Hi,
I am getting the following errors on one of the clients when trying to connect to our new OpenVPN server. Other clients are able to connect successfully suggesting that it is a client configuration issue. The client in question is running Windows XP SP3. I can't find any information about this message "SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)" in the forums. Any advice would be greatly appreciated. 🙂
Fri Aug 10 10:25:34 2012 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov 28 2011
Fri Aug 10 10:25:46 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Aug 10 10:25:47 2012 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Fri Aug 10 10:25:47 2012 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 10 10:25:47 2012 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 10 10:25:47 2012 LZO compression initialized
Fri Aug 10 10:25:47 2012 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri Aug 10 10:25:47 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Aug 10 10:25:47 2012 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Aug 10 10:25:47 2012 Local Options hash (VER=V4): '9e7066d2'
Fri Aug 10 10:25:47 2012 Expected Remote Options hash (VER=V4): '162b04de'
Fri Aug 10 10:25:47 2012 UDPv4 link local: [undef]
Fri Aug 10 10:25:47 2012 UDPv4 link remote: 65.33.15.98:2049
Fri Aug 10 10:25:48 2012 TLS: Initial packet from 65.33.15.98:2049, sid=1b3a57ce 9d6ba2c4
Fri Aug 10 10:25:48 2012 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Aug 10 10:25:50 2012 VERIFY OK: depth=1, /C=NL/ST=Netherlands/L=Netherlands/O=getronics.com/CN=getronics.com_CA/emailAddress=support@getronics.com
Fri Aug 10 10:25:50 2012 VERIFY OK: nsCertType=SERVER
Fri Aug 10 10:25:50 2012 VERIFY OK: depth=0, /C=NL/ST=Netherlands/L=Netherlands/O=getronics.com/CN=vpn1-usa.getronics.com/emailAddress=support@getronics.com
Fri Aug 10 10:25:58 2012 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 10 10:25:58 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 10 10:25:58 2012 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 10 10:25:58 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 10 10:25:58 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Aug 10 10:25:58 2012 [vpn1-usa.getronics.com] Peer Connection Initiated with 65.33.15.98:2049
Fri Aug 10 10:26:00 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:05 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:10 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:16 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:21 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:26 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:31 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:36 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:42 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:47 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:52 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:26:57 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:02 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:07 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:12 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:17 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:22 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:27 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:32 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
Fri Aug 10 10:27:37 2012 SENT CONTROL [vpn1-usa.getronics.com]: 'PUSH_REQUEST' (status=1)
server.conf
port 2049
proto udp
dev tun0
local 65.33.15.98
server 10.8.0.0 255.255.254.0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/vpn1-usa.getronics.com-server.crt
key /etc/openvpn/keys/vpn1-usa.getronics.com-server.key
dh /etc/openvpn/keys/dh2048.pem
tls-auth /etc/openvpn/keys/ta.key 0
cipher AES-256-CBC
ifconfig-pool-persist ipp-pub-udp.txt
push "redirect-gateway"
push "dhcp-option DNS 10.8.0.1"
username-as-common-name
duplicate-cn
keepalive 5 30
comp-lzo
max-clients 100
persist-key
persist-tun
user nobody
group nobody
log /var/log/openvpn-vpn1-usa
status /var/log/openvpn-status-vpn1-usa.log 1
verb 4
plugin /usr/local/src/radiusplugin/radiusplugin.so /etc/openvpn/radiusplugin-vpn1-usa.cnf
client.conf
client
dev tun
proto udp
remote vpn1-usa.getronics.com 2049
auth-user-pass pass.txt
resolv-retry infinite
nobind
persist-tun
persist-key
ca ca.crt
cert client1.crt
key client1.key
tls-auth ta.key 1
cipher AES-256-CBC
ns-cert-type server
comp-lzo
verb 3
