ANSWERED TLS handshake failed

[puser 0]

Distributor ID:    Debian
Description:    Debian GNU/Linux trixie/sid
 

Quote

penVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
library versions: OpenSSL 3.2.2-dev , LZO 2.10
DCO version: N/A
Originally developed by James Yonan
Copyright (C) 2002-2023 OpenVPN Inc <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto_ofb_cfb=yes enable_dco=yes enable_dco_arg=yes enable_debug=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_maintainer_mode=no enable_management=yes enable_option_checking=no enable_pam_dlopen=no enable_pedantic=no enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_unit_tests=no enable_werror=no enable_win32_dll=yes enable_wolfssl_options_h=yes enable_x509_alt_username=yes with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_openssl_engine=auto with_sysroot=no
 

var 1

client
dev tun
remote 146.70.111.21 443
resolv-retry infinite
nobind
persist-key
persist-tun
auth-nocache
verb 3
explicit-exit-notify 5
remote-cert-tls server
data-ciphers AES-256-GCM:AES-192-GCM:AES-128-GCM
data-ciphers-fallback AES-256-GCM
disable-dco
proto udp
auth SHA512

2024-06-11 19:59:24 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-11 19:59:24 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-06-11 19:59:24 DCO version: N/A
2024-06-11 19:59:24 TCP/UDP: Preserving recently used remote address: [AF_INET]146.70.111.21:443
2024-06-11 19:59:24 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-11 19:59:24 UDPv4 link local: (not bound)
2024-06-11 19:59:24 UDPv4 link remote: [AF_INET]146.70.111.21:443
2024-06-11 19:59:24 TLS: Initial packet from [AF_INET]146.70.111.21:443, sid=9ee8053b 1e07d4f3
2024-06-11 20:00:24 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-06-11 20:00:24 TLS Error: TLS handshake failed
2024-06-11 20:00:24 SIGUSR1[soft,tls-error] received, process restarting
2024-06-11 20:00:24 Restart pause, 1 second(s)


var 2

client
dev tun
remote nl3.vpn.airdns.org 443
resolv-retry infinite
nobind
persist-key
persist-tun
auth-nocache
verb 3
explicit-exit-notify 5
remote-cert-tls server
data-ciphers AES-256-GCM:AES-192-GCM:AES-128-GCM
data-ciphers-fallback AES-256-GCM
disable-dco
proto udp
auth SHA512

2024-06-11 20:01:31 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-11 20:01:31 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-06-11 20:01:31 DCO version: N/A
2024-06-11 20:01:32 TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.186.26:443
2024-06-11 20:01:32 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-11 20:01:32 UDPv4 link local: (not bound)
2024-06-11 20:01:32 UDPv4 link remote: [AF_INET]213.152.186.26:443
2024-06-11 20:01:32 TLS: Initial packet from [AF_INET]213.152.186.26:443, sid=1ea938db 3b2b6b6b
2024-06-11 20:02:32 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2024-06-11 20:02:32 TLS Error: TLS handshake failed
2024-06-11 20:02:32 SIGUSR1[soft,tls-error] received, process restarting
2024-06-11 20:02:32 Restart pause, 1 second(s)


 

[Air4141841 25]

have you regenerated your keys and verified the TLS key is correct? 

[go558a83nk 364]

This happens for me almost all the time and it's my ISP causing it.  Try TCP tls-crypt and see if that has the same problem.

[gekoch 0]

On 6/15/2024 at 4:39 PM, go558a83nk said:

This happens for me almost all the time and it's my ISP causing it.  Try TCP tls-crypt and see if that has the same problem.

Thx I have the same problems since a few hours. Where do I need to set ths "tls -crypt"

[OpenSourcerer 1441]

On 12/13/2024 at 10:40 AM, gekoch said:

Thx I have the same problems since a few hours. Where do I need to set ths "tls -crypt"

Open your own thread, please, giving as much info as you can about the problem you're having. You may link to this thread, too.