Hi,
A few days ago I setup a openvpn bridge server on an early-rc Debian 7 Wheezy machine and got it working perfectly (only 1 NIC).
Now I did the exact same thing on another machine with the latest release of Debian Wheezy, and it will also work, but only when I connect via a NIC other than where the bridge is on. When I try to connect on the NIC the bridge is on I get the error "TLS key negotiation failed to occur within 60 seconds" on both the client and the server.
From the output of client and server with verb=6, it seems that packets transmitted by the server are not ending up at the client.
If someone could please try to help me figure out what is going wrong, that would be great.
Below is all info I could figure of to be perhaps usefull:
For the server:
server.conf:
port 1194
proto udp
dev tap0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 10.0.1.16 255.255.255.0 10.0.1.50 10.0.1.100
push "redirect-gateway def1 bypass-dhcp"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 6
bridge_start:
# Define Bridge Interface
br="br0"
# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"
# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth0"
eth_ip="10.0.1.15"
eth_netmask="255.255.255.0"
eth_broadcast="10.0.1.255"
gw="10.0.1.1"
for t in $tap; do
openvpn --mktun --dev $t
done
brctl addbr $br
brctl addif $br $eth
for t in $tap; do
brctl addif $br $t
done
for t in $tap; do
ifconfig $t 0.0.0.0 promisc up
done
ifconfig $eth 0.0.0.0 promisc up
ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast up
route add default gw $gw $br
output of ./openvpn server.conf:
Sun May 12 16:34:43 2013 us=376941 Current Parameter Settings:
Sun May 12 16:34:43 2013 us=377108 config = 'server.conf'
Sun May 12 16:34:43 2013 us=377166 mode = 1
Sun May 12 16:34:43 2013 us=377197 persist_config = DISABLED
Sun May 12 16:34:43 2013 us=377238 persist_mode = 1
Sun May 12 16:34:43 2013 us=377278 show_ciphers = DISABLED
Sun May 12 16:34:43 2013 us=377315 show_digests = DISABLED
Sun May 12 16:34:43 2013 us=377355 show_engines = DISABLED
Sun May 12 16:34:43 2013 us=377388 genkey = DISABLED
Sun May 12 16:34:43 2013 us=377422 key_pass_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=377458 show_tls_ciphers = DISABLED
Sun May 12 16:34:43 2013 us=377493 Connection profiles [default]:
Sun May 12 16:34:43 2013 us=377531 proto = udp
Sun May 12 16:34:43 2013 us=377564 local = '[UNDEF]'
Sun May 12 16:34:43 2013 us=377599 local_port = 1194
Sun May 12 16:34:43 2013 us=377634 remote = '[UNDEF]'
Sun May 12 16:34:43 2013 us=377667 remote_port = 1194
Sun May 12 16:34:43 2013 us=377703 remote_float = DISABLED
Sun May 12 16:34:43 2013 us=377740 bind_defined = DISABLED
Sun May 12 16:34:43 2013 us=377772 bind_local = ENABLED
Sun May 12 16:34:43 2013 us=377809 connect_retry_seconds = 5
Sun May 12 16:34:43 2013 us=377845 connect_timeout = 10
Sun May 12 16:34:43 2013 us=377878 connect_retry_max = 0
Sun May 12 16:34:43 2013 us=377914 socks_proxy_server = '[UNDEF]'
Sun May 12 16:34:43 2013 us=377949 socks_proxy_port = 0
Sun May 12 16:34:43 2013 us=377985 socks_proxy_retry = DISABLED
Sun May 12 16:34:43 2013 us=378019 Connection profiles END
Sun May 12 16:34:43 2013 us=378053 remote_random = DISABLED
Sun May 12 16:34:43 2013 us=378089 ipchange = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378126 dev = 'tap0'
Sun May 12 16:34:43 2013 us=378162 dev_type = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378196 dev_node = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378230 lladdr = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378267 topology = 1
Sun May 12 16:34:43 2013 us=378299 tun_ipv6 = DISABLED
Sun May 12 16:34:43 2013 us=378336 ifconfig_local = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378372 ifconfig_remote_netmask = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378405 ifconfig_noexec = DISABLED
Sun May 12 16:34:43 2013 us=378439 ifconfig_nowarn = DISABLED
Sun May 12 16:34:43 2013 us=378473 ifconfig_ipv6_local = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378507 ifconfig_ipv6_netbits = 0
Sun May 12 16:34:43 2013 us=378543 ifconfig_ipv6_remote = '[UNDEF]'
Sun May 12 16:34:43 2013 us=378579 shaper = 0
Sun May 12 16:34:43 2013 us=378612 tun_mtu = 1500
Sun May 12 16:34:43 2013 us=378645 tun_mtu_defined = ENABLED
Sun May 12 16:34:43 2013 us=378679 link_mtu = 1500
Sun May 12 16:34:43 2013 us=378713 link_mtu_defined = DISABLED
Sun May 12 16:34:43 2013 us=378747 tun_mtu_extra = 32
Sun May 12 16:34:43 2013 us=378780 tun_mtu_extra_defined = ENABLED
Sun May 12 16:34:43 2013 us=378815 fragment = 0
Sun May 12 16:34:43 2013 us=378851 mtu_discover_type = -1
Sun May 12 16:34:43 2013 us=378885 mtu_test = 0
Sun May 12 16:34:43 2013 us=378918 mlock = DISABLED
Sun May 12 16:34:43 2013 us=378953 keepalive_ping = 10
Sun May 12 16:34:43 2013 us=378988 keepalive_timeout = 120
Sun May 12 16:34:43 2013 us=379021 inactivity_timeout = 0
Sun May 12 16:34:43 2013 us=379057 ping_send_timeout = 10
Sun May 12 16:34:43 2013 us=379093 ping_rec_timeout = 240
Sun May 12 16:34:43 2013 us=379126 ping_rec_timeout_action = 2
Sun May 12 16:34:43 2013 us=379161 ping_timer_remote = DISABLED
Sun May 12 16:34:43 2013 us=379197 remap_sigusr1 = 0
Sun May 12 16:34:43 2013 us=379230 explicit_exit_notification = 0
Sun May 12 16:34:43 2013 us=379264 persist_tun = ENABLED
Sun May 12 16:34:43 2013 us=379297 persist_local_ip = DISABLED
Sun May 12 16:34:43 2013 us=379331 persist_remote_ip = DISABLED
Sun May 12 16:34:43 2013 us=379367 persist_key = ENABLED
Sun May 12 16:34:43 2013 us=379402 mssfix = 1450
Sun May 12 16:34:43 2013 us=379437 passtos = DISABLED
Sun May 12 16:34:43 2013 us=379474 resolve_retry_seconds = 1000000000
Sun May 12 16:34:43 2013 us=379510 username = 'nobody'
Sun May 12 16:34:43 2013 us=379544 groupname = 'nogroup'
Sun May 12 16:34:43 2013 us=379578 chroot_dir = '[UNDEF]'
Sun May 12 16:34:43 2013 us=379614 cd_dir = '[UNDEF]'
Sun May 12 16:34:43 2013 us=379647 writepid = '[UNDEF]'
Sun May 12 16:34:43 2013 us=379682 up_script = '[UNDEF]'
Sun May 12 16:34:43 2013 us=379714 down_script = '[UNDEF]'
Sun May 12 16:34:43 2013 us=379750 down_pre = DISABLED
Sun May 12 16:34:43 2013 us=379786 up_restart = DISABLED
Sun May 12 16:34:43 2013 us=379818 up_delay = DISABLED
Sun May 12 16:34:43 2013 us=379854 daemon = DISABLED
Sun May 12 16:34:43 2013 us=379890 inetd = 0
Sun May 12 16:34:43 2013 us=379922 log = DISABLED
Sun May 12 16:34:43 2013 us=379956 suppress_timestamps = DISABLED
Sun May 12 16:34:43 2013 us=379991 nice = 0
Sun May 12 16:34:43 2013 us=380023 verbosity = 6
Sun May 12 16:34:43 2013 us=380051 mute = 0
Sun May 12 16:34:43 2013 us=380082 gremlin = 0
Sun May 12 16:34:43 2013 us=380116 status_file = 'openvpn-status.log'
Sun May 12 16:34:43 2013 us=380144 status_file_version = 1
Sun May 12 16:34:43 2013 us=380184 status_file_update_freq = 60
Sun May 12 16:34:43 2013 us=380219 occ = ENABLED
Sun May 12 16:34:43 2013 us=380248 rcvbuf = 65536
Sun May 12 16:34:43 2013 us=380285 sndbuf = 65536
Sun May 12 16:34:43 2013 us=380326 sockflags = 0
Sun May 12 16:34:43 2013 us=380363 fast_io = DISABLED
Sun May 12 16:34:43 2013 us=380396 lzo = 7
Sun May 12 16:34:43 2013 us=380430 route_script = '[UNDEF]'
Sun May 12 16:34:43 2013 us=380466 route_default_gateway = '[UNDEF]'
Sun May 12 16:34:43 2013 us=380502 route_default_metric = 0
Sun May 12 16:34:43 2013 us=380535 route_noexec = DISABLED
Sun May 12 16:34:43 2013 us=380568 route_delay = 0
Sun May 12 16:34:43 2013 us=380603 route_delay_window = 30
Sun May 12 16:34:43 2013 us=380639 route_delay_defined = DISABLED
Sun May 12 16:34:43 2013 us=380672 route_nopull = DISABLED
Sun May 12 16:34:43 2013 us=380707 route_gateway_via_dhcp = DISABLED
Sun May 12 16:34:43 2013 us=380744 max_routes = 100
Sun May 12 16:34:43 2013 us=380777 allow_pull_fqdn = DISABLED
Sun May 12 16:34:43 2013 us=380812 management_addr = '[UNDEF]'
Sun May 12 16:34:43 2013 us=380849 management_port = 0
Sun May 12 16:34:43 2013 us=380884 management_user_pass = '[UNDEF]'
Sun May 12 16:34:43 2013 us=380918 management_log_history_cache = 250
Sun May 12 16:34:43 2013 us=380953 management_echo_buffer_size = 100
Sun May 12 16:34:43 2013 us=380986 management_write_peer_info_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=381021 management_client_user = '[UNDEF]'
Sun May 12 16:34:43 2013 us=381054 management_client_group = '[UNDEF]'
Sun May 12 16:34:43 2013 us=381087 management_flags = 0
Sun May 12 16:34:43 2013 us=381122 shared_secret_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=381177 key_direction = 0
Sun May 12 16:34:43 2013 us=381218 ciphername_defined = ENABLED
Sun May 12 16:34:43 2013 us=381255 ciphername = 'BF-CBC'
Sun May 12 16:34:43 2013 us=381291 authname_defined = ENABLED
Sun May 12 16:34:43 2013 us=381325 authname = 'SHA1'
Sun May 12 16:34:43 2013 us=381358 prng_hash = 'SHA1'
Sun May 12 16:34:43 2013 us=381393 prng_nonce_secret_len = 16
Sun May 12 16:34:43 2013 us=381429 keysize = 0
Sun May 12 16:34:43 2013 us=381462 engine = DISABLED
Sun May 12 16:34:43 2013 us=381498 replay = ENABLED
Sun May 12 16:34:43 2013 us=381534 mute_replay_warnings = DISABLED
Sun May 12 16:34:43 2013 us=381567 replay_window = 64
Sun May 12 16:34:43 2013 us=381600 replay_time = 15
Sun May 12 16:34:43 2013 us=381635 packet_id_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=381671 use_iv = ENABLED
Sun May 12 16:34:43 2013 us=381704 test_crypto = DISABLED
Sun May 12 16:34:43 2013 us=381737 tls_server = ENABLED
Sun May 12 16:34:43 2013 us=381772 tls_client = DISABLED
Sun May 12 16:34:43 2013 us=381808 key_method = 2
Sun May 12 16:34:43 2013 us=381842 ca_file = '/etc/openvpn/keys/ca.crt'
Sun May 12 16:34:43 2013 us=381879 ca_path = '[UNDEF]'
Sun May 12 16:34:43 2013 us=381918 dh_file = '/etc/openvpn/keys/dh1024.pem'
Sun May 12 16:34:43 2013 us=381956 cert_file = '/etc/openvpn/keys/server.crt'
Sun May 12 16:34:43 2013 us=381990 priv_key_file = '/etc/openvpn/keys/server.key'
Sun May 12 16:34:43 2013 us=382026 pkcs12_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=382059 cipher_list = '[UNDEF]'
Sun May 12 16:34:43 2013 us=382093 tls_verify = '[UNDEF]'
Sun May 12 16:34:43 2013 us=382128 tls_export_cert = '[UNDEF]'
Sun May 12 16:34:43 2013 us=382162 tls_remote = '[UNDEF]'
Sun May 12 16:34:43 2013 us=382197 crl_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=382233 ns_cert_type = 0
Sun May 12 16:34:43 2013 us=382269 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382302 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382337 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382365 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382396 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382430 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382463 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382499 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382533 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382571 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382607 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382641 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382675 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382712 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382748 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382785 remote_cert_ku[i] = 0
Sun May 12 16:34:43 2013 us=382818 remote_cert_eku = '[UNDEF]'
Sun May 12 16:34:43 2013 us=382853 tls_timeout = 2
Sun May 12 16:34:43 2013 us=382887 renegotiate_bytes = 0
Sun May 12 16:34:43 2013 us=382921 renegotiate_packets = 0
Sun May 12 16:34:43 2013 us=382958 renegotiate_seconds = 3600
Sun May 12 16:34:43 2013 us=382993 handshake_window = 60
Sun May 12 16:34:43 2013 us=383029 transition_window = 3600
Sun May 12 16:34:43 2013 us=383065 single_session = DISABLED
Sun May 12 16:34:43 2013 us=383099 push_peer_info = DISABLED
Sun May 12 16:34:43 2013 us=383127 tls_exit = DISABLED
Sun May 12 16:34:43 2013 us=383155 tls_auth_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=383188 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383221 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383255 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383284 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383315 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383349 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383382 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383417 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383452 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383488 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383522 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383558 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383593 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383628 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383664 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383697 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:43 2013 us=383734 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=383770 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=383807 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=383840 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=383874 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=383909 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=383943 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=383978 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384014 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384047 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384082 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384118 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384153 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384189 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384224 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384258 pkcs11_private_mode = 00000000
Sun May 12 16:34:43 2013 us=384294 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384327 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384363 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384399 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384432 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384466 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384500 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384536 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384568 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384602 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384637 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384672 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384705 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384741 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384777 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384810 pkcs11_cert_private = DISABLED
Sun May 12 16:34:43 2013 us=384844 pkcs11_pin_cache_period = -1
Sun May 12 16:34:43 2013 us=384879 pkcs11_id = '[UNDEF]'
Sun May 12 16:34:43 2013 us=384907 pkcs11_id_management = DISABLED
Sun May 12 16:34:43 2013 us=384945 server_network = 0.0.0.0
Sun May 12 16:34:43 2013 us=384982 server_netmask = 0.0.0.0
Sun May 12 16:34:43 2013 us=385021 server_network_ipv6 = ::
Sun May 12 16:34:43 2013 us=385054 server_netbits_ipv6 = 0
Sun May 12 16:34:43 2013 us=385090 server_bridge_ip = 10.0.1.16
Sun May 12 16:34:43 2013 us=385125 server_bridge_netmask = 255.255.255.0
Sun May 12 16:34:43 2013 us=385203 server_bridge_pool_start = 10.0.1.50
Sun May 12 16:34:43 2013 us=385250 server_bridge_pool_end = 10.0.1.100
Sun May 12 16:34:43 2013 us=385279 push_entry = 'redirect-gateway def1 bypass-dhcp'
Sun May 12 16:34:43 2013 us=385313 push_entry = 'route-gateway 10.0.1.16'
Sun May 12 16:34:43 2013 us=385347 push_entry = 'ping 10'
Sun May 12 16:34:43 2013 us=385382 push_entry = 'ping-restart 120'
Sun May 12 16:34:43 2013 us=385415 ifconfig_pool_defined = ENABLED
Sun May 12 16:34:43 2013 us=385453 ifconfig_pool_start = 10.0.1.50
Sun May 12 16:34:43 2013 us=385489 ifconfig_pool_end = 10.0.1.100
Sun May 12 16:34:43 2013 us=385526 ifconfig_pool_netmask = 255.255.255.0
Sun May 12 16:34:43 2013 us=385563 ifconfig_pool_persist_filename = 'ipp.txt'
Sun May 12 16:34:43 2013 us=385599 ifconfig_pool_persist_refresh_freq = 600
Sun May 12 16:34:43 2013 us=385636 ifconfig_ipv6_pool_defined = DISABLED
Sun May 12 16:34:43 2013 us=385675 ifconfig_ipv6_pool_base = ::
Sun May 12 16:34:43 2013 us=385709 ifconfig_ipv6_pool_netbits = 0
Sun May 12 16:34:43 2013 us=385743 n_bcast_buf = 256
Sun May 12 16:34:43 2013 us=385778 tcp_queue_limit = 64
Sun May 12 16:34:43 2013 us=385812 real_hash_size = 256
Sun May 12 16:34:43 2013 us=385846 virtual_hash_size = 256
Sun May 12 16:34:43 2013 us=385881 client_connect_script = '[UNDEF]'
Sun May 12 16:34:43 2013 us=385918 learn_address_script = '[UNDEF]'
Sun May 12 16:34:43 2013 us=385949 client_disconnect_script = '[UNDEF]'
Sun May 12 16:34:43 2013 us=385983 client_config_dir = '[UNDEF]'
Sun May 12 16:34:43 2013 us=386016 ccd_exclusive = DISABLED
Sun May 12 16:34:43 2013 us=386049 tmp_dir = '/tmp'
Sun May 12 16:34:43 2013 us=386082 push_ifconfig_defined = DISABLED
Sun May 12 16:34:43 2013 us=386120 push_ifconfig_local = 0.0.0.0
Sun May 12 16:34:43 2013 us=386155 push_ifconfig_remote_netmask = 0.0.0.0
Sun May 12 16:34:43 2013 us=386190 push_ifconfig_ipv6_defined = DISABLED
Sun May 12 16:34:43 2013 us=386227 push_ifconfig_ipv6_local = ::/0
Sun May 12 16:34:43 2013 us=386264 push_ifconfig_ipv6_remote = ::
Sun May 12 16:34:43 2013 us=386300 enable_c2c = ENABLED
Sun May 12 16:34:43 2013 us=386333 duplicate_cn = DISABLED
Sun May 12 16:34:43 2013 us=386370 cf_max = 0
Sun May 12 16:34:43 2013 us=386404 cf_per = 0
Sun May 12 16:34:43 2013 us=386438 max_clients = 1024
Sun May 12 16:34:43 2013 us=386473 max_routes_per_client = 256
Sun May 12 16:34:43 2013 us=386506 auth_user_pass_verify_script = '[UNDEF]'
Sun May 12 16:34:43 2013 us=386541 auth_user_pass_verify_script_via_file = DISABLED
Sun May 12 16:34:43 2013 us=386577 ssl_flags = 0
Sun May 12 16:34:43 2013 us=386612 port_share_host = '[UNDEF]'
Sun May 12 16:34:43 2013 us=386646 port_share_port = 0
Sun May 12 16:34:43 2013 us=386681 client = DISABLED
Sun May 12 16:34:43 2013 us=386714 pull = DISABLED
Sun May 12 16:34:43 2013 us=386750 auth_user_pass_file = '[UNDEF]'
Sun May 12 16:34:43 2013 us=386786 OpenVPN 2.2.1 i486-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Mar 23 2012
Sun May 12 16:34:43 2013 us=386989 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Sun May 12 16:34:43 2013 us=387171 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun May 12 16:34:43 2013 us=393606 Diffie-Hellman initialized with 1024 bit key
Sun May 12 16:34:43 2013 us=394930 TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun May 12 16:34:43 2013 us=395028 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sun May 12 16:34:43 2013 us=395415 TUN/TAP device tap0 opened
Sun May 12 16:34:43 2013 us=395509 TUN/TAP TX queue length set to 100
Sun May 12 16:34:43 2013 us=395635 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Sun May 12 16:34:43 2013 us=396483 GID set to nogroup
Sun May 12 16:34:43 2013 us=396552 UID set to nobody
Sun May 12 16:34:43 2013 us=396603 UDPv4 link local (bound): [undef]
Sun May 12 16:34:43 2013 us=396634 UDPv4 link remote: [undef]
Sun May 12 16:34:43 2013 us=396679 MULTI: multi_init called, r=256 v=256
Sun May 12 16:34:43 2013 us=396754 IFCONFIG POOL: base=10.0.1.50 size=51, ipv6=0
Sun May 12 16:34:43 2013 us=396820 ifconfig_pool_read(), in='sp1,10.0.1.50', TODO: IPv6
Sun May 12 16:34:43 2013 us=396866 succeeded -> ifconfig_pool_set()
Sun May 12 16:34:43 2013 us=396904 IFCONFIG POOL LIST
Sun May 12 16:34:43 2013 us=396940 sp1,10.0.1.50
Sun May 12 16:34:43 2013 us=396999 Initialization Sequence Completed
Sun May 12 16:35:01 2013 us=903751 MULTI: multi_create_instance called
Sun May 12 16:35:01 2013 us=903865 10.0.1.230:62724 Re-using SSL/TLS context
Sun May 12 16:35:01 2013 us=903935 10.0.1.230:62724 LZO compression initialized
Sun May 12 16:35:01 2013 us=904159 10.0.1.230:62724 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun May 12 16:35:01 2013 us=904184 10.0.1.230:62724 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Sun May 12 16:35:01 2013 us=904241 10.0.1.230:62724 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun May 12 16:35:01 2013 us=904258 10.0.1.230:62724 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun May 12 16:35:01 2013 us=904296 10.0.1.230:62724 Local Options hash (VER=V4): 'f7df56b8'
Sun May 12 16:35:01 2013 us=904320 10.0.1.230:62724 Expected Remote Options hash (VER=V4): 'd79ca330'
Sun May 12 16:35:01 2013 us=904378 10.0.1.230:62724 UDPv4 READ [14] from [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:01 2013 us=904409 10.0.1.230:62724 TLS: Initial packet from [AF_INET]10.0.1.230:62724, sid=bbdb6f3d 1073bc04
Sun May 12 16:35:01 2013 us=904455 10.0.1.230:62724 UDPv4 WRITE [26] to [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Sun May 12 16:35:03 2013 us=243073 10.0.1.230:62724 UDPv4 WRITE [14] to [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:04 2013 us=295732 10.0.1.230:62724 UDPv4 READ [14] from [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:04 2013 us=295820 10.0.1.230:62724 UDPv4 WRITE [22] to [AF_INET]10.0.1.230:62724: P_ACK_V1 kid=0 [ 0 ]
Sun May 12 16:35:07 2013 us=242812 10.0.1.230:62724 UDPv4 WRITE [14] to [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:09 2013 us=80436 10.0.1.230:62724 UDPv4 READ [14] from [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:09 2013 us=80541 10.0.1.230:62724 UDPv4 WRITE [22] to [AF_INET]10.0.1.230:62724: P_ACK_V1 kid=0 [ 0 ]
Sun May 12 16:35:15 2013 us=904488 10.0.1.230:62724 UDPv4 WRITE [14] to [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:16 2013 us=469289 10.0.1.230:62724 UDPv4 READ [14] from [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:16 2013 us=469425 10.0.1.230:62724 UDPv4 WRITE [22] to [AF_INET]10.0.1.230:62724: P_ACK_V1 kid=0 [ 0 ]
Sun May 12 16:35:31 2013 us=378277 10.0.1.230:62724 UDPv4 WRITE [14] to [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:32 2013 us=545731 10.0.1.230:62724 UDPv4 READ [14] from [AF_INET]10.0.1.230:62724: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:32 2013 us=545819 10.0.1.230:62724 UDPv4 WRITE [22] to [AF_INET]10.0.1.230:62724: P_ACK_V1 kid=0 [ 0 ]
Sun May 12 16:36:01 2013 us=36043 10.0.1.230:62724 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun May 12 16:36:01 2013 us=36105 10.0.1.230:62724 TLS Error: TLS handshake failed
Sun May 12 16:36:01 2013 us=36289 10.0.1.230:62724 SIGUSR1[soft,tls-error] received, client-instance restarting
For the Client:
client.conf:
client
dev tap0
proto udp
remote 10.0.1.16 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca E:\\Programs\\OpenVPN\\keys\\inertia-ca.crt
cert E:\\Programs\\OpenVPN\\keys\\inertia-sp1.crt
key E:\\Programs\\OpenVPN\\keys\\inertia-sp1.key
ns-cert-type server
comp-lzo
verb 6
route-metric 512
route 0.0.0.0 0.0.0.0
The log of the client:
Sun May 12 16:34:12 2013 us=940000 Current Parameter Settings:
Sun May 12 16:34:12 2013 us=940000 config = 'inertia.ovpn'
Sun May 12 16:34:12 2013 us=940000 mode = 0
Sun May 12 16:34:12 2013 us=940000 show_ciphers = DISABLED
Sun May 12 16:34:12 2013 us=940000 show_digests = DISABLED
Sun May 12 16:34:12 2013 us=940000 show_engines = DISABLED
Sun May 12 16:34:12 2013 us=940000 genkey = DISABLED
Sun May 12 16:34:12 2013 us=940000 key_pass_file = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 show_tls_ciphers = DISABLED
Sun May 12 16:34:12 2013 us=940000 Connection profiles [default]:
Sun May 12 16:34:12 2013 us=940000 proto = udp
Sun May 12 16:34:12 2013 us=940000 local = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 local_port = 0
Sun May 12 16:34:12 2013 us=940000 remote = '10.0.1.16'
Sun May 12 16:34:12 2013 us=940000 remote_port = 1194
Sun May 12 16:34:12 2013 us=940000 remote_float = DISABLED
Sun May 12 16:34:12 2013 us=940000 bind_defined = DISABLED
Sun May 12 16:34:12 2013 us=940000 bind_local = DISABLED
Sun May 12 16:34:12 2013 us=940000 connect_retry_seconds = 5
Sun May 12 16:34:12 2013 us=940000 connect_timeout = 10
Sun May 12 16:34:12 2013 us=940000 connect_retry_max = 0
Sun May 12 16:34:12 2013 us=940000 socks_proxy_server = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 socks_proxy_port = 0
Sun May 12 16:34:12 2013 us=940000 socks_proxy_retry = DISABLED
Sun May 12 16:34:12 2013 us=940000 Connection profiles END
Sun May 12 16:34:12 2013 us=940000 remote_random = DISABLED
Sun May 12 16:34:12 2013 us=940000 ipchange = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 dev = 'tap0'
Sun May 12 16:34:12 2013 us=940000 dev_type = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 dev_node = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 lladdr = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 topology = 1
Sun May 12 16:34:12 2013 us=940000 tun_ipv6 = DISABLED
Sun May 12 16:34:12 2013 us=940000 ifconfig_local = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 ifconfig_remote_netmask = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 ifconfig_noexec = DISABLED
Sun May 12 16:34:12 2013 us=940000 ifconfig_nowarn = DISABLED
Sun May 12 16:34:12 2013 us=940000 shaper = 0
Sun May 12 16:34:12 2013 us=940000 tun_mtu = 1500
Sun May 12 16:34:12 2013 us=940000 tun_mtu_defined = ENABLED
Sun May 12 16:34:12 2013 us=940000 link_mtu = 1500
Sun May 12 16:34:12 2013 us=940000 link_mtu_defined = DISABLED
Sun May 12 16:34:12 2013 us=940000 tun_mtu_extra = 32
Sun May 12 16:34:12 2013 us=940000 tun_mtu_extra_defined = ENABLED
Sun May 12 16:34:12 2013 us=940000 fragment = 0
Sun May 12 16:34:12 2013 us=940000 mtu_discover_type = -1
Sun May 12 16:34:12 2013 us=940000 mtu_test = 0
Sun May 12 16:34:12 2013 us=940000 mlock = DISABLED
Sun May 12 16:34:12 2013 us=940000 keepalive_ping = 0
Sun May 12 16:34:12 2013 us=940000 keepalive_timeout = 0
Sun May 12 16:34:12 2013 us=940000 inactivity_timeout = 0
Sun May 12 16:34:12 2013 us=940000 ping_send_timeout = 0
Sun May 12 16:34:12 2013 us=940000 ping_rec_timeout = 0
Sun May 12 16:34:12 2013 us=940000 ping_rec_timeout_action = 0
Sun May 12 16:34:12 2013 us=940000 ping_timer_remote = DISABLED
Sun May 12 16:34:12 2013 us=940000 remap_sigusr1 = 0
Sun May 12 16:34:12 2013 us=940000 explicit_exit_notification = 0
Sun May 12 16:34:12 2013 us=940000 persist_tun = ENABLED
Sun May 12 16:34:12 2013 us=940000 persist_local_ip = DISABLED
Sun May 12 16:34:12 2013 us=940000 persist_remote_ip = DISABLED
Sun May 12 16:34:12 2013 us=940000 persist_key = ENABLED
Sun May 12 16:34:12 2013 us=940000 mssfix = 1450
Sun May 12 16:34:12 2013 us=940000 resolve_retry_seconds = 1000000000
Sun May 12 16:34:12 2013 us=940000 username = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 groupname = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 chroot_dir = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 cd_dir = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 writepid = '[UNDEF]'
Sun May 12 16:34:12 2013 us=940000 up_script = '[UNDEF]'
Sun May 12 16:34:13 2013 us=174000 down_script = '[UNDEF]'
Sun May 12 16:34:13 2013 us=174000 down_pre = DISABLED
Sun May 12 16:34:13 2013 us=174000 up_restart = DISABLED
Sun May 12 16:34:13 2013 us=174000 up_delay = DISABLED
Sun May 12 16:34:13 2013 us=174000 daemon = DISABLED
Sun May 12 16:34:13 2013 us=174000 inetd = 0
Sun May 12 16:34:13 2013 us=174000 log = DISABLED
Sun May 12 16:34:13 2013 us=174000 suppress_timestamps = DISABLED
Sun May 12 16:34:13 2013 us=174000 nice = 0
Sun May 12 16:34:13 2013 us=174000 verbosity = 6
Sun May 12 16:34:13 2013 us=174000 mute = 0
Sun May 12 16:34:13 2013 us=174000 gremlin = 0
Sun May 12 16:34:13 2013 us=174000 status_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=174000 status_file_version = 1
Sun May 12 16:34:13 2013 us=174000 status_file_update_freq = 60
Sun May 12 16:34:13 2013 us=174000 occ = ENABLED
Sun May 12 16:34:13 2013 us=174000 rcvbuf = 0
Sun May 12 16:34:13 2013 us=174000 sndbuf = 0
Sun May 12 16:34:13 2013 us=205000 sockflags = 0
Sun May 12 16:34:13 2013 us=205000 fast_io = DISABLED
Sun May 12 16:34:13 2013 us=205000 lzo = 7
Sun May 12 16:34:13 2013 us=205000 route_script = '[UNDEF]'
Sun May 12 16:34:13 2013 us=205000 route_default_gateway = '[UNDEF]'
Sun May 12 16:34:13 2013 us=205000 route_default_metric = 512
Sun May 12 16:34:13 2013 us=205000 route_noexec = DISABLED
Sun May 12 16:34:13 2013 us=205000 route_delay = 5
Sun May 12 16:34:13 2013 us=205000 route_delay_window = 30
Sun May 12 16:34:13 2013 us=205000 route_delay_defined = ENABLED
Sun May 12 16:34:13 2013 us=205000 route_nopull = DISABLED
Sun May 12 16:34:13 2013 us=205000 route_gateway_via_dhcp = DISABLED
Sun May 12 16:34:13 2013 us=205000 max_routes = 100
Sun May 12 16:34:13 2013 us=205000 allow_pull_fqdn = DISABLED
Sun May 12 16:34:13 2013 us=205000 route 0.0.0.0/0.0.0.0/nil/nil
Sun May 12 16:34:13 2013 us=205000 management_addr = '[UNDEF]'
Sun May 12 16:34:13 2013 us=252000 management_port = 0
Sun May 12 16:34:13 2013 us=252000 management_user_pass = '[UNDEF]'
Sun May 12 16:34:13 2013 us=252000 management_log_history_cache = 250
Sun May 12 16:34:13 2013 us=252000 management_echo_buffer_size = 100
Sun May 12 16:34:13 2013 us=252000 management_write_peer_info_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=252000 management_client_user = '[UNDEF]'
Sun May 12 16:34:13 2013 us=252000 management_client_group = '[UNDEF]'
Sun May 12 16:34:13 2013 us=252000 management_flags = 0
Sun May 12 16:34:13 2013 us=252000 shared_secret_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=252000 key_direction = 0
Sun May 12 16:34:13 2013 us=252000 ciphername_defined = ENABLED
Sun May 12 16:34:13 2013 us=252000 ciphername = 'BF-CBC'
Sun May 12 16:34:13 2013 us=252000 authname_defined = ENABLED
Sun May 12 16:34:13 2013 us=252000 authname = 'SHA1'
Sun May 12 16:34:13 2013 us=252000 prng_hash = 'SHA1'
Sun May 12 16:34:13 2013 us=252000 prng_nonce_secret_len = 16
Sun May 12 16:34:13 2013 us=267000 keysize = 0
Sun May 12 16:34:13 2013 us=267000 engine = DISABLED
Sun May 12 16:34:13 2013 us=267000 replay = ENABLED
Sun May 12 16:34:13 2013 us=267000 mute_replay_warnings = DISABLED
Sun May 12 16:34:13 2013 us=267000 replay_window = 64
Sun May 12 16:34:13 2013 us=267000 replay_time = 15
Sun May 12 16:34:13 2013 us=267000 packet_id_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=267000 use_iv = ENABLED
Sun May 12 16:34:13 2013 us=267000 test_crypto = DISABLED
Sun May 12 16:34:13 2013 us=267000 tls_server = DISABLED
Sun May 12 16:34:13 2013 us=267000 tls_client = ENABLED
Sun May 12 16:34:13 2013 us=267000 key_method = 2
Sun May 12 16:34:13 2013 us=267000 ca_file = 'E:\Programs\OpenVPN\keys\inertia-ca.crt'
Sun May 12 16:34:13 2013 us=267000 ca_path = '[UNDEF]'
Sun May 12 16:34:13 2013 us=267000 dh_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=267000 cert_file = 'E:\Programs\OpenVPN\keys\inertia-sp1.crt'
Sun May 12 16:34:13 2013 us=298000 priv_key_file = 'E:\Programs\OpenVPN\keys\inertia-sp1.key'
Sun May 12 16:34:13 2013 us=298000 pkcs12_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=298000 cryptoapi_cert = '[UNDEF]'
Sun May 12 16:34:13 2013 us=298000 cipher_list = '[UNDEF]'
Sun May 12 16:34:13 2013 us=298000 tls_verify = '[UNDEF]'
Sun May 12 16:34:13 2013 us=298000 tls_export_cert = '[UNDEF]'
Sun May 12 16:34:13 2013 us=298000 tls_remote = '[UNDEF]'
Sun May 12 16:34:13 2013 us=298000 crl_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=298000 ns_cert_type = 64
Sun May 12 16:34:13 2013 us=298000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=298000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=298000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=298000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=298000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=298000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=298000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_ku[i] = 0
Sun May 12 16:34:13 2013 us=314000 remote_cert_eku = '[UNDEF]'
Sun May 12 16:34:13 2013 us=314000 tls_timeout = 2
Sun May 12 16:34:13 2013 us=314000 renegotiate_bytes = 0
Sun May 12 16:34:13 2013 us=314000 renegotiate_packets = 0
Sun May 12 16:34:13 2013 us=314000 renegotiate_seconds = 3600
Sun May 12 16:34:13 2013 us=314000 handshake_window = 60
Sun May 12 16:34:13 2013 us=314000 transition_window = 3600
Sun May 12 16:34:13 2013 us=314000 single_session = DISABLED
Sun May 12 16:34:13 2013 us=330000 push_peer_info = DISABLED
Sun May 12 16:34:13 2013 us=330000 tls_exit = DISABLED
Sun May 12 16:34:13 2013 us=330000 tls_auth_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=330000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=361000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=361000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=361000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=361000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=361000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=361000 pkcs11_protected_authentication = DISABLED
Sun May 12 16:34:13 2013 us=361000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=361000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=361000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=361000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=361000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=361000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=361000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_private_mode = 00000000
Sun May 12 16:34:13 2013 us=376000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=376000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=376000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=376000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=376000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_cert_private = DISABLED
Sun May 12 16:34:13 2013 us=392000 pkcs11_pin_cache_period = -1
Sun May 12 16:34:13 2013 us=392000 pkcs11_id = '[UNDEF]'
Sun May 12 16:34:13 2013 us=392000 pkcs11_id_management = DISABLED
Sun May 12 16:34:13 2013 us=392000 server_network = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 server_netmask = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 server_bridge_ip = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 server_bridge_netmask = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 server_bridge_pool_start = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 server_bridge_pool_end = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 ifconfig_pool_defined = DISABLED
Sun May 12 16:34:13 2013 us=423000 ifconfig_pool_start = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 ifconfig_pool_end = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 ifconfig_pool_netmask = 0.0.0.0
Sun May 12 16:34:13 2013 us=423000 ifconfig_pool_persist_filename = '[UNDEF]'
Sun May 12 16:34:13 2013 us=423000 ifconfig_pool_persist_refresh_freq = 600
Sun May 12 16:34:13 2013 us=423000 n_bcast_buf = 256
Sun May 12 16:34:13 2013 us=423000 tcp_queue_limit = 64
Sun May 12 16:34:13 2013 us=423000 real_hash_size = 256
Sun May 12 16:34:13 2013 us=439000 virtual_hash_size = 256
Sun May 12 16:34:13 2013 us=439000 client_connect_script = '[UNDEF]'
Sun May 12 16:34:13 2013 us=439000 learn_address_script = '[UNDEF]'
Sun May 12 16:34:13 2013 us=439000 client_disconnect_script = '[UNDEF]'
Sun May 12 16:34:13 2013 us=439000 client_config_dir = '[UNDEF]'
Sun May 12 16:34:13 2013 us=439000 ccd_exclusive = DISABLED
Sun May 12 16:34:13 2013 us=439000 tmp_dir = 'E:\Temp\'
Sun May 12 16:34:13 2013 us=439000 push_ifconfig_defined = DISABLED
Sun May 12 16:34:13 2013 us=439000 push_ifconfig_local = 0.0.0.0
Sun May 12 16:34:13 2013 us=439000 push_ifconfig_remote_netmask = 0.0.0.0
Sun May 12 16:34:13 2013 us=439000 enable_c2c = DISABLED
Sun May 12 16:34:13 2013 us=439000 duplicate_cn = DISABLED
Sun May 12 16:34:13 2013 us=439000 cf_max = 0
Sun May 12 16:34:13 2013 us=439000 cf_per = 0
Sun May 12 16:34:13 2013 us=439000 max_clients = 1024
Sun May 12 16:34:13 2013 us=439000 max_routes_per_client = 256
Sun May 12 16:34:13 2013 us=454000 auth_user_pass_verify_script = '[UNDEF]'
Sun May 12 16:34:13 2013 us=454000 auth_user_pass_verify_script_via_file = DISABLED
Sun May 12 16:34:13 2013 us=454000 ssl_flags = 0
Sun May 12 16:34:13 2013 us=454000 client = ENABLED
Sun May 12 16:34:13 2013 us=454000 pull = ENABLED
Sun May 12 16:34:13 2013 us=454000 auth_user_pass_file = '[UNDEF]'
Sun May 12 16:34:13 2013 us=454000 show_net_up = DISABLED
Sun May 12 16:34:13 2013 us=454000 route_method = 0
Sun May 12 16:34:13 2013 us=454000 ip_win32_defined = DISABLED
Sun May 12 16:34:13 2013 us=454000 ip_win32_type = 3
Sun May 12 16:34:13 2013 us=454000 dhcp_masq_offset = 0
Sun May 12 16:34:13 2013 us=454000 dhcp_lease_time = 31536000
Sun May 12 16:34:13 2013 us=454000 tap_sleep = 0
Sun May 12 16:34:13 2013 us=454000 dhcp_options = DISABLED
Sun May 12 16:34:13 2013 us=454000 dhcp_renew = DISABLED
Sun May 12 16:34:13 2013 us=454000 dhcp_pre_release = DISABLED
Sun May 12 16:34:13 2013 us=470000 dhcp_release = DISABLED
Sun May 12 16:34:13 2013 us=470000 domain = '[UNDEF]'
Sun May 12 16:34:13 2013 us=470000 netbios_scope = '[UNDEF]'
Sun May 12 16:34:13 2013 us=470000 netbios_node_type = 0
Sun May 12 16:34:13 2013 us=470000 disable_nbt = DISABLED
Sun May 12 16:34:13 2013 us=470000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sun May 12 16:34:13 2013 us=470000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun May 12 16:34:13 2013 us=673000 LZO compression initialized
Sun May 12 16:34:13 2013 us=673000 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun May 12 16:34:13 2013 us=673000 Socket Buffers: R=[8192->8192] S=[49152->49152]
Sun May 12 16:34:13 2013 us=673000 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Sun May 12 16:34:13 2013 us=673000 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun May 12 16:34:13 2013 us=673000 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun May 12 16:34:13 2013 us=673000 Local Options hash (VER=V4): 'd79ca330'
Sun May 12 16:34:13 2013 us=673000 Expected Remote Options hash (VER=V4): 'f7df56b8'
Sun May 12 16:34:13 2013 us=673000 UDPv4 link local: [undef]
Sun May 12 16:34:13 2013 us=673000 UDPv4 link remote: 10.0.1.16:1194
Sun May 12 16:34:13 2013 us=673000 UDPv4 WRITE [14] to 10.0.1.16:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:34:13 2013 us=673000 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Sun May 12 16:34:16 2013 us=60000 UDPv4 WRITE [14] to 10.0.1.16:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:34:20 2013 us=849000 UDPv4 WRITE [14] to 10.0.1.16:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:34:28 2013 us=243000 UDPv4 WRITE [14] to 10.0.1.16:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:34:44 2013 us=218000 UDPv4 WRITE [14] to 10.0.1.16:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Sun May 12 16:35:13 2013 us=296000 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Sun May 12 16:35:13 2013 us=296000 TLS Error: TLS handshake failed
