Raspbian Jessie openvpn 443 TCP Problem

tridh

Hi!

Server Config:

dev tun
proto tcp
port 443
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/RPI.crt
key /etc/openvpn/easy-rsa/keys/RPI.key
# WICHTIG: Hier die Datei entsprechend der Schlüssellänge (Schritt 3) eintragen
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
#user nobody
#group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 6
client-to-client
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
log-append /var/log/openvpn
push "dhcp-option DNS 8.8.8.8"
log-append /var/log/openvpn
comp-lzo

Client Config:

dev tun
client
proto tcp
remote XXX.XXX.XXX.XXX 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Name_secure.crt
key Name_secure.key
comp-lzo
verb 6

Error:


16-02-08 15:00:14 us=307301 Local Options hash (VER=V4): '69109d17'
2016-02-08 15:00:14 us=307340 Expected Remote Options hash (VER=V4): 'c0103fa8'
2016-02-08 15:00:14 us=307389 Attempting to establish TCP connection with [AF_INET]XXX.XXX.XXX.IP:443 [nonblock]
2016-02-08 15:00:14 us=307429 MANAGEMENT: >STATE:1454940014,TCP_CONNECT,,,
2016-02-08 15:00:15 us=307719 TCP: connect to [AF_INET]XXX.XXX.XXX.IP:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 15:00:20 us=311691 MANAGEMENT: >STATE:1454940020,TCP_CONNECT,,,
2016-02-08 15:00:21 us=313322 TCP: connect to [AF_INET]XXX.XXX.XXX.IP:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 15:00:26 us=317829 MANAGEMENT: >STATE:1454940026,TCP_CONNECT,,,
2016-02-08 15:00:27 us=318622 TCP: connect to [AF_INET]XXX.XXX.XXX.IP:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 15:00:32 us=322707 MANAGEMENT: >STATE:1454940032,TCP_CONNECT,,,
2016-02-08 15:00:33 us=324289 TCP: connect to [AF_INET]XXX.XXX.XXX.IP:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 15:00:34 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed
2016-02-08 15:00:34 *Tunnelblick: Disconnecting using 'kill'
2016-02-08 15:00:34 us=200783 SIGTERM[hard,init_instance] received, process exiting
2016-02-08 15:00:34 us=200869 MANAGEMENT: >STATE:1454940034,EXITING,init_instance,,
2016-02-08 15:00:36 *Tunnelblick: No 'post-disconnect.sh' script to execute
2016-02-08 15:00:36 *Tunnelblick: Expected disconnection occurred.

If i test telnet on the Internal IP :443 i get Connection refused , Unable to connect to remote host
It looks a little bit like the open vpn diddnt listen on port 443!

Traffic

It looks more like you have not opened port TCP:443 on your server firewall ..

tridh

PortForward on Router is enabled.
On the Pi there is no active Firewall.
Why isnt it possible to check internal via Telnet?
It is also not possible to Open the vpn Connection with the internal ip Address at the internal network.

Traffic

tridh wrotePortForward on Router is enabled

Be aware, your router may not support connections from inside your own network (aka. loopback connections).

tridh wroteOn the Pi there is no active Firewall

I will take your word on that.

tridh wroteWhy isnt it possible to check internal via Telnet?

Telnet or ssh can not connect to the VPN server port.

Telnet can connect to the management port of the server, See --management in The Manual v23x

tridh wroteIt is also not possible to Open the vpn Connection with the internal ip Address at the internal network

This is a more suitable test if your client is on the same LAN as your server.

Please post your complete server log at verb 4 (not verb 6), remove any private information.

tridh

Internal Network Test Logfile:

*Tunnelblick: OS X 10.11.2; Tunnelblick 3.5.6 (build 4270.4505); Admin user

Configuration Username_VPN_CONFIG_Test

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk:

dev tun
client
proto tcp
remote 192.168.0.4 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Username_secure.crt
key Username_secure.key
comp-lzo
verb 4


================================================================================

"Sanitized" full configuration file

dev tun
client
proto tcp
remote 192.168.0.4 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert Username_secure.crt
key Username_secure.key
comp-lzo
verb 4



================================================================================

There are no unusual files in Username_VPN_CONFIG_Test.tblk

================================================================================

Configuration preferences:

-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:


================================================================================

Program preferences:

launchAtNextLogin = 1
notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
    "3.5.6 (build 4270.4505)"
)
lastLaunchTime = 476641226.982042
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
installationUID (not shown)
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
updateSendProfileInfo = 1
NSWindow Frame ConnectingWindow = 514 502 412 232 0 0 1440 877 
detailsWindowFrameVersion = 4270.4505
detailsWindowFrame = {{262, 325}, {916, 468}}
detailsWindowLeftFrame = {{0, 0}, {164, 350}}
leftNavSelectedDisplayName = Username_VPN_CONFIG_Test
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
SUEnableAutomaticChecks = 1
SUFeedURL = https://www.tunnelblick.net/appcast-s.rss
SUScheduledCheckInterval = 86400
SUSendProfileInfo = 1
SULastCheckTime = 2016-02-08 16:20:26 +0000
SULastProfileSubmissionDate = 2016-02-07 13:27:50 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

2016-02-08 17:21:17 *Tunnelblick: OS X 10.11.2; Tunnelblick 3.5.6 (build 4270.4505)
2016-02-08 17:21:18 *Tunnelblick: Attempting connection with Username_VPN_CONFIG_Test; Set nameserver = 1; monitoring connection
2016-02-08 17:21:18 *Tunnelblick: openvpnstart start Username_VPN_CONFIG_Test.tblk 1337 1 0 3 0 16688 -ptADGNWradsgnw 2.3.6
2016-02-08 17:21:20 *Tunnelblick: openvpnstart log:
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
     
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.6/openvpn
          --daemon
          --log
          /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SUsername_VPN_CONFIG_Test.tblk-SContents-SResources-Sconfig.ovpn.1_0_3_0_16688.1337.openvpn.log
          --cd
          /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources
          --config
          /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/config.ovpn
          --cd
          /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources
          --management
          127.0.0.1
          1337
          --management-query-passwords
          --management-hold
          --script-security
          2
          --up
          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw
          --down
          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw

2016-02-08 17:21:18 *Tunnelblick: openvpnstart starting OpenVPN
2016-02-08 17:21:19 us=201302 Current Parameter Settings:
2016-02-08 17:21:19 us=201480   config = '/Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/config.ovpn'
2016-02-08 17:21:19 us=201489   mode = 0
2016-02-08 17:21:19 us=201497   show_ciphers = DISABLED
2016-02-08 17:21:19 us=201502   show_digests = DISABLED
2016-02-08 17:21:19 us=201507   show_engines = DISABLED
2016-02-08 17:21:19 us=201512   genkey = DISABLED
2016-02-08 17:21:19 us=201517   key_pass_file = '[UNDEF]'
2016-02-08 17:21:19 us=201521   show_tls_ciphers = DISABLED
2016-02-08 17:21:19 us=201526 Connection profiles [default]:
2016-02-08 17:21:19 us=201531   proto = tcp-client
2016-02-08 17:21:19 us=201536   local = '[UNDEF]'
2016-02-08 17:21:19 us=201541   local_port = 0
2016-02-08 17:21:19 us=201546   remote = '192.168.0.4'
2016-02-08 17:21:19 us=201551   remote_port = 443
2016-02-08 17:21:19 us=201556   remote_float = DISABLED
2016-02-08 17:21:19 us=201560   bind_defined = DISABLED
2016-02-08 17:21:19 us=201565   bind_local = DISABLED
2016-02-08 17:21:19 us=201570   connect_retry_seconds = 5
2016-02-08 17:21:19 us=201575   connect_timeout = 10
2016-02-08 17:21:19 us=201580   connect_retry_max = 0
2016-02-08 17:21:19 us=201585   socks_proxy_server = '[UNDEF]'
2016-02-08 17:21:19 us=201590   socks_proxy_port = 0
2016-02-08 17:21:19 us=201595   socks_proxy_retry = DISABLED
2016-02-08 17:21:19 us=201599   tun_mtu = 1500
2016-02-08 17:21:19 us=201604   tun_mtu_defined = ENABLED
2016-02-08 17:21:19 us=201609   link_mtu = 1500
2016-02-08 17:21:19 us=201614   link_mtu_defined = DISABLED
2016-02-08 17:21:19 us=201619   tun_mtu_extra = 0
2016-02-08 17:21:19 us=201624   tun_mtu_extra_defined = DISABLED
2016-02-08 17:21:19 us=201628   mtu_discover_type = -1
2016-02-08 17:21:19 us=201633   fragment = 0
2016-02-08 17:21:19 us=201638   mssfix = 1450
2016-02-08 17:21:19 us=201643   explicit_exit_notification = 0
2016-02-08 17:21:19 us=201648 Connection profiles END
2016-02-08 17:21:19 us=201652   remote_random = DISABLED
2016-02-08 17:21:19 us=201657   ipchange = '[UNDEF]'
2016-02-08 17:21:19 us=201662   dev = 'tun'
2016-02-08 17:21:19 us=201667   dev_type = '[UNDEF]'
2016-02-08 17:21:19 us=201671   dev_node = '[UNDEF]'
2016-02-08 17:21:19 us=201676   lladdr = '[UNDEF]'
2016-02-08 17:21:19 us=201681   topology = 1
2016-02-08 17:21:19 us=201686   tun_ipv6 = DISABLED
2016-02-08 17:21:19 us=201690   ifconfig_local = '[UNDEF]'
2016-02-08 17:21:19 us=201695   ifconfig_remote_netmask = '[UNDEF]'
2016-02-08 17:21:19 us=201700   ifconfig_noexec = DISABLED
2016-02-08 17:21:19 us=201705   ifconfig_nowarn = DISABLED
2016-02-08 17:21:19 us=201711   ifconfig_ipv6_local = '[UNDEF]'
2016-02-08 17:21:19 us=201716   ifconfig_ipv6_netbits = 0
2016-02-08 17:21:19 us=201721   ifconfig_ipv6_remote = '[UNDEF]'
2016-02-08 17:21:19 us=201726   shaper = 0
2016-02-08 17:21:19 us=201731   mtu_test = 0
2016-02-08 17:21:19 us=201736   mlock = DISABLED
2016-02-08 17:21:19 us=201740   keepalive_ping = 0
2016-02-08 17:21:19 us=201745   keepalive_timeout = 0
2016-02-08 17:21:19 us=201750   inactivity_timeout = 0
2016-02-08 17:21:19 us=201755   ping_send_timeout = 0
2016-02-08 17:21:19 us=201768   ping_rec_timeout = 0
2016-02-08 17:21:19 us=201773   ping_rec_timeout_action = 0
2016-02-08 17:21:19 us=201778   ping_timer_remote = DISABLED
2016-02-08 17:21:19 us=201782   remap_sigusr1 = 0
2016-02-08 17:21:19 us=201787   persist_tun = ENABLED
2016-02-08 17:21:19 us=201792   persist_local_ip = DISABLED
2016-02-08 17:21:19 us=201797   persist_remote_ip = DISABLED
2016-02-08 17:21:19 us=201801   persist_key = ENABLED
2016-02-08 17:21:19 us=201806   passtos = DISABLED
2016-02-08 17:21:19 us=201811   resolve_retry_seconds = 1000000000
2016-02-08 17:21:19 us=201816   username = '[UNDEF]'
2016-02-08 17:21:19 us=201827   groupname = '[UNDEF]'
2016-02-08 17:21:19 us=201832   chroot_dir = '[UNDEF]'
2016-02-08 17:21:19 us=201837   cd_dir = '/Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources'
2016-02-08 17:21:19 us=201842   writepid = '[UNDEF]'
2016-02-08 17:21:19 us=201847   up_script = '/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw'
2016-02-08 17:21:19 us=201852   down_script = '/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw'
2016-02-08 17:21:19 us=201856   down_pre = DISABLED
2016-02-08 17:21:19 us=201861   up_restart = DISABLED
2016-02-08 17:21:19 us=201866   up_delay = DISABLED
2016-02-08 17:21:19 us=201871   daemon = ENABLED
2016-02-08 17:21:19 us=201876   inetd = 0
2016-02-08 17:21:19 us=201880   log = ENABLED
2016-02-08 17:21:19 us=201885   suppress_timestamps = DISABLED
2016-02-08 17:21:19 us=201890   nice = 0
2016-02-08 17:21:19 us=201895   verbosity = 4
2016-02-08 17:21:19 us=201899   mute = 0
2016-02-08 17:21:19 us=201904   status_file = '[UNDEF]'
2016-02-08 17:21:19 us=201909   status_file_version = 1
2016-02-08 17:21:19 us=201914   status_file_update_freq = 60
2016-02-08 17:21:19 us=201918   occ = ENABLED
2016-02-08 17:21:19 us=201923   rcvbuf = 65536
2016-02-08 17:21:19 us=201928   sndbuf = 65536
2016-02-08 17:21:19 us=201933   sockflags = 0
2016-02-08 17:21:19 us=201937   fast_io = DISABLED
2016-02-08 17:21:19 us=201942   lzo = 7
2016-02-08 17:21:19 us=201947   route_script = '[UNDEF]'
2016-02-08 17:21:19 us=201952   route_default_gateway = '[UNDEF]'
2016-02-08 17:21:19 us=201957   route_default_metric = 0
2016-02-08 17:21:19 us=201962   route_noexec = DISABLED
2016-02-08 17:21:19 us=201966   route_delay = 0
2016-02-08 17:21:19 us=201971   route_delay_window = 30
2016-02-08 17:21:19 us=201976   route_delay_defined = DISABLED
2016-02-08 17:21:19 us=201981   route_nopull = DISABLED
2016-02-08 17:21:19 us=201986   route_gateway_via_dhcp = DISABLED
2016-02-08 17:21:19 us=201991   max_routes = 100
2016-02-08 17:21:19 us=201996   allow_pull_fqdn = DISABLED
2016-02-08 17:21:19 us=202001   management_addr = '127.0.0.1'
2016-02-08 17:21:19 us=202006   management_port = 1337
2016-02-08 17:21:19 us=202011   management_user_pass = '[UNDEF]'
2016-02-08 17:21:19 us=202016   management_log_history_cache = 250
2016-02-08 17:21:19 us=202021   management_echo_buffer_size = 100
2016-02-08 17:21:19 us=202028   management_write_peer_info_file = '[UNDEF]'
2016-02-08 17:21:19 us=202034   management_client_user = '[UNDEF]'
2016-02-08 17:21:19 us=202039   management_client_group = '[UNDEF]'
2016-02-08 17:21:19 us=202044   management_flags = 6
2016-02-08 17:21:19 us=202049   shared_secret_file = '[UNDEF]'
2016-02-08 17:21:19 us=202054   key_direction = 0
2016-02-08 17:21:19 us=202059   ciphername_defined = ENABLED
2016-02-08 17:21:19 us=202064   ciphername = 'BF-CBC'
2016-02-08 17:21:19 us=202069   authname_defined = ENABLED
2016-02-08 17:21:19 us=202074   authname = 'SHA1'
2016-02-08 17:21:19 us=202079   prng_hash = 'SHA1'
2016-02-08 17:21:19 us=202084   prng_nonce_secret_len = 16
2016-02-08 17:21:19 us=202089   keysize = 0
2016-02-08 17:21:19 us=202094   engine = DISABLED
2016-02-08 17:21:19 us=202099   replay = ENABLED
2016-02-08 17:21:19 us=202104   mute_replay_warnings = DISABLED
2016-02-08 17:21:19 us=202109   replay_window = 64
2016-02-08 17:21:19 us=202114   replay_time = 15
2016-02-08 17:21:19 us=202119   packet_id_file = '[UNDEF]'
2016-02-08 17:21:19 us=202123   use_iv = ENABLED
2016-02-08 17:21:19 us=202128   test_crypto = DISABLED
2016-02-08 17:21:19 us=202133   tls_server = DISABLED
2016-02-08 17:21:19 us=202138   tls_client = ENABLED
2016-02-08 17:21:19 us=202147   key_method = 2
2016-02-08 17:21:19 us=202153   ca_file = 'ca.crt'
2016-02-08 17:21:19 us=202158   ca_path = '[UNDEF]'
2016-02-08 17:21:19 us=202163   dh_file = '[UNDEF]'
2016-02-08 17:21:19 us=202168   cert_file = 'Username_secure.crt'
2016-02-08 17:21:19 us=202173   priv_key_file = 'Username_secure.key'
2016-02-08 17:21:19 us=202178   pkcs12_file = '[UNDEF]'
2016-02-08 17:21:19 us=202183   cipher_list = '[UNDEF]'
2016-02-08 17:21:19 us=202188   tls_verify = '[UNDEF]'
2016-02-08 17:21:19 us=202193   tls_export_cert = '[UNDEF]'
2016-02-08 17:21:19 us=202198   verify_x509_type = 0
2016-02-08 17:21:19 us=202203   verify_x509_name = '[UNDEF]'
2016-02-08 17:21:19 us=202208   crl_file = '[UNDEF]'
2016-02-08 17:21:19 us=202213   ns_cert_type = 0
2016-02-08 17:21:19 us=202217   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202222   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202227   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202232   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202237   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202242   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202246   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202251   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202256   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202261   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202265   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202270   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202275   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202279   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202284   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202289   remote_cert_ku[i] = 0
2016-02-08 17:21:19 us=202294   remote_cert_eku = '[UNDEF]'
2016-02-08 17:21:19 us=202299   ssl_flags = 0
2016-02-08 17:21:19 us=202303   tls_timeout = 2
2016-02-08 17:21:19 us=202308   renegotiate_bytes = 0
2016-02-08 17:21:19 us=202313   renegotiate_packets = 0
2016-02-08 17:21:19 us=202318   renegotiate_seconds = 3600
2016-02-08 17:21:19 us=202323   handshake_window = 60
2016-02-08 17:21:19 us=202328   transition_window = 3600
2016-02-08 17:21:19 us=202333   single_session = DISABLED
2016-02-08 17:21:19 us=202337   push_peer_info = DISABLED
2016-02-08 17:21:19 us=202342   tls_exit = DISABLED
2016-02-08 17:21:19 us=202347   tls_auth_file = '[UNDEF]'
2016-02-08 17:21:19 us=202353   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202358   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202363   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202368   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202373   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202378   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202383   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202388   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202393   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202397   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202402   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202407   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202415   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202420   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202425   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202430   pkcs11_protected_authentication = DISABLED
2016-02-08 17:21:19 us=202435   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202440   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202445   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202451   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202460   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202465   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202470   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202475   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202480   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202485   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202490   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202495   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202500   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202505   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202510   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202515   pkcs11_private_mode = 00000000
2016-02-08 17:21:19 us=202520   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202525   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202530   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202535   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202539   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202544   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202549   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202554   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202559   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202564   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202569   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202574   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202578   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202583   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202588   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202593   pkcs11_cert_private = DISABLED
2016-02-08 17:21:19 us=202598   pkcs11_pin_cache_period = -1
2016-02-08 17:21:19 us=202603   pkcs11_id = '[UNDEF]'
2016-02-08 17:21:19 us=202608   pkcs11_id_management = DISABLED
2016-02-08 17:21:19 us=202618   server_network = 0.0.0.0
2016-02-08 17:21:19 us=202623   server_netmask = 0.0.0.0
2016-02-08 17:21:19 us=202633   server_network_ipv6 = ::
2016-02-08 17:21:19 us=202639   server_netbits_ipv6 = 0
2016-02-08 17:21:19 us=202645   server_bridge_ip = 0.0.0.0
2016-02-08 17:21:19 us=202651   server_bridge_netmask = 0.0.0.0
2016-02-08 17:21:19 us=202656   server_bridge_pool_start = 0.0.0.0
2016-02-08 17:21:19 us=202662   server_bridge_pool_end = 0.0.0.0
2016-02-08 17:21:19 us=202667   ifconfig_pool_defined = DISABLED
2016-02-08 17:21:19 us=202673   ifconfig_pool_start = 0.0.0.0
2016-02-08 17:21:19 us=202678   ifconfig_pool_end = 0.0.0.0
2016-02-08 17:21:19 us=202684   ifconfig_pool_netmask = 0.0.0.0
2016-02-08 17:21:19 us=202689   ifconfig_pool_persist_filename = '[UNDEF]'
2016-02-08 17:21:19 us=202694   ifconfig_pool_persist_refresh_freq = 600
2016-02-08 17:21:19 us=202699   ifconfig_ipv6_pool_defined = DISABLED
2016-02-08 17:21:19 us=202704   ifconfig_ipv6_pool_base = ::
2016-02-08 17:21:19 us=202709   ifconfig_ipv6_pool_netbits = 0
2016-02-08 17:21:19 us=202714   n_bcast_buf = 256
2016-02-08 17:21:19 us=202719   tcp_queue_limit = 64
2016-02-08 17:21:19 us=202724   real_hash_size = 256
2016-02-08 17:21:19 us=202729   virtual_hash_size = 256
2016-02-08 17:21:19 us=202734   client_connect_script = '[UNDEF]'
2016-02-08 17:21:19 us=202739   learn_address_script = '[UNDEF]'
2016-02-08 17:21:19 us=202744   client_disconnect_script = '[UNDEF]'
2016-02-08 17:21:19 us=202749   client_config_dir = '[UNDEF]'
2016-02-08 17:21:19 us=202754   ccd_exclusive = DISABLED
2016-02-08 17:21:19 us=202759   tmp_dir = '/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/'
2016-02-08 17:21:19 us=202764   push_ifconfig_defined = DISABLED
2016-02-08 17:21:19 us=202770   push_ifconfig_local = 0.0.0.0
2016-02-08 17:21:19 us=202776   push_ifconfig_remote_netmask = 0.0.0.0
2016-02-08 17:21:19 us=202785   push_ifconfig_ipv6_defined = DISABLED
2016-02-08 17:21:19 us=202791   push_ifconfig_ipv6_local = ::/0
2016-02-08 17:21:19 us=202797   push_ifconfig_ipv6_remote = ::
2016-02-08 17:21:19 us=202802   enable_c2c = DISABLED
2016-02-08 17:21:19 us=202806   duplicate_cn = DISABLED
2016-02-08 17:21:19 us=202811   cf_max = 0
2016-02-08 17:21:19 us=202816   cf_per = 0
2016-02-08 17:21:19 us=202821   max_clients = 1024
2016-02-08 17:21:19 us=202826   max_routes_per_client = 256
2016-02-08 17:21:19 us=202832   auth_user_pass_verify_script = '[UNDEF]'
2016-02-08 17:21:19 us=202837   auth_user_pass_verify_script_via_file = DISABLED
2016-02-08 17:21:19 us=202842   port_share_host = '[UNDEF]'
2016-02-08 17:21:19 us=202847   port_share_port = 0
2016-02-08 17:21:19 us=202851   client = ENABLED
2016-02-08 17:21:19 us=202856   pull = ENABLED
2016-02-08 17:21:19 us=202861   auth_user_pass_file = '[UNDEF]'
2016-02-08 17:21:19 us=202870 OpenVPN 2.3.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Feb  1 2016
2016-02-08 17:21:19 us=202880 library versions: OpenSSL 1.0.1r  28 Jan 2016, LZO 2.08
2016-02-08 17:21:19 us=204052 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2016-02-08 17:21:19 us=204786 Need hold release from management interface, waiting...
2016-02-08 17:21:20 *Tunnelblick: Established communication with OpenVPN
2016-02-08 17:21:20 us=27236 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2016-02-08 17:21:20 us=54370 MANAGEMENT: CMD 'pid'
2016-02-08 17:21:20 us=54596 MANAGEMENT: CMD 'state on'
2016-02-08 17:21:20 us=54671 MANAGEMENT: CMD 'state'
2016-02-08 17:21:20 us=54756 MANAGEMENT: CMD 'bytecount 1'
2016-02-08 17:21:20 us=54825 MANAGEMENT: CMD 'hold release'
2016-02-08 17:21:20 us=55057 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2016-02-08 17:21:20 us=55103 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2016-02-08 17:21:24 us=367059 MANAGEMENT: CMD 'password [...]'
2016-02-08 17:21:24 us=367316 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2016-02-08 17:21:24 us=382182 LZO compression initialized
2016-02-08 17:21:24 us=382309 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
2016-02-08 17:21:24 us=382414 Socket Buffers: R=[131072->65536] S=[131072->65536]
2016-02-08 17:21:24 us=382561 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
2016-02-08 17:21:24 us=382611 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2016-02-08 17:21:24 us=382651 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2016-02-08 17:21:24 us=382723 Local Options hash (VER=V4): '69109d17'
2016-02-08 17:21:24 us=382855 Expected Remote Options hash (VER=V4): 'c0103fa8'
2016-02-08 17:21:24 us=382957 Attempting to establish TCP connection with [AF_INET]192.168.0.4:443 [nonblock]
2016-02-08 17:21:24 us=383032 MANAGEMENT: >STATE:1454948484,TCP_CONNECT,,,
2016-02-08 17:21:25 us=384577 TCP: connect to [AF_INET]192.168.0.4:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 17:21:30 us=390204 MANAGEMENT: >STATE:1454948490,TCP_CONNECT,,,
2016-02-08 17:21:31 us=391204 TCP: connect to [AF_INET]192.168.0.4:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 17:21:36 us=396303 MANAGEMENT: >STATE:1454948496,TCP_CONNECT,,,
2016-02-08 17:21:37 us=397884 TCP: connect to [AF_INET]192.168.0.4:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 17:21:42 us=403921 MANAGEMENT: >STATE:1454948502,TCP_CONNECT,,,
2016-02-08 17:21:43 us=405025 TCP: connect to [AF_INET]192.168.0.4:443 failed, will try again in 5 seconds: Connection refused
2016-02-08 17:21:48 us=408291 MANAGEMENT: >STATE:1454948508,TCP_CONNECT,,,
2016-02-08 17:21:48 *Tunnelblick: Disconnecting; notification window disconnect button pressed
2016-02-08 17:21:48 *Tunnelblick: Disconnecting using 'kill'
2016-02-08 17:21:48 us=644922 TCP/UDP: Closing socket
2016-02-08 17:21:48 us=645036 SIGTERM[hard,init_instance] received, process exiting
2016-02-08 17:21:48 us=645111 MANAGEMENT: >STATE:1454948508,EXITING,init_instance,,
2016-02-08 17:21:50 *Tunnelblick: No 'post-disconnect.sh' script to execute
2016-02-08 17:21:50 *Tunnelblick: Expected disconnection occurred.

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	options=3<RXCSUM,TXCSUM>
	inet6 ::1 prefixlen 128 
	inet 127.0.0.1 netmask 0xff000000 
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
	nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether b8:e8:56:24:3f:e2 
	inet6 fe80::bae8:56ff:fe24:3fe2%en0 prefixlen 64 scopeid 0x4 
	inet 192.168.0.101 netmask 0xffffff00 broadcast 192.168.0.255
	nd6 options=1<PERFORMNUD>
	media: autoselect
	status: active
en1: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
	options=60<TSO4,TSO6>
	ether 32:00:14:f7:20:00 
	media: autoselect <full-duplex>
	status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
	ether 0a:e8:56:24:3f:e2 
	media: autoselect
	status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
	ether c6:fd:3e:71:bd:29 
	inet6 fe80::c4fd:3eff:fe71:bd29%awdl0 prefixlen 64 scopeid 0x7 
	nd6 options=1<PERFORMNUD>
	media: autoselect
	status: active
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=63<RXCSUM,TXCSUM,TSO4,TSO6>
	ether ba:e8:56:42:11:00 
	Configuration:
		id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
		maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
		root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
		ipfilter disabled flags 0x2
	member: en1 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 5 priority 0 path cost 0
	nd6 options=1<PERFORMNUD>
	media: <unknown type>
	status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
	inet6 fe80::a8af:c79e:597a:192a%utun0 prefixlen 64 scopeid 0x9 
	nd6 options=1<PERFORMNUD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
	inet6 fe80::df38:1627:c056:b415%utun1 prefixlen 64 scopeid 0xa 
	nd6 options=1<PERFORMNUD>

================================================================================

Console Log:

2016-02-08 14:59:19 Tunnelblick[6972] Set program update feedURL to https://www.tunnelblick.net/appcast-s.rss
2016-02-08 14:59:50 Tunnelblick[6972] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG.ovpn at line 9: Copied ca.crt
2016-02-08 14:59:50 Tunnelblick[6972] Changed permissions from 644 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-1uUBNe/Username_VPN_CONFIG.tblk/Contents/Resources/ca.crt
2016-02-08 14:59:50 Tunnelblick[6972] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG.ovpn at line 10: Copied Username_secure.crt
2016-02-08 14:59:50 Tunnelblick[6972] Changed permissions from 644 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-1uUBNe/Username_VPN_CONFIG.tblk/Contents/Resources/Username_secure.crt
2016-02-08 14:59:50 Tunnelblick[6972] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG.ovpn at line 11: Copied Username_secure.key
2016-02-08 14:59:50 Tunnelblick[6972] Changed permissions from 600 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-1uUBNe/Username_VPN_CONFIG.tblk/Contents/Resources/Username_secure.key
2016-02-08 14:59:50 Tunnelblick[6972] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG.ovpn: Converted OpenVPN configuration
2016-02-08 14:59:53 Tunnelblick[6972] Beginning installation or repair
2016-02-08 14:59:53 authexec[7002] executing /Applications/Tunnelblick.app/Contents/Resources/installer
2016-02-08 14:59:54 Tunnelblick[6972] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2016-02-08 14:59:53. 3 arguments: 0x0001
                                            /Users/Username/Library/Application Support/Tunnelblick/Configurations/Username_VPN_CONFIG.tblk
                                            /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-1uUBNe/Username_VPN_CONFIG.tblk
                                       Copied /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-1uUBNe/Username_VPN_CONFIG.tblk
                                           to /Users/Username/Library/Application Support/Tunnelblick/Configurations/Username_VPN_CONFIG.tblk.temp
                                       Renamed /Users/Username/Library/Application Support/Tunnelblick/Configurations/Username_VPN_CONFIG.tblk.temp
                                            to /Users/Username/Library/Application Support/Tunnelblick/Configurations/Username_VPN_CONFIG.tblk
                                       Changed ownership of /Users/Username/Library/Application Support/Tunnelblick/Configurations/Username_VPN_CONFIG.tblk and its contents from 501:20 to 501:80
                                       Copied /Users/Username/Library/Application Support/Tunnelblick/Configurations/Username_VPN_CONFIG.tblk
                                           to /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk/Contents/Resources/Username_secure.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/Username/Username_VPN_CONFIG.tblk/Contents/Resources/Username_secure.key
                                       Created secure (shadow) copy of Username_VPN_CONFIG.tblk
                                       Tunnelblick installer finished without error
2016-02-08 15:00:07 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 15:00:07 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 15:00:07 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 15:00:07 tunnelblickd[7013] Status = 0 from tunnelblick-helper command 'compareShadowCopy Username_VPN_CONFIG'
2016-02-08 15:00:08 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 15:00:08 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 15:00:08 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 15:00:08 tunnelblickd[7013] Status = 0 from tunnelblick-helper command 'printSanitizedConfigurationFile Username_VPN_CONFIG.tblk 0'
2016-02-08 15:00:08 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 15:00:08 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 15:00:09 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 15:00:09 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.800000 seconds...
2016-02-08 15:00:09 tunnelblickd[7013] Status = 0 from tunnelblick-helper command 'start Username_VPN_CONFIG.tblk 1337 1 0 1 0 16688 -ptADGNWradsgnw 2.3.6'
2016-02-08 15:00:34 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 15:00:34 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 15:00:34 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 15:00:34 tunnelblickd[7013] Status = 0 from tunnelblick-helper command 'kill 7019'
2016-02-08 15:00:35 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 15:00:35 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 15:00:35 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 15:00:35 tunnelblickd[7013] Status = 0 from tunnelblick-helper command 'postDisconnect Username_VPN_CONFIG.tblk 1'
2016-02-08 15:01:08 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 15:01:08 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 15:01:09 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 15:01:09 tunnelblickd[7061] Status = 0 from tunnelblick-helper command 'printSanitizedConfigurationFile Username_VPN_CONFIG.tblk 0'
2016-02-08 17:20:22 Tunnelblick[6972] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2016-02-08 17:20:22 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 17:20:23 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 17:20:23 Tunnelblick[6972] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 17:20:23 tunnelblickd[7529] Status = 0 from tunnelblick-helper command 'deleteLogs'
2016-02-08 17:20:23 Tunnelblick[6972] Finished shutting down Tunnelblick; allowing termination
2016-02-08 17:20:26 Tunnelblick[7531] Set program update feedURL to https://www.tunnelblick.net/appcast-s.rss
2016-02-08 17:20:36 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn at line 9: Copied ca.crt
2016-02-08 17:20:36 Tunnelblick[7531] Changed permissions from 644 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-jSeNuU/Username_VPN_CONFIG_Test.tblk/Contents/Resources/ca.crt
2016-02-08 17:20:36 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn at line 10: Copied Username_secure.crt
2016-02-08 17:20:36 Tunnelblick[7531] Changed permissions from 644 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-jSeNuU/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.crt
2016-02-08 17:20:36 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn at line 11: Copied Username_secure.key
2016-02-08 17:20:36 Tunnelblick[7531] Changed permissions from 600 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-jSeNuU/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.key
2016-02-08 17:20:36 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn: Converted OpenVPN configuration
2016-02-08 17:20:40 Tunnelblick[7531] Beginning installation or repair
2016-02-08 17:20:40 authexec[7546] executing /Applications/Tunnelblick.app/Contents/Resources/installer
2016-02-08 17:20:41 Tunnelblick[7531] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2016-02-08 17:20:40. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                            /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-jSeNuU/Username_VPN_CONFIG_Test.tblk
                                       Copied /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-jSeNuU/Username_VPN_CONFIG_Test.tblk
                                           to /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk and its contents from 501:20 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.key
                                       Tunnelblick installer finished without error
2016-02-08 17:20:54 Tunnelblick[7531] Beginning installation or repair
2016-02-08 17:20:54 authexec[7560] executing /Applications/Tunnelblick.app/Contents/Resources/installer
2016-02-08 17:20:54 Tunnelblick[7531] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2016-02-08 17:20:54. 2 arguments: 0x2001
                                            /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                       removed /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                       Tunnelblick installer finished without error
2016-02-08 17:20:54 Tunnelblick[7531] Uninstalled configuration file /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
2016-02-08 17:21:06 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn at line 9: Copied ca.crt
2016-02-08 17:21:06 Tunnelblick[7531] Changed permissions from 644 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-qtIEHm/Username_VPN_CONFIG_Test.tblk/Contents/Resources/ca.crt
2016-02-08 17:21:06 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn at line 10: Copied Username_secure.crt
2016-02-08 17:21:06 Tunnelblick[7531] Changed permissions from 644 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-qtIEHm/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.crt
2016-02-08 17:21:06 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn at line 11: Copied Username_secure.key
2016-02-08 17:21:06 Tunnelblick[7531] Changed permissions from 600 to 740 on /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-qtIEHm/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.key
2016-02-08 17:21:06 Tunnelblick[7531] Converting/Installing /Users/Username/Downloads/Username_Secure_VPN/Username_VPN_CONFIG_Test.ovpn: Converted OpenVPN configuration
2016-02-08 17:21:09 Tunnelblick[7531] Beginning installation or repair
2016-02-08 17:21:09 authexec[7571] executing /Applications/Tunnelblick.app/Contents/Resources/installer
2016-02-08 17:21:10 Tunnelblick[7531] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2016-02-08 17:21:09. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                            /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-qtIEHm/Username_VPN_CONFIG_Test.tblk
                                       Copied /private/var/folders/th/99qkszgd0r54006j812twzbc0000gn/T/Tunnelblick-qtIEHm/Username_VPN_CONFIG_Test.tblk
                                           to /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk and its contents from 501:20 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Username_VPN_CONFIG_Test.tblk/Contents/Resources/Username_secure.key
                                       Tunnelblick installer finished without error
2016-02-08 17:21:17 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 17:21:17 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 17:21:18 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 17:21:18 tunnelblickd[7578] Status = 0 from tunnelblick-helper command 'printSanitizedConfigurationFile Username_VPN_CONFIG_Test.tblk 3'
2016-02-08 17:21:18 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 17:21:18 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 17:21:18 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 17:21:19 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.800000 seconds...
2016-02-08 17:21:19 tunnelblickd[7578] Status = 0 from tunnelblick-helper command 'start Username_VPN_CONFIG_Test.tblk 1337 1 0 3 0 16688 -ptADGNWradsgnw 2.3.6'
2016-02-08 17:21:48 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 17:21:48 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 17:21:48 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 17:21:48 tunnelblickd[7578] Status = 0 from tunnelblick-helper command 'kill 7583'
2016-02-08 17:21:49 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 17:21:50 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 17:21:50 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 17:21:50 tunnelblickd[7578] Status = 0 from tunnelblick-helper command 'postDisconnect Username_VPN_CONFIG_Test.tblk 3'
2016-02-08 17:21:57 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.100000 seconds...
2016-02-08 17:21:58 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.200000 seconds...
2016-02-08 17:21:58 Tunnelblick[7531] runTunnelblickd: no data available from tunnelblickd socket; sleeping 0.400000 seconds...
2016-02-08 17:21:58 tunnelblickd[7578] Status = 0 from tunnelblick-helper command 'printSanitizedConfigurationFile Username_VPN_CONFIG_Test.tblk 3'

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) UUID <Linked Against>
   62    0 0xffffff7f80b74000 0x4a000    0x4a000    at.obdev.nke.LittleSnitch (4356) 55807244-E4FF-30BD-9A57-A467D8E5CD8F <5 4 3 1>
  118    0 0xffffff7f8215c000 0x2f000    0x2f000    com.checkpoint.cpfw (1.0) 2A0ABE40-4B21-3C6C-B322-179EE7B49B48 <5 4 3 1>

Firewallsettings:

username@raspberrypi:/home/pi# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Listening Ports:

user@raspberrypi:/home/pi# netstat -pln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:53              0.0.0.0:*               LISTEN      474/dnsmasq     
tcp        0      0 127.0.0.1:3350          0.0.0.0:*               LISTEN      671/xrdp-sesman 
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      546/sshd        
tcp        0      0 0.0.0.0:3389            0.0.0.0:*               LISTEN      662/xrdp        
tcp6       0      0 :::53                   :::*                    LISTEN      474/dnsmasq     
tcp6       0      0 :::22                   :::*                    LISTEN      546/sshd        
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           355/avahi-daemon: r
udp        0      0 0.0.0.0:58614           0.0.0.0:*                           355/avahi-daemon: r
udp        0      0 0.0.0.0:53              0.0.0.0:*                           474/dnsmasq     
udp        0      0 0.0.0.0:68              0.0.0.0:*                           379/dhcpcd      
udp        0      0 192.168.0.4:123         0.0.0.0:*                           630/ntpd        
udp        0      0 127.0.0.1:123           0.0.0.0:*                           630/ntpd        
udp        0      0 0.0.0.0:123             0.0.0.0:*                           630/ntpd        
udp6       0      0 :::53410                :::*                                355/avahi-daemon: r
udp6       0      0 :::5353                 :::*                                355/avahi-daemon: r
udp6       0      0 :::53                   :::*                                474/dnsmasq     
udp6       0      0 fe80::6e87:b3e:c4ac:123 :::*                                630/ntpd        
udp6       0      0 ::1:123                 :::*                                630/ntpd        
udp6       0      0 :::123                  :::*                                630/ntpd        
raw6       0      0 :::58                   :::*                    7           379/dhcpcd      
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node   PID/Program name    Path
unix  2      [ ACC ]     STREAM     LISTENING     12299    699/systemd         /run/user/1000/systemd/private
unix  2      [ ACC ]     STREAM     LISTENING     10402    688/X               @/tmp/.X11-unix/X0
unix  2      [ ACC ]     STREAM     LISTENING     11385    770/dbus-daemon     @/tmp/dbus-1FgEW9WVOM
unix  2      [ ACC ]     STREAM     LISTENING     10403    688/X               /tmp/.X11-unix/X0
unix  2      [ ACC ]     STREAM     LISTENING     7052     1/init              /var/run/avahi-daemon/socket
unix  2      [ ACC ]     STREAM     LISTENING     7055     1/init              /var/run/dbus/system_bus_socket
unix  2      [ ACC ]     STREAM     LISTENING     11380    766/ssh-agent       /tmp/ssh-9ZQ8jc46eCRY/agent.740
unix  2      [ ACC ]     STREAM     LISTENING     11425    805/ssh-agent       /tmp/ssh-gHcM1j1IAmNy/agent.800
unix  2      [ ACC ]     STREAM     LISTENING     11432    796/pcmanfm         /tmp/.pcmanfm-socket--0-pi
unix  2      [ ACC ]     STREAM     LISTENING     12584    849/menu-cached     /tmp/.menu-cached-:0-pi
unix  2      [ ACC ]     STREAM     LISTENING     7071     379/dhcpcd          /var/run/dhcpcd.sock
unix  2      [ ACC ]     STREAM     LISTENING     7073     379/dhcpcd          /var/run/dhcpcd.unpriv.sock
unix  2      [ ACC ]     STREAM     LISTENING     4787     1/init              /run/systemd/private
unix  2      [ ACC ]     SEQPACKET  LISTENING     4809     1/init              /run/udev/control
unix  2      [ ACC ]     STREAM     LISTENING     4813     1/init              /run/systemd/journal/stdout

thx for your help!

Traffic

You posted your client log:

Traffic wrotePlease post your complete server log at verb 4 (not verb 6)

However:

tridh wroteListening Ports:

user@raspberrypi:/home/pi# netstat -pln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:53              0.0.0.0:*               LISTEN      474/dnsmasq     
tcp        0      0 127.0.0.1:3350          0.0.0.0:*               LISTEN      671/xrdp-sesman
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      546/sshd       
tcp        0      0 0.0.0.0:3389            0.0.0.0:*               LISTEN      662/xrdp       
tcp6       0      0 :::53                   :::*                    LISTEN      474/dnsmasq     
tcp6       0      0 :::22                   :::*                    LISTEN      546/sshd       
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           355/avahi-daemon: r
udp        0      0 0.0.0.0:58614           0.0.0.0:*                           355/avahi-daemon: r
udp        0      0 0.0.0.0:53              0.0.0.0:*                           474/dnsmasq     
udp        0      0 0.0.0.0:68              0.0.0.0:*                           379/dhcpcd     
udp        0      0 192.168.0.4:123         0.0.0.0:*                           630/ntpd       
udp        0      0 127.0.0.1:123           0.0.0.0:*                           630/ntpd       
udp        0      0 0.0.0.0:123             0.0.0.0:*                           630/ntpd       
udp6       0      0 :::53410                :::*                                355/avahi-daemon: r
udp6       0      0 :::5353                 :::*                                355/avahi-daemon: r
udp6       0      0 :::53                   :::*                                474/dnsmasq     
udp6       0      0 fe80::6e87:b3e:c4ac:123 :::*                                630/ntpd       
udp6       0      0 ::1:123                 :::*                                630/ntpd       
udp6       0      0 :::123                  :::*                                630/ntpd       
raw6       0      0 :::58                   :::*                    7           379/dhcpcd

if user@raspberrypi is your server then it does support your earlier theory:

tridh wroteIt looks a little bit like the open vpn diddnt listen on port 443!

It looks like openvpn server is not running at all ..

tridh

Was thinking the same way but:

User@raspberrypi:/home/pi# service openvpn status
● openvpn.service - OpenVPN service
   Loaded: loaded (/lib/systemd/system/openvpn.service; enabled)
   Active: active (exited) since Mon 2016-02-08 15:05:40 CET; 3h 38min ago
  Process: 539 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
 Main PID: 539 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/openvpn.service

Feb 08 15:05:40 raspberrypi systemd[1]: Starting OpenVPN service...
Feb 08 15:05:40 raspberrypi systemd[1]: Started OpenVPN service.

Server Config:

dev tun
proto tcp
port 443
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/RPI.crt
key /etc/openvpn/easy-rsa/keys/RPI.key
# WICHTIG: Hier die Datei entsprechend der Schlüssellänge (Schritt 3) eintragen
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
#user nobody
#group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 4
client-to-client
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
log-append /var/log/openvpn
log-append /var/log/openvpn
comp-lzo

Traffic

Traffic wroteYou posted your client log:
Traffic wrotePlease post your complete server log at verb 4 (not verb 6)

:roll:

tridh

Traffic wrote
Traffic wroteYou posted your client log:
Traffic wrotePlease post your complete server log at verb 4 (not verb 6)
:roll:

there is not log or folder at /var/log/openvpn

Traffic

Start openvpn like so:

$ sudo openvpn --config /path/to/server.conf

tridh

Traffic wroteStart openvpn like so:

$ sudo openvpn --config /path/to/server.conf

thanks, this was the solution!
Anything to do now, or is the config now saved for ever?

Traffic

No .. you need to learn about systemd unit files:
Systemd Official Website

I can see from your journal:

tridh wrote

User@raspberrypi:/home/pi# service openvpn status
● openvpn.service - OpenVPN service
   Loaded: loaded (/lib/systemd/system/openvpn.service; enabled)
   Active: active (exited) since Mon 2016-02-08 15:05:40 CET; 3h 38min ago
  Process: 539 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
 Main PID: 539 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/openvpn.service

Feb 08 15:05:40 raspberrypi systemd[1]: Starting OpenVPN service...
Feb 08 15:05:40 raspberrypi systemd[1]: Started OpenVPN service.

Note:

Loaded: loaded (/lib/systemd/system/openvpn.service; enabled)
This is your in use unit file.
Process: 539 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
Your in use unit file is incorrectly configured .. it does not try to start openvpn.

You will also need to check the Raspbian systemd documentation.