TLS Handshake Fails

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
Runr140
OpenVpn Newbie
Posts: 1
Joined: Mon Sep 14, 2009 9:04 pm

TLS Handshake Fails

Post by Runr140 » Mon Sep 14, 2009 9:16 pm

Problem:
The client sits for a minute and then tells me that TLS handshake failed within 60 seconds.

Notes:
My ISP has given me a static IP and I have forwarded TCP and UDP ports 1196 on my server, client, and my router. Further, my ISP also forwarded those ports to my IP address as I am on a wireless internet system due to working in a rural area.

I am running OpenVPN on XP on the server-side, and Vista on the client side.

End Goal:
- establish OpenVPN on bridged VPN so that 3 road warriors can access corporate data from outside the office.

Here are my client and server source code.

Client:

Code: Select all

# Client/Server Common Config

dev tap
dev-node VPN
proto udp
persist-key
persist-tun
comp-lzo
ca ca.crt
cert Blairs_Tablet.crt
key Blairs_Tablet.key

# Client Configuration
client 
remote xxx.xxx.xxx.168 1196
remote-random
cipher AES-128-CBC   # AES
resolv-retry infinite
nobind
mute-replay-warnings
ns-cert-type server
verb 3
Server Config:

Code: Select all

# Client/Server Common Config
dev tap
dev-node VPN
proto tcp
persist-key
persist-tun
comp-lzo
cipher AES-128-CBC   # AES
ca ca.crt
cert server.crt


# Server Configuration
local 10.28.24.100
port 1196
key server.key  # This file should be kept secret
dh dh1024.pem
server-bridge 10.28.25.100 255.255.255.0 10.28.25.101 10.28.25.104
ifconfig-pool-persist ipp.txt
push "route 10.28.24.0 255.255.255.0"
client-to-client
keepalive 10 120
max-clients 10
verb 3

Any help you can provide is appreciated.

Runr140

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: TLS Handshake Fails

Post by krzee » Wed Oct 27, 2010 12:46 am

sounds like a NAT or firewall issue

if tun is ok with your end goal, here is a doc showing you how to do exactly that
http://www.secure-computing.net/wiki/in ... PN/Routing

Post Reply