JohnAJ
Posts: 2
Joined: Sun Dec 16, 2018 7:05 pm

PIVPN on Stretch with Android OpenVPN Connect

Sun Dec 16, 2018 8:26 pm

I reinstalled my PI, moving from Jessie to Stretch. I also reinstalled PiVPN, following the documented procedure, added a user, copied the OVPN file to my Android mobile, and tried to connect. This failed. In the log of the VPN server, the following lines were added multiple times:
Dec 16 16:42:13 raspberrypi ovpn-server[292]: Authenticate/Decrypt packet error: packet HMAC authentication failed
Dec 16 16:42:13 raspberrypi ovpn-server[292]: TLS Error: incoming packet authentication failed from [AF_INET]<My external IP address>:44192

It worked perfectly on Jessie, and I don't know what I'm doing wrong this time.

On Android, I have OpenVPN Connect version 3.0.5

On Raspbian, I have the following
>cat /etc/os-release
PRETTY_NAME="Raspbian GNU/Linux 9 (stretch)"
NAME="Raspbian GNU/Linux"
VERSION_ID="9"
VERSION="9 (stretch)"
ID=raspbian
ID_LIKE=debian
HOME_URL="http://www.raspbian.org/"
SUPPORT_URL="http://www.raspbian.org/RaspbianForums"
BUG_REPORT_URL="http://www.raspbian.org/RaspbianBugs"

>openvpn --version
OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08

Does anybody have an idea what can cause this error?

itsmedoofer
Posts: 359
Joined: Wed Sep 25, 2013 8:43 am

Re: PIVPN on Stretch with Android OpenVPN Connect

Mon Dec 17, 2018 12:36 pm

Hi,

It's not something silly like an incorrectly typed pass phrase is it ? Did you generate new users for OVPN ? Copying the files from your old installation wont work, you have to start again.

I'm running the same as you and have no issues..

Code: Select all

OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.08

Code: Select all

PRETTY_NAME="Raspbian GNU/Linux 9 (stretch)"
NAME="Raspbian GNU/Linux"
VERSION_ID="9"
VERSION="9 (stretch)"

JohnAJ
Posts: 2
Joined: Sun Dec 16, 2018 7:05 pm

Re: PIVPN on Stretch with Android OpenVPN Connect

Mon Dec 17, 2018 9:54 pm

I regenerated the OVPNs, several times, so I assume at least one of those would not have typo in the passphase.
Accoding to your reply, it should work. I'll give it anther try then later this week.

itsmedoofer
Posts: 359
Joined: Wed Sep 25, 2013 8:43 am

Re: PIVPN on Stretch with Android OpenVPN Connect

Tue Dec 18, 2018 12:27 pm

Hi,

Certainly on the Pi side we are the same, for the Android client I use OpenVPN for Android by Arne Schwabe.

Maybe create a test user with a simple 1 letter password for testing, you can always revoke that account once you have it working.

If you have installed from scratch I found this that may be applicable...

https://askubuntu.com/questions/594868/ ... -what-i-do

I know some purists will frown and poo-poo it but PiVPN is dead easy to use.. http://www.pivpn.io/

Return to “Troubleshooting”