Question

Hi I keep getting this error please help

Connected Tutorial
This question is a follow-up to this tutorial:

xxx.xxx.xxx.xxx - the clients public IP address.

xxx.xxx.xxx.xxx:34872 DECRYPT FROM: 00000001 60df0b51 51bcd777 ca6a680c 860c5c81 008e4efc 55c7ba08 86e2f74[more…] xxx.xxx.xxx.xxx:34872 Authenticate/Decrypt packet error: packet HMAC authentication failed xxx.xxx.xxx.xxx:34872 TLS Error: incoming packet authentication failed from [AF_INET]xxx.xxx.xxx.xxx:34872 xxx.xxx.xxx.xxx:34872 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=8b3702c5 efbc1580, stored-sid=00000000 00000000, stored-ip=[AF_INET]xxx.xxx.xxx.xxx:34872 xxx.xxx.xxx.xxx:34872 TLS: tls_process: chg=0 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800 xxx.xxx.xxx.xxx:34872 ACK reliable_can_send active=1 current=1 : [1] 0 xxx.xxx.xxx.xxx:34872 ACK reliable_send_timeout 0 [1] 0 xxx.xxx.xxx.xxx:34872 TLS: tls_process: timeout set to 1 xxx.xxx.xxx.xxx:34872 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=1f9a0ded f8c32c9f, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC] xxx.xxx.xxx.xxx:34872 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC] xxx.xxx.xxx.xxx:34872 Fatal TLS error (check_tls_errors_co), restarting xxx.xxx.xxx.xxx:34872 SIGUSR1[soft,tls-error] received, client-instance restarting

Subscribe
Share

Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hi there,

It seems like that you are getting an HMAC error, I could suggest making sure that you’ve followed step 7 from the tutorial that you’ve shared.

Alternatively, I could suggest using this 1-Click installation image for OpenVPN instead:

https://marketplace.digitalocean.com/apps/openvpn-access-server

That way you will not have to do any manual configuration.

Regards, Bobby