0

I'm trying to setup an openvpn server by following this tutorial.

The relevant parts of my server.conf is as below.

root@something:/etc/openvpn/easy-rsa# cat /etc/openvpn/server.conf | grep "^[^#;]" 
port 1194
proto udp
dev tun
ca ca.crt
cert something.crt
key something.key  # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

The server fails to start and error messages below are posted in my syslog.

Nov 30 21:45:46 mini ovpn-server[8696]: 192.168.0.1:40880 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Nov 30 21:45:46 mini ovpn-server[8696]: 192.168.0.1:40880 TLS Error: TLS handshake failed
Nov 30 21:45:46 mini ovpn-server[8696]: 192.168.0.1:40880 SIGUSR1[soft,tls-error] received, client-instance restarting
Nov 30 21:45:48 mini ovpn-server[8696]: 192.168.0.1:56890 TLS: Initial packet from [AF_INET]192.168.0.1:56890, sid=376b5dcc ec4c9266

Anyone got a clue about what I'm doing wrong? Please let me know if I should post anything else.

  • try this link. It seems a connection problem, maybe due to firewall or missing port forwards – Lety Nov 30 '14 at 21:01
  • I already googled that. There is no firewall running. And this is simply the server refusing to start. nmap doesn't give me anything on port 1194. – user672009 Nov 30 '14 at 21:06
  • Did you get an error when you start server with service openvpn start command? – Lety Nov 30 '14 at 23:38
  • hey I have a similar problem : askubuntu.com/questions/714838/… – user487391 Dec 30 '15 at 17:26
0

Now that I'm using absolute paths for ca, cert, key and dh I get another error. So I guess that answers this question.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.