OpenVPN: cliente Mac não conectando ao servidor Xubuntu

1

Eu tenho tentado configurar uma conexão VPN entre um servidor rodando no Xubuntu 14.04, e o cliente rodando no Mac OSX Yosemite sem sorte. Estou tentando fazer a conexão com o Tunnelblick. Meu Firewall LOG não tem informações relevantes para postar. Eu abri as portas 1194, 443 e 943 para o Mac. Eu não consigo entender o problema. Eu apreciarei toda ajuda, eu não quero ser derrotado por isso.

Aqui está o SERVER.CONF:

mode server  
local 192.168.1.XXX #ip of your openvpn server  
port 1194  
proto udp  
dev tun  
ca ca.crt  
cert reinhardtserver.crt  
cert reinhardtserver.key  
dh dh2048.pem  
server 10.8.0.0 255.255.255.0  
ifconfig 10.8.0.1 255.255.255.0  
push "dhcp-option DOMAIN coryreinhardt.com"  
push "dhcp-option DNS 10.6.11.4"  
ifconfig-pool-persist ipp.txt  
keepalive 10 120  
tls-server  
tls-auth ta.key 0  
comp-lzo  
user nobody  
group nobody  
persist-key  
persist-tun  
status openvpn-status.log  
verb1  
client-to-client   
push "route 192.168.0.0 255.255.255.0"'

CLIENT.CONF:

client  
proto udp  
dev tun  
port 1194  
remote 192.168.1.XXX 1194  
resolv-retry infinite  
nobind  
persist-key  
persist-tun  
;mute-replay-warnings  
tls-client  
ca ca.crt  
cert client1.crt  
key client1.key  
tls-auth ta.key 1  
comp-lzo  
verb 3  

REGISTRO DO TUNNELBLICK:

2015-08-29 20:40:42 *Tunnelblick: openvpnstart starting OpenVPN
2015-08-29 20:40:42 *Tunnelblick: OS X 10.10.5; Tunnelblick 3.5.3 (build 4270.4371); prior version 3.4.2 (build 4055.4161)
2015-08-29 20:40:42 *Tunnelblick: Attempting connection with server using shadow copy; Set nameserver = 1; monitoring connection
2015-08-29 20:40:42 *Tunnelblick: openvpnstart start server.tblk 1337 1 0 1 0 16688 -ptADGNWradsgnw 2.3.6
2015-08-29 20:40:44 *Tunnelblick: openvpnstart log:
 OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

      /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.6/openvpn
      --daemon
      --log
      /Library/Application Support/Tunnelblick/Logs/-SUsers-Sreinhardt-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sserver.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_16688.1337.openvpn.log
      --cd
      /Library/Application Support/Tunnelblick/Users/reinhardt/server.tblk/Contents/Resources
      --config
      /Library/Application Support/Tunnelblick/Users/reinhardt/server.tblk/Contents/Resources/config.ovpn
      --cd
      /Library/Application Support/Tunnelblick/Users/reinhardt/server.tblk/Contents/Resources
      --management
      127.0.0.1
      1337
      --management-query-passwords
      --management-hold
      --script-security
      2
      --up
      /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw
      --down
      /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw

2015-08-29 20:40:43 OpenVPN 2.3.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jul 10 2015
2015-08-29 20:40:43 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
2015-08-29 20:40:43 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2015-08-29 20:40:43 Need hold release from management interface, waiting...
2015-08-29 20:40:44 *Tunnelblick: Established communication with OpenVPN
2015-08-29 20:40:44 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2015-08-29 20:40:44 MANAGEMENT: CMD 'pid'
2015-08-29 20:40:44 MANAGEMENT: CMD 'state on'
2015-08-29 20:40:44 MANAGEMENT: CMD 'state'
2015-08-29 20:40:44 MANAGEMENT: CMD 'bytecount 1'
2015-08-29 20:40:44 MANAGEMENT: CMD 'hold release'
2015-08-29 20:40:44 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2015-08-29 20:40:44 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2015-08-29 20:40:44 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
2015-08-29 20:40:44 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-08-29 20:40:44 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-08-29 20:40:44 Socket Buffers: R=[196724->65536] S=[9216->65536]
2015-08-29 20:40:44 UDPv4 link local: [undef]
2015-08-29 20:40:44 UDPv4 link remote: [AF_INET]192.168.1.236:1194
2015-08-29 20:40:44 MANAGEMENT: >STATE:1440906044,WAIT,,,
2015-08-29 20:41:45 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2015-08-29 20:41:45 TLS Error: TLS handshake failed
2015-08-29 20:41:45 SIGUSR1[soft,tls-error] received, process restarting
2015-08-29 20:41:45 MANAGEMENT: >STATE:1440906105,RECONNECTING,tls-error,,
2015-08-29 20:41:45 MANAGEMENT: CMD 'hold release'
2015-08-29 20:41:45 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2015-08-29 20:41:45 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2015-08-29 20:41:45 Socket Buffers: R=[196724->65536] S=[9216->65536]
2015-08-29 20:41:45 UDPv4 link local: [undef]
2015-08-29 20:41:45 UDPv4 link remote: [AF_INET]192.168.1.236:1194
2015-08-29 20:41:45 MANAGEMENT: >STATE:1440906105,WAIT,,,
2015-08-29 20:42:46 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2015-08-29 20:42:46 TLS Error: TLS handshake failed
2015-08-29 20:42:46 SIGUSR1[soft,tls-error] received, process restarting
2015-08-29 20:42:46 MANAGEMENT: >STATE:1440906166,RECONNECTING,tls-error,,
2015-08-29 20:42:46 MANAGEMENT: CMD 'hold release'
2015-08-29 20:42:46 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2015-08-29 20:42:46 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2015-08-29 20:42:46 Socket Buffers: R=[196724->65536] S=[9216->65536]
2015-08-29 20:42:46 UDPv4 link local: [undef]
2015-08-29 20:42:46 UDPv4 link remote: [AF_INET]192.168.1.236:1194
2015-08-29 20:42:46 MANAGEMENT: >STATE:1440906166,WAIT,,,
2015-08-29 20:42:47 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed
2015-08-29 20:42:47 *Tunnelblick: Disconnecting using 'kill'
2015-08-29 20:42:47 event_wait : Interrupted system call (code=4)
2015-08-29 20:42:47 SIGTERM[hard,] received, process exiting
2015-08-29 20:42:47 MANAGEMENT: >STATE:1440906167,EXITING,SIGTERM,,
2015-08-29 20:42:49 *Tunnelblick: No 'post-disconnect.sh' script to execute
2015-08-29 20:42:49 *Tunnelblick: Expected disconnection occurred.

e aqui está um ifconfig do Xubuntu:

root@reinhardt:/etc/openvpn# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:26:22:1e:c6:58  
      UP BROADCAST MULTICAST  MTU:1500  Metric:1
      RX packets:0 errors:0 dropped:0 overruns:0 frame:0
      TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:1000 
      RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback  
      inet addr:127.0.X.X  Mask:255.0.0.0
      inet6 addr: ::1/128 Scope:Host
      UP LOOPBACK RUNNING  MTU:65536  Metric:1
      RX packets:3290 errors:0 dropped:0 overruns:0 frame:0
      TX packets:3290 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:0 
      RX bytes:308681 (308.6 KB)  TX bytes:308681 (308.6 KB)

wlan0     Link encap:Ethernet  HWaddr 00:26:5e:69:27:0d  
      inet addr:192.168.1.XXX  Bcast:192.168.1.XXX  Mask:255.255.XXX.X
      inet6 addr: 2602:30a:2e8c:9a20:5c1a:7c51:8bcc:8720/64 Scope:Global
      inet6 addr: 2602:30a:2e8c:9a20:226:5eff:fe69:270d/64 Scope:Global
      inet6 addr: fe80::226:5eff:fe69:270d/64 Scope:Link
      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
      RX packets:41514 errors:0 dropped:0 overruns:0 frame:0
      TX packets:16935 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:1000 
      RX bytes:11636203 (11.6 MB)  TX bytes:2545476 (2.5 MB)
    
por youthkiss 30.08.2015 / 06:54

0 respostas