TLS Errors and AEAD Decrypt errors

[miknyb]

I have disabled all other devices and removed the nPcap totally
I have attached new logs showing what is going on.

[Eric]

Hi miknyb,

I've just noticed that your original reply configurations includes the following cipher:

cipher AES-256-CBC

However the connection is using:

jan 07 9:41:40 : Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
jan 07 9:41:40 : Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

Please ensure that your ciphers match on both the client and server. You may wish to try using ncp-disable to ensure each end can't change ciphers - https://sparklabs.com/support/kb/articl ... cp-disable

Regards,
Eric

[miknyb]

I have forced the cipher now and this is my client vpn.config:

ncp-disable
dev-node {D1E8E255-E03F-43ED-925E-AB635242BD82}
verb 5
resolv-retry infinite
auth SHA256
cipher AES-256-CBC

I have attached the vpn.log as the errors still remains.

[Eric]

Hi miknyb,

ncp-disable needs to be set on the server.

Regards,
Eric

[miknyb]

I do not think that ncp_disable will fix anything as 40 of my collegaues have the same vpn-config in windows and it works for them. And changing that will force a reboot of the vpn infrastructure and that is nothing we can do easily .

[Eric]

Hi miknyb,

I'm afraid we're out of things to try at this point. The issue is either a misconfiguration between your client and server, or an environmental issue like a firewall/AV or some other software tampering with the packets, or as original mentioned a routing issue.

Regards,
Eric

[miknyb]

Hi

I have installed the same config and certs in my iMac which sits on the same router as my Windows 10
I have attached the logs from that machine here to compare to my Windows 10

On the iMac everything works as it should

[miknyb]

And here are the logs from windows 10 which still works sometimes and mostly not and when it works, very very slow in response