Problem with OpenVPN client - TLS failed

RouterOS General
1

Hello, I have problem with connect to OpenVPN server.
When I try to connect I have an error “terminating - TLS failed”.

My config:
/interface ovpn-client
add certificate=ca.crt_0 cipher=aes128 connect-to=server mac-address=02:6D:CB:4E:7F:91 name=ovpn-out1 password=pass user=login

Log:
12:23:50 ovpn,info ovpn-out1: initializing…
12:23:50 ovpn,info ovpn-out1: connecting…
12:23:50 ovpn,debug,packet sent P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=92bf544375599336 pid=0 DATA len=0
12:23:50 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=7ac889768f8720fa [0 sid=92bf544375599336] pid=0 DATA len=0
12:23:50 ovpn,debug,packet sent P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=92bf544375599336 [0 sid=7ac889768f8720fa] pid=1 DATA len=0
12:23:50 ovpn,debug ovpn-out1: disconnected
12:23:50 ovpn,info ovpn-out1: terminating… - TLS failed
12:23:50 ovpn,info ovpn-out1: disconnected

I’m asking for help in solving the problem.
Thank you in advance.

2

Hi,

what about the remote side?
Any logs from there?

Regards,
Ape

3

Log from server:
Wed Dec 19 22:18:54 2018 us=837802 IP:58497 TLS: Initial packet from [AF_INET]IP:58497, sid=40f2de8f a1c8edaa
Wed Dec 19 22:18:54 2018 us=848374 IP:58497 Connection reset, restarting [0]
Wed Dec 19 22:18:54 2018 us=848392 IP:58497 SIGUSR1[soft,connection-reset] received, client-instance restarting
Wed Dec 19 22:18:54 2018 us=848458 TCP/UDP: Closing socket

4

Hi,

Currently unsupported OpenVPN features:

UDP mode
LZO compression
TLS authentication
authentication without username/password

From:
https://wiki.mikrotik.com/wiki/Manual:Interface/OVPN

5

Hi everyone,
Linux server side “openvpn server conf” must be like:

port 1194
proto tcp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth sha1 #this area mikrotik auth and cipper section options required
#tls-auth ta.key 0 # TLS MUST BE CLOSED
topology subnet
server 10.8.0.0 255.255.255.0 #You can change this ip range and subnet > :slight_smile:
ifconfig-pool-persist ipp.txt
push “redirect-gateway def1 bypass-dhcp”
push “dhcp-option DNS 8.8.8.8”
push “dhcp-option DNS 8.8.4.4”
keepalive 10 120
cipher AES-256-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 5
crl-verify crl.pem

this file your server road = /etc/openvpn/server.conf
And you are using this Auto Script for OpenVpn Setup https://github.com/Nyr/openvpn-install

Best regards..