dev1@w
I have auth/decrypt error using tunnelblick as client on MacOS. The HMAC auth is failing and recreated profile with server conf and stills fails to connect tls handshake. I currently have this setup on GCP and exposing all port and external ip address.
[oconf=]server.conf
port 1194
proto udp
dev tun
ca 2342.crt
cert @#$.crt
key @#$.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
key-direction 0
cipher AES-128-CBC # AES
auth SHA256
user nobody
group nogroup
verb 4
[/oconf]
[oconf=]server.log
018-11-07 12:40:07-0600 [HTTPChannel,96,] License Info {'apc': False, 'concurrent_connections': 2}
2018-11-07 12:44:58-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:44:58 2018 Authenticate/Decrypt packet error: packet HMAC authentication failed'
2018-11-07 12:44:58-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:44:58 2018 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x.:xxxx'
2018-11-07 12:45:00-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:45:00 2018 Authenticate/Decrypt packet error: packet HMAC authentication failed'
2018-11-07 12:45:00-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:45:00 2018 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x.:xxxx'
2018-11-07 12:45:04-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:45:04 2018 Authenticate/Decrypt packet error: packet HMAC authentication failed'
2018-11-07 12:45:04-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:45:04 2018 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x.:xxxx'
2018-11-07 12:45:12-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:45:12 2018 Authenticate/Decrypt packet error: packet HMAC authentication failed'
2018-11-07 12:45:12-0600 [-] OVPN 1 OUT: 'Wed Nov 7 18:45:12 2018 TLS Error: incoming packet authentication failed from [AF_INET]x.x.x.x.:xxxx'
[/oconf]
[oconf=]client.conf
dev tun
proto udp
remote x.x.x.x. xxxx
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
# ca ca.crt
# cert client.crt
# key client.key
remote-cert-tls server
key-direction 1
cipher AES-128-CBC
auth SHA256
verb 3
[/oconf]
[oconf=]client log file verb -4
2018-11-07 16:33:24 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2018-11-07 16:33:24 PLUGIN_INIT: POST /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18-openssl-1.0.2p/openvpn-down-root.so '[/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18-openssl-1.0.2p/openvpn-down-root.so] [/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh] [-9] [-d] [-f] [-m] [-w] [-ptADGNWradsgnw]' intercepted=PLUGIN_UP|PLUGIN_DOWN
2018-11-07 16:33:24 Control Channel Authentication: tls-auth using INLINE static key file
2018-11-07 16:33:24 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2018-11-07 16:33:24 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2018-11-07 16:33:24 Socket Buffers: R=[786896->786896] S=[9216->9216]
2018-11-07 16:33:24 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
2018-11-07 16:33:24 UDPv4 link local: [undef]
2018-11-07 16:33:24 UDPv4 link remote: [AF_INET]x.x.x.x. xxxx
2018-11-07 16:33:24 MANAGEMENT: >STATE:1541630004,WAIT,,,
2018-11-07 16:33:24 *Tunnelblick: openvpnstart starting OpenVPN
2018-11-07 16:34:25 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2018-11-07 16:34:25 TLS Error: TLS handshake failed
2018-11-07 16:34:25 SIGUSR1[soft,tls-error] received, process restarting
2018-11-07 16:34:25 MANAGEMENT: >STATE:1541630065,RECONNECTING,tls-error,,
2018-11-07 16:34:25 MANAGEMENT: CMD 'hold release'
2018-11-07 16:34:25 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
[/oconf]
