Openvpn not working

[metekii]

when ı try to openvpn ı get this error do you have any solutions

2022-06-20 04:24:57 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2022-06-20 04:24:57 TLS Error: TLS handshake failed
2022-06-20 04:24:57 SIGUSR1[soft,tls-error] received, process restarting 2022-06-20 04:24:57 Restart pause, 5 second(s)

ı use virtual machine

 

[mrcrossroads]

when ı try to openvpn ı get this error do you have any solutions

2022-06-20 04:24:57 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2022-06-20 04:24:57 TLS Error: TLS handshake failed
2022-06-20 04:24:57 SIGUSR1[soft,tls-error] received, process restarting 2022-06-20 04:24:57 Restart pause, 5 second(s)

ı use virtual machine

I could be wrong, but the pros here are probably going to ask you for more details. What OS/distro/DE are you running and in what VM? Version of openVPN, settings etc. Just a few I can think of off the top of my head.

 

[Lord Boltar]

Generally this is usually the result of few things
A perimeter firewall on the server's network is filtering out incoming OpenVPN packets (by default OpenVPN uses UDP or TCP port number 1194).
A software firewall running on the OpenVPN server machine itself is filtering incoming connections on port 1194. Be aware that many OSes will block incoming connections by default, unless configured otherwise.
A NAT gateway on the server's network does not have a port forward rule for TCP/UDP 1194 to the internal address of the OpenVPN server machine.
The OpenVPN client config does not have the correct server address in its config file. The remote directive in the client config file must point to either the server itself or the public IP address of the server network's gateway.
Another possible cause is that the windows firewall is blocking access for the openvpn.exe binary. You may need to whitelist (add it to the "Exceptions" list) it for OpenVPN to work.

 

[arigato]

I have the same error.
Iranian regime is trying to shut us down.
is there any way around this?
I currently have access to my server and I can reconfigure openvpn. but I don't know what to do.
any help would be appreciated

 

[Condobloke]

@arigato , you would do well to open a fresh topic....you will get more responses.

 

[Stellaris]

I have the same error.
Iranian regime is trying to shut us down.
is there any way around this?
I currently have access to my server and I can reconfigure openvpn. but I don't know what to do.
any help would be appreciated

Try to use tor. I am running a snowflake proxy. That way, even if they try to block vpns, you will be able to communicate

 

[Condobloke]

@arigato has not been seen or heard of since since Sept 23, 2022

@Stellaris, there is better than even chance that your words of wisdom are falling on deaf ears. Good try, though !.

 

[arigato]

Try to use tor. I am running a snowflake proxy. That way, even if they try to block vpns, you will be able to communicate

Thank you for running snowflake. but they somehow managed to block it. (it won't bootstrap even with bridges).
a friend told me that they watch IPs and repetitive IPs will be blocked. (I am not sure about this)

I have access to internet using other vpns (which every day gets blocked and we should look for new ones)

My question is how they recognise the openvpn server that only I am running and using (on a private droplet) and therefore is not repetitve in isp level.
Problem with openvpn and recently outlinevpn is somehow they can monitor the trafic and recognise it relates to a vpn.
I know people can make vpns that it is undetectable on the surface and people use it until they detect it by the ip.
I want to make such a vpn to use it privately (friends and family), so it never gets compromised.

 

[Condobloke]

@arigato, good to see you are still with us.

Again....a new topic will open up many more people to see your problem

I cannot guarantee a solution for you....but I can guarantee it will be exposed to more people

 

[Lord Boltar]

Thank you for running snowflake. but they somehow managed to block it. (it won't bootstrap even with bridges).
a friend told me that they watch IPs and repetitive IPs will be blocked. (I am not sure about this)

I have access to internet using other vpns (which every day gets blocked and we should look for new ones)

My question is how they recognise the openvpn server that only I am running and using (on a private droplet) and therefore is not repetitve in isp level.
Problem with openvpn and recently outlinevpn is somehow they can monitor the trafic and recognise it relates to a vpn.
I know people can make vpns that it is undetectable on the surface and people use it until they detect it by the ip.
I want to make such a vpn to use it privately (friends and family), so it never gets compromised.

The VPN traffic can only be monitored if the VPN leaks the real IP address information about the user (DNS or WebRTC leaks), uses weak encryption that is easily crackable, the VPN server itself has been compromised allowing the VPN users browsing habits to be monitored in real-time, the VPN connection isn’t protected against failure using a Kill Switch or the VPN keeps logs which can be used under a court order to see what the VPN user has been doing.

Also see - https://kifarunix.com/install-and-setup-openvpn-server-on-ubuntu-20-04/

 

[Stellaris]

they watch IPs and repetitive IPs will be blocked

Strange. Maybe because snowflake uses WebRTC, sorry I wish I had another way to help.

 

[Lord Boltar]

Strange. Maybe because snowflake uses WebRTC, sorry I wish I had another way to help.

You can disable WebRTC in Firefox by using this extension - https://addons.mozilla.org/en-US/firefox/addon/happy-bonobo-disable-webrtc/
I use it and it works once installed then go to https://vpntester.org/en/webrtc-leak-test-tool/?vltp_test_id=719508286&vltp_id=2
to test for WebRTC Leak

 

[forester]

@Lord Boltar -- thanks for the links!

 

[Condobloke]

On Brave Browser, or Chrome....

WebRTC Leak Shield

A webrtc leak test can run from the browser...easily and simply

A dns leak test can also be run easily and simply from the browser

It works.

 

[Stellaris]

You can disable WebRTC in Firefox by using this extension - https://addons.mozilla.org/en-US/firefox/addon/happy-bonobo-disable-webrtc/
I use it and it works once installed then go to https://vpntester.org/en/webrtc-leak-test-tool/?vltp_test_id=719508286&vltp_id=2
to test for WebRTC Leak

Thanks I will try these now

 

[Anonymous123]

when ı try to openvpn ı get this error do you have any solutions

2022-06-20 04:24:57 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2022-06-20 04:24:57 TLS Error: TLS handshake failed
2022-06-20 04:24:57 SIGUSR1[soft,tls-error] received, process restarting 2022-06-20 04:24:57 Restart pause, 5 second(s)

ı use virtual machine

It could be just a error when you get into the page,I recommend you to check your settings or something like that