Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: openvpn -TLS Error
PostPosted: Wed May 01, 2013 2:38 pm 
Offline
Newbie

Joined: Wed May 01, 2013 2:07 pm
Posts: 4
This is the error log

----
Thu May 2 01:05:14 2013 218.86.195.206:28387 TLS: Initial packet from [AF_INET]218.86.195.206:28387, sid=86eac8aa 05140769
Thu May 2 01:06:14 2013 218.86.195.206:28280 TLS: Initial packet from [AF_INET]218.86.195.206:28280, sid=aa44605d 2b4edba3
Thu May 2 01:06:14 2013 218.86.195.206:28387 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu May 2 01:06:14 2013 218.86.195.206:28387 TLS Error: TLS handshake failed
Thu May 2 01:06:14 2013 218.86.195.206:28387 SIGUSR1[soft,tls-error] received, client-instance restarting

----

and this is my openvpn config

----

port 11994
proto udp
dev tun

# SSL/TLS
ca /etc/openvpn/ca.crt
cert /etc/openvpn/zfish.crt
key /etc/openvpn/zfish.key

tls-auth /etc/openvpn/ta.key 0

# Diffie hellman parameters
dh /etc/openvpn/dh2048.pem
script-security 2
keepalive 10 120
comp-lzo
# VPN subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist /etc/openvpn/ipp.txt
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 4.4.4.4"
#push "dhcp-option DNS 208.67.222.222"

-----

and this is my andriod client config

----
#!/bin/sh
client

dev tun
proto udp
remote 106.187.49.162 11994
nobind
persist-key
persist-tun
ca ca.crt
cert MX2.crt
key MX2.key

tls-auth ta.key 1
auth-user-pass

verb 3

----

Please help me, Thanks very much!


Top
   
 Post subject: Re: openvpn -TLS Error
PostPosted: Wed May 01, 2013 4:13 pm 
Offline
Senior Member
User avatar

Joined: Wed Mar 17, 2004 4:11 pm
Posts: 554
Website: http://www.unixtastic.com
Location: Europe
I think I know what that is and you are not going to like it. It's not a technical problem.

There is something between you (in China) and Linode preventing OpenVPN from connecting. I'm sure it's technically possible to get around it but I'm wondering how much you want to provoke the Chinese government.


Top
   
 Post subject: Re: openvpn -TLS Error
PostPosted: Wed May 01, 2013 11:41 pm 
Offline
Newbie

Joined: Wed May 01, 2013 2:07 pm
Posts: 4
sednet wrote:
I think I know what that is and you are not going to like it. It's not a technical problem.

There is something between you (in China) and Linode preventing OpenVPN from connecting. I'm sure it's technically possible to get around it but I'm wondering how much you want to provoke the Chinese government.


Sometimes I can connect my vpn for useing my phone or my computer. Because I want to use some sevice which provided by foreigner, So I am eager to use vpn on my VPS. Who can help me?


Top
   
 Post subject: Re: openvpn -TLS Error
PostPosted: Sat May 04, 2013 8:43 am 
Offline
Junior Member

Joined: Sat Mar 07, 2009 1:21 pm
Posts: 25
zfish,
It looks like the "auth-user-pass" line in the client config might be part of the problem. You are telling the client to connect with user/pass; but are missing the "auth-user-pass-verify" line on the server config. Are you trying to use user/pass authentication, or certificate authentication?

Try removing "auth-user-pass" from the client config, and add "tls-server" to the server config. That would give you certificate authentication, which is generally perceived to be more secure than user/pass authentication.


Top
   
 Post subject: Re: openvpn -TLS Error
PostPosted: Sun May 05, 2013 12:02 pm 
Offline
Newbie

Joined: Wed May 01, 2013 2:07 pm
Posts: 4
fuzzman442 wrote:
zfish,
It looks like the "auth-user-pass" line in the client config might be part of the problem. You are telling the client to connect with user/pass; but are missing the "auth-user-pass-verify" line on the server config. Are you trying to use user/pass authentication, or certificate authentication?

Try removing "auth-user-pass" from the client config, and add "tls-server" to the server config. That would give you certificate authentication, which is generally perceived to be more secure than user/pass authentication.


thanks very much! I just change the openvpn port and the problem is solved! Maybe I am in china and the GFW stop my internet connection!


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group