259242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=260242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=262242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=263242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=264242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=266242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=267242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=268242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=270242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=271242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=273242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=274242   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=276243   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=277243   pkcs11_cert_private = DISABLED
Sat Sep 08 22:30:21 2018 us=278243   pkcs11_pin_cache_period = -1
Sat Sep 08 22:30:21 2018 us=280243   pkcs11_id = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=281243   pkcs11_id_management = DISABLED
Sat Sep 08 22:30:21 2018 us=283243   server_network = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=284243   server_netmask = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=286243   server_network_ipv6 = ::
Sat Sep 08 22:30:21 2018 us=287243   server_netbits_ipv6 = 0
Sat Sep 08 22:30:21 2018 us=288243   server_bridge_ip = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=289243   server_bridge_netmask = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=291243   server_bridge_pool_start = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=292244   server_bridge_pool_end = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=293244   ifconfig_pool_defined = DISABLED
Sat Sep 08 22:30:21 2018 us=295244   ifconfig_pool_start = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=296244   ifconfig_pool_end = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=297244   ifconfig_pool_netmask = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=299244   ifconfig_pool_persist_filename = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=300244   ifconfig_pool_persist_refresh_freq = 600
Sat Sep 08 22:30:21 2018 us=301244   ifconfig_ipv6_pool_defined = DISABLED
Sat Sep 08 22:30:21 2018 us=303244   ifconfig_ipv6_pool_base = ::
Sat Sep 08 22:30:21 2018 us=304244   ifconfig_ipv6_pool_netbits = 0
Sat Sep 08 22:30:21 2018 us=306244   n_bcast_buf = 256
Sat Sep 08 22:30:21 2018 us=307244   tcp_queue_limit = 64
Sat Sep 08 22:30:21 2018 us=309244   real_hash_size = 256
Sat Sep 08 22:30:21 2018 us=310245   virtual_hash_size = 256
Sat Sep 08 22:30:21 2018 us=311245   client_connect_script = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=312245   learn_address_script = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=314245   client_disconnect_script = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=315245   client_config_dir = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=316245   ccd_exclusive = DISABLED
Sat Sep 08 22:30:21 2018 us=318245   tmp_dir = 'C:\Users\NELSON~1\AppData\Local\Temp\'
Sat Sep 08 22:30:21 2018 us=320245   push_ifconfig_defined = DISABLED
Sat Sep 08 22:30:21 2018 us=321245   push_ifconfig_local = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=322245   push_ifconfig_remote_netmask = 0.0.0.0
Sat Sep 08 22:30:21 2018 us=324245   push_ifconfig_ipv6_defined = DISABLED
Sat Sep 08 22:30:21 2018 us=325245   push_ifconfig_ipv6_local = ::/0
Sat Sep 08 22:30:21 2018 us=326245   push_ifconfig_ipv6_remote = ::
Sat Sep 08 22:30:21 2018 us=327246   enable_c2c = DISABLED
Sat Sep 08 22:30:21 2018 us=329246   duplicate_cn = DISABLED
Sat Sep 08 22:30:21 2018 us=330246   cf_max = 0
Sat Sep 08 22:30:21 2018 us=332246   cf_per = 0
Sat Sep 08 22:30:21 2018 us=333246   max_clients = 1024
Sat Sep 08 22:30:21 2018 us=334246   max_routes_per_client = 256
Sat Sep 08 22:30:21 2018 us=336246   auth_user_pass_verify_script = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=338246   auth_user_pass_verify_script_via_file = DISABLED
Sat Sep 08 22:30:21 2018 us=339246   auth_token_generate = DISABLED
Sat Sep 08 22:30:21 2018 us=340246   auth_token_lifetime = 0
Sat Sep 08 22:30:21 2018 us=342246   client = ENABLED
Sat Sep 08 22:30:21 2018 us=343246   pull = ENABLED
Sat Sep 08 22:30:21 2018 us=344246   auth_user_pass_file = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=346247   show_net_up = DISABLED
Sat Sep 08 22:30:21 2018 us=347247   route_method = 0
Sat Sep 08 22:30:21 2018 us=348247   block_outside_dns = DISABLED
Sat Sep 08 22:30:21 2018 us=350247   ip_win32_defined = DISABLED
Sat Sep 08 22:30:21 2018 us=351247   ip_win32_type = 3
Sat Sep 08 22:30:21 2018 us=353247   dhcp_masq_offset = 0
Sat Sep 08 22:30:21 2018 us=354247   dhcp_lease_time = 31536000
Sat Sep 08 22:30:21 2018 us=355247   tap_sleep = 0
Sat Sep 08 22:30:21 2018 us=357247   dhcp_options = DISABLED
Sat Sep 08 22:30:21 2018 us=358247   dhcp_renew = DISABLED
Sat Sep 08 22:30:21 2018 us=359247   dhcp_pre_release = DISABLED
Sat Sep 08 22:30:21 2018 us=361247   domain = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=361247   netbios_scope = '[UNDEF]'
Sat Sep 08 22:30:21 2018 us=363248   netbios_node_type = 0
Sat Sep 08 22:30:21 2018 us=364248   disable_nbt = DISABLED
Sat Sep 08 22:30:21 2018 us=365248 OpenVPN 2.4.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on A
pr 26 2018
Sat Sep 08 22:30:21 2018 us=367248 Windows version 6.1 (Windows 7) 32bit
Sat Sep 08 22:30:21 2018 us=368248 library versions: OpenSSL 1.1.0h  27 Mar 2018, LZO 2.10
Sat Sep 08 22:30:21 2018 us=372248 WARNING: No server certificate verification method has been enabled.  See http://open
vpn.net/howto.html#mitm for more info.
Sat Sep 08 22:30:21 2018 us=394249 LZO compression initializing
Sat Sep 08 22:30:21 2018 us=395249 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sat Sep 08 22:30:21 2018 us=608262 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sat Sep 08 22:30:21 2018 us=608262 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv
4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Sep 08 22:30:21 2018 us=609262 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,
proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Sep 08 22:30:21 2018 us=610262 TCP/UDP: Preserving recently used remote address: [AF_INET]186.89.68.87:1194
Sat Sep 08 22:30:21 2018 us=611262 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Sep 08 22:30:21 2018 us=612262 UDP link local: (not bound)
Sat Sep 08 22:30:21 2018 us=612262 UDP link remote: [AF_INET]186.89.68.87:1194
Sat Sep 08 22:31:22 2018 us=98721 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network c
onnectivity)
Sat Sep 08 22:31:22 2018 us=99721 TLS Error: TLS handshake failed
Sat Sep 08 22:31:22 2018 us=101722 TCP/UDP: Closing socket
Sat Sep 08 22:31:22 2018 us=101722 SIGUSR1[soft,tls-error] received, process restarting
Sat Sep 08 22:31:22 2018 us=102722 Restart pause, 5 second(s)
Sat Sep 08 22:31:27 2018 us=103008 WARNING: No server certificate verification method has been enabled.  See http://open
vpn.net/howto.html#mitm for more info.
Sat Sep 08 22:31:27 2018 us=104008 Re-using SSL/TLS context
Sat Sep 08 22:31:27 2018 us=104008 LZO compression initializing
Sat Sep 08 22:31:27 2018 us=105008 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Sat Sep 08 22:31:27 2018 us=295019 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sat Sep 08 22:31:27 2018 us=296019 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv
4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sat Sep 08 22:31:27 2018 us=297019 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,
proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sat Sep 08 22:31:27 2018 us=298019 TCP/UDP: Preserving recently used remote address: [AF_INET]186.89.68.87:1194
Sat Sep 08 22:31:27 2018 us=299019 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Sep 08 22:31:27 2018 us=300019 UDP link local: (not bound)
Sat Sep 08 22:31:27 2018 us=300019 UDP link remote: [AF_INET]186.89.68.87:1194

TinCanTech

Your server log does not show any attempted connections so your client cannot reach it.

reto0110

Thank you very much @TinCanTech, the connectivity has been partially resolved.

I had to completely disable the firewalls, open port 1194 on the client router, and configure on the server router the port 1194 as virtual server service in my old tplink.

I went back to the easy_windows_setup and there is authentication, ping and tracert between server and client.
Now the VPN network shows "NO INTERNET ACCESS", I guess it's because the TAP-Windows Adapter V9 does not have an assigned gateway (Puerta de enlace prederminada). How can i fix this??

daptador de Ethernet Conexión de área local 2:

   Sufijo DNS específico para la conexión. . :
   Descripción . . . . . . . . . . . . . . . : TAP-Windows Adapter V9
   Dirección física. . . . . . . . . . . . . : 00-FF-B3-8E-40-62
   DHCP habilitado . . . . . . . . . . . . . : sí
   Configuración automática habilitada . . . : sí
   Vínculo: dirección IPv6 local. . . : fe80::8df8:483c:d814:e029%13(Preferido)
   Dirección IPv4. . . . . . . . . . . . . . : 10.8.0.1(Preferido)
   Máscara de subred . . . . . . . . . . . . : 255.255.255.252
   Concesión obtenida. . . . . . . . . . . . : martes, 11 de septiembre de 2018 18:38:37
   La concesión expira . . . . . . . . . . . : miércoles, 11 de septiembre de 2019 18:38:36
   Puerta de enlace predeterminada . . . . . :
   Servidor DHCP . . . . . . . . . . . . . . : 10.8.0.2
   IAID DHCPv6 . . . . . . . . . . . . . . . : 436273075
   DUID de cliente DHCPv6. . . . . . . . . . : 00-01-00-01-23-1E-02-95-E8-40-F2-17-3F-22
   Servidores DNS. . . . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS sobre TCP/IP. . . . . . . . . . . : habilitado

Thanks again.

TinCanTech

reto0110 wrote there is authentication, ping and tracert between server and client.
Now the VPN network shows "NO INTERNET ACCESS", I guess it's because the TAP-Windows Adapter V9 does not have an assigned gateway (Puerta de enlace prederminada). How can i fix this??

You don't need a default gateway on the TAP adaptor.

You probably need help found here:
https://forums.openvpn.net/viewforum.php?f=7

jonnyjain

Hi, these can be a common error that can damage the whole process. these can be due to a firewall running on the system it can filter incoming packets. when you can require more help regarding the window operating system you can contact, email on them Windows Technical Support they always ready to help you.