OpenVPN Tutorial - TLS Handshake Error
Hallo,
ersteinmal Danke für dieses tolle Tutorial.
Ich versuche OpenVpn zum laufen zubringen in folgender Lage
Server = Linux Debian , RootServer
Client1 = Windows XP
Client2 = Windows XP
Ziel ist es das dateitransfer und Spiele ala C&C funktionieren.
Also ich hab den server soweit installed und er scheint auch zu funktionieren , jedenfalls erhalte ich die meldung
Code:
[12:45:08][root@base:/etc/openvpn#] openvpn --config /etc/openvpn/server.conf
Sat Mar 24 12:55:21 2007 OpenVPN 2.0.9 i686-pc-linux [SSL] [LZO] [EPOLL] built on Mar 24 2007
Sat Mar 24 12:55:21 2007 Diffie-Hellman initialized with 1024 bit key
Sat Mar 24 12:55:21 2007 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Mar 24 12:55:21 2007 TUN/TAP device tap0 opened
Sat Mar 24 12:55:21 2007 /sbin/ifconfig tap0 10.0.0.1 netmask 255.255.255.0 mtu 1500 broadcast 10.0.0.255
Sat Mar 24 12:55:21 2007 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Sat Mar 24 12:55:21 2007 GID set to nogroup
Sat Mar 24 12:55:21 2007 UID set to nobody
Sat Mar 24 12:55:21 2007 UDPv4 link local (bound): [undef]:11940
Sat Mar 24 12:55:21 2007 UDPv4 link remote: [undef]
Sat Mar 24 12:55:21 2007 MULTI: multi_init called, r=256 v=256
Sat Mar 24 12:55:21 2007 IFCONFIG POOL: base=10.0.0.2 size=253
Sat Mar 24 12:55:21 2007 IFCONFIG POOL LIST
Sat Mar 24 12:55:21 2007 Initialization Sequence Completed
Ja sieht alles fein aus
Den Windows Client hab ich auch ensprechend dem Tutorial installed:
Code:
Sat Mar 24 12:58:12 2007 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2
006
Sat Mar 24 12:58:12 2007 IMPORTANT: OpenVPN's default port number is now 1194, b
ased on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earl
ier used 5000 as the default port.
Sat Mar 24 12:58:12 2007 LZO compression initialized
Sat Mar 24 12:58:12 2007 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:
0 EL:0 ]
Sat Mar 24 12:58:12 2007 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:
32 EL:0 AF:3/1 ]
Sat Mar 24 12:58:12 2007 Local Options hash (VER=V4): 'd79ca330'
Sat Mar 24 12:58:12 2007 Expected Remote Options hash (VER=V4): 'f7df56b8'
Sat Mar 24 12:58:12 2007 UDPv4 link local: [undef]
Sat Mar 24 12:58:12 2007 UDPv4 link remote: 217.11.53.xxx:xxxxx
Dann allerdings beim connect versuch bekomme ich einen TLS-Handshake error:
Code:
Sat Mar 24 12:58:48 2007 MULTI: multi_create_instance called
Sat Mar 24 12:58:48 2007 87.66.187.186:3384 Re-using SSL/TLS context
Sat Mar 24 12:58:48 2007 87.66.187.186:3384 LZO compression initialized
Sat Mar 24 12:58:48 2007 87.66.187.186:3384 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Mar 24 12:58:48 2007 87.66.187.186:3384 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Sat Mar 24 12:58:48 2007 87.66.187.186:3384 Local Options hash (VER=V4): 'f7df56b8'
Sat Mar 24 12:58:48 2007 87.66.187.186:3384 Expected Remote Options hash (VER=V4): 'd79ca330'
Sat Mar 24 12:58:48 2007 87.66.187.186:3384 TLS: Initial packet from 87.66.187.186:3384, sid=72469ca6 a396b226
Sat Mar 24 12:59:48 2007 87.66.187.186:3384 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sat Mar 24 12:59:48 2007 87.66.187.186:3384 TLS Error: TLS handshake failed
Sat Mar 24 12:59:48 2007 87.66.187.186:3384 SIGUSR1[soft,tls-error] received, client-instance restarting
Sat Mar 24 12:59:50 2007 MULTI: multi_create_instance called
Sat Mar 24 12:59:50 2007 87.66.187.186:3409 Re-using SSL/TLS context
Sat Mar 24 12:59:50 2007 87.66.187.186:3409 LZO compression initialized
Sat Mar 24 12:59:50 2007 87.66.187.186:3409 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Mar 24 12:59:50 2007 87.66.187.186:3409 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Sat Mar 24 12:59:50 2007 87.66.187.186:3409 Local Options hash (VER=V4): 'f7df56b8'
Sat Mar 24 12:59:50 2007 87.66.187.186:3409 Expected Remote Options hash (VER=V4): 'd79ca330'
Sat Mar 24 12:59:50 2007 87.66.187.186:3409 TLS: Initial packet from 87.66.187.186:3409, sid=a766bc0d fefaee0d
Ich hab soweit alles getestet neue keys/certs erstellt usw common name gecheckt .. weiss nun nicht mehr weiter. es ist bestimmt easy der fehler wahrscheinlich selten dämlich :D
evtl müssen ports von Router hinter dem ich sitze an meine lokale box forwarded werden ?! Wenn ja welche ?
Ich hoffe sie können mir helfen
Mfg
Hurrycane aka Thomas
| 
Archiv-Version: View only!
