Why is one client not connecting to OpenVpN?

Question

Android

Hello everyone, I recently wrote about a vpn client that has a source on android. Unfortunately, I found only one source that works specifically for OpenVPN and I'm going to make a client for employees. But here's the problem, this particular client does not connect to OpenVPN with the Tls handshake failed error. In general, the problem with the handshake, although if I import the same file into the official version of OpenVPN https://play.google.com/store/apps/details?id=net....
Then everything connects right away and there are no problems. I don’t even know what to try to configure, I’ve already tried a lot (I’ve been doing a simple VPN connection for a week ...)

Here is the source of the application itself, which has a library for working with OpenVPN
https://github.com/schwabe/ics-openvpn
Please tell me how to fix this.
Error log https://pastebin.com/xgmRPb12
But the .ovpn file itself can be connected through it https://pastebin.com/XKMvBV7a

Is there an option to fix the problem or maybe you know another library for working with OpenVPN (Everyone uses ics -openvpn at least those that I found.) If you know another library or another version of the VPN server client with source and library for Android.

Answer 1

What's wrong with the official version, if everything works on it? Why do you need

source on android

. In any case, any

source on android

will only be a wrapper over the original OpenVPN, the source of which no one hides .
By the way, doesn't it bother you that you have exposed the user's private key in the config? Keys could be cut.

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

says that you most likely have communication problems. Those. the client does not see the server over the network. The server may not be available. Perhaps the client has problems with UDP exchange, try switching OpenVPN to TCP. Personally, I have come across the fact that some clients, for reasons beyond their control, cannot connect via UDP. To get around this problem, I raised the "backup" openvpn to TCP on port 443.
It would be nice to test the availability of the server port in other ways from this problematic client.
If the problem was in cryptography, then the errors would be of a different kind.