OpenVPN gets disconnected if no or small activity

s7r

Hi,
Need some help please. I have configured my own OpenVPN server running the latest community release.
Protocol is TCP. The server has one public IP address and I use NAT with the VPN clients so the traffic of the VPN clients can be routed via that server (this is the purpose of the openvpn server).

I currently have 3 clients, my mobile phone (Android running OpenVPN for Android), laptop running the latest community release with GUI on Windows 8.1 pro enterprise and another mobile phone, Samsung S3 with Android running OpenVPN for Android. Every client connects just fine. Except they get disconnected after some time of idle. I know mobiles are normal, because they change from Wi-Fi to 4G data connection, etc. so I don't have a problem there. But what about the laptop with stable internet connection (utp cable plugged in). On the laptop with Windows 8.1 I have to run OpenVPN gui as administrator in order to be able to add routes and modify the routing table, otherwise it won't work (?is this normal?).

I use on both server and all clients:
persist-key
persist-tun
keepalive 60 180

Here is what the log was saying on the Windows 8.1 laptop. I connected at 4 AM, used laptop for 40 mins and left:

Sun Jul 20 04:14:19 2014 Route addition via IPAPI succeeded [adaptive]
Sun Jul 20 04:14:19 2014 Initialization Sequence Completed
Sun Jul 20 04:14:19 2014 MANAGEMENT: >STATE:1405818859,CONNECTED,SUCCESS,10.8.0.14,<public IP of the server>
Sun Jul 20 05:14:10 2014 TLS: soft reset sec=0 bytes=21463796/0 pkts=38061/0
Sun Jul 20 05:14:12 2014 VERIFY OK: depth=1, <boring certificate metadata>
Sun Jul 20 05:14:12 2014 VERIFY OK: nsCertType=SERVER
Sun Jul 20 05:14:12 2014 VERIFY OK: depth=0, <boring certificate metadata>
Sun Jul 20 05:14:15 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jul 20 05:14:15 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jul 20 05:14:15 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jul 20 05:14:15 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jul 20 05:14:15 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Jul 20 06:14:10 2014 TLS: tls_process: killed expiring key
Sun Jul 20 06:14:15 2014 TLS: soft reset sec=0 bytes=13859/0 pkts=141/0
Sun Jul 20 06:14:17 2014 VERIFY OK: depth=1, <boring certificate metadata>
Sun Jul 20 06:14:17 2014 VERIFY OK: nsCertType=SERVER
Sun Jul 20 06:14:17 2014 VERIFY OK: depth=0, <boring certificate metadata>
Sun Jul 20 06:14:20 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jul 20 06:14:20 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jul 20 06:14:20 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jul 20 06:14:20 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jul 20 06:14:20 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sun Jul 20 07:14:15 2014 TLS: tls_process: killed expiring key
Sun Jul 20 07:14:21 2014 NOTE: --mute triggered...

This was the latest log entry. I got back at the laptop at about 14:10 and the OpenVPN in tray was saying it's connected, the TAP adapter said it was connected but the VPN was not working (couldn't load any webpages or ping, and traceroute command would go through the normal gateway, default ISP not VPN). I clicked Reconnect and it reloaded, worked just fine... Like this:

Sun Jul 20 14:11:33 2014 65 variation(s) on previous 20 message(s) suppressed by --mute
Sun Jul 20 14:11:33 2014 MANAGEMENT: CMD 'signal SIGHUP'

I can add the fact that I didn't leave any open applications which could use the network, just openvpn running in tray.
Suggestions?

s7r

Thanks for the reply.
Here is the server.conf:

local <public ip of the server>
port 443
proto tcp
dev tun
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/server.crt
key /etc/openvpn/certs/server.key
dh /etc/openvpn/certs/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.8.0.1"
keepalive 60 180
tls-auth /etc/openvpn/certs/ta.key 0
comp-lzo
max-clients 10
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
mute 20

and here is my client.conf:

client
dev tun
remote <public ip> 443
proto tcp
comp-lzo yes
nobind
auth-nocache
persist-key
persist-tun
ns-cert-type server
keepalive 60 180
verb 3
mute 20
<ca>certificate</ca>
<cert>certificate</cert>
<key>key</key>
tls-client
key-direction 1
<tls-auth>ta.keycontent</tls-auth>

What could be wrong? It just happened again, disconnected after 2 hours of unattended and moved to my real IP ... and now i had applications running connected to the internet like irc.

s7r

All differences I can see is:
'tls-server' is currently not included in server.conf, and just the client has 'tls-client' but works just fine to connect and etc.

the server.conf has 'comp lzo' while the client has 'comp lzo yes'

As a general rule, it stays only for 2 key negotiations, .e.g. it kills the expired keys and generates new with no problem 2 times, third time it freezes... but doesn't disconnect. just internet is not usuable any more and computer jumps the real IP address from the ISP.

s7r

debbie10t,
I have done the following:
modified on server client 'verb 4' and removed 'mute' line for a more explicit log. I haven't modified the server config in order not to affect the other running clients which had work to do inside the vpn. After this modification, I have started OpenVPN on the client ( Windows 8.1 Pro laptop ) at about 3 A.M. Got back at the laptop at 12 P.M (about 9 hours later) when the traffic was not routed via the VPN any more, the computer was using its real IP but OpenVPN gui was still showing as 'connected' in tray. here is the log:

Wed Jul 23 02:59:52 2014 us=590061 Current Parameter Settings:
Wed Jul 23 02:59:52 2014 us=590061   config = 'srv32.ovpn'
Wed Jul 23 02:59:52 2014 us=590061   mode = 0
Wed Jul 23 02:59:52 2014 us=590061   show_ciphers = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   show_digests = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   show_engines = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   genkey = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   key_pass_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   show_tls_ciphers = DISABLED
Wed Jul 23 02:59:52 2014 us=590061 Connection profiles [default]:
Wed Jul 23 02:59:52 2014 us=590061   proto = tcp-client
Wed Jul 23 02:59:52 2014 us=590061   local = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   local_port = 0
Wed Jul 23 02:59:52 2014 us=590061   remote = '<public ip of the server>'
Wed Jul 23 02:59:52 2014 us=590061   remote_port = 443
Wed Jul 23 02:59:52 2014 us=590061   remote_float = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   bind_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   bind_local = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   connect_retry_seconds = 5
Wed Jul 23 02:59:52 2014 us=590061   connect_timeout = 10
Wed Jul 23 02:59:52 2014 us=590061   connect_retry_max = 0
Wed Jul 23 02:59:52 2014 us=590061   socks_proxy_server = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   socks_proxy_port = 0
Wed Jul 23 02:59:52 2014 us=590061   socks_proxy_retry = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   tun_mtu = 1500
Wed Jul 23 02:59:52 2014 us=590061   tun_mtu_defined = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   link_mtu = 1500
Wed Jul 23 02:59:52 2014 us=590061   link_mtu_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   tun_mtu_extra = 0
Wed Jul 23 02:59:52 2014 us=590061   tun_mtu_extra_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   mtu_discover_type = -1
Wed Jul 23 02:59:52 2014 us=590061   fragment = 0
Wed Jul 23 02:59:52 2014 us=590061   mssfix = 1450
Wed Jul 23 02:59:52 2014 us=590061   explicit_exit_notification = 0
Wed Jul 23 02:59:52 2014 us=590061 Connection profiles END
Wed Jul 23 02:59:52 2014 us=590061   remote_random = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   ipchange = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   dev = 'tun'
Wed Jul 23 02:59:52 2014 us=590061   dev_type = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   dev_node = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   lladdr = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   topology = 1
Wed Jul 23 02:59:52 2014 us=590061   tun_ipv6 = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   ifconfig_local = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   ifconfig_remote_netmask = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   ifconfig_noexec = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   ifconfig_nowarn = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   ifconfig_ipv6_local = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   ifconfig_ipv6_netbits = 0
Wed Jul 23 02:59:52 2014 us=590061   ifconfig_ipv6_remote = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   shaper = 0
Wed Jul 23 02:59:52 2014 us=590061   mtu_test = 0
Wed Jul 23 02:59:52 2014 us=590061   mlock = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   keepalive_ping = 60
Wed Jul 23 02:59:52 2014 us=590061   keepalive_timeout = 180
Wed Jul 23 02:59:52 2014 us=590061   inactivity_timeout = 0
Wed Jul 23 02:59:52 2014 us=590061   ping_send_timeout = 60
Wed Jul 23 02:59:52 2014 us=590061   ping_rec_timeout = 180
Wed Jul 23 02:59:52 2014 us=590061   ping_rec_timeout_action = 2
Wed Jul 23 02:59:52 2014 us=590061   ping_timer_remote = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   remap_sigusr1 = 0
Wed Jul 23 02:59:52 2014 us=590061   persist_tun = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   persist_local_ip = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   persist_remote_ip = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   persist_key = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   passtos = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   resolve_retry_seconds = 1000000000
Wed Jul 23 02:59:52 2014 us=590061   username = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   groupname = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   chroot_dir = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   cd_dir = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   writepid = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   up_script = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   down_script = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   down_pre = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   up_restart = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   up_delay = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   daemon = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   inetd = 0
Wed Jul 23 02:59:52 2014 us=590061   log = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   suppress_timestamps = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   nice = 0
Wed Jul 23 02:59:52 2014 us=590061   verbosity = 4
Wed Jul 23 02:59:52 2014 us=590061   mute = 0
Wed Jul 23 02:59:52 2014 us=590061   status_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   status_file_version = 1
Wed Jul 23 02:59:52 2014 us=590061   status_file_update_freq = 60
Wed Jul 23 02:59:52 2014 us=590061   occ = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   rcvbuf = 0
Wed Jul 23 02:59:52 2014 us=590061   sndbuf = 0
Wed Jul 23 02:59:52 2014 us=590061   sockflags = 0
Wed Jul 23 02:59:52 2014 us=590061   fast_io = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   lzo = 3
Wed Jul 23 02:59:52 2014 us=590061   route_script = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   route_default_gateway = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   route_default_metric = 0
Wed Jul 23 02:59:52 2014 us=590061   route_noexec = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   route_delay = 5
Wed Jul 23 02:59:52 2014 us=590061   route_delay_window = 30
Wed Jul 23 02:59:52 2014 us=590061   route_delay_defined = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   route_nopull = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   route_gateway_via_dhcp = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   max_routes = 100
Wed Jul 23 02:59:52 2014 us=590061   allow_pull_fqdn = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   management_addr = '127.0.0.1'
Wed Jul 23 02:59:52 2014 us=590061   management_port = 25340
Wed Jul 23 02:59:52 2014 us=590061   management_user_pass = 'stdin'
Wed Jul 23 02:59:52 2014 us=590061   management_log_history_cache = 250
Wed Jul 23 02:59:52 2014 us=590061   management_echo_buffer_size = 100
Wed Jul 23 02:59:52 2014 us=590061   management_write_peer_info_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   management_client_user = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   management_client_group = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   management_flags = 6
Wed Jul 23 02:59:52 2014 us=590061   shared_secret_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   key_direction = 2
Wed Jul 23 02:59:52 2014 us=590061   ciphername_defined = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   ciphername = 'BF-CBC'
Wed Jul 23 02:59:52 2014 us=590061   authname_defined = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   authname = 'SHA1'
Wed Jul 23 02:59:52 2014 us=590061   prng_hash = 'SHA1'
Wed Jul 23 02:59:52 2014 us=590061   prng_nonce_secret_len = 16
Wed Jul 23 02:59:52 2014 us=590061   keysize = 0
Wed Jul 23 02:59:52 2014 us=590061   engine = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   replay = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   mute_replay_warnings = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   replay_window = 64
Wed Jul 23 02:59:52 2014 us=590061   replay_time = 15
Wed Jul 23 02:59:52 2014 us=590061   packet_id_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   use_iv = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   test_crypto = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   tls_server = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   tls_client = ENABLED
Wed Jul 23 02:59:52 2014 us=590061   key_method = 2
Wed Jul 23 02:59:52 2014 us=590061   ca_file = '[[INLINE]]'
Wed Jul 23 02:59:52 2014 us=590061   ca_path = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   dh_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   cert_file = '[[INLINE]]'
Wed Jul 23 02:59:52 2014 us=590061   priv_key_file = '[[INLINE]]'
Wed Jul 23 02:59:52 2014 us=590061   pkcs12_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   cryptoapi_cert = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   cipher_list = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   tls_verify = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   tls_export_cert = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   verify_x509_type = 0
Wed Jul 23 02:59:52 2014 us=590061   verify_x509_name = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   crl_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   ns_cert_type = 1
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_ku[i] = 0
Wed Jul 23 02:59:52 2014 us=590061   remote_cert_eku = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   ssl_flags = 0
Wed Jul 23 02:59:52 2014 us=590061   tls_timeout = 2
Wed Jul 23 02:59:52 2014 us=590061   renegotiate_bytes = 0
Wed Jul 23 02:59:52 2014 us=590061   renegotiate_packets = 0
Wed Jul 23 02:59:52 2014 us=590061   renegotiate_seconds = 3600
Wed Jul 23 02:59:52 2014 us=590061   handshake_window = 60
Wed Jul 23 02:59:52 2014 us=590061   transition_window = 3600
Wed Jul 23 02:59:52 2014 us=590061   single_session = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   push_peer_info = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   tls_exit = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   tls_auth_file = '[[INLINE]]'
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_protected_authentication = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_private_mode = 00000000
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_cert_private = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_pin_cache_period = -1
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_id = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=590061   pkcs11_id_management = DISABLED
Wed Jul 23 02:59:52 2014 us=590061   server_network = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=590061   server_netmask = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   server_network_ipv6 = ::
Wed Jul 23 02:59:52 2014 us=605686   server_netbits_ipv6 = 0
Wed Jul 23 02:59:52 2014 us=605686   server_bridge_ip = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   server_bridge_netmask = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   server_bridge_pool_start = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   server_bridge_pool_end = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_pool_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_pool_start = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_pool_end = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_pool_netmask = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_pool_persist_filename = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_pool_persist_refresh_freq = 600
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_ipv6_pool_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_ipv6_pool_base = ::
Wed Jul 23 02:59:52 2014 us=605686   ifconfig_ipv6_pool_netbits = 0
Wed Jul 23 02:59:52 2014 us=605686   n_bcast_buf = 256
Wed Jul 23 02:59:52 2014 us=605686   tcp_queue_limit = 64
Wed Jul 23 02:59:52 2014 us=605686   real_hash_size = 256
Wed Jul 23 02:59:52 2014 us=605686   virtual_hash_size = 256
Wed Jul 23 02:59:52 2014 us=605686   client_connect_script = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   learn_address_script = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   client_disconnect_script = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   client_config_dir = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   ccd_exclusive = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   tmp_dir = 'C:\Users\Cocainum\AppData\Local\Temp\'
Wed Jul 23 02:59:52 2014 us=605686   push_ifconfig_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   push_ifconfig_local = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   push_ifconfig_remote_netmask = 0.0.0.0
Wed Jul 23 02:59:52 2014 us=605686   push_ifconfig_ipv6_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   push_ifconfig_ipv6_local = ::/0
Wed Jul 23 02:59:52 2014 us=605686   push_ifconfig_ipv6_remote = ::
Wed Jul 23 02:59:52 2014 us=605686   enable_c2c = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   duplicate_cn = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   cf_max = 0
Wed Jul 23 02:59:52 2014 us=605686   cf_per = 0
Wed Jul 23 02:59:52 2014 us=605686   max_clients = 1024
Wed Jul 23 02:59:52 2014 us=605686   max_routes_per_client = 256
Wed Jul 23 02:59:52 2014 us=605686   auth_user_pass_verify_script = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   auth_user_pass_verify_script_via_file = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   client = ENABLED
Wed Jul 23 02:59:52 2014 us=605686   pull = ENABLED
Wed Jul 23 02:59:52 2014 us=605686   auth_user_pass_file = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   show_net_up = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   route_method = 0
Wed Jul 23 02:59:52 2014 us=605686   ip_win32_defined = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   ip_win32_type = 3
Wed Jul 23 02:59:52 2014 us=605686   dhcp_masq_offset = 0
Wed Jul 23 02:59:52 2014 us=605686   dhcp_lease_time = 31536000
Wed Jul 23 02:59:52 2014 us=605686   tap_sleep = 0
Wed Jul 23 02:59:52 2014 us=605686   dhcp_options = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   dhcp_renew = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   dhcp_pre_release = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   dhcp_release = DISABLED
Wed Jul 23 02:59:52 2014 us=605686   domain = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   netbios_scope = '[UNDEF]'
Wed Jul 23 02:59:52 2014 us=605686   netbios_node_type = 0
Wed Jul 23 02:59:52 2014 us=605686   disable_nbt = DISABLED
Wed Jul 23 02:59:52 2014 us=605686 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Wed Jul 23 02:59:52 2014 us=605686 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Wed Jul 23 02:59:52 2014 us=605686 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Jul 23 02:59:52 2014 us=605686 Need hold release from management interface, waiting...
Wed Jul 23 02:59:53 2014 us=90137 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Jul 23 02:59:53 2014 us=199512 MANAGEMENT: CMD 'state on'
Wed Jul 23 02:59:53 2014 us=199512 MANAGEMENT: CMD 'log all on'
Wed Jul 23 02:59:53 2014 us=355688 MANAGEMENT: CMD 'hold off'
Wed Jul 23 02:59:53 2014 us=355688 MANAGEMENT: CMD 'hold release'
Wed Jul 23 02:59:53 2014 us=511939 Control Channel Authentication: tls-auth using INLINE static key file
Wed Jul 23 02:59:53 2014 us=511939 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 02:59:53 2014 us=511939 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 02:59:53 2014 us=511939 LZO compression initialized
Wed Jul 23 02:59:53 2014 us=511939 Control Channel MTU parms [ L:1544 D:168 EF:68 EB:0 ET:0 EL:0 ]
Wed Jul 23 02:59:53 2014 us=511939 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed Jul 23 02:59:53 2014 us=511939 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Jul 23 02:59:53 2014 us=511939 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Wed Jul 23 02:59:53 2014 us=511939 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Wed Jul 23 02:59:53 2014 us=511939 Local Options hash (VER=V4): 'ee93268d'
Wed Jul 23 02:59:53 2014 us=511939 Expected Remote Options hash (VER=V4): 'bd577cd1'
Wed Jul 23 02:59:53 2014 us=511939 Attempting to establish TCP connection with [AF_INET]<publi IP of the server>:443
Wed Jul 23 02:59:53 2014 us=511939 MANAGEMENT: >STATE:1406073593,TCP_CONNECT,,,
Wed Jul 23 02:59:53 2014 us=605763 TCP connection established with [AF_INET]<public IP of the server>:443
Wed Jul 23 02:59:53 2014 us=605763 TCPv4_CLIENT link local: [undef]
Wed Jul 23 02:59:53 2014 us=605763 TCPv4_CLIENT link remote: [AF_INET]<public IP of the server>:443
Wed Jul 23 02:59:53 2014 us=605763 MANAGEMENT: >STATE:1406073593,WAIT,,,
Wed Jul 23 02:59:53 2014 us=699458 MANAGEMENT: >STATE:1406073593,AUTH,,,
Wed Jul 23 02:59:53 2014 us=699458 TLS: Initial packet from [AF_INET]<public IP of the server>:443, sid=44087d86 89d64f10
Wed Jul 23 02:59:55 2014 us=605760 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 02:59:55 2014 us=605760 VERIFY OK: nsCertType=SERVER
Wed Jul 23 02:59:55 2014 us=605760 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 02:59:58 2014 us=683892 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 02:59:58 2014 us=683892 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 02:59:58 2014 us=683892 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 02:59:58 2014 us=683892 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 02:59:58 2014 us=715067 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 02:59:58 2014 us=715067 [a01ac8f18f] Peer Connection Initiated with [AF_INET]<public IP of the server>:443
Wed Jul 23 02:59:59 2014 us=933894 MANAGEMENT: >STATE:1406073599,GET_CONFIG,,,
Wed Jul 23 03:00:01 2014 us=144192 SENT CONTROL [a01ac8f18f]: 'PUSH_REQUEST' (status=1)
Wed Jul 23 03:00:01 2014 us=362928 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.8.0.1,route 10.8.0.1,topology net30,ping 60,ping-restart 180,ifconfig 10.8.0.14 10.8.0.13'
Wed Jul 23 03:00:01 2014 us=362928 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul 23 03:00:01 2014 us=362928 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul 23 03:00:01 2014 us=362928 OPTIONS IMPORT: route options modified
Wed Jul 23 03:00:01 2014 us=362928 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jul 23 03:00:01 2014 us=394113 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Jul 23 03:00:01 2014 us=394113 MANAGEMENT: >STATE:1406073601,ASSIGN_IP,,10.8.0.14,
Wed Jul 23 03:00:01 2014 us=394113 open_tun, tt->ipv6=0
Wed Jul 23 03:00:01 2014 us=394113 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{B24EDE94-C795-4308-AC06-6C8D995D3289}.tap
Wed Jul 23 03:00:01 2014 us=394113 TAP-Windows Driver Version 9.9 
Wed Jul 23 03:00:01 2014 us=394113 TAP-Windows MTU=1500
Wed Jul 23 03:00:02 2014 us=394193 NETSH: C:\Windows\system32\netsh.exe interface ip set address Local Area Connection dhcp
Wed Jul 23 03:00:03 2014 us=208971 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.14/255.255.255.252 on interface {B24EDE94-C795-4308-AC06-6C8D995D3289} [DHCP-serv: 10.8.0.13, lease-time: 31536000]
Wed Jul 23 03:00:03 2014 us=208971 DHCP option string: 06040a08 0001
Wed Jul 23 03:00:03 2014 us=208971 Successful ARP Flush on interface [15] {B24EDE94-C795-4308-AC06-6C8D995D3289}
Wed Jul 23 03:00:08 2014 us=245210 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed Jul 23 03:00:08 2014 us=245210 C:\Windows\system32\route.exe ADD <public IP of the server> MASK 255.255.255.255 192.168.1.1
Wed Jul 23 03:00:08 2014 us=245210 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Wed Jul 23 03:00:08 2014 us=245210 Route addition via IPAPI succeeded [adaptive]
Wed Jul 23 03:00:08 2014 us=245210 C:\Windows\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.255 192.168.1.1 IF 4
Wed Jul 23 03:00:08 2014 us=245210 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Wed Jul 23 03:00:08 2014 us=245210 Route addition via IPAPI succeeded [adaptive]
Wed Jul 23 03:00:08 2014 us=245210 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.13
Wed Jul 23 03:00:08 2014 us=245210 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jul 23 03:00:08 2014 us=245210 Route addition via IPAPI succeeded [adaptive]
Wed Jul 23 03:00:08 2014 us=245210 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.13
Wed Jul 23 03:00:08 2014 us=245210 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jul 23 03:00:08 2014 us=245210 Route addition via IPAPI succeeded [adaptive]
Wed Jul 23 03:00:08 2014 us=245210 MANAGEMENT: >STATE:1406073608,ADD_ROUTES,,,
Wed Jul 23 03:00:08 2014 us=245210 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.13
Wed Jul 23 03:00:08 2014 us=260768 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Jul 23 03:00:08 2014 us=260768 Route addition via IPAPI succeeded [adaptive]
Wed Jul 23 03:00:08 2014 us=260768 Initialization Sequence Completed
Wed Jul 23 03:00:08 2014 us=260768 MANAGEMENT: >STATE:1406073608,CONNECTED,SUCCESS,10.8.0.14,<public IP of the server>
Wed Jul 23 03:59:58 2014 us=874437 TLS: soft reset sec=0 bytes=3451550/0 pkts=6053/0
Wed Jul 23 04:00:01 2014 us=93188 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 04:00:01 2014 us=93188 VERIFY OK: nsCertType=SERVER
Wed Jul 23 04:00:01 2014 us=93188 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 04:00:04 2014 us=155691 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 04:00:04 2014 us=155691 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 04:00:04 2014 us=155691 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 04:00:04 2014 us=155691 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 04:00:04 2014 us=155691 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 04:59:58 2014 us=235255 TLS: tls_process: killed expiring key
Wed Jul 23 05:00:06 2014 us=297764 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 05:00:06 2014 us=297764 VERIFY OK: nsCertType=SERVER
Wed Jul 23 05:00:06 2014 us=297764 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 05:00:09 2014 us=375891 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 05:00:09 2014 us=375891 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 05:00:09 2014 us=375891 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 05:00:09 2014 us=375891 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 05:00:09 2014 us=375891 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 06:00:04 2014 us=881100 TLS: tls_process: killed expiring key
Wed Jul 23 06:00:11 2014 us=37355 VERIFY OK: depth=1, ,certificate metadata>
Wed Jul 23 06:00:11 2014 us=37355 VERIFY OK: nsCertType=SERVER
Wed Jul 23 06:00:11 2014 us=37355 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 06:00:14 2014 us=21734 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 06:00:14 2014 us=21734 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 06:00:14 2014 us=21734 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 06:00:14 2014 us=21734 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 06:00:14 2014 us=21734 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 07:00:09 2014 us=885840 TLS: tls_process: killed expiring key
Wed Jul 23 07:00:15 2014 us=620191 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 07:00:15 2014 us=620191 VERIFY OK: nsCertType=SERVER
Wed Jul 23 07:00:15 2014 us=620191 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 07:00:18 2014 us=682778 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 07:00:18 2014 us=682778 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 07:00:18 2014 us=682778 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 07:00:18 2014 us=682778 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 07:00:18 2014 us=682778 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 08:00:13 2014 us=532248 TLS: tls_process: killed expiring key
Wed Jul 23 08:00:18 2014 us=204137 TLS: soft reset sec=0 bytes=1255681/0 pkts=2474/0
Wed Jul 23 08:00:20 2014 us=188516 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 08:00:20 2014 us=188516 VERIFY OK: nsCertType=SERVER
Wed Jul 23 08:00:20 2014 us=188516 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 08:00:23 2014 us=266643 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 08:00:23 2014 us=266643 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 08:00:23 2014 us=266643 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 08:00:23 2014 us=266643 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 08:00:23 2014 us=266643 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 09:00:18 2014 us=260129 TLS: tls_process: killed expiring key
Wed Jul 23 09:00:23 2014 us=681939 TLS: soft reset sec=0 bytes=886148/0 pkts=2454/0
Wed Jul 23 09:00:25 2014 us=775779 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 09:00:25 2014 us=775779 VERIFY OK: nsCertType=SERVER
Wed Jul 23 09:00:25 2014 us=775779 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 09:00:28 2014 us=887469 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 09:00:28 2014 us=887469 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 09:00:28 2014 us=903010 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 09:00:28 2014 us=903010 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 09:00:28 2014 us=903010 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 10:00:23 2014 us=599482 TLS: tls_process: killed expiring key
Wed Jul 23 10:00:29 2014 us=87545 TLS: soft reset sec=-1 bytes=1359601/0 pkts=2755/0
Wed Jul 23 10:00:31 2014 us=71922 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 10:00:31 2014 us=71922 VERIFY OK: nsCertType=SERVER
Wed Jul 23 10:00:31 2014 us=71922 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 10:00:34 2014 us=134425 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 10:00:34 2014 us=134425 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 10:00:34 2014 us=134425 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 10:00:34 2014 us=134425 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 10:00:34 2014 us=134425 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 11:00:29 2014 us=774510 TLS: tls_process: killed expiring key
Wed Jul 23 11:00:35 2014 us=883773 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 11:00:35 2014 us=883773 VERIFY OK: nsCertType=SERVER
Wed Jul 23 11:00:35 2014 us=883773 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 11:00:38 2014 us=946393 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 11:00:38 2014 us=946393 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 11:00:38 2014 us=946393 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 11:00:38 2014 us=946393 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 11:00:38 2014 us=946393 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Jul 23 12:00:33 2014 us=581639 TLS: tls_process: killed expiring key
Wed Jul 23 12:00:40 2014 us=597266 VERIFY OK: depth=1, <certificate metadata>
Wed Jul 23 12:00:40 2014 us=597266 VERIFY OK: nsCertType=SERVER
Wed Jul 23 12:00:40 2014 us=597266 VERIFY OK: depth=0, <certificate metadata>
Wed Jul 23 12:00:43 2014 us=675389 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 12:00:43 2014 us=675389 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 12:00:43 2014 us=675389 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jul 23 12:00:43 2014 us=675389 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul 23 12:00:43 2014 us=675389 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA

Nothing strange in the logs, correct?

So I went to Network Center -> Adapter Settings and Browse the properties of TAP Win 32 adapter.
Surprise:
It was showing state: connected BUT:
Ip address: 10.127.127.1 (where the hell did it get this from? it has nothing to do with my openvpn config)
Netmask: 255.255.255.0
No DNS servers
No default ipv4 gateway
NetBIOSoverTCPIP enabled
---
So I went to adapter propreties -> Internet Protocol version 4 (TCP/IPv4) and Propreties. The 'Obtain IP address automatically" line was not enabled any more (as it was when I connected to the OpenVPN server), and instead it was having "Use the following IP address: 10.127.127.1" and "Use the following DNS servers with no servers entered".

What could happen to change this to my Tap adapter? I have no others apps using that adapter in any way. That adapter is installed by OpenVPN and used only by OpenVPN. Other than that, I have the wireless card adapter, the physical network card adapter 1gbps and a vmware bridge and nat (i have vmware workstation installed). So pretty easy network config.... suggestions?

s7r

I have discovered the problem and fixed it.

1. Problem:
The problem was that I have a Software and a Service installed on Windows (KMS Pico Service and KMS ELDI application). This uses tun device with OpenVPN driver to bind to 10.127.127.1 and be able to make some kind of modifications in the registry editor of windows, etc. It's an automated process run from time to time and at every reboot, so when the VPN was not working any more it was because this service was requiring tun device to change the IP address and use it for something else (conflict).

2. Fix:
One simple way to fix it would be to permanently uninstall KMS Eldi app and KMS Pico service, but this could have impacts over windows.

How I fixed it:
a) I went to C:\Program Files\Tap-Windows\bin\addtap.bat and run addtap.bat as "administrator" (this added one more tap device, #2)
b) I have renamed the second (fresh created) tun/tap adapter to 'OpenVPN' , configured it to obtain ipv4 automatically and dns automatically.
c) added in client config the following lines, after removing 'dev tun':

dev-type tun
dev-node OpenVPN

This config makes sure that OpenVPN uses the right (second) virtual adapter and the first one is left for that other application.

Now there are no conflicts and OpenVPN runs just fine non stop. Thank you for your help!