Get openvpn andorid app to work

[octopus]

Hi

I have to ask you, I don't get OpenVPN for Android (Arne Schwabe’s app, 0.7.61) working with tls-crypt-v2.
My three computers can connect and working.
I think my certs generating working, need be generated with server cert.

Or are the any working android app working with tls-crypt-v2.

Get this errors:

Control Channel: using tls-crypt-v2 key
tls_crypt_v2_unwrap_client_key: client key authentication error
Can not unwrap tls-crypt-v2 client key
TLS Error: can not extract tls-crypt-v2 client key from [AF_INET]90.129.202.238:22238 (via [AF_INET]15x.1xx.11x.7x%eth0)

 

[Ripshod]

Try the official OpenVPN Connect app - currently 3.7.1 (10568).
Works a treat here.

 

[octopus]

Try the official OpenVPN Connect app - currently 3.7.1 (10568).
Works a treat here.

Have you tls-crypt-v2 working?

 

[Ripshod]

Have you tls-crypt-v2 working?

Direct from the server:

 

[octopus]

Direct from the server:
View attachment 67566

I have my VPN-server working on my router.
But can't get android client to work with tls-crypt-v2.
It's working fine with OpenVPN 2.6.14 on my PC.

 

[Crimliar]

I've had the time to have a bit of a play with this today. I cannot get the app that you are using to work to save my life. The Official (and its free) Android OpenVpn Connect (suggested by Ripsod) app works like a charm!

*Okay, scrub that, I have got the app you've been trying to use to work, but gaaahhhhh!

 

[octopus]

I get this error in server when trying to connect from android.
Everything working from computer.
I have tls-crypt-v2 key set in file.

Control Channel: using tls-crypt-v2 key
tls_crypt_v2_unwrap_client_key: client key authentication error
Can not unwrap tls-crypt-v2 client key
TLS Error: can not extract tls-crypt-v2 client key from [AF_INET]90.1x9.2x2.x38:20944 (via [AF_INET]1xx.1x4.11x.7x%eth0)

@RMerlin
Do you have hints/or suggestions on this?

@Crimliar @Ripshod

 

[Ripshod]

I have had a look at the config file and I see nothing at all to force tls-crypt-v2. How do you deduce that it should be available, the OpenVPN server on these routers is somewhay stripped down?

 

[octopus]

I have had a look at the config file and I see nothing at all to force the tls-crypt-v2 cipher. How do you deduce that it should be available, the OpenVPN server on these routers is somewhay stripped down?

I have manually generated all keys, wrote a script and get server working. There is no drop down implementation.

tls-crypt-v2 /jffs/openvpn/tls-crypt-v2-server.key

 

[Ripshod]

There's nothing much more I can help with then as you're operating outside of my experience.
Give OpenVPN Connect a try - if you still cannot connect from outside your network there's something wrong with your configuration.

 

[octopus]

There's nothing much more I can help with then as you're operating outside of my experience.
Give OpenVPN Connect a try - if you still cannot connect from outside your network there's something wrong with your configuration.

Okey, thanks
I just threw out a question here in case anyone has experience
My server works perfectly, can connect with openvpn from pc.
There is nothing wrong with the configuration, it seems like the apps can't handle it in anyway.

 

[RMerlin]

Can not unwrap tls-crypt-v2 client key

Check the syntax in your client config. Are you providing the key content in a <tls-crypt-v2></tls-crypt-v2> block?

I've never used tls-crypt-v2 (and only briefly toyed with v1 just to ensure it worked back in the day).