Client.conf file in a Linux Dreambox Decoder

marco792005

Dear All
I open this topic for ask help regarding a configuration file for my decoder drimbox (linux open vpn 2.4.1).
My scenario is:

I have a Endian FIrewall with a static ip adddress, the endian is my OPen VPN server.
I need undestand i can conf the client file.
My config file is this:

##############################################
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server. #
# #
# This configuration can be used by multiple #
# clients, however each client should have #
# its own cert and key files. #
# #
# On Windows, you might want to rename this #
# file so it has a .ovpn extension #
##############################################

# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client

# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap

# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
;proto tcp
proto udp

# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote 94.141.17.227 1194
#;remote my-server-2 1194

# Choose a random host from the remote
# list for load-balancing. Otherwise
# try hosts in the order specified.
#;remote-random

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to
# a specific local port number.
nobind

# Downgrade privileges after initialization (non-Windows only)
#;user nobody
#;group nobody

# Try to preserve some state across restarts.
persist-key
persist-tun

# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here. See the man page
# if your proxy server requires
# authentication.
#;http-proxy-retry # retry on connection failures
#;http-proxy [proxy server] [proxy port #]

# Wireless networks often produce a lot
# of duplicate packets. Set this flag
# to silence duplicate packet warnings.
#;mute-replay-warnings

# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
ca /var/etc/openvpn/keys/cacert.pem

auth-user-pass /var/etc/openvpn/login.conf

# Verify server certificate by checking
# that the certicate has the nsCertType
# field set to "server". This is an
# important precaution to protect against
# a potential attack discussed here:
# http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the nsCertType
# field set to "server". The build-key-server
# script in the easy-rsa folder will do this.
#;ns-cert-type server # dalla versione 2.0 in gi??
#remote-cert-tls server # dalla versione 2.1 in s??

# If a tls-auth key is used on the server
# then every client must also have the key.
#tls-auth /var/etc/openvpn/keys/sif.key 1

# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
#;cipher x

# Set log file verbosity.
verb 5

# Silence repeating messages
;mute 20
#
log /var/etc/openvpn/openvpn.log

IN the log i see:
Thu Jan 1 02:22:44 1970 us=662759 Current Parameter Settings:
Thu Jan 1 02:22:44 1970 us=666343 config = '/var/etc/openvpn/client.conf'
Thu Jan 1 02:22:44 1970 us=668869 mode = 0
Thu Jan 1 02:22:44 1970 us=671129 persist_config = DISABLED
Thu Jan 1 02:22:44 1970 us=673574 persist_mode = 1
Thu Jan 1 02:22:44 1970 us=675841 show_ciphers = DISABLED
Thu Jan 1 02:22:44 1970 us=678286 show_digests = DISABLED
Thu Jan 1 02:22:44 1970 us=680680 show_engines = DISABLED
Thu Jan 1 02:22:44 1970 us=683083 genkey = DISABLED
Thu Jan 1 02:22:44 1970 us=685474 key_pass_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=687869 show_tls_ciphers = DISABLED
Thu Jan 1 02:22:44 1970 us=690280 Connection profiles [default]:
Thu Jan 1 02:22:44 1970 us=692722 proto = udp
Thu Jan 1 02:22:44 1970 us=694966 local = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=697447 local_port = 0
Thu Jan 1 02:22:44 1970 us=699821 remote = '94.141.17.227'
Thu Jan 1 02:22:44 1970 us=702222 remote_port = 1194
Thu Jan 1 02:22:44 1970 us=704624 remote_float = DISABLED
Thu Jan 1 02:22:44 1970 us=707001 bind_defined = DISABLED
Thu Jan 1 02:22:44 1970 us=709335 bind_local = DISABLED
Thu Jan 1 02:22:44 1970 us=711751 connect_retry_seconds = 5
Thu Jan 1 02:22:44 1970 us=714145 connect_timeout = 10
Thu Jan 1 02:22:44 1970 us=716542 connect_retry_max = 0
Thu Jan 1 02:22:44 1970 us=718917 socks_proxy_server = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=721346 socks_proxy_port = 0
Thu Jan 1 02:22:44 1970 us=723637 socks_proxy_retry = DISABLED
Thu Jan 1 02:22:44 1970 us=726039 Connection profiles END
Thu Jan 1 02:22:44 1970 us=728448 remote_random = DISABLED
Thu Jan 1 02:22:44 1970 us=730846 ipchange = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=733219 dev = 'tun'
Thu Jan 1 02:22:44 1970 us=735583 dev_type = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=737949 dev_node = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=740329 lladdr = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=742698 topology = 1
Thu Jan 1 02:22:44 1970 us=744955 tun_ipv6 = DISABLED
Thu Jan 1 02:22:44 1970 us=747328 ifconfig_local = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=749738 ifconfig_remote_netmask = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=752154 ifconfig_noexec = DISABLED
Thu Jan 1 02:22:44 1970 us=754593 ifconfig_nowarn = DISABLED
Thu Jan 1 02:22:44 1970 us=757004 shaper = 0
Thu Jan 1 02:22:44 1970 us=759276 tun_mtu = 1500
Thu Jan 1 02:22:44 1970 us=761549 tun_mtu_defined = ENABLED
Thu Jan 1 02:22:44 1970 us=763983 link_mtu = 1500
Thu Jan 1 02:22:44 1970 us=766288 link_mtu_defined = DISABLED
Thu Jan 1 02:22:44 1970 us=768731 tun_mtu_extra = 0
Thu Jan 1 02:22:44 1970 us=771114 tun_mtu_extra_defined = DISABLED
Thu Jan 1 02:22:44 1970 us=773560 fragment = 0
Thu Jan 1 02:22:44 1970 us=775935 mtu_discover_type = -1
Thu Jan 1 02:22:44 1970 us=778332 mlock = DISABLED
Thu Jan 1 02:22:44 1970 us=780699 keepalive_ping = 0
Thu Jan 1 02:22:44 1970 us=783069 keepalive_timeout = 0
Thu Jan 1 02:22:44 1970 us=785465 inactivity_timeout = 0
Thu Jan 1 02:22:44 1970 us=787865 ping_send_timeout = 0
Thu Jan 1 02:22:44 1970 us=790273 ping_rec_timeout = 0
Thu Jan 1 02:22:44 1970 us=792704 ping_rec_timeout_action = 0
Thu Jan 1 02:22:44 1970 us=795086 ping_timer_remote = DISABLED
Thu Jan 1 02:22:44 1970 us=797603 remap_sigusr1 = 0
Thu Jan 1 02:22:44 1970 us=799884 persist_tun = ENABLED
Thu Jan 1 02:22:44 1970 us=802311 persist_local_ip = DISABLED
Thu Jan 1 02:22:44 1970 us=804727 persist_remote_ip = DISABLED
Thu Jan 1 02:22:44 1970 us=807126 persist_key = ENABLED
Thu Jan 1 02:22:44 1970 us=809550 mssfix = 1450
Thu Jan 1 02:22:44 1970 us=811912 passtos = DISABLED
Thu Jan 1 02:22:44 1970 us=814317 resolve_retry_seconds = 1000000000
Thu Jan 1 02:22:44 1970 us=816732 username = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=819032 groupname = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=821351 chroot_dir = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=823769 cd_dir = '/var/etc/openvpn'
Thu Jan 1 02:22:44 1970 us=826201 writepid = '/var/run/openvpn.client.conf.pid'
Thu Jan 1 02:22:44 1970 us=830482 up_script = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=832895 down_script = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=835315 down_pre = DISABLED
Thu Jan 1 02:22:44 1970 us=837707 up_restart = DISABLED
Thu Jan 1 02:22:44 1970 us=840094 up_delay = DISABLED
Thu Jan 1 02:22:44 1970 us=842523 daemon = ENABLED
Thu Jan 1 02:22:44 1970 us=844881 inetd = 0
Thu Jan 1 02:22:44 1970 us=847401 log = ENABLED
Thu Jan 1 02:22:44 1970 us=849661 suppress_timestamps = DISABLED
Thu Jan 1 02:22:44 1970 us=852088 nice = 0
Thu Jan 1 02:22:44 1970 us=854354 verbosity = 5
Thu Jan 1 02:22:44 1970 us=856729 mute = 0
Thu Jan 1 02:22:44 1970 us=859082 gremlin = 0
Thu Jan 1 02:22:44 1970 us=861368 status_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=863785 status_file_version = 1
Thu Jan 1 02:22:44 1970 us=866203 status_file_update_freq = 60
Thu Jan 1 02:22:44 1970 us=868649 rcvbuf = 65536
Thu Jan 1 02:22:44 1970 us=870978 sndbuf = 65536
Thu Jan 1 02:22:44 1970 us=873219 sockflags = 0
Thu Jan 1 02:22:44 1970 us=875498 fast_io = DISABLED
Thu Jan 1 02:22:44 1970 us=877882 lzo = 0
Thu Jan 1 02:22:44 1970 us=880255 route_script = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=882633 route_default_gateway = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=885069 route_default_metric = 0
Thu Jan 1 02:22:44 1970 us=887502 route_noexec = DISABLED
Thu Jan 1 02:22:44 1970 us=889925 route_delay = 0
Thu Jan 1 02:22:44 1970 us=892314 route_delay_window = 30
Thu Jan 1 02:22:44 1970 us=894715 route_delay_defined = DISABLED
Thu Jan 1 02:22:44 1970 us=897213 route_nopull = DISABLED
Thu Jan 1 02:22:44 1970 us=899625 route_gateway_via_dhcp = DISABLED
Thu Jan 1 02:22:44 1970 us=902175 max_routes = 100
Thu Jan 1 02:22:44 1970 us=904564 allow_pull_fqdn = DISABLED
Thu Jan 1 02:22:44 1970 us=906956 management_addr = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=909380 management_port = 0
Thu Jan 1 02:22:44 1970 us=911753 management_user_pass = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=914172 management_log_history_cache = 250
Thu Jan 1 02:22:44 1970 us=916633 management_echo_buffer_size = 100
Thu Jan 1 02:22:44 1970 us=919069 management_write_peer_info_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=921674 management_client_user = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=924102 management_client_group = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=926682 management_flags = 0
Thu Jan 1 02:22:44 1970 us=929049 shared_secret_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=931482 key_direction = 0
Thu Jan 1 02:22:44 1970 us=933860 ciphername_defined = ENABLED
Thu Jan 1 02:22:44 1970 us=936303 ciphername = 'BF-CBC'
Thu Jan 1 02:22:44 1970 us=938598 authname_defined = ENABLED
Thu Jan 1 02:22:44 1970 us=941014 authname = 'SHA1'
Thu Jan 1 02:22:44 1970 us=943409 prng_hash = 'SHA1'
Thu Jan 1 02:22:44 1970 us=945884 prng_nonce_secret_len = 16
Thu Jan 1 02:22:44 1970 us=948324 keysize = 0
Thu Jan 1 02:22:44 1970 us=950671 engine = DISABLED
Thu Jan 1 02:22:44 1970 us=953052 replay = ENABLED
Thu Jan 1 02:22:44 1970 us=955380 mute_replay_warnings = DISABLED
Thu Jan 1 02:22:44 1970 us=957829 replay_window = 64
Thu Jan 1 02:22:44 1970 us=960237 replay_time = 15
Thu Jan 1 02:22:44 1970 us=962593 packet_id_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=964982 use_iv = ENABLED
Thu Jan 1 02:22:44 1970 us=967381 test_crypto = DISABLED
Thu Jan 1 02:22:44 1970 us=969769 tls_server = DISABLED
Thu Jan 1 02:22:44 1970 us=972151 tls_client = ENABLED
Thu Jan 1 02:22:44 1970 us=974551 key_method = 2
Thu Jan 1 02:22:44 1970 us=976923 ca_file = '/var/etc/openvpn/keys/cacert.pem'
Thu Jan 1 02:22:44 1970 us=979488 ca_path = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=981853 dh_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=984319 cert_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=986719 priv_key_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=989113 pkcs12_file = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=991525 cipher_list = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=994648 tls_verify = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=997062 tls_remote = '[UNDEF]'
Thu Jan 1 02:22:44 1970 us=999518 crl_file = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=1926 ns_cert_type = 0
Thu Jan 1 02:22:45 1970 us=4202 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=6540 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=8862 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=11182 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=13542 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=15859 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=18311 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=20733 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=23137 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=25565 remote_cert_ku = 0
Thu Jan 1 02:22:45 1970 us=27945 remote_cert_ku[i] = 0
Thu Jan 1 02:22:45 1970 us=30352 remote_cert_ku[i] = 0
Thu Jan 1 02:22:45 1970 us=32745 remote_cert_ku[i] = 0
Thu Jan 1 02:22:45 1970 us=35141 remote_cert_ku[i] = 0
Thu Jan 1 02:22:45 1970 us=37558 remote_cert_ku[i] = 0
Thu Jan 1 02:22:45 1970 us=39937 remote_cert_ku[i] = 0
Thu Jan 1 02:22:45 1970 us=42338 remote_cert_eku = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=44754 tls_timeout = 2
Thu Jan 1 02:22:45 1970 us=47093 renegotiate_bytes = 0
Thu Jan 1 02:22:45 1970 us=49431 renegotiate_packets = 0
Thu Jan 1 02:22:45 1970 us=51747 renegotiate_seconds = 3600
Thu Jan 1 02:22:45 1970 us=54178 handshake_window = 60
Thu Jan 1 02:22:45 1970 us=56586 transition_window = 3600
Thu Jan 1 02:22:45 1970 us=58949 single_session = DISABLED
Thu Jan 1 02:22:45 1970 us=61357 push_peer_info = DISABLED
Thu Jan 1 02:22:45 1970 us=63758 tls_exit = DISABLED
Thu Jan 1 02:22:45 1970 us=66161 tls_auth_file = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=68800 server_network = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=71159 server_netmask = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=73629 server_bridge_ip = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=76091 server_bridge_netmask = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=78585 server_bridge_pool_start = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=81033 server_bridge_pool_end = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=83494 ifconfig_pool_defined = DISABLED
Thu Jan 1 02:22:45 1970 us=85943 ifconfig_pool_start = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=88427 ifconfig_pool_end = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=90893 ifconfig_pool_netmask = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=93344 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=95967 ifconfig_pool_persist_refresh_freq = 600
Thu Jan 1 02:22:45 1970 us=98423 n_bcast_buf = 256
Thu Jan 1 02:22:45 1970 us=100709 tcp_queue_limit = 64
Thu Jan 1 02:22:45 1970 us=103021 real_hash_size = 256
Thu Jan 1 02:22:45 1970 us=105352 virtual_hash_size = 256
Thu Jan 1 02:22:45 1970 us=107769 client_connect_script = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=110230 learn_address_script = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=112668 client_disconnect_script = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=115110 client_config_dir = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=117550 ccd_exclusive = DISABLED
Thu Jan 1 02:22:45 1970 us=119846 tmp_dir = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=122162 push_ifconfig_defined = DISABLED
Thu Jan 1 02:22:45 1970 us=124692 push_ifconfig_local = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=127171 push_ifconfig_remote_netmask = 0.0.0.0
Thu Jan 1 02:22:45 1970 us=129714 enable_c2c = DISABLED
Thu Jan 1 02:22:45 1970 us=132084 duplicate_cn = DISABLED
Thu Jan 1 02:22:45 1970 us=134528 cf_max = 0
Thu Jan 1 02:22:45 1970 us=136785 cf_per = 0
Thu Jan 1 02:22:45 1970 us=139055 max_clients = 1024
Thu Jan 1 02:22:45 1970 us=141469 max_routes_per_client = 256
Thu Jan 1 02:22:45 1970 us=143876 auth_user_pass_verify_script = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=146514 auth_user_pass_verify_script_via_file = DISABLED
Thu Jan 1 02:22:45 1970 us=149047 ssl_flags = 0
Thu Jan 1 02:22:45 1970 us=151407 port_share_host = '[UNDEF]'
Thu Jan 1 02:22:45 1970 us=154591 port_share_port = 0
Thu Jan 1 02:22:45 1970 us=156937 client = ENABLED
Thu Jan 1 02:22:45 1970 us=159313 pull = ENABLED
Thu Jan 1 02:22:45 1970 us=161666 auth_user_pass_file = '/var/etc/openvpn/login.conf'
Thu Jan 1 02:22:45 1970 us=164304 OpenVPN 2.1.4 powerpc-linux-gnu [SSL] [LZO1] [EPOLL] built on Nov 11 2010
Thu Jan 1 02:22:45 1970 us=168299 WARNING: file '/var/etc/openvpn/login.conf' is group or others accessible
Thu Jan 1 02:22:45 1970 us=171774 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 02:22:45 1970 us=174781 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 1 02:22:45 1970 us=193931 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 1 02:22:45 1970 us=197290 Socket Buffers: R=[108544->131072] S=[108544->131072]
Thu Jan 1 02:22:45 1970 us=200258 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Thu Jan 1 02:22:45 1970 us=208358 UDPv4 link local: [undef]
Thu Jan 1 02:22:45 1970 us=211294 UDPv4 link remote: 94.141.17.227:1194
WRThu Jan 1 02:22:45 1970 us=293578 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
WRThu Jan 1 02:22:47 1970 us=585244 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
WRThu Jan 1 02:22:52 1970 us=52190 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
WRThu Jan 1 02:22:59 1970 us=843101 TLS: Initial packet from 94.141.17.227:1194, sid=f9572fdd dd65e0d0
WThu Jan 1 02:22:59 1970 us=848268 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
WWRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRThu Jan 1 02:23:00 1970 us=235534 VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=IT/O=efw/CN=efw_CA
Thu Jan 1 02:23:00 1970 us=239819 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Thu Jan 1 02:23:00 1970 us=242987 TLS Error: TLS object -> incoming plaintext read error
Thu Jan 1 02:23:00 1970 us=245511 TLS Error: TLS handshake failed
Thu Jan 1 02:23:00 1970 us=250592 TCP/UDP: Closing socket
Thu Jan 1 02:23:00 1970 us=253153 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 02:23:00 1970 us=255793 Restart pause, 2 second(s)
Thu Jan 1 02:23:02 1970 us=259714 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 02:23:02 1970 us=262735 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 1 02:23:02 1970 us=266259 Re-using SSL/TLS context
Thu Jan 1 02:23:02 1970 us=269410 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 1 02:23:02 1970 us=272295 Socket Buffers: R=[108544->131072] S=[108544->131072]
Thu Jan 1 02:23:02 1970 us=275048 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Thu Jan 1 02:23:02 1970 us=277763 UDPv4 link local: [undef]
Thu Jan 1 02:23:02 1970 us=280204 UDPv4 link remote: 94.141.17.227:1194
WRThu Jan 1 02:23:02 1970 us=342902 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:02 1970 us=347304 TLS: Initial packet from 94.141.17.227:1194, sid=c8e39fb1 9b916d5b
WThu Jan 1 02:23:02 1970 us=352530 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
WWRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRThu Jan 1 02:23:02 1970 us=750077 VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=IT/O=efw/CN=efw_CA
Thu Jan 1 02:23:02 1970 us=753847 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Thu Jan 1 02:23:02 1970 us=756935 TLS Error: TLS object -> incoming plaintext read error
Thu Jan 1 02:23:02 1970 us=759580 TLS Error: TLS handshake failed
Thu Jan 1 02:23:02 1970 us=765054 TCP/UDP: Closing socket
Thu Jan 1 02:23:02 1970 us=767644 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 02:23:02 1970 us=770294 Restart pause, 2 second(s)
Thu Jan 1 02:23:04 1970 us=774329 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 02:23:04 1970 us=777367 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 1 02:23:04 1970 us=780884 Re-using SSL/TLS context
Thu Jan 1 02:23:04 1970 us=784392 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 1 02:23:04 1970 us=787262 Socket Buffers: R=[108544->131072] S=[108544->131072]
Thu Jan 1 02:23:04 1970 us=790055 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Thu Jan 1 02:23:04 1970 us=792845 UDPv4 link local: [undef]
Thu Jan 1 02:23:04 1970 us=795333 UDPv4 link remote: 94.141.17.227:1194
WRThu Jan 1 02:23:04 1970 us=862011 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:23:05 1970 us=350057 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:05 1970 us=354259 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:06 1970 us=461731 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
WRThu Jan 1 02:23:06 1970 us=467304 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:06 1970 us=529504 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:23:07 1970 us=561432 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:07 1970 us=565762 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:08 1970 us=661215 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:08 1970 us=665047 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:09 1970 us=409140 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:10 1970 us=320901 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
WRThu Jan 1 02:23:10 1970 us=420827 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:23:11 1970 us=608661 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:13 1970 us=400335 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:14 1970 us=388208 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:15 1970 us=360083 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:16 1970 us=499836 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:16 1970 us=503907 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:17 1970 us=407637 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:18 1970 us=507432 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
WRThu Jan 1 02:23:18 1970 us=567503 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:23:19 1970 us=427245 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:29 1970 us=357660 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:30 1970 us=357395 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:31 1970 us=377099 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:32 1970 us=384955 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:32 1970 us=388868 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:33 1970 us=384754 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:23:34 1970 us=384583 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
WRThu Jan 1 02:23:34 1970 us=444496 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:23:35 1970 us=424390 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
Thu Jan 1 02:24:04 1970 us=282360 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Thu Jan 1 02:24:04 1970 us=285900 TLS Error: TLS handshake failed
Thu Jan 1 02:24:04 1970 us=289572 TCP/UDP: Closing socket
Thu Jan 1 02:24:04 1970 us=292117 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 02:24:04 1970 us=294821 Restart pause, 2 second(s)
Thu Jan 1 02:24:06 1970 us=298964 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 02:24:06 1970 us=301988 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 1 02:24:06 1970 us=305525 Re-using SSL/TLS context
Thu Jan 1 02:24:06 1970 us=308675 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 1 02:24:06 1970 us=311594 Socket Buffers: R=[108544->131072] S=[108544->131072]
Thu Jan 1 02:24:06 1970 us=314351 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Thu Jan 1 02:24:06 1970 us=317064 UDPv4 link local: [undef]
Thu Jan 1 02:24:06 1970 us=319510 UDPv4 link remote: 94.141.17.227:1194
WRThu Jan 1 02:24:06 1970 us=419112 TLS: Initial packet from 94.141.17.227:1194, sid=8639cd96 241e6304
WThu Jan 1 02:24:06 1970 us=424233 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
WWRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRThu Jan 1 02:24:06 1970 us=846718 VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=IT/O=efw/CN=efw_CA
Thu Jan 1 02:24:06 1970 us=850888 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Thu Jan 1 02:24:06 1970 us=853988 TLS Error: TLS object -> incoming plaintext read error
Thu Jan 1 02:24:06 1970 us=856594 TLS Error: TLS handshake failed
Thu Jan 1 02:24:06 1970 us=860293 TCP/UDP: Closing socket
Thu Jan 1 02:24:06 1970 us=862890 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 02:24:06 1970 us=865531 Restart pause, 2 second(s)
Thu Jan 1 02:24:08 1970 us=869581 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 02:24:08 1970 us=872618 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 1 02:24:08 1970 us=876154 Re-using SSL/TLS context
Thu Jan 1 02:24:08 1970 us=879393 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 1 02:24:08 1970 us=882272 Socket Buffers: R=[108544->131072] S=[108544->131072]
Thu Jan 1 02:24:08 1970 us=885080 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Thu Jan 1 02:24:08 1970 us=887795 UDPv4 link local: [undef]
Thu Jan 1 02:24:08 1970 us=890226 UDPv4 link remote: 94.141.17.227:1194
WRThu Jan 1 02:24:08 1970 us=950560 TLS: Initial packet from 94.141.17.227:1194, sid=acde3923 3503c4f0
WThu Jan 1 02:24:08 1970 us=955739 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
WWRRWRWRWRWRWRWRWRWRWRWRWRWRThu Jan 1 02:24:09 1970 us=310310 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RWRWRWRWRWRThu Jan 1 02:24:09 1970 us=410062 VERIFY ERROR: depth=1, error=certificate is not yet valid: /C=IT/O=efw/CN=efw_CA
Thu Jan 1 02:24:09 1970 us=413795 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Thu Jan 1 02:24:09 1970 us=416808 TLS Error: TLS object -> incoming plaintext read error
Thu Jan 1 02:24:09 1970 us=419450 TLS Error: TLS handshake failed
Thu Jan 1 02:24:09 1970 us=423109 TCP/UDP: Closing socket
Thu Jan 1 02:24:09 1970 us=425681 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 02:24:09 1970 us=428293 Restart pause, 2 second(s)
Thu Jan 1 02:24:11 1970 us=432207 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 02:24:11 1970 us=435223 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Jan 1 02:24:11 1970 us=438732 Re-using SSL/TLS context
Thu Jan 1 02:24:11 1970 us=442239 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 1 02:24:11 1970 us=445104 Socket Buffers: R=[108544->131072] S=[108544->131072]
Thu Jan 1 02:24:11 1970 us=447838 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Thu Jan 1 02:24:11 1970 us=450545 UDPv4 link local: [undef]
Thu Jan 1 02:24:11 1970 us=452928 UDPv4 link remote: 94.141.17.227:1194
WRThu Jan 1 02:24:11 1970 us=510256 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:11 1970 us=514660 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:11 1970 us=518929 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:24:12 1970 us=557792 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:12 1970 us=562172 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:13 1970 us=517641 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
WRThu Jan 1 02:24:13 1970 us=522981 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:13 1970 us=617510 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:24:14 1970 us=449527 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:14 1970 us=453755 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:15 1970 us=377181 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:15 1970 us=389167 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:16 1970 us=357017 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:17 1970 us=496849 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
WRThu Jan 1 02:24:17 1970 us=596833 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_ACK_V1)
RThu Jan 1 02:24:18 1970 us=296858 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:20 1970 us=468265 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:21 1970 us=296124 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:22 1970 us=307931 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:23 1970 us=327782 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)
RThu Jan 1 02:24:23 1970 us=331821 TLS Error: Unroutable control packet received from 94.141.17.227:1194 (si=3 op=P_CONTROL_V1)

In the endian i see a vpn UDENTIF active. I think the problem is the configuration access (user and pwd).
I read in the forum to creat a file login.conf with inside user and pwd, an in client conf, call that file.

But don't work.
Anything can help me?

Grazie and sorry for my english

marco792005

Dear
I do same foot go.... but the problem persist.
The first problem was the hour of client, now that problem is solved but when i try to do a connection i see that log.

Sun Jan 19 15:23:56 2014 us=215001 Current Parameter Settings:
Sun Jan 19 15:23:56 2014 us=218589 config = '/var/etc/openvpn/client.conf'
Sun Jan 19 15:23:56 2014 us=221018 mode = 0
Sun Jan 19 15:23:56 2014 us=223372 persist_config = DISABLED
Sun Jan 19 15:23:56 2014 us=225758 persist_mode = 1
Sun Jan 19 15:23:56 2014 us=228095 show_ciphers = DISABLED
Sun Jan 19 15:23:56 2014 us=230496 show_digests = DISABLED
Sun Jan 19 15:23:56 2014 us=232883 show_engines = DISABLED
Sun Jan 19 15:23:56 2014 us=235342 genkey = DISABLED
Sun Jan 19 15:23:56 2014 us=237705 key_pass_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=240105 show_tls_ciphers = DISABLED
Sun Jan 19 15:23:56 2014 us=242548 Connection profiles [default]:
Sun Jan 19 15:23:56 2014 us=244981 proto = udp
Sun Jan 19 15:23:56 2014 us=247331 local = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=249612 local_port = 0
Sun Jan 19 15:23:56 2014 us=251893 remote = '94.141.17.227'
Sun Jan 19 15:23:56 2014 us=254337 remote_port = 1194
Sun Jan 19 15:23:56 2014 us=256727 remote_float = DISABLED
Sun Jan 19 15:23:56 2014 us=259134 bind_defined = DISABLED
Sun Jan 19 15:23:56 2014 us=261546 bind_local = DISABLED
Sun Jan 19 15:23:56 2014 us=263927 connect_retry_seconds = 5
Sun Jan 19 15:23:56 2014 us=266332 connect_timeout = 10
Sun Jan 19 15:23:56 2014 us=268700 connect_retry_max = 0
Sun Jan 19 15:23:56 2014 us=271083 socks_proxy_server = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=273561 socks_proxy_port = 0
Sun Jan 19 15:23:56 2014 us=275928 socks_proxy_retry = DISABLED
Sun Jan 19 15:23:56 2014 us=278334 Connection profiles END
Sun Jan 19 15:23:56 2014 us=280708 remote_random = DISABLED
Sun Jan 19 15:23:56 2014 us=283094 ipchange = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=285568 dev = 'tun'
Sun Jan 19 15:23:56 2014 us=287807 dev_type = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=290180 dev_node = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=292547 lladdr = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=294897 topology = 1
Sun Jan 19 15:23:56 2014 us=297249 tun_ipv6 = DISABLED
Sun Jan 19 15:23:56 2014 us=299580 ifconfig_local = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=301943 ifconfig_remote_netmask = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=304446 ifconfig_noexec = DISABLED
Sun Jan 19 15:23:56 2014 us=306849 ifconfig_nowarn = DISABLED
Sun Jan 19 15:23:56 2014 us=309265 shaper = 0
Sun Jan 19 15:23:56 2014 us=311585 tun_mtu = 1500
Sun Jan 19 15:23:56 2014 us=313910 tun_mtu_defined = ENABLED
Sun Jan 19 15:23:56 2014 us=316305 link_mtu = 1500
Sun Jan 19 15:23:56 2014 us=318632 link_mtu_defined = DISABLED
Sun Jan 19 15:23:56 2014 us=321008 tun_mtu_extra = 0
Sun Jan 19 15:23:56 2014 us=323380 tun_mtu_extra_defined = DISABLED
Sun Jan 19 15:23:56 2014 us=325789 fragment = 0
Sun Jan 19 15:23:56 2014 us=328047 mtu_discover_type = -1
Sun Jan 19 15:23:56 2014 us=330448 mlock = DISABLED
Sun Jan 19 15:23:56 2014 us=332723 keepalive_ping = 0
Sun Jan 19 15:23:56 2014 us=335167 keepalive_timeout = 0
Sun Jan 19 15:23:56 2014 us=337560 inactivity_timeout = 0
Sun Jan 19 15:23:56 2014 us=339935 ping_send_timeout = 0
Sun Jan 19 15:23:56 2014 us=342326 ping_rec_timeout = 0
Sun Jan 19 15:23:56 2014 us=344617 ping_rec_timeout_action = 0
Sun Jan 19 15:23:56 2014 us=347025 ping_timer_remote = DISABLED
Sun Jan 19 15:23:56 2014 us=349464 remap_sigusr1 = 0
Sun Jan 19 15:23:56 2014 us=351834 persist_tun = ENABLED
Sun Jan 19 15:23:56 2014 us=354231 persist_local_ip = DISABLED
Sun Jan 19 15:23:56 2014 us=356609 persist_remote_ip = DISABLED
Sun Jan 19 15:23:56 2014 us=359023 persist_key = ENABLED
Sun Jan 19 15:23:56 2014 us=361342 mssfix = 1450
Sun Jan 19 15:23:56 2014 us=363601 passtos = DISABLED
Sun Jan 19 15:23:56 2014 us=365895 resolve_retry_seconds = 1000000000
Sun Jan 19 15:23:56 2014 us=368340 username = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=370724 groupname = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=373094 chroot_dir = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=375529 cd_dir = '/var/etc/openvpn'
Sun Jan 19 15:23:56 2014 us=377918 writepid = '/var/run/openvpn.client.conf.pid'
Sun Jan 19 15:23:56 2014 us=382248 up_script = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=384709 down_script = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=387111 down_pre = DISABLED
Sun Jan 19 15:23:56 2014 us=389438 up_restart = DISABLED
Sun Jan 19 15:23:56 2014 us=391719 up_delay = DISABLED
Sun Jan 19 15:23:56 2014 us=394072 daemon = ENABLED
Sun Jan 19 15:23:56 2014 us=396382 inetd = 0
Sun Jan 19 15:23:56 2014 us=398843 log = ENABLED
Sun Jan 19 15:23:56 2014 us=401231 suppress_timestamps = DISABLED
Sun Jan 19 15:23:56 2014 us=403630 nice = 0
Sun Jan 19 15:23:56 2014 us=405949 verbosity = 5
Sun Jan 19 15:23:56 2014 us=408230 mute = 0
Sun Jan 19 15:23:56 2014 us=410489 gremlin = 0
Sun Jan 19 15:23:56 2014 us=412841 status_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=415250 status_file_version = 1
Sun Jan 19 15:23:56 2014 us=417616 status_file_update_freq = 60
Sun Jan 19 15:23:56 2014 us=420018 rcvbuf = 65536
Sun Jan 19 15:23:56 2014 us=422305 sndbuf = 65536
Sun Jan 19 15:23:56 2014 us=424658 sockflags = 0
Sun Jan 19 15:23:56 2014 us=426983 fast_io = DISABLED
Sun Jan 19 15:23:56 2014 us=429412 lzo = 0
Sun Jan 19 15:23:56 2014 us=431665 route_script = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=434129 route_default_gateway = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=436598 route_default_metric = 0
Sun Jan 19 15:23:56 2014 us=438984 route_noexec = DISABLED
Sun Jan 19 15:23:56 2014 us=441390 route_delay = 0
Sun Jan 19 15:23:56 2014 us=443752 route_delay_window = 30
Sun Jan 19 15:23:56 2014 us=446118 route_delay_defined = DISABLED
Sun Jan 19 15:23:56 2014 us=448553 route_nopull = DISABLED
Sun Jan 19 15:23:56 2014 us=450966 route_gateway_via_dhcp = DISABLED
Sun Jan 19 15:23:56 2014 us=453426 max_routes = 100
Sun Jan 19 15:23:56 2014 us=455787 allow_pull_fqdn = DISABLED
Sun Jan 19 15:23:56 2014 us=458199 management_addr = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=460592 management_port = 0
Sun Jan 19 15:23:56 2014 us=462866 management_user_pass = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=465321 management_log_history_cache = 250
Sun Jan 19 15:23:56 2014 us=467769 management_echo_buffer_size = 100
Sun Jan 19 15:23:56 2014 us=470212 management_write_peer_info_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=472672 management_client_user = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=475240 management_client_group = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=477697 management_flags = 0
Sun Jan 19 15:23:56 2014 us=480079 shared_secret_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=482538 key_direction = 0
Sun Jan 19 15:23:56 2014 us=484906 ciphername_defined = ENABLED
Sun Jan 19 15:23:56 2014 us=487356 ciphername = 'BF-CBC'
Sun Jan 19 15:23:56 2014 us=489775 authname_defined = ENABLED
Sun Jan 19 15:23:56 2014 us=492210 authname = 'SHA1'
Sun Jan 19 15:23:56 2014 us=494566 prng_hash = 'SHA1'
Sun Jan 19 15:23:56 2014 us=496939 prng_nonce_secret_len = 16
Sun Jan 19 15:23:56 2014 us=499340 keysize = 0
Sun Jan 19 15:23:56 2014 us=501684 engine = DISABLED
Sun Jan 19 15:23:56 2014 us=504049 replay = ENABLED
Sun Jan 19 15:23:56 2014 us=506448 mute_replay_warnings = DISABLED
Sun Jan 19 15:23:56 2014 us=508858 replay_window = 64
Sun Jan 19 15:23:56 2014 us=511251 replay_time = 15
Sun Jan 19 15:23:56 2014 us=513619 packet_id_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=516036 use_iv = ENABLED
Sun Jan 19 15:23:56 2014 us=518371 test_crypto = DISABLED
Sun Jan 19 15:23:56 2014 us=520676 tls_server = DISABLED
Sun Jan 19 15:23:56 2014 us=522967 tls_client = ENABLED
Sun Jan 19 15:23:56 2014 us=525978 key_method = 2
Sun Jan 19 15:23:56 2014 us=528279 ca_file = '/var/etc/openvpn/keys/efw-zpar.pem'
Sun Jan 19 15:23:56 2014 us=530763 ca_path = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=533154 dh_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=535696 cert_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=538097 priv_key_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=540549 pkcs12_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=542972 cipher_list = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=546011 tls_verify = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=548437 tls_remote = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=550830 crl_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=553227 ns_cert_type = 0
Sun Jan 19 15:23:56 2014 us=555572 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=557959 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=560365 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=562757 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=565137 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=567526 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=569893 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=572306 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=574707 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=577084 remote_cert_ku = 0
Sun Jan 19 15:23:56 2014 us=579499 remote_cert_ku[i] = 0
Sun Jan 19 15:23:56 2014 us=581794 remote_cert_ku[i] = 0
Sun Jan 19 15:23:56 2014 us=584180 remote_cert_ku[i] = 0
Sun Jan 19 15:23:56 2014 us=586484 remote_cert_ku[i] = 0
Sun Jan 19 15:23:56 2014 us=588889 remote_cert_ku[i] = 0
Sun Jan 19 15:23:56 2014 us=591316 remote_cert_ku[i] = 0
Sun Jan 19 15:23:56 2014 us=593707 remote_cert_eku = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=596111 tls_timeout = 2
Sun Jan 19 15:23:56 2014 us=598501 renegotiate_bytes = 0
Sun Jan 19 15:23:56 2014 us=600874 renegotiate_packets = 0
Sun Jan 19 15:23:56 2014 us=603277 renegotiate_seconds = 3600
Sun Jan 19 15:23:56 2014 us=605686 handshake_window = 60
Sun Jan 19 15:23:56 2014 us=607998 transition_window = 3600
Sun Jan 19 15:23:56 2014 us=610445 single_session = DISABLED
Sun Jan 19 15:23:56 2014 us=612848 push_peer_info = DISABLED
Sun Jan 19 15:23:56 2014 us=615418 tls_exit = DISABLED
Sun Jan 19 15:23:56 2014 us=617790 tls_auth_file = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=620446 server_network = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=622777 server_netmask = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=625283 server_bridge_ip = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=627734 server_bridge_netmask = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=630221 server_bridge_pool_start = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=632699 server_bridge_pool_end = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=635190 ifconfig_pool_defined = DISABLED
Sun Jan 19 15:23:56 2014 us=637736 ifconfig_pool_start = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=640228 ifconfig_pool_end = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=642669 ifconfig_pool_netmask = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=645206 ifconfig_pool_persist_filename = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=647667 ifconfig_pool_persist_refresh_freq = 600
Sun Jan 19 15:23:56 2014 us=650131 n_bcast_buf = 256
Sun Jan 19 15:23:56 2014 us=652516 tcp_queue_limit = 64
Sun Jan 19 15:23:56 2014 us=654872 real_hash_size = 256
Sun Jan 19 15:23:56 2014 us=657263 virtual_hash_size = 256
Sun Jan 19 15:23:56 2014 us=659626 client_connect_script = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=662060 learn_address_script = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=664503 client_disconnect_script = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=666913 client_config_dir = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=669344 ccd_exclusive = DISABLED
Sun Jan 19 15:23:56 2014 us=671762 tmp_dir = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=674167 push_ifconfig_defined = DISABLED
Sun Jan 19 15:23:56 2014 us=676616 push_ifconfig_local = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=679075 push_ifconfig_remote_netmask = 0.0.0.0
Sun Jan 19 15:23:56 2014 us=681538 enable_c2c = DISABLED
Sun Jan 19 15:23:56 2014 us=683982 duplicate_cn = DISABLED
Sun Jan 19 15:23:56 2014 us=686412 cf_max = 0
Sun Jan 19 15:23:56 2014 us=688674 cf_per = 0
Sun Jan 19 15:23:56 2014 us=691029 max_clients = 1024
Sun Jan 19 15:23:56 2014 us=693431 max_routes_per_client = 256
Sun Jan 19 15:23:56 2014 us=695835 auth_user_pass_verify_script = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=698363 auth_user_pass_verify_script_via_file = DISABLED
Sun Jan 19 15:23:56 2014 us=700915 ssl_flags = 0
Sun Jan 19 15:23:56 2014 us=703190 port_share_host = '[UNDEF]'
Sun Jan 19 15:23:56 2014 us=707367 port_share_port = 0
Sun Jan 19 15:23:56 2014 us=709740 client = ENABLED
Sun Jan 19 15:23:56 2014 us=712105 pull = ENABLED
Sun Jan 19 15:23:56 2014 us=714429 auth_user_pass_file = '/var/etc/openvpn/login.conf'
Sun Jan 19 15:23:56 2014 us=716952 OpenVPN 2.1.4 powerpc-linux-gnu [SSL] [LZO1] [EPOLL] built on Nov 11 2010
Sun Jan 19 15:23:56 2014 us=720940 WARNING: file '/var/etc/openvpn/login.conf' is group or others accessible
Sun Jan 19 15:23:56 2014 us=724419 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Jan 19 15:23:56 2014 us=727439 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Jan 19 15:23:56 2014 us=746950 Control Channel MTU parms [ L:1541 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sun Jan 19 15:23:56 2014 us=750370 Socket Buffers: R=[108544->131072] S=[108544->131072]
Sun Jan 19 15:23:56 2014 us=753276 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:4 ET:0 EL:0 ]
Sun Jan 19 15:23:56 2014 us=761056 UDPv4 link local: [undef]
Sun Jan 19 15:23:56 2014 us=764016 UDPv4 link remote: 94.141.17.227:1194
WRSun Jan 19 15:23:56 2014 us=993169 TLS: Initial packet from 94.141.17.227:1194, sid=180b5f59 946cf6df
WSun Jan 19 15:23:56 2014 us=998280 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
WWRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRSun Jan 19 15:23:59 2014 us=924932 VERIFY OK: depth=1, /C=IT/O=efw/CN=efw_CA
Sun Jan 19 15:23:59 2014 us=938878 VERIFY OK: depth=0, /C=IT/O=efw/CN=127.0.0.1
WRWRWRWRWWRRWWWRRRWRWRSun Jan 19 15:24:02 2014 us=384934 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 19 15:24:02 2014 us=387692 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jan 19 15:24:02 2014 us=391263 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 19 15:24:02 2014 us=394013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WSun Jan 19 15:24:02 2014 us=398255 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Jan 19 15:24:02 2014 us=401462 [127.0.0.1] Peer Connection Initiated with 94.141.17.227:1194
RRRRSun Jan 19 15:24:04 2014 us=8697 SENT CONTROL [127.0.0.1]: 'PUSH_REQUEST' (status=1)
WRRRRRRRWRWRWRSun Jan 19 15:24:04 2014 us=85345 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.0.254,route 192.168.0.0 255.255.255.0,route-gateway 192.168.0.254,ping 8,ping-restart 30,route 192.168.0.0 255.255.255.0,dhcp-option DNS 192.168.0.223,dhcp-option DNS 192.168.0.254,dhcp-option DOMAIN 192.168.0.223,ifconfig 192.168.0.210 255.255.255.0'
Sun Jan 19 15:24:04 2014 us=91256 OPTIONS IMPORT: timers and/or timeouts modified
Sun Jan 19 15:24:04 2014 us=93772 OPTIONS IMPORT: --ifconfig/up options modified
Sun Jan 19 15:24:04 2014 us=96423 OPTIONS IMPORT: route options modified
Sun Jan 19 15:24:04 2014 us=98798 OPTIONS IMPORT: route-related options modified
Sun Jan 19 15:24:04 2014 us=101322 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Jan 19 15:24:04 2014 us=104164 WARNING: Since you are using --dev tun with a point-to-point topology, the second argument to --ifconfig must be an IP address. You are using something (255.255.255.0) that looks more like a netmask. (silence this warning with --ifconfig-nowarn)
Sun Jan 19 15:24:04 2014 us=109888 ROUTE default_gateway=192.168.3.1
Sun Jan 19 15:24:04 2014 us=114542 TUN/TAP device tun0 opened
Sun Jan 19 15:24:04 2014 us=117109 TUN/TAP TX queue length set to 100
Sun Jan 19 15:24:04 2014 us=120156 /sbin/ifconfig tun0 192.168.0.210 pointopoint 255.255.255.0 mtu 1500
SIOCSIFDSTADDR: Invalid argument
Sun Jan 19 15:24:04 2014 us=138147 Linux ifconfig failed: external program exited with error status: 1
Sun Jan 19 15:24:04 2014 us=141569 Exiting

Linux ifconfig failed......
The vpn go up for 20 seconds, after is closed.

Same idea?

Thanks

marco792005

Dear
thanks for answer me

In post the server config inside y firewall

; daemon configuration
daemon
mode server
tls-server
proto udp
port 1194
tmp-dir /var/tmp

multihome
user openvpn
group openvpn

cd /var/openvpn
; client-config-dir clients

script-security 2 system

; tunnel configuration

dev tap0
; bridge to GREEN
server-bridge 192.168.0.254 255.255.255.0 192.168.0.211 192.168.0.214
push "route-gateway 192.168.0.254"

; push global networks
push "route 192.168.0.0 255.255.255.0"

passtos
comp-lzo
management 127.0.0.1 5555
keepalive 8 30

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

persist-key
persist-tun
persist-local-ip
persist-remote-ip

; logging and status

writepid /var/run/openvpn/openvpn.pid
ifconfig-pool-persist openvpn.leases
status /var/log/openvpn/openvpn-status.log
verb 1

client-connect "/usr/local/bin/openvpn-client-connect"
client-disconnect "/usr/local/bin/openvpn-client-disconnect"

up "/usr/local/bin/dir.d-exec /etc/openvpn/ifup.server.d/"
down "/usr/local/bin/dir.d-exec /etc/openvpn/ifdown.server.d/"

; certificates and authentication

dh /var/efw/openvpn/dh1024.pem
pkcs12 /var/efw/openvpn/pkcs12.p12

client-cert-not-required
auth-user-pass-verify "/usr/bin/openvpn-auth" via-file
username-as-common-name

client-to-client

Any idea?

Thanks

marco792005

debbie10t wrote

marco792005 wrote

server-bridge 192.168.0.254 255.255.255.0 192.168.0.211 192.168.0.214

Have you actually configured a bridge on your server ? if not try server instead of server-bridge.

Yes , i have a bridge...... i can't remove that brige (becouse is very important).
Can you help me to undestando what i need put in the client.conf?

Thanks for help

marco792005

I do
Now i see my vpn up.
But one minute after go down

Wed Jan 22 11:04:40 2014 ERROR: Linux route add command failed: external program exited with error status: 1
Wed Jan 22 11:04:40 2014 Initialization Sequence Completed
Wed Jan 22 11:06:06 2014 [127.0.0.1] Inactivity timeout (--ping-restart), restarting
Wed Jan 22 11:06:06 2014 TCP/UDP: Closing socket
Wed Jan 22 11:06:06 2014 SIGUSR1[soft,ping-restart] received, process restarting
Wed Jan 22 11:06:06 2014 Restart pause, 2 second(s)
Wed Jan 22 11:06:08 2014 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Jan 22 11:06:08 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jan 22 11:06:08 2014 Re-using SSL/TLS context
Wed Jan 22 11:06:08 2014 Control Channel MTU parms [ L:1573 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Jan 22 11:06:08 2014 Socket Buffers: R=[108544->131072] S=[108544->131072]
Wed Jan 22 11:06:08 2014 Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]
Wed Jan 22 11:06:08 2014 UDPv4 link local: [undef]
Wed Jan 22 11:06:08 2014 UDPv4 link remote: 94.141.17.230:1194
Wed Jan 22 11:06:08 2014 TLS: Initial packet from 94.141.17.230:1194, sid=c55c45d0 52a45ced
Wed Jan 22 11:06:08 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jan 22 11:06:08 2014 VERIFY OK: depth=1, /C=IT/O=efw/CN=efw_CA
Wed Jan 22 11:06:08 2014 VERIFY OK: depth=0, /C=IT/O=efw/CN=127.0.0.1
Wed Jan 22 11:06:09 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 22 11:06:09 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 22 11:06:09 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jan 22 11:06:09 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 22 11:06:09 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jan 22 11:06:09 2014 [127.0.0.1] Peer Connection Initiated with 94.141.17.230:1194
Wed Jan 22 11:06:11 2014 SENT CONTROL [127.0.0.1]: 'PUSH_REQUEST' (status=1)
Wed Jan 22 11:06:11 2014 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.99.254,route-gateway 192.168.99.254,ping 8,ping-restart 30,redirect-gateway def1,dhcp-option DNS 192.168.99.0,dhcp-option DNS 192.168.99.0,ifconfig 192.168.99.129 255.255.255.0'
Wed Jan 22 11:06:11 2014 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jan 22 11:06:11 2014 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jan 22 11:06:11 2014 OPTIONS IMPORT: route options modified
Wed Jan 22 11:06:11 2014 OPTIONS IMPORT: route-related options modified
Wed Jan 22 11:06:11 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jan 22 11:06:11 2014 Preserving previous TUN/TAP instance: tap0
Wed Jan 22 11:06:11 2014 Initialization Sequence Completed

THat is my log.
I don't understand why the vpn go up and after go down.

Same suggestions?

THanks for help