{"action":"created","issue":{"url":"https://api.github.com/repos/angristan/openvpn-install/issues/312","repository_url":"https://api.github.com/repos/angristan/openvpn-install","labels_url":"https://api.github.com/repos/angristan/openvpn-install/issues/312/labels{/name}","comments_url":"https://api.github.com/repos/angristan/openvpn-install/issues/312/comments","events_url":"https://api.github.com/repos/angristan/openvpn-install/issues/312/events","html_url":"https://github.com/angristan/openvpn-install/issues/312","id":364585574,"node_id":"MDU6SXNzdWUzNjQ1ODU1NzQ=","number":312,"title":"TSL Error: tls-crypt unwrapping failed","user":{"login":"daum","id":52372,"node_id":"MDQ6VXNlcjUyMzcy","avatar_url":"https://avatars1.githubusercontent.com/u/52372?v=4","gravatar_id":"","url":"https://api.github.com/users/daum","html_url":"https://github.com/daum","followers_url":"https://api.github.com/users/daum/followers","following_url":"https://api.github.com/users/daum/following{/other_user}","gists_url":"https://api.github.com/users/daum/gists{/gist_id}","starred_url":"https://api.github.com/users/daum/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daum/subscriptions","organizations_url":"https://api.github.com/users/daum/orgs","repos_url":"https://api.github.com/users/daum/repos","events_url":"https://api.github.com/users/daum/events{/privacy}","received_events_url":"https://api.github.com/users/daum/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-09-27T17:48:02Z","updated_at":"2018-09-27T18:17:24Z","closed_at":"2018-09-27T18:14:20Z","author_association":"NONE","body":"On Ubuntu 18 on a brand new install when trying to connect I see this in the logs:\r\n```\r\nSep 27 17:21:16 ip-10-0-0-18 systemd[1]: Starting OpenVPN connection to server...\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep  5 2018\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: library versions: OpenSSL 1.1.0g  2 Nov 2017, LZO 2.08\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: ECDH curve prime256v1 added\r\nSep 27 17:21:16 ip-10-0-0-18 systemd[1]: Started OpenVPN connection to server.\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: TUN/TAP device tun0 opened\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: TUN/TAP TX queue length set to 100\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: /sbin/ip link set dev tun0 up mtu 1500\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: Could not determine IPv4/IPv6 protocol. Using AF_INET\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: Socket Buffers: R=[212992->212992] S=[212992->212992]\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: UDPv4 link local (bound): [AF_INET][undef]:1194\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: UDPv4 link remote: [AF_UNSPEC]\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: GID set to nogroup\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: UID set to nobody\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: MULTI: multi_init called, r=256 v=256\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: IFCONFIG POOL LIST\r\nSep 27 17:21:16 ip-10-0-0-18 ovpn-server[744]: Initialization Sequence Completed\r\nSep 27 17:22:50 ip-10-0-0-18 ovpn-server[744]: tls-crypt unwrap error: packet too short\r\nSep 27 17:22:50 ip-10-0-0-18 ovpn-server[744]: TLS Error: tls-crypt unwrapping failed from [AF_INET]xx.xx.xxx.xxx:54990\r\nSep 27 17:22:52 ip-10-0-0-18 ovpn-server[744]: tls-crypt unwrap error: packet too short\r\nSep 27 17:22:52 ip-10-0-0-18 ovpn-server[744]: TLS Error: tls-crypt unwrapping failed from [AF_INET]xx.xx.xxx.xxx:54990\r\nSep 27 17:22:56 ip-10-0-0-18 ovpn-server[744]: tls-crypt unwrap error: packet too short\r\nSep 27 17:22:56 ip-10-0-0-18 ovpn-server[744]: TLS Error: tls-crypt unwrapping failed from [AF_INET]xx.xx.xxx.xxx:54990\r\nSep 27 17:23:04 ip-10-0-0-18 ovpn-server[744]: tls-crypt unwrap error: packet too short\r\nSep 27 17:23:04 ip-10-0-0-18 ovpn-server[744]: TLS Error: tls-crypt unwrapping failed from [AF_INET]xx.xx.xxx.xxx:54990\r\n```\r\n\r\nOn the client side it shows:\r\n```\r\nSep 27 13:47:41 daum nm-openvpn[713]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)\r\nSep 27 13:47:41 daum nm-openvpn[713]: TLS Error: TLS handshake failed\r\n```"},"comment":{"url":"https://api.github.com/repos/angristan/openvpn-install/issues/comments/425193030","html_url":"https://github.com/angristan/openvpn-install/issues/312#issuecomment-425193030","issue_url":"https://api.github.com/repos/angristan/openvpn-install/issues/312","id":425193030,"node_id":"MDEyOklzc3VlQ29tbWVudDQyNTE5MzAzMA==","user":{"login":"angristan","id":11699655,"node_id":"MDQ6VXNlcjExNjk5NjU1","avatar_url":"https://avatars1.githubusercontent.com/u/11699655?v=4","gravatar_id":"","url":"https://api.github.com/users/angristan","html_url":"https://github.com/angristan","followers_url":"https://api.github.com/users/angristan/followers","following_url":"https://api.github.com/users/angristan/following{/other_user}","gists_url":"https://api.github.com/users/angristan/gists{/gist_id}","starred_url":"https://api.github.com/users/angristan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/angristan/subscriptions","organizations_url":"https://api.github.com/users/angristan/orgs","repos_url":"https://api.github.com/users/angristan/repos","events_url":"https://api.github.com/users/angristan/events{/privacy}","received_events_url":"https://api.github.com/users/angristan/received_events","type":"User","site_admin":false},"created_at":"2018-09-27T18:17:24Z","updated_at":"2018-09-27T18:17:24Z","author_association":"OWNER","body":"Ok that's what I thought!\r\n\r\nI assume Network Manager does not properly handle tls-crypt (yet?). I will look into it sometime, but if you find anything about it in the meantime, please share here 👍"}}
{"actor":{"display_login":"angristan"}}