OpenVPN TLS handshake failed

strife502

Hi all, I've been trying to set up an OpenVPN server on a VPS I have, and after going through a lot of trouble to simply get it to start, I cannot figure out why I am getting this error. I have opened port 1194 server side (or at least I think I have), and tried disabling the firewall client side, to no avail. The server is running debian etch 4, and therefore the openvpn version is a slightly old one (2.0.9). I am trying to connect with the windows client (2.3.2).

These are the logs from both client and server with verb 6:

Server:

Tue Aug 13 09:59:50 2013 us=300242   config = '/etc/openvpn/server.conf'
Tue Aug 13 09:59:50 2013 us=300257   mode = 1
Tue Aug 13 09:59:50 2013 us=300271   persist_config = DISABLED
Tue Aug 13 09:59:50 2013 us=300283   persist_mode = 1
Tue Aug 13 09:59:50 2013 us=300295   show_ciphers = DISABLED
Tue Aug 13 09:59:50 2013 us=300308   show_digests = DISABLED
Tue Aug 13 09:59:50 2013 us=300320   show_engines = DISABLED
Tue Aug 13 09:59:50 2013 us=300332   genkey = DISABLED
Tue Aug 13 09:59:50 2013 us=300344   key_pass_file = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=300356   show_tls_ciphers = DISABLED
Tue Aug 13 09:59:50 2013 us=300383   proto = 0
Tue Aug 13 09:59:50 2013 us=300395   local = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=300417   remote_list = NULL
Tue Aug 13 09:59:50 2013 us=300430   remote_random = DISABLED
Tue Aug 13 09:59:50 2013 us=300448   local_port = 1194
Tue Aug 13 09:59:50 2013 us=300460   remote_port = 1194
Tue Aug 13 09:59:50 2013 us=300473   remote_float = DISABLED
Tue Aug 13 09:59:50 2013 us=300486   ipchange = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=300498   bind_local = ENABLED
Tue Aug 13 09:59:50 2013 us=300510   dev = 'tun'
Tue Aug 13 09:59:50 2013 us=300522   dev_type = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=300535   dev_node = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=300547   tun_ipv6 = DISABLED
Tue Aug 13 09:59:50 2013 us=300560   ifconfig_local = '10.9.8.1'
Tue Aug 13 09:59:50 2013 us=300579   ifconfig_remote_netmask = '10.9.8.2'
Tue Aug 13 09:59:50 2013 us=300592   ifconfig_noexec = DISABLED
Tue Aug 13 09:59:50 2013 us=300605   ifconfig_nowarn = DISABLED
Tue Aug 13 09:59:50 2013 us=300618   shaper = 0
Tue Aug 13 09:59:50 2013 us=300631   tun_mtu = 1500
Tue Aug 13 09:59:50 2013 us=300643   tun_mtu_defined = ENABLED
Tue Aug 13 09:59:50 2013 us=300656   link_mtu = 1500
Tue Aug 13 09:59:50 2013 us=300668   link_mtu_defined = DISABLED
Tue Aug 13 09:59:50 2013 us=300681   tun_mtu_extra = 0
Tue Aug 13 09:59:50 2013 us=300694   tun_mtu_extra_defined = DISABLED
Tue Aug 13 09:59:50 2013 us=300709   fragment = 0
Tue Aug 13 09:59:50 2013 us=300722   mtu_discover_type = -1
Tue Aug 13 09:59:50 2013 us=300735   mtu_test = 0
Tue Aug 13 09:59:50 2013 us=300747   mlock = DISABLED
Tue Aug 13 09:59:50 2013 us=300759   keepalive_ping = 10
Tue Aug 13 09:59:50 2013 us=300772   keepalive_timeout = 120
Tue Aug 13 09:59:50 2013 us=300785   inactivity_timeout = 0
Tue Aug 13 09:59:50 2013 us=300798   ping_send_timeout = 10
Tue Aug 13 09:59:50 2013 us=300813   ping_rec_timeout = 240
Tue Aug 13 09:59:50 2013 us=300826   ping_rec_timeout_action = 2
Tue Aug 13 09:59:50 2013 us=300838   ping_timer_remote = DISABLED
Tue Aug 13 09:59:50 2013 us=300851   remap_sigusr1 = 0
Tue Aug 13 09:59:50 2013 us=300863   explicit_exit_notification = 0
Tue Aug 13 09:59:50 2013 us=300876   persist_tun = ENABLED
Tue Aug 13 09:59:50 2013 us=300889   persist_local_ip = DISABLED
Tue Aug 13 09:59:50 2013 us=300901   persist_remote_ip = DISABLED
Tue Aug 13 09:59:50 2013 us=300914   persist_key = ENABLED
Tue Aug 13 09:59:50 2013 us=300926   mssfix = 1450
Tue Aug 13 09:59:50 2013 us=300942   passtos = DISABLED
Tue Aug 13 09:59:50 2013 us=300955   resolve_retry_seconds = 1000000000
Tue Aug 13 09:59:50 2013 us=300967   connect_retry_seconds = 5
Tue Aug 13 09:59:50 2013 us=300985   username = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=300997   groupname = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301010   chroot_dir = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301022   cd_dir = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301035   writepid = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301047   up_script = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301060   down_script = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301072   down_pre = DISABLED
Tue Aug 13 09:59:50 2013 us=301085   up_restart = DISABLED
Tue Aug 13 09:59:50 2013 us=301098   up_delay = DISABLED
Tue Aug 13 09:59:50 2013 us=301110   daemon = DISABLED
Tue Aug 13 09:59:50 2013 us=301122   inetd = 0
Tue Aug 13 09:59:50 2013 us=301135   log = DISABLED
Tue Aug 13 09:59:50 2013 us=301147   suppress_timestamps = DISABLED
Tue Aug 13 09:59:50 2013 us=301160   nice = 0
Tue Aug 13 09:59:50 2013 us=301172   verbosity = 6
Tue Aug 13 09:59:50 2013 us=301188   mute = 0
Tue Aug 13 09:59:50 2013 us=301201   gremlin = 0
Tue Aug 13 09:59:50 2013 us=301213   status_file = 'log/openvpn-status.log'
Tue Aug 13 09:59:50 2013 us=301229   status_file_version = 1
Tue Aug 13 09:59:50 2013 us=301246   status_file_update_freq = 60
Tue Aug 13 09:59:50 2013 us=301258   occ = ENABLED
Tue Aug 13 09:59:50 2013 us=301271   rcvbuf = 65536
Tue Aug 13 09:59:50 2013 us=301283   sndbuf = 65536
Tue Aug 13 09:59:50 2013 us=301296   socks_proxy_server = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301309   socks_proxy_port = 0
Tue Aug 13 09:59:50 2013 us=301321   socks_proxy_retry = DISABLED
Tue Aug 13 09:59:50 2013 us=301334   fast_io = DISABLED
Tue Aug 13 09:59:50 2013 us=301349   comp_lzo = ENABLED
Tue Aug 13 09:59:50 2013 us=301362   comp_lzo_adaptive = ENABLED
Tue Aug 13 09:59:50 2013 us=301375   route_script = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301387   route_default_gateway = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301400   route_noexec = DISABLED
Tue Aug 13 09:59:50 2013 us=301412   route_delay = 0
Tue Aug 13 09:59:50 2013 us=301425   route_delay_window = 30
Tue Aug 13 09:59:50 2013 us=301437   route_delay_defined = DISABLED
Tue Aug 13 09:59:50 2013 us=301453   route 10.9.8.0/255.255.255.0/nil/nil
Tue Aug 13 09:59:50 2013 us=301467   management_addr = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301479   management_port = 0
Tue Aug 13 09:59:50 2013 us=301492   management_user_pass = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301508   management_log_history_cache = 250
Tue Aug 13 09:59:50 2013 us=301520   management_echo_buffer_size = 100
Tue Aug 13 09:59:50 2013 us=301533   management_query_passwords = DISABLED
Tue Aug 13 09:59:50 2013 us=301546   management_hold = DISABLED
Tue Aug 13 09:59:50 2013 us=301559   shared_secret_file = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301572   key_direction = 0
Tue Aug 13 09:59:50 2013 us=301585   ciphername_defined = ENABLED
Tue Aug 13 09:59:50 2013 us=301598   ciphername = 'BF-CBC'
Tue Aug 13 09:59:50 2013 us=301611   authname_defined = ENABLED
Tue Aug 13 09:59:50 2013 us=301623   authname = 'SHA1'
Tue Aug 13 09:59:50 2013 us=301636   keysize = 0
Tue Aug 13 09:59:50 2013 us=301662   engine = DISABLED
Tue Aug 13 09:59:50 2013 us=301682   replay = ENABLED
Tue Aug 13 09:59:50 2013 us=301695   mute_replay_warnings = DISABLED
Tue Aug 13 09:59:50 2013 us=301708   replay_window = 64
Tue Aug 13 09:59:50 2013 us=301721   replay_time = 15
Tue Aug 13 09:59:50 2013 us=301733   packet_id_file = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301746   use_iv = ENABLED
Tue Aug 13 09:59:50 2013 us=301759   test_crypto = DISABLED
Tue Aug 13 09:59:50 2013 us=301772   tls_server = ENABLED
Tue Aug 13 09:59:50 2013 us=301784   tls_client = DISABLED
Tue Aug 13 09:59:50 2013 us=301797   key_method = 2
Tue Aug 13 09:59:50 2013 us=301810   ca_file = '/etc/openvpn/ca.crt'
Tue Aug 13 09:59:50 2013 us=301830   dh_file = '/etc/openvpn/dh1024.pem'
Tue Aug 13 09:59:50 2013 us=301843   cert_file = '/etc/openvpn/vpnserver.crt'
Tue Aug 13 09:59:50 2013 us=301856   priv_key_file = '/etc/openvpn/vpnserver.key'
Tue Aug 13 09:59:50 2013 us=301869   pkcs12_file = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301881   cipher_list = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301894   tls_verify = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301907   tls_remote = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301920   crl_file = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=301933   ns_cert_type = 0
Tue Aug 13 09:59:50 2013 us=301945   tls_timeout = 2
Tue Aug 13 09:59:50 2013 us=301958   renegotiate_bytes = 0
Tue Aug 13 09:59:50 2013 us=301975   renegotiate_packets = 0
Tue Aug 13 09:59:50 2013 us=301987   renegotiate_seconds = 3600
Tue Aug 13 09:59:50 2013 us=302008   handshake_window = 60
Tue Aug 13 09:59:50 2013 us=302020   transition_window = 3600
Tue Aug 13 09:59:50 2013 us=302033   single_session = DISABLED
Tue Aug 13 09:59:50 2013 us=302046   tls_exit = DISABLED
Tue Aug 13 09:59:50 2013 us=302059   tls_auth_file = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302073   server_network = 10.9.8.0
Tue Aug 13 09:59:50 2013 us=302094   server_netmask = 255.255.255.0
Tue Aug 13 09:59:50 2013 us=302112   server_bridge_ip = 0.0.0.0
Tue Aug 13 09:59:50 2013 us=302126   server_bridge_netmask = 0.0.0.0
Tue Aug 13 09:59:50 2013 us=302141   server_bridge_pool_start = 0.0.0.0
Tue Aug 13 09:59:50 2013 us=302154   server_bridge_pool_end = 0.0.0.0
Tue Aug 13 09:59:50 2013 us=302167   push_list = 'route 10.9.8.1,ping 10,ping-restart 120'
Tue Aug 13 09:59:50 2013 us=302188   ifconfig_pool_defined = ENABLED
Tue Aug 13 09:59:50 2013 us=302201   ifconfig_pool_start = 10.9.8.4
Tue Aug 13 09:59:50 2013 us=302215   ifconfig_pool_end = 10.9.8.251
Tue Aug 13 09:59:50 2013 us=302233   ifconfig_pool_netmask = 0.0.0.0
Tue Aug 13 09:59:50 2013 us=302246   ifconfig_pool_persist_filename = 'ipp.txt'
Tue Aug 13 09:59:50 2013 us=302259   ifconfig_pool_persist_refresh_freq = 600
Tue Aug 13 09:59:50 2013 us=302272   ifconfig_pool_linear = DISABLED
Tue Aug 13 09:59:50 2013 us=302285   n_bcast_buf = 256
Tue Aug 13 09:59:50 2013 us=302298   tcp_queue_limit = 64
Tue Aug 13 09:59:50 2013 us=302310   real_hash_size = 256
Tue Aug 13 09:59:50 2013 us=302323   virtual_hash_size = 256
Tue Aug 13 09:59:50 2013 us=302336   client_connect_script = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302349   learn_address_script = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302362   client_disconnect_script = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302378   client_config_dir = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302391   ccd_exclusive = DISABLED
Tue Aug 13 09:59:50 2013 us=302407   tmp_dir = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302420   push_ifconfig_defined = DISABLED
Tue Aug 13 09:59:50 2013 us=302437   push_ifconfig_local = 0.0.0.0
Tue Aug 13 09:59:50 2013 us=302451   push_ifconfig_remote_netmask = 0.0.0.0
Tue Aug 13 09:59:50 2013 us=302464   enable_c2c = DISABLED
Tue Aug 13 09:59:50 2013 us=302477   duplicate_cn = DISABLED
Tue Aug 13 09:59:50 2013 us=302489   cf_max = 0
Tue Aug 13 09:59:50 2013 us=302499   cf_per = 0
Tue Aug 13 09:59:50 2013 us=302512   max_clients = 1024
Tue Aug 13 09:59:50 2013 us=302525   max_routes_per_client = 256
Tue Aug 13 09:59:50 2013 us=302538   client_cert_not_required = DISABLED
Tue Aug 13 09:59:50 2013 us=302551   username_as_common_name = DISABLED
Tue Aug 13 09:59:50 2013 us=302563   auth_user_pass_verify_script = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302577   auth_user_pass_verify_script_via_file = DISABLED
Tue Aug 13 09:59:50 2013 us=302597   client = DISABLED
Tue Aug 13 09:59:50 2013 us=302609   pull = DISABLED
Tue Aug 13 09:59:50 2013 us=302622   auth_user_pass_file = '[UNDEF]'
Tue Aug 13 09:59:50 2013 us=302642 OpenVPN 2.0.9 i486-pc-linux-gnu [SSL] [LZO] [EPOLL] built on Sep 20 2007
Tue Aug 13 09:59:50 2013 us=302736 Note: cannot open log/openvpn-status.log for WRITE
Tue Aug 13 09:59:50 2013 us=309661 Diffie-Hellman initialized with 1024 bit key
Tue Aug 13 09:59:50 2013 us=310417 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 13 09:59:50 2013 us=310717 TUN/TAP device tun0 opened
Tue Aug 13 09:59:50 2013 us=310748 TUN/TAP TX queue length set to 100
Tue Aug 13 09:59:50 2013 us=310782 ifconfig tun0 10.9.8.1 pointopoint 10.9.8.2 mtu 1500
Tue Aug 13 09:59:50 2013 us=324809 route add -net 10.9.8.0 netmask 255.255.255.0 gw 10.9.8.2
Tue Aug 13 09:59:50 2013 us=343973 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Aug 13 09:59:50 2013 us=344056 Socket Buffers: R=[115712->131072] S=[115712->131072]
Tue Aug 13 09:59:50 2013 us=344080 UDPv4 link local (bound): [undef]:1194
Tue Aug 13 09:59:50 2013 us=344093 UDPv4 link remote: [undef]
Tue Aug 13 09:59:50 2013 us=344120 MULTI: multi_init called, r=256 v=256
Tue Aug 13 09:59:50 2013 us=344160 IFCONFIG POOL: base=10.9.8.4 size=62
Tue Aug 13 09:59:50 2013 us=344185 IFCONFIG POOL LIST
Tue Aug 13 09:59:50 2013 us=344222 Initialization Sequence Completed
Tue Aug 13 09:59:58 2013 us=467569 MULTI: multi_create_instance called
Tue Aug 13 09:59:58 2013 us=467613 194.29.25.170:18112 Re-using SSL/TLS context
Tue Aug 13 09:59:58 2013 us=467665 194.29.25.170:18112 LZO compression initialized
Tue Aug 13 09:59:58 2013 us=467879 194.29.25.170:18112 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 13 09:59:58 2013 us=467900 194.29.25.170:18112 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Aug 13 09:59:58 2013 us=467949 194.29.25.170:18112 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Aug 13 09:59:58 2013 us=467966 194.29.25.170:18112 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Aug 13 09:59:58 2013 us=468009 194.29.25.170:18112 Local Options hash (VER=V4): '530fdded'
Tue Aug 13 09:59:58 2013 us=468031 194.29.25.170:18112 Expected Remote Options hash (VER=V4): '41690919'
Tue Aug 13 09:59:58 2013 us=468083 194.29.25.170:18112 UDPv4 READ [14] from 194.29.25.170:18112: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 09:59:58 2013 us=468117 194.29.25.170:18112 TLS: Initial packet from 194.29.25.170:18112, sid=449ef3bb 7b070b73
Tue Aug 13 09:59:58 2013 us=468166 194.29.25.170:18112 UDPv4 WRITE [26] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue Aug 13 10:00:00 2013 us=531663 194.29.25.170:18112 UDPv4 READ [14] from 194.29.25.170:18112: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:00 2013 us=531736 194.29.25.170:18112 UDPv4 WRITE [26] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue Aug 13 10:00:02 2013 us=625830 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:04 2013 us=682576 194.29.25.170:18112 UDPv4 READ [14] from 194.29.25.170:18112: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:04 2013 us=682657 194.29.25.170:18112 UDPv4 WRITE [26] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue Aug 13 10:00:06 2013 us=71102 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:12 2013 us=53834 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:12 2013 us=197914 194.29.25.170:18112 UDPv4 READ [14] from 194.29.25.170:18112: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:12 2013 us=197967 194.29.25.170:18112 UDPv4 WRITE [22] to 194.29.25.170:18112: P_ACK_V1 kid=0 [ 0 ]
Tue Aug 13 10:00:19 2013 us=971422 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:24 2013 us=126085 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:26 2013 us=922309 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:26 2013 us=922309 194.29.25.170:18112 UDPv4 READ [14] from 194.29.25.170:18112: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:26 2013 us=922309 194.29.25.170:18112 UDPv4 WRITE [22] to 194.29.25.170:18112: P_ACK_V1 kid=0 [ 0 ]
Tue Aug 13 10:00:34 2013 us=221221 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:38 2013 us=338336 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:40 2013 us=824768 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:42 2013 us=163885 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:44 2013 us=669152 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:47 2013 us=768104 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:54 2013 us=733535 194.29.25.170:18112 UDPv4 WRITE [14] to 194.29.25.170:18112: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 10:00:58 2013 us=518527 194.29.25.170:18112 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 13 10:00:58 2013 us=518551 194.29.25.170:18112 TLS Error: TLS handshake failed
Tue Aug 13 10:00:58 2013 us=518678 194.29.25.170:18112 SIGUSR1[soft,tls-error] received, client-instance restarting

Client:

Tue Aug 13 12:00:09 2013 us=672354 Current Parameter Settings:
Tue Aug 13 12:00:09 2013 us=674854   config = 'client.ovpn'
Tue Aug 13 12:00:09 2013 us=674854   mode = 0
Tue Aug 13 12:00:09 2013 us=674854   show_ciphers = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   show_digests = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   show_engines = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   genkey = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   key_pass_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   show_tls_ciphers = DISABLED
Tue Aug 13 12:00:09 2013 us=674854 Connection profiles [default]:
Tue Aug 13 12:00:09 2013 us=674854   proto = udp
Tue Aug 13 12:00:09 2013 us=674854   local = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   local_port = 0
Tue Aug 13 12:00:09 2013 us=674854   remote = '84.19.189.132'
Tue Aug 13 12:00:09 2013 us=674854   remote_port = 1194
Tue Aug 13 12:00:09 2013 us=674854   remote_float = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   bind_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   bind_local = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   connect_retry_seconds = 5
Tue Aug 13 12:00:09 2013 us=674854   connect_timeout = 10
Tue Aug 13 12:00:09 2013 us=674854   connect_retry_max = 0
Tue Aug 13 12:00:09 2013 us=674854   socks_proxy_server = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   socks_proxy_port = 0
Tue Aug 13 12:00:09 2013 us=674854   socks_proxy_retry = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   tun_mtu = 1500
Tue Aug 13 12:00:09 2013 us=674854   tun_mtu_defined = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   link_mtu = 1500
Tue Aug 13 12:00:09 2013 us=674854   link_mtu_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   tun_mtu_extra = 0
Tue Aug 13 12:00:09 2013 us=674854   tun_mtu_extra_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   mtu_discover_type = -1
Tue Aug 13 12:00:09 2013 us=674854   fragment = 0
Tue Aug 13 12:00:09 2013 us=674854   mssfix = 1450
Tue Aug 13 12:00:09 2013 us=674854   explicit_exit_notification = 0
Tue Aug 13 12:00:09 2013 us=674854 Connection profiles END
Tue Aug 13 12:00:09 2013 us=674854   remote_random = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   ipchange = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   dev = 'tun'
Tue Aug 13 12:00:09 2013 us=674854   dev_type = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   dev_node = 'MyTap'
Tue Aug 13 12:00:09 2013 us=674854   lladdr = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   topology = 1
Tue Aug 13 12:00:09 2013 us=674854   tun_ipv6 = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   ifconfig_local = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   ifconfig_remote_netmask = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   ifconfig_noexec = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   ifconfig_nowarn = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   ifconfig_ipv6_local = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   ifconfig_ipv6_netbits = 0
Tue Aug 13 12:00:09 2013 us=674854   ifconfig_ipv6_remote = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   shaper = 0
Tue Aug 13 12:00:09 2013 us=674854   mtu_test = 0
Tue Aug 13 12:00:09 2013 us=674854   mlock = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   keepalive_ping = 0
Tue Aug 13 12:00:09 2013 us=674854   keepalive_timeout = 0
Tue Aug 13 12:00:09 2013 us=674854   inactivity_timeout = 0
Tue Aug 13 12:00:09 2013 us=674854   ping_send_timeout = 0
Tue Aug 13 12:00:09 2013 us=674854   ping_rec_timeout = 0
Tue Aug 13 12:00:09 2013 us=674854   ping_rec_timeout_action = 0
Tue Aug 13 12:00:09 2013 us=674854   ping_timer_remote = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   remap_sigusr1 = 0
Tue Aug 13 12:00:09 2013 us=674854   persist_tun = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   persist_local_ip = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   persist_remote_ip = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   persist_key = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   passtos = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   resolve_retry_seconds = 1000000000
Tue Aug 13 12:00:09 2013 us=674854   username = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   groupname = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   chroot_dir = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   cd_dir = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   writepid = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   up_script = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   down_script = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   down_pre = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   up_restart = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   up_delay = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   daemon = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   inetd = 0
Tue Aug 13 12:00:09 2013 us=674854   log = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   suppress_timestamps = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   nice = 0
Tue Aug 13 12:00:09 2013 us=674854   verbosity = 6
Tue Aug 13 12:00:09 2013 us=674854   mute = 0
Tue Aug 13 12:00:09 2013 us=674854   status_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   status_file_version = 1
Tue Aug 13 12:00:09 2013 us=674854   status_file_update_freq = 60
Tue Aug 13 12:00:09 2013 us=674854   occ = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   rcvbuf = 0
Tue Aug 13 12:00:09 2013 us=674854   sndbuf = 0
Tue Aug 13 12:00:09 2013 us=674854   sockflags = 0
Tue Aug 13 12:00:09 2013 us=674854   fast_io = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   lzo = 7
Tue Aug 13 12:00:09 2013 us=674854   route_script = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   route_default_gateway = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   route_default_metric = 0
Tue Aug 13 12:00:09 2013 us=674854   route_noexec = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   route_delay = 5
Tue Aug 13 12:00:09 2013 us=674854   route_delay_window = 30
Tue Aug 13 12:00:09 2013 us=674854   route_delay_defined = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   route_nopull = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   route_gateway_via_dhcp = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   max_routes = 100
Tue Aug 13 12:00:09 2013 us=674854   allow_pull_fqdn = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   management_addr = '127.0.0.1'
Tue Aug 13 12:00:09 2013 us=674854   management_port = 25340
Tue Aug 13 12:00:09 2013 us=674854   management_user_pass = 'stdin'
Tue Aug 13 12:00:09 2013 us=674854   management_log_history_cache = 250
Tue Aug 13 12:00:09 2013 us=674854   management_echo_buffer_size = 100
Tue Aug 13 12:00:09 2013 us=674854   management_write_peer_info_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   management_client_user = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   management_client_group = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   management_flags = 6
Tue Aug 13 12:00:09 2013 us=674854   shared_secret_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   key_direction = 0
Tue Aug 13 12:00:09 2013 us=674854   ciphername_defined = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   ciphername = 'BF-CBC'
Tue Aug 13 12:00:09 2013 us=674854   authname_defined = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   authname = 'SHA1'
Tue Aug 13 12:00:09 2013 us=674854   prng_hash = 'SHA1'
Tue Aug 13 12:00:09 2013 us=674854   prng_nonce_secret_len = 16
Tue Aug 13 12:00:09 2013 us=674854   keysize = 0
Tue Aug 13 12:00:09 2013 us=674854   engine = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   replay = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   mute_replay_warnings = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   replay_window = 64
Tue Aug 13 12:00:09 2013 us=674854   replay_time = 15
Tue Aug 13 12:00:09 2013 us=674854   packet_id_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   use_iv = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   test_crypto = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   tls_server = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   tls_client = ENABLED
Tue Aug 13 12:00:09 2013 us=674854   key_method = 2
Tue Aug 13 12:00:09 2013 us=674854   ca_file = 'ca.crt'
Tue Aug 13 12:00:09 2013 us=674854   ca_path = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   dh_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   cert_file = 'client-ryan.crt'
Tue Aug 13 12:00:09 2013 us=674854   priv_key_file = 'client-ryan.key'
Tue Aug 13 12:00:09 2013 us=674854   pkcs12_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   cryptoapi_cert = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   cipher_list = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   tls_verify = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   tls_export_cert = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   verify_x509_type = 0
Tue Aug 13 12:00:09 2013 us=674854   verify_x509_name = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   crl_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   ns_cert_type = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_ku[i] = 0
Tue Aug 13 12:00:09 2013 us=674854   remote_cert_eku = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   ssl_flags = 0
Tue Aug 13 12:00:09 2013 us=674854   tls_timeout = 2
Tue Aug 13 12:00:09 2013 us=674854   renegotiate_bytes = 0
Tue Aug 13 12:00:09 2013 us=674854   renegotiate_packets = 0
Tue Aug 13 12:00:09 2013 us=674854   renegotiate_seconds = 3600
Tue Aug 13 12:00:09 2013 us=674854   handshake_window = 60
Tue Aug 13 12:00:09 2013 us=674854   transition_window = 3600
Tue Aug 13 12:00:09 2013 us=674854   single_session = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   push_peer_info = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   tls_exit = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   tls_auth_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_protected_authentication = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_private_mode = 00000000
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_cert_private = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_pin_cache_period = -1
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_id = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=674854   pkcs11_id_management = DISABLED
Tue Aug 13 12:00:09 2013 us=674854   server_network = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=674854   server_netmask = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   server_network_ipv6 = ::
Tue Aug 13 12:00:09 2013 us=677354   server_netbits_ipv6 = 0
Tue Aug 13 12:00:09 2013 us=677354   server_bridge_ip = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   server_bridge_netmask = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   server_bridge_pool_start = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   server_bridge_pool_end = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_pool_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_pool_start = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_pool_end = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_pool_netmask = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_pool_persist_refresh_freq = 600
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_ipv6_pool_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_ipv6_pool_base = ::
Tue Aug 13 12:00:09 2013 us=677354   ifconfig_ipv6_pool_netbits = 0
Tue Aug 13 12:00:09 2013 us=677354   n_bcast_buf = 256
Tue Aug 13 12:00:09 2013 us=677354   tcp_queue_limit = 64
Tue Aug 13 12:00:09 2013 us=677354   real_hash_size = 256
Tue Aug 13 12:00:09 2013 us=677354   virtual_hash_size = 256
Tue Aug 13 12:00:09 2013 us=677354   client_connect_script = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   learn_address_script = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   client_disconnect_script = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   client_config_dir = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   ccd_exclusive = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   tmp_dir = 'C:\Users\Ryan\AppData\Local\Temp\'
Tue Aug 13 12:00:09 2013 us=677354   push_ifconfig_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   push_ifconfig_local = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   push_ifconfig_remote_netmask = 0.0.0.0
Tue Aug 13 12:00:09 2013 us=677354   push_ifconfig_ipv6_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   push_ifconfig_ipv6_local = ::/0
Tue Aug 13 12:00:09 2013 us=677354   push_ifconfig_ipv6_remote = ::
Tue Aug 13 12:00:09 2013 us=677354   enable_c2c = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   duplicate_cn = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   cf_max = 0
Tue Aug 13 12:00:09 2013 us=677354   cf_per = 0
Tue Aug 13 12:00:09 2013 us=677354   max_clients = 1024
Tue Aug 13 12:00:09 2013 us=677354   max_routes_per_client = 256
Tue Aug 13 12:00:09 2013 us=677354   auth_user_pass_verify_script = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   auth_user_pass_verify_script_via_file = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   client = ENABLED
Tue Aug 13 12:00:09 2013 us=677354   pull = ENABLED
Tue Aug 13 12:00:09 2013 us=677354   auth_user_pass_file = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   show_net_up = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   route_method = 0
Tue Aug 13 12:00:09 2013 us=677354   ip_win32_defined = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   ip_win32_type = 3
Tue Aug 13 12:00:09 2013 us=677354   dhcp_masq_offset = 0
Tue Aug 13 12:00:09 2013 us=677354   dhcp_lease_time = 31536000
Tue Aug 13 12:00:09 2013 us=677354   tap_sleep = 0
Tue Aug 13 12:00:09 2013 us=677354   dhcp_options = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   dhcp_renew = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   dhcp_pre_release = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   dhcp_release = DISABLED
Tue Aug 13 12:00:09 2013 us=677354   domain = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   netbios_scope = '[UNDEF]'
Tue Aug 13 12:00:09 2013 us=677354   netbios_node_type = 0
Tue Aug 13 12:00:09 2013 us=677354   disable_nbt = DISABLED
Tue Aug 13 12:00:09 2013 us=677354 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Jun  3 2013
Enter Management Password:
Tue Aug 13 12:00:09 2013 us=677354 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Aug 13 12:00:09 2013 us=677354 Need hold release from management interface, waiting...
Tue Aug 13 12:00:10 2013 us=146358 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Aug 13 12:00:10 2013 us=246360 MANAGEMENT: CMD 'state on'
Tue Aug 13 12:00:10 2013 us=246360 MANAGEMENT: CMD 'log all on'
Tue Aug 13 12:00:10 2013 us=337561 MANAGEMENT: CMD 'hold off'
Tue Aug 13 12:00:10 2013 us=337561 MANAGEMENT: CMD 'hold release'
Tue Aug 13 12:00:10 2013 us=337561 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 13 12:00:10 2013 us=530663 LZO compression initialized
Tue Aug 13 12:00:10 2013 us=530663 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 13 12:00:10 2013 us=530663 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Aug 13 12:00:10 2013 us=530663 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Aug 13 12:00:10 2013 us=530663 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Aug 13 12:00:10 2013 us=530663 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Aug 13 12:00:10 2013 us=530663 Local Options hash (VER=V4): '41690919'
Tue Aug 13 12:00:10 2013 us=530663 Expected Remote Options hash (VER=V4): '530fdded'
Tue Aug 13 12:00:10 2013 us=530663 UDPv4 link local: [undef]
Tue Aug 13 12:00:10 2013 us=530663 UDPv4 link remote: [AF_INET]84.19.189.132:1194
Tue Aug 13 12:00:10 2013 us=530663 MANAGEMENT: >STATE:1376388010,WAIT,,,
Tue Aug 13 12:00:10 2013 us=533163 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:00:10 2013 us=533163 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Tue Aug 13 12:00:12 2013 us=607994 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:00:16 2013 us=774650 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:00:24 2013 us=290052 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:00:40 2013 us=586778 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:01:10 2013 us=44088 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Aug 13 12:01:10 2013 us=44088 TLS Error: TLS handshake failed
Tue Aug 13 12:01:10 2013 us=44088 TCP/UDP: Closing socket
Tue Aug 13 12:01:10 2013 us=44088 SIGUSR1[soft,tls-error] received, process restarting
Tue Aug 13 12:01:10 2013 us=44088 MANAGEMENT: >STATE:1376388070,RECONNECTING,tls-error,,
Tue Aug 13 12:01:10 2013 us=44088 Restart pause, 2 second(s)
Tue Aug 13 12:01:12 2013 us=46216 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Aug 13 12:01:12 2013 us=46216 Re-using SSL/TLS context
Tue Aug 13 12:01:12 2013 us=46216 LZO compression initialized
Tue Aug 13 12:01:12 2013 us=46216 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Aug 13 12:01:12 2013 us=46216 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Aug 13 12:01:12 2013 us=46216 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Aug 13 12:01:12 2013 us=48716 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Aug 13 12:01:12 2013 us=48716 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Aug 13 12:01:12 2013 us=48716 Local Options hash (VER=V4): '41690919'
Tue Aug 13 12:01:12 2013 us=48716 Expected Remote Options hash (VER=V4): '530fdded'
Tue Aug 13 12:01:12 2013 us=48716 UDPv4 link local: [undef]
Tue Aug 13 12:01:12 2013 us=48716 UDPv4 link remote: [AF_INET]84.19.189.132:1194
Tue Aug 13 12:01:12 2013 us=48716 MANAGEMENT: >STATE:1376388072,WAIT,,,
Tue Aug 13 12:01:12 2013 us=48716 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:01:12 2013 us=51216 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Tue Aug 13 12:01:14 2013 us=109044 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:01:18 2013 us=220302 UDPv4 WRITE [14] to [AF_INET]84.19.189.132:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue Aug 13 12:01:20 2013 us=189228 TCP/UDP: Closing socket
Tue Aug 13 12:01:20 2013 us=189228 SIGTERM[hard,] received, process exiting
Tue Aug 13 12:01:20 2013 us=189228 MANAGEMENT: >STATE:1376388080,EXITING,SIGTERM,,

maikcat

are you using any firewall on your openvpn server?

can you for testing switch to tcp protocol?

please post the output of:

iptables -L -v
iptables -L -t nat -v

on your openvpn server

Michael.

strife502

Thanks for the reply!

# iptables -L -v
Chain INPUT (policy ACCEPT 145K packets, 8820K bytes)
 pkts bytes target     prot opt in     out     source               destination 
   72  3024 ACCEPT     udp  --  any    any     anywhere             anywhere            state NEW udp dpt:openvpn
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:openvpn

Chain FORWARD (policy ACCEPT 3 packets, 142 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain OUTPUT (policy ACCEPT 227K packets, 302M bytes)
 pkts bytes target     prot opt in     out     source               destination

~# iptables -L -t nat -v
Chain PREROUTING (policy ACCEPT 2178 packets, 117K bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain POSTROUTING (policy ACCEPT 2605 packets, 173K bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain OUTPUT (policy ACCEPT 2603 packets, 173K bytes)
 pkts bytes target     prot opt in     out     source               destination

I tried changing it to TCP, and now it says it has connected, but pings to the server (10.9.8.1) time out.

The server repeats a lot of this:

Tue Aug 13 13:10:18 2013 us=524573 Ryan/194.29.25.170:42904 TCPv4_SERVER WRITE [53] to 194.29.25.170:42904: P_DATA_V1 kid=0 DATA len=52
Tue Aug 13 13:10:18 2013 us=524573 Ryan/194.29.25.170:42904 TCPv4_SERVER READ [109] from 194.29.25.170:42904: P_DATA_V1 kid=0 DATA len=108
Tue Aug 13 13:10:18 2013 us=524573 Ryan/194.29.25.170:42904 Need IPv6 code in mroute_extract_addr_from_packet

maikcat

I tried changing it to TCP, and now it says it has connected, but pings to the server (10.9.8.1) time out.

if your client uses win 7 , do you run the GUI with admin rights?
please post the output of

netstat -nr

AFTER vpn connects on your client...

Michael.

strife502

Okay, ran with admin rights and now I can ping the server 🙂

netstat on the server:

# netstat -nr
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
10.9.8.2        0.0.0.0         255.255.255.255 UH        0 0          0 tun0
191.255.255.1   0.0.0.0         255.255.255.255 UH        0 0          0 venet0
10.9.8.0        10.9.8.2        255.255.255.0   UG        0 0          0 tun0
127.0.0.0       0.0.0.0         255.0.0.0       U         0 0          0 lo
0.0.0.0         191.255.255.1   0.0.0.0         UG        0 0          0 venet0

netstat on client:

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     172.16.140.1   172.16.140.149     30
         10.9.8.1  255.255.255.255         10.9.8.5         10.9.8.6     30
         10.9.8.4  255.255.255.252         On-link          10.9.8.6    286
         10.9.8.6  255.255.255.255         On-link          10.9.8.6    286
         10.9.8.7  255.255.255.255         On-link          10.9.8.6    286
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
     172.16.140.0    255.255.255.0         On-link    172.16.140.149    286
   172.16.140.149  255.255.255.255         On-link    172.16.140.149    286
   172.16.140.255  255.255.255.255         On-link    172.16.140.149    286
    192.168.137.0    255.255.255.0         On-link     192.168.137.1    281
    192.168.137.1  255.255.255.255         On-link     192.168.137.1    281
  192.168.137.255  255.255.255.255         On-link     192.168.137.1    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link    172.16.140.149    286
        224.0.0.0        240.0.0.0         On-link          10.9.8.6    286
        224.0.0.0        240.0.0.0         On-link     192.168.137.1    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link    172.16.140.149    286
  255.255.255.255  255.255.255.255         On-link          10.9.8.6    286
  255.255.255.255  255.255.255.255         On-link     192.168.137.1    281

I don't seem to have internet access through the vpn though (IP unchanged, network center says "Unidentified Network", "No internet Access" on the TAP device).
Thanks very much for your help so far!

maikcat

I don't seem to have internet access through the vpn though

thats a new one....

add to your server config

push "redirect-gateway def1"

also you need to enable NAT on your server,use

iptables -t nat -A POSTROUTING -s 10.9.8.0/24 -o venet0 -j MASQUERADE

also did you enable ip forwarding on your server?

Michael.

strife502

~# iptables -t nat -A POSTROUTING -s 10.9.8.0/24 -o venet0 -j MASQUERADE
iptables: No chain/target/match by that name

Apparently this is because OpenVZ VPS don't have masquerade?

I had ip forwarding temporarily set before and it's possible I restarted since then, but I now have net.ipv4.ip_forward = 1 in sysctl to make it permanent.

After that and adding the push in server conf, I now lose internet when connected to the vpn (as opposed to before where I kept access, but with my normal IP). Feel like progress is being made! Do I need to push any DNS in the server conf as well?

maikcat

iptables: No chain/target/match by that name

due to the fact i mainly use hypervisors like KVM,vmware,virtual box and not containers (like VZ)
i have limited knowledge to help you out.... 🙁

can you talk to your VZ admin?

Michael.

strife502

Ok, after some research on OpenVZ, apparently using iptables -t nat -A POSTROUTING -j SNAT --to-source <venet's IP>
should achieve the same effect.

I've now added iptables -t nat -A POSTROUTING -j SNAT --to-source 84.19.189.132

I still didn't seem to have internet access when connected. Then I tried pinging various IPs instead of hostnames and it worked,
ie, ping 173.194.40.81 worked while ping www.google.com didn't.

I assume this must be a DNS issue, but I'm not sure how to sort this out?

Looking at the debian wiki they have

push "dhcp-option DNS 202.107.105.13"
  push "dhcp-option DNS 202.108.107.21"

in the server.conf and

up /etc/openvpn/update-resolv-conf
  down /etc/openvpn/update-resolv-conf

in the client.conf.

I tried adding the former but still have the same problem, and the latter is a debian package (resolvconf) so isn't going to help with windows...

strife502

Sorry for the double post, couldn't edit anymore.

So I've added

push "dhcp-option DNS 10.9.8.1
push "dhcp-option DNS 8.8.8.8

to my server.conf, and things now seems to be working!

Here's a sample tracert:

Tracing route to a659.b.akamai.net [77.67.96.157]
over a maximum of 30 hops:

  1    19 ms    18 ms    18 ms  10.9.8.1
  2    19 ms    19 ms    19 ms  vrsmaster94.keyvirtual.de [84.19.188.197]
  3    19 ms    19 ms    19 ms  te1-1.c6500c1.keyweb.de [95.169.160.37]
  4    22 ms    22 ms    22 ms  217.71.103.49
  5    25 ms    25 ms    25 ms  ae5.irt1.fra44.de.as13237.net [217.71.96.73]
  6    26 ms    25 ms    25 ms  xe-0-1-0.fra21.ip4.tinet.net [77.67.72.149]
  7    26 ms    26 ms    45 ms  xe-1-0-1.fra23.ip4.tinet.net [89.149.186.38]
  8    34 ms    25 ms    25 ms  77.67.96.157

Trace complete.

This means all traffic should be going through my vpn now correct?

maikcat

This means all traffic should be going through my vpn now correct?

yeap... 😃

if you can open webpages then you are done.. 🙂

Michael.

strife502

Yep, browsers working fine 🙂

Thanks so much for all your your help! 😃