My server logs are showing a two errors repeatedly -
Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #4779594 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
PID_ERR large diff [67] [SSL-4] [00000_0_0_0_0_0_0_0__00_0_0_0_0_00__0_0_0_0_0_0_0_0_0_0_0_0_0_0_] 0:4779663 0:4779596 t=1506015117[0] r=[-2,64,15,238,1] sl=[49,64,64,528]
This may or may not be causing issues with SFTP and I'm trying to get to the bottom of it. Any ideas? (I tried using the oconf tags but its not working..)
My server.conf...
port 1194
proto udp
dev tun
sndbuf 393216
rcvbuf 393216
push "sndbuf 393216"
push "rcvbuf 393216"
ca ca.crt
cert server.crt
key server.key
dh dh.pem
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
push "route 10.8.0.0 255.255.255.0"
ifconfig-pool-persist ipp.txt
#push "redirect-gateway def1 bypass-dhcp"
#push "dhcp-option DNS 192.168.1.1"
#push "dhcp-option DNS 127.0.0.53"
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 4
crl-verify crl.pem
mssfix 1460
tun-mtu 1500
mode server
tls-server
client-to-client
My client's conf:
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote SERVERADDRESSHERE 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
setenv opt block-outside-dns
key-direction 1
verb 3
tls-client
mssfix 1460
tun-mtu 1500
