I received the same ip adresfor difference client connection

mspak

Hi,

My server is a windows 2008 server running in EC2 Amazon.

I installed this software

http://swupdate.openvpn.org/community/releases/openvpn-2.2.2-install.exe

I used http://sourceforge.net/projects/openvpn-gui/ for connectios.

My server received 10.8.0.1 ip. OpenVpn is running as a service

And two differents computers receives the same ip adress : 10.8.0.10 .

What I have to change ?

Than´s in advance

Marcelo Spak

maikcat

hi there,

are they on line concurrently?
please post configs,logs..

Michael.

mspak

Yes they are online concurrently

Each client has his own opvn file.

The two clients connect succsesfully and obtain 10.8.0.6 ip adress.

SERVER:

port 1194

;proto tcp
proto udp

;dev tap
dev tun

;dev-node MyTap

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\server.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\server.key"

dh "C:\\Program Files (x86)\\OpenVPN\\config\\dh1024.pem"

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

;server-bridge

;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252

;learn-address ./script

;push "redirect-gateway def1 bypass-dhcp"

;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"

;client-to-client

;duplicate-cn

keepalive 10 120

;tls-auth ta.key 0 # This file is secret

;cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES

comp-lzo

max-clients 100

;user nobody
;group nobody

persist-key
persist-tun

status openvpn-status.log

;log openvpn.log
;log-append openvpn.log

verb 3

;mute 20

CLIENT:

client

;dev tap
dev tun

;dev-node MyTap

;proto tcp
proto udp

remote myserver.dyndns.info 1194

;remote-random

resolv-retry infinite

nobind

;user nobody
;group nobody

persist-key
persist-tun

;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

;mute-replay-warnings

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\note_leno.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\note_leno.key"

ns-cert-type server

;tls-auth ta.key 1

;cipher x

comp-lzo

verb 3

;mute 20

SERVER LOG:

Sat May 05 18:37:37 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sat May 05 18:37:37 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat May 05 18:37:37 2012 Diffie-Hellman initialized with 1024 bit key
Sat May 05 18:37:37 2012 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat May 05 18:37:37 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat May 05 18:37:37 2012 ROUTE default_gateway=10.248.18.65
Sat May 05 18:37:37 2012 TAP-WIN32 device [open vpn] opened: \\.\Global\{7E2FEFFC-8680-41F2-A3DE-82461153BCFE}.tap
Sat May 05 18:37:37 2012 TAP-Win32 Driver Version 9.9
Sat May 05 18:37:37 2012 TAP-Win32 MTU=1500
Sat May 05 18:37:37 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {7E2FEFFC-8680-41F2-A3DE-82461153BCFE} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Sat May 05 18:37:37 2012 Sleeping for 10 seconds...
Sat May 05 18:37:47 2012 Successful ARP Flush on interface [15] {7E2FEFFC-8680-41F2-A3DE-82461153BCFE}
Sat May 05 18:37:47 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Sat May 05 18:37:47 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat May 05 18:37:47 2012 Route addition via IPAPI succeeded [adaptive]
Sat May 05 18:37:47 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 05 18:37:47 2012 UDPv4 link local (bound): [undef]:1194
Sat May 05 18:37:47 2012 UDPv4 link remote: [undef]
Sat May 05 18:37:47 2012 MULTI: multi_init called, r=256 v=256
Sat May 05 18:37:47 2012 IFCONFIG POOL: base=10.8.0.4 size=62
Sat May 05 18:37:47 2012 IFCONFIG POOL LIST
Sat May 05 18:37:47 2012 Initialization Sequence Completed
Sat May 05 18:37:47 2012 IPv6 in tun mode is not supported in OpenVPN 2.2
Sat May 05 18:38:00 2012 MULTI: multi_create_instance called
Sat May 05 18:38:00 2012 50.112.111.233:64433 Re-using SSL/TLS context
Sat May 05 18:38:00 2012 50.112.111.233:64433 LZO compression initialized
Sat May 05 18:38:00 2012 50.112.111.233:64433 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat May 05 18:38:00 2012 50.112.111.233:64433 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 05 18:38:00 2012 50.112.111.233:64433 Local Options hash (VER=V4): '530fdded'
Sat May 05 18:38:00 2012 50.112.111.233:64433 Expected Remote Options hash (VER=V4): '41690919'
Sat May 05 18:38:00 2012 50.112.111.233:64433 TLS: Initial packet from 50.112.111.233:64433, sid=9b6d1a6a df1f68c5
Sat May 05 18:38:03 2012 50.112.111.233:64433 VERIFY OK: depth=1, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=vpn/name=Marcelo_Spak/emailAddress=marcespak@gmail.com
Sat May 05 18:38:03 2012 50.112.111.233:64433 VERIFY OK: depth=0, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=QUILATE/name=mar_rem/emailAddress=marcespak@gmail.com
Sat May 05 18:38:04 2012 50.112.111.233:64433 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 05 18:38:04 2012 50.112.111.233:64433 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 05 18:38:04 2012 50.112.111.233:64433 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 05 18:38:04 2012 50.112.111.233:64433 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 05 18:38:04 2012 50.112.111.233:64433 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat May 05 18:38:04 2012 50.112.111.233:64433 [QUILATE] Peer Connection Initiated with 50.112.111.233:64433
Sat May 05 18:38:04 2012 QUILATE/50.112.111.233:64433 MULTI: Learn: 10.8.0.6 -> QUILATE/50.112.111.233:64433
Sat May 05 18:38:04 2012 QUILATE/50.112.111.233:64433 MULTI: primary virtual IP for QUILATE/50.112.111.233:64433: 10.8.0.6
Sat May 05 18:38:06 2012 QUILATE/50.112.111.233:64433 PUSH: Received control message: 'PUSH_REQUEST'
Sat May 05 18:38:06 2012 QUILATE/50.112.111.233:64433 SENT CONTROL [QUILATE]: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

CLIENT 1 LOG
Sat May 05 18:40:19 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sat May 05 18:40:19 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat May 05 18:40:19 2012 LZO compression initialized
Sat May 05 18:40:19 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat May 05 18:40:19 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat May 05 18:40:19 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 05 18:40:19 2012 Local Options hash (VER=V4): '41690919'
Sat May 05 18:40:19 2012 Expected Remote Options hash (VER=V4): '530fdded'
Sat May 05 18:40:19 2012 UDPv4 link local: [undef]
Sat May 05 18:40:19 2012 UDPv4 link remote: 177.71.132.212:1194
Sat May 05 18:40:19 2012 TLS: Initial packet from 177.71.132.212:1194, sid=4549881a 5de816eb
Sat May 05 18:40:20 2012 VERIFY OK: depth=1, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=vpn/name=Marcelo_Spak/emailAddress=marcespak@gmail.com
Sat May 05 18:40:20 2012 VERIFY OK: nsCertType=SERVER
Sat May 05 18:40:20 2012 VERIFY OK: depth=0, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=vpn/name=Marcelo_Spak/emailAddress=marcespak@gmail.com
Sat May 05 18:40:20 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 05 18:40:20 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 05 18:40:20 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 05 18:40:20 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 05 18:40:20 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat May 05 18:40:20 2012 [vpn] Peer Connection Initiated with 177.71.132.212:1194
Sat May 05 18:40:22 2012 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Sat May 05 18:40:22 2012 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sat May 05 18:40:22 2012 OPTIONS IMPORT: timers and/or timeouts modified
Sat May 05 18:40:22 2012 OPTIONS IMPORT: --ifconfig/up options modified
Sat May 05 18:40:22 2012 OPTIONS IMPORT: route options modified
Sat May 05 18:40:22 2012 ROUTE default_gateway=192.168.1.1
Sat May 05 18:40:22 2012 TAP-WIN32 device [Conexión de área local 2] opened: \\.\Global\{0541E432-FCC2-4089-ACEF-78EF9BA137F4}.tap
Sat May 05 18:40:22 2012 TAP-Win32 Driver Version 9.9
Sat May 05 18:40:22 2012 TAP-Win32 MTU=1500
Sat May 05 18:40:22 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {0541E432-FCC2-4089-ACEF-78EF9BA137F4} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat May 05 18:40:22 2012 Successful ARP Flush on interface [36] {0541E432-FCC2-4089-ACEF-78EF9BA137F4}
Sat May 05 18:40:28 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 05 18:40:28 2012 Route: Waiting for TUN/TAP interface to come up...
Sat May 05 18:40:33 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 05 18:40:33 2012 Route: Waiting for TUN/TAP interface to come up...
Sat May 05 18:40:34 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 05 18:40:34 2012 Route: Waiting for TUN/TAP interface to come up...
Sat May 05 18:40:35 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 05 18:40:35 2012 Route: Waiting for TUN/TAP interface to come up...
Sat May 05 18:40:36 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 05 18:40:36 2012 Route: Waiting for TUN/TAP interface to come up...
Sat May 05 18:40:37 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 05 18:40:37 2012 Route: Waiting for TUN/TAP interface to come up...
Sat May 05 18:40:38 2012 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Sat May 05 18:40:38 2012 Route: Waiting for TUN/TAP interface to come up...
Sat May 05 18:40:39 2012 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Sat May 05 18:40:39 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sat May 05 18:40:39 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat May 05 18:40:39 2012 Route addition via IPAPI succeeded [adaptive]
Sat May 05 18:40:39 2012 Initialization Sequence Completed

CLIENT 2 LOG:
Sat May 05 18:42:05 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sat May 05 18:42:05 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat May 05 18:42:05 2012 LZO compression initialized
Sat May 05 18:42:05 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat May 05 18:42:05 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat May 05 18:42:06 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 05 18:42:06 2012 Local Options hash (VER=V4): '41690919'
Sat May 05 18:42:06 2012 Expected Remote Options hash (VER=V4): '530fdded'
Sat May 05 18:42:06 2012 UDPv4 link local: [undef]
Sat May 05 18:42:06 2012 UDPv4 link remote: 177.71.132.212:1194
Sat May 05 18:42:06 2012 TLS: Initial packet from 177.71.132.212:1194, sid=5e0e00bc bb97852c
Sat May 05 18:42:08 2012 VERIFY OK: depth=1, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=vpn/name=Marcelo_Spak/emailAddress=marcespak@gmail.com
Sat May 05 18:42:08 2012 VERIFY OK: nsCertType=SERVER
Sat May 05 18:42:08 2012 VERIFY OK: depth=0, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=vpn/name=Marcelo_Spak/emailAddress=marcespak@gmail.com
Sat May 05 18:42:10 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 05 18:42:10 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 05 18:42:10 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 05 18:42:10 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 05 18:42:10 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat May 05 18:42:10 2012 [vpn] Peer Connection Initiated with 177.71.132.212:1194
Sat May 05 18:42:12 2012 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Sat May 05 18:42:12 2012 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sat May 05 18:42:12 2012 OPTIONS IMPORT: timers and/or timeouts modified
Sat May 05 18:42:12 2012 OPTIONS IMPORT: --ifconfig/up options modified
Sat May 05 18:42:12 2012 OPTIONS IMPORT: route options modified
Sat May 05 18:42:12 2012 ROUTE default_gateway=10.252.12.97
Sat May 05 18:42:12 2012 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{61D47A25-E142-4D97-BA0C-94F76DBD0A2F}.tap
Sat May 05 18:42:12 2012 TAP-Win32 Driver Version 9.9
Sat May 05 18:42:12 2012 TAP-Win32 MTU=1500
Sat May 05 18:42:12 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {61D47A25-E142-4D97-BA0C-94F76DBD0A2F} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Sat May 05 18:42:12 2012 Successful ARP Flush on interface [13] {61D47A25-E142-4D97-BA0C-94F76DBD0A2F}
Sat May 05 18:42:18 2012 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Sat May 05 18:42:18 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Sat May 05 18:42:18 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Sat May 05 18:42:18 2012 Route addition via IPAPI succeeded [adaptive]
Sat May 05 18:42:18 2012 Initialization Sequence Completed

maikcat

are both clients use the same certificate? (note_leno.crt).

Michael.

mspak

Each client use differents certificate.

But I tried using this commands and begins to give differents ip adress

duplicate-cn

It works like the clients hase the same certificate ...

Does not recognize differents certificates ???

client2 ( certificate )

client

;dev tap
dev tun

;dev-node MyTap

;proto tcp
proto udp

remote quilate.dyndns.info 1194
;remote my-server-2 1194

;remote-random

resolv-retry infinite

nobind

;user nobody
;group nobody

persist-key
persist-tun

;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]

;mute-replay-warnings

ca "C:\\Program Files (x86)\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files (x86)\\OpenVPN\\config\\mar_rem.crt"
key "C:\\Program Files (x86)\\OpenVPN\\config\\mar_rem.key"

ns-cert-type server

;tls-auth ta.key 1

;cipher x

comp-lzo

verb 3

;mute 20

maikcat

can you post the server log section where 2 clients connect simultaneous..?

Michael.

mspak

Tue May 08 21:20:54 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Tue May 08 21:20:54 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue May 08 21:20:54 2012 Diffie-Hellman initialized with 1024 bit key
Tue May 08 21:20:54 2012 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 08 21:20:54 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue May 08 21:20:54 2012 ROUTE default_gateway=10.248.18.65
Tue May 08 21:20:54 2012 TAP-WIN32 device [open vpn] opened: \\.\Global\{7E2FEFFC-8680-41F2-A3DE-82461153BCFE}.tap
Tue May 08 21:20:54 2012 TAP-Win32 Driver Version 9.9
Tue May 08 21:20:54 2012 TAP-Win32 MTU=1500
Tue May 08 21:20:54 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {7E2FEFFC-8680-41F2-A3DE-82461153BCFE} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Tue May 08 21:20:54 2012 Sleeping for 10 seconds...
Tue May 08 21:21:04 2012 Successful ARP Flush on interface [15] {7E2FEFFC-8680-41F2-A3DE-82461153BCFE}
Tue May 08 21:21:04 2012 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Tue May 08 21:21:04 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue May 08 21:21:04 2012 Route addition via IPAPI succeeded [adaptive]
Tue May 08 21:21:04 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 08 21:21:04 2012 UDPv4 link local (bound): [undef]:1194
Tue May 08 21:21:04 2012 UDPv4 link remote: [undef]
Tue May 08 21:21:04 2012 MULTI: multi_init called, r=256 v=256
Tue May 08 21:21:04 2012 IFCONFIG POOL: base=10.8.0.4 size=62
Tue May 08 21:21:04 2012 IFCONFIG POOL LIST
Tue May 08 21:21:04 2012 QUILATE,10.8.0.4
Tue May 08 21:21:04 2012 Initialization Sequence Completed
Tue May 08 21:21:04 2012 IPv6 in tun mode is not supported in OpenVPN 2.2
Tue May 08 21:21:18 2012 MULTI: multi_create_instance called
Tue May 08 21:21:18 2012 190.244.12.84:63519 Re-using SSL/TLS context
Tue May 08 21:21:18 2012 190.244.12.84:63519 LZO compression initialized
Tue May 08 21:21:18 2012 190.244.12.84:63519 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 08 21:21:18 2012 190.244.12.84:63519 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 08 21:21:18 2012 190.244.12.84:63519 Local Options hash (VER=V4): '530fdded'
Tue May 08 21:21:18 2012 190.244.12.84:63519 Expected Remote Options hash (VER=V4): '41690919'
Tue May 08 21:21:18 2012 190.244.12.84:63519 TLS: Initial packet from 190.244.12.84:63519, sid=9dec4a77 5ec1dd91
Tue May 08 21:21:19 2012 190.244.12.84:63519 VERIFY OK: depth=1, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=vpn/name=Marcelo_Spak/emailAddress=marcespak@gmail.com
Tue May 08 21:21:19 2012 190.244.12.84:63519 VERIFY OK: depth=0, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=QUILATE/name=note_leno/emailAddress=marcespak@gmail.com
Tue May 08 21:21:19 2012 190.244.12.84:63519 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 08 21:21:19 2012 190.244.12.84:63519 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 08 21:21:19 2012 190.244.12.84:63519 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 08 21:21:19 2012 190.244.12.84:63519 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 08 21:21:19 2012 190.244.12.84:63519 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 08 21:21:19 2012 190.244.12.84:63519 [QUILATE] Peer Connection Initiated with 190.244.12.84:63519
Tue May 08 21:21:19 2012 QUILATE/190.244.12.84:63519 MULTI: Learn: 10.8.0.6 -> QUILATE/190.244.12.84:63519
Tue May 08 21:21:19 2012 QUILATE/190.244.12.84:63519 MULTI: primary virtual IP for QUILATE/190.244.12.84:63519: 10.8.0.6
Tue May 08 21:21:21 2012 QUILATE/190.244.12.84:63519 PUSH: Received control message: 'PUSH_REQUEST'
Tue May 08 21:21:21 2012 QUILATE/190.244.12.84:63519 SENT CONTROL [QUILATE]: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Tue May 08 21:21:59 2012 MULTI: multi_create_instance called
Tue May 08 21:21:59 2012 50.112.111.233:63034 Re-using SSL/TLS context
Tue May 08 21:21:59 2012 50.112.111.233:63034 LZO compression initialized
Tue May 08 21:21:59 2012 50.112.111.233:63034 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 08 21:21:59 2012 50.112.111.233:63034 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 08 21:21:59 2012 50.112.111.233:63034 Local Options hash (VER=V4): '530fdded'
Tue May 08 21:21:59 2012 50.112.111.233:63034 Expected Remote Options hash (VER=V4): '41690919'
Tue May 08 21:21:59 2012 50.112.111.233:63034 TLS: Initial packet from 50.112.111.233:63034, sid=47f1e91c ce9c9bc9
Tue May 08 21:22:02 2012 50.112.111.233:63034 VERIFY OK: depth=1, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=vpn/name=Marcelo_Spak/emailAddress=marcespak@gmail.com
Tue May 08 21:22:02 2012 50.112.111.233:63034 VERIFY OK: depth=0, /C=AR/ST=Buenos_Aires/L=BuenosAires/O=QUILATE/OU=Sistemas/CN=QUILATE/name=mar_rem/emailAddress=marcespak@gmail.com
Tue May 08 21:22:03 2012 50.112.111.233:63034 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 08 21:22:03 2012 50.112.111.233:63034 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 08 21:22:03 2012 50.112.111.233:63034 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 08 21:22:03 2012 50.112.111.233:63034 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 08 21:22:03 2012 50.112.111.233:63034 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 08 21:22:03 2012 50.112.111.233:63034 [QUILATE] Peer Connection Initiated with 50.112.111.233:63034
Tue May 08 21:22:03 2012 MULTI: new connection by client 'QUILATE' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Tue May 08 21:22:03 2012 MULTI: Learn: 10.8.0.6 -> QUILATE/50.112.111.233:63034
Tue May 08 21:22:03 2012 MULTI: primary virtual IP for QUILATE/50.112.111.233:63034: 10.8.0.6
Tue May 08 21:22:06 2012 QUILATE/50.112.111.233:63034 PUSH: Received control message: 'PUSH_REQUEST'
Tue May 08 21:22:06 2012 QUILATE/50.112.111.233:63034 SENT CONTROL [QUILATE]: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

maikcat

can you check out the CN value on both certs?

is seems that they both have QUILATE as their CN value...

Michael.