How to overcome OpenVPN error "tls-crypt unwrapping failed from"?

Question

openvpn

Hello

Configs:
Server:

local local-ip
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
cipher AES-256-CBC
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn/openvpn.log
log-append /var/log/openvpn/openvpn.log
verb 3
crl-verify crl.pem
explicit-exit-notify

client:

client
proto udp
remote server-ip
port 1194
dev tun
nobind
resolv-retry infinite
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
pull-filter ignore "redirect-gateway def1 bypass-dhcp"
#pull-filter ignore "dhcp-option DNS 192.168.55.1"
#pull-filter ignore "dhcp-option DOMAIN example.com"
ignore-unknown-option block-outside-dns
block-outside-dns
verb 3
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-crypt>

When connecting from a terminal:
sudo /usr/sbin/openvpn --config /home/user/client.ovpn
Everything works.
Also everything works fine from the client on android, windows, MacOS/iOS.
But when using Network Manager, the following error occurs:
On the client:

TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed

On server:

TLS Error: tls-crypt unwrapping failed from [AF_INET]IP:PORT
tls-crypt unwrap error: packet too short

Please tell me where to dig?

Answer 1

sudo nmcli connection import type openvpn file ovpnsettingsfile.ovpn

Answer 2

Faced such a problem. The reason was that NM had a crooked import that ignored the tls-crypt key. When I added this key manually ( https://i.imgur.com/Mzclsgn.png ), everything worked.

Answer 3

How to write data to mifare classic/plus card via i2c interface on pasberi pi?
Why create a duplicate question every other day?

Answer 4

On your question here, an interesting service dug up in the net for the
i 2 c interface
. https : //wm-help.net/lib/b/book/1248084587/10
The topic is of course highly specialized, but I think you will find useful material for yourself.