If you getting error message
continuously you should check below things
Client and Server date/time
Client Virus guard or Firewall
Common name of the CA certificate
Routing entry of the server.conf
Client and server date and time should
be corrected and same. Then If your client machine having virus
guard then you should disable it and should allowed firewall settings
for VPN connection.
If you getting error continuously,
either your CA certificate common name have space such as “Technical
Division” or incorrect routing pushes to client.
Recreate CA certificate and put common
name without space. Then try to connect to VPN server. But if you
failed then checked the server configuration file.
There you must push the route which
does not include the server IP address.
For ex :
My VPN server IP address 192.168.2.30
If you push below route to client then
TLS error will generate
push "route 192.168.2.0
255.255.255.0" This is confusing entry which will generate TLS
error.
You must push route without except
server IP.
Ex: push "route 192.168.2.0
255.255.255.240"
push "route 192.168.2.33
255.255.255.224"
Like wise you should push route
accordingly. But remember not to push route which include server
IP address.
This solution has
resolved TLS handshake failed for me. Server OS is Cent OS 6.3
