Hello people,
I am a beginner on linux and openvpn.
following situation:
I want to setup in near future a dedicated server with ubuntu. At the moment I am using windows server 2008 R2. 🙂 My aims are: Using it as a secure fileserver. And using it as VPN tunnel for anonymized surfing the internet. Also as webserver and mailserver.
For testing and learning I am trying to setup a server at home.
So I have my laptop with Linux Mint, and the "Server" with Ubuntu. Both are fresh installed.
i installed samba and openvpn. when I start to connect via console, more or less nothing happens. What I see is
Thu Aug 1 09:02:19 2013 us=744676 auth_user_pass_file = '[UNDEF]'
Thu Aug 1 09:02:19 2013 us=744707 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 13 2013
Thu Aug 1 09:02:19 2013 us=744861 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Aug 1 09:02:19 2013 us=746553 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Thu Aug 1 09:02:19 2013 us=746602 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:02:19 2013 us=746633 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:02:19 2013 us=746778 Control Channel MTU parms [ L:1573 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 1 09:02:19 2013 us=746877 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Aug 1 09:02:19 2013 us=750780 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Thu Aug 1 09:02:19 2013 us=750844 Local Options String: 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Aug 1 09:02:19 2013 us=750857 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Aug 1 09:02:19 2013 us=750885 Local Options hash (VER=V4): '1a647362'
Thu Aug 1 09:02:19 2013 us=750900 Expected Remote Options hash (VER=V4): '47de3ccc'
Thu Aug 1 09:02:19 2013 us=750922 UDPv4 link local: [undef]
Thu Aug 1 09:02:19 2013 us=750937 UDPv4 link remote: [AF_INET]xx.xx.xx.xx:1194
WWWWWThu Aug 1 09:03:19 2013 us=459558 [UNDEF] Inactivity timeout (--ping-restart), restarting
Thu Aug 1 09:03:19 2013 us=459667 TCP/UDP: Closing socket
Thu Aug 1 09:03:19 2013 us=459704 SIGUSR1[soft,ping-restart] received, process restarting
Thu Aug 1 09:03:19 2013 us=459717 Restart pause, 2 second(s)
Thu Aug 1 09:03:21 2013 us=459858 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Aug 1 09:03:21 2013 us=459920 Re-using SSL/TLS context
Thu Aug 1 09:03:21 2013 us=460003 Control Channel MTU parms [ L:1573 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 1 09:03:21 2013 us=460043 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Aug 1 09:03:21 2013 us=506209 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Thu Aug 1 09:03:21 2013 us=506291 Local Options String: 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Aug 1 09:03:21 2013 us=506313 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Aug 1 09:03:21 2013 us=506344 Local Options hash (VER=V4): '1a647362'
Thu Aug 1 09:03:21 2013 us=506365 Expected Remote Options hash (VER=V4): '47de3ccc'
Thu Aug 1 09:03:21 2013 us=506388 UDPv4 link local: [undef]
Thu Aug 1 09:03:21 2013 us=506407 UDPv4 link remote: [AF_INET]xx.xx.xx.xx:1194
here is my client config:
client
dev tap0
proto udp
remote xxxxx.dlinkddns.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/client_x201.crt
key /etc/openvpn/keys/client_x201.key
tls-auth /etc/openvpn/keys/ta.key 1
verb 5
ping 10
ping-restart 60
--explicit-exit-notify 2
ns-cert-type server
here is my server config:
local 192.168.122.105
port 1194
proto udp
dev tap0
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/g550.crt
key /etc/openvpn/easy-rsa/keys/g550.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
tls-auth /etc/openvpn/keys/ta.key 0
ifconfig-pool-persist ipp.txt
server-bridge 192.168.122.1 255.255.255.0 192.168.122.111 192.168.122.120
push "redirect-gateway def1"
keepalive 10 120
max-clients 5
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
log-append openvpn.log
my Serverlog from today:
Thu Aug 1 09:18:08 2013 us=374462 Current Parameter Settings:
Thu Aug 1 09:18:08 2013 us=374582 config = '/etc/openvpn/server.conf'
Thu Aug 1 09:18:08 2013 us=374606 mode = 1
Thu Aug 1 09:18:08 2013 us=374625 persist_config = DISABLED
Thu Aug 1 09:18:08 2013 us=374645 persist_mode = 1
Thu Aug 1 09:18:08 2013 us=374664 show_ciphers = DISABLED
Thu Aug 1 09:18:08 2013 us=374683 show_digests = DISABLED
Thu Aug 1 09:18:08 2013 us=374702 show_engines = DISABLED
Thu Aug 1 09:18:08 2013 us=374721 genkey = DISABLED
Thu Aug 1 09:18:08 2013 us=374740 key_pass_file = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=374759 show_tls_ciphers = DISABLED
Thu Aug 1 09:18:08 2013 us=374782 Connection profiles [default]:
Thu Aug 1 09:18:08 2013 us=374802 proto = udp
Thu Aug 1 09:18:08 2013 us=374822 local = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=374841 local_port = 1194
Thu Aug 1 09:18:08 2013 us=374860 remote = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=374879 remote_port = 1194
Thu Aug 1 09:18:08 2013 us=374898 remote_float = DISABLED
Thu Aug 1 09:18:08 2013 us=374917 bind_defined = DISABLED
Thu Aug 1 09:18:08 2013 us=374935 bind_local = ENABLED
Thu Aug 1 09:18:08 2013 us=374955 connect_retry_seconds = 5
Thu Aug 1 09:18:08 2013 us=374974 connect_timeout = 10
Thu Aug 1 09:18:08 2013 us=374993 connect_retry_max = 0
Thu Aug 1 09:18:08 2013 us=375012 socks_proxy_server = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375031 socks_proxy_port = 0
Thu Aug 1 09:18:08 2013 us=375049 socks_proxy_retry = DISABLED
Thu Aug 1 09:18:08 2013 us=375068 Connection profiles END
Thu Aug 1 09:18:08 2013 us=375087 remote_random = DISABLED
Thu Aug 1 09:18:08 2013 us=375106 ipchange = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375124 dev = 'tap0'
Thu Aug 1 09:18:08 2013 us=375143 dev_type = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375179 dev_node = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375197 lladdr = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375215 topology = 1
Thu Aug 1 09:18:08 2013 us=375233 tun_ipv6 = DISABLED
Thu Aug 1 09:18:08 2013 us=375250 ifconfig_local = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375272 ifconfig_remote_netmask = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375290 ifconfig_noexec = DISABLED
Thu Aug 1 09:18:08 2013 us=375307 ifconfig_nowarn = DISABLED
Thu Aug 1 09:18:08 2013 us=375325 ifconfig_ipv6_local = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375343 ifconfig_ipv6_netbits = 0
Thu Aug 1 09:18:08 2013 us=375361 ifconfig_ipv6_remote = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375379 shaper = 0
Thu Aug 1 09:18:08 2013 us=375397 tun_mtu = 1500
Thu Aug 1 09:18:08 2013 us=375414 tun_mtu_defined = ENABLED
Thu Aug 1 09:18:08 2013 us=375432 link_mtu = 1500
Thu Aug 1 09:18:08 2013 us=375449 link_mtu_defined = DISABLED
Thu Aug 1 09:18:08 2013 us=375467 tun_mtu_extra = 32
Thu Aug 1 09:18:08 2013 us=375485 tun_mtu_extra_defined = ENABLED
Thu Aug 1 09:18:08 2013 us=375503 fragment = 0
Thu Aug 1 09:18:08 2013 us=375520 mtu_discover_type = -1
Thu Aug 1 09:18:08 2013 us=375538 mtu_test = 0
Thu Aug 1 09:18:08 2013 us=375556 mlock = DISABLED
Thu Aug 1 09:18:08 2013 us=375573 keepalive_ping = 10
Thu Aug 1 09:18:08 2013 us=375591 keepalive_timeout = 120
Thu Aug 1 09:18:08 2013 us=375608 inactivity_timeout = 0
Thu Aug 1 09:18:08 2013 us=375626 ping_send_timeout = 10
Thu Aug 1 09:18:08 2013 us=375643 ping_rec_timeout = 240
Thu Aug 1 09:18:08 2013 us=375661 ping_rec_timeout_action = 2
Thu Aug 1 09:18:08 2013 us=375678 ping_timer_remote = DISABLED
Thu Aug 1 09:18:08 2013 us=375696 remap_sigusr1 = 0
Thu Aug 1 09:18:08 2013 us=375745 explicit_exit_notification = 0
Thu Aug 1 09:18:08 2013 us=375767 persist_tun = ENABLED
Thu Aug 1 09:18:08 2013 us=375786 persist_local_ip = DISABLED
Thu Aug 1 09:18:08 2013 us=375804 persist_remote_ip = DISABLED
Thu Aug 1 09:18:08 2013 us=375823 persist_key = ENABLED
Thu Aug 1 09:18:08 2013 us=375841 mssfix = 1450
Thu Aug 1 09:18:08 2013 us=375859 passtos = DISABLED
Thu Aug 1 09:18:08 2013 us=375877 resolve_retry_seconds = 1000000000
Thu Aug 1 09:18:08 2013 us=375895 username = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375912 groupname = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375930 chroot_dir = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=375947 cd_dir = '/etc/openvpn'
Thu Aug 1 09:18:08 2013 us=375965 writepid = '/var/run/openvpn.server.pid'
Thu Aug 1 09:18:08 2013 us=375983 up_script = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376000 down_script = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376018 down_pre = DISABLED
Thu Aug 1 09:18:08 2013 us=376035 up_restart = DISABLED
Thu Aug 1 09:18:08 2013 us=376053 up_delay = DISABLED
Thu Aug 1 09:18:08 2013 us=376070 daemon = ENABLED
Thu Aug 1 09:18:08 2013 us=376088 inetd = 0
Thu Aug 1 09:18:08 2013 us=376105 log = ENABLED
Thu Aug 1 09:18:08 2013 us=376123 suppress_timestamps = DISABLED
Thu Aug 1 09:18:08 2013 us=376141 nice = 0
Thu Aug 1 09:18:08 2013 us=376168 verbosity = 6
Thu Aug 1 09:18:08 2013 us=376189 mute = 0
Thu Aug 1 09:18:08 2013 us=376206 gremlin = 0
Thu Aug 1 09:18:08 2013 us=376224 status_file = '/var/log/openvpn-status.log'
Thu Aug 1 09:18:08 2013 us=376242 status_file_version = 1
Thu Aug 1 09:18:08 2013 us=376259 status_file_update_freq = 60
Thu Aug 1 09:18:08 2013 us=376277 occ = ENABLED
Thu Aug 1 09:18:08 2013 us=376295 rcvbuf = 65536
Thu Aug 1 09:18:08 2013 us=376312 sndbuf = 65536
Thu Aug 1 09:18:08 2013 us=376330 sockflags = 0
Thu Aug 1 09:18:08 2013 us=376347 fast_io = DISABLED
Thu Aug 1 09:18:08 2013 us=376364 lzo = 0
Thu Aug 1 09:18:08 2013 us=376381 route_script = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376399 route_default_gateway = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376417 route_default_metric = 0
Thu Aug 1 09:18:08 2013 us=376435 route_noexec = DISABLED
Thu Aug 1 09:18:08 2013 us=376453 route_delay = 0
Thu Aug 1 09:18:08 2013 us=376480 route_delay_window = 30
Thu Aug 1 09:18:08 2013 us=376499 route_delay_defined = DISABLED
Thu Aug 1 09:18:08 2013 us=376516 route_nopull = DISABLED
Thu Aug 1 09:18:08 2013 us=376534 route_gateway_via_dhcp = DISABLED
Thu Aug 1 09:18:08 2013 us=376552 max_routes = 100
Thu Aug 1 09:18:08 2013 us=376569 allow_pull_fqdn = DISABLED
Thu Aug 1 09:18:08 2013 us=376588 management_addr = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376605 management_port = 0
Thu Aug 1 09:18:08 2013 us=376623 management_user_pass = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376640 management_log_history_cache = 250
Thu Aug 1 09:18:08 2013 us=376658 management_echo_buffer_size = 100
Thu Aug 1 09:18:08 2013 us=376676 management_write_peer_info_file = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376694 management_client_user = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376712 management_client_group = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376730 management_flags = 0
Thu Aug 1 09:18:08 2013 us=376748 shared_secret_file = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=376766 key_direction = 1
Thu Aug 1 09:18:08 2013 us=376783 ciphername_defined = ENABLED
Thu Aug 1 09:18:08 2013 us=376801 ciphername = 'BF-CBC'
Thu Aug 1 09:18:08 2013 us=376819 authname_defined = ENABLED
Thu Aug 1 09:18:08 2013 us=376836 authname = 'SHA1'
Thu Aug 1 09:18:08 2013 us=376854 prng_hash = 'SHA1'
Thu Aug 1 09:18:08 2013 us=376872 prng_nonce_secret_len = 16
Thu Aug 1 09:18:08 2013 us=376889 keysize = 0
Thu Aug 1 09:18:08 2013 us=376906 engine = DISABLED
Thu Aug 1 09:18:08 2013 us=376924 replay = ENABLED
Thu Aug 1 09:18:08 2013 us=376942 mute_replay_warnings = DISABLED
Thu Aug 1 09:18:08 2013 us=376960 replay_window = 64
Thu Aug 1 09:18:08 2013 us=376978 replay_time = 15
Thu Aug 1 09:18:08 2013 us=376995 packet_id_file = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377012 use_iv = ENABLED
Thu Aug 1 09:18:08 2013 us=377030 test_crypto = DISABLED
Thu Aug 1 09:18:08 2013 us=377048 tls_server = ENABLED
Thu Aug 1 09:18:08 2013 us=377066 tls_client = DISABLED
Thu Aug 1 09:18:08 2013 us=377083 key_method = 2
Thu Aug 1 09:18:08 2013 us=377101 ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Thu Aug 1 09:18:08 2013 us=377119 ca_path = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377137 dh_file = '/etc/openvpn/easy-rsa/keys/dh2048.pem'
Thu Aug 1 09:18:08 2013 us=377155 cert_file = '/etc/openvpn/easy-rsa/keys/g550.crt'
Thu Aug 1 09:18:08 2013 us=377174 priv_key_file = '/etc/openvpn/easy-rsa/keys/g550.key'
Thu Aug 1 09:18:08 2013 us=377192 pkcs12_file = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377210 cipher_list = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377228 tls_verify = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377246 tls_export_cert = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377263 tls_remote = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377281 crl_file = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377299 ns_cert_type = 0
Thu Aug 1 09:18:08 2013 us=377317 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377335 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377352 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377370 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377387 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377405 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377422 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377440 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377458 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377475 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377493 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377510 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377528 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377545 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377563 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377580 remote_cert_ku[i] = 0
Thu Aug 1 09:18:08 2013 us=377598 remote_cert_eku = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=377616 tls_timeout = 2
Thu Aug 1 09:18:08 2013 us=377642 renegotiate_bytes = 0
Thu Aug 1 09:18:08 2013 us=377660 renegotiate_packets = 0
Thu Aug 1 09:18:08 2013 us=377678 renegotiate_seconds = 3600
Thu Aug 1 09:18:08 2013 us=377696 handshake_window = 60
Thu Aug 1 09:18:08 2013 us=377714 transition_window = 3600
Thu Aug 1 09:18:08 2013 us=377731 single_session = DISABLED
Thu Aug 1 09:18:08 2013 us=377749 push_peer_info = DISABLED
Thu Aug 1 09:18:08 2013 us=377766 tls_exit = DISABLED
Thu Aug 1 09:18:08 2013 us=377784 tls_auth_file = '/etc/openvpn/keys/ta.key'
Thu Aug 1 09:18:08 2013 us=377802 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377820 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377838 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377855 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377873 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377891 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377908 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377926 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377944 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377962 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377980 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=377997 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=378015 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=378032 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=378050 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=378068 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:18:08 2013 us=378086 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378105 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378122 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378140 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378158 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378175 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378193 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378211 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378228 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378246 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378264 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378282 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378300 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378317 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378335 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378353 pkcs11_private_mode = 00000000
Thu Aug 1 09:18:08 2013 us=378370 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378388 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378405 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378423 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378440 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378458 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378475 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378493 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378510 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378528 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378546 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378563 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378581 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378598 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378616 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378634 pkcs11_cert_private = DISABLED
Thu Aug 1 09:18:08 2013 us=378652 pkcs11_pin_cache_period = -1
Thu Aug 1 09:18:08 2013 us=378669 pkcs11_id = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=378696 pkcs11_id_management = DISABLED
Thu Aug 1 09:18:08 2013 us=378716 server_network = 0.0.0.0
Thu Aug 1 09:18:08 2013 us=378735 server_netmask = 0.0.0.0
Thu Aug 1 09:18:08 2013 us=378764 server_network_ipv6 = ::
Thu Aug 1 09:18:08 2013 us=378783 server_netbits_ipv6 = 0
Thu Aug 1 09:18:08 2013 us=378803 server_bridge_ip = 192.168.122.1
Thu Aug 1 09:18:08 2013 us=378822 server_bridge_netmask = 255.255.255.0
Thu Aug 1 09:18:08 2013 us=378842 server_bridge_pool_start = 192.168.122.111
Thu Aug 1 09:18:08 2013 us=378861 server_bridge_pool_end = 192.168.122.120
Thu Aug 1 09:18:08 2013 us=378879 push_entry = 'redirect-gateway def1'
Thu Aug 1 09:18:08 2013 us=378897 push_entry = 'route-gateway 192.168.122.1'
Thu Aug 1 09:18:08 2013 us=378915 push_entry = 'ping 10'
Thu Aug 1 09:18:08 2013 us=378933 push_entry = 'ping-restart 120'
Thu Aug 1 09:18:08 2013 us=378951 ifconfig_pool_defined = ENABLED
Thu Aug 1 09:18:08 2013 us=378970 ifconfig_pool_start = 192.168.122.111
Thu Aug 1 09:18:08 2013 us=378990 ifconfig_pool_end = 192.168.122.120
Thu Aug 1 09:18:08 2013 us=379009 ifconfig_pool_netmask = 255.255.255.0
Thu Aug 1 09:18:08 2013 us=379027 ifconfig_pool_persist_filename = 'ipp.txt'
Thu Aug 1 09:18:08 2013 us=379045 ifconfig_pool_persist_refresh_freq = 600
Thu Aug 1 09:18:08 2013 us=379063 ifconfig_ipv6_pool_defined = DISABLED
Thu Aug 1 09:18:08 2013 us=379087 ifconfig_ipv6_pool_base = ::
Thu Aug 1 09:18:08 2013 us=379107 ifconfig_ipv6_pool_netbits = 0
Thu Aug 1 09:18:08 2013 us=379125 n_bcast_buf = 256
Thu Aug 1 09:18:08 2013 us=379142 tcp_queue_limit = 64
Thu Aug 1 09:18:08 2013 us=379160 real_hash_size = 256
Thu Aug 1 09:18:08 2013 us=379178 virtual_hash_size = 256
Thu Aug 1 09:18:08 2013 us=379195 client_connect_script = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=379214 learn_address_script = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=379232 client_disconnect_script = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=379250 client_config_dir = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=379268 ccd_exclusive = DISABLED
Thu Aug 1 09:18:08 2013 us=379286 tmp_dir = '/tmp'
Thu Aug 1 09:18:08 2013 us=379304 push_ifconfig_defined = DISABLED
Thu Aug 1 09:18:08 2013 us=379324 push_ifconfig_local = 0.0.0.0
Thu Aug 1 09:18:08 2013 us=379344 push_ifconfig_remote_netmask = 0.0.0.0
Thu Aug 1 09:18:08 2013 us=379361 push_ifconfig_ipv6_defined = DISABLED
Thu Aug 1 09:18:08 2013 us=379382 push_ifconfig_ipv6_local = ::/0
Thu Aug 1 09:18:08 2013 us=379401 push_ifconfig_ipv6_remote = ::
Thu Aug 1 09:18:08 2013 us=379419 enable_c2c = DISABLED
Thu Aug 1 09:18:08 2013 us=379436 duplicate_cn = DISABLED
Thu Aug 1 09:18:08 2013 us=379454 cf_max = 0
Thu Aug 1 09:18:08 2013 us=379472 cf_per = 0
Thu Aug 1 09:18:08 2013 us=379489 max_clients = 5
Thu Aug 1 09:18:08 2013 us=379507 max_routes_per_client = 256
Thu Aug 1 09:18:08 2013 us=379524 auth_user_pass_verify_script = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=379543 auth_user_pass_verify_script_via_file = DISABLED
Thu Aug 1 09:18:08 2013 us=379560 ssl_flags = 0
Thu Aug 1 09:18:08 2013 us=379578 port_share_host = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=379596 port_share_port = 0
Thu Aug 1 09:18:08 2013 us=379613 client = DISABLED
Thu Aug 1 09:18:08 2013 us=379631 pull = DISABLED
Thu Aug 1 09:18:08 2013 us=379649 auth_user_pass_file = '[UNDEF]'
Thu Aug 1 09:18:08 2013 us=379671 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Thu Aug 1 09:18:08 2013 us=379872 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Aug 1 09:18:08 2013 us=380034 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Aug 1 09:18:08 2013 us=392362 Diffie-Hellman initialized with 2048 bit key
Thu Aug 1 09:18:08 2013 us=393219 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Thu Aug 1 09:18:08 2013 us=393245 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:18:08 2013 us=393259 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:18:08 2013 us=393278 TLS-Auth MTU parms [ L:1573 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 1 09:18:08 2013 us=393307 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Aug 1 09:18:08 2013 us=393814 TUN/TAP device tap0 opened
Thu Aug 1 09:18:08 2013 us=393862 TUN/TAP TX queue length set to 100
Thu Aug 1 09:18:08 2013 us=393905 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Thu Aug 1 09:18:08 2013 us=394761 UDPv4 link local (bound): [undef]
Thu Aug 1 09:18:08 2013 us=394828 UDPv4 link remote: [undef]
Thu Aug 1 09:18:08 2013 us=394846 MULTI: multi_init called, r=256 v=256
Thu Aug 1 09:18:08 2013 us=394934 IFCONFIG POOL: base=192.168.122.111 size=10, ipv6=0
Thu Aug 1 09:18:08 2013 us=394955 ifconfig_pool_read(), in='client_x201,192.168.122.111', TODO: IPv6
Thu Aug 1 09:18:08 2013 us=394983 succeeded -> ifconfig_pool_set()
Thu Aug 1 09:18:08 2013 us=394999 IFCONFIG POOL LIST
Thu Aug 1 09:18:08 2013 us=395013 client_x201,192.168.122.111
Thu Aug 1 09:18:08 2013 us=395051 Initialization Sequence Completed
Thu Aug 1 09:21:05 2013 us=30684 event_wait : Interrupted system call (code=4)
Thu Aug 1 09:21:05 2013 us=31049 TCP/UDP: Closing socket
Thu Aug 1 09:21:05 2013 us=31112 Closing TUN/TAP interface
Thu Aug 1 09:21:05 2013 us=45238 SIGTERM[hard,] received, process exiting
Thu Aug 1 09:21:06 2013 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Thu Aug 1 09:21:06 2013 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Aug 1 09:21:06 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Aug 1 09:21:06 2013 Diffie-Hellman initialized with 2048 bit key
Thu Aug 1 09:21:06 2013 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Thu Aug 1 09:21:06 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:21:06 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:21:06 2013 TLS-Auth MTU parms [ L:1573 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 1 09:21:06 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Aug 1 09:21:06 2013 TUN/TAP device tap0 opened
Thu Aug 1 09:21:06 2013 TUN/TAP TX queue length set to 100
Thu Aug 1 09:21:06 2013 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Thu Aug 1 09:21:06 2013 UDPv4 link local (bound): [undef]
Thu Aug 1 09:21:06 2013 UDPv4 link remote: [undef]
Thu Aug 1 09:21:06 2013 MULTI: multi_init called, r=256 v=256
Thu Aug 1 09:21:06 2013 IFCONFIG POOL: base=192.168.122.111 size=10, ipv6=0
Thu Aug 1 09:21:06 2013 ifconfig_pool_read(), in='client_x201,192.168.122.111', TODO: IPv6
Thu Aug 1 09:21:06 2013 succeeded -> ifconfig_pool_set()
Thu Aug 1 09:21:06 2013 IFCONFIG POOL LIST
Thu Aug 1 09:21:06 2013 client_x201,192.168.122.111
Thu Aug 1 09:21:06 2013 Initialization Sequence Completed
Thu Aug 1 09:21:29 2013 event_wait : Interrupted system call (code=4)
Thu Aug 1 09:21:29 2013 TCP/UDP: Closing socket
Thu Aug 1 09:21:29 2013 Closing TUN/TAP interface
Thu Aug 1 09:21:29 2013 SIGTERM[hard,] received, process exiting
Thu Aug 1 09:22:45 2013 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Thu Aug 1 09:22:45 2013 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Thu Aug 1 09:22:45 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Aug 1 09:22:45 2013 Diffie-Hellman initialized with 2048 bit key
Thu Aug 1 09:22:45 2013 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Thu Aug 1 09:22:45 2013 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:22:45 2013 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:22:45 2013 TLS-Auth MTU parms [ L:1573 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 1 09:22:45 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Aug 1 09:22:45 2013 TUN/TAP device tap0 opened
Thu Aug 1 09:22:45 2013 TUN/TAP TX queue length set to 100
Thu Aug 1 09:22:45 2013 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Thu Aug 1 09:22:45 2013 UDPv4 link local (bound): [undef]
Thu Aug 1 09:22:45 2013 UDPv4 link remote: [undef]
Thu Aug 1 09:22:45 2013 MULTI: multi_init called, r=256 v=256
Thu Aug 1 09:22:45 2013 IFCONFIG POOL: base=192.168.122.111 size=10, ipv6=0
Thu Aug 1 09:22:45 2013 ifconfig_pool_read(), in='client_x201,192.168.122.111', TODO: IPv6
Thu Aug 1 09:22:45 2013 succeeded -> ifconfig_pool_set()
Thu Aug 1 09:22:45 2013 IFCONFIG POOL LIST
Thu Aug 1 09:22:45 2013 client_x201,192.168.122.111
Thu Aug 1 09:22:45 2013 Initialization Sequence Completed
This is what I see in console at the client after I changed in the client config from verb 3 to verb 6
Thu Aug 1 09:33:58 2013 us=475665 Current Parameter Settings:
Thu Aug 1 09:33:58 2013 us=475748 config = '/etc/openvpn/client.conf'
Thu Aug 1 09:33:58 2013 us=475761 mode = 0
Thu Aug 1 09:33:58 2013 us=475771 persist_config = DISABLED
Thu Aug 1 09:33:58 2013 us=475781 persist_mode = 1
Thu Aug 1 09:33:58 2013 us=475791 show_ciphers = DISABLED
Thu Aug 1 09:33:58 2013 us=475800 show_digests = DISABLED
Thu Aug 1 09:33:58 2013 us=475810 show_engines = DISABLED
Thu Aug 1 09:33:58 2013 us=475819 genkey = DISABLED
Thu Aug 1 09:33:58 2013 us=475829 key_pass_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=475838 show_tls_ciphers = DISABLED
Thu Aug 1 09:33:58 2013 us=475850 Connection profiles [default]:
Thu Aug 1 09:33:58 2013 us=475860 proto = udp
Thu Aug 1 09:33:58 2013 us=475869 local = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=475879 local_port = 0
Thu Aug 1 09:33:58 2013 us=475888 remote = 'crysc.dlinkddns.com'
Thu Aug 1 09:33:58 2013 us=475897 remote_port = 1194
Thu Aug 1 09:33:58 2013 us=475907 remote_float = DISABLED
Thu Aug 1 09:33:58 2013 us=475916 bind_defined = DISABLED
Thu Aug 1 09:33:58 2013 us=475925 bind_local = DISABLED
Thu Aug 1 09:33:58 2013 us=475935 connect_retry_seconds = 5
Thu Aug 1 09:33:58 2013 us=475945 connect_timeout = 10
Thu Aug 1 09:33:58 2013 us=475954 connect_retry_max = 0
Thu Aug 1 09:33:58 2013 us=475964 socks_proxy_server = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=475973 socks_proxy_port = 0
Thu Aug 1 09:33:58 2013 us=475982 socks_proxy_retry = DISABLED
Thu Aug 1 09:33:58 2013 us=475994 Connection profiles END
Thu Aug 1 09:33:58 2013 us=476003 remote_random = DISABLED
Thu Aug 1 09:33:58 2013 us=476012 ipchange = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476022 dev = 'tap0'
Thu Aug 1 09:33:58 2013 us=476031 dev_type = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476040 dev_node = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476050 lladdr = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476059 topology = 1
Thu Aug 1 09:33:58 2013 us=476068 tun_ipv6 = DISABLED
Thu Aug 1 09:33:58 2013 us=476078 ifconfig_local = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476087 ifconfig_remote_netmask = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476097 ifconfig_noexec = DISABLED
Thu Aug 1 09:33:58 2013 us=476106 ifconfig_nowarn = DISABLED
Thu Aug 1 09:33:58 2013 us=476116 ifconfig_ipv6_local = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476125 ifconfig_ipv6_netbits = 0
Thu Aug 1 09:33:58 2013 us=476134 ifconfig_ipv6_remote = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476144 shaper = 0
Thu Aug 1 09:33:58 2013 us=476154 tun_mtu = 1500
Thu Aug 1 09:33:58 2013 us=476163 tun_mtu_defined = ENABLED
Thu Aug 1 09:33:58 2013 us=476172 link_mtu = 1500
Thu Aug 1 09:33:58 2013 us=476182 link_mtu_defined = DISABLED
Thu Aug 1 09:33:58 2013 us=476191 tun_mtu_extra = 32
Thu Aug 1 09:33:58 2013 us=476200 tun_mtu_extra_defined = ENABLED
Thu Aug 1 09:33:58 2013 us=476210 fragment = 0
Thu Aug 1 09:33:58 2013 us=476219 mtu_discover_type = -1
Thu Aug 1 09:33:58 2013 us=476228 mtu_test = 0
Thu Aug 1 09:33:58 2013 us=476238 mlock = DISABLED
Thu Aug 1 09:33:58 2013 us=476247 keepalive_ping = 0
Thu Aug 1 09:33:58 2013 us=476257 keepalive_timeout = 0
Thu Aug 1 09:33:58 2013 us=476266 inactivity_timeout = 0
Thu Aug 1 09:33:58 2013 us=476275 ping_send_timeout = 10
Thu Aug 1 09:33:58 2013 us=476284 ping_rec_timeout = 60
Thu Aug 1 09:33:58 2013 us=476294 ping_rec_timeout_action = 2
Thu Aug 1 09:33:58 2013 us=476303 ping_timer_remote = DISABLED
Thu Aug 1 09:33:58 2013 us=476312 remap_sigusr1 = 0
Thu Aug 1 09:33:58 2013 us=476322 explicit_exit_notification = 2
Thu Aug 1 09:33:58 2013 us=476331 persist_tun = ENABLED
Thu Aug 1 09:33:58 2013 us=476340 persist_local_ip = DISABLED
Thu Aug 1 09:33:58 2013 us=476349 persist_remote_ip = DISABLED
Thu Aug 1 09:33:58 2013 us=476361 persist_key = ENABLED
Thu Aug 1 09:33:58 2013 us=476371 mssfix = 1450
Thu Aug 1 09:33:58 2013 us=476380 passtos = DISABLED
Thu Aug 1 09:33:58 2013 us=476390 resolve_retry_seconds = 1000000000
Thu Aug 1 09:33:58 2013 us=476399 username = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476408 groupname = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476418 chroot_dir = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476427 cd_dir = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476436 writepid = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476445 up_script = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476454 down_script = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476463 down_pre = DISABLED
Thu Aug 1 09:33:58 2013 us=476472 up_restart = DISABLED
Thu Aug 1 09:33:58 2013 us=476481 up_delay = DISABLED
Thu Aug 1 09:33:58 2013 us=476490 daemon = DISABLED
Thu Aug 1 09:33:58 2013 us=476500 inetd = 0
Thu Aug 1 09:33:58 2013 us=476510 log = DISABLED
Thu Aug 1 09:33:58 2013 us=476519 suppress_timestamps = DISABLED
Thu Aug 1 09:33:58 2013 us=476528 nice = 0
Thu Aug 1 09:33:58 2013 us=476538 verbosity = 6
Thu Aug 1 09:33:58 2013 us=476547 mute = 0
Thu Aug 1 09:33:58 2013 us=476556 gremlin = 0
Thu Aug 1 09:33:58 2013 us=476565 status_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476575 status_file_version = 1
Thu Aug 1 09:33:58 2013 us=476584 status_file_update_freq = 60
Thu Aug 1 09:33:58 2013 us=476594 occ = ENABLED
Thu Aug 1 09:33:58 2013 us=476603 rcvbuf = 65536
Thu Aug 1 09:33:58 2013 us=476613 sndbuf = 65536
Thu Aug 1 09:33:58 2013 us=476622 sockflags = 0
Thu Aug 1 09:33:58 2013 us=476631 fast_io = DISABLED
Thu Aug 1 09:33:58 2013 us=476640 lzo = 0
Thu Aug 1 09:33:58 2013 us=476649 route_script = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476659 route_default_gateway = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476668 route_default_metric = 0
Thu Aug 1 09:33:58 2013 us=476678 route_noexec = DISABLED
Thu Aug 1 09:33:58 2013 us=476688 route_delay = 0
Thu Aug 1 09:33:58 2013 us=476702 route_delay_window = 30
Thu Aug 1 09:33:58 2013 us=476715 route_delay_defined = DISABLED
Thu Aug 1 09:33:58 2013 us=476728 route_nopull = DISABLED
Thu Aug 1 09:33:58 2013 us=476745 route_gateway_via_dhcp = DISABLED
Thu Aug 1 09:33:58 2013 us=476759 max_routes = 100
Thu Aug 1 09:33:58 2013 us=476772 allow_pull_fqdn = DISABLED
Thu Aug 1 09:33:58 2013 us=476785 management_addr = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476798 management_port = 0
Thu Aug 1 09:33:58 2013 us=476810 management_user_pass = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476827 management_log_history_cache = 250
Thu Aug 1 09:33:58 2013 us=476837 management_echo_buffer_size = 100
Thu Aug 1 09:33:58 2013 us=476847 management_write_peer_info_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476857 management_client_user = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476867 management_client_group = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476876 management_flags = 0
Thu Aug 1 09:33:58 2013 us=476886 shared_secret_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=476928 key_direction = 2
Thu Aug 1 09:33:58 2013 us=476946 ciphername_defined = ENABLED
Thu Aug 1 09:33:58 2013 us=476963 ciphername = 'BF-CBC'
Thu Aug 1 09:33:58 2013 us=476974 authname_defined = ENABLED
Thu Aug 1 09:33:58 2013 us=477022 authname = 'SHA1'
Thu Aug 1 09:33:58 2013 us=477040 prng_hash = 'SHA1'
Thu Aug 1 09:33:58 2013 us=477058 prng_nonce_secret_len = 16
Thu Aug 1 09:33:58 2013 us=477076 keysize = 0
Thu Aug 1 09:33:58 2013 us=477094 engine = DISABLED
Thu Aug 1 09:33:58 2013 us=477112 replay = ENABLED
Thu Aug 1 09:33:58 2013 us=477129 mute_replay_warnings = DISABLED
Thu Aug 1 09:33:58 2013 us=477147 replay_window = 64
Thu Aug 1 09:33:58 2013 us=477165 replay_time = 15
Thu Aug 1 09:33:58 2013 us=477183 packet_id_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477201 use_iv = ENABLED
Thu Aug 1 09:33:58 2013 us=477218 test_crypto = DISABLED
Thu Aug 1 09:33:58 2013 us=477236 tls_server = DISABLED
Thu Aug 1 09:33:58 2013 us=477254 tls_client = ENABLED
Thu Aug 1 09:33:58 2013 us=477271 key_method = 2
Thu Aug 1 09:33:58 2013 us=477289 ca_file = '/etc/openvpn/keys/ca.crt'
Thu Aug 1 09:33:58 2013 us=477307 ca_path = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477324 dh_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477343 cert_file = '/etc/openvpn/keys/client_x201.crt'
Thu Aug 1 09:33:58 2013 us=477361 priv_key_file = '/etc/openvpn/keys/client_x201.key'
Thu Aug 1 09:33:58 2013 us=477379 pkcs12_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477396 cipher_list = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477414 tls_verify = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477432 tls_export_cert = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477450 tls_remote = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477467 crl_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477485 ns_cert_type = 64
Thu Aug 1 09:33:58 2013 us=477503 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477521 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477539 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477556 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477574 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477591 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477608 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477626 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477643 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477661 remote_cert_ku = 0
Thu Aug 1 09:33:58 2013 us=477678 remote_cert_ku[i] = 0
Thu Aug 1 09:33:58 2013 us=477696 remote_cert_ku[i] = 0
Thu Aug 1 09:33:58 2013 us=477713 remote_cert_ku[i] = 0
Thu Aug 1 09:33:58 2013 us=477731 remote_cert_ku[i] = 0
Thu Aug 1 09:33:58 2013 us=477748 remote_cert_ku[i] = 0
Thu Aug 1 09:33:58 2013 us=477766 remote_cert_ku[i] = 0
Thu Aug 1 09:33:58 2013 us=477783 remote_cert_eku = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=477801 tls_timeout = 2
Thu Aug 1 09:33:58 2013 us=477818 renegotiate_bytes = 0
Thu Aug 1 09:33:58 2013 us=477836 renegotiate_packets = 0
Thu Aug 1 09:33:58 2013 us=477854 renegotiate_seconds = 3600
Thu Aug 1 09:33:58 2013 us=477871 handshake_window = 60
Thu Aug 1 09:33:58 2013 us=477889 transition_window = 3600
Thu Aug 1 09:33:58 2013 us=477907 single_session = DISABLED
Thu Aug 1 09:33:58 2013 us=477924 push_peer_info = DISABLED
Thu Aug 1 09:33:58 2013 us=477942 tls_exit = DISABLED
Thu Aug 1 09:33:58 2013 us=477959 tls_auth_file = '/etc/openvpn/keys/ta.key'
Thu Aug 1 09:33:58 2013 us=477977 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=477995 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478013 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478031 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478049 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478066 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478084 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478102 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478120 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478138 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478155 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478172 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478189 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478206 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478223 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478241 pkcs11_protected_authentication = DISABLED
Thu Aug 1 09:33:58 2013 us=478258 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478276 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478293 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478310 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478327 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478343 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478360 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478377 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478394 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478411 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478427 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478444 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478461 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478478 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478494 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478521 pkcs11_private_mode = 00000000
Thu Aug 1 09:33:58 2013 us=478543 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478565 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478606 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478629 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478651 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478674 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478696 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478719 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478741 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478764 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478786 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478809 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478832 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478854 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478876 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478898 pkcs11_cert_private = DISABLED
Thu Aug 1 09:33:58 2013 us=478922 pkcs11_pin_cache_period = -1
Thu Aug 1 09:33:58 2013 us=478944 pkcs11_id = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=478966 pkcs11_id_management = DISABLED
Thu Aug 1 09:33:58 2013 us=479005 server_network = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479031 server_netmask = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479062 server_network_ipv6 = ::
Thu Aug 1 09:33:58 2013 us=479086 server_netbits_ipv6 = 0
Thu Aug 1 09:33:58 2013 us=479110 server_bridge_ip = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479134 server_bridge_netmask = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479187 server_bridge_pool_start = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479226 server_bridge_pool_end = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479251 ifconfig_pool_defined = DISABLED
Thu Aug 1 09:33:58 2013 us=479276 ifconfig_pool_start = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479300 ifconfig_pool_end = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479324 ifconfig_pool_netmask = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479347 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=479370 ifconfig_pool_persist_refresh_freq = 600
Thu Aug 1 09:33:58 2013 us=479393 ifconfig_ipv6_pool_defined = DISABLED
Thu Aug 1 09:33:58 2013 us=479418 ifconfig_ipv6_pool_base = ::
Thu Aug 1 09:33:58 2013 us=479441 ifconfig_ipv6_pool_netbits = 0
Thu Aug 1 09:33:58 2013 us=479463 n_bcast_buf = 256
Thu Aug 1 09:33:58 2013 us=479486 tcp_queue_limit = 64
Thu Aug 1 09:33:58 2013 us=479508 real_hash_size = 256
Thu Aug 1 09:33:58 2013 us=479531 virtual_hash_size = 256
Thu Aug 1 09:33:58 2013 us=479554 client_connect_script = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=479577 learn_address_script = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=479600 client_disconnect_script = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=479622 client_config_dir = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=479645 ccd_exclusive = DISABLED
Thu Aug 1 09:33:58 2013 us=479667 tmp_dir = '/tmp'
Thu Aug 1 09:33:58 2013 us=479690 push_ifconfig_defined = DISABLED
Thu Aug 1 09:33:58 2013 us=479714 push_ifconfig_local = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479738 push_ifconfig_remote_netmask = 0.0.0.0
Thu Aug 1 09:33:58 2013 us=479761 push_ifconfig_ipv6_defined = DISABLED
Thu Aug 1 09:33:58 2013 us=479785 push_ifconfig_ipv6_local = ::/0
Thu Aug 1 09:33:58 2013 us=479809 push_ifconfig_ipv6_remote = ::
Thu Aug 1 09:33:58 2013 us=479831 enable_c2c = DISABLED
Thu Aug 1 09:33:58 2013 us=479854 duplicate_cn = DISABLED
Thu Aug 1 09:33:58 2013 us=479877 cf_max = 0
Thu Aug 1 09:33:58 2013 us=479899 cf_per = 0
Thu Aug 1 09:33:58 2013 us=479922 max_clients = 1024
Thu Aug 1 09:33:58 2013 us=479944 max_routes_per_client = 256
Thu Aug 1 09:33:58 2013 us=479967 auth_user_pass_verify_script = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=479990 auth_user_pass_verify_script_via_file = DISABLED
Thu Aug 1 09:33:58 2013 us=480013 ssl_flags = 0
Thu Aug 1 09:33:58 2013 us=480036 port_share_host = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=480058 port_share_port = 0
Thu Aug 1 09:33:58 2013 us=480080 client = ENABLED
Thu Aug 1 09:33:58 2013 us=480102 pull = ENABLED
Thu Aug 1 09:33:58 2013 us=480125 auth_user_pass_file = '[UNDEF]'
Thu Aug 1 09:33:58 2013 us=480156 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 13 2013
Thu Aug 1 09:33:58 2013 us=480335 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Aug 1 09:33:58 2013 us=482092 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Thu Aug 1 09:33:58 2013 us=482142 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:33:58 2013 us=482173 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 1 09:33:58 2013 us=482281 Control Channel MTU parms [ L:1573 D:166 EF:66 EB:0 ET:0 EL:0 ]
Thu Aug 1 09:33:58 2013 us=482355 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Aug 1 09:33:58 2013 us=537157 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Thu Aug 1 09:33:58 2013 us=537240 Local Options String: 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Aug 1 09:33:58 2013 us=537266 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Aug 1 09:33:58 2013 us=537331 Local Options hash (VER=V4): '1a647362'
Thu Aug 1 09:33:58 2013 us=537364 Expected Remote Options hash (VER=V4): '47de3ccc'
Thu Aug 1 09:33:58 2013 us=537408 UDPv4 link local: [undef]
Thu Aug 1 09:33:58 2013 us=537441 UDPv4 link remote: [AF_INET]xx.xx.xx.45:1194
Thu Aug 1 09:33:58 2013 us=537536 UDPv4 WRITE [42] to [AF_INET]xx.xx.x.45:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Thu Aug 1 09:34:00 2013 us=712765 UDPv4 WRITE [42] to [AF_INET]xx.xx.xx.45:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2 ] [ ] pid=0 DATA len=0
Thu Aug 1 09:34:05 2013 us=64523 UDPv4 WRITE [42] to [AF_INET]xx.xx.xx.45:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #3 ] [ ] pid=0 DATA len=0
^CThu Aug 1 09:34:09 2013 us=557599 event_wait : Interrupted system call (code=4)
Thu Aug 1 09:34:09 2013 us=557655 SIGTERM received, sending exit notification to peer
^[[AThu Aug 1 09:34:11 2013 us=936350 TCP/UDP: Closing socket
Thu Aug 1 09:34:11 2013 us=936443 SIGTERM[soft,exit-with-notification] received, process exiting
What I am wondering as well is, why so many maunals in the internet are using ip's similar to 10.0.1.0.1 and some using these LAN-Ips. I dont know whats right for me.
I hope you can help me.
Falk
