[Resolved] Client : AUTH_FAILED / Server : TLS Auth Error

juanlmera

Good day,
It´s my first time with OpenVPN, after some problems I managed to lift the server.
I try connect with Windows 8, but i can´t do it. Is possible to obtain guidance from you?

Thanks for your help,

Attached logs and client configuration

Client log error
----------------
Fri Dec 13 15:37:16 2013 OpenVPN 2.3.2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Fri Dec 13 15:37:16 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Dec 13 15:37:16 2013 Need hold release from management interface, waiting...
Fri Dec 13 15:37:16 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Dec 13 15:37:16 2013 MANAGEMENT: CMD 'state on'
Fri Dec 13 15:37:16 2013 MANAGEMENT: CMD 'log all on'
Fri Dec 13 15:37:16 2013 MANAGEMENT: CMD 'hold off'
Fri Dec 13 15:37:16 2013 MANAGEMENT: CMD 'hold release'
Fri Dec 13 15:37:16 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 13 15:37:17 2013 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Dec 13 15:37:17 2013 UDPv4 link local: [undef]
Fri Dec 13 15:37:17 2013 UDPv4 link remote: [AF_INET]20x.9x.1xx.53:1194
Fri Dec 13 15:37:17 2013 MANAGEMENT: >STATE:1386967037,WAIT,,,
Fri Dec 13 15:37:17 2013 MANAGEMENT: >STATE:1386967037,AUTH,,,
Fri Dec 13 15:37:17 2013 TLS: Initial packet from [AF_INET]20x.9x.1xx.53:1194, sid=b7c8b276 10f483a3
Fri Dec 13 15:37:17 2013 VERIFY OK: depth=1, C=EC, ST=Guayas, L=Guayaquil, O=MULTIRAICES, emailAddress=vpnadmin@multiraices.com
Fri Dec 13 15:37:17 2013 VERIFY OK: depth=0, C=EC, ST=Guayas, L=Guayaquil, O=MULTIRAICES, OU=Office, CN=grupo_a_srv, emailAddress=vpnadmin@multiraices.com
Fri Dec 13 15:37:17 2013 Data Channel Encrypt: Cipher 'DES-CBC' initialized with 64 bit key
Fri Dec 13 15:37:17 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 13 15:37:17 2013 Data Channel Decrypt: Cipher 'DES-CBC' initialized with 64 bit key
Fri Dec 13 15:37:17 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 13 15:37:17 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Dec 13 15:37:17 2013 [grupo_a_srv] Peer Connection Initiated with [AF_INET]20x.9x.1xx.53:1194:1194
Fri Dec 13 15:37:18 2013 MANAGEMENT: >STATE:1386967038,GET_CONFIG,,,
Fri Dec 13 15:37:19 2013 SENT CONTROL [grupo_a_srv]: 'PUSH_REQUEST' (status=1)
Fri Dec 13 15:37:19 2013 AUTH: Received control message: AUTH_FAILED
Fri Dec 13 15:37:19 2013 SIGUSR1[soft,auth-failure] received, process restarting

Server log Error
----------------
Fri Dec 13 15:37:22 2013 20x.9x.1xx.53:1194:54633 TLS Auth Error: --client-config-dir authentication failed for common name 'grupo_a_cliente' file='/etc/openvpn/servers/Server_Client/ccd/grupo_a_cliente'

Client file config:
----------------
client
dev tun
proto udp
remote 20x.9x.1xx.53 1194
# remote-random
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert grupo_a_cliente.crt
key grupo_a_cliente.key
cipher DES-CBC
comp-lzo
verb 3

juanlmera

debbie10t wroteHi,

please post your server config & log.

My server config
----------------
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:50:56:a7:6c:ae brd ff:ff:ff:ff:ff:ff
inet 192.168.15.2/24 brd 192.168.15.255 scope global eth0
inet6 fe80::250:56ff:fea7:6cae/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:50:56:a7:6c:af brd ff:ff:ff:ff:ff:ff
inet 2xx.9x.1xx.53/28 brd 2xx.9x.1xx.63 scope global eth1
inet6 fe80::250:56ff:fea7:6caf/64 scope link
valid_lft forever preferred_lft forever
6: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
link/[65534]
inet 10.10.15.1 peer 10.10.15.2/32 scope global tun0

Server_Client.conf
------------------

port 1194
proto udp
dev tun0
ca keys/grupo_a/ca.crt
cert keys/grupo_a/grupo_a_srv.crt
key keys/grupo_a/grupo_a_srv.key
dh keys/grupo_a/dh2048.pem
server 10.10.15.0 255.255.255.0
crl-verify keys/grupo_a/crl.pem
cipher DES-CBC
user nobody
group adm
status servers/Server_Client/logs/openvpn-status.log
log-append servers/Server_Client/logs/openvpn.log
verb 2
mute 20
max-clients 10
keepalive 10 120
client-config-dir /etc/openvpn/servers/Server_Client/ccd
comp-lzo
persist-key
persist-tun
ccd-exclusive
push "route 192.168.15.0 255.255.255.0"
push "dhcp-option DNS 192.168.15.128"

Log server: /etc/openvpn/servers/Server_Client/logs/openvpn.log
---------------------------------------------------------------
Fri Dec 13 17:05:03 2013 186.101.253.121:57161 CRL CHECK OK: C=EC, ST=Guayas, L=Guayaquil, O=MULTIRAICES, emailAddress=vpnadmin@multiraices.com
Fri Dec 13 17:05:03 2013 186.101.253.121:57161 VERIFY OK: depth=1, C=EC, ST=Guayas, L=Guayaquil, O=MULTIRAICES, emailAddress=vpnadmin@multiraices.com
Fri Dec 13 17:05:03 2013 186.101.253.121:57161 CRL CHECK OK: C=EC, ST=Guayas, L=Guayaquil, O=MULTIRAICES, OU=Office, CN=grupo_a_cliente, emailAddress=vpnadmin@multiraices.com
Fri Dec 13 17:05:03 2013 186.101.253.121:57161 VERIFY OK: depth=0, C=EC, ST=Guayas, L=Guayaquil, O=MULTIRAICES, OU=Office, CN=grupo_a_cliente, emailAddress=vpnadmin@multiraices.com
Fri Dec 13 17:05:03 2013 186.101.253.121:57161 TLS Auth Error: --client-config-dir authentication failed for common name 'grupo_a_cliente' file='/etc/openvpn/servers/Server_Client/ccd/grupo_a_cliente'
Fri Dec 13 17:05:03 2013 186.101.253.121:57161 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Dec 13 17:05:03 2013 186.101.253.121:57161 [grupo_a_cliente] Peer Connection Initiated with [AF_INET]186.101.253.121:57161