Change default port to allow web browser traffic

G_known

My Debian machine (client) and my lxc container (server) both had installed the software, lxc uses libvirt to maintain internet access but I'm having issues of configuring it into my web browser. I've setup a static key on both of my machine(s) but whenever I attempt to connect I'll always get the error of some process is using the same port: openvpn. Killing it results in killing tun0 interface as well. So I'm planning to change the port to 443. Here's my current conf files:

Client:

client
dev tun
proto tcp
remote hostname@192.168.XXX.X 443
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
 key-direction 1

Server:

port 443
proto tcp
dev tun
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 5
key-direction 0

After restarting openvpn service, it still binds to 1194:

CP/UDP: Socket bind failed on local address [undef]: Address already in use

Why is it not reading my config files?

G_known

It will stop the virtual private daemon, tun interface disappears; starting it will result in starting the client tun0.

I did found a temporay solution by using the --port option, however whenever I tried to add redirect-gateway def1 on the server, it produces an error:

NOTE: unable to redirect default gateway — Cannot obtain current remote host address

These two machines are connected wirelessly sharing a different ip address while initally LXC share my network stack.

G_known

The configs are the same. Here's the complete the log from the server side:

Sun Aug 31 10:27:49 2014 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Sun Aug 31 10:27:49 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Aug 31 10:27:49 2014 TUN/TAP device tun0-00 opened
Sun Aug 31 10:27:49 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Aug 31 10:27:49 2014 /sbin/ifconfig tun0-00 10.9.8.1 pointopoint 10.9.8.2 mtu 1500
Sun Aug 31 10:27:49 2014 NOTE: unable to redirect default gateway -- Cannot obtain current remote host address
Sun Aug 31 10:27:49 2014 UDPv4 link local (bound): [undef]
Sun Aug 31 10:27:49 2014 UDPv4 link remote: [undef]

G_known

Are you referring to my server/client conf?

Yes, ok. I switch it to verb 9:

Sun Aug 31 11:17:11 2014 us=759779 Current Parameter Settings:
Sun Aug 31 11:17:11 2014 us=760003   config = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=760098   mode = 0
Sun Aug 31 11:17:11 2014 us=760144   persist_config = DISABLED
Sun Aug 31 11:17:11 2014 us=760187   persist_mode = 1
Sun Aug 31 11:17:11 2014 us=760225   show_ciphers = DISABLED
Sun Aug 31 11:17:11 2014 us=760263   show_digests = DISABLED
Sun Aug 31 11:17:11 2014 us=760301   show_engines = DISABLED
Sun Aug 31 11:17:11 2014 us=760339   genkey = DISABLED
Sun Aug 31 11:17:11 2014 us=760394   key_pass_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=760434   show_tls_ciphers = DISABLED
Sun Aug 31 11:17:11 2014 us=760476 Connection profiles [default]:
Sun Aug 31 11:17:11 2014 us=760516   proto = udp
Sun Aug 31 11:17:11 2014 us=760567   local = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=760611   local_port = 443
Sun Aug 31 11:17:11 2014 us=760648   remote = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=760702   remote_port = 443
Sun Aug 31 11:17:11 2014 us=760803   remote_float = DISABLED
Sun Aug 31 11:17:11 2014 us=760845   bind_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=760892   bind_local = ENABLED
Sun Aug 31 11:17:11 2014 us=760904   connect_retry_seconds = 5
Sun Aug 31 11:17:11 2014 us=760917   connect_timeout = 10
Sun Aug 31 11:17:11 2014 us=760930   connect_retry_max = 0
Sun Aug 31 11:17:11 2014 us=760944   socks_proxy_server = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=760957   socks_proxy_port = 0
Sun Aug 31 11:17:11 2014 us=760975   socks_proxy_retry = DISABLED
Sun Aug 31 11:17:11 2014 us=760989 Connection profiles END
Sun Aug 31 11:17:11 2014 us=761002   remote_random = DISABLED
Sun Aug 31 11:17:11 2014 us=761016   ipchange = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761036   dev = 'tun0-00'
Sun Aug 31 11:17:11 2014 us=761051   dev_type = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761065   dev_node = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761083   lladdr = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761097   topology = 1
Sun Aug 31 11:17:11 2014 us=761114   tun_ipv6 = DISABLED
Sun Aug 31 11:17:11 2014 us=761129   ifconfig_local = '10.9.8.1'
Sun Aug 31 11:17:11 2014 us=761144   ifconfig_remote_netmask = '10.9.8.2'
Sun Aug 31 11:17:11 2014 us=761162   ifconfig_noexec = DISABLED
Sun Aug 31 11:17:11 2014 us=761179   ifconfig_nowarn = DISABLED
Sun Aug 31 11:17:11 2014 us=761196   ifconfig_ipv6_local = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761211   ifconfig_ipv6_netbits = 0
Sun Aug 31 11:17:11 2014 us=761230   ifconfig_ipv6_remote = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761244   shaper = 0
Sun Aug 31 11:17:11 2014 us=761261   tun_mtu = 1500
Sun Aug 31 11:17:11 2014 us=761277   tun_mtu_defined = ENABLED
Sun Aug 31 11:17:11 2014 us=761292   link_mtu = 1500
Sun Aug 31 11:17:11 2014 us=761311   link_mtu_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=761324   tun_mtu_extra = 0
Sun Aug 31 11:17:11 2014 us=761338   tun_mtu_extra_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=761351   fragment = 0
Sun Aug 31 11:17:11 2014 us=761364   mtu_discover_type = -1
Sun Aug 31 11:17:11 2014 us=761377   mtu_test = 0
Sun Aug 31 11:17:11 2014 us=761391   mlock = DISABLED
Sun Aug 31 11:17:11 2014 us=761404   keepalive_ping = 0
Sun Aug 31 11:17:11 2014 us=761417   keepalive_timeout = 0
Sun Aug 31 11:17:11 2014 us=761431   inactivity_timeout = 0
Sun Aug 31 11:17:11 2014 us=761447   ping_send_timeout = 0
Sun Aug 31 11:17:11 2014 us=761465   ping_rec_timeout = 0
Sun Aug 31 11:17:11 2014 us=761478   ping_rec_timeout_action = 0
Sun Aug 31 11:17:11 2014 us=761491   ping_timer_remote = DISABLED
Sun Aug 31 11:17:11 2014 us=761505   remap_sigusr1 = 0
Sun Aug 31 11:17:11 2014 us=761518   explicit_exit_notification = 0
Sun Aug 31 11:17:11 2014 us=761531   persist_tun = DISABLED
Sun Aug 31 11:17:11 2014 us=761560   persist_local_ip = DISABLED
Sun Aug 31 11:17:11 2014 us=761574   persist_remote_ip = DISABLED
Sun Aug 31 11:17:11 2014 us=761587   persist_key = DISABLED
Sun Aug 31 11:17:11 2014 us=761600   mssfix = 1450
Sun Aug 31 11:17:11 2014 us=761615   passtos = DISABLED
Sun Aug 31 11:17:11 2014 us=761631   resolve_retry_seconds = 1000000000
Sun Aug 31 11:17:11 2014 us=761645   username = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761658   groupname = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761671   chroot_dir = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761684   cd_dir = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761697   writepid = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761715   up_script = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761729   down_script = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761742   down_pre = DISABLED
Sun Aug 31 11:17:11 2014 us=761755   up_restart = DISABLED
Sun Aug 31 11:17:11 2014 us=761771   up_delay = DISABLED
Sun Aug 31 11:17:11 2014 us=761784   daemon = DISABLED
Sun Aug 31 11:17:11 2014 us=761797   inetd = 0
Sun Aug 31 11:17:11 2014 us=761810   log = DISABLED
Sun Aug 31 11:17:11 2014 us=761823   suppress_timestamps = DISABLED
Sun Aug 31 11:17:11 2014 us=761836   nice = 0
Sun Aug 31 11:17:11 2014 us=761851   verbosity = 9
Sun Aug 31 11:17:11 2014 us=761864   mute = 0
Sun Aug 31 11:17:11 2014 us=761877   gremlin = 0
Sun Aug 31 11:17:11 2014 us=761889   status_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=761903   status_file_version = 1
Sun Aug 31 11:17:11 2014 us=761920   status_file_update_freq = 60
Sun Aug 31 11:17:11 2014 us=761935   occ = ENABLED
Sun Aug 31 11:17:11 2014 us=761951   rcvbuf = 65536
Sun Aug 31 11:17:11 2014 us=761965   sndbuf = 65536
Sun Aug 31 11:17:11 2014 us=761982   sockflags = 0
Sun Aug 31 11:17:11 2014 us=762000   fast_io = DISABLED
Sun Aug 31 11:17:11 2014 us=762014   lzo = 0
Sun Aug 31 11:17:11 2014 us=762032   route_script = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762047   route_default_gateway = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762064   route_default_metric = 0
Sun Aug 31 11:17:11 2014 us=762082   route_noexec = DISABLED
Sun Aug 31 11:17:11 2014 us=762097   route_delay = 0
Sun Aug 31 11:17:11 2014 us=762111   route_delay_window = 30
Sun Aug 31 11:17:11 2014 us=762126   route_delay_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=762139   route_nopull = DISABLED
Sun Aug 31 11:17:11 2014 us=762154   route_gateway_via_dhcp = DISABLED
Sun Aug 31 11:17:11 2014 us=762172   max_routes = 100
Sun Aug 31 11:17:11 2014 us=762189   allow_pull_fqdn = DISABLED
Sun Aug 31 11:17:11 2014 us=762207   [redirect_default_gateway local=0]
Sun Aug 31 11:17:11 2014 us=762225   management_addr = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762240   management_port = 0
Sun Aug 31 11:17:11 2014 us=762258   management_user_pass = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762273   management_log_history_cache = 250
Sun Aug 31 11:17:11 2014 us=762291   management_echo_buffer_size = 100
Sun Aug 31 11:17:11 2014 us=762305   management_write_peer_info_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762325   management_client_user = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762340   management_client_group = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762358   management_flags = 0
Sun Aug 31 11:17:11 2014 us=762373   shared_secret_file = '/etc/openvpn/static.key'
Sun Aug 31 11:17:11 2014 us=762392   key_direction = 0
Sun Aug 31 11:17:11 2014 us=762406   ciphername_defined = ENABLED
Sun Aug 31 11:17:11 2014 us=762425   ciphername = 'BF-CBC'
Sun Aug 31 11:17:11 2014 us=762439   authname_defined = ENABLED
Sun Aug 31 11:17:11 2014 us=762456   authname = 'SHA1'
Sun Aug 31 11:17:11 2014 us=762471   prng_hash = 'SHA1'
Sun Aug 31 11:17:11 2014 us=762487   prng_nonce_secret_len = 16
Sun Aug 31 11:17:11 2014 us=762505   keysize = 0
Sun Aug 31 11:17:11 2014 us=762519   engine = DISABLED
Sun Aug 31 11:17:11 2014 us=762537   replay = ENABLED
Sun Aug 31 11:17:11 2014 us=762556   mute_replay_warnings = DISABLED
Sun Aug 31 11:17:11 2014 us=762572   replay_window = 64
Sun Aug 31 11:17:11 2014 us=762590   replay_time = 15
Sun Aug 31 11:17:11 2014 us=762605   packet_id_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762623   use_iv = ENABLED
Sun Aug 31 11:17:11 2014 us=762638   test_crypto = DISABLED
Sun Aug 31 11:17:11 2014 us=762653   tls_server = DISABLED
Sun Aug 31 11:17:11 2014 us=762671   tls_client = DISABLED
Sun Aug 31 11:17:11 2014 us=762686   key_method = 2
Sun Aug 31 11:17:11 2014 us=762704   ca_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762719   ca_path = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762737   dh_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762752   cert_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762769   priv_key_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762783   pkcs12_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762800   cipher_list = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762816   tls_verify = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762830   tls_export_cert = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762848   tls_remote = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762862   crl_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=762880   ns_cert_type = 0
Sun Aug 31 11:17:11 2014 us=762894   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=762912   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=762926   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=762944   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=762960   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=762974   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=762992   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763006   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763020   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763035   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763053   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763066   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763078   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763091   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763104   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763117   remote_cert_ku[i] = 0
Sun Aug 31 11:17:11 2014 us=763129   remote_cert_eku = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=763142   tls_timeout = 2
Sun Aug 31 11:17:11 2014 us=763155   renegotiate_bytes = 0
Sun Aug 31 11:17:11 2014 us=763168   renegotiate_packets = 0
Sun Aug 31 11:17:11 2014 us=763181   renegotiate_seconds = 3600
Sun Aug 31 11:17:11 2014 us=763194   handshake_window = 60
Sun Aug 31 11:17:11 2014 us=763206   transition_window = 3600
Sun Aug 31 11:17:11 2014 us=763219   single_session = DISABLED
Sun Aug 31 11:17:11 2014 us=763232   push_peer_info = DISABLED
Sun Aug 31 11:17:11 2014 us=763245   tls_exit = DISABLED
Sun Aug 31 11:17:11 2014 us=763258   tls_auth_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=763271   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763285   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763298   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763311   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763326   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763339   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763353   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763366   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763379   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763393   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763410   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763425   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763439   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763452   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763466   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763479   pkcs11_protected_authentication = DISABLED
Sun Aug 31 11:17:11 2014 us=763495   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763509   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763525   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763541   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763554   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763569   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763583   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763602   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763617   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763635   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763650   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763665   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763684   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763698   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763716   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763730   pkcs11_private_mode = 00000000
Sun Aug 31 11:17:11 2014 us=763749   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763765   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763779   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763796   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763812   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763826   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763843   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763859   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763873   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763891   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763906   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763923   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763939   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763953   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763973   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=763986   pkcs11_cert_private = DISABLED
Sun Aug 31 11:17:11 2014 us=764001   pkcs11_pin_cache_period = -1
Sun Aug 31 11:17:11 2014 us=764015   pkcs11_id = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764028   pkcs11_id_management = DISABLED
Sun Aug 31 11:17:11 2014 us=764054   server_network = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764068   server_netmask = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764084   server_network_ipv6 = ::
Sun Aug 31 11:17:11 2014 us=764100   server_netbits_ipv6 = 0
Sun Aug 31 11:17:11 2014 us=764114   server_bridge_ip = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764128   server_bridge_netmask = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764147   server_bridge_pool_start = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764162   server_bridge_pool_end = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764178   ifconfig_pool_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=764192   ifconfig_pool_start = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764206   ifconfig_pool_end = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764220   ifconfig_pool_netmask = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764234   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764251   ifconfig_pool_persist_refresh_freq = 600
Sun Aug 31 11:17:11 2014 us=764266   ifconfig_ipv6_pool_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=764280   ifconfig_ipv6_pool_base = ::
Sun Aug 31 11:17:11 2014 us=764294   ifconfig_ipv6_pool_netbits = 0
Sun Aug 31 11:17:11 2014 us=764308   n_bcast_buf = 256
Sun Aug 31 11:17:11 2014 us=764321   tcp_queue_limit = 64
Sun Aug 31 11:17:11 2014 us=764334   real_hash_size = 256
Sun Aug 31 11:17:11 2014 us=764351   virtual_hash_size = 256
Sun Aug 31 11:17:11 2014 us=764366   client_connect_script = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764380   learn_address_script = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764393   client_disconnect_script = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764406   client_config_dir = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764420   ccd_exclusive = DISABLED
Sun Aug 31 11:17:11 2014 us=764432   tmp_dir = '/tmp'
Sun Aug 31 11:17:11 2014 us=764445   push_ifconfig_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=764459   push_ifconfig_local = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764473   push_ifconfig_remote_netmask = 0.0.0.0
Sun Aug 31 11:17:11 2014 us=764487   push_ifconfig_ipv6_defined = DISABLED
Sun Aug 31 11:17:11 2014 us=764501   push_ifconfig_ipv6_local = ::/0
Sun Aug 31 11:17:11 2014 us=764514   push_ifconfig_ipv6_remote = ::
Sun Aug 31 11:17:11 2014 us=764528   enable_c2c = DISABLED
Sun Aug 31 11:17:11 2014 us=764540   duplicate_cn = DISABLED
Sun Aug 31 11:17:11 2014 us=764553   cf_max = 0
Sun Aug 31 11:17:11 2014 us=764566   cf_per = 0
Sun Aug 31 11:17:11 2014 us=764578   max_clients = 1024
Sun Aug 31 11:17:11 2014 us=764591   max_routes_per_client = 256
Sun Aug 31 11:17:11 2014 us=764605   auth_user_pass_verify_script = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764618   auth_user_pass_verify_script_via_file = DISABLED
Sun Aug 31 11:17:11 2014 us=764632   ssl_flags = 0
Sun Aug 31 11:17:11 2014 us=764644   port_share_host = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764657   port_share_port = 0
Sun Aug 31 11:17:11 2014 us=764670   client = DISABLED
Sun Aug 31 11:17:11 2014 us=764683   pull = DISABLED
Sun Aug 31 11:17:11 2014 us=764696   auth_user_pass_file = '[UNDEF]'
Sun Aug 31 11:17:11 2014 us=764712 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Sun Aug 31 11:17:11 2014 us=764771 PKCS#11: pkcs11_initialize - entered
Sun Aug 31 11:17:11 2014 us=764826 PKCS#11: pkcs11_initialize - return 0-'CKR_OK'
Sun Aug 31 11:17:11 2014 us=764847 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Aug 31 11:17:11 2014 us=764868 PO_INIT maxevents=4 flags=0x00000002
Sun Aug 31 11:17:11 2014 us=764884 PID packet_id_init seq_backtrack=64 time_backtrack=15
Sun Aug 31 11:17:11 2014 us=764986 CRYPTO INFO: n_DES_cblocks=0
Sun Aug 31 11:17:11 2014 us=765000 CRYPTO INFO: n_DES_cblocks=0
Sun Aug 31 11:17:11 2014 us=765013 CRYPTO INFO: n_DES_cblocks=0
Sun Aug 31 11:17:11 2014 us=765025 CRYPTO INFO: n_DES_cblocks=0
Sun Aug 31 11:17:11 2014 us=765095 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug 31 11:17:11 2014 us=765114 Static Encrypt: CIPHER KEY: 67b10ad6 806d5b49 b78d126d 06faa782
Sun Aug 31 11:17:11 2014 us=765128 Static Encrypt: CIPHER block_size=8 iv_size=8
Sun Aug 31 11:17:11 2014 us=765160 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug 31 11:17:11 2014 us=765179 Static Encrypt: HMAC KEY: f4dba527 7ba3a32d 7eef3c3d 62b60fe1 f3d74217
Sun Aug 31 11:17:11 2014 us=765193 Static Encrypt: HMAC size=20 block_size=64
Sun Aug 31 11:17:11 2014 us=765249 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Aug 31 11:17:11 2014 us=765267 Static Decrypt: CIPHER KEY: 67b10ad6 806d5b49 b78d126d 06faa782
Sun Aug 31 11:17:11 2014 us=765281 Static Decrypt: CIPHER block_size=8 iv_size=8
Sun Aug 31 11:17:11 2014 us=765297 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Aug 31 11:17:11 2014 us=765315 Static Decrypt: HMAC KEY: f4dba527 7ba3a32d 7eef3c3d 62b60fe1 f3d74217
Sun Aug 31 11:17:11 2014 us=765329 Static Decrypt: HMAC size=20 block_size=64
Sun Aug 31 11:17:11 2014 us=765348 MTU DYNAMIC mtu=1450, flags=2, 1544 -> 1450
Sun Aug 31 11:17:11 2014 us=765380 Socket Buffers: R=[262140->131072] S=[262140->131072]
Sun Aug 31 11:17:11 2014 us=765466 GDG: route[1] 0.0.0.0/0.0.0.0/192.168.122.1 m=0
Sun Aug 31 11:17:11 2014 us=765487 GDG: route[2] 10.9.8.2/255.255.255.255/0.0.0.0 m=0
Sun Aug 31 11:17:11 2014 us=765505 GDG: route[3] 192.168.122.0/255.255.255.0/0.0.0.0 m=0
Sun Aug 31 11:17:11 2014 us=765530 GDG: best=192.168.122.1[1] lm=0
Sun Aug 31 11:17:11 2014 us=765580 GDG: route[1] 0.0.0.0/0.0.0.0/192.168.122.1 m=0
Sun Aug 31 11:17:11 2014 us=765599 GDG: route[2] 10.9.8.2/255.255.255.255/0.0.0.0 m=0
Sun Aug 31 11:17:11 2014 us=765617 GDG: route[3] 192.168.122.0/255.255.255.0/0.0.0.0 m=0
Sun Aug 31 11:17:11 2014 us=765639 GDG: best=192.168.122.1[1] lm=0
Sun Aug 31 11:17:11 2014 us=765658 ROUTE default_gateway=192.168.122.1
Sun Aug 31 11:17:11 2014 us=766582 TUN/TAP device tun0-00 opened
Sun Aug 31 11:17:11 2014 us=766615 TUN/TAP TX queue length set to 100
Sun Aug 31 11:17:11 2014 us=766639 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Aug 31 11:17:11 2014 us=766666 /sbin/ifconfig tun0-00 10.9.8.1 pointopoint 10.9.8.2 mtu 1500
Sun Aug 31 11:17:11 2014 us=766945 PKCS#11: __pkcs11h_forkFixup entry pid=1529, activate_slotevent=1
Sun Aug 31 11:17:11 2014 us=767000 PKCS#11: __pkcs11h_forkFixup return
Sun Aug 31 11:17:11 2014 us=769182 NOTE: unable to redirect default gateway -- Cannot obtain current remote host address
Sun Aug 31 11:17:11 2014 us=769285 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:4 ET:0 EL:0 ]
Sun Aug 31 11:17:11 2014 us=769361 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.9.8.2 10.9.8.1,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sun Aug 31 11:17:11 2014 us=769395 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto UDPv4,ifconfig 10.9.8.1 10.9.8.2,cipher BF-CBC,auth SHA1,keysize 128,secret'
Sun Aug 31 11:17:11 2014 us=769479 Local Options hash (VER=V4): 'ddaab6d6'
Sun Aug 31 11:17:11 2014 us=769519 Expected Remote Options hash (VER=V4): 'e7103b47'
Sun Aug 31 11:17:11 2014 us=769559 UDPv4 link local (bound): [undef]
Sun Aug 31 11:17:11 2014 us=769581 UDPv4 link remote: [undef]
Sun Aug 31 11:17:11 2014 us=769628 TIMER: coarse timer wakeup 1 seconds
Sun Aug 31 11:17:11 2014 us=769951 RANDOM USEC=226084
Sun Aug 31 11:17:11 2014 us=769982 PO_CTL rwflags=0x0001 ev=3 arg=0x7fd429a7a130
Sun Aug 31 11:17:11 2014 us=770007 PO_CTL rwflags=0x0001 ev=4 arg=0x7fd429a7a064
Sun Aug 31 11:17:11 2014 us=770036 I/O WAIT TR|Tw|SR|Sw [1/226084]
Sun Aug 31 11:17:12 2014 us=997464  event_wait returned 0
Sun Aug 31 11:17:12 2014 us=997542 I/O WAIT status=0x0020
Sun Aug 31 11:17:12 2014 us=997568 TIMER: coarse timer wakeup 1 seconds
Sun Aug 31 11:17:12 2014 us=997593 PO_CTL rwflags=0x0001 ev=3 arg=0x7fd429a7a130
Sun Aug 31 11:17:12 2014 us=997614 PO_CTL rwflags=0x0001 ev=4 arg=0x7fd429a7a064
Sun Aug 31 11:17:12 2014 us=997644 I/O WAIT TR|Tw|SR|Sw [1/226084]
^CSun Aug 31 11:17:13 2014 us=177052  event_wait returned -1
Sun Aug 31 11:17:13 2014 us=177123 event_wait : Interrupted system call (code=4)
Sun Aug 31 11:17:13 2014 us=177149 I/O WAIT status=0x0010
Sun Aug 31 11:17:13 2014 us=177211 TCP/UDP: Closing socket
Sun Aug 31 11:17:13 2014 us=177260 Closing TUN/TAP interface
Sun Aug 31 11:17:13 2014 us=177296 /sbin/ifconfig tun0-00 0.0.0.0
Sun Aug 31 11:17:13 2014 us=177979 PKCS#11: __pkcs11h_forkFixup entry pid=1530, activate_slotevent=1
Sun Aug 31 11:17:13 2014 us=178154 PKCS#11: __pkcs11h_forkFixup return
Sun Aug 31 11:17:13 2014 us=204960 PID packet_id_free
Sun Aug 31 11:17:13 2014 us=205140 SIGINT[hard,] received, process exiting
Sun Aug 31 11:17:13 2014 us=206141 PKCS#11: pkcs11_terminate - entered
Sun Aug 31 11:17:13 2014 us=206250 PKCS#11: pkcs11h_terminate entry
Sun Aug 31 11:17:13 2014 us=206335 PKCS#11: Removing providers
Sun Aug 31 11:17:13 2014 us=206417 PKCS#11: Releasing sessions
Sun Aug 31 11:17:13 2014 us=206497 PKCS#11: Terminating slotevent
Sun Aug 31 11:17:13 2014 us=206577 PKCS#11: _pkcs11h_slotevent_terminate entry
Sun Aug 31 11:17:13 2014 us=206658 PKCS#11: _pkcs11h_slotevent_terminate return
Sun Aug 31 11:17:13 2014 us=206739 PKCS#11: Marking as uninitialized
Sun Aug 31 11:17:13 2014 us=206829 PKCS#11: pkcs11_terminate - return

This is a Debian system so the package version should be older, will this be a problem?

G_known

Traffic wrote How old though ?

It's version 2.2.1:

OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>

  $ ./configure --build=x86_64-linux-gnu --prefix=/usr --includedir=${prefix}/include --mandir=${prefix}/share/man --infodir=${prefix}/share/info --sysconfdir=/etc --localstatedir=/var --libexecdir=${prefix}/lib/openvpn --disable-maintainer-mode --disable-dependency-tracking CFLAGS=-g -O2 -fPIE -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security CPPFLAGS=-D_FORTIFY_SOURCE=2 CXXFLAGS=-g -O2 -fPIE -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security FFLAGS=-g -O2 LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now --enable-password-save --host=x86_64-linux-gnu --build=x86_64-linux-gnu --prefix=/usr --mandir=${prefix}/share/man --with-ifconfig-path=/sbin/ifconfig --with-route-path=/sbin/route

Compile time defines:  ENABLE_CLIENT_SERVER ENABLE_DEBUG ENABLE_EUREPHIA ENABLE_FRAGMENT ENABLE_HTTP_PROXY ENABLE_MANAGEMENT ENABLE_MULTIHOME ENABLE_PASSWORD_SAVE ENABLE_PORT_SHARE ENABLE_SOCKS USE_CRYPTO USE_LIBDL USE_LZO USE_PF_INET6 USE_PKCS11 USE_SSL

Along with my system:

 Linux debian 3.2.0-4-amd64 #1 SMP Debian 3.2.57-3+deb7u2 x86_64 GNU/Linux

This could potentially be a problem if it hinders me from my goal of directing network traffic.

G_known

Traffic wroteHave you seen this:
https://community.openvpn.net/openvpn/wiki/OpenvpnSoftwareRepos

No, I don't seem to be concern about getting to the latest version. After hanging out on the IRC channel, I discovered that I need to configure both NAT and IP_Forwarding to my server, a whole story about using iptables to setup NAT.

G_known

It appears that the same message still occurs despite enabling NAT (I'd assume since I've ran the command)

G_known

Here's what works, Client enters:

openvpn --remote 192.168.122.2 --dev tun0-00 --ifconfig 10.9.8.2 10.9.8.1 --secret /etc/openvpn/static.key --port 443

Server enters:

openvpn --dev tun0-00 --ifconfig 10.9.8.1 10.9.8.2 --secret /etc/openvpn/static.key --port 443

Results in a successful connection. I can ping both tun devices from either machine. If I decides to add --push "redirect-gateway autolocal def1" on the server, the connection will go through but the internet traffic doesn't seem encrypted.

G_known

The push/pull command cannot be used in Static Key mode, also the server mode is exclusive to TLS/SSL mode only. Which means I need to find another way to get VPN subnet assigned.