Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to setup a test vpn between my home desktop and my laptop. So far I have got the server on the desktop to connect fine but I can not get my laptop to finish the connection. I have tried several different configurations and they all give me the same result. Obviously it has nothing to do with my Client configuration but possibly something on my laptop?

Here is the message I get in the log when it stops then times out and restarts.

Mon Oct 18 20:10:55 2010 UDPv4 link local: [undef]
Mon Oct 18 20:10:55 2010 UDPv4 link remote:
Mon Oct 18 20:11:55 2010 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Oct 18 20:11:55 2010 TLS Error: TLS handshake failed

here are my configurations


port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
ifconfig-pool-persist ipp.txt
push "route"
push "dhcp-option WINS"
push "dhcp-option DNS"
push "dhcp-option DOMAIN"
keepalive 10 120
max-clients 1
status openvpn-status.log
verb 3


proto udp
dev tun
remote 1194
resolv-retry infinite
ca ca.crt
cert client1.crt
key client1.key
verb 3
dev tun

I just need a simple vpn for one user. Am I headed down the right path?

Thanks, Larry

share|improve this question
sorry forgot to include my configurations – user57515 Oct 19 '10 at 0:27
Please learn how to embed preformatted text in your questions (it makes it a lot easier to read configuration files). Documentation on the appropriate syntax is here. – larsks Jan 13 '11 at 1:04
...and it makes the multiline log messages actually intelligible. – larsks Jan 13 '11 at 1:10
  1. Can you telnet 1194?

  2. Have you generated certificates using the software in easy-rsa (AFAICR) in documentation?

share|improve this answer
I can ping and I have generated the certificates. The log message has been the same on my laptop regardless of whether I use certificates or a static key. – user57515 Oct 19 '10 at 15:03
replying to ping doesn't mean that the port is open on the server, check firewall rules – Hubert Kario Oct 19 '10 at 16:06
+1 for @Hubert; this sounds like a network connectivity problem. Replying to ping simply means your system responds to ICMP, but it doesn't tell you that (a) there is something listening on the right port or (b) whether or not there are firewall rules preventing the connection. To answer part of your question, I use OpenVPN all the time for connections between my laptop (and my phone!) and my home network, and it's worked out great. I think you're doing the right thing. – larsks Jan 13 '11 at 1:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.