Client trying to reconnect to the server

linko

Hi,

I have a little problem to connect a device to a vpn server.
I explain, I have follow this instructions (in French : https://docs.google.com/document/d/1EpGA6LPWbhSDnAReIvD8LqY4iraVOxZMMYeg27omSq4/pub) to configure a router (Airlink gx400 with Wi-fi) which can have a VPN connection.
So, the configuration of the server:

port 8000
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/serveur.crt
key /etc/openvpn/keys/serveur.key
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
client-config-dir ccd
route 192.168.13.0 255.255.255.0
push “route 192.168.1.0 255.255.255.0”
ifconfig-pool-persist ipp.txt
keepalive 600 1800
cipher BF-CBC
comp-lzo
auth MD5
tun-mtu 1500
fragment 1300
mssfix 1400
persist-key
persist-tun
status openvpn-status.log
verb 4

This is what I can change/configure on the router:

The log of the server:

Wed Apr 1 08:13:39 2015 us=267266 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Wed Apr 1 08:13:39 2015 us=267613 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Apr 1 08:13:39 2015 us=269125 Diffie-Hellman initialized with 1024 bit key
Wed Apr 1 08:13:39 2015 us=279038 TLS-Auth MTU parms [ L:1538 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 08:13:39 2015 us=279090 Socket Buffers: R=[133120->131072] S=[133120->131072]
Wed Apr 1 08:13:39 2015 us=279221 ROUTE: default_gateway=UNDEF
Wed Apr 1 08:13:39 2015 us=279567 TUN/TAP device tun0 opened
Wed Apr 1 08:13:39 2015 us=279589 TUN/TAP TX queue length set to 100
Wed Apr 1 08:13:39 2015 us=279610 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 1 08:13:39 2015 us=279634 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Wed Apr 1 08:13:39 2015 us=335797 /sbin/route add -net 192.168.13.0 netmask 255.255.255.0 gw 10.8.0.2
Wed Apr 1 08:13:39 2015 us=338480 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Wed Apr 1 08:13:39 2015 us=339375 Data Channel MTU parms [ L:1538 D:1400 EF:38 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 08:13:39 2015 us=339416 UDPv4 link local (bound): [undef]
Wed Apr 1 08:13:39 2015 us=339427 UDPv4 link remote: [undef]
Wed Apr 1 08:13:39 2015 us=339444 MULTI: multi_init called, r=256 v=256
Wed Apr 1 08:13:39 2015 us=339486 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Apr 1 08:13:39 2015 us=339511 IFCONFIG POOL LIST
Wed Apr 1 08:13:39 2015 us=339549 Initialization Sequence Completed
Wed Apr 1 08:13:40 2015 us=34996 MULTI: multi_create_instance called
Wed Apr 1 08:13:40 2015 us=35063 92.90.26.59:46188 Re-using SSL/TLS context
Wed Apr 1 08:13:40 2015 us=35169 92.90.26.59:46188 LZO compression initialized
Wed Apr 1 08:13:40 2015 us=35309 92.90.26.59:46188 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 08:13:40 2015 us=35358 92.90.26.59:46188 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 08:13:40 2015 us=35374 92.90.26.59:46188 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 08:13:40 2015 us=35413 92.90.26.59:46188 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 08:13:40 2015 us=35426 92.90.26.59:46188 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 08:13:40 2015 us=35457 92.90.26.59:46188 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 08:13:40 2015 us=35476 92.90.26.59:46188 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 08:13:40 2015 us=35555 92.90.26.59:46188 TLS: Initial packet from [AF_INET]92.90.26.59:46188, sid=57e44825 ac846810
Wed Apr 1 08:13:42 2015 us=542545 MULTI: multi_create_instance called
Wed Apr 1 08:13:42 2015 us=542636 92.90.26.59:6446 Re-using SSL/TLS context
Wed Apr 1 08:13:42 2015 us=542659 92.90.26.59:6446 LZO compression initialized
Wed Apr 1 08:13:42 2015 us=542750 92.90.26.59:6446 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 08:13:42 2015 us=542791 92.90.26.59:6446 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 08:13:42 2015 us=542802 92.90.26.59:6446 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 08:13:42 2015 us=542833 92.90.26.59:6446 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 08:13:42 2015 us=542846 92.90.26.59:6446 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 08:13:42 2015 us=542862 92.90.26.59:6446 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 08:13:42 2015 us=542874 92.90.26.59:6446 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 08:13:42 2015 us=542901 92.90.26.59:6446 TLS: Initial packet from [AF_INET]92.90.26.59:6446, sid=4bc15521 22569812
Wed Apr 1 08:13:45 2015 us=75937 MULTI: multi_create_instance called
Wed Apr 1 08:13:45 2015 us=76022 92.90.26.59:2560 Re-using SSL/TLS context
Wed Apr 1 08:13:45 2015 us=76049 92.90.26.59:2560 LZO compression initialized
Wed Apr 1 08:13:45 2015 us=76194 92.90.26.59:2560 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 08:13:45 2015 us=76269 92.90.26.59:2560 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 08:13:45 2015 us=76285 92.90.26.59:2560 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 08:13:45 2015 us=76325 92.90.26.59:2560 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 08:13:45 2015 us=76339 92.90.26.59:2560 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 08:13:45 2015 us=76358 92.90.26.59:2560 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 08:13:45 2015 us=76374 92.90.26.59:2560 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 08:13:45 2015 us=76408 92.90.26.59:2560 TLS: Initial packet from [AF_INET]92.90.26.59:2560, sid=6831b15b 07e483f1
Wed Apr 1 08:13:47 2015 us=626207 MULTI: multi_create_instance called
Wed Apr 1 08:13:47 2015 us=626285 92.90.26.59:37216 Re-using SSL/TLS context
Wed Apr 1 08:13:47 2015 us=626308 92.90.26.59:37216 LZO compression initialized
Wed Apr 1 08:13:47 2015 us=626401 92.90.26.59:37216 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 08:13:47 2015 us=626444 92.90.26.59:37216 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 08:13:47 2015 us=626455 92.90.26.59:37216 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 08:13:47 2015 us=626516 92.90.26.59:37216 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 08:13:47 2015 us=626534 92.90.26.59:37216 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 08:13:47 2015 us=626551 92.90.26.59:37216 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 08:13:47 2015 us=626564 92.90.26.59:37216 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 08:13:47 2015 us=626592 92.90.26.59:37216 TLS: Initial packet from [AF_INET]92.90.26.59:37216, sid=25ad6603 431519d2
Wed Apr 1 08:13:50 2015 us=141391 MULTI: multi_create_instance called
Wed Apr 1 08:13:50 2015 us=141473 92.90.26.59:25369 Re-using SSL/TLS context
Wed Apr 1 08:13:50 2015 us=141520 92.90.26.59:25369 LZO compression initialized
Wed Apr 1 08:13:50 2015 us=141622 92.90.26.59:25369 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 08:13:50 2015 us=141663 92.90.26.59:25369 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 08:13:50 2015 us=141677 92.90.26.59:25369 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 08:13:50 2015 us=141712 92.90.26.59:25369 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 08:13:50 2015 us=141724 92.90.26.59:25369 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 08:13:50 2015 us=141743 92.90.26.59:25369 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 08:13:50 2015 us=141759 92.90.26.59:25369 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 08:13:50 2015 us=141796 92.90.26.59:25369 TLS: Initial packet from [AF_INET]92.90.26.59:25369, sid=2b0ca2b2 e75fa999
Wed Apr 1 08:13:52 2015 us=682628 MULTI: multi_create_instance called
Wed Apr 1 08:13:52 2015 us=682708 92.90.26.59:63923 Re-using SSL/TLS context
Wed Apr 1 08:13:52 2015 us=682733 92.90.26.59:63923 LZO compression initialized
Wed Apr 1 08:13:52 2015 us=682829 92.90.26.59:63923 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 08:13:52 2015 us=682879 92.90.26.59:63923 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 08:13:52 2015 us=682893 92.90.26.59:63923 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 08:13:52 2015 us=682929 92.90.26.59:63923 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 08:13:52 2015 us=682947 92.90.26.59:63923 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 08:13:52 2015 us=682968 92.90.26.59:63923 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 08:13:52 2015 us=682983 92.90.26.59:63923 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 08:13:52 2015 us=683015 92.90.26.59:63923 TLS: Initial packet from [AF_INET]92.90.26.59:63923, sid=bf7f564e ac2094e5

It's like the router is trying to reconnect constantly to the server.
I have already search for a solution but as you can guess I have not found so this is why I am asking to you if you have any idea.

Thanks in advance and sorry for my English.

maikcat

you have to be careful about some directives like:

cipher
compression
auth algorithm

with that in mind

server auth: SHA1
client auth: MD5

correct it please..

Michael.

linko

I didn't notice that, thank you !
I have changed, both have MD5 authentication algorithm but I still have the same message :

Wed Apr 1 09:31:04 2015 us=379204 MULTI: multi_create_instance called
Wed Apr 1 09:31:04 2015 us=379338 92.90.16.152:11844 Re-using SSL/TLS context
Wed Apr 1 09:31:04 2015 us=379371 92.90.16.152:11844 LZO compression initialized
Wed Apr 1 09:31:04 2015 us=379489 92.90.16.152:11844 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 09:31:04 2015 us=379548 92.90.16.152:11844 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 09:31:04 2015 us=379562 92.90.16.152:11844 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 09:31:04 2015 us=379603 92.90.16.152:11844 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 09:31:04 2015 us=379618 92.90.16.152:11844 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 09:31:04 2015 us=379638 92.90.16.152:11844 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 09:31:04 2015 us=379655 92.90.16.152:11844 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 09:31:04 2015 us=379687 92.90.16.152:11844 TLS: Initial packet from [AF_INET]92.90.16.152:11844, sid=60487eb4 17ea5ae6
Wed Apr 1 09:31:07 2015 us=22550 MULTI: multi_create_instance called
Wed Apr 1 09:31:07 2015 us=22625 92.90.16.152:8475 Re-using SSL/TLS context
Wed Apr 1 09:31:07 2015 us=22650 92.90.16.152:8475 LZO compression initialized
Wed Apr 1 09:31:07 2015 us=22738 92.90.16.152:8475 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr 1 09:31:07 2015 us=22784 92.90.16.152:8475 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 1 09:31:07 2015 us=22803 92.90.16.152:8475 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr 1 09:31:07 2015 us=22841 92.90.16.152:8475 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr 1 09:31:07 2015 us=22858 92.90.16.152:8475 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr 1 09:31:07 2015 us=22874 92.90.16.152:8475 Local Options hash (VER=V4): '48dabfaa'
Wed Apr 1 09:31:07 2015 us=22887 92.90.16.152:8475 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr 1 09:31:07 2015 us=22914 92.90.16.152:8475 TLS: Initial packet from [AF_INET]92.90.16.152:8475, sid=c5221197 d2ae2b69

maikcat

user verb 5 and post server and client logs please.

your server is behind a NAT device?

Michael.

linko

Logs of the server since the begining:

Wed Apr  1 14:22:09 2015 us=178243 Current Parameter Settings:
Wed Apr  1 14:22:09 2015 us=178308   config = 'server.conf'
Wed Apr  1 14:22:09 2015 us=178318   mode = 1
Wed Apr  1 14:22:09 2015 us=178327   persist_config = DISABLED
Wed Apr  1 14:22:09 2015 us=178336   persist_mode = 1
Wed Apr  1 14:22:09 2015 us=178345   show_ciphers = DISABLED
Wed Apr  1 14:22:09 2015 us=178353   show_digests = DISABLED
Wed Apr  1 14:22:09 2015 us=178361   show_engines = DISABLED
Wed Apr  1 14:22:09 2015 us=178369   genkey = DISABLED
Wed Apr  1 14:22:09 2015 us=178378   key_pass_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178386   show_tls_ciphers = DISABLED
Wed Apr  1 14:22:09 2015 us=178395 Connection profiles [default]:
Wed Apr  1 14:22:09 2015 us=178403   proto = udp
Wed Apr  1 14:22:09 2015 us=178412   local = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178420   local_port = 8000
Wed Apr  1 14:22:09 2015 us=178428   remote = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178436   remote_port = 8000
Wed Apr  1 14:22:09 2015 us=178445   remote_float = DISABLED
Wed Apr  1 14:22:09 2015 us=178453   bind_defined = DISABLED
Wed Apr  1 14:22:09 2015 us=178461   bind_local = ENABLED
Wed Apr  1 14:22:09 2015 us=178469   connect_retry_seconds = 5
Wed Apr  1 14:22:09 2015 us=178477   connect_timeout = 10
Wed Apr  1 14:22:09 2015 us=178486   connect_retry_max = 0
Wed Apr  1 14:22:09 2015 us=178495   socks_proxy_server = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178503   socks_proxy_port = 0
Wed Apr  1 14:22:09 2015 us=178511   socks_proxy_retry = DISABLED
Wed Apr  1 14:22:09 2015 us=178519 Connection profiles END
Wed Apr  1 14:22:09 2015 us=178527   remote_random = DISABLED
Wed Apr  1 14:22:09 2015 us=178535   ipchange = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178545   dev = 'tun'
Wed Apr  1 14:22:09 2015 us=178582   dev_type = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178590   dev_node = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178598   lladdr = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178606   topology = 1
Wed Apr  1 14:22:09 2015 us=178614   tun_ipv6 = DISABLED
Wed Apr  1 14:22:09 2015 us=178622   ifconfig_local = '10.8.0.1'
Wed Apr  1 14:22:09 2015 us=178630   ifconfig_remote_netmask = '10.8.0.2'
Wed Apr  1 14:22:09 2015 us=178638   ifconfig_noexec = DISABLED
Wed Apr  1 14:22:09 2015 us=178646   ifconfig_nowarn = DISABLED
Wed Apr  1 14:22:09 2015 us=178654   ifconfig_ipv6_local = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178662   ifconfig_ipv6_netbits = 0
Wed Apr  1 14:22:09 2015 us=178670   ifconfig_ipv6_remote = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178678   shaper = 0
Wed Apr  1 14:22:09 2015 us=178686   tun_mtu = 1500
Wed Apr  1 14:22:09 2015 us=178694   tun_mtu_defined = ENABLED
Wed Apr  1 14:22:09 2015 us=178703   link_mtu = 1500
Wed Apr  1 14:22:09 2015 us=178710   link_mtu_defined = DISABLED
Wed Apr  1 14:22:09 2015 us=178718   tun_mtu_extra = 0
Wed Apr  1 14:22:09 2015 us=178727   tun_mtu_extra_defined = DISABLED
Wed Apr  1 14:22:09 2015 us=178738   fragment = 1300
Wed Apr  1 14:22:09 2015 us=178746   mtu_discover_type = -1
Wed Apr  1 14:22:09 2015 us=178754   mtu_test = 0
Wed Apr  1 14:22:09 2015 us=178765   mlock = DISABLED
Wed Apr  1 14:22:09 2015 us=178777   keepalive_ping = 600
Wed Apr  1 14:22:09 2015 us=178788   keepalive_timeout = 1800
Wed Apr  1 14:22:09 2015 us=178800   inactivity_timeout = 0
Wed Apr  1 14:22:09 2015 us=178838   ping_send_timeout = 600
Wed Apr  1 14:22:09 2015 us=178848   ping_rec_timeout = 3600
Wed Apr  1 14:22:09 2015 us=178856   ping_rec_timeout_action = 2
Wed Apr  1 14:22:09 2015 us=178864   ping_timer_remote = DISABLED
Wed Apr  1 14:22:09 2015 us=178873   remap_sigusr1 = 0
Wed Apr  1 14:22:09 2015 us=178881   explicit_exit_notification = 0
Wed Apr  1 14:22:09 2015 us=178889   persist_tun = ENABLED
Wed Apr  1 14:22:09 2015 us=178897   persist_local_ip = DISABLED
Wed Apr  1 14:22:09 2015 us=178905   persist_remote_ip = DISABLED
Wed Apr  1 14:22:09 2015 us=178914   persist_key = ENABLED
Wed Apr  1 14:22:09 2015 us=178922   mssfix = 1400
Wed Apr  1 14:22:09 2015 us=178930   passtos = DISABLED
Wed Apr  1 14:22:09 2015 us=178938   resolve_retry_seconds = 1000000000
Wed Apr  1 14:22:09 2015 us=178946   username = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178954   groupname = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178962   chroot_dir = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178970   cd_dir = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178978   writepid = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178986   up_script = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=178994   down_script = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179002   down_pre = DISABLED
Wed Apr  1 14:22:09 2015 us=179010   up_restart = DISABLED
Wed Apr  1 14:22:09 2015 us=179018   up_delay = DISABLED
Wed Apr  1 14:22:09 2015 us=179026   daemon = DISABLED
Wed Apr  1 14:22:09 2015 us=179056   inetd = 0
Wed Apr  1 14:22:09 2015 us=179064   log = DISABLED
Wed Apr  1 14:22:09 2015 us=179072   suppress_timestamps = DISABLED
Wed Apr  1 14:22:09 2015 us=179080   nice = 0
Wed Apr  1 14:22:09 2015 us=179088   verbosity = 4
Wed Apr  1 14:22:09 2015 us=179096   mute = 0
Wed Apr  1 14:22:09 2015 us=179104   gremlin = 0
Wed Apr  1 14:22:09 2015 us=179112   status_file = 'openvpn-status.log'
Wed Apr  1 14:22:09 2015 us=179120   status_file_version = 1
Wed Apr  1 14:22:09 2015 us=179128   status_file_update_freq = 60
Wed Apr  1 14:22:09 2015 us=179136   occ = ENABLED
Wed Apr  1 14:22:09 2015 us=179144   rcvbuf = 65536
Wed Apr  1 14:22:09 2015 us=179152   sndbuf = 65536
Wed Apr  1 14:22:09 2015 us=179160   sockflags = 0
Wed Apr  1 14:22:09 2015 us=179168   fast_io = DISABLED
Wed Apr  1 14:22:09 2015 us=179176   lzo = 7
Wed Apr  1 14:22:09 2015 us=179186   route_script = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179194   route_default_gateway = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179202   route_default_metric = 0
Wed Apr  1 14:22:09 2015 us=179224   route_noexec = DISABLED
Wed Apr  1 14:22:09 2015 us=179235   route_delay = 0
Wed Apr  1 14:22:09 2015 us=179243   route_delay_window = 30
Wed Apr  1 14:22:09 2015 us=179252   route_delay_defined = DISABLED
Wed Apr  1 14:22:09 2015 us=179260   route_nopull = DISABLED
Wed Apr  1 14:22:09 2015 us=179268   route_gateway_via_dhcp = DISABLED
Wed Apr  1 14:22:09 2015 us=179276   max_routes = 100
Wed Apr  1 14:22:09 2015 us=179284   allow_pull_fqdn = DISABLED
Wed Apr  1 14:22:09 2015 us=179294   route 192.168.13.0/255.255.255.0/nil/nil
Wed Apr  1 14:22:09 2015 us=179303   route 10.8.0.0/255.255.255.0/nil/nil
Wed Apr  1 14:22:09 2015 us=179312   management_addr = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179320   management_port = 0
Wed Apr  1 14:22:09 2015 us=179332   management_user_pass = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179340   management_log_history_cache = 250
Wed Apr  1 14:22:09 2015 us=179350   management_echo_buffer_size = 100
Wed Apr  1 14:22:09 2015 us=179361   management_write_peer_info_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179390   management_client_user = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179399   management_client_group = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179435   management_flags = 0
Wed Apr  1 14:22:09 2015 us=179444   shared_secret_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179452   key_direction = 0
Wed Apr  1 14:22:09 2015 us=179461   ciphername_defined = ENABLED
Wed Apr  1 14:22:09 2015 us=179469   ciphername = 'BF-CBC'
Wed Apr  1 14:22:09 2015 us=179477   authname_defined = ENABLED
Wed Apr  1 14:22:09 2015 us=179505   authname = 'MD5'
Wed Apr  1 14:22:09 2015 us=179515   prng_hash = 'SHA1'
Wed Apr  1 14:22:09 2015 us=179523   prng_nonce_secret_len = 16
Wed Apr  1 14:22:09 2015 us=179531   keysize = 0
Wed Apr  1 14:22:09 2015 us=179539   engine = DISABLED
Wed Apr  1 14:22:09 2015 us=179547   replay = ENABLED
Wed Apr  1 14:22:09 2015 us=179571   mute_replay_warnings = DISABLED
Wed Apr  1 14:22:09 2015 us=179578   replay_window = 64
Wed Apr  1 14:22:09 2015 us=179586   replay_time = 15
Wed Apr  1 14:22:09 2015 us=179594   packet_id_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179602   use_iv = ENABLED
Wed Apr  1 14:22:09 2015 us=179627   test_crypto = DISABLED
Wed Apr  1 14:22:09 2015 us=179637   tls_server = ENABLED
Wed Apr  1 14:22:09 2015 us=179645   tls_client = DISABLED
Wed Apr  1 14:22:09 2015 us=179653   key_method = 2
Wed Apr  1 14:22:09 2015 us=179661   ca_file = '/etc/openvpn/keys/ca.crt'
Wed Apr  1 14:22:09 2015 us=179669   ca_path = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179678   dh_file = '/etc/openvpn/keys/dh1024.pem'
Wed Apr  1 14:22:09 2015 us=179686   cert_file = '/etc/openvpn/keys/serveur.crt'
Wed Apr  1 14:22:09 2015 us=179694   priv_key_file = '/etc/openvpn/keys/serveur.key'
Wed Apr  1 14:22:09 2015 us=179703   pkcs12_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179713   cipher_list = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179727   tls_verify = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179738   tls_export_cert = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179747   tls_remote = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179755   crl_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179763   ns_cert_type = 0
Wed Apr  1 14:22:09 2015 us=179771   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179779   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179787   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179795   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179802   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179810   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179818   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179826   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179834   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179842   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179850   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179858   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179865   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179873   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179881   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179889   remote_cert_ku[i] = 0
Wed Apr  1 14:22:09 2015 us=179896   remote_cert_eku = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179904   tls_timeout = 2
Wed Apr  1 14:22:09 2015 us=179912   renegotiate_bytes = 0
Wed Apr  1 14:22:09 2015 us=179920   renegotiate_packets = 0
Wed Apr  1 14:22:09 2015 us=179928   renegotiate_seconds = 3600
Wed Apr  1 14:22:09 2015 us=179936   handshake_window = 60
Wed Apr  1 14:22:09 2015 us=179944   transition_window = 3600
Wed Apr  1 14:22:09 2015 us=179952   single_session = DISABLED
Wed Apr  1 14:22:09 2015 us=179960   push_peer_info = DISABLED
Wed Apr  1 14:22:09 2015 us=179968   tls_exit = DISABLED
Wed Apr  1 14:22:09 2015 us=179976   tls_auth_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=179984   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=179992   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180000   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180008   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180016   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180024   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180032   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180040   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180329   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180361   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180372   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180381   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180391   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180400   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180408   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180416   pkcs11_protected_authentication = DISABLED
Wed Apr  1 14:22:09 2015 us=180425   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180433   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180442   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180450   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180458   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180466   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180474   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180481   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180489   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180497   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180505   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180513   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180521   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180529   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180537   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180544   pkcs11_private_mode = 00000000
Wed Apr  1 14:22:09 2015 us=180566   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180575   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180582   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180590   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180598   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180606   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180614   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180622   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180630   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180638   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180646   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180654   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180662   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180670   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180678   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180686   pkcs11_cert_private = DISABLED
Wed Apr  1 14:22:09 2015 us=180694   pkcs11_pin_cache_period = -1
Wed Apr  1 14:22:09 2015 us=180702   pkcs11_id = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=180710   pkcs11_id_management = DISABLED
Wed Apr  1 14:22:09 2015 us=180719   server_network = 10.8.0.0
Wed Apr  1 14:22:09 2015 us=180728   server_netmask = 255.255.255.0
Wed Apr  1 14:22:09 2015 us=180740   server_network_ipv6 = ::
Wed Apr  1 14:22:09 2015 us=180748   server_netbits_ipv6 = 0
Wed Apr  1 14:22:09 2015 us=180757   server_bridge_ip = 0.0.0.0
Wed Apr  1 14:22:09 2015 us=180766   server_bridge_netmask = 0.0.0.0
Wed Apr  1 14:22:09 2015 us=180775   server_bridge_pool_start = 0.0.0.0
Wed Apr  1 14:22:09 2015 us=180784   server_bridge_pool_end = 0.0.0.0
Wed Apr  1 14:22:09 2015 us=180808   push_entry = '???route 192.168.1.0 255.255.255.0???'
Wed Apr  1 14:22:09 2015 us=180818   push_entry = 'explicit-exit-notify 3'
Wed Apr  1 14:22:09 2015 us=180826   push_entry = 'route 10.8.0.1'
Wed Apr  1 14:22:09 2015 us=180835   push_entry = 'topology net30'
Wed Apr  1 14:22:09 2015 us=180843   push_entry = 'ping 600'
Wed Apr  1 14:22:09 2015 us=180851   push_entry = 'ping-restart 1800'
Wed Apr  1 14:22:09 2015 us=180859   ifconfig_pool_defined = ENABLED
Wed Apr  1 14:22:09 2015 us=180867   ifconfig_pool_start = 10.8.0.4
Wed Apr  1 14:22:09 2015 us=180876   ifconfig_pool_end = 10.8.0.251
Wed Apr  1 14:22:09 2015 us=180888   ifconfig_pool_netmask = 0.0.0.0
Wed Apr  1 14:22:09 2015 us=180896   ifconfig_pool_persist_filename = 'ipp.txt'
Wed Apr  1 14:22:09 2015 us=180904   ifconfig_pool_persist_refresh_freq = 600
Wed Apr  1 14:22:09 2015 us=180913   ifconfig_ipv6_pool_defined = DISABLED
Wed Apr  1 14:22:09 2015 us=180921   ifconfig_ipv6_pool_base = ::
Wed Apr  1 14:22:09 2015 us=180929   ifconfig_ipv6_pool_netbits = 0
Wed Apr  1 14:22:09 2015 us=180937   n_bcast_buf = 256
Wed Apr  1 14:22:09 2015 us=180945   tcp_queue_limit = 64
Wed Apr  1 14:22:09 2015 us=180953   real_hash_size = 256
Wed Apr  1 14:22:09 2015 us=180961   virtual_hash_size = 256
Wed Apr  1 14:22:09 2015 us=180969   client_connect_script = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=180977   learn_address_script = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=180985   client_disconnect_script = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=180993   client_config_dir = 'ccd'
Wed Apr  1 14:22:09 2015 us=181001   ccd_exclusive = DISABLED
Wed Apr  1 14:22:09 2015 us=181009   tmp_dir = '/tmp'
Wed Apr  1 14:22:09 2015 us=181017   push_ifconfig_defined = DISABLED
Wed Apr  1 14:22:09 2015 us=181025   push_ifconfig_local = 0.0.0.0
Wed Apr  1 14:22:09 2015 us=181034   push_ifconfig_remote_netmask = 0.0.0.0
Wed Apr  1 14:22:09 2015 us=181042   push_ifconfig_ipv6_defined = DISABLED
Wed Apr  1 14:22:09 2015 us=181051   push_ifconfig_ipv6_local = ::/0
Wed Apr  1 14:22:09 2015 us=181059   push_ifconfig_ipv6_remote = ::
Wed Apr  1 14:22:09 2015 us=181067   enable_c2c = DISABLED
Wed Apr  1 14:22:09 2015 us=181075   duplicate_cn = DISABLED
Wed Apr  1 14:22:09 2015 us=181083   cf_max = 0
Wed Apr  1 14:22:09 2015 us=181091   cf_per = 0
Wed Apr  1 14:22:09 2015 us=181099   max_clients = 1024
Wed Apr  1 14:22:09 2015 us=181108   max_routes_per_client = 256
Wed Apr  1 14:22:09 2015 us=181116   auth_user_pass_verify_script = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=181124   auth_user_pass_verify_script_via_file = DISABLED
Wed Apr  1 14:22:09 2015 us=181132   ssl_flags = 0
Wed Apr  1 14:22:09 2015 us=181140   port_share_host = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=181148   port_share_port = 0
Wed Apr  1 14:22:09 2015 us=181156   client = DISABLED
Wed Apr  1 14:22:09 2015 us=181165   pull = DISABLED
Wed Apr  1 14:22:09 2015 us=181173   auth_user_pass_file = '[UNDEF]'
Wed Apr  1 14:22:09 2015 us=181189 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec  1 2014
Wed Apr  1 14:22:09 2015 us=181397 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Apr  1 14:22:09 2015 us=273999 Diffie-Hellman initialized with 1024 bit key
Wed Apr  1 14:22:09 2015 us=274711 TLS-Auth MTU parms [ L:1538 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr  1 14:22:09 2015 us=274740 Socket Buffers: R=[133120->131072] S=[133120->131072]
Wed Apr  1 14:22:09 2015 us=274848 ROUTE: default_gateway=UNDEF
Wed Apr  1 14:22:09 2015 us=275071 TUN/TAP device tun0 opened
Wed Apr  1 14:22:09 2015 us=275086 TUN/TAP TX queue length set to 100
Wed Apr  1 14:22:09 2015 us=275103 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr  1 14:22:09 2015 us=275120 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Wed Apr  1 14:22:09 2015 us=345950 /sbin/route add -net 192.168.13.0 netmask 255.255.255.0 gw 10.8.0.2
Wed Apr  1 14:22:09 2015 us=347057 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Wed Apr  1 14:22:09 2015 us=348073 Data Channel MTU parms [ L:1538 D:1400 EF:38 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr  1 14:22:09 2015 us=348107 UDPv4 link local (bound): [undef]
Wed Apr  1 14:22:09 2015 us=348118 UDPv4 link remote: [undef]
Wed Apr  1 14:22:09 2015 us=348135 MULTI: multi_init called, r=256 v=256
Wed Apr  1 14:22:09 2015 us=348176 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Wed Apr  1 14:22:09 2015 us=348201 IFCONFIG POOL LIST
Wed Apr  1 14:22:09 2015 us=348229 Initialization Sequence Completed
Wed Apr  1 14:22:09 2015 us=600681 MULTI: multi_create_instance called
Wed Apr  1 14:22:09 2015 us=600741 92.90.16.191:6741 Re-using SSL/TLS context
Wed Apr  1 14:22:09 2015 us=600774 92.90.16.191:6741 LZO compression initialized
Wed Apr  1 14:22:09 2015 us=600884 92.90.16.191:6741 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr  1 14:22:09 2015 us=600922 92.90.16.191:6741 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr  1 14:22:09 2015 us=600933 92.90.16.191:6741 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr  1 14:22:09 2015 us=600967 92.90.16.191:6741 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr  1 14:22:09 2015 us=600977 92.90.16.191:6741 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr  1 14:22:09 2015 us=601002 92.90.16.191:6741 Local Options hash (VER=V4): '48dabfaa'
Wed Apr  1 14:22:09 2015 us=601017 92.90.16.191:6741 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr  1 14:22:09 2015 us=601054 92.90.16.191:6741 TLS: Initial packet from [AF_INET]92.90.16.191:6741, sid=72d5c435 eafe02e7
Wed Apr  1 14:22:12 2015 us=165481 MULTI: multi_create_instance called
Wed Apr  1 14:22:12 2015 us=165605 92.90.16.191:20756 Re-using SSL/TLS context
Wed Apr  1 14:22:12 2015 us=165634 92.90.16.191:20756 LZO compression initialized
Wed Apr  1 14:22:12 2015 us=165741 92.90.16.191:20756 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr  1 14:22:12 2015 us=165781 92.90.16.191:20756 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr  1 14:22:12 2015 us=165792 92.90.16.191:20756 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr  1 14:22:12 2015 us=165823 92.90.16.191:20756 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr  1 14:22:12 2015 us=165837 92.90.16.191:20756 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr  1 14:22:12 2015 us=165853 92.90.16.191:20756 Local Options hash (VER=V4): '48dabfaa'
Wed Apr  1 14:22:12 2015 us=165921 92.90.16.191:20756 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr  1 14:22:12 2015 us=165977 92.90.16.191:20756 TLS: Initial packet from [AF_INET]92.90.16.191:20756, sid=c0f55081 5eaed361
Wed Apr  1 14:22:14 2015 us=701424 MULTI: multi_create_instance called
Wed Apr  1 14:22:14 2015 us=701495 92.90.16.191:22894 Re-using SSL/TLS context
Wed Apr  1 14:22:14 2015 us=701516 92.90.16.191:22894 LZO compression initialized
Wed Apr  1 14:22:14 2015 us=701610 92.90.16.191:22894 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr  1 14:22:14 2015 us=701650 92.90.16.191:22894 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr  1 14:22:14 2015 us=701660 92.90.16.191:22894 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr  1 14:22:14 2015 us=701697 92.90.16.191:22894 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr  1 14:22:14 2015 us=701709 92.90.16.191:22894 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr  1 14:22:14 2015 us=701725 92.90.16.191:22894 Local Options hash (VER=V4): '48dabfaa'
Wed Apr  1 14:22:14 2015 us=701738 92.90.16.191:22894 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr  1 14:22:14 2015 us=701766 92.90.16.191:22894 TLS: Initial packet from [AF_INET]92.90.16.191:22894, sid=bc5d1d25 e4d384b6
Wed Apr  1 14:22:17 2015 us=229551 MULTI: multi_create_instance called
Wed Apr  1 14:22:17 2015 us=229625 92.90.16.191:42322 Re-using SSL/TLS context
Wed Apr  1 14:22:17 2015 us=229650 92.90.16.191:42322 LZO compression initialized
Wed Apr  1 14:22:17 2015 us=229734 92.90.16.191:42322 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr  1 14:22:17 2015 us=229781 92.90.16.191:42322 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr  1 14:22:17 2015 us=229797 92.90.16.191:42322 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr  1 14:22:17 2015 us=229840 92.90.16.191:42322 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr  1 14:22:17 2015 us=229857 92.90.16.191:42322 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr  1 14:22:17 2015 us=229873 92.90.16.191:42322 Local Options hash (VER=V4): '48dabfaa'
Wed Apr  1 14:22:17 2015 us=229886 92.90.16.191:42322 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr  1 14:22:17 2015 us=229913 92.90.16.191:42322 TLS: Initial packet from [AF_INET]92.90.16.191:42322, sid=45a7f6fb 550dcda0
Wed Apr  1 14:22:19 2015 us=820061 MULTI: multi_create_instance called
Wed Apr  1 14:22:19 2015 us=820148 92.90.16.191:37607 Re-using SSL/TLS context
Wed Apr  1 14:22:19 2015 us=820178 92.90.16.191:37607 LZO compression initialized
Wed Apr  1 14:22:19 2015 us=820334 92.90.16.191:37607 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Apr  1 14:22:19 2015 us=820384 92.90.16.191:37607 Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr  1 14:22:19 2015 us=820398 92.90.16.191:37607 Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Wed Apr  1 14:22:19 2015 us=820436 92.90.16.191:37607 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Wed Apr  1 14:22:19 2015 us=820451 92.90.16.191:37607 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Wed Apr  1 14:22:19 2015 us=820472 92.90.16.191:37607 Local Options hash (VER=V4): '48dabfaa'
Wed Apr  1 14:22:19 2015 us=820489 92.90.16.191:37607 Expected Remote Options hash (VER=V4): 'f9450516'
Wed Apr  1 14:22:19 2015 us=820523 92.90.16.191:37607 TLS: Initial packet from [AF_INET]92.90.16.191:37607, sid=2784a839 d40b25b5
Wed Apr  1 14:22:22 2015 us=433369 MULTI: multi_create_instance called
Wed Apr  1 14:22:22 2015 us=433453 92.90.16.191:53539 Re-using SSL/TLS context

Client logs:

Jan 1 00:10:25 notice openvpn[10588]: LZO compression initialized
Jan 1 00:10:25 notice openvpn[10588]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jan 1 00:10:25 notice openvpn[10588]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 1 00:10:25 notice openvpn[10588]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Jan 1 00:10:25 notice openvpn[10588]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Jan 1 00:10:25 notice openvpn[10588]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Jan 1 00:10:25 notice openvpn[10588]: Local Options hash (VER=V4): 'f9450516'
Jan 1 00:10:25 notice openvpn[10588]: Expected Remote Options hash (VER=V4): '48dabfaa'
Jan 1 00:10:25 notice openvpn[10588]: Socket Buffers: R=[110592->131072] S=[110592->131072]
Jan 1 00:10:25 notice openvpn[10588]: UDPv4 link local: [undef]
Jan 1 00:10:25 notice openvpn[10588]: UDPv4 link remote: 151.80.135.246:8000
Jan 1 00:10:25 notice openvpn[10588]: TLS: Initial packet from 151.80.135.246:8000, sid=0cf4fe53 1714de8b
Jan 1 00:10:25 err openvpn[10588]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Jan 1 00:10:25 err openvpn[10588]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Jan 1 00:10:25 err openvpn[10588]: TLS Error: TLS object -> incoming plaintext read error
Jan 1 00:10:25 err openvpn[10588]: TLS Error: TLS handshake failed
Jan 1 00:10:25 notice openvpn[10588]: TCP/UDP: Closing socket
Jan 1 00:10:25 notice openvpn[10588]: SIGUSR1[soft,tls-error] received, process restarting
Jan 1 00:10:25 notice openvpn[10588]: Restart pause, 2 second(s)
Jan 1 00:10:27 warn openvpn[10588]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jan 1 00:10:27 notice openvpn[10588]: LZO compression initialized
Jan 1 00:10:27 notice openvpn[10588]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jan 1 00:10:27 notice openvpn[10588]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 1 00:10:27 notice openvpn[10588]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Jan 1 00:10:27 notice openvpn[10588]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Jan 1 00:10:27 notice openvpn[10588]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Jan 1 00:10:27 notice openvpn[10588]: Local Options hash (VER=V4): 'f9450516'
Jan 1 00:10:27 notice openvpn[10588]: Expected Remote Options hash (VER=V4): '48dabfaa'
Jan 1 00:10:27 notice openvpn[10588]: Socket Buffers: R=[110592->131072] S=[110592->131072]
Jan 1 00:10:27 notice openvpn[10588]: UDPv4 link local: [undef]
Jan 1 00:10:27 notice openvpn[10588]: UDPv4 link remote: 151.80.135.246:8000
Jan 1 00:10:27 notice openvpn[10588]: TLS: Initial packet from 151.80.135.246:8000, sid=6063d2b5 45c69ad1
Jan 1 00:10:28 err openvpn[10588]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Jan 1 00:10:28 err openvpn[10588]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Jan 1 00:10:28 err openvpn[10588]: TLS Error: TLS object -> incoming plaintext read error
Jan 1 00:10:28 err openvpn[10588]: TLS Error: TLS handshake failed
Jan 1 00:10:28 notice openvpn[10588]: TCP/UDP: Closing socket
Jan 1 00:10:28 notice openvpn[10588]: SIGUSR1[soft,tls-error] received, process restarting
Jan 1 00:10:28 notice openvpn[10588]: Restart pause, 2 second(s)
Jan 1 00:10:30 warn openvpn[10588]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jan 1 00:10:30 notice openvpn[10588]: LZO compression initialized
Jan 1 00:10:30 notice openvpn[10588]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jan 1 00:10:30 notice openvpn[10588]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 1 00:10:30 notice openvpn[10588]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Jan 1 00:10:30 notice openvpn[10588]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Jan 1 00:10:30 notice openvpn[10588]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Jan 1 00:10:30 notice openvpn[10588]: Local Options hash (VER=V4): 'f9450516'
Jan 1 00:10:30 notice openvpn[10588]: Expected Remote Options hash (VER=V4): '48dabfaa'
Jan 1 00:10:30 notice openvpn[10588]: Socket Buffers: R=[110592->131072] S=[110592->131072]
Jan 1 00:10:30 notice openvpn[10588]: UDPv4 link local: [undef]
Jan 1 00:10:30 notice openvpn[10588]: UDPv4 link remote: 151.80.135.246:8000
Jan 1 00:10:30 notice openvpn[10588]: TLS: Initial packet from 151.80.135.246:8000, sid=dce50b01 62ef647b
Jan 1 00:10:30 err openvpn[10588]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Jan 1 00:10:30 err openvpn[10588]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Jan 1 00:10:30 err openvpn[10588]: TLS Error: TLS object -> incoming plaintext read error
Jan 1 00:10:30 err openvpn[10588]: TLS Error: TLS handshake failed
Jan 1 00:10:30 notice openvpn[10588]: TCP/UDP: Closing socket
Jan 1 00:10:30 notice openvpn[10588]: SIGUSR1[soft,tls-error] received, process restarting
Jan 1 00:10:30 notice openvpn[10588]: Restart pause, 2 second(s)
Jan 1 00:10:32 warn openvpn[10588]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jan 1 00:10:32 notice openvpn[10588]: LZO compression initialized
Jan 1 00:10:32 notice openvpn[10588]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jan 1 00:10:33 notice openvpn[10588]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 1 00:10:33 notice openvpn[10588]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Jan 1 00:10:33 notice openvpn[10588]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Jan 1 00:10:33 notice openvpn[10588]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Jan 1 00:10:33 notice openvpn[10588]: Local Options hash (VER=V4): 'f9450516'
Jan 1 00:10:33 notice openvpn[10588]: Expected Remote Options hash (VER=V4): '48dabfaa'
Jan 1 00:10:33 notice openvpn[10588]: Socket Buffers: R=[110592->131072] S=[110592->131072]
Jan 1 00:10:33 notice openvpn[10588]: UDPv4 link local: [undef]
Jan 1 00:10:33 notice openvpn[10588]: UDPv4 link remote: 151.80.135.246:8000
Jan 1 00:10:33 notice openvpn[10588]: TLS: Initial packet from 151.80.135.246:8000, sid=68381674 0334674c
Jan 1 00:10:33 err openvpn[10588]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Jan 1 00:10:33 err openvpn[10588]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Jan 1 00:10:33 err openvpn[10588]: TLS Error: TLS object -> incoming plaintext read error
Jan 1 00:10:33 err openvpn[10588]: TLS Error: TLS handshake failed
Jan 1 00:10:33 notice openvpn[10588]: TCP/UDP: Closing socket
Jan 1 00:10:33 notice openvpn[10588]: SIGUSR1[soft,tls-error] received, process restarting
Jan 1 00:10:33 notice openvpn[10588]: Restart pause, 2 second(s)
Jan 1 00:10:35 warn openvpn[10588]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jan 1 00:10:35 notice openvpn[10588]: LZO compression initialized
Jan 1 00:10:35 notice openvpn[10588]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jan 1 00:10:35 notice openvpn[10588]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 1 00:10:35 notice openvpn[10588]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Jan 1 00:10:35 notice openvpn[10588]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Jan 1 00:10:35 notice openvpn[10588]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Jan 1 00:10:35 notice openvpn[10588]: Local Options hash (VER=V4): 'f9450516'
Jan 1 00:10:35 notice openvpn[10588]: Expected Remote Options hash (VER=V4): '48dabfaa'
Jan 1 00:10:35 notice openvpn[10588]: Socket Buffers: R=[110592->131072] S=[110592->131072]
Jan 1 00:10:35 notice openvpn[10588]: UDPv4 link local: [undef]
Jan 1 00:10:35 notice openvpn[10588]: UDPv4 link remote: 151.80.135.246:8000
Jan 1 00:10:35 notice openvpn[10588]: TLS: Initial packet from 151.80.135.246:8000, sid=8d7b9200 35c361fb
Jan 1 00:10:36 err openvpn[10588]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Jan 1 00:10:36 err openvpn[10588]: TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Jan 1 00:10:36 err openvpn[10588]: TLS Error: TLS object -> incoming plaintext read error
Jan 1 00:10:36 err openvpn[10588]: TLS Error: TLS handshake failed
Jan 1 00:10:36 notice openvpn[10588]: TCP/UDP: Closing socket
Jan 1 00:10:36 notice openvpn[10588]: SIGUSR1[soft,tls-error] received, process restarting
Jan 1 00:10:36 notice openvpn[10588]: Restart pause, 2 second(s)
Jan 1 00:10:38 warn openvpn[10588]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Jan 1 00:10:38 notice openvpn[10588]: LZO compression initialized
Jan 1 00:10:38 notice openvpn[10588]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Jan 1 00:10:38 notice openvpn[10588]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Jan 1 00:10:38 notice openvpn[10588]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Jan 1 00:10:38 notice openvpn[10588]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Jan 1 00:10:38 notice openvpn[10588]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Jan 1 00:10:38 notice openvpn[10588]: Local Options hash (VER=V4): 'f9450516'
Jan 1 00:10:38 notice openvpn[10588]: Expected Remote Options hash (VER=V4): '48dabfaa'

About the NAT device, I have no idea, I use a VPS of OVH for the server.

Thank for your help.

maikcat

Jan 1 00:10:36 err openvpn[10588]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=FR/ST=FR/L=Belley/O=Geral/OU=changem ... ost.domain

do you using the SAME ca.crt on both devices?
how did you generated your certs?

Michael.

linko

Normally, yes, I use the same ca.crt, I have check.
I use the easy-rsa method:

. ./vars
./clean-all
./build-ca
./build-key-server server
./build-key client
./build-dh

cp /etc/openvpn/easy-rsa/keys/ca.crt /etc/openvpn/keys/
cp /etc/openvpn/easy-rsa/keys/server.crt /etc/openvpn/keys/
cp /etc/openvpn/easy-rsa/keys/server.key /etc/openvpn/keys/
cp /etc/openvpn/easy-rsa/keys/dh1024.pem /etc/openvpn/keys/

And I download the files for the client by ssh.
I a try to remake all the files and remove the old one before but it's still doesn't work ...

maikcat

oops i missed this...

Jan 1 00:10:36 err openvpn[10588]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: /C=FR/ST=FR/L=Belley/O=Geral/OU=changem ... ost.domain

Jan 1???????

correct your time please.

Michael.

linko

Ok, I try anb I tell, thank you

linko

Time was indeed the problem, thanks but I have others error in the log:

Apr 14 06:59:56 notice openvpn[10086]: Current Parameter Settings:
Apr 14 06:59:56 notice openvpn[10086]: config = '/tmp/openvpn/openvpn.conf'
Apr 14 06:59:56 notice openvpn[10086]: mode = 0
Apr 14 06:59:56 notice openvpn[10086]: persist_config = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: persist_mode = 1
Apr 14 06:59:56 notice openvpn[10086]: show_ciphers = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: show_digests = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: show_engines = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: genkey = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: key_pass_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: show_tls_ciphers = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: Connection profiles [default]:
Apr 14 06:59:56 notice openvpn[10086]: proto = udp
Apr 14 06:59:56 notice openvpn[10086]: local = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: local_port = 0
Apr 14 06:59:56 notice openvpn[10086]: remote = '151.80.135.246'
Apr 14 06:59:56 notice openvpn[10086]: remote_port = 8000
Apr 14 06:59:56 notice openvpn[10086]: remote_float = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: bind_defined = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: bind_local = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: connect_retry_seconds = 5
Apr 14 06:59:56 notice openvpn[10086]: connect_timeout = 10
Apr 14 06:59:56 notice openvpn[10086]: connect_retry_max = 0
Apr 14 06:59:56 notice openvpn[10086]: socks_proxy_server = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: socks_proxy_port = 0
Apr 14 06:59:56 notice openvpn[10086]: socks_proxy_retry = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: Connection profiles END
Apr 14 06:59:56 notice openvpn[10086]: remote_random = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: ipchange = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: dev = 'tun'
Apr 14 06:59:56 notice openvpn[10086]: dev_type = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: dev_node = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: lladdr = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: topology = 1
Apr 14 06:59:56 notice openvpn[10086]: tun_ipv6 = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: ifconfig_local = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: ifconfig_remote_netmask = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: ifconfig_noexec = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: ifconfig_nowarn = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: shaper = 0
Apr 14 06:59:56 notice openvpn[10086]: tun_mtu = 1500
Apr 14 06:59:56 notice openvpn[10086]: tun_mtu_defined = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: link_mtu = 1500
Apr 14 06:59:56 notice openvpn[10086]: link_mtu_defined = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: tun_mtu_extra = 0
Apr 14 06:59:56 notice openvpn[10086]: tun_mtu_extra_defined = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: fragment = 1300
Apr 14 06:59:56 notice openvpn[10086]: mtu_discover_type = -1
Apr 14 06:59:56 notice openvpn[10086]: mtu_test = 0
Apr 14 06:59:56 notice openvpn[10086]: mlock = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: keepalive_ping = 0
Apr 14 06:59:56 notice openvpn[10086]: keepalive_timeout = 0
Apr 14 06:59:56 notice openvpn[10086]: inactivity_timeout = 0
Apr 14 06:59:56 notice openvpn[10086]: ping_send_timeout = 600
Apr 14 06:59:56 notice openvpn[10086]: ping_rec_timeout = 1800
Apr 14 06:59:56 notice openvpn[10086]: ping_rec_timeout_action = 2
Apr 14 06:59:56 notice openvpn[10086]: ping_timer_remote = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: remap_sigusr1 = 0
Apr 14 06:59:56 notice openvpn[10086]: explicit_exit_notification = 2
Apr 14 06:59:56 notice openvpn[10086]: persist_tun = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: persist_local_ip = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: persist_remote_ip = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: persist_key = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: mssfix = 1400
Apr 14 06:59:56 notice openvpn[10086]: passtos = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: resolve_retry_seconds = 1000000000
Apr 14 06:59:56 notice openvpn[10086]: username = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: groupname = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: chroot_dir = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: cd_dir = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: writepid = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: up_script = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: down_script = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: down_pre = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: up_restart = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: up_delay = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: daemon = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: inetd = 0
Apr 14 06:59:56 notice openvpn[10086]: log = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: suppress_timestamps = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: nice = 0
Apr 14 06:59:56 notice openvpn[10086]: verbosity = 4
Apr 14 06:59:56 notice openvpn[10086]: mute = 0
Apr 14 06:59:56 notice openvpn[10086]: gremlin = 0
Apr 14 06:59:56 notice openvpn[10086]: status_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: status_file_version = 1
Apr 14 06:59:56 notice openvpn[10086]: status_file_update_freq = 60
Apr 14 06:59:56 notice openvpn[10086]: occ = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: rcvbuf = 65536
Apr 14 06:59:56 notice openvpn[10086]: sndbuf = 65536
Apr 14 06:59:56 notice openvpn[10086]: sockflags = 0
Apr 14 06:59:56 notice openvpn[10086]: fast_io = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: lzo = 7
Apr 14 06:59:56 notice openvpn[10086]: route_script = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: route_default_gateway = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: route_default_metric = 0
Apr 14 06:59:56 notice openvpn[10086]: route_noexec = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: route_delay = 0
Apr 14 06:59:56 notice openvpn[10086]: route_delay_window = 30
Apr 14 06:59:56 notice openvpn[10086]: route_delay_defined = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: route_nopull = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: route_gateway_via_dhcp = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: max_routes = 100
Apr 14 06:59:56 notice openvpn[10086]: allow_pull_fqdn = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: management_addr = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: management_port = 0
Apr 14 06:59:56 notice openvpn[10086]: management_user_pass = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: management_log_history_cache = 250
Apr 14 06:59:56 notice openvpn[10086]: management_echo_buffer_size = 100
Apr 14 06:59:56 notice openvpn[10086]: management_write_peer_info_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: management_client_user = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: management_client_group = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: management_flags = 0
Apr 14 06:59:56 notice openvpn[10086]: shared_secret_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: key_direction = 0
Apr 14 06:59:56 notice openvpn[10086]: ciphername_defined = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: ciphername = 'BF-CBC'
Apr 14 06:59:56 notice openvpn[10086]: authname_defined = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: authname = 'md5'
Apr 14 06:59:56 notice openvpn[10086]: prng_hash = 'SHA1'
Apr 14 06:59:56 notice openvpn[10086]: prng_nonce_secret_len = 16
Apr 14 06:59:56 notice openvpn[10086]: keysize = 0
Apr 14 06:59:56 notice openvpn[10086]: engine = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: replay = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: mute_replay_warnings = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: replay_window = 64
Apr 14 06:59:56 notice openvpn[10086]: replay_time = 15
Apr 14 06:59:56 notice openvpn[10086]: packet_id_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: use_iv = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: test_crypto = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: tls_server = DISABLED
Apr 14 06:59:56 notice openvpn[10086]: tls_client = ENABLED
Apr 14 06:59:56 notice openvpn[10086]: key_method = 2
Apr 14 06:59:56 notice openvpn[10086]: ca_file = '/mnt/hda1/Altemp/ca.crt'
Apr 14 06:59:56 notice openvpn[10086]: ca_path = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: dh_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: cert_file = '/mnt/hda1/Altemp/home.crt'
Apr 14 06:59:56 notice openvpn[10086]: priv_key_file = '/mnt/hda1/Altemp/home.key'
Apr 14 06:59:56 notice openvpn[10086]: pkcs12_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: cipher_list = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: tls_verify = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: tls_remote = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: crl_file = '[UNDEF]'
Apr 14 06:59:56 notice openvpn[10086]: ns_cert_type = 64
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku[i] = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku[i] = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku[i] = 0
Apr 14 06:59:56 notice openvpn[10086]: remote_cert_ku[i] = 0
Apr 14 06:59:57 notice openvpn[10086]: remote_cert_ku[i] = 0
Apr 14 06:59:57 notice openvpn[10086]: remote_cert_ku[i] = 0
Apr 14 06:59:57 notice openvpn[10086]: remote_cert_eku = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: tls_timeout = 2
Apr 14 06:59:57 notice openvpn[10086]: renegotiate_bytes = 0
Apr 14 06:59:57 notice openvpn[10086]: renegotiate_packets = 0
Apr 14 06:59:57 notice openvpn[10086]: renegotiate_seconds = 86400
Apr 14 06:59:57 notice openvpn[10086]: handshake_window = 60
Apr 14 06:59:57 notice openvpn[10086]: transition_window = 3600
Apr 14 06:59:57 notice openvpn[10086]: single_session = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: tls_exit = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: tls_auth_file = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: server_network = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: server_netmask = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: server_bridge_ip = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: server_bridge_netmask = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: server_bridge_pool_start = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: server_bridge_pool_end = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: ifconfig_pool_defined = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: ifconfig_pool_start = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: ifconfig_pool_end = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: ifconfig_pool_netmask = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: ifconfig_pool_persist_filename = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: ifconfig_pool_persist_refresh_freq = 600
Apr 14 06:59:57 notice openvpn[10086]: n_bcast_buf = 256
Apr 14 06:59:57 notice openvpn[10086]: tcp_queue_limit = 64
Apr 14 06:59:57 notice openvpn[10086]: real_hash_size = 256
Apr 14 06:59:57 notice openvpn[10086]: virtual_hash_size = 256
Apr 14 06:59:57 notice openvpn[10086]: client_connect_script = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: learn_address_script = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: client_disconnect_script = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: client_config_dir = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: ccd_exclusive = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: tmp_dir = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: push_ifconfig_defined = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: push_ifconfig_local = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: push_ifconfig_remote_netmask = 0.0.0.0
Apr 14 06:59:57 notice openvpn[10086]: enable_c2c = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: duplicate_cn = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: cf_max = 0
Apr 14 06:59:57 notice openvpn[10086]: cf_per = 0
Apr 14 06:59:57 notice openvpn[10086]: max_clients = 1024
Apr 14 06:59:57 notice openvpn[10086]: max_routes_per_client = 256
Apr 14 06:59:57 notice openvpn[10086]: auth_user_pass_verify_script = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: auth_user_pass_verify_script_via_file = DISABLED
Apr 14 06:59:57 notice openvpn[10086]: ssl_flags = 0
Apr 14 06:59:57 notice openvpn[10086]: port_share_host = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: port_share_port = 0
Apr 14 06:59:57 notice openvpn[10086]: client = ENABLED
Apr 14 06:59:57 notice openvpn[10086]: pull = ENABLED
Apr 14 06:59:57 notice openvpn[10086]: auth_user_pass_file = '[UNDEF]'
Apr 14 06:59:57 notice openvpn[10086]: OpenVPN 2.1.1 arm-linux [SSL] [LZO2] [EPOLL] built on Aug 12 2010
Apr 14 06:59:57 warn openvpn[10086]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Apr 14 06:59:57 notice openvpn[10086]: LZO compression initialized
Apr 14 06:59:57 notice openvpn[10086]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Apr 14 06:59:57 notice openvpn[10086]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Apr 14 06:59:57 notice openvpn[10086]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Apr 14 06:59:57 notice openvpn[10086]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Apr 14 06:59:57 notice openvpn[10086]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Apr 14 06:59:57 notice openvpn[10086]: Local Options hash (VER=V4): 'f9450516'
Apr 14 06:59:57 notice openvpn[10086]: Expected Remote Options hash (VER=V4): '48dabfaa'
Apr 14 06:59:57 notice openvpn[10089]: Socket Buffers: R=[110592->131072] S=[110592->131072]
Apr 14 06:59:57 notice openvpn[10089]: UDPv4 link local: [undef]
Apr 14 06:59:57 notice openvpn[10089]: UDPv4 link remote: 151.80.135.246:8000
Apr 14 07:00:00 notice openvpn[10089]: TLS: Initial packet from 151.80.135.246:8000, sid=f365cb1f 3266d6a5
Apr 14 07:00:01 notice openvpn[10089]: VERIFY OK: depth=1, /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Apr 14 07:00:01 notice openvpn[10089]: VERIFY OK: nsCertType=SERVER
Apr 14 07:00:01 notice openvpn[10089]: VERIFY OK: depth=0, /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=serveur/name=changeme/emailAddress=mail@host.domain
Apr 14 07:00:02 err msntp: unable to locate IP address/number
Apr 14 07:00:02 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:00:03 notice openvpn[10089]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Apr 14 07:00:03 notice openvpn[10089]: Data Channel Encrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Apr 14 07:00:03 notice openvpn[10089]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Apr 14 07:00:03 notice openvpn[10089]: Data Channel Decrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Apr 14 07:00:03 notice openvpn[10089]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Apr 14 07:00:03 notice openvpn[10089]: [serveur] Peer Connection Initiated with 151.80.135.246:8000
Apr 14 07:00:06 notice openvpn[10089]: SENT CONTROL [serveur]: 'PUSH_REQUEST' (status=1)
Apr 14 07:00:06 notice openvpn[10089]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,explicit-exit-notify 3,route 10.8.0.1,topology net30,ping 600,ping-restart 1800,ifconfig 10.8.0.6 10.8.0.5'
Apr 14 07:00:06 err openvpn[10089]: Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:8: 8.0.5 (2.1.1)
Apr 14 07:00:06 notice openvpn[10089]: OPTIONS IMPORT: timers and/or timeouts modified
Apr 14 07:00:06 notice openvpn[10089]: OPTIONS IMPORT: explicit notify parm(s) modified
Apr 14 07:00:06 notice openvpn[10089]: OPTIONS IMPORT: --ifconfig/up options modified
Apr 14 07:00:06 notice openvpn[10089]: OPTIONS IMPORT: route options modified
Apr 14 07:00:06 notice openvpn[10089]: ROUTE default_gateway=10.222.64.118
Apr 14 07:00:06 notice openvpn[10089]: TUN/TAP device tun0 opened
Apr 14 07:00:06 notice openvpn[10089]: TUN/TAP TX queue length set to 100
Apr 14 07:00:06 notice openvpn[10089]: /sbin/ifconfig tun0 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Apr 14 07:00:06 info dnsmasq[4041]: reading /etc/resolv.conf
Apr 14 07:00:06 info dnsmasq[4041]: using nameserver 172.20.2.39#53
Apr 14 07:00:06 info dnsmasq[4041]: using nameserver 172.20.2.10#53
Apr 14 07:00:06 info dnsmasq[4041]: read /etc/hosts - 1 addresses
Apr 14 07:00:06 notice openvpn[10089]: /sbin/route add -net 192.168.1.0 netmask 255.255.255.0 gw 10.8.0.5
Apr 14 07:00:06 notice openvpn[10089]: /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5
Apr 14 07:00:06 notice openvpn[10089]: Initialization Sequence Completed
Apr 14 07:00:12 err msntp: unable to locate IP address/number
Apr 14 07:00:12 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:00:22 err msntp: unable to locate IP address/number
Apr 14 07:00:22 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:00:32 err msntp: unable to locate IP address/number
Apr 14 07:00:32 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:00:42 err msntp: unable to locate IP address/number
Apr 14 07:00:42 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:00:52 err msntp: unable to locate IP address/number
Apr 14 07:00:52 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:01:03 err msntp: unable to locate IP address/number
Apr 14 07:01:03 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:01:13 err msntp: unable to locate IP address/number
Apr 14 07:01:13 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:01:23 err msntp: unable to locate IP address/number
Apr 14 07:01:23 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:01:33 err msntp: unable to locate IP address/number
Apr 14 07:01:33 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:01:43 err msntp: unable to locate IP address/number
Apr 14 07:01:43 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:01:53 err msntp: unable to locate IP address/number
Apr 14 07:01:53 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:02:03 err msntp: unable to locate IP address/number
Apr 14 07:02:03 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:02:13 err msntp: unable to locate IP address/number
Apr 14 07:02:13 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:02:23 err msntp: unable to locate IP address/number
Apr 14 07:02:23 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:02:31 info dnsmasq-dhcp[4041]: DHCPREQUEST(uap0) 192.168.17.101 34:de:1a:0c:fd:aa
Apr 14 07:02:31 info dnsmasq-dhcp[4041]: DHCPACK(uap0) 192.168.17.101 34:de:1a:0c:fd:aa MSI
Apr 14 07:02:33 err msntp: unable to locate IP address/number
Apr 14 07:02:33 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:02:43 err msntp: unable to locate IP address/number
Apr 14 07:02:43 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:02:53 err msntp: unable to locate IP address/number
Apr 14 07:02:53 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:02:58 info dnsmasq-dhcp[4041]: DHCPREQUEST(uap0) 192.168.55.101 d8:50:e6:87:c6:34
Apr 14 07:02:58 info dnsmasq-dhcp[4041]: DHCPNAK(uap0) 192.168.55.101 d8:50:e6:87:c6:34 wrong network
Apr 14 07:03:02 info dnsmasq-dhcp[4041]: DHCPDISCOVER(uap0) d8:50:e6:87:c6:34
Apr 14 07:03:02 info dnsmasq-dhcp[4041]: DHCPOFFER(uap0) 192.168.17.100 d8:50:e6:87:c6:34
Apr 14 07:03:02 info dnsmasq-dhcp[4041]: DHCPREQUEST(uap0) 192.168.17.100 d8:50:e6:87:c6:34
Apr 14 07:03:02 info dnsmasq-dhcp[4041]: DHCPACK(uap0) 192.168.17.100 d8:50:e6:87:c6:34 android-beff6805dcd43ff8
Apr 14 07:03:03 err msntp: unable to locate IP address/number
Apr 14 07:03:03 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:03:13 err msntp: unable to locate IP address/number
Apr 14 07:03:13 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:03:23 err msntp: unable to locate IP address/number
Apr 14 07:03:23 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:03:33 err msntp: unable to locate IP address/number
Apr 14 07:03:33 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:03:43 err msntp: unable to locate IP address/number
Apr 14 07:03:43 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:03:53 err msntp: unable to locate IP address/number
Apr 14 07:03:53 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:04:03 err msntp: unable to locate IP address/number
Apr 14 07:04:03 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:04:13 err msntp: unable to locate IP address/number
Apr 14 07:04:13 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:04:23 err msntp: unable to locate IP address/number
Apr 14 07:04:23 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:04:33 err msntp: unable to locate IP address/number
Apr 14 07:04:33 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:04:43 err msntp: unable to locate IP address/number
Apr 14 07:04:43 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:04:53 err msntp: unable to locate IP address/number
Apr 14 07:04:53 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:05:03 err msntp: unable to locate IP address/number
Apr 14 07:05:03 err msntp: errno 11 - Resource temporarily unavailable
Apr 14 07:05:13 err msntp: unable to locate IP address/number

Have you any idea ?

Traffic

Hi,

not really sure what the problem you are having is but some things for you to verify:

linko wroteOpenVPN 2.1.1 arm-linux [SSL] [LZO2] [EPOLL] built on Aug 12 2010

I should thick this needs to be bought up to date ..

Server config:

linko wroteclient-config-dir ccd

What is in your client-config-dir files ?

linko wroteroute 192.168.13.0 255.255.255.0
push “route 192.168.1.0 255.255.255.0”

are you sure you are pushing the right route ?

linko

Hi,

OpenVPN 2.1.1 arm-linux [SSL] [LZO2] [EPOLL] built on Aug 12 2010
I should thick this needs to be bought up to date ..

I can't, I try to update the firmware but I still have the same version.

About client-config-dit files:
client1:

iroute 192.168.13.0 255.255.255.0

I have change the server.conf:

route 192.168.13.0 255.255.255.0
push “route 192.168.13.0 255.255.255.0”

Know I have the following message in the log of the client:

Apr 15 06:14:11 notice openvpn[9969]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.13.0 255.255.255.0,explicit-exit-notify 3,route 10.8.0.1,topology net30,ping 600,ping-restart 1800,ifconfig 10.8.0.6 10.8.0.5'
Apr 15 06:14:11 err openvpn[9969]: Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:8: 8.0.5 (2.1.1)

Thank you for your help.

maikcat

route 192.168.13.0 255.255.255.0
push “route 192.168.13.0 255.255.255.0”

just curious...

what kind of " are you using? :roll:

can you write it as:

push "route 192.168.13.0 255.255.255.0"

i know it sounds silly....

Michael.

linko

I check and I rewrite the file with the good "

push "route 192.168.13.0 255.255.255.0"

Now I don't have the error about the options error, the client is connected but I can't ping the IP adress of the serveur (10.8.0.1) and I still have the IP of the router, not the server adress.
Just in case I give you the log of the client :

Apr 15 11:54:57 notice openvpn[9963]: Current Parameter Settings:
Apr 15 11:54:57 notice openvpn[9963]:   config = '/tmp/openvpn/openvpn.conf'
Apr 15 11:54:57 notice openvpn[9963]:   mode = 0
Apr 15 11:54:57 notice openvpn[9963]:   persist_config = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   persist_mode = 1
Apr 15 11:54:57 notice openvpn[9963]:   show_ciphers = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   show_digests = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   show_engines = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   genkey = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   key_pass_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   show_tls_ciphers = DISABLED
Apr 15 11:54:57 notice openvpn[9963]: Connection profiles [default]:
Apr 15 11:54:57 notice openvpn[9963]:   proto = udp
Apr 15 11:54:57 notice openvpn[9963]:   local = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   local_port = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote = '151.80.135.246'
Apr 15 11:54:57 notice openvpn[9963]:   remote_port = 8000
Apr 15 11:54:57 notice openvpn[9963]:   remote_float = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   bind_defined = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   bind_local = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   connect_retry_seconds = 5
Apr 15 11:54:57 notice openvpn[9963]:   connect_timeout = 10
Apr 15 11:54:57 notice openvpn[9963]:   connect_retry_max = 0
Apr 15 11:54:57 notice openvpn[9963]:   socks_proxy_server = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   socks_proxy_port = 0
Apr 15 11:54:57 notice openvpn[9963]:   socks_proxy_retry = DISABLED
Apr 15 11:54:57 notice openvpn[9963]: Connection profiles END
Apr 15 11:54:57 notice openvpn[9963]:   remote_random = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   ipchange = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   dev = 'tun'
Apr 15 11:54:57 notice openvpn[9963]:   dev_type = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   dev_node = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   lladdr = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   topology = 1
Apr 15 11:54:57 notice openvpn[9963]:   tun_ipv6 = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_local = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_remote_netmask = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_noexec = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_nowarn = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   shaper = 0
Apr 15 11:54:57 notice openvpn[9963]:   tun_mtu = 1500
Apr 15 11:54:57 notice openvpn[9963]:   tun_mtu_defined = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   link_mtu = 1500
Apr 15 11:54:57 notice openvpn[9963]:   link_mtu_defined = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   tun_mtu_extra = 0
Apr 15 11:54:57 notice openvpn[9963]:   tun_mtu_extra_defined = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   fragment = 1300
Apr 15 11:54:57 notice openvpn[9963]:   mtu_discover_type = -1
Apr 15 11:54:57 notice openvpn[9963]:   mtu_test = 0
Apr 15 11:54:57 notice openvpn[9963]:   mlock = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   keepalive_ping = 0
Apr 15 11:54:57 notice openvpn[9963]:   keepalive_timeout = 0
Apr 15 11:54:57 notice openvpn[9963]:   inactivity_timeout = 0
Apr 15 11:54:57 notice openvpn[9963]:   ping_send_timeout = 600
Apr 15 11:54:57 notice openvpn[9963]:   ping_rec_timeout = 1800
Apr 15 11:54:57 notice openvpn[9963]:   ping_rec_timeout_action = 2
Apr 15 11:54:57 notice openvpn[9963]:   ping_timer_remote = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   remap_sigusr1 = 0
Apr 15 11:54:57 notice openvpn[9963]:   explicit_exit_notification = 2
Apr 15 11:54:57 notice openvpn[9963]:   persist_tun = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   persist_local_ip = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   persist_remote_ip = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   persist_key = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   mssfix = 1400
Apr 15 11:54:57 notice openvpn[9963]:   passtos = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   resolve_retry_seconds = 1000000000
Apr 15 11:54:57 notice openvpn[9963]:   username = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   groupname = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   chroot_dir = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   cd_dir = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   writepid = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   up_script = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   down_script = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   down_pre = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   up_restart = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   up_delay = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   daemon = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   inetd = 0
Apr 15 11:54:57 notice openvpn[9963]:   log = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   suppress_timestamps = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   nice = 0
Apr 15 11:54:57 notice openvpn[9963]:   verbosity = 4
Apr 15 11:54:57 notice openvpn[9963]:   mute = 0
Apr 15 11:54:57 notice openvpn[9963]:   gremlin = 0
Apr 15 11:54:57 notice openvpn[9963]:   status_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   status_file_version = 1
Apr 15 11:54:57 notice openvpn[9963]:   status_file_update_freq = 60
Apr 15 11:54:57 notice openvpn[9963]:   occ = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   rcvbuf = 65536
Apr 15 11:54:57 notice openvpn[9963]:   sndbuf = 65536
Apr 15 11:54:57 notice openvpn[9963]:   sockflags = 0
Apr 15 11:54:57 notice openvpn[9963]:   fast_io = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   lzo = 7
Apr 15 11:54:57 notice openvpn[9963]:   route_script = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   route_default_gateway = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   route_default_metric = 0
Apr 15 11:54:57 notice openvpn[9963]:   route_noexec = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   route_delay = 0
Apr 15 11:54:57 notice openvpn[9963]:   route_delay_window = 30
Apr 15 11:54:57 notice openvpn[9963]:   route_delay_defined = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   route_nopull = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   route_gateway_via_dhcp = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   max_routes = 100
Apr 15 11:54:57 notice openvpn[9963]:   allow_pull_fqdn = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   management_addr = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   management_port = 0
Apr 15 11:54:57 notice openvpn[9963]:   management_user_pass = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   management_log_history_cache = 250
Apr 15 11:54:57 notice openvpn[9963]:   management_echo_buffer_size = 100
Apr 15 11:54:57 notice openvpn[9963]:   management_write_peer_info_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   management_client_user = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   management_client_group = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   management_flags = 0
Apr 15 11:54:57 notice openvpn[9963]:   shared_secret_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   key_direction = 0
Apr 15 11:54:57 notice openvpn[9963]:   ciphername_defined = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   ciphername = 'BF-CBC'
Apr 15 11:54:57 notice openvpn[9963]:   authname_defined = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   authname = 'md5'
Apr 15 11:54:57 notice openvpn[9963]:   prng_hash = 'SHA1'
Apr 15 11:54:57 notice openvpn[9963]:   prng_nonce_secret_len = 16
Apr 15 11:54:57 notice openvpn[9963]:   keysize = 0
Apr 15 11:54:57 notice openvpn[9963]:   engine = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   replay = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   mute_replay_warnings = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   replay_window = 64
Apr 15 11:54:57 notice openvpn[9963]:   replay_time = 15
Apr 15 11:54:57 notice openvpn[9963]:   packet_id_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   use_iv = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   test_crypto = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   tls_server = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   tls_client = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   key_method = 2
Apr 15 11:54:57 notice openvpn[9963]:   ca_file = '/mnt/hda1/Altemp/ca.crt'
Apr 15 11:54:57 notice openvpn[9963]:   ca_path = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   dh_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   cert_file = '/mnt/hda1/Altemp/home.crt'
Apr 15 11:54:57 notice openvpn[9963]:   priv_key_file = '/mnt/hda1/Altemp/home.key'
Apr 15 11:54:57 notice openvpn[9963]:   pkcs12_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   cipher_list = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   tls_verify = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   tls_remote = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   crl_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   ns_cert_type = 64
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_ku[i] = 0
Apr 15 11:54:57 notice openvpn[9963]:   remote_cert_eku = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   tls_timeout = 2
Apr 15 11:54:57 notice openvpn[9963]:   renegotiate_bytes = 0
Apr 15 11:54:57 notice openvpn[9963]:   renegotiate_packets = 0
Apr 15 11:54:57 notice openvpn[9963]:   renegotiate_seconds = 86400
Apr 15 11:54:57 notice openvpn[9963]:   handshake_window = 60
Apr 15 11:54:57 notice openvpn[9963]:   transition_window = 3600
Apr 15 11:54:57 notice openvpn[9963]:   single_session = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   tls_exit = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   tls_auth_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   server_network = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   server_netmask = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   server_bridge_ip = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   server_bridge_netmask = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   server_bridge_pool_start = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   server_bridge_pool_end = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_pool_defined = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_pool_start = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_pool_end = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_pool_netmask = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_pool_persist_filename = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   ifconfig_pool_persist_refresh_freq = 600
Apr 15 11:54:57 notice openvpn[9963]:   n_bcast_buf = 256
Apr 15 11:54:57 notice openvpn[9963]:   tcp_queue_limit = 64
Apr 15 11:54:57 notice openvpn[9963]:   real_hash_size = 256
Apr 15 11:54:57 notice openvpn[9963]:   virtual_hash_size = 256
Apr 15 11:54:57 notice openvpn[9963]:   client_connect_script = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   learn_address_script = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   client_disconnect_script = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   client_config_dir = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   ccd_exclusive = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   tmp_dir = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   push_ifconfig_defined = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   push_ifconfig_local = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   push_ifconfig_remote_netmask = 0.0.0.0
Apr 15 11:54:57 notice openvpn[9963]:   enable_c2c = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   duplicate_cn = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   cf_max = 0
Apr 15 11:54:57 notice openvpn[9963]:   cf_per = 0
Apr 15 11:54:57 notice openvpn[9963]:   max_clients = 1024
Apr 15 11:54:57 notice openvpn[9963]:   max_routes_per_client = 256
Apr 15 11:54:57 notice openvpn[9963]:   auth_user_pass_verify_script = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   auth_user_pass_verify_script_via_file = DISABLED
Apr 15 11:54:57 notice openvpn[9963]:   ssl_flags = 0
Apr 15 11:54:57 notice openvpn[9963]:   port_share_host = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]:   port_share_port = 0
Apr 15 11:54:57 notice openvpn[9963]:   client = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   pull = ENABLED
Apr 15 11:54:57 notice openvpn[9963]:   auth_user_pass_file = '[UNDEF]'
Apr 15 11:54:57 notice openvpn[9963]: OpenVPN 2.1.1 arm-linux [SSL] [LZO2] [EPOLL] built on Aug 12 2010
Apr 15 11:54:57 warn openvpn[9963]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Apr 15 11:54:57 notice openvpn[9963]: LZO compression initialized
Apr 15 11:54:57 notice openvpn[9963]: Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Apr 15 11:54:57 notice openvpn[9963]: Data Channel MTU parms [ L:1542 D:1400 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Apr 15 11:54:57 notice openvpn[9963]: Fragmentation MTU parms [ L:1542 D:1300 EF:41 EB:135 ET:1 EL:0 AF:3/1 ]
Apr 15 11:54:57 notice openvpn[9963]: Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-client'
Apr 15 11:54:57 notice openvpn[9963]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher BF-CBC,auth MD5,keysize 128,key-method 2,tls-server'
Apr 15 11:54:57 notice openvpn[9963]: Local Options hash (VER=V4): 'f9450516'
Apr 15 11:54:57 notice openvpn[9963]: Expected Remote Options hash (VER=V4): '48dabfaa'
Apr 15 11:54:57 notice openvpn[9964]: Socket Buffers: R=[112640->131072] S=[112640->131072]
Apr 15 11:54:57 notice openvpn[9964]: UDPv4 link local: [undef]
Apr 15 11:54:57 notice openvpn[9964]: UDPv4 link remote: 151.80.135.246:8000
Apr 15 11:54:57 notice openvpn[9964]: TLS: Initial packet from 151.80.135.246:8000, sid=4b512d2c f4c769ad
Apr 15 11:55:00 notice openvpn[9964]: VERIFY OK: depth=1, /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
Apr 15 11:55:00 notice openvpn[9964]: VERIFY OK: nsCertType=SERVER
Apr 15 11:55:00 notice openvpn[9964]: VERIFY OK: depth=0, /C=FR/ST=FR/L=Belley/O=Geral/OU=changeme/CN=serveur/name=changeme/emailAddress=mail@host.domain
Apr 15 11:55:03 notice openvpn[9964]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Apr 15 11:55:03 notice openvpn[9964]: Data Channel Encrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Apr 15 11:55:03 notice openvpn[9964]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Apr 15 11:55:03 notice openvpn[9964]: Data Channel Decrypt: Using 128 bit message hash 'MD5' for HMAC authentication
Apr 15 11:55:03 notice openvpn[9964]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Apr 15 11:55:03 notice openvpn[9964]: [serveur] Peer Connection Initiated with 151.80.135.246:8000
Apr 15 11:55:05 notice openvpn[9964]: SENT CONTROL [serveur]: 'PUSH_REQUEST' (status=1)
Apr 15 11:55:06 notice openvpn[9964]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.13.0 255.255.255.0,explicit-exit-notify 3,route 10.8.0.1,topology net30,ping 600,ping-restart 1800,ifconfig 10.8.0.6 10.8.0.5'
Apr 15 11:55:06 notice openvpn[9964]: OPTIONS IMPORT: timers and/or timeouts modified
Apr 15 11:55:06 notice openvpn[9964]: OPTIONS IMPORT: explicit notify parm(s) modified
Apr 15 11:55:06 notice openvpn[9964]: OPTIONS IMPORT: --ifconfig/up options modified
Apr 15 11:55:06 notice openvpn[9964]: OPTIONS IMPORT: route options modified
Apr 15 11:55:06 notice openvpn[9964]: ROUTE default_gateway=10.240.57.173
Apr 15 11:55:06 notice openvpn[9964]: TUN/TAP device tun0 opened
Apr 15 11:55:06 notice openvpn[9964]: TUN/TAP TX queue length set to 100
Apr 15 11:55:06 notice openvpn[9964]: /sbin/ifconfig tun0 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
Apr 15 11:55:06 notice openvpn[9964]: /sbin/route add -net 192.168.13.0 netmask 255.255.255.0 gw 10.8.0.5
Apr 15 11:55:06 notice openvpn[9964]: /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5
Apr 15 11:55:06 notice openvpn[9964]: Initialization Sequence Completed

Tanks.

maikcat

is your openvpn server has any firewall running?

Michael.

linko

No firewall, I have deleted all the rules in case.

maikcat

can you ping repost your current used configs? (client/server)

also please post the output of

netstat -nr

after vpn is up on both ends please..

Michael.

linko

Server config :

port 8000
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/serveur.crt
key /etc/openvpn/keys/serveur.key 
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
client-config-dir ccd
route 192.168.13.0 255.255.255.0
push "route 192.168.13.0 255.255.255.0"
ifconfig-pool-persist ipp.txt
keepalive 600 1800
cipher BF-CBC
comp-lzo
auth MD5
tun-mtu 1500
fragment 1300
mssfix 1400
persist-key
persist-tun
status openvpn-status.log
verb 4
push "explicit-exit-notify 3"

Client config:

Output of netstat -nr:

Table de routage IP du noyau
Destination     Passerelle      Genmask         Indic   MSS Fenêtre irtt Iface
10.8.0.2        0.0.0.0         255.255.255.255 UH        0 0          0 tun0
151.80.135.0    0.0.0.0         255.255.255.0   U         0 0          0 venet0
10.8.0.0        10.8.0.2        255.255.255.0   UG        0 0          0 tun0
192.168.13.0    10.8.0.2        255.255.255.0   UG        0 0          0 tun0
0.0.0.0         0.0.0.0         0.0.0.0         U         0 0          0 venet0

I also have the log in need.

maikcat

output of netstat -nr on your client AFTER vpn is up ?

Michael.

linko

maikcat wroteoutput of netstat -nr on your client AFTER vpn is up ?

Michael.

Yes, it is !

root@vps156591:~# netstat -nr
Table de routage IP du noyau
Destination     Passerelle      Genmask         Indic   MSS Fenêtre irtt Iface
10.8.0.2        0.0.0.0         255.255.255.255 UH        0 0          0 tun0
151.80.135.0    0.0.0.0         255.255.255.0   U         0 0          0 venet0
10.8.0.0        10.8.0.2        255.255.255.0   UG        0 0          0 tun0
192.168.13.0    10.8.0.2        255.255.255.0   UG        0 0          0 tun0
0.0.0.0         0.0.0.0         0.0.0.0         U         0 0          0 venet0
root@vps156591:~# cat /etc/openvpn/openvpn-status.log
OpenVPN CLIENT LIST
Updated,Thu Apr 16 15:38:25 2015
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
client,92.90.21.177:45855,4293,5825,Thu Apr 16 15:15:15 2015
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.6,client,92.90.21.177:45855,Thu Apr 16 15:15:17 2015
GLOBAL STATS
Max bcast/mcast queue length,0
END