Hello,
i have problem with connection to the server, i looking for solution for couple days and i can't find it.
It's connection from win7 to gargoyle router.
Certificate are the same - i made them serveral times and always the same, i also use option --batch to create them.
I think that problem is with certificate because they dont pass verify.
I reinstall easy-rsa few times, i also create certificate in the windows...now i dont have any idea what to do.
openssl verify -CAfile /etc/openvpn/ca.crt /etc/openvpn/client_conf/pawel/pawel.crt
/etc/openvpn/client_conf/pawel/pawel.crt: OK
openssl verify -CAfile /etc/openvpn/vpn-server.crt /etc/openvpn/client_conf/pawel/pawel.crt
/etc/openvpn/client_conf/pawel/pawel.crt: C = PL, ST = .... emailAddress = mail@host.domain
error 20 at 0 depth lookup:unable to get local issuer certificate
firewall
config zone
option name 'vpn'
option input 'ACCEPT'
option forward 'ACCEPT'
option output 'ACCEPT'
option network 'vpn'
config forwarding
option src 'vpn'
option dest 'wan'
config rule
option name 'VPN'
option target 'ACCEPT'
option src 'wan'
option proto 'udp'
option dest_port '1194'
config include
option path '/etc/firewall.user'
option reload '1'
config include 'openvpn_include_file'
option path '/etc/openvpn.firewall'
option reload '1'
config redirect 'redirect_enabled_number_0'
option name 'openvpn'
option src 'wan'
option dest 'lan'
option proto 'udp'
option src_dport '1194'
option dest_ip '192.168.1.1'
option dest_port '1194'
firewall user
iptables -I OUTPUT -o tap+ -j ACCEPT
iptables -I INPUT -i tap+ -j ACCEPT
iptables -I FORWARD -o tap+ -j ACCEPT
iptables -I FORWARD -i tap+ -j ACCEPT
client conf
client
remote xxx.xxx.xxx.xxx 1194
dev tun
proto udp
status current_status
resolv-retry infinite
ns-cert-type server
topology subnet
verb 7
cipher AES-256-CBC
ca ca.crt
cert pawel.crt
key pawel.key
tls-auth ta.key 1
nobind
persist-key
persist-tun
comp-lzo
auth-nocache
auth-user-pass
client log:
Wed Mar 04 22:11:06 2015 us=817242 Current Parameter Settings:
Wed Mar 04 22:11:06 2015 us=817242 config = 'pawel.ovpn'
Wed Mar 04 22:11:06 2015 us=817242 mode = 0
Wed Mar 04 22:11:06 2015 us=817242 show_ciphers = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 show_digests = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 show_engines = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 genkey = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 key_pass_file = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 show_tls_ciphers = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 Connection profiles [default]:
Wed Mar 04 22:11:06 2015 us=817242 proto = udp
Wed Mar 04 22:11:06 2015 us=817242 local = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 local_port = 0
Wed Mar 04 22:11:06 2015 us=817242 remote = 'smerfy.noip.pl'
Wed Mar 04 22:11:06 2015 us=817242 remote_port = 1194
Wed Mar 04 22:11:06 2015 us=817242 remote_float = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 bind_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 bind_local = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 connect_retry_seconds = 5
Wed Mar 04 22:11:06 2015 us=817242 connect_timeout = 10
Wed Mar 04 22:11:06 2015 us=817242 connect_retry_max = 0
Wed Mar 04 22:11:06 2015 us=817242 socks_proxy_server = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 socks_proxy_port = 0
Wed Mar 04 22:11:06 2015 us=817242 socks_proxy_retry = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 tun_mtu = 1500
Wed Mar 04 22:11:06 2015 us=817242 tun_mtu_defined = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 link_mtu = 1500
Wed Mar 04 22:11:06 2015 us=817242 link_mtu_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 tun_mtu_extra = 0
Wed Mar 04 22:11:06 2015 us=817242 tun_mtu_extra_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 mtu_discover_type = -1
Wed Mar 04 22:11:06 2015 us=817242 fragment = 0
Wed Mar 04 22:11:06 2015 us=817242 mssfix = 1450
Wed Mar 04 22:11:06 2015 us=817242 explicit_exit_notification = 0
Wed Mar 04 22:11:06 2015 us=817242 Connection profiles END
Wed Mar 04 22:11:06 2015 us=817242 remote_random = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 ipchange = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 dev = 'tun'
Wed Mar 04 22:11:06 2015 us=817242 dev_type = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 dev_node = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 lladdr = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 topology = 3
Wed Mar 04 22:11:06 2015 us=817242 tun_ipv6 = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 ifconfig_local = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 ifconfig_remote_netmask = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 ifconfig_noexec = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 ifconfig_nowarn = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 ifconfig_ipv6_local = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 ifconfig_ipv6_netbits = 0
Wed Mar 04 22:11:06 2015 us=817242 ifconfig_ipv6_remote = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 shaper = 0
Wed Mar 04 22:11:06 2015 us=817242 mtu_test = 0
Wed Mar 04 22:11:06 2015 us=817242 mlock = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 keepalive_ping = 0
Wed Mar 04 22:11:06 2015 us=817242 keepalive_timeout = 0
Wed Mar 04 22:11:06 2015 us=817242 inactivity_timeout = 0
Wed Mar 04 22:11:06 2015 us=817242 ping_send_timeout = 0
Wed Mar 04 22:11:06 2015 us=817242 ping_rec_timeout = 0
Wed Mar 04 22:11:06 2015 us=817242 ping_rec_timeout_action = 0
Wed Mar 04 22:11:06 2015 us=817242 ping_timer_remote = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 remap_sigusr1 = 0
Wed Mar 04 22:11:06 2015 us=817242 persist_tun = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 persist_local_ip = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 persist_remote_ip = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 persist_key = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 passtos = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 resolve_retry_seconds = 1000000000
Wed Mar 04 22:11:06 2015 us=817242 username = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 groupname = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 chroot_dir = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 cd_dir = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 writepid = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 up_script = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 down_script = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 down_pre = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 up_restart = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 up_delay = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 daemon = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 inetd = 0
Wed Mar 04 22:11:06 2015 us=817242 log = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 suppress_timestamps = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 nice = 0
Wed Mar 04 22:11:06 2015 us=817242 verbosity = 7
Wed Mar 04 22:11:06 2015 us=817242 mute = 0
Wed Mar 04 22:11:06 2015 us=817242 status_file = 'current_status'
Wed Mar 04 22:11:06 2015 us=817242 status_file_version = 1
Wed Mar 04 22:11:06 2015 us=817242 status_file_update_freq = 60
Wed Mar 04 22:11:06 2015 us=817242 occ = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 rcvbuf = 0
Wed Mar 04 22:11:06 2015 us=817242 sndbuf = 0
Wed Mar 04 22:11:06 2015 us=817242 sockflags = 0
Wed Mar 04 22:11:06 2015 us=817242 fast_io = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 lzo = 7
Wed Mar 04 22:11:06 2015 us=817242 route_script = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 route_default_gateway = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 route_default_metric = 0
Wed Mar 04 22:11:06 2015 us=817242 route_noexec = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 route_delay = 5
Wed Mar 04 22:11:06 2015 us=817242 route_delay_window = 30
Wed Mar 04 22:11:06 2015 us=817242 route_delay_defined = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 route_nopull = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 route_gateway_via_dhcp = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 max_routes = 100
Wed Mar 04 22:11:06 2015 us=817242 allow_pull_fqdn = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 management_addr = '127.0.0.1'
Wed Mar 04 22:11:06 2015 us=817242 management_port = 25340
Wed Mar 04 22:11:06 2015 us=817242 management_user_pass = 'stdin'
Wed Mar 04 22:11:06 2015 us=817242 management_log_history_cache = 250
Wed Mar 04 22:11:06 2015 us=817242 management_echo_buffer_size = 100
Wed Mar 04 22:11:06 2015 us=817242 management_write_peer_info_file = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 management_client_user = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 management_client_group = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 management_flags = 6
Wed Mar 04 22:11:06 2015 us=817242 shared_secret_file = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 key_direction = 2
Wed Mar 04 22:11:06 2015 us=817242 ciphername_defined = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 ciphername = 'AES-256-CBC'
Wed Mar 04 22:11:06 2015 us=817242 authname_defined = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 authname = 'SHA1'
Wed Mar 04 22:11:06 2015 us=817242 prng_hash = 'SHA1'
Wed Mar 04 22:11:06 2015 us=817242 prng_nonce_secret_len = 16
Wed Mar 04 22:11:06 2015 us=817242 keysize = 0
Wed Mar 04 22:11:06 2015 us=817242 engine = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 replay = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 mute_replay_warnings = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 replay_window = 64
Wed Mar 04 22:11:06 2015 us=817242 replay_time = 15
Wed Mar 04 22:11:06 2015 us=817242 packet_id_file = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 use_iv = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 test_crypto = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 tls_server = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 tls_client = ENABLED
Wed Mar 04 22:11:06 2015 us=817242 key_method = 2
Wed Mar 04 22:11:06 2015 us=817242 ca_file = 'ca.crt'
Wed Mar 04 22:11:06 2015 us=817242 ca_path = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 dh_file = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 cert_file = 'pawel.crt'
Wed Mar 04 22:11:06 2015 us=817242 priv_key_file = 'pawel.key'
Wed Mar 04 22:11:06 2015 us=817242 pkcs12_file = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 cryptoapi_cert = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 cipher_list = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 tls_verify = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 tls_export_cert = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 verify_x509_type = 0
Wed Mar 04 22:11:06 2015 us=817242 verify_x509_name = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 crl_file = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 ns_cert_type = 1
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_ku[i] = 0
Wed Mar 04 22:11:06 2015 us=817242 remote_cert_eku = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 ssl_flags = 0
Wed Mar 04 22:11:06 2015 us=817242 tls_timeout = 2
Wed Mar 04 22:11:06 2015 us=817242 renegotiate_bytes = 0
Wed Mar 04 22:11:06 2015 us=817242 renegotiate_packets = 0
Wed Mar 04 22:11:06 2015 us=817242 renegotiate_seconds = 3600
Wed Mar 04 22:11:06 2015 us=817242 handshake_window = 60
Wed Mar 04 22:11:06 2015 us=817242 transition_window = 3600
Wed Mar 04 22:11:06 2015 us=817242 single_session = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 push_peer_info = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 tls_exit = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 tls_auth_file = 'ta.key'
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_protected_authentication = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_private_mode = 00000000
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_cert_private = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_pin_cache_period = -1
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_id = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=817242 pkcs11_id_management = DISABLED
Wed Mar 04 22:11:06 2015 us=817242 server_network = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=817242 server_netmask = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 server_network_ipv6 = ::
Wed Mar 04 22:11:06 2015 us=827242 server_netbits_ipv6 = 0
Wed Mar 04 22:11:06 2015 us=827242 server_bridge_ip = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 server_bridge_netmask = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 server_bridge_pool_start = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 server_bridge_pool_end = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_pool_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_pool_start = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_pool_end = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_pool_netmask = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_pool_persist_refresh_freq = 600
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_ipv6_pool_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_ipv6_pool_base = ::
Wed Mar 04 22:11:06 2015 us=827242 ifconfig_ipv6_pool_netbits = 0
Wed Mar 04 22:11:06 2015 us=827242 n_bcast_buf = 256
Wed Mar 04 22:11:06 2015 us=827242 tcp_queue_limit = 64
Wed Mar 04 22:11:06 2015 us=827242 real_hash_size = 256
Wed Mar 04 22:11:06 2015 us=827242 virtual_hash_size = 256
Wed Mar 04 22:11:06 2015 us=827242 client_connect_script = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 learn_address_script = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 client_disconnect_script = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 client_config_dir = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 ccd_exclusive = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 tmp_dir = 'C:\Users\biszkopt\AppData\Local\Temp\'
Wed Mar 04 22:11:06 2015 us=827242 push_ifconfig_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 push_ifconfig_local = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 push_ifconfig_remote_netmask = 0.0.0.0
Wed Mar 04 22:11:06 2015 us=827242 push_ifconfig_ipv6_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 push_ifconfig_ipv6_local = ::/0
Wed Mar 04 22:11:06 2015 us=827242 push_ifconfig_ipv6_remote = ::
Wed Mar 04 22:11:06 2015 us=827242 enable_c2c = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 duplicate_cn = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 cf_max = 0
Wed Mar 04 22:11:06 2015 us=827242 cf_per = 0
Wed Mar 04 22:11:06 2015 us=827242 max_clients = 1024
Wed Mar 04 22:11:06 2015 us=827242 max_routes_per_client = 256
Wed Mar 04 22:11:06 2015 us=827242 auth_user_pass_verify_script = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 auth_user_pass_verify_script_via_file = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 client = ENABLED
Wed Mar 04 22:11:06 2015 us=827242 pull = ENABLED
Wed Mar 04 22:11:06 2015 us=827242 auth_user_pass_file = 'stdin'
Wed Mar 04 22:11:06 2015 us=827242 show_net_up = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 route_method = 0
Wed Mar 04 22:11:06 2015 us=827242 ip_win32_defined = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 ip_win32_type = 3
Wed Mar 04 22:11:06 2015 us=827242 dhcp_masq_offset = 0
Wed Mar 04 22:11:06 2015 us=827242 dhcp_lease_time = 31536000
Wed Mar 04 22:11:06 2015 us=827242 tap_sleep = 0
Wed Mar 04 22:11:06 2015 us=827242 dhcp_options = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 dhcp_renew = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 dhcp_pre_release = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 dhcp_release = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 domain = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 netbios_scope = '[UNDEF]'
Wed Mar 04 22:11:06 2015 us=827242 netbios_node_type = 0
Wed Mar 04 22:11:06 2015 us=827242 disable_nbt = DISABLED
Wed Mar 04 22:11:06 2015 us=827242 OpenVPN 2.3.6 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Wed Mar 04 22:11:06 2015 us=827242 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Wed Mar 04 22:11:06 2015 us=837242 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Mar 04 22:11:06 2015 us=837242 Need hold release from management interface, waiting...
Wed Mar 04 22:11:07 2015 us=177242 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Mar 04 22:11:07 2015 us=277242 MANAGEMENT: CMD 'state on'
Wed Mar 04 22:11:07 2015 us=277242 MANAGEMENT: CMD 'log all on'
Wed Mar 04 22:11:07 2015 us=357243 MANAGEMENT: CMD 'hold off'
Wed Mar 04 22:11:07 2015 us=357243 MANAGEMENT: CMD 'hold release'
Wed Mar 04 22:11:13 2015 us=707251 MANAGEMENT: CMD 'username "Auth" "pawel"'
Wed Mar 04 22:11:13 2015 us=717251 MANAGEMENT: CMD 'password [...]'
Wed Mar 04 22:11:13 2015 us=867252 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Mar 04 22:11:13 2015 us=867252 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC
authentication
Wed Mar 04 22:11:13 2015 us=867252 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC
authentication
Wed Mar 04 22:11:13 2015 us=867252 LZO compression initialized
Wed Mar 04 22:11:13 2015 us=867252 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Mar 04 22:11:13 2015 us=867252 Socket Buffers: R=[8192->8192] S=[32768->32768]
Wed Mar 04 22:11:13 2015 us=877252 MANAGEMENT: >STATE:1425503473,RESOLVE,,,
Wed Mar 04 22:11:14 2015 us=107252 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 04 22:11:14 2015 us=107252 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir
1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Wed Mar 04 22:11:14 2015 us=107252 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-
lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Wed Mar 04 22:11:14 2015 us=107252 Local Options hash (VER=V4): '9e7066d2'
Wed Mar 04 22:11:14 2015 us=107252 Expected Remote Options hash (VER=V4): '162b04de'
Wed Mar 04 22:11:14 2015 us=107252 UDPv4 link local: [undef]
Wed Mar 04 22:11:14 2015 us=107252 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Wed Mar 04 22:11:14 2015 us=107252 MANAGEMENT: >STATE:1425503474,WAIT,,,
Wed Mar 04 22:11:14 2015 us=107252 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1
] [ ] pid=0 DATA len=0
Wed Mar 04 22:11:14 2015 us=107252 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Wed Mar 04 22:11:16 2015 us=167255 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2
] [ ] pid=0 DATA len=0
Wed Mar 04 22:11:20 2015 us=287261 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #3
] [ ] pid=0 DATA len=0
Wed Mar 04 22:11:28 2015 us=971273 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #4
] [ ] pid=0 DATA len=0
Wed Mar 04 22:11:44 2015 us=115294 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #5
] [ ] pid=0 DATA len=0
Wed Mar 04 22:12:14 2015 us=674338 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network
connectivity)
Wed Mar 04 22:12:14 2015 us=674338 TLS Error: TLS handshake failed
Wed Mar 04 22:12:14 2015 us=674338 TCP/UDP: Closing socket
Wed Mar 04 22:12:14 2015 us=674338 SIGUSR1[soft,tls-error] received, process restarting
Wed Mar 04 22:12:14 2015 us=674338 MANAGEMENT: >STATE:1425503534,RECONNECTING,tls-error,,
Wed Mar 04 22:12:14 2015 us=674338 Restart pause, 2 second(s)
Wed Mar 04 22:12:16 2015 us=674341 Re-using SSL/TLS context
Wed Mar 04 22:12:16 2015 us=674341 LZO compression initialized
Wed Mar 04 22:12:16 2015 us=674341 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Mar 04 22:12:16 2015 us=674341 Socket Buffers: R=[8192->8192] S=[32768->32768]
Wed Mar 04 22:12:16 2015 us=674341 MANAGEMENT: >STATE:1425503536,RESOLVE,,,
Wed Mar 04 22:12:16 2015 us=674341 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 04 22:12:16 2015 us=674341 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir
1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Wed Mar 04 22:12:16 2015 us=674341 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-
lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Wed Mar 04 22:12:16 2015 us=674341 Local Options hash (VER=V4): '9e7066d2'
Wed Mar 04 22:12:16 2015 us=674341 Expected Remote Options hash (VER=V4): '162b04de'
Wed Mar 04 22:12:16 2015 us=674341 UDPv4 link local: [undef]
Wed Mar 04 22:12:16 2015 us=674341 UDPv4 link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
Wed Mar 04 22:12:16 2015 us=674341 MANAGEMENT: >STATE:1425503536,WAIT,,,
Wed Mar 04 22:12:16 2015 us=674341 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1
] [ ] pid=0 DATA len=0
Wed Mar 04 22:12:16 2015 us=674341 UDPv4 READ [0] from [undef]: DATA UNDEF len=-1
Wed Mar 04 22:12:19 2015 us=154345 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #2
] [ ] pid=0 DATA len=0
Wed Mar 04 22:12:24 2015 us=114352 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #3
] [ ] pid=0 DATA len=0
Wed Mar 04 22:12:32 2015 us=187364 UDPv4 WRITE [42] to [AF_INET]xxx.xxx.xxx.xxx:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #4
] [ ] pid=0 DATA len=0
Wed Mar 04 22:12:38 2015 us=407372 TCP/UDP: Closing socket
Wed Mar 04 22:12:38 2015 us=407372 SIGTERM[hard,] received, process exiting
Wed Mar 04 22:12:38 2015 us=407372 MANAGEMENT: >STATE:1425503558,EXITING,SIGTERM,,
Wed Mar 04 22:12:38 2015 us=407372 PKCS#11: Terminating openssl
Wed Mar 04 22:12:38 2015 us=407372 PKCS#11: Removing providers
Wed Mar 04 22:12:38 2015 us=407372 PKCS#11: Releasing sessions
Wed Mar 04 22:12:38 2015 us=407372 PKCS#11: Terminating slotevent
Wed Mar 04 22:12:38 2015 us=407372 PKCS#11: Marking as uninitialized
server.conf
mode server
port 1194
proto udp
tls-server
ifconfig 10.8.0.1 255.255.255.0
topology subnet
client-config-dir /etc/openvpn/ccd
#ifconfig-pool-persist ipp.txt
cipher AES-256-CBC
dev tun
keepalive 25 180
status /var/openvpn/current_status
verb 3
log-append /var/log/openvpn.log
auth-user-pass-verify /etc/openvpn/scripts/login.sh via-env
user nobody
group nogroup
auth-nocache
script-security 3
username-as-common-name
tls-verify "/etc/openvpn/vpncheckCN-cert.sh /etc/openvpn/userlist.txt"
tls-server
dh /etc/openvpn/dh1024.pem
ca /etc/openvpn/ca.crt
cert /etc/openvpn/vpn-server.crt
key /etc/openvpn/vpn-server.key
tls-auth /etc/openvpn/ta.key 0
persist-key
persist-tun
comp-lzo
push "topology subnet"
push "route-gateway 10.8.0.1"
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.1.1"
route 192.168.2.0 255.255.255.0 10.8.0.3
server.log
Wed Mar 4 22:08:53 2015 OpenVPN 2.2.2 mips-openwrt-linux [SSL] [LZO2] [EPOLL] built on Jul 9 2013
Wed Mar 4 22:08:53 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Mar 4 22:08:53 2015 Diffie-Hellman initialized with 1024 bit key
Wed Mar 4 22:08:53 2015 Control Channel Authentication: using '/etc/openvpn/ta.key' as a OpenVPN static key file
Wed Mar 4 22:08:53 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Mar 4 22:08:53 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Mar 4 22:08:53 2015 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Mar 4 22:08:53 2015 Socket Buffers: R=[163840->131072] S=[163840->131072]
Wed Mar 4 22:08:53 2015 TUN/TAP device tun0 opened
Wed Mar 4 22:08:53 2015 TUN/TAP TX queue length set to 100
Wed Mar 4 22:08:53 2015 /sbin/ifconfig tun0 10.8.0.1 netmask 255.255.255.0 mtu 1500 broadcast 10.8.0.255
Wed Mar 4 22:08:53 2015 /etc/openvpn.up tun0 1500 1558 10.8.0.1 255.255.255.0 init
Wed Mar 4 22:09:08 2015 /sbin/route add -net 192.168.2.0 netmask 255.255.255.0 gw 10.8.0.3
Wed Mar 4 22:09:08 2015 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 4 22:09:08 2015 GID set to nogroup
Wed Mar 4 22:09:08 2015 UID set to nobody
Wed Mar 4 22:09:08 2015 UDPv4 link local (bound): [undef]:1194
Wed Mar 4 22:09:08 2015 UDPv4 link remote: [undef]
Wed Mar 4 22:09:08 2015 MULTI: multi_init called, r=256 v=256
Wed Mar 4 22:09:08 2015 Initialization Sequence Completed
Wed Mar 4 22:11:14 2015 MULTI: multi_create_instance called
Wed Mar 4 22:11:14 2015 31.61.131.5:3736 Re-using SSL/TLS context
Wed Mar 4 22:11:14 2015 31.61.131.5:3736 LZO compression initialized
Wed Mar 4 22:11:14 2015 31.61.131.5:3736 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Mar 4 22:11:14 2015 31.61.131.5:3736 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 4 22:11:14 2015 31.61.131.5:3736 TLS: Initial packet from 31.61.131.5:3736, sid=80c9165d f82b9f99
Wed Mar 4 22:12:14 2015 31.61.131.5:3736 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Mar 4 22:12:14 2015 31.61.131.5:3736 TLS Error: TLS handshake failed
Wed Mar 4 22:12:14 2015 31.61.131.5:3736 SIGUSR1[soft,tls-error] received, client-instance restarting
Wed Mar 4 22:12:17 2015 MULTI: multi_create_instance called
Wed Mar 4 22:12:17 2015 31.61.131.5:9592 Re-using SSL/TLS context
Wed Mar 4 22:12:17 2015 31.61.131.5:9592 LZO compression initialized
Wed Mar 4 22:12:17 2015 31.61.131.5:9592 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Mar 4 22:12:17 2015 31.61.131.5:9592 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 4 22:12:17 2015 31.61.131.5:9592 TLS: Initial packet from 31.61.131.5:9592, sid=d7085959 a8ad12ae
Wed Mar 4 22:13:17 2015 31.61.131.5:9592 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Mar 4 22:13:17 2015 31.61.131.5:9592 TLS Error: TLS handshake failed
Wed Mar 4 22:13:17 2015 31.61.131.5:9592 SIGUSR1[soft,tls-error] received, client-instance restarting
Sorry for my english
