When I tried to connect my client to server, I got this error
Mon Jan 02 16:59:43 2012 OpenVPN 2.2.1 Win32-MSVC++ [SSL] [LZO2] built on Jul 1 2011
Mon Jan 02 16:59:43 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 02 16:59:43 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan 02 16:59:43 2012 LZO compression initialized
Mon Jan 02 16:59:43 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jan 02 16:59:43 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Jan 02 16:59:43 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jan 02 16:59:43 2012 Local Options hash (VER=V4): '41690919'
Mon Jan 02 16:59:43 2012 Expected Remote Options hash (VER=V4): '530fdded'
Mon Jan 02 16:59:43 2012 UDPv4 link local: [undef]
Mon Jan 02 16:59:43 2012 UDPv4 link remote: xx.xxx.xx.xx:1194
Mon Jan 02 17:00:43 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jan 02 17:00:43 2012 TLS Error: TLS handshake failed
Mon Jan 02 17:00:43 2012 TCP/UDP: Closing socket
Mon Jan 02 17:00:43 2012 SIGUSR1[soft,tls-error] received, process restarting
Mon Jan 02 17:00:43 2012 Restart pause, 2 second(s)
Mon Jan 02 17:00:45 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jan 02 17:00:45 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan 02 17:00:45 2012 Re-using SSL/TLS context
My configuration
server
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.9.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status server.log
verb 3
client
client
dev tun
proto udp
remote xx.xx.xx.xx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1-1.crt
key client1-1.key
comp-lzo
verb 3
Log when start OpenVPN service
Mon Jan 2 04:56:53 2012 OpenVPN 2.2.1 i686-redhat-linux-gnu [SSL] [LZO1] [EPOLL] [PKCS11] [eurephia] built on Jan 2 2012
Mon Jan 2 04:56:53 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jan 2 04:56:53 2012 Diffie-Hellman initialized with 1024 bit key
Mon Jan 2 04:56:53 2012 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jan 2 04:56:53 2012 Socket Buffers: R=[110592->131072] S=[110592->131072]
Mon Jan 2 04:56:53 2012 ROUTE default_gateway=xx.xx.xx.xx
Mon Jan 2 04:56:53 2012 TUN/TAP device tun0 opened
Mon Jan 2 04:56:53 2012 TUN/TAP TX queue length set to 100
Mon Jan 2 04:56:53 2012 /sbin/ifconfig tun0 10.9.0.1 pointopoint 10.9.0.2 mtu 1500
Mon Jan 2 04:56:53 2012 /sbin/route add -net 10.9.0.0 netmask 255.255.255.0 gw 10.9.0.2
Mon Jan 2 04:56:53 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jan 2 04:56:53 2012 UDPv4 link local (bound): [undef]:1194
Mon Jan 2 04:56:53 2012 UDPv4 link remote: [undef]
Mon Jan 2 04:56:53 2012 MULTI: multi_init called, r=256 v=256
Mon Jan 2 04:56:53 2012 IFCONFIG POOL: base=10.9.0.4 size=62
Mon Jan 2 04:56:53 2012 IFCONFIG POOL LIST
Mon Jan 2 04:56:53 2012 Initialization Sequence Completed
Firewall is disabled.
