hi I have built an openvpn server on my raspberry pi and want to connect my windows pc as a client using openvpn GUI. but unfortunately it not connecting. Is my server running fine? I shared my server status and log as well as client log. please what problem i need to resolve.... thank you so much [b]SERVER SIDE[/b] root@raspberrypi:~# netstat -ltnup Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2740/sshd tcp 0 0 0.0.0.0:5910 0.0.0.0:* LISTEN 2565/Xvnc tcp 0 0 127.0.0.1:3350 0.0.0.0:* LISTEN 2063/xrdp-sesman tcp 0 0 0.0.0.0:3389 0.0.0.0:* LISTEN 2055/xrdp udp 0 0 10.10.0.1:1194 0.0.0.0:* 2399/openvpn udp 0 0 0.0.0.0:40380 0.0.0.0:* 2191/dhcpd udp 0 0 0.0.0.0:67 0.0.0.0:* 2191/dhcpd udp 0 0 0.0.0.0:68 0.0.0.0:* 1664/dhclient udp 0 0 10.10.0.1:123 0.0.0.0:* 2259/ntpd udp 0 0 10.8.0.1:123 0.0.0.0:* 2259/ntpd udp 0 0 192.168.0.19:123 0.0.0.0:* 2259/ntpd udp 0 0 127.0.0.1:123 0.0.0.0:* 2259/ntpd udp 0 0 0.0.0.0:123 0.0.0.0:* 2259/ntpd udp 0 0 0.0.0.0:17799 0.0.0.0:* 1664/dhclient root@raspberrypi:~# ifconfig eth0 Link encap:Ethernet HWaddr b8:27:eb:ef:91:3d inet addr:192.168.0.19 Bcast:192.168.0.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:424 errors:0 dropped:0 overruns:0 frame:0 TX packets:234 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:39595 (38.6 KiB) TX bytes:21734 (21.2 KiB) eth1 Link encap:Ethernet HWaddr 80:3f:5d:08:40:37 inet addr:10.10.0.1 Bcast:10.10.255.255 Mask:255.255.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1234 errors:0 dropped:0 overruns:0 frame:0 TX packets:1481 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:94372 (92.1 KiB) TX bytes:1054212 (1.0 MiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:7015 errors:0 dropped:0 overruns:0 frame:0 TX packets:7015 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:64710336 (61.7 MiB) TX bytes:64710336 (61.7 MiB) tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) [b]Server LOG[/b] root@raspberrypi:~# cat /var/log/openvpn.log Sat Aug 2 20:24:34 2014 us=126559 Current Parameter Settings: Sat Aug 2 20:24:34 2014 us=127411 config = '/etc/openvpn/server.conf' Sat Aug 2 20:24:34 2014 us=127606 mode = 1 Sat Aug 2 20:24:34 2014 us=127776 persist_config = DISABLED Sat Aug 2 20:24:34 2014 us=127941 persist_mode = 1 Sat Aug 2 20:24:34 2014 us=128101 show_ciphers = DISABLED Sat Aug 2 20:24:34 2014 us=128365 show_digests = DISABLED Sat Aug 2 20:24:34 2014 us=128544 show_engines = DISABLED Sat Aug 2 20:24:34 2014 us=128707 genkey = DISABLED Sat Aug 2 20:24:34 2014 us=128870 key_pass_file = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=129033 show_tls_ciphers = DISABLED Sat Aug 2 20:24:34 2014 us=129196 Connection profiles [default]: Sat Aug 2 20:24:34 2014 us=129359 proto = udp Sat Aug 2 20:24:34 2014 us=129531 local = '10.10.0.1' Sat Aug 2 20:24:34 2014 us=130099 local_port = 1194 Sat Aug 2 20:24:34 2014 us=130393 remote = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=130569 remote_port = 1194 Sat Aug 2 20:24:34 2014 us=130734 remote_float = DISABLED Sat Aug 2 20:24:34 2014 us=130902 bind_defined = DISABLED Sat Aug 2 20:24:34 2014 us=131068 bind_local = ENABLED Sat Aug 2 20:24:34 2014 us=131235 connect_retry_seconds = 5 Sat Aug 2 20:24:34 2014 us=131407 connect_timeout = 10 Sat Aug 2 20:24:34 2014 us=131576 connect_retry_max = 0 Sat Aug 2 20:24:34 2014 us=131742 socks_proxy_server = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=131913 socks_proxy_port = 0 Sat Aug 2 20:24:34 2014 us=132074 socks_proxy_retry = DISABLED Sat Aug 2 20:24:34 2014 us=132237 Connection profiles END Sat Aug 2 20:24:34 2014 us=132405 remote_random = DISABLED Sat Aug 2 20:24:34 2014 us=132568 ipchange = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=132731 dev = 'tun' Sat Aug 2 20:24:34 2014 us=132897 dev_type = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=133060 dev_node = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=133225 lladdr = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=133391 topology = 1 Sat Aug 2 20:24:34 2014 us=133555 tun_ipv6 = DISABLED Sat Aug 2 20:24:34 2014 us=133718 ifconfig_local = '10.8.0.1' Sat Aug 2 20:24:34 2014 us=133888 ifconfig_remote_netmask = '10.8.0.2' Sat Aug 2 20:24:34 2014 us=134056 ifconfig_noexec = DISABLED Sat Aug 2 20:24:34 2014 us=134218 ifconfig_nowarn = DISABLED Sat Aug 2 20:24:34 2014 us=134384 ifconfig_ipv6_local = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=134553 ifconfig_ipv6_netbits = 0 Sat Aug 2 20:24:34 2014 us=134720 ifconfig_ipv6_remote = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=134886 shaper = 0 Sat Aug 2 20:24:34 2014 us=135049 tun_mtu = 1500 Sat Aug 2 20:24:34 2014 us=135213 tun_mtu_defined = ENABLED Sat Aug 2 20:24:34 2014 us=135376 link_mtu = 1500 Sat Aug 2 20:24:34 2014 us=135540 link_mtu_defined = DISABLED Sat Aug 2 20:24:34 2014 us=135705 tun_mtu_extra = 0 Sat Aug 2 20:24:34 2014 us=135869 tun_mtu_extra_defined = DISABLED Sat Aug 2 20:24:34 2014 us=136038 fragment = 0 Sat Aug 2 20:24:34 2014 us=136244 mtu_discover_type = -1 Sat Aug 2 20:24:34 2014 us=136596 mtu_test = 0 Sat Aug 2 20:24:34 2014 us=136819 mlock = DISABLED Sat Aug 2 20:24:34 2014 us=136992 keepalive_ping = 10 Sat Aug 2 20:24:34 2014 us=137164 keepalive_timeout = 120 Sat Aug 2 20:24:34 2014 us=137332 inactivity_timeout = 0 Sat Aug 2 20:24:34 2014 us=137499 ping_send_timeout = 10 Sat Aug 2 20:24:34 2014 us=137668 ping_rec_timeout = 240 Sat Aug 2 20:24:34 2014 us=137832 ping_rec_timeout_action = 2 Sat Aug 2 20:24:34 2014 us=137998 ping_timer_remote = DISABLED Sat Aug 2 20:24:34 2014 us=138207 remap_sigusr1 = 0 Sat Aug 2 20:24:34 2014 us=138423 explicit_exit_notification = 0 Sat Aug 2 20:24:34 2014 us=138592 persist_tun = ENABLED Sat Aug 2 20:24:34 2014 us=138758 persist_local_ip = DISABLED Sat Aug 2 20:24:34 2014 us=138928 persist_remote_ip = DISABLED Sat Aug 2 20:24:34 2014 us=139090 persist_key = ENABLED Sat Aug 2 20:24:34 2014 us=139254 mssfix = 1450 Sat Aug 2 20:24:34 2014 us=141784 passtos = DISABLED Sat Aug 2 20:24:34 2014 us=142055 resolve_retry_seconds = 1000000000 Sat Aug 2 20:24:34 2014 us=142339 username = 'nobody' Sat Aug 2 20:24:34 2014 us=142521 groupname = 'nogroup' Sat Aug 2 20:24:34 2014 us=142691 chroot_dir = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=142856 cd_dir = '/etc/openvpn' Sat Aug 2 20:24:34 2014 us=143028 writepid = '/var/run/openvpn.server.pid' Sat Aug 2 20:24:34 2014 us=143193 up_script = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=143356 down_script = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=143521 down_pre = DISABLED Sat Aug 2 20:24:34 2014 us=143687 up_restart = DISABLED Sat Aug 2 20:24:34 2014 us=143851 up_delay = DISABLED Sat Aug 2 20:24:34 2014 us=144013 daemon = ENABLED Sat Aug 2 20:24:34 2014 us=144231 inetd = 0 Sat Aug 2 20:24:34 2014 us=144444 log = ENABLED Sat Aug 2 20:24:34 2014 us=144612 suppress_timestamps = DISABLED Sat Aug 2 20:24:34 2014 us=144781 nice = 0 Sat Aug 2 20:24:34 2014 us=144942 verbosity = 6 Sat Aug 2 20:24:34 2014 us=145104 mute = 0 Sat Aug 2 20:24:34 2014 us=145267 gremlin = 0 Sat Aug 2 20:24:34 2014 us=145430 status_file = '/var/log/openvpn-status.log' Sat Aug 2 20:24:34 2014 us=145594 status_file_version = 1 Sat Aug 2 20:24:34 2014 us=145758 status_file_update_freq = 20 Sat Aug 2 20:24:34 2014 us=145921 occ = ENABLED Sat Aug 2 20:24:34 2014 us=146086 rcvbuf = 65536 Sat Aug 2 20:24:34 2014 us=146334 sndbuf = 65536 Sat Aug 2 20:24:34 2014 us=146679 sockflags = 0 Sat Aug 2 20:24:34 2014 us=146882 fast_io = DISABLED Sat Aug 2 20:24:34 2014 us=147051 lzo = 7 Sat Aug 2 20:24:34 2014 us=147214 route_script = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=147377 route_default_gateway = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=147545 route_default_metric = 0 Sat Aug 2 20:24:34 2014 us=147706 route_noexec = DISABLED Sat Aug 2 20:24:34 2014 us=147877 route_delay = 0 Sat Aug 2 20:24:34 2014 us=148048 route_delay_window = 30 Sat Aug 2 20:24:34 2014 us=148217 route_delay_defined = DISABLED Sat Aug 2 20:24:34 2014 us=148386 route_nopull = DISABLED Sat Aug 2 20:24:34 2014 us=148559 route_gateway_via_dhcp = DISABLED Sat Aug 2 20:24:34 2014 us=148727 max_routes = 100 Sat Aug 2 20:24:34 2014 us=148895 allow_pull_fqdn = DISABLED Sat Aug 2 20:24:34 2014 us=149110 route 10.8.0.0/255.255.255.0/nil/nil Sat Aug 2 20:24:34 2014 us=149294 management_addr = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=149467 management_port = 0 Sat Aug 2 20:24:34 2014 us=149635 management_user_pass = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=149805 management_log_history_cache = 250 Sat Aug 2 20:24:34 2014 us=149977 management_echo_buffer_size = 100 Sat Aug 2 20:24:34 2014 us=150149 management_write_peer_info_file = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=150319 management_client_user = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=150491 management_client_group = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=150663 management_flags = 0 Sat Aug 2 20:24:34 2014 us=150830 shared_secret_file = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=151000 key_direction = 1 Sat Aug 2 20:24:34 2014 us=151168 ciphername_defined = ENABLED Sat Aug 2 20:24:34 2014 us=151338 ciphername = 'AES-128-CBC' Sat Aug 2 20:24:34 2014 us=151507 authname_defined = ENABLED Sat Aug 2 20:24:34 2014 us=151675 authname = 'SHA1' Sat Aug 2 20:24:34 2014 us=151840 prng_hash = 'SHA1' Sat Aug 2 20:24:34 2014 us=152008 prng_nonce_secret_len = 16 Sat Aug 2 20:24:34 2014 us=152227 keysize = 0 Sat Aug 2 20:24:34 2014 us=152442 engine = DISABLED Sat Aug 2 20:24:34 2014 us=152617 replay = ENABLED Sat Aug 2 20:24:34 2014 us=152788 mute_replay_warnings = DISABLED Sat Aug 2 20:24:34 2014 us=152958 replay_window = 64 Sat Aug 2 20:24:34 2014 us=153129 replay_time = 15 Sat Aug 2 20:24:34 2014 us=153299 packet_id_file = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=153466 use_iv = ENABLED Sat Aug 2 20:24:34 2014 us=153637 test_crypto = DISABLED Sat Aug 2 20:24:34 2014 us=153808 tls_server = ENABLED Sat Aug 2 20:24:34 2014 us=153971 tls_client = DISABLED Sat Aug 2 20:24:34 2014 us=154140 key_method = 2 Sat Aug 2 20:24:34 2014 us=154476 ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt' Sat Aug 2 20:24:34 2014 us=154663 ca_path = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=154838 dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem' Sat Aug 2 20:24:34 2014 us=155006 cert_file = '/etc/openvpn/easy-rsa/keys/messi.crt' Sat Aug 2 20:24:34 2014 us=155181 priv_key_file = '/etc/openvpn/easy-rsa/keys/messi.key' Sat Aug 2 20:24:34 2014 us=155352 pkcs12_file = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=155525 cipher_list = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=155694 tls_verify = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=155862 tls_export_cert = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=156032 tls_remote = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=156204 crl_file = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=156376 ns_cert_type = 0 Sat Aug 2 20:24:34 2014 us=156842 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=157039 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=157214 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=157388 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=157559 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=157728 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=157898 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=158065 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=158232 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=158403 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=158571 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=158739 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=158912 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=159081 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=159249 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=159426 remote_cert_ku[i] = 0 Sat Aug 2 20:24:34 2014 us=159595 remote_cert_eku = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=159764 tls_timeout = 2 Sat Aug 2 20:24:34 2014 us=159934 renegotiate_bytes = 0 Sat Aug 2 20:24:34 2014 us=160099 renegotiate_packets = 0 Sat Aug 2 20:24:34 2014 us=160357 renegotiate_seconds = 3600 Sat Aug 2 20:24:34 2014 us=160539 handshake_window = 60 Sat Aug 2 20:24:34 2014 us=160710 transition_window = 3600 Sat Aug 2 20:24:34 2014 us=160874 single_session = DISABLED Sat Aug 2 20:24:34 2014 us=161042 push_peer_info = DISABLED Sat Aug 2 20:24:34 2014 us=161206 tls_exit = DISABLED Sat Aug 2 20:24:34 2014 us=161375 tls_auth_file = '/etc/openvpn/easy-rsa/keys/ta.key' Sat Aug 2 20:24:34 2014 us=161549 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=161720 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=161886 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=162057 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=162298 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=162513 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=162691 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=162859 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=163029 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=163198 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=163366 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=163533 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=163700 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=163867 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=164038 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=164208 pkcs11_protected_authentication = DISABLED Sat Aug 2 20:24:34 2014 us=164383 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=164560 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=164734 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=164909 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=165083 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=165341 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=165526 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=165698 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=165874 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=166052 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=166227 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=166405 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=166693 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=166879 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=167059 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=167230 pkcs11_private_mode = 00000000 Sat Aug 2 20:24:34 2014 us=167400 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=167568 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=167735 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=167906 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=168076 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=168331 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=168514 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=168690 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=168861 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=169032 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=169203 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=169371 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=169544 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=169712 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=169880 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=170051 pkcs11_cert_private = DISABLED Sat Aug 2 20:24:34 2014 us=170266 pkcs11_pin_cache_period = -1 Sat Aug 2 20:24:34 2014 us=170482 pkcs11_id = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=170659 pkcs11_id_management = DISABLED Sat Aug 2 20:24:34 2014 us=170877 server_network = 10.8.0.0 Sat Aug 2 20:24:34 2014 us=171072 server_netmask = 255.255.255.0 Sat Aug 2 20:24:34 2014 us=171306 server_network_ipv6 = :: Sat Aug 2 20:24:34 2014 us=171489 server_netbits_ipv6 = 0 Sat Aug 2 20:24:34 2014 us=171681 server_bridge_ip = 0.0.0.0 Sat Aug 2 20:24:34 2014 us=171867 server_bridge_netmask = 0.0.0.0 Sat Aug 2 20:24:34 2014 us=172059 server_bridge_pool_start = 0.0.0.0 Sat Aug 2 20:24:34 2014 us=172246 server_bridge_pool_end = 0.0.0.0 Sat Aug 2 20:24:34 2014 us=172420 push_entry = 'route 10.8.0.1 255.255.255.255' Sat Aug 2 20:24:34 2014 us=172591 push_entry = 'route 10.8.0.0 255.255.255.0' Sat Aug 2 20:24:34 2014 us=172761 push_entry = 'route 10.10.0.0 255.255.0.0' Sat Aug 2 20:24:34 2014 us=172931 push_entry = 'dhcp-option DNS 8.8.8.8' Sat Aug 2 20:24:34 2014 us=173100 push_entry = 'redirect-gateway def1' Sat Aug 2 20:24:34 2014 us=173275 push_entry = 'route 10.8.0.0 255.255.255.0' Sat Aug 2 20:24:34 2014 us=173444 push_entry = 'topology net30' Sat Aug 2 20:24:34 2014 us=173612 push_entry = 'ping 10' Sat Aug 2 20:24:34 2014 us=173782 push_entry = 'ping-restart 120' Sat Aug 2 20:24:34 2014 us=173948 ifconfig_pool_defined = ENABLED Sat Aug 2 20:24:34 2014 us=174133 ifconfig_pool_start = 10.8.0.4 Sat Aug 2 20:24:34 2014 us=174321 ifconfig_pool_end = 10.8.0.251 Sat Aug 2 20:24:34 2014 us=174506 ifconfig_pool_netmask = 0.0.0.0 Sat Aug 2 20:24:34 2014 us=174680 ifconfig_pool_persist_filename = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=174853 ifconfig_pool_persist_refresh_freq = 600 Sat Aug 2 20:24:34 2014 us=175027 ifconfig_ipv6_pool_defined = DISABLED Sat Aug 2 20:24:34 2014 us=175208 ifconfig_ipv6_pool_base = :: Sat Aug 2 20:24:34 2014 us=175381 ifconfig_ipv6_pool_netbits = 0 Sat Aug 2 20:24:34 2014 us=175549 n_bcast_buf = 256 Sat Aug 2 20:24:34 2014 us=175717 tcp_queue_limit = 64 Sat Aug 2 20:24:34 2014 us=175888 real_hash_size = 256 Sat Aug 2 20:24:34 2014 us=176058 virtual_hash_size = 256 Sat Aug 2 20:24:34 2014 us=176440 client_connect_script = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=176744 learn_address_script = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=176927 client_disconnect_script = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=177100 client_config_dir = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=177269 ccd_exclusive = DISABLED Sat Aug 2 20:24:34 2014 us=177433 tmp_dir = '/tmp' Sat Aug 2 20:24:34 2014 us=177602 push_ifconfig_defined = DISABLED Sat Aug 2 20:24:34 2014 us=177791 push_ifconfig_local = 0.0.0.0 Sat Aug 2 20:24:34 2014 us=177977 push_ifconfig_remote_netmask = 0.0.0.0 Sat Aug 2 20:24:34 2014 us=178193 push_ifconfig_ipv6_defined = DISABLED Sat Aug 2 20:24:34 2014 us=178428 push_ifconfig_ipv6_local = ::/0 Sat Aug 2 20:24:34 2014 us=178613 push_ifconfig_ipv6_remote = :: Sat Aug 2 20:24:34 2014 us=178789 enable_c2c = ENABLED Sat Aug 2 20:24:34 2014 us=178956 duplicate_cn = ENABLED Sat Aug 2 20:24:34 2014 us=179121 cf_max = 0 Sat Aug 2 20:24:34 2014 us=179287 cf_per = 0 Sat Aug 2 20:24:34 2014 us=179454 max_clients = 1024 Sat Aug 2 20:24:34 2014 us=179623 max_routes_per_client = 256 Sat Aug 2 20:24:34 2014 us=179791 auth_user_pass_verify_script = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=179961 auth_user_pass_verify_script_via_file = DISABLED Sat Aug 2 20:24:34 2014 us=180132 ssl_flags = 0 Sat Aug 2 20:24:34 2014 us=180300 port_share_host = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=180466 port_share_port = 0 Sat Aug 2 20:24:34 2014 us=180633 client = DISABLED Sat Aug 2 20:24:34 2014 us=180800 pull = DISABLED Sat Aug 2 20:24:34 2014 us=180971 auth_user_pass_file = '[UNDEF]' Sat Aug 2 20:24:34 2014 us=181156 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013 Sat Aug 2 20:24:34 2014 us=183121 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet. Sat Aug 2 20:24:34 2014 us=183401 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Sat Aug 2 20:24:34 2014 us=224367 Diffie-Hellman initialized with 1024 bit key Sat Aug 2 20:24:34 2014 us=238176 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file Sat Aug 2 20:24:34 2014 us=238589 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 2 20:24:34 2014 us=238833 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Aug 2 20:24:34 2014 us=239122 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ] Sat Aug 2 20:24:34 2014 us=239491 Socket Buffers: R=[163840->131072] S=[163840->131072] Sat Aug 2 20:24:34 2014 us=241211 ROUTE default_gateway=192.168.0.1 Sat Aug 2 20:24:34 2014 us=247258 TUN/TAP device tun0 opened Sat Aug 2 20:24:34 2014 us=247644 TUN/TAP TX queue length set to 100 Sat Aug 2 20:24:34 2014 us=247900 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sat Aug 2 20:24:34 2014 us=248405 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500 Sat Aug 2 20:24:34 2014 us=274925 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2 Sat Aug 2 20:24:34 2014 us=291202 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ] Sat Aug 2 20:24:34 2014 us=310197 GID set to nogroup Sat Aug 2 20:24:34 2014 us=310801 UID set to nobody Sat Aug 2 20:24:34 2014 us=311231 UDPv4 link local (bound): [AF_INET]10.10.0.1:1194 Sat Aug 2 20:24:34 2014 us=311420 UDPv4 link remote: [undef] Sat Aug 2 20:24:34 2014 us=311646 MULTI: multi_init called, r=256 v=256 Sat Aug 2 20:24:34 2014 us=312643 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Sat Aug 2 20:24:34 2014 us=313178 Initialization Sequence Complete [b]Client log[/b] Sat Aug 02 16:05:08 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun 5 2014 Sat Aug 02 16:05:08 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05 Enter Management Password: Sat Aug 02 16:05:14 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Sat Aug 02 16:05:14 2014 Control Channel Authentication: tls-auth using INLINE static key file Sat Aug 02 16:05:14 2014 UDPv4 link local: [undef] Sat Aug 02 16:05:14 2014 UDPv4 link remote: [AF_INET]99.235.188.127:1194 Sat Aug 02 16:05:14 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sat Aug 02 16:05:17 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sat Aug 02 16:05:20 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sat Aug 02 16:05:28 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054) Sat Aug 02 16:05:39 2014 SIGTERM[hard,] received, process exiting Thanks for your time!!!

hi michael Thanks for your time!!! As per your instruction i removed above three lines and restarted the openvpn I have made my pi as a server and using laptop as a client by transfering .ovpn file into it through openvpn GUI [b]My pi openvpn server is connected through router provided by ISP to home and i am also connecting my laptop to same router as openvpn client. I am using DNSDYNAMIC.org for communicating between server client over internet[/b] following are the outputs: all the output i extracted is when server was running without client [img] root@raspberrypi:~# ip r default via 192.168.0.1 dev eth0 10.8.0.0/24 via 10.8.0.2 dev tun0 10.8.0.2 dev tun0 proto kernel scope link src 10.8.0.1 10.10.0.0/16 dev eth1 proto kernel scope link src 10.10.0.1 192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.19 oot@raspberrypi:~# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination root@raspberrypi:~# root@raspberrypi:~# iptables -L -t nat Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- 10.8.0.0/24 anywhere to:10.10.0.1 root@raspberrypi:~# [/img] After removing lines the new server log is: [img]root@raspberrypi:~# cat /var/log/openvpn.log Wed Aug 6 03:06:50 2014 us=399315 Current Parameter Settings: Wed Aug 6 03:06:50 2014 us=400128 config = '/etc/openvpn/server.conf' Wed Aug 6 03:06:50 2014 us=400323 mode = 1 Wed Aug 6 03:06:50 2014 us=400489 persist_config = DISABLED Wed Aug 6 03:06:50 2014 us=400650 persist_mode = 1 Wed Aug 6 03:06:50 2014 us=400811 show_ciphers = DISABLED Wed Aug 6 03:06:50 2014 us=400970 show_digests = DISABLED Wed Aug 6 03:06:50 2014 us=401130 show_engines = DISABLED Wed Aug 6 03:06:50 2014 us=401696 genkey = DISABLED Wed Aug 6 03:06:50 2014 us=401889 key_pass_file = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=402049 show_tls_ciphers = DISABLED Wed Aug 6 03:06:50 2014 us=402311 Connection profiles [default]: Wed Aug 6 03:06:50 2014 us=402491 proto = tcp-server Wed Aug 6 03:06:50 2014 us=402656 local = '10.10.0.1' Wed Aug 6 03:06:50 2014 us=402817 local_port = 1194 Wed Aug 6 03:06:50 2014 us=402973 remote = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=403136 remote_port = 1194 Wed Aug 6 03:06:50 2014 us=403390 remote_float = DISABLED Wed Aug 6 03:06:50 2014 us=403593 bind_defined = DISABLED Wed Aug 6 03:06:50 2014 us=403760 bind_local = ENABLED Wed Aug 6 03:06:50 2014 us=403923 connect_retry_seconds = 5 Wed Aug 6 03:06:50 2014 us=404083 connect_timeout = 10 Wed Aug 6 03:06:50 2014 us=404278 connect_retry_max = 0 Wed Aug 6 03:06:50 2014 us=404453 socks_proxy_server = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=404621 socks_proxy_port = 0 Wed Aug 6 03:06:50 2014 us=404780 socks_proxy_retry = DISABLED Wed Aug 6 03:06:50 2014 us=404940 Connection profiles END Wed Aug 6 03:06:50 2014 us=405100 remote_random = DISABLED Wed Aug 6 03:06:50 2014 us=405346 ipchange = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=405514 dev = 'tun' Wed Aug 6 03:06:50 2014 us=405672 dev_type = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=405830 dev_node = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=405992 lladdr = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=406149 topology = 1 Wed Aug 6 03:06:50 2014 us=406305 tun_ipv6 = DISABLED Wed Aug 6 03:06:50 2014 us=406465 ifconfig_local = '10.8.0.1' Wed Aug 6 03:06:50 2014 us=406628 ifconfig_remote_netmask = '10.8.0.2' Wed Aug 6 03:06:50 2014 us=406786 ifconfig_noexec = DISABLED Wed Aug 6 03:06:50 2014 us=406940 ifconfig_nowarn = DISABLED Wed Aug 6 03:06:50 2014 us=407099 ifconfig_ipv6_local = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=407259 ifconfig_ipv6_netbits = 0 Wed Aug 6 03:06:50 2014 us=407416 ifconfig_ipv6_remote = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=407575 shaper = 0 Wed Aug 6 03:06:50 2014 us=407736 tun_mtu = 1500 Wed Aug 6 03:06:50 2014 us=407891 tun_mtu_defined = ENABLED Wed Aug 6 03:06:50 2014 us=408052 link_mtu = 1500 Wed Aug 6 03:06:50 2014 us=408210 link_mtu_defined = DISABLED Wed Aug 6 03:06:50 2014 us=408373 tun_mtu_extra = 0 Wed Aug 6 03:06:50 2014 us=408533 tun_mtu_extra_defined = DISABLED Wed Aug 6 03:06:50 2014 us=408693 fragment = 0 Wed Aug 6 03:06:50 2014 us=408851 mtu_discover_type = -1 Wed Aug 6 03:06:50 2014 us=409013 mtu_test = 0 Wed Aug 6 03:06:50 2014 us=409171 mlock = DISABLED Wed Aug 6 03:06:50 2014 us=409332 keepalive_ping = 10 Wed Aug 6 03:06:50 2014 us=409493 keepalive_timeout = 120 Wed Aug 6 03:06:50 2014 us=409653 inactivity_timeout = 0 Wed Aug 6 03:06:50 2014 us=409813 ping_send_timeout = 10 Wed Aug 6 03:06:50 2014 us=409974 ping_rec_timeout = 240 Wed Aug 6 03:06:50 2014 us=410173 ping_rec_timeout_action = 2 Wed Aug 6 03:06:50 2014 us=410380 ping_timer_remote = DISABLED Wed Aug 6 03:06:50 2014 us=410549 remap_sigusr1 = 0 Wed Aug 6 03:06:50 2014 us=410712 explicit_exit_notification = 0 Wed Aug 6 03:06:50 2014 us=410871 persist_tun = ENABLED Wed Aug 6 03:06:50 2014 us=412949 persist_local_ip = DISABLED Wed Aug 6 03:06:50 2014 us=413218 persist_remote_ip = DISABLED Wed Aug 6 03:06:50 2014 us=413623 persist_key = ENABLED Wed Aug 6 03:06:50 2014 us=413795 mssfix = 1450 Wed Aug 6 03:06:50 2014 us=413982 passtos = DISABLED Wed Aug 6 03:06:50 2014 us=414155 resolve_retry_seconds = 1000000000 Wed Aug 6 03:06:50 2014 us=414419 username = 'nobody' Wed Aug 6 03:06:50 2014 us=414592 groupname = 'nogroup' Wed Aug 6 03:06:50 2014 us=414753 chroot_dir = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=414912 cd_dir = '/etc/openvpn' Wed Aug 6 03:06:50 2014 us=415073 writepid = '/var/run/openvpn.server.pid' Wed Aug 6 03:06:50 2014 us=415233 up_script = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=415392 down_script = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=415549 down_pre = DISABLED Wed Aug 6 03:06:50 2014 us=415706 up_restart = DISABLED Wed Aug 6 03:06:50 2014 us=415867 up_delay = DISABLED Wed Aug 6 03:06:50 2014 us=416024 daemon = ENABLED Wed Aug 6 03:06:50 2014 us=416187 inetd = 0 Wed Aug 6 03:06:50 2014 us=416344 log = ENABLED Wed Aug 6 03:06:50 2014 us=416508 suppress_timestamps = DISABLED Wed Aug 6 03:06:50 2014 us=416667 nice = 0 Wed Aug 6 03:06:50 2014 us=416826 verbosity = 6 Wed Aug 6 03:06:50 2014 us=416986 mute = 0 Wed Aug 6 03:06:50 2014 us=417145 gremlin = 0 Wed Aug 6 03:06:50 2014 us=417303 status_file = '/var/log/openvpn-status.log' Wed Aug 6 03:06:50 2014 us=417468 status_file_version = 1 Wed Aug 6 03:06:50 2014 us=417629 status_file_update_freq = 20 Wed Aug 6 03:06:50 2014 us=417788 occ = ENABLED Wed Aug 6 03:06:50 2014 us=417946 rcvbuf = 65536 Wed Aug 6 03:06:50 2014 us=418152 sndbuf = 65536 Wed Aug 6 03:06:50 2014 us=418368 sockflags = 0 Wed Aug 6 03:06:50 2014 us=418532 fast_io = DISABLED Wed Aug 6 03:06:50 2014 us=418693 lzo = 7 Wed Aug 6 03:06:50 2014 us=418857 route_script = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=419017 route_default_gateway = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=419179 route_default_metric = 0 Wed Aug 6 03:06:50 2014 us=419338 route_noexec = DISABLED Wed Aug 6 03:06:50 2014 us=419507 route_delay = 0 Wed Aug 6 03:06:50 2014 us=419676 route_delay_window = 30 Wed Aug 6 03:06:50 2014 us=419839 route_delay_defined = DISABLED Wed Aug 6 03:06:50 2014 us=420006 route_nopull = DISABLED Wed Aug 6 03:06:50 2014 us=420171 route_gateway_via_dhcp = DISABLED Wed Aug 6 03:06:50 2014 us=420337 max_routes = 100 Wed Aug 6 03:06:50 2014 us=420501 allow_pull_fqdn = DISABLED Wed Aug 6 03:06:50 2014 us=420710 route 10.8.0.0/255.255.255.0/nil/nil Wed Aug 6 03:06:50 2014 us=420888 management_addr = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=421055 management_port = 0 Wed Aug 6 03:06:50 2014 us=421300 management_user_pass = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=421485 management_log_history_cache = 250 Wed Aug 6 03:06:50 2014 us=421653 management_echo_buffer_size = 100 Wed Aug 6 03:06:50 2014 us=421819 management_write_peer_info_file = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=421985 management_client_user = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=422149 management_client_group = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=422316 management_flags = 0 Wed Aug 6 03:06:50 2014 us=422484 shared_secret_file = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=422652 key_direction = 1 Wed Aug 6 03:06:50 2014 us=422817 ciphername_defined = ENABLED Wed Aug 6 03:06:50 2014 us=422987 ciphername = 'AES-128-CBC' Wed Aug 6 03:06:50 2014 us=423149 authname_defined = ENABLED Wed Aug 6 03:06:50 2014 us=423456 authname = 'SHA1' Wed Aug 6 03:06:50 2014 us=423671 prng_hash = 'SHA1' Wed Aug 6 03:06:50 2014 us=423841 prng_nonce_secret_len = 16 Wed Aug 6 03:06:50 2014 us=424009 keysize = 0 Wed Aug 6 03:06:50 2014 us=424171 engine = DISABLED Wed Aug 6 03:06:50 2014 us=424336 replay = ENABLED Wed Aug 6 03:06:50 2014 us=424505 mute_replay_warnings = DISABLED Wed Aug 6 03:06:50 2014 us=424672 replay_window = 64 Wed Aug 6 03:06:50 2014 us=424839 replay_time = 15 Wed Aug 6 03:06:50 2014 us=425003 packet_id_file = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=425164 use_iv = ENABLED Wed Aug 6 03:06:50 2014 us=425329 test_crypto = DISABLED Wed Aug 6 03:06:50 2014 us=425494 tls_server = ENABLED Wed Aug 6 03:06:50 2014 us=425658 tls_client = DISABLED Wed Aug 6 03:06:50 2014 us=425823 key_method = 2 Wed Aug 6 03:06:50 2014 us=426074 ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt' Wed Aug 6 03:06:50 2014 us=426339 ca_path = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=426522 dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem' Wed Aug 6 03:06:50 2014 us=426693 cert_file = '/etc/openvpn/easy-rsa/keys/messi.crt' Wed Aug 6 03:06:50 2014 us=426862 priv_key_file = '/etc/openvpn/easy-rsa/keys/messi.key' Wed Aug 6 03:06:50 2014 us=427027 pkcs12_file = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=427194 cipher_list = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=427360 tls_verify = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=427520 tls_export_cert = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=427683 tls_remote = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=427847 crl_file = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=428013 ns_cert_type = 0 Wed Aug 6 03:06:50 2014 us=428178 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=428343 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=428506 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=428671 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=428832 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=428996 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=429194 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=429399 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=429565 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=429728 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=429893 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=430057 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=430218 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=430382 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=430543 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=430703 remote_cert_ku[i] = 0 Wed Aug 6 03:06:50 2014 us=430865 remote_cert_eku = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=431027 tls_timeout = 2 Wed Aug 6 03:06:50 2014 us=431186 renegotiate_bytes = 0 Wed Aug 6 03:06:50 2014 us=431350 renegotiate_packets = 0 Wed Aug 6 03:06:50 2014 us=431514 renegotiate_seconds = 3600 Wed Aug 6 03:06:50 2014 us=431674 handshake_window = 60 Wed Aug 6 03:06:50 2014 us=431834 transition_window = 3600 Wed Aug 6 03:06:50 2014 us=431994 single_session = DISABLED Wed Aug 6 03:06:50 2014 us=432155 push_peer_info = DISABLED Wed Aug 6 03:06:50 2014 us=432312 tls_exit = DISABLED Wed Aug 6 03:06:50 2014 us=432473 tls_auth_file = '/etc/openvpn/easy-rsa/keys/ta.key' Wed Aug 6 03:06:50 2014 us=432637 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=432799 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=432966 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=433131 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=433388 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=433595 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=433767 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=433934 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=434100 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=434358 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=434530 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=434697 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=434863 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=435027 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=435193 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=435358 pkcs11_protected_authentication = DISABLED Wed Aug 6 03:06:50 2014 us=435529 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=435699 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=435867 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=436034 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=436201 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=436458 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=436636 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=436805 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=436972 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=437185 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=437400 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=437575 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=437744 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=437908 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=438074 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=438242 pkcs11_private_mode = 00000000 Wed Aug 6 03:06:50 2014 us=438404 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=438567 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=438728 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=438890 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=439052 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=439219 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=439385 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=439548 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=439711 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=439876 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=440039 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=440203 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=440368 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=440535 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=440700 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=440865 pkcs11_cert_private = DISABLED Wed Aug 6 03:06:50 2014 us=441031 pkcs11_pin_cache_period = -1 Wed Aug 6 03:06:50 2014 us=441192 pkcs11_id = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=441360 pkcs11_id_management = DISABLED Wed Aug 6 03:06:50 2014 us=441574 server_network = 10.8.0.0 Wed Aug 6 03:06:50 2014 us=441768 server_netmask = 255.255.255.0 Wed Aug 6 03:06:50 2014 us=441996 server_network_ipv6 = :: Wed Aug 6 03:06:50 2014 us=442222 server_netbits_ipv6 = 0 Wed Aug 6 03:06:50 2014 us=442457 server_bridge_ip = 0.0.0.0 Wed Aug 6 03:06:50 2014 us=442643 server_bridge_netmask = 0.0.0.0 Wed Aug 6 03:06:50 2014 us=442828 server_bridge_pool_start = 0.0.0.0 Wed Aug 6 03:06:50 2014 us=443014 server_bridge_pool_end = 0.0.0.0 Wed Aug 6 03:06:50 2014 us=443180 push_entry = 'route 10.10.0.0 255.255.0.0' Wed Aug 6 03:06:50 2014 us=443446 push_entry = 'dhcp-option DNS 8.8.8.8' Wed Aug 6 03:06:50 2014 us=443646 push_entry = 'redirect-gateway def1' Wed Aug 6 03:06:50 2014 us=443817 push_entry = 'route 10.8.0.0 255.255.255.0' Wed Aug 6 03:06:50 2014 us=443987 push_entry = 'topology net30' Wed Aug 6 03:06:50 2014 us=444154 push_entry = 'ping 10' Wed Aug 6 03:06:50 2014 us=444320 push_entry = 'ping-restart 120' Wed Aug 6 03:06:50 2014 us=444486 ifconfig_pool_defined = ENABLED Wed Aug 6 03:06:50 2014 us=444671 ifconfig_pool_start = 10.8.0.4 Wed Aug 6 03:06:50 2014 us=444861 ifconfig_pool_end = 10.8.0.251 Wed Aug 6 03:06:50 2014 us=445072 ifconfig_pool_netmask = 0.0.0.0 Wed Aug 6 03:06:50 2014 us=445332 ifconfig_pool_persist_filename = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=445514 ifconfig_pool_persist_refresh_freq = 600 Wed Aug 6 03:06:50 2014 us=445680 ifconfig_ipv6_pool_defined = DISABLED Wed Aug 6 03:06:50 2014 us=445860 ifconfig_ipv6_pool_base = :: Wed Aug 6 03:06:50 2014 us=446028 ifconfig_ipv6_pool_netbits = 0 Wed Aug 6 03:06:50 2014 us=446192 n_bcast_buf = 256 Wed Aug 6 03:06:50 2014 us=446352 tcp_queue_limit = 64 Wed Aug 6 03:06:50 2014 us=446517 real_hash_size = 256 Wed Aug 6 03:06:50 2014 us=446679 virtual_hash_size = 256 Wed Aug 6 03:06:50 2014 us=446840 client_connect_script = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=447006 learn_address_script = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=447262 client_disconnect_script = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=447437 client_config_dir = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=447602 ccd_exclusive = DISABLED Wed Aug 6 03:06:50 2014 us=447766 tmp_dir = '/tmp' Wed Aug 6 03:06:50 2014 us=447927 push_ifconfig_defined = DISABLED Wed Aug 6 03:06:50 2014 us=448110 push_ifconfig_local = 0.0.0.0 Wed Aug 6 03:06:50 2014 us=448289 push_ifconfig_remote_netmask = 0.0.0.0 Wed Aug 6 03:06:50 2014 us=448453 push_ifconfig_ipv6_defined = DISABLED Wed Aug 6 03:06:50 2014 us=448633 push_ifconfig_ipv6_local = ::/0 Wed Aug 6 03:06:50 2014 us=448807 push_ifconfig_ipv6_remote = :: Wed Aug 6 03:06:50 2014 us=448971 enable_c2c = ENABLED Wed Aug 6 03:06:50 2014 us=449133 duplicate_cn = ENABLED Wed Aug 6 03:06:50 2014 us=449296 cf_max = 0 Wed Aug 6 03:06:50 2014 us=449458 cf_per = 0 Wed Aug 6 03:06:50 2014 us=449621 max_clients = 1024 Wed Aug 6 03:06:50 2014 us=449784 max_routes_per_client = 256 Wed Aug 6 03:06:50 2014 us=449951 auth_user_pass_verify_script = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=450161 auth_user_pass_verify_script_via_file = DISABLED Wed Aug 6 03:06:50 2014 us=450379 ssl_flags = 0 Wed Aug 6 03:06:50 2014 us=450550 port_share_host = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=450721 port_share_port = 0 Wed Aug 6 03:06:50 2014 us=450886 client = DISABLED Wed Aug 6 03:06:50 2014 us=451049 pull = DISABLED Wed Aug 6 03:06:50 2014 us=451213 auth_user_pass_file = '[UNDEF]' Wed Aug 6 03:06:50 2014 us=451395 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013 Wed Aug 6 03:06:50 2014 us=453518 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet. Wed Aug 6 03:06:50 2014 us=453814 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Wed Aug 6 03:06:50 2014 us=494366 Diffie-Hellman initialized with 1024 bit key Wed Aug 6 03:06:50 2014 us=507878 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file Wed Aug 6 03:06:50 2014 us=508283 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Aug 6 03:06:50 2014 us=508525 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Aug 6 03:06:50 2014 us=508818 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ] Wed Aug 6 03:06:50 2014 us=509283 Socket Buffers: R=[87380->131072] S=[16384->131072] Wed Aug 6 03:06:50 2014 us=510881 ROUTE default_gateway=192.168.0.1 Wed Aug 6 03:06:50 2014 us=524110 TUN/TAP device tun0 opened Wed Aug 6 03:06:50 2014 us=524499 TUN/TAP TX queue length set to 100 Wed Aug 6 03:06:50 2014 us=524749 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Wed Aug 6 03:06:50 2014 us=525182 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500 Wed Aug 6 03:06:50 2014 us=544671 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2 Wed Aug 6 03:06:50 2014 us=563203 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ] Wed Aug 6 03:06:50 2014 us=579314 GID set to nogroup Wed Aug 6 03:06:50 2014 us=579923 UID set to nobody Wed Aug 6 03:06:50 2014 us=580320 Listening for incoming TCP connection on [AF_INET]10.10.0.1:1194 Wed Aug 6 03:06:50 2014 us=580696 TCPv4_SERVER link local (bound): [AF_INET]10.10.0.1:1194 Wed Aug 6 03:06:50 2014 us=580886 TCPv4_SERVER link remote: [undef] Wed Aug 6 03:06:50 2014 us=581116 MULTI: multi_init called, r=256 v=256 Wed Aug 6 03:06:50 2014 us=582078 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Wed Aug 6 03:06:50 2014 us=582502 MULTI: TCP INIT maxclients=1024 maxevents=1028 Wed Aug 6 03:06:50 2014 us=582980 Initialization Sequence Completed [/img] Thanks

[quote]My pi openvpn server is connected through router provided by ISP to home and i am also connecting my laptop to same router as openvpn client. I am using DNSDYNAMIC.org for communicating between server client over internet[/quote] if you are testing your setup while in the same lan with your openvpn server please stop... try to use another internet connection for your tests, keep in mind that not every router NATs back requests coming from its lan destined to its wan port forwarding rule... Michael.

open vpn connection ?

ncp-uok

hi
I have built an openvpn server on my raspberry pi and want to connect my windows pc as a client using openvpn GUI. but unfortunately it not connecting. Is my server running fine? I shared my server status and log as well as client log. please what problem i need to resolve.... thank you so much
SERVER SIDE
root@raspberrypi:~# netstat -ltnup
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2740/sshd
tcp 0 0 0.0.0.0:5910 0.0.0.0:* LISTEN 2565/Xvnc
tcp 0 0 127.0.0.1:3350 0.0.0.0:* LISTEN 2063/xrdp-sesman
tcp 0 0 0.0.0.0:3389 0.0.0.0:* LISTEN 2055/xrdp
udp 0 0 10.10.0.1:1194 0.0.0.0:* 2399/openvpn
udp 0 0 0.0.0.0:40380 0.0.0.0:* 2191/dhcpd
udp 0 0 0.0.0.0:67 0.0.0.0:* 2191/dhcpd
udp 0 0 0.0.0.0:68 0.0.0.0:* 1664/dhclient
udp 0 0 10.10.0.1:123 0.0.0.0:* 2259/ntpd
udp 0 0 10.8.0.1:123 0.0.0.0:* 2259/ntpd
udp 0 0 192.168.0.19:123 0.0.0.0:* 2259/ntpd
udp 0 0 127.0.0.1:123 0.0.0.0:* 2259/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:* 2259/ntpd
udp 0 0 0.0.0.0:17799 0.0.0.0:* 1664/dhclient

root@raspberrypi:~# ifconfig
eth0 Link encap:Ethernet HWaddr b8:27:eb:ef:91:3d
inet addr:192.168.0.19 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:424 errors:0 dropped:0 overruns:0 frame:0
TX packets:234 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:39595 (38.6 KiB) TX bytes:21734 (21.2 KiB)

eth1 Link encap:Ethernet HWaddr 80:3f:5d:08:40:37
inet addr:10.10.0.1 Bcast:10.10.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1234 errors:0 dropped:0 overruns:0 frame:0
TX packets:1481 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:94372 (92.1 KiB) TX bytes:1054212 (1.0 MiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:7015 errors:0 dropped:0 overruns:0 frame:0
TX packets:7015 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:64710336 (61.7 MiB) TX bytes:64710336 (61.7 MiB)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

Server LOG

root@raspberrypi:~# cat /var/log/openvpn.log
Sat Aug 2 20:24:34 2014 us=126559 Current Parameter Settings:
Sat Aug 2 20:24:34 2014 us=127411 config = '/etc/openvpn/server.conf'
Sat Aug 2 20:24:34 2014 us=127606 mode = 1
Sat Aug 2 20:24:34 2014 us=127776 persist_config = DISABLED
Sat Aug 2 20:24:34 2014 us=127941 persist_mode = 1
Sat Aug 2 20:24:34 2014 us=128101 show_ciphers = DISABLED
Sat Aug 2 20:24:34 2014 us=128365 show_digests = DISABLED
Sat Aug 2 20:24:34 2014 us=128544 show_engines = DISABLED
Sat Aug 2 20:24:34 2014 us=128707 genkey = DISABLED
Sat Aug 2 20:24:34 2014 us=128870 key_pass_file = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=129033 show_tls_ciphers = DISABLED
Sat Aug 2 20:24:34 2014 us=129196 Connection profiles [default]:
Sat Aug 2 20:24:34 2014 us=129359 proto = udp
Sat Aug 2 20:24:34 2014 us=129531 local = '10.10.0.1'
Sat Aug 2 20:24:34 2014 us=130099 local_port = 1194
Sat Aug 2 20:24:34 2014 us=130393 remote = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=130569 remote_port = 1194
Sat Aug 2 20:24:34 2014 us=130734 remote_float = DISABLED
Sat Aug 2 20:24:34 2014 us=130902 bind_defined = DISABLED
Sat Aug 2 20:24:34 2014 us=131068 bind_local = ENABLED
Sat Aug 2 20:24:34 2014 us=131235 connect_retry_seconds = 5
Sat Aug 2 20:24:34 2014 us=131407 connect_timeout = 10
Sat Aug 2 20:24:34 2014 us=131576 connect_retry_max = 0
Sat Aug 2 20:24:34 2014 us=131742 socks_proxy_server = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=131913 socks_proxy_port = 0
Sat Aug 2 20:24:34 2014 us=132074 socks_proxy_retry = DISABLED
Sat Aug 2 20:24:34 2014 us=132237 Connection profiles END
Sat Aug 2 20:24:34 2014 us=132405 remote_random = DISABLED
Sat Aug 2 20:24:34 2014 us=132568 ipchange = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=132731 dev = 'tun'
Sat Aug 2 20:24:34 2014 us=132897 dev_type = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=133060 dev_node = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=133225 lladdr = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=133391 topology = 1
Sat Aug 2 20:24:34 2014 us=133555 tun_ipv6 = DISABLED
Sat Aug 2 20:24:34 2014 us=133718 ifconfig_local = '10.8.0.1'
Sat Aug 2 20:24:34 2014 us=133888 ifconfig_remote_netmask = '10.8.0.2'
Sat Aug 2 20:24:34 2014 us=134056 ifconfig_noexec = DISABLED
Sat Aug 2 20:24:34 2014 us=134218 ifconfig_nowarn = DISABLED
Sat Aug 2 20:24:34 2014 us=134384 ifconfig_ipv6_local = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=134553 ifconfig_ipv6_netbits = 0
Sat Aug 2 20:24:34 2014 us=134720 ifconfig_ipv6_remote = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=134886 shaper = 0
Sat Aug 2 20:24:34 2014 us=135049 tun_mtu = 1500
Sat Aug 2 20:24:34 2014 us=135213 tun_mtu_defined = ENABLED
Sat Aug 2 20:24:34 2014 us=135376 link_mtu = 1500
Sat Aug 2 20:24:34 2014 us=135540 link_mtu_defined = DISABLED
Sat Aug 2 20:24:34 2014 us=135705 tun_mtu_extra = 0
Sat Aug 2 20:24:34 2014 us=135869 tun_mtu_extra_defined = DISABLED
Sat Aug 2 20:24:34 2014 us=136038 fragment = 0
Sat Aug 2 20:24:34 2014 us=136244 mtu_discover_type = -1
Sat Aug 2 20:24:34 2014 us=136596 mtu_test = 0
Sat Aug 2 20:24:34 2014 us=136819 mlock = DISABLED
Sat Aug 2 20:24:34 2014 us=136992 keepalive_ping = 10
Sat Aug 2 20:24:34 2014 us=137164 keepalive_timeout = 120
Sat Aug 2 20:24:34 2014 us=137332 inactivity_timeout = 0
Sat Aug 2 20:24:34 2014 us=137499 ping_send_timeout = 10
Sat Aug 2 20:24:34 2014 us=137668 ping_rec_timeout = 240
Sat Aug 2 20:24:34 2014 us=137832 ping_rec_timeout_action = 2
Sat Aug 2 20:24:34 2014 us=137998 ping_timer_remote = DISABLED
Sat Aug 2 20:24:34 2014 us=138207 remap_sigusr1 = 0
Sat Aug 2 20:24:34 2014 us=138423 explicit_exit_notification = 0
Sat Aug 2 20:24:34 2014 us=138592 persist_tun = ENABLED
Sat Aug 2 20:24:34 2014 us=138758 persist_local_ip = DISABLED
Sat Aug 2 20:24:34 2014 us=138928 persist_remote_ip = DISABLED
Sat Aug 2 20:24:34 2014 us=139090 persist_key = ENABLED
Sat Aug 2 20:24:34 2014 us=139254 mssfix = 1450
Sat Aug 2 20:24:34 2014 us=141784 passtos = DISABLED
Sat Aug 2 20:24:34 2014 us=142055 resolve_retry_seconds = 1000000000
Sat Aug 2 20:24:34 2014 us=142339 username = 'nobody'
Sat Aug 2 20:24:34 2014 us=142521 groupname = 'nogroup'
Sat Aug 2 20:24:34 2014 us=142691 chroot_dir = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=142856 cd_dir = '/etc/openvpn'
Sat Aug 2 20:24:34 2014 us=143028 writepid = '/var/run/openvpn.server.pid'
Sat Aug 2 20:24:34 2014 us=143193 up_script = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=143356 down_script = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=143521 down_pre = DISABLED
Sat Aug 2 20:24:34 2014 us=143687 up_restart = DISABLED
Sat Aug 2 20:24:34 2014 us=143851 up_delay = DISABLED
Sat Aug 2 20:24:34 2014 us=144013 daemon = ENABLED
Sat Aug 2 20:24:34 2014 us=144231 inetd = 0
Sat Aug 2 20:24:34 2014 us=144444 log = ENABLED
Sat Aug 2 20:24:34 2014 us=144612 suppress_timestamps = DISABLED
Sat Aug 2 20:24:34 2014 us=144781 nice = 0
Sat Aug 2 20:24:34 2014 us=144942 verbosity = 6
Sat Aug 2 20:24:34 2014 us=145104 mute = 0
Sat Aug 2 20:24:34 2014 us=145267 gremlin = 0
Sat Aug 2 20:24:34 2014 us=145430 status_file = '/var/log/openvpn-status.log'
Sat Aug 2 20:24:34 2014 us=145594 status_file_version = 1
Sat Aug 2 20:24:34 2014 us=145758 status_file_update_freq = 20
Sat Aug 2 20:24:34 2014 us=145921 occ = ENABLED
Sat Aug 2 20:24:34 2014 us=146086 rcvbuf = 65536
Sat Aug 2 20:24:34 2014 us=146334 sndbuf = 65536
Sat Aug 2 20:24:34 2014 us=146679 sockflags = 0
Sat Aug 2 20:24:34 2014 us=146882 fast_io = DISABLED
Sat Aug 2 20:24:34 2014 us=147051 lzo = 7
Sat Aug 2 20:24:34 2014 us=147214 route_script = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=147377 route_default_gateway = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=147545 route_default_metric = 0
Sat Aug 2 20:24:34 2014 us=147706 route_noexec = DISABLED
Sat Aug 2 20:24:34 2014 us=147877 route_delay = 0
Sat Aug 2 20:24:34 2014 us=148048 route_delay_window = 30
Sat Aug 2 20:24:34 2014 us=148217 route_delay_defined = DISABLED
Sat Aug 2 20:24:34 2014 us=148386 route_nopull = DISABLED
Sat Aug 2 20:24:34 2014 us=148559 route_gateway_via_dhcp = DISABLED
Sat Aug 2 20:24:34 2014 us=148727 max_routes = 100
Sat Aug 2 20:24:34 2014 us=148895 allow_pull_fqdn = DISABLED
Sat Aug 2 20:24:34 2014 us=149110 route 10.8.0.0/255.255.255.0/nil/nil
Sat Aug 2 20:24:34 2014 us=149294 management_addr = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=149467 management_port = 0
Sat Aug 2 20:24:34 2014 us=149635 management_user_pass = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=149805 management_log_history_cache = 250
Sat Aug 2 20:24:34 2014 us=149977 management_echo_buffer_size = 100
Sat Aug 2 20:24:34 2014 us=150149 management_write_peer_info_file = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=150319 management_client_user = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=150491 management_client_group = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=150663 management_flags = 0
Sat Aug 2 20:24:34 2014 us=150830 shared_secret_file = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=151000 key_direction = 1
Sat Aug 2 20:24:34 2014 us=151168 ciphername_defined = ENABLED
Sat Aug 2 20:24:34 2014 us=151338 ciphername = 'AES-128-CBC'
Sat Aug 2 20:24:34 2014 us=151507 authname_defined = ENABLED
Sat Aug 2 20:24:34 2014 us=151675 authname = 'SHA1'
Sat Aug 2 20:24:34 2014 us=151840 prng_hash = 'SHA1'
Sat Aug 2 20:24:34 2014 us=152008 prng_nonce_secret_len = 16
Sat Aug 2 20:24:34 2014 us=152227 keysize = 0
Sat Aug 2 20:24:34 2014 us=152442 engine = DISABLED
Sat Aug 2 20:24:34 2014 us=152617 replay = ENABLED
Sat Aug 2 20:24:34 2014 us=152788 mute_replay_warnings = DISABLED
Sat Aug 2 20:24:34 2014 us=152958 replay_window = 64
Sat Aug 2 20:24:34 2014 us=153129 replay_time = 15
Sat Aug 2 20:24:34 2014 us=153299 packet_id_file = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=153466 use_iv = ENABLED
Sat Aug 2 20:24:34 2014 us=153637 test_crypto = DISABLED
Sat Aug 2 20:24:34 2014 us=153808 tls_server = ENABLED
Sat Aug 2 20:24:34 2014 us=153971 tls_client = DISABLED
Sat Aug 2 20:24:34 2014 us=154140 key_method = 2
Sat Aug 2 20:24:34 2014 us=154476 ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Sat Aug 2 20:24:34 2014 us=154663 ca_path = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=154838 dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem'
Sat Aug 2 20:24:34 2014 us=155006 cert_file = '/etc/openvpn/easy-rsa/keys/messi.crt'
Sat Aug 2 20:24:34 2014 us=155181 priv_key_file = '/etc/openvpn/easy-rsa/keys/messi.key'
Sat Aug 2 20:24:34 2014 us=155352 pkcs12_file = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=155525 cipher_list = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=155694 tls_verify = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=155862 tls_export_cert = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=156032 tls_remote = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=156204 crl_file = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=156376 ns_cert_type = 0
Sat Aug 2 20:24:34 2014 us=156842 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=157039 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=157214 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=157388 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=157559 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=157728 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=157898 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=158065 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=158232 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=158403 remote_cert_ku = 0
Sat Aug 2 20:24:34 2014 us=158571 remote_cert_ku[i] = 0
Sat Aug 2 20:24:34 2014 us=158739 remote_cert_ku[i] = 0
Sat Aug 2 20:24:34 2014 us=158912 remote_cert_ku[i] = 0
Sat Aug 2 20:24:34 2014 us=159081 remote_cert_ku[i] = 0
Sat Aug 2 20:24:34 2014 us=159249 remote_cert_ku[i] = 0
Sat Aug 2 20:24:34 2014 us=159426 remote_cert_ku[i] = 0
Sat Aug 2 20:24:34 2014 us=159595 remote_cert_eku = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=159764 tls_timeout = 2
Sat Aug 2 20:24:34 2014 us=159934 renegotiate_bytes = 0
Sat Aug 2 20:24:34 2014 us=160099 renegotiate_packets = 0
Sat Aug 2 20:24:34 2014 us=160357 renegotiate_seconds = 3600
Sat Aug 2 20:24:34 2014 us=160539 handshake_window = 60
Sat Aug 2 20:24:34 2014 us=160710 transition_window = 3600
Sat Aug 2 20:24:34 2014 us=160874 single_session = DISABLED
Sat Aug 2 20:24:34 2014 us=161042 push_peer_info = DISABLED
Sat Aug 2 20:24:34 2014 us=161206 tls_exit = DISABLED
Sat Aug 2 20:24:34 2014 us=161375 tls_auth_file = '/etc/openvpn/easy-rsa/keys/ta.key'
Sat Aug 2 20:24:34 2014 us=161549 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=161720 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=161886 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=162057 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=162298 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=162513 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=162691 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=162859 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=163029 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=163198 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=163366 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=163533 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=163700 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=163867 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=164038 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=164208 pkcs11_protected_authentication = DISABLED
Sat Aug 2 20:24:34 2014 us=164383 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=164560 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=164734 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=164909 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=165083 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=165341 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=165526 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=165698 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=165874 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=166052 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=166227 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=166405 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=166693 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=166879 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=167059 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=167230 pkcs11_private_mode = 00000000
Sat Aug 2 20:24:34 2014 us=167400 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=167568 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=167735 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=167906 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=168076 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=168331 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=168514 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=168690 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=168861 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=169032 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=169203 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=169371 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=169544 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=169712 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=169880 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=170051 pkcs11_cert_private = DISABLED
Sat Aug 2 20:24:34 2014 us=170266 pkcs11_pin_cache_period = -1
Sat Aug 2 20:24:34 2014 us=170482 pkcs11_id = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=170659 pkcs11_id_management = DISABLED
Sat Aug 2 20:24:34 2014 us=170877 server_network = 10.8.0.0
Sat Aug 2 20:24:34 2014 us=171072 server_netmask = 255.255.255.0
Sat Aug 2 20:24:34 2014 us=171306 server_network_ipv6 = ::
Sat Aug 2 20:24:34 2014 us=171489 server_netbits_ipv6 = 0
Sat Aug 2 20:24:34 2014 us=171681 server_bridge_ip = 0.0.0.0
Sat Aug 2 20:24:34 2014 us=171867 server_bridge_netmask = 0.0.0.0
Sat Aug 2 20:24:34 2014 us=172059 server_bridge_pool_start = 0.0.0.0
Sat Aug 2 20:24:34 2014 us=172246 server_bridge_pool_end = 0.0.0.0
Sat Aug 2 20:24:34 2014 us=172420 push_entry = 'route 10.8.0.1 255.255.255.255'
Sat Aug 2 20:24:34 2014 us=172591 push_entry = 'route 10.8.0.0 255.255.255.0'
Sat Aug 2 20:24:34 2014 us=172761 push_entry = 'route 10.10.0.0 255.255.0.0'
Sat Aug 2 20:24:34 2014 us=172931 push_entry = 'dhcp-option DNS 8.8.8.8'
Sat Aug 2 20:24:34 2014 us=173100 push_entry = 'redirect-gateway def1'
Sat Aug 2 20:24:34 2014 us=173275 push_entry = 'route 10.8.0.0 255.255.255.0'
Sat Aug 2 20:24:34 2014 us=173444 push_entry = 'topology net30'
Sat Aug 2 20:24:34 2014 us=173612 push_entry = 'ping 10'
Sat Aug 2 20:24:34 2014 us=173782 push_entry = 'ping-restart 120'
Sat Aug 2 20:24:34 2014 us=173948 ifconfig_pool_defined = ENABLED
Sat Aug 2 20:24:34 2014 us=174133 ifconfig_pool_start = 10.8.0.4
Sat Aug 2 20:24:34 2014 us=174321 ifconfig_pool_end = 10.8.0.251
Sat Aug 2 20:24:34 2014 us=174506 ifconfig_pool_netmask = 0.0.0.0
Sat Aug 2 20:24:34 2014 us=174680 ifconfig_pool_persist_filename = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=174853 ifconfig_pool_persist_refresh_freq = 600
Sat Aug 2 20:24:34 2014 us=175027 ifconfig_ipv6_pool_defined = DISABLED
Sat Aug 2 20:24:34 2014 us=175208 ifconfig_ipv6_pool_base = ::
Sat Aug 2 20:24:34 2014 us=175381 ifconfig_ipv6_pool_netbits = 0
Sat Aug 2 20:24:34 2014 us=175549 n_bcast_buf = 256
Sat Aug 2 20:24:34 2014 us=175717 tcp_queue_limit = 64
Sat Aug 2 20:24:34 2014 us=175888 real_hash_size = 256
Sat Aug 2 20:24:34 2014 us=176058 virtual_hash_size = 256
Sat Aug 2 20:24:34 2014 us=176440 client_connect_script = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=176744 learn_address_script = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=176927 client_disconnect_script = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=177100 client_config_dir = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=177269 ccd_exclusive = DISABLED
Sat Aug 2 20:24:34 2014 us=177433 tmp_dir = '/tmp'
Sat Aug 2 20:24:34 2014 us=177602 push_ifconfig_defined = DISABLED
Sat Aug 2 20:24:34 2014 us=177791 push_ifconfig_local = 0.0.0.0
Sat Aug 2 20:24:34 2014 us=177977 push_ifconfig_remote_netmask = 0.0.0.0
Sat Aug 2 20:24:34 2014 us=178193 push_ifconfig_ipv6_defined = DISABLED
Sat Aug 2 20:24:34 2014 us=178428 push_ifconfig_ipv6_local = ::/0
Sat Aug 2 20:24:34 2014 us=178613 push_ifconfig_ipv6_remote = ::
Sat Aug 2 20:24:34 2014 us=178789 enable_c2c = ENABLED
Sat Aug 2 20:24:34 2014 us=178956 duplicate_cn = ENABLED
Sat Aug 2 20:24:34 2014 us=179121 cf_max = 0
Sat Aug 2 20:24:34 2014 us=179287 cf_per = 0
Sat Aug 2 20:24:34 2014 us=179454 max_clients = 1024
Sat Aug 2 20:24:34 2014 us=179623 max_routes_per_client = 256
Sat Aug 2 20:24:34 2014 us=179791 auth_user_pass_verify_script = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=179961 auth_user_pass_verify_script_via_file = DISABLED
Sat Aug 2 20:24:34 2014 us=180132 ssl_flags = 0
Sat Aug 2 20:24:34 2014 us=180300 port_share_host = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=180466 port_share_port = 0
Sat Aug 2 20:24:34 2014 us=180633 client = DISABLED
Sat Aug 2 20:24:34 2014 us=180800 pull = DISABLED
Sat Aug 2 20:24:34 2014 us=180971 auth_user_pass_file = '[UNDEF]'
Sat Aug 2 20:24:34 2014 us=181156 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Sat Aug 2 20:24:34 2014 us=183121 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Sat Aug 2 20:24:34 2014 us=183401 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Aug 2 20:24:34 2014 us=224367 Diffie-Hellman initialized with 1024 bit key
Sat Aug 2 20:24:34 2014 us=238176 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Sat Aug 2 20:24:34 2014 us=238589 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Aug 2 20:24:34 2014 us=238833 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Aug 2 20:24:34 2014 us=239122 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Aug 2 20:24:34 2014 us=239491 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sat Aug 2 20:24:34 2014 us=241211 ROUTE default_gateway=192.168.0.1
Sat Aug 2 20:24:34 2014 us=247258 TUN/TAP device tun0 opened
Sat Aug 2 20:24:34 2014 us=247644 TUN/TAP TX queue length set to 100
Sat Aug 2 20:24:34 2014 us=247900 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Aug 2 20:24:34 2014 us=248405 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Sat Aug 2 20:24:34 2014 us=274925 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Sat Aug 2 20:24:34 2014 us=291202 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Aug 2 20:24:34 2014 us=310197 GID set to nogroup
Sat Aug 2 20:24:34 2014 us=310801 UID set to nobody
Sat Aug 2 20:24:34 2014 us=311231 UDPv4 link local (bound): [AF_INET]10.10.0.1:1194
Sat Aug 2 20:24:34 2014 us=311420 UDPv4 link remote: [undef]
Sat Aug 2 20:24:34 2014 us=311646 MULTI: multi_init called, r=256 v=256
Sat Aug 2 20:24:34 2014 us=312643 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Aug 2 20:24:34 2014 us=313178 Initialization Sequence Complete

Client log

Sat Aug 02 16:05:08 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun 5 2014
Sat Aug 02 16:05:08 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Sat Aug 02 16:05:14 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Aug 02 16:05:14 2014 Control Channel Authentication: tls-auth using INLINE static key file
Sat Aug 02 16:05:14 2014 UDPv4 link local: [undef]
Sat Aug 02 16:05:14 2014 UDPv4 link remote: [AF_INET]99.235.188.127:1194
Sat Aug 02 16:05:14 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Sat Aug 02 16:05:17 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Sat Aug 02 16:05:20 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Sat Aug 02 16:05:28 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Sat Aug 02 16:05:39 2014 SIGTERM[hard,] received, process exiting

Thanks for your time!!!

maikcat

it seems your client cant reach openvpn server service...

check your NAT rules,firewalls.

Michael.

ncp-uok

hi michael

when i changed my proto to tcp on both sides my client output is

root@raspberrypi100:/etc/openvpn# openvpn --script-security 2 --config /etc/openvpn/client1.conf
Mon Aug 4 22:19:42 2014 us=817779 Current Parameter Settings:
Mon Aug 4 22:19:42 2014 us=822124 config = '/etc/openvpn/client1.conf'
Mon Aug 4 22:19:42 2014 us=822410 mode = 0
Mon Aug 4 22:19:42 2014 us=822640 persist_config = DISABLED
Mon Aug 4 22:19:42 2014 us=822838 persist_mode = 1
Mon Aug 4 22:19:42 2014 us=823026 show_ciphers = DISABLED
Mon Aug 4 22:19:42 2014 us=823212 show_digests = DISABLED
Mon Aug 4 22:19:42 2014 us=823403 show_engines = DISABLED
Mon Aug 4 22:19:42 2014 us=823589 genkey = DISABLED
Mon Aug 4 22:19:42 2014 us=823773 key_pass_file = '[UNDEF]'
Mon Aug 4 22:19:42 2014 us=824060 show_tls_ciphers = DISABLED
Mon Aug 4 22:19:42 2014 us=825583 Connection profiles [default]:
Mon Aug 4 22:19:42 2014 us=825862 proto = tcp-client
Mon Aug 4 22:19:42 2014 us=826053 local = '[UNDEF]'
Mon Aug 4 22:19:42 2014 us=826244 local_port = 0
Mon Aug 4 22:19:42 2014 us=826426 remote = 'dnst.adultdns.net'
Mon Aug 4 22:19:42 2014 us=826611 remote_port = 1194
Mon Aug 4 22:19:42 2014 us=827920 remote_float = DISABLED
Mon Aug 4 22:19:42 2014 us=828174 bind_defined = DISABLED
Mon Aug 4 22:19:42 2014 us=828367 bind_local = DISABLED
Mon Aug 4 22:19:42 2014 us=828548 NOTE: --mute triggered...
Mon Aug 4 22:19:42 2014 us=828848 253 variation(s) on previous 20 message(s) suppressed by --mute
Mon Aug 4 22:19:42 2014 us=829062 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Mon Aug 4 22:19:42 2014 us=832548 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Enter Private Key Password:
Mon Aug 4 22:19:55 2014 us=169285 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Aug 4 22:19:55 2014 us=176422 Control Channel Authentication: tls-auth using INLINE static key file
Mon Aug 4 22:19:55 2014 us=179795 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 4 22:19:55 2014 us=180484 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 4 22:19:55 2014 us=181403 LZO compression initialized
Mon Aug 4 22:19:55 2014 us=182880 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Aug 4 22:19:55 2014 us=183925 Socket Buffers: R=[87380->131072] S=[16384->131072]
Mon Aug 4 22:19:55 2014 us=450469 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Aug 4 22:19:55 2014 us=450870 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Mon Aug 4 22:19:55 2014 us=451019 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Mon Aug 4 22:19:55 2014 us=451408 Local Options hash (VER=V4): '0bdd0804'
Mon Aug 4 22:19:55 2014 us=451632 Expected Remote Options hash (VER=V4): 'a642654b'
Mon Aug 4 22:19:55 2014 us=451877 Attempting to establish TCP connection with [AF_INET]99.235.188.127:1194 [nonblock]
Mon Aug 4 22:19:56 2014 us=452771 TCP: connect to [AF_INET]99.235.188.127:1194 failed, will try again in 5 seconds: Connection refused
^Z
[4]+ Stopped openvpn --script-security 2 --config /etc/openvpn/client1.conf
root@raspberrypi100:/etc/openvpn# ^C
root@raspberrypi100:/etc/

ncp-uok

Actually i am just curious if my server is running fine... here is the new log

root@raspberrypi:/etc/default# cat /var/log/openvpn.log
Mon Aug 4 20:53:26 2014 us=348071 Current Parameter Settings:
Mon Aug 4 20:53:26 2014 us=348898 config = '/etc/openvpn/server.conf'
Mon Aug 4 20:53:26 2014 us=349094 mode = 1
Mon Aug 4 20:53:26 2014 us=349260 persist_config = DISABLED
Mon Aug 4 20:53:26 2014 us=349424 persist_mode = 1
Mon Aug 4 20:53:26 2014 us=349585 show_ciphers = DISABLED
Mon Aug 4 20:53:26 2014 us=350168 show_digests = DISABLED
Mon Aug 4 20:53:26 2014 us=350337 show_engines = DISABLED
Mon Aug 4 20:53:26 2014 us=350503 genkey = DISABLED
Mon Aug 4 20:53:26 2014 us=350665 key_pass_file = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=351006 show_tls_ciphers = DISABLED
Mon Aug 4 20:53:26 2014 us=351216 Connection profiles [default]:
Mon Aug 4 20:53:26 2014 us=351384 proto = tcp-server
Mon Aug 4 20:53:26 2014 us=351547 local = '10.10.0.1'
Mon Aug 4 20:53:26 2014 us=351710 local_port = 1194
Mon Aug 4 20:53:26 2014 us=351870 remote = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=352028 remote_port = 1194
Mon Aug 4 20:53:26 2014 us=352188 remote_float = DISABLED
Mon Aug 4 20:53:26 2014 us=352345 bind_defined = DISABLED
Mon Aug 4 20:53:26 2014 us=352508 bind_local = ENABLED
Mon Aug 4 20:53:26 2014 us=352670 connect_retry_seconds = 5
Mon Aug 4 20:53:26 2014 us=352831 connect_timeout = 10
Mon Aug 4 20:53:26 2014 us=352993 connect_retry_max = 0
Mon Aug 4 20:53:26 2014 us=353151 socks_proxy_server = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=353312 socks_proxy_port = 0
Mon Aug 4 20:53:26 2014 us=353471 socks_proxy_retry = DISABLED
Mon Aug 4 20:53:26 2014 us=353634 Connection profiles END
Mon Aug 4 20:53:26 2014 us=353791 remote_random = DISABLED
Mon Aug 4 20:53:26 2014 us=353949 ipchange = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=354112 dev = 'tun'
Mon Aug 4 20:53:26 2014 us=354276 dev_type = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=354433 dev_node = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=354592 lladdr = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=354794 topology = 1
Mon Aug 4 20:53:26 2014 us=355001 tun_ipv6 = DISABLED
Mon Aug 4 20:53:26 2014 us=355165 ifconfig_local = '10.8.0.1'
Mon Aug 4 20:53:26 2014 us=355328 ifconfig_remote_netmask = '10.8.0.2'
Mon Aug 4 20:53:26 2014 us=355490 ifconfig_noexec = DISABLED
Mon Aug 4 20:53:26 2014 us=355650 ifconfig_nowarn = DISABLED
Mon Aug 4 20:53:26 2014 us=355811 ifconfig_ipv6_local = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=355975 ifconfig_ipv6_netbits = 0
Mon Aug 4 20:53:26 2014 us=356135 ifconfig_ipv6_remote = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=356297 shaper = 0
Mon Aug 4 20:53:26 2014 us=356457 tun_mtu = 1500
Mon Aug 4 20:53:26 2014 us=356620 tun_mtu_defined = ENABLED
Mon Aug 4 20:53:26 2014 us=356780 link_mtu = 1500
Mon Aug 4 20:53:26 2014 us=356941 link_mtu_defined = DISABLED
Mon Aug 4 20:53:26 2014 us=357106 tun_mtu_extra = 0
Mon Aug 4 20:53:26 2014 us=357266 tun_mtu_extra_defined = DISABLED
Mon Aug 4 20:53:26 2014 us=357423 fragment = 0
Mon Aug 4 20:53:26 2014 us=357586 mtu_discover_type = -1
Mon Aug 4 20:53:26 2014 us=357748 mtu_test = 0
Mon Aug 4 20:53:26 2014 us=357907 mlock = DISABLED
Mon Aug 4 20:53:26 2014 us=358065 keepalive_ping = 10
Mon Aug 4 20:53:26 2014 us=358223 keepalive_timeout = 120
Mon Aug 4 20:53:26 2014 us=358385 inactivity_timeout = 0
Mon Aug 4 20:53:26 2014 us=358545 ping_send_timeout = 10
Mon Aug 4 20:53:26 2014 us=358704 ping_rec_timeout = 240
Mon Aug 4 20:53:26 2014 us=358941 ping_rec_timeout_action = 2
Mon Aug 4 20:53:26 2014 us=359115 ping_timer_remote = DISABLED
Mon Aug 4 20:53:26 2014 us=359277 remap_sigusr1 = 0
Mon Aug 4 20:53:26 2014 us=361929 explicit_exit_notification = 0
Mon Aug 4 20:53:26 2014 us=362173 persist_tun = ENABLED
Mon Aug 4 20:53:26 2014 us=362341 persist_local_ip = DISABLED
Mon Aug 4 20:53:26 2014 us=362505 persist_remote_ip = DISABLED
Mon Aug 4 20:53:26 2014 us=362667 persist_key = ENABLED
Mon Aug 4 20:53:26 2014 us=362928 mssfix = 1450
Mon Aug 4 20:53:26 2014 us=363131 passtos = DISABLED
Mon Aug 4 20:53:26 2014 us=363307 resolve_retry_seconds = 1000000000
Mon Aug 4 20:53:26 2014 us=363573 username = 'nobody'
Mon Aug 4 20:53:26 2014 us=363746 groupname = 'nogroup'
Mon Aug 4 20:53:26 2014 us=363905 chroot_dir = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=364064 cd_dir = '/etc/openvpn'
Mon Aug 4 20:53:26 2014 us=364230 writepid = '/var/run/openvpn.server.pid'
Mon Aug 4 20:53:26 2014 us=364391 up_script = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=364550 down_script = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=364709 down_pre = DISABLED
Mon Aug 4 20:53:26 2014 us=364872 up_restart = DISABLED
Mon Aug 4 20:53:26 2014 us=365031 up_delay = DISABLED
Mon Aug 4 20:53:26 2014 us=365188 daemon = ENABLED
Mon Aug 4 20:53:26 2014 us=365344 inetd = 0
Mon Aug 4 20:53:26 2014 us=365504 log = ENABLED
Mon Aug 4 20:53:26 2014 us=365662 suppress_timestamps = DISABLED
Mon Aug 4 20:53:26 2014 us=365823 nice = 0
Mon Aug 4 20:53:26 2014 us=365981 verbosity = 6
Mon Aug 4 20:53:26 2014 us=366141 mute = 0
Mon Aug 4 20:53:26 2014 us=366300 gremlin = 0
Mon Aug 4 20:53:26 2014 us=366458 status_file = '/var/log/openvpn-status.log'
Mon Aug 4 20:53:26 2014 us=366621 status_file_version = 1
Mon Aug 4 20:53:26 2014 us=366830 status_file_update_freq = 20
Mon Aug 4 20:53:26 2014 us=367038 occ = ENABLED
Mon Aug 4 20:53:26 2014 us=367203 rcvbuf = 65536
Mon Aug 4 20:53:26 2014 us=367365 sndbuf = 65536
Mon Aug 4 20:53:26 2014 us=367526 sockflags = 0
Mon Aug 4 20:53:26 2014 us=367683 fast_io = DISABLED
Mon Aug 4 20:53:26 2014 us=367840 lzo = 7
Mon Aug 4 20:53:26 2014 us=368001 route_script = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=368160 route_default_gateway = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=368323 route_default_metric = 0
Mon Aug 4 20:53:26 2014 us=368483 route_noexec = DISABLED
Mon Aug 4 20:53:26 2014 us=368646 route_delay = 0
Mon Aug 4 20:53:26 2014 us=368813 route_delay_window = 30
Mon Aug 4 20:53:26 2014 us=368976 route_delay_defined = DISABLED
Mon Aug 4 20:53:26 2014 us=369144 route_nopull = DISABLED
Mon Aug 4 20:53:26 2014 us=369308 route_gateway_via_dhcp = DISABLED
Mon Aug 4 20:53:26 2014 us=369473 max_routes = 100
Mon Aug 4 20:53:26 2014 us=369639 allow_pull_fqdn = DISABLED
Mon Aug 4 20:53:26 2014 us=369847 route 10.8.0.0/255.255.255.0/nil/nil
Mon Aug 4 20:53:26 2014 us=370026 management_addr = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=370192 management_port = 0
Mon Aug 4 20:53:26 2014 us=370357 management_user_pass = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=370524 management_log_history_cache = 250
Mon Aug 4 20:53:26 2014 us=370688 management_echo_buffer_size = 100
Mon Aug 4 20:53:26 2014 us=371075 management_write_peer_info_file = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=371302 management_client_user = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=371473 management_client_group = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=371645 management_flags = 0
Mon Aug 4 20:53:26 2014 us=371810 shared_secret_file = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=371975 key_direction = 1
Mon Aug 4 20:53:26 2014 us=372139 ciphername_defined = ENABLED
Mon Aug 4 20:53:26 2014 us=372302 ciphername = 'AES-128-CBC'
Mon Aug 4 20:53:26 2014 us=372466 authname_defined = ENABLED
Mon Aug 4 20:53:26 2014 us=372630 authname = 'SHA1'
Mon Aug 4 20:53:26 2014 us=372791 prng_hash = 'SHA1'
Mon Aug 4 20:53:26 2014 us=372955 prng_nonce_secret_len = 16
Mon Aug 4 20:53:26 2014 us=373118 keysize = 0
Mon Aug 4 20:53:26 2014 us=373280 engine = DISABLED
Mon Aug 4 20:53:26 2014 us=373439 replay = ENABLED
Mon Aug 4 20:53:26 2014 us=373601 mute_replay_warnings = DISABLED
Mon Aug 4 20:53:26 2014 us=373771 replay_window = 64
Mon Aug 4 20:53:26 2014 us=373932 replay_time = 15
Mon Aug 4 20:53:26 2014 us=374093 packet_id_file = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=374260 use_iv = ENABLED
Mon Aug 4 20:53:26 2014 us=374420 test_crypto = DISABLED
Mon Aug 4 20:53:26 2014 us=374582 tls_server = ENABLED
Mon Aug 4 20:53:26 2014 us=374782 tls_client = DISABLED
Mon Aug 4 20:53:26 2014 us=374992 key_method = 2
Mon Aug 4 20:53:26 2014 us=375247 ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Mon Aug 4 20:53:26 2014 us=375421 ca_path = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=375588 dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem'
Mon Aug 4 20:53:26 2014 us=375753 cert_file = '/etc/openvpn/easy-rsa/keys/messi.crt'
Mon Aug 4 20:53:26 2014 us=375919 priv_key_file = '/etc/openvpn/easy-rsa/keys/messi.key'
Mon Aug 4 20:53:26 2014 us=376085 pkcs12_file = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=376251 cipher_list = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=376412 tls_verify = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=376576 tls_export_cert = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=376775 tls_remote = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=376983 crl_file = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=377153 ns_cert_type = 0
Mon Aug 4 20:53:26 2014 us=377319 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=377486 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=377652 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=377814 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=377981 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=378145 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=378306 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=378466 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=378633 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=378832 remote_cert_ku = 0
Mon Aug 4 20:53:26 2014 us=379038 remote_cert_ku[i] = 0
Mon Aug 4 20:53:26 2014 us=379207 remote_cert_ku[i] = 0
Mon Aug 4 20:53:26 2014 us=379379 remote_cert_ku[i] = 0
Mon Aug 4 20:53:26 2014 us=379543 remote_cert_ku[i] = 0
Mon Aug 4 20:53:26 2014 us=379707 remote_cert_ku[i] = 0
Mon Aug 4 20:53:26 2014 us=379875 remote_cert_ku[i] = 0
Mon Aug 4 20:53:26 2014 us=380038 remote_cert_eku = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=380204 tls_timeout = 2
Mon Aug 4 20:53:26 2014 us=380368 renegotiate_bytes = 0
Mon Aug 4 20:53:26 2014 us=380533 renegotiate_packets = 0
Mon Aug 4 20:53:26 2014 us=380698 renegotiate_seconds = 3600
Mon Aug 4 20:53:26 2014 us=380865 handshake_window = 60
Mon Aug 4 20:53:26 2014 us=381149 transition_window = 3600
Mon Aug 4 20:53:26 2014 us=381319 single_session = DISABLED
Mon Aug 4 20:53:26 2014 us=381483 push_peer_info = DISABLED
Mon Aug 4 20:53:26 2014 us=381644 tls_exit = DISABLED
Mon Aug 4 20:53:26 2014 us=381809 tls_auth_file = '/etc/openvpn/easy-rsa/keys/ta.key'
Mon Aug 4 20:53:26 2014 us=381976 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=382142 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=382306 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=382474 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=382642 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=382910 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=383100 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=383272 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=383440 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=383607 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=383773 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=383936 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=384118 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=384290 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=384457 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=384624 pkcs11_protected_authentication = DISABLED
Mon Aug 4 20:53:26 2014 us=384794 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=384962 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=385131 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=385300 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=385468 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=385723 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=385900 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=386068 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=386236 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=386404 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=386573 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=386783 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=387002 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=387173 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=387341 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=387512 pkcs11_private_mode = 00000000
Mon Aug 4 20:53:26 2014 us=387673 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=387837 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=388002 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=388164 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=388326 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=388492 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=388657 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=388820 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=388988 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=389152 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=389312 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=389475 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=389639 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=389800 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=389962 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=390130 pkcs11_cert_private = DISABLED
Mon Aug 4 20:53:26 2014 us=390294 pkcs11_pin_cache_period = -1
Mon Aug 4 20:53:26 2014 us=390457 pkcs11_id = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=390625 pkcs11_id_management = DISABLED
Mon Aug 4 20:53:26 2014 us=390976 server_network = 10.8.0.0
Mon Aug 4 20:53:26 2014 us=391211 server_netmask = 255.255.255.0
Mon Aug 4 20:53:26 2014 us=391442 server_network_ipv6 = ::
Mon Aug 4 20:53:26 2014 us=391624 server_netbits_ipv6 = 0
Mon Aug 4 20:53:26 2014 us=391808 server_bridge_ip = 0.0.0.0
Mon Aug 4 20:53:26 2014 us=391991 server_bridge_netmask = 0.0.0.0
Mon Aug 4 20:53:26 2014 us=392168 server_bridge_pool_start = 0.0.0.0
Mon Aug 4 20:53:26 2014 us=392347 server_bridge_pool_end = 0.0.0.0
Mon Aug 4 20:53:26 2014 us=392516 push_entry = 'route 10.8.0.1 255.255.255.255'
Mon Aug 4 20:53:26 2014 us=392681 push_entry = 'route 10.8.0.0 255.255.255.0'
Mon Aug 4 20:53:26 2014 us=392846 push_entry = 'route 10.10.0.0 255.255.0.0'
Mon Aug 4 20:53:26 2014 us=393011 push_entry = 'dhcp-option DNS 8.8.8.8'
Mon Aug 4 20:53:26 2014 us=393176 push_entry = 'redirect-gateway def1'
Mon Aug 4 20:53:26 2014 us=393338 push_entry = 'route 10.8.0.0 255.255.255.0'
Mon Aug 4 20:53:26 2014 us=393505 push_entry = 'topology net30'
Mon Aug 4 20:53:26 2014 us=393669 push_entry = 'ping 10'
Mon Aug 4 20:53:26 2014 us=393829 push_entry = 'ping-restart 120'
Mon Aug 4 20:53:26 2014 us=393995 ifconfig_pool_defined = ENABLED
Mon Aug 4 20:53:26 2014 us=394175 ifconfig_pool_start = 10.8.0.4
Mon Aug 4 20:53:26 2014 us=394353 ifconfig_pool_end = 10.8.0.251
Mon Aug 4 20:53:26 2014 us=394531 ifconfig_pool_netmask = 0.0.0.0
Mon Aug 4 20:53:26 2014 us=394694 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=394943 ifconfig_pool_persist_refresh_freq = 600
Mon Aug 4 20:53:26 2014 us=395119 ifconfig_ipv6_pool_defined = DISABLED
Mon Aug 4 20:53:26 2014 us=395297 ifconfig_ipv6_pool_base = ::
Mon Aug 4 20:53:26 2014 us=395467 ifconfig_ipv6_pool_netbits = 0
Mon Aug 4 20:53:26 2014 us=395635 n_bcast_buf = 256
Mon Aug 4 20:53:26 2014 us=395798 tcp_queue_limit = 64
Mon Aug 4 20:53:26 2014 us=395961 real_hash_size = 256
Mon Aug 4 20:53:26 2014 us=396124 virtual_hash_size = 256
Mon Aug 4 20:53:26 2014 us=396379 client_connect_script = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=396555 learn_address_script = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=396724 client_disconnect_script = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=396892 client_config_dir = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=397054 ccd_exclusive = DISABLED
Mon Aug 4 20:53:26 2014 us=397213 tmp_dir = '/tmp'
Mon Aug 4 20:53:26 2014 us=397381 push_ifconfig_defined = DISABLED
Mon Aug 4 20:53:26 2014 us=397563 push_ifconfig_local = 0.0.0.0
Mon Aug 4 20:53:26 2014 us=397746 push_ifconfig_remote_netmask = 0.0.0.0
Mon Aug 4 20:53:26 2014 us=397914 push_ifconfig_ipv6_defined = DISABLED
Mon Aug 4 20:53:26 2014 us=398092 push_ifconfig_ipv6_local = ::/0
Mon Aug 4 20:53:26 2014 us=398269 push_ifconfig_ipv6_remote = ::
Mon Aug 4 20:53:26 2014 us=398434 enable_c2c = ENABLED
Mon Aug 4 20:53:26 2014 us=398599 duplicate_cn = ENABLED
Mon Aug 4 20:53:26 2014 us=398807 cf_max = 0
Mon Aug 4 20:53:26 2014 us=399026 cf_per = 0
Mon Aug 4 20:53:26 2014 us=399194 max_clients = 1024
Mon Aug 4 20:53:26 2014 us=399364 max_routes_per_client = 256
Mon Aug 4 20:53:26 2014 us=399528 auth_user_pass_verify_script = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=399696 auth_user_pass_verify_script_via_file = DISABLED
Mon Aug 4 20:53:26 2014 us=399865 ssl_flags = 0
Mon Aug 4 20:53:26 2014 us=400030 port_share_host = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=400197 port_share_port = 0
Mon Aug 4 20:53:26 2014 us=400359 client = DISABLED
Mon Aug 4 20:53:26 2014 us=400523 pull = DISABLED
Mon Aug 4 20:53:26 2014 us=400687 auth_user_pass_file = '[UNDEF]'
Mon Aug 4 20:53:26 2014 us=400869 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Mon Aug 4 20:53:26 2014 us=402995 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Mon Aug 4 20:53:26 2014 us=403274 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Aug 4 20:53:26 2014 us=447531 Diffie-Hellman initialized with 1024 bit key
Mon Aug 4 20:53:26 2014 us=461633 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Mon Aug 4 20:53:26 2014 us=462046 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 4 20:53:26 2014 us=462282 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 4 20:53:26 2014 us=462573 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Mon Aug 4 20:53:26 2014 us=463039 Socket Buffers: R=[87380->131072] S=[16384->131072]
Mon Aug 4 20:53:26 2014 us=464633 ROUTE default_gateway=192.168.0.1
Mon Aug 4 20:53:26 2014 us=480340 TUN/TAP device tun0 opened
Mon Aug 4 20:53:26 2014 us=480740 TUN/TAP TX queue length set to 100
Mon Aug 4 20:53:26 2014 us=481152 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Aug 4 20:53:26 2014 us=481604 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Mon Aug 4 20:53:26 2014 us=495617 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Mon Aug 4 20:53:26 2014 us=515646 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Aug 4 20:53:26 2014 us=536267 GID set to nogroup
Mon Aug 4 20:53:26 2014 us=536879 UID set to nobody
Mon Aug 4 20:53:26 2014 us=537291 Listening for incoming TCP connection on [AF_INET]10.10.0.1:1194
Mon Aug 4 20:53:26 2014 us=537674 TCPv4_SERVER link local (bound): [AF_INET]10.10.0.1:1194
Mon Aug 4 20:53:26 2014 us=537872 TCPv4_SERVER link remote: [undef]
Mon Aug 4 20:53:26 2014 us=538103 MULTI: multi_init called, r=256 v=256
Mon Aug 4 20:53:26 2014 us=539101 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Aug 4 20:53:26 2014 us=539526 MULTI: TCP INIT maxclients=1024 maxevents=1028
Mon Aug 4 20:53:26 2014 us=540077 Initialization Sequence Completed

can you see if my server is running fine

nestat ltnup

root@raspberrypi:/etc/default# netstat -ltnup
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 3406/sshd
tcp 0 0 0.0.0.0:5910 0.0.0.0:* LISTEN 2594/Xvnc
tcp 0 0 127.0.0.1:3350 0.0.0.0:* LISTEN 2073/xrdp-sesman
tcp 0 0 0.0.0.0:3389 0.0.0.0:* LISTEN 2065/xrdp
tcp 0 0 10.10.0.1:1194 0.0.0.0:* LISTEN 3030/openvpn
udp 0 0 0.0.0.0:28622 0.0.0.0:* 2200/dhcpd
udp 0 0 0.0.0.0:48689 0.0.0.0:* 1673/dhclient
udp 0 0 0.0.0.0:67 0.0.0.0:* 2200/dhcpd
udp 0 0 0.0.0.0:68 0.0.0.0:* 1673/dhclient
udp 0 0 10.10.0.1:123 0.0.0.0:* 2271/ntpd
udp 0 0 10.8.0.1:123 0.0.0.0:* 2271/ntpd
udp 0 0 192.168.0.19:123 0.0.0.0:* 2271/ntpd
udp 0 0 127.0.0.1:123 0.0.0.0:* 2271/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:* 2271/ntpd

ncp-uok

this is server config.... please help it out as i am badly stuck 😐

local 10.10.0.1
dev tun
proto tcp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/messi.crt
key /etc/openvpn/easy-rsa/keys/messi.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 10.10.0.0 255.255.0.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 6

maikcat

hello again,

first remove these,

ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"

from you logs,

openvpn service starts normally,
but it doesnt seem to recieve any openvpn traffic...

btw,
your pi has 2 ip addreses...
can you please the output of

ip r

on your pi?
what device is in front of it? (router/firewall?)
can you also post the output of

iptables -L
iptables -L -t nat

on your pi?

Michael.

ncp-uok

hi michael

Thanks for your time!!!

As per your instruction i removed above three lines and restarted the openvpn

I have made my pi as a server and using laptop as a client by transfering .ovpn file into it through openvpn GUI

My pi openvpn server is connected through router provided by ISP to home and i am also connecting my laptop to same router as openvpn client. I am using DNSDYNAMIC.org for communicating between server client over internet

following are the outputs:

all the output i extracted is when server was running without client
[img]
root@raspberrypi:~# ip r
default via 192.168.0.1 dev eth0
10.8.0.0/24 via 10.8.0.2 dev tun0
10.8.0.2 dev tun0 proto kernel scope link src 10.8.0.1
10.10.0.0/16 dev eth1 proto kernel scope link src 10.10.0.1
192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.19

oot@raspberrypi:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@raspberrypi:~#

root@raspberrypi:~# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
SNAT all -- 10.8.0.0/24 anywhere to:10.10.0.1
root@raspberrypi:~#
[/img]

After removing lines the new server log is:

[img]root@raspberrypi:~# cat /var/log/openvpn.log
Wed Aug 6 03:06:50 2014 us=399315 Current Parameter Settings:
Wed Aug 6 03:06:50 2014 us=400128 config = '/etc/openvpn/server.conf'
Wed Aug 6 03:06:50 2014 us=400323 mode = 1
Wed Aug 6 03:06:50 2014 us=400489 persist_config = DISABLED
Wed Aug 6 03:06:50 2014 us=400650 persist_mode = 1
Wed Aug 6 03:06:50 2014 us=400811 show_ciphers = DISABLED
Wed Aug 6 03:06:50 2014 us=400970 show_digests = DISABLED
Wed Aug 6 03:06:50 2014 us=401130 show_engines = DISABLED
Wed Aug 6 03:06:50 2014 us=401696 genkey = DISABLED
Wed Aug 6 03:06:50 2014 us=401889 key_pass_file = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=402049 show_tls_ciphers = DISABLED
Wed Aug 6 03:06:50 2014 us=402311 Connection profiles [default]:
Wed Aug 6 03:06:50 2014 us=402491 proto = tcp-server
Wed Aug 6 03:06:50 2014 us=402656 local = '10.10.0.1'
Wed Aug 6 03:06:50 2014 us=402817 local_port = 1194
Wed Aug 6 03:06:50 2014 us=402973 remote = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=403136 remote_port = 1194
Wed Aug 6 03:06:50 2014 us=403390 remote_float = DISABLED
Wed Aug 6 03:06:50 2014 us=403593 bind_defined = DISABLED
Wed Aug 6 03:06:50 2014 us=403760 bind_local = ENABLED
Wed Aug 6 03:06:50 2014 us=403923 connect_retry_seconds = 5
Wed Aug 6 03:06:50 2014 us=404083 connect_timeout = 10
Wed Aug 6 03:06:50 2014 us=404278 connect_retry_max = 0
Wed Aug 6 03:06:50 2014 us=404453 socks_proxy_server = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=404621 socks_proxy_port = 0
Wed Aug 6 03:06:50 2014 us=404780 socks_proxy_retry = DISABLED
Wed Aug 6 03:06:50 2014 us=404940 Connection profiles END
Wed Aug 6 03:06:50 2014 us=405100 remote_random = DISABLED
Wed Aug 6 03:06:50 2014 us=405346 ipchange = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=405514 dev = 'tun'
Wed Aug 6 03:06:50 2014 us=405672 dev_type = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=405830 dev_node = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=405992 lladdr = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=406149 topology = 1
Wed Aug 6 03:06:50 2014 us=406305 tun_ipv6 = DISABLED
Wed Aug 6 03:06:50 2014 us=406465 ifconfig_local = '10.8.0.1'
Wed Aug 6 03:06:50 2014 us=406628 ifconfig_remote_netmask = '10.8.0.2'
Wed Aug 6 03:06:50 2014 us=406786 ifconfig_noexec = DISABLED
Wed Aug 6 03:06:50 2014 us=406940 ifconfig_nowarn = DISABLED
Wed Aug 6 03:06:50 2014 us=407099 ifconfig_ipv6_local = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=407259 ifconfig_ipv6_netbits = 0
Wed Aug 6 03:06:50 2014 us=407416 ifconfig_ipv6_remote = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=407575 shaper = 0
Wed Aug 6 03:06:50 2014 us=407736 tun_mtu = 1500
Wed Aug 6 03:06:50 2014 us=407891 tun_mtu_defined = ENABLED
Wed Aug 6 03:06:50 2014 us=408052 link_mtu = 1500
Wed Aug 6 03:06:50 2014 us=408210 link_mtu_defined = DISABLED
Wed Aug 6 03:06:50 2014 us=408373 tun_mtu_extra = 0
Wed Aug 6 03:06:50 2014 us=408533 tun_mtu_extra_defined = DISABLED
Wed Aug 6 03:06:50 2014 us=408693 fragment = 0
Wed Aug 6 03:06:50 2014 us=408851 mtu_discover_type = -1
Wed Aug 6 03:06:50 2014 us=409013 mtu_test = 0
Wed Aug 6 03:06:50 2014 us=409171 mlock = DISABLED
Wed Aug 6 03:06:50 2014 us=409332 keepalive_ping = 10
Wed Aug 6 03:06:50 2014 us=409493 keepalive_timeout = 120
Wed Aug 6 03:06:50 2014 us=409653 inactivity_timeout = 0
Wed Aug 6 03:06:50 2014 us=409813 ping_send_timeout = 10
Wed Aug 6 03:06:50 2014 us=409974 ping_rec_timeout = 240
Wed Aug 6 03:06:50 2014 us=410173 ping_rec_timeout_action = 2
Wed Aug 6 03:06:50 2014 us=410380 ping_timer_remote = DISABLED
Wed Aug 6 03:06:50 2014 us=410549 remap_sigusr1 = 0
Wed Aug 6 03:06:50 2014 us=410712 explicit_exit_notification = 0
Wed Aug 6 03:06:50 2014 us=410871 persist_tun = ENABLED
Wed Aug 6 03:06:50 2014 us=412949 persist_local_ip = DISABLED
Wed Aug 6 03:06:50 2014 us=413218 persist_remote_ip = DISABLED
Wed Aug 6 03:06:50 2014 us=413623 persist_key = ENABLED
Wed Aug 6 03:06:50 2014 us=413795 mssfix = 1450
Wed Aug 6 03:06:50 2014 us=413982 passtos = DISABLED
Wed Aug 6 03:06:50 2014 us=414155 resolve_retry_seconds = 1000000000
Wed Aug 6 03:06:50 2014 us=414419 username = 'nobody'
Wed Aug 6 03:06:50 2014 us=414592 groupname = 'nogroup'
Wed Aug 6 03:06:50 2014 us=414753 chroot_dir = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=414912 cd_dir = '/etc/openvpn'
Wed Aug 6 03:06:50 2014 us=415073 writepid = '/var/run/openvpn.server.pid'
Wed Aug 6 03:06:50 2014 us=415233 up_script = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=415392 down_script = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=415549 down_pre = DISABLED
Wed Aug 6 03:06:50 2014 us=415706 up_restart = DISABLED
Wed Aug 6 03:06:50 2014 us=415867 up_delay = DISABLED
Wed Aug 6 03:06:50 2014 us=416024 daemon = ENABLED
Wed Aug 6 03:06:50 2014 us=416187 inetd = 0
Wed Aug 6 03:06:50 2014 us=416344 log = ENABLED
Wed Aug 6 03:06:50 2014 us=416508 suppress_timestamps = DISABLED
Wed Aug 6 03:06:50 2014 us=416667 nice = 0
Wed Aug 6 03:06:50 2014 us=416826 verbosity = 6
Wed Aug 6 03:06:50 2014 us=416986 mute = 0
Wed Aug 6 03:06:50 2014 us=417145 gremlin = 0
Wed Aug 6 03:06:50 2014 us=417303 status_file = '/var/log/openvpn-status.log'
Wed Aug 6 03:06:50 2014 us=417468 status_file_version = 1
Wed Aug 6 03:06:50 2014 us=417629 status_file_update_freq = 20
Wed Aug 6 03:06:50 2014 us=417788 occ = ENABLED
Wed Aug 6 03:06:50 2014 us=417946 rcvbuf = 65536
Wed Aug 6 03:06:50 2014 us=418152 sndbuf = 65536
Wed Aug 6 03:06:50 2014 us=418368 sockflags = 0
Wed Aug 6 03:06:50 2014 us=418532 fast_io = DISABLED
Wed Aug 6 03:06:50 2014 us=418693 lzo = 7
Wed Aug 6 03:06:50 2014 us=418857 route_script = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=419017 route_default_gateway = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=419179 route_default_metric = 0
Wed Aug 6 03:06:50 2014 us=419338 route_noexec = DISABLED
Wed Aug 6 03:06:50 2014 us=419507 route_delay = 0
Wed Aug 6 03:06:50 2014 us=419676 route_delay_window = 30
Wed Aug 6 03:06:50 2014 us=419839 route_delay_defined = DISABLED
Wed Aug 6 03:06:50 2014 us=420006 route_nopull = DISABLED
Wed Aug 6 03:06:50 2014 us=420171 route_gateway_via_dhcp = DISABLED
Wed Aug 6 03:06:50 2014 us=420337 max_routes = 100
Wed Aug 6 03:06:50 2014 us=420501 allow_pull_fqdn = DISABLED
Wed Aug 6 03:06:50 2014 us=420710 route 10.8.0.0/255.255.255.0/nil/nil
Wed Aug 6 03:06:50 2014 us=420888 management_addr = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=421055 management_port = 0
Wed Aug 6 03:06:50 2014 us=421300 management_user_pass = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=421485 management_log_history_cache = 250
Wed Aug 6 03:06:50 2014 us=421653 management_echo_buffer_size = 100
Wed Aug 6 03:06:50 2014 us=421819 management_write_peer_info_file = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=421985 management_client_user = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=422149 management_client_group = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=422316 management_flags = 0
Wed Aug 6 03:06:50 2014 us=422484 shared_secret_file = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=422652 key_direction = 1
Wed Aug 6 03:06:50 2014 us=422817 ciphername_defined = ENABLED
Wed Aug 6 03:06:50 2014 us=422987 ciphername = 'AES-128-CBC'
Wed Aug 6 03:06:50 2014 us=423149 authname_defined = ENABLED
Wed Aug 6 03:06:50 2014 us=423456 authname = 'SHA1'
Wed Aug 6 03:06:50 2014 us=423671 prng_hash = 'SHA1'
Wed Aug 6 03:06:50 2014 us=423841 prng_nonce_secret_len = 16
Wed Aug 6 03:06:50 2014 us=424009 keysize = 0
Wed Aug 6 03:06:50 2014 us=424171 engine = DISABLED
Wed Aug 6 03:06:50 2014 us=424336 replay = ENABLED
Wed Aug 6 03:06:50 2014 us=424505 mute_replay_warnings = DISABLED
Wed Aug 6 03:06:50 2014 us=424672 replay_window = 64
Wed Aug 6 03:06:50 2014 us=424839 replay_time = 15
Wed Aug 6 03:06:50 2014 us=425003 packet_id_file = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=425164 use_iv = ENABLED
Wed Aug 6 03:06:50 2014 us=425329 test_crypto = DISABLED
Wed Aug 6 03:06:50 2014 us=425494 tls_server = ENABLED
Wed Aug 6 03:06:50 2014 us=425658 tls_client = DISABLED
Wed Aug 6 03:06:50 2014 us=425823 key_method = 2
Wed Aug 6 03:06:50 2014 us=426074 ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Wed Aug 6 03:06:50 2014 us=426339 ca_path = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=426522 dh_file = '/etc/openvpn/easy-rsa/keys/dh1024.pem'
Wed Aug 6 03:06:50 2014 us=426693 cert_file = '/etc/openvpn/easy-rsa/keys/messi.crt'
Wed Aug 6 03:06:50 2014 us=426862 priv_key_file = '/etc/openvpn/easy-rsa/keys/messi.key'
Wed Aug 6 03:06:50 2014 us=427027 pkcs12_file = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=427194 cipher_list = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=427360 tls_verify = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=427520 tls_export_cert = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=427683 tls_remote = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=427847 crl_file = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=428013 ns_cert_type = 0
Wed Aug 6 03:06:50 2014 us=428178 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=428343 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=428506 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=428671 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=428832 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=428996 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=429194 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=429399 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=429565 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=429728 remote_cert_ku = 0
Wed Aug 6 03:06:50 2014 us=429893 remote_cert_ku[i] = 0
Wed Aug 6 03:06:50 2014 us=430057 remote_cert_ku[i] = 0
Wed Aug 6 03:06:50 2014 us=430218 remote_cert_ku[i] = 0
Wed Aug 6 03:06:50 2014 us=430382 remote_cert_ku[i] = 0
Wed Aug 6 03:06:50 2014 us=430543 remote_cert_ku[i] = 0
Wed Aug 6 03:06:50 2014 us=430703 remote_cert_ku[i] = 0
Wed Aug 6 03:06:50 2014 us=430865 remote_cert_eku = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=431027 tls_timeout = 2
Wed Aug 6 03:06:50 2014 us=431186 renegotiate_bytes = 0
Wed Aug 6 03:06:50 2014 us=431350 renegotiate_packets = 0
Wed Aug 6 03:06:50 2014 us=431514 renegotiate_seconds = 3600
Wed Aug 6 03:06:50 2014 us=431674 handshake_window = 60
Wed Aug 6 03:06:50 2014 us=431834 transition_window = 3600
Wed Aug 6 03:06:50 2014 us=431994 single_session = DISABLED
Wed Aug 6 03:06:50 2014 us=432155 push_peer_info = DISABLED
Wed Aug 6 03:06:50 2014 us=432312 tls_exit = DISABLED
Wed Aug 6 03:06:50 2014 us=432473 tls_auth_file = '/etc/openvpn/easy-rsa/keys/ta.key'
Wed Aug 6 03:06:50 2014 us=432637 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=432799 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=432966 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=433131 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=433388 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=433595 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=433767 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=433934 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=434100 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=434358 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=434530 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=434697 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=434863 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=435027 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=435193 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=435358 pkcs11_protected_authentication = DISABLED
Wed Aug 6 03:06:50 2014 us=435529 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=435699 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=435867 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=436034 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=436201 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=436458 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=436636 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=436805 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=436972 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=437185 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=437400 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=437575 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=437744 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=437908 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=438074 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=438242 pkcs11_private_mode = 00000000
Wed Aug 6 03:06:50 2014 us=438404 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=438567 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=438728 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=438890 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=439052 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=439219 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=439385 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=439548 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=439711 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=439876 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=440039 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=440203 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=440368 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=440535 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=440700 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=440865 pkcs11_cert_private = DISABLED
Wed Aug 6 03:06:50 2014 us=441031 pkcs11_pin_cache_period = -1
Wed Aug 6 03:06:50 2014 us=441192 pkcs11_id = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=441360 pkcs11_id_management = DISABLED
Wed Aug 6 03:06:50 2014 us=441574 server_network = 10.8.0.0
Wed Aug 6 03:06:50 2014 us=441768 server_netmask = 255.255.255.0
Wed Aug 6 03:06:50 2014 us=441996 server_network_ipv6 = ::
Wed Aug 6 03:06:50 2014 us=442222 server_netbits_ipv6 = 0
Wed Aug 6 03:06:50 2014 us=442457 server_bridge_ip = 0.0.0.0
Wed Aug 6 03:06:50 2014 us=442643 server_bridge_netmask = 0.0.0.0
Wed Aug 6 03:06:50 2014 us=442828 server_bridge_pool_start = 0.0.0.0
Wed Aug 6 03:06:50 2014 us=443014 server_bridge_pool_end = 0.0.0.0
Wed Aug 6 03:06:50 2014 us=443180 push_entry = 'route 10.10.0.0 255.255.0.0'
Wed Aug 6 03:06:50 2014 us=443446 push_entry = 'dhcp-option DNS 8.8.8.8'
Wed Aug 6 03:06:50 2014 us=443646 push_entry = 'redirect-gateway def1'
Wed Aug 6 03:06:50 2014 us=443817 push_entry = 'route 10.8.0.0 255.255.255.0'
Wed Aug 6 03:06:50 2014 us=443987 push_entry = 'topology net30'
Wed Aug 6 03:06:50 2014 us=444154 push_entry = 'ping 10'
Wed Aug 6 03:06:50 2014 us=444320 push_entry = 'ping-restart 120'
Wed Aug 6 03:06:50 2014 us=444486 ifconfig_pool_defined = ENABLED
Wed Aug 6 03:06:50 2014 us=444671 ifconfig_pool_start = 10.8.0.4
Wed Aug 6 03:06:50 2014 us=444861 ifconfig_pool_end = 10.8.0.251
Wed Aug 6 03:06:50 2014 us=445072 ifconfig_pool_netmask = 0.0.0.0
Wed Aug 6 03:06:50 2014 us=445332 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=445514 ifconfig_pool_persist_refresh_freq = 600
Wed Aug 6 03:06:50 2014 us=445680 ifconfig_ipv6_pool_defined = DISABLED
Wed Aug 6 03:06:50 2014 us=445860 ifconfig_ipv6_pool_base = ::
Wed Aug 6 03:06:50 2014 us=446028 ifconfig_ipv6_pool_netbits = 0
Wed Aug 6 03:06:50 2014 us=446192 n_bcast_buf = 256
Wed Aug 6 03:06:50 2014 us=446352 tcp_queue_limit = 64
Wed Aug 6 03:06:50 2014 us=446517 real_hash_size = 256
Wed Aug 6 03:06:50 2014 us=446679 virtual_hash_size = 256
Wed Aug 6 03:06:50 2014 us=446840 client_connect_script = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=447006 learn_address_script = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=447262 client_disconnect_script = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=447437 client_config_dir = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=447602 ccd_exclusive = DISABLED
Wed Aug 6 03:06:50 2014 us=447766 tmp_dir = '/tmp'
Wed Aug 6 03:06:50 2014 us=447927 push_ifconfig_defined = DISABLED
Wed Aug 6 03:06:50 2014 us=448110 push_ifconfig_local = 0.0.0.0
Wed Aug 6 03:06:50 2014 us=448289 push_ifconfig_remote_netmask = 0.0.0.0
Wed Aug 6 03:06:50 2014 us=448453 push_ifconfig_ipv6_defined = DISABLED
Wed Aug 6 03:06:50 2014 us=448633 push_ifconfig_ipv6_local = ::/0
Wed Aug 6 03:06:50 2014 us=448807 push_ifconfig_ipv6_remote = ::
Wed Aug 6 03:06:50 2014 us=448971 enable_c2c = ENABLED
Wed Aug 6 03:06:50 2014 us=449133 duplicate_cn = ENABLED
Wed Aug 6 03:06:50 2014 us=449296 cf_max = 0
Wed Aug 6 03:06:50 2014 us=449458 cf_per = 0
Wed Aug 6 03:06:50 2014 us=449621 max_clients = 1024
Wed Aug 6 03:06:50 2014 us=449784 max_routes_per_client = 256
Wed Aug 6 03:06:50 2014 us=449951 auth_user_pass_verify_script = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=450161 auth_user_pass_verify_script_via_file = DISABLED
Wed Aug 6 03:06:50 2014 us=450379 ssl_flags = 0
Wed Aug 6 03:06:50 2014 us=450550 port_share_host = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=450721 port_share_port = 0
Wed Aug 6 03:06:50 2014 us=450886 client = DISABLED
Wed Aug 6 03:06:50 2014 us=451049 pull = DISABLED
Wed Aug 6 03:06:50 2014 us=451213 auth_user_pass_file = '[UNDEF]'
Wed Aug 6 03:06:50 2014 us=451395 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Wed Aug 6 03:06:50 2014 us=453518 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Wed Aug 6 03:06:50 2014 us=453814 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Aug 6 03:06:50 2014 us=494366 Diffie-Hellman initialized with 1024 bit key
Wed Aug 6 03:06:50 2014 us=507878 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Wed Aug 6 03:06:50 2014 us=508283 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 6 03:06:50 2014 us=508525 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 6 03:06:50 2014 us=508818 TLS-Auth MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Wed Aug 6 03:06:50 2014 us=509283 Socket Buffers: R=[87380->131072] S=[16384->131072]
Wed Aug 6 03:06:50 2014 us=510881 ROUTE default_gateway=192.168.0.1
Wed Aug 6 03:06:50 2014 us=524110 TUN/TAP device tun0 opened
Wed Aug 6 03:06:50 2014 us=524499 TUN/TAP TX queue length set to 100
Wed Aug 6 03:06:50 2014 us=524749 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Aug 6 03:06:50 2014 us=525182 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Wed Aug 6 03:06:50 2014 us=544671 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Wed Aug 6 03:06:50 2014 us=563203 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Aug 6 03:06:50 2014 us=579314 GID set to nogroup
Wed Aug 6 03:06:50 2014 us=579923 UID set to nobody
Wed Aug 6 03:06:50 2014 us=580320 Listening for incoming TCP connection on [AF_INET]10.10.0.1:1194
Wed Aug 6 03:06:50 2014 us=580696 TCPv4_SERVER link local (bound): [AF_INET]10.10.0.1:1194
Wed Aug 6 03:06:50 2014 us=580886 TCPv4_SERVER link remote: [undef]
Wed Aug 6 03:06:50 2014 us=581116 MULTI: multi_init called, r=256 v=256
Wed Aug 6 03:06:50 2014 us=582078 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Aug 6 03:06:50 2014 us=582502 MULTI: TCP INIT maxclients=1024 maxevents=1028
Wed Aug 6 03:06:50 2014 us=582980 Initialization Sequence Completed

[/img]

Thanks

maikcat

My pi openvpn server is connected through router provided by ISP to home and i am also connecting my laptop to same router as openvpn client. I am using DNSDYNAMIC.org for communicating between server client over internet

if you are testing your setup while in the same lan with your openvpn server please stop...

try to use another internet connection for your tests,
keep in mind that not every router NATs back requests coming from its lan destined to its wan port forwarding rule...

Michael.

ncp-uok

hi debbie

thats a good idea as i dont have another internet connection.....i can check it on lan.

@michael.... how you find the output you told me to... are they fine????

Thank you

ncp-uok

hi

debbie , please also tell me one thing you told me to replace the remote host with local private ip of server. just confirm me that local ip is the ip at private end of server i.e. eth1 and the remote dns name in client side conf i gave was the dns name which was at the eth0 of server. so my setup is like

(10.10.0.1)eth1 |raspberry server|eth0(dns name)========|internet(dnsdynamic.org)|========eth0|client raspberry|eth1(private ip)

so you are saying to replace dns name with 10.10.0.1 at client conf in order to test it directly?

I hope i am able to clarify my question! 🙂

ncp-uok

they are not communicating even directly 😐 !!

ncp-uok

hi
actually i removed my isp router from network now both server and client raspberry pies are connected directly like lan setup as i drew the diagram. Do i have to give static ips to the eth0 connection of both pies? Is that the way you are telling to connect directly?

Thanks

ncp-uok

This is what i understand to connect directly!!

(10.10.0.1)eth1 |raspberry server|eth0===========eth0|client raspberry|eth1(private ip)

ncp-uok

server.conf

local 10.10.0.1
dev tun
proto tcp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/messi.crt
key /etc/openvpn/easy-rsa/keys/messi.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
#ifconfig 10.8.0.1 10.8.0.2
#push "route 10.8.0.1 255.255.255.255"
#push "route 10.8.0.0 255.255.255.0"
push "route 10.10.0.0 255.255.0.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 6

client.conf

client
dev tun
proto tcp
remote 10.10.0.1 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 6
mute 20

<ca>
-----BEGIN CERTIFICATE-----
***
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
***
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,3888C143C6AAF73A

***
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
***
-----END OpenVPN Static key V1-----
</tls-auth>

ncp-uok

Now there is no internet and isp router in between just directly connected pies just like i drew the diagram again in my third last post!

thank you

ncp-uok

hi forum team

Actually one post of your of dual ip address on my pi lead me to solve the problem..... I changed iptables nat postrouting..also Ip i was putting on remote end was wrong.

So now I am able to connect my pi server with my client on Lan connection as directed by you.... Now i want to connect it through internet what should i do and change.
for guys who are having same problem as of mine i also watched the youtube video to help me out about iptable command so here is the link
https://www.youtube.com/watch?v=O7D7UkA3IKQ

thanks forum team

for your consideration i put the client log!! please tell what changes i need to make this connection to communicate over internet. I have already setup ddclient on my server with domain name.

Thu Aug 07 15:47:02 2014 us=402209 Current Parameter Settings:
Thu Aug 07 15:47:02 2014 us=403209 config = 'client1.ovpn'
Thu Aug 07 15:47:02 2014 us=403209 mode = 0
Thu Aug 07 15:47:02 2014 us=403209 show_ciphers = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 show_digests = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 show_engines = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 genkey = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 key_pass_file = '[UNDEF]'
Thu Aug 07 15:47:02 2014 us=403209 show_tls_ciphers = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 Connection profiles [default]:
Thu Aug 07 15:47:02 2014 us=403209 proto = tcp-client
Thu Aug 07 15:47:02 2014 us=403209 local = '[UNDEF]'
Thu Aug 07 15:47:02 2014 us=403209 local_port = 0
Thu Aug 07 15:47:02 2014 us=403209 remote = '192.168.0.19'
Thu Aug 07 15:47:02 2014 us=403209 remote_port = 1194
Thu Aug 07 15:47:02 2014 us=403209 remote_float = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 bind_defined = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 bind_local = DISABLED
Thu Aug 07 15:47:02 2014 us=403209 connect_retry_seconds = 5
Thu Aug 07 15:47:02 2014 us=403209 connect_timeout = 10
Thu Aug 07 15:47:02 2014 us=403209 NOTE: --mute triggered...
Thu Aug 07 15:47:02 2014 us=403209 265 variation(s) on previous 20 message(s) suppressed by --mute
Thu Aug 07 15:47:02 2014 us=403209 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun 5 2014
Thu Aug 07 15:47:02 2014 us=403209 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Thu Aug 07 15:47:02 2014 us=406209 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Aug 07 15:47:02 2014 us=406209 Need hold release from management interface, waiting...
Thu Aug 07 15:47:02 2014 us=844234 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Aug 07 15:47:02 2014 us=944240 MANAGEMENT: CMD 'state on'
Thu Aug 07 15:47:02 2014 us=944240 MANAGEMENT: CMD 'log all on'
Thu Aug 07 15:47:03 2014 us=5243 MANAGEMENT: CMD 'hold off'
Thu Aug 07 15:47:03 2014 us=8244 MANAGEMENT: CMD 'hold release'
Thu Aug 07 15:47:06 2014 us=544446 MANAGEMENT: CMD 'password [...]'
Thu Aug 07 15:47:06 2014 us=545446 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Aug 07 15:47:06 2014 us=547446 Control Channel Authentication: tls-auth using INLINE static key file
Thu Aug 07 15:47:06 2014 us=547446 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 07 15:47:06 2014 us=547446 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 07 15:47:06 2014 us=547446 LZO compression initialized
Thu Aug 07 15:47:06 2014 us=548446 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Thu Aug 07 15:47:06 2014 us=548446 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Aug 07 15:47:06 2014 us=548446 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Aug 07 15:47:06 2014 us=548446 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Aug 07 15:47:06 2014 us=548446 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Aug 07 15:47:06 2014 us=548446 Local Options hash (VER=V4): '0bdd0804'
Thu Aug 07 15:47:06 2014 us=548446 Expected Remote Options hash (VER=V4): 'a642654b'
Thu Aug 07 15:47:06 2014 us=549446 Attempting to establish TCP connection with [AF_INET]192.168.0.19:1194
Thu Aug 07 15:47:06 2014 us=549446 MANAGEMENT: >STATE:1407440826,TCP_CONNECT,,,
Thu Aug 07 15:47:06 2014 us=555446 TCP connection established with [AF_INET]192.168.0.19:1194
Thu Aug 07 15:47:06 2014 us=556446 TCPv4_CLIENT link local: [undef]
Thu Aug 07 15:47:06 2014 us=556446 TCPv4_CLIENT link remote: [AF_INET]192.168.0.19:1194
Thu Aug 07 15:47:06 2014 us=556446 MANAGEMENT: >STATE:1407440826,WAIT,,,
Thu Aug 07 15:47:06 2014 us=556446 TCPv4_CLIENT WRITE [42] to [AF_INET]192.168.0.19:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Thu Aug 07 15:47:06 2014 us=564447 TCPv4_CLIENT READ [54] from [AF_INET]192.168.0.19:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Thu Aug 07 15:47:06 2014 us=564447 MANAGEMENT: >STATE:1407440826,AUTH,,,
Thu Aug 07 15:47:06 2014 us=564447 TLS: Initial packet from [AF_INET]192.168.0.19:1194, sid=0e6f5cc4 1650f3e4
Thu Aug 07 15:47:06 2014 us=564447 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Thu Aug 07 15:47:06 2014 us=565447 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=100
Thu Aug 07 15:47:06 2014 us=565447 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=2 DATA len=100
Thu Aug 07 15:47:06 2014 us=565447 TCPv4_CLIENT WRITE [65] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=3 DATA len=23
Thu Aug 07 15:47:06 2014 us=607449 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 1 ]
Thu Aug 07 15:47:06 2014 us=810461 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #3 ] [ 2 ]
Thu Aug 07 15:47:06 2014 us=810461 TCPv4_CLIENT READ [154] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ 3 ] pid=1 DATA len=100
Thu Aug 07 15:47:06 2014 us=810461 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=2 DATA len=100
Thu Aug 07 15:47:06 2014 us=810461 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=3 DATA len=100
Thu Aug 07 15:47:06 2014 us=810461 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=4 DATA len=100
Thu Aug 07 15:47:06 2014 us=811461 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #6 ] [ 1 ]
Thu Aug 07 15:47:06 2014 us=811461 TCPv4_CLIENT WRITE [58] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #7 ] [ 2 3 4 ]
Thu Aug 07 15:47:06 2014 us=813461 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #8 ] [ ] pid=5 DATA len=100
Thu Aug 07 15:47:06 2014 us=814461 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #8 ] [ 5 ]
Thu Aug 07 15:47:06 2014 us=816461 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #9 ] [ ] pid=6 DATA len=100
Thu Aug 07 15:47:06 2014 us=816461 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #9 ] [ 6 ]
Thu Aug 07 15:47:06 2014 us=823462 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #10 ] [ ] pid=7 DATA len=100
Thu Aug 07 15:47:06 2014 us=823462 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #11 ] [ ] pid=8 DATA len=100
Thu Aug 07 15:47:06 2014 us=823462 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #10 ] [ 7 ]
Thu Aug 07 15:47:06 2014 us=823462 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #11 ] [ 8 ]
Thu Aug 07 15:47:06 2014 us=824462 NOTE: --mute triggered...
Thu Aug 07 15:47:06 2014 us=857464 25 variation(s) on previous 20 message(s) suppressed by --mute
Thu Aug 07 15:47:06 2014 us=857464 VERIFY OK: depth=1, C=01, ST=newyork, L=newyork, O=server, OU=server, CN=server, name=server, emailAddress=mail@host.domain
Thu Aug 07 15:47:06 2014 us=858464 VERIFY OK: nsCertType=SERVER
Thu Aug 07 15:47:06 2014 us=858464 VERIFY OK: depth=0, C=01, ST=ny, L=ny, emailAddress=abc@gmail.com
Thu Aug 07 15:47:06 2014 us=858464 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #25 ] [ ] pid=22 DATA len=100
Thu Aug 07 15:47:06 2014 us=858464 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #24 ] [ 21 ]
Thu Aug 07 15:47:06 2014 us=859464 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #25 ] [ 22 ]
Thu Aug 07 15:47:06 2014 us=859464 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #26 ] [ ] pid=23 DATA len=100
Thu Aug 07 15:47:06 2014 us=859464 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #26 ] [ 23 ]
Thu Aug 07 15:47:06 2014 us=860464 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #27 ] [ ] pid=24 DATA len=100
Thu Aug 07 15:47:06 2014 us=860464 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #27 ] [ 24 ]
Thu Aug 07 15:47:06 2014 us=861464 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #28 ] [ ] pid=25 DATA len=100
Thu Aug 07 15:47:06 2014 us=862464 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #28 ] [ 25 ]
Thu Aug 07 15:47:06 2014 us=863464 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #29 ] [ ] pid=26 DATA len=100
Thu Aug 07 15:47:06 2014 us=864464 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #29 ] [ 26 ]
Thu Aug 07 15:47:06 2014 us=865464 TCPv4_CLIENT READ [53] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #30 ] [ ] pid=27 DATA len=11
Thu Aug 07 15:47:06 2014 us=888465 TCPv4_CLIENT WRITE [154] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #30 ] [ 27 ] pid=4 DATA len=100
Thu Aug 07 15:47:06 2014 us=888465 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #31 ] [ ] pid=5 DATA len=100
Thu Aug 07 15:47:06 2014 us=888465 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #32 ] [ ] pid=6 DATA len=100
Thu Aug 07 15:47:06 2014 us=888465 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #33 ] [ ] pid=7 DATA len=100
Thu Aug 07 15:47:06 2014 us=912467 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #31 ] [ 4 ]
Thu Aug 07 15:47:06 2014 us=912467 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #34 ] [ ] pid=8 DATA len=100
Thu Aug 07 15:47:06 2014 us=915467 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #32 ] [ 5 ]
Thu Aug 07 15:47:06 2014 us=915467 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #35 ] [ ] pid=9 DATA len=100
Thu Aug 07 15:47:06 2014 us=923467 NOTE: --mute triggered...
Thu Aug 07 15:47:07 2014 us=408495 48 variation(s) on previous 20 message(s) suppressed by --mute
Thu Aug 07 15:47:07 2014 us=408495 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 07 15:47:07 2014 us=408495 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 07 15:47:07 2014 us=408495 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 07 15:47:07 2014 us=409495 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Aug 07 15:47:07 2014 us=409495 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #57 ] [ 29 ]
Thu Aug 07 15:47:07 2014 us=409495 TCPv4_CLIENT WRITE [54] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #58 ] [ 30 31 ]
Thu Aug 07 15:47:07 2014 us=409495 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Aug 07 15:47:07 2014 us=409495 [messi] Peer Connection Initiated with [AF_INET]192.168.0.19:1194
Thu Aug 07 15:47:08 2014 us=446555 MANAGEMENT: >STATE:1407440828,GET_CONFIG,,,
Thu Aug 07 15:47:09 2014 us=483614 SENT CONTROL [messi]: 'PUSH_REQUEST' (status=1)
Thu Aug 07 15:47:09 2014 us=483614 TCPv4_CLIENT WRITE [132] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #59 ] [ ] pid=31 DATA len=90
Thu Aug 07 15:47:09 2014 us=498615 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #60 ] [ 31 ]
Thu Aug 07 15:47:09 2014 us=688626 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #61 ] [ ] pid=32 DATA len=100
Thu Aug 07 15:47:09 2014 us=688626 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #62 ] [ ] pid=33 DATA len=100
Thu Aug 07 15:47:09 2014 us=689626 TCPv4_CLIENT READ [60] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #63 ] [ ] pid=34 DATA len=18
Thu Aug 07 15:47:09 2014 us=689626 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,redirect-gateway def1,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Aug 07 15:47:09 2014 us=689626 OPTIONS IMPORT: timers and/or timeouts modified
Thu Aug 07 15:47:09 2014 us=689626 OPTIONS IMPORT: --ifconfig/up options modified
Thu Aug 07 15:47:09 2014 us=689626 OPTIONS IMPORT: route options modified
Thu Aug 07 15:47:09 2014 us=689626 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Aug 07 15:47:09 2014 us=720627 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 07 15:47:09 2014 us=720627 MANAGEMENT: >STATE:1407440829,ASSIGN_IP,,10.8.0.6,
Thu Aug 07 15:47:09 2014 us=720627 open_tun, tt->ipv6=0
Thu Aug 07 15:47:09 2014 us=722628 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{5746DEF1-CD8A-45E3-BFEB-0BC7AA816A42}.tap
Thu Aug 07 15:47:09 2014 us=722628 TAP-Windows Driver Version 9.9
Thu Aug 07 15:47:09 2014 us=722628 TAP-Windows MTU=1500
Thu Aug 07 15:47:09 2014 us=725628 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {5746DEF1-CD8A-45E3-BFEB-0BC7AA816A42} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Aug 07 15:47:09 2014 us=725628 DHCP option string: 06040808 0808
Thu Aug 07 15:47:09 2014 us=725628 Successful ARP Flush on interface [28] {5746DEF1-CD8A-45E3-BFEB-0BC7AA816A42}
Thu Aug 07 15:47:09 2014 us=733628 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #60 ] [ 32 ]
Thu Aug 07 15:47:09 2014 us=733628 TCPv4_CLIENT WRITE [54] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #61 ] [ 33 34 ]
Thu Aug 07 15:47:14 2014 us=923925 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Thu Aug 07 15:47:14 2014 us=923925 C:\Windows\system32\route.exe ADD 192.168.0.19 MASK 255.255.255.255 192.168.0.1 IF 13
Thu Aug 07 15:47:14 2014 us=924925 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=5 and dwForwardType=4
Thu Aug 07 15:47:14 2014 us=924925 Route addition via IPAPI succeeded [adaptive]
Thu Aug 07 15:47:14 2014 us=924925 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Aug 07 15:47:14 2014 us=931926 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Aug 07 15:47:14 2014 us=931926 Route addition via IPAPI succeeded [adaptive]
Thu Aug 07 15:47:14 2014 us=931926 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Aug 07 15:47:14 2014 us=943926 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Aug 07 15:47:14 2014 us=943926 Route addition via IPAPI succeeded [adaptive]
Thu Aug 07 15:47:14 2014 us=943926 MANAGEMENT: >STATE:1407440834,ADD_ROUTES,,,
Thu Aug 07 15:47:14 2014 us=943926 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Thu Aug 07 15:47:14 2014 us=951927 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Aug 07 15:47:14 2014 us=951927 Route addition via IPAPI succeeded [adaptive]
Thu Aug 07 15:47:14 2014 us=951927 Initialization Sequence Completed
Thu Aug 07 15:47:14 2014 us=952927 MANAGEMENT: >STATE:1407440834,CONNECTED,SUCCESS,10.8.0.6,192.168.0.19
Thu Aug 07 15:47:15 2014 us=71934 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=111936 TCPv4_CLIENT READ [117] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=116
Thu Aug 07 15:47:15 2014 us=123937 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=151938 TCPv4_CLIENT READ [117] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=116
Thu Aug 07 15:47:15 2014 us=152938 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=193941 TCPv4_CLIENT READ [117] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=116
Thu Aug 07 15:47:15 2014 us=194941 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=241943 TCPv4_CLIENT READ [149] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=148
Thu Aug 07 15:47:15 2014 us=242943 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=291946 TCPv4_CLIENT READ [181] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=180
Thu Aug 07 15:47:15 2014 us=302947 TCPv4_CLIENT WRITE [117] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=116
Thu Aug 07 15:47:15 2014 us=361950 TCPv4_CLIENT READ [133] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Thu Aug 07 15:47:15 2014 us=362950 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=381951 TCPv4_CLIENT READ [117] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=116
Thu Aug 07 15:47:15 2014 us=383951 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=581963 TCPv4_CLIENT READ [117] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=116
Thu Aug 07 15:47:15 2014 us=583963 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Thu Aug 07 15:47:15 2014 us=683969 TCPv4_CLIENT READ [197] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=196
Thu Aug 07 15:47:15 2014 us=846978 TCPv4_CLIENT WRITE [133] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Thu Aug 07 15:47:15 2014 us=846978 TCPv4_CLIENT WRITE [117] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=116
Thu Aug 07 15:47:15 2014 us=871979 NOTE: --mute triggered...

ncp-uok

hi

my goal is to use openvpn server client in the following way.. Dont know if its practical but is it possible:

1- One raspberry pi is server, anothr pi is client
2- Both are connected through internet using their eth0s making a tunnel
3- The server eth1 i.e. private lan having some network machines running and client eth1 i.e. its private lan has users, can access these network machines using same single server-client tunnel of pies. Is it possible 🙂

thanks

ncp-uok

But one thing is when i am trying to connect my raspberry pi client (later it was my pc with openvpn client GUI) its giving some linux routing error:

I bold that line

root@raspberrypi100:~# openvpn /etc/openvpn/client1.conf
Fri Aug 8 06:53:59 2014 us=415899 Current Parameter Settings:
Fri Aug 8 06:53:59 2014 us=426917 config = '/etc/openvpn/client1.conf'
Fri Aug 8 06:53:59 2014 us=427153 mode = 0
Fri Aug 8 06:53:59 2014 us=427363 persist_config = DISABLED
Fri Aug 8 06:53:59 2014 us=427558 persist_mode = 1
Fri Aug 8 06:53:59 2014 us=427744 show_ciphers = DISABLED
Fri Aug 8 06:53:59 2014 us=427930 show_digests = DISABLED
Fri Aug 8 06:53:59 2014 us=428115 show_engines = DISABLED
Fri Aug 8 06:53:59 2014 us=428298 genkey = DISABLED
Fri Aug 8 06:53:59 2014 us=428482 key_pass_file = '[UNDEF]'
Fri Aug 8 06:53:59 2014 us=428662 show_tls_ciphers = DISABLED
Fri Aug 8 06:53:59 2014 us=428840 Connection profiles [default]:
Fri Aug 8 06:53:59 2014 us=429026 proto = tcp-client
Fri Aug 8 06:53:59 2014 us=429206 local = '[UNDEF]'
Fri Aug 8 06:53:59 2014 us=429388 local_port = 0
Fri Aug 8 06:53:59 2014 us=429565 remote = '192.168.0.19'
Fri Aug 8 06:53:59 2014 us=429751 remote_port = 1194
Fri Aug 8 06:53:59 2014 us=429929 remote_float = DISABLED
Fri Aug 8 06:53:59 2014 us=430107 bind_defined = DISABLED
Fri Aug 8 06:53:59 2014 us=430391 bind_local = DISABLED
Fri Aug 8 06:53:59 2014 us=430578 NOTE: --mute triggered...
Fri Aug 8 06:53:59 2014 us=430871 253 variation(s) on previous 20 message(s) suppressed by --mute
Fri Aug 8 06:53:59 2014 us=431076 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Oct 12 2013
Fri Aug 8 06:53:59 2014 us=432289 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Enter Private Key Password:
Fri Aug 8 06:54:28 2014 us=853727 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Aug 8 06:54:28 2014 us=862327 Control Channel Authentication: tls-auth using INLINE static key file
Fri Aug 8 06:54:28 2014 us=864482 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 8 06:54:28 2014 us=865193 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 8 06:54:28 2014 us=865976 LZO compression initialized
Fri Aug 8 06:54:28 2014 us=867597 Control Channel MTU parms [ L:1560 D:168 EF:68 EB:0 ET:0 EL:0 ]
Fri Aug 8 06:54:28 2014 us=868560 Socket Buffers: R=[87380->131072] S=[16384->131072]
Fri Aug 8 06:54:28 2014 us=869417 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Aug 8 06:54:28 2014 us=870191 Local Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Fri Aug 8 06:54:28 2014 us=870782 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1560,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Fri Aug 8 06:54:28 2014 us=871513 Local Options hash (VER=V4): '0bdd0804'
Fri Aug 8 06:54:28 2014 us=872231 Expected Remote Options hash (VER=V4): 'a642654b'
Fri Aug 8 06:54:28 2014 us=873059 Attempting to establish TCP connection with [AF_INET]192.168.0.19:1194 [nonblock]
Fri Aug 8 06:54:29 2014 us=874313 TCP connection established with [AF_INET]192.168.0.19:1194
Fri Aug 8 06:54:29 2014 us=874565 TCPv4_CLIENT link local: [undef]
Fri Aug 8 06:54:29 2014 us=874727 TCPv4_CLIENT link remote: [AF_INET]192.168.0.19:1194
Fri Aug 8 06:54:29 2014 us=875418 TCPv4_CLIENT WRITE [42] to [AF_INET]192.168.0.19:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Fri Aug 8 06:54:30 2014 us=85823 TCPv4_CLIENT READ [54] from [AF_INET]192.168.0.19:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Fri Aug 8 06:54:30 2014 us=86164 TLS: Initial packet from [AF_INET]192.168.0.19:1194, sid=b26972f6 b7e69790
Fri Aug 8 06:54:30 2014 us=86868 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Fri Aug 8 06:54:30 2014 us=87859 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=100
Fri Aug 8 06:54:30 2014 us=88513 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=2 DATA len=100
Fri Aug 8 06:54:30 2014 us=89018 TCPv4_CLIENT WRITE [68] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=3 DATA len=26
Fri Aug 8 06:54:30 2014 us=123249 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 1 ]
Fri Aug 8 06:54:30 2014 us=158115 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #3 ] [ 2 ]
Fri Aug 8 06:54:30 2014 us=175053 TCPv4_CLIENT READ [154] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ 3 ] pid=1 DATA len=100
Fri Aug 8 06:54:30 2014 us=177175 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #6 ] [ 1 ]
Fri Aug 8 06:54:30 2014 us=178260 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=2 DATA len=100
Fri Aug 8 06:54:30 2014 us=181607 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=3 DATA len=100
Fri Aug 8 06:54:30 2014 us=182349 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=4 DATA len=100
Fri Aug 8 06:54:30 2014 us=183039 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #7 ] [ 2 ]
Fri Aug 8 06:54:30 2014 us=185840 TCPv4_CLIENT WRITE [54] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #8 ] [ 3 4 ]
Fri Aug 8 06:54:30 2014 us=211621 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #8 ] [ ] pid=5 DATA len=100
Fri Aug 8 06:54:30 2014 us=212395 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #9 ] [ 5 ]
Fri Aug 8 06:54:30 2014 us=214128 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #9 ] [ ] pid=6 DATA len=100
Fri Aug 8 06:54:30 2014 us=214959 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #10 ] [ 6 ]
Fri Aug 8 06:54:30 2014 us=216783 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #10 ] [ ] pid=7 DATA len=100
Fri Aug 8 06:54:30 2014 us=217602 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #11 ] [ ] pid=8 DATA len=100
Fri Aug 8 06:54:30 2014 us=218276 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #12 ] [ ] pid=9 DATA len=100
Fri Aug 8 06:54:30 2014 us=227135 NOTE: --mute triggered...
Fri Aug 8 06:54:30 2014 us=256312 25 variation(s) on previous 20 message(s) suppressed by --mute
Fri Aug 8 06:54:30 2014 us=266742 VERIFY OK: depth=1, /C=01/ST=newyork/L=newyork/O=/emailAddress=mail@host.domain
Fri Aug 8 06:54:30 2014 us=270181 VERIFY OK: nsCertType=SERVER
Fri Aug 8 06:54:30 2014 us=270472 VERIFY OK: depth=0, /C=01/ST=ny/L=ny/O=/emailAddress=abc@gmail.com
Fri Aug 8 06:54:30 2014 us=271298 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #24 ] [ 21 ]
Fri Aug 8 06:54:30 2014 us=277374 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #25 ] [ ] pid=22 DATA len=100
Fri Aug 8 06:54:30 2014 us=278486 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #25 ] [ 22 ]
Fri Aug 8 06:54:30 2014 us=279373 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #26 ] [ ] pid=23 DATA len=100
Fri Aug 8 06:54:30 2014 us=280530 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #27 ] [ ] pid=24 DATA len=100
Fri Aug 8 06:54:30 2014 us=281276 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #26 ] [ 23 ]
Fri Aug 8 06:54:30 2014 us=287323 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #27 ] [ 24 ]
Fri Aug 8 06:54:30 2014 us=288536 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #28 ] [ ] pid=25 DATA len=100
Fri Aug 8 06:54:30 2014 us=291061 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #29 ] [ ] pid=26 DATA len=100
Fri Aug 8 06:54:30 2014 us=291826 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #28 ] [ 25 ]
Fri Aug 8 06:54:30 2014 us=296170 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #29 ] [ 26 ]
Fri Aug 8 06:54:30 2014 us=296988 TCPv4_CLIENT READ [57] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #30 ] [ ] pid=27 DATA len=15
Fri Aug 8 06:54:30 2014 us=486071 TCPv4_CLIENT WRITE [154] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #30 ] [ 27 ] pid=4 DATA len=100
Fri Aug 8 06:54:30 2014 us=497701 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #31 ] [ ] pid=5 DATA len=100
Fri Aug 8 06:54:30 2014 us=498842 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #32 ] [ ] pid=6 DATA len=100
Fri Aug 8 06:54:30 2014 us=502002 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #33 ] [ ] pid=7 DATA len=100
Fri Aug 8 06:54:30 2014 us=503150 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #31 ] [ 4 ]
Fri Aug 8 06:54:30 2014 us=505813 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #32 ] [ 5 ]
Fri Aug 8 06:54:30 2014 us=508083 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #34 ] [ ] pid=8 DATA len=100
Fri Aug 8 06:54:30 2014 us=508870 TCPv4_CLIENT WRITE [142] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #35 ] [ ] pid=9 DATA len=100
Fri Aug 8 06:54:30 2014 us=509954 NOTE: --mute triggered...
Fri Aug 8 06:54:30 2014 us=730368 70 variation(s) on previous 20 message(s) suppressed by --mute
Fri Aug 8 06:54:30 2014 us=730713 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Aug 8 06:54:30 2014 us=730957 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 8 06:54:30 2014 us=732579 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Aug 8 06:54:30 2014 us=732902 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Aug 8 06:54:30 2014 us=733418 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #67 ] [ 41 ]
Fri Aug 8 06:54:30 2014 us=734171 TCPv4_CLIENT WRITE [54] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #68 ] [ 42 43 ]
Fri Aug 8 06:54:30 2014 us=736344 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Aug 8 06:54:30 2014 us=736859 [messi] Peer Connection Initiated with [AF_INET]192.168.0.19:1194
Fri Aug 8 06:54:33 2014 us=113414 SENT CONTROL [messi]: 'PUSH_REQUEST' (status=1)
Fri Aug 8 06:54:33 2014 us=113902 TCPv4_CLIENT WRITE [132] to [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #69 ] [ ] pid=31 DATA len=90
Fri Aug 8 06:54:33 2014 us=118557 TCPv4_CLIENT READ [50] from [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #72 ] [ 31 ]
Fri Aug 8 06:54:33 2014 us=158047 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #73 ] [ ] pid=44 DATA len=100
Fri Aug 8 06:54:33 2014 us=158843 TCPv4_CLIENT READ [142] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #74 ] [ ] pid=45 DATA len=100
Fri Aug 8 06:54:33 2014 us=159256 TCPv4_CLIENT READ [44] from [AF_INET]192.168.0.19:1194: P_CONTROL_V1 kid=0 pid=[ #75 ] [ ] pid=46 DATA len=2
Fri Aug 8 06:54:33 2014 us=159861 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,redirect-gateway def1,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.10 10.8.0.9'
Fri Aug 8 06:54:33 2014 us=160610 OPTIONS IMPORT: timers and/or timeouts modified
Fri Aug 8 06:54:33 2014 us=160775 OPTIONS IMPORT: --ifconfig/up options modified
Fri Aug 8 06:54:33 2014 us=160894 OPTIONS IMPORT: route options modified
Fri Aug 8 06:54:33 2014 us=161008 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Aug 8 06:54:33 2014 us=162853 ROUTE default_gateway=192.168.0.1
Fri Aug 8 06:54:33 2014 us=187302 TUN/TAP device tun2 opened
Fri Aug 8 06:54:33 2014 us=187656 TUN/TAP TX queue length set to 100
Fri Aug 8 06:54:33 2014 us=187963 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Aug 8 06:54:33 2014 us=188349 /sbin/ifconfig tun2 10.8.0.10 pointopoint 10.8.0.9 mtu 1500
Fri Aug 8 06:54:33 2014 us=219058 /sbin/route add -net 192.168.0.19 netmask 255.255.255.255 gw 192.168.0.1
SIOCADDRT: File exists
Fri Aug 8 06:54:33 2014 us=250802 ERROR: Linux route add command failed: external program exited with error status: 7
Fri Aug 8 06:54:33 2014 us=251282 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.9
Fri Aug 8 06:54:33 2014 us=275064 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.9
Fri Aug 8 06:54:33 2014 us=301610 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.9
Fri Aug 8 06:54:33 2014 us=341768 Initialization Sequence Completed
Fri Aug 8 06:54:33 2014 us=342221 TCPv4_CLIENT WRITE [50] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #70 ] [ 44 ]
Fri Aug 8 06:54:33 2014 us=343070 TCPv4_CLIENT WRITE [54] to [AF_INET]192.168.0.19:1194: P_ACK_V1 kid=0 pid=[ #71 ] [ 45 46 ]
Fri Aug 8 06:54:35 2014 us=478738 TUN READ [52]
Fri Aug 8 06:54:35 2014 us=479368 TCPv4_CLIENT WRITE [101] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=100
Fri Aug 8 06:54:35 2014 us=976973 TUN READ [76]
Fri Aug 8 06:54:35 2014 us=977435 TCPv4_CLIENT WRITE [133] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:35 2014 us=977930 TUN READ [76]
Fri Aug 8 06:54:35 2014 us=978292 TCPv4_CLIENT WRITE [133] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:35 2014 us=978538 TUN READ [76]
Fri Aug 8 06:54:35 2014 us=979329 TCPv4_CLIENT WRITE [133] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:36 2014 us=7733 TCPv4_CLIENT READ [133] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:36 2014 us=8242 TUN WRITE [76]
Fri Aug 8 06:54:36 2014 us=11488 TCPv4_CLIENT READ [133] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:36 2014 us=11889 TUN WRITE [76]
Fri Aug 8 06:54:36 2014 us=20716 TCPv4_CLIENT READ [133] from [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:36 2014 us=21198 TUN WRITE [76]
Fri Aug 8 06:54:37 2014 us=976913 TUN READ [76]
Fri Aug 8 06:54:37 2014 us=977375 TCPv4_CLIENT WRITE [133] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:37 2014 us=977869 TUN READ [76]
Fri Aug 8 06:54:37 2014 us=978238 TCPv4_CLIENT WRITE [133] to [AF_INET]192.168.0.19:1194: P_DATA_V1 kid=0 DATA len=132
Fri Aug 8 06:54:37 2014 us=978483 NOTE: --mute triggered...
^CFri Aug 8 06:55:12 2014 us=134127 69 variation(s) on previous 20 message(s) suppressed by --mute
Fri Aug 8 06:55:12 2014 us=134420 event_wait : Interrupted system call (code=4)
Fri Aug 8 06:55:12 2014 us=137865 TCP/UDP: Closing socket
Fri Aug 8 06:55:12 2014 us=140829 /sbin/route del -net 10.8.0.0 netmask 255.255.255.0
Fri Aug 8 06:55:12 2014 us=150988 /sbin/route del -net 192.168.0.19 netmask 255.255.255.255
Fri Aug 8 06:55:12 2014 us=166088 /sbin/route del -net 0.0.0.0 netmask 128.0.0.0
Fri Aug 8 06:55:12 2014 us=187519 /sbin/route del -net 128.0.0.0 netmask 128.0.0.0
Fri Aug 8 06:55:12 2014 us=207455 Closing TUN/TAP interface
Fri Aug 8 06:55:12 2014 us=207827 /sbin/ifconfig tun2 0.0.0.0
Fri Aug 8 06:55:12 2014 us=267114 SIGINT[hard,] received, process exiting

ncp-uok

so my pi client is connecting ???? how to remove this error in order to start sending data from client!!!

thanks

ncp-uok

wow .... yup time to rejoice.. 😃 it works on internet too....
but every time i reboot the pies the server openvpn in starting automatically but I have the manually start the openvpn client on client pi plus i have to also give chmod command to apply Nat through firewall-openvpn-rules.sh. Isn't their an automatic starting way so that i just plug both pies and they start a vpn tunnel with applying firewall-openvpn-rules.sh by itself.

thanks a lot