Discussion:
[Openvpn-users] can´t connect to the server
Lars Müller
2017-04-30 09:28:13 UTC
Permalink
Hello,

i have setup Openvpn on my Server with this tutorial.
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-16-04

But i can´t connect to the server. i got this Error message at client
and Serverside:

Apr 30 11:22:18 domain.tld ovpn-server[20000]: TCP connection
established with [AF_INET]109.84.3.154:62320
Apr 30 11:22:19 domain.tld ovpn-server[20000]: 109.84.3.xxx:62320 TLS:
Initial packet from [AF_INET]109.84.3.154:62320, sid=29b3fb7f 6034e69a
Apr 30 11:22:19 domain.tld ovpn-server[20000]: 109.84.3.xxx:62320 TLS
Error: reading acknowledgement record from packet
Apr 30 11:22:19 domain.tld ovpn-server[20000]: 109.84.3.xxx:62320 Fatal
TLS error (check_tls_errors_co), restarting
Apr 30 11:22:19 domain.tld ovpn-server[20000]: 109.84.3.xxx:62320
SIGUSR1[soft,tls-error] received, client-instance restarting

What can i do?
Jan Just Keijser
2017-04-30 21:47:40 UTC
Permalink
Hi Lars,
Post by Lars Müller
Hello,
i have setup Openvpn on my Server with this tutorial.
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-16-04
But i can´t connect to the server. i got this Error message at client
Apr 30 11:22:18 domain.tld ovpn-server[20000]: TCP connection
established with [AF_INET]109.84.3.154:62320
Initial packet from [AF_INET]109.84.3.154:62320, sid=29b3fb7f 6034e69a
Apr 30 11:22:19 domain.tld ovpn-server[20000]: 109.84.3.xxx:62320 TLS
Error: reading acknowledgement record from packet
Apr 30 11:22:19 domain.tld ovpn-server[20000]: 109.84.3.xxx:62320 Fatal
TLS error (check_tls_errors_co), restarting
Apr 30 11:22:19 domain.tld ovpn-server[20000]: 109.84.3.xxx:62320
SIGUSR1[soft,tls-error] received, client-instance restarting
What can i do?
you could post your config files so we can have a better look; however,
from reading the error log I suspect that you've run into this:
http://www.f15ijp.com/2010/08/openvpn-tls-error-reading-acknowledgement-record-from-packet/

check the tls-auth settings on both client and server configs.

HTH,

JJK

Continue reading on narkive:
Loading...