Hello.
I have an OpenVPN server that worked for several days, but today I've started to receive errors.
Here's server config:
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 172.16.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-128-CBC # AES
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log.log
verb 4
Here's log from server:
Fri Feb 1 15:41:52 2013 us=782584 Current Parameter Settings:
Fri Feb 1 15:41:52 2013 us=782649 config = '/etc/openvpn/server.conf'
Fri Feb 1 15:41:52 2013 us=782664 mode = 1
Fri Feb 1 15:41:52 2013 us=782676 persist_config = DISABLED
Fri Feb 1 15:41:52 2013 us=782688 persist_mode = 1
Fri Feb 1 15:41:52 2013 us=782698 show_ciphers = DISABLED
Fri Feb 1 15:41:52 2013 us=782707 show_digests = DISABLED
Fri Feb 1 15:41:52 2013 us=782716 show_engines = DISABLED
Fri Feb 1 15:41:52 2013 us=782726 genkey = DISABLED
Fri Feb 1 15:41:52 2013 us=782735 key_pass_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782744 show_tls_ciphers = DISABLED
Fri Feb 1 15:41:52 2013 us=782754 Connection profiles [default]:
Fri Feb 1 15:41:52 2013 us=782764 proto = udp
Fri Feb 1 15:41:52 2013 us=782773 local = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782782 local_port = 1194
Fri Feb 1 15:41:52 2013 us=782791 remote = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782800 remote_port = 1194
Fri Feb 1 15:41:52 2013 us=782809 remote_float = DISABLED
Fri Feb 1 15:41:52 2013 us=782818 bind_defined = DISABLED
Fri Feb 1 15:41:52 2013 us=782829 bind_local = ENABLED
Fri Feb 1 15:41:52 2013 us=782838 connect_retry_seconds = 5
Fri Feb 1 15:41:52 2013 us=782848 connect_timeout = 10
Fri Feb 1 15:41:52 2013 us=782857 connect_retry_max = 0
Fri Feb 1 15:41:52 2013 us=782866 socks_proxy_server = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782876 socks_proxy_port = 0
Fri Feb 1 15:41:52 2013 us=782885 socks_proxy_retry = DISABLED
Fri Feb 1 15:41:52 2013 us=782895 Connection profiles END
Fri Feb 1 15:41:52 2013 us=782904 remote_random = DISABLED
Fri Feb 1 15:41:52 2013 us=782914 ipchange = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782925 dev = 'tun'
Fri Feb 1 15:41:52 2013 us=782936 dev_type = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782947 dev_node = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782958 lladdr = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=782968 topology = 1
Fri Feb 1 15:41:52 2013 us=782978 tun_ipv6 = DISABLED
Fri Feb 1 15:41:52 2013 us=782987 ifconfig_local = '172.16.0.1'
Fri Feb 1 15:41:52 2013 us=782998 ifconfig_remote_netmask = '172.16.0.2'
Fri Feb 1 15:41:52 2013 us=783009 ifconfig_noexec = DISABLED
Fri Feb 1 15:41:52 2013 us=783020 ifconfig_nowarn = DISABLED
Fri Feb 1 15:41:52 2013 us=783030 shaper = 0
Fri Feb 1 15:41:52 2013 us=783039 tun_mtu = 1500
Fri Feb 1 15:41:52 2013 us=783048 tun_mtu_defined = ENABLED
Fri Feb 1 15:41:52 2013 us=783057 link_mtu = 1500
Fri Feb 1 15:41:52 2013 us=783066 link_mtu_defined = DISABLED
Fri Feb 1 15:41:52 2013 us=783075 tun_mtu_extra = 0
Fri Feb 1 15:41:52 2013 us=783084 tun_mtu_extra_defined = DISABLED
Fri Feb 1 15:41:52 2013 us=783093 fragment = 0
Fri Feb 1 15:41:52 2013 us=783102 mtu_discover_type = -1
Fri Feb 1 15:41:52 2013 us=783111 mtu_test = 0
Fri Feb 1 15:41:52 2013 us=783122 mlock = DISABLED
Fri Feb 1 15:41:52 2013 us=783131 keepalive_ping = 10
Fri Feb 1 15:41:52 2013 us=783140 keepalive_timeout = 120
Fri Feb 1 15:41:52 2013 us=783149 inactivity_timeout = 0
Fri Feb 1 15:41:52 2013 us=783158 ping_send_timeout = 10
Fri Feb 1 15:41:52 2013 us=783167 ping_rec_timeout = 240
Fri Feb 1 15:41:52 2013 us=783177 ping_rec_timeout_action = 2
Fri Feb 1 15:41:52 2013 us=783187 ping_timer_remote = DISABLED
Fri Feb 1 15:41:52 2013 us=783196 remap_sigusr1 = 0
Fri Feb 1 15:41:52 2013 us=783205 explicit_exit_notification = 0
Fri Feb 1 15:41:52 2013 us=783214 persist_tun = ENABLED
Fri Feb 1 15:41:52 2013 us=783223 persist_local_ip = DISABLED
Fri Feb 1 15:41:52 2013 us=783233 persist_remote_ip = DISABLED
Fri Feb 1 15:41:52 2013 us=783246 persist_key = ENABLED
Fri Feb 1 15:41:52 2013 us=783256 mssfix = 1450
Fri Feb 1 15:41:52 2013 us=783265 passtos = DISABLED
Fri Feb 1 15:41:52 2013 us=783276 resolve_retry_seconds = 1000000000
Fri Feb 1 15:41:52 2013 us=783287 username = 'nobody'
Fri Feb 1 15:41:52 2013 us=783297 groupname = 'nogroup'
Fri Feb 1 15:41:52 2013 us=783308 chroot_dir = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783324 cd_dir = '/etc/openvpn'
Fri Feb 1 15:41:52 2013 us=783335 writepid = '/var/run/openvpn.server.pid'
Fri Feb 1 15:41:52 2013 us=783346 up_script = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783356 down_script = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783365 down_pre = DISABLED
Fri Feb 1 15:41:52 2013 us=783374 up_restart = DISABLED
Fri Feb 1 15:41:52 2013 us=783383 up_delay = DISABLED
Fri Feb 1 15:41:52 2013 us=783391 daemon = ENABLED
Fri Feb 1 15:41:52 2013 us=783401 inetd = 0
Fri Feb 1 15:41:52 2013 us=783409 log = ENABLED
Fri Feb 1 15:41:52 2013 us=783418 suppress_timestamps = DISABLED
Fri Feb 1 15:41:52 2013 us=783427 nice = 0
Fri Feb 1 15:41:52 2013 us=783436 verbosity = 4
Fri Feb 1 15:41:52 2013 us=783455 mute = 0
Fri Feb 1 15:41:52 2013 us=783467 gremlin = 0
Fri Feb 1 15:41:52 2013 us=783478 status_file = 'openvpn-status.log'
Fri Feb 1 15:41:52 2013 us=783487 status_file_version = 1
Fri Feb 1 15:41:52 2013 us=783495 status_file_update_freq = 60
Fri Feb 1 15:41:52 2013 us=783503 occ = ENABLED
Fri Feb 1 15:41:52 2013 us=783512 rcvbuf = 65536
Fri Feb 1 15:41:52 2013 us=783521 sndbuf = 65536
Fri Feb 1 15:41:52 2013 us=783530 sockflags = 0
Fri Feb 1 15:41:52 2013 us=783539 fast_io = DISABLED
Fri Feb 1 15:41:52 2013 us=783548 lzo = 7
Fri Feb 1 15:41:52 2013 us=783557 route_script = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783566 route_default_gateway = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783575 route_default_metric = 0
Fri Feb 1 15:41:52 2013 us=783584 route_noexec = DISABLED
Fri Feb 1 15:41:52 2013 us=783593 route_delay = 0
Fri Feb 1 15:41:52 2013 us=783602 route_delay_window = 30
Fri Feb 1 15:41:52 2013 us=783612 route_delay_defined = DISABLED
Fri Feb 1 15:41:52 2013 us=783622 route_nopull = DISABLED
Fri Feb 1 15:41:52 2013 us=783629 route_gateway_via_dhcp = DISABLED
Fri Feb 1 15:41:52 2013 us=783635 max_routes = 100
Fri Feb 1 15:41:52 2013 us=783641 allow_pull_fqdn = DISABLED
Fri Feb 1 15:41:52 2013 us=783647 route 172.16.0.0/255.255.255.0/nil/nil
Fri Feb 1 15:41:52 2013 us=783654 management_addr = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783660 management_port = 0
Fri Feb 1 15:41:52 2013 us=783666 management_user_pass = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783672 management_log_history_cache = 250
Fri Feb 1 15:41:52 2013 us=783678 management_echo_buffer_size = 100
Fri Feb 1 15:41:52 2013 us=783684 management_write_peer_info_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783691 management_client_user = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783697 management_client_group = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783703 management_flags = 0
Fri Feb 1 15:41:52 2013 us=783709 shared_secret_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783715 key_direction = 0
Fri Feb 1 15:41:52 2013 us=783721 ciphername_defined = ENABLED
Fri Feb 1 15:41:52 2013 us=783728 ciphername = 'AES-128-CBC'
Fri Feb 1 15:41:52 2013 us=783733 authname_defined = ENABLED
Fri Feb 1 15:41:52 2013 us=783740 authname = 'SHA1'
Fri Feb 1 15:41:52 2013 us=783750 prng_hash = 'SHA1'
Fri Feb 1 15:41:52 2013 us=783762 prng_nonce_secret_len = 16
Fri Feb 1 15:41:52 2013 us=783772 keysize = 0
Fri Feb 1 15:41:52 2013 us=783781 engine = DISABLED
Fri Feb 1 15:41:52 2013 us=783791 replay = ENABLED
Fri Feb 1 15:41:52 2013 us=783800 mute_replay_warnings = DISABLED
Fri Feb 1 15:41:52 2013 us=783809 replay_window = 64
Fri Feb 1 15:41:52 2013 us=783819 replay_time = 15
Fri Feb 1 15:41:52 2013 us=783829 packet_id_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783840 use_iv = ENABLED
Fri Feb 1 15:41:52 2013 us=783849 test_crypto = DISABLED
Fri Feb 1 15:41:52 2013 us=783859 tls_server = ENABLED
Fri Feb 1 15:41:52 2013 us=783868 tls_client = DISABLED
Fri Feb 1 15:41:52 2013 us=783878 key_method = 2
Fri Feb 1 15:41:52 2013 us=783888 ca_file = 'ca.crt'
Fri Feb 1 15:41:52 2013 us=783898 ca_path = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783907 dh_file = 'dh1024.pem'
Fri Feb 1 15:41:52 2013 us=783916 cert_file = 'server.crt'
Fri Feb 1 15:41:52 2013 us=783931 priv_key_file = 'server.key'
Fri Feb 1 15:41:52 2013 us=783942 pkcs12_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783951 cipher_list = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783961 tls_verify = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783971 tls_remote = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783981 crl_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=783991 ns_cert_type = 0
Fri Feb 1 15:41:52 2013 us=784002 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784011 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784020 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784030 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784039 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784049 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784059 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784069 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784078 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784088 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784097 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784106 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784115 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784125 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784135 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784144 remote_cert_ku[i] = 0
Fri Feb 1 15:41:52 2013 us=784154 remote_cert_eku = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784164 tls_timeout = 2
Fri Feb 1 15:41:52 2013 us=784175 renegotiate_bytes = 0
Fri Feb 1 15:41:52 2013 us=784183 renegotiate_packets = 0
Fri Feb 1 15:41:52 2013 us=784193 renegotiate_seconds = 3600
Fri Feb 1 15:41:52 2013 us=784203 handshake_window = 60
Fri Feb 1 15:41:52 2013 us=784212 transition_window = 3600
Fri Feb 1 15:41:52 2013 us=784221 single_session = DISABLED
Fri Feb 1 15:41:52 2013 us=784230 push_peer_info = DISABLED
Fri Feb 1 15:41:52 2013 us=784236 tls_exit = DISABLED
Fri Feb 1 15:41:52 2013 us=784246 tls_auth_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784253 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784259 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784265 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784271 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784277 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784283 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784289 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784295 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784301 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784307 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784313 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784320 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784325 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784331 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784337 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784343 pkcs11_protected_authentication = DISABLED
Fri Feb 1 15:41:52 2013 us=784350 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784356 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784362 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784368 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784374 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784380 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784386 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784392 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784398 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784404 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784410 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784420 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784426 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784433 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784439 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784445 pkcs11_private_mode = 00000000
Fri Feb 1 15:41:52 2013 us=784452 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784458 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784464 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784470 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784476 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784482 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784488 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784494 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784500 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784506 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784512 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784518 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784524 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784529 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784535 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784541 pkcs11_cert_private = DISABLED
Fri Feb 1 15:41:52 2013 us=784547 pkcs11_pin_cache_period = -1
Fri Feb 1 15:41:52 2013 us=784553 pkcs11_id = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784563 pkcs11_id_management = DISABLED
Fri Feb 1 15:41:52 2013 us=784577 server_network = 172.16.0.0
Fri Feb 1 15:41:52 2013 us=784589 server_netmask = 255.255.255.0
Fri Feb 1 15:41:52 2013 us=784601 server_bridge_ip = 0.0.0.0
Fri Feb 1 15:41:52 2013 us=784612 server_bridge_netmask = 0.0.0.0
Fri Feb 1 15:41:52 2013 us=784623 server_bridge_pool_start = 0.0.0.0
Fri Feb 1 15:41:52 2013 us=784635 server_bridge_pool_end = 0.0.0.0
Fri Feb 1 15:41:52 2013 us=784645 push_entry = 'route 172.16.0.1'
Fri Feb 1 15:41:52 2013 us=784655 push_entry = 'topology net30'
Fri Feb 1 15:41:52 2013 us=784664 push_entry = 'ping 10'
Fri Feb 1 15:41:52 2013 us=784674 push_entry = 'ping-restart 120'
Fri Feb 1 15:41:52 2013 us=784684 ifconfig_pool_defined = ENABLED
Fri Feb 1 15:41:52 2013 us=784695 ifconfig_pool_start = 172.16.0.4
Fri Feb 1 15:41:52 2013 us=784706 ifconfig_pool_end = 172.16.0.251
Fri Feb 1 15:41:52 2013 us=784717 ifconfig_pool_netmask = 0.0.0.0
Fri Feb 1 15:41:52 2013 us=784728 ifconfig_pool_persist_filename = 'ipp.txt'
Fri Feb 1 15:41:52 2013 us=784737 ifconfig_pool_persist_refresh_freq = 600
Fri Feb 1 15:41:52 2013 us=784746 n_bcast_buf = 256
Fri Feb 1 15:41:52 2013 us=784756 tcp_queue_limit = 64
Fri Feb 1 15:41:52 2013 us=784765 real_hash_size = 256
Fri Feb 1 15:41:52 2013 us=784774 virtual_hash_size = 256
Fri Feb 1 15:41:52 2013 us=784783 client_connect_script = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784793 learn_address_script = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784802 client_disconnect_script = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784812 client_config_dir = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784821 ccd_exclusive = DISABLED
Fri Feb 1 15:41:52 2013 us=784830 tmp_dir = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784840 push_ifconfig_defined = DISABLED
Fri Feb 1 15:41:52 2013 us=784850 push_ifconfig_local = 0.0.0.0
Fri Feb 1 15:41:52 2013 us=784860 push_ifconfig_remote_netmask = 0.0.0.0
Fri Feb 1 15:41:52 2013 us=784869 enable_c2c = DISABLED
Fri Feb 1 15:41:52 2013 us=784879 duplicate_cn = DISABLED
Fri Feb 1 15:41:52 2013 us=784888 cf_max = 0
Fri Feb 1 15:41:52 2013 us=784897 cf_per = 0
Fri Feb 1 15:41:52 2013 us=784906 max_clients = 1024
Fri Feb 1 15:41:52 2013 us=784915 max_routes_per_client = 256
Fri Feb 1 15:41:52 2013 us=784924 auth_user_pass_verify_script = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784933 auth_user_pass_verify_script_via_file = DISABLED
Fri Feb 1 15:41:52 2013 us=784947 ssl_flags = 0
Fri Feb 1 15:41:52 2013 us=784958 port_share_host = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=784968 port_share_port = 0
Fri Feb 1 15:41:52 2013 us=784978 client = DISABLED
Fri Feb 1 15:41:52 2013 us=784988 pull = DISABLED
Fri Feb 1 15:41:52 2013 us=784998 auth_user_pass_file = '[UNDEF]'
Fri Feb 1 15:41:52 2013 us=785011 OpenVPN 2.1.3 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Mar 11 2011
Fri Feb 1 15:41:52 2013 us=785148 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Feb 1 15:41:52 2013 us=796688 Diffie-Hellman initialized with 1024 bit key
Fri Feb 1 15:41:52 2013 us=797169 /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
Fri Feb 1 15:41:52 2013 us=873209 TLS-Auth MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Feb 1 15:41:52 2013 us=873269 Socket Buffers: R=[245760->131072] S=[245760->131072]
Fri Feb 1 15:41:52 2013 us=873371 ROUTE: default_gateway=UNDEF
Fri Feb 1 15:41:52 2013 us=873541 TUN/TAP device tun0 opened
Fri Feb 1 15:41:52 2013 us=873558 TUN/TAP TX queue length set to 100
Fri Feb 1 15:41:52 2013 us=873579 /sbin/ifconfig tun0 172.16.0.1 pointopoint 172.16.0.2 mtu 1500
Fri Feb 1 15:41:52 2013 us=889837 /sbin/route add -net 172.16.0.0 netmask 255.255.255.0 gw 172.16.0.2
Fri Feb 1 15:41:52 2013 us=890405 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Feb 1 15:41:52 2013 us=890918 GID set to nogroup
Fri Feb 1 15:41:52 2013 us=890959 UID set to nobody
Fri Feb 1 15:41:52 2013 us=890978 UDPv4 link local (bound): [undef]
Fri Feb 1 15:41:52 2013 us=890986 UDPv4 link remote: [undef]
Fri Feb 1 15:41:52 2013 us=890996 MULTI: multi_init called, r=256 v=256
Fri Feb 1 15:41:52 2013 us=891045 IFCONFIG POOL: base=172.16.0.4 size=62
Fri Feb 1 15:41:52 2013 us=891068 IFCONFIG POOL LIST
Fri Feb 1 15:41:52 2013 us=891076 client1,172.16.0.4
Fri Feb 1 15:41:52 2013 us=891096 Initialization Sequence Completed
Fri Feb 1 15:41:57 2013 us=411678 MULTI: multi_create_instance called
Fri Feb 1 15:41:57 2013 us=411711 91.103.73.172:65061 Re-using SSL/TLS context
Fri Feb 1 15:41:57 2013 us=411737 91.103.73.172:65061 LZO compression initialized
Fri Feb 1 15:41:57 2013 us=411848 91.103.73.172:65061 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Feb 1 15:41:57 2013 us=411859 91.103.73.172:65061 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Feb 1 15:41:57 2013 us=411890 91.103.73.172:65061 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Feb 1 15:41:57 2013 us=411898 91.103.73.172:65061 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Feb 1 15:41:57 2013 us=411913 91.103.73.172:65061 Local Options hash (VER=V4): '691e95c7'
Fri Feb 1 15:41:57 2013 us=411923 91.103.73.172:65061 Expected Remote Options hash (VER=V4): '66096c33'
Fri Feb 1 15:41:57 2013 us=411957 91.103.73.172:65061 TLS: Initial packet from [AF_INET]91.103.73.172:65061, sid=5e538301 52600e36
Fri Feb 1 15:42:00 2013 us=362235 MULTI: multi_create_instance called
Fri Feb 1 15:42:00 2013 us=362293 91.103.73.172:65062 Re-using SSL/TLS context
Fri Feb 1 15:42:00 2013 us=362320 91.103.73.172:65062 LZO compression initialized
Fri Feb 1 15:42:00 2013 us=362382 91.103.73.172:65062 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Feb 1 15:42:00 2013 us=362393 91.103.73.172:65062 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Feb 1 15:42:00 2013 us=362423 91.103.73.172:65062 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Feb 1 15:42:00 2013 us=362435 91.103.73.172:65062 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Feb 1 15:42:00 2013 us=362463 91.103.73.172:65062 Local Options hash (VER=V4): '691e95c7'
Fri Feb 1 15:42:00 2013 us=362480 91.103.73.172:65062 Expected Remote Options hash (VER=V4): '66096c33'
Fri Feb 1 15:42:00 2013 us=362511 91.103.73.172:65062 TLS: Initial packet from [AF_INET]91.103.73.172:65062, sid=5aed5cdb 18a92ba7
Fri Feb 1 15:42:00 2013 us=479448 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:01 2013 us=269515 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:02 2013 us=538660 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:03 2013 us=745978 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:04 2013 us=953557 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:06 2013 us=144474 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:07 2013 us=351818 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:08 2013 us=559338 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:10 2013 us=968883 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:12 2013 us=152476 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:14 2013 us=698914 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:15 2013 us=908733 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:17 2013 us=118008 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:18 2013 us=397212 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:21 2013 us=2438 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Fri Feb 1 15:42:28 2013 us=424722 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Here's client config
client
dev tun
proto udp
remote gate.yegorov-p.ru 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 4
And here's client log:
Fri Feb 01 15:41:55 2013 us=559319 OpenVPN 2.3.0 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jan 8 2013
Enter Management Password:
Fri Feb 01 15:41:55 2013 us=594319 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Feb 01 15:41:55 2013 us=594319 Need hold release from management interface, waiting...
Fri Feb 01 15:41:56 2013 us=59319 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Feb 01 15:41:56 2013 us=159319 MANAGEMENT: CMD 'state on'
Fri Feb 01 15:41:56 2013 us=159319 MANAGEMENT: CMD 'log all on'
Fri Feb 01 15:41:56 2013 us=192319 MANAGEMENT: CMD 'hold off'
Fri Feb 01 15:41:56 2013 us=195319 MANAGEMENT: CMD 'hold release'
Fri Feb 01 15:41:56 2013 us=195319 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Feb 01 15:41:56 2013 us=410319 LZO compression initialized
Fri Feb 01 15:41:56 2013 us=410319 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Feb 01 15:41:56 2013 us=411319 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Feb 01 15:41:56 2013 us=411319 MANAGEMENT: >STATE:1359718916,RESOLVE,,,
Fri Feb 01 15:41:56 2013 us=435319 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Feb 01 15:41:56 2013 us=436319 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Feb 01 15:41:56 2013 us=436319 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Feb 01 15:41:56 2013 us=436319 Local Options hash (VER=V4): '66096c33'
Fri Feb 01 15:41:56 2013 us=436319 Expected Remote Options hash (VER=V4): '691e95c7'
Fri Feb 01 15:41:56 2013 us=436319 UDPv4 link local: [undef]
Fri Feb 01 15:41:56 2013 us=436319 UDPv4 link remote: [AF_INET]198.23.158.232:1194
Fri Feb 01 15:41:56 2013 us=436319 MANAGEMENT: >STATE:1359718916,WAIT,,,
Fri Feb 01 15:41:56 2013 us=572319 MANAGEMENT: >STATE:1359718916,AUTH,,,
Fri Feb 01 15:41:56 2013 us=572319 TLS: Initial packet from [AF_INET]198.23.158.232:1194, sid=40200a51 a7170aaa
Fri Feb 01 15:41:57 2013 us=366319 TLS_ERROR: BIO read tls_read_plaintext error: error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long: error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:1409000D:SSL routines:SSL3_GET_SERVER_CERTIFICATE:ASN1 lib
Fri Feb 01 15:41:57 2013 us=366319 TLS Error: TLS object -> incoming plaintext read error
Fri Feb 01 15:41:57 2013 us=366319 TLS Error: TLS handshake failed
Fri Feb 01 15:41:57 2013 us=367319 TCP/UDP: Closing socket
Fri Feb 01 15:41:57 2013 us=380319 SIGUSR1[soft,tls-error] received, process restarting
Fri Feb 01 15:41:57 2013 us=380319 MANAGEMENT: >STATE:1359718917,RECONNECTING,tls-error,,
Fri Feb 01 15:41:57 2013 us=381319 Restart pause, 2 second(s)
Fri Feb 01 15:41:59 2013 us=381319 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Feb 01 15:41:59 2013 us=381319 Re-using SSL/TLS context
Fri Feb 01 15:41:59 2013 us=381319 LZO compression initialized
Fri Feb 01 15:41:59 2013 us=381319 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Feb 01 15:41:59 2013 us=382319 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Feb 01 15:41:59 2013 us=382319 MANAGEMENT: >STATE:1359718919,RESOLVE,,,
Fri Feb 01 15:41:59 2013 us=383319 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Feb 01 15:41:59 2013 us=383319 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Feb 01 15:41:59 2013 us=383319 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Feb 01 15:41:59 2013 us=383319 Local Options hash (VER=V4): '66096c33'
Fri Feb 01 15:41:59 2013 us=383319 Expected Remote Options hash (VER=V4): '691e95c7'
Fri Feb 01 15:41:59 2013 us=383319 UDPv4 link local: [undef]
Fri Feb 01 15:41:59 2013 us=383319 UDPv4 link remote: [AF_INET]198.23.158.232:1194
Fri Feb 01 15:41:59 2013 us=384319 MANAGEMENT: >STATE:1359718919,WAIT,,,
Fri Feb 01 15:41:59 2013 us=532319 MANAGEMENT: >STATE:1359718919,AUTH,,,
Fri Feb 01 15:41:59 2013 us=532319 TLS: Initial packet from [AF_INET]198.23.158.232:1194, sid=74fa76cc d55044f3
Fri Feb 01 15:42:00 2013 us=375319 TLS_ERROR: BIO read tls_read_plaintext error: error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long: error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error: error:1409000D:SSL routines:SSL3_GET_SERVER_CERTIFICATE:ASN1 lib
Fri Feb 01 15:42:00 2013 us=376319 TLS Error: TLS object -> incoming plaintext read error
Fri Feb 01 15:42:00 2013 us=376319 TLS Error: TLS handshake failed
Fri Feb 01 15:42:00 2013 us=376319 TCP/UDP: Closing socket
Fri Feb 01 15:42:00 2013 us=389319 SIGUSR1[soft,tls-error] received, process restarting
Fri Feb 01 15:42:00 2013 us=390319 MANAGEMENT: >STATE:1359718920,RECONNECTING,tls-error,,
Fri Feb 01 15:42:00 2013 us=390319 Restart pause, 2 second(s)
Fri Feb 01 15:42:01 2013 us=390319 SIGTERM[hard,init_instance] received, process exiting
Fri Feb 01 15:42:01 2013 us=390319 MANAGEMENT: >STATE:1359718921,EXITING,init_instance,,
I've also checked my certificates with openssl verify -CAfile ca.crt server.crt and openssl verify -CAfile ca.crt client1.crt, it's OK.
I've used easy-rsa scripts to build them.
Any advices? =)
