Hello, I am having issues connecting my Mac using tunnelblick to my OpenVPN server. I generated the key, crt, and ca for it as I've done for my other windows and linux clients. They work perfectly without issues. Same client config file and same server.conf file on all ends. It's just my Mac OS that is having the issues. He gets a tunnel address, but cannot ping and or communicate with anything on the Ovpn server network.
Here is the Mac Config:
client
dev tun
proto udp
remote 67.x.x.x 1194
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
ca ca.crt
cert andy.crt
key andy.key
Here are multiple logs. (Which the linux and windows OS's do not have this issue)
2018-01-03 12:08:02 WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
* * * * * * * * * * * *
2018-01-03 12:08:03 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1557'
2018-01-03 12:08:03 WARNING: 'cipher' is used inconsistently, local='cipher BF-CBC', remote='cipher AES-256-CBC'
2018-01-03 12:08:03 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
2018-01-03 12:08:03 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
2018-01-03 12:08:27 Authenticate/Decrypt packet error: cipher final failed
2018-01-03 12:08:37 Authenticate/Decrypt packet error: cipher final failed
2018-01-03 12:08:47 Authenticate/Decrypt packet error: cipher final failed
2018-01-03 12:08:57 Authenticate/Decrypt packet error: cipher final failed
Server Config:
;local a.b.c.d
port 1194
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
;topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;learn-address ./script
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
;client-to-client
;duplicate-cn
cipher AES-256-CBC
;compress lz4-v2
;push "compress lz4-v2"
;comp-lzo
;max-clients 100
user nobody
group nobody
persist-key
persist-tun
Please assist!
