Reading some articles on the use of a Raspberry Pi B3+ as OpenVPN access server, the idea was appealing and I purchased the necessary hardware. I installed the openvpn using the script of pivpn.
After adding a client I exported the client file to my mobile android phone and to two laptops one running on Linuxmint 19 and the other on Lubuntu 18.04.
The Raspberry is connected to a Fritz!box 7490 router which in turn is connected to a bridged cable-modem-router Ubee EVW3200.
I??m sorry to say that no connection can be established with any of the three devices mentioned.
I add Log Pivpn-installation, Pipvn -d debug, Picture of Port Sharing on Fritz!box 7490, Log from Openvpn Client on the Moto E4 Mobile and Ter- Apell.ovpn. I have not found logs on the connection efforts on the two laptops.
I am new in the world VPN and I cannot interpreted the logs, I hope someone will help me to make it work.
Thank you in advance
Gerbert Bakker
SERVER.CONF
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server_zEVxs4pkGFWW4Acx.crt
key /etc/openvpn/easy-rsa/pki/private/server_zEVxs4pkGFWW4Acx.key
dh none
topology subnet
server 10.8.0.0 255.255.255.0
# Set your primary domain name server address for clients
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"
push "redirect-gateway def1"
client-to-client
keepalive 1800 3600
remote-cert-tls client
tls-version-min 1.2
tls-crypt /etc/openvpn/easy-rsa/pki/ta.key
cipher AES-256-CBC
auth SHA256
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 3
Server.log
Dec 16 21:01:49 raspberrypi ovpn-server[339]: OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
Dec 16 21:01:49 raspberrypi ovpn-server[339]: library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08
Dec 16 21:01:50 raspberrypi ovpn-server[370]: Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Dec 16 21:01:50 raspberrypi ovpn-server[370]: Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Dec 16 21:01:50 raspberrypi ovpn-server[370]: Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Dec 16 21:01:50 raspberrypi ovpn-server[370]: Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Dec 16 21:01:50 raspberrypi ovpn-server[370]: TUN/TAP device tun0 opened
Dec 16 21:01:50 raspberrypi ovpn-server[370]: TUN/TAP TX queue length set to 100
Dec 16 21:01:50 raspberrypi ovpn-server[370]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Dec 16 21:01:50 raspberrypi ovpn-server[370]: /sbin/ip link set dev tun0 up mtu 1500
Dec 16 21:01:50 raspberrypi ovpn-server[370]: /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Dec 16 21:01:50 raspberrypi ovpn-server[370]: Could not determine IPv4/IPv6 protocol. Using AF_INET
Dec 16 21:01:50 raspberrypi ovpn-server[370]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 16 21:01:50 raspberrypi ovpn-server[370]: UDPv4 link local (bound): [AF_INET][undef]:1194
Dec 16 21:01:50 raspberrypi ovpn-server[370]: UDPv4 link remote: [AF_UNSPEC]
Dec 16 21:01:50 raspberrypi ovpn-server[370]: GID set to nogroup
Dec 16 21:01:50 raspberrypi ovpn-server[370]: UID set to nobody
Dec 16 21:01:50 raspberrypi ovpn-server[370]: MULTI: multi_init called, r=256 v=256
Dec 16 21:01:50 raspberrypi ovpn-server[370]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Dec 16 21:01:50 raspberrypi ovpn-server[370]: Initialization Sequence Completed
Dec 16 21:02:35 raspberrypi ovpn-server[370]: 89.200.41.196:40378 TLS: Initial packet from [AF_INET]89.200.41.196:40378, sid=4c11d10a e8bac319
Dec 16 21:02:36 raspberrypi ovpn-server[370]: 89.200.41.196:40378 tls-crypt unwrap error: bad packet ID (may be a replay): [ #1 / time = (1545140247) Tue Dec 18 14:37:27 2018 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Dec 16 21:02:36 raspberrypi ovpn-server[370]: 89.200.41.196:40378 tls-crypt unwrap error: packet replay
Dec 16 21:02:36 raspberrypi ovpn-server[370]: 89.200.41.196:40378 TLS Error: tls-crypt unwrapping failed from [AF_INET]89.200.41.196:40378
Dec 16 21:02:37 raspberrypi ovpn-server[370]: 89.200.41.196:40378 tls-crypt unwrap error: bad packet ID (may be a replay): [ #1 / time = (1545140247) Tue Dec 18 14:37:27 2018 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Dec 16 21:29:07 raspberrypi ovpn-server[370]: 89.200.41.196:40249 TLS Error: tls-crypt unwrapping failed from [AF_INET]89.200.41.196:40249
Dec 16 21:29:07 raspberrypi ovpn-server[370]: 89.200.41.196:40251 TLS: Initial packet from [AF_INET]89.200.41.196:40251, sid=5026c832 1b8ae63a
Dec 16 21:29:08 raspberrypi ovpn-server[370]: 89.200.41.196:40251 tls-crypt unwrap error: bad packet ID (may be a replay): [ #1 / time = (1545141840) Tue Dec 18 15:04:00 2018 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Dec 16 21:29:08 raspberrypi ovpn-server[370]: 89.200.41.196:40251 tls-crypt unwrap error: packet replay
Dec 16 21:29:08 raspberrypi ovpn-server[370]: 89.200.41.196:40251 TLS Error: tls-crypt unwrapping failed from [AF_INET]89.200.41.196:40251
Dec 16 21:29:10 raspberrypi ovpn-server[370]: 89.200.41.196:40247 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 16 21:29:10 raspberrypi ovpn-server[370]: 89.200.41.196:40247 TLS Error: TLS handshake failed
Dec 16 21:29:10 raspberrypi ovpn-server[370]: 89.200.41.196:40247 SIGUSR1[soft,tls-error] received, client-instance restarting
Dec 16 21:29:27 raspberrypi ovpn-server[370]: 89.200.41.196:40248 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 16 21:29:27 raspberrypi ovpn-server[370]: 89.200.41.196:40248 TLS Error: TLS handshake failed
Dec 16 21:29:27 raspberrypi ovpn-server[370]: 89.200.41.196:40248 SIGUSR1[soft,tls-error] received, client-instance restarting
Dec 16 21:30:07 raspberrypi ovpn-server[370]: 89.200.41.196:40249 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 16 21:30:07 raspberrypi ovpn-server[370]: 89.200.41.196:40249 TLS Error: TLS handshake failed
Dec 16 21:30:07 raspberrypi ovpn-server[370]: 89.200.41.196:40249 SIGUSR1[soft,tls-error] received, client-instance restarting
Dec 16 21:30:07 raspberrypi ovpn-server[370]: 89.200.41.196:40251 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 16 21:30:07 raspberrypi ovpn-server[370]: 89.200.41.196:40251 TLS Error: TLS handshake failed
Dec 16 21:30:07 raspberrypi ovpn-server[370]: 89.200.41.196:40251 SIGUSR1[soft,tls-error] received, client-instance restarting
Dec 16 21:31:51 raspberrypi ovpn-server[370]: 89.200.41.196:40252 TLS: Initial packet from [AF_INET]89.200.41.196:40252, sid=5026c832 1b8ae63a
Dec 16 21:31:51 raspberrypi ovpn-server[370]: 89.200.41.196:40253 TLS: Initial packet from [AF_INET]89.200.41.196:40253, sid=f3ad5849 b8d360b8
Dec 16 21:32:51 raspberrypi ovpn-server[370]: 89.200.41.196:40252 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 16 21:32:51 raspberrypi ovpn-server[370]: 89.200.41.196:40252 TLS Error: TLS handshake failed
Dec 16 21:32:51 raspberrypi ovpn-server[370]: 89.200.41.196:40252 SIGUSR1[soft,tls-error] received, client-instance restarting
Dec 16 21:32:51 raspberrypi ovpn-server[370]: 89.200.41.196:40253 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 16 21:32:51 raspberrypi ovpn-server[370]: 89.200.41.196:40253 TLS Error: TLS handshake failed
Dec 16 21:32:51 raspberrypi ovpn-server[370]: 89.200.41.196:40253 SIGUSR1[soft,tls-error] received, client-instance restarting
Dec 16 23:20:47 raspberrypi ovpn-server[271]: OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
Dec 16 23:20:47 raspberrypi ovpn-server[271]: library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08
Dec 16 23:20:47 raspberrypi ovpn-server[316]: Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Dec 16 23:20:47 raspberrypi ovpn-server[316]: Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Dec 16 23:20:47 raspberrypi ovpn-server[316]: Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Dec 16 23:20:47 raspberrypi ovpn-server[316]: Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Dec 16 23:20:47 raspberrypi ovpn-server[316]: TUN/TAP device tun0 opened
Dec 16 23:20:47 raspberrypi ovpn-server[316]: TUN/TAP TX queue length set to 100
Dec 16 23:20:47 raspberrypi ovpn-server[316]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Dec 16 23:20:47 raspberrypi ovpn-server[316]: /sbin/ip link set dev tun0 up mtu 1500
Dec 16 23:20:47 raspberrypi ovpn-server[316]: /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Dec 16 23:20:47 raspberrypi ovpn-server[316]: Could not determine IPv4/IPv6 protocol. Using AF_INET
Dec 16 23:20:47 raspberrypi ovpn-server[316]: Socket Buffers: R=[163840->163840] S=[163840->163840]
Dec 16 23:20:47 raspberrypi ovpn-server[316]: UDPv4 link local (bound): [AF_INET][undef]:1194
Dec 16 23:20:47 raspberrypi ovpn-server[316]: UDPv4 link remote: [AF_UNSPEC]
Dec 16 23:20:47 raspberrypi ovpn-server[316]: GID set to nogroup
Dec 16 23:20:47 raspberrypi ovpn-server[316]: UID set to nobody
Dec 16 23:20:47 raspberrypi ovpn-server[316]: MULTI: multi_init called, r=256 v=256
Dec 16 23:20:47 raspberrypi ovpn-server[316]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Dec 16 23:20:47 raspberrypi ovpn-server[316]: Initialization Sequence Completed
Client
client
dev tun
proto udp
remote xx.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_zEVxs4pkGFWW4Acx name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----
MIIBn
Log Moto E4 Phone Connection Openvpn
14:55:43.726 -- ----- OpenVPN Start -----
14:55:43.727 -- EVENT: CORE_THREAD_ACTIVE
14:55:43.733 -- Frame=512/2048/512 mssfix-ctrl=1250
14:55:43.750 -- UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
10 [verify-x509-name] [server_zEVxs4pkGFWW4Acx] [name]
13 [auth-nocache]
14 [verb] [3]
14:56:13.789 -- EVENT: RESOLVE
14:56:13.823 -- Contacting xx.xxx.xxx.xxx:1194 via UDP
14:56:13.824 -- EVENT: WAIT
14:56:13.833 -- Connecting to [xx.xxx.xxx.xxx]:1194 (xx.xxx.xxx.xxx) via UDPv4
14:56:23.766 -- Server poll timeout, trying next remote entry...
14:56:23.787 -- EVENT: RECONNECTING
14:56:23.797 -- EVENT: RESOLVE
14:56:23.803 -- Contacting xx.xxx.xxx.xxx:1194 via UDP
14:56:23.805 -- EVENT: WAIT
14:56:23.863 -- Connecting to [xx.xxx.xxx.xxx]:1194 (xx.xxx.xxx.xxx) via UDPv4
14:56:33.787 -- Server poll timeout, trying next remote entry...
14:56:33.795 -- EVENT: RECONNECTING
14:56:33.801 -- EVENT: RESOLVE
14:56:33.810 -- Contacting xx.xxx.xxx.xxx:1194 via UDP
14:56:33.811 -- EVENT: WAIT
14:56:33.838 -- Connecting to [xx.xxx.xxx.xxx]:1194 (xx.xxx.xxx.xxx) via UDPv4
14:56:43.755 -- EVENT: CONNECTION_TIMEOUT
14:56:43.760 -- EVENT: DISCONNECTED
14:56:43.782 -- EVENT: CORE_THREAD_INACTIVE
14:56:43.784 -- Tunnel bytes per CPU second: 0
14:56:43.785 -- ----- OpenVPN Stop -----
15:02:13.144 -- ----- OpenVPN Start -----
15:02:13.145 -- EVENT: CORE_THREAD_ACTIVE
15:02:13.151 -- Frame=512/2048/512 mssfix-ctrl=1250
15:02:13.177 -- UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
10 [verify-x509-name] [server_zEVxs4pkGFWW4Acx] [name]
13 [auth-nocache]
14 [verb] [3]
15:02:13.178 -- EVENT: RESOLVE
15:02:13.192 -- Contacting xx.xxx.xxx.xxx:1194 via UDP
15:02:13.193 -- EVENT: WAIT
15:02:13.199 -- Connecting to [xx.xxx.xxx.xxx]:1194 (xx.xxx.xxx.xxx) via UDPv4
15:02:23.183 -- Server poll timeout, trying next remote entry...
15:02:23.211 -- EVENT: RECONNECTING
15:02:23.218 -- EVENT: RESOLVE
15:02:23.229 -- Contacting xx.xxx.xxx.xxx:1194 via UDP
15:02:23.231 -- EVENT: WAIT
15:02:23.240 -- Connecting to [xx.xxx.xxx.xxx]:1194 (xx.xxx.xxx.xxx) via UDPv4
15:02:33.199 -- Server poll timeout, trying next remote entry...
15:02:33.225 -- EVENT: RECONNECTING
15:02:43.300 -- EVENT: RESOLVE
15:02:43.308 -- Contacting xx.xxx.xxx.xxx:1194 via UDP
15:02:43.322 -- EVENT: WAIT
15:02:43.332 -- Connecting to [xx.xxx.xxx.xxx]:1194 (xx.xxx.xxx.xxx) via UDPv4
15:02:53.273 -- Server poll timeout, trying next remote entry...
15:02:53.299 -- EVENT: RECONNECTING
15:02:53.305 -- EVENT: RESOLVE
15:02:53.310 -- Contacting xx.xxx.xxx.xxx:1194 via UDP
15:02:53.315 -- EVENT: WAIT
15:02:53.320 -- Connecting to [xx.xxx.xxx.xxx]:1194 (xx.xxx.xxx.xxx) via UDPv4
