Android : OpenVPN: tls-auth (HMAC firewall) broken on android 4.4 kitkat

on Wednesday, July 9, 2014


I just got a new phone with Android 4.4 KitKat and now my OpenVPN profiles won't connect (unless I disable tls-auth).


The error in the openvpn server log is:



Jul 10 02:25:35 server.hostname ovpn-server[30911]: client.ip.address:30143 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #59 / time = (1404959102) Thu Jul 10 02:25:02 2014 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Jul 10 02:25:35 server.hostname ovpn-server[30911]: client.ip.address:30143 TLS Error: incoming packet authentication failed from [AF_INET]client.ip.address:30143


My configurations worked with my last phone which had 4.2 Jelly Bean. Now with KitKat OpenVPN only works if I disable tls-auth on the server & the client profile.


I'm using the stock android OS that came with the phones. The old one that works is a T-Mobile Galaxy Note 2 (4.2 Jelly Bean) and the new one that doesn't work is a T-Mobile Galaxy S5 (4.4 KitKat). Using the OpenVPN Connect app installed from Google Play on both.


Anyone else experiencing this issue? Know what to do about it? Any ideas?


Thanks!


0 comments:

Post a Comment