Hi people!
I updated all server and client software to 2.3.3 and afterwards I wasn't able to connect any more.
The server is set up to give road-warriors access to the office-network. I spent a lot time to change settings to make it work and before i gave up i decided to post my case here.
Client and Server are running on Windows7 Pro 64-bit.
After updating the software, i rebuild new certs and keys for ca, server and clients. I also wanted to add precession of ta.key, but when i had trouble to connect, i commented the line in the configs.
For me it's a bit weird, that in the logs there are signs of TLS-Auth though. I thought i disabled that?
In the end the errormessage is always: "TLS key negotiation failed to occur within 60 seconds"
I hope you can help me with that. I'm close to surrender. ^^
Server config:
port 1194
proto udp
dev tun
dev-node openVPN
ca ca.crt
cert FIT_Server.crt
key FIT_Server.key # This file should be kept secret
dh dh2048.pem
server 10.9.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.16.0 255.255.255.0"
keepalive 6 60
;tls-auth ta.key 0 # This file is secret
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 5
mute 20
Server log:
Fri Apr 25 17:48:06 2014 us=662945 TCP/UDP: Closing socket
Fri Apr 25 17:48:06 2014 us=662945 C:\Windows\system32\route.exe DELETE 10.9.0.0 MASK 255.255.255.0 10.9.0.2
Fri Apr 25 17:48:06 2014 us=662945 Route deletion via IPAPI succeeded [adaptive]
Fri Apr 25 17:48:06 2014 us=662945 Closing TUN/TAP interface
Fri Apr 25 17:48:06 2014 us=662945 SIGTERM[hard,] received, process exiting
Fri Apr 25 17:48:08 2014 us=4546 Current Parameter Settings:
Fri Apr 25 17:48:08 2014 us=4546 config = 'FIT_server.ovpn'
Fri Apr 25 17:48:08 2014 us=4546 mode = 1
Fri Apr 25 17:48:08 2014 us=4546 show_ciphers = DISABLED
Fri Apr 25 17:48:08 2014 us=4546 show_digests = DISABLED
Fri Apr 25 17:48:08 2014 us=4546 show_engines = DISABLED
Fri Apr 25 17:48:08 2014 us=4546 genkey = DISABLED
Fri Apr 25 17:48:08 2014 us=4546 key_pass_file = '[UNDEF]'
Fri Apr 25 17:48:08 2014 us=4546 show_tls_ciphers = DISABLED
Fri Apr 25 17:48:08 2014 us=4546 Connection profiles [default]:
Fri Apr 25 17:48:08 2014 us=4546 proto = udp
Fri Apr 25 17:48:08 2014 us=4546 local = '[UNDEF]'
Fri Apr 25 17:48:08 2014 us=4546 local_port = 1194
Fri Apr 25 17:48:08 2014 us=4546 remote = '[UNDEF]'
Fri Apr 25 17:48:08 2014 us=4546 remote_port = 1194
Fri Apr 25 17:48:08 2014 us=4546 remote_float = DISABLED
Fri Apr 25 17:48:08 2014 us=4546 bind_defined = DISABLED
Fri Apr 25 17:48:08 2014 us=4546 bind_local = ENABLED
Fri Apr 25 17:48:08 2014 us=4546 connect_retry_seconds = 5
Fri Apr 25 17:48:08 2014 us=4546 connect_timeout = 10
Fri Apr 25 17:48:08 2014 us=4546 NOTE: --mute triggered...
Fri Apr 25 17:48:08 2014 us=4546 271 variation(s) on previous 20 message(s) suppressed by --mute
Fri Apr 25 17:48:08 2014 us=4546 OpenVPN 2.3.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Apr 9 2014
Fri Apr 25 17:48:08 2014 us=160545 Diffie-Hellman initialized with 2048 bit key
Fri Apr 25 17:48:08 2014 us=160545 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 25 17:48:08 2014 us=160545 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Apr 25 17:48:08 2014 us=176145 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Apr 25 17:48:08 2014 us=176145 open_tun, tt->ipv6=0
Fri Apr 25 17:48:08 2014 us=176145 TAP-WIN32 device [openVPN] opened: \\.\Global\{63C51DE7-1751-4596-B112-57501D189613}.tap
Fri Apr 25 17:48:08 2014 us=176145 TAP-Windows Driver Version 9.9
Fri Apr 25 17:48:08 2014 us=176145 TAP-Windows MTU=1500
Fri Apr 25 17:48:08 2014 us=176145 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.0.1/255.255.255.252 on interface {63C51DE7-1751-4596-B112-57501D189613} [DHCP-serv: 10.9.0.2, lease-time: 31536000]
Fri Apr 25 17:48:08 2014 us=176145 Sleeping for 10 seconds...
Fri Apr 25 17:48:18 2014 us=191351 Successful ARP Flush on interface [18] {63C51DE7-1751-4596-B112-57501D189613}
Fri Apr 25 17:48:18 2014 us=191351 C:\Windows\system32\route.exe ADD 10.9.0.0 MASK 255.255.255.0 10.9.0.2
Fri Apr 25 17:48:18 2014 us=191351 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Apr 25 17:48:18 2014 us=191351 Route addition via IPAPI succeeded [adaptive]
Fri Apr 25 17:48:18 2014 us=191351 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 25 17:48:18 2014 us=191351 UDPv4 link local (bound): [undef]
Fri Apr 25 17:48:18 2014 us=191351 UDPv4 link remote: [undef]
Fri Apr 25 17:48:18 2014 us=191351 MULTI: multi_init called, r=256 v=256
Fri Apr 25 17:48:18 2014 us=191351 IFCONFIG POOL: base=10.9.0.4 size=62, ipv6=0
Fri Apr 25 17:48:18 2014 us=191351 IFCONFIG POOL LIST
Fri Apr 25 17:48:18 2014 us=191351 Initialization Sequence Completed
Client config:
client
dev tun
dev-node openVPN
proto udp
remote ##.##.##.## 1194
resolv-retry infinite
nobind
persist-key
persist-tun
;tls-auth FIT_ta.key 1
ca FIT_ca.crt
cert Service.crt
key Service.key
dh FIT_dh2048.pem
ns-cert-type server
cipher DES-EDE3-CBC
comp-lzo
verb 5
Client log:
Fri Apr 25 18:00:50 2014 us=79288 Current Parameter Settings:
Fri Apr 25 18:00:50 2014 us=79288 config = 'Service.ovpn'
Fri Apr 25 18:00:50 2014 us=79288 mode = 0
Fri Apr 25 18:00:50 2014 us=79288 show_ciphers = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 show_digests = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 show_engines = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 genkey = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 key_pass_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 show_tls_ciphers = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 Connection profiles [default]:
Fri Apr 25 18:00:50 2014 us=79288 proto = udp
Fri Apr 25 18:00:50 2014 us=79288 local = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 local_port = 0
Fri Apr 25 18:00:50 2014 us=79288 remote = '##.##.##.##'
Fri Apr 25 18:00:50 2014 us=79288 remote_port = 1194
Fri Apr 25 18:00:50 2014 us=79288 remote_float = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 bind_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 bind_local = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 connect_retry_seconds = 5
Fri Apr 25 18:00:50 2014 us=79288 connect_timeout = 10
Fri Apr 25 18:00:50 2014 us=79288 connect_retry_max = 0
Fri Apr 25 18:00:50 2014 us=79288 socks_proxy_server = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 socks_proxy_port = 0
Fri Apr 25 18:00:50 2014 us=79288 socks_proxy_retry = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 tun_mtu = 1500
Fri Apr 25 18:00:50 2014 us=79288 tun_mtu_defined = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 link_mtu = 1500
Fri Apr 25 18:00:50 2014 us=79288 link_mtu_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 tun_mtu_extra = 0
Fri Apr 25 18:00:50 2014 us=79288 tun_mtu_extra_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 mtu_discover_type = -1
Fri Apr 25 18:00:50 2014 us=79288 fragment = 0
Fri Apr 25 18:00:50 2014 us=79288 mssfix = 1450
Fri Apr 25 18:00:50 2014 us=79288 explicit_exit_notification = 0
Fri Apr 25 18:00:50 2014 us=79288 Connection profiles END
Fri Apr 25 18:00:50 2014 us=79288 remote_random = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 ipchange = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 dev = 'tun'
Fri Apr 25 18:00:50 2014 us=79288 dev_type = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 dev_node = 'openVPN'
Fri Apr 25 18:00:50 2014 us=79288 lladdr = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 topology = 1
Fri Apr 25 18:00:50 2014 us=79288 tun_ipv6 = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_local = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_remote_netmask = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_noexec = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_nowarn = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_ipv6_local = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_ipv6_netbits = 0
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_ipv6_remote = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 shaper = 0
Fri Apr 25 18:00:50 2014 us=79288 mtu_test = 0
Fri Apr 25 18:00:50 2014 us=79288 mlock = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 keepalive_ping = 0
Fri Apr 25 18:00:50 2014 us=79288 keepalive_timeout = 0
Fri Apr 25 18:00:50 2014 us=79288 inactivity_timeout = 0
Fri Apr 25 18:00:50 2014 us=79288 ping_send_timeout = 0
Fri Apr 25 18:00:50 2014 us=79288 ping_rec_timeout = 0
Fri Apr 25 18:00:50 2014 us=79288 ping_rec_timeout_action = 0
Fri Apr 25 18:00:50 2014 us=79288 ping_timer_remote = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 remap_sigusr1 = 0
Fri Apr 25 18:00:50 2014 us=79288 persist_tun = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 persist_local_ip = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 persist_remote_ip = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 persist_key = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 passtos = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 resolve_retry_seconds = 1000000000
Fri Apr 25 18:00:50 2014 us=79288 username = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 groupname = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 chroot_dir = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 cd_dir = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 writepid = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 up_script = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 down_script = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 down_pre = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 up_restart = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 up_delay = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 daemon = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 inetd = 0
Fri Apr 25 18:00:50 2014 us=79288 log = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 suppress_timestamps = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 nice = 0
Fri Apr 25 18:00:50 2014 us=79288 verbosity = 5
Fri Apr 25 18:00:50 2014 us=79288 mute = 0
Fri Apr 25 18:00:50 2014 us=79288 status_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 status_file_version = 1
Fri Apr 25 18:00:50 2014 us=79288 status_file_update_freq = 60
Fri Apr 25 18:00:50 2014 us=79288 occ = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 rcvbuf = 0
Fri Apr 25 18:00:50 2014 us=79288 sndbuf = 0
Fri Apr 25 18:00:50 2014 us=79288 sockflags = 0
Fri Apr 25 18:00:50 2014 us=79288 fast_io = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 lzo = 7
Fri Apr 25 18:00:50 2014 us=79288 route_script = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 route_default_gateway = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 route_default_metric = 0
Fri Apr 25 18:00:50 2014 us=79288 route_noexec = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 route_delay = 5
Fri Apr 25 18:00:50 2014 us=79288 route_delay_window = 30
Fri Apr 25 18:00:50 2014 us=79288 route_delay_defined = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 route_nopull = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 route_gateway_via_dhcp = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 max_routes = 100
Fri Apr 25 18:00:50 2014 us=79288 allow_pull_fqdn = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 management_addr = '127.0.0.1'
Fri Apr 25 18:00:50 2014 us=79288 management_port = 25341
Fri Apr 25 18:00:50 2014 us=79288 management_user_pass = 'stdin'
Fri Apr 25 18:00:50 2014 us=79288 management_log_history_cache = 250
Fri Apr 25 18:00:50 2014 us=79288 management_echo_buffer_size = 100
Fri Apr 25 18:00:50 2014 us=79288 management_write_peer_info_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 management_client_user = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 management_client_group = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 management_flags = 6
Fri Apr 25 18:00:50 2014 us=79288 shared_secret_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 key_direction = 0
Fri Apr 25 18:00:50 2014 us=79288 ciphername_defined = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 ciphername = 'DES-EDE3-CBC'
Fri Apr 25 18:00:50 2014 us=79288 authname_defined = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 authname = 'SHA1'
Fri Apr 25 18:00:50 2014 us=79288 prng_hash = 'SHA1'
Fri Apr 25 18:00:50 2014 us=79288 prng_nonce_secret_len = 16
Fri Apr 25 18:00:50 2014 us=79288 keysize = 0
Fri Apr 25 18:00:50 2014 us=79288 engine = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 replay = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 mute_replay_warnings = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 replay_window = 64
Fri Apr 25 18:00:50 2014 us=79288 replay_time = 15
Fri Apr 25 18:00:50 2014 us=79288 packet_id_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 use_iv = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 test_crypto = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 tls_server = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 tls_client = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 key_method = 2
Fri Apr 25 18:00:50 2014 us=79288 ca_file = 'FIT_ca.crt'
Fri Apr 25 18:00:50 2014 us=79288 ca_path = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 dh_file = 'FIT_dh2048.pem'
Fri Apr 25 18:00:50 2014 us=79288 cert_file = 'Service.crt'
Fri Apr 25 18:00:50 2014 us=79288 priv_key_file = 'Service.key'
Fri Apr 25 18:00:50 2014 us=79288 pkcs12_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 cryptoapi_cert = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 cipher_list = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 tls_verify = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 tls_export_cert = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 verify_x509_type = 0
Fri Apr 25 18:00:50 2014 us=79288 verify_x509_name = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 crl_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 ns_cert_type = 1
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_ku[i] = 0
Fri Apr 25 18:00:50 2014 us=79288 remote_cert_eku = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 ssl_flags = 0
Fri Apr 25 18:00:50 2014 us=79288 tls_timeout = 2
Fri Apr 25 18:00:50 2014 us=79288 renegotiate_bytes = 0
Fri Apr 25 18:00:50 2014 us=79288 renegotiate_packets = 0
Fri Apr 25 18:00:50 2014 us=79288 renegotiate_seconds = 3600
Fri Apr 25 18:00:50 2014 us=79288 handshake_window = 60
Fri Apr 25 18:00:50 2014 us=79288 transition_window = 3600
Fri Apr 25 18:00:50 2014 us=79288 single_session = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 push_peer_info = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 tls_exit = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 tls_auth_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_protected_authentication = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_private_mode = 00000000
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_cert_private = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_pin_cache_period = -1
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_id = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 pkcs11_id_management = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 server_network = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 server_netmask = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 server_network_ipv6 = ::
Fri Apr 25 18:00:50 2014 us=79288 server_netbits_ipv6 = 0
Fri Apr 25 18:00:50 2014 us=79288 server_bridge_ip = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 server_bridge_netmask = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 server_bridge_pool_start = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 server_bridge_pool_end = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_pool_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_pool_start = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_pool_end = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_pool_netmask = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_pool_persist_refresh_freq = 600
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_ipv6_pool_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_ipv6_pool_base = ::
Fri Apr 25 18:00:50 2014 us=79288 ifconfig_ipv6_pool_netbits = 0
Fri Apr 25 18:00:50 2014 us=79288 n_bcast_buf = 256
Fri Apr 25 18:00:50 2014 us=79288 tcp_queue_limit = 64
Fri Apr 25 18:00:50 2014 us=79288 real_hash_size = 256
Fri Apr 25 18:00:50 2014 us=79288 virtual_hash_size = 256
Fri Apr 25 18:00:50 2014 us=79288 client_connect_script = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 learn_address_script = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 client_disconnect_script = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 client_config_dir = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 ccd_exclusive = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 tmp_dir = 'C:\Users\florian\AppData\Local\Temp\'
Fri Apr 25 18:00:50 2014 us=79288 push_ifconfig_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 push_ifconfig_local = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 push_ifconfig_remote_netmask = 0.0.0.0
Fri Apr 25 18:00:50 2014 us=79288 push_ifconfig_ipv6_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 push_ifconfig_ipv6_local = ::/0
Fri Apr 25 18:00:50 2014 us=79288 push_ifconfig_ipv6_remote = ::
Fri Apr 25 18:00:50 2014 us=79288 enable_c2c = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 duplicate_cn = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 cf_max = 0
Fri Apr 25 18:00:50 2014 us=79288 cf_per = 0
Fri Apr 25 18:00:50 2014 us=79288 max_clients = 1024
Fri Apr 25 18:00:50 2014 us=79288 max_routes_per_client = 256
Fri Apr 25 18:00:50 2014 us=79288 auth_user_pass_verify_script = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 auth_user_pass_verify_script_via_file = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 client = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 pull = ENABLED
Fri Apr 25 18:00:50 2014 us=79288 auth_user_pass_file = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 show_net_up = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 route_method = 0
Fri Apr 25 18:00:50 2014 us=79288 ip_win32_defined = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 ip_win32_type = 3
Fri Apr 25 18:00:50 2014 us=79288 dhcp_masq_offset = 0
Fri Apr 25 18:00:50 2014 us=79288 dhcp_lease_time = 31536000
Fri Apr 25 18:00:50 2014 us=79288 tap_sleep = 0
Fri Apr 25 18:00:50 2014 us=79288 dhcp_options = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 dhcp_renew = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 dhcp_pre_release = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 dhcp_release = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 domain = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 netbios_scope = '[UNDEF]'
Fri Apr 25 18:00:50 2014 us=79288 netbios_node_type = 0
Fri Apr 25 18:00:50 2014 us=79288 disable_nbt = DISABLED
Fri Apr 25 18:00:50 2014 us=79288 OpenVPN 2.3.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Apr 9 2014
Enter Management Password:
Fri Apr 25 18:00:50 2014 us=79288 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Fri Apr 25 18:00:50 2014 us=79288 Need hold release from management interface, waiting...
Fri Apr 25 18:00:50 2014 us=548038 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Fri Apr 25 18:00:50 2014 us=657413 MANAGEMENT: CMD 'state on'
Fri Apr 25 18:00:50 2014 us=657413 MANAGEMENT: CMD 'log all on'
Fri Apr 25 18:00:50 2014 us=829288 MANAGEMENT: CMD 'hold off'
Fri Apr 25 18:00:50 2014 us=844913 MANAGEMENT: CMD 'hold release'
Fri Apr 25 18:00:51 2014 us=16788 LZO compression initialized
Fri Apr 25 18:00:51 2014 us=16788 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 25 18:00:51 2014 us=16788 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Apr 25 18:00:51 2014 us=16788 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 25 18:00:51 2014 us=16788 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth SHA1,keysize
192,key-method 2,tls-client'
Fri Apr 25 18:00:51 2014 us=16788 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth
SHA1,keysize 192,key-method 2,tls-server'
Fri Apr 25 18:00:51 2014 us=16788 Local Options hash (VER=V4): '827c9ed0'
Fri Apr 25 18:00:51 2014 us=16788 Expected Remote Options hash (VER=V4): '974bef3f'
Fri Apr 25 18:00:51 2014 us=16788 UDPv4 link local: [undef]
Fri Apr 25 18:00:51 2014 us=16788 UDPv4 link remote: [AF_INET]##.##.##.##:1194
Fri Apr 25 18:00:51 2014 us=16788 MANAGEMENT: >STATE:1398441651,WAIT,,,
Fri Apr 25 18:01:51 2014 us=845913 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Apr 25 18:01:51 2014 us=845913 TLS Error: TLS handshake failed
Fri Apr 25 18:01:51 2014 us=845913 TCP/UDP: Closing socket
Fri Apr 25 18:01:51 2014 us=845913 SIGUSR1[soft,tls-error] received, process restarting
Fri Apr 25 18:01:51 2014 us=845913 MANAGEMENT: >STATE:1398441711,RECONNECTING,tls-error,,
Fri Apr 25 18:01:51 2014 us=845913 Restart pause, 2 second(s)
Fri Apr 25 18:01:53 2014 us=861537 Re-using SSL/TLS context
Fri Apr 25 18:01:53 2014 us=861537 LZO compression initialized
Fri Apr 25 18:01:53 2014 us=861537 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 25 18:01:53 2014 us=877166 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Apr 25 18:01:53 2014 us=877166 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 25 18:01:53 2014 us=877166 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth SHA1,keysize
192,key-method 2,tls-client'
Fri Apr 25 18:01:53 2014 us=892792 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth
SHA1,keysize 192,key-method 2,tls-server'
Fri Apr 25 18:01:53 2014 us=892792 Local Options hash (VER=V4): '827c9ed0'
Fri Apr 25 18:01:53 2014 us=892792 Expected Remote Options hash (VER=V4): '974bef3f'
Fri Apr 25 18:01:53 2014 us=892792 UDPv4 link local: [undef]
Fri Apr 25 18:01:53 2014 us=892792 UDPv4 link remote: [AF_INET]##.##.##.##:1194
Fri Apr 25 18:01:53 2014 us=892792 MANAGEMENT: >STATE:1398441713,WAIT,,,
Fri Apr 25 18:01:56 2014 us=564662 TCP/UDP: Closing socket
Fri Apr 25 18:01:56 2014 us=564662 SIGTERM[hard,] received, process exiting
Fri Apr 25 18:01:56 2014 us=564662 MANAGEMENT: >STATE:1398441716,EXITING,SIGTERM,,
WWWWWWW
