OpenVPN connection breaks time to time: TLS Error: local/remote TLS keys are out of sync
We have our own VPN in my workplace. Everyone has its own key. However I am the only one who works on linux, the rest use either Macs or Windows machines. Unfortunately I have not found any good client application for OpenVPN so I am launching it from terminal:
sudo openvpn --config client.ovpn
The problem is that sometimes connection breaks with the following error:
TLS Error: local/remote TLS keys are out of sync: [AF_INET]
and I need to restart it 15-20 times until succesful reconnection occurs. Here is a content of client.ovpn config file.
dev tun
proto udp
remote /*ip-address of server here*/ 1194
client
resolv-retry infinite
ca "ca.crt"
cert "mycrt.crt"
key "mykey.key"
tls-auth "ta.key" 1
remote-cert-tls server
persist-key
persist-tun
verb 3
status-version 3
tls-timeout 120
tun-mtu 1500
fragment 1300
mssfix 1300
linux networking vpn openvpn udp
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
add a comment |
We have our own VPN in my workplace. Everyone has its own key. However I am the only one who works on linux, the rest use either Macs or Windows machines. Unfortunately I have not found any good client application for OpenVPN so I am launching it from terminal:
sudo openvpn --config client.ovpn
The problem is that sometimes connection breaks with the following error:
TLS Error: local/remote TLS keys are out of sync: [AF_INET]
and I need to restart it 15-20 times until succesful reconnection occurs. Here is a content of client.ovpn config file.
dev tun
proto udp
remote /*ip-address of server here*/ 1194
client
resolv-retry infinite
ca "ca.crt"
cert "mycrt.crt"
key "mykey.key"
tls-auth "ta.key" 1
remote-cert-tls server
persist-key
persist-tun
verb 3
status-version 3
tls-timeout 120
tun-mtu 1500
fragment 1300
mssfix 1300
linux networking vpn openvpn udp
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
Have you try to sync the time of your machine?
– Romeo Ninov
Dec 27 '18 at 8:46
@RomeoNinov, no I have not. I have set automatic date-time. The vpn server is located in different place.
– TeamBeam
Dec 27 '18 at 9:05
Install on your machinentpand run it. Because this can be the reason of your problem
– Romeo Ninov
Dec 27 '18 at 9:06
add a comment |
We have our own VPN in my workplace. Everyone has its own key. However I am the only one who works on linux, the rest use either Macs or Windows machines. Unfortunately I have not found any good client application for OpenVPN so I am launching it from terminal:
sudo openvpn --config client.ovpn
The problem is that sometimes connection breaks with the following error:
TLS Error: local/remote TLS keys are out of sync: [AF_INET]
and I need to restart it 15-20 times until succesful reconnection occurs. Here is a content of client.ovpn config file.
dev tun
proto udp
remote /*ip-address of server here*/ 1194
client
resolv-retry infinite
ca "ca.crt"
cert "mycrt.crt"
key "mykey.key"
tls-auth "ta.key" 1
remote-cert-tls server
persist-key
persist-tun
verb 3
status-version 3
tls-timeout 120
tun-mtu 1500
fragment 1300
mssfix 1300
linux networking vpn openvpn udp
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
We have our own VPN in my workplace. Everyone has its own key. However I am the only one who works on linux, the rest use either Macs or Windows machines. Unfortunately I have not found any good client application for OpenVPN so I am launching it from terminal:
sudo openvpn --config client.ovpn
The problem is that sometimes connection breaks with the following error:
TLS Error: local/remote TLS keys are out of sync: [AF_INET]
and I need to restart it 15-20 times until succesful reconnection occurs. Here is a content of client.ovpn config file.
dev tun
proto udp
remote /*ip-address of server here*/ 1194
client
resolv-retry infinite
ca "ca.crt"
cert "mycrt.crt"
key "mykey.key"
tls-auth "ta.key" 1
remote-cert-tls server
persist-key
persist-tun
verb 3
status-version 3
tls-timeout 120
tun-mtu 1500
fragment 1300
mssfix 1300
linux networking vpn openvpn udp
linux networking vpn openvpn udp
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
asked Dec 27 '18 at 7:13
TeamBeamTeamBeam
32
32
Have you try to sync the time of your machine?
– Romeo Ninov
Dec 27 '18 at 8:46
@RomeoNinov, no I have not. I have set automatic date-time. The vpn server is located in different place.
– TeamBeam
Dec 27 '18 at 9:05
Install on your machinentpand run it. Because this can be the reason of your problem
– Romeo Ninov
Dec 27 '18 at 9:06
add a comment |
Have you try to sync the time of your machine?
– Romeo Ninov
Dec 27 '18 at 8:46
@RomeoNinov, no I have not. I have set automatic date-time. The vpn server is located in different place.
– TeamBeam
Dec 27 '18 at 9:05
Install on your machinentpand run it. Because this can be the reason of your problem
– Romeo Ninov
Dec 27 '18 at 9:06
Have you try to sync the time of your machine?
– Romeo Ninov
Dec 27 '18 at 8:46
Have you try to sync the time of your machine?
– Romeo Ninov
Dec 27 '18 at 8:46
@RomeoNinov, no I have not. I have set automatic date-time. The vpn server is located in different place.
– TeamBeam
Dec 27 '18 at 9:05
@RomeoNinov, no I have not. I have set automatic date-time. The vpn server is located in different place.
– TeamBeam
Dec 27 '18 at 9:05
Install on your machine
ntp and run it. Because this can be the reason of your problem– Romeo Ninov
Dec 27 '18 at 9:06
Install on your machine
ntp and run it. Because this can be the reason of your problem– Romeo Ninov
Dec 27 '18 at 9:06
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388037%2fopenvpn-connection-breaks-time-to-time-tls-error-local-remote-tls-keys-are-out%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388037%2fopenvpn-connection-breaks-time-to-time-tls-error-local-remote-tls-keys-are-out%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Have you try to sync the time of your machine?
– Romeo Ninov
Dec 27 '18 at 8:46
@RomeoNinov, no I have not. I have set automatic date-time. The vpn server is located in different place.
– TeamBeam
Dec 27 '18 at 9:05
Install on your machine
ntpand run it. Because this can be the reason of your problem– Romeo Ninov
Dec 27 '18 at 9:06