OpenWrt Forum Archive

Topic: Openvpn tls-auth problem

The content of this topic has been archived on 5 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

whenever I use tls-auth, the following error message appears. Anyone knows what's wrong or how to fix it? Thanks in advance


Fri Nov 28 22:23:29 2014 TLS: Initial packet from 192.168.1.1:1194, sid=8cdfff92 650682b1
Fri Nov 28 22:23:29 2014 TLS Error: cannot locate HMAC in incoming packet from 192.168.10.1:1195

Is your tls-auth key the same on all clients?

https://openvpn.net/index.php/open-sour … l#security

This command will generate an OpenVPN static key and write it to the file ta.key. This key should be copied over a pre-existing secure channel to the server and all client machines. It can be placed in the same directory as the RSA .key and .crt files.

In the server configuration, add:

    tls-auth ta.key 0

In the client configuration, add:

    tls-auth ta.key 1

(Last edited by sailor_ca on 28 Nov 2014, 18:46)

Yes, both the server and all clients have the same tls-auth key.

Sorry.  Assuming you created the key using openvpn per the instructions

openvpn --genkey --secret ta.key

I don't have any other suggestions  sad The only time I got this error was with a key problem.

When I get a chance I'll enable tls-auth on a new install to see if the documentation works for me.

The discussion might have continued from here.