Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

The server log when the connection gets refused:

Thu Sep  1 10:35:14 2011 someuser/my.ip.add.res:41091 PUSH: Received control message: 'PUSH_REQUEST'
Thu Sep  1 10:35:14 2011 someuser/my.ip.add.res:41091 SENT CONTROL [someuser]: 'PUSH_REPLY,route,dhcp-option DNS,route-gateway,ping 10,ping-restart 120,ifconfig' (status=1)
Thu Sep  1 10:35:14 2011 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)

On Android I am using tap device. In Openvpn -> advanced Settings I have specified the location of ta.key file.

Logcat output from Adnroid device:

I/mtpd    ( 2509): Using protocol openvpn
I/mtpd    ( 2509): Starting openvpn (pppox = -1)
I/mtpd    ( 2509): openvpn started (pid = 2511)
I/openvpn ( 2288): WARNING: you are using user/group/chroot/setcon without persist-tun -- this may cause restarts to fail
I/openvpn ( 2288): WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
I/openvpn ( 2288): NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
I/openvpn ( 2288): WARNING: file '/mnt/sdcard/key/ta.key' is group or others accessible
I/openvpn ( 2288): Control Channel Authentication: using '/mnt/sdcard/key/ta.key' as a OpenVPN static key file
I/openvpn ( 2288): LZO compression initialized
I/openvpn ( 2288): NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
I/openvpn ( 2288): UDPv4 link local: [undef]
I/openvpn ( 2288): UDPv4 link remote: my.ip.add.res:41111
I/openvpn ( 2288): [server] Peer Connection Initiated with my.ip.add.res:41111

Note: my.ip.add.res is the server ip address.

share|improve this question
Is your local iptables FW blocking outgoing connections ? –  Izac Sep 1 '11 at 5:29
What's your OpenVPN config look like (strip any sensitive parts)? Can you repeat the test with the server's logging verbosity turned up (say, verb 5)? –  Shane Madden Sep 1 '11 at 5:36
I have not specified any rules for iptables on Android. And my client network firewall isn't blocking anything, as another desktop device, which is on the same network, connects with the openvpn server without any issue. –  nixnotwin Sep 1 '11 at 8:03
Are you trying to connect over a GSM/UMTS Connection or WLAN ? –  Izac Sep 1 '11 at 10:36
Both, tried it several time without any success. –  nixnotwin Sep 1 '11 at 10:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.