OpenVPN: TLS Error: Unroutable control packet received from (server)

OpenVPN: TLS Error: Unroutable control packet

received from (server)

Source: http://newsgroups.derkeiler.com/Archive/De/de.comp.security.misc/2006−04/msg00552.html

• From: "Michael G. Schmidt" <container@xxxxxxxxxxxx>

• Date: Wed, 26 Apr 2006 19:04:55 +0200

Guten Abend Forum! :)

Ich habe eben schon selbst gesehen, dass ich hier mit OpenVPN gar nicht so
verkehrt bin.
Mein Server ist ein Win XP SP2 Rechner, mein Client ist ein debian sarge
stable.
Nachdem ich den Server gestartet habe (laeuft ohne Fehlermeldung an)
versuche ich mit dem Aufruf openvpn client.conf Kontakt zum Server
aufzunehmen.
Daraufhin bekomme ich folgende Meldungen:
ed Apr 26 18:03:22 2006 OpenVPN
2.0.7 i686−pc−linux [SSL] [LZO] [
EPOLL] built on Apr 21 2006
Wed Apr 26 18:03:22 2006 IMPORTAN
T: OpenVPN's default port number
is now 1194, based on an official
port number assignment by IANA.
OpenVPN 2.0−beta16 and earlier u
sed 5000 as the default port.
Wed Apr 26 18:03:22 2006 WARNING:
file '/home/michael/openvpn−2.0.
7/easy−rsa/keys/michael.key' is g
roup or others accessible
Wed Apr 26 18:03:22 2006 LZO comp
ression initialized
Wed Apr 26 18:03:22 2006 Control
Channel MTU parms [ L:1542 D:138
EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 26 18:03:22 2006 Data Cha
nnel MTU parms [ L:1542 D:1450 EF
:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 26 18:03:22 2006 Local Op
tions hash (VER=V4): '41690919'
Wed Apr 26 18:03:22 2006 Expected
Remote Options hash (VER=V4): '5
30fdded'
Wed Apr 26 18:03:22 2006 NOTE: UI
D/GID downgrade will be delayed b
ecause of −−client, −−pull, or −−

OpenVPN: TLS Error: Unroutable control packet received from (server) 1

 OpenVPN: TLS Error: Unroutable control packet received from (server)
up−delay
Wed Apr 26 18:03:22 2006 UDPv4 li
nk local: [undef]
Wed Apr 26 18:03:22 2006 UDPv4 li
nk remote: 217.251.40.21:1194
Wed Apr 26 18:03:22 2006 TLS: Ini
tial packet from 217.251.40.21:11
94, sid=d315c836 c4dfa0e1
Wed Apr 26 18:03:24 2006 VERIFY n
sCertType ERROR: /C=DE/ST=SH/L=Ki
el/O=Privat/CN=OpenVPN−CA/emailAd
dress=oscar@xxxxxxxxxxxxxx, requi
re nsCertType=SERVER
Wed Apr 26 18:03:24 2006 TLS_ERRO
R: BIO read tls_read_plaintext er
ror: error:14090086:SSL routines:
SSL3_GET_SERVER_CERTIFICATE:certi
ficate verify failed
Wed Apr 26 18:03:24 2006 TLS Erro
r: TLS object −> incoming plainte
xt read error
Wed Apr 26 18:03:24 2006 TLS Erro
r: TLS handshake failed
Wed Apr 26 18:03:24 2006 TCP/UDP:
Closing socket
Wed Apr 26 18:03:24 2006 SIGUSR1[
soft,tls−error] received, process
restarting
Wed Apr 26 18:03:24 2006 Restart
pause, 2 second(s)
Wed Apr 26 18:03:26 2006 IMPORTAN
T: OpenVPN's default port number
is now 1194, based on an official
port number assignment by IANA.
OpenVPN 2.0−beta16 and earlier u
sed 5000 as the default port.
Wed Apr 26 18:03:26 2006 Re−using
SSL/TLS context
Wed Apr 26 18:03:26 2006 LZO comp
ression initialized
Wed Apr 26 18:03:26 2006 Control
Channel MTU parms [ L:1542 D:138
EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 26 18:03:26 2006 Data Cha
nnel MTU parms [ L:1542 D:1450 EF
:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 26 18:03:26 2006 Local Op
tions hash (VER=V4): '41690919'
Wed Apr 26 18:03:26 2006 Expected
Remote Options hash (VER=V4): '5
30fdded'

OpenVPN: TLS Error: Unroutable control packet received from (server) 2

 OpenVPN: TLS Error: Unroutable control packet received from (server)
Wed Apr 26 18:03:26 2006 UDPv4 li
nk local: [undef]
Wed Apr 26 18:03:26 2006 UDPv4 li
nk remote: 217.251.40.21:1194
Wed Apr 26 18:03:26 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:26 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:27 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:27 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:27 2006 TLS: Ini
tial packet from 217.251.40.21:11
94, sid=237d3999 0a3aff44
Wed Apr 26 18:03:28 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:28 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:28 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:28 2006 TLS Erro
r: Unroutable control packet rece
ived from 217.251.40.21:1194 (si=
3 op=P_CONTROL_V1)
Wed Apr 26 18:03:28 2006 VERIFY n
sCertType ERROR: /C=DE/ST=SH/L=Ki
el/O=Privat/CN=OpenVPN−CA/emailAd
dress=oscar@xxxxxxxxxxxxxx, requi
re nsCertType=SERVER
Wed Apr 26 18:03:28 2006 TLS_ERRO
R: BIO read tls_read_plaintext er
ror: error:14090086:SSL routines:
SSL3_GET_SERVER_CERTIFICATE:certi
ficate verify failed
Wed Apr 26 18:03:28 2006 TLS Erro
r: TLS object −> incoming plainte

OpenVPN: TLS Error: Unroutable control packet received from (server) 3

 OpenVPN: TLS Error: Unroutable control packet received from (server)
xt read error
Wed Apr 26 18:03:28 2006 TLS Erro
r: TLS handshake failed
Wed Apr 26 18:03:28 2006 TCP/UDP:
Closing socket
Wed Apr 26 18:03:28 2006 SIGUSR1[soft,tls−error] received, process
restarting
Wed Apr 26 18:03:28 2006 Restartpause, 2 second(s)
Wed Apr 26 18:03:28 2006 SIGINT[hard,init_instance] received, proc

Hat jemand eine Idee wo der Fehler liegen koennte? Die Zeiteinstellungen
sind identisch. Die Zertifikate und Schluessel sind auf dem Server erstellt
worden. Das Zertifikat laeuft erst 2016 ab. Alle Zertifikate sind auf dem
Windows XP Server installiert.
TIA und viele Gruesse,
Michael

OpenVPN: TLS Error: Unroutable control packet received from (server) 4