|
|
Hi James, Yes, the Windows port should work fine with certificates. Make sure you are using compatible options on either side of the connection. The "TLS Error: cannot locate HMAC" error could happen if you are using --tls-auth on one side but not the other side of the connection. James James MacLean <macleajb@xxxxxxxxxxx> said: > Hi Folks (James:)), > > Should the Windows port work with certificates? I had to switch to secret > keys to get my first test machine working, which seems to work just dandy. > > When I switch to certificates, ones that work from a Linux box, I am > getting failure to handshake and on the server side: > > openvpn[19224]: UDP READ [14] from 24.222.132.53:5021: P_CONTROL_HARD_RESET_CLIENT_V1 kid=0 > openvpn[19224]: TLS: tls_pre_decrypt: first response to initial packet sid=cd2e902b 4a839871 > openvpn[19224]: TLS Error: cannot locate HMAC in incoming packet from 24.222.130.53:5000 > openvpn[19224]: UDP READ [14] from 24.222.132.53:5021: P_CONTROL_HARD_RESET_CLIENT_V1 kid=0 > openvpn[19224]: TLS: tls_pre_decrypt: first response to initial packet sid=cd2e902b 4a839871 > openvpn[19224]: TLS Error: cannot locate HMAC in incoming packet from 24.222.130.53:5000 > > Maybe I glossed over something I should have read? Or maybe it is because > it is going through a FW on both ends? I expect it is not because of the > FW's as the secret key works fine. > > take care, > JES > -- > James B. MacLean macleajb@xxxxxxxxxxx > Department of Education > Nova Scotia, Canada > B3M 4B2 > > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > Openvpn-users mailing list > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx > https://lists.sourceforge.net/lists/listinfo/openvpn-users > -- ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |