Good afternoon. Please reference:
https://forums.openvpn.net/viewtopic.php?f=4&t=18118&p=49165&hilit=Authenticate%2FDecrypt+packet+error#p49165
The problem in that thread was solved, however, I am curious if anyone could answer my question on what the HMAC packet errors are? I still receive those, though the connection stays up and is relatively stable. I don't receive those errors if I switch to TCP, but I usually use UDP and have been for the past year or so. They seem to multiply exponentially when downloading a large file over the tunnel, or browsing data heavy websites. I have tried everything from adjusting the MTU size, disabling comp-lzo, etc. The only thing that has fixed it is switching to TCP, but I am curious what exactly that means or if it should be a concern? I can't seem to find much info on them. I have verified the clocks are in sync on both systems.
server conf:
proto udp
port 18555
dev tun0
topology subnet
tls-server
server 192.168.60.0 255.255.255.0
push "redirect-gateway def1"
push "route 172.16.5.0 255.255.255.0"
push "dhcp-option DOMAIN home.ld"
push "dhcp-option DNS 172.16.5.1"
dh dh4096.pem
pkcs12 server.p12
cipher AES-256-CBC
auth SHA512
comp-lzo
verb 3
persist-key
persist-tun
ping-timer-rem
keepalive 5 20
client-to-client
log-append /etc/openvpn/openvpn.log
tls-auth static.key
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
duplicate-cn
tls-version-min 1.2
client :
port 18555
client
dev tun
proto tcp-client
comp-lzo
pkcs12 Colby_Ross.p12
remote 1.1.1.1 18555
block-outside-dns
cipher AES-256-CBC
auth SHA512
tls-auth ta.key
tls-client
keepalive 5 20
persist-key
persist-tun
ping-timer-rem
verb 3
register-dns
auth-nocache
remote-cert-tls server
These are the errors I get (well, not sure if they are errors persay, as they don't APPEAR to affect the connection:
Tue Jun 7 13:42:38 2016 Colby Ross/24.39.185.115:15050 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 7 13:42:39 2016 Colby Ross/24.39.185.115:15050 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 7 13:42:40 2016 Colby Ross/24.39.185.115:15050 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 7 13:42:46 2016 Colby Ross/24.39.185.115:15050 Authenticate/Decrypt packet error: packet HMAC authentication failed
Anyone shed some light on how I may fix this (other than using tcp?) Thanks in advance!
