TLS Error: incoming packet authentication failed

Phentora

Hello everyone. I recently bought a Raspberry Pi 2 to learn a few things about Linux and to use it a my personal VPN. Sadly after configuring it, i noticed that i'm getting some errors in my log file and i have no idea how to fix them. I have checked a lot of pages on Google but haven't managed to find anything that fixes my problem.

Here is my openvpn.log file :
http://pastebin.com/DrcjqKL4

Here is my config file :
http://pastebin.com/apzChWL4

And here is my client config file :
http://pastebin.com/JWbkBzZP

I followed this tutorial : http://readwrite.com/2014/04/10/raspberry-pi-vpn-tutorial-server-secure-web-browsing#awesm=~oBvYD8BOiTdCQN

I removed "local" from the openvpn config because with it it couldn't connect to the VPN.

So right now basically, the problem is that i'm not getting my home IP assigned to me while connected to the VPN. FYI internet is working perfectly while connected.

On my RPi 2 i'm running the latest version of Raspbian Jessie and on my android phone i'm running 5.1.1.

Traffic

Server config
* Posted with comments due to possible errors
* Private information obscured

dev tun
proto udp #Some people prefer to use tcp. Don't change it if you don't know.
port 1194
ca /etc/openvpn/easy-rsa/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/easy-rsa/keys/server.crt # SWAP WITH YOUR CRT NAME
key /etc/openvpn/easy-rsa/easy-rsa/keys/server.key # SWAP WITH YOUR KEY NAME
dh /etc/openvpn/easy-rsa/easy-rsa/keys/dh4096.pem # If you changed to 2048, change that here!
server 10.8.0.0 255.255.255.0
# server and remote endpoints
#ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
#push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OpenVPN Subnet
#push "route 10.8.0.1 255.255.255.0"
# your local subnet
#push "route 10.8.0.1 255.255.255.0" # SWAP THE IP NUMBER WITH YOUR RASPBERRY PI IP ADDRESS
# Set primary domain name server address to the SOHO Router
# If your router does not do DNS, you can use Google DNS 8.8.8.8
push "dhcp-option DNS 8.8.8.8" # This should already match your router address and not need to be changed.
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
#push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1 ### Change this to verb 4 (for testing)

Server log
* Public IP Address removed
* Private information obscured

Thu Oct 29 08:46:00 2015 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec  5 2014
Thu Oct 29 08:46:00 2015 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Thu Oct 29 08:46:01 2015 WARNING: file '/etc/openvpn/easy-rsa/easy-rsa/keys/server.key' is group or others accessible
Thu Oct 29 08:46:01 2015 WARNING: file '/etc/openvpn/easy-rsa/easy-rsa/keys/ta.key' is group or others accessible
Thu Oct 29 08:46:01 2015 Control Channel Authentication: using '/etc/openvpn/easy-rsa/easy-rsa/keys/ta.key' as a OpenVPN static key file
Thu Oct 29 08:46:01 2015 TUN/TAP device tun0 opened
Thu Oct 29 08:46:01 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Oct 29 08:46:01 2015 /sbin/ip link set dev tun0 up mtu 1500
Thu Oct 29 08:46:01 2015 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Thu Oct 29 08:46:01 2015 GID set to nogroup
Thu Oct 29 08:46:01 2015 UID set to nobody
Thu Oct 29 08:46:01 2015 UDPv4 link local (bound): [undef]
Thu Oct 29 08:46:01 2015 UDPv4 link remote: [undef]
Thu Oct 29 08:46:01 2015 Initialization Sequence Completed
Thu Oct 29 08:46:08 2015 CLIENT.IP:57567 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #58 / time = (1446101159) Thu Oc$
Thu Oct 29 08:46:08 2015 CLIENT.IP:57567 TLS Error: incoming packet authentication failed from [AF_INET]CLIENT.IP:57567
Thu Oct 29 08:46:08 2015 CLIENT.IP:57567 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #59 / time = (1446101159) Thu Oc$
Thu Oct 29 08:46:08 2015 CLIENT.IP:57567 TLS Error: incoming packet authentication failed from [AF_INET]CLIENT.IP:57567
Thu Oct 29 08:46:08 2015 CLIENT.IP:57567 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #60 / time = (1446101159) Thu Oc$
Thu Oct 29 08:46:08 2015 CLIENT.IP:57567 TLS Error: incoming packet authentication failed from [AF_INET]CLIENT.IP:57567
Thu Oct 29 08:46:08 2015 CLIENT.IP:57567 [CLIENT] Peer Connection Initiated with [AF_INET]CLIENT.IP:57567
Thu Oct 29 08:46:08 2015 CLIENT/CLIENT.IP:57567 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Thu Oct 29 08:46:08 2015 CLIENT/CLIENT.IP:57567 send_push_reply(): safe_cap=940
...
Missing the rest ...

Please post your complete log at --verb 4 as shown here.

Client Config
* Server name removed

client
dev tun
proto udp
remote SERVER.NAME 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1 ### Change this to verb 4 (for testing)
mute 20 ### Disable Mute (for testing)

Can you please post your client log at --verb 4 and disable mute, as shown here.

* There is no publicly identifiable data here and now you can delete your pastebins , if you want to.