OPENVPN connection error after WINDOWS UPDATE 1903

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
opendev
OpenVpn Newbie
Posts: 2
Joined: Tue Dec 10, 2019 12:12 pm

OPENVPN connection error after WINDOWS UPDATE 1903

Post by opendev » Tue Dec 10, 2019 12:28 pm

Hi,

I installed OPEN VPN a year ago on 4 machines with OS 10 1803.

I have my config file customized.

All machines can access to the server via openvpn.

One, I block the Window update still in 1803. Still working.

The other machine, Windows updated to 1903.

The access to the server via OPEN VPN is not working anymore.



*_____SERVER____*
Open VPN package intalled on SYNOLOGY NAS
server

dev tun
tls-client

remote YOUR_SERVER_IP 1194

pull

proto udp

script-security 2

comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass



*_____CLIENT_____*
client

dev tun
tls-client
remote pseudo.synology.me 1194

redirect-gateway def1

#dhcp-option DNS DNS_IP_ADDRESS
#push "dhcp-option DNS 10.8.8.1"
push "dhcp-option DNS 192.168.1.x"
pull
proto udp
script-security 2
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass
"-----------key----------"



--log-client:

Code: Select all

Tue Dec 03 19:50:49 2019 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 03 19:50:49 2019 TLS Error: TLS handshake failed
Tue Dec 03 19:50:49 2019 SIGUSR1[soft,tls-error] received, process restarting
Tue Dec 03 19:50:59 2019 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Dec 03 19:50:59 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Tue Dec 03 19:50:59 2019 UDP link local (bound): [AF_INET][undef]:1194
Tue Dec 03 19:50:59 2019 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
I check on windows site, lots of person have problem with VPN since this update but don't find message for openvpn. I change some HKEY retarts windows services, check last Microsoft updates. Nothing is working.

Anybody encouter problems with last windows update and have some ideas to solve my problems?
Last edited by opendev on Tue Dec 10, 2019 4:43 pm, edited 8 times in total.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: OPENVPN connection error after WINDOWS UPDATE 1903

Post by TinCanTech » Tue Dec 10, 2019 1:27 pm


opendev
OpenVpn Newbie
Posts: 2
Joined: Tue Dec 10, 2019 12:12 pm

Re: OPENVPN connection error after WINDOWS UPDATE 1903

Post by opendev » Fri Dec 13, 2019 10:51 am

Message updated with all informations I have.

Hi,

I installed OPEN VPN a year ago on 4 machines with OS 10 1803.

I have my config file customized.

All machines can access to the server via openvpn.

One, I blocked the Window update still in 1803. Still working.

The other machines, Windows updated to 1903.

The access to the server via OPEN VPN is not working anymore on the machines with the OS10 1903 with all new updated package (window 10 pro).


*_____SERVER____*
Open VPN package intalled on SYNOLOGY NAS

server

dev tun
tls-client
remote YOUR_SERVER_IP 1194
pull
proto udp
script-security 2
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass




*_____CLIENT_____*
client

dev tun
tls-client
remote pseudo.synology.me 1194
redirect-gateway def1
push "dhcp-option DNS 192.168.1.x"
pull
proto udp
script-security 2
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass
"-----------key----------"



--log-client: verb 4

Code: Select all

Fri Dec 13 09:19:11 2019 us=987299 Current Parameter Settings:
Fri Dec 13 09:19:11 2019 us=988296   config = 'VPNConfig.ovpn'
Fri Dec 13 09:19:11 2019 us=988296   mode = 0
Fri Dec 13 09:19:11 2019 us=988296   show_ciphers = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   show_digests = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   show_engines = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   genkey = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   key_pass_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   show_tls_ciphers = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   connect_retry_max = 0
Fri Dec 13 09:19:11 2019 us=988296 Connection profiles [0]:
Fri Dec 13 09:19:11 2019 us=988296   proto = udp
Fri Dec 13 09:19:11 2019 us=988296   local = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   local_port = '1194'
Fri Dec 13 09:19:11 2019 us=988296   remote = 'XXXX.synology.me'
Fri Dec 13 09:19:11 2019 us=988296   remote_port = '1194'
Fri Dec 13 09:19:11 2019 us=988296   remote_float = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   bind_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   bind_local = ENABLED
Fri Dec 13 09:19:11 2019 us=988296   bind_ipv6_only = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   connect_retry_seconds = 5
Fri Dec 13 09:19:11 2019 us=988296   connect_timeout = 120
Fri Dec 13 09:19:11 2019 us=988296   socks_proxy_server = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   socks_proxy_port = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   tun_mtu = 1500
Fri Dec 13 09:19:11 2019 us=988296   tun_mtu_defined = ENABLED
Fri Dec 13 09:19:11 2019 us=988296   link_mtu = 1500
Fri Dec 13 09:19:11 2019 us=988296   link_mtu_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   tun_mtu_extra = 0
Fri Dec 13 09:19:11 2019 us=988296   tun_mtu_extra_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   mtu_discover_type = -1
Fri Dec 13 09:19:11 2019 us=988296   fragment = 0
Fri Dec 13 09:19:11 2019 us=988296   mssfix = 1450
Fri Dec 13 09:19:11 2019 us=988296   explicit_exit_notification = 0
Fri Dec 13 09:19:11 2019 us=988296 Connection profiles END
Fri Dec 13 09:19:11 2019 us=988296   remote_random = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   ipchange = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   dev = 'tun'
Fri Dec 13 09:19:11 2019 us=988296   dev_type = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   dev_node = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   lladdr = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   topology = 1
Fri Dec 13 09:19:11 2019 us=988296   ifconfig_local = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   ifconfig_remote_netmask = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   ifconfig_noexec = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   ifconfig_nowarn = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   ifconfig_ipv6_local = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   ifconfig_ipv6_netbits = 0
Fri Dec 13 09:19:11 2019 us=988296   ifconfig_ipv6_remote = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   shaper = 0
Fri Dec 13 09:19:11 2019 us=988296   mtu_test = 0
Fri Dec 13 09:19:11 2019 us=988296   mlock = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   keepalive_ping = 0
Fri Dec 13 09:19:11 2019 us=988296   keepalive_timeout = 0
Fri Dec 13 09:19:11 2019 us=988296   inactivity_timeout = 0
Fri Dec 13 09:19:11 2019 us=988296   ping_send_timeout = 0
Fri Dec 13 09:19:11 2019 us=988296   ping_rec_timeout = 0
Fri Dec 13 09:19:11 2019 us=988296   ping_rec_timeout_action = 0
Fri Dec 13 09:19:11 2019 us=988296   ping_timer_remote = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   remap_sigusr1 = 0
Fri Dec 13 09:19:11 2019 us=988296   persist_tun = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   persist_local_ip = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   persist_remote_ip = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   persist_key = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   passtos = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   resolve_retry_seconds = 1000000000
Fri Dec 13 09:19:11 2019 us=988296   resolve_in_advance = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   username = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   groupname = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   chroot_dir = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   cd_dir = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   writepid = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   up_script = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   down_script = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=988296   down_pre = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   up_restart = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   up_delay = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   daemon = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   inetd = 0
Fri Dec 13 09:19:11 2019 us=988296   log = ENABLED
Fri Dec 13 09:19:11 2019 us=988296   suppress_timestamps = DISABLED
Fri Dec 13 09:19:11 2019 us=988296   machine_readable_output = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   nice = 0
Fri Dec 13 09:19:11 2019 us=989295   verbosity = 4
Fri Dec 13 09:19:11 2019 us=989295   mute = 0
Fri Dec 13 09:19:11 2019 us=989295   gremlin = 0
Fri Dec 13 09:19:11 2019 us=989295   status_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   status_file_version = 1
Fri Dec 13 09:19:11 2019 us=989295   status_file_update_freq = 60
Fri Dec 13 09:19:11 2019 us=989295   occ = ENABLED
Fri Dec 13 09:19:11 2019 us=989295   rcvbuf = 0
Fri Dec 13 09:19:11 2019 us=989295   sndbuf = 0
Fri Dec 13 09:19:11 2019 us=989295   sockflags = 0
Fri Dec 13 09:19:11 2019 us=989295   fast_io = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   comp.alg = 2
Fri Dec 13 09:19:11 2019 us=989295   comp.flags = 1
Fri Dec 13 09:19:11 2019 us=989295   route_script = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   route_default_gateway = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   route_default_metric = 0
Fri Dec 13 09:19:11 2019 us=989295   route_noexec = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   route_delay = 5
Fri Dec 13 09:19:11 2019 us=989295   route_delay_window = 30
Fri Dec 13 09:19:11 2019 us=989295   route_delay_defined = ENABLED
Fri Dec 13 09:19:11 2019 us=989295   route_nopull = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   route_gateway_via_dhcp = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   allow_pull_fqdn = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   Pull filters:
Fri Dec 13 09:19:11 2019 us=989295     ignore "route-method"
Fri Dec 13 09:19:11 2019 us=989295   [redirect_default_gateway local=0]
Fri Dec 13 09:19:11 2019 us=989295   management_addr = '127.0.0.1'
Fri Dec 13 09:19:11 2019 us=989295   management_port = '25340'
Fri Dec 13 09:19:11 2019 us=989295   management_user_pass = 'stdin'
Fri Dec 13 09:19:11 2019 us=989295   management_log_history_cache = 250
Fri Dec 13 09:19:11 2019 us=989295   management_echo_buffer_size = 100
Fri Dec 13 09:19:11 2019 us=989295   management_write_peer_info_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   management_client_user = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   management_client_group = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   management_flags = 6
Fri Dec 13 09:19:11 2019 us=989295   shared_secret_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   key_direction = not set
Fri Dec 13 09:19:11 2019 us=989295   ciphername = 'AES-256-CBC'
Fri Dec 13 09:19:11 2019 us=989295   ncp_enabled = ENABLED
Fri Dec 13 09:19:11 2019 us=989295   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri Dec 13 09:19:11 2019 us=989295   authname = 'SHA512'
Fri Dec 13 09:19:11 2019 us=989295   prng_hash = 'SHA1'
Fri Dec 13 09:19:11 2019 us=989295   prng_nonce_secret_len = 16
Fri Dec 13 09:19:11 2019 us=989295   keysize = 0
Fri Dec 13 09:19:11 2019 us=989295   engine = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   replay = ENABLED
Fri Dec 13 09:19:11 2019 us=989295   mute_replay_warnings = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   replay_window = 64
Fri Dec 13 09:19:11 2019 us=989295   replay_time = 15
Fri Dec 13 09:19:11 2019 us=989295   packet_id_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   use_iv = ENABLED
Fri Dec 13 09:19:11 2019 us=989295   test_crypto = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   tls_server = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   tls_client = ENABLED
Fri Dec 13 09:19:11 2019 us=989295   key_method = 2
Fri Dec 13 09:19:11 2019 us=989295   ca_file = '[[INLINE]]'
Fri Dec 13 09:19:11 2019 us=989295   ca_path = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   dh_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   cert_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   extra_certs_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   priv_key_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   pkcs12_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   cryptoapi_cert = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   cipher_list = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   cipher_list_tls13 = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   tls_cert_profile = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   tls_verify = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   tls_export_cert = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   verify_x509_type = 0
Fri Dec 13 09:19:11 2019 us=989295   verify_x509_name = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   crl_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   ns_cert_type = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_ku[i] = 0
Fri Dec 13 09:19:11 2019 us=989295   remote_cert_eku = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   ssl_flags = 0
Fri Dec 13 09:19:11 2019 us=989295   tls_timeout = 2
Fri Dec 13 09:19:11 2019 us=989295   renegotiate_bytes = -1
Fri Dec 13 09:19:11 2019 us=989295   renegotiate_packets = 0
Fri Dec 13 09:19:11 2019 us=989295   renegotiate_seconds = 0
Fri Dec 13 09:19:11 2019 us=989295   handshake_window = 60
Fri Dec 13 09:19:11 2019 us=989295   transition_window = 3600
Fri Dec 13 09:19:11 2019 us=989295   single_session = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   push_peer_info = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   tls_exit = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   tls_auth_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   tls_crypt_file = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_protected_authentication = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_private_mode = 00000000
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_cert_private = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_pin_cache_period = -1
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_id = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   pkcs11_id_management = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   server_network = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   server_netmask = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   server_network_ipv6 = ::
Fri Dec 13 09:19:11 2019 us=989295   server_netbits_ipv6 = 0
Fri Dec 13 09:19:11 2019 us=989295   server_bridge_ip = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   server_bridge_netmask = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   server_bridge_pool_start = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   server_bridge_pool_end = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   push_entry = 'dhcp-option DNS 192.168.1.254'
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_pool_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_pool_start = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_pool_end = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_pool_netmask = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_pool_persist_refresh_freq = 600
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_ipv6_pool_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_ipv6_pool_base = ::
Fri Dec 13 09:19:11 2019 us=989295   ifconfig_ipv6_pool_netbits = 0
Fri Dec 13 09:19:11 2019 us=990266   n_bcast_buf = 256
Fri Dec 13 09:19:11 2019 us=990266   tcp_queue_limit = 64
Fri Dec 13 09:19:11 2019 us=990266   real_hash_size = 256
Fri Dec 13 09:19:11 2019 us=990266   virtual_hash_size = 256
Fri Dec 13 09:19:11 2019 us=990266   client_connect_script = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=990266   learn_address_script = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=990266   client_disconnect_script = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=990266   client_config_dir = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=990266   ccd_exclusive = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   tmp_dir = 'C:\Users\USERNAME\AppData\Local\Temp\'
Fri Dec 13 09:19:11 2019 us=990266   push_ifconfig_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   push_ifconfig_local = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=990266   push_ifconfig_remote_netmask = 0.0.0.0
Fri Dec 13 09:19:11 2019 us=990266   push_ifconfig_ipv6_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   push_ifconfig_ipv6_local = ::/0
Fri Dec 13 09:19:11 2019 us=990266   push_ifconfig_ipv6_remote = ::
Fri Dec 13 09:19:11 2019 us=990266   enable_c2c = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   duplicate_cn = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   cf_max = 0
Fri Dec 13 09:19:11 2019 us=990266   cf_per = 0
Fri Dec 13 09:19:11 2019 us=990266   max_clients = 1024
Fri Dec 13 09:19:11 2019 us=990266   max_routes_per_client = 256
Fri Dec 13 09:19:11 2019 us=990266   auth_user_pass_verify_script = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=990266   auth_user_pass_verify_script_via_file = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   auth_token_generate = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   auth_token_lifetime = 0
Fri Dec 13 09:19:11 2019 us=990266   client = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   pull = ENABLED
Fri Dec 13 09:19:11 2019 us=990266   auth_user_pass_file = 'stdin'
Fri Dec 13 09:19:11 2019 us=990266   show_net_up = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   route_method = 3
Fri Dec 13 09:19:11 2019 us=990266   block_outside_dns = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   ip_win32_defined = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   ip_win32_type = 3
Fri Dec 13 09:19:11 2019 us=990266   dhcp_masq_offset = 0
Fri Dec 13 09:19:11 2019 us=990266   dhcp_lease_time = 31536000
Fri Dec 13 09:19:11 2019 us=990266   tap_sleep = 0
Fri Dec 13 09:19:11 2019 us=990266   dhcp_options = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   dhcp_renew = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   dhcp_pre_release = DISABLED
Fri Dec 13 09:19:11 2019 us=990266   domain = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=990266   netbios_scope = '[UNDEF]'
Fri Dec 13 09:19:11 2019 us=990266   netbios_node_type = 0
Fri Dec 13 09:19:11 2019 us=990266   disable_nbt = DISABLED
Fri Dec 13 09:19:11 2019 us=990266 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Fri Dec 13 09:19:11 2019 us=990266 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Dec 13 09:19:11 2019 us=990266 library versions: OpenSSL 1.1.0l  10 Sep 2019, LZO 2.10
Enter Management Password:
Fri Dec 13 09:19:11 2019 us=990266 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Dec 13 09:19:11 2019 us=990266 Need hold release from management interface, waiting...
Fri Dec 13 09:19:12 2019 us=464613 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Dec 13 09:19:12 2019 us=566243 MANAGEMENT: CMD 'state on'
Fri Dec 13 09:19:12 2019 us=566860 MANAGEMENT: CMD 'log all on'
Fri Dec 13 09:19:12 2019 us=724444 MANAGEMENT: CMD 'echo all on'
Fri Dec 13 09:19:12 2019 us=725441 MANAGEMENT: CMD 'bytecount 5'
Fri Dec 13 09:19:12 2019 us=726438 MANAGEMENT: CMD 'hold off'
Fri Dec 13 09:19:12 2019 us=728457 MANAGEMENT: CMD 'hold release'
Fri Dec 13 09:19:33 2019 us=536846 MANAGEMENT: CMD 'username "Auth" "USERNAME"'
Fri Dec 13 09:19:33 2019 us=556864 MANAGEMENT: CMD 'password [...]'
Fri Dec 13 09:19:33 2019 us=556864 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 13 09:19:33 2019 us=559856 LZO compression initializing
Fri Dec 13 09:19:33 2019 us=559856 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Fri Dec 13 09:19:33 2019 us=559856 MANAGEMENT: >STATE:1576225173,RESOLVE,,,,,,
Fri Dec 13 09:19:33 2019 us=617611 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Fri Dec 13 09:19:33 2019 us=618582 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Fri Dec 13 09:19:33 2019 us=618582 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Fri Dec 13 09:19:33 2019 us=618582 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 13 09:19:33 2019 us=618582 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Dec 13 09:19:33 2019 us=618582 UDP link local (bound): [AF_INET][undef]:1194
Fri Dec 13 09:19:33 2019 us=618582 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 13 09:19:33 2019 us=618582 MANAGEMENT: >STATE:1576225173,WAIT,,,,,,
Fri Dec 13 09:20:33 2019 us=246877 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Dec 13 09:20:33 2019 us=246877 TLS Error: TLS handshake failed
Fri Dec 13 09:20:33 2019 us=246877 TCP/UDP: Closing socket
Fri Dec 13 09:20:33 2019 us=247882 SIGUSR1[soft,tls-error] received, process restarting
Fri Dec 13 09:20:33 2019 us=247882 MANAGEMENT: >STATE:1576225233,RECONNECTING,tls-error,,,,,
Fri Dec 13 09:20:33 2019 us=247882 Restart pause, 5 second(s)
Fri Dec 13 09:20:38 2019 us=248260 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 13 09:20:38 2019 us=248260 LZO compression initializing
Fri Dec 13 09:20:38 2019 us=249241 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Fri Dec 13 09:20:38 2019 us=249241 MANAGEMENT: >STATE:1576225238,RESOLVE,,,,,,
Fri Dec 13 09:20:38 2019 us=250241 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Fri Dec 13 09:20:38 2019 us=250241 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Fri Dec 13 09:20:38 2019 us=250241 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Fri Dec 13 09:20:38 2019 us=250241 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 13 09:20:38 2019 us=250241 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Dec 13 09:20:38 2019 us=251232 UDP link local (bound): [AF_INET][undef]:1194
Fri Dec 13 09:20:38 2019 us=251232 UDP link remote: [AF_INET]xx.xx.xx.xx:1194
Fri Dec 13 09:20:38 2019 us=251232 MANAGEMENT: >STATE:1576225238,WAIT,,,,,,
Fri Dec 13 09:21:38 2019 us=71421 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Dec 13 09:21:38 2019 us=71421 TLS Error: TLS handshake failed
Fri Dec 13 09:21:38 2019 us=71421 TCP/UDP: Closing socket
Fri Dec 13 09:21:38 2019 us=71421 SIGUSR1[soft,tls-error] received, process restarting
Fri Dec 13 09:21:38 2019 us=71421 MANAGEMENT: >STATE:1576225298,RECONNECTING,tls-error,,,,,
Fri Dec 13 09:21:38 2019 us=72425 Restart pause, 5 second(s)
Fri Dec 13 09:21:43 2019 us=73249 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 13 09:21:43 2019 us=73249 LZO compression initializing
Fri Dec 13 09:21:43 2019 us=74254 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Fri Dec 13 09:21:43 2019 us=74254 MANAGEMENT: >STATE:1576225303,RESOLVE,,,,,,
Fri Dec 13 09:21:43 2019 us=75277 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Fri Dec 13 09:21:43 2019 us=75277 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Fri Dec 13 09:21:43 2019 us=75277 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Fri Dec 13 09:21:43 2019 us=75277 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.xxx.xxx.xx:1194
Fri Dec 13 09:21:43 2019 us=75277 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Dec 13 09:21:43 2019 us=75277 UDP link local (bound): [AF_INET][undef]:1194
Fri Dec 13 09:21:43 2019 us=75277 UDP link remote: [AF_INET]xx.xxx.xxx.xx:1194
Fri Dec 13 09:21:43 2019 us=76248 MANAGEMENT: >STATE:1576225303,WAIT,,,,,,
Fri Dec 13 09:21:55 2019 us=993490 TCP/UDP: Closing socket
Fri Dec 13 09:21:55 2019 us=993490 SIGTERM[hard,] received, process exiting
Fri Dec 13 09:21:55 2019 us=993490 MANAGEMENT: >STATE:1576225315,EXITING,SIGTERM,,,,,
I don't know how to retrieve logs from OPENVPN on the NAS?

But the problem is more on the client side because I manage to connect via OPEN VPN with OS 10 1803.

Thank you to help me please.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: OPENVPN connection error after WINDOWS UPDATE 1903

Post by TinCanTech » Fri Dec 13, 2019 11:11 am

You must find your server log at verb 4

Post Reply