Unfortunately I cannot upload settings. I saw that config by downloading the debug file from Tools->System->Download debug logs.
Here is what I did this evening:
1. Reset router to factory defaults
2. Manually configure the WAN, LAN, Firewall Rules all over again
3. Upload newly generated 1024 keys ca, server, dh to the router
4. Configure openvpn and client with port 1194, UPD, cypher and hash tried BF, AES-128, AES-256, keysize 128 and 256, SHA1, SHA256 did not try 512.
Same result but what is funny is that i generated more than 8 certificates. If i delete a certificate and put a new one it works untill I hit Disconnect. When i try to connect again it is like that certificate is rejected and I get WS
Example using first time new cert:
Mon Feb 9 21:50:17 2015 OpenVPN 2.1.3w mips-unknown-linux-gnu [SSL] [LZOSTUB] [EPOLL] built on Apr 23 2014
Mon Feb 9 21:50:17 2015 MANAGEMENT: TCP Socket listening on 127.0.0.1:7505
Mon Feb 9 21:50:17 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Feb 9 21:50:17 2015 Diffie-Hellman initialized with 1024 bit key
Mon Feb 9 21:50:17 2015 WARNING: file '/var/certs/openvpn/server.key' is group or others accessible
Mon Feb 9 21:50:17 2015 Socket Buffers: R=[178176->131072] S=[178176->131072]
Mon Feb 9 21:50:17 2015 ROUTE default_gateway=xxx
Mon Feb 9 21:50:17 2015 TUN/TAP device tun1 opened
Mon Feb 9 21:50:17 2015 TUN/TAP TX queue length set to 100
Mon Feb 9 21:50:17 2015 /sbin/ifconfig tun1 192.168.201.1 pointopoint 192.168.201.2 mtu 1500
Mon Feb 9 21:50:17 2015 /sbin/route add -net 192.168.201.0 netmask 255.255.255.0 gw 192.168.201.2
Mon Feb 9 21:50:17 2015 UDPv4 link local (bound): [undef]:1194
Mon Feb 9 21:50:17 2015 UDPv4 link remote: [undef]
Mon Feb 9 21:50:17 2015 MULTI: multi_init called, r=256 v=256
Mon Feb 9 21:50:17 2015 IFCONFIG POOL: base=192.168.201.4 size=62
Mon Feb 9 21:50:17 2015 Initialization Sequence Completed
Mon Feb 9 21:50:42 2015 xxx:60577 TLS: Initial packet from xxx:60577, sid=e1172e4e 8ac23a17
Mon Feb 9 21:50:43 2015 xxx:60577 VERIFY OK: depth=1, /xxx
Mon Feb 9 21:50:43 2015 xxx:60577 VERIFY OK: depth=0, /xxx
Mon Feb 9 21:50:43 2015 xxx:60577 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 114796680 bit key
Mon Feb 9 21:50:43 2015 xxx:60577 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Feb 9 21:50:43 2015 xxx:60577 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 0 bit key
Mon Feb 9 21:50:43 2015 xxx:60577 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Feb 9 21:50:43 2015 xxx:60577 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Feb 9 21:50:43 2015 xxx:60577 [GUEST2] Peer Connection Initiated with xxx:60577
Mon Feb 9 21:50:43 2015 GUEST2/xxx:60577 MULTI: Learn: 192.168.201.6 -> GUEST2/xxx:60577
Mon Feb 9 21:50:43 2015 GUEST2/xxx:60577 MULTI: primary virtual IP for GUEST2/xxx:60577: 192.168.201.6
Mon Feb 9 21:50:45 2015 GUEST2/xxx:60577 PUSH: Received control message: 'PUSH_REQUEST'
Mon Feb 9 21:50:45 2015 GUEST2/xxx:60577 SENT CONTROL [GUEST2]: 'PUSH_REPLY,redirect-gateway def1,route 192.168.201.1,topology net30,ping 10,ping-restart 120,ifconfig 192.168.201.6 192.168.201.5' (status=1)
Example using the same code a couple of minutes later:
Mon Feb 9 21:53:53 2015 xxx:52402 TLS: Initial packet from xx.xx.xx.xx:52402, sid=ec5b159b 1e900294
Mon Feb 9 21:53:54 2015 xxx:52402 VERIFY OK: depth=1, /xxx
Mon Feb 9 21:53:54 2015 xxx:52402 VERIFY OK: depth=0, /xxx
Mon Feb 9 21:53:54 2015 xxx:52402 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 0 bit key
Mon Feb 9 21:53:54 2015 xxx:52402 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Feb 9 21:53:54 2015 xxx:52402 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with -108387648 bit key
Mon Feb 9 21:53:54 2015 xxx:52402 Assertion failed at crypto.c:458
Mon Feb 9 21:53:54 2015 xxx:52402 Exiting due to fatal error
Mon Feb 9 21:53:54 2015 xxx:52402 /sbin/route del -net 192.168.201.0 netmask 255.255.255.0
Mon Feb 9 21:53:54 2015 xxx:52402 Closing TUN/TAP interface
I will admit right now i am lost. I do not understand what is going on. I am going to open a support ticket with dlink also maybe they at least can provide an exchange equipemnt or something.
The other funny part is that their SSLVPN java applet does not install on win 7 64bit at all so I can't even use that temporary.
