Re: Timeout for VPN connections

[Dan Williams <dcbw redhat com>]

On Tue, 2015-04-07 at 17:40 +0200, Franck Routier (perso) wrote:
> Le 07/04/2015 16:41, Dan Williams a écrit :
> > On Tue, 2015-04-07 at 12:14 +0200, Franck Routier (perso) wrote:
> > > Hi list,
> > >
> > > I have a problem with a (open)VPN connection that times out with Network
> > > Manager, but will work fine with command line openvpn.
> > > It will take a looooong time (2-3 minutes), but it will finally work.
> > Any idea why it takes so long?  I'm not against bumping the timeout, I'm
> > just curious.  It seems like 40 seconds with OpenVPN would either be
> > extreme latency on the link, high packet loss, or a very loaded server?
> I don't really know, as I don't have access to the server, but the main 
> reason is that the TLS connection times out :
>
> UDPv4 link local: [undef]
> UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
> TLS Error: TLS key negotiation failed to occur within 60 seconds (check 
> your network connectivity)
> TLS Error: TLS handshake failed
> SIGUSR1[soft,tls-error] received, process restarting
>
> until it eventually works...
>
> This makes for a long connection time.

How about 150 seconds?  That seems pretty reasonable to me...

Dan