OpenVPN Setup Needs Help

TSX

I have everything set up on the server side and trying to connect on the client side. When I try connecting these are the messages I get. Let me know if you need more information. Almost got my OpenVPN up and running.

Sun Sep 22 14:13:33 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Sun Sep 22 14:13:33 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sun Sep 22 14:13:33 2013 Need hold release from management interface, waiting...
Sun Sep 22 14:13:33 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sun Sep 22 14:13:33 2013 MANAGEMENT: CMD 'state on'
Sun Sep 22 14:13:33 2013 MANAGEMENT: CMD 'log all on'
Sun Sep 22 14:13:33 2013 MANAGEMENT: CMD 'hold off'
Sun Sep 22 14:13:33 2013 MANAGEMENT: CMD 'hold release'
Sun Sep 22 14:13:34 2013 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Sun Sep 22 14:13:34 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 22 14:13:34 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 22 14:13:34 2013 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1574)
Sun Sep 22 14:13:34 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 22 14:13:34 2013 UDPv4 link local: [undef]
Sun Sep 22 14:13:34 2013 UDPv4 link remote: [AF_INET]95.47.118.121:1194
Sun Sep 22 14:13:34 2013 MANAGEMENT: >STATE:1379884414,WAIT,,,
Sun Sep 22 14:14:35 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Sep 22 14:14:35 2013 TLS Error: TLS handshake failed
Sun Sep 22 14:14:35 2013 SIGUSR1[soft,tls-error] received, process restarting
Sun Sep 22 14:14:35 2013 MANAGEMENT: >STATE:1379884475,RECONNECTING,tls-error,,
Sun Sep 22 14:14:35 2013 Restart pause, 2 second(s)
Sun Sep 22 14:14:37 2013 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1574)
Sun Sep 22 14:14:37 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 22 14:14:37 2013 UDPv4 link local: [undef]
Sun Sep 22 14:14:37 2013 UDPv4 link remote: [AF_INET]95.47.118.121:1194
Sun Sep 22 14:14:37 2013 MANAGEMENT: >STATE:1379884477,WAIT,,,
Sun Sep 22 14:15:37 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Sep 22 14:15:37 2013 TLS Error: TLS handshake failed
Sun Sep 22 14:15:37 2013 SIGUSR1[soft,tls-error] received, process restarting
Sun Sep 22 14:15:37 2013 MANAGEMENT: >STATE:1379884537,RECONNECTING,tls-error,,
Sun Sep 22 14:15:37 2013 Restart pause, 2 second(s)
Sun Sep 22 14:15:39 2013 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1574)
Sun Sep 22 14:15:39 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 22 14:15:39 2013 UDPv4 link local: [undef]
Sun Sep 22 14:15:39 2013 UDPv4 link remote: [AF_INET]95.47.118.121:1194
Sun Sep 22 14:15:39 2013 MANAGEMENT: >STATE:1379884539,WAIT,,,

This is my config file:

client # Indicates this is the client-side
dev tap # Use TAP device
proto udp # Use UDP
remote 95.47.118.121 1194
resolv-retry infinite # Keep trying to resolve the hostname of the OpenVPN server
nobind # Don’t bind to a specific local port
persist-key # Avoid trying to access unavailable resources after a restart
persist-tun # Avoid trying to access unavailable resources after a restart
ca ca.crt
cert client.crt
key client.key
ns-cert-type server # Protect against certain attacks
tls-auth ta.key 1
comp-lzo # Enable compression
verb 3 # Log verbosity level
link-mtu 1648 # Set link MTU to the same value as the server

Thanks!

ska

Did you check with the hints given?

kro

Problem with cert files

TSX

It turns out my firewall is the one blocking my connection. I am trying to configure it so far.

kro

Log show connecting is fine?