Community discussions

MikroTik App
 
WojtusW5
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 94
Joined: Mon Oct 02, 2017 1:25 pm

Problem with OpenVPN client - TLS failed

Thu Dec 20, 2018 2:25 pm

Hello, I have problem with connect to OpenVPN server.
When I try to connect I have an error "terminating - TLS failed".

My config:
/interface ovpn-client
add certificate=ca.crt_0 cipher=aes128 connect-to=server mac-address=02:6D:CB:4E:7F:91 name=ovpn-out1 password=pass user=login

Log:
12:23:50 ovpn,info ovpn-out1: initializing...
12:23:50 ovpn,info ovpn-out1: connecting...
12:23:50 ovpn,debug,packet sent P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=92bf544375599336 pid=0 DATA len=0
12:23:50 ovpn,debug,packet rcvd P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=7ac889768f8720fa [0 sid=92bf544375599336] pid=0 DATA len=0
12:23:50 ovpn,debug,packet sent P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=92bf544375599336 [0 sid=7ac889768f8720fa] pid=1 DATA len=0
12:23:50 ovpn,debug ovpn-out1: disconnected <TLS failed>
12:23:50 ovpn,info ovpn-out1: terminating... - TLS failed
12:23:50 ovpn,info ovpn-out1: disconnected

I'm asking for help in solving the problem.
Thank you in advance.
 
Ape
Member Candidate
Member Candidate
Posts: 177
Joined: Sun Oct 06, 2013 3:32 pm
Location: Freiburg, Germany
Contact:

Re: Problem with OpenVPN client - TLS failed

Fri Dec 21, 2018 12:36 pm

Hi,

what about the remote side?
Any logs from there?

Regards,
Ape
 
WojtusW5
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 94
Joined: Mon Oct 02, 2017 1:25 pm

Re: Problem with OpenVPN client - TLS failed

Fri Dec 21, 2018 5:59 pm

Log from server:
Wed Dec 19 22:18:54 2018 us=837802 IP:58497 TLS: Initial packet from [AF_INET]IP:58497, sid=40f2de8f a1c8edaa
Wed Dec 19 22:18:54 2018 us=848374 IP:58497 Connection reset, restarting [0]
Wed Dec 19 22:18:54 2018 us=848392 IP:58497 SIGUSR1[soft,connection-reset] received, client-instance restarting
Wed Dec 19 22:18:54 2018 us=848458 TCP/UDP: Closing socket
 
edos
just joined
Posts: 1
Joined: Mon Feb 18, 2019 11:18 pm

Re: Problem with OpenVPN client - TLS failed

Mon Feb 18, 2019 11:21 pm

Hi,

Currently unsupported OpenVPN features:

UDP mode
LZO compression
TLS authentication
authentication without username/password

From:
https://wiki.mikrotik.com/wiki/Manual:Interface/OVPN
 
eminkaplan
just joined
Posts: 4
Joined: Sat May 20, 2017 6:28 am

Re: Problem with OpenVPN client - TLS failed

Mon Apr 08, 2019 12:50 am

Hi everyone,
Linux server side "openvpn server conf" must be like:
port 1194
proto tcp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth sha1 #this area mikrotik auth and cipper section options required
#tls-auth ta.key 0 # TLS MUST BE CLOSED
topology subnet
server 10.8.0.0 255.255.255.0 #You can change this ip range and subnet :)
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 5
crl-verify crl.pem
this file your server road = /etc/openvpn/server.conf
And you are using this Auto Script for OpenVpn Setup https://github.com/Nyr/openvpn-install

Best regards..

Who is online

Users browsing this forum: Amazon [Bot] and 136 guests