TLS handshake failed about openvpn-install HOT 18 CLOSED

I think the issue might occur from my server, so instead of spamming this github with issues I'll close it then come back when I have a solution @angristan

from openvpn-install.

I also get error when setup my OVH VPS the log same with the one @Octolus post. There is similar problem with Nyr original code. I solved this problem by correcting system and hardware time on my VPS.

The details can be accessed here: Nyr/openvpn-install#158

from openvpn-install.

The certificate can't be verified, can you try to reinstall OpenVPN using the script ?

from openvpn-install.

I did twice now, I can not remember experiencing this issue before (with older scripts).

Using Debian 7.

I'll try using another hosting provider (VULTR) instead of NFO.

from openvpn-install.

And which client are you using ?

from openvpn-install.

OpenVPN Default Client i guess.

from openvpn-install.

tried using asus merlin as well.

Dec 19 02:10:31 openvpn[1003]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 19 02:10:31 openvpn[1003]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Dec 19 02:10:31 openvpn[1003]: UDPv4 link local: [undef]
Dec 19 02:10:31 openvpn[1003]: UDPv4 link remote: [AF_INET]31.186.250.47:1194
Dec 19 02:10:31 openvpn[1003]: TLS: Initial packet from [AF_INET]31.186.250.47:1194, sid=6d928852 19c0370c
Dec 19 02:10:31 openvpn[1003]: VERIFY ERROR: depth=1, error=certificate is not yet valid: CN=ChangeMe
Dec 19 02:10:31 openvpn[1003]: OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Dec 19 02:10:31 openvpn[1003]: TLS_ERROR: BIO read tls_read_plaintext error
Dec 19 02:10:31 openvpn[1003]: TLS Error: TLS object -> incoming plaintext read error
Dec 19 02:10:31 openvpn[1003]: TLS Error: TLS handshake failed
Dec 19 02:10:31 openvpn[1003]: SIGUSR1[soft,tls-error] received, process restarting
Dec 19 02:10:31 openvpn[1003]: Restart pause, 2 second(s)
Dec 19 02:10:33 openvpn[1003]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 19 02:10:33 openvpn[1003]: Socket Buffers: R=[122880->122880] S=[122880->122880]
Dec 19 02:10:33 openvpn[1003]: UDPv4 link local: [undef]
Dec 19 02:10:33 openvpn[1003]: UDPv4 link remote: [AF_INET]31.186.250.47:1194
Dec 19 02:10:33 openvpn[1003]: TLS: Initial packet from [AF_INET]31.186.250.47:1194, sid=c7dc7c46 7ba56fad
Dec 19 02:10:33 openvpn[1003]: VERIFY ERROR: depth=1, error=certificate is not yet valid: CN=ChangeMe
Dec 19 02:10:33 openvpn[1003]: OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Dec 19 02:10:33 openvpn[1003]: TLS_ERROR: BIO read tls_read_plaintext error
Dec 19 02:10:33 openvpn[1003]: TLS Error: TLS object -> incoming plaintext read error
Dec 19 02:10:33 openvpn[1003]: TLS Error: TLS handshake failed
Dec 19 02:10:33 openvpn[1003]: SIGUSR1[soft,tls-error] received, process restarting
Dec 19 02:10:33 openvpn[1003]: Restart pause, 2 second(s)

from openvpn-install.

And here is a screenshot of my router settings @angristan http://i.imgur.com/bgaomsj.png

from openvpn-install.

OpenVPN Default Client i guess.

What ? Which device and OS ?

You should have said it's your router. Maybe the OpenVPN client used is not compatible. Try to remove the tls 1.2 line from the config files

from openvpn-install.

I also tried using Windows 10. I'm trying different services, none seem to work.

Here is a full log: http://pastebin.com/duRuYn78 from my PC Windows 10 @angristan

Friends got the exactly same issue. Could it be server firewall issue? I'm using NFO.

from openvpn-install.

That's obviously a problem with the certificate. Did you modify the client configuration ?

from openvpn-install.

I did not modify anything, i literally just clicked enter during the entire installation then grabbed the certificate. @angristan

from openvpn-install.

Certificate, i mean the client.ovpn and put it in C:\Program Files\OpenVPN\config like I have with all other installations. I have never experienced this issue before.

I'm starting to think it's my server, but seems rather weird if it would be. Debian 7.

from openvpn-install.

That's really weird, I can't see what's wrong. I you try to add a client certificate, and then connect with it, do you have the problem ?

from openvpn-install.

@Octolus can I (we?) know why you think it comes with the server?
Is the server have a fresh install of your OS?

from openvpn-install.

@Octolus If you happen to have the issue again, please check if there is errors at the setup

from openvpn-install.

It is a fresh install yes @Kcchouette i went to install Softether VPN instead and it seems to work fine. Had to enable secure nat in that one, it had that TLS error. After enabling "secure nat" within Softether it worked.

from openvpn-install.

Indeed : "certificate is not yet valid".

from openvpn-install.