Hi,
Thanks for your answer. I check my process and show it to a colleague to be sure.
When I replace the first 5 char of the ta.key on my client by some 0, the connection succeed.
Then to be sure I was editing the right file , I put all the line to 0 then the connection failed.
Finally I replace each lines by full 0 line one by one. The connection was successful until the 5th line were replaced by 0.
My ta.key:
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
1bf771e4454d8db1f79f71cfa9548805
857443b7a01aa2ad6354fa62476c784b
0abe99e6d210f4ec2aba861fef64d62b
68cd92ed6474df7e1fc2871ca5f89ac2
c379bd770b3602ecaef603a6b345b6d5
c0ebcf61d058e0864b5326acf4af9fc0
6a54427ef16f4f2bcb16dacd41d6048c
eab7bc1e0447ea16c24690b40f394c4f
f92240e25d607955e21d76c26be16b57
dc54a35cda1c28c926bc765297bde753
df277b570b970aaaf356488a05cd4416
6c64d3b3a010a4869b881494ad7d6a0f
4554db2b4df40b82cfc7fdea85348bba
899311c9c555160cfb9c2db68bbedc41
024866e0742d9ff4156df7619bc1233a
bba52733630b32a6eb58e77794151392
-----END OpenVPN Static key V1-----
My ta.key after edition (it works):
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
c379bd770b3602ecaef603a6b345b6d5
c0ebcf61d058e0864b5326acf4af9fc0
6a54427ef16f4f2bcb16dacd41d6048c
eab7bc1e0447ea16c24690b40f394c4f
f92240e25d607955e21d76c26be16b57
dc54a35cda1c28c926bc765297bde753
df277b570b970aaaf356488a05cd4416
6c64d3b3a010a4869b881494ad7d6a0f
4554db2b4df40b82cfc7fdea85348bba
899311c9c555160cfb9c2db68bbedc41
024866e0742d9ff4156df7619bc1233a
bba52733630b32a6eb58e77794151392
-----END OpenVPN Static key V1-----
Openvpn log with this ta.key:
Wed Dec 4 15:49:39 2013 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 4 15:49:39 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 4 15:49:39 2013 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Dec 4 15:49:39 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Dec 4 15:49:39 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Dec 4 15:49:39 2013 [server] Peer Connection Initiated with [AF_INET]78.41.234.106:443
Wed Dec 4 15:49:41 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Dec 4 15:49:41 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Dec 4 15:49:41 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Dec 4 15:49:41 2013 OPTIONS IMPORT: route options modified
Wed Dec 4 15:49:41 2013 OPTIONS IMPORT: route-related options modified
Wed Dec 4 15:49:41 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Dec 4 15:49:41 2013 ROUTE_GATEWAY 10.24.0.254/255.255.0.0 IFACE=wlan0 HWADDR=c4:85:08:fd:14:43
Wed Dec 4 15:49:41 2013 TUN/TAP device tap0 opened
Wed Dec 4 15:49:41 2013 TUN/TAP TX queue length set to 100
Wed Dec 4 15:49:41 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Dec 4 15:49:41 2013 /sbin/ip link set dev tap0 up mtu 1500
Wed Dec 4 15:49:41 2013 /sbin/ip addr add dev tap0 10.25.8.242/24 broadcast 10.25.8.255
Wed Dec 4 15:49:41 2013 GID set to nogroup
Wed Dec 4 15:49:41 2013 UID set to nobody
Wed Dec 4 15:49:41 2013 Initialization Sequence Completed
My ta.key after edition (not working):
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
c0ebcf61d058e0864b5326acf4af9fc0
6a54427ef16f4f2bcb16dacd41d6048c
eab7bc1e0447ea16c24690b40f394c4f
f92240e25d607955e21d76c26be16b57
dc54a35cda1c28c926bc765297bde753
df277b570b970aaaf356488a05cd4416
6c64d3b3a010a4869b881494ad7d6a0f
4554db2b4df40b82cfc7fdea85348bba
899311c9c555160cfb9c2db68bbedc41
024866e0742d9ff4156df7619bc1233a
bba52733630b32a6eb58e77794151392
-----END OpenVPN Static key V1-----
Openlog with this ta.key:
Wed Dec 4 15:53:57 2013 Authenticate/Decrypt packet error: packet HMAC authentication failed
Wed Dec 4 15:53:57 2013 TLS Error: incoming packet authentication failed from [AF_INET]78.41.234.106:443
Wed Dec 4 15:53:57 2013 Fatal TLS error (check_tls_errors_co), restarting
Wed Dec 4 15:53:57 2013 SIGUSR1[soft,tls-error] received, process restarting
Wed Dec 4 15:53:57 2013 Restart pause, 5 second(s)
Iām sure of my test and they were validated with my team.
Thanks for reading me.
Best regards,
