Dear all, I will be as comprehensive as possible:
I am using ccd files to push ip address to client tunnel endpoints.
ccd files do not appear to be accessed and pool is used instead.
file perms are 777 for ccd
------------------------------------
file perms
root@openvpn:/etc/openvpn# ls -la
total 80
drwxr-x--- 5 root root 4096 Sep 10 14:53 .
drwxr-xr-x 87 root root 4096 Sep 8 20:45 ..
-rw-r--r-- 1 root root 1834 Sep 8 14:16 ca.crt
drwxrwxrwx 2 root root 4096 Sep 10 14:46 ccd
-rwxr-x--- 1 root root 424 Sep 8 14:06 dh2048.pem
drwxr-x--- 3 root root 4096 Sep 8 14:14 easy-rsa
drwxr-xr-x 2 root root 4096 Sep 10 13:34 FSHQ
-rw------- 1 root root 46 Sep 10 14:11 ipp.txt
-rw------- 1 root root 23765 Sep 10 15:16 openvpn.log
-rw------- 1 root root 365 Sep 10 15:16 openvpn-status.log
-rwxr-x--- 1 root root 820 Sep 10 14:11 server.conf
-rw-r--r-- 1 root root 5728 Sep 8 14:16 server.crt
-rw------- 1 root root 1704 Sep 8 14:16 server.key
-rwxr-x--- 1 root root 1301 Dec 1 2014 update-resolv-conf
root@openvpn:/etc/openvpn# ls -la ccd
total 20
drwxrwxrwx 2 root root 4096 Sep 10 14:46 .
drwxr-x--- 5 root root 4096 Sep 10 14:53 ..
-rwxrwxrwx 1 root root 0 Sep 10 12:30 DEFAULT
-rwxrwxrwx 1 root root 74 Sep 10 11:55 friars_office
-rwxrwxrwx 1 root root 74 Sep 10 14:03 to_friars
-rwxrwxrwx 1 root root 74 Sep 10 14:46 to_friars2
server.conf
------------------------------------
port 1194
proto udp
dev tun0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh2048.pem
server 10.60.60.0 255.255.255.0
#
http://backreference.org/2010/05/02/controlling-client-to-client-connections-in-openvpn/
#client-to-client
#push "dhcp-option DNS 208.67.222.222"
#push "dhcp-option DNS 208.67.220.220"
push "route 192.168.88.0 255.255.255.0"
push "route 192.168.89.0 255.255.255.0"
push "route 192.168.90.0 255.255.255.0"
keepalive 1800 4000
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
max-clients 100
client-config-dir /etc/openvpn/ccd
#ifconfig-pool-persist /etc/openvpn/ipp.txt
persist-key
persist-tun
user nobody
group nogroup
#ccd-exclusive
log /etc/openvpn/openvpn.log
status /etc/openvpn/openvpn-status.log
verb 5
-----------------------------------
client ccd file
root@openvpn:/etc/openvpn/ccd# more to_friars2
ifconfig-push 10.60.60.21 255.255.255.0
iroute 192.168.70.0 255.255.255.0
-----------------------------------
client config
root@raspberrypi:/etc/openvpn/to_friars2# more to_friars2.conf
client
port 1194
remote 88.97.0.223
ca /etc/openvpn/to_friars2/ca.crt
cert /etc/openvpn/to_friars2/to_friars2.crt
key /etc/openvpn/to_friars2/to_friars2.key
cipher DES-EDE3-CBC
comp-lzo yes
dev tun1
proto udp
nobind
auth-nocache
persist-key
persist-tun
user nobody
log-append /etc/openvpn/openvpn.log
verb 5
-------------------------------
server.log
Thu Sep 10 14:59:04 2015 us=6985 MULTI: multi_create_instance called
Thu Sep 10 14:59:04 2015 us=7112 86.170.37.20:52438 Re-using SSL/TLS context
Thu Sep 10 14:59:04 2015 us=7224 86.170.37.20:52438 LZO compression initialized
Thu Sep 10 14:59:04 2015 us=7689 86.170.37.20:52438 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Sep 10 14:59:04 2015 us=7734 86.170.37.20:52438 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Sep 10 14:59:04 2015 us=7819 86.170.37.20:52438 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Thu Sep 10 14:59:04 2015 us=7848 86.170.37.20:52438 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Thu Sep 10 14:59:04 2015 us=7955 86.170.37.20:52438 Local Options hash (VER=V4): '974bef3f'
Thu Sep 10 14:59:04 2015 us=7991 86.170.37.20:52438 Expected Remote Options hash (VER=V4): '827c9ed0'
RThu Sep 10 14:59:04 2015 us=8065 86.170.37.20:52438 TLS: Initial packet from [AF_INET]86.170.37.20:52438, sid=8e0ccd5d 13a81603
WRRWRWRWWWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRThu Sep 10 14:59:04 2015 us=924926 86.170.37.20:52438 VERIFY OK: depth=1, C=GB, ST=LONDON, L=LONDON, O=London Digital Marketing, OU=IT, CN=London Digital Marketing CA, name=server, emailAddress=
mgs241171@yahoo.com
Thu Sep 10 14:59:04 2015 us=925380 86.170.37.20:52438 VERIFY OK: depth=0, C=GB, ST=LONDON, L=LONDON, O=London Digital Marketing, OU=IT, CN=to_friars2, name=to_friars2, emailAddress=
mgs241171@yahoo.com
WRWRWRWRWRWRWRWRWRWRThu Sep 10 14:59:04 2015 us=986592 86.170.37.20:52438 Data Channel Encrypt: Cipher 'DES-EDE3-CBC' initialized with 192 bit key
Thu Sep 10 14:59:04 2015 us=986642 86.170.37.20:52438 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 10 14:59:04 2015 us=986675 86.170.37.20:52438 Data Channel Decrypt: Cipher 'DES-EDE3-CBC' initialized with 192 bit key
Thu Sep 10 14:59:04 2015 us=986707 86.170.37.20:52438 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WWWRRRThu Sep 10 14:59:05 2015 us=5359 86.170.37.20:52438 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Sep 10 14:59:05 2015 us=5427 86.170.37.20:52438 [to_friars2] Peer Connection Initiated with [AF_INET]86.170.37.20:52438
Thu Sep 10 14:59:05 2015 us=5509 to_friars2/86.170.37.20:52438 MULTI_sva: pool returned IPv4=10.60.60.6, IPv6=(Not enabled)
Thu Sep 10 14:59:05 2015 us=5597 to_friars2/86.170.37.20:52438 MULTI: Learn: 10.60.60.6 -> to_friars2/86.170.37.20:52438
Thu Sep 10 14:59:05 2015 us=5629 to_friars2/86.170.37.20:52438 MULTI: primary virtual IP for to_friars2/86.170.37.20:52438: 10.60.60.6
RThu Sep 10 14:59:07 2015 us=32864 to_friars2/86.170.37.20:52438 PUSH: Received control message: 'PUSH_REQUEST'
Thu Sep 10 14:59:07 2015 us=32912 to_friars2/86.170.37.20:52438 send_push_reply(): safe_cap=940
Thu Sep 10 14:59:07 2015 us=32994 to_friars2/86.170.37.20:52438 SENT CONTROL [to_friars2]: 'PUSH_REPLY,route 192.168.88.0 255.255.255.0,route 192.168.89.0 255.255.255.0,route 192.168.90.0 255.255.255.0,route 10.60.60.1,topology net30,ping 1800,ping-restart 4000,ifconfig 10.60.60.6 10.60.60.5' (status=1)
-------------------------------
client.log
Thu Sep 10 13:59:03 2015 us=921591 config = '/etc/openvpn/to_friars2/to_friars2.conf'
Thu Sep 10 13:59:03 2015 us=922098 mode = 0
Thu Sep 10 13:59:03 2015 us=922349 persist_config = DISABLED
Thu Sep 10 13:59:03 2015 us=922541 persist_mode = 1
Thu Sep 10 13:59:03 2015 us=922722 show_ciphers = DISABLED
Thu Sep 10 13:59:03 2015 us=922906 show_digests = DISABLED
Thu Sep 10 13:59:03 2015 us=923082 show_engines = DISABLED
Thu Sep 10 13:59:03 2015 us=923264 genkey = DISABLED
Thu Sep 10 13:59:03 2015 us=923447 key_pass_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=923627 show_tls_ciphers = DISABLED
Thu Sep 10 13:59:03 2015 us=923811 Connection profiles [default]:
Thu Sep 10 13:59:03 2015 us=923997 proto = udp
Thu Sep 10 13:59:03 2015 us=924180 local = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=924360 local_port = 0
Thu Sep 10 13:59:03 2015 us=924540 remote = '88.97.0.223'
Thu Sep 10 13:59:03 2015 us=924720 remote_port = 1194
Thu Sep 10 13:59:03 2015 us=924903 remote_float = DISABLED
Thu Sep 10 13:59:03 2015 us=925084 bind_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=925268 bind_local = DISABLED
Thu Sep 10 13:59:03 2015 us=925489 connect_retry_seconds = 5
Thu Sep 10 13:59:03 2015 us=925685 connect_timeout = 10
Thu Sep 10 13:59:03 2015 us=925871 connect_retry_max = 0
Thu Sep 10 13:59:03 2015 us=926175 socks_proxy_server = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=926369 socks_proxy_port = 0
Thu Sep 10 13:59:03 2015 us=926548 socks_proxy_retry = DISABLED
Thu Sep 10 13:59:03 2015 us=926726 Connection profiles END
Thu Sep 10 13:59:03 2015 us=926904 remote_random = DISABLED
Thu Sep 10 13:59:03 2015 us=927075 ipchange = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=927246 dev = 'tun1'
Thu Sep 10 13:59:03 2015 us=927416 dev_type = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=927700 dev_node = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=927892 lladdr = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=928067 topology = 1
Thu Sep 10 13:59:03 2015 us=928239 tun_ipv6 = DISABLED
Thu Sep 10 13:59:03 2015 us=928416 ifconfig_local = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=928588 ifconfig_remote_netmask = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=928762 ifconfig_noexec = DISABLED
Thu Sep 10 13:59:03 2015 us=928932 ifconfig_nowarn = DISABLED
Thu Sep 10 13:59:03 2015 us=929102 ifconfig_ipv6_local = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=929280 ifconfig_ipv6_netbits = 0
Thu Sep 10 13:59:03 2015 us=929452 ifconfig_ipv6_remote = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=929621 shaper = 0
Thu Sep 10 13:59:03 2015 us=929794 tun_mtu = 1500
Thu Sep 10 13:59:03 2015 us=929961 tun_mtu_defined = ENABLED
Thu Sep 10 13:59:03 2015 us=930131 link_mtu = 1500
Thu Sep 10 13:59:03 2015 us=930303 link_mtu_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=930471 tun_mtu_extra = 0
Thu Sep 10 13:59:03 2015 us=930642 tun_mtu_extra_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=930814 fragment = 0
Thu Sep 10 13:59:03 2015 us=930983 mtu_discover_type = -1
Thu Sep 10 13:59:03 2015 us=931154 mtu_test = 0
Thu Sep 10 13:59:03 2015 us=931322 mlock = DISABLED
Thu Sep 10 13:59:03 2015 us=931491 keepalive_ping = 0
Thu Sep 10 13:59:03 2015 us=931664 keepalive_timeout = 0
Thu Sep 10 13:59:03 2015 us=932001 inactivity_timeout = 0
Thu Sep 10 13:59:03 2015 us=932240 ping_send_timeout = 0
Thu Sep 10 13:59:03 2015 us=932421 ping_rec_timeout = 0
Thu Sep 10 13:59:03 2015 us=932595 ping_rec_timeout_action = 0
Thu Sep 10 13:59:03 2015 us=932768 ping_timer_remote = DISABLED
Thu Sep 10 13:59:03 2015 us=932939 remap_sigusr1 = 0
Thu Sep 10 13:59:03 2015 us=933110 explicit_exit_notification = 0
Thu Sep 10 13:59:03 2015 us=933282 persist_tun = ENABLED
Thu Sep 10 13:59:03 2015 us=933452 persist_local_ip = DISABLED
Thu Sep 10 13:59:03 2015 us=933627 persist_remote_ip = DISABLED
Thu Sep 10 13:59:03 2015 us=933806 persist_key = ENABLED
Thu Sep 10 13:59:03 2015 us=933979 mssfix = 1450
Thu Sep 10 13:59:03 2015 us=934150 passtos = DISABLED
Thu Sep 10 13:59:03 2015 us=934329 resolve_retry_seconds = 1000000000
Thu Sep 10 13:59:03 2015 us=934500 username = 'nobody'
Thu Sep 10 13:59:03 2015 us=934673 groupname = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=934847 chroot_dir = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=935019 cd_dir = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=935189 writepid = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=935360 up_script = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=935589 down_script = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=935822 down_pre = DISABLED
Thu Sep 10 13:59:03 2015 us=936000 up_restart = DISABLED
Thu Sep 10 13:59:03 2015 us=936173 up_delay = DISABLED
Thu Sep 10 13:59:03 2015 us=936343 daemon = DISABLED
Thu Sep 10 13:59:03 2015 us=936520 inetd = 0
Thu Sep 10 13:59:03 2015 us=936690 log = ENABLED
Thu Sep 10 13:59:03 2015 us=936862 suppress_timestamps = DISABLED
Thu Sep 10 13:59:03 2015 us=937041 nice = 0
Thu Sep 10 13:59:03 2015 us=937211 verbosity = 5
Thu Sep 10 13:59:03 2015 us=937381 mute = 0
Thu Sep 10 13:59:03 2015 us=937555 gremlin = 0
Thu Sep 10 13:59:03 2015 us=937724 status_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=937900 status_file_version = 1
Thu Sep 10 13:59:03 2015 us=938075 status_file_update_freq = 60
Thu Sep 10 13:59:03 2015 us=938248 occ = ENABLED
Thu Sep 10 13:59:03 2015 us=938420 rcvbuf = 65536
Thu Sep 10 13:59:03 2015 us=938705 sndbuf = 65536
Thu Sep 10 13:59:03 2015 us=938896 sockflags = 0
Thu Sep 10 13:59:03 2015 us=939072 fast_io = DISABLED
Thu Sep 10 13:59:03 2015 us=939243 lzo = 3
Thu Sep 10 13:59:03 2015 us=939417 route_script = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=939590 route_default_gateway = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=939765 route_default_metric = 0
Thu Sep 10 13:59:03 2015 us=939937 route_noexec = DISABLED
Thu Sep 10 13:59:03 2015 us=940112 route_delay = 0
Thu Sep 10 13:59:03 2015 us=940295 route_delay_window = 30
Thu Sep 10 13:59:03 2015 us=940468 route_delay_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=940645 route_nopull = DISABLED
Thu Sep 10 13:59:03 2015 us=940821 route_gateway_via_dhcp = DISABLED
Thu Sep 10 13:59:03 2015 us=940999 max_routes = 100
Thu Sep 10 13:59:03 2015 us=941179 allow_pull_fqdn = DISABLED
Thu Sep 10 13:59:03 2015 us=941361 management_addr = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=941547 management_port = 0
Thu Sep 10 13:59:03 2015 us=941725 management_user_pass = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=942100 management_log_history_cache = 250
Thu Sep 10 13:59:03 2015 us=942330 management_echo_buffer_size = 100
Thu Sep 10 13:59:03 2015 us=942515 management_write_peer_info_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=942692 management_client_user = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=942870 management_client_group = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=943050 management_flags = 0
Thu Sep 10 13:59:03 2015 us=943230 shared_secret_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=943408 key_direction = 0
Thu Sep 10 13:59:03 2015 us=943686 ciphername_defined = ENABLED
Thu Sep 10 13:59:03 2015 us=943890 ciphername = 'DES-EDE3-CBC'
Thu Sep 10 13:59:03 2015 us=944073 authname_defined = ENABLED
Thu Sep 10 13:59:03 2015 us=944252 authname = 'SHA1'
Thu Sep 10 13:59:03 2015 us=944430 prng_hash = 'SHA1'
Thu Sep 10 13:59:03 2015 us=944609 prng_nonce_secret_len = 16
Thu Sep 10 13:59:03 2015 us=944786 keysize = 0
Thu Sep 10 13:59:03 2015 us=944962 engine = DISABLED
Thu Sep 10 13:59:03 2015 us=945139 replay = ENABLED
Thu Sep 10 13:59:03 2015 us=945319 mute_replay_warnings = DISABLED
Thu Sep 10 13:59:03 2015 us=945496 replay_window = 64
Thu Sep 10 13:59:03 2015 us=945672 replay_time = 15
Thu Sep 10 13:59:03 2015 us=946520 packet_id_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=947854 use_iv = ENABLED
Thu Sep 10 13:59:03 2015 us=948054 test_crypto = DISABLED
Thu Sep 10 13:59:03 2015 us=948235 tls_server = DISABLED
Thu Sep 10 13:59:03 2015 us=948413 tls_client = ENABLED
Thu Sep 10 13:59:03 2015 us=948590 key_method = 2
Thu Sep 10 13:59:03 2015 us=948768 ca_file = '/etc/openvpn/to_friars2/ca.crt'
Thu Sep 10 13:59:03 2015 us=948944 ca_path = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=949118 dh_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=949295 cert_file = '/etc/openvpn/to_friars2/to_friars2.crt'
Thu Sep 10 13:59:03 2015 us=949471 priv_key_file = '/etc/openvpn/to_friars2/to_friars2.key'
Thu Sep 10 13:59:03 2015 us=949651 pkcs12_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=949830 cipher_list = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=950007 tls_verify = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=950186 tls_export_cert = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=950361 tls_remote = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=950542 crl_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=950719 ns_cert_type = 0
Thu Sep 10 13:59:03 2015 us=950900 remote_cert_ku
= 0
Thu Sep 10 13:59:03 2015 us=951075 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=951252 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=951432 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=951711 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=952008 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=952227 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=952408 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=952585 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=952763 remote_cert_ku = 0
Thu Sep 10 13:59:03 2015 us=952940 remote_cert_ku[i] = 0
Thu Sep 10 13:59:03 2015 us=953242 remote_cert_ku[i] = 0
Thu Sep 10 13:59:03 2015 us=953437 remote_cert_ku[i] = 0
Thu Sep 10 13:59:03 2015 us=953616 remote_cert_ku[i] = 0
Thu Sep 10 13:59:03 2015 us=953799 remote_cert_ku[i] = 0
Thu Sep 10 13:59:03 2015 us=953977 remote_cert_ku[i] = 0
Thu Sep 10 13:59:03 2015 us=954154 remote_cert_eku = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=954328 tls_timeout = 2
Thu Sep 10 13:59:03 2015 us=954504 renegotiate_bytes = 0
Thu Sep 10 13:59:03 2015 us=954684 renegotiate_packets = 0
Thu Sep 10 13:59:03 2015 us=954861 renegotiate_seconds = 3600
Thu Sep 10 13:59:03 2015 us=955041 handshake_window = 60
Thu Sep 10 13:59:03 2015 us=955217 transition_window = 3600
Thu Sep 10 13:59:03 2015 us=955396 single_session = DISABLED
Thu Sep 10 13:59:03 2015 us=955570 push_peer_info = DISABLED
Thu Sep 10 13:59:03 2015 us=955747 tls_exit = DISABLED
Thu Sep 10 13:59:03 2015 us=955924 tls_auth_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=956100 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=956277 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=956453 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=956632 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=956811 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=956986 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=957164 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=957339 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=957517 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=957691 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=957864 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=958043 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=958218 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=958396 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=958572 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=958745 pkcs11_protected_authentication = DISABLED
Thu Sep 10 13:59:03 2015 us=958929 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=959109 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=959292 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=959471 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=959763 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=959960 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=960142 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=960321 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=960500 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=960686 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=960866 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=961048 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=961229 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=961414 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=961593 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=961776 pkcs11_private_mode = 00000000
Thu Sep 10 13:59:03 2015 us=962068 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=962250 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=962427 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=962601 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=962776 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=962949 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=963120 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=963297 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=963472 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=963650 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=963829 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=964118 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=964313 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=964487 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=964668 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=964843 pkcs11_cert_private = DISABLED
Thu Sep 10 13:59:03 2015 us=965023 pkcs11_pin_cache_period = -1
Thu Sep 10 13:59:03 2015 us=965193 pkcs11_id = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=965369 pkcs11_id_management = DISABLED
Thu Sep 10 13:59:03 2015 us=965644 server_network = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=965857 server_netmask = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=966055 server_network_ipv6 = ::
Thu Sep 10 13:59:03 2015 us=966236 server_netbits_ipv6 = 0
Thu Sep 10 13:59:03 2015 us=966434 server_bridge_ip = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=966629 server_bridge_netmask = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=966853 server_bridge_pool_start = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=967063 server_bridge_pool_end = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=967248 ifconfig_pool_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=967449 ifconfig_pool_start = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=967769 ifconfig_pool_end = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=967983 ifconfig_pool_netmask = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=968167 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=968352 ifconfig_pool_persist_refresh_freq = 600
Thu Sep 10 13:59:03 2015 us=968536 ifconfig_ipv6_pool_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=968728 ifconfig_ipv6_pool_base = ::
Thu Sep 10 13:59:03 2015 us=968912 ifconfig_ipv6_pool_netbits = 0
Thu Sep 10 13:59:03 2015 us=969089 n_bcast_buf = 256
Thu Sep 10 13:59:03 2015 us=969266 tcp_queue_limit = 64
Thu Sep 10 13:59:03 2015 us=969438 real_hash_size = 256
Thu Sep 10 13:59:03 2015 us=969614 virtual_hash_size = 256
Thu Sep 10 13:59:03 2015 us=969790 client_connect_script = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=969966 learn_address_script = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=970145 client_disconnect_script = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=970324 client_config_dir = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=970501 ccd_exclusive = DISABLED
Thu Sep 10 13:59:03 2015 us=970680 tmp_dir = '/tmp'
Thu Sep 10 13:59:03 2015 us=970860 push_ifconfig_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=971059 push_ifconfig_local = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=971255 push_ifconfig_remote_netmask = 0.0.0.0
Thu Sep 10 13:59:03 2015 us=971438 push_ifconfig_ipv6_defined = DISABLED
Thu Sep 10 13:59:03 2015 us=971632 push_ifconfig_ipv6_local = ::/0
Thu Sep 10 13:59:03 2015 us=971913 push_ifconfig_ipv6_remote = ::
Thu Sep 10 13:59:03 2015 us=972139 enable_c2c = DISABLED
Thu Sep 10 13:59:03 2015 us=972323 duplicate_cn = DISABLED
Thu Sep 10 13:59:03 2015 us=972505 cf_max = 0
Thu Sep 10 13:59:03 2015 us=972684 cf_per = 0
Thu Sep 10 13:59:03 2015 us=972862 max_clients = 1024
Thu Sep 10 13:59:03 2015 us=973041 max_routes_per_client = 256
Thu Sep 10 13:59:03 2015 us=973216 auth_user_pass_verify_script = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=973399 auth_user_pass_verify_script_via_file = DISABLED
Thu Sep 10 13:59:03 2015 us=973575 ssl_flags = 0
Thu Sep 10 13:59:03 2015 us=973754 port_share_host = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=973937 port_share_port = 0
Thu Sep 10 13:59:03 2015 us=974111 client = ENABLED
Thu Sep 10 13:59:03 2015 us=974293 pull = ENABLED
Thu Sep 10 13:59:03 2015 us=974469 auth_user_pass_file = '[UNDEF]'
Thu Sep 10 13:59:03 2015 us=974665 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Thu Sep 10 13:59:03 2015 us=975825 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Sep 10 13:59:03 2015 us=976072 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Sep 10 13:59:03 2015 us=986063 WARNING: file '/etc/openvpn/to_friars2/to_friars2.key' is group or others accessible
Thu Sep 10 13:59:03 2015 us=996147 LZO compression initialized
Thu Sep 10 13:59:03 2015 us=997050 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Sep 10 13:59:03 2015 us=997487 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Sep 10 13:59:03 2015 us=997901 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Sep 10 13:59:03 2015 us=998218 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth SHA1,keysize 192,key-method 2,tls-client'
Thu Sep 10 13:59:03 2015 us=998401 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher DES-EDE3-CBC,auth SHA1,keysize 192,key-method 2,tls-server'
Thu Sep 10 13:59:03 2015 us=998820 Local Options hash (VER=V4): '827c9ed0'
Thu Sep 10 13:59:03 2015 us=999100 Expected Remote Options hash (VER=V4): '974bef3f'
Thu Sep 10 13:59:04 2015 us=4227 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Thu Sep 10 13:59:04 2015 us=5568 UDPv4 link local: [undef]
Thu Sep 10 13:59:04 2015 us=5859 UDPv4 link remote: [AF_INET]88.97.0.223:1194
WRThu Sep 10 13:59:04 2015 us=24239 TLS: Initial packet from [AF_INET]88.97.0.223:1194, sid=f41e1917 819ddeda
WWWWRRRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRThu Sep 10 13:59:04 2015 us=166510 VERIFY OK: depth=1, /C=GB/ST=LONDON/L=LONDON/O=London_Digital_Marketing/OU=IT/CN=London_Digital_Marketing_CA/name=server/emailAddress=mgs241171@yahoo.com
Thu Sep 10 13:59:04 2015 us=172213 VERIFY OK: depth=0, /C=GB/ST=LONDON/L=LONDON/O=London_Digital_Marketing/OU=IT/CN=server/name=server/emailAddress=mgs241171@yahoo.com
WRWRWRWRWRWRWRWRWRWRWWWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRWWWWRRRRWRWRThu Sep 10 13:59:05 2015 us=5413 Data Channel Encrypt: Cipher 'DES-EDE3-CBC' initialized with 192 bit key
Thu Sep 10 13:59:05 2015 us=5728 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 10 13:59:05 2015 us=5943 Data Channel Decrypt: Cipher 'DES-EDE3-CBC' initialized with 192 bit key
Thu Sep 10 13:59:05 2015 us=6165 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
WThu Sep 10 13:59:05 2015 us=6900 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu Sep 10 13:59:05 2015 us=7285 [server] Peer Connection Initiated with [AF_INET]88.97.0.223:1194
Thu Sep 10 13:59:07 2015 us=32403 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
WRRWRWRThu Sep 10 13:59:07 2015 us=50752 PUSH: Received control message: 'PUSH_REPLY,route 192.168.88.0 255.255.255.0,route 192.168.89.0 255.255.255.0,route 192.168.90.0 255.255.255.0,route 10.60.60.1,topology net30,ping 1800,ping-restart 4000,ifconfig 10.60.60.6 10.60.60.5'
Thu Sep 10 13:59:07 2015 us=51390 OPTIONS IMPORT: timers and/or timeouts modified
Thu Sep 10 13:59:07 2015 us=51594 OPTIONS IMPORT: --ifconfig/up options modified
Thu Sep 10 13:59:07 2015 us=51760 OPTIONS IMPORT: route options modified
Thu Sep 10 13:59:07 2015 us=53609 ROUTE default_gateway=192.168.70.254
Thu Sep 10 13:59:07 2015 us=85507 TUN/TAP device tun1 opened
Thu Sep 10 13:59:07 2015 us=85885 TUN/TAP TX queue length set to 100
Thu Sep 10 13:59:07 2015 us=86156 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Sep 10 13:59:07 2015 us=86478 /sbin/ifconfig tun1 10.60.60.6 pointopoint 10.60.60.5 mtu 1500
Thu Sep 10 13:59:07 2015 us=123580 /sbin/route add -net 192.168.88.0 netmask 255.255.255.0 gw 10.60.60.5
Thu Sep 10 13:59:07 2015 us=151035 /sbin/route add -net 192.168.89.0 netmask 255.255.255.0 gw 10.60.60.5
Thu Sep 10 13:59:07 2015 us=174009 /sbin/route add -net 192.168.90.0 netmask 255.255.255.0 gw 10.60.60.5
Thu Sep 10 13:59:07 2015 us=200279 /sbin/route add -net 10.60.60.1 netmask 255.255.255.255 gw 10.60.60.5
Thu Sep 10 13:59:07 2015 us=225853 UID set to nobody
Thu Sep 10 13:59:07 2015 us=226198 Initialization Sequence Completed
----------------------------------------
