Hi All,
Recently I started receiving the “TLS Key negotiation failed” error while
connecting. I have been using this exact same setup for the past 1 year or
so. Everything used to work flawlessly up until last week when this error
popped up. Following is the log from my Windows 8.1 client with “verb 3”.
Openvpn Server is running on Debian.
Any ideas how to troubleshoot given that certificate exchange seems to
occur without issue in the log below?
Tue Dec 20 19:50:54 2016 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)]
[LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Tue Dec 20 19:50:54 2016 MANAGEMENT: TCP Socket listening on
[AF_INET]127.0.0.1:DDDDD
Tue Dec 20 19:50:54 2016 Need hold release from management interface,
waiting...
Tue Dec 20 19:50:55 2016 MANAGEMENT: Client connected from
[AF_INET]127.0.0.1:DDDDD
Tue Dec 20 19:50:55 2016 MANAGEMENT: CMD 'state on'
Tue Dec 20 19:50:55 2016 MANAGEMENT: CMD 'log all on'
Tue Dec 20 19:50:55 2016 MANAGEMENT: CMD 'hold off'
Tue Dec 20 19:50:55 2016 MANAGEMENT: CMD 'hold release'
Tue Dec 20 19:50:55 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Dec 20 19:50:55 2016 MANAGEMENT: >STATE:EEEEEEEEEE,RESOLVE,,,
Tue Dec 20 19:50:55 2016 UDPv4 link local: [undef]
Tue Dec 20 19:50:55 2016 UDPv4 link remote: [AF_INET]XX.XX.XX.XX.XX:YYYY
Tue Dec 20 19:50:55 2016 MANAGEMENT: >STATE:EEEEEEEEEE,WAIT,,,
Tue Dec 20 19:50:57 2016 MANAGEMENT: >STATE:FFFFFFFFFFF,AUTH,,,
Tue Dec 20 19:50:57 2016 TLS: Initial packet from
[AF_INET]XX.XX.XX.XX.XX:YYYY, sid=eabd11fd 751826f4
Tue Dec 20 19:51:21 2016 VERIFY OK: depth=1, C=US, ST=AA, L=BB, O=Personal
Inc, OU=Personal, CN=personal, name=Personal Server,
emailAddress=mail@host.domain
Tue Dec 20 19:51:21 2016 VERIFY OK: nsCertType=SERVER
Tue Dec 20 19:51:21 2016 VERIFY OK: depth=0, C=US, ST=AA, L=BB, O=Personal
Inc, OU=Personal, CN=server, name=Personal Server,
emailAddress=mail@host.domain
Tue Dec 20 19:51:56 2016 TLS Error: TLS key negotiation failed to occur
within 60 seconds (check your network connectivity)
Tue Dec 20 19:51:56 2016 TLS Error: TLS handshake failed
Tue Dec 20 19:51:56 2016 SIGUSR1[soft,tls-error] received, process
restarting
Tue Dec 20 19:51:56 2016 MANAGEMENT:
>STATE:1482281516,RECONNECTING,tls-error,,
Tue Dec 20 19:51:56 2016 Restart pause, 2 second(s)
Tue Dec 20 19:51:58 2016 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Dec 20 19:51:58 2016 MANAGEMENT: >STATE:GGGGGGGGGG,RESOLVE,,,
Tue Dec 20 19:51:58 2016 UDPv4 link local: [undef]
Tue Dec 20 19:51:58 2016 UDPv4 link remote: [AF_INET]XX.XX.XX.XX.XX:YYYY
Tue Dec 20 19:51:58 2016 MANAGEMENT: >STATE:GGGGGGGGGG,WAIT,,,
Tue Dec 20 19:51:58 2016 MANAGEMENT: >STATE:GGGGGGGGGG,AUTH,,,
Tue Dec 20 19:51:58 2016 TLS: Initial packet from
[AF_INET]XX.XX.XX.XX.XX:YYYY, sid=8adb8713 898f3c23
Tue Dec 20 19:52:21 2016 VERIFY OK: depth=1, C=US, ST=AA, L=BB, O=Personal
Inc, OU=Personal, CN=personal, name=Personal Server,
emailAddress=mail@host.domain
Tue Dec 20 19:52:21 2016 VERIFY OK: nsCertType=SERVER
Tue Dec 20 19:52:21 2016 VERIFY OK: depth=0, C=US, ST=AA, L=BB, O=Personal
Inc, OU=Personal, CN=server, name=Personal Server,
emailAddress=mail@host.domain
Tue Dec 20 19:52:58 2016 TLS Error: TLS key negotiation failed to occur
within 60 seconds (check your network connectivity)
Tue Dec 20 19:52:58 2016 TLS Error: TLS handshake failed
Tue Dec 20 19:52:58 2016 SIGUSR1[soft,tls-error] received, process
restarting
Tue Dec 20 19:52:58 2016 MANAGEMENT:
>STATE:HHHHHHHH,RECONNECTING,tls-error,,
Tue Dec 20 19:52:58 2016 Restart pause, 2 second(s)
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
