I have had installed an OpenVPN server on my Centos 7 linux server. I have used a script from
https://github.com/angristan/openvpn-install ( openvpn-install.sh script ). I have changed port to UDP 49001. I did add a firewall rule for this port. I also installed OpenVPN client on other machine with Windows. Both machines can ping each other and they can send messages trhough nc command ( with -u option ), so they can talk to each other. However, OpenVPN dont work. Do you know what can be the problem? Log from client on Windows:
Thu Aug 13 15:29:50 2020 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Aug 13 15:29:50 2020 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Thu Aug 13 15:29:50 2020 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Aug 13 15:29:50 2020 Need hold release from management interface, waiting...
Thu Aug 13 15:29:51 2020 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Aug 13 15:29:51 2020 MANAGEMENT: CMD 'state on'
Thu Aug 13 15:29:51 2020 MANAGEMENT: CMD 'log all on'
Thu Aug 13 15:29:51 2020 MANAGEMENT: CMD 'echo all on'
Thu Aug 13 15:29:51 2020 MANAGEMENT: CMD 'bytecount 5'
Thu Aug 13 15:29:51 2020 MANAGEMENT: CMD 'hold off'
Thu Aug 13 15:29:51 2020 MANAGEMENT: CMD 'hold release'
Thu Aug 13 15:29:51 2020 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Aug 13 15:29:51 2020 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Aug 13 15:29:51 2020 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Aug 13 15:29:51 2020 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Aug 13 15:29:51 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]10.0.1.30:49001
Thu Aug 13 15:29:51 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 13 15:29:51 2020 UDP link local: (not bound)
Thu Aug 13 15:29:51 2020 UDP link remote: [AF_INET]10.0.1.30:49001
Thu Aug 13 15:29:51 2020 MANAGEMENT: >STATE:1597325391,WAIT,,,,,,
Thu Aug 13 15:30:51 2020 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Aug 13 15:30:51 2020 TLS Error: TLS handshake failed
Thu Aug 13 15:30:51 2020 SIGUSR1[soft,tls-error] received, process restarting
Thu Aug 13 15:30:51 2020 MANAGEMENT: >STATE:1597325451,RECONNECTING,tls-error,,,,,
Thu Aug 13 15:30:51 2020 Restart pause, 5 second(s)
Thu Aug 13 15:30:56 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]10.0.1.30:49001
Thu Aug 13 15:30:56 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 13 15:30:56 2020 UDP link local: (not bound)
Thu Aug 13 15:30:56 2020 UDP link remote: [AF_INET]10.0.1.30:49001
Thu Aug 13 15:30:56 2020 MANAGEMENT: >STATE:1597325456,WAIT,,,,,,
port 49001
proto udp
dev tun
user nobody
group nobody
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1 bypass-dhcp"
dh none
ecdh-curve prime256v1
tls-crypt /etc/openvpn/tls-crypt.key 0
crl-verify /etc/openvpn/crl.pem
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server_NzZeVcywLQJIteTA.crt
key /etc/openvpn/server_NzZeVcywLQJIteTA.key
auth SHA256
cipher AES-128-GCM
ncp-ciphers AES-128-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
client-config-dir /etc/openvpn/ccd
status /var/log/openvpn/status.log
;log /etc/openvpn/openvpn.log
verb 3
client
proto udp
explicit-exit-notify
remote 10.0.1.30 49001
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_NzZeVcywLQJIteTA name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----
and there are certificates but I do not know if I can publish them here
Do you know where is the problem?
