[deleted] Hi all, posted this in the Android/OpenVPN Connect form, no answers. I've googled this and searched these fourms, and wanted to confirm with others: it appears OpenVPN Connect on Android 1.1.17 does not connect when using the new "tls-auth" option. I've tried the exact same client configuration file on windows, linux, and the OpenVPN for Android app and they all connect correctly. So the issue seems to be OpenVPN Connect. Can anyone else confirm? The server error message (from two different android devices, one on android 6 and one on android 7, both using OpenVPN Connect) is: tls-crypt unwrap error: packet too short TLS Error: tls-crypt unwrapping failed from [AF_INET]x.x.x.x:34258 Running ovpn server on linux, startup message and configs below OpenVPN 2.4.3 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Jun 23 2017 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.08 Sat Jun 24 13:06:30 2017 TUN/TAP device tun0 opened Sat Jun 24 13:06:30 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0 Sat Jun 24 13:06:30 2017 /sbin/ifconfig tun0 x.x.x.x pointopoint x.x.x.y mtu 1500 Sat Jun 24 13:06:30 2017 UDPv4 link local (bound): [AF_INET][undef]:1194 Sat Jun 24 13:06:30 2017 UDPv4 link remote: [AF_UNSPEC] Sat Jun 24 13:06:30 2017 GID set to nobody Sat Jun 24 13:06:30 2017 UID set to nobody Sat Jun 24 13:06:30 2017 Initialization Sequence Completed server.conf [oconf=] port 1194 proto udp4 dev tun0 server x.x.x.x 255.255.255.0 client-to-client push "dhcp-option DNS y.y.y.y" push "redirect-gateway" keepalive 10 60 user nobody group nobody persist-key persist-tun auth SHA512 cipher AES-256-GCM tls-version-min 1.2 tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384 ncp-disable <tls-crypt> -----BEGIN OpenVPN Static key V1----- :-) -----END OpenVPN Static key V1----- </tls-crypt> ca ca.crt cert server.crt key server.key dh dh4096.pem [/oconf] client.conf [oconf=] remote x.x.x.y 1194 client remote-cert-tls server tls-version-min 1.2 dev tun0 proto udp cipher AES-256-GCM auth SHA512 <tls-crypt> -----BEGIN OpenVPN Static key V1----- :-) -----END OpenVPN Static key V1----- </tls-crypt> ca ca.crt cert client.crt key client.key [/oconf]
TinCanTech vpnhuman wroteit appears OpenVPN Connect on Android 1.1.17 does not connect when using the new "tls-auth" optionOpenvpn-Connect-Android does not support --tls-crypt. Use openvpn for android if you want that.
