I downloaded the Windows client from the appliance but am getting the same error.
I have confirmed the custom TCP port I am using is accessible remotely (I can access the web interface on the same port).
This is my client's log:
Code: Select all
2012-03-11 10:23:08+1100 [-] Log opened.
2012-03-11 10:23:08+1100 [-] Network up
2012-03-11 10:23:08+1100 [-] C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\library.zip\pyovpn\linux\distroname.py:1: exceptions.DeprecationWarning: The popen2 module is deprecated. Use the subprocess module.
2012-03-11 10:23:09+1100 [-] ProfileSignatureVerify.verify: <depth=1 err=X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN: self signed certificate in certificate chain subj=<X509Name object '/CN=OpenVPN Web CA 2012.03.06 01:13:13 EST srv1.home'>>: client/profsig:14,pki/sign:228 (pyovpn.pki.sign.CertVerifyFailed)
2012-03-11 10:23:09+1100 [-] ClientSettings: extract_trust_group tg=None src='bundled' sign=None pref=False
2012-03-11 10:23:09+1100 [-] ClientSettings: preference 'allow_web_import' set from source 'bundled'
2012-03-11 10:23:09+1100 [-] ClientSettings: preference 'enable_xd_proxy' set from source 'bundled'
2012-03-11 10:23:09+1100 [-] ClientSettings: preference 'enable_connect' set from source 'bundled'
2012-03-11 10:23:09+1100 [-] Schedule swupdate monitor in 120 seconds, range=(120,None), error=False, initial=True
2012-03-11 10:23:10+1100 [-] Successfully imported dynamic localhost root CA into Windows cert store (win32)
2012-03-11 10:23:10+1100 [-] FF CA import (passive): Administrator C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles/kfw8sxek.default
2012-03-11 10:23:10+1100 [-] Successfully imported dynamic localhost root CA into Firefox cert store (win32)
2012-03-11 10:23:10+1100 [-] Updating C:\WINDOWS\system32\drivers\etc\hosts with [('client.openvpn.net', '127.94.0.1')]
2012-03-11 10:23:10+1100 [-] Starting AS Client API 1.8.3/MSI
2012-03-11 10:23:10+1100 [-] twisted.web.server.Site starting on 946
2012-03-11 10:23:10+1100 [-] twisted.web.seraver.Site starting on 944
2012-03-11 10:23:10+1100 [-] ProfileManager: importing bundled profile u'C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/ovpn.~installer/client.ovpn' {u'owner': u'Administrator', u'global': True}
2012-03-11 10:23:10+1100 [-] ProfileSignatureVerify.verify: <depth=1 err=X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN: self signed certificate in certificate chain subj=<X509Name object '/CN=OpenVPN Web CA 2012.03.06 01:13:13 EST srv1.home'>>: client/profsig:14,pki/sign:228 (pyovpn.pki.sign.CertVerifyFailed)
2012-03-11 10:23:10+1100 [-] ImportProfile: profile sanitized
2012-03-11 10:23:12+1100 [-] create_desktop_process: starting C:\Program Files\OpenVPN Technologies\OpenVPN Client\core\ovpntray.exe
2012-03-11 10:23:12+1100 [HTTPChannel,0,127.0.0.1] *** API CALL f=xmlrpc_GetPreferences args=[] kw={} ret={'proxy_auto': True, 'exec_admin_domain': '', 'update_base_url': 'http://swupdate.openvpn.net/updates', 'log_append': False, 'enable_xd_proxy': True, 'basic_client': True, 'auth_allow_cache_pw': True, 'restrict_domain': '*', 'proxy_auth_allow_basic': True, 'proto_force': '', 'allow_ssl_v2': False, 'connect_timeout': 60, 'implicit_elevation': False, 'exec_user_domain': '*', 'universal_sessions_are_global': False, 'verb': '', 'proxy_auth_allow_save_pw': True, 'user_may_trust_cert': True, 'silent_update': False, 'route_nopull': False, 'enable_connect': True, 'notify_update': True, 'user_hostspec': '*', 'allow_web_import': True}
2012-03-11 10:23:12+1100 [HTTPChannel,1,127.0.0.1] *** API CALL f=xmlrpc_TrackActiveProfiles args=[True] kw={} ret='sess_TrackActiveProfiles_3RTR8udbJd7ZfHvE_1'
2012-03-11 10:23:12+1100 [HTTPChannel,2,127.0.0.1] *** API CALL f=xmlrpc_UpdateStatus args=[] kw={} ret={}
2012-03-11 10:23:12+1100 [HTTPChannel,3,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_3RTR8udbJd7ZfHvE_1', 10] kw={} ret=[{'timestamp': 1331421792, 'state': 'add_profile', 'profile_id': '192_168_1_11_dynamic_p6970', 'type': 'PROFILE'}]
2012-03-11 10:23:12+1100 [HTTPChannel,4,127.0.0.1] *** API CALL f=xmlrpc_ProfileProperties args=['192_168_1_11_dynamic_p6970'] kw={} ret={'hash': '6b7cf94d28f6e268a3af155bab07a779a3d4a85386e6f03d678133b52a431de7', 'name': '192.168.1.11/Dynamic', 'global': True, 'host': '192.168.1.11', 'owner': u'Administrator', 'org': 'OpenVPN Technologies, Inc.', 'type': ['dynamic'], 'id': '192_168_1_11_dynamic_p6970', 'access_allowed': True}
2012-03-11 10:23:14+1100 [-] Checking for service profiles
2012-03-11 10:23:34+1100 [HTTPChannel,7,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_3RTR8udbJd7ZfHvE_1', 10] kw={} ret=[{'timestamp': 1331421814, 'state': 'connect', 'profile_id': '192_168_1_11_dynamic_p6970', 'type': 'PROFILE'}]
2012-03-11 10:23:34+1100 [HTTPChannel,7,127.0.0.1] *** API CALL f=xmlrpc_Connect args=[{'profile_id': '192_168_1_11_dynamic_p6970', 'type': 'dynamic', 'non_interactive': False}, ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT'], {}] kw={} ret='sess_192_168_1_11_dynamic_p6970_3rgZ3jDhDEObVKc7_1'
2012-03-11 10:23:34+1100 [HTTPChannel,8,127.0.0.1] *** API CALL f=xmlrpc_ConnectActive args=['192_168_1_11_dynamic_p6970', ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT'], 'pending'] kw={} ret='sess_192_168_1_11_dynamic_p6970_ht0k6SIarlK7hgG3_2'
2012-03-11 10:23:34+1100 [HTTPChannel,9,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_192_168_1_11_dynamic_p6970_ht0k6SIarlK7hgG3_2', 10] kw={} ret=[{'status': 'need', 'timestamp': 1331421814, 'need': ('username', 'password'), 'type': 'PASSWORD', 'auth_type': 'Dynamic'}]
2012-03-11 10:23:45+1100 [HTTPChannel,12,127.0.0.1] *** API CALL f=xmlrpc_SubmitCreds args=['sess_192_168_1_11_dynamic_p6970_3rgZ3jDhDEObVKc7_1', {'username': 'erez', 'password': '[redacted]'}, 'Dynamic', True] kw={} ret=None
2012-03-11 10:23:55+1100 [-] DynamicClientBase: Unable to obtain Session ID from 192.168.1.11, port(s)=32764: XML-RPC: TimeoutError.: client/dyncli:90,internet/defer:744,python/failure:338,client/dyncli:128,internet/defer:744,python/failure:338,client/asxmlcli:102,client/asxmlcli:95,internet/defer:744,python/failure:338,client/asxmlcli:124,internet/defer:744,python/failure:338,client/asxmlcli:190,client/asxmlcli:174 (twisted.internet.error.TimeoutError)
2012-03-11 10:23:55+1100 [HTTPChannel,14,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_192_168_1_11_dynamic_p6970_ht0k6SIarlK7hgG3_2', 10] kw={} ret=[{'timestamp': 1331421835, 'info_type': 'twisted.internet.error.TimeoutError', 'type': 'INFO', 'severity': 'error', 'value': 'Unable to obtain Session ID from 192.168.1.11, port(s)=32764: XML-RPC: TimeoutError.'}, {'timestamp': 1331421835, 'type': 'DELETE_PENDING'}]
2012-03-11 10:23:55+1100 [HTTPChannel,15,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_3RTR8udbJd7ZfHvE_1', 10] kw={} ret=[{'timestamp': 1331421835, 'state': 'disconnect', 'profile_id': '192_168_1_11_dynamic_p6970', 'type': 'PROFILE'}]
2012-03-11 10:23:55+1100 [HTTPChannel,16,127.0.0.1] *** API CALL f=xmlrpc_EnumProfiles args=[] kw={} ret=[{'hash': '6b7cf94d28f6e268a3af155bab07a779a3d4a85386e6f03d678133b52a431de7', 'access_allowed': True, 'global': True, 'host': '192.168.1.11', 'snapshot': {'info': {'timestamp': 1331421835, 'info_type': 'twisted.internet.error.TimeoutError', 'type': 'INFO', 'severity': 'error', 'value': 'Unable to obtain Session ID from 192.168.1.11, port(s)=32764: XML-RPC: TimeoutError.'}, 'delete_pending': True, 'password': {'status': 'need', 'timestamp': 1331421814, 'need': ('username', 'password'), 'type': 'PASSWORD', 'auth_type': 'Dynamic'}}, 'owner': u'Administrator', 'org': 'OpenVPN Technologies, Inc.', 'type': ['dynamic'], 'id': '192_168_1_11_dynamic_p6970', 'name': '192.168.1.11/Dynamic'}]