Re: TLS key negotiation failed to occur ISP screws up the VPN

Gert Doering <[email protected]> Sat, 18 May 2024 11:22:37 +0200

Newsgroups	gmane.network.openvpn.user
Message-ID	<[email protected]>

Hi,

On Sat, May 18, 2024 at 08:05:33AM +0000, shadowbladeee via Openvpn-users wrote:
> OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
> OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 29 2022
> 
> Please do not tell me to upgrade 

Since you do not want to hear that, we won't tell you that 2.4.0 is 
8 years old, and a zillion improvements went into what is now 2.6.10,
including the one Selva pointed out which might actually be relevant
here.

The log shows "the server is not replying".  So what you need to do now
is actually hold them side by side - "what is the other side doing in
these seconds?", and if it's stuck in "sleeping 300s for retry", well,
you do not want to hear the answer.

(Restart both openvpn processes simultaneously might bring them back to life,
if it's it looks like).

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

signature.asc (application/pgp-signature, 630 B)