[Solved] I spent 3 days on this and got nowhere..

lazerzap

2 x OS installations..
countless attempts to make keys...
I dunno what I am doing wrong...
I previously setup openvpn on a centos vps a few years ago... and although I remember it being difficult.. It wasn't impossible..
I don't know what has changed.. Or If there is some bug in the latest version.. But for whatever reason.. I cannot get my server and client to talk..
I made an account here in desperation.. But I will have to look at something else if I can't get any help on this.

I have tried centos 5.9 32 bit and centos 6.4 64 bit.. I get the same result.. nothing.. which more than likely means I have the configuration set wrong..

Perhaps someone could point me at a tutorial that really EXPLAINS all the functions and what they do.. It really rubs me that I couldn't get it working without help.. 🙁

Thanks to anyone that replies..

lazerzap

Ty Debbie..

Server.conf

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
cipher BF-CBC

ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
tls-auth /etc/openvpn/easy-rsa/2.0/keys/ta.key 0

plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

Client.ovpn

client
remote pchost.org 1194 # my website and port 1194 (standard port for OpenVpn)
proto udp
dev tap
nobind
ca ca.crt
cert lazer.crt
key lazer.key
;dh dh1024.pem
;pkcs12 ron.p12
comp-lzo
verb 3
keepalive 10 120
resolv-retry infinite
mute-replay-warnings
mute 10
ns-cert-type server

/var/log/messages

Nov 20 08:33:06 pchost openvpn[21047]: TLS Error: cannot locate HMAC in incoming packet from 122.150.29.92:53712

Hmm now I see that the line in server.conf "tls-auth /etc/openvpn/easy-rsa/2.0/keys/ta.key 0" is redundant.. So I commented it out.. restarted the server and got..

/var/log/messages

Nov 20 08:45:37 pchost openvpn[318]: OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr  5 2012
Nov 20 08:45:37 pchost openvpn[318]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov 20 08:45:37 pchost openvpn[318]: PLUGIN_INIT: POST /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so '[/usr/share/openvpn/plugin/lib/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY 
Nov 20 08:45:37 pchost openvpn[318]: Diffie-Hellman initialized with 1024 bit key
Nov 20 08:45:37 pchost openvpn[318]: WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Nov 20 08:45:37 pchost openvpn[318]: TLS-Auth MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Nov 20 08:45:37 pchost openvpn[318]: Socket Buffers: R=[229376->131072] S=[229376->131072]
Nov 20 08:45:37 pchost openvpn[318]: ROUTE default_gateway=178.18.26.1
Nov 20 08:45:37 pchost openvpn[318]: TUN/TAP device tun0 opened
Nov 20 08:45:37 pchost openvpn[318]: TUN/TAP TX queue length set to 100
Nov 20 08:45:37 pchost openvpn[318]: /sbin/ip link set dev tun0 up mtu 1500
Nov 20 08:45:37 pchost kernel: tun0: Disabled Privacy Extensions
Nov 20 08:45:37 pchost openvpn[318]: /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Nov 20 08:45:37 pchost openvpn[318]: /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Nov 20 08:45:37 pchost openvpn[318]: Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 20 08:45:37 pchost openvpn[324]: UDPv4 link local (bound): [undef]:1194
Nov 20 08:45:37 pchost openvpn[324]: UDPv4 link remote: [undef]
Nov 20 08:45:37 pchost openvpn[324]: MULTI: multi_init called, r=256 v=256
Nov 20 08:45:37 pchost openvpn[324]: IFCONFIG POOL: base=10.8.0.4 size=62
Nov 20 08:45:37 pchost openvpn[324]: Initialization Sequence Completed
Nov 20 08:45:45 pchost openvpn[324]: MULTI: multi_create_instance called
Nov 20 08:45:45 pchost openvpn[324]: 122.150.29.92:58550 Re-using SSL/TLS context
Nov 20 08:45:45 pchost openvpn[324]: 122.150.29.92:58550 LZO compression initialized
Nov 20 08:45:45 pchost openvpn[324]: 122.150.29.92:58550 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Nov 20 08:45:45 pchost openvpn[324]: 122.150.29.92:58550 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 20 08:45:45 pchost openvpn[324]: 122.150.29.92:58550 Local Options hash (VER=V4): '5b1533a2'
Nov 20 08:45:45 pchost openvpn[324]: 122.150.29.92:58550 Expected Remote Options hash (VER=V4): 'd3a7571a'
Nov 20 08:45:45 pchost openvpn[324]: 122.150.29.92:58550 TLS: Initial packet from 122.150.29.92:58550, sid=c4c66661 d7e9796c
Nov 20 08:45:46 pchost openvpn[324]: 122.150.29.92:58550 TLS Error: Auth Username/Password was not provided by peer
Nov 20 08:45:46 pchost openvpn[324]: 122.150.29.92:58550 TLS Error: TLS handshake failed
Nov 20 08:45:46 pchost openvpn[324]: 122.150.29.92:58550 SIGUSR1[soft,tls-error] received, client-instance restarting
Nov 20 08:46:46 pchost openvpn[324]: MULTI: multi_create_instance called
Nov 20 08:46:46 pchost openvpn[324]: 122.150.29.92:58564 Re-using SSL/TLS context
Nov 20 08:46:46 pchost openvpn[324]: 122.150.29.92:58564 LZO compression initialized
Nov 20 08:46:46 pchost openvpn[324]: 122.150.29.92:58564 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Nov 20 08:46:46 pchost openvpn[324]: 122.150.29.92:58564 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 20 08:46:46 pchost openvpn[324]: 122.150.29.92:58564 Local Options hash (VER=V4): '5b1533a2'
Nov 20 08:46:46 pchost openvpn[324]: 122.150.29.92:58564 Expected Remote Options hash (VER=V4): 'd3a7571a'
Nov 20 08:46:46 pchost openvpn[324]: 122.150.29.92:58564 TLS: Initial packet from 122.150.29.92:58564, sid=08506531 691c080e
Nov 20 08:46:47 pchost openvpn[324]: 122.150.29.92:58564 TLS Error: Auth Username/Password was not provided by peer
Nov 20 08:46:47 pchost openvpn[324]: 122.150.29.92:58564 TLS Error: TLS handshake failed
Nov 20 08:46:47 pchost openvpn[324]: 122.150.29.92:58564 SIGUSR1[soft,tls-error] received, client-instance restarting

any ideas??

lazerzap

Hmmm the tun tap setting was just one of the many options I have tried.. Blah @ Myself for posting such an obvious error..

No that didn't fix it..

*sigh.. I walked away from this 3 days ago.. To have to ask for assistance really goes against the grain.. 🙁

Here is my current setup etc etc..

Server.conf

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
cipher BF-CBC
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
tls-auth /etc/openvpn/easy-rsa/2.0/keys/ta.key 0
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

and another client.ovpn

client
dev tun
dev-node TAP-Windows Adapter V9
proto udp
remote 178.18.26.106 1194
;remote-random
resolv-retry infinite
nobind
;user vpnuser
;group vpnuser
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\lazer3.crt"
key "C:\\Program Files\\OpenVPN\\config\\lazer3.key"
ns-cert-type server
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
cipher BF-CBC
comp-lzo
verb 3
;mute 20

/var/log/messages

Nov 20 09:35:40 pchost openvpn[376]: OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Apr  5 2012
Nov 20 09:35:40 pchost openvpn[376]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov 20 09:35:40 pchost openvpn[376]: PLUGIN_INIT: POST /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so '[/usr/share/openvpn/plugin/lib/openvpn-auth-pam.so] [/etc/pam.d/login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY 
Nov 20 09:35:40 pchost openvpn[376]: Diffie-Hellman initialized with 1024 bit key
Nov 20 09:35:40 pchost openvpn[376]: WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Nov 20 09:35:40 pchost openvpn[376]: Control Channel Authentication: using '/etc/openvpn/easy-rsa/2.0/keys/ta.key' as a OpenVPN static key file
Nov 20 09:35:40 pchost openvpn[376]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 20 09:35:40 pchost openvpn[376]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 20 09:35:40 pchost openvpn[376]: TLS-Auth MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Nov 20 09:35:40 pchost openvpn[376]: Socket Buffers: R=[229376->131072] S=[229376->131072]
Nov 20 09:35:40 pchost openvpn[376]: ROUTE default_gateway=178.18.26.1
Nov 20 09:35:40 pchost openvpn[376]: TUN/TAP device tun0 opened
Nov 20 09:35:40 pchost openvpn[376]: TUN/TAP TX queue length set to 100
Nov 20 09:35:40 pchost openvpn[376]: /sbin/ip link set dev tun0 up mtu 1500
Nov 20 09:35:40 pchost kernel: tun0: Disabled Privacy Extensions
Nov 20 09:35:40 pchost openvpn[376]: /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Nov 20 09:35:40 pchost openvpn[376]: /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Nov 20 09:35:40 pchost openvpn[376]: Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 20 09:35:40 pchost openvpn[385]: UDPv4 link local (bound): [undef]:1194
Nov 20 09:35:40 pchost openvpn[385]: UDPv4 link remote: [undef]
Nov 20 09:35:40 pchost openvpn[385]: MULTI: multi_init called, r=256 v=256
Nov 20 09:35:40 pchost openvpn[385]: IFCONFIG POOL: base=10.8.0.4 size=62
Nov 20 09:35:40 pchost openvpn[385]: Initialization Sequence Completed
Nov 20 09:35:48 pchost openvpn[385]: MULTI: multi_create_instance called
Nov 20 09:35:48 pchost openvpn[385]: 122.150.29.92:50083 Re-using SSL/TLS context
Nov 20 09:35:48 pchost openvpn[385]: 122.150.29.92:50083 LZO compression initialized
Nov 20 09:35:48 pchost openvpn[385]: 122.150.29.92:50083 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Nov 20 09:35:48 pchost openvpn[385]: 122.150.29.92:50083 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 20 09:35:48 pchost openvpn[385]: 122.150.29.92:50083 Local Options hash (VER=V4): '7cd8ed90'
Nov 20 09:35:48 pchost openvpn[385]: 122.150.29.92:50083 Expected Remote Options hash (VER=V4): 'ec497616'
Nov 20 09:35:48 pchost openvpn[385]: 122.150.29.92:50083 TLS: Initial packet from 122.150.29.92:50083, sid=dcd17e33 99e8014e
Nov 20 09:35:49 pchost openvpn[385]: 122.150.29.92:50083 TLS Error: Auth Username/Password was not provided by peer
Nov 20 09:35:49 pchost openvpn[385]: 122.150.29.92:50083 TLS Error: TLS handshake failed
Nov 20 09:35:49 pchost openvpn[385]: 122.150.29.92:50083 SIGUSR1[soft,tls-error] received, client-instance restarting

Thanks again Debbie..

lazerzap

k..

I commented out the offending lines.. restarted the server..

But it's still not working..

server.conf

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
cipher BF-CBC

ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
tls-auth /etc/openvpn/easy-rsa/2.0/keys/ta.key 0

plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
#client-cert-not-required
#username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status

client.ovpn

client
dev tun
dev-node TAP-Windows Adapter V9
proto udp
remote 178.18.26.106 1194
;remote-random
resolv-retry infinite
nobind
;user vpnuser
;group vpnuser
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\lazer3.crt"
key "C:\\Program Files\\OpenVPN\\config\\lazer3.key"
ns-cert-type server
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
cipher BF-CBC
comp-lzo
verb 3
;mute 20

/var/log/messages

Nov 20 10:49:43 pchost openvpn[450]: 122.150.29.92:55089 Local Options hash (VER=V4): '7cd8ed90'
Nov 20 10:49:43 pchost openvpn[450]: 122.150.29.92:55089 Expected Remote Options hash (VER=V4): 'ec497616'
Nov 20 10:49:43 pchost openvpn[450]: 122.150.29.92:55089 TLS: Initial packet from 122.150.29.92:55089, sid=c2038936 781933f0
Nov 20 10:49:46 pchost openvpn[450]: 122.150.29.92:55089 VERIFY OK: depth=1, /C=AU/ST=QLD/L=Maryborough/O=Compersol-AU.Com/OU=PCHost.Org-OpenVPN/CN=pchost.org/name=PCHost.Org-OpenVPN/emailAddress=Admin@PCHost.org
Nov 20 10:49:46 pchost openvpn[450]: 122.150.29.92:55089 VERIFY OK: depth=0, /C=AU/ST=QLD/L=Maryborough/O=Compersol-AU.Com/OU=PCHost.Org-OpenVPN/CN=server/name=PCHost.Org-OpenVPN/emailAddress=Admin@PCHost.org
Nov 20 10:49:47 pchost openvpn[450]: 122.150.29.92:55089 TLS Error: Auth Username/Password was not provided by peer
Nov 20 10:49:47 pchost openvpn[450]: 122.150.29.92:55089 TLS Error: TLS handshake failed
Nov 20 10:49:47 pchost openvpn[450]: 122.150.29.92:55089 SIGUSR1[soft,tls-error] received, client-instance restarting

Perhaps an example of absolute minimal configuration ... Just to get it to connect... and i can experiment with the options later..
This is for personal use.. The only real traffic the server gets is from me..

Thanks again Debbie

lazerzap

Your blood is worth bottling...

In other words success!

Final (Working) Config

server.conf

port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
cipher BF-CBC

ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
tls-auth /etc/openvpn/easy-rsa/2.0/keys/ta.key 0

#plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
#client-cert-not-required
#username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

client.ovpn

client
dev tun
;dev-node TAP-Windows Adapter V9
proto udp
remote 178.18.26.106 1194
;remote-random
resolv-retry infinite
nobind
;user vpnuser
;group vpnuser
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\config\\lazer3.crt"
key "C:\\Program Files\\OpenVPN\\config\\lazer3.key"
ns-cert-type server
tls-auth "C:\\Program Files\\OpenVPN\\config\\ta.key" 1
cipher BF-CBC
comp-lzo
verb 3
;mute 20

/var/log/messages

Nov 20 14:05:36 pchost openvpn[552]: MULTI: multi_create_instance called
Nov 20 14:05:36 pchost openvpn[552]: 122.150.29.92:60734 Re-using SSL/TLS context
Nov 20 14:05:36 pchost openvpn[552]: 122.150.29.92:60734 LZO compression initialized
Nov 20 14:05:36 pchost openvpn[552]: 122.150.29.92:60734 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Nov 20 14:05:36 pchost openvpn[552]: 122.150.29.92:60734 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Nov 20 14:05:36 pchost openvpn[552]: 122.150.29.92:60734 Local Options hash (VER=V4): '7cd8ed90'
Nov 20 14:05:36 pchost openvpn[552]: 122.150.29.92:60734 Expected Remote Options hash (VER=V4): 'ec497616'
Nov 20 14:05:36 pchost openvpn[552]: 122.150.29.92:60734 TLS: Initial packet from 122.150.29.92:60734, sid=92f6d619 23089bef
Nov 20 14:05:38 pchost openvpn[552]: 122.150.29.92:60734 VERIFY OK: depth=1, /C=AU/ST=QLD/L=Maryborough/O=Compersol-AU.Com/OU=PCHost.Org-OpenVPN/CN=pchost.org/name=PCHost.Org-OpenVPN/emailAddress=Admin@PCHost.org
Nov 20 14:05:38 pchost openvpn[552]: 122.150.29.92:60734 VERIFY OK: depth=0, /C=AU/ST=QLD/L=Maryborough/O=Compersol-AU.Com/OU=PCHost.Org-OpenVPN/CN=server/name=PCHost.Org-OpenVPN/emailAddress=Admin@PCHost.org
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1574', remote='link-mtu 1542'
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500'
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Nov 20 14:05:39 pchost openvpn[552]: 122.150.29.92:60734 [server] Peer Connection Initiated with 122.150.29.92:60734
Nov 20 14:05:39 pchost openvpn[552]: server/122.150.29.92:60734 MULTI: Learn: 10.8.0.6 -> server/122.150.29.92:60734
Nov 20 14:05:39 pchost openvpn[552]: server/122.150.29.92:60734 MULTI: primary virtual IP for server/122.150.29.92:60734: 10.8.0.6
Nov 20 14:05:42 pchost openvpn[552]: server/122.150.29.92:60734 PUSH: Received control message: 'PUSH_REQUEST'
Nov 20 14:05:42 pchost openvpn[552]: server/122.150.29.92:60734 SENT CONTROL [server]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Nov 20 14:05:42 pchost openvpn[552]: server/122.150.29.92:60734 IPv6 in tun mode is not supported in OpenVPN 2.2

Thankyou Debbie... I would have given up.. I was completely "over it"..

Of course I wonder why no one else said to comment out:

#plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
#client-cert-not-required
#username-as-common-name

??

I noticed a few days ago that

/etc/pam.d/login

didn't even exist on either version of Centos..
I guess when I had previously tried to comment out the

#plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS

line.. Other things must have been screwed up. *sigh

Thanks again Debbie 🙂