I'm trying to setup an openvpn server by following this tutorial.

The relevant parts of my server.conf is as below.

root@something:/etc/openvpn/easy-rsa# cat /etc/openvpn/server.conf | grep "^[^#;]" 
port 1194
proto udp
dev tun
ca ca.crt
cert something.crt
key something.key  # This file should be kept secret
dh dh2048.pem
ifconfig-pool-persist ipp.txt
keepalive 10 120
status openvpn-status.log
verb 3

The server fails to start and error messages below are posted in my syslog.

Nov 30 21:45:46 mini ovpn-server[8696]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 30 21:45:46 mini ovpn-server[8696]: TLS Error: TLS handshake failed
Nov 30 21:45:46 mini ovpn-server[8696]: SIGUSR1[soft,tls-error] received, client-instance restarting
Nov 30 21:45:48 mini ovpn-server[8696]: TLS: Initial packet from [AF_INET], sid=376b5dcc ec4c9266

Anyone got a clue about what I'm doing wrong? Please let me know if I should post anything else.

  • try this link. It seems a connection problem, maybe due to firewall or missing port forwards
    – Lety
    Commented Nov 30, 2014 at 21:01
  • I already googled that. There is no firewall running. And this is simply the server refusing to start. nmap doesn't give me anything on port 1194.
    – user672009
    Commented Nov 30, 2014 at 21:06
  • Did you get an error when you start server with service openvpn start command?
    – Lety
    Commented Nov 30, 2014 at 23:38
  • hey I have a similar problem : askubuntu.com/questions/714838/…
    – user487391
    Commented Dec 30, 2015 at 17:26

1 Answer 1


Now that I'm using absolute paths for ca, cert, key and dh I get another error. So I guess that answers this question.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .