Hi everyone,
I have been trying to configure an OpenVPN network on my Debian Lenny server (port 8080). It seems I am almost done but something wrong happens when the client (Win8, last OpenVPN bundle from the website) tries to connect to the server, just after the PUSH REQUEST.
Here is the log:
Wed Jul 25 09:47:13 2012 OpenVPN 2.3_alpha2 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [PF_INET6] [IPv6 payload 20110522-1 (2.2.0)] built on Jul 4 2012
Wed Jul 25 09:47:13 2012 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.10:25340
Wed Jul 25 09:47:13 2012 Need hold release from management interface, waiting...
Wed Jul 25 09:47:14 2012 MANAGEMENT: Client connected from [AF_INET]127.0.0.10:25340
Wed Jul 25 09:47:14 2012 MANAGEMENT: CMD 'state on'
Wed Jul 25 09:47:14 2012 MANAGEMENT: CMD 'log all on'
Wed Jul 25 09:47:14 2012 MANAGEMENT: CMD 'hold off'
Wed Jul 25 09:47:14 2012 MANAGEMENT: CMD 'hold release'
Wed Jul 25 09:47:14 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Jul 25 09:47:14 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jul 25 09:47:14 2012 LZO compression initialized
Wed Jul 25 09:47:14 2012 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jul 25 09:47:14 2012 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Jul 25 09:47:14 2012 MANAGEMENT: >STATE:1343206034,RESOLVE,,,
Wed Jul 25 09:47:14 2012 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 25 09:47:14 2012 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 25 09:47:14 2012 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 25 09:47:14 2012 Local Options hash (VER=V4): '41690919'
Wed Jul 25 09:47:14 2012 Expected Remote Options hash (VER=V4): '530fdded'
Wed Jul 25 09:47:14 2012 UDPv4 link local: [undef]
Wed Jul 25 09:47:14 2012 UDPv4 link remote: [AF_INET]{censured}:8080
Wed Jul 25 09:47:14 2012 MANAGEMENT: >STATE:1343206034,WAIT,,,
Wed Jul 25 09:47:14 2012 MANAGEMENT: >STATE:1343206034,AUTH,,,
Wed Jul 25 09:47:14 2012 TLS: Initial packet from [AF_INET]{censured}:8080, sid=5160a3ca a169c5c2
Wed Jul 25 09:47:14 2012 VERIFY OK: depth=1, C=FR, ST=FR, L=Paris, O=NetTogether, CN=NetTogether CA, emailAddress=admin@pcinfo-web.com
Wed Jul 25 09:47:14 2012 VERIFY OK: depth=0, C=FR, ST=FR, L=Paris, O=NetTogether, CN=server, emailAddress=admin@pcinfo-web.com
Wed Jul 25 09:47:15 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 25 09:47:15 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 25 09:47:15 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 25 09:47:15 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 25 09:47:15 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jul 25 09:47:15 2012 [server] Peer Connection Initiated with [AF_INET]{censured}:8080
Wed Jul 25 09:47:16 2012 MANAGEMENT: >STATE:1343206036,GET_CONFIG,,,
Wed Jul 25 09:47:17 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Jul 25 09:47:17 2012 PUSH: Received control message: 'PUSH_REPLY,route 192.168.10.0 255.255.255.0,route 192.168.20.0 255.255.255.0,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
A great thanks in advance to anyone who'll help me 🙂
Undid
