Hello,
I have been trying to resolve the following error messages but have had no success
Tue Nov 13 22:56:30 2012 us=198748 192.168.0.12:42679 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Nov 13 22:56:30 2012 us=198758 192.168.0.12:42679 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Nov 13 22:56:30 2012 us=198769 192.168.0.12:42679 Local Options hash (VER=V4): '239669a8'
Tue Nov 13 22:56:30 2012 us=198776 192.168.0.12:42679 Expected Remote Options hash (VER=V4): '3514370b'
Tue Nov 13 22:56:30 2012 us=198796 192.168.0.12:42679 TLS: Initial packet from [AF_INET]192.168.0.12:42679, sid=e1658de0 63f162a0
Tue Nov 13 22:56:30 2012 us=210215 192.168.0.12:42679 VERIFY ERROR: depth=0, error=unsupported certificate purpose: /C=US/ST=CA/L=SanFrancisco/O=UNSUPPORTED/CN=client.example.net/emailAddress=damian@googlemail.com
Tue Nov 13 22:56:30 2012 us=210265 192.168.0.12:42679 TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
Tue Nov 13 22:56:30 2012 us=210272 192.168.0.12:42679 TLS Error: TLS object -> incoming plaintext read error
Tue Nov 13 22:56:30 2012 us=210277 192.168.0.12:42679 TLS Error: TLS handshake failed
Tue Nov 13 22:56:30 2012 us=210312 192.168.0.12:42679 SIGUSR1[soft,tls-error] received, client-instance restarting
My server configuration is
proto udp
port 1194
dev tun
server 192.168.100.0 255.255.255.0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
and the client configuration is
client
proto udp
remote 192.168.0.12
port 1194
dev tun
nobind
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.example.net.crt
key /etc/openvpn/client.example.net.key
The logs that I am getting from the server side are (Sorry for the long post)
root@damian-h9-1210t:/etc/openvpn# openvpn --config openvpn-server.conf --verb 4
Tue Nov 13 22:59:27 2012 us=779094 Current Parameter Settings:
Tue Nov 13 22:59:27 2012 us=779167 config = 'openvpn-server.conf'
Tue Nov 13 22:59:27 2012 us=779188 mode = 1
Tue Nov 13 22:59:27 2012 us=779205 persist_config = DISABLED
Tue Nov 13 22:59:27 2012 us=779242 persist_mode = 1
Tue Nov 13 22:59:27 2012 us=779258 show_ciphers = DISABLED
Tue Nov 13 22:59:27 2012 us=779285 show_digests = DISABLED
Tue Nov 13 22:59:27 2012 us=779302 show_engines = DISABLED
Tue Nov 13 22:59:27 2012 us=779325 genkey = DISABLED
Tue Nov 13 22:59:27 2012 us=779348 key_pass_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779371 show_tls_ciphers = DISABLED
Tue Nov 13 22:59:27 2012 us=779395 Connection profiles [default]:
Tue Nov 13 22:59:27 2012 us=779414 proto = udp
Tue Nov 13 22:59:27 2012 us=779431 local = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779449 local_port = 1194
Tue Nov 13 22:59:27 2012 us=779470 remote = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779487 remote_port = 1194
Tue Nov 13 22:59:27 2012 us=779505 remote_float = DISABLED
Tue Nov 13 22:59:27 2012 us=779523 bind_defined = DISABLED
Tue Nov 13 22:59:27 2012 us=779540 bind_local = ENABLED
Tue Nov 13 22:59:27 2012 us=779556 connect_retry_seconds = 5
Tue Nov 13 22:59:27 2012 us=779575 connect_timeout = 10
Tue Nov 13 22:59:27 2012 us=779592 connect_retry_max = 0
Tue Nov 13 22:59:27 2012 us=779610 socks_proxy_server = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779626 socks_proxy_port = 0
Tue Nov 13 22:59:27 2012 us=779644 socks_proxy_retry = DISABLED
Tue Nov 13 22:59:27 2012 us=779662 Connection profiles END
Tue Nov 13 22:59:27 2012 us=779681 remote_random = DISABLED
Tue Nov 13 22:59:27 2012 us=779698 ipchange = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779715 dev = 'tun'
Tue Nov 13 22:59:27 2012 us=779731 dev_type = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779750 dev_node = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779767 lladdr = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779786 topology = 1
Tue Nov 13 22:59:27 2012 us=779803 tun_ipv6 = DISABLED
Tue Nov 13 22:59:27 2012 us=779822 ifconfig_local = '192.168.100.1'
Tue Nov 13 22:59:27 2012 us=779842 ifconfig_remote_netmask = '192.168.100.2'
Tue Nov 13 22:59:27 2012 us=779859 ifconfig_noexec = DISABLED
Tue Nov 13 22:59:27 2012 us=779878 ifconfig_nowarn = DISABLED
Tue Nov 13 22:59:27 2012 us=779896 ifconfig_ipv6_local = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779913 ifconfig_ipv6_netbits = 0
Tue Nov 13 22:59:27 2012 us=779929 ifconfig_ipv6_remote = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=779948 shaper = 0
Tue Nov 13 22:59:27 2012 us=779964 tun_mtu = 1500
Tue Nov 13 22:59:27 2012 us=779982 tun_mtu_defined = ENABLED
Tue Nov 13 22:59:27 2012 us=779999 link_mtu = 1500
Tue Nov 13 22:59:27 2012 us=780017 link_mtu_defined = DISABLED
Tue Nov 13 22:59:27 2012 us=780034 tun_mtu_extra = 0
Tue Nov 13 22:59:27 2012 us=780050 tun_mtu_extra_defined = DISABLED
Tue Nov 13 22:59:27 2012 us=780068 fragment = 0
Tue Nov 13 22:59:27 2012 us=780085 mtu_discover_type = -1
Tue Nov 13 22:59:27 2012 us=780102 mtu_test = 0
Tue Nov 13 22:59:27 2012 us=780120 mlock = DISABLED
Tue Nov 13 22:59:27 2012 us=780138 keepalive_ping = 0
Tue Nov 13 22:59:27 2012 us=780156 keepalive_timeout = 0
Tue Nov 13 22:59:27 2012 us=780174 inactivity_timeout = 0
Tue Nov 13 22:59:27 2012 us=780190 ping_send_timeout = 0
Tue Nov 13 22:59:27 2012 us=780209 ping_rec_timeout = 0
Tue Nov 13 22:59:27 2012 us=780227 ping_rec_timeout_action = 0
Tue Nov 13 22:59:27 2012 us=780244 ping_timer_remote = DISABLED
Tue Nov 13 22:59:27 2012 us=780261 remap_sigusr1 = 0
Tue Nov 13 22:59:27 2012 us=780277 explicit_exit_notification = 0
Tue Nov 13 22:59:27 2012 us=780297 persist_tun = DISABLED
Tue Nov 13 22:59:27 2012 us=780314 persist_local_ip = DISABLED
Tue Nov 13 22:59:27 2012 us=780332 persist_remote_ip = DISABLED
Tue Nov 13 22:59:27 2012 us=780349 persist_key = DISABLED
Tue Nov 13 22:59:27 2012 us=780367 mssfix = 1450
Tue Nov 13 22:59:27 2012 us=780385 passtos = DISABLED
Tue Nov 13 22:59:27 2012 us=780401 resolve_retry_seconds = 1000000000
Tue Nov 13 22:59:27 2012 us=780417 username = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780433 groupname = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780449 chroot_dir = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780464 cd_dir = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780480 writepid = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780495 up_script = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780511 down_script = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780526 down_pre = DISABLED
Tue Nov 13 22:59:27 2012 us=780542 up_restart = DISABLED
Tue Nov 13 22:59:27 2012 us=780558 up_delay = DISABLED
Tue Nov 13 22:59:27 2012 us=780573 daemon = DISABLED
Tue Nov 13 22:59:27 2012 us=780589 inetd = 0
Tue Nov 13 22:59:27 2012 us=780605 log = DISABLED
Tue Nov 13 22:59:27 2012 us=780620 suppress_timestamps = DISABLED
Tue Nov 13 22:59:27 2012 us=780636 nice = 0
Tue Nov 13 22:59:27 2012 us=780652 verbosity = 4
Tue Nov 13 22:59:27 2012 us=780667 mute = 0
Tue Nov 13 22:59:27 2012 us=780683 gremlin = 0
Tue Nov 13 22:59:27 2012 us=780698 status_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780714 status_file_version = 1
Tue Nov 13 22:59:27 2012 us=780730 status_file_update_freq = 60
Tue Nov 13 22:59:27 2012 us=780753 occ = ENABLED
Tue Nov 13 22:59:27 2012 us=780770 rcvbuf = 65536
Tue Nov 13 22:59:27 2012 us=780786 sndbuf = 65536
Tue Nov 13 22:59:27 2012 us=780802 sockflags = 0
Tue Nov 13 22:59:27 2012 us=780817 fast_io = DISABLED
Tue Nov 13 22:59:27 2012 us=780833 lzo = 0
Tue Nov 13 22:59:27 2012 us=780848 route_script = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780864 route_default_gateway = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=780880 route_default_metric = 0
Tue Nov 13 22:59:27 2012 us=780896 route_noexec = DISABLED
Tue Nov 13 22:59:27 2012 us=780912 route_delay = 0
Tue Nov 13 22:59:27 2012 us=780928 route_delay_window = 30
Tue Nov 13 22:59:27 2012 us=780944 route_delay_defined = DISABLED
Tue Nov 13 22:59:27 2012 us=780960 route_nopull = DISABLED
Tue Nov 13 22:59:27 2012 us=780976 route_gateway_via_dhcp = DISABLED
Tue Nov 13 22:59:27 2012 us=780992 max_routes = 100
Tue Nov 13 22:59:27 2012 us=781008 allow_pull_fqdn = DISABLED
Tue Nov 13 22:59:27 2012 us=781027 route 192.168.100.0/255.255.255.0/nil/nil
Tue Nov 13 22:59:27 2012 us=781043 management_addr = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781059 management_port = 0
Tue Nov 13 22:59:27 2012 us=781075 management_user_pass = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781092 management_log_history_cache = 250
Tue Nov 13 22:59:27 2012 us=781108 management_echo_buffer_size = 100
Tue Nov 13 22:59:27 2012 us=781124 management_write_peer_info_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781140 management_client_user = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781156 management_client_group = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781172 management_flags = 0
Tue Nov 13 22:59:27 2012 us=781188 shared_secret_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781204 key_direction = 0
Tue Nov 13 22:59:27 2012 us=781220 ciphername_defined = ENABLED
Tue Nov 13 22:59:27 2012 us=781236 ciphername = 'BF-CBC'
Tue Nov 13 22:59:27 2012 us=781252 authname_defined = ENABLED
Tue Nov 13 22:59:27 2012 us=781268 authname = 'SHA1'
Tue Nov 13 22:59:27 2012 us=781283 prng_hash = 'SHA1'
Tue Nov 13 22:59:27 2012 us=781299 prng_nonce_secret_len = 16
Tue Nov 13 22:59:27 2012 us=781315 keysize = 0
Tue Nov 13 22:59:27 2012 us=781330 engine = DISABLED
Tue Nov 13 22:59:27 2012 us=781346 replay = ENABLED
Tue Nov 13 22:59:27 2012 us=781362 mute_replay_warnings = DISABLED
Tue Nov 13 22:59:27 2012 us=781378 replay_window = 64
Tue Nov 13 22:59:27 2012 us=781394 replay_time = 15
Tue Nov 13 22:59:27 2012 us=781409 packet_id_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781425 use_iv = ENABLED
Tue Nov 13 22:59:27 2012 us=781440 test_crypto = DISABLED
Tue Nov 13 22:59:27 2012 us=781456 tls_server = ENABLED
Tue Nov 13 22:59:27 2012 us=781472 tls_client = DISABLED
Tue Nov 13 22:59:27 2012 us=781488 key_method = 2
Tue Nov 13 22:59:27 2012 us=781504 ca_file = '/etc/openvpn/keys/ca.crt'
Tue Nov 13 22:59:27 2012 us=781519 ca_path = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781535 dh_file = '/etc/openvpn/keys/dh1024.pem'
Tue Nov 13 22:59:27 2012 us=781551 cert_file = '/etc/openvpn/keys/server.crt'
Tue Nov 13 22:59:27 2012 us=781566 priv_key_file = '/etc/openvpn/keys/server.key'
Tue Nov 13 22:59:27 2012 us=781582 pkcs12_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781597 cipher_list = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781612 tls_verify = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781628 tls_export_cert = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781643 tls_remote = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781658 crl_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781673 ns_cert_type = 0
Tue Nov 13 22:59:27 2012 us=781689 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781704 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781720 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781735 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781750 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781765 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781780 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781795 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781810 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781825 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781840 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781855 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781870 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781885 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781900 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781916 remote_cert_ku[i] = 0
Tue Nov 13 22:59:27 2012 us=781931 remote_cert_eku = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=781946 tls_timeout = 2
Tue Nov 13 22:59:27 2012 us=781961 renegotiate_bytes = 0
Tue Nov 13 22:59:27 2012 us=781976 renegotiate_packets = 0
Tue Nov 13 22:59:27 2012 us=781992 renegotiate_seconds = 3600
Tue Nov 13 22:59:27 2012 us=782007 handshake_window = 60
Tue Nov 13 22:59:27 2012 us=782022 transition_window = 3600
Tue Nov 13 22:59:27 2012 us=782037 single_session = DISABLED
Tue Nov 13 22:59:27 2012 us=782052 push_peer_info = DISABLED
Tue Nov 13 22:59:27 2012 us=782068 tls_exit = DISABLED
Tue Nov 13 22:59:27 2012 us=782083 tls_auth_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=782098 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782113 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782129 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782144 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782159 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782175 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782190 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782205 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782220 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782235 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782251 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782266 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782281 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782296 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782311 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782327 pkcs11_protected_authentication = DISABLED
Tue Nov 13 22:59:27 2012 us=782345 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782362 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782377 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782393 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782408 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782424 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782439 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782454 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782470 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782485 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782500 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782516 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782531 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782546 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782561 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782577 pkcs11_private_mode = 00000000
Tue Nov 13 22:59:27 2012 us=782592 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782607 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782622 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782638 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782653 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782668 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782683 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782698 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782713 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782728 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782743 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782758 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782773 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782788 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782803 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782818 pkcs11_cert_private = DISABLED
Tue Nov 13 22:59:27 2012 us=782834 pkcs11_pin_cache_period = -1
Tue Nov 13 22:59:27 2012 us=782849 pkcs11_id = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=782864 pkcs11_id_management = DISABLED
Tue Nov 13 22:59:27 2012 us=782881 server_network = 192.168.100.0
Tue Nov 13 22:59:27 2012 us=782898 server_netmask = 255.255.255.0
Tue Nov 13 22:59:27 2012 us=782921 server_network_ipv6 = ::
Tue Nov 13 22:59:27 2012 us=782937 server_netbits_ipv6 = 0
Tue Nov 13 22:59:27 2012 us=782954 server_bridge_ip = 0.0.0.0
Tue Nov 13 22:59:27 2012 us=782970 server_bridge_netmask = 0.0.0.0
Tue Nov 13 22:59:27 2012 us=782987 server_bridge_pool_start = 0.0.0.0
Tue Nov 13 22:59:27 2012 us=783003 server_bridge_pool_end = 0.0.0.0
Tue Nov 13 22:59:27 2012 us=785598 push_entry = 'route 192.168.100.1'
Tue Nov 13 22:59:27 2012 us=785631 push_entry = 'topology net30'
Tue Nov 13 22:59:27 2012 us=785652 ifconfig_pool_defined = ENABLED
Tue Nov 13 22:59:27 2012 us=785671 ifconfig_pool_start = 192.168.100.4
Tue Nov 13 22:59:27 2012 us=785688 ifconfig_pool_end = 192.168.100.251
Tue Nov 13 22:59:27 2012 us=785705 ifconfig_pool_netmask = 0.0.0.0
Tue Nov 13 22:59:27 2012 us=785721 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=785737 ifconfig_pool_persist_refresh_freq = 600
Tue Nov 13 22:59:27 2012 us=785753 ifconfig_ipv6_pool_defined = DISABLED
Tue Nov 13 22:59:27 2012 us=785770 ifconfig_ipv6_pool_base = ::
Tue Nov 13 22:59:27 2012 us=785786 ifconfig_ipv6_pool_netbits = 0
Tue Nov 13 22:59:27 2012 us=785802 n_bcast_buf = 256
Tue Nov 13 22:59:27 2012 us=785818 tcp_queue_limit = 64
Tue Nov 13 22:59:27 2012 us=785833 real_hash_size = 256
Tue Nov 13 22:59:27 2012 us=785848 virtual_hash_size = 256
Tue Nov 13 22:59:27 2012 us=785863 client_connect_script = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=785879 learn_address_script = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=785895 client_disconnect_script = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=785910 client_config_dir = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=785926 ccd_exclusive = DISABLED
Tue Nov 13 22:59:27 2012 us=785941 tmp_dir = '/tmp'
Tue Nov 13 22:59:27 2012 us=785956 push_ifconfig_defined = DISABLED
Tue Nov 13 22:59:27 2012 us=785973 push_ifconfig_local = 0.0.0.0
Tue Nov 13 22:59:27 2012 us=785990 push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 13 22:59:27 2012 us=786005 push_ifconfig_ipv6_defined = DISABLED
Tue Nov 13 22:59:27 2012 us=786022 push_ifconfig_ipv6_local = ::/0
Tue Nov 13 22:59:27 2012 us=786038 push_ifconfig_ipv6_remote = ::
Tue Nov 13 22:59:27 2012 us=786054 enable_c2c = DISABLED
Tue Nov 13 22:59:27 2012 us=786069 duplicate_cn = DISABLED
Tue Nov 13 22:59:27 2012 us=786085 cf_max = 0
Tue Nov 13 22:59:27 2012 us=786100 cf_per = 0
Tue Nov 13 22:59:27 2012 us=786115 max_clients = 1024
Tue Nov 13 22:59:27 2012 us=786131 max_routes_per_client = 256
Tue Nov 13 22:59:27 2012 us=786146 auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=786162 auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 13 22:59:27 2012 us=786178 ssl_flags = 0
Tue Nov 13 22:59:27 2012 us=786194 port_share_host = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=786209 port_share_port = 0
Tue Nov 13 22:59:27 2012 us=786224 client = DISABLED
Tue Nov 13 22:59:27 2012 us=786240 pull = DISABLED
Tue Nov 13 22:59:27 2012 us=786255 auth_user_pass_file = '[UNDEF]'
Tue Nov 13 22:59:27 2012 us=786276 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 30 2012
Tue Nov 13 22:59:27 2012 us=786395 WARNING: --keepalive option is missing from server config
Tue Nov 13 22:59:27 2012 us=786515 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Nov 13 22:59:27 2012 us=786540 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov 13 22:59:27 2012 us=788168 Diffie-Hellman initialized with 1024 bit key
Tue Nov 13 22:59:27 2012 us=788929 TLS-Auth MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Nov 13 22:59:27 2012 us=788974 Socket Buffers: R=[229376->131072] S=[229376->131072]
Tue Nov 13 22:59:27 2012 us=789131 ROUTE default_gateway=192.168.0.1
Tue Nov 13 22:59:27 2012 us=789923 TUN/TAP device tun0 opened
Tue Nov 13 22:59:27 2012 us=789958 TUN/TAP TX queue length set to 100
Tue Nov 13 22:59:27 2012 us=789986 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Nov 13 22:59:27 2012 us=790024 /sbin/ifconfig tun0 192.168.100.1 pointopoint 192.168.100.2 mtu 1500
Tue Nov 13 22:59:27 2012 us=795007 /sbin/route add -net 192.168.100.0 netmask 255.255.255.0 gw 192.168.100.2
Tue Nov 13 22:59:27 2012 us=795980 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Tue Nov 13 22:59:27 2012 us=796018 UDPv4 link local (bound): [undef]
Tue Nov 13 22:59:27 2012 us=796029 UDPv4 link remote: [undef]
Tue Nov 13 22:59:27 2012 us=796049 MULTI: multi_init called, r=256 v=256
Tue Nov 13 22:59:27 2012 us=796095 IFCONFIG POOL: base=192.168.100.4 size=62, ipv6=0
Tue Nov 13 22:59:27 2012 us=796123 Initialization Sequence Completed
The client side logs show
Tue Nov 13 23:00:33 2012 us=838066 Current Parameter Settings:
Tue Nov 13 23:00:33 2012 us=838115 config = 'openvpn-client.conf'
Tue Nov 13 23:00:33 2012 us=838123 mode = 0
Tue Nov 13 23:00:33 2012 us=838128 persist_config = DISABLED
Tue Nov 13 23:00:33 2012 us=838134 persist_mode = 1
Tue Nov 13 23:00:33 2012 us=838139 show_ciphers = DISABLED
Tue Nov 13 23:00:33 2012 us=838145 show_digests = DISABLED
Tue Nov 13 23:00:33 2012 us=838155 show_engines = DISABLED
Tue Nov 13 23:00:33 2012 us=838166 genkey = DISABLED
Tue Nov 13 23:00:33 2012 us=838174 key_pass_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838179 show_tls_ciphers = DISABLED
Tue Nov 13 23:00:33 2012 us=838184 Connection profiles [default]:
Tue Nov 13 23:00:33 2012 us=838190 proto = udp
Tue Nov 13 23:00:33 2012 us=838195 local = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838200 local_port = 0
Tue Nov 13 23:00:33 2012 us=838204 remote = '192.168.0.12'
Tue Nov 13 23:00:33 2012 us=838210 remote_port = 1194
Tue Nov 13 23:00:33 2012 us=838214 remote_float = DISABLED
Tue Nov 13 23:00:33 2012 us=838219 bind_defined = DISABLED
Tue Nov 13 23:00:33 2012 us=838224 bind_local = DISABLED
Tue Nov 13 23:00:33 2012 us=838229 connect_retry_seconds = 5
Tue Nov 13 23:00:33 2012 us=838234 connect_timeout = 10
Tue Nov 13 23:00:33 2012 us=838239 connect_retry_max = 0
Tue Nov 13 23:00:33 2012 us=838244 socks_proxy_server = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838250 socks_proxy_port = 0
Tue Nov 13 23:00:33 2012 us=838254 socks_proxy_retry = DISABLED
Tue Nov 13 23:00:33 2012 us=838261 Connection profiles END
Tue Nov 13 23:00:33 2012 us=838267 remote_random = DISABLED
Tue Nov 13 23:00:33 2012 us=838272 ipchange = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838277 dev = 'tun'
Tue Nov 13 23:00:33 2012 us=838281 dev_type = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838286 dev_node = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838291 lladdr = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838296 topology = 1
Tue Nov 13 23:00:33 2012 us=838300 tun_ipv6 = DISABLED
Tue Nov 13 23:00:33 2012 us=838305 ifconfig_local = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838310 ifconfig_remote_netmask = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838315 ifconfig_noexec = DISABLED
Tue Nov 13 23:00:33 2012 us=838320 ifconfig_nowarn = DISABLED
Tue Nov 13 23:00:33 2012 us=838325 shaper = 0
Tue Nov 13 23:00:33 2012 us=838329 tun_mtu = 1500
Tue Nov 13 23:00:33 2012 us=838334 tun_mtu_defined = ENABLED
Tue Nov 13 23:00:33 2012 us=838339 link_mtu = 1500
Tue Nov 13 23:00:33 2012 us=838344 link_mtu_defined = DISABLED
Tue Nov 13 23:00:33 2012 us=838348 tun_mtu_extra = 0
Tue Nov 13 23:00:33 2012 us=838353 tun_mtu_extra_defined = DISABLED
Tue Nov 13 23:00:33 2012 us=838358 fragment = 0
Tue Nov 13 23:00:33 2012 us=838363 mtu_discover_type = -1
Tue Nov 13 23:00:33 2012 us=838368 mtu_test = 0
Tue Nov 13 23:00:33 2012 us=838372 mlock = DISABLED
Tue Nov 13 23:00:33 2012 us=838377 keepalive_ping = 0
Tue Nov 13 23:00:33 2012 us=838382 keepalive_timeout = 0
Tue Nov 13 23:00:33 2012 us=838387 inactivity_timeout = 0
Tue Nov 13 23:00:33 2012 us=838391 ping_send_timeout = 0
Tue Nov 13 23:00:33 2012 us=838396 ping_rec_timeout = 0
Tue Nov 13 23:00:33 2012 us=838401 ping_rec_timeout_action = 0
Tue Nov 13 23:00:33 2012 us=838406 ping_timer_remote = DISABLED
Tue Nov 13 23:00:33 2012 us=838410 remap_sigusr1 = 0
Tue Nov 13 23:00:33 2012 us=838415 explicit_exit_notification = 0
Tue Nov 13 23:00:33 2012 us=838420 persist_tun = DISABLED
Tue Nov 13 23:00:33 2012 us=838425 persist_local_ip = DISABLED
Tue Nov 13 23:00:33 2012 us=838429 persist_remote_ip = DISABLED
Tue Nov 13 23:00:33 2012 us=838434 persist_key = DISABLED
Tue Nov 13 23:00:33 2012 us=838439 mssfix = 1450
Tue Nov 13 23:00:33 2012 us=838444 passtos = DISABLED
Tue Nov 13 23:00:33 2012 us=838448 resolve_retry_seconds = 1000000000
Tue Nov 13 23:00:33 2012 us=838453 username = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838458 groupname = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838463 chroot_dir = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838467 cd_dir = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838472 selinux_context = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838477 writepid = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838482 up_script = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838486 down_script = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838491 down_pre = DISABLED
Tue Nov 13 23:00:33 2012 us=838496 up_restart = DISABLED
Tue Nov 13 23:00:33 2012 us=838500 up_delay = DISABLED
Tue Nov 13 23:00:33 2012 us=838505 daemon = DISABLED
Tue Nov 13 23:00:33 2012 us=838510 inetd = 0
Tue Nov 13 23:00:33 2012 us=838514 log = DISABLED
Tue Nov 13 23:00:33 2012 us=838519 suppress_timestamps = DISABLED
Tue Nov 13 23:00:33 2012 us=838524 nice = 0
Tue Nov 13 23:00:33 2012 us=838529 verbosity = 4
Tue Nov 13 23:00:33 2012 us=838534 mute = 0
Tue Nov 13 23:00:33 2012 us=838538 gremlin = 0
Tue Nov 13 23:00:33 2012 us=838543 status_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838548 status_file_version = 1
Tue Nov 13 23:00:33 2012 us=838553 status_file_update_freq = 60
Tue Nov 13 23:00:33 2012 us=838557 occ = ENABLED
Tue Nov 13 23:00:33 2012 us=838562 rcvbuf = 65536
Tue Nov 13 23:00:33 2012 us=838567 sndbuf = 65536
Tue Nov 13 23:00:33 2012 us=838572 sockflags = 0
Tue Nov 13 23:00:33 2012 us=838576 fast_io = DISABLED
Tue Nov 13 23:00:33 2012 us=838581 lzo = 0
Tue Nov 13 23:00:33 2012 us=838586 route_script = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838590 route_default_gateway = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838595 route_default_metric = 0
Tue Nov 13 23:00:33 2012 us=838600 route_noexec = DISABLED
Tue Nov 13 23:00:33 2012 us=838605 route_delay = 0
Tue Nov 13 23:00:33 2012 us=838610 route_delay_window = 30
Tue Nov 13 23:00:33 2012 us=838614 route_delay_defined = DISABLED
Tue Nov 13 23:00:33 2012 us=838619 route_nopull = DISABLED
Tue Nov 13 23:00:33 2012 us=838624 route_gateway_via_dhcp = DISABLED
Tue Nov 13 23:00:33 2012 us=838629 max_routes = 100
Tue Nov 13 23:00:33 2012 us=838634 allow_pull_fqdn = DISABLED
Tue Nov 13 23:00:33 2012 us=838639 management_addr = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838644 management_port = 0
Tue Nov 13 23:00:33 2012 us=838649 management_user_pass = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838654 management_log_history_cache = 250
Tue Nov 13 23:00:33 2012 us=838659 management_echo_buffer_size = 100
Tue Nov 13 23:00:33 2012 us=838665 management_write_peer_info_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838670 management_client_user = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838675 management_client_group = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838680 management_flags = 0
Tue Nov 13 23:00:33 2012 us=838685 shared_secret_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=838690 key_direction = 0
Tue Nov 13 23:00:33 2012 us=838695 ciphername_defined = ENABLED
Tue Nov 13 23:00:33 2012 us=838700 ciphername = 'BF-CBC'
Tue Nov 13 23:00:33 2012 us=838705 authname_defined = ENABLED
Tue Nov 13 23:00:33 2012 us=839394 authname = 'SHA1'
Tue Nov 13 23:00:33 2012 us=839403 prng_hash = 'SHA1'
Tue Nov 13 23:00:33 2012 us=839408 prng_nonce_secret_len = 16
Tue Nov 13 23:00:33 2012 us=839413 keysize = 0
Tue Nov 13 23:00:33 2012 us=839419 engine = DISABLED
Tue Nov 13 23:00:33 2012 us=839424 replay = ENABLED
Tue Nov 13 23:00:33 2012 us=839429 mute_replay_warnings = DISABLED
Tue Nov 13 23:00:33 2012 us=839434 replay_window = 64
Tue Nov 13 23:00:33 2012 us=839439 replay_time = 15
Tue Nov 13 23:00:33 2012 us=839444 packet_id_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839449 use_iv = ENABLED
Tue Nov 13 23:00:33 2012 us=839454 test_crypto = DISABLED
Tue Nov 13 23:00:33 2012 us=839459 tls_server = DISABLED
Tue Nov 13 23:00:33 2012 us=839464 tls_client = ENABLED
Tue Nov 13 23:00:33 2012 us=839469 key_method = 2
Tue Nov 13 23:00:33 2012 us=839475 ca_file = '/etc/openvpn/ca.crt'
Tue Nov 13 23:00:33 2012 us=839480 ca_path = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839485 dh_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839490 cert_file = '/etc/openvpn/client.example.net.crt'
Tue Nov 13 23:00:33 2012 us=839495 priv_key_file = '/etc/openvpn/client.example.net.key'
Tue Nov 13 23:00:33 2012 us=839501 pkcs12_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839506 cipher_list = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839511 tls_verify = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839516 tls_export_cert = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839521 tls_remote = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839526 crl_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839531 ns_cert_type = 0
Tue Nov 13 23:00:33 2012 us=839536 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839541 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839546 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839551 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839556 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839561 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839566 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839571 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839576 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839581 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839586 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839591 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839596 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839601 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839606 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839611 remote_cert_ku[i] = 0
Tue Nov 13 23:00:33 2012 us=839616 remote_cert_eku = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839622 tls_timeout = 2
Tue Nov 13 23:00:33 2012 us=839626 renegotiate_bytes = 0
Tue Nov 13 23:00:33 2012 us=839631 renegotiate_packets = 0
Tue Nov 13 23:00:33 2012 us=839636 renegotiate_seconds = 3600
Tue Nov 13 23:00:33 2012 us=839641 handshake_window = 60
Tue Nov 13 23:00:33 2012 us=839646 transition_window = 3600
Tue Nov 13 23:00:33 2012 us=839651 single_session = DISABLED
Tue Nov 13 23:00:33 2012 us=839656 push_peer_info = DISABLED
Tue Nov 13 23:00:33 2012 us=839661 tls_exit = DISABLED
Tue Nov 13 23:00:33 2012 us=839666 tls_auth_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839671 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839676 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839681 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839686 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839692 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839697 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839702 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839707 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839712 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839717 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839722 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839727 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839732 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839737 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839743 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839748 pkcs11_protected_authentication = DISABLED
Tue Nov 13 23:00:33 2012 us=839753 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839758 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839764 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839771 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839777 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839783 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839788 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839793 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839798 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839803 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839808 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839813 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839818 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839823 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839828 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839833 pkcs11_private_mode = 00000000
Tue Nov 13 23:00:33 2012 us=839838 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839843 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839848 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839853 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839858 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839863 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839868 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839873 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839878 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839883 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839888 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839893 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839898 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839903 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839908 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839913 pkcs11_cert_private = DISABLED
Tue Nov 13 23:00:33 2012 us=839918 pkcs11_pin_cache_period = -1
Tue Nov 13 23:00:33 2012 us=839923 pkcs11_id = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=839928 pkcs11_id_management = DISABLED
Tue Nov 13 23:00:33 2012 us=841007 server_network = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841016 server_netmask = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841022 server_bridge_ip = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841028 server_bridge_netmask = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841034 server_bridge_pool_start = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841039 server_bridge_pool_end = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841045 ifconfig_pool_defined = DISABLED
Tue Nov 13 23:00:33 2012 us=841050 ifconfig_pool_start = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841056 ifconfig_pool_end = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841061 ifconfig_pool_netmask = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841067 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841072 ifconfig_pool_persist_refresh_freq = 600
Tue Nov 13 23:00:33 2012 us=841077 n_bcast_buf = 256
Tue Nov 13 23:00:33 2012 us=841082 tcp_queue_limit = 64
Tue Nov 13 23:00:33 2012 us=841087 real_hash_size = 256
Tue Nov 13 23:00:33 2012 us=841092 virtual_hash_size = 256
Tue Nov 13 23:00:33 2012 us=841097 client_connect_script = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841102 learn_address_script = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841107 client_disconnect_script = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841112 client_config_dir = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841117 ccd_exclusive = DISABLED
Tue Nov 13 23:00:33 2012 us=841123 tmp_dir = '/tmp'
Tue Nov 13 23:00:33 2012 us=841128 push_ifconfig_defined = DISABLED
Tue Nov 13 23:00:33 2012 us=841133 push_ifconfig_local = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841139 push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 13 23:00:33 2012 us=841144 enable_c2c = DISABLED
Tue Nov 13 23:00:33 2012 us=841149 duplicate_cn = DISABLED
Tue Nov 13 23:00:33 2012 us=841154 cf_max = 0
Tue Nov 13 23:00:33 2012 us=841159 cf_per = 0
Tue Nov 13 23:00:33 2012 us=841164 max_clients = 1024
Tue Nov 13 23:00:33 2012 us=841169 max_routes_per_client = 256
Tue Nov 13 23:00:33 2012 us=841173 auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841179 auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 13 23:00:33 2012 us=841184 ssl_flags = 0
Tue Nov 13 23:00:33 2012 us=841188 port_share_host = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841193 port_share_port = 0
Tue Nov 13 23:00:33 2012 us=841198 client = ENABLED
Tue Nov 13 23:00:33 2012 us=841203 pull = ENABLED
Tue Nov 13 23:00:33 2012 us=841208 auth_user_pass_file = '[UNDEF]'
Tue Nov 13 23:00:33 2012 us=841215 OpenVPN 2.2.2 x86_64-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Aug 10 2012
Tue Nov 13 23:00:33 2012 us=841262 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue Nov 13 23:00:33 2012 us=841270 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Nov 13 23:00:33 2012 us=842475 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Nov 13 23:00:33 2012 us=842510 Socket Buffers: R=[229376->131072] S=[229376->131072]
Tue Nov 13 23:00:33 2012 us=842527 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Tue Nov 13 23:00:33 2012 us=842538 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Nov 13 23:00:33 2012 us=842544 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Nov 13 23:00:33 2012 us=842556 Local Options hash (VER=V4): '3514370b'
Tue Nov 13 23:00:33 2012 us=842564 Expected Remote Options hash (VER=V4): '239669a8'
Tue Nov 13 23:00:33 2012 us=842575 UDPv4 link local: [undef]
Tue Nov 13 23:00:33 2012 us=842582 UDPv4 link remote: 192.168.0.12:1194
Tue Nov 13 23:00:33 2012 us=843399 TLS: Initial packet from 192.168.0.12:1194, sid=dd703b49 a3315d7b
Tue Nov 13 23:00:33 2012 us=848826 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=UNSUPPORTED/CN=UNSUPPORTED_CA/emailAddress=damian@googlemail.com
Tue Nov 13 23:00:33 2012 us=848939 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=UNSUPPORTED/CN=openvpnserver/emailAddress=damian@googlemail.com
I have verified the CA cert with the client cert
[root@client openvpn]# openssl verify -CAfile ca.crt client.example.net.crt
client.example.net.crt: OK
Any help would be greatly appreciated.
