Connection timing out

theodore

Hello,

I have just followed the instructions on how to set up a VPN from this article (https://www.comparitech.com/blog/vpn-privacy/how-to-make-your-own-free-vpn-using-amazon-web-services/) and I am hitting a wall.

Logs:

Mon Aug 10 16:44:59 2020   pkcs11_protected_authentication = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_private_mode = 00000000
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_cert_private = DISABLED
Mon Aug 10 16:44:59 2020   pkcs11_pin_cache_period = -1
Mon Aug 10 16:44:59 2020   pkcs11_id = '[UNDEF]'
Mon Aug 10 16:44:59 2020   pkcs11_id_management = DISABLED
Mon Aug 10 16:44:59 2020   server_network = 0.0.0.0
Mon Aug 10 16:44:59 2020   server_netmask = 0.0.0.0
Mon Aug 10 16:44:59 2020   server_network_ipv6 = ::
Mon Aug 10 16:44:59 2020   server_netbits_ipv6 = 0
Mon Aug 10 16:44:59 2020   server_bridge_ip = 0.0.0.0
Mon Aug 10 16:44:59 2020   server_bridge_netmask = 0.0.0.0
Mon Aug 10 16:44:59 2020   server_bridge_pool_start = 0.0.0.0
Mon Aug 10 16:44:59 2020   server_bridge_pool_end = 0.0.0.0
Mon Aug 10 16:44:59 2020   ifconfig_pool_defined = DISABLED
Mon Aug 10 16:44:59 2020   ifconfig_pool_start = 0.0.0.0
Mon Aug 10 16:44:59 2020   ifconfig_pool_end = 0.0.0.0
Mon Aug 10 16:44:59 2020   ifconfig_pool_netmask = 0.0.0.0
Mon Aug 10 16:44:59 2020   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Aug 10 16:44:59 2020   ifconfig_pool_persist_refresh_freq = 600
Mon Aug 10 16:44:59 2020   ifconfig_ipv6_pool_defined = DISABLED
Mon Aug 10 16:44:59 2020   ifconfig_ipv6_pool_base = ::
Mon Aug 10 16:44:59 2020   ifconfig_ipv6_pool_netbits = 0
Mon Aug 10 16:44:59 2020   n_bcast_buf = 256
Mon Aug 10 16:44:59 2020   tcp_queue_limit = 64
Mon Aug 10 16:44:59 2020   real_hash_size = 256
Mon Aug 10 16:44:59 2020   virtual_hash_size = 256
Mon Aug 10 16:44:59 2020   client_connect_script = '[UNDEF]'
Mon Aug 10 16:44:59 2020   learn_address_script = '[UNDEF]'
Mon Aug 10 16:44:59 2020   client_disconnect_script = '[UNDEF]'
Mon Aug 10 16:44:59 2020   client_config_dir = '[UNDEF]'
Mon Aug 10 16:44:59 2020   ccd_exclusive = DISABLED
Mon Aug 10 16:44:59 2020   tmp_dir = 'C:\Users\theod\AppData\Local\Temp\'
Mon Aug 10 16:44:59 2020   push_ifconfig_defined = DISABLED
Mon Aug 10 16:44:59 2020   push_ifconfig_local = 0.0.0.0
Mon Aug 10 16:44:59 2020   push_ifconfig_remote_netmask = 0.0.0.0
Mon Aug 10 16:44:59 2020   push_ifconfig_ipv6_defined = DISABLED
Mon Aug 10 16:44:59 2020   push_ifconfig_ipv6_local = ::/0
Mon Aug 10 16:44:59 2020   push_ifconfig_ipv6_remote = ::
Mon Aug 10 16:44:59 2020   enable_c2c = DISABLED
Mon Aug 10 16:44:59 2020   duplicate_cn = DISABLED
Mon Aug 10 16:44:59 2020   cf_max = 0
Mon Aug 10 16:44:59 2020   cf_per = 0
Mon Aug 10 16:44:59 2020   max_clients = 1024
Mon Aug 10 16:44:59 2020   max_routes_per_client = 256
Mon Aug 10 16:44:59 2020   auth_user_pass_verify_script = '[UNDEF]'
Mon Aug 10 16:44:59 2020   auth_user_pass_verify_script_via_file = DISABLED
Mon Aug 10 16:44:59 2020   auth_token_generate = DISABLED
Mon Aug 10 16:44:59 2020   auth_token_lifetime = 0
Mon Aug 10 16:44:59 2020   client = ENABLED
Mon Aug 10 16:44:59 2020   pull = ENABLED
Mon Aug 10 16:44:59 2020   auth_user_pass_file = '[UNDEF]'
Mon Aug 10 16:44:59 2020   show_net_up = DISABLED
Mon Aug 10 16:44:59 2020   route_method = 3
Mon Aug 10 16:44:59 2020   block_outside_dns = DISABLED
Mon Aug 10 16:44:59 2020   ip_win32_defined = DISABLED
Mon Aug 10 16:44:59 2020   ip_win32_type = 3
Mon Aug 10 16:44:59 2020   dhcp_masq_offset = 0
Mon Aug 10 16:44:59 2020   dhcp_lease_time = 31536000
Mon Aug 10 16:44:59 2020   tap_sleep = 0
Mon Aug 10 16:44:59 2020   dhcp_options = DISABLED
Mon Aug 10 16:44:59 2020   dhcp_renew = DISABLED
Mon Aug 10 16:44:59 2020   dhcp_pre_release = DISABLED
Mon Aug 10 16:44:59 2020   domain = '[UNDEF]'
Mon Aug 10 16:44:59 2020   netbios_scope = '[UNDEF]'
Mon Aug 10 16:44:59 2020   netbios_node_type = 0
Mon Aug 10 16:44:59 2020   disable_nbt = DISABLED
Mon Aug 10 16:44:59 2020 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Mon Aug 10 16:44:59 2020 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Aug 10 16:44:59 2020 library versions: OpenSSL 1.1.1f  31 Mar 2020, LZO 2.10
Mon Aug 10 16:44:59 2020 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Aug 10 16:44:59 2020 Need hold release from management interface, waiting...
Mon Aug 10 16:44:59 2020 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Aug 10 16:44:59 2020 MANAGEMENT: CMD 'state on'
Mon Aug 10 16:44:59 2020 MANAGEMENT: CMD 'log all on'
Mon Aug 10 16:45:00 2020 MANAGEMENT: CMD 'echo all on'
Mon Aug 10 16:45:00 2020 MANAGEMENT: CMD 'bytecount 5'
Mon Aug 10 16:45:00 2020 MANAGEMENT: CMD 'hold off'
Mon Aug 10 16:45:00 2020 MANAGEMENT: CMD 'hold release'
Mon Aug 10 16:45:00 2020 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Mon Aug 10 16:45:00 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Mon Aug 10 16:45:00 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Mon Aug 10 16:45:00 2020 LZO compression initializing
Mon Aug 10 16:45:00 2020 Control Channel MTU parms [ L:1622 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Mon Aug 10 16:45:00 2020 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Mon Aug 10 16:45:00 2020 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Mon Aug 10 16:45:00 2020 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Mon Aug 10 16:45:00 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]35.178.106.190:1194
Mon Aug 10 16:45:00 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 10 16:45:00 2020 UDP link local: (not bound)
Mon Aug 10 16:45:00 2020 UDP link remote: [AF_INET]35.178.106.190:1194
Mon Aug 10 16:45:00 2020 MANAGEMENT: >STATE:1597074300,WAIT,,,,,,
Mon Aug 10 16:46:01 2020 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 10 16:46:01 2020 TLS Error: TLS handshake failed
Mon Aug 10 16:46:01 2020 TCP/UDP: Closing socket
Mon Aug 10 16:46:01 2020 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 10 16:46:01 2020 MANAGEMENT: >STATE:1597074361,RECONNECTING,tls-error,,,,,
Mon Aug 10 16:46:01 2020 Restart pause, 5 second(s)
Mon Aug 10 16:46:06 2020 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Mon Aug 10 16:46:06 2020 Re-using SSL/TLS context
Mon Aug 10 16:46:06 2020 LZO compression initializing
Mon Aug 10 16:46:06 2020 Control Channel MTU parms [ L:1622 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Mon Aug 10 16:46:06 2020 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Mon Aug 10 16:46:06 2020 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Mon Aug 10 16:46:06 2020 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Mon Aug 10 16:46:06 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]35.178.106.190:1194
Mon Aug 10 16:46:06 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 10 16:46:06 2020 UDP link local: (not bound)
Mon Aug 10 16:46:06 2020 UDP link remote: [AF_INET]35.178.106.190:1194
Mon Aug 10 16:46:06 2020 MANAGEMENT: >STATE:1597074366,WAIT,,,,,,
Mon Aug 10 16:47:06 2020 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Aug 10 16:47:06 2020 TLS Error: TLS handshake failed
Mon Aug 10 16:47:06 2020 TCP/UDP: Closing socket
Mon Aug 10 16:47:06 2020 SIGUSR1[soft,tls-error] received, process restarting
Mon Aug 10 16:47:06 2020 MANAGEMENT: >STATE:1597074426,RECONNECTING,tls-error,,,,,
Mon Aug 10 16:47:06 2020 Restart pause, 5 second(s)
Mon Aug 10 16:47:11 2020 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Mon Aug 10 16:47:11 2020 Re-using SSL/TLS context
Mon Aug 10 16:47:11 2020 LZO compression initializing
Mon Aug 10 16:47:11 2020 Control Channel MTU parms [ L:1622 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Mon Aug 10 16:47:11 2020 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Mon Aug 10 16:47:11 2020 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Mon Aug 10 16:47:11 2020 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Mon Aug 10 16:47:11 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]35.178.106.190:1194
Mon Aug 10 16:47:11 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Aug 10 16:47:11 2020 UDP link local: (not bound)
Mon Aug 10 16:47:11 2020 UDP link remote: [AF_INET]35.178.106.190:1194
Mon Aug 10 16:47:11 2020 MANAGEMENT: >STATE:1597074431,WAIT,,,,,,

And config file:

client
dev tun
proto udp
remote 35.178.106.190 1194
ca ca.crt
cert client.crt
key client.key
tls-version-min 1.2
tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
cipher AES-256-CBC
auth SHA512
resolv-retry infinite
auth-retry none
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 4
tls-client
tls-auth pfs.key

Any idea of what I am doing wrong?

I have disabled the firewall as I was getting the following error message:

read UDP: Unknown error (code=10054)

Thanks a mill!

Theo

TinCanTech

See your server log.

https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963