Page 1 of 1

TLS Handshake instructions

Posted: Sun Feb 26, 2017 12:47 am
by maartenpelgrim
Hi there,

It seems my client gives me the TLS handshake error when trying to start openVPN from terminal. Next step I took was trying to follow the excellent instructions on the Amahi wiki to 'Prevent SSL Handshake Timeouts In OpenVPN'.

I immediately ran into problems, however. The first thing I am supposed to do, according to the instructions, is go /etc/openvpn/amahi by typing 'cd /etc/openvpn/amahi'.

Access, so it seems, is denied. I have tried opening it with sudo, but this does not change anything. My knowledge and experience with these kind of issues is admittedly limited so I wouldn't know how to solve it.

Help is much appreciated!

All the best,

MPE

Re: TLS Handshake instructions

Posted: Sun Feb 26, 2017 2:04 am
by bigfoot65
Please provide the result of

Code: Select all

apaste --sysinfo

(should give one or two URLs, sharing the short one is enough).

Re: TLS Handshake instructions

Posted: Sun Feb 26, 2017 3:24 am
by maartenpelgrim

Re: TLS Handshake instructions

Posted: Sun Feb 26, 2017 9:04 am
by bigfoot65
Access, so it seems, is denied. I have tried opening it with sudo, but this does not change anything.
This particular directory requires root access. Using sudo is not sufficient, you will need to be root:

Code: Select all

sudo su -
Now try running the command and it should work.

Re: TLS Handshake instructions

Posted: Mon Feb 27, 2017 12:10 am
by maartenpelgrim
Well, I was able to access "/etc/openvpn/amahi" now, so that's good!

Sadly, the VPN-connection is not yet working. If I now set up a connection in the terminal I get the following error:

Code: Select all

TLS Error: cannot locate HMAC in incoming packet from [AF_INET]80.101.32.212:1194

Re: TLS Handshake instructions

Posted: Mon Feb 27, 2017 3:41 am
by bigfoot65
Might want to check out this thread:

viewtopic.php?f=3&t=6766

This may be your issue. We are working to resolve it now.

Re: TLS Handshake instructions

Posted: Mon Feb 27, 2017 11:56 pm
by maartenpelgrim
could be,

Any indication on how long it will be? Just to be sure, I am in no way expecting you to quickly fix this, but otherwise I might try ipsec.

Re: TLS Handshake instructions

Posted: Tue Feb 28, 2017 6:31 am
by bigfoot65
Any indication on how long it will be?
The openvpn App has been updated. The client certificates will be added to the wiki hopefully by this afternoon.

You will need to uninstall/reinstall the app, then redo the certs and conf file on your client devices to use the new certs.