When OpenVPN sends a control packet to its peer, it expects an acknowledgement in 2 seconds by default. Which of the following options changes the timeout period to 5 seconds?

Question

Options

• A-- tls-timeout 5
• B-- tls- timeout 500
• C-- tls- timer 5
• D-- tls- timer 500

• A
  92% (22)
• B
  4% (1)
• C
  4% (1)

Explanation

Option A (--tls-timeout 5) is correct because OpenVPN uses this exact flag to set the TLS control channel packet retransmission timeout in seconds - passing 5 changes the default 2-second window to 5 seconds.

Why the distractors fail:

• B (--tls-timeout 500) uses the right flag name but the wrong unit - 500 would mean 500 seconds, not 5; OpenVPN takes whole seconds, not milliseconds.
• C (--tls-timer 5) uses the wrong flag name entirely - --tls-timer is not a valid OpenVPN option.
• D (--tls-timer 500) compounds both errors: wrong flag name and wrong value.

Memory tip: Think "timeout, not timer" - OpenVPN controls how long to wait with --tls-timeout, and the value is always in seconds (so 5 = 5 seconds, never 5 × 100).

No community discussion yet for this question.