Hi, and tia for looking at this. I realize that this isn't necessarily the right place to ask, but I noticed some other random openvpn help questions were being answered here.
I've purchased vpn service from a pay site. It was working up until a couple days ago. They've not responded to my support requests, so this is just a last ditch effort before I ditch them.
I'm using the openvpn 2.2.1 client on a i386 centos 6.3 virtual machine running on a fedora 14 x86_64 host.
The fedora host provides nat translation with iptables for all the virtual machines. Internet connectivity works normally on the centos client (I can ping google.com, browse the web, etc).
The fedora box is wirelessly connected to a dd-wrt router, which is connected to the internet.
openvpn --version gives
OpenVPN 2.2.1 i386-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Sep 12 201
1
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>
$ ./configure --build=i386-redhat-linux-gnu --host=i386-redhat-linux-gnu --target=i686-redhat-
linux-gnu --program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sb
in --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib --libexecd
ir=/usr/libexec --localstatedir=/var --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir
=/usr/share/info --enable-pthread --enable-password-save --enable-iproute2 --with-ifconfig-path=
/sbin/ifconfig --with-iproute-path=/sbin/ip --with-route-path=/sbin/route
Compile time defines: ENABLE_CLIENT_SERVER ENABLE_DEBUG ENABLE_EUREPHIA ENABLE_FRAGMENT ENABLE_
HTTP_PROXY ENABLE_MANAGEMENT ENABLE_MULTIHOME ENABLE_PASSWORD_SAVE ENABLE_PORT_SHARE ENABLE_SOCK
S USE_CRYPTO USE_LIBDL USE_LZO USE_PKCS11 USE_SSL
My conf file is:
client
dev tap
proto tcp
port 6789
remote vpn.provider.com
resolv-retry infinite
nobind
persist-key
persist-tun
ca /path/to/certificate/provider.ca.crt
comp-lzo
verb 3
auth-user-pass /path/to/credentials/provider_openvpn.credentials
pull
when I run
#/usr/sbin/openvpn --config /path/to/config/provider-ovpn.conf --verb 5
I get the following output
Tue Sep 25 16:03:00 2012 us=819039 Current Parameter Settings:
Tue Sep 25 16:03:00 2012 us=819426 config = '/path/to/config/provider-ovpn.conf'
Tue Sep 25 16:03:00 2012 us=819453 mode = 0
Tue Sep 25 16:03:00 2012 us=819475 persist_config = DISABLED
Tue Sep 25 16:03:00 2012 us=819495 persist_mode = 1
Tue Sep 25 16:03:00 2012 us=819539 show_ciphers = DISABLED
Tue Sep 25 16:03:00 2012 us=819563 show_digests = DISABLED
Tue Sep 25 16:03:00 2012 us=819584 show_engines = DISABLED
Tue Sep 25 16:03:00 2012 us=819604 genkey = DISABLED
Tue Sep 25 16:03:00 2012 us=819624 key_pass_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=819644 show_tls_ciphers = DISABLED
Tue Sep 25 16:03:00 2012 us=819697 Connection profiles [default]:
Tue Sep 25 16:03:00 2012 us=819724 proto = tcp-client
Tue Sep 25 16:03:00 2012 us=819745 local = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=819765 local_port = 0
Tue Sep 25 16:03:00 2012 us=819786 remote = 'vpn.provider.com'
Tue Sep 25 16:03:00 2012 us=819806 remote_port = 6789
Tue Sep 25 16:03:00 2012 us=819826 remote_float = DISABLED
Tue Sep 25 16:03:00 2012 us=819846 bind_defined = DISABLED
Tue Sep 25 16:03:00 2012 us=819956 bind_local = DISABLED
Tue Sep 25 16:03:00 2012 us=819978 connect_retry_seconds = 5
Tue Sep 25 16:03:00 2012 us=819998 connect_timeout = 10
Tue Sep 25 16:03:00 2012 us=820019 connect_retry_max = 0
Tue Sep 25 16:03:00 2012 us=820039 socks_proxy_server = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820059 socks_proxy_port = 0
Tue Sep 25 16:03:00 2012 us=820079 socks_proxy_retry = DISABLED
Tue Sep 25 16:03:00 2012 us=820115 Connection profiles END
Tue Sep 25 16:03:00 2012 us=820139 remote_random = DISABLED
Tue Sep 25 16:03:00 2012 us=820159 ipchange = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820179 dev = 'tap'
Tue Sep 25 16:03:00 2012 us=820199 dev_type = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820219 dev_node = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820238 lladdr = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820258 topology = 1
Tue Sep 25 16:03:00 2012 us=820278 tun_ipv6 = DISABLED
Tue Sep 25 16:03:00 2012 us=820298 ifconfig_local = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820318 ifconfig_remote_netmask = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820338 ifconfig_noexec = DISABLED
Tue Sep 25 16:03:00 2012 us=820358 ifconfig_nowarn = DISABLED
Tue Sep 25 16:03:00 2012 us=820377 shaper = 0
Tue Sep 25 16:03:00 2012 us=820397 tun_mtu = 1500
Tue Sep 25 16:03:00 2012 us=820417 tun_mtu_defined = ENABLED
Tue Sep 25 16:03:00 2012 us=820437 link_mtu = 1500
Tue Sep 25 16:03:00 2012 us=820457 link_mtu_defined = DISABLED
Tue Sep 25 16:03:00 2012 us=820477 tun_mtu_extra = 32
Tue Sep 25 16:03:00 2012 us=820496 tun_mtu_extra_defined = ENABLED
Tue Sep 25 16:03:00 2012 us=820516 fragment = 0
Tue Sep 25 16:03:00 2012 us=820536 mtu_discover_type = -1
Tue Sep 25 16:03:00 2012 us=820556 mtu_test = 0
Tue Sep 25 16:03:00 2012 us=820575 mlock = DISABLED
Tue Sep 25 16:03:00 2012 us=820595 keepalive_ping = 0
Tue Sep 25 16:03:00 2012 us=820615 keepalive_timeout = 0
Tue Sep 25 16:03:00 2012 us=820635 inactivity_timeout = 0
Tue Sep 25 16:03:00 2012 us=820655 ping_send_timeout = 0
Tue Sep 25 16:03:00 2012 us=820692 ping_rec_timeout = 0
Tue Sep 25 16:03:00 2012 us=820716 ping_rec_timeout_action = 0
Tue Sep 25 16:03:00 2012 us=820736 ping_timer_remote = DISABLED
Tue Sep 25 16:03:00 2012 us=820756 remap_sigusr1 = 0
Tue Sep 25 16:03:00 2012 us=820776 explicit_exit_notification = 0
Tue Sep 25 16:03:00 2012 us=820796 persist_tun = ENABLED
Tue Sep 25 16:03:00 2012 us=820815 persist_local_ip = DISABLED
Tue Sep 25 16:03:00 2012 us=820835 persist_remote_ip = DISABLED
Tue Sep 25 16:03:00 2012 us=820889 persist_key = ENABLED
Tue Sep 25 16:03:00 2012 us=820915 mssfix = 1450
Tue Sep 25 16:03:00 2012 us=820935 passtos = DISABLED
Tue Sep 25 16:03:00 2012 us=820955 resolve_retry_seconds = 1000000000
Tue Sep 25 16:03:00 2012 us=820975 username = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=820995 groupname = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821015 chroot_dir = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821046 cd_dir = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821067 selinux_context = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821087 writepid = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821107 up_script = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821126 down_script = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821146 down_pre = DISABLED
Tue Sep 25 16:03:00 2012 us=821166 up_restart = DISABLED
Tue Sep 25 16:03:00 2012 us=821186 up_delay = DISABLED
Tue Sep 25 16:03:00 2012 us=821205 daemon = DISABLED
Tue Sep 25 16:03:00 2012 us=821225 inetd = 0
Tue Sep 25 16:03:00 2012 us=821245 log = DISABLED
Tue Sep 25 16:03:00 2012 us=821264 suppress_timestamps = DISABLED
Tue Sep 25 16:03:00 2012 us=821284 nice = 0
Tue Sep 25 16:03:00 2012 us=821304 verbosity = 5
Tue Sep 25 16:03:00 2012 us=821324 mute = 0
Tue Sep 25 16:03:00 2012 us=821343 gremlin = 0
Tue Sep 25 16:03:00 2012 us=821380 status_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821404 status_file_version = 1
Tue Sep 25 16:03:00 2012 us=821424 status_file_update_freq = 60
Tue Sep 25 16:03:00 2012 us=821443 occ = ENABLED
Tue Sep 25 16:03:00 2012 us=821463 rcvbuf = 65536
Tue Sep 25 16:03:00 2012 us=821483 sndbuf = 65536
Tue Sep 25 16:03:00 2012 us=821503 sockflags = 0
Tue Sep 25 16:03:00 2012 us=821522 fast_io = DISABLED
Tue Sep 25 16:03:00 2012 us=821542 lzo = 7
Tue Sep 25 16:03:00 2012 us=821561 route_script = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821581 route_default_gateway = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821601 route_default_metric = 0
Tue Sep 25 16:03:00 2012 us=821621 route_noexec = DISABLED
Tue Sep 25 16:03:00 2012 us=821640 route_delay = 0
Tue Sep 25 16:03:00 2012 us=821660 route_delay_window = 30
Tue Sep 25 16:03:00 2012 us=821697 route_delay_defined = DISABLED
Tue Sep 25 16:03:00 2012 us=821719 route_nopull = DISABLED
Tue Sep 25 16:03:00 2012 us=821739 route_gateway_via_dhcp = DISABLED
Tue Sep 25 16:03:00 2012 us=821760 max_routes = 100
Tue Sep 25 16:03:00 2012 us=821780 allow_pull_fqdn = DISABLED
Tue Sep 25 16:03:00 2012 us=821801 management_addr = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821821 management_port = 0
Tue Sep 25 16:03:00 2012 us=821842 management_user_pass = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821900 management_log_history_cache = 250
Tue Sep 25 16:03:00 2012 us=821922 management_echo_buffer_size = 100
Tue Sep 25 16:03:00 2012 us=821943 management_write_peer_info_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821963 management_client_user = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=821985 management_client_group = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822006 management_flags = 0
Tue Sep 25 16:03:00 2012 us=822026 shared_secret_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822047 key_direction = 0
Tue Sep 25 16:03:00 2012 us=822067 ciphername_defined = ENABLED
Tue Sep 25 16:03:00 2012 us=822087 ciphername = 'BF-CBC'
Tue Sep 25 16:03:00 2012 us=822107 authname_defined = ENABLED
Tue Sep 25 16:03:00 2012 us=822127 authname = 'SHA1'
Tue Sep 25 16:03:00 2012 us=822147 prng_hash = 'SHA1'
Tue Sep 25 16:03:00 2012 us=822167 prng_nonce_secret_len = 16
Tue Sep 25 16:03:00 2012 us=822187 keysize = 0
Tue Sep 25 16:03:00 2012 us=822208 engine = DISABLED
Tue Sep 25 16:03:00 2012 us=822228 replay = ENABLED
Tue Sep 25 16:03:00 2012 us=822248 mute_replay_warnings = DISABLED
Tue Sep 25 16:03:00 2012 us=822268 replay_window = 64
Tue Sep 25 16:03:00 2012 us=822288 replay_time = 15
Tue Sep 25 16:03:00 2012 us=822308 packet_id_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822327 use_iv = ENABLED
Tue Sep 25 16:03:00 2012 us=822348 test_crypto = DISABLED
Tue Sep 25 16:03:00 2012 us=822367 tls_server = DISABLED
Tue Sep 25 16:03:00 2012 us=822387 tls_client = ENABLED
Tue Sep 25 16:03:00 2012 us=822407 key_method = 2
Tue Sep 25 16:03:00 2012 us=822427 ca_file = '/path/to/cert/provider.ca.crt'
Tue Sep 25 16:03:00 2012 us=822447 ca_path = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822467 dh_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822487 cert_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822518 priv_key_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822539 pkcs12_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822559 cipher_list = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822579 tls_verify = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822599 tls_export_cert = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822619 tls_remote = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822639 crl_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=822659 ns_cert_type = 0
Tue Sep 25 16:03:00 2012 us=822696 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822719 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822739 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822759 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822779 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822799 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822819 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822839 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822894 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822917 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822937 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822957 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822978 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=822998 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=823018 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=823038 remote_cert_ku[i] = 0
Tue Sep 25 16:03:00 2012 us=823058 remote_cert_eku = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=823078 tls_timeout = 2
Tue Sep 25 16:03:00 2012 us=823098 renegotiate_bytes = 0
Tue Sep 25 16:03:00 2012 us=823119 renegotiate_packets = 0
Tue Sep 25 16:03:00 2012 us=823139 renegotiate_seconds = 3600
Tue Sep 25 16:03:00 2012 us=823159 handshake_window = 60
Tue Sep 25 16:03:00 2012 us=823179 transition_window = 3600
Tue Sep 25 16:03:00 2012 us=823199 single_session = DISABLED
Tue Sep 25 16:03:00 2012 us=823219 push_peer_info = DISABLED
Tue Sep 25 16:03:00 2012 us=823239 tls_exit = DISABLED
Tue Sep 25 16:03:00 2012 us=823259 tls_auth_file = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=823280 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823300 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823320 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823340 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823360 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823380 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823400 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823420 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823440 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823460 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823480 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823500 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823520 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823540 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823560 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823580 pkcs11_protected_authentication = DISABLED
Tue Sep 25 16:03:00 2012 us=823601 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823621 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823642 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823662 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823699 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823721 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823741 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823762 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823782 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823802 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823822 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823883 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823910 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823931 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823951 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823972 pkcs11_private_mode = 00000000
Tue Sep 25 16:03:00 2012 us=823992 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824012 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824032 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824052 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824072 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824092 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824112 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824132 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824152 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824172 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824193 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824213 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824233 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824253 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824273 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824294 pkcs11_cert_private = DISABLED
Tue Sep 25 16:03:00 2012 us=824314 pkcs11_pin_cache_period = -1
Tue Sep 25 16:03:00 2012 us=824334 pkcs11_id = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=824378 pkcs11_id_management = DISABLED
Tue Sep 25 16:03:00 2012 us=824454 server_network = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824481 server_netmask = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824504 server_bridge_ip = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824526 server_bridge_netmask = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824548 server_bridge_pool_start = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824571 server_bridge_pool_end = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824591 ifconfig_pool_defined = DISABLED
Tue Sep 25 16:03:00 2012 us=824614 ifconfig_pool_start = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824636 ifconfig_pool_end = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824658 ifconfig_pool_netmask = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=824695 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=824718 ifconfig_pool_persist_refresh_freq = 600
Tue Sep 25 16:03:00 2012 us=824739 n_bcast_buf = 256
Tue Sep 25 16:03:00 2012 us=824759 tcp_queue_limit = 64
Tue Sep 25 16:03:00 2012 us=824780 real_hash_size = 256
Tue Sep 25 16:03:00 2012 us=824800 virtual_hash_size = 256
Tue Sep 25 16:03:00 2012 us=824820 client_connect_script = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=824840 learn_address_script = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=824897 client_disconnect_script = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=824919 client_config_dir = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=824940 ccd_exclusive = DISABLED
Tue Sep 25 16:03:00 2012 us=824960 tmp_dir = '/tmp'
Tue Sep 25 16:03:00 2012 us=824980 push_ifconfig_defined = DISABLED
Tue Sep 25 16:03:00 2012 us=825002 push_ifconfig_local = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=825025 push_ifconfig_remote_netmask = 0.0.0.0
Tue Sep 25 16:03:00 2012 us=825045 enable_c2c = DISABLED
Tue Sep 25 16:03:00 2012 us=825065 duplicate_cn = DISABLED
Tue Sep 25 16:03:00 2012 us=825085 cf_max = 0
Tue Sep 25 16:03:00 2012 us=825105 cf_per = 0
Tue Sep 25 16:03:00 2012 us=825125 max_clients = 1024
Tue Sep 25 16:03:00 2012 us=825145 max_routes_per_client = 256
Tue Sep 25 16:03:00 2012 us=825165 auth_user_pass_verify_script = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=825186 auth_user_pass_verify_script_via_file = DISABLED
Tue Sep 25 16:03:00 2012 us=825206 ssl_flags = 0
Tue Sep 25 16:03:00 2012 us=825226 port_share_host = '[UNDEF]'
Tue Sep 25 16:03:00 2012 us=825246 port_share_port = 0
Tue Sep 25 16:03:00 2012 us=825266 client = ENABLED
Tue Sep 25 16:03:00 2012 us=825286 pull = ENABLED
Tue Sep 25 16:03:00 2012 us=825316 auth_user_pass_file = '/path/to/credentials/provider_openvpn.credentials'
Tue Sep 25 16:03:00 2012 us=825355 OpenVPN 2.2.1 i386-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Sep 12 2011
Tue Sep 25 16:03:00 2012 us=825911 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Sep 25 16:03:00 2012 us=825948 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Sep 25 16:03:00 2012 us=828057 LZO compression initialized
Tue Sep 25 16:03:00 2012 us=828388 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Sep 25 16:03:00 2012 us=828560 Socket Buffers: R=[87380->131072] S=[16384->131072]
Tue Sep 25 16:03:00 2012 us=831184 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Sep 25 16:03:00 2012 us=831260 Local Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Sep 25 16:03:00 2012 us=831283 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Sep 25 16:03:00 2012 us=831377 Local Options hash (VER=V4): '31fdf004'
Tue Sep 25 16:03:00 2012 us=831412 Expected Remote Options hash (VER=V4): '3e6d1056'
Tue Sep 25 16:03:00 2012 us=831504 Attempting to establish TCP connection with 123.45.67.890:6789 [nonblock]
Tue Sep 25 16:03:01 2012 us=831941 TCP connection established with 123.45.67.890:6789
Tue Sep 25 16:03:01 2012 us=832016 TCPv4_CLIENT link local: [undef]
Tue Sep 25 16:03:01 2012 us=832041 TCPv4_CLIENT link remote: 123.45.67.890:6789
Tue Sep 25 16:04:01 2012 us=68418 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Sep 25 16:04:01 2012 us=68497 TLS Error: TLS handshake failed
Tue Sep 25 16:04:01 2012 us=68646 Fatal TLS error (check_tls_errors_co), restarting
Tue Sep 25 16:04:01 2012 us=68763 TCP/UDP: Closing socket
Tue Sep 25 16:04:01 2012 us=68946 SIGUSR1[soft,tls-error] received, process restarting
Tue Sep 25 16:04:01 2012 us=68991 Restart pause, 5 second(s)
Tue Sep 25 16:04:06 2012 us=69213 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Sep 25 16:04:06 2012 us=69287 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Sep 25 16:04:06 2012 us=69324 Re-using SSL/TLS context
Tue Sep 25 16:04:06 2012 us=69386 LZO compression initialized
Tue Sep 25 16:04:06 2012 us=69470 Control Channel MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Sep 25 16:04:06 2012 us=69537 Socket Buffers: R=[87380->131072] S=[16384->131072]
Tue Sep 25 16:04:06 2012 us=70594 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Sep 25 16:04:06 2012 us=99783 Local Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Sep 25 16:04:06 2012 us=99824 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Sep 25 16:04:06 2012 us=99903 Local Options hash (VER=V4): '31fdf004'
Tue Sep 25 16:04:06 2012 us=99992 Expected Remote Options hash (VER=V4): '3e6d1056'
Tue Sep 25 16:04:06 2012 us=100028 Attempting to establish TCP connection with 123.45.67.890:6789 [nonblock]
Tue Sep 25 16:04:07 2012 us=100292 TCP connection established with 123.45.67.890:6789
Tue Sep 25 16:04:07 2012 us=100363 TCPv4_CLIENT link local: [undef]
Tue Sep 25 16:04:07 2012 us=100390 TCPv4_CLIENT link remote: 123.45.67.890:6789
Tue Sep 25 16:04:32 2012 us=595018 event_wait : Interrupted system call (code=4)
Tue Sep 25 16:04:32 2012 us=595195 TCP/UDP: Closing socket
Tue Sep 25 16:04:32 2012 us=595315 SIGINT[hard,] received, process exiting
I've logged packets using iptables on the fedora host, and I know that I'm getting packets going in both directions. I forwarded port 6789 on the router to the fedora host, but closed that port once it didn't prove helpful. The router is set up to allow all connections out, and related and established connections in.
I've also tried using the OpenVPN android client via my wireless provider and a number of wifi access points. I get the same two TLS Errors. Here's the config file that the android client generated for me:
# Enables connection to GUI
management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold
# Log window is better readable this way
suppress-timestamps
client
verb 1
connect-retry-max 5
resolv-retry 5
dev tun
remote vpn.provider.com 6789 tcp-client
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
MIIDm.... more certificate
-----END CERTIFICATE-----
</ca>
comp-lzo
route-ipv6 ::/0
route 0.0.0.0 0.0.0.0
remote-cert-tls server
# Use system proxy setting
management-query-proxy
Any tests you could suggest to further elucidate the problem would be greatly appreciated.
Thanks,
Drew
