Help: Linux client over 3g modem not connecting right

Scripts with setup, destroy, and modify routing tables and firewall rulesets for client connections.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Help: Linux client over 3g modem not connecting right

Post by TinCanTech » Fri Jan 20, 2017 1:04 pm

Does the VPN work ?

timonaap1
OpenVPN User
Posts: 20
Joined: Thu Jan 19, 2017 6:46 am

Re: Help: Linux client over 3g modem not connecting right

Post by timonaap1 » Fri Jan 20, 2017 1:13 pm

It connects but i still have the same problems as before.
No internet acces at the client side
and an endless reconnection loop that fails after a minute or so.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Help: Linux client over 3g modem not connecting right

Post by TinCanTech » Fri Jan 20, 2017 1:17 pm

Please set --verb 4 in your client config and then post your complete client log.
Let it run for a few minutes showing the disconnects and reconnects.

timonaap1
OpenVPN User
Posts: 20
Joined: Thu Jan 19, 2017 6:46 am

Re: Help: Linux client over 3g modem not connecting right

Post by timonaap1 » Fri Jan 20, 2017 2:00 pm

Here you go

client log

Code: Select all

Fri Jan 20 14:37:19 2017 us=547339 Current Parameter Settings:
Fri Jan 20 14:37:19 2017 us=547854   config = 'APL1.ovpn'
Fri Jan 20 14:37:19 2017 us=548009   mode = 0
Fri Jan 20 14:37:19 2017 us=548142   persist_config = DISABLED
Fri Jan 20 14:37:19 2017 us=548258   persist_mode = 1
Fri Jan 20 14:37:19 2017 us=548371   show_ciphers = DISABLED
Fri Jan 20 14:37:19 2017 us=548484   show_digests = DISABLED
Fri Jan 20 14:37:19 2017 us=548598   show_engines = DISABLED
Fri Jan 20 14:37:19 2017 us=548914   genkey = DISABLED
Fri Jan 20 14:37:19 2017 us=549070   key_pass_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=549200   show_tls_ciphers = DISABLED
Fri Jan 20 14:37:19 2017 us=549317 Connection profiles [default]:
Fri Jan 20 14:37:19 2017 us=549450   proto = udp
Fri Jan 20 14:37:19 2017 us=549563   local = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=549680   local_port = 0
Fri Jan 20 14:37:19 2017 us=549794   remote = ' <server.ip> '
Fri Jan 20 14:37:19 2017 us=549910   remote_port = 1194
Fri Jan 20 14:37:19 2017 us=550034   remote_float = DISABLED
Fri Jan 20 14:37:19 2017 us=550153   bind_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=550274   bind_local = DISABLED
Fri Jan 20 14:37:19 2017 us=550395   connect_retry_seconds = 5
Fri Jan 20 14:37:19 2017 us=550514   connect_timeout = 10
Fri Jan 20 14:37:19 2017 us=550639   connect_retry_max = 0
Fri Jan 20 14:37:19 2017 us=550786   socks_proxy_server = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=550926   socks_proxy_port = 0
Fri Jan 20 14:37:19 2017 us=551061   socks_proxy_retry = DISABLED
Fri Jan 20 14:37:19 2017 us=551194   tun_mtu = 1500
Fri Jan 20 14:37:19 2017 us=551318   tun_mtu_defined = ENABLED
Fri Jan 20 14:37:19 2017 us=551433   link_mtu = 1500
Fri Jan 20 14:37:19 2017 us=551552   link_mtu_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=551678   tun_mtu_extra = 0
Fri Jan 20 14:37:19 2017 us=551793   tun_mtu_extra_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=551909   mtu_discover_type = -1
Fri Jan 20 14:37:19 2017 us=552022   fragment = 0
Fri Jan 20 14:37:19 2017 us=552147   mssfix = 1450
Fri Jan 20 14:37:19 2017 us=552257   explicit_exit_notification = 0
Fri Jan 20 14:37:19 2017 us=552368 Connection profiles END
Fri Jan 20 14:37:19 2017 us=552477   remote_random = DISABLED
Fri Jan 20 14:37:19 2017 us=552586   ipchange = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=552698   dev = 'tun'
Fri Jan 20 14:37:19 2017 us=552807   dev_type = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=552940   dev_node = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=553052   lladdr = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=553161   topology = 1
Fri Jan 20 14:37:19 2017 us=553271   tun_ipv6 = DISABLED
Fri Jan 20 14:37:19 2017 us=553384   ifconfig_local = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=553509   ifconfig_remote_netmask = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=553638   ifconfig_noexec = DISABLED
Fri Jan 20 14:37:19 2017 us=553774   ifconfig_nowarn = DISABLED
Fri Jan 20 14:37:19 2017 us=553918   ifconfig_ipv6_local = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=554148   ifconfig_ipv6_netbits = 0
Fri Jan 20 14:37:19 2017 us=554295   ifconfig_ipv6_remote = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=554432   shaper = 0
Fri Jan 20 14:37:19 2017 us=554628   mtu_test = 0
Fri Jan 20 14:37:19 2017 us=554767   mlock = DISABLED
Fri Jan 20 14:37:19 2017 us=554899   keepalive_ping = 0
Fri Jan 20 14:37:19 2017 us=555037   keepalive_timeout = 0
Fri Jan 20 14:37:19 2017 us=555202   inactivity_timeout = 0
Fri Jan 20 14:37:19 2017 us=555372   ping_send_timeout = 0
Fri Jan 20 14:37:19 2017 us=555504   ping_rec_timeout = 0
Fri Jan 20 14:37:19 2017 us=555651   ping_rec_timeout_action = 0
Fri Jan 20 14:37:19 2017 us=555800   ping_timer_remote = DISABLED
Fri Jan 20 14:37:19 2017 us=555926   remap_sigusr1 = 0
Fri Jan 20 14:37:19 2017 us=556122   persist_tun = ENABLED
Fri Jan 20 14:37:19 2017 us=556286   persist_local_ip = DISABLED
Fri Jan 20 14:37:19 2017 us=556416   persist_remote_ip = DISABLED
Fri Jan 20 14:37:19 2017 us=556578   persist_key = ENABLED
Fri Jan 20 14:37:19 2017 us=556731   passtos = DISABLED
Fri Jan 20 14:37:19 2017 us=556872   resolve_retry_seconds = 1000000000
Fri Jan 20 14:37:19 2017 us=557011   username = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=557137   groupname = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=557255   chroot_dir = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=557368   cd_dir = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=557479   writepid = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=557592   up_script = '/etc/openvpn/up.sh'
Fri Jan 20 14:37:19 2017 us=557704   down_script = '/etc/openvpn/down.sh'
Fri Jan 20 14:37:19 2017 us=557814   down_pre = DISABLED
Fri Jan 20 14:37:19 2017 us=557924   up_restart = DISABLED
Fri Jan 20 14:37:19 2017 us=558042   up_delay = DISABLED
Fri Jan 20 14:37:19 2017 us=558166   daemon = DISABLED
Fri Jan 20 14:37:19 2017 us=558283   inetd = 0
Fri Jan 20 14:37:19 2017 us=558397   log = DISABLED
Fri Jan 20 14:37:19 2017 us=558514   suppress_timestamps = DISABLED
Fri Jan 20 14:37:19 2017 us=558642   nice = 0
Fri Jan 20 14:37:19 2017 us=558838   verbosity = 4
Fri Jan 20 14:37:19 2017 us=558991   mute = 0
Fri Jan 20 14:37:19 2017 us=559148   gremlin = 0
Fri Jan 20 14:37:19 2017 us=559362   status_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=559542   status_file_version = 1
Fri Jan 20 14:37:19 2017 us=559700   status_file_update_freq = 60
Fri Jan 20 14:37:19 2017 us=559836   occ = ENABLED
Fri Jan 20 14:37:19 2017 us=559970   rcvbuf = 65536
Fri Jan 20 14:37:19 2017 us=560105   sndbuf = 65536
Fri Jan 20 14:37:19 2017 us=560238   mark = 0
Fri Jan 20 14:37:19 2017 us=560366   sockflags = 0
Fri Jan 20 14:37:19 2017 us=560506   fast_io = DISABLED
Fri Jan 20 14:37:19 2017 us=560645   lzo = 7
Fri Jan 20 14:37:19 2017 us=560804   route_script = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=560979   route_default_gateway = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=561112   route_default_metric = 0
Fri Jan 20 14:37:19 2017 us=561246   route_noexec = DISABLED
Fri Jan 20 14:37:19 2017 us=561396   route_delay = 0
Fri Jan 20 14:37:19 2017 us=561521   route_delay_window = 30
Fri Jan 20 14:37:19 2017 us=561660   route_delay_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=561824   route_nopull = DISABLED
Fri Jan 20 14:37:19 2017 us=561978   route_gateway_via_dhcp = DISABLED
Fri Jan 20 14:37:19 2017 us=562102   max_routes = 100
Fri Jan 20 14:37:19 2017 us=562245   allow_pull_fqdn = DISABLED
Fri Jan 20 14:37:19 2017 us=562370   management_addr = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=562495   management_port = 0
Fri Jan 20 14:37:19 2017 us=562655   management_user_pass = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=562848   management_log_history_cache = 250
Fri Jan 20 14:37:19 2017 us=562999   management_echo_buffer_size = 100
Fri Jan 20 14:37:19 2017 us=563146   management_write_peer_info_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=563308   management_client_user = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=563448   management_client_group = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=563576   management_flags = 0
Fri Jan 20 14:37:19 2017 us=563699   shared_secret_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=563823   key_direction = 2
Fri Jan 20 14:37:19 2017 us=563940   ciphername_defined = ENABLED
Fri Jan 20 14:37:19 2017 us=564064   ciphername = 'AES-256-CBC'
Fri Jan 20 14:37:19 2017 us=564187   authname_defined = ENABLED
Fri Jan 20 14:37:19 2017 us=564303   authname = 'SHA256'
Fri Jan 20 14:37:19 2017 us=564416   prng_hash = 'SHA1'
Fri Jan 20 14:37:19 2017 us=564536   prng_nonce_secret_len = 16
Fri Jan 20 14:37:19 2017 us=564654   keysize = 0
Fri Jan 20 14:37:19 2017 us=564776   engine = DISABLED
Fri Jan 20 14:37:19 2017 us=564902   replay = ENABLED
Fri Jan 20 14:37:19 2017 us=565030   mute_replay_warnings = DISABLED
Fri Jan 20 14:37:19 2017 us=565169   replay_window = 64
Fri Jan 20 14:37:19 2017 us=565302   replay_time = 15
Fri Jan 20 14:37:19 2017 us=565451   packet_id_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=565635   use_iv = ENABLED
Fri Jan 20 14:37:19 2017 us=565805   test_crypto = DISABLED
Fri Jan 20 14:37:19 2017 us=565977   tls_server = DISABLED
Fri Jan 20 14:37:19 2017 us=566144   tls_client = ENABLED
Fri Jan 20 14:37:19 2017 us=566281   key_method = 2
Fri Jan 20 14:37:19 2017 us=566412   ca_file = '[[INLINE]]'
Fri Jan 20 14:37:19 2017 us=566541   ca_path = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=566661   dh_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=566785   cert_file = '[[INLINE]]'
Fri Jan 20 14:37:19 2017 us=566914   priv_key_file = '[[INLINE]]'
Fri Jan 20 14:37:19 2017 us=567059   pkcs12_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=567206   cipher_list = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=567377   tls_verify = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=567516   tls_export_cert = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=567650   verify_x509_type = 2
Fri Jan 20 14:37:19 2017 us=567804   verify_x509_name = 'server'
Fri Jan 20 14:37:19 2017 us=567927   crl_file = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=568066   ns_cert_type = 0
Fri Jan 20 14:37:19 2017 us=568227   remote_cert_ku[i] = 160
Fri Jan 20 14:37:19 2017 us=568357   remote_cert_ku[i] = 136
Fri Jan 20 14:37:19 2017 us=568481   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=568625   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=568916   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=569074   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=569271   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=569435   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=569556   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=569717   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=569891   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=570014   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=570132   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=570248   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=570360   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=570473   remote_cert_ku[i] = 0
Fri Jan 20 14:37:19 2017 us=570586   remote_cert_eku = 'TLS Web Server Authentication'
Fri Jan 20 14:37:19 2017 us=570707   ssl_flags = 192
Fri Jan 20 14:37:19 2017 us=570841   tls_timeout = 2
Fri Jan 20 14:37:19 2017 us=570969   renegotiate_bytes = 0
Fri Jan 20 14:37:19 2017 us=571094   renegotiate_packets = 0
Fri Jan 20 14:37:19 2017 us=571233   renegotiate_seconds = 3600
Fri Jan 20 14:37:19 2017 us=571371   handshake_window = 60
Fri Jan 20 14:37:19 2017 us=571506   transition_window = 3600
Fri Jan 20 14:37:19 2017 us=571642   single_session = DISABLED
Fri Jan 20 14:37:19 2017 us=571772   push_peer_info = DISABLED
Fri Jan 20 14:37:19 2017 us=571915   tls_exit = DISABLED
Fri Jan 20 14:37:19 2017 us=572082   tls_auth_file = '[[INLINE]]'
Fri Jan 20 14:37:19 2017 us=572276   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=572477   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=572662   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=572813   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=572959   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=573118   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=573257   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=573394   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=573527   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=573656   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=573786   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=573947   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=574116   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=574339   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=574506   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=574659   pkcs11_protected_authentication = DISABLED
Fri Jan 20 14:37:19 2017 us=574795   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=574963   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=575118   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=575261   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=575436   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=575610   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=575751   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=575891   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=576031   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=576157   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=576279   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=576484   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=576665   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=576804   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=576970   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=577124   pkcs11_private_mode = 00000000
Fri Jan 20 14:37:19 2017 us=577292   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=577421   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=577550   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=577675   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=577799   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=577923   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=578060   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=578192   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=578318   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=578442   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=578566   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=578759   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=578911   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=579050   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=579182   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=579322   pkcs11_cert_private = DISABLED
Fri Jan 20 14:37:19 2017 us=579494   pkcs11_pin_cache_period = -1
Fri Jan 20 14:37:19 2017 us=579677   pkcs11_id = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=579865   pkcs11_id_management = DISABLED
Fri Jan 20 14:37:19 2017 us=580190   server_network = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=580375   server_netmask = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=580540   server_network_ipv6 = ::
Fri Jan 20 14:37:19 2017 us=580680   server_netbits_ipv6 = 0
Fri Jan 20 14:37:19 2017 us=580850   server_bridge_ip = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=581000   server_bridge_netmask = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=581140   server_bridge_pool_start = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=581275   server_bridge_pool_end = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=581426   ifconfig_pool_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=581583   ifconfig_pool_start = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=581776   ifconfig_pool_end = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=581920   ifconfig_pool_netmask = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=582054   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=582214   ifconfig_pool_persist_refresh_freq = 600
Fri Jan 20 14:37:19 2017 us=582338   ifconfig_ipv6_pool_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=582507   ifconfig_ipv6_pool_base = ::
Fri Jan 20 14:37:19 2017 us=582689   ifconfig_ipv6_pool_netbits = 0
Fri Jan 20 14:37:19 2017 us=582826   n_bcast_buf = 256
Fri Jan 20 14:37:19 2017 us=582949   tcp_queue_limit = 64
Fri Jan 20 14:37:19 2017 us=583095   real_hash_size = 256
Fri Jan 20 14:37:19 2017 us=583212   virtual_hash_size = 256
Fri Jan 20 14:37:19 2017 us=583335   client_connect_script = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=583509   learn_address_script = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=583684   client_disconnect_script = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=583816   client_config_dir = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=583982   ccd_exclusive = DISABLED
Fri Jan 20 14:37:19 2017 us=584143   tmp_dir = '/tmp'
Fri Jan 20 14:37:19 2017 us=584277   push_ifconfig_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=584418   push_ifconfig_local = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=584544   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jan 20 14:37:19 2017 us=584661   push_ifconfig_ipv6_defined = DISABLED
Fri Jan 20 14:37:19 2017 us=584784   push_ifconfig_ipv6_local = ::/0
Fri Jan 20 14:37:19 2017 us=584908   push_ifconfig_ipv6_remote = ::
Fri Jan 20 14:37:19 2017 us=585023   enable_c2c = DISABLED
Fri Jan 20 14:37:19 2017 us=585134   duplicate_cn = DISABLED
Fri Jan 20 14:37:19 2017 us=585273   cf_max = 0
Fri Jan 20 14:37:19 2017 us=585390   cf_per = 0
Fri Jan 20 14:37:19 2017 us=585534   max_clients = 1024
Fri Jan 20 14:37:19 2017 us=585651   max_routes_per_client = 256
Fri Jan 20 14:37:19 2017 us=585768   auth_user_pass_verify_script = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=585889   auth_user_pass_verify_script_via_file = DISABLED
Fri Jan 20 14:37:19 2017 us=586012   port_share_host = '[UNDEF]'
Fri Jan 20 14:37:19 2017 us=586140   port_share_port = 0
Fri Jan 20 14:37:19 2017 us=586281   client = ENABLED
Fri Jan 20 14:37:19 2017 us=586445   pull = ENABLED
Fri Jan 20 14:37:19 2017 us=586644   auth_user_pass_file = 'ww.txt'
Fri Jan 20 14:37:19 2017 us=586809 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Fri Jan 20 14:37:19 2017 us=587022 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Fri Jan 20 14:37:19 2017 us=588153 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Enter Private Key Password: *********
Fri Jan 20 14:37:22 2017 us=672512 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Jan 20 14:37:22 2017 us=740694 Control Channel Authentication: tls-auth using INLINE static key file
Fri Jan 20 14:37:22 2017 us=741030 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 20 14:37:22 2017 us=741211 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 20 14:37:22 2017 us=741459 LZO compression initialized
Fri Jan 20 14:37:22 2017 us=741994 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:37:22 2017 us=742322 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:37:22 2017 us=742581 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:37:22 2017 us=742785 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:37:22 2017 us=742916 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:37:22 2017 us=743134 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:37:22 2017 us=743306 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:37:22 2017 us=743444 UDPv4 link local: [undef]
Fri Jan 20 14:37:22 2017 us=743572 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:37:23 2017 us=439168 TLS: Initial packet from [AF_INET] <server.ip> :1194, sid=1438c1ff 90227633
Fri Jan 20 14:37:24 2017 us=241618 VERIFY OK: depth=1, CN=ChangeMe
Fri Jan 20 14:37:24 2017 us=245037 Validating certificate key usage
Fri Jan 20 14:37:24 2017 us=245265 ++ Certificate has key usage  00a0, expects 00a0
Fri Jan 20 14:37:24 2017 us=245417 VERIFY KU OK
Fri Jan 20 14:37:24 2017 us=245561 Validating certificate extended key usage
Fri Jan 20 14:37:24 2017 us=245719 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Jan 20 14:37:24 2017 us=245833 VERIFY EKU OK
Fri Jan 20 14:37:24 2017 us=245935 VERIFY X509NAME OK: CN=server
Fri Jan 20 14:37:24 2017 us=246038 VERIFY OK: depth=0, CN=server
Fri Jan 20 14:37:25 2017 us=950775 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Jan 20 14:37:25 2017 us=951054 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 20 14:37:25 2017 us=951231 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Jan 20 14:37:25 2017 us=951391 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 20 14:37:25 2017 us=951870 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Jan 20 14:37:25 2017 us=952086 [server] Peer Connection Initiated with [AF_INET] <server.ip> :1194
Fri Jan 20 14:37:28 2017 us=569470 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Jan 20 14:37:28 2017 us=680839 PUSH: Received control message: 'PUSH_REPLY,route 0.0.0.0,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0'
Fri Jan 20 14:37:28 2017 us=681422 OPTIONS IMPORT: timers and/or timeouts modified
Fri Jan 20 14:37:28 2017 us=681515 OPTIONS IMPORT: --ifconfig/up options modified
Fri Jan 20 14:37:28 2017 us=681584 OPTIONS IMPORT: route options modified
Fri Jan 20 14:37:28 2017 us=681647 OPTIONS IMPORT: route-related options modified
Fri Jan 20 14:37:28 2017 us=681710 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Jan 20 14:37:28 2017 us=682637 ROUTE_GATEWAY 10.64.64.64
Fri Jan 20 14:37:28 2017 us=701563 TUN/TAP device tun0 opened
Fri Jan 20 14:37:28 2017 us=702083 TUN/TAP TX queue length set to 100
Fri Jan 20 14:37:28 2017 us=702416 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Jan 20 14:37:28 2017 us=702907 /sbin/ip link set dev tun0 up mtu 1500
Fri Jan 20 14:37:28 2017 us=713552 /sbin/ip addr add dev tun0 10.8.0.3/24 broadcast 10.8.0.255
Fri Jan 20 14:37:28 2017 us=724916 /etc/openvpn/up.sh tun0 1500 1570 10.8.0.3 255.255.255.0 init
Fri Jan 20 14:37:28 2017 us=786271 /sbin/ip route add  <server.ip> /32 via 10.64.64.64
RTNETLINK answers: File exists
Fri Jan 20 14:37:28 2017 us=793511 ERROR: Linux route add command failed: external program exited with error status: 2
Fri Jan 20 14:37:28 2017 us=793875 /sbin/ip route add 0.0.0.0/1 via 10.8.0.1
Fri Jan 20 14:37:28 2017 us=803377 /sbin/ip route add 128.0.0.0/1 via 10.8.0.1
Fri Jan 20 14:37:28 2017 us=810647 /sbin/ip route add 0.0.0.0/32 via 10.8.0.1
Fri Jan 20 14:37:28 2017 us=819951 Initialization Sequence Completed
Fri Jan 20 14:40:41 2017 us=376 [server] Inactivity timeout (--ping-restart), restarting
Fri Jan 20 14:40:41 2017 us=2269 TCP/UDP: Closing socket
Fri Jan 20 14:40:41 2017 us=3192 SIGUSR1[soft,ping-restart] received, process restarting
Fri Jan 20 14:40:41 2017 us=3853 Restart pause, 2 second(s)
Fri Jan 20 14:40:43 2017 us=4622 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:40:43 2017 us=4923 Re-using SSL/TLS context
Fri Jan 20 14:40:43 2017 us=5112 LZO compression initialized
Fri Jan 20 14:40:43 2017 us=5702 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:40:43 2017 us=6003 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:40:43 2017 us=6197 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:40:43 2017 us=6437 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:40:43 2017 us=6538 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:40:43 2017 us=6730 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:40:43 2017 us=6923 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:40:43 2017 us=7035 UDPv4 link local: [undef]
Fri Jan 20 14:40:43 2017 us=7142 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:41:43 2017 us=881253 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:41:43 2017 us=881508 TLS Error: TLS handshake failed
Fri Jan 20 14:41:43 2017 us=882256 TCP/UDP: Closing socket
Fri Jan 20 14:41:43 2017 us=882548 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:41:43 2017 us=882691 Restart pause, 2 second(s)
Fri Jan 20 14:41:45 2017 us=882980 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:41:45 2017 us=883244 Re-using SSL/TLS context
Fri Jan 20 14:41:45 2017 us=883359 LZO compression initialized
Fri Jan 20 14:41:45 2017 us=883761 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:41:45 2017 us=884038 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:41:45 2017 us=884195 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:41:45 2017 us=884348 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:41:45 2017 us=884421 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:41:45 2017 us=884565 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:41:45 2017 us=884674 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:41:45 2017 us=884749 UDPv4 link local: [undef]
Fri Jan 20 14:41:45 2017 us=884828 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:42:45 2017 us=503606 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:42:45 2017 us=503845 TLS Error: TLS handshake failed
Fri Jan 20 14:42:45 2017 us=504425 TCP/UDP: Closing socket
Fri Jan 20 14:42:45 2017 us=504635 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:42:45 2017 us=504740 Restart pause, 2 second(s)
Fri Jan 20 14:42:47 2017 us=505052 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:42:47 2017 us=505302 Re-using SSL/TLS context
Fri Jan 20 14:42:47 2017 us=505392 LZO compression initialized
Fri Jan 20 14:42:47 2017 us=505745 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:42:47 2017 us=505923 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:42:47 2017 us=506042 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:42:47 2017 us=506179 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:42:47 2017 us=506247 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:42:47 2017 us=506384 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:42:47 2017 us=506495 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:42:47 2017 us=506570 UDPv4 link local: [undef]
Fri Jan 20 14:42:47 2017 us=506648 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:43:47 2017 us=911307 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:43:47 2017 us=911487 TLS Error: TLS handshake failed
Fri Jan 20 14:43:47 2017 us=911933 TCP/UDP: Closing socket
Fri Jan 20 14:43:47 2017 us=912104 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:43:47 2017 us=912201 Restart pause, 2 second(s)
Fri Jan 20 14:43:49 2017 us=912502 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:43:49 2017 us=912731 Re-using SSL/TLS context
Fri Jan 20 14:43:49 2017 us=912824 LZO compression initialized
Fri Jan 20 14:43:49 2017 us=913173 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:43:49 2017 us=913357 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:43:49 2017 us=913478 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:43:49 2017 us=913615 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:43:49 2017 us=913685 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:43:49 2017 us=913824 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:43:49 2017 us=913938 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:43:49 2017 us=914015 UDPv4 link local: [undef]
Fri Jan 20 14:43:49 2017 us=914093 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:44:49 2017 us=842168 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:44:49 2017 us=842437 TLS Error: TLS handshake failed
Fri Jan 20 14:44:49 2017 us=842920 TCP/UDP: Closing socket
Fri Jan 20 14:44:49 2017 us=843123 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:44:49 2017 us=843307 Restart pause, 2 second(s)
Fri Jan 20 14:44:51 2017 us=843557 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:44:51 2017 us=843867 Re-using SSL/TLS context
Fri Jan 20 14:44:51 2017 us=843997 LZO compression initialized
Fri Jan 20 14:44:51 2017 us=844403 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:44:51 2017 us=844690 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:44:51 2017 us=844884 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:44:51 2017 us=845051 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:44:51 2017 us=845128 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:44:51 2017 us=845289 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:44:51 2017 us=845465 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:44:51 2017 us=845594 UDPv4 link local: [undef]
Fri Jan 20 14:44:51 2017 us=845728 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:45:51 2017 us=453963 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:45:51 2017 us=454142 TLS Error: TLS handshake failed
Fri Jan 20 14:45:51 2017 us=454618 TCP/UDP: Closing socket
Fri Jan 20 14:45:51 2017 us=454831 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:45:51 2017 us=455036 Restart pause, 2 second(s)
Fri Jan 20 14:45:53 2017 us=455290 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:45:53 2017 us=455517 Re-using SSL/TLS context
Fri Jan 20 14:45:53 2017 us=455615 LZO compression initialized
Fri Jan 20 14:45:53 2017 us=456000 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:45:53 2017 us=456210 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:45:53 2017 us=456338 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:45:53 2017 us=456487 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:45:53 2017 us=456562 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:45:53 2017 us=456703 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:45:53 2017 us=456814 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:45:53 2017 us=456890 UDPv4 link local: [undef]
Fri Jan 20 14:45:53 2017 us=456968 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:46:53 2017 us=715985 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:46:53 2017 us=716203 TLS Error: TLS handshake failed
Fri Jan 20 14:46:53 2017 us=716879 TCP/UDP: Closing socket
Fri Jan 20 14:46:53 2017 us=717149 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:46:53 2017 us=717282 Restart pause, 2 second(s)
Fri Jan 20 14:46:55 2017 us=717561 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:46:55 2017 us=717796 Re-using SSL/TLS context
Fri Jan 20 14:46:55 2017 us=717923 LZO compression initialized
Fri Jan 20 14:46:55 2017 us=718328 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:46:55 2017 us=718570 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:46:55 2017 us=718751 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:46:55 2017 us=718926 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:46:55 2017 us=719009 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:46:55 2017 us=719239 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:46:55 2017 us=719454 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:46:55 2017 us=719624 UDPv4 link local: [undef]
Fri Jan 20 14:46:55 2017 us=719733 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:47:55 2017 us=712054 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:47:55 2017 us=712252 TLS Error: TLS handshake failed
Fri Jan 20 14:47:55 2017 us=712869 TCP/UDP: Closing socket
Fri Jan 20 14:47:55 2017 us=713072 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:47:55 2017 us=713195 Restart pause, 2 second(s)
Fri Jan 20 14:47:57 2017 us=713433 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:47:57 2017 us=713703 Re-using SSL/TLS context
Fri Jan 20 14:47:57 2017 us=713804 LZO compression initialized
Fri Jan 20 14:47:57 2017 us=714261 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:47:57 2017 us=714480 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:47:57 2017 us=714694 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:47:57 2017 us=714870 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:47:57 2017 us=714945 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:47:57 2017 us=715110 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:47:57 2017 us=715278 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:47:57 2017 us=715372 UDPv4 link local: [undef]
Fri Jan 20 14:47:57 2017 us=715456 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:48:57 2017 us=359617 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:48:57 2017 us=359821 TLS Error: TLS handshake failed
Fri Jan 20 14:48:57 2017 us=360393 TCP/UDP: Closing socket
Fri Jan 20 14:48:57 2017 us=360585 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:48:57 2017 us=360707 Restart pause, 2 second(s)
Fri Jan 20 14:48:59 2017 us=360939 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:48:59 2017 us=361241 Re-using SSL/TLS context
Fri Jan 20 14:48:59 2017 us=361387 LZO compression initialized
Fri Jan 20 14:48:59 2017 us=361769 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:48:59 2017 us=361960 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:48:59 2017 us=362091 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:48:59 2017 us=362246 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:48:59 2017 us=362338 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:48:59 2017 us=362492 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:48:59 2017 us=362661 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:48:59 2017 us=362762 UDPv4 link local: [undef]
Fri Jan 20 14:48:59 2017 us=362856 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:49:59 2017 us=559802 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:49:59 2017 us=560049 TLS Error: TLS handshake failed
Fri Jan 20 14:49:59 2017 us=560609 TCP/UDP: Closing socket
Fri Jan 20 14:49:59 2017 us=560850 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:49:59 2017 us=560983 Restart pause, 2 second(s)
Fri Jan 20 14:50:01 2017 us=561240 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:50:01 2017 us=561492 Re-using SSL/TLS context
Fri Jan 20 14:50:01 2017 us=561605 LZO compression initialized
Fri Jan 20 14:50:01 2017 us=561959 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:50:01 2017 us=562145 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:50:01 2017 us=562266 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:50:01 2017 us=562406 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:50:01 2017 us=562475 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:50:01 2017 us=562613 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:50:01 2017 us=562724 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:50:01 2017 us=562798 UDPv4 link local: [undef]
Fri Jan 20 14:50:01 2017 us=562876 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:51:01 2017 us=321407 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:51:01 2017 us=321605 TLS Error: TLS handshake failed
Fri Jan 20 14:51:01 2017 us=322209 TCP/UDP: Closing socket
Fri Jan 20 14:51:01 2017 us=322414 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:51:01 2017 us=322540 Restart pause, 2 second(s)
Fri Jan 20 14:51:03 2017 us=322801 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:51:03 2017 us=323101 Re-using SSL/TLS context
Fri Jan 20 14:51:03 2017 us=323244 LZO compression initialized
Fri Jan 20 14:51:03 2017 us=323722 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:51:03 2017 us=323982 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:51:03 2017 us=324180 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:51:03 2017 us=324444 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:51:03 2017 us=324556 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:51:03 2017 us=324785 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:51:03 2017 us=324952 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:51:03 2017 us=325064 UDPv4 link local: [undef]
Fri Jan 20 14:51:03 2017 us=325192 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:52:03 2017 us=49771 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:52:03 2017 us=49942 TLS Error: TLS handshake failed
Fri Jan 20 14:52:03 2017 us=50386 TCP/UDP: Closing socket
Fri Jan 20 14:52:03 2017 us=50561 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:52:03 2017 us=50655 Restart pause, 2 second(s)
Fri Jan 20 14:52:05 2017 us=50939 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:52:05 2017 us=51245 Re-using SSL/TLS context
Fri Jan 20 14:52:05 2017 us=51412 LZO compression initialized
Fri Jan 20 14:52:05 2017 us=51931 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:52:05 2017 us=52221 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:52:05 2017 us=52419 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:52:05 2017 us=52634 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:52:05 2017 us=52733 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:52:05 2017 us=52921 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:52:05 2017 us=53114 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:52:05 2017 us=53244 UDPv4 link local: [undef]
Fri Jan 20 14:52:05 2017 us=53394 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:53:05 2017 us=368450 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:53:05 2017 us=368630 TLS Error: TLS handshake failed
Fri Jan 20 14:53:05 2017 us=369127 TCP/UDP: Closing socket
Fri Jan 20 14:53:05 2017 us=369297 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:53:05 2017 us=369396 Restart pause, 2 second(s)
Fri Jan 20 14:53:07 2017 us=369698 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:53:07 2017 us=369924 Re-using SSL/TLS context
Fri Jan 20 14:53:07 2017 us=370021 LZO compression initialized
Fri Jan 20 14:53:07 2017 us=370459 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:53:07 2017 us=370684 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:53:07 2017 us=370864 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:53:07 2017 us=371037 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:53:07 2017 us=371120 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:53:07 2017 us=371288 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:53:07 2017 us=371419 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:53:07 2017 us=371506 UDPv4 link local: [undef]
Fri Jan 20 14:53:07 2017 us=371591 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:54:07 2017 us=373184 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:54:07 2017 us=373353 TLS Error: TLS handshake failed
Fri Jan 20 14:54:07 2017 us=373818 TCP/UDP: Closing socket
Fri Jan 20 14:54:07 2017 us=374015 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:54:07 2017 us=374140 Restart pause, 2 second(s)
Fri Jan 20 14:54:09 2017 us=374394 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:54:09 2017 us=374600 Re-using SSL/TLS context
Fri Jan 20 14:54:09 2017 us=374691 LZO compression initialized
Fri Jan 20 14:54:09 2017 us=375111 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:54:09 2017 us=375283 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:54:09 2017 us=375402 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:54:09 2017 us=375538 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:54:09 2017 us=375606 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:54:09 2017 us=375782 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:54:09 2017 us=375900 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:54:09 2017 us=375977 UDPv4 link local: [undef]
Fri Jan 20 14:54:09 2017 us=376055 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:55:09 2017 us=339753 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jan 20 14:55:09 2017 us=339949 TLS Error: TLS handshake failed
Fri Jan 20 14:55:09 2017 us=340599 TCP/UDP: Closing socket
Fri Jan 20 14:55:09 2017 us=340842 SIGUSR1[soft,tls-error] received, process restarting
Fri Jan 20 14:55:09 2017 us=340963 Restart pause, 2 second(s)
Fri Jan 20 14:55:11 2017 us=341195 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jan 20 14:55:11 2017 us=341417 Re-using SSL/TLS context
Fri Jan 20 14:55:11 2017 us=341513 LZO compression initialized
Fri Jan 20 14:55:11 2017 us=341899 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Jan 20 14:55:11 2017 us=342086 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Jan 20 14:55:11 2017 us=342206 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Jan 20 14:55:11 2017 us=342342 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Jan 20 14:55:11 2017 us=342412 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Jan 20 14:55:11 2017 us=342549 Local Options hash (VER=V4): '73e43c96'
Fri Jan 20 14:55:11 2017 us=342659 Expected Remote Options hash (VER=V4): '8a3b3cca'
Fri Jan 20 14:55:11 2017 us=342734 UDPv4 link local: [undef]
Fri Jan 20 14:55:11 2017 us=342811 UDPv4 link remote: [AF_INET] <server.ip> :1194
Fri Jan 20 14:55:30 2017 us=566557 event_wait : Interrupted system call (code=4)
Fri Jan 20 14:55:30 2017 us=567605 TCP/UDP: Closing socket
Fri Jan 20 14:55:30 2017 us=568043 /sbin/ip route del 0.0.0.0/32
Fri Jan 20 14:55:30 2017 us=578209 /sbin/ip route del  <server.ip> /32
RTNETLINK answers: No such process
Fri Jan 20 14:55:30 2017 us=586056 ERROR: Linux route delete command failed: external program exited with error status: 2
Fri Jan 20 14:55:30 2017 us=586619 /sbin/ip route del 0.0.0.0/1
Fri Jan 20 14:55:30 2017 us=597888 /sbin/ip route del 128.0.0.0/1
Fri Jan 20 14:55:30 2017 us=605924 Closing TUN/TAP interface
Fri Jan 20 14:55:30 2017 us=606865 /sbin/ip addr del dev tun0 10.8.0.3/24
Fri Jan 20 14:55:30 2017 us=700084 /etc/openvpn/down.sh tun0 1500 1570 10.8.0.3 255.255.255.0 init
Fri Jan 20 14:55:30 2017 us=725161 SIGTERM[hard,] received, process exiting

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Help: Linux client over 3g modem not connecting right

Post by TinCanTech » Fri Jan 20, 2017 2:18 pm

OK 8-)

Remove from your server config:

Code: Select all

push "route 0.0.0.0"
and try again .. restart the server and client (reboot if you prefer)

timonaap1
OpenVPN User
Posts: 20
Joined: Thu Jan 19, 2017 6:46 am

Re: Help: Linux client over 3g modem not connecting right

Post by timonaap1 » Fri Jan 20, 2017 2:43 pm

Commenting push "route 0.0.0.0" made no difference.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Help: Linux client over 3g modem not connecting right

Post by TinCanTech » Fri Jan 20, 2017 3:18 pm

I assure you it made some difference ..

Once again, please post your client log (remove the server public ip)

timonaap1
OpenVPN User
Posts: 20
Joined: Thu Jan 19, 2017 6:46 am

Re: Help: Linux client over 3g modem not connecting right

Post by timonaap1 » Tue Jan 24, 2017 7:19 am

Still no internet acces and got disconnected after a few minutes

Code: Select all

pi@pi:/etc/openvpn $ sudo openvpn APL1.ovpn
Tue Jan 24 07:57:51 2017 us=251817 Current Parameter Settings:
Tue Jan 24 07:57:51 2017 us=252926   config = 'APL1.ovpn'
Tue Jan 24 07:57:51 2017 us=253503   mode = 0
Tue Jan 24 07:57:51 2017 us=254019   persist_config = DISABLED
Tue Jan 24 07:57:51 2017 us=254540   persist_mode = 1
Tue Jan 24 07:57:51 2017 us=255055   show_ciphers = DISABLED
Tue Jan 24 07:57:51 2017 us=255549   show_digests = DISABLED
Tue Jan 24 07:57:51 2017 us=255989   show_engines = DISABLED
Tue Jan 24 07:57:51 2017 us=256573   genkey = DISABLED
Tue Jan 24 07:57:51 2017 us=257083   key_pass_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=257614   show_tls_ciphers = DISABLED
Tue Jan 24 07:57:51 2017 us=258095 Connection profiles [default]:
Tue Jan 24 07:57:51 2017 us=258600   proto = udp
Tue Jan 24 07:57:51 2017 us=259076   local = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=259558   local_port = 0
Tue Jan 24 07:57:51 2017 us=260033   remote = '217.120.134.212'
Tue Jan 24 07:57:51 2017 us=260636   remote_port = 1194
Tue Jan 24 07:57:51 2017 us=261306   remote_float = DISABLED
Tue Jan 24 07:57:51 2017 us=261859   bind_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=262579   bind_local = DISABLED
Tue Jan 24 07:57:51 2017 us=264932   connect_retry_seconds = 5
Tue Jan 24 07:57:51 2017 us=265478   connect_timeout = 10
Tue Jan 24 07:57:51 2017 us=266006   connect_retry_max = 0
Tue Jan 24 07:57:51 2017 us=266504   socks_proxy_server = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=267045   socks_proxy_port = 0
Tue Jan 24 07:57:51 2017 us=267499   socks_proxy_retry = DISABLED
Tue Jan 24 07:57:51 2017 us=268080   tun_mtu = 1500
Tue Jan 24 07:57:51 2017 us=268587   tun_mtu_defined = ENABLED
Tue Jan 24 07:57:51 2017 us=269068   link_mtu = 1500
Tue Jan 24 07:57:51 2017 us=269512   link_mtu_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=270011   tun_mtu_extra = 0
Tue Jan 24 07:57:51 2017 us=270575   tun_mtu_extra_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=270931   mtu_discover_type = -1
Tue Jan 24 07:57:51 2017 us=271306   fragment = 0
Tue Jan 24 07:57:51 2017 us=271623   mssfix = 1450
Tue Jan 24 07:57:51 2017 us=271922   explicit_exit_notification = 0
Tue Jan 24 07:57:51 2017 us=272434 Connection profiles END
Tue Jan 24 07:57:51 2017 us=272909   remote_random = DISABLED
Tue Jan 24 07:57:51 2017 us=273479   ipchange = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=273827   dev = 'tun'
Tue Jan 24 07:57:51 2017 us=274141   dev_type = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=274619   dev_node = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=275086   lladdr = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=275486   topology = 1
Tue Jan 24 07:57:51 2017 us=275816   tun_ipv6 = DISABLED
Tue Jan 24 07:57:51 2017 us=276125   ifconfig_local = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=276620   ifconfig_remote_netmask = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=277004   ifconfig_noexec = DISABLED
Tue Jan 24 07:57:51 2017 us=277526   ifconfig_nowarn = DISABLED
Tue Jan 24 07:57:51 2017 us=277895   ifconfig_ipv6_local = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=278239   ifconfig_ipv6_netbits = 0
Tue Jan 24 07:57:51 2017 us=280603   ifconfig_ipv6_remote = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=280783   shaper = 0
Tue Jan 24 07:57:51 2017 us=280858   mtu_test = 0
Tue Jan 24 07:57:51 2017 us=280918   mlock = DISABLED
Tue Jan 24 07:57:51 2017 us=280982   keepalive_ping = 0
Tue Jan 24 07:57:51 2017 us=281044   keepalive_timeout = 0
Tue Jan 24 07:57:51 2017 us=281108   inactivity_timeout = 0
Tue Jan 24 07:57:51 2017 us=281175   ping_send_timeout = 0
Tue Jan 24 07:57:51 2017 us=281239   ping_rec_timeout = 0
Tue Jan 24 07:57:51 2017 us=281304   ping_rec_timeout_action = 0
Tue Jan 24 07:57:51 2017 us=281367   ping_timer_remote = DISABLED
Tue Jan 24 07:57:51 2017 us=281431   remap_sigusr1 = 0
Tue Jan 24 07:57:51 2017 us=281494   persist_tun = ENABLED
Tue Jan 24 07:57:51 2017 us=281554   persist_local_ip = DISABLED
Tue Jan 24 07:57:51 2017 us=281617   persist_remote_ip = DISABLED
Tue Jan 24 07:57:51 2017 us=281679   persist_key = ENABLED
Tue Jan 24 07:57:51 2017 us=281740   passtos = DISABLED
Tue Jan 24 07:57:51 2017 us=281806   resolve_retry_seconds = 1000000000
Tue Jan 24 07:57:51 2017 us=281875   username = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=281939   groupname = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=282001   chroot_dir = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=282081   cd_dir = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=282163   writepid = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=282256   up_script = '/etc/openvpn/up.sh'
Tue Jan 24 07:57:51 2017 us=282476   down_script = '/etc/openvpn/down.sh'
Tue Jan 24 07:57:51 2017 us=282595   down_pre = DISABLED
Tue Jan 24 07:57:51 2017 us=282715   up_restart = DISABLED
Tue Jan 24 07:57:51 2017 us=282808   up_delay = DISABLED
Tue Jan 24 07:57:51 2017 us=282878   daemon = DISABLED
Tue Jan 24 07:57:51 2017 us=282947   inetd = 0
Tue Jan 24 07:57:51 2017 us=283014   log = DISABLED
Tue Jan 24 07:57:51 2017 us=283079   suppress_timestamps = DISABLED
Tue Jan 24 07:57:51 2017 us=283162   nice = 0
Tue Jan 24 07:57:51 2017 us=283253   verbosity = 4
Tue Jan 24 07:57:51 2017 us=283364   mute = 0
Tue Jan 24 07:57:51 2017 us=283462   gremlin = 0
Tue Jan 24 07:57:51 2017 us=283570   status_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=283685   status_file_version = 1
Tue Jan 24 07:57:51 2017 us=283794   status_file_update_freq = 60
Tue Jan 24 07:57:51 2017 us=283916   occ = ENABLED
Tue Jan 24 07:57:51 2017 us=284016   rcvbuf = 65536
Tue Jan 24 07:57:51 2017 us=284123   sndbuf = 65536
Tue Jan 24 07:57:51 2017 us=284239   mark = 0
Tue Jan 24 07:57:51 2017 us=284404   sockflags = 0
Tue Jan 24 07:57:51 2017 us=284525   fast_io = DISABLED
Tue Jan 24 07:57:51 2017 us=284600   lzo = 7
Tue Jan 24 07:57:51 2017 us=284669   route_script = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=284738   route_default_gateway = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=284810   route_default_metric = 0
Tue Jan 24 07:57:51 2017 us=284881   route_noexec = DISABLED
Tue Jan 24 07:57:51 2017 us=284953   route_delay = 0
Tue Jan 24 07:57:51 2017 us=285022   route_delay_window = 30
Tue Jan 24 07:57:51 2017 us=285086   route_delay_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=285162   route_nopull = DISABLED
Tue Jan 24 07:57:51 2017 us=285232   route_gateway_via_dhcp = DISABLED
Tue Jan 24 07:57:51 2017 us=285344   max_routes = 100
Tue Jan 24 07:57:51 2017 us=285439   allow_pull_fqdn = DISABLED
Tue Jan 24 07:57:51 2017 us=285508   management_addr = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=285575   management_port = 0
Tue Jan 24 07:57:51 2017 us=285643   management_user_pass = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=285711   management_log_history_cache = 250
Tue Jan 24 07:57:51 2017 us=285776   management_echo_buffer_size = 100
Tue Jan 24 07:57:51 2017 us=285840   management_write_peer_info_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=285903   management_client_user = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=285966   management_client_group = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=286033   management_flags = 0
Tue Jan 24 07:57:51 2017 us=286095   shared_secret_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=286158   key_direction = 2
Tue Jan 24 07:57:51 2017 us=286220   ciphername_defined = ENABLED
Tue Jan 24 07:57:51 2017 us=286313   ciphername = 'AES-256-CBC'
Tue Jan 24 07:57:51 2017 us=286385   authname_defined = ENABLED
Tue Jan 24 07:57:51 2017 us=286477   authname = 'SHA256'
Tue Jan 24 07:57:51 2017 us=286543   prng_hash = 'SHA1'
Tue Jan 24 07:57:51 2017 us=286607   prng_nonce_secret_len = 16
Tue Jan 24 07:57:51 2017 us=286672   keysize = 0
Tue Jan 24 07:57:51 2017 us=286733   engine = DISABLED
Tue Jan 24 07:57:51 2017 us=286793   replay = ENABLED
Tue Jan 24 07:57:51 2017 us=286855   mute_replay_warnings = DISABLED
Tue Jan 24 07:57:51 2017 us=286918   replay_window = 64
Tue Jan 24 07:57:51 2017 us=286980   replay_time = 15
Tue Jan 24 07:57:51 2017 us=287039   packet_id_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=287100   use_iv = ENABLED
Tue Jan 24 07:57:51 2017 us=287160   test_crypto = DISABLED
Tue Jan 24 07:57:51 2017 us=287222   tls_server = DISABLED
Tue Jan 24 07:57:51 2017 us=287283   tls_client = ENABLED
Tue Jan 24 07:57:51 2017 us=287344   key_method = 2
Tue Jan 24 07:57:51 2017 us=287406   ca_file = '[[INLINE]]'
Tue Jan 24 07:57:51 2017 us=287466   ca_path = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=287527   dh_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=287588   cert_file = '[[INLINE]]'
Tue Jan 24 07:57:51 2017 us=287650   priv_key_file = '[[INLINE]]'
Tue Jan 24 07:57:51 2017 us=287711   pkcs12_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=287770   cipher_list = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=287830   tls_verify = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=287890   tls_export_cert = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=287951   verify_x509_type = 2
Tue Jan 24 07:57:51 2017 us=288012   verify_x509_name = 'server'
Tue Jan 24 07:57:51 2017 us=288074   crl_file = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=288136   ns_cert_type = 0
Tue Jan 24 07:57:51 2017 us=288197   remote_cert_ku[i] = 160
Tue Jan 24 07:57:51 2017 us=288257   remote_cert_ku[i] = 136
Tue Jan 24 07:57:51 2017 us=288357   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288442   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288507   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288567   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288628   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288711   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288773   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288833   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288893   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=288952   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=289013   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=289072   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=289133   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=289196   remote_cert_ku[i] = 0
Tue Jan 24 07:57:51 2017 us=289260   remote_cert_eku = 'TLS Web Server Authentication'
Tue Jan 24 07:57:51 2017 us=289322   ssl_flags = 192
Tue Jan 24 07:57:51 2017 us=289382   tls_timeout = 2
Tue Jan 24 07:57:51 2017 us=289443   renegotiate_bytes = 0
Tue Jan 24 07:57:51 2017 us=289503   renegotiate_packets = 0
Tue Jan 24 07:57:51 2017 us=289563   renegotiate_seconds = 3600
Tue Jan 24 07:57:51 2017 us=289626   handshake_window = 60
Tue Jan 24 07:57:51 2017 us=289686   transition_window = 3600
Tue Jan 24 07:57:51 2017 us=289745   single_session = DISABLED
Tue Jan 24 07:57:51 2017 us=289806   push_peer_info = DISABLED
Tue Jan 24 07:57:51 2017 us=289866   tls_exit = DISABLED
Tue Jan 24 07:57:51 2017 us=289926   tls_auth_file = '[[INLINE]]'
Tue Jan 24 07:57:51 2017 us=289989   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=290053   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=290117   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=290179   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=290520   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=290771   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=290946   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=291106   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=291246   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=291391   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=291524   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=291647   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=291770   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=291899   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=292041   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=292199   pkcs11_protected_authentication = DISABLED
Tue Jan 24 07:57:51 2017 us=292452   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=292592   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=292737   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=292885   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=293015   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=293155   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=293341   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=293547   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=293687   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=293834   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=293976   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=294116   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=294269   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=294496   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=294632   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=294763   pkcs11_private_mode = 00000000
Tue Jan 24 07:57:51 2017 us=294896   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=295054   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=295198   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=295441   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=295650   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=295857   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=295995   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=296137   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=296359   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=296552   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=296747   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=296880   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=297002   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=297177   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=297354   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=297505   pkcs11_cert_private = DISABLED
Tue Jan 24 07:57:51 2017 us=297673   pkcs11_pin_cache_period = -1
Tue Jan 24 07:57:51 2017 us=297833   pkcs11_id = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=298012   pkcs11_id_management = DISABLED
Tue Jan 24 07:57:51 2017 us=298214   server_network = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=298501   server_netmask = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=298720   server_network_ipv6 = ::
Tue Jan 24 07:57:51 2017 us=298886   server_netbits_ipv6 = 0
Tue Jan 24 07:57:51 2017 us=299071   server_bridge_ip = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=299264   server_bridge_netmask = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=299450   server_bridge_pool_start = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=299613   server_bridge_pool_end = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=299762   ifconfig_pool_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=299925   ifconfig_pool_start = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=300131   ifconfig_pool_end = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=300323   ifconfig_pool_netmask = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=300463   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=300586   ifconfig_pool_persist_refresh_freq = 600
Tue Jan 24 07:57:51 2017 us=300691   ifconfig_ipv6_pool_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=300881   ifconfig_ipv6_pool_base = ::
Tue Jan 24 07:57:51 2017 us=301032   ifconfig_ipv6_pool_netbits = 0
Tue Jan 24 07:57:51 2017 us=301170   n_bcast_buf = 256
Tue Jan 24 07:57:51 2017 us=301288   tcp_queue_limit = 64
Tue Jan 24 07:57:51 2017 us=301396   real_hash_size = 256
Tue Jan 24 07:57:51 2017 us=301531   virtual_hash_size = 256
Tue Jan 24 07:57:51 2017 us=301646   client_connect_script = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=301782   learn_address_script = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=301888   client_disconnect_script = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=302004   client_config_dir = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=302084   ccd_exclusive = DISABLED
Tue Jan 24 07:57:51 2017 us=302170   tmp_dir = '/tmp'
Tue Jan 24 07:57:51 2017 us=302247   push_ifconfig_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=302338   push_ifconfig_local = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=302448   push_ifconfig_remote_netmask = 0.0.0.0
Tue Jan 24 07:57:51 2017 us=302552   push_ifconfig_ipv6_defined = DISABLED
Tue Jan 24 07:57:51 2017 us=302677   push_ifconfig_ipv6_local = ::/0
Tue Jan 24 07:57:51 2017 us=302777   push_ifconfig_ipv6_remote = ::
Tue Jan 24 07:57:51 2017 us=302852   enable_c2c = DISABLED
Tue Jan 24 07:57:51 2017 us=302931   duplicate_cn = DISABLED
Tue Jan 24 07:57:51 2017 us=303003   cf_max = 0
Tue Jan 24 07:57:51 2017 us=303074   cf_per = 0
Tue Jan 24 07:57:51 2017 us=303160   max_clients = 1024
Tue Jan 24 07:57:51 2017 us=303246   max_routes_per_client = 256
Tue Jan 24 07:57:51 2017 us=303344   auth_user_pass_verify_script = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=303429   auth_user_pass_verify_script_via_file = DISABLED
Tue Jan 24 07:57:51 2017 us=303510   port_share_host = '[UNDEF]'
Tue Jan 24 07:57:51 2017 us=303581   port_share_port = 0
Tue Jan 24 07:57:51 2017 us=303648   client = ENABLED
Tue Jan 24 07:57:51 2017 us=303713   pull = ENABLED
Tue Jan 24 07:57:51 2017 us=303781   auth_user_pass_file = 'ww.txt'
Tue Jan 24 07:57:51 2017 us=303866 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Tue Jan 24 07:57:51 2017 us=304001 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Tue Jan 24 07:57:51 2017 us=306738 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Enter Private Key Password: *********
Tue Jan 24 07:57:56 2017 us=243045 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Jan 24 07:57:56 2017 us=304034 Control Channel Authentication: tls-auth using INLINE static key file
Tue Jan 24 07:57:56 2017 us=304382 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jan 24 07:57:56 2017 us=304560 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jan 24 07:57:56 2017 us=304787 LZO compression initialized
Tue Jan 24 07:57:56 2017 us=305371 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Tue Jan 24 07:57:56 2017 us=305690 Socket Buffers: R=[163840->131072] S=[163840->131072]
Tue Jan 24 07:57:56 2017 us=305931 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 24 07:57:56 2017 us=306132 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan 24 07:57:56 2017 us=306257 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan 24 07:57:56 2017 us=306468 Local Options hash (VER=V4): '73e43c96'
Tue Jan 24 07:57:56 2017 us=306637 Expected Remote Options hash (VER=V4): '8a3b3cca'
Tue Jan 24 07:57:56 2017 us=306773 UDPv4 link local: [undef]
Tue Jan 24 07:57:56 2017 us=306905 UDPv4 link remote: [AF_INET]217.120.134.212:1194
Tue Jan 24 07:57:56 2017 us=555457 TLS: Initial packet from [AF_INET]217.120.134.212:1194, sid=e02c8b52 aca65ad0
Tue Jan 24 07:58:00 2017 us=625244 VERIFY OK: depth=1, CN=ChangeMe
Tue Jan 24 07:58:00 2017 us=629657 Validating certificate key usage
Tue Jan 24 07:58:00 2017 us=630228 ++ Certificate has key usage  00a0, expects 00a0
Tue Jan 24 07:58:00 2017 us=630835 VERIFY KU OK
Tue Jan 24 07:58:00 2017 us=631311 Validating certificate extended key usage
Tue Jan 24 07:58:00 2017 us=631809 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Jan 24 07:58:00 2017 us=632472 VERIFY EKU OK
Tue Jan 24 07:58:00 2017 us=632921 VERIFY X509NAME OK: CN=server
Tue Jan 24 07:58:00 2017 us=633359 VERIFY OK: depth=0, CN=server
Tue Jan 24 07:58:02 2017 us=394062 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jan 24 07:58:02 2017 us=394696 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jan 24 07:58:02 2017 us=395135 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jan 24 07:58:02 2017 us=395545 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jan 24 07:58:02 2017 us=396262 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jan 24 07:58:02 2017 us=396746 [server] Peer Connection Initiated with [AF_INET]217.120.134.212:1194
Tue Jan 24 07:58:04 2017 us=655826 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Jan 24 07:58:04 2017 us=813974 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Tue Jan 24 07:58:04 2017 us=814574 OPTIONS IMPORT: timers and/or timeouts modified
Tue Jan 24 07:58:04 2017 us=814669 OPTIONS IMPORT: --ifconfig/up options modified
Tue Jan 24 07:58:04 2017 us=814738 OPTIONS IMPORT: route options modified
Tue Jan 24 07:58:04 2017 us=814804 OPTIONS IMPORT: route-related options modified
Tue Jan 24 07:58:04 2017 us=814870 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Jan 24 07:58:04 2017 us=815790 ROUTE_GATEWAY 10.64.64.64
Tue Jan 24 07:58:04 2017 us=831558 TUN/TAP device tun0 opened
Tue Jan 24 07:58:04 2017 us=831819 TUN/TAP TX queue length set to 100
Tue Jan 24 07:58:04 2017 us=832057 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jan 24 07:58:04 2017 us=832321 /sbin/ip link set dev tun0 up mtu 1500
Tue Jan 24 07:58:04 2017 us=844303 /sbin/ip addr add dev tun0 10.8.0.2/24 broadcast 10.8.0.255
Tue Jan 24 07:58:04 2017 us=855822 /etc/openvpn/up.sh tun0 1500 1570 10.8.0.2 255.255.255.0 init
Tue Jan 24 07:58:04 2017 us=922373 /sbin/ip route add 217.120.134.212/32 via 10.64.64.64
RTNETLINK answers: File exists
Tue Jan 24 07:58:04 2017 us=931456 ERROR: Linux route add command failed: external program exited with error status: 2
Tue Jan 24 07:58:04 2017 us=932085 /sbin/ip route add 0.0.0.0/1 via 10.8.0.1
Tue Jan 24 07:58:04 2017 us=941461 /sbin/ip route add 128.0.0.0/1 via 10.8.0.1
Tue Jan 24 07:58:04 2017 us=949729 Initialization Sequence Completed
Tue Jan 24 08:10:41 2017 us=614 [server] Inactivity timeout (--ping-restart), restarting
Tue Jan 24 08:10:41 2017 us=2060 TCP/UDP: Closing socket
Tue Jan 24 08:10:41 2017 us=2541 SIGUSR1[soft,ping-restart] received, process restarting
Tue Jan 24 08:10:41 2017 us=2830 Restart pause, 2 second(s)
Tue Jan 24 08:10:43 2017 us=3243 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jan 24 08:10:43 2017 us=3490 Re-using SSL/TLS context
Tue Jan 24 08:10:43 2017 us=3627 LZO compression initialized
Tue Jan 24 08:10:43 2017 us=4120 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Tue Jan 24 08:10:43 2017 us=4334 Socket Buffers: R=[163840->131072] S=[163840->131072]
Tue Jan 24 08:10:43 2017 us=4506 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 24 08:10:43 2017 us=4735 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan 24 08:10:43 2017 us=4827 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan 24 08:10:43 2017 us=5008 Local Options hash (VER=V4): '73e43c96'
Tue Jan 24 08:10:43 2017 us=5162 Expected Remote Options hash (VER=V4): '8a3b3cca'
Tue Jan 24 08:10:43 2017 us=5248 UDPv4 link local: [undef]
Tue Jan 24 08:10:43 2017 us=5326 UDPv4 link remote: [AF_INET]217.120.134.212:1194
Tue Jan 24 08:11:43 2017 us=472326 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jan 24 08:11:43 2017 us=472580 TLS Error: TLS handshake failed
Tue Jan 24 08:11:43 2017 us=473220 TCP/UDP: Closing socket
Tue Jan 24 08:11:43 2017 us=473507 SIGUSR1[soft,tls-error] received, process restarting
Tue Jan 24 08:11:43 2017 us=473663 Restart pause, 2 second(s)
Tue Jan 24 08:11:45 2017 us=473955 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jan 24 08:11:45 2017 us=474235 Re-using SSL/TLS context
Tue Jan 24 08:11:45 2017 us=474348 LZO compression initialized
Tue Jan 24 08:11:45 2017 us=474755 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Tue Jan 24 08:11:45 2017 us=474949 Socket Buffers: R=[163840->131072] S=[163840->131072]
Tue Jan 24 08:11:45 2017 us=475078 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 24 08:11:45 2017 us=475227 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan 24 08:11:45 2017 us=475301 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan 24 08:11:45 2017 us=475448 Local Options hash (VER=V4): '73e43c96'
Tue Jan 24 08:11:45 2017 us=475571 Expected Remote Options hash (VER=V4): '8a3b3cca'
Tue Jan 24 08:11:45 2017 us=475675 UDPv4 link local: [undef]
Tue Jan 24 08:11:45 2017 us=475782 UDPv4 link remote: [AF_INET]217.120.134.212:1194
Tue Jan 24 08:12:45 2017 us=879287 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jan 24 08:12:45 2017 us=879566 TLS Error: TLS handshake failed
Tue Jan 24 08:12:45 2017 us=880210 TCP/UDP: Closing socket
Tue Jan 24 08:12:45 2017 us=880805 SIGUSR1[soft,tls-error] received, process restarting
Tue Jan 24 08:12:45 2017 us=880951 Restart pause, 2 second(s)
Tue Jan 24 08:12:47 2017 us=881200 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue Jan 24 08:12:47 2017 us=881469 Re-using SSL/TLS context
Tue Jan 24 08:12:47 2017 us=881586 LZO compression initialized
Tue Jan 24 08:12:47 2017 us=881973 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Tue Jan 24 08:12:47 2017 us=882175 Socket Buffers: R=[163840->131072] S=[163840->131072]
Tue Jan 24 08:12:47 2017 us=882304 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jan 24 08:12:47 2017 us=882458 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan 24 08:12:47 2017 us=882547 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan 24 08:12:47 2017 us=882703 Local Options hash (VER=V4): '73e43c96'
Tue Jan 24 08:12:47 2017 us=882889 Expected Remote Options hash (VER=V4): '8a3b3cca'
Tue Jan 24 08:12:47 2017 us=882992 UDPv4 link local: [undef]
Tue Jan 24 08:12:47 2017 us=883090 UDPv4 link remote: [AF_INET]217.120.134.212:1194
^CTue Jan 24 08:13:27 2017 us=622867 event_wait : Interrupted system call (code=4)
Tue Jan 24 08:13:27 2017 us=623839 TCP/UDP: Closing socket
Tue Jan 24 08:13:27 2017 us=624407 /sbin/ip route del 217.120.134.212/32
RTNETLINK answers: No such process
Tue Jan 24 08:13:27 2017 us=632943 ERROR: Linux route delete command failed: external program exited with error status: 2
Tue Jan 24 08:13:27 2017 us=633237 /sbin/ip route del 0.0.0.0/1
Tue Jan 24 08:13:27 2017 us=640436 /sbin/ip route del 128.0.0.0/1
Tue Jan 24 08:13:27 2017 us=646989 Closing TUN/TAP interface
Tue Jan 24 08:13:27 2017 us=647369 /sbin/ip addr del dev tun0 10.8.0.2/24
Tue Jan 24 08:13:27 2017 us=721236 /etc/openvpn/down.sh tun0 1500 1570 10.8.0.2 255.255.255.0 init
Tue Jan 24 08:13:27 2017 us=744609 SIGINT[hard,] received, process exiting

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Help: Linux client over 3g modem not connecting right

Post by TinCanTech » Tue Jan 24, 2017 12:53 pm

For testing purpose, try this:
  • Reboot the client ! .. then before running openvpn ..
  • Disable the script, eg. comment it out of client config
  • Disable --redirect-gateway, eg. comment it out of server config
Then try connecting and ping the server 10.8.0.1 from the client .. what is the result ?

timonaap1
OpenVPN User
Posts: 20
Joined: Thu Jan 19, 2017 6:46 am

Re: Help: Linux client over 3g modem not connecting right

Post by timonaap1 » Tue Jan 24, 2017 4:18 pm

This solved the add route error

So I tried just commenting

Code: Select all

push "redirect-gateway def1"
And problem solved

Thanks for bearing with me TinCanTech

Post Reply