Menu
What's new
By:
Filters Better Search

OpenVPN TLS timeouts

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Zac F

Zac F

New Around Here
Out of curiosity how long should the TLS take to timeout? I've been unable to connect any of my android devices to VPN because TLS keeps timing out. Here's the log entries:

Code: 
Aug  8 10:12:37 openvpn[1541]: 192.168.0.103:52521 TLS: Initial packet from [AF_INET]192.168.0.103:52521, sid=422a29cb 75c7d516
Aug  8 10:12:47 openvpn[1541]: 192.168.0.103:58808 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:12:47 openvpn[1541]: 192.168.0.103:58808 TLS Error: TLS handshake failed
Aug  8 10:12:47 openvpn[1541]: 192.168.0.103:58808 SIGUSR1[soft,tls-error] received, client-instance restarting
Aug  8 10:12:51 openvpn[1541]: 192.168.0.103:58575 TLS: Initial packet from [AF_INET]192.168.0.103:58575, sid=436b59f7 5b7749f6
Aug  8 10:12:57 openvpn[1541]: 192.168.0.103:33609 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:12:57 openvpn[1541]: 192.168.0.103:33609 TLS Error: TLS handshake failed
Aug  8 10:12:57 openvpn[1541]: 192.168.0.103:33609 SIGUSR1[soft,tls-error] received, client-instance restarting
Aug  8 10:13:00 openvpn[1541]: 192.168.0.103:50572 TLS: Initial packet from [AF_INET]192.168.0.103:50572, sid=a0d133cb db91db44
Aug  8 10:13:07 openvpn[1541]: 192.168.0.103:39690 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:13:07 openvpn[1541]: 192.168.0.103:39690 TLS Error: TLS handshake failed
Aug  8 10:13:07 openvpn[1541]: 192.168.0.103:39690 SIGUSR1[soft,tls-error] received, client-instance restarting
Aug  8 10:13:10 openvpn[1541]: 192.168.0.103:36061 TLS: Initial packet from [AF_INET]192.168.0.103:36061, sid=fdfa3bfe e6bb1bff
Aug  8 10:13:17 openvpn[1541]: 192.168.0.103:35989 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:13:17 openvpn[1541]: 192.168.0.103:35989 TLS Error: TLS handshake failed

This specific block of logs was from my tablet on WiFi, but I get the same behavior on 4G with my phone. I did have the phone connect up last night after trying 6 times, so something seems a little wonky. Thoughts?

Thanks!
 
i see in my syslog same errors.....this happens mostly between first and second hour runing OpenVPN?
Code: 
Aug 23 11:20:20 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS: soft reset sec=0 bytes=30491417/0 pkts=36936/0
Aug 23 11:20:21 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:20:23 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:20:26 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:20:27 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:20:30 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:20:35 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:20:37 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:20:53 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:21:09 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: local/remote key IDs out of sync (2/3) ID:  [key#0 state=S_START id=2 sid=dcff5fe0 f2b8cc0b] [key#1 state=S_NORMAL_OP id=1 sid=dcff5fe0 f2b8cc0b] [key#2 state=S_UNDEF id=0 sid=00000000 00000000]
Aug 23 11:21:21 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug 23 11:21:21 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS Error: TLS handshake failed
Aug 23 11:21:21 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS: move_session: dest=TM_LAME_DUCK src=TM_ACTIVE reinit_src=1
Aug 23 11:21:24 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: received control packet with stale session-id=dcff5fe0 f2b8cc0b
Aug 23 11:21:38 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: received control packet with stale session-id=dcff5fe0 f2b8cc0b
Aug 23 11:21:42 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: received control packet with stale session-id=dcff5fe0 f2b8cc0b
Aug 23 11:21:51 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: received control packet with stale session-id=dcff5fe0 f2b8cc0b
Aug 23 11:22:06 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: received control packet with stale session-id=dcff5fe0 f2b8cc0b
Aug 23 11:22:12 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: received control packet with stale session-id=dcff5fe0 f2b8cc0b
Aug 23 11:22:21 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS ERROR: received control packet with stale session-id=dcff5fe0 f2b8cc0b
Aug 23 11:22:36 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug 23 11:22:36 openvpn[8306]: xxxxx/xxx.xxx.xxx.xxx:39082 TLS Error: TLS handshake failed
 
Zac F said:
Out of curiosity how long should the TLS take to timeout? I've been unable to connect any of my android devices to VPN because TLS keeps timing out. Here's the log entries:

Code: 
Aug  8 10:12:37 openvpn[1541]: 192.168.0.103:52521 TLS: Initial packet from [AF_INET]192.168.0.103:52521, sid=422a29cb 75c7d516
Aug  8 10:12:47 openvpn[1541]: 192.168.0.103:58808 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:12:47 openvpn[1541]: 192.168.0.103:58808 TLS Error: TLS handshake failed
Aug  8 10:12:47 openvpn[1541]: 192.168.0.103:58808 SIGUSR1[soft,tls-error] received, client-instance restarting
Aug  8 10:12:51 openvpn[1541]: 192.168.0.103:58575 TLS: Initial packet from [AF_INET]192.168.0.103:58575, sid=436b59f7 5b7749f6
Aug  8 10:12:57 openvpn[1541]: 192.168.0.103:33609 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:12:57 openvpn[1541]: 192.168.0.103:33609 TLS Error: TLS handshake failed
Aug  8 10:12:57 openvpn[1541]: 192.168.0.103:33609 SIGUSR1[soft,tls-error] received, client-instance restarting
Aug  8 10:13:00 openvpn[1541]: 192.168.0.103:50572 TLS: Initial packet from [AF_INET]192.168.0.103:50572, sid=a0d133cb db91db44
Aug  8 10:13:07 openvpn[1541]: 192.168.0.103:39690 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:13:07 openvpn[1541]: 192.168.0.103:39690 TLS Error: TLS handshake failed
Aug  8 10:13:07 openvpn[1541]: 192.168.0.103:39690 SIGUSR1[soft,tls-error] received, client-instance restarting
Aug  8 10:13:10 openvpn[1541]: 192.168.0.103:36061 TLS: Initial packet from [AF_INET]192.168.0.103:36061, sid=fdfa3bfe e6bb1bff
Aug  8 10:13:17 openvpn[1541]: 192.168.0.103:35989 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Aug  8 10:13:17 openvpn[1541]: 192.168.0.103:35989 TLS Error: TLS handshake failed

This specific block of logs was from my tablet on WiFi, but I get the same behavior on 4G with my phone. I did have the phone connect up last night after trying 6 times, so something seems a little wonky. Thoughts?

Thanks!
Click to expand...
That's is probably "Extra HMAC Authorization (tls-auth)" direction. Client should be 1 and server 0.
Android have problem with Mashmallow and openvpn client.
You must defind your DNS in your phone and turn off powersavings to get it to work.

Bayern1975 don't hijack others threads for your own purposes!
 
Last edited:
octopus said:
Bayern1975 don't hijack others thread for your own purposes!
Click to expand...

no, i did not hijacked the thread because i have identical errors then member @Zac F.....so i need info what and where have to change something to working without that TLS errors.....:)
 
bayern1975 said:
no, i did not hijacked the thread because i have identical errors then member @Zac F.....so i need info what and where have to change something to working without that TLS errors.....:)
Click to expand...
Why don't you have make your own thread with that question, i have seen it before.
 
You must log in or register to reply here.

Similar threads

B
Unable to establish VPN connection to my PiVPN (ovpn) from my Asus RT-AC86U running Asuswrt-Merlin 386.14
Replies
1
Views
261
eibgrad
eibgrad
T
[Help] Problems setting up OpenVPN
Replies
7
Views
366
Thookie
T
R
Solved RT-AX86U Pro log repeats "WAN_Connection: WAN was restored" while red light keeps on and no Internet connection?
2
Replies
24
Views
3K
Rici
R
J
ovpn-server log errors meaning?
Replies
11
Views
2K
RMerlin
RMerlin
R
Solved At Wits End. OpenVPN Certificate Connection issue with Asus Router
Replies
4
Views
2K
Clark Griswald
Clark Griswald
Similar threads
Thread starter Title Forum Replies Date
D Solved Openvpn client dns Asuswrt-Merlin 2
PR3MIUM WireGuard removing OpenVPN on ASUS Routers ? Asuswrt-Merlin 2
T [Help] Problems setting up OpenVPN Asuswrt-Merlin 7
N dedicated router for OpenVPN Asuswrt-Merlin 4
N Solved OpenVPN Server split tunnell config Asuswrt-Merlin 5
C Connection to router by ip fails while remote over OpenVPN Asuswrt-Merlin 17
S OpenVPN LAN access + one external IP Asuswrt-Merlin 3
J VPN director Multiple OpenVPN clients Asuswrt-Merlin 7
G OpenVPN Server log, is this in error ? Asuswrt-Merlin 7
H Extremely low speed on ac86u with openvpn client Asuswrt-Merlin 7

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 637 (members: 12, guests: 625)
Top