|
|
I installed the beta 6 and used it from Starbucks all day today without issues. Rich ----- Original Message ----- From: "James MacLean" <macleajb@xxxxxxxxxxx> To: "James Yonan" <jim@xxxxxxxxx> Cc: <openvpn-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Monday, August 18, 2003 8:28 PM Subject: Re: [Openvpn-users] Latest Beta with Windows XP and TLS > Thanks James, > > Right on the money. Did not have tls-auth setup on the windows side. Looks > much better now :). > > JES > > On Mon, 18 Aug 2003, James Yonan wrote: > > > Hi James, > > > > Yes, the Windows port should work fine with certificates. Make sure you are > > using compatible options on either side of the connection. The "TLS Error: > > cannot locate HMAC" error could happen if you are using --tls-auth on one side > > but not the other side of the connection. > > > > James > > > > James MacLean <macleajb@xxxxxxxxxxx> said: > > > > > Hi Folks (James:)), > > > > > > Should the Windows port work with certificates? I had to switch to secret > > > keys to get my first test machine working, which seems to work just dandy. > > > > > > When I switch to certificates, ones that work from a Linux box, I am > > > getting failure to handshake and on the server side: > > > > > > openvpn[19224]: UDP READ [14] from 24.222.132.53:5021: > > P_CONTROL_HARD_RESET_CLIENT_V1 kid=0 > > > openvpn[19224]: TLS: tls_pre_decrypt: first response to initial packet > > sid=cd2e902b 4a839871 > > > openvpn[19224]: TLS Error: cannot locate HMAC in incoming packet from > > 24.222.130.53:5000 > > > openvpn[19224]: UDP READ [14] from 24.222.132.53:5021: > > P_CONTROL_HARD_RESET_CLIENT_V1 kid=0 > > > openvpn[19224]: TLS: tls_pre_decrypt: first response to initial packet > > sid=cd2e902b 4a839871 > > > openvpn[19224]: TLS Error: cannot locate HMAC in incoming packet from > > 24.222.130.53:5000 > > > > > > Maybe I glossed over something I should have read? Or maybe it is because > > > it is going through a FW on both ends? I expect it is not because of the > > > FW's as the secret key works fine. > > > > > > take care, > > > JES > > > -- > > > James B. MacLean macleajb@xxxxxxxxxxx > > > Department of Education > > > Nova Scotia, Canada > > > B3M 4B2 > > > > > > > > > > > > > > > ------------------------------------------------------- > > > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > > > Data Reports, E-commerce, Portals, and Forums are available now. > > > Download today and enter to win an XBOX or Visual Studio .NET. > > > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > > > _______________________________________________ > > > Openvpn-users mailing list > > > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx > > > https://lists.sourceforge.net/lists/listinfo/openvpn-users > > > > > > > > > > > > > -- > James B. MacLean macleajb@xxxxxxxxxxx > Department of Education > Nova Scotia, Canada > B3M 4B2 > > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > _______________________________________________ > Openvpn-users mailing list > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx > https://lists.sourceforge.net/lists/listinfo/openvpn-users > |