Hi everyone,
We've been having an issue we cannot crack with ping-restart. Here's the command we ran and its output:
sudo openvpn --verb 5 --remote 85.17.92.167 1194 udp --remote 223.223.175.15 1194 udp --remote 202.85.227.196 1194 udp --client --dev tun --persist-tun --persist-key --tls-client --remote-cert-tls server --tls-cipher DHE-RSA-AES128-SHA --cipher AES-128-CBC --auth SHA1 --management-client-user varac --management-signal --management /tmp/leap-tmpo0vAxO/openvpn.socket unix --script-security 2 --up /etc/leap/resolv-update --down /etc/leap/resolv-update --plugin openvpn-plugin-down-root.so 'script_type=down /etc/leap/resolv-update' --cert openvpn.pem --key openvpn.pem --ca cacert.pem --persist-local-ip --persist-remote-ip
Wed Jul 17 14:21:17 2013 us=319063 Current Parameter Settings:
Wed Jul 17 14:21:17 2013 us=319145 config = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319158 mode = 0
Wed Jul 17 14:21:17 2013 us=319167 persist_config = DISABLED
Wed Jul 17 14:21:17 2013 us=319177 persist_mode = 1
Wed Jul 17 14:21:17 2013 us=319185 show_ciphers = DISABLED
Wed Jul 17 14:21:17 2013 us=319193 show_digests = DISABLED
Wed Jul 17 14:21:17 2013 us=319201 show_engines = DISABLED
Wed Jul 17 14:21:17 2013 us=319210 genkey = DISABLED
Wed Jul 17 14:21:17 2013 us=319218 key_pass_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319227 show_tls_ciphers = DISABLED
Wed Jul 17 14:21:17 2013 us=319236 Connection profiles [default]:
Wed Jul 17 14:21:17 2013 us=319245 proto = udp
Wed Jul 17 14:21:17 2013 us=319253 local = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319262 local_port = 1194
Wed Jul 17 14:21:17 2013 us=319270 remote = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319278 remote_port = 1194
Wed Jul 17 14:21:17 2013 us=319286 remote_float = DISABLED
Wed Jul 17 14:21:17 2013 us=319294 bind_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319302 bind_local = ENABLED
Wed Jul 17 14:21:17 2013 us=319310 connect_retry_seconds = 5
Wed Jul 17 14:21:17 2013 us=319318 connect_timeout = 10
Wed Jul 17 14:21:17 2013 us=319327 connect_retry_max = 0
Wed Jul 17 14:21:17 2013 us=319335 socks_proxy_server = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319343 socks_proxy_port = 0
Wed Jul 17 14:21:17 2013 us=319351 socks_proxy_retry = DISABLED
Wed Jul 17 14:21:17 2013 us=319360 tun_mtu = 1500
Wed Jul 17 14:21:17 2013 us=319368 tun_mtu_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319376 link_mtu = 1500
Wed Jul 17 14:21:17 2013 us=319384 link_mtu_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319392 tun_mtu_extra = 0
Wed Jul 17 14:21:17 2013 us=319400 tun_mtu_extra_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319408 mtu_discover_type = -1
Wed Jul 17 14:21:17 2013 us=319416 fragment = 0
Wed Jul 17 14:21:17 2013 us=319424 mssfix = 1450
Wed Jul 17 14:21:17 2013 us=319432 explicit_exit_notification = 0
Wed Jul 17 14:21:17 2013 us=319441 Connection profiles [0]:
Wed Jul 17 14:21:17 2013 us=319449 proto = udp
Wed Jul 17 14:21:17 2013 us=319456 local = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319464 local_port = 1194
Wed Jul 17 14:21:17 2013 us=319472 remote = '85.17.92.167'
Wed Jul 17 14:21:17 2013 us=319480 remote_port = 1194
Wed Jul 17 14:21:17 2013 us=319488 remote_float = DISABLED
Wed Jul 17 14:21:17 2013 us=319496 bind_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319504 bind_local = ENABLED
Wed Jul 17 14:21:17 2013 us=319512 connect_retry_seconds = 5
Wed Jul 17 14:21:17 2013 us=319520 connect_timeout = 10
Wed Jul 17 14:21:17 2013 us=319528 connect_retry_max = 0
Wed Jul 17 14:21:17 2013 us=319536 socks_proxy_server = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319544 socks_proxy_port = 0
Wed Jul 17 14:21:17 2013 us=319552 socks_proxy_retry = DISABLED
Wed Jul 17 14:21:17 2013 us=319560 tun_mtu = 1500
Wed Jul 17 14:21:17 2013 us=319568 tun_mtu_defined = ENABLED
Wed Jul 17 14:21:17 2013 us=319576 link_mtu = 1500
Wed Jul 17 14:21:17 2013 us=319584 link_mtu_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319592 tun_mtu_extra = 0
Wed Jul 17 14:21:17 2013 us=319600 tun_mtu_extra_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319608 mtu_discover_type = -1
Wed Jul 17 14:21:17 2013 us=319616 fragment = 0
Wed Jul 17 14:21:17 2013 us=319624 mssfix = 1450
Wed Jul 17 14:21:17 2013 us=319631 explicit_exit_notification = 0
Wed Jul 17 14:21:17 2013 us=319639 Connection profiles [1]:
Wed Jul 17 14:21:17 2013 us=319647 proto = udp
Wed Jul 17 14:21:17 2013 us=319655 local = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319663 local_port = 1194
Wed Jul 17 14:21:17 2013 us=319671 remote = '223.223.175.15'
Wed Jul 17 14:21:17 2013 us=319679 remote_port = 1194
Wed Jul 17 14:21:17 2013 us=319717 remote_float = DISABLED
Wed Jul 17 14:21:17 2013 us=319736 bind_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319752 bind_local = ENABLED
Wed Jul 17 14:21:17 2013 us=319768 connect_retry_seconds = 5
Wed Jul 17 14:21:17 2013 us=319783 connect_timeout = 10
Wed Jul 17 14:21:17 2013 us=319797 connect_retry_max = 0
Wed Jul 17 14:21:17 2013 us=319812 socks_proxy_server = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=319827 socks_proxy_port = 0
Wed Jul 17 14:21:17 2013 us=319841 socks_proxy_retry = DISABLED
Wed Jul 17 14:21:17 2013 us=319856 tun_mtu = 1500
Wed Jul 17 14:21:17 2013 us=319870 tun_mtu_defined = ENABLED
Wed Jul 17 14:21:17 2013 us=319885 link_mtu = 1500
Wed Jul 17 14:21:17 2013 us=319899 link_mtu_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319914 tun_mtu_extra = 0
Wed Jul 17 14:21:17 2013 us=319928 tun_mtu_extra_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=319943 mtu_discover_type = -1
Wed Jul 17 14:21:17 2013 us=319958 fragment = 0
Wed Jul 17 14:21:17 2013 us=319972 mssfix = 1450
Wed Jul 17 14:21:17 2013 us=319987 explicit_exit_notification = 0
Wed Jul 17 14:21:17 2013 us=320001 Connection profiles [2]:
Wed Jul 17 14:21:17 2013 us=320016 proto = udp
Wed Jul 17 14:21:17 2013 us=320030 local = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320045 local_port = 1194
Wed Jul 17 14:21:17 2013 us=320059 remote = '202.85.227.196'
Wed Jul 17 14:21:17 2013 us=320073 remote_port = 1194
Wed Jul 17 14:21:17 2013 us=320088 remote_float = DISABLED
Wed Jul 17 14:21:17 2013 us=320102 bind_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=320117 bind_local = ENABLED
Wed Jul 17 14:21:17 2013 us=320131 connect_retry_seconds = 5
Wed Jul 17 14:21:17 2013 us=320146 connect_timeout = 10
Wed Jul 17 14:21:17 2013 us=320160 connect_retry_max = 0
Wed Jul 17 14:21:17 2013 us=320175 socks_proxy_server = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320189 socks_proxy_port = 0
Wed Jul 17 14:21:17 2013 us=320206 socks_proxy_retry = DISABLED
Wed Jul 17 14:21:17 2013 us=320222 tun_mtu = 1500
Wed Jul 17 14:21:17 2013 us=320236 tun_mtu_defined = ENABLED
Wed Jul 17 14:21:17 2013 us=320251 link_mtu = 1500
Wed Jul 17 14:21:17 2013 us=320266 link_mtu_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=320281 tun_mtu_extra = 0
Wed Jul 17 14:21:17 2013 us=320296 tun_mtu_extra_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=320310 mtu_discover_type = -1
Wed Jul 17 14:21:17 2013 us=320325 fragment = 0
Wed Jul 17 14:21:17 2013 us=320340 mssfix = 1450
Wed Jul 17 14:21:17 2013 us=320355 explicit_exit_notification = 0
Wed Jul 17 14:21:17 2013 us=320387 Connection profiles END
Wed Jul 17 14:21:17 2013 us=320409 remote_random = DISABLED
Wed Jul 17 14:21:17 2013 us=320419 ipchange = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320428 dev = 'tun'
Wed Jul 17 14:21:17 2013 us=320436 dev_type = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320444 dev_node = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320452 lladdr = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320460 topology = 1
Wed Jul 17 14:21:17 2013 us=320469 tun_ipv6 = DISABLED
Wed Jul 17 14:21:17 2013 us=320477 ifconfig_local = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320486 ifconfig_remote_netmask = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320494 ifconfig_noexec = DISABLED
Wed Jul 17 14:21:17 2013 us=320503 ifconfig_nowarn = DISABLED
Wed Jul 17 14:21:17 2013 us=320511 ifconfig_ipv6_local = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320520 ifconfig_ipv6_netbits = 0
Wed Jul 17 14:21:17 2013 us=320528 ifconfig_ipv6_remote = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320536 shaper = 0
Wed Jul 17 14:21:17 2013 us=320544 mtu_test = 0
Wed Jul 17 14:21:17 2013 us=320553 mlock = DISABLED
Wed Jul 17 14:21:17 2013 us=320561 keepalive_ping = 0
Wed Jul 17 14:21:17 2013 us=320569 keepalive_timeout = 0
Wed Jul 17 14:21:17 2013 us=320577 inactivity_timeout = 0
Wed Jul 17 14:21:17 2013 us=320591 ping_send_timeout = 0
Wed Jul 17 14:21:17 2013 us=320600 ping_rec_timeout = 0
Wed Jul 17 14:21:17 2013 us=320609 ping_rec_timeout_action = 0
Wed Jul 17 14:21:17 2013 us=320617 ping_timer_remote = DISABLED
Wed Jul 17 14:21:17 2013 us=320625 remap_sigusr1 = 0
Wed Jul 17 14:21:17 2013 us=320633 persist_tun = ENABLED
Wed Jul 17 14:21:17 2013 us=320641 persist_local_ip = ENABLED
Wed Jul 17 14:21:17 2013 us=320649 persist_remote_ip = ENABLED
Wed Jul 17 14:21:17 2013 us=320657 persist_key = ENABLED
Wed Jul 17 14:21:17 2013 us=320665 passtos = DISABLED
Wed Jul 17 14:21:17 2013 us=320677 resolve_retry_seconds = 1000000000
Wed Jul 17 14:21:17 2013 us=320686 username = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320694 groupname = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320702 chroot_dir = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320710 cd_dir = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320719 writepid = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320727 up_script = '/etc/leap/resolv-update'
Wed Jul 17 14:21:17 2013 us=320735 down_script = '/etc/leap/resolv-update'
Wed Jul 17 14:21:17 2013 us=320744 down_pre = DISABLED
Wed Jul 17 14:21:17 2013 us=320751 up_restart = DISABLED
Wed Jul 17 14:21:17 2013 us=320759 up_delay = DISABLED
Wed Jul 17 14:21:17 2013 us=320767 daemon = DISABLED
Wed Jul 17 14:21:17 2013 us=320775 inetd = 0
Wed Jul 17 14:21:17 2013 us=320783 log = DISABLED
Wed Jul 17 14:21:17 2013 us=320791 suppress_timestamps = DISABLED
Wed Jul 17 14:21:17 2013 us=320799 nice = 0
Wed Jul 17 14:21:17 2013 us=320807 verbosity = 5
Wed Jul 17 14:21:17 2013 us=320815 mute = 0
Wed Jul 17 14:21:17 2013 us=320823 gremlin = 0
Wed Jul 17 14:21:17 2013 us=320831 status_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320839 status_file_version = 1
Wed Jul 17 14:21:17 2013 us=320847 status_file_update_freq = 60
Wed Jul 17 14:21:17 2013 us=320855 occ = ENABLED
Wed Jul 17 14:21:17 2013 us=320862 rcvbuf = 65536
Wed Jul 17 14:21:17 2013 us=320870 sndbuf = 65536
Wed Jul 17 14:21:17 2013 us=320878 mark = 0
Wed Jul 17 14:21:17 2013 us=320886 sockflags = 0
Wed Jul 17 14:21:17 2013 us=320893 fast_io = DISABLED
Wed Jul 17 14:21:17 2013 us=320901 comp.alg = 0
Wed Jul 17 14:21:17 2013 us=320909 comp.flags = 0
Wed Jul 17 14:21:17 2013 us=320917 route_script = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320924 route_default_gateway = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=320933 route_default_metric = 0
Wed Jul 17 14:21:17 2013 us=320941 route_noexec = DISABLED
Wed Jul 17 14:21:17 2013 us=320948 route_delay = 0
Wed Jul 17 14:21:17 2013 us=320957 route_delay_window = 30
Wed Jul 17 14:21:17 2013 us=320964 route_delay_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=320972 route_nopull = DISABLED
Wed Jul 17 14:21:17 2013 us=320980 route_gateway_via_dhcp = DISABLED
Wed Jul 17 14:21:17 2013 us=320989 max_routes = 100
Wed Jul 17 14:21:17 2013 us=320996 allow_pull_fqdn = DISABLED
Wed Jul 17 14:21:17 2013 us=321009 management_addr = '/tmp/leap-tmpo0vAxO/openvpn.socket'
Wed Jul 17 14:21:17 2013 us=321019 management_port = 0
Wed Jul 17 14:21:17 2013 us=321027 management_user_pass = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=321036 management_log_history_cache = 250
Wed Jul 17 14:21:17 2013 us=324336 management_echo_buffer_size = 100
Wed Jul 17 14:21:17 2013 us=324360 management_write_peer_info_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324374 management_client_user = 'varac'
Wed Jul 17 14:21:17 2013 us=324390 management_client_group = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324400 management_flags = 264
Wed Jul 17 14:21:17 2013 us=324414 plugin[0] /home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/apps/eip/files/openvpn-plugin-down-root.so '[/home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/apps/eip/files/openvpn-plugin-down-root.so] [script_type=down] [/etc/leap/resolv-update]'
Wed Jul 17 14:21:17 2013 us=324427 shared_secret_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324436 key_direction = 0
Wed Jul 17 14:21:17 2013 us=324445 ciphername_defined = ENABLED
Wed Jul 17 14:21:17 2013 us=324453 ciphername = 'AES-128-CBC'
Wed Jul 17 14:21:17 2013 us=324462 authname_defined = ENABLED
Wed Jul 17 14:21:17 2013 us=324470 authname = 'SHA1'
Wed Jul 17 14:21:17 2013 us=324478 prng_hash = 'SHA1'
Wed Jul 17 14:21:17 2013 us=324486 prng_nonce_secret_len = 16
Wed Jul 17 14:21:17 2013 us=324494 keysize = 0
Wed Jul 17 14:21:17 2013 us=324502 engine = DISABLED
Wed Jul 17 14:21:17 2013 us=324510 replay = ENABLED
Wed Jul 17 14:21:17 2013 us=324518 mute_replay_warnings = DISABLED
Wed Jul 17 14:21:17 2013 us=324526 replay_window = 64
Wed Jul 17 14:21:17 2013 us=324534 replay_time = 15
Wed Jul 17 14:21:17 2013 us=324542 packet_id_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324550 use_iv = ENABLED
Wed Jul 17 14:21:17 2013 us=324558 test_crypto = DISABLED
Wed Jul 17 14:21:17 2013 us=324566 tls_server = DISABLED
Wed Jul 17 14:21:17 2013 us=324574 tls_client = ENABLED
Wed Jul 17 14:21:17 2013 us=324582 key_method = 2
Wed Jul 17 14:21:17 2013 us=324591 ca_file = '/home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/config/leap/providers/bitmask.net/keys/ca/cacert.pem'
Wed Jul 17 14:21:17 2013 us=324600 ca_path = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324608 dh_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324617 cert_file = '/home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/config/leap/providers/bitmask.net/keys/client/openvpn.pem'
Wed Jul 17 14:21:17 2013 us=324627 priv_key_file = '/home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/config/leap/providers/bitmask.net/keys/client/openvpn.pem'
Wed Jul 17 14:21:17 2013 us=324636 pkcs12_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324645 cipher_list = 'DHE-RSA-AES128-SHA'
Wed Jul 17 14:21:17 2013 us=324653 tls_verify = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324661 tls_export_cert = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324669 verify_x509_type = 0
Wed Jul 17 14:21:17 2013 us=324677 verify_x509_name = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324685 crl_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324693 ns_cert_type = 0
Wed Jul 17 14:21:17 2013 us=324701 remote_cert_ku[i] = 160
Wed Jul 17 14:21:17 2013 us=324709 remote_cert_ku[i] = 136
Wed Jul 17 14:21:17 2013 us=324716 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324724 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324732 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324740 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324747 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324755 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324763 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324770 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324778 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324785 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324793 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324801 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324808 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324816 remote_cert_ku[i] = 0
Wed Jul 17 14:21:17 2013 us=324824 remote_cert_eku = 'TLS Web Server Authentication'
Wed Jul 17 14:21:17 2013 us=324832 ssl_flags = 0
Wed Jul 17 14:21:17 2013 us=324840 tls_timeout = 2
Wed Jul 17 14:21:17 2013 us=324848 renegotiate_bytes = 0
Wed Jul 17 14:21:17 2013 us=324855 renegotiate_packets = 0
Wed Jul 17 14:21:17 2013 us=324863 renegotiate_seconds = 3600
Wed Jul 17 14:21:17 2013 us=324871 handshake_window = 60
Wed Jul 17 14:21:17 2013 us=324879 transition_window = 3600
Wed Jul 17 14:21:17 2013 us=324887 single_session = DISABLED
Wed Jul 17 14:21:17 2013 us=324895 push_peer_info = DISABLED
Wed Jul 17 14:21:17 2013 us=324903 tls_exit = DISABLED
Wed Jul 17 14:21:17 2013 us=324911 tls_auth_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=324934 server_network = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=324945 server_netmask = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=324961 server_network_ipv6 = ::
Wed Jul 17 14:21:17 2013 us=324971 server_netbits_ipv6 = 0
Wed Jul 17 14:21:17 2013 us=324988 server_bridge_ip = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325003 server_bridge_netmask = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325018 server_bridge_pool_start = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325034 server_bridge_pool_end = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325048 ifconfig_pool_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=325064 ifconfig_pool_start = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325080 ifconfig_pool_end = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325095 ifconfig_pool_netmask = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325109 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325120 ifconfig_pool_persist_refresh_freq = 600
Wed Jul 17 14:21:17 2013 us=325129 ifconfig_ipv6_pool_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=325139 ifconfig_ipv6_pool_base = ::
Wed Jul 17 14:21:17 2013 us=325147 ifconfig_ipv6_pool_netbits = 0
Wed Jul 17 14:21:17 2013 us=325156 n_bcast_buf = 256
Wed Jul 17 14:21:17 2013 us=325164 tcp_queue_limit = 64
Wed Jul 17 14:21:17 2013 us=325172 real_hash_size = 256
Wed Jul 17 14:21:17 2013 us=325180 virtual_hash_size = 256
Wed Jul 17 14:21:17 2013 us=325188 client_connect_script = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325196 learn_address_script = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325204 client_disconnect_script = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325212 client_config_dir = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325220 ccd_exclusive = DISABLED
Wed Jul 17 14:21:17 2013 us=325228 tmp_dir = '/tmp'
Wed Jul 17 14:21:17 2013 us=325236 push_ifconfig_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=325245 push_ifconfig_local = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325254 push_ifconfig_remote_netmask = 0.0.0.0
Wed Jul 17 14:21:17 2013 us=325263 push_ifconfig_ipv6_defined = DISABLED
Wed Jul 17 14:21:17 2013 us=325272 push_ifconfig_ipv6_local = ::/0
Wed Jul 17 14:21:17 2013 us=325281 push_ifconfig_ipv6_remote = ::
Wed Jul 17 14:21:17 2013 us=325300 enable_c2c = DISABLED
Wed Jul 17 14:21:17 2013 us=325309 duplicate_cn = DISABLED
Wed Jul 17 14:21:17 2013 us=325318 cf_max = 0
Wed Jul 17 14:21:17 2013 us=325326 cf_per = 0
Wed Jul 17 14:21:17 2013 us=325334 max_clients = 1024
Wed Jul 17 14:21:17 2013 us=325343 max_routes_per_client = 256
Wed Jul 17 14:21:17 2013 us=325351 auth_user_pass_verify_script = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325360 auth_user_pass_verify_script_via_file = DISABLED
Wed Jul 17 14:21:17 2013 us=325368 port_share_host = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325376 port_share_port = 0
Wed Jul 17 14:21:17 2013 us=325384 client = ENABLED
Wed Jul 17 14:21:17 2013 us=325392 pull = ENABLED
Wed Jul 17 14:21:17 2013 us=325400 auth_user_pass_file = '[UNDEF]'
Wed Jul 17 14:21:17 2013 us=325414 OpenVPN 2.3_git [git:master/0a48ae367f4de3d9] x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Jul 11 2013
Wed Jul 17 14:21:17 2013 us=334964 MANAGEMENT: client_uid=1000
Wed Jul 17 14:21:17 2013 us=335068 MANAGEMENT: unix domain socket listening on /tmp/leap-tmpo0vAxO/openvpn.socket
Wed Jul 17 14:21:17 2013 us=335146 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jul 17 14:21:17 2013 us=335176 PLUGIN_INIT: POST /home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/apps/eip/files/openvpn-plugin-down-root.so '[/home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/apps/eip/files/openvpn-plugin-down-root.so] [script_type=down] [/etc/leap/resolv-update]' intercepted=PLUGIN_UP|PLUGIN_DOWN
Wed Jul 17 14:21:17 2013 us=335873 Deprecated TLS cipher name 'DHE-RSA-AES128-SHA', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-CBC-SHA'
Wed Jul 17 14:21:17 2013 us=336020 Control Channel MTU parms [ L:1557 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jul 17 14:21:17 2013 us=336062 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Jul 17 14:21:17 2013 us=336095 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:395 ET:0 EL:0 ]
Wed Jul 17 14:21:17 2013 us=336120 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 17 14:21:17 2013 us=336131 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 17 14:21:17 2013 us=336156 Local Options hash (VER=V4): '8326dbaa'
Wed Jul 17 14:21:17 2013 us=336174 Expected Remote Options hash (VER=V4): 'b7f67de4'
Wed Jul 17 14:21:17 2013 us=336190 UDPv4 link local (bound): [undef]
Wed Jul 17 14:21:17 2013 us=336203 UDPv4 link remote: [AF_INET]85.17.92.167:1194
WRWed Jul 17 14:21:17 2013 us=368813 TLS: Initial packet from [AF_INET]85.17.92.167:1194, sid=2e58d83c 87cfeef5
WWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWed Jul 17 14:21:18 2013 us=215186 VERIFY OK: depth=1, CN=Bitmask Root CA, O=Bitmask, OU=https://bitmask.net
Wed Jul 17 14:21:18 2013 us=215754 Validating certificate key usage
Wed Jul 17 14:21:18 2013 us=215772 ++ Certificate has key usage 00a0, expects 00a0
Wed Jul 17 14:21:18 2013 us=215784 VERIFY KU OK
Wed Jul 17 14:21:18 2013 us=215797 Validating certificate extended key usage
Wed Jul 17 14:21:18 2013 us=215810 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Jul 17 14:21:18 2013 us=215823 VERIFY EKU OK
Wed Jul 17 14:21:18 2013 us=215832 VERIFY OK: depth=0, CN=hippo.bitmask.net
WRWRWRWRWRWRWRWRWRWRWRWRWRWWWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWWWWRRRRWRWRWed Jul 17 14:21:19 2013 us=239080 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jul 17 14:21:19 2013 us=239120 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 17 14:21:19 2013 us=239140 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jul 17 14:21:19 2013 us=239160 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WWed Jul 17 14:21:19 2013 us=239214 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES128-SHA, 2024 bit RSA
Wed Jul 17 14:21:19 2013 us=239255 [hippo.bitmask.net] Peer Connection Initiated with [AF_INET]85.17.92.167:1194
Wed Jul 17 14:21:21 2013 us=739881 SENT CONTROL [hippo.bitmask.net]: 'PUSH_REQUEST' (status=1)
WRRWRWRWed Jul 17 14:21:21 2013 us=771572 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.42.0.1,redirect-gateway def1,route-gateway 10.42.0.1,topology subnet,ping 5,ping-restart 20,ifconfig 10.42.0.2 255.255.248.0'
Wed Jul 17 14:21:21 2013 us=771722 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul 17 14:21:21 2013 us=771745 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul 17 14:21:21 2013 us=771762 OPTIONS IMPORT: route options modified
Wed Jul 17 14:21:21 2013 us=771778 OPTIONS IMPORT: route-related options modified
Wed Jul 17 14:21:21 2013 us=771793 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jul 17 14:21:21 2013 us=771983 ROUTE_GATEWAY 192.168.178.1/255.255.255.0 IFACE=eth2 HWADDR=00:22:4d:9b:0f:4d
Wed Jul 17 14:21:21 2013 us=772259 TUN/TAP device tun0 opened
Wed Jul 17 14:21:21 2013 us=772302 TUN/TAP TX queue length set to 100
Wed Jul 17 14:21:21 2013 us=772339 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jul 17 14:21:21 2013 us=772399 /sbin/ifconfig tun0 10.42.0.2 netmask 255.255.248.0 mtu 1500 broadcast 10.42.7.255
Wed Jul 17 14:21:21 2013 us=775151 PLUGIN_CALL: POST /home/varac/dev/projects/leap/client/LEAPClient-linux64-0.2.3/apps/eip/files/openvpn-plugin-down-root.so/PLUGIN_UP status=0
Wed Jul 17 14:21:21 2013 us=775202 /etc/leap/resolv-update tun0 1500 1557 10.42.0.2 255.255.248.0 init
dhcp-option DNS 10.42.0.1
Wed Jul 17 14:21:21 2013 us=787087 /sbin/route add -net 85.17.92.167 netmask 255.255.255.255 gw 192.168.178.1
Wed Jul 17 14:21:21 2013 us=788163 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.42.0.1
Wed Jul 17 14:21:21 2013 us=789152 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.42.0.1
Wed Jul 17 14:21:21 2013 us=790066 Initialization Sequence Completed
The routing table after this is:
0.0.0.0/1 via 10.42.0.1 dev tun0
default via 192.168.178.1 dev eth2 proto static
10.42.0.0/21 dev tun0 proto kernel scope link src 10.42.0.2
85.17.92.167 via 192.168.178.1 dev eth2
128.0.0.0/1 via 10.42.0.1 dev tun0
192.168.178.0/24 dev eth2 proto kernel scope link src 192.168.178.38 metric 1
85.17.92.167, the vpn gw, has a static route over my local netway gw.
I unplug the ethernet cable, and the routing table looks like this:
0.0.0.0/1 via 10.42.0.1 dev tun0
10.42.0.0/21 dev tun0 proto kernel scope link src 10.42.0.2
128.0.0.0/1 via 10.42.0.1 dev tun0
I plug the ethernet cable back, and here's the log:
Jul 17 13:43:59 2013 us=3724 [hippo.bitmask.net] Inactivity timeout (--ping-restart), restarting
Wed Jul 17 13:43:59 2013 us=3846 TCP/UDP: Closing socket
Wed Jul 17 13:43:59 2013 us=3874 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jul 17 13:43:59 2013 us=3890 Restart pause, 2 second(s)
Wed Jul 17 13:44:01 2013 us=5951 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jul 17 13:44:01 2013 us=6020 Re-using SSL/TLS context
Wed Jul 17 13:44:01 2013 us=6139 Control Channel MTU parms [ L:1557 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jul 17 13:44:01 2013 us=6182 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Jul 17 13:44:01 2013 us=6219 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:395 ET:0 EL:0 ]
Wed Jul 17 13:44:01 2013 us=6255 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 17 13:44:01 2013 us=6283 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 17 13:44:01 2013 us=6317 Local Options hash (VER=V4): '8326dbaa'
Wed Jul 17 13:44:01 2013 us=6344 Expected Remote Options hash (VER=V4): 'b7f67de4'
Wed Jul 17 13:44:01 2013 us=6367 UDPv4 link local (bound): [undef]
Wed Jul 17 13:44:01 2013 us=6391 UDPv4 link remote: [AF_INET]85.17.92.167:1194
WrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrWrrrrrrrrrrrrWrrrrrrrrrrrrrrWrrrrrrrrrrrrrrrrrWed Jul 17 13:44:21 2013 us=199770 [UNDEF] Inactivity timeout (--ping-restart), restarting
Wed Jul 17 13:44:21 2013 us=199811 TCP/UDP: Closing socket
Wed Jul 17 13:44:21 2013 us=199829 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jul 17 13:44:21 2013 us=199838 Restart pause, 2 second(s)
Wed Jul 17 13:44:23 2013 us=201885 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jul 17 13:44:23 2013 us=201916 Re-using SSL/TLS context
Wed Jul 17 13:44:23 2013 us=201956 Control Channel MTU parms [ L:1557 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jul 17 13:44:23 2013 us=201973 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Jul 17 13:44:23 2013 us=201984 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:395 ET:0 EL:0 ]
Wed Jul 17 13:44:23 2013 us=201996 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 17 13:44:23 2013 us=202002 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 17 13:44:23 2013 us=202013 Local Options hash (VER=V4): '8326dbaa'
Wed Jul 17 13:44:23 2013 us=202020 Expected Remote Options hash (VER=V4): 'b7f67de4'
Wed Jul 17 13:44:23 2013 us=202028 UDPv4 link local (bound): [undef]
Wed Jul 17 13:44:23 2013 us=202035 UDPv4 link remote: [AF_INET]223.223.175.15:1194
WrrrrrrrrrrrWrrrrrrrrWrrrrrrrrrrrrrrrrrrrrrrrrrrWrrrrrrrrrrrrWed Jul 17 13:44:43 2013 us=424965 [UNDEF] Inactivity timeout (--ping-restart), restarting
Wed Jul 17 13:44:43 2013 us=425047 TCP/UDP: Closing socket
Wed Jul 17 13:44:43 2013 us=425080 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jul 17 13:44:43 2013 us=425097 Restart pause, 2 second(s)
Wed Jul 17 13:44:45 2013 us=427190 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jul 17 13:44:45 2013 us=427248 Re-using SSL/TLS context
Wed Jul 17 13:44:45 2013 us=427316 Control Channel MTU parms [ L:1557 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jul 17 13:44:45 2013 us=427347 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Jul 17 13:44:45 2013 us=427369 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:395 ET:0 EL:0 ]
Wed Jul 17 13:44:45 2013 us=427394 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jul 17 13:44:45 2013 us=427406 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-128-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jul 17 13:44:45 2013 us=427429 Local Options hash (VER=V4): '8326dbaa'
Wed Jul 17 13:44:45 2013 us=427446 Expected Remote Options hash (VER=V4): 'b7f67de4'
Wed Jul 17 13:44:45 2013 us=427461 UDPv4 link local (bound): [undef]
Wed Jul 17 13:44:45 2013 us=427475 UDPv4 link remote: [AF_INET]202.85.227.196:1194
...
The routing looks like this:
0.0.0.0/1 via 10.42.0.1 dev tun0
default via 192.168.178.1 dev eth2 proto static
10.42.0.0/21 dev tun0 proto kernel scope link src 10.42.0.2
128.0.0.0/1 via 10.42.0.1 dev tun0
192.168.178.0/24 dev eth2 proto kernel scope link src 192.168.178.38 metric 1
The static route to the vpn gw is missing, and therefore openvpn tries to reconnect forever.
Any ideas what could be happening here?
Thanks!
