Fri Oct 24 12:35:24 2014 us=288873 Current Parameter Settings:
Fri Oct 24 12:35:24 2014 us=289543 config = '/etc/openvpn/vpn-entry-01.acme-company.de.conf'
Fri Oct 24 12:35:24 2014 us=290524 mode = 1
Fri Oct 24 12:35:24 2014 us=291131 persist_config = DISABLED
Fri Oct 24 12:35:24 2014 us=291774 persist_mode = 1
Fri Oct 24 12:35:24 2014 us=292751 show_ciphers = DISABLED
Fri Oct 24 12:35:24 2014 us=293278 show_digests = DISABLED
Fri Oct 24 12:35:24 2014 us=293318 show_engines = DISABLED
Fri Oct 24 12:35:24 2014 us=293350 genkey = DISABLED
Fri Oct 24 12:35:24 2014 us=293379 key_pass_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=293409 show_tls_ciphers = DISABLED
Fri Oct 24 12:35:24 2014 us=293439 Connection profiles [default]:
Fri Oct 24 12:35:24 2014 us=293470 proto = udp
Fri Oct 24 12:35:24 2014 us=293500 local = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=293529 local_port = 1194
Fri Oct 24 12:35:24 2014 us=293559 remote = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=293589 remote_port = 1194
Fri Oct 24 12:35:24 2014 us=293619 remote_float = DISABLED
Fri Oct 24 12:35:24 2014 us=293648 bind_defined = DISABLED
Fri Oct 24 12:35:24 2014 us=293677 bind_local = ENABLED
Fri Oct 24 12:35:24 2014 us=293707 connect_retry_seconds = 5
Fri Oct 24 12:35:24 2014 us=293737 connect_timeout = 10
Fri Oct 24 12:35:24 2014 us=294166 connect_retry_max = 0
Fri Oct 24 12:35:24 2014 us=294274 socks_proxy_server = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=294297 socks_proxy_port = 0
Fri Oct 24 12:35:24 2014 us=294310 socks_proxy_retry = DISABLED
Fri Oct 24 12:35:24 2014 us=294322 tun_mtu = 1500
Fri Oct 24 12:35:24 2014 us=294334 tun_mtu_defined = ENABLED
Fri Oct 24 12:35:24 2014 us=294346 link_mtu = 1500
Fri Oct 24 12:35:24 2014 us=294361 link_mtu_defined = DISABLED
Fri Oct 24 12:35:24 2014 us=294371 tun_mtu_extra = 0
Fri Oct 24 12:35:24 2014 us=294386 tun_mtu_extra_defined = DISABLED
Fri Oct 24 12:35:24 2014 us=294398 mtu_discover_type = -1
Fri Oct 24 12:35:24 2014 us=294409 fragment = 0
Fri Oct 24 12:35:24 2014 us=294420 mssfix = 1450
Fri Oct 24 12:35:24 2014 us=294431 explicit_exit_notification = 0
Fri Oct 24 12:35:24 2014 us=294444 Connection profiles END
Fri Oct 24 12:35:24 2014 us=294455 remote_random = DISABLED
Fri Oct 24 12:35:24 2014 us=294466 ipchange = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=294476 dev = 'tun'
Fri Oct 24 12:35:24 2014 us=294487 dev_type = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=294627 dev_node = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=294644 lladdr = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=294657 topology = 1
Fri Oct 24 12:35:24 2014 us=294669 tun_ipv6 = DISABLED
Fri Oct 24 12:35:24 2014 us=294681 ifconfig_local = '10.44.0.1'
Fri Oct 24 12:35:24 2014 us=294694 ifconfig_remote_netmask = '10.44.0.2'
Fri Oct 24 12:35:24 2014 us=294706 ifconfig_noexec = DISABLED
Fri Oct 24 12:35:24 2014 us=294721 ifconfig_nowarn = DISABLED
Fri Oct 24 12:35:24 2014 us=294732 ifconfig_ipv6_local = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=294743 ifconfig_ipv6_netbits = 0
Fri Oct 24 12:35:24 2014 us=294754 ifconfig_ipv6_remote = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=294878 shaper = 0
Fri Oct 24 12:35:24 2014 us=294898 mtu_test = 0
Fri Oct 24 12:35:24 2014 us=294984 mlock = DISABLED
Fri Oct 24 12:35:24 2014 us=295001 keepalive_ping = 10
Fri Oct 24 12:35:24 2014 us=295017 keepalive_timeout = 120
Fri Oct 24 12:35:24 2014 us=295029 inactivity_timeout = 0
Fri Oct 24 12:35:24 2014 us=295042 ping_send_timeout = 10
Fri Oct 24 12:35:24 2014 us=295054 ping_rec_timeout = 240
Fri Oct 24 12:35:24 2014 us=295067 ping_rec_timeout_action = 2
Fri Oct 24 12:35:24 2014 us=295206 ping_timer_remote = DISABLED
Fri Oct 24 12:35:24 2014 us=295224 remap_sigusr1 = 0
Fri Oct 24 12:35:24 2014 us=295237 persist_tun = ENABLED
Fri Oct 24 12:35:24 2014 us=295249 persist_local_ip = DISABLED
Fri Oct 24 12:35:24 2014 us=295262 persist_remote_ip = DISABLED
Fri Oct 24 12:35:24 2014 us=295274 persist_key = ENABLED
Fri Oct 24 12:35:24 2014 us=295286 passtos = DISABLED
Fri Oct 24 12:35:24 2014 us=295299 resolve_retry_seconds = 1000000000
Fri Oct 24 12:35:24 2014 us=295311 username = 'openvpn'
Fri Oct 24 12:35:24 2014 us=295324 groupname = 'nogroup'
Fri Oct 24 12:35:24 2014 us=295336 chroot_dir = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=295502 cd_dir = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=295529 writepid = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=295551 up_script = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=295576 down_script = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=295602 down_pre = DISABLED
Fri Oct 24 12:35:24 2014 us=295624 up_restart = DISABLED
Fri Oct 24 12:35:24 2014 us=295638 up_delay = DISABLED
Fri Oct 24 12:35:24 2014 us=295651 daemon = DISABLED
Fri Oct 24 12:35:24 2014 us=295663 inetd = 0
Fri Oct 24 12:35:24 2014 us=295876 log = DISABLED
Fri Oct 24 12:35:24 2014 us=295893 suppress_timestamps = DISABLED
Fri Oct 24 12:35:24 2014 us=295905 nice = 0
Fri Oct 24 12:35:24 2014 us=295919 verbosity = 5
Fri Oct 24 12:35:24 2014 us=295930 mute = 0
Fri Oct 24 12:35:24 2014 us=295941 gremlin = 0
Fri Oct 24 12:35:24 2014 us=295951 status_file = '/var/log/openvpn.status'
Fri Oct 24 12:35:24 2014 us=295962 status_file_version = 1
Fri Oct 24 12:35:24 2014 us=295972 status_file_update_freq = 60
Fri Oct 24 12:35:24 2014 us=295983 occ = ENABLED
Fri Oct 24 12:35:24 2014 us=295993 rcvbuf = 65536
Fri Oct 24 12:35:24 2014 us=296004 sndbuf = 65536
Fri Oct 24 12:35:24 2014 us=296014 mark = 0
Fri Oct 24 12:35:24 2014 us=296025 sockflags = 0
Fri Oct 24 12:35:24 2014 us=296035 fast_io = DISABLED
Fri Oct 24 12:35:24 2014 us=296045 lzo = 7
Fri Oct 24 12:35:24 2014 us=296056 route_script = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296066 route_default_gateway = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296077 route_default_metric = 0
Fri Oct 24 12:35:24 2014 us=296087 route_noexec = DISABLED
Fri Oct 24 12:35:24 2014 us=296098 route_delay = 0
Fri Oct 24 12:35:24 2014 us=296213 route_delay_window = 30
Fri Oct 24 12:35:24 2014 us=296232 route_delay_defined = DISABLED
Fri Oct 24 12:35:24 2014 us=296244 route_nopull = DISABLED
Fri Oct 24 12:35:24 2014 us=296255 route_gateway_via_dhcp = DISABLED
Fri Oct 24 12:35:24 2014 us=296266 max_routes = 100
Fri Oct 24 12:35:24 2014 us=296277 allow_pull_fqdn = DISABLED
Fri Oct 24 12:35:24 2014 us=296289 route 10.44.0.0/255.255.224.0/nil/nil
Fri Oct 24 12:35:24 2014 us=296303 management_addr = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296314 management_port = 0
Fri Oct 24 12:35:24 2014 us=296325 management_user_pass = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296336 management_log_history_cache = 250
Fri Oct 24 12:35:24 2014 us=296477 management_echo_buffer_size = 100
Fri Oct 24 12:35:24 2014 us=296493 management_write_peer_info_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296505 management_client_user = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296515 management_client_group = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296526 management_flags = 0
Fri Oct 24 12:35:24 2014 us=296540 shared_secret_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296551 key_direction = 0
Fri Oct 24 12:35:24 2014 us=296561 ciphername_defined = ENABLED
Fri Oct 24 12:35:24 2014 us=296572 ciphername = 'BF-CBC'
Fri Oct 24 12:35:24 2014 us=296582 authname_defined = ENABLED
Fri Oct 24 12:35:24 2014 us=296593 authname = 'SHA1'
Fri Oct 24 12:35:24 2014 us=296603 prng_hash = 'SHA1'
Fri Oct 24 12:35:24 2014 us=296734 prng_nonce_secret_len = 16
Fri Oct 24 12:35:24 2014 us=296756 keysize = 0
Fri Oct 24 12:35:24 2014 us=296773 engine = DISABLED
Fri Oct 24 12:35:24 2014 us=296791 replay = ENABLED
Fri Oct 24 12:35:24 2014 us=296817 mute_replay_warnings = DISABLED
Fri Oct 24 12:35:24 2014 us=296831 replay_window = 64
Fri Oct 24 12:35:24 2014 us=296842 replay_time = 15
Fri Oct 24 12:35:24 2014 us=296853 packet_id_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=296987 use_iv = ENABLED
Fri Oct 24 12:35:24 2014 us=297100 test_crypto = DISABLED
Fri Oct 24 12:35:24 2014 us=297122 tls_server = ENABLED
Fri Oct 24 12:35:24 2014 us=297141 tls_client = DISABLED
Fri Oct 24 12:35:24 2014 us=297160 key_method = 2
Fri Oct 24 12:35:24 2014 us=297178 ca_file = 'ca.crt'
Fri Oct 24 12:35:24 2014 us=297195 ca_path = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=297338 dh_file = 'dh2048.pem'
Fri Oct 24 12:35:24 2014 us=297369 cert_file = 'vpn-entry-01.acme-company.de.crt'
Fri Oct 24 12:35:24 2014 us=297392 priv_key_file = 'vpn-entry-01.acme-company.de.key'
Fri Oct 24 12:35:24 2014 us=297412 pkcs12_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=297433 cipher_list = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=297454 tls_verify = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=297596 tls_export_cert = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=297628 verify_x509_type = 0
Fri Oct 24 12:35:24 2014 us=297652 verify_x509_name = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=297757 crl_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=297776 ns_cert_type = 0
Fri Oct 24 12:35:24 2014 us=297801 remote_cert_ku[i] = 128
Fri Oct 24 12:35:24 2014 us=297942 remote_cert_ku[i] = 8
Fri Oct 24 12:35:24 2014 us=297958 remote_cert_ku[i] = 136
Fri Oct 24 12:35:24 2014 us=297973 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=297984 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=297994 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298005 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298016 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298026 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298037 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298047 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298058 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298068 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298078 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298088 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298099 remote_cert_ku[i] = 0
Fri Oct 24 12:35:24 2014 us=298106 remote_cert_eku = 'TLS Web Client Authentication'
Fri Oct 24 12:35:24 2014 us=298112 ssl_flags = 0
Fri Oct 24 12:35:24 2014 us=298123 tls_timeout = 2
Fri Oct 24 12:35:24 2014 us=298134 renegotiate_bytes = 0
Fri Oct 24 12:35:24 2014 us=298145 renegotiate_packets = 0
Fri Oct 24 12:35:24 2014 us=298270 renegotiate_seconds = 3600
Fri Oct 24 12:35:24 2014 us=298287 handshake_window = 60
Fri Oct 24 12:35:24 2014 us=298373 transition_window = 3600
Fri Oct 24 12:35:24 2014 us=298394 single_session = DISABLED
Fri Oct 24 12:35:24 2014 us=298406 push_peer_info = DISABLED
Fri Oct 24 12:35:24 2014 us=298417 tls_exit = DISABLED
Fri Oct 24 12:35:24 2014 us=298427 tls_auth_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=298438 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298449 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298556 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298572 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298584 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298599 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298610 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298620 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298631 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298641 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298652 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298763 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298781 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298794 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298807 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=298822 pkcs11_protected_authentication = DISABLED
Fri Oct 24 12:35:24 2014 us=299003 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299021 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299035 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299154 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299170 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299186 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299199 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299212 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299224 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299299 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299413 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299428 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299440 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299547 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299567 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299580 pkcs11_private_mode = 00000000
Fri Oct 24 12:35:24 2014 us=299593 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299606 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299618 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299694 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299815 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299831 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299938 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299957 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299971 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299984 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=299996 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=300172 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=300188 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=300199 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=300210 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=300320 pkcs11_cert_private = DISABLED
Fri Oct 24 12:35:24 2014 us=300339 pkcs11_pin_cache_period = -1
Fri Oct 24 12:35:24 2014 us=300352 pkcs11_id = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=300437 pkcs11_id_management = DISABLED
Fri Oct 24 12:35:24 2014 us=300459 server_network = 10.44.0.0
Fri Oct 24 12:35:24 2014 us=300472 server_netmask = 255.255.224.0
Fri Oct 24 12:35:24 2014 us=300584 server_network_ipv6 = ::
Fri Oct 24 12:35:24 2014 us=300600 server_netbits_ipv6 = 0
Fri Oct 24 12:35:24 2014 us=300612 server_bridge_ip = 0.0.0.0
Fri Oct 24 12:35:24 2014 us=300627 server_bridge_netmask = 0.0.0.0
Fri Oct 24 12:35:24 2014 us=300639 server_bridge_pool_start = 0.0.0.0
Fri Oct 24 12:35:24 2014 us=300650 server_bridge_pool_end = 0.0.0.0
Fri Oct 24 12:35:24 2014 us=300661 push_entry = 'route 10.45.0.0 255.255.0.0'
Fri Oct 24 12:35:24 2014 us=300672 push_entry = 'route 10.46.0.0 255.255.0.0'
Fri Oct 24 12:35:24 2014 us=300777 push_entry = 'route 172.17.0.0 255.255.0.0'
Fri Oct 24 12:35:24 2014 us=300796 push_entry = 'dhcp-option DNS 172.17.0.33'
Fri Oct 24 12:35:24 2014 us=300810 push_entry = 'dhcp-option NTP 172.17.0.33'
Fri Oct 24 12:35:24 2014 us=300823 push_entry = 'route 10.44.0.1'
Fri Oct 24 12:35:24 2014 us=300899 push_entry = 'topology net30'
Fri Oct 24 12:35:24 2014 us=301014 push_entry = 'ping 10'
Fri Oct 24 12:35:24 2014 us=301029 push_entry = 'ping-restart 120'
Fri Oct 24 12:35:24 2014 us=301041 ifconfig_pool_defined = ENABLED
Fri Oct 24 12:35:24 2014 us=301060 ifconfig_pool_start = 10.44.0.4
Fri Oct 24 12:35:24 2014 us=301170 ifconfig_pool_end = 10.44.31.251
Fri Oct 24 12:35:24 2014 us=301189 ifconfig_pool_netmask = 0.0.0.0
Fri Oct 24 12:35:24 2014 us=301202 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=301287 ifconfig_pool_persist_refresh_freq = 600
Fri Oct 24 12:35:24 2014 us=301395 ifconfig_ipv6_pool_defined = DISABLED
Fri Oct 24 12:35:24 2014 us=301414 ifconfig_ipv6_pool_base = ::
Fri Oct 24 12:35:24 2014 us=301426 ifconfig_ipv6_pool_netbits = 0
Fri Oct 24 12:35:24 2014 us=301438 n_bcast_buf = 256
Fri Oct 24 12:35:24 2014 us=301452 tcp_queue_limit = 64
Fri Oct 24 12:35:24 2014 us=301463 real_hash_size = 256
Fri Oct 24 12:35:24 2014 us=301473 virtual_hash_size = 256
Fri Oct 24 12:35:24 2014 us=301484 client_connect_script = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=301494 learn_address_script = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=301599 client_disconnect_script = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=301620 client_config_dir = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=301633 ccd_exclusive = DISABLED
Fri Oct 24 12:35:24 2014 us=301717 tmp_dir = '/tmp'
Fri Oct 24 12:35:24 2014 us=301734 push_ifconfig_defined = DISABLED
Fri Oct 24 12:35:24 2014 us=301746 push_ifconfig_local = 0.0.0.0
Fri Oct 24 12:35:24 2014 us=301855 push_ifconfig_remote_netmask = 0.0.0.0
Fri Oct 24 12:35:24 2014 us=301871 push_ifconfig_ipv6_defined = DISABLED
Fri Oct 24 12:35:24 2014 us=301883 push_ifconfig_ipv6_local = ::/0
Fri Oct 24 12:35:24 2014 us=301898 push_ifconfig_ipv6_remote = ::
Fri Oct 24 12:35:24 2014 us=301909 enable_c2c = DISABLED
Fri Oct 24 12:35:24 2014 us=301920 duplicate_cn = DISABLED
Fri Oct 24 12:35:24 2014 us=301934 cf_max = 0
Fri Oct 24 12:35:24 2014 us=301945 cf_per = 0
Fri Oct 24 12:35:24 2014 us=301956 max_clients = 1024
Fri Oct 24 12:35:24 2014 us=302121 max_routes_per_client = 256
Fri Oct 24 12:35:24 2014 us=302239 auth_user_pass_verify_script = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=302255 auth_user_pass_verify_script_via_file = DISABLED
Fri Oct 24 12:35:24 2014 us=302267 port_share_host = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=302278 port_share_port = 0
Fri Oct 24 12:35:24 2014 us=302289 client = DISABLED
Fri Oct 24 12:35:24 2014 us=302300 pull = DISABLED
Fri Oct 24 12:35:24 2014 us=302311 auth_user_pass_file = '[UNDEF]'
Fri Oct 24 12:35:24 2014 us=302323 OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Feb 4 2014
Fri Oct 24 12:35:24 2014 us=310201 Diffie-Hellman initialized with 2048 bit key
Fri Oct 24 12:35:24 2014 us=310792 WARNING: file 'vpn-entry-01.acme-company.de.key' is group or others accessible
Fri Oct 24 12:35:24 2014 us=311287 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Oct 24 12:35:24 2014 us=311587 Socket Buffers: R=[212992->131072] S=[212992->131072]
Fri Oct 24 12:35:24 2014 us=311961 ROUTE_GATEWAY 10.16.6.1/255.255.255.0 IFACE=eth0 HWADDR=08:00:27:34:f5:24
Fri Oct 24 12:35:24 2014 us=321613 TUN/TAP device tun0 opened
Fri Oct 24 12:35:24 2014 us=322000 TUN/TAP TX queue length set to 100
Fri Oct 24 12:35:24 2014 us=322337 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Oct 24 12:35:24 2014 us=322650 /sbin/ip link set dev tun0 up mtu 1500
Fri Oct 24 12:35:24 2014 us=331115 /sbin/ip addr add dev tun0 local 10.44.0.1 peer 10.44.0.2
Fri Oct 24 12:35:24 2014 us=333001 /sbin/ip route add 10.44.0.0/19 via 10.44.0.2
Fri Oct 24 12:35:24 2014 us=336171 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Oct 24 12:35:24 2014 us=336839 GID set to nogroup
Fri Oct 24 12:35:24 2014 us=337117 UID set to openvpn
Fri Oct 24 12:35:24 2014 us=337327 UDPv4 link local (bound): [undef]
Fri Oct 24 12:35:24 2014 us=337598 UDPv4 link remote: [undef]
Fri Oct 24 12:35:24 2014 us=337874 MULTI: multi_init called, r=256 v=256
Fri Oct 24 12:35:24 2014 us=338528 IFCONFIG POOL: base=10.44.0.4 size=2046, ipv6=0
Fri Oct 24 12:35:24 2014 us=338893 Initialization Sequence Completed
Fri Oct 24 12:35:30 2014 us=918964 MULTI: multi_create_instance called
Fri Oct 24 12:35:30 2014 us=919061 10.16.6.42:1194 Re-using SSL/TLS context
Fri Oct 24 12:35:30 2014 us=919118 10.16.6.42:1194 LZO compression initialized
Fri Oct 24 12:35:30 2014 us=919290 10.16.6.42:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Oct 24 12:35:30 2014 us=919318 10.16.6.42:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Oct 24 12:35:30 2014 us=919367 10.16.6.42:1194 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Oct 24 12:35:30 2014 us=919387 10.16.6.42:1194 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Oct 24 12:35:30 2014 us=919430 10.16.6.42:1194 Local Options hash (VER=V4): '530fdded'
Fri Oct 24 12:35:30 2014 us=919458 10.16.6.42:1194 Expected Remote Options hash (VER=V4): '41690919'
RFri Oct 24 12:35:30 2014 us=919526 10.16.6.42:1194 TLS: Initial packet from [AF_INET]10.16.6.42:1194, sid=df63fb0e da8c2163
WRRWRWRWWWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWRWRWRWRWRWRWRWRWRWRWRFri Oct 24 12:35:30 2014 us=993521 10.16.6.42:1194 VERIFY ERROR: depth=0, error=unable to get local issuer certificate: DC=ACME INC, DC=Access TEST VPN, CN=vpn-test
Fri Oct 24 12:35:30 2014 us=994076 10.16.6.42:1194 TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
Fri Oct 24 12:35:30 2014 us=995376 10.16.6.42:1194 TLS Error: TLS object -> incoming plaintext read error
Fri Oct 24 12:35:30 2014 us=995393 10.16.6.42:1194 TLS Error: TLS handshake failed
Fri Oct 24 12:35:30 2014 us=995450 10.16.6.42:1194 SIGUSR1[soft,tls-error] received, client-instance restarting
# Edit IP Range to fit your needs
server 10.44.0.0 255.255.224.0
# Please create a dh param file with
# openssl dhparam -out dh2048.pem 2048
push "route 10.45.0.0 255.255.0.0"
push "route 10.46.0.0 255.255.0.0"
push "route 172.17.0.0 255.255.0.0"
push "dhcp-option DNS 172.17.0.33"
push "dhcp-option NTP 172.17.0.33"
proto udp
dev tun
comp-lzo
keepalive 10 120
#log-append /var/log/openvpn.log
status /var/log/openvpn.status
user openvpn
group nogroup
persist-key
persist-tun
dh dh2048.pem
remote-cert-tls client
cert vpn-entry-01.crt
key vpn-entry-01.key
ca ca.crt
extra-certs subca.crt
verb 5
ca.crt is the root ca (selfsigned ca)
subca.crt holds the issuing ca which is signed from the root ca