gromish
Got the "Cannot connect to client" with the following log.
Win 7 ent.
Mon Sep 29 09:43:34 2014 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Enter Management Password:
Mon Sep 29 09:43:34 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Sep 29 09:43:34 2014 Need hold release from management interface, waiting...
Mon Sep 29 09:43:34 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Sep 29 09:43:35 2014 MANAGEMENT: CMD 'state on'
Mon Sep 29 09:43:35 2014 MANAGEMENT: CMD 'log all on'
Mon Sep 29 09:43:35 2014 MANAGEMENT: CMD 'hold off'
Mon Sep 29 09:43:35 2014 MANAGEMENT: CMD 'hold release'
Mon Sep 29 09:43:47 2014 MANAGEMENT: CMD 'username "Auth" "pmalniti"'
Mon Sep 29 09:43:47 2014 MANAGEMENT: CMD 'password [...]'
Mon Sep 29 09:43:47 2014 ******* WARNING *******: null cipher specified, no encryption will be used
Mon Sep 29 09:43:47 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Mon Sep 29 09:43:47 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 29 09:43:47 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 29 09:43:47 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon Sep 29 09:43:47 2014 MANAGEMENT: >STATE:1411973027,RESOLVE,,,
Mon Sep 29 09:43:47 2014 UDPv4 link local: [undef]
Mon Sep 29 09:43:47 2014 UDPv4 link remote: [AF_INET]10.32.38.32:1197
Mon Sep 29 09:43:47 2014 MANAGEMENT: >STATE:1411973027,WAIT,,,
Mon Sep 29 09:43:47 2014 MANAGEMENT: >STATE:1411973027,AUTH,,,
Mon Sep 29 09:43:47 2014 TLS: Initial packet from [AF_INET]10.32.38.32:1197, sid=9ccf0607 a82e5163
Mon Sep 29 09:43:47 2014 VERIFY OK: depth=2, CN=UbisoftRootCA
Mon Sep 29 09:43:47 2014 VERIFY OK: depth=1, DC=org, DC=ubisoft, CN=NCSAGNSIssuingCA
Mon Sep 29 09:43:47 2014 Validating certificate extended key usage
Mon Sep 29 09:43:47 2014 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Sep 29 09:43:47 2014 VERIFY EKU OK
Mon Sep 29 09:43:47 2014 VERIFY OK: depth=0, CN=GG
Mon Sep 29 09:43:47 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 29 09:43:47 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Sep 29 09:43:47 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Sep 29 09:43:47 2014 [GG] Peer Connection Initiated with [AF_INET]10.32.38.32:1197
Mon Sep 29 09:43:48 2014 MANAGEMENT: >STATE:1411973028,GET_CONFIG,,,
Mon Sep 29 09:43:49 2014 SENT CONTROL [GG]: 'PUSH_REQUEST' (status=1)
Mon Sep 29 09:43:49 2014 PUSH: Received control message: 'PUSH_REPLY,topology net30,route 172.16.56.0 255.255.248.0,route 10.0.0.0 255.0.0.0 net_gateway,route 216.98.48.0 255.255.240.0 net_gateway,route 194.2.155.0 255.255.255.0 net_gateway,route 194.169.249.0 255.255.255.0 net_gateway,route 195.22.144.0 255.255.254.0 net_gateway,redirect-gateway def1,register-dns,dhcp-option DNS 172.16.56.1,dhcp-option WINS 172.16.56.1,dhcp-option DOMAIN gg.ubisoft.org,explicit-exit-notify,route 172.16.56.0 255.255.248.0,topology net30,ping 10,ping-restart 30,ifconfig 172.16.32.26 172.16.32.27'
Mon Sep 29 09:43:49 2014 OPTIONS IMPORT: timers and/or timeouts modified
Mon Sep 29 09:43:49 2014 OPTIONS IMPORT: explicit notify parm(s) modified
Mon Sep 29 09:43:49 2014 OPTIONS IMPORT: --ifconfig/up options modified
Mon Sep 29 09:43:49 2014 OPTIONS IMPORT: route options modified
Mon Sep 29 09:43:49 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Sep 29 09:43:49 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Sep 29 09:43:49 2014 MANAGEMENT: >STATE:1411973029,ASSIGN_IP,,172.16.32.26,
Mon Sep 29 09:43:49 2014 MANAGEMENT: Client disconnected
Mon Sep 29 09:43:49 2014 There is a problem in your selection of --ifconfig endpoints [local=172.16.32.26, remote=172.16.32.27]. The local and remote VPN endpoints cannot use the first or last address within a given 255.255.255.252 subnet. This is a limitation of --dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.
Mon Sep 29 09:43:49 2014 Exiting due to fatal error
