Help this problem as client : TLS key negotiation failed to occur within 60 seconds; TLS handshake failed

equilash

Anyone can help solve this problem :?:

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

I've try this "https://openvpn.net/faq/tls-error-tls-key-negotiation-failed-to-occur-within-60-seconds-check-your-network-connectivity/"

Here is my Config
client
dev tun
<connection>
proto udp
remote ***.***.***.*** 1194
explicit-exit-notify
nobind
</connection>
resolv-retry infinite
persist-key
persist-tun
mute-replay-warnings
cipher AES-128-CBC
dev-node my-tap
remote-cert-tls server
auth SHA256
comp-lzo
verb 3
mute 20
<ca>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
</ca>
<cert>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
</cert>
<key>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
</key>

Here is my Log
Fri Jan 17 10:42:03 2020 OpenVPN 2.4.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 26 2018
Fri Jan 17 10:42:03 2020 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Jan 17 10:42:03 2020 library versions: OpenSSL 1.1.0h 27 Mar 2018, LZO 2.10
Enter Management Password:
Fri Jan 17 10:42:03 2020 MANAGEMENT: TCP Socket listening on [AF_INET]***.***.***.***:****
Fri Jan 17 10:42:03 2020 Need hold release from management interface, waiting...
Fri Jan 17 10:42:03 2020 MANAGEMENT: Client connected from [AF_INET]***.***.***.***:****
Fri Jan 17 10:42:04 2020 MANAGEMENT: CMD 'state on'
Fri Jan 17 10:42:04 2020 MANAGEMENT: CMD 'log all on'
Fri Jan 17 10:42:04 2020 MANAGEMENT: CMD 'echo all on'
Fri Jan 17 10:42:04 2020 MANAGEMENT: CMD 'bytecount 5'
Fri Jan 17 10:42:04 2020 MANAGEMENT: CMD 'hold off'
Fri Jan 17 10:42:04 2020 MANAGEMENT: CMD 'hold release'
Fri Jan 17 10:42:04 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]***.***.***.***:****
Fri Jan 17 10:42:04 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Jan 17 10:42:04 2020 UDP link local: (not bound)
Fri Jan 17 10:42:04 2020 UDP link remote: [AF_INET]***.***.***.***:****
Fri Jan 17 10:42:04 2020 MANAGEMENT: >STATE:*********,WAIT,,,,,,
Fri Jan 17 10:42:04 2020 MANAGEMENT: >STATE:1********,AUTH,,,,,,
Fri Jan 17 10:42:04 2020 TLS: Initial packet from [AF_INET]***.***.***.***:****, sid=********************
Fri Jan 17 10:42:04 2020 VERIFY OK:depth=**, C=**, ST=**, L=*********, O=*******, OU=******, CN=server, name=server, emailAddress=********************
Fri Jan 17 10:42:04 2020 VERIFY KU OK
Fri Jan 17 10:42:04 2020 Validating certificate extended key usage
Fri Jan 17 10:42:04 2020 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Jan 17 10:42:04 2020 VERIFY EKU OK
Fri Jan 17 10:42:04 2020 VERIFY OK: depth=**, C=**, ST=**, L=*********, O=*******, OU=******, CN=server, name=server, emailAddress=********************
Fri Jan 17 10:43:04 2020 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 17 10:43:04 2020 TLS Error: TLS handshake failed
Fri Jan 17 10:43:04 2020 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 17 10:43:04 2020 MANAGEMENT: >STATE:****************,RECONNECTING,tls-error,,,,,
Fri Jan 17 10:43:04 2020 Restart pause, 5 second(s)

HelpMePlease

i have the same problem 🙁, is it because of my unstable internet connection ? or my firewall ?

TinCanTech

See --log in the manual. Then read your server log.

equilash

TinCanTech wrote See --log in the manual. Then read your server log.

Thanks for response,
My Server Log :

TLS: Initial packet from [AF_INET]**.***.***.****, sid=******
VERIFY ERROR: depth=0, error=unable to get local issuer certificate: *********
BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed

TinCanTech

It looks like you have not created your client certificate correctly.

equilash

TinCanTech wrote It looks like you have not created your client certificate correctly.

sorry for delaying response ,

i think that the problem,i didnt create the certificate correctly, i dont know what i missed,
i've read this , and i'm sure my configuration is same with this guide..
https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide
https://openvpn.net/community-resources/how-to/

how to create my client certificate correctly ?

HelpMePlease

Hey, so i got the log of client that my friend made (and it works). I think we have the same problem, my log didn't have this & maybe it can help you :
WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1542'
Fri Jan 24 09:18:13 2020 WARNING: 'cipher' is used inconsistently, local='cipher AES-***-CBC', remote='cipher BF-CBC'
Fri Jan 24 09:18:13 2020 WARNING: 'keysize' is used inconsistently, local='keysize ***', remote='keysize ***'
Fri Jan 24 09:18:13 2020 Control Channel: TLSv1, cipher SSLv3 DHE-RSA-AES***-SHA, 1024 bit RSA
Fri Jan 24 09:18:13 2020 [server] Peer Connection Initiated with [AF_INET]***.**.***.** :****
Fri Jan 24 09:18:14 2020 MANAGEMENT: >STATE:1579832294,GET_CONFIG,,,,,,

TinCanTech

HelpMePlease wrote WARNING: 'cipher' is used inconsistently, local='cipher AES-***-CBC', remote='cipher BF-CBC'

Just a wild stab in the dark ..

Please see:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

HelpMePlease

my bad if it's unrelated, just trying to solve this same problem xD

TiTex

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.