I'm getting a no ciphers available error when trying to connect to my OVPN server.
TLS_ERROR: BIO read tls_read_plaintext error: error:140830B5:SSL routines:SSL3_CLIENT_HELLO:no ciphers available (see full log below)
I've been playing around with the config, but no luck so far. What is missing? I googled around and found this, which seems similar, but it would seem my binaries would already contain this fix?
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1385851
dev tun
tls-client
remote A.B.C.D X
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto tcp-client
script-security 2
ca ca.crt
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth-user-pass
#tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
tls-cipher ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256
tls-auth tls-auth.key 1
auth SHA512
verb 7
The tls-cipher line contains the ciphers which are present in my OpenSSL version, both on server and client side. As the log indicates: OpenVPN is complaining about the name of the ciphers, indicating a different one. Trying that with the line now commented out didn't work either. Again, all ciphers being present on server & client side.
Server side:
server> openssl version
OpenSSL 1.0.1j-fips 15 Oct 2014
server> openvpn --version
OpenVPN 2.3.6 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Dec 31 2014
library versions: OpenSSL 1.0.1j-fips 15 Oct 2014, LZO 2.08
Client side:
c:\Program Files\OpenVPN\bin>openssl version
WARNING: can't open config file: /etc/ssl/openssl.cnf
OpenSSL 1.0.1j 15 Oct 2014
c:\Program Files\OpenVPN\bin>openvpn --version
OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Full log:
Fri Mar 20 10:09:12 2015 us=260253 Current Parameter Settings:
Fri Mar 20 10:09:12 2015 us=260253 config = 'openvpn.ovpn'
Fri Mar 20 10:09:12 2015 us=260253 mode = 0
Fri Mar 20 10:09:12 2015 us=261253 show_ciphers = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 show_digests = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 show_engines = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 genkey = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 key_pass_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=261253 show_tls_ciphers = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 Connection profiles [default]:
Fri Mar 20 10:09:12 2015 us=261253 proto = tcp-client
Fri Mar 20 10:09:12 2015 us=261253 local = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=261253 local_port = 0
Fri Mar 20 10:09:12 2015 us=261253 remote = 'A.B.C.D'
Fri Mar 20 10:09:12 2015 us=261253 remote_port = X
Fri Mar 20 10:09:12 2015 us=261253 remote_float = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 bind_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 bind_local = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 connect_retry_seconds = 5
Fri Mar 20 10:09:12 2015 us=261253 connect_timeout = 10
Fri Mar 20 10:09:12 2015 us=261253 connect_retry_max = 0
Fri Mar 20 10:09:12 2015 us=261253 socks_proxy_server = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=261253 socks_proxy_port = 0
Fri Mar 20 10:09:12 2015 us=261253 socks_proxy_retry = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 tun_mtu = 1500
Fri Mar 20 10:09:12 2015 us=261253 tun_mtu_defined = ENABLED
Fri Mar 20 10:09:12 2015 us=261253 link_mtu = 1500
Fri Mar 20 10:09:12 2015 us=261253 link_mtu_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 tun_mtu_extra = 0
Fri Mar 20 10:09:12 2015 us=261253 tun_mtu_extra_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 mtu_discover_type = -1
Fri Mar 20 10:09:12 2015 us=261253 fragment = 0
Fri Mar 20 10:09:12 2015 us=261253 mssfix = 1450
Fri Mar 20 10:09:12 2015 us=261253 explicit_exit_notification = 0
Fri Mar 20 10:09:12 2015 us=261253 Connection profiles END
Fri Mar 20 10:09:12 2015 us=261253 remote_random = DISABLED
Fri Mar 20 10:09:12 2015 us=261253 ipchange = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=261253 dev = 'tun'
Fri Mar 20 10:09:12 2015 us=261253 dev_type = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=261253 dev_node = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=261253 lladdr = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=261253 topology = 1
Fri Mar 20 10:09:12 2015 us=261253 tun_ipv6 = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 ifconfig_local = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 ifconfig_remote_netmask = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 ifconfig_noexec = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 ifconfig_nowarn = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 ifconfig_ipv6_local = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 ifconfig_ipv6_netbits = 0
Fri Mar 20 10:09:12 2015 us=262253 ifconfig_ipv6_remote = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 shaper = 0
Fri Mar 20 10:09:12 2015 us=262253 mtu_test = 0
Fri Mar 20 10:09:12 2015 us=262253 mlock = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 keepalive_ping = 0
Fri Mar 20 10:09:12 2015 us=262253 keepalive_timeout = 0
Fri Mar 20 10:09:12 2015 us=262253 inactivity_timeout = 0
Fri Mar 20 10:09:12 2015 us=262253 ping_send_timeout = 0
Fri Mar 20 10:09:12 2015 us=262253 ping_rec_timeout = 0
Fri Mar 20 10:09:12 2015 us=262253 ping_rec_timeout_action = 0
Fri Mar 20 10:09:12 2015 us=262253 ping_timer_remote = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 remap_sigusr1 = 0
Fri Mar 20 10:09:12 2015 us=262253 persist_tun = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 persist_local_ip = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 persist_remote_ip = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 persist_key = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 passtos = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 resolve_retry_seconds = 1000000000
Fri Mar 20 10:09:12 2015 us=262253 username = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 groupname = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 chroot_dir = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 cd_dir = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 writepid = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 up_script = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 down_script = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=262253 down_pre = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 up_restart = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 up_delay = DISABLED
Fri Mar 20 10:09:12 2015 us=262253 daemon = DISABLED
Fri Mar 20 10:09:12 2015 us=263253 inetd = 0
Fri Mar 20 10:09:12 2015 us=263253 log = ENABLED
Fri Mar 20 10:09:12 2015 us=263253 suppress_timestamps = DISABLED
Fri Mar 20 10:09:12 2015 us=263253 nice = 0
Fri Mar 20 10:09:12 2015 us=263253 verbosity = 7
Fri Mar 20 10:09:12 2015 us=263253 mute = 0
Fri Mar 20 10:09:12 2015 us=263253 status_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=263253 status_file_version = 1
Fri Mar 20 10:09:12 2015 us=263253 status_file_update_freq = 60
Fri Mar 20 10:09:12 2015 us=263253 occ = ENABLED
Fri Mar 20 10:09:12 2015 us=263253 rcvbuf = 0
Fri Mar 20 10:09:12 2015 us=263253 sndbuf = 0
Fri Mar 20 10:09:12 2015 us=263253 sockflags = 0
Fri Mar 20 10:09:12 2015 us=263253 fast_io = DISABLED
Fri Mar 20 10:09:12 2015 us=263253 lzo = 7
Fri Mar 20 10:09:12 2015 us=263253 route_script = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=263253 route_default_gateway = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=263253 route_default_metric = 0
Fri Mar 20 10:09:12 2015 us=263253 route_noexec = DISABLED
Fri Mar 20 10:09:12 2015 us=263253 route_delay = 5
Fri Mar 20 10:09:12 2015 us=263253 route_delay_window = 30
Fri Mar 20 10:09:12 2015 us=263253 route_delay_defined = ENABLED
Fri Mar 20 10:09:12 2015 us=263253 route_nopull = DISABLED
Fri Mar 20 10:09:12 2015 us=263253 route_gateway_via_dhcp = DISABLED
Fri Mar 20 10:09:12 2015 us=263253 max_routes = 100
Fri Mar 20 10:09:12 2015 us=263253 allow_pull_fqdn = DISABLED
Fri Mar 20 10:09:12 2015 us=263253 management_addr = '127.0.0.1'
Fri Mar 20 10:09:12 2015 us=263253 management_port = 25340
Fri Mar 20 10:09:12 2015 us=263253 management_user_pass = 'stdin'
Fri Mar 20 10:09:12 2015 us=263253 management_log_history_cache = 250
Fri Mar 20 10:09:12 2015 us=263253 management_echo_buffer_size = 100
Fri Mar 20 10:09:12 2015 us=263253 management_write_peer_info_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=263253 management_client_user = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=263253 management_client_group = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=263253 management_flags = 6
Fri Mar 20 10:09:12 2015 us=263253 shared_secret_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=263253 key_direction = 2
Fri Mar 20 10:09:12 2015 us=263253 ciphername_defined = ENABLED
Fri Mar 20 10:09:12 2015 us=264253 ciphername = 'AES-256-CBC'
Fri Mar 20 10:09:12 2015 us=264253 authname_defined = ENABLED
Fri Mar 20 10:09:12 2015 us=264253 authname = 'SHA512'
Fri Mar 20 10:09:12 2015 us=264253 prng_hash = 'SHA1'
Fri Mar 20 10:09:12 2015 us=264253 prng_nonce_secret_len = 16
Fri Mar 20 10:09:12 2015 us=264253 keysize = 0
Fri Mar 20 10:09:12 2015 us=264253 engine = DISABLED
Fri Mar 20 10:09:12 2015 us=264253 replay = ENABLED
Fri Mar 20 10:09:12 2015 us=264253 mute_replay_warnings = DISABLED
Fri Mar 20 10:09:12 2015 us=264253 replay_window = 64
Fri Mar 20 10:09:12 2015 us=264253 replay_time = 15
Fri Mar 20 10:09:12 2015 us=264253 packet_id_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 use_iv = ENABLED
Fri Mar 20 10:09:12 2015 us=264253 test_crypto = DISABLED
Fri Mar 20 10:09:12 2015 us=264253 tls_server = DISABLED
Fri Mar 20 10:09:12 2015 us=264253 tls_client = ENABLED
Fri Mar 20 10:09:12 2015 us=264253 key_method = 2
Fri Mar 20 10:09:12 2015 us=264253 ca_file = 'ca.crt'
Fri Mar 20 10:09:12 2015 us=264253 ca_path = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 dh_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 cert_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 priv_key_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 pkcs12_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 cryptoapi_cert = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 cipher_list = 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256'
Fri Mar 20 10:09:12 2015 us=264253 tls_verify = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 tls_export_cert = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 verify_x509_type = 0
Fri Mar 20 10:09:12 2015 us=264253 verify_x509_name = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 crl_file = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=264253 ns_cert_type = 0
Fri Mar 20 10:09:12 2015 us=264253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=264253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=264253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=264253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=264253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_ku[i] = 0
Fri Mar 20 10:09:12 2015 us=265253 remote_cert_eku = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=265253 ssl_flags = 0
Fri Mar 20 10:09:12 2015 us=265253 tls_timeout = 2
Fri Mar 20 10:09:12 2015 us=265253 renegotiate_bytes = 0
Fri Mar 20 10:09:12 2015 us=265253 renegotiate_packets = 0
Fri Mar 20 10:09:12 2015 us=265253 renegotiate_seconds = 0
Fri Mar 20 10:09:12 2015 us=265253 handshake_window = 60
Fri Mar 20 10:09:12 2015 us=265253 transition_window = 3600
Fri Mar 20 10:09:12 2015 us=265253 single_session = DISABLED
Fri Mar 20 10:09:12 2015 us=265253 push_peer_info = DISABLED
Fri Mar 20 10:09:12 2015 us=265253 tls_exit = DISABLED
Fri Mar 20 10:09:12 2015 us=265253 tls_auth_file = 'tls-auth.key'
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_protected_authentication = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_private_mode = 00000000
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=266253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_cert_private = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_pin_cache_period = -1
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_id = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=267253 pkcs11_id_management = DISABLED
Fri Mar 20 10:09:12 2015 us=267253 server_network = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=267253 server_netmask = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 server_network_ipv6 = ::
Fri Mar 20 10:09:12 2015 us=270253 server_netbits_ipv6 = 0
Fri Mar 20 10:09:12 2015 us=270253 server_bridge_ip = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 server_bridge_netmask = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 server_bridge_pool_start = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 server_bridge_pool_end = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_pool_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_pool_start = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_pool_end = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_pool_netmask = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_pool_persist_refresh_freq = 600
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_ipv6_pool_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_ipv6_pool_base = ::
Fri Mar 20 10:09:12 2015 us=270253 ifconfig_ipv6_pool_netbits = 0
Fri Mar 20 10:09:12 2015 us=270253 n_bcast_buf = 256
Fri Mar 20 10:09:12 2015 us=270253 tcp_queue_limit = 64
Fri Mar 20 10:09:12 2015 us=270253 real_hash_size = 256
Fri Mar 20 10:09:12 2015 us=270253 virtual_hash_size = 256
Fri Mar 20 10:09:12 2015 us=270253 client_connect_script = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=270253 learn_address_script = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=270253 client_disconnect_script = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=270253 client_config_dir = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=270253 ccd_exclusive = DISABLED
Fri Mar 20 10:09:12 2015 us=270253 tmp_dir = 'C:\Users\pth\AppData\Local\Temp\'
Fri Mar 20 10:09:12 2015 us=270253 push_ifconfig_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=270253 push_ifconfig_local = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 push_ifconfig_remote_netmask = 0.0.0.0
Fri Mar 20 10:09:12 2015 us=270253 push_ifconfig_ipv6_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=270253 push_ifconfig_ipv6_local = ::/0
Fri Mar 20 10:09:12 2015 us=270253 push_ifconfig_ipv6_remote = ::
Fri Mar 20 10:09:12 2015 us=270253 enable_c2c = DISABLED
Fri Mar 20 10:09:12 2015 us=270253 duplicate_cn = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 cf_max = 0
Fri Mar 20 10:09:12 2015 us=271253 cf_per = 0
Fri Mar 20 10:09:12 2015 us=271253 max_clients = 1024
Fri Mar 20 10:09:12 2015 us=271253 max_routes_per_client = 256
Fri Mar 20 10:09:12 2015 us=271253 auth_user_pass_verify_script = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=271253 auth_user_pass_verify_script_via_file = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 client = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 pull = ENABLED
Fri Mar 20 10:09:12 2015 us=271253 auth_user_pass_file = 'stdin'
Fri Mar 20 10:09:12 2015 us=271253 show_net_up = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 route_method = 0
Fri Mar 20 10:09:12 2015 us=271253 ip_win32_defined = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 ip_win32_type = 3
Fri Mar 20 10:09:12 2015 us=271253 dhcp_masq_offset = 0
Fri Mar 20 10:09:12 2015 us=271253 dhcp_lease_time = 31536000
Fri Mar 20 10:09:12 2015 us=271253 tap_sleep = 0
Fri Mar 20 10:09:12 2015 us=271253 dhcp_options = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 dhcp_renew = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 dhcp_pre_release = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 dhcp_release = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 domain = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=271253 netbios_scope = '[UNDEF]'
Fri Mar 20 10:09:12 2015 us=271253 netbios_node_type = 0
Fri Mar 20 10:09:12 2015 us=271253 disable_nbt = DISABLED
Fri Mar 20 10:09:12 2015 us=271253 OpenVPN 2.3.6 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Dec 1 2014
Fri Mar 20 10:09:12 2015 us=271253 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.08
Enter Management Password:
Fri Mar 20 10:09:12 2015 us=273253 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Mar 20 10:09:12 2015 us=273253 Need hold release from management interface, waiting...
Fri Mar 20 10:09:12 2015 us=423253 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Mar 20 10:09:12 2015 us=524253 MANAGEMENT: CMD 'state on'
Fri Mar 20 10:09:12 2015 us=524253 MANAGEMENT: CMD 'log all on'
Fri Mar 20 10:09:12 2015 us=706253 MANAGEMENT: CMD 'hold off'
Fri Mar 20 10:09:12 2015 us=710253 MANAGEMENT: CMD 'hold release'
Fri Mar 20 10:09:18 2015 us=322253 MANAGEMENT: CMD 'username "Auth" "admin"'
Fri Mar 20 10:09:18 2015 us=334253 MANAGEMENT: CMD 'password [...]'
Fri Mar 20 10:09:18 2015 us=334253 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Mar 20 10:09:18 2015 us=763253 Deprecated TLS cipher name 'ECDHE-RSA-AES128-GCM-SHA256', please use IANA name 'TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256'
Fri Mar 20 10:09:18 2015 us=763253 Deprecated TLS cipher name 'ECDHE-ECDSA-AES128-GCM-SHA256', please use IANA name 'TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256'
Fri Mar 20 10:09:18 2015 us=763253 Deprecated TLS cipher name 'DHE-RSA-AES256-GCM-SHA384', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384'
Fri Mar 20 10:09:18 2015 us=763253 Deprecated TLS cipher name 'DHE-RSA-AES256-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-CBC-SHA256'
Fri Mar 20 10:09:18 2015 us=764253 Control Channel Authentication: using 'tls-auth.key' as a OpenVPN static key file
Fri Mar 20 10:09:18 2015 us=764253 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Mar 20 10:09:18 2015 us=764253 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Mar 20 10:09:18 2015 us=764253 LZO compression initialized
Fri Mar 20 10:09:18 2015 us=764253 Control Channel MTU parms [ L:1604 D:212 EF:112 EB:0 ET:0 EL:0 ]
Fri Mar 20 10:09:18 2015 us=764253 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Mar 20 10:09:18 2015 us=764253 MANAGEMENT: >STATE:1426842558,RESOLVE,,,
Fri Mar 20 10:09:18 2015 us=945253 Data Channel MTU parms [ L:1604 D:1450 EF:104 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Mar 20 10:09:18 2015 us=945253 Local Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Fri Mar 20 10:09:18 2015 us=946253 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Fri Mar 20 10:09:18 2015 us=946253 Local Options hash (VER=V4): 'c19f87b0'
Fri Mar 20 10:09:18 2015 us=946253 Expected Remote Options hash (VER=V4): 'eda38e81'
Fri Mar 20 10:09:18 2015 us=946253 Attempting to establish TCP connection with [AF_INET]A.B.C.D:X [nonblock]
Fri Mar 20 10:09:18 2015 us=946253 MANAGEMENT: >STATE:1426842558,TCP_CONNECT,,,
Fri Mar 20 10:09:19 2015 us=947253 TCP connection established with [AF_INET]A.B.C.D:X
Fri Mar 20 10:09:19 2015 us=947253 TCPv4_CLIENT link local: [undef]
Fri Mar 20 10:09:19 2015 us=947253 TCPv4_CLIENT link remote: [AF_INET]A.B.C.D:X
Fri Mar 20 10:09:19 2015 us=947253 MANAGEMENT: >STATE:1426842559,WAIT,,,
Fri Mar 20 10:09:19 2015 us=963253 TCPv4_CLIENT WRITE [86] to [AF_INET]A.B.C.D:X: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Fri Mar 20 10:09:19 2015 us=971253 TLS_ERROR: BIO read tls_read_plaintext error: error:140830B5:SSL routines:SSL3_CLIENT_HELLO:no ciphers available
Fri Mar 20 10:09:19 2015 us=972253 TLS Error: TLS object -> incoming plaintext read error
Fri Mar 20 10:09:19 2015 us=975253 TLS Error: TLS handshake failed
Fri Mar 20 10:09:19 2015 us=977253 Fatal TLS error (check_tls_errors_co), restarting
Fri Mar 20 10:09:19 2015 us=980253 TCP/UDP: Closing socket
Fri Mar 20 10:09:19 2015 us=982253 SIGUSR1[soft,tls-error] received, process restarting
Fri Mar 20 10:09:19 2015 us=984253 MANAGEMENT: >STATE:1426842559,RECONNECTING,tls-error,,
Fri Mar 20 10:09:19 2015 us=985253 Restart pause, 5 second(s)
Fri Mar 20 10:09:24 2015 us=985253 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Mar 20 10:09:24 2015 us=987253 Deprecated TLS cipher name 'ECDHE-RSA-AES128-GCM-SHA256', please use IANA name 'TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256'
Fri Mar 20 10:09:24 2015 us=987253 Deprecated TLS cipher name 'ECDHE-ECDSA-AES128-GCM-SHA256', please use IANA name 'TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256'
Fri Mar 20 10:09:24 2015 us=987253 Deprecated TLS cipher name 'DHE-RSA-AES256-GCM-SHA384', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384'
Fri Mar 20 10:09:24 2015 us=987253 Deprecated TLS cipher name 'DHE-RSA-AES256-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-CBC-SHA256'
Fri Mar 20 10:09:24 2015 us=989253 Control Channel Authentication: using 'tls-auth.key' as a OpenVPN static key file
Fri Mar 20 10:09:24 2015 us=989253 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Mar 20 10:09:24 2015 us=989253 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Fri Mar 20 10:09:24 2015 us=989253 LZO compression initialized
Fri Mar 20 10:09:24 2015 us=989253 Control Channel MTU parms [ L:1604 D:212 EF:112 EB:0 ET:0 EL:0 ]
Fri Mar 20 10:09:24 2015 us=989253 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Mar 20 10:09:24 2015 us=990253 MANAGEMENT: >STATE:1426842564,RESOLVE,,,
Fri Mar 20 10:09:25 2015 us=1253 Data Channel MTU parms [ L:1604 D:1450 EF:104 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Mar 20 10:09:25 2015 us=1253 Local Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Fri Mar 20 10:09:25 2015 us=1253 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1604,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Fri Mar 20 10:09:25 2015 us=1253 Local Options hash (VER=V4): 'c19f87b0'
Fri Mar 20 10:09:25 2015 us=1253 Expected Remote Options hash (VER=V4): 'eda38e81'
Fri Mar 20 10:09:25 2015 us=1253 Attempting to establish TCP connection with [AF_INET]A.B.C.D:X [nonblock]
Fri Mar 20 10:09:25 2015 us=2253 MANAGEMENT: >STATE:1426842565,TCP_CONNECT,,,
Fri Mar 20 10:09:26 2015 us=2253 TCP connection established with [AF_INET]A.B.C.D:X
Fri Mar 20 10:09:26 2015 us=2253 TCPv4_CLIENT link local: [undef]
Fri Mar 20 10:09:26 2015 us=2253 TCPv4_CLIENT link remote: [AF_INET]A.B.C.D:X
Fri Mar 20 10:09:26 2015 us=2253 MANAGEMENT: >STATE:1426842566,WAIT,,,
Fri Mar 20 10:09:26 2015 us=2253 TCPv4_CLIENT WRITE [86] to [AF_INET]A.B.C.D:X: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Fri Mar 20 10:09:26 2015 us=2253 TLS_ERROR: BIO read tls_read_plaintext error: error:140830B5:SSL routines:SSL3_CLIENT_HELLO:no ciphers available
Fri Mar 20 10:09:26 2015 us=2253 TLS Error: TLS object -> incoming plaintext read error
Fri Mar 20 10:09:26 2015 us=2253 TLS Error: TLS handshake failed
Fri Mar 20 10:09:26 2015 us=2253 Fatal TLS error (check_tls_errors_co), restarting
Fri Mar 20 10:09:26 2015 us=3253 TCP/UDP: Closing socket
Fri Mar 20 10:09:26 2015 us=3253 SIGUSR1[soft,tls-error] received, process restarting
Fri Mar 20 10:09:26 2015 us=3253 MANAGEMENT: >STATE:1426842566,RECONNECTING,tls-error,,
Fri Mar 20 10:09:26 2015 us=3253 Restart pause, 5 second(s)
Fri Mar 20 10:09:30 2015 us=3253 SIGTERM[hard,init_instance] received, process exiting
Fri Mar 20 10:09:30 2015 us=3253 MANAGEMENT: >STATE:1426842570,EXITING,init_instance,,
Fri Mar 20 10:09:30 2015 us=4253 PKCS#11: Terminating openssl
Fri Mar 20 10:09:30 2015 us=4253 PKCS#11: Removing providers
Fri Mar 20 10:09:30 2015 us=4253 PKCS#11: Releasing sessions
Fri Mar 20 10:09:30 2015 us=4253 PKCS#11: Terminating slotevent
Fri Mar 20 10:09:30 2015 us=4253 PKCS#11: Marking as uninitialized
