HI  Jan Just Keijser,

Thanks for you answering. I added to .conf. But it is still run 60 seconds.


With best regards,
Angela
April 15


2014-04-14 20:58 GMT+08:00 Eike Lohmann <e.lohm...@ic3s.de>:

>
> Maybe your RootCa+IntermediateCA+ServerKey are to big.
> Embeddet devices have less cpu power and I know this problem, if you have
> e.g. a
> 4096bit RootCA and a 2048-4096bit Serverkey.
> Lower the ServerKey bits and try again.
>
> Greetings, Eike
>
>
> Am 14.04.2014 11:19, schrieb Jan Just Keijser:
> > Hi,
> >
> > angela wrote:
> >> Hi,
> >>
> >> I have some problems with bandwith.
> >> OpenVPN 2.3.2 is built on CentOS6.5.
> >> It can run normal on the Internet.
> >> But, when I am run on the 6LowPAN, which is ATAVRRZRAVEN 2.4 GHz
> >> <
> http://www.digikey.com/product-detail/en/ATAVRRZRAVEN/ATAVRRZRAVEN-ND/1812221
> >.
> >> It will too long to run. It was time.
> >> I think the time of transmission is too long.
> >> I do not know how to fix it.
> >> Thanks in advance.
> >>
> >>
> >>
> >>
> --------------------------------------------------------------------------------------------------------------------------------------------
> >> The error message
> >>
> --------------------------------------------------------------------------------------------------------------------------------------------
> >> Fri Apr 11 18:22:06 2014 OpenVPN 2.3.2 i686-redhat-linux-gnu [SSL
> >> (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep
> >> 12 2013
> >> Fri Apr 11 18:22:06 2014 Socket Buffers: R=[112640->131072]
> >> S=[112640->131072]
> >> Fri Apr 11 18:22:06 2014 UDPv6 link local: [undef]
> >> Fri Apr 11 18:22:06 2014 UDPv6 link remote: [AF_INET6]aaaa::2:1194
> >> Fri Apr 11 18:22:07 2014 TLS: Initial packet from
> >> [AF_INET6]aaaa::2:1194, sid=ac09c26e b3095388
> >> Fri Apr 11 18:22:33 2014 VERIFY OK: depth=1, C=TW, ST=Nantou County,
> >> L=Puli Township, O=Fort-Funston, OU=MyOrganizationalUnit,
> >> CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
> >> Fri Apr 11 18:22:33 2014 VERIFY OK: nsCertType=SERVER
> >> Fri Apr 11 18:22:33 2014 VERIFY OK: depth=0, C=US, ST=CA,
> >> L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=server,
> >> name=EasyRSA, emailAddress=me@myhost.mydomain
> >> Fri Apr 11 18:23:06 2014 TLS Error: TLS key negotiation failed to
> >> occur within 60 seconds (check your network connectivity)
> >> Fri Apr 11 18:23:06 2014 TLS Error: TLS handshake failed
> >> Fri Apr 11 18:23:06 2014 SIGUSR1[soft,tls-error] received, process
> >> restarting
> >>
> >>
> --------------------------------------------------------------------------------------------------------------------------------------------
> >> My server.conf
> >>
> --------------------------------------------------------------------------------------------------------------------------------------------
> >> port 1194
> >> proto udp6
> >> dev tun0
> >> tun-ipv6
> >> ca ca.crt
> >> cert server.crt
> >> key server.key
> >> dh dh2048.pem
> >> server 10.8.0.0 255.255.255.0
> >> ifconfig-pool-persist ipp.txt
> >> push "redirect-gateway def1 bypass-dhcp"
> >> push "dhcp-option DNS 8.8.8.8"
> >> push "dhcp-option DNS 8.8.4.4"
> >> keepalive 10 120
> >> user nobody
> >> group nobody
> >> persist-key
> >> persist-tun
> >> status openvpn-status.log
> >> verb 3
> >>
> >>
> --------------------------------------------------------------------------------------------------------------------------------------------
> >> My client.conf
> >>
> --------------------------------------------------------------------------------------------------------------------------------------------
> >> client
> >> dev tun
> >> tun-ipv6
> >> proto udp6
> >> remote aaaa::2 1194
> >> resolv-retry infinite
> >> nobind
> >> persist-key
> >> persist-tun
> >> ca ca.crt
> >> cert client.crt
> >> key client.key
> >> ns-cert-type server
> >> comp-lzo
> >> verb 3
> >>
> >>
> > try adding
> >    tls-timeout 180
> > to see if that helps ; if it does not , then you are almost certainly
> > looking at a iptables/firewalling issue; try switching to 'proto tcp'
> > instead - that sometimes helps, but there are other downsides to using
> > 'proto tcp'.
> >
> > HTH,
> >
> > JJK
> >
> >
> >
> ------------------------------------------------------------------------------
> > Learn Graph Databases - Download FREE O'Reilly Book
> > "Graph Databases" is the definitive new guide to graph databases and
> their
> > applications. Written by three acclaimed leaders in the field,
> > this first edition is now available. Download your free book today!
> > http://p.sf.net/sfu/NeoTech
> > _______________________________________________
> > Openvpn-users mailing list
> > Openvpn-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/openvpn-users
>
>
>
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and their
> applications. Written by three acclaimed leaders in the field,
> this first edition is now available. Download your free book today!
> http://p.sf.net/sfu/NeoTech
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>

-- 
----------------------------------
請尊重智慧財產權.
NCNU Cloudmail V0.2
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/NeoTech
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to