push-ifconfig and tap device

jbertrand

Hello,

I'm trying to force IP client configuration on a level-2 openvpn link without any success. I have written on server side:

local 192.168.253.1
mode server
port 1194
fragment 1416
mssfix 1416
proto udp
link-mtu 1492
dev tap1
tls-server
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/rayleigh.crt
key /etc/openvpn/easy-rsa/2.0/keys/rayleigh.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 192.168.1.0 255.255.255.0
ifconfig 192.168.1.1 255.255.255.0
keepalive 10 120
comp-lzo
max-clients 5
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status-udp.log
verb 3
script-security 2
up /etc/openvpn/route-udp-up.sh
down /etc/openvpn/route-udp-down.sh
client-config-dir /etc/openvpn/ccd

In ccd directory, I have one fil by client. For example :

Root rayleigh:[/etc/openvpn] > cat ccd/vignols
ifconfig-push 192.168.1.2 255.255.255.0

Of course, I have checked that filenames correspond to certificate CN's fields.

On client side, I have written following configuration :

port 1194
proto udp
fragment 1416
mssfix 1416
link-mtu 1492
dev tap
remote 213.41.232.237
float
tls-client
remote-cert-tls server
ca /usr/pkg/etc/openvpn/keys/ca.crt
cert /usr/pkg/etc/openvpn/keys/vignols.crt
key /usr/pkg/etc/openvpn/keys/vignols.key
comp-lzo adaptive
verb 3
ping 10
script-security 2
up /usr/pkg/etc/openvpn/route-up.sh
down /usr/pkg/etc/openvpn/route-down.sh
ifconfig 192.168.1.2 255.255.255.0

It works. But if I remove last line (ifconfig 192.168.1.2 255.255.255.0), tap interface created on client doesn't take any IP address. I have verified that IP address is pushed from server (indication in log file).

I don't understand my mistake.

Any idea ?

Regards,

JB

maikcat

first post your logs,

remove this from server config

ifconfig 192.168.1.1 255.255.255.0

also remove the adaptive param from your client lzo option

what OS is your client?
if its windows you need to have dhcp client service on

also avoid using 192.168.1.0 for your vpn...

Michael.

jbertrand

Log on server side :

Mar  4 13:35:38 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 TLS: new session incoming connection from [AF_INET]130.193.2.25:1194
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 VERIFY OK: depth=1, C=FR, ST=FR, L=Paris, O=Systella, CN=Systella CA, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 VERIFY OK: depth=0, C=FR, ST=FR, L=Paris, O=Systella, CN=vignols, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 TLS: tls_multi_process: untrusted session promoted to semi-trusted
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

On client side :

Mar  4 13:35:38 legendre openvpn[788]: UDPv4 link local (bound): [undef]
Mar  4 13:35:38 legendre openvpn[788]: UDPv4 link remote: [AF_INET]213.41.232.237:1194
Mar  4 13:35:38 legendre openvpn[788]: TLS: Initial packet from [AF_INET]213.41.232.237:1194, sid=2a4424d7 ddd2317b
Mar  4 13:35:38 legendre openvpn[788]: VERIFY OK: depth=1, C=FR, ST=FR, L=Paris, O=Systella, CN=Systella CA, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:38 legendre openvpn[788]: Validating certificate key usage
Mar  4 13:35:38 legendre openvpn[788]: ++ Certificate has key usage  00a0, expects 00a0
Mar  4 13:35:38 legendre openvpn[788]: VERIFY KU OK
Mar  4 13:35:38 legendre openvpn[788]: Validating certificate extended key usage
Mar  4 13:35:38 legendre openvpn[788]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mar  4 13:35:38 legendre openvpn[788]: VERIFY EKU OK
Mar  4 13:35:38 legendre openvpn[788]: VERIFY OK: depth=0, C=FR, ST=FR, L=Paris, O=Systella, CN=rayleigh, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 legendre openvpn[788]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mar  4 13:35:39 legendre openvpn[788]: [rayleigh] Peer Connection Initiated with [AF_INET]213.41.232.237:1194
Mar  4 13:35:40 legendre openvpn[788]: Initialization Sequence Completed

I don't understand why you want delete ifconfig from server configuration file.

Server OS is linux/debian. Clients are Linux, NetBSD and Windows 7. I'm testing with a NetBSD client.

JB

jbertrand

maikcat wrotefirst post your logs,

remove this from server config
ifconfig 192.168.1.1 255.255.255.0
also remove the adaptive param from your client lzo option

what OS is your client?
if its windows you need to have dhcp client service on

also avoid using 192.168.1.0 for your vpn...

Michael.

I beleive my first answer was delete.

Log on client side :

Mar  4 13:35:38 legendre openvpn[788]: UDPv4 link local (bound): [undef]
Mar  4 13:35:38 legendre openvpn[788]: UDPv4 link remote: [AF_INET]213.41.232.237:1194
Mar  4 13:35:38 legendre openvpn[788]: TLS: Initial packet from [AF_INET]213.41.232.237:1194, sid=2a4424d7 ddd2317b
Mar  4 13:35:38 legendre openvpn[788]: VERIFY OK: depth=1, C=FR, ST=FR, L=Paris, O=Systella, CN=Systella CA, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:38 legendre openvpn[788]: Validating certificate key usage
Mar  4 13:35:38 legendre openvpn[788]: ++ Certificate has key usage  00a0, expects 00a0
Mar  4 13:35:38 legendre openvpn[788]: VERIFY KU OK
Mar  4 13:35:38 legendre openvpn[788]: Validating certificate extended key usage
Mar  4 13:35:38 legendre openvpn[788]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mar  4 13:35:38 legendre openvpn[788]: VERIFY EKU OK
Mar  4 13:35:38 legendre openvpn[788]: VERIFY OK: depth=0, C=FR, ST=FR, L=Paris, O=Systella, CN=rayleigh, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 legendre openvpn[788]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 legendre openvpn[788]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mar  4 13:35:39 legendre openvpn[788]: [rayleigh] Peer Connection Initiated with [AF_INET]213.41.232.237:1194
Mar  4 13:35:40 legendre openvpn[788]: Initialization Sequence Completed

On server side :

Mar  4 13:35:38 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 TLS: new session incoming connection from [AF_INET]130.193.2.25:1194
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 VERIFY OK: depth=1, C=FR, ST=FR, L=Paris, O=Systella, CN=Systella CA, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 VERIFY OK: depth=0, C=FR, ST=FR, L=Paris, O=Systella, CN=vignols, emailAddress=joel.bertrand@systella.fr
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 TLS: tls_multi_process: untrusted session promoted to semi-trusted
Mar  4 13:35:39 rayleigh ovpn-server_udp[15799]: vignols/130.193.2.25:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

I don't understand I should remove ifconfig from server side.

OS :
- server linux debian (amd64)
- clients NetBSD (sparc64), Windows 7. All tests are done on NetBSD client.

Regards,

JB

maikcat

I don't understand I should remove ifconfig from server side.

because its not needed,

--server network netmask ['nopool']
A helper directive designed to simplify the configuration of OpenVPN's server mode. This directive will set up an OpenVPN server which will allocate addresses to clients out of the given network/netmask. The server itself will take the ".1" address of the given network for use as the server-side endpoint of the local TUN/TAP interface.

For example, --server 10.8.0.0 255.255.255.0 expands as follows:

mode server
tls-server
push "topology [topology]"

if dev tun AND (topology == net30 OR topology == p2p):
ifconfig 10.8.0.1 10.8.0.2
if !nopool:
ifconfig-pool 10.8.0.4 10.8.0.251
route 10.8.0.0 255.255.255.0
if client-to-client:
push "route 10.8.0.0 255.255.255.0"
else if topology == net30:
push "route 10.8.0.1"

if dev tap OR (dev tun AND topology == subnet):
ifconfig 10.8.0.1 255.255.255.0
if !nopool:
ifconfig-pool 10.8.0.2 10.8.0.254 255.255.255.0
push "route-gateway 10.8.0.1"
if route-gateway unset:
route-gateway 10.8.0.2

can you please post complete logs?

Michael.

jbertrand

maikcat wrote
can you please post complete logs?

Michael.

I can. Both sides ? Now, I have set verb to 4. Is it enough ?

maikcat

yes both sides,

please post them

Michael.

jbertrand

On server side (linux/amd64) :

Root rayleigh:[/etc/openvpn] > grep ovpn-server_udp /var/log/syslog | grep 13348
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: Current Parameter Settings:
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   config = '/etc/openvpn/server_udp.conf'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mode = 1
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   persist_config = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   persist_mode = 1
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   show_ciphers = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   show_digests = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   show_engines = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   genkey = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   key_pass_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   show_tls_ciphers = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: Connection profiles [default]:
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   proto = udp
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   local = '192.168.253.1'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   local_port = 1194
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_port = 1194
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   connect_timeout = 10
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   connect_retry_max = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   socks_proxy_server = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   socks_proxy_port = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   socks_proxy_retry = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tun_mtu = 1500
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tun_mtu_defined = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   link_mtu = 1492
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   link_mtu_defined = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tun_mtu_extra = 32
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tun_mtu_extra_defined = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mtu_discover_type = -1
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   fragment = 1416
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mssfix = 1416
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   explicit_exit_notification = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: Connection profiles END
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_random = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ipchange = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   dev = 'tap1'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   dev_type = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   dev_node = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   lladdr = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   topology = 1
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tun_ipv6 = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_local = '192.168.1.1'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_remote_netmask = '255.255.255.0'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_noexec = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_nowarn = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_ipv6_local = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_ipv6_netbits = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_ipv6_remote = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   shaper = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mtu_test = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mlock = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   keepalive_ping = 10
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   keepalive_timeout = 120
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   inactivity_timeout = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ping_send_timeout = 10
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ping_rec_timeout = 240
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ping_rec_timeout_action = 2
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ping_timer_remote = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remap_sigusr1 = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   persist_tun = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   persist_local_ip = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   persist_remote_ip = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   persist_key = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   passtos = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   resolve_retry_seconds = 1000000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   username = 'nobody'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   groupname = 'nogroup'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   chroot_dir = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   cd_dir = '/etc/openvpn'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   writepid = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   up_script = '/etc/openvpn/route-udp-up.sh'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   down_script = '/etc/openvpn/route-udp-down.sh'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   down_pre = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   up_restart = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   up_delay = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   daemon = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   inetd = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   log = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   suppress_timestamps = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   nice = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   verbosity = 4
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mute = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   gremlin = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   status_file = 'openvpn-status-udp.log'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   status_file_version = 1
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   status_file_update_freq = 10
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   occ = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   rcvbuf = 65536
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   sndbuf = 65536
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mark = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   sockflags = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   fast_io = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   lzo = 7
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_script = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_default_gateway = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_default_metric = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_noexec = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_delay = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_delay_window = 30
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_delay_defined = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_nopull = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   route_gateway_via_dhcp = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   max_routes = 100
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   allow_pull_fqdn = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_addr = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_port = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_user_pass = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_log_history_cache = 250
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_echo_buffer_size = 100
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_write_peer_info_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_client_user = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_client_group = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   management_flags = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   shared_secret_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   key_direction = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ciphername_defined = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ciphername = 'BF-CBC'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   authname_defined = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   authname = 'SHA1'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   prng_hash = 'SHA1'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   prng_nonce_secret_len = 16
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   keysize = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   engine = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   replay = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   mute_replay_warnings = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   replay_window = 64
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   replay_time = 15
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   packet_id_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   use_iv = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   test_crypto = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tls_server = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tls_client = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   key_method = 2
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ca_file = '/etc/openvpn/easy-rsa/2.0/keys/ca.crt'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ca_path = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   dh_file = '/etc/openvpn/easy-rsa/2.0/keys/dh1024.pem'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   cert_file = '/etc/openvpn/easy-rsa/2.0/keys/rayleigh.crt'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   priv_key_file = '/etc/openvpn/easy-rsa/2.0/keys/rayleigh.key'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs12_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   cipher_list = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tls_verify = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tls_export_cert = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   verify_x509_type = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   verify_x509_name = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   crl_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ns_cert_type = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_ku[i] = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   remote_cert_eku = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ssl_flags = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tls_timeout = 2
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   renegotiate_bytes = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   renegotiate_packets = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   renegotiate_seconds = 3600
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   handshake_window = 60
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   transition_window = 3600
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   single_session = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_peer_info = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tls_exit = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tls_auth_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_protected_authentication = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_private_mode = 00000000
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_cert_private = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_pin_cache_period = -1
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_id = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pkcs11_id_management = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_network = 192.168.1.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_netmask = 255.255.255.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_network_ipv6 = ::
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_netbits_ipv6 = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_bridge_ip = 0.0.0.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_bridge_netmask = 0.0.0.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_bridge_pool_start = 0.0.0.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   server_bridge_pool_end = 0.0.0.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_entry = 'route-gateway 192.168.1.1'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_entry = 'ping 10'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_entry = 'ping-restart 120'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_pool_defined = ENABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_pool_start = 192.168.1.2
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_pool_end = 192.168.1.254
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_pool_netmask = 255.255.255.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_pool_persist_filename = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_pool_persist_refresh_freq = 600
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_ipv6_pool_defined = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_ipv6_pool_base = ::
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ifconfig_ipv6_pool_netbits = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   n_bcast_buf = 256
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tcp_queue_limit = 64
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   real_hash_size = 256
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   virtual_hash_size = 256
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   client_connect_script = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   learn_address_script = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   client_disconnect_script = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   client_config_dir = '/etc/openvpn/ccd'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   ccd_exclusive = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   tmp_dir = '/tmp'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_ifconfig_defined = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_ifconfig_local = 0.0.0.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_ifconfig_remote_netmask = 0.0.0.0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_ifconfig_ipv6_defined = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_ifconfig_ipv6_local = ::/0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   push_ifconfig_ipv6_remote = ::
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   enable_c2c = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   duplicate_cn = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   cf_max = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   cf_per = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   max_clients = 5
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   max_routes_per_client = 256
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   auth_user_pass_verify_script = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   auth_user_pass_verify_script_via_file = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   port_share_host = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   port_share_port = 0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   client = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   pull = DISABLED
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]:   auth_user_pass_file = '[UNDEF]'
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec  1 2014
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: Diffie-Hellman initialized with 1024 bit key
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1418)
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: TLS-Auth MTU parms [ L:1492 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: Socket Buffers: R=[212992->131072] S=[212992->131072]
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: TUN/TAP device tap1 opened
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: TUN/TAP TX queue length set to 100
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: /sbin/ip link set dev tap1 up mtu 1418
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: /sbin/ip addr add dev tap1 192.168.1.1/24 broadcast 192.168.1.255
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: /etc/openvpn/route-udp-up.sh tap1 1418 1492 192.168.1.1 255.255.255.0 init
Mar  5 09:37:55 rayleigh ovpn-server_udp[13348]: Data Channel MTU parms [ L:1492 D:1416 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]

On client side (NetBSD/sparc64)

Mar  5 09:42:05 legendre openvpn[14706]: Current Parameter Settings:
Mar  5 09:42:05 legendre openvpn[14706]:   config = 'rayleigh-udp.conf'
Mar  5 09:42:05 legendre openvpn[14706]:   mode = 0
Mar  5 09:42:05 legendre openvpn[14706]:   show_ciphers = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   show_digests = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   show_engines = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   genkey = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   key_pass_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   show_tls_ciphers = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]: Connection profiles [default]:
Mar  5 09:42:05 legendre openvpn[14706]:   proto = udp
Mar  5 09:42:05 legendre openvpn[14706]:   local = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   local_port = 1194
Mar  5 09:42:05 legendre openvpn[14706]:   remote = '213.41.232.237'
Mar  5 09:42:05 legendre openvpn[14706]:   remote_port = 1194
Mar  5 09:42:05 legendre openvpn[14706]:   remote_float = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   bind_defined = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   bind_local = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   connect_retry_seconds = 5
Mar  5 09:42:05 legendre openvpn[14706]:   connect_timeout = 10
Mar  5 09:42:05 legendre openvpn[14706]:   connect_retry_max = 0
Mar  5 09:42:05 legendre openvpn[14706]:   socks_proxy_server = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   socks_proxy_port = 0
Mar  5 09:42:05 legendre openvpn[14706]:   socks_proxy_retry = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   tun_mtu = 1500
Mar  5 09:42:05 legendre openvpn[14706]:   tun_mtu_defined = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   link_mtu = 1492
Mar  5 09:42:05 legendre openvpn[14706]:   link_mtu_defined = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   tun_mtu_extra = 32
Mar  5 09:42:05 legendre openvpn[14706]:   tun_mtu_extra_defined = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   mtu_discover_type = -1
Mar  5 09:42:05 legendre openvpn[14706]:   fragment = 1416
Mar  5 09:42:05 legendre openvpn[14706]:   mssfix = 1416
Mar  5 09:42:05 legendre openvpn[14706]:   explicit_exit_notification = 0
Mar  5 09:42:05 legendre openvpn[14706]: Connection profiles END
Mar  5 09:42:05 legendre openvpn[14706]:   remote_random = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   ipchange = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   dev = 'tap'
Mar  5 09:42:05 legendre openvpn[14706]:   dev_type = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   dev_node = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   lladdr = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   topology = 1
Mar  5 09:42:05 legendre openvpn[14706]:   tun_ipv6 = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_local = '192.168.1.2'
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_remote_netmask = '255.255.255.0'
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_noexec = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_nowarn = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_ipv6_local = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_ipv6_netbits = 0
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_ipv6_remote = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   shaper = 0
Mar  5 09:42:05 legendre openvpn[14706]:   mtu_test = 0
Mar  5 09:42:05 legendre openvpn[14706]:   mlock = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   keepalive_ping = 0
Mar  5 09:42:05 legendre openvpn[14706]:   keepalive_timeout = 0
Mar  5 09:42:05 legendre openvpn[14706]:   inactivity_timeout = 0
Mar  5 09:42:05 legendre openvpn[14706]:   ping_send_timeout = 10
Mar  5 09:42:05 legendre openvpn[14706]:   ping_rec_timeout = 0
Mar  5 09:42:05 legendre openvpn[14706]:   ping_rec_timeout_action = 0
Mar  5 09:42:05 legendre openvpn[14706]:   ping_timer_remote = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   remap_sigusr1 = 0
Mar  5 09:42:05 legendre openvpn[14706]:   persist_tun = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   persist_local_ip = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   persist_remote_ip = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   persist_key = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   passtos = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   resolve_retry_seconds = 1000000000
Mar  5 09:42:05 legendre openvpn[14706]:   username = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   groupname = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   chroot_dir = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   cd_dir = '/usr/pkg/etc/openvpn'
Mar  5 09:42:05 legendre openvpn[14706]:   writepid = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   up_script = '/usr/pkg/etc/openvpn/route-up.sh'
Mar  5 09:42:05 legendre openvpn[14706]:   down_script = '/usr/pkg/etc/openvpn/route-down.sh'
Mar  5 09:42:05 legendre openvpn[14706]:   down_pre = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   up_restart = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   up_delay = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   daemon = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   inetd = 0
Mar  5 09:42:05 legendre openvpn[14706]:   log = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   suppress_timestamps = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   nice = 0
Mar  5 09:42:05 legendre openvpn[14706]:   verbosity = 4
Mar  5 09:42:05 legendre openvpn[14706]:   mute = 0
Mar  5 09:42:05 legendre openvpn[14706]:   status_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   status_file_version = 1
Mar  5 09:42:05 legendre openvpn[14706]:   status_file_update_freq = 60
Mar  5 09:42:05 legendre openvpn[14706]:   occ = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   rcvbuf = 65536
Mar  5 09:42:05 legendre openvpn[14706]:   sndbuf = 65536
Mar  5 09:42:05 legendre openvpn[14706]:   sockflags = 0
Mar  5 09:42:05 legendre openvpn[14706]:   fast_io = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   lzo = 7
Mar  5 09:42:05 legendre openvpn[14706]:   route_script = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   route_default_gateway = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   route_default_metric = 0
Mar  5 09:42:05 legendre openvpn[14706]:   route_noexec = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   route_delay = 0
Mar  5 09:42:05 legendre openvpn[14706]:   route_delay_window = 30
Mar  5 09:42:05 legendre openvpn[14706]:   route_delay_defined = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   route_nopull = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   route_gateway_via_dhcp = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   max_routes = 100
Mar  5 09:42:05 legendre openvpn[14706]:   allow_pull_fqdn = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   management_addr = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   management_port = 0
Mar  5 09:42:05 legendre openvpn[14706]:   management_user_pass = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   management_log_history_cache = 250
Mar  5 09:42:05 legendre openvpn[14706]:   management_echo_buffer_size = 100
Mar  5 09:42:05 legendre openvpn[14706]:   management_write_peer_info_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   management_client_user = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   management_client_group = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   management_flags = 0
Mar  5 09:42:05 legendre openvpn[14706]:   shared_secret_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   key_direction = 0
Mar  5 09:42:05 legendre openvpn[14706]:   ciphername_defined = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   ciphername = 'BF-CBC'
Mar  5 09:42:05 legendre openvpn[14706]:   authname_defined = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   authname = 'SHA1'
Mar  5 09:42:05 legendre openvpn[14706]:   prng_hash = 'SHA1'
Mar  5 09:42:05 legendre openvpn[14706]:   prng_nonce_secret_len = 16
Mar  5 09:42:05 legendre openvpn[14706]:   keysize = 0
Mar  5 09:42:05 legendre openvpn[14706]:   engine = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   replay = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   mute_replay_warnings = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   replay_window = 64
Mar  5 09:42:05 legendre openvpn[14706]:   replay_time = 15
Mar  5 09:42:05 legendre openvpn[14706]:   packet_id_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   use_iv = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   test_crypto = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   tls_server = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   tls_client = ENABLED
Mar  5 09:42:05 legendre openvpn[14706]:   key_method = 2
Mar  5 09:42:05 legendre openvpn[14706]:   ca_file = '/usr/pkg/etc/openvpn/keys/ca.crt'
Mar  5 09:42:05 legendre openvpn[14706]:   ca_path = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   dh_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   cert_file = '/usr/pkg/etc/openvpn/keys/vignols.crt'
Mar  5 09:42:05 legendre openvpn[14706]:   priv_key_file = '/usr/pkg/etc/openvpn/keys/vignols.key'
Mar  5 09:42:05 legendre openvpn[14706]:   pkcs12_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   cipher_list = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   tls_verify = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   tls_export_cert = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   verify_x509_type = 0
Mar  5 09:42:05 legendre openvpn[14706]:   verify_x509_name = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   crl_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   ns_cert_type = 0
Mar  5 09:42:05 legendre openvpn[14706]:   remote_cert_ku[i] = 160
Mar  5 09:42:05 legendre openvpn[14706]:   remote_cert_ku[i] = 136
Mar  5 09:42:05 legendre openvpn[14706]:   remote_cert_ku[i] = 0
Mar  5 09:42:05 legendre openvpn[14706]:   remote_cert_eku = 'TLS Web Server Authentication'
Mar  5 09:42:05 legendre openvpn[14706]:   ssl_flags = 0
Mar  5 09:42:05 legendre openvpn[14706]:   tls_timeout = 2
Mar  5 09:42:05 legendre openvpn[14706]:   renegotiate_bytes = 0
Mar  5 09:42:05 legendre openvpn[14706]:   renegotiate_packets = 0
Mar  5 09:42:05 legendre openvpn[14706]:   renegotiate_seconds = 3600
Mar  5 09:42:05 legendre openvpn[14706]:   handshake_window = 60
Mar  5 09:42:05 legendre openvpn[14706]:   transition_window = 3600
Mar  5 09:42:05 legendre openvpn[14706]:   single_session = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   push_peer_info = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   tls_exit = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   tls_auth_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   server_network = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   server_netmask = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   server_network_ipv6 = ::
Mar  5 09:42:05 legendre openvpn[14706]:   server_netbits_ipv6 = 0
Mar  5 09:42:05 legendre openvpn[14706]:   server_bridge_ip = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   server_bridge_netmask = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   server_bridge_pool_start = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   server_bridge_pool_end = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_pool_defined = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_pool_start = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_pool_end = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_pool_netmask = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_pool_persist_filename = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_pool_persist_refresh_freq = 600
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_ipv6_pool_defined = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_ipv6_pool_base = ::
Mar  5 09:42:05 legendre openvpn[14706]:   ifconfig_ipv6_pool_netbits = 0
Mar  5 09:42:05 legendre openvpn[14706]:   n_bcast_buf = 256
Mar  5 09:42:05 legendre openvpn[14706]:   tcp_queue_limit = 64
Mar  5 09:42:05 legendre openvpn[14706]:   real_hash_size = 256
Mar  5 09:42:05 legendre openvpn[14706]:   virtual_hash_size = 256
Mar  5 09:42:05 legendre openvpn[14706]:   client_connect_script = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   learn_address_script = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   client_disconnect_script = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   client_config_dir = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   ccd_exclusive = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   tmp_dir = '/tmp'
Mar  5 09:42:05 legendre openvpn[14706]:   push_ifconfig_defined = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   push_ifconfig_local = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   push_ifconfig_remote_netmask = 0.0.0.0
Mar  5 09:42:05 legendre openvpn[14706]:   push_ifconfig_ipv6_defined = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   push_ifconfig_ipv6_local = ::/0
Mar  5 09:42:05 legendre openvpn[14706]:   push_ifconfig_ipv6_remote = ::
Mar  5 09:42:05 legendre openvpn[14706]:   enable_c2c = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   duplicate_cn = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   cf_max = 0
Mar  5 09:42:05 legendre openvpn[14706]:   cf_per = 0
Mar  5 09:42:05 legendre openvpn[14706]:   max_clients = 1024
Mar  5 09:42:05 legendre openvpn[14706]:   max_routes_per_client = 256
Mar  5 09:42:05 legendre openvpn[14706]:   auth_user_pass_verify_script = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   auth_user_pass_verify_script_via_file = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   port_share_host = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]:   port_share_port = 0
Mar  5 09:42:05 legendre openvpn[14706]:   client = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   pull = DISABLED
Mar  5 09:42:05 legendre openvpn[14706]:   auth_user_pass_file = '[UNDEF]'
Mar  5 09:42:05 legendre openvpn[14706]: OpenVPN 2.3.6 sparc64--netbsd [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Feb 21 2015
Mar  5 09:42:05 legendre openvpn[14706]: library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.09
Mar  5 09:42:05 legendre openvpn[14706]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Mar  5 09:42:05 legendre openvpn[14706]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar  5 09:42:05 legendre openvpn[14706]: LZO compression initialized
Mar  5 09:42:05 legendre openvpn[14706]: WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1414)
Mar  5 09:42:05 legendre openvpn[14706]: Control Channel MTU parms [ L:1492 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mar  5 09:42:05 legendre openvpn[14706]: Socket Buffers: R=[41600->65536] S=[9216->65536]
Mar  5 09:42:05 legendre openvpn[14706]: TUN/TAP device /dev/tap0 opened
Mar  5 09:42:05 legendre openvpn[14706]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mar  5 09:42:05 legendre openvpn[14706]: /sbin/ifconfig tap0 192.168.1.2 netmask 255.255.255.0 mtu 1414
Mar  5 09:42:05 legendre openvpn[14706]: /usr/pkg/etc/openvpn/route-up.sh tap0 1414 1492 192.168.1.2 255.255.255.0 init
Mar  5 09:42:05 legendre openvpn[14706]: Data Channel MTU parms [ L:1492 D:1416 EF:46 EB:135 ET:32 EL:0 AF:3/1 ]
Mar  5 09:42:05 legendre openvpn[14706]: Fragmentation MTU parms [ L:1492 D:1416 EF:45 EB:135 ET:33 EL:0 AF:3/1 ]
Mar  5 09:42:05 legendre openvpn[14706]: Local Options String: 'V4,dev-type tap,link-mtu 1492,tun-mtu 1446,proto UDPv4,ifconfig 192.168.1.0 255.255.255.0,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mar  5 09:42:05 legendre openvpn[14706]: Expected Remote Options String: 'V4,dev-type tap,link-mtu 1492,tun-mtu 1446,proto UDPv4,ifconfig 192.168.1.0 255.255.255.0,comp-lzo,mtu-dynamic,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mar  5 09:42:05 legendre openvpn[14706]: Local Options hash (VER=V4): '4b52decc'
Mar  5 09:42:05 legendre openvpn[14706]: Expected Remote Options hash (VER=V4): '3bdd99cf'
Mar  5 09:42:05 legendre openvpn[27740]: UDPv4 link local (bound): [undef]
Mar  5 09:42:05 legendre openvpn[27740]: UDPv4 link remote: [AF_INET]213.41.232.237:1194
Mar  5 09:42:05 legendre openvpn[27740]: TLS: Initial packet from [AF_INET]213.41.232.237:1194, sid=d3e6b324 70af1788
Mar  5 09:42:05 legendre openvpn[27740]: TLS Error: local/remote TLS keys are out of sync: [AF_INET]213.41.232.237:1194 [0]
Mar  5 09:42:05 legendre openvpn[27740]: VERIFY OK: depth=1, C=FR, ST=FR, L=Paris, O=Systella, CN=Systella CA, emailAddress=joel.bertrand@systella.fr
Mar  5 09:42:05 legendre openvpn[27740]: Validating certificate key usage
Mar  5 09:42:05 legendre openvpn[27740]: ++ Certificate has key usage  00a0, expects 00a0
Mar  5 09:42:05 legendre openvpn[27740]: VERIFY KU OK
Mar  5 09:42:05 legendre openvpn[27740]: Validating certificate extended key usage
Mar  5 09:42:05 legendre openvpn[27740]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mar  5 09:42:05 legendre openvpn[27740]: VERIFY EKU OK
Mar  5 09:42:05 legendre openvpn[27740]: VERIFY OK: depth=0, C=FR, ST=FR, L=Paris, O=Systella, CN=rayleigh, emailAddress=joel.bertrand@systella.fr
Mar  5 09:42:06 legendre openvpn[27740]: WARNING: 'ifconfig' is present in local config but missing in remote config, local='ifconfig 192.168.1.0 255.255.255.0'
Mar  5 09:42:06 legendre openvpn[27740]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  5 09:42:06 legendre openvpn[27740]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  5 09:42:06 legendre openvpn[27740]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mar  5 09:42:06 legendre openvpn[27740]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mar  5 09:42:06 legendre openvpn[27740]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mar  5 09:42:06 legendre openvpn[27740]: [rayleigh] Peer Connection Initiated with [AF_INET]213.41.232.237:1194
Mar  5 09:42:07 legendre openvpn[27740]: Initialization Sequence Completed

maikcat

add the client directive in your client config and remove the ifconfig...

Michael.

jbertrand

maikcat wroteadd the client directive in your client config and remove the ifconfig...

Michael.

Thanks a lot for your answer, client directive was missing.

Regards,

JB

maikcat

is it working now correctly?

if yes i will mark this topic as solved and close it.

Regards,

Michael.

jbertrand

maikcat wroteis it working now correctly?

if yes i will mark this topic as solved and close it.

Regards,

Michael.

It works as expected on NetBSD. I'm testing with a client running W7.