openvpn connection failed on centos

fahimi

Hi
I installed open vpn same as how-to , and configured in 2 ways, but on both client didn't connect successfully.
Configuration 1:

Server Config:
local x.x.x.x
port 990
proto tcp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.0.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 4.2.2.1"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

Client Config:
client
dev tun
proto tcp
remote x.x.x.x 990
resolv-retry infinite
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
auth-user-pass
comp-lzo
verb 3
Server LOG:
Wed Oct 5 10:45:26 2011 MULTI: multi_init called, r=256 v=256
Wed Oct 5 10:45:26 2011 IFCONFIG POOL: base=10.0.0.4 size=62
Wed Oct 5 10:45:26 2011 MULTI: TCP INIT maxclients=1024 maxevents=1028
Wed Oct 5 10:45:26 2011 Initialization Sequence Completed
Wed Oct 5 10:47:43 2011 MULTI: multi_create_instance called
Wed Oct 5 10:47:43 2011 Re-using SSL/TLS context
Wed Oct 5 10:47:43 2011 LZO compression initialized
Wed Oct 5 10:47:43 2011 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Oct 5 10:47:43 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Oct 5 10:47:43 2011 Local Options hash (VER=V4): '77cf0943'
Wed Oct 5 10:47:43 2011 Expected Remote Options hash (VER=V4): '2547efd2'
Wed Oct 5 10:47:43 2011 TCP connection established with 2.176.213.20:50035
Wed Oct 5 10:47:43 2011 TCPv4_SERVER link local: [undef]
Wed Oct 5 10:47:43 2011 TCPv4_SERVER link remote: 2.176.213.20:50035
Wed Oct 5 10:47:43 2011 2.176.213.20:50035 TLS: Initial packet from 2.176.213.20:50035, sid=ea888a1e f3c07574
Wed Oct 5 10:48:30 2011 MULTI: multi_create_instance called
Wed Oct 5 10:48:30 2011 Re-using SSL/TLS context
Wed Oct 5 10:48:30 2011 LZO compression initialized
Wed Oct 5 10:48:30 2011 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Oct 5 10:48:30 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Oct 5 10:48:30 2011 Local Options hash (VER=V4): '77cf0943'
Wed Oct 5 10:48:30 2011 Expected Remote Options hash (VER=V4): '2547efd2'
Wed Oct 5 10:48:30 2011 TCP connection established with 2.176.213.20:50041
Wed Oct 5 10:48:30 2011 TCPv4_SERVER link local: [undef]
Wed Oct 5 10:48:30 2011 TCPv4_SERVER link remote: 2.176.213.20:50041
Wed Oct 5 10:48:30 2011 2.176.213.20:50041 TLS: Initial packet from 2.176.213.20:50041, sid=2d05e549 1b58b7ef
Wed Oct 5 10:48:43 2011 2.176.213.20:50035 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Oct 5 10:48:43 2011 2.176.213.20:50035 TLS Error: TLS handshake failed
Wed Oct 5 10:48:43 2011 2.176.213.20:50035 Fatal TLS error (check_tls_errors_co), restarting
Wed Oct 5 10:48:43 2011 2.176.213.20:50035 SIGUSR1[soft,tls-error] received, client-instance restarting
Wed Oct 5 10:48:43 2011 TCP/UDP: Closing socket

client LOG:
Wed Oct 05 14:17:38 2011 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Wed Oct 05 14:17:44 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Oct 05 14:17:44 2011 LZO compression initialized
Wed Oct 05 14:17:44 2011 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Oct 05 14:17:44 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Oct 05 14:17:44 2011 Local Options hash (VER=V4): '2547efd2'
Wed Oct 05 14:17:44 2011 Expected Remote Options hash (VER=V4): '77cf0943'
Wed Oct 05 14:17:44 2011 Attempting to establish TCP connection with x.x.x.x:990
Wed Oct 05 14:17:44 2011 TCP connection established with x.x.x.x:990
Wed Oct 05 14:17:44 2011 TCPv4_CLIENT link local: [undef]
Wed Oct 05 14:17:44 2011 TCPv4_CLIENT link remote: x.x.x.x:990
Wed Oct 05 14:17:44 2011 TLS: Initial packet from x.x.x.x:990, sid=60b6d6e5 f8b9a3cc
Wed Oct 05 14:18:26 2011 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)
Wed Oct 05 14:18:26 2011 Connection reset, restarting [-1]
Wed Oct 05 14:18:26 2011 TCP/UDP: Closing socket
Wed Oct 05 14:18:26 2011 SIGUSR1[soft,connection-reset] received, process restarting
Wed Oct 05 14:18:26 2011 Restart pause, 5 second(s)
Wed Oct 05 14:18:31 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Oct 05 14:18:31 2011 Re-using SSL/TLS context
Wed Oct 05 14:18:31 2011 LZO compression initialized
Wed Oct 05 14:18:31 2011 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Oct 05 14:18:31 2011 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Oct 05 14:18:31 2011 Local Options hash (VER=V4): '2547efd2'
Wed Oct 05 14:18:31 2011 Expected Remote Options hash (VER=V4): '77cf0943'
Wed Oct 05 14:18:31 2011 Attempting to establish TCP connection with x.x.x.x:990
Wed Oct 05 14:18:31 2011 TCP connection established with x.x.x.x:990
Wed Oct 05 14:18:31 2011 TCPv4_CLIENT link local: [undef]
Wed Oct 05 14:18:31 2011 TCPv4_CLIENT link remote: x.x.x.x:990
Wed Oct 05 14:18:31 2011 TLS: Initial packet from x.x.x.x:990, sid=40dc2f20 3ad1e67d

Configuration 2:

Server Config:
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.0.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Client Config:
client
dev tun
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3

Server LOG:
Wed Oct 5 11:04:14 2011 MULTI: multi_create_instance called
Wed Oct 5 11:04:14 2011 2.176.213.20:56437 Re-using SSL/TLS context
Wed Oct 5 11:04:14 2011 2.176.213.20:56437 LZO compression initialized
Wed Oct 5 11:04:14 2011 2.176.213.20:56437 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Oct 5 11:04:14 2011 2.176.213.20:56437 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Oct 5 11:04:14 2011 2.176.213.20:56437 Local Options hash (VER=V4): '530fdded'
Wed Oct 5 11:04:14 2011 2.176.213.20:56437 Expected Remote Options hash (VER=V4): '41690919'
Wed Oct 5 11:04:14 2011 2.176.213.20:56437 TLS: Initial packet from 2.176.213.20:56437, sid=75f0087a adfc47fe
Wed Oct 5 11:05:14 2011 2.176.213.20:56437 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Oct 5 11:05:14 2011 2.176.213.20:56437 TLS Error: TLS handshake failed
Wed Oct 5 11:05:14 2011 2.176.213.20:56437 SIGUSR1[soft,tls-error] received, client-instance restarting

client LOG:
Wed Oct 05 14:34:14 2011 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Wed Oct 05 14:34:14 2011 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Oct 05 14:34:14 2011 LZO compression initialized
Wed Oct 05 14:34:14 2011 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Oct 05 14:34:14 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Oct 05 14:34:14 2011 Local Options hash (VER=V4): '41690919'
Wed Oct 05 14:34:14 2011 Expected Remote Options hash (VER=V4): '530fdded'
Wed Oct 05 14:34:14 2011 UDPv4 link local: [undef]
Wed Oct 05 14:34:14 2011 UDPv4 link remote: x.x.x.x:1194
Wed Oct 05 14:34:14 2011 TLS: Initial packet from x.x.x.x:1194, sid=720d0df0 bb35098d
Wed Oct 05 14:35:14 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Oct 05 14:35:14 2011 TLS Error: TLS handshake failed
Wed Oct 05 14:35:14 2011 TCP/UDP: Closing socket
Wed Oct 05 14:35:14 2011 SIGUSR1[soft,tls-error] received, process restarting
Wed Oct 05 14:35:14 2011 Restart pause, 2 second(s)

Any help is appropriated. 😉

maikcat

hi there,

which version of centos are you using?
is Selinux enabled?
please post output of iptables -L -v

also use verb 4 and repost logs

Michael.

fahimi

hi maikcat and thank you before ,
root@s1 [/etc/openvpn/easy-rsa/2.0]# iptables -L -v
Chain INPUT (policy ACCEPT 7214K packets, 2301M bytes)
pkts bytes target prot opt in out source destination
7408K 2356M acctboth all -- any any anywhere anywhere
193K 55M ACCEPT all -- any any localhost.localdomain localhost.localdomain
20 856 REJECT tcp -- any any anywhere anywhere tcp dpt:mysql reject-with icmp-port-unreachable

Chain FORWARD (policy ACCEPT 1453K packets, 684M bytes)
pkts bytes target prot opt in out source destination
0 0 TCPMSS tcp -- any any 172.16.36.0/24 anywhere tcp flags:FIN,SYN,RST,ACK/SYN TCPMSS set 1356
36703 2038K TCPMSS tcp -- any any 10.0.0.0/8 anywhere tcp flags:FIN,SYN,RST,ACK/SYN TCPMSS set 1356

Chain OUTPUT (policy ACCEPT 1405K packets, 697M bytes)
pkts bytes target prot opt in out source destination
1405K 697M acctboth all -- any any anywhere anywhere

Chain acctboth (2 references)
pkts bytes target prot opt in out source destination
1 40 tcp -- !lo any SERVER_HOST_NAME anywhere tcp dpt:http
1 40 tcp -- !lo any anywhere SERVER_HOST_NAME tcp spt:http
0 0 tcp -- !lo any SERVER_HOST_NAME anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere SERVER_HOST_NAME tcp spt:smtp
0 0 tcp -- !lo any SERVER_HOST_NAME anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere SERVER_HOST_NAME tcp spt:pop3
0 0 icmp -- !lo any SERVER_HOST_NAME anywhere
0 0 icmp -- !lo any anywhere SERVER_HOST_NAME
197 81234 tcp -- !lo any SERVER_HOST_NAME anywhere
293 70619 tcp -- !lo any anywhere SERVER_HOST_NAME
63 5017 udp -- !lo any SERVER_HOST_NAME anywhere
65 11364 udp -- !lo any anywhere SERVER_HOST_NAME
779 651K all -- !lo any SERVER_HOST_NAME anywhere
711 134K all -- !lo any anywhere SERVER_HOST_NAME
1 40 tcp -- !lo any 38.209.104.93.static.giga-dns.com anywhere tcp dpt:http
1 40 tcp -- !lo any anywhere 38.209.104.93.static.giga-dns.com tcp spt:http
0 0 tcp -- !lo any 38.209.104.93.static.giga-dns.com anywhere tcp dpt:smtp
0 0 tcp -- !lo any anywhere 38.209.104.93.static.giga-dns.com tcp spt:smtp
0 0 tcp -- !lo any 38.209.104.93.static.giga-dns.com anywhere tcp dpt:pop3
0 0 tcp -- !lo any anywhere 38.209.104.93.static.giga-dns.com tcp spt:pop3
0 0 icmp -- !lo any 38.209.104.93.static.giga-dns.com anywhere
0 0 icmp -- !lo any anywhere 38.209.104.93.static.giga-dns.com
84 12672 tcp -- !lo any 38.209.104.93.static.giga-dns.com anywhere
86 6196 tcp -- !lo any anywhere 38.209.104.93.static.giga-dns.com
2 200 udp -- !lo any 38.209.104.93.static.giga-dns.com anywhere
0 0 udp -- !lo any anywhere 38.209.104.93.static.giga-dns.com
86 12872 all -- !lo any 38.209.104.93.static.giga-dns.com anywhere
86 6196 all -- !lo any anywhere 38.209.104.93.static.giga-dns.com
16243 5159K all -- !lo any anywhere anywhere
root@s1 [/etc/openvpn/easy-rsa/2.0]# cat /etc/redhat-release
CentOS release 5.7 (Final)
root@s1 [/etc/openvpn/easy-rsa/2.0]#

VERB4 TEST :

SERVER CONFIG:
like above second server configuration with verb4.

CLIENT CONFIG:
like above second client configuration with verb4.

SERVER LOG:
-----some loosed logs-----
Wed Oct 5 11:28:48 2011 us=440442 link_mtu = 1500
Wed Oct 5 11:28:48 2011 us=440465 link_mtu_defined = DISABLED
Wed Oct 5 11:28:48 2011 us=440489 tun_mtu_extra = 0
Wed Oct 5 11:28:48 2011 us=440512 tun_mtu_extra_defined = DISABLED
Wed Oct 5 11:28:48 2011 us=440536 fragment = 0
Wed Oct 5 11:28:48 2011 us=440560 mtu_discover_type = -1
Wed Oct 5 11:28:48 2011 us=440581 mtu_test = 0
Wed Oct 5 11:28:48 2011 us=440605 mlock = DISABLED
Wed Oct 5 11:28:48 2011 us=440628 keepalive_ping = 10
Wed Oct 5 11:28:48 2011 us=440651 keepalive_timeout = 120
Wed Oct 5 11:28:48 2011 us=440684 inactivity_timeout = 0
Wed Oct 5 11:28:48 2011 us=440708 ping_send_timeout = 10
Wed Oct 5 11:28:48 2011 us=440730 ping_rec_timeout = 240
Wed Oct 5 11:28:48 2011 us=440752 ping_rec_timeout_action = 2
Wed Oct 5 11:28:48 2011 us=440776 ping_timer_remote = DISABLED
Wed Oct 5 11:28:48 2011 us=440800 remap_sigusr1 = 0
Wed Oct 5 11:28:48 2011 us=440823 explicit_exit_notification = 0
Wed Oct 5 11:28:48 2011 us=440847 persist_tun = ENABLED
Wed Oct 5 11:28:48 2011 us=440874 persist_local_ip = DISABLED
Wed Oct 5 11:28:48 2011 us=440899 persist_remote_ip = DISABLED
Wed Oct 5 11:28:48 2011 us=440927 persist_key = ENABLED
Wed Oct 5 11:28:48 2011 us=440952 mssfix = 1450
Wed Oct 5 11:28:48 2011 us=440976 passtos = DISABLED
Wed Oct 5 11:28:48 2011 us=440999 resolve_retry_seconds = 1000000000
Wed Oct 5 11:28:48 2011 us=441022 username = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441044 groupname = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441066 chroot_dir = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441088 cd_dir = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441111 selinux_context = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441149 writepid = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441173 up_script = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441195 down_script = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441216 down_pre = DISABLED
Wed Oct 5 11:28:48 2011 us=441237 up_restart = DISABLED
Wed Oct 5 11:28:48 2011 us=441259 up_delay = DISABLED
Wed Oct 5 11:28:48 2011 us=441281 daemon = DISABLED
Wed Oct 5 11:28:48 2011 us=441303 inetd = 0
Wed Oct 5 11:28:48 2011 us=441328 log = DISABLED
Wed Oct 5 11:28:48 2011 us=441362 suppress_timestamps = DISABLED
Wed Oct 5 11:28:48 2011 us=441389 nice = 0
Wed Oct 5 11:28:48 2011 us=441413 verbosity = 4
Wed Oct 5 11:28:48 2011 us=441449 mute = 0
Wed Oct 5 11:28:48 2011 us=441478 gremlin = 0
Wed Oct 5 11:28:48 2011 us=441502 status_file = 'openvpn-status.log'
Wed Oct 5 11:28:48 2011 us=441525 status_file_version = 1
Wed Oct 5 11:28:48 2011 us=441546 status_file_update_freq = 60
Wed Oct 5 11:28:48 2011 us=441570 occ = ENABLED
Wed Oct 5 11:28:48 2011 us=441594 rcvbuf = 65536
Wed Oct 5 11:28:48 2011 us=441618 sndbuf = 65536
Wed Oct 5 11:28:48 2011 us=441641 sockflags = 0
Wed Oct 5 11:28:48 2011 us=441676 fast_io = DISABLED
Wed Oct 5 11:28:48 2011 us=441703 lzo = 7
Wed Oct 5 11:28:48 2011 us=441723 route_script = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441748 route_default_gateway = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=441771 route_default_metric = 0
Wed Oct 5 11:28:48 2011 us=441796 route_noexec = DISABLED
Wed Oct 5 11:28:48 2011 us=441817 route_delay = 0
Wed Oct 5 11:28:48 2011 us=441840 route_delay_window = 30
Wed Oct 5 11:28:48 2011 us=441861 route_delay_defined = DISABLED
Wed Oct 5 11:28:48 2011 us=441885 route_nopull = DISABLED
Wed Oct 5 11:28:48 2011 us=441905 route_gateway_via_dhcp = DISABLED
Wed Oct 5 11:28:48 2011 us=441929 max_routes = 100
Wed Oct 5 11:28:48 2011 us=441951 allow_pull_fqdn = DISABLED
Wed Oct 5 11:28:48 2011 us=441977 route 10.0.0.0/255.255.255.0/nil/nil
Wed Oct 5 11:28:48 2011 us=442002 management_addr = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=442027 management_port = 0
Wed Oct 5 11:28:48 2011 us=442049 management_user_pass = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=442072 management_log_history_cache = 250
Wed Oct 5 11:28:48 2011 us=442095 management_echo_buffer_size = 100
Wed Oct 5 11:28:48 2011 us=442119 management_write_peer_info_file = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=442155 management_client_user = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=442197 management_client_group = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=442267 management_flags = 0
Wed Oct 5 11:28:48 2011 us=442295 shared_secret_file = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=442320 key_direction = 0
Wed Oct 5 11:28:48 2011 us=442343 ciphername_defined = ENABLED
Wed Oct 5 11:28:48 2011 us=442384 ciphername = 'BF-CBC'
Wed Oct 5 11:28:48 2011 us=442407 authname_defined = ENABLED
Wed Oct 5 11:28:48 2011 us=442434 authname = 'SHA1'
Wed Oct 5 11:28:48 2011 us=442464 prng_hash = 'SHA1'
Wed Oct 5 11:28:48 2011 us=442489 prng_nonce_secret_len = 16
Wed Oct 5 11:28:48 2011 us=442515 keysize = 0
Wed Oct 5 11:28:48 2011 us=442539 engine = DISABLED
Wed Oct 5 11:28:48 2011 us=442562 replay = ENABLED
Wed Oct 5 11:28:48 2011 us=442585 mute_replay_warnings = DISABLED
Wed Oct 5 11:28:48 2011 us=442608 replay_window = 64
Wed Oct 5 11:28:48 2011 us=442631 replay_time = 15
Wed Oct 5 11:28:48 2011 us=442657 packet_id_file = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=442703 use_iv = ENABLED
Wed Oct 5 11:28:48 2011 us=442835 test_crypto = DISABLED
Wed Oct 5 11:28:48 2011 us=442863 tls_server = ENABLED
Wed Oct 5 11:28:48 2011 us=442886 tls_client = DISABLED
Wed Oct 5 11:28:48 2011 us=442908 key_method = 2
Wed Oct 5 11:28:48 2011 us=442943 ca_file = '/etc/openvpn/easy-rsa/2.0/keys/ca.crt'
Wed Oct 5 11:28:48 2011 us=443017 ca_path = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443042 dh_file = '/etc/openvpn/easy-rsa/2.0/keys/dh1024.pem'
Wed Oct 5 11:28:48 2011 us=443065 cert_file = '/etc/openvpn/easy-rsa/2.0/keys/server.crt'
Wed Oct 5 11:28:48 2011 us=443087 priv_key_file = '/etc/openvpn/easy-rsa/2.0/keys/server.key'
Wed Oct 5 11:28:48 2011 us=443112 pkcs12_file = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443149 cipher_list = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443174 tls_verify = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443204 tls_export_cert = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443229 tls_remote = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443251 crl_file = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443274 ns_cert_type = 0
Wed Oct 5 11:28:48 2011 us=443297 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443319 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443340 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443375 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443399 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443421 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443442 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443464 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443486 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443507 remote_cert_ku = 0
Wed Oct 5 11:28:48 2011 us=443529 remote_cert_ku[i] = 0
Wed Oct 5 11:28:48 2011 us=443551 remote_cert_ku[i] = 0
Wed Oct 5 11:28:48 2011 us=443573 remote_cert_ku[i] = 0
Wed Oct 5 11:28:48 2011 us=443594 remote_cert_ku[i] = 0
Wed Oct 5 11:28:48 2011 us=443617 remote_cert_ku[i] = 0
Wed Oct 5 11:28:48 2011 us=443639 remote_cert_ku[i] = 0
Wed Oct 5 11:28:48 2011 us=443671 remote_cert_eku = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443708 tls_timeout = 2
Wed Oct 5 11:28:48 2011 us=443733 renegotiate_bytes = 0
Wed Oct 5 11:28:48 2011 us=443755 renegotiate_packets = 0
Wed Oct 5 11:28:48 2011 us=443776 renegotiate_seconds = 3600
Wed Oct 5 11:28:48 2011 us=443801 handshake_window = 60
Wed Oct 5 11:28:48 2011 us=443823 transition_window = 3600
Wed Oct 5 11:28:48 2011 us=443848 single_session = DISABLED
Wed Oct 5 11:28:48 2011 us=443873 push_peer_info = DISABLED
Wed Oct 5 11:28:48 2011 us=443898 tls_exit = DISABLED
Wed Oct 5 11:28:48 2011 us=443919 tls_auth_file = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=443945 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=443970 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=443996 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444018 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444041 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444063 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444086 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444109 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444141 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444166 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444189 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444212 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444234 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444257 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444279 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444302 pkcs11_protected_authentication = DISABLED
Wed Oct 5 11:28:48 2011 us=444325 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444347 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444379 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444402 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444424 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444445 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444467 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444488 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444506 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444511 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444514 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444517 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444521 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444524 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444527 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444530 pkcs11_private_mode = 00000000
Wed Oct 5 11:28:48 2011 us=444534 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444537 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444540 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444543 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444546 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444550 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444553 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444556 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444559 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444563 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444566 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444569 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444572 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444576 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444579 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444582 pkcs11_cert_private = DISABLED
Wed Oct 5 11:28:48 2011 us=444585 pkcs11_pin_cache_period = -1
Wed Oct 5 11:28:48 2011 us=444589 pkcs11_id = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=444592 pkcs11_id_management = DISABLED
Wed Oct 5 11:28:48 2011 us=444597 server_network = 10.0.0.0
Wed Oct 5 11:28:48 2011 us=444601 server_netmask = 255.255.255.0
Wed Oct 5 11:28:48 2011 us=444605 server_bridge_ip = 0.0.0.0
Wed Oct 5 11:28:48 2011 us=444609 server_bridge_netmask = 0.0.0.0
Wed Oct 5 11:28:48 2011 us=444612 server_bridge_pool_start = 0.0.0.0
Wed Oct 5 11:28:48 2011 us=444616 server_bridge_pool_end = 0.0.0.0
Wed Oct 5 11:28:48 2011 us=444620 push_entry = 'route 10.0.0.1'
Wed Oct 5 11:28:48 2011 us=444623 push_entry = 'topology net30'
Wed Oct 5 11:28:48 2011 us=444626 push_entry = 'ping 10'
Wed Oct 5 11:28:48 2011 us=444630 push_entry = 'ping-restart 120'
Wed Oct 5 11:28:48 2011 us=444633 ifconfig_pool_defined = ENABLED
Wed Oct 5 11:28:48 2011 us=444637 ifconfig_pool_start = 10.0.0.4
Wed Oct 5 11:28:48 2011 us=444641 ifconfig_pool_end = 10.0.0.251
Wed Oct 5 11:28:48 2011 us=444645 ifconfig_pool_netmask = 0.0.0.0
Wed Oct 5 11:28:48 2011 us=444649 ifconfig_pool_persist_filename = 'ipp.txt'
Wed Oct 5 11:28:48 2011 us=444655 ifconfig_pool_persist_refresh_freq = 600
Wed Oct 5 11:28:48 2011 us=444661 n_bcast_buf = 256
Wed Oct 5 11:28:48 2011 us=444667 tcp_queue_limit = 64
Wed Oct 5 11:28:48 2011 us=444673 real_hash_size = 256
Wed Oct 5 11:28:48 2011 us=444679 virtual_hash_size = 256
Wed Oct 5 11:28:48 2011 us=444684 client_connect_script = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=444690 learn_address_script = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=444702 client_disconnect_script = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=444709 client_config_dir = '[UNDEF]'
Wed Oct 5 11:28:48 2011 us=444715 ccd_exclusive = DISABLED
Wed Oct 5 11:28:48 2011 us=444721 tmp_dir = '/tmp'
Wed Oct 5 11:28:48 2011 us=444727 push_ifconfig_defined = DISABLED
Wed Oct 5 11:28:48 2011 us=444764 push_ifconfig_local = 0.0.0.0
Wed Oct 5 11:28:48 2011 us=444776 push_ifconfig_remote_netmask = 0.0.0.0
Wed Oct 5 11:28:48 2011 us=444783 enable_c2c = DISABLED
Wed Oct 5 11:28:48 2011 us=444789 duplicate_cn = DISABLED
Wed Oct 5 11:28:48 2011 us=444795 cf_max = 0
Wed Oct 5 11:28:48 2011 us=444801 cf_per = 0
Wed Oct 5 11:28:48 2011 us=444806 max_clients = 1024
Wed Oct 5 11:28:49 2011 us=69539 max_routes_per_client = 256
Wed Oct 5 11:28:49 2011 us=69550 auth_user_pass_verify_script = '[UNDEF]'
Wed Oct 5 11:28:49 2011 us=69555 auth_user_pass_verify_script_via_file = DISABLED
Wed Oct 5 11:28:49 2011 us=69559 ssl_flags = 0
Wed Oct 5 11:28:49 2011 us=69562 port_share_host = '[UNDEF]'
Wed Oct 5 11:28:49 2011 us=69566 port_share_port = 0
Wed Oct 5 11:28:49 2011 us=69569 client = DISABLED
Wed Oct 5 11:28:49 2011 us=69573 pull = DISABLED
Wed Oct 5 11:28:49 2011 us=69577 auth_user_pass_file = '[UNDEF]'
Wed Oct 5 11:28:49 2011 us=69585 OpenVPN 2.2.1 x86_64-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Oct 3 2011
Wed Oct 5 11:28:49 2011 us=69729 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Oct 5 11:28:49 2011 us=71492 Diffie-Hellman initialized with 1024 bit key
Wed Oct 5 11:28:49 2011 us=71867 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Oct 5 11:28:49 2011 us=71894 Socket Buffers: R=[129024->131072] S=[129024->131072]
Wed Oct 5 11:28:49 2011 us=71980 ROUTE default_gateway=91.205.174.225
Wed Oct 5 11:28:49 2011 us=75226 TUN/TAP device tun0 opened
Wed Oct 5 11:28:49 2011 us=75246 TUN/TAP TX queue length set to 100
Wed Oct 5 11:28:49 2011 us=75268 /sbin/ifconfig tun0 10.0.0.1 pointopoint 10.0.0.2 mtu 1500
Wed Oct 5 11:28:49 2011 us=77977 /sbin/route add -net 10.0.0.0 netmask 255.255.255.0 gw 10.0.0.2
Wed Oct 5 11:28:49 2011 us=78575 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Oct 5 11:28:49 2011 us=78595 UDPv4 link local (bound): [undef]:1194
Wed Oct 5 11:28:49 2011 us=78600 UDPv4 link remote: [undef]
Wed Oct 5 11:28:49 2011 us=78611 MULTI: multi_init called, r=256 v=256
Wed Oct 5 11:28:49 2011 us=78634 IFCONFIG POOL: base=10.0.0.4 size=62
Wed Oct 5 11:28:49 2011 us=78647 IFCONFIG POOL LIST
Wed Oct 5 11:28:49 2011 us=78661 Initialization Sequence Completed
Wed Oct 5 11:25:52 2011 us=220911 MULTI: multi_create_instance called
Wed Oct 5 11:25:52 2011 us=221025 2.176.213.20:58024 Re-using SSL/TLS context
Wed Oct 5 11:25:52 2011 us=221077 2.176.213.20:58024 LZO compression initialized
Wed Oct 5 11:25:52 2011 us=221174 2.176.213.20:58024 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Oct 5 11:25:52 2011 us=221209 2.176.213.20:58024 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Oct 5 11:25:52 2011 us=221252 2.176.213.20:58024 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Oct 5 11:25:52 2011 us=221279 2.176.213.20:58024 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Oct 5 11:25:52 2011 us=221348 2.176.213.20:58024 Local Options hash (VER=V4): '530fdded'
Wed Oct 5 11:25:52 2011 us=221382 2.176.213.20:58024 Expected Remote Options hash (VER=V4): '41690919'
Wed Oct 5 11:25:52 2011 us=221432 2.176.213.20:58024 TLS: Initial packet from 2.176.213.20:58024, sid=77803bce ddeea736
Wed Oct 5 11:26:52 2011 us=737206 2.176.213.20:58024 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Oct 5 11:26:52 2011 us=737227 2.176.213.20:58024 TLS Error: TLS handshake failed
Wed Oct 5 11:26:52 2011 us=737295 2.176.213.20:58024 SIGUSR1[soft,tls-error] received, client-instance restarting

CLIENT LOG:
Wed Oct 05 14:55:52 2011 us=529516 Current Parameter Settings:
Wed Oct 05 14:55:52 2011 us=529837 config = 'mine.ovpn'
Wed Oct 05 14:55:52 2011 us=529845 mode = 0
Wed Oct 05 14:55:52 2011 us=529851 show_ciphers = DISABLED
Wed Oct 05 14:55:52 2011 us=529857 show_digests = DISABLED
Wed Oct 05 14:55:52 2011 us=529863 show_engines = DISABLED
Wed Oct 05 14:55:52 2011 us=529869 genkey = DISABLED
Wed Oct 05 14:55:52 2011 us=529875 key_pass_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=529881 show_tls_ciphers = DISABLED
Wed Oct 05 14:55:52 2011 us=529887 proto = 0
Wed Oct 05 14:55:52 2011 us=529892 local = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=529899 remote_list[0] = {'X.X.X.X', 1194}
Wed Oct 05 14:55:52 2011 us=529906 remote_random = DISABLED
Wed Oct 05 14:55:52 2011 us=529912 local_port = 1194
Wed Oct 05 14:55:52 2011 us=529918 remote_port = 1194
Wed Oct 05 14:55:52 2011 us=529924 remote_float = DISABLED
Wed Oct 05 14:55:52 2011 us=529934 ipchange = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=529942 bind_local = DISABLED
Wed Oct 05 14:55:52 2011 us=529950 dev = 'tun'
Wed Oct 05 14:55:52 2011 us=529958 dev_type = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=529966 dev_node = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=529995 tun_ipv6 = DISABLED
Wed Oct 05 14:55:52 2011 us=530011 ifconfig_local = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530020 ifconfig_remote_netmask = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530028 ifconfig_noexec = DISABLED
Wed Oct 05 14:55:52 2011 us=530036 ifconfig_nowarn = DISABLED
Wed Oct 05 14:55:52 2011 us=530044 shaper = 0
Wed Oct 05 14:55:52 2011 us=530052 tun_mtu = 1500
Wed Oct 05 14:55:52 2011 us=530059 tun_mtu_defined = ENABLED
Wed Oct 05 14:55:52 2011 us=530068 link_mtu = 1500
Wed Oct 05 14:55:52 2011 us=530076 link_mtu_defined = DISABLED
Wed Oct 05 14:55:52 2011 us=530083 tun_mtu_extra = 0
Wed Oct 05 14:55:52 2011 us=530092 tun_mtu_extra_defined = DISABLED
Wed Oct 05 14:55:52 2011 us=530099 fragment = 0
Wed Oct 05 14:55:52 2011 us=530108 mtu_discover_type = -1
Wed Oct 05 14:55:52 2011 us=530115 mtu_test = 0
Wed Oct 05 14:55:52 2011 us=530122 mlock = DISABLED
Wed Oct 05 14:55:52 2011 us=530130 keepalive_ping = 0
Wed Oct 05 14:55:52 2011 us=530138 keepalive_timeout = 0
Wed Oct 05 14:55:52 2011 us=530146 inactivity_timeout = 0
Wed Oct 05 14:55:52 2011 us=530154 ping_send_timeout = 0
Wed Oct 05 14:55:52 2011 us=530162 ping_rec_timeout = 120
Wed Oct 05 14:55:52 2011 us=530172 ping_rec_timeout_action = 2
Wed Oct 05 14:55:52 2011 us=530181 ping_timer_remote = DISABLED
Wed Oct 05 14:55:52 2011 us=530189 remap_sigusr1 = 0
Wed Oct 05 14:55:52 2011 us=530197 explicit_exit_notification = 0
Wed Oct 05 14:55:52 2011 us=530205 persist_tun = ENABLED
Wed Oct 05 14:55:52 2011 us=530213 persist_local_ip = DISABLED
Wed Oct 05 14:55:52 2011 us=530221 persist_remote_ip = DISABLED
Wed Oct 05 14:55:52 2011 us=530228 persist_key = ENABLED
Wed Oct 05 14:55:52 2011 us=530236 mssfix = 1450
Wed Oct 05 14:55:52 2011 us=530245 resolve_retry_seconds = 1000000000
Wed Oct 05 14:55:52 2011 us=530253 connect_retry_seconds = 5
Wed Oct 05 14:55:52 2011 us=530260 username = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530268 groupname = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530276 chroot_dir = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530283 cd_dir = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530291 writepid = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530299 up_script = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530306 down_script = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530314 down_pre = DISABLED
Wed Oct 05 14:55:52 2011 us=530322 up_restart = DISABLED
Wed Oct 05 14:55:52 2011 us=530329 up_delay = DISABLED
Wed Oct 05 14:55:52 2011 us=530336 daemon = DISABLED
Wed Oct 05 14:55:52 2011 us=530344 inetd = 0
Wed Oct 05 14:55:52 2011 us=530351 log = DISABLED
Wed Oct 05 14:55:52 2011 us=530358 suppress_timestamps = DISABLED
Wed Oct 05 14:55:52 2011 us=530365 nice = 0
Wed Oct 05 14:55:52 2011 us=530373 verbosity = 4
Wed Oct 05 14:55:52 2011 us=530380 mute = 0
Wed Oct 05 14:55:52 2011 us=530924 gremlin = 0
Wed Oct 05 14:55:52 2011 us=530933 status_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530940 status_file_version = 1
Wed Oct 05 14:55:52 2011 us=530949 status_file_update_freq = 60
Wed Oct 05 14:55:52 2011 us=530956 occ = ENABLED
Wed Oct 05 14:55:52 2011 us=530963 rcvbuf = 0
Wed Oct 05 14:55:52 2011 us=530970 sndbuf = 0
Wed Oct 05 14:55:52 2011 us=530978 socks_proxy_server = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=530989 socks_proxy_port = 0
Wed Oct 05 14:55:52 2011 us=530997 socks_proxy_retry = DISABLED
Wed Oct 05 14:55:52 2011 us=531004 fast_io = DISABLED
Wed Oct 05 14:55:52 2011 us=531012 comp_lzo = ENABLED
Wed Oct 05 14:55:52 2011 us=531020 comp_lzo_adaptive = ENABLED
Wed Oct 05 14:55:52 2011 us=531027 route_script = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=531036 route_default_gateway = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=531044 route_noexec = DISABLED
Wed Oct 05 14:55:52 2011 us=531054 route_delay = 0
Wed Oct 05 14:55:52 2011 us=545755 route_delay_window = 30
Wed Oct 05 14:55:52 2011 us=545770 route_delay_defined = ENABLED
Wed Oct 05 14:55:52 2011 us=545779 management_addr = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=545788 management_port = 0
Wed Oct 05 14:55:52 2011 us=545796 management_user_pass = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=545806 management_log_history_cache = 250
Wed Oct 05 14:55:52 2011 us=545814 management_echo_buffer_size = 100
Wed Oct 05 14:55:52 2011 us=545823 management_query_passwords = DISABLED
Wed Oct 05 14:55:52 2011 us=545831 management_hold = DISABLED
Wed Oct 05 14:55:52 2011 us=545839 shared_secret_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=545847 key_direction = 0
Wed Oct 05 14:55:52 2011 us=545854 ciphername_defined = ENABLED
Wed Oct 05 14:55:52 2011 us=545863 ciphername = 'BF-CBC'
Wed Oct 05 14:55:52 2011 us=545871 authname_defined = ENABLED
Wed Oct 05 14:55:52 2011 us=545879 authname = 'SHA1'
Wed Oct 05 14:55:52 2011 us=545887 keysize = 0
Wed Oct 05 14:55:52 2011 us=573666 engine = DISABLED
Wed Oct 05 14:55:52 2011 us=573678 replay = ENABLED
Wed Oct 05 14:55:52 2011 us=573684 mute_replay_warnings = DISABLED
Wed Oct 05 14:55:52 2011 us=573694 replay_window = 64
Wed Oct 05 14:55:52 2011 us=573703 replay_time = 15
Wed Oct 05 14:55:52 2011 us=573711 packet_id_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=573719 use_iv = ENABLED
Wed Oct 05 14:55:52 2011 us=573726 test_crypto = DISABLED
Wed Oct 05 14:55:52 2011 us=573744 tls_server = DISABLED
Wed Oct 05 14:55:52 2011 us=573759 tls_client = ENABLED
Wed Oct 05 14:55:52 2011 us=573773 key_method = 2
Wed Oct 05 14:55:52 2011 us=573782 ca_file = 'ca.crt'
Wed Oct 05 14:55:52 2011 us=573790 dh_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=573798 cert_file = 'client1.crt'
Wed Oct 05 14:55:52 2011 us=573807 priv_key_file = 'client1.key'
Wed Oct 05 14:55:52 2011 us=573816 pkcs12_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=573822 cryptoapi_cert = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=600797 cipher_list = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=600811 tls_verify = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=600820 tls_remote = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=600829 crl_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=600838 ns_cert_type = 64
Wed Oct 05 14:55:52 2011 us=600846 tls_timeout = 2
Wed Oct 05 14:55:52 2011 us=600854 renegotiate_bytes = 0
Wed Oct 05 14:55:52 2011 us=600863 renegotiate_packets = 0
Wed Oct 05 14:55:52 2011 us=600870 renegotiate_seconds = 3600
Wed Oct 05 14:55:52 2011 us=600876 handshake_window = 60
Wed Oct 05 14:55:52 2011 us=600883 transition_window = 3600
Wed Oct 05 14:55:52 2011 us=600888 single_session = DISABLED
Wed Oct 05 14:55:52 2011 us=600894 tls_exit = DISABLED
Wed Oct 05 14:55:52 2011 us=600901 tls_auth_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=600913 server_network = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=600921 server_netmask = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629171 server_bridge_ip = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629185 server_bridge_netmask = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629195 server_bridge_pool_start = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629237 server_bridge_pool_end = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629246 ifconfig_pool_defined = DISABLED
Wed Oct 05 14:55:52 2011 us=629256 ifconfig_pool_start = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629265 ifconfig_pool_end = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629275 ifconfig_pool_netmask = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=629285 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=629295 ifconfig_pool_persist_refresh_freq = 600
Wed Oct 05 14:55:52 2011 us=629301 ifconfig_pool_linear = DISABLED
Wed Oct 05 14:55:52 2011 us=629307 n_bcast_buf = 256
Wed Oct 05 14:55:52 2011 us=629313 tcp_queue_limit = 64
Wed Oct 05 14:55:52 2011 us=629319 real_hash_size = 256
Wed Oct 05 14:55:52 2011 us=629325 virtual_hash_size = 256
Wed Oct 05 14:55:52 2011 us=660182 client_connect_script = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=660201 learn_address_script = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=660212 client_disconnect_script = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=660231 client_config_dir = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=660250 ccd_exclusive = DISABLED
Wed Oct 05 14:55:52 2011 us=660259 tmp_dir = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=660267 push_ifconfig_defined = DISABLED
Wed Oct 05 14:55:52 2011 us=660280 push_ifconfig_local = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=660287 push_ifconfig_remote_netmask = 0.0.0.0
Wed Oct 05 14:55:52 2011 us=660293 enable_c2c = DISABLED
Wed Oct 05 14:55:52 2011 us=660299 duplicate_cn = DISABLED
Wed Oct 05 14:55:52 2011 us=660305 cf_max = 0
Wed Oct 05 14:55:52 2011 us=660310 cf_per = 0
Wed Oct 05 14:55:52 2011 us=660315 max_clients = 1024
Wed Oct 05 14:55:52 2011 us=660321 max_routes_per_client = 256
Wed Oct 05 14:55:52 2011 us=682187 client_cert_not_required = DISABLED
Wed Oct 05 14:55:52 2011 us=682214 username_as_common_name = DISABLED
Wed Oct 05 14:55:52 2011 us=682232 auth_user_pass_verify_script = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=682249 auth_user_pass_verify_script_via_file = DISABLED
Wed Oct 05 14:55:52 2011 us=682264 client = ENABLED
Wed Oct 05 14:55:52 2011 us=682279 pull = ENABLED
Wed Oct 05 14:55:52 2011 us=682292 auth_user_pass_file = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=682304 show_net_up = DISABLED
Wed Oct 05 14:55:52 2011 us=682312 route_method = 0
Wed Oct 05 14:55:52 2011 us=682319 ip_win32_defined = DISABLED
Wed Oct 05 14:55:52 2011 us=682327 ip_win32_type = 3
Wed Oct 05 14:55:52 2011 us=682335 dhcp_masq_offset = 0
Wed Oct 05 14:55:52 2011 us=682343 dhcp_lease_time = 31536000
Wed Oct 05 14:55:52 2011 us=682351 tap_sleep = 0
Wed Oct 05 14:55:52 2011 us=682359 dhcp_options = DISABLED
Wed Oct 05 14:55:52 2011 us=682368 dhcp_renew = DISABLED
Wed Oct 05 14:55:52 2011 us=707521 dhcp_pre_release = DISABLED
Wed Oct 05 14:55:52 2011 us=707535 dhcp_release = DISABLED
Wed Oct 05 14:55:52 2011 us=707545 domain = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=707554 netbios_scope = '[UNDEF]'
Wed Oct 05 14:55:52 2011 us=707564 netbios_node_type = 0
Wed Oct 05 14:55:52 2011 us=707572 disable_nbt = DISABLED
Wed Oct 05 14:55:52 2011 us=707588 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Wed Oct 05 14:55:52 2011 us=707683 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Wed Oct 05 14:55:52 2011 us=709035 LZO compression initialized
Wed Oct 05 14:55:52 2011 us=709123 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Oct 05 14:55:52 2011 us=710067 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Oct 05 14:55:52 2011 us=731275 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Oct 05 14:55:52 2011 us=731293 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Oct 05 14:55:52 2011 us=731320 Local Options hash (VER=V4): '41690919'
Wed Oct 05 14:55:52 2011 us=731338 Expected Remote Options hash (VER=V4): '530fdded'
Wed Oct 05 14:55:52 2011 us=731370 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Oct 05 14:55:52 2011 us=731385 UDPv4 link local: [undef]
Wed Oct 05 14:55:52 2011 us=731395 UDPv4 link remote: X.X.X.X:1194
Wed Oct 05 14:55:52 2011 us=970851 TLS: Initial packet from X.X.X.X:1194, sid=2c7fc94c 77b02e90
Wed Oct 05 14:56:52 2011 us=797964 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Oct 05 14:56:52 2011 us=798005 TLS Error: TLS handshake failed
Wed Oct 05 14:56:52 2011 us=798240 TCP/UDP: Closing socket
Wed Oct 05 14:56:52 2011 us=798304 SIGUSR1[soft,tls-error] received, process restarting
Wed Oct 05 14:56:52 2011 us=798315 Restart pause, 2 second(s)

Mimiko

Did you check firewall on client? Seems client does not accept responce packets.

maikcat

for testing please disable firewall on server

also on server use

setenforce 0

this set Selinux in permissive mode

Michael.

fahimi

Hi dears

Did you check firewall on client? Seems client does not accept responce packets.

I didn't check it before. but i rechecked it with turning off my antivirus and windows firewall on my client side and re-test it. but same answer like previouse. nothing changed...

for testing please disable firewall on server

also on server use

setenforce 0

this set Selinux in permissive mode

Michael i did it.
root@s1 [~]# setenforce 0
setenforce: SELinux is disabled
root@s1 [~]# /etc/init.d/iptables stop
Flushing firewall rules: [ OK ]
Setting chains to policy ACCEPT: nat filter [ OK ]
Unloading iptables modules: [ OK ]
root@s1 [~]#
then i turned off my client side firewall and antivirus and re-checked , but same result like above. Nothing changed.
on server side log, we have some second delay on this line :
Fri Oct 7 21:31:03 2011 us=52746 2.176.244.226:61591 TLS: Initial packet from 2.176.244.226:61591, sid=60f1e216 dc412747
and then Errrors : TLS Error: TLS key negotiation fail ...
and then loop again. like before...

Mimiko

Did you disabled firewall on client???

What devices you have between client and internet, and server and internet?

fahimi

Did you disabled firewall on client???

Yes. I turned off my firewall and antivirus.

What devices you have between client and internet, and server and internet?

client & internet : just linksys wag160n without filtering rules, Nat Enabled.
server & internet : My server is in a datacenter which i don't now devices. but i checked port 1194 from ping.eu port checker. it shows the port is open. and really is open. because when i connect from client, we can see the server gets the client's request. if it didn't receive the client request, it didn't show "multi_create_instance called" and other lines... !

Mimiko

Try TCP protocol.
Use tcpdump on server and client to see incoming and outgoing packets.

fahimi

Hi
I configured openvpn on tcp port 990 (ftps).

CLIENT TCPDUMP LOG :
*******************************************************************
** **
** Tcpdump v4.0.0 (October 27, 2008) for Windows **
** Win 98/ME/NT4/2000/XP/2003/Vista/2008/Win7 **
** **
** built with MicroOLAP Packet Sniffer SDK v4.2 and **
** MicroOLAP WinPCap to Packet Sniffer SDK migration module. **
** **
** Copyright (c) 1997 - 2009 MicroOLAP Technologies LTD, **
** Khalturin A.P. & Naumov D.A. **
** http://www.microolap.com **
** **
** Trial license. **
** **
*******************************************************************

tcpdump.exe: listening on \Device\PssdkLoopback
15:20:13.327953 IP CLIENT_HOST_NAME.51786 > REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990: Flags
[S], seq 1, win 32768, length 0
15:20:13.327958 IP REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990 > CLIENT_HOST_NAME.51786: Flags
[S.], seq 1, ack 2, win 32768, length 0
15:20:13.327961 IP CLIENT_HOST_NAME.51786 > REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990: Flags
[.], ack 1, win 32768, length 0
15:20:13.659090 IP CLIENT_HOST_NAME.51786 > REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990: Flags
[.], ack 1, win 32768, length 16
15:20:13.664006 IP REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990 > CLIENT_HOST_NAME.51786: Flags
[.], ack 17, win 32768, length 28
15:20:14.006992 IP CLIENT_HOST_NAME.51786 > REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990: Flags
[.], ack 29, win 32768, length 24
15:20:18.764207 IP CLIENT_HOST_NAME.55894 > recursive2.dci.ir.53: 56193+ A? pop.gmail.com.
(31)
15:20:18.803294 IP recursive2.dci.ir.53 > CLIENT_HOST_NAME.55894: 56193 3/4/4 CNAME[|domai
n]
15:20:18.912422 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
S], seq 1, win 32768, length 0
15:20:18.912429 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
S.], seq 1, ack 2, win 32768, length 0
15:20:18.912431 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 0
15:20:18.966760 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [S], seq 1, wi
n 32768, length 0
15:20:18.966766 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [S.], seq 1, a
ck 2, win 32768, length 0
15:20:18.966781 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 1, wi
n 32768, length 0
15:20:18.972232 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
S], seq 1, win 32768, length 0
15:20:18.972238 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
S.], seq 1, ack 2, win 32768, length 0
15:20:18.972273 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 0
15:20:19.005304 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
S], seq 1, win 32768, length 0
15:20:19.005310 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
S.], seq 1, ack 2, win 32768, length 0
15:20:19.005313 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 0
15:20:19.150932 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
S], seq 1, win 32768, length 0
15:20:19.150937 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
S.], seq 1, ack 2, win 32768, length 0
15:20:19.150957 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 0
15:20:19.164352 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 1, wi
n 32768, length 362
15:20:19.172253 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [.], ack 363,
win 32768, length 133
15:20:19.227294 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 195
15:20:19.283391 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 196, win 32768, length 1460
15:20:19.283398 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 196, win 32768, length 8
15:20:19.306828 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 195
15:20:19.362686 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 196, win 32768, length 1460
15:20:19.362691 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 196, win 32768, length 8
15:20:19.366162 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 195
15:20:19.422784 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 196, win 32768, length 1460
15:20:19.422789 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 196, win 32768, length 8
15:20:19.429237 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [.], ack 363,
win 32768, length 92
15:20:19.429247 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 226,
win 32768, length 47
15:20:19.449224 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 206
15:20:19.580572 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 207, win 32768, length 1460
15:20:19.580578 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 207, win 32768, length 8
15:20:19.584666 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 196, win 32768, length 59
15:20:19.584678 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1528, win 32768, length 198
15:20:19.622981 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [.], ack 410,
win 32768, length 148
15:20:19.623053 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 374,
win 32768, length 31
15:20:19.671234 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 196, win 32768, length 59
15:20:19.671252 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1528, win 32768, length 198
15:20:19.724457 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 196, win 32768, length 59
15:20:19.724535 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1528, win 32768, length 198
15:20:19.806767 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [.], ack 441,
win 32768, length 40
15:20:19.806784 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 414,
win 32768, length 38
15:20:19.879900 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1469, win 32768, length 198
15:20:19.884776 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 405, win 32768, length 59
15:20:20.010729 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 414,
win 32768, length 51
15:20:20.020267 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [.], ack 530,
win 32768, length 39
15:20:20.067258 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 394, win 32768, length 53
15:20:20.149944 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 394, win 32768, length 53
15:20:20.186421 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 453,
win 32768, length 31
15:20:20.192717 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [.], ack 561,
win 32768, length 34
15:20:20.199154 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 394, win 32768, length 53
15:20:20.353504 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 394, win 32768, length 101
15:20:20.353556 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1682, win 32768, length 37
15:20:20.358254 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 405, win 32768, length 53
15:20:20.376804 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [.], ack 561,
win 32768, length 40
15:20:20.376815 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 527,
win 32768, length 31
15:20:20.437734 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 394, win 32768, length 101
15:20:20.437751 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1682, win 32768, length 37
15:20:20.492829 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 394, win 32768, length 101
15:20:20.492841 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1682, win 32768, length 37
15:20:20.557413 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [F.], seq 592,
ack 527, win 32768, length 0
15:20:20.557418 IP ww-in-f108.1e100.net.995 > CLIENT_HOST_NAME.51790: Flags [F.], seq 527,
ack 593, win 32768, length 0
15:20:20.557429 IP CLIENT_HOST_NAME.51790 > ww-in-f108.1e100.net.995: Flags [.], ack 528,
win 32768, length 0
15:20:20.636755 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 431, win 32768, length 37
15:20:20.636781 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1719, win 32768, length 53
15:20:20.648243 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 405, win 32768, length 101
15:20:20.648267 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1682, win 32768, length 37
15:20:20.719301 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 431, win 32768, length 37
15:20:20.719316 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1719, win 32768, length 53
15:20:20.775715 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 431, win 32768, length 37
15:20:20.775751 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1719, win 32768, length 53
15:20:20.928265 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 484, win 32768, length 53
15:20:20.928318 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1772, win 32768, length 85
15:20:20.934869 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 442, win 32768, length 37
15:20:20.934963 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1719, win 32768, length 53
15:20:21.005864 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 484, win 32768, length 53
15:20:21.005935 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1772, win 32768, length 85
15:20:21.062294 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 484, win 32768, length 53
15:20:21.062307 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1772, win 32768, length 85
15:20:21.212727 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 569, win 32768, length 37
15:20:21.212742 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1809, win 32768, length 37
15:20:21.229695 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 495, win 32768, length 53
15:20:21.229705 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1772, win 32768, length 101
15:20:21.289403 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 569, win 32768, length 37
15:20:21.289426 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1809, win 32768, length 37
15:20:21.345366 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 569, win 32768, length 37
15:20:21.345403 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1809, win 32768, length 37
15:20:21.502791 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
.], ack 606, win 32768, length 90
15:20:21.502851 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1899, win 32768, length 37
15:20:21.514385 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 596, win 32768, length 37
15:20:21.514398 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1809, win 32768, length 37
15:20:21.579357 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
.], ack 606, win 32768, length 90
15:20:21.579393 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1899, win 32768, length 37
15:20:21.635228 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
.], ack 606, win 32768, length 90
15:20:21.635248 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1899, win 32768, length 37
15:20:21.787971 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
F.], seq 643, ack 1899, win 32768, length 0
15:20:21.787977 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51787: Flags [
F.], seq 1899, ack 644, win 32768, length 0
15:20:21.788025 IP CLIENT_HOST_NAME.51787 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1900, win 32768, length 0
15:20:21.804287 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
.], ack 633, win 32768, length 90
15:20:21.804312 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1899, win 32768, length 37
15:20:21.865870 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
F.], seq 643, ack 1899, win 32768, length 0
15:20:21.865875 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51788: Flags [
F.], seq 1899, ack 644, win 32768, length 0
15:20:21.865878 IP CLIENT_HOST_NAME.51788 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1900, win 32768, length 0
15:20:21.920544 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
F.], seq 643, ack 1899, win 32768, length 0
15:20:21.920550 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51789: Flags [
F.], seq 1899, ack 644, win 32768, length 0
15:20:21.920553 IP CLIENT_HOST_NAME.51789 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1900, win 32768, length 0
15:20:22.089608 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
F.], seq 670, ack 1899, win 32768, length 0
15:20:22.089613 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51791: Flags [
F.], seq 1899, ack 671, win 32768, length 0
15:20:22.089665 IP CLIENT_HOST_NAME.51791 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1900, win 32768, length 0
15:20:41.793864 IP CLIENT_HOST_NAME.51786 > REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990: Flags
[F.], seq 41, ack 29, win 32768, length 0
15:20:41.793869 IP REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990 > CLIENT_HOST_NAME.51786: Flags
[F.], seq 29, ack 42, win 32768, length 0
15:20:41.793871 IP CLIENT_HOST_NAME.51786 > REVERSE_SERVER_IP_ADDRESS.static.giga-dns.com.990: Flags
[.], ack 30, win 32768, length 0
15:20:49.082992 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
S], seq 1, win 32768, length 0
15:20:49.082997 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
S.], seq 1, ack 2, win 32768, length 0
15:20:49.083050 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 0
15:20:49.379411 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1, win 32768, length 206
15:20:49.436133 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 207, win 32768, length 1460
15:20:49.436137 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 207, win 32768, length 8
15:20:49.737729 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 207, win 32768, length 59
15:20:49.737856 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1528, win 32768, length 198
15:20:50.212835 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 405, win 32768, length 53
15:20:50.499282 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 405, win 32768, length 101
15:20:50.499340 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1682, win 32768, length 37
15:20:50.782917 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 442, win 32768, length 37
15:20:50.782965 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1719, win 32768, length 53
15:20:51.077228 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 495, win 32768, length 53
15:20:51.077297 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1772, win 32768, length 101
15:20:51.359127 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 596, win 32768, length 37
15:20:51.359184 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1809, win 32768, length 37
15:20:51.648599 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
.], ack 633, win 32768, length 90
15:20:51.648656 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1899, win 32768, length 37
15:20:51.933969 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
F.], seq 670, ack 1899, win 32768, length 0
15:20:51.933973 IP 142.90.194.91.static.giga-dns.com.995 > CLIENT_HOST_NAME.51794: Flags [
F.], seq 1899, ack 671, win 32768, length 0
15:20:51.934026 IP CLIENT_HOST_NAME.51794 > 142.90.194.91.static.giga-dns.com.995: Flags [
.], ack 1900, win 32768, length 0

CLIENT TCPDUMP LOG :

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
11:50:13.665628 IP 2.176.217.165.51786 > SERVER_HOST_NAME.ftps: S 1353198608:1353198608(0) win 8192 <mss 1452,nop,nop,sackOK>
11:50:13.665675 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51786: S 413577732:413577732(0) ack 1353198609 win 5840 <mss 1460,nop,nop,sackOK>
11:50:13.775631 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51780: F 358840221:358840221(0) ack 3760155303 win 46
11:50:13.967205 IP 2.176.217.165.51786 > SERVER_HOST_NAME.ftps: . ack 1 win 65340
11:50:13.973534 IP 2.176.217.165.51786 > SERVER_HOST_NAME.ftps: P 1:17(16) ack 1 win 65340
11:50:13.973552 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51786: . ack 17 win 5840
11:50:13.973653 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51786: P 1:29(28) ack 17 win 5840
11:50:14.305006 IP 2.176.217.165.51786 > SERVER_HOST_NAME.ftps: P 17:41(24) ack 29 win 65312
11:50:14.344649 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51786: . ack 41 win 5840
11:50:16.845735 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51769: F 275774997:275774997(0) ack 2221383294 win 5840
11:50:19.533733 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51764: F 223664745:223664745(0) ack 669154143 win 46
11:50:29.471882 IP SERVER_HOST_NAME.ftps > 2.176.217.165.51780: F 0:0(0) ack 1 win 46

Mimiko

You are going inconsistently, so I suppose you are delibery missing something.

server & internet : My server is in a datacenter which i don't now devices. but i checked port 1194 from ping.eu port checker. it shows the port is open. and really is open.

Why you check 1194, if you use other port?
You have a VPS on which tehnology? What kind of VPS?

From log I see initial connection to 990, but then it fall to 995. Or something is redirecting you, or you are not telling every configuration.

What system you are using on client? See if no program is blocking vpn or tls negotiation.

fahimi

i swear to god i'm honest. no firewall in client side is active. i checked from ping.eu twice. first I set openvpn with udp port 1194 and checked it from there, and the port was open. then because i have apache with ssl support on my server, i couldn't set 443 port and that was in use. so i checked and found my server port 990 is closed and i can use it. so i used tcp port 990 in server and client. then run tcpdump on server and client, and above result is for it.
if you tell me what should i send to you, i'll do it. my client is windows 7 with disabled windows firewall and disabled antivirus, and my gateway is linksys wag160n and after it is not in my hand and is adsl connection!

Mimiko

Would you update the client OpenVPN to the latest version?

fahimi

openVPN client is openvpn GUI v1.0.3 . i downloaded one week ago and is latest version.

Mimiko

Update OpenVPN binaries, not OpenVPN GUI. Thise are different software.

fahimi

Hi
I downloaded and installed another vpn client named "OpenVPN Client Windows" from http://sourceforge.net/projects/securepoint/
same result like before.nothing changed in logs. tested on :
udp 1194
tcp 990
tcp 443 (after stopping httpd)
tcp 80 (after stopping httpd)
but no new thing. every thing like last logs ...

Mimiko

Use another windows system to test connection. If that does not help - reinstal centos.