static ip's.... again

offroadaz

I know this topic has been beat to death on here. I really didnt want to post about it, but after 9 hours of struggling to get it working Im giving in and asking for help.

Im using the turnkey linux openvpn server. I need to assign static ip's to the clients that will be connecting

heres my server.conf

# PUBLIC_ADDRESS: 192.168.110.201 (used by openvpn-addclient)

port 1194
proto udp
dev tun

comp-lzo
keepalive 10 120

persist-key
persist-tun
user nobody
group nogroup

chroot /etc/openvpn/easy-rsa/keys/crl.jail
crl-verify crl.pem

ca /etc/openvpn/easy-rsa/keys/ca.crt
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
key /etc/openvpn/easy-rsa/keys/server.key
cert /etc/openvpn/easy-rsa/keys/server.crt

ifconfig-pool-persist /var/lib/openvpn/server.ipp
client-config-dir /etc/openvpn/server-ccd
status /var/log/openvpn/server.log
log-append /var/log/openvpn.log
verb 4

# virtual subnet unique for openvpn to draw client addresses from
# the server will be configured with x.x.x.1
# important: must not be used on your network
server 10.8.0.0 255.255.255.0

# configure clients to route all their traffic through the vpn
push "redirect-gateway def1 bypass-dhcp"

In my /etc/openvpn/server-ccd directory I have a file with the common name of the test client "tester"

ifconfig-push 10.8.0.26 10.8.0.25

Im at a loss as to why the windows box isnt picking up the static ip. Each time I connect it uses a dhcp address. Im sure this is an easy fix, I just cant figure out what it is

Thanks for your help

offroadaz

Here is the most recent log showing the connection

Fri Apr 25 22:47:43 2014 us=23614 Current Parameter Settings:
Fri Apr 25 22:47:43 2014 us=23694   config = '/etc/openvpn/server.conf'
Fri Apr 25 22:47:43 2014 us=23711   mode = 1
Fri Apr 25 22:47:43 2014 us=23724   persist_config = DISABLED
Fri Apr 25 22:47:43 2014 us=23737   persist_mode = 1
Fri Apr 25 22:47:43 2014 us=23750   show_ciphers = DISABLED
Fri Apr 25 22:47:43 2014 us=23762   show_digests = DISABLED
Fri Apr 25 22:47:43 2014 us=23774   show_engines = DISABLED
Fri Apr 25 22:47:43 2014 us=23786   genkey = DISABLED
Fri Apr 25 22:47:43 2014 us=23798   key_pass_file = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=23811   show_tls_ciphers = DISABLED
Fri Apr 25 22:47:43 2014 us=23823 Connection profiles [default]:
Fri Apr 25 22:47:43 2014 us=23836   proto = udp
Fri Apr 25 22:47:43 2014 us=23848   local = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=23860   local_port = 1194
Fri Apr 25 22:47:43 2014 us=23872   remote = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=23885   remote_port = 1194
Fri Apr 25 22:47:43 2014 us=23897   remote_float = DISABLED
Fri Apr 25 22:47:43 2014 us=23910   bind_defined = DISABLED
Fri Apr 25 22:47:43 2014 us=23921   bind_local = ENABLED
Fri Apr 25 22:47:43 2014 us=23934   connect_retry_seconds = 5
Fri Apr 25 22:47:43 2014 us=23946   connect_timeout = 10
Fri Apr 25 22:47:43 2014 us=23958   connect_retry_max = 0
Fri Apr 25 22:47:43 2014 us=23970   socks_proxy_server = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=23982   socks_proxy_port = 0
Fri Apr 25 22:47:43 2014 us=23995   socks_proxy_retry = DISABLED
Fri Apr 25 22:47:43 2014 us=24007 Connection profiles END
Fri Apr 25 22:47:43 2014 us=24019   remote_random = DISABLED
Fri Apr 25 22:47:43 2014 us=24031   ipchange = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24046   dev = 'tun'
Fri Apr 25 22:47:43 2014 us=24059   dev_type = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24071   dev_node = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24084   lladdr = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24097   topology = 1
Fri Apr 25 22:47:43 2014 us=24109   tun_ipv6 = DISABLED
Fri Apr 25 22:47:43 2014 us=24122   ifconfig_local = '10.8.0.1'
Fri Apr 25 22:47:43 2014 us=24134   ifconfig_remote_netmask = '10.8.0.2'
Fri Apr 25 22:47:43 2014 us=24146   ifconfig_noexec = DISABLED
Fri Apr 25 22:47:43 2014 us=24159   ifconfig_nowarn = DISABLED
Fri Apr 25 22:47:43 2014 us=24171   ifconfig_ipv6_local = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24183   ifconfig_ipv6_netbits = 0
Fri Apr 25 22:47:43 2014 us=24194   ifconfig_ipv6_remote = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24206   shaper = 0
Fri Apr 25 22:47:43 2014 us=24218   tun_mtu = 1500
Fri Apr 25 22:47:43 2014 us=24230   tun_mtu_defined = ENABLED
Fri Apr 25 22:47:43 2014 us=24242   link_mtu = 1500
Fri Apr 25 22:47:43 2014 us=24253   link_mtu_defined = DISABLED
Fri Apr 25 22:47:43 2014 us=24265   tun_mtu_extra = 0
Fri Apr 25 22:47:43 2014 us=24277   tun_mtu_extra_defined = DISABLED
Fri Apr 25 22:47:43 2014 us=24289   fragment = 0
Fri Apr 25 22:47:43 2014 us=24301   mtu_discover_type = -1
Fri Apr 25 22:47:43 2014 us=24313   mtu_test = 0
Fri Apr 25 22:47:43 2014 us=24324   mlock = DISABLED
Fri Apr 25 22:47:43 2014 us=24336   keepalive_ping = 10
Fri Apr 25 22:47:43 2014 us=24348   keepalive_timeout = 120
Fri Apr 25 22:47:43 2014 us=24360   inactivity_timeout = 0
Fri Apr 25 22:47:43 2014 us=24372   ping_send_timeout = 10
Fri Apr 25 22:47:43 2014 us=24385   ping_rec_timeout = 240
Fri Apr 25 22:47:43 2014 us=24396   ping_rec_timeout_action = 2
Fri Apr 25 22:47:43 2014 us=24408   ping_timer_remote = DISABLED
Fri Apr 25 22:47:43 2014 us=24420   remap_sigusr1 = 0
Fri Apr 25 22:47:43 2014 us=24432   explicit_exit_notification = 0
Fri Apr 25 22:47:43 2014 us=24445   persist_tun = ENABLED
Fri Apr 25 22:47:43 2014 us=24457   persist_local_ip = DISABLED
Fri Apr 25 22:47:43 2014 us=24468   persist_remote_ip = DISABLED
Fri Apr 25 22:47:43 2014 us=24480   persist_key = ENABLED
Fri Apr 25 22:47:43 2014 us=24492   mssfix = 1450
Fri Apr 25 22:47:43 2014 us=24504   passtos = DISABLED
Fri Apr 25 22:47:43 2014 us=24516   resolve_retry_seconds = 1000000000
Fri Apr 25 22:47:43 2014 us=24528   username = 'nobody'
Fri Apr 25 22:47:43 2014 us=24547   groupname = 'nogroup'
Fri Apr 25 22:47:43 2014 us=24561   chroot_dir = '/etc/openvpn/easy-rsa/keys/crl.jail'
Fri Apr 25 22:47:43 2014 us=24573   cd_dir = '/etc/openvpn'
Fri Apr 25 22:47:43 2014 us=24585   writepid = '/var/run/openvpn.server.pid'
Fri Apr 25 22:47:43 2014 us=24597   up_script = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24609   down_script = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24621   down_pre = DISABLED
Fri Apr 25 22:47:43 2014 us=24633   up_restart = DISABLED
Fri Apr 25 22:47:43 2014 us=24645   up_delay = DISABLED
Fri Apr 25 22:47:43 2014 us=24657   daemon = ENABLED
Fri Apr 25 22:47:43 2014 us=24669   inetd = 0
Fri Apr 25 22:47:43 2014 us=24703   log = ENABLED
Fri Apr 25 22:47:43 2014 us=24716   suppress_timestamps = DISABLED
Fri Apr 25 22:47:43 2014 us=24727   nice = 0
Fri Apr 25 22:47:43 2014 us=24737   verbosity = 4
Fri Apr 25 22:47:43 2014 us=24748   mute = 0
Fri Apr 25 22:47:43 2014 us=24759   gremlin = 0
Fri Apr 25 22:47:43 2014 us=24768   status_file = '/var/log/openvpn/server.log'
Fri Apr 25 22:47:43 2014 us=24777   status_file_version = 1
Fri Apr 25 22:47:43 2014 us=24786   status_file_update_freq = 60
Fri Apr 25 22:47:43 2014 us=24791   occ = ENABLED
Fri Apr 25 22:47:43 2014 us=24796   rcvbuf = 65536
Fri Apr 25 22:47:43 2014 us=24802   sndbuf = 65536
Fri Apr 25 22:47:43 2014 us=24807   sockflags = 0
Fri Apr 25 22:47:43 2014 us=24812   fast_io = DISABLED
Fri Apr 25 22:47:43 2014 us=24817   lzo = 7
Fri Apr 25 22:47:43 2014 us=24825   route_script = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24831   route_default_gateway = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24836   route_default_metric = 0
Fri Apr 25 22:47:43 2014 us=24842   route_noexec = DISABLED
Fri Apr 25 22:47:43 2014 us=24848   route_delay = 0
Fri Apr 25 22:47:43 2014 us=24855   route_delay_window = 30
Fri Apr 25 22:47:43 2014 us=24860   route_delay_defined = DISABLED
Fri Apr 25 22:47:43 2014 us=24866   route_nopull = DISABLED
Fri Apr 25 22:47:43 2014 us=24871   route_gateway_via_dhcp = DISABLED
Fri Apr 25 22:47:43 2014 us=24877   max_routes = 100
Fri Apr 25 22:47:43 2014 us=24882   allow_pull_fqdn = DISABLED
Fri Apr 25 22:47:43 2014 us=24890   route 10.8.0.0/255.255.255.0/nil/nil
Fri Apr 25 22:47:43 2014 us=24896   management_addr = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24901   management_port = 0
Fri Apr 25 22:47:43 2014 us=24907   management_user_pass = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24912   management_log_history_cache = 250
Fri Apr 25 22:47:43 2014 us=24918   management_echo_buffer_size = 100
Fri Apr 25 22:47:43 2014 us=24923   management_write_peer_info_file = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24929   management_client_user = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24934   management_client_group = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24939   management_flags = 0
Fri Apr 25 22:47:43 2014 us=24945   shared_secret_file = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=24950   key_direction = 1
Fri Apr 25 22:47:43 2014 us=24955   ciphername_defined = ENABLED
Fri Apr 25 22:47:43 2014 us=24961   ciphername = 'BF-CBC'
Fri Apr 25 22:47:43 2014 us=24966   authname_defined = ENABLED
Fri Apr 25 22:47:43 2014 us=24971   authname = 'SHA1'
Fri Apr 25 22:47:43 2014 us=24977   prng_hash = 'SHA1'
Fri Apr 25 22:47:43 2014 us=24982   prng_nonce_secret_len = 16
Fri Apr 25 22:47:43 2014 us=24987   keysize = 0
Fri Apr 25 22:47:43 2014 us=24992   engine = DISABLED
Fri Apr 25 22:47:43 2014 us=24998   replay = ENABLED
Fri Apr 25 22:47:43 2014 us=25003   mute_replay_warnings = DISABLED
Fri Apr 25 22:47:43 2014 us=25009   replay_window = 64
Fri Apr 25 22:47:43 2014 us=25052   replay_time = 15
Fri Apr 25 22:47:43 2014 us=25059   packet_id_file = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25064   use_iv = ENABLED
Fri Apr 25 22:47:43 2014 us=25074   test_crypto = DISABLED
Fri Apr 25 22:47:43 2014 us=25080   tls_server = ENABLED
Fri Apr 25 22:47:43 2014 us=25086   tls_client = DISABLED
Fri Apr 25 22:47:43 2014 us=25092   key_method = 2
Fri Apr 25 22:47:43 2014 us=25097   ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Fri Apr 25 22:47:43 2014 us=25103   ca_path = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25112   dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem'
Fri Apr 25 22:47:43 2014 us=25119   cert_file = '/etc/openvpn/easy-rsa/keys/server.crt'
Fri Apr 25 22:47:43 2014 us=25124   priv_key_file = '/etc/openvpn/easy-rsa/keys/server.key'
Fri Apr 25 22:47:43 2014 us=25130   pkcs12_file = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25135   cipher_list = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25141   tls_verify = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25146   tls_export_cert = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25151   tls_remote = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25157   crl_file = 'crl.pem'
Fri Apr 25 22:47:43 2014 us=25162   ns_cert_type = 0
Fri Apr 25 22:47:43 2014 us=25168   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25173   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25179   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25184   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25189   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25195   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25200   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25205   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25210   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25216   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25221   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25226   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25232   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25237   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25242   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25247   remote_cert_ku[i] = 0
Fri Apr 25 22:47:43 2014 us=25253   remote_cert_eku = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25258   tls_timeout = 2
Fri Apr 25 22:47:43 2014 us=25263   renegotiate_bytes = 0
Fri Apr 25 22:47:43 2014 us=25269   renegotiate_packets = 0
Fri Apr 25 22:47:43 2014 us=25274   renegotiate_seconds = 3600
Fri Apr 25 22:47:43 2014 us=25279   handshake_window = 60
Fri Apr 25 22:47:43 2014 us=25285   transition_window = 3600
Fri Apr 25 22:47:43 2014 us=25290   single_session = DISABLED
Fri Apr 25 22:47:43 2014 us=25295   push_peer_info = DISABLED
Fri Apr 25 22:47:43 2014 us=25301   tls_exit = DISABLED
Fri Apr 25 22:47:43 2014 us=25306   tls_auth_file = '/etc/openvpn/easy-rsa/keys/ta.key'
Fri Apr 25 22:47:43 2014 us=25312   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25317   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25323   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25328   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25333   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25338   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25344   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25349   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25354   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25360   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25365   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25370   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25375   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25381   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25386   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25391   pkcs11_protected_authentication = DISABLED
Fri Apr 25 22:47:43 2014 us=25397   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25402   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25408   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25413   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25419   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25424   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25430   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25435   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25443   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25449   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25454   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25460   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25465   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25470   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25476   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25481   pkcs11_private_mode = 00000000
Fri Apr 25 22:47:43 2014 us=25486   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25491   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25497   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25502   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25507   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25513   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25518   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25523   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25529   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25534   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25539   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25545   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25550   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25555   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25560   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25566   pkcs11_cert_private = DISABLED
Fri Apr 25 22:47:43 2014 us=25571   pkcs11_pin_cache_period = -1
Fri Apr 25 22:47:43 2014 us=25577   pkcs11_id = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25582   pkcs11_id_management = DISABLED
Fri Apr 25 22:47:43 2014 us=25588   server_network = 10.8.0.0
Fri Apr 25 22:47:43 2014 us=25595   server_netmask = 255.255.255.0
Fri Apr 25 22:47:43 2014 us=25606   server_network_ipv6 = ::
Fri Apr 25 22:47:43 2014 us=25612   server_netbits_ipv6 = 0
Fri Apr 25 22:47:43 2014 us=25618   server_bridge_ip = 0.0.0.0
Fri Apr 25 22:47:43 2014 us=25624   server_bridge_netmask = 0.0.0.0
Fri Apr 25 22:47:43 2014 us=25630   server_bridge_pool_start = 0.0.0.0
Fri Apr 25 22:47:43 2014 us=25636   server_bridge_pool_end = 0.0.0.0
Fri Apr 25 22:47:43 2014 us=25641   push_entry = 'redirect-gateway def1 bypass-dhcp'
Fri Apr 25 22:47:43 2014 us=25647   push_entry = 'route 10.8.0.1'
Fri Apr 25 22:47:43 2014 us=25652   push_entry = 'topology net30'
Fri Apr 25 22:47:43 2014 us=25658   push_entry = 'ping 10'
Fri Apr 25 22:47:43 2014 us=25663   push_entry = 'ping-restart 120'
Fri Apr 25 22:47:43 2014 us=25669   ifconfig_pool_defined = ENABLED
Fri Apr 25 22:47:43 2014 us=25675   ifconfig_pool_start = 10.8.0.4
Fri Apr 25 22:47:43 2014 us=25681   ifconfig_pool_end = 10.8.0.251
Fri Apr 25 22:47:43 2014 us=25689   ifconfig_pool_netmask = 0.0.0.0
Fri Apr 25 22:47:43 2014 us=25696   ifconfig_pool_persist_filename = '/var/lib/openvpn/server.ipp'
Fri Apr 25 22:47:43 2014 us=25701   ifconfig_pool_persist_refresh_freq = 600
Fri Apr 25 22:47:43 2014 us=25707   ifconfig_ipv6_pool_defined = DISABLED
Fri Apr 25 22:47:43 2014 us=25713   ifconfig_ipv6_pool_base = ::
Fri Apr 25 22:47:43 2014 us=25721   ifconfig_ipv6_pool_netbits = 0
Fri Apr 25 22:47:43 2014 us=25727   n_bcast_buf = 256
Fri Apr 25 22:47:43 2014 us=25732   tcp_queue_limit = 64
Fri Apr 25 22:47:43 2014 us=25738   real_hash_size = 256
Fri Apr 25 22:47:43 2014 us=25743   virtual_hash_size = 256
Fri Apr 25 22:47:43 2014 us=25749   client_connect_script = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25754   learn_address_script = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25759   client_disconnect_script = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25765   client_config_dir = '/etc/openvpn/server-ccd'
Fri Apr 25 22:47:43 2014 us=25770   ccd_exclusive = DISABLED
Fri Apr 25 22:47:43 2014 us=25775   tmp_dir = '/tmp'
Fri Apr 25 22:47:43 2014 us=25781   push_ifconfig_defined = DISABLED
Fri Apr 25 22:47:43 2014 us=25787   push_ifconfig_local = 0.0.0.0
Fri Apr 25 22:47:43 2014 us=25796   push_ifconfig_remote_netmask = 0.0.0.0
Fri Apr 25 22:47:43 2014 us=25802   push_ifconfig_ipv6_defined = DISABLED
Fri Apr 25 22:47:43 2014 us=25808   push_ifconfig_ipv6_local = ::/0
Fri Apr 25 22:47:43 2014 us=25814   push_ifconfig_ipv6_remote = ::
Fri Apr 25 22:47:43 2014 us=25819   enable_c2c = DISABLED
Fri Apr 25 22:47:43 2014 us=25825   duplicate_cn = DISABLED
Fri Apr 25 22:47:43 2014 us=25830   cf_max = 0
Fri Apr 25 22:47:43 2014 us=25835   cf_per = 0
Fri Apr 25 22:47:43 2014 us=25841   max_clients = 1024
Fri Apr 25 22:47:43 2014 us=25846   max_routes_per_client = 256
Fri Apr 25 22:47:43 2014 us=25851   auth_user_pass_verify_script = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25857   auth_user_pass_verify_script_via_file = DISABLED
Fri Apr 25 22:47:43 2014 us=25862   ssl_flags = 0
Fri Apr 25 22:47:43 2014 us=25868   port_share_host = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25873   port_share_port = 0
Fri Apr 25 22:47:43 2014 us=25878   client = DISABLED
Fri Apr 25 22:47:43 2014 us=25884   pull = DISABLED
Fri Apr 25 22:47:43 2014 us=25889   auth_user_pass_file = '[UNDEF]'
Fri Apr 25 22:47:43 2014 us=25899 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun  4 2013
Fri Apr 25 22:47:43 2014 us=26031 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Apr 25 22:47:43 2014 us=31178 Diffie-Hellman initialized with 1024 bit key
Fri Apr 25 22:47:43 2014 us=35275 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Fri Apr 25 22:47:43 2014 us=35318 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 22:47:43 2014 us=35339 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 22:47:43 2014 us=35362 TLS-Auth MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri Apr 25 22:47:43 2014 us=35396 Socket Buffers: R=[229376->131072] S=[229376->131072]
Fri Apr 25 22:47:43 2014 us=35559 ROUTE default_gateway=192.168.4.2
Fri Apr 25 22:47:43 2014 us=39050 TUN/TAP device tun0 opened
Fri Apr 25 22:47:43 2014 us=39073 TUN/TAP TX queue length set to 100
Fri Apr 25 22:47:43 2014 us=39087 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Apr 25 22:47:43 2014 us=39103 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Fri Apr 25 22:47:43 2014 us=40219 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Fri Apr 25 22:47:43 2014 us=41740 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 25 22:47:43 2014 us=43922 chroot to '/etc/openvpn/easy-rsa/keys/crl.jail' and cd to '/' succeeded
Fri Apr 25 22:47:43 2014 us=45179 GID set to nogroup
Fri Apr 25 22:47:43 2014 us=45192 UID set to nobody
Fri Apr 25 22:47:43 2014 us=45212 UDPv4 link local (bound): [undef]
Fri Apr 25 22:47:43 2014 us=45222 UDPv4 link remote: [undef]
Fri Apr 25 22:47:43 2014 us=45233 MULTI: multi_init called, r=256 v=256
Fri Apr 25 22:47:43 2014 us=45296 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Fri Apr 25 22:47:43 2014 us=46091 ifconfig_pool_read(), in='tester,10.8.0.4', TODO: IPv6
Fri Apr 25 22:47:43 2014 us=46115 succeeded -> ifconfig_pool_set()
Fri Apr 25 22:47:43 2014 us=46126 IFCONFIG POOL LIST
Fri Apr 25 22:47:43 2014 us=46136 tester,10.8.0.4
Fri Apr 25 22:47:43 2014 us=46167 Initialization Sequence Completed
Fri Apr 25 22:48:04 2014 us=953563 MULTI: multi_create_instance called
Fri Apr 25 22:48:04 2014 us=953666 192.168.110.150:60378 Re-using SSL/TLS context
Fri Apr 25 22:48:04 2014 us=953726 192.168.110.150:60378 LZO compression initialized
Fri Apr 25 22:48:04 2014 us=953970 192.168.110.150:60378 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri Apr 25 22:48:04 2014 us=953994 192.168.110.150:60378 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 25 22:48:04 2014 us=954060 192.168.110.150:60378 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Fri Apr 25 22:48:04 2014 us=954090 192.168.110.150:60378 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Fri Apr 25 22:48:04 2014 us=954138 192.168.110.150:60378 Local Options hash (VER=V4): '14168603'
Fri Apr 25 22:48:04 2014 us=954160 192.168.110.150:60378 Expected Remote Options hash (VER=V4): '504e774e'
Fri Apr 25 22:48:04 2014 us=954219 192.168.110.150:60378 TLS: Initial packet from [AF_INET]192.168.110.150:60378, sid=574edaf5 6bdd594f
Fri Apr 25 22:48:04 2014 us=994796 192.168.110.150:60378 CRL CHECK OK: /C=US/ST=CA/L=San_Francisco/O=TurnKey_Linux/OU=OpenVPN/CN=server/name=openvpn/emailAddress=admin@example.com
Fri Apr 25 22:48:04 2014 us=994876 192.168.110.150:60378 VERIFY OK: depth=1, /C=US/ST=CA/L=San_Francisco/O=TurnKey_Linux/OU=OpenVPN/CN=server/name=openvpn/emailAddress=admin@example.com
Fri Apr 25 22:48:04 2014 us=995151 192.168.110.150:60378 CRL CHECK OK: /C=US/ST=CA/L=San_Francisco/O=TurnKey_Linux/OU=OpenVPN/CN=tester/name=openvpn/emailAddress=tester
Fri Apr 25 22:48:04 2014 us=995196 192.168.110.150:60378 VERIFY OK: depth=0, /C=US/ST=CA/L=San_Francisco/O=TurnKey_Linux/OU=OpenVPN/CN=tester/name=openvpn/emailAddress=tester
Fri Apr 25 22:48:05 2014 us=28393 192.168.110.150:60378 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 25 22:48:05 2014 us=28442 192.168.110.150:60378 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 22:48:05 2014 us=28490 192.168.110.150:60378 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 25 22:48:05 2014 us=28500 192.168.110.150:60378 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 25 22:48:05 2014 us=29641 192.168.110.150:60378 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 25 22:48:05 2014 us=29689 192.168.110.150:60378 [tester] Peer Connection Initiated with [AF_INET]192.168.110.150:60378
Fri Apr 25 22:48:05 2014 us=29752 tester/192.168.110.150:60378 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=2e00::98eb:ea0f:d07f:0
Fri Apr 25 22:48:05 2014 us=29825 tester/192.168.110.150:60378 MULTI: Learn: 10.8.0.6 -> tester/192.168.110.150:60378
Fri Apr 25 22:48:05 2014 us=29846 tester/192.168.110.150:60378 MULTI: primary virtual IP for tester/192.168.110.150:60378: 10.8.0.6
Fri Apr 25 22:48:07 2014 us=77066 tester/192.168.110.150:60378 PUSH: Received control message: 'PUSH_REQUEST'
Fri Apr 25 22:48:07 2014 us=77122 tester/192.168.110.150:60378 send_push_reply(): safe_cap=960
Fri Apr 25 22:48:07 2014 us=77173 tester/192.168.110.150:60378 SENT CONTROL [tester]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)

offroadaz

and just to verify the CN

openssl x509 -subject -noout -in tester.crt
subject= /C=US/ST=CA/L=San Francisco/O=TurnKey Linux/OU=OpenVPN/CN=tester/name=openvpn/emailAddress=tester