[Openvpn-users] We can't connect

[leandro noferini <lnoferin@xxxxxxxxxxxxxxx>]

Ciao a tutti,

please  help us  because  we cannot  understand  why this  vpn does  not
function:

we have  a server  (debian sarge on  a dsl  line) working well  for many
client and one client that cannot connect giving these errors:

log on the server

Sep 11 01:07:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 Re-using SSL/TLS context
Sep 11 01:07:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 LZO compression initialized
Sep 11 01:07:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sep 11 01:07:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:23 ET:32 EL:0 AF:3/1 ]
Sep 11 01:07:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 Local Options hash (VER=V4): 'f7df56b8'
Sep 11 01:07:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 Expected Remote Options hash (VER=V4): 'd79ca330'
Sep 11 01:07:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 TLS: Initial packet from XX.XX.XX.XX:45372, sid=3d94c000 efd4eea1
Sep 11 01:07:54 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 TLS: new session incoming connection from XX.XX.XX.XX:45372
Sep 11 01:07:56 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 TLS: new session incoming connection from XX.XX.XX.XX:45372
Sep 11 01:08:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sep 11 01:08:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 TLS Error: TLS handshake failed
Sep 11 01:08:51 bbs ovpn-vpn-bbs-server[8162]: XX.XX.XX.XX:45372 SIGUSR1[soft,tls-error] received, client-instance restarting

This is the log on the client

Mon Sep 11 01:07:39 2006 Re-using SSL/TLS context
Mon Sep 11 01:07:39 2006 LZO compression initialized
Mon Sep 11 01:07:39 2006 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Sep 11 01:07:39 2006 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Mon Sep 11 01:07:39 2006 Local Options hash (VER=V4): 'd79ca330'
Mon Sep 11 01:07:39 2006 Expected Remote Options hash (VER=V4): 'f7df56b8'
Mon Sep 11 01:07:39 2006 UDPv4 link local: [undef]
Mon Sep 11 01:07:39 2006 UDPv4 link remote: YY.YY.YY.YY:1194
Mon Sep 11 01:07:39 2006 TLS Error: Unroutable control packet received from YY.YY.YY.YY:1194 (si=3 op=P_CONTROL_V1)
Mon Sep 11 01:07:39 2006 TLS Error: Unroutable control packet received from YY.YY.YY.YY
[Many times]
Mon Sep 11 01:07:41 2006 NOTE: --mute triggered...
Mon Sep 11 01:07:48 2006 22 variation(s) on previous 10 message(s) suppressed by --mute

And this is the config for the client


client
dev tap
proto udp
remote address.server 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca server/ca.crt
cert server/client.crt
key server/client.key
comp-lzo
verb 3client
mute 10
float
tls-timeout 10

-- 
Ciao
leandro
Un esteso e "normale" uso della crittografia è il sistema più forte
per rivendicare il diritto alla privacy nelle comunicazioni
telematiche: come tutti i diritti e come i muscoli se non viene
esercitato costantemente si atrofizza e va perso.

Attachment: pgp2SXiLiMNpa.pgp
Description: PGP signature

-------------------------------------------------------------------------
Get stuff done quickly with pre-integrated technology to make your job easier

_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users