PIVPN on Stretch with Android OpenVPN Connect

[JohnAJ]

I reinstalled my PI, moving from Jessie to Stretch. I also reinstalled PiVPN, following the documented procedure, added a user, copied the OVPN file to my Android mobile, and tried to connect. This failed. In the log of the VPN server, the following lines were added multiple times:
Dec 16 16:42:13 raspberrypi ovpn-server[292]: Authenticate/Decrypt packet error: packet HMAC authentication failed
Dec 16 16:42:13 raspberrypi ovpn-server[292]: TLS Error: incoming packet authentication failed from [AF_INET]<My external IP address>:44192

It worked perfectly on Jessie, and I don't know what I'm doing wrong this time.

On Android, I have OpenVPN Connect version 3.0.5

On Raspbian, I have the following
>cat /etc/os-release
PRETTY_NAME="Raspbian GNU/Linux 9 (stretch)"
NAME="Raspbian GNU/Linux"
VERSION_ID="9"
VERSION="9 (stretch)"
ID=raspbian
ID_LIKE=debian
HOME_URL="http://www.raspbian.org/"
SUPPORT_URL="http://www.raspbian.org/RaspbianForums"
BUG_REPORT_URL="http://www.raspbian.org/RaspbianBugs"

>openvpn --version
OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.08

Does anybody have an idea what can cause this error?

[itsmedoofer]

Hi,

It's not something silly like an incorrectly typed pass phrase is it ? Did you generate new users for OVPN ? Copying the files from your old installation wont work, you have to start again.

I'm running the same as you and have no issues..

Code: Select all

OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 18 2017
library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.08

Code: Select all

PRETTY_NAME="Raspbian GNU/Linux 9 (stretch)"
NAME="Raspbian GNU/Linux"
VERSION_ID="9"
VERSION="9 (stretch)"

[JohnAJ]

I regenerated the OVPNs, several times, so I assume at least one of those would not have typo in the passphase.
Accoding to your reply, it should work. I'll give it anther try then later this week.

[itsmedoofer]

Hi,

Certainly on the Pi side we are the same, for the Android client I use OpenVPN for Android by Arne Schwabe.

Maybe create a test user with a simple 1 letter password for testing, you can always revoke that account once you have it working.

If you have installed from scratch I found this that may be applicable...

https://askubuntu.com/questions/594868/ ... -what-i-do

I know some purists will frown and poo-poo it but PiVPN is dead easy to use.. http://www.pivpn.io/