Re: [tunnelblick-discuss] TLS Error: Unroutable control packet received from

[Jonathan K. Bullard]

The first problem that happened was:

2013-05-14 09:10:50 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2013-05-14 09:10:50 TLS Error: TLS handshake failed

That caused OpenVPN to restart -- to try to connect again.

This is most likely caused by a problem with the VPN server.

You may need to contact your VPN service provider. That is the organization which gave you your configuration files, and perhaps a username and password, and to which you are probably paying a fee for VPN service. For more information, please see  Getting VPN Service.

On Mon, May 13, 2013 at 7:15 PM, <free...@gmail.com> wrote:

Hi All,

My openvpn has been working fine until today and nothing has changed that I'm aware off in the last 24 hours and I keep getting errors and it will not connect...

I'm running the following and would like to know if anyone can assist ?

Thank you

*Tunnelblick: OS X 10.8.3; Tunnelblick 3.3beta50 (build 3302); prior version 3.3beta46 (build 3281); Admin user

Configuration file for /Library/Application Support/Tunnelblick/Shared/SYN VPN.tblk:

dev tun
tls-client

remote xxxxxxxxxx 1194

# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)

#float

# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

redirect-gateway

# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.

#dhcp-option DNS DNS_IP_ADDRESS

pull

proto udp
script-security 2

ca ca.crt

comp-lzo

reneg-sec 0

auth-user-pass



================================================================================

Tunnelblick Log:

2013-05-14 09:09:50 *Tunnelblick: OS X 10.8.3; Tunnelblick 3.3beta50 (build 3302); prior version 3.3beta46 (build 3281)
2013-05-14 09:09:50 *Tunnelblick: Attempting connection with SYN VPN; Set nameserver = 1; monitoring connection
2013-05-14 09:09:50 *Tunnelblick: openvpnstart start SYN\ VPN.tblk 1337 1 0 3 0 49 -atADGNWradsgnw
2013-05-14 09:09:50 *Tunnelblick: openvpnstart log:
     Loading tun.kext
    
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
    
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.2.1/openvpn
          --cd
          /Library/Application Support/Tunnelblick/Shared/SYN VPN.tblk/Contents/Resources
          --daemon
          --management
          127.0.0.1
          1337
          --config
          /Library/Application Support/Tunnelblick/Shared/SYN VPN.tblk/Contents/Resources/config.ovpn
          --log
          /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SSYN VPN.tblk-SContents-SResources-Sconfig.ovpn.1_0_3_0_49.1337.openvpn.log
          --management-query-passwords
          --management-hold
          --script-security
          2
          --up
          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w -d -atADGNWradsgnw
          --down
          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m -w -d -atADGNWradsgnw
          --up-restart

2013-05-14 09:09:50 *Tunnelblick: Established communication with OpenVPN
2013-05-14 09:09:50 *Tunnelblick: Obtained VPN username and password from the Keychain
2013-05-14 09:09:50 *Tunnelblick: openvpnstart starting OpenVPN:
                    *                    /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.2.1/openvpn --cd /Library/Application Support/Tunnelblick/Shared/SYN VPN.tblk/Contents/Resources --daemon --management 127.0.0.1 1337 --config /Library/Application Support/Tunnelblick/Shared/SYN VPN.tblk/Contents/Resources/config.ovpn --log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SSYN VPN.tblk-SContents-SResources-Sconfig.ovpn.1_0_3_0_49.1337.openvpn.log --management-query-passwords --management-hold --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w -d -atADGNWradsgnw --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m -w -d -atADGNWradsgnw --up-restart
2013-05-14 09:09:50 OpenVPN 2.2.1 i386-apple-darwin10.8.0 [SSL] [LZO2] [PKCS11] [eurephia] built on May 11 2013
2013-05-14 09:09:50 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
2013-05-14 09:09:50 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2013-05-14 09:09:50 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2013-05-14 09:09:50 LZO compression initialized
2013-05-14 09:09:50 UDPv4 link local (bound): [undef]:1194
2013-05-14 09:09:50 UDPv4 link remote: xxxxxxxxxx:1194
2013-05-14 09:09:58 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2013-05-14 09:10:50 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2013-05-14 09:10:50 TLS Error: TLS handshake failed
2013-05-14 09:10:50 SIGUSR1[soft,tls-error] received, process restarting
2013-05-14 09:10:50 *Tunnelblick: No 'reconnecting.sh' script to execute
2013-05-14 09:10:50 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
2013-05-14 09:10:50 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2013-05-14 09:10:50 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2013-05-14 09:10:50 LZO compression initialized
2013-05-14 09:10:50 UDPv4 link local (bound): [undef]:1194
2013-05-14 09:10:50 UDPv4 link remote: xxxxxxxxxxx:1194
2013-05-14 09:10:51 TLS Error: Unroutable control packet received from xxxxxxxxxxxxx:1194 (si=3 op=P_CONTROL_V1)
2013-05-14 09:10:52 TLS Error: Unroutable control packet received from xxxxxxxxxxxxx:1194 (si=3 op=P_CONTROL_V1)
2013-05-14 09:10:52 TLS Error: Unroutable control packet received from xxxxxxxxxxxxx:1194 (si=3 op=P_CONTROL_V1)
2013-05-14 09:10:53 TLS Error: Unroutable control packet received from xxxxxxxxxxxxx:1194 (si=3 op=P_CONTROL_V1)
2013-05-14 09:10:54 TLS Error: Unroutable control packet received from xxxxxxxxxxxxx:1194 (si=3 op=P_CONTROL_V1)
2013-05-14 09:10:54 TLS Error: Unroutable control packet received from xxxxxxxxxxxxx:1194 (si=3 op=P_CONTROL_V1)
2013-05-14 09:10:57 TLS Error: Unroutable control packet received from xxxxxxxxxxxxx:1194 (si=3 op=P_CONTROL_V1)

================================================================================

Console Log:

2013-05-14 08:54:46 Tunnelblick[661] DEBUG: menuExtrasWereAddedHandler: invoked
2013-05-14 08:54:48 Tunnelblick[661] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-SYN VPN' account = 'username'
2013-05-14 08:54:48 Tunnelblick[661] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-SYN VPN' account = 'password'
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: Entered
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 44030464
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: killAllConnectionsIncludingDaemons: has checked for active daemons
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: includeDaemons = 0; noUnknownOpenVPNsRunning = 1; noActiveDaemons = 1
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: killAllConnectionsIncludingDaemons: will use killAll
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: killAllConnectionsIncludingDaemons: requested killAll
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: Entered
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 44030464
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: Entered
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 44030464
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: Entered
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 44030464
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: Entered
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 44030464
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: Entered
2013-05-14 08:56:01 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 44030464
2013-05-14 08:56:02 Tunnelblick[661] DEBUG: killAllConnectionsIncludingDaemons: killAll finished
2013-05-14 08:56:02 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: Entered
2013-05-14 08:56:02 Tunnelblick[661] DEBUG: cancelAllIPCheckThreadsForConnection: No active threads for connection 44030464
2013-05-14 09:09:50 Tunnelblick[661] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-SYN VPN' account = 'username'
2013-05-14 09:09:50 Tunnelblick[661] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-SYN VPN' account = 'password'

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at http://groups.google.com/group/tunnelblick-discuss?hl=en-US.
For more options, visit https://groups.google.com/groups/opt_out.