Re: TLS Handshake errors

jsltech · ‎2016-06-22

Hi,

I am getting the below error when trying to connect to the Router VPN:

Wed Jun 22 19:44:50 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Jun 22 19:44:50 2016 TLS Error: TLS handshake failed
Wed Jun 22 19:44:50 2016 TCP/UDP: Closing socket

I have created a DDNS account and followed the instructions to the letter.

I can see from a look around on the internet that others have had this issue, but not found a fix.

To me, this looks like the generated cert is invalid, but I have no control on it's creation as the router seems to self sign these.

It looks like the cert

Thanks,

John

Adham · ‎2016-12-19

Hi I have the same issue:

WRWRWRWRWRWRWWRWWWWTue Dec 20 03:13:17 2016 us=858655 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 20 03:13:17 2016 us=858686 TLS Error: TLS handshake failed
Tue Dec 20 03:13:17 2016 us=858774 TCP/UDP: Closing socket
Tue Dec 20 03:13:17 2016 us=858798 SIGUSR1[soft,tls-error] received, process restarting
Tue Dec 20 03:13:17 2016 us=858808 Restart pause, 2 second(s)
Tue Dec 20 03:13:19 2016 us=858955 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Dec 20 03:13:19 2016 us=858993 Re-using SSL/TLS context
Tue Dec 20 03:13:19 2016 us=859005 LZO compression initialized
Tue Dec 20 03:13:19 2016 us=859045 Control Channel MTU parms [ L:1590 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Dec 20 03:13:19 2016 us=859068 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Dec 20 03:13:19 2016 us=859080 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:143 ET:32 EL:3 AF:3/1 ]
Tue Dec 20 03:13:19 2016 us=859095 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Dec 20 03:13:19 2016 us=859101 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Dec 20 03:13:19 2016 us=859116 Local Options hash (VER=V4): 'b498be7c'
Tue Dec 20 03:13:19 2016 us=859126 Expected Remote Options hash (VER=V4): '26e19fc0'
Tue Dec 20 03:13:19 2016 us=859135 UDPv4 link local: [undef]
Tue Dec 20 03:13:19 2016 us=859143 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:12974
WRTue Dec 20 03:13:20 2016 us=597824 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:12974, sid=d31899b6 75a263a2
WWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRTue Dec 20 03:13:23 2016 us=62207 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
Tue Dec 20 03:13:23 2016 us=62465 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com
WRWRWRWRWRWRWWRWWWWTue Dec 20 03:14:20 2016 us=63143 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 20 03:14:20 2016 us=63230 TLS Error: TLS handshake failed
Tue Dec 20 03:14:20 2016 us=63469 TCP/UDP: Closing socket
Tue Dec 20 03:14:20 2016 us=63496 SIGUSR1[soft,tls-error] received, process restarting
Tue Dec 20 03:14:20 2016 us=63506 Restart pause, 2 second(s)
Tue Dec 20 03:14:22 2016 us=63595 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Dec 20 03:14:22 2016 us=63632 Re-using SSL/TLS context
Tue Dec 20 03:14:22 2016 us=63645 LZO compression initialized
Tue Dec 20 03:14:22 2016 us=63683 Control Channel MTU parms [ L:1590 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Dec 20 03:14:22 2016 us=63704 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Dec 20 03:14:22 2016 us=63715 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:143 ET:32 EL:3 AF:3/1 ]
Tue Dec 20 03:14:22 2016 us=63730 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Dec 20 03:14:22 2016 us=63737 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Dec 20 03:14:22 2016 us=63750 Local Options hash (VER=V4): 'b498be7c'
Tue Dec 20 03:14:22 2016 us=63760 Expected Remote Options hash (VER=V4): '26e19fc0'
Tue Dec 20 03:14:22 2016 us=63768 UDPv4 link local: [undef]
Tue Dec 20 03:14:22 2016 us=63776 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:12974
WRTue Dec 20 03:14:22 2016 us=449833 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:12974, sid=3ad8a77d bf7a1cff
WWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRTue Dec 20 03:14:24 2016 us=597412 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, name=changeme, emailAddress=mail@netgear.com

Can someone please assist us in this post?

Thanks,
Adham

Adham · ‎2016-12-19

I also followed this https://community.netgear.com/t5/DSL-Modems-Routers/D7000-OpenVPN-stuck-MANAGMENT-STATE-WAIT/m-p/110... but it's still not working, same output

jsltech · ‎2016-12-21

Hi,

The latest firmware update fixed this for my problem. 🙂