synology_rs816
Dear All,
first of all I would like to anticipate that I saw another similar topic, and I can confirm you that that didn't help me.
I'm the owner of a Synology RS816 and I install the OOTB package for the VPN Server.
As you might imagine, I configured OpenVPN and it worked really well on the DSM v6 of Synology, without giving any errors.
Recently I had the good idea to upgrade the latest release v7, but all at a sudden the VPN Server stopped working giving these messages:
TLS Error: TLS key negociation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
Meanwhile Tunnelblick remains stuck in the status "Waiting for server response.."
1) I accessed the Synology Control Panel and I opened Security and I create a new LetsEncrypt certificate and it was successful (all marked in green).
2) still in the certificate settings, I made sure that the VPN Server is using my new generated certificate
3) I opened the firewall section, I enabled the firewall and it's notificaiton and i created a custom rule with Allow All/Allow All/Allow All (not best practice, but it's only for debug reasons)
4) I access the VPN Server and in General Settings I make sure that the correct Network Interface is selected
5) In privileges I make sure that my user has the OpenVPN [v} check
6) in the OpenVPN settings I make sure that there is the port 1194, with:
- Enable compression on the VPN link
- Allow clients to access server's LAN
- Verify TLS auth key
I exported the configuration, I get the ovpn file, I modify the DNS
I make sure that my router has the port forwarding on 1194 (like it was before).
I save, I import the certificate on TunnelBlick, but I get again these errors:
TLS Error: TLS key negociation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
Might you have any ideas? I would like to avoid to reset the NAS to get back to the DSM v6, thanks!
synology_rs816
We found the problem, apparently in the latest release of OpenVPN on Synology, there is an issue when using the UDP protocol.
We had to use the TCP and apply some different modification on the ovpn file extracted, like forcing the TLS, and some other stuffs, that in your blog are really well described.
Until no new release of the VPN Server will be released, we will keep stick to TCP.
Hope that helped someone.
openvpn_inc
Hi,
It won't help. It's bad advice. Better advice is to fix whatever they broke in UDP. Or, run the server on a better platform.
Regards, rob0
