Can't connect to internet with redirect-gateway

[deleted]

Hello,

I can't seem to access the internet from through the vpn. I can ping the server, but not the DNS server (8.8.8.8) or anything else on the internet.

server.conf

port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key  #
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
tls-auth /etc/openvpn/keys/ta.key 0 # This file is secret
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

client.conf

client
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
dev tun
proto udp
remote XXX.XXX.XXX.XXX 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/laptop1.crt
key /etc/openvpn/keys/laptop1.key
tls-auth /etc/openvpn/keys/ta.key 1
comp-lzo
verb 3

netstat -nr #From client while disconnected

Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
0.0.0.0         10.11.16.1      0.0.0.0         UG        0 0          0 wlan0
10.11.16.0      0.0.0.0         255.255.240.0   U         0 0          0 wlan0
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 wlan0

netstat -nr #From client while connected

Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
0.0.0.0         10.8.0.5        128.0.0.0       UG        0 0          0 tun0
0.0.0.0         10.11.16.1      0.0.0.0         UG        0 0          0 wlan0
10.8.0.1        10.8.0.5        255.255.255.255 UGH       0 0          0 tun0
10.8.0.5        0.0.0.0         255.255.255.255 UH        0 0          0 tun0
10.11.16.0      0.0.0.0         255.255.240.0   U         0 0          0 wlan0
54.186.48.235   10.11.16.1      255.255.255.255 UGH       0 0          0 wlan0
128.0.0.0       10.8.0.5        128.0.0.0       UG        0 0          0 tun0
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 wlan0

iptables -L -t nat #Server

sudo: unable to resolve host ip-XXX-XXX-XXX-XXX
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination

sudo iptables -L -v #Server

Chain INPUT (policy ACCEPT 27 packets, 2245 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 29 packets, 3437 bytes)
 pkts bytes target     prot opt in     out     source               destination

ifconfig #server

eth0      Link encap:Ethernet  HWaddr 02:36:55:0e:77:3f  
          inet addr:172.31.33.11  Bcast:172.31.47.255  Mask:255.255.240.0
          inet6 addr: fe80::36:55ff:fe0e:773f/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:846 errors:0 dropped:0 overruns:0 frame:0
          TX packets:926 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:94036 (94.0 KB)  TX bytes:121292 (121.2 KB)
          Interrupt:25 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:328 errors:0 dropped:0 overruns:0 frame:0
          TX packets:328 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:25104 (25.1 KB)  TX bytes:25104 (25.1 KB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:170 errors:0 dropped:0 overruns:0 frame:0
          TX packets:40 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:14705 (14.7 KB)  TX bytes:5805 (5.8 KB)

[deleted]

Thanks for the quick response. Sorry I couldn't reply yesterday. My internet connection wasn't available.

I've read the how-to. I've researched. I've tried a variety of different things and I still can't figure this out. Your help is appreciated. Here are the logs:

Client:

Mar 15 18:18:15 Laptop ovpn-client[1216]: Current Parameter Settings:
Mar 15 18:18:15 Laptop ovpn-client[1216]:   config = '/etc/openvpn/client.conf'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   mode = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   persist_config = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   persist_mode = 1
Mar 15 18:18:15 Laptop ovpn-client[1216]:   show_ciphers = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   show_digests = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   show_engines = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   genkey = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   key_pass_file = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   show_tls_ciphers = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]: Connection profiles [default]:
Mar 15 18:18:15 Laptop ovpn-client[1216]:   proto = udp
Mar 15 18:18:15 Laptop ovpn-client[1216]:   local = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   local_port = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   remote = '123.123.123.123'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   remote_port = 1194
Mar 15 18:18:15 Laptop ovpn-client[1216]:   remote_float = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   bind_defined = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   bind_local = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   connect_retry_seconds = 5
Mar 15 18:18:15 Laptop ovpn-client[1216]:   connect_timeout = 10
Mar 15 18:18:15 Laptop ovpn-client[1216]:   connect_retry_max = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   socks_proxy_server = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   socks_proxy_port = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   socks_proxy_retry = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]: Connection profiles END
Mar 15 18:18:15 Laptop ovpn-client[1216]:   remote_random = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ipchange = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   dev = 'tun'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   dev_type = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   dev_node = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   lladdr = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   topology = 1
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tun_ipv6 = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ifconfig_local = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ifconfig_remote_netmask = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ifconfig_noexec = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ifconfig_nowarn = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ifconfig_ipv6_local = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ifconfig_ipv6_netbits = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ifconfig_ipv6_remote = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   shaper = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tun_mtu = 1500
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tun_mtu_defined = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   link_mtu = 1500
Mar 15 18:18:15 Laptop ovpn-client[1216]:   link_mtu_defined = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tun_mtu_extra = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tun_mtu_extra_defined = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   fragment = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   mtu_discover_type = -1
Mar 15 18:18:15 Laptop ovpn-client[1216]:   mtu_test = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   mlock = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   keepalive_ping = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   keepalive_timeout = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   inactivity_timeout = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ping_send_timeout = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ping_rec_timeout = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ping_rec_timeout_action = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ping_timer_remote = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   remap_sigusr1 = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   explicit_exit_notification = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   persist_tun = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   persist_local_ip = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   persist_remote_ip = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   persist_key = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   mssfix = 1450
Mar 15 18:18:15 Laptop ovpn-client[1216]:   passtos = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   resolve_retry_seconds = 1000000000
Mar 15 18:18:15 Laptop ovpn-client[1216]:   username = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   groupname = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   chroot_dir = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   cd_dir = '/etc/openvpn'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   writepid = '/var/run/openvpn.client.pid'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   up_script = '/etc/openvpn/update-resolv-conf'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   down_script = '/etc/openvpn/update-resolv-conf'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   down_pre = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   up_restart = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   up_delay = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   daemon = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   inetd = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   log = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   suppress_timestamps = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   nice = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   verbosity = 4
Mar 15 18:18:15 Laptop ovpn-client[1216]:   mute = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   gremlin = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   status_file = '/var/run/openvpn.client.status'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   status_file_version = 1
Mar 15 18:18:15 Laptop ovpn-client[1216]:   status_file_update_freq = 10
Mar 15 18:18:15 Laptop ovpn-client[1216]:   occ = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   rcvbuf = 65536
Mar 15 18:18:15 Laptop ovpn-client[1216]:   sndbuf = 65536
Mar 15 18:18:15 Laptop ovpn-client[1216]:   sockflags = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   fast_io = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   lzo = 7
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_script = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_default_gateway = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_default_metric = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_noexec = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_delay = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_delay_window = 30
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_delay_defined = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_nopull = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   route_gateway_via_dhcp = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   max_routes = 100
Mar 15 18:18:15 Laptop ovpn-client[1216]:   allow_pull_fqdn = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_addr = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_port = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_user_pass = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_log_history_cache = 250
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_echo_buffer_size = 100
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_write_peer_info_file = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_client_user = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_client_group = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   management_flags = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   shared_secret_file = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   key_direction = 2
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ciphername_defined = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ciphername = 'BF-CBC'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   authname_defined = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   authname = 'SHA1'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   prng_hash = 'SHA1'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   prng_nonce_secret_len = 16
Mar 15 18:18:15 Laptop ovpn-client[1216]:   keysize = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   engine = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   replay = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   mute_replay_warnings = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   replay_window = 64
Mar 15 18:18:15 Laptop ovpn-client[1216]:   replay_time = 15
Mar 15 18:18:15 Laptop ovpn-client[1216]:   packet_id_file = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   use_iv = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   test_crypto = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_server = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_client = ENABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   key_method = 2
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ca_file = '/etc/openvpn/keys/ca.crt'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ca_path = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   dh_file = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   cert_file = '/etc/openvpn/keys/laptop1.crt'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   priv_key_file = '/etc/openvpn/keys/laptop1.key'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   pkcs12_file = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   cipher_list = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_verify = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_export_cert = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_remote = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   crl_file = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   ns_cert_type = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   remote_cert_ku[i] = 0
Mar 15 18:18:15  ovpn-client[1216]: last message repeated 15 times
Mar 15 18:18:15 Laptop ovpn-client[1216]:   remote_cert_eku = '[UNDEF]'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_timeout = 2
Mar 15 18:18:15 Laptop ovpn-client[1216]:   renegotiate_bytes = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   renegotiate_packets = 0
Mar 15 18:18:15 Laptop ovpn-client[1216]:   renegotiate_seconds = 3600
Mar 15 18:18:15 Laptop ovpn-client[1216]:   handshake_window = 60
Mar 15 18:18:15 Laptop ovpn-client[1216]:   transition_window = 3600
Mar 15 18:18:15 Laptop ovpn-client[1216]:   single_session = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   push_peer_info = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_exit = DISABLED
Mar 15 18:18:15 Laptop ovpn-client[1216]:   tls_auth_file = '/etc/openvpn/keys/ta.key'
Mar 15 18:18:15 Laptop ovpn-client[1216]:   pkcs11_protected_authentication = DISABLED
Mar 15 18:18:15  ovpn-client[1216]: last message repeated 15 times
Mar 15 18:18:15 Laptop ovpn-client[1216]:   pkcs11_private_mode = 00000000
Mar 15 18:18:15  ovpn-client[1216]: last message repeated 8 times
Mar 15 18:18:15 Laptop ovpn-client[1217]: UDPv4 link local: [undef]
Mar 15 18:18:15 Laptop ovpn-client[1217]: UDPv4 link remote: [AF_INET]54.186.48.235:1194
Mar 15 18:18:15 Laptop ovpn-client[1217]: write UDPv4 []: Network is unreachable (code=101)
Mar 15 18:18:17 Laptop ovpn-client[1217]: write UDPv4 []: Network is unreachable (code=101)
Mar 15 18:18:21 Laptop ovpn-client[1217]: write UDPv4 []: Network is unreachable (code=101)
Mar 15 18:19:15 Laptop ovpn-client[1217]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mar 15 18:19:15 Laptop ovpn-client[1217]: TLS Error: TLS handshake failed
Mar 15 18:19:15 Laptop ovpn-client[1217]: TCP/UDP: Closing socket
Mar 15 18:19:15 Laptop ovpn-client[1217]: SIGUSR1[soft,tls-error] received, process restarting
Mar 15 18:19:15 Laptop ovpn-client[1217]: Restart pause, 2 second(s)
Mar 15 18:19:17 Laptop ovpn-client[1217]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mar 15 18:19:17 Laptop ovpn-client[1217]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 15 18:19:17 Laptop ovpn-client[1217]: Re-using SSL/TLS context
Mar 15 18:19:17 Laptop ovpn-client[1217]: LZO compression initialized
Mar 15 18:19:17 Laptop ovpn-client[1217]: Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mar 15 18:19:17 Laptop ovpn-client[1217]: Socket Buffers: R=[212992->131072] S=[212992->131072]
Mar 15 18:19:17 Laptop ovpn-client[1217]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 15 18:19:17 Laptop ovpn-client[1217]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mar 15 18:19:17 Laptop ovpn-client[1217]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mar 15 18:19:17 Laptop ovpn-client[1217]: Local Options hash (VER=V4): '504e774e'
Mar 15 18:19:17 Laptop ovpn-client[1217]: Expected Remote Options hash (VER=V4): '14168603'
Mar 15 18:19:17 Laptop ovpn-client[1217]: UDPv4 link local: [undef]
Mar 15 18:19:17 Laptop ovpn-client[1217]: UDPv4 link remote: [AF_INET]123.123.123.123:1194
Mar 15 18:19:49 Laptop ovpn-client[1217]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=6782aec2 927fb8bf
Mar 15 18:19:49 Laptop ovpn-client[1217]: VERIFY OK: depth=1, /C=CA/ST=AB/L=Edmonton/name=server/emailAddress=mail@host.domain
Mar 15 18:19:49 Laptop ovpn-client[1217]: VERIFY OK: depth=0, /C=CA/ST=AB/L=Edmonton/O=SafetyFirst/OU=server/CN=server/name=server/emailAddress=mail@host.domain
Mar 15 18:19:50 Laptop ovpn-client[1217]: Replay-window backtrack occurred [1]
Mar 15 18:19:50 Laptop ovpn-client[1217]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:19:50 Laptop ovpn-client[1217]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:19:50 Laptop ovpn-client[1217]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:19:50 Laptop ovpn-client[1217]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:19:50 Laptop ovpn-client[1217]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mar 15 18:19:50 Laptop ovpn-client[1217]: [server] Peer Connection Initiated with [AF_INET]54.186.48.235:1194
Mar 15 18:19:52 Laptop ovpn-client[1217]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mar 15 18:19:52 Laptop ovpn-client[1217]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Mar 15 18:19:52 Laptop ovpn-client[1217]: OPTIONS IMPORT: timers and/or timeouts modified
Mar 15 18:19:52 Laptop ovpn-client[1217]: OPTIONS IMPORT: --ifconfig/up options modified
Mar 15 18:19:52 Laptop ovpn-client[1217]: OPTIONS IMPORT: route options modified
Mar 15 18:19:52 Laptop ovpn-client[1217]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mar 15 18:19:52 Laptop ovpn-client[1217]: ROUTE default_gateway=10.11.16.1
Mar 15 18:19:52 Laptop ovpn-client[1217]: TUN/TAP device tun0 opened
Mar 15 18:19:52 Laptop ovpn-client[1217]: TUN/TAP TX queue length set to 100
Mar 15 18:19:52 Laptop ovpn-client[1217]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mar 15 18:19:52 Laptop ovpn-client[1217]: /sbin/ifconfig tun0 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Mar 15 18:19:52 Laptop ovpn-client[1217]: /etc/openvpn/update-resolv-conf tun0 1500 1542 10.8.0.6 10.8.0.5 init
Mar 15 18:19:52 Laptop ovpn-client[1217]: /sbin/route add -net 123.123.123.123 netmask 255.255.255.255 gw 10.11.16.1
Mar 15 18:19:52 Laptop ovpn-client[1217]: /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.5
Mar 15 18:19:52 Laptop ovpn-client[1217]: /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.5
Mar 15 18:19:52 Laptop ovpn-client[1217]: /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5
Mar 15 18:19:52 Laptop ovpn-client[1217]: Initialization Sequence Completed
Mar 15 18:22:42 Laptop ovpn-client[1217]: [server] Inactivity timeout (--ping-restart), restarting
Mar 15 18:22:42 Laptop ovpn-client[1217]: TCP/UDP: Closing socket
Mar 15 18:22:42 Laptop ovpn-client[1217]: SIGUSR1[soft,ping-restart] received, process restarting
Mar 15 18:22:42 Laptop ovpn-client[1217]: Restart pause, 2 second(s)
Mar 15 18:22:44 Laptop ovpn-client[1217]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Mar 15 18:22:44 Laptop ovpn-client[1217]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 15 18:22:44 Laptop ovpn-client[1217]: Re-using SSL/TLS context
Mar 15 18:22:44 Laptop ovpn-client[1217]: LZO compression initialized
Mar 15 18:22:44 Laptop ovpn-client[1217]: Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mar 15 18:22:44 Laptop ovpn-client[1217]: Socket Buffers: R=[212992->131072] S=[212992->131072]
Mar 15 18:22:44 Laptop ovpn-client[1217]: Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 15 18:22:44 Laptop ovpn-client[1217]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mar 15 18:22:44 Laptop ovpn-client[1217]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mar 15 18:22:44 Laptop ovpn-client[1217]: Local Options hash (VER=V4): '504e774e'
Mar 15 18:22:44 Laptop ovpn-client[1217]: Expected Remote Options hash (VER=V4): '14168603'
Mar 15 18:22:44 Laptop ovpn-client[1217]: UDPv4 link local: [undef]
Mar 15 18:22:44 Laptop ovpn-client[1217]: UDPv4 link remote: [AF_INET]123.123.123.123:1194
Mar 15 18:22:44 Laptop ovpn-client[1217]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=34f059ea e6f217f6
Mar 15 18:22:44 Laptop ovpn-client[1217]: VERIFY OK: depth=1, /C=CA/ST=AB/L=Edmonton/name=server/emailAddress=mail@host.domain
Mar 15 18:22:44 Laptop ovpn-client[1217]: VERIFY OK: depth=0, /C=CA/ST=AB/L=Edmonton/O=SafetyFirst/OU=server/CN=server/name=server/emailAddress=mail@host.domain

Server:

Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]: Current Parameter Settings:
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   config = '/etc/openvpn/server.conf'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   mode = 1
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   persist_config = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   persist_mode = 1
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   show_ciphers = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   show_digests = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   show_engines = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   genkey = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   key_pass_file = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   show_tls_ciphers = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]: Connection profiles [default]:
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   proto = udp
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   local = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   local_port = 1194
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   remote = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   remote_port = 1194
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   remote_float = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   bind_defined = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   bind_local = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   connect_retry_seconds = 5
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   connect_timeout = 10
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   connect_retry_max = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   socks_proxy_server = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   socks_proxy_port = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   socks_proxy_retry = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]: Connection profiles END
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   remote_random = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ipchange = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   dev = 'tun'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   dev_type = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   dev_node = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   lladdr = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   topology = 1
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tun_ipv6 = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ifconfig_local = '10.8.0.1'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ifconfig_remote_netmask = '10.8.0.2'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ifconfig_noexec = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ifconfig_nowarn = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ifconfig_ipv6_local = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ifconfig_ipv6_netbits = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ifconfig_ipv6_remote = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   shaper = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tun_mtu = 1500
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tun_mtu_defined = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   link_mtu = 1500
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   link_mtu_defined = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tun_mtu_extra = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tun_mtu_extra_defined = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   fragment = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   mtu_discover_type = -1
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   mtu_test = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   mlock = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   keepalive_ping = 10
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   keepalive_timeout = 120
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   inactivity_timeout = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ping_send_timeout = 10
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ping_rec_timeout = 240
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ping_rec_timeout_action = 2
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ping_timer_remote = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   remap_sigusr1 = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   explicit_exit_notification = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   persist_tun = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   persist_local_ip = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   persist_remote_ip = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   persist_key = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   mssfix = 1450
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   passtos = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   resolve_retry_seconds = 1000000000
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   username = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   groupname = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   chroot_dir = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   cd_dir = '/etc/openvpn'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   writepid = '/var/run/openvpn.server.pid'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   up_script = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   down_script = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   down_pre = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   up_restart = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   up_delay = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   daemon = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   inetd = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   log = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   suppress_timestamps = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   nice = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   verbosity = 4
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   mute = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   gremlin = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   status_file = 'openvpn-status.log'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   status_file_version = 1
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   status_file_update_freq = 60
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   occ = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   rcvbuf = 65536
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   sndbuf = 65536
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   sockflags = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   fast_io = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   lzo = 7
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_script = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_default_gateway = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_default_metric = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_noexec = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_delay = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_delay_window = 30
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_delay_defined = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_nopull = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route_gateway_via_dhcp = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   max_routes = 100
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   allow_pull_fqdn = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   route 10.8.0.0/255.255.255.0/nil/nil
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_addr = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_port = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_user_pass = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_log_history_cache = 250
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_echo_buffer_size = 100
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_write_peer_info_file = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_client_user = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_client_group = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   management_flags = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   shared_secret_file = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   key_direction = 1
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ciphername_defined = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ciphername = 'BF-CBC'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   authname_defined = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   authname = 'SHA1'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   prng_hash = 'SHA1'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   prng_nonce_secret_len = 16
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   keysize = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   engine = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   replay = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   mute_replay_warnings = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   replay_window = 64
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   replay_time = 15
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   packet_id_file = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   use_iv = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   test_crypto = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_server = ENABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_client = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   key_method = 2
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ca_file = '/etc/openvpn/keys/ca.crt'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ca_path = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   dh_file = '/etc/openvpn/keys/dh1024.pem'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   cert_file = '/etc/openvpn/keys/server.crt'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   priv_key_file = '/etc/openvpn/keys/server.key'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   pkcs12_file = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   cipher_list = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_verify = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_export_cert = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_remote = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   crl_file = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   ns_cert_type = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   remote_cert_ku[i] = 0
Mar 15 18:19:42  ovpn-server[850]: last message repeated 15 times
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   remote_cert_eku = '[UNDEF]'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_timeout = 2
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   renegotiate_bytes = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   renegotiate_packets = 0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   renegotiate_seconds = 3600
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   handshake_window = 60
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   transition_window = 3600
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   single_session = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   push_peer_info = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_exit = DISABLED
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   tls_auth_file = '/etc/openvpn/keys/ta.key'
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   pkcs11_protected_authentication = DISABLED
Mar 15 18:19:42  ovpn-server[850]: last message repeated 15 times
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[850]:   pkcs11_private_mode = 00000000
Mar 15 18:19:42  ovpn-server[850]: last message repeated 7 times
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: UDPv4 link local (bound): [undef]
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: UDPv4 link remote: [undef]
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: MULTI: multi_init called, r=256 v=256
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: ifconfig_pool_read(), in='laptop1,10.8.0.4', TODO: IPv6
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: succeeded -> ifconfig_pool_set()
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: ifconfig_pool_read(), in='laptop2,10.8.0.8', TODO: IPv6
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: succeeded -> ifconfig_pool_set()
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: IFCONFIG POOL LIST
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: laptop1,10.8.0.4
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: laptop2,10.8.0.8
Mar 15 18:19:42 ip-172-31-33-11 ovpn-server[858]: Initialization Sequence Completed
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: MULTI: multi_create_instance called
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Re-using SSL/TLS context
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 LZO compression initialized
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Local Options hash (VER=V4): '14168603'
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Expected Remote Options hash (VER=V4): '504e774e'
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 TLS: Initial packet from [AF_INET]64.141.42.178:54529, sid=0febaea9 6d46292d
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 VERIFY OK: depth=1, /C=CA/ST=AB/L=Edmonton/name=server/emailAddress=mail@host.domain
Mar 15 18:19:49 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 VERIFY OK: depth=0, /C=CA/ST=AB/L=Edmonton/CN=laptop1/name=server/emailAddress=mail@host.domain
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:54529 [laptop1] Peer Connection Initiated with [AF_INET]64.141.42.178:54529
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=1::1b00:0:267f:0
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI: Learn: 10.8.0.6 -> laptop1/64.141.42.178:54529
Mar 15 18:19:50 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI: primary virtual IP for laptop1/64.141.42.178:54529: 10.8.0.6
Mar 15 18:19:52 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 PUSH: Received control message: 'PUSH_REQUEST'
Mar 15 18:19:52 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 send_push_reply(): safe_cap=960
Mar 15 18:19:52 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 SENT CONTROL [laptop1]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mar 15 18:19:52 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI: bad source address from client [10.11.19.172], packet dropped
Mar 15 18:20:05  ovpn-server[858]: last message repeated 10 times
Mar 15 18:20:05 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 Replay-window backtrack occurred [1]
Mar 15 18:20:07 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI: bad source address from client [10.11.19.172], packet dropped
Mar 15 18:20:07 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI: bad source address from client [10.11.19.172], packet dropped
Mar 15 18:20:20 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 Replay-window backtrack occurred [3]
Mar 15 18:20:23 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI: bad source address from client [10.11.19.172], packet dropped
Mar 15 18:20:23 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:54529 MULTI: bad source address from client [10.11.19.172], packet dropped
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: MULTI: multi_create_instance called
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Re-using SSL/TLS context
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 LZO compression initialized
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Local Options hash (VER=V4): '14168603'
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Expected Remote Options hash (VER=V4): '504e774e'
Mar 15 18:20:42 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 TLS: Initial packet from [AF_INET]64.141.42.178:34579, sid=810576c6 1292422e
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 VERIFY OK: depth=1, /C=CA/ST=AB/L=Edmonton/name=server/emailAddress=mail@host.domain
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 VERIFY OK: depth=0, /C=CA/ST=AB/L=Edmonton/CN=laptop1/name=server/emailAddress=mail@host.domain
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:34579 [laptop1] Peer Connection Initiated with [AF_INET]64.141.42.178:34579
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: MULTI: new connection by client 'laptop1' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=::e091:fa75:267f:0
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: MULTI: Learn: 10.8.0.6 -> laptop1/64.141.42.178:34579
Mar 15 18:20:47 ip-172-31-33-11 ovpn-server[858]: MULTI: primary virtual IP for laptop1/64.141.42.178:34579: 10.8.0.6
Mar 15 18:20:49 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:34579 PUSH: Received control message: 'PUSH_REQUEST'
Mar 15 18:20:49 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:34579 send_push_reply(): safe_cap=960
Mar 15 18:20:49 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:34579 SENT CONTROL [laptop1]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: MULTI: multi_create_instance called
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Re-using SSL/TLS context
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 LZO compression initialized
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Local Options hash (VER=V4): '14168603'
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Expected Remote Options hash (VER=V4): '504e774e'
Mar 15 18:22:44 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 TLS: Initial packet from [AF_INET]64.141.42.178:52514, sid=6ac97662 b70979c1
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 VERIFY OK: depth=1, /C=CA/ST=AB/L=Edmonton/name=server/emailAddress=mail@host.domain
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 VERIFY OK: depth=0, /C=CA/ST=AB/L=Edmonton/CN=laptop1/name=server/emailAddress=mail@host.domain
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: 64.141.42.178:52514 [laptop1] Peer Connection Initiated with [AF_INET]64.141.42.178:52514
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: MULTI: new connection by client 'laptop1' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=::e091:fa75:267f:0
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: MULTI: Learn: 10.8.0.6 -> laptop1/64.141.42.178:52514
Mar 15 18:22:47 ip-172-31-33-11 ovpn-server[858]: MULTI: primary virtual IP for laptop1/64.141.42.178:52514: 10.8.0.6
Mar 15 18:22:50 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:52514 PUSH: Received control message: 'PUSH_REQUEST'
Mar 15 18:22:50 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:52514 send_push_reply(): safe_cap=960
Mar 15 18:22:50 ip-172-31-33-11 ovpn-server[858]: laptop1/64.141.42.178:52514 SENT CONTROL [laptop1]: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)