OpenVPN Problem

[Gene Coleman]

I am currently experiencing a connection problem with OpenVPN whereby I keep getting a TLS Handshake error on my laptop client. This has been happening since the last recent ADM update. Is it possible that the update changed any settings that would cause this problem? I have noticed that the cr.crt file date is not current when it's created. I get a creation date of 12/12/2013. Is anyone else experiencing this problem?

I've tried changing the ports used by the server & router and client to TCP but this only causes a 'soft reset' error on the client. I use OpenVPN for my P.I.A. account and it works fine on the same client so I believe that is may be a problem with the Asustor server.

[bazuev]

Hi Gene!

Same with me. After upgrading ADM to 2.5.0.RA73 I can not connect to OpenVPN server. Please inform me, if you find a solution.

Thank you,
Vadim Bazuev

[lanimul]

Have u tried to create a new profile?

Sent from my SM-P900 using Tapatalk

[Gene Coleman]

lanimul - Do you mean a new user profile? If so, yes. Also, experimenting with the options within VPN Server (checksum, no checksum, cipher, no ciper) doesn't help. Any setting configuration returns the same results (below). I've used port 1196 below but I have tried combinations of 1194 UPD, TCP and 443 UDP, TCP being sure forward the ports with EZ-Router. I've also deleted then re-installed the app with no luck. The downloaded configuration files look good.


Sun Oct 18 10:04:13 2015 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Sun Oct 18 10:04:13 2015 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Enter Management Password:
Sun Oct 18 10:04:21 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Oct 18 10:04:21 2015 UDPv4 link local: [undef]
Sun Oct 18 10:04:21 2015 UDPv4 link remote: [AF_INET]xx.xx.xxx.xx:1196
Sun Oct 18 10:05:21 2015 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun Oct 18 10:05:21 2015 TLS Error: TLS handshake failed
Sun Oct 18 10:05:21 2015 SIGUSR1[soft,tls-error] received, process restarting
Sun Oct 18 10:05:23 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Oct 18 10:05:23 2015 UDPv4 link local: [undef]
Sun Oct 18 10:05:23 2015 UDPv4 link remote: [AF_INET]xx.xx.xxx.xx:1196
Sun Oct 18 10:05:32 2015 SIGTERM[hard,] received, process exiting


I'm out of ideas on this one!

[sksbir]

Same problem. I use a custom certificate on my NAS, and have noticed a login connection with standart asustor certificate.

Did you use a custom certificate ?

[Gene Coleman]

Hi sksbir - Yes I use a custom certificate I made with OpenSSL - 2048 bit encryption. However that certificate has been working fine for many months. I did just create and load new one with 4096 encryption and I actually may have done that just before the problems started. I can't really remember but I'll try reverting to the 2048 certificate to see what happens and report back after I test it out.

[Gene Coleman]

No luck with reverting back to the certificate that I've used for many months. Even using the default cert doesn't help the VPN issue.

[Ukeyes]

I am getting exactly the same issue. It appears that it might be down to the updated OpenVPN server, as this issue is being reported on other forums as well. Could we ask Asustor to roll back the version of OpenVPN server in order that we can get this working again.

[blacksmith]

I'm also having this problem since the update. It's obviously not an isolated issue, so it would be nice if they could acknowledge the problem and get it fixed.

[Gene Coleman]

Just submitted a ticket (#8219) for this issue. I asked that this forum topic be reviewed as well to show that others are experiencing the same problem.