Hi All,
I've been banging my head against the wall; I'll show you what I"ve done and hopefully you can help!
sudo apt-get -y update
sudo apt-get -fy upgrade
sudo apt-get -y install openvpn
sudo apt-get -y install git-core
cd /etc/openvpn
sudo git clone https://github.com/OpenVPN/easy-rsa.git
cd /etc/openvpn/easy-rsa/easyrsa3/
sudo ./easyrsa init-pki
sudo ./easyrsa build-ca
sudo ./easyrsa gen-req server nopass
sudo ./easyrsa sign server server
sudo ./easyrsa gen-req client nopass
sudo ./easyrsa sign client client
sudo openssl rsa -in /etc/openvpn/easy-rsa/easyrsa3/pki/private/client.key -des3 -out /etc/openvpn/easy-rsa/easyrsa3/pki/private/client.3des.key
sudo ./easyrsa gen-dh
sudo openvpn --genkey --secret /etc/openvpn/easy-rsa/easyrsa3/pki/private/ta.key
server.conf
local 10.0.0.2
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/easyrsa3/pki/ca.crt
cert /etc/openvpn/easy-rsa/easyrsa3/pki/issued/server.crt
key /etc/openvpn/easy-rsa/easyrsa3/pki/private/server.key
dh /etc/openvpn/easy-rsa/easyrsa3/pki/dh.pem
ifconfig-pool-persist ipp.txt
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 10.8.0.0 255.255.255.0"
push "route 10.0.0.2 255.255.255.0"
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/easyrsa3/pki/private/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 4
client.ovpn
client
dev tun
proto udp
remote www.////////.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
key-direction 1
cipher AES-128-CBC
comp-lzo
verb 1
mute 20
<ca>
-----BEGIN CERTIFICATE-----
asdf....
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
asdf....
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,...
-----END RSA PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-auth>
/var/log/openvpn.log
Sun Feb 28 09:10:25 2016 us=228632 Current Parameter Settings:
Sun Feb 28 09:10:25 2016 us=228969 config = '/etc/openvpn/server.conf'
Sun Feb 28 09:10:25 2016 us=229044 mode = 1
Sun Feb 28 09:10:25 2016 us=229103 persist_config = DISABLED
Sun Feb 28 09:10:25 2016 us=229162 persist_mode = 1
Sun Feb 28 09:10:25 2016 us=229220 show_ciphers = DISABLED
Sun Feb 28 09:10:25 2016 us=229276 show_digests = DISABLED
Sun Feb 28 09:10:25 2016 us=229333 show_engines = DISABLED
Sun Feb 28 09:10:25 2016 us=229389 genkey = DISABLED
Sun Feb 28 09:10:25 2016 us=229446 key_pass_file = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=229502 show_tls_ciphers = DISABLED
Sun Feb 28 09:10:25 2016 us=229671 Connection profiles [default]:
Sun Feb 28 09:10:25 2016 us=229754 proto = udp
Sun Feb 28 09:10:25 2016 us=229814 local = '10.0.0.2'
Sun Feb 28 09:10:25 2016 us=229871 local_port = 1194
Sun Feb 28 09:10:25 2016 us=229927 remote = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=229983 remote_port = 1194
Sun Feb 28 09:10:25 2016 us=230039 remote_float = DISABLED
Sun Feb 28 09:10:25 2016 us=230096 bind_defined = DISABLED
Sun Feb 28 09:10:25 2016 us=230151 bind_local = ENABLED
Sun Feb 28 09:10:25 2016 us=230207 connect_retry_seconds = 5
Sun Feb 28 09:10:25 2016 us=230263 connect_timeout = 10
Sun Feb 28 09:10:25 2016 us=230320 connect_retry_max = 0
Sun Feb 28 09:10:25 2016 us=230376 socks_proxy_server = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=230433 socks_proxy_port = 0
Sun Feb 28 09:10:25 2016 us=230490 socks_proxy_retry = DISABLED
Sun Feb 28 09:10:25 2016 us=230548 tun_mtu = 1500
Sun Feb 28 09:10:25 2016 us=230605 tun_mtu_defined = ENABLED
Sun Feb 28 09:10:25 2016 us=230661 link_mtu = 1500
Sun Feb 28 09:10:25 2016 us=230717 link_mtu_defined = DISABLED
Sun Feb 28 09:10:25 2016 us=230774 tun_mtu_extra = 0
Sun Feb 28 09:10:25 2016 us=230830 tun_mtu_extra_defined = DISABLED
Sun Feb 28 09:10:25 2016 us=230886 mtu_discover_type = -1
Sun Feb 28 09:10:25 2016 us=230942 fragment = 0
Sun Feb 28 09:10:25 2016 us=230997 mssfix = 1450
Sun Feb 28 09:10:25 2016 us=231053 explicit_exit_notification = 0
Sun Feb 28 09:10:25 2016 us=231111 Connection profiles END
Sun Feb 28 09:10:25 2016 us=231168 remote_random = DISABLED
Sun Feb 28 09:10:25 2016 us=231224 ipchange = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=231280 dev = 'tun'
Sun Feb 28 09:10:25 2016 us=231336 dev_type = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=231392 dev_node = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=231447 lladdr = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=231503 topology = 1
Sun Feb 28 09:10:25 2016 us=231559 tun_ipv6 = DISABLED
Sun Feb 28 09:10:25 2016 us=231615 ifconfig_local = '10.8.0.1'
Sun Feb 28 09:10:25 2016 us=231672 ifconfig_remote_netmask = '10.8.0.2'
Sun Feb 28 09:10:25 2016 us=231728 ifconfig_noexec = DISABLED
Sun Feb 28 09:10:25 2016 us=231784 ifconfig_nowarn = DISABLED
Sun Feb 28 09:10:25 2016 us=231841 ifconfig_ipv6_local = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=231898 ifconfig_ipv6_netbits = 0
Sun Feb 28 09:10:25 2016 us=231954 ifconfig_ipv6_remote = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=232010 shaper = 0
Sun Feb 28 09:10:25 2016 us=232066 mtu_test = 0
Sun Feb 28 09:10:25 2016 us=232121 mlock = DISABLED
Sun Feb 28 09:10:25 2016 us=232178 keepalive_ping = 10
Sun Feb 28 09:10:25 2016 us=232234 keepalive_timeout = 120
Sun Feb 28 09:10:25 2016 us=232290 inactivity_timeout = 0
Sun Feb 28 09:10:25 2016 us=232346 ping_send_timeout = 10
Sun Feb 28 09:10:25 2016 us=232402 ping_rec_timeout = 240
Sun Feb 28 09:10:25 2016 us=232458 ping_rec_timeout_action = 2
Sun Feb 28 09:10:25 2016 us=232514 ping_timer_remote = DISABLED
Sun Feb 28 09:10:25 2016 us=232571 remap_sigusr1 = 0
Sun Feb 28 09:10:25 2016 us=232627 persist_tun = ENABLED
Sun Feb 28 09:10:25 2016 us=232684 persist_local_ip = DISABLED
Sun Feb 28 09:10:25 2016 us=232740 persist_remote_ip = DISABLED
Sun Feb 28 09:10:25 2016 us=232796 persist_key = ENABLED
Sun Feb 28 09:10:25 2016 us=232852 passtos = DISABLED
Sun Feb 28 09:10:25 2016 us=232909 resolve_retry_seconds = 1000000000
Sun Feb 28 09:10:25 2016 us=233003 username = 'nobody'
Sun Feb 28 09:10:25 2016 us=233062 groupname = 'nogroup'
Sun Feb 28 09:10:25 2016 us=233119 chroot_dir = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=233175 cd_dir = '/etc/openvpn'
Sun Feb 28 09:10:25 2016 us=233231 writepid = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=233287 up_script = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=233343 down_script = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=233399 down_pre = DISABLED
Sun Feb 28 09:10:25 2016 us=233455 up_restart = DISABLED
Sun Feb 28 09:10:25 2016 us=233523 up_delay = DISABLED
Sun Feb 28 09:10:25 2016 us=233584 daemon = ENABLED
Sun Feb 28 09:10:25 2016 us=233641 inetd = 0
Sun Feb 28 09:10:25 2016 us=233697 log = ENABLED
Sun Feb 28 09:10:25 2016 us=233753 suppress_timestamps = DISABLED
Sun Feb 28 09:10:25 2016 us=233809 nice = 0
Sun Feb 28 09:10:25 2016 us=233865 verbosity = 4
Sun Feb 28 09:10:25 2016 us=233921 mute = 0
Sun Feb 28 09:10:25 2016 us=233977 gremlin = 0
Sun Feb 28 09:10:25 2016 us=234034 status_file = '/var/log/openvpn-status.log'
Sun Feb 28 09:10:25 2016 us=234091 status_file_version = 1
Sun Feb 28 09:10:25 2016 us=234148 status_file_update_freq = 20
Sun Feb 28 09:10:25 2016 us=234204 occ = ENABLED
Sun Feb 28 09:10:25 2016 us=234260 rcvbuf = 65536
Sun Feb 28 09:10:25 2016 us=234317 sndbuf = 65536
Sun Feb 28 09:10:25 2016 us=234372 mark = 0
Sun Feb 28 09:10:25 2016 us=234429 sockflags = 0
Sun Feb 28 09:10:25 2016 us=234484 fast_io = DISABLED
Sun Feb 28 09:10:25 2016 us=234539 lzo = 7
Sun Feb 28 09:10:25 2016 us=234595 route_script = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=234651 route_default_gateway = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=234707 route_default_metric = 0
Sun Feb 28 09:10:25 2016 us=234764 route_noexec = DISABLED
Sun Feb 28 09:10:25 2016 us=234821 route_delay = 0
Sun Feb 28 09:10:25 2016 us=234879 route_delay_window = 30
Sun Feb 28 09:10:25 2016 us=234936 route_delay_defined = DISABLED
Sun Feb 28 09:10:25 2016 us=234993 route_nopull = DISABLED
Sun Feb 28 09:10:25 2016 us=235051 route_gateway_via_dhcp = DISABLED
Sun Feb 28 09:10:25 2016 us=235109 max_routes = 100
Sun Feb 28 09:10:25 2016 us=235166 allow_pull_fqdn = DISABLED
Sun Feb 28 09:10:25 2016 us=235227 route 10.8.0.0/255.255.255.0/nil/nil
Sun Feb 28 09:10:25 2016 us=235285 management_addr = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=235343 management_port = 0
Sun Feb 28 09:10:25 2016 us=235400 management_user_pass = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=235458 management_log_history_cache = 250
Sun Feb 28 09:10:25 2016 us=235515 management_echo_buffer_size = 100
Sun Feb 28 09:10:25 2016 us=235573 management_write_peer_info_file = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=235630 management_client_user = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=235687 management_client_group = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=235745 management_flags = 0
Sun Feb 28 09:10:25 2016 us=235802 shared_secret_file = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=235861 key_direction = 1
Sun Feb 28 09:10:25 2016 us=235918 ciphername_defined = ENABLED
Sun Feb 28 09:10:25 2016 us=235976 ciphername = 'AES-128-CBC'
Sun Feb 28 09:10:25 2016 us=236033 authname_defined = ENABLED
Sun Feb 28 09:10:25 2016 us=236090 authname = 'SHA1'
Sun Feb 28 09:10:25 2016 us=236147 prng_hash = 'SHA1'
Sun Feb 28 09:10:25 2016 us=236206 prng_nonce_secret_len = 16
Sun Feb 28 09:10:25 2016 us=236262 keysize = 0
Sun Feb 28 09:10:25 2016 us=236319 engine = DISABLED
Sun Feb 28 09:10:25 2016 us=236376 replay = ENABLED
Sun Feb 28 09:10:25 2016 us=236433 mute_replay_warnings = DISABLED
Sun Feb 28 09:10:25 2016 us=236490 replay_window = 64
Sun Feb 28 09:10:25 2016 us=236547 replay_time = 15
Sun Feb 28 09:10:25 2016 us=236603 packet_id_file = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=236660 use_iv = ENABLED
Sun Feb 28 09:10:25 2016 us=236716 test_crypto = DISABLED
Sun Feb 28 09:10:25 2016 us=236773 tls_server = ENABLED
Sun Feb 28 09:10:25 2016 us=236829 tls_client = DISABLED
Sun Feb 28 09:10:25 2016 us=236915 key_method = 2
Sun Feb 28 09:10:25 2016 us=236974 ca_file = '/etc/openvpn/easy-rsa/easyrsa3/pki/ca.crt'
Sun Feb 28 09:10:25 2016 us=237032 ca_path = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=237090 dh_file = '/etc/openvpn/easy-rsa/easyrsa3/pki/dh.pem'
Sun Feb 28 09:10:25 2016 us=237148 cert_file = '/etc/openvpn/easy-rsa/easyrsa3/pki/issued/server.crt'
Sun Feb 28 09:10:25 2016 us=237207 priv_key_file = '/etc/openvpn/easy-rsa/easyrsa3/pki/private/server.key'
Sun Feb 28 09:10:25 2016 us=237264 pkcs12_file = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=237322 cipher_list = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=237379 tls_verify = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=237435 tls_export_cert = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=237493 verify_x509_type = 0
Sun Feb 28 09:10:25 2016 us=237550 verify_x509_name = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=237607 crl_file = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=237665 ns_cert_type = 0
Sun Feb 28 09:10:25 2016 us=237722 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=237779 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=237837 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=237895 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=237951 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238008 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238064 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238120 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238177 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238234 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238291 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238349 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238405 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238462 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238519 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238577 remote_cert_ku[i] = 0
Sun Feb 28 09:10:25 2016 us=238634 remote_cert_eku = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=238691 ssl_flags = 0
Sun Feb 28 09:10:25 2016 us=238748 tls_timeout = 2
Sun Feb 28 09:10:25 2016 us=238805 renegotiate_bytes = 0
Sun Feb 28 09:10:25 2016 us=238862 renegotiate_packets = 0
Sun Feb 28 09:10:25 2016 us=238919 renegotiate_seconds = 3600
Sun Feb 28 09:10:25 2016 us=238975 handshake_window = 60
Sun Feb 28 09:10:25 2016 us=239032 transition_window = 3600
Sun Feb 28 09:10:25 2016 us=239088 single_session = DISABLED
Sun Feb 28 09:10:25 2016 us=239144 push_peer_info = DISABLED
Sun Feb 28 09:10:25 2016 us=239200 tls_exit = DISABLED
Sun Feb 28 09:10:25 2016 us=239257 tls_auth_file = '/etc/openvpn/easy-rsa/easyrsa3/pki/private/ta.key'
Sun Feb 28 09:10:25 2016 us=239316 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239374 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239431 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239488 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239572 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239649 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239711 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239773 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239834 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239892 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=239949 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=240008 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=240066 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=240123 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=240181 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=240238 pkcs11_protected_authentication = DISABLED
Sun Feb 28 09:10:25 2016 us=240298 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240357 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240448 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240508 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240567 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240625 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240685 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240743 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240802 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240860 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240918 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=240975 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=241033 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=241091 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=241148 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=241206 pkcs11_private_mode = 00000000
Sun Feb 28 09:10:25 2016 us=241263 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241319 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241376 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241432 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241489 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241546 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241603 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241659 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241716 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241772 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241828 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241885 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241942 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=241999 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=242056 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=242113 pkcs11_cert_private = DISABLED
Sun Feb 28 09:10:25 2016 us=242171 pkcs11_pin_cache_period = -1
Sun Feb 28 09:10:25 2016 us=242228 pkcs11_id = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=242285 pkcs11_id_management = DISABLED
Sun Feb 28 09:10:25 2016 us=242362 server_network = 10.8.0.0
Sun Feb 28 09:10:25 2016 us=242428 server_netmask = 255.255.255.0
Sun Feb 28 09:10:25 2016 us=242495 server_network_ipv6 = ::
Sun Feb 28 09:10:25 2016 us=242554 server_netbits_ipv6 = 0
Sun Feb 28 09:10:25 2016 us=242617 server_bridge_ip = 0.0.0.0
Sun Feb 28 09:10:25 2016 us=242681 server_bridge_netmask = 0.0.0.0
Sun Feb 28 09:10:25 2016 us=242744 server_bridge_pool_start = 0.0.0.0
Sun Feb 28 09:10:25 2016 us=242807 server_bridge_pool_end = 0.0.0.0
Sun Feb 28 09:10:25 2016 us=242866 push_entry = 'route 10.8.0.1 255.255.255.255'
Sun Feb 28 09:10:25 2016 us=242925 push_entry = 'route 10.8.0.0 255.255.255.0'
Sun Feb 28 09:10:25 2016 us=242983 push_entry = 'route 10.8.0.0 255.255.255.0'
Sun Feb 28 09:10:25 2016 us=243041 push_entry = 'route 10.0.0.2 255.255.255.0'
Sun Feb 28 09:10:25 2016 us=243099 push_entry = 'redirect-gateway def1'
Sun Feb 28 09:10:25 2016 us=243156 push_entry = 'route 10.8.0.0 255.255.255.0'
Sun Feb 28 09:10:25 2016 us=243213 push_entry = 'topology net30'
Sun Feb 28 09:10:25 2016 us=243269 push_entry = 'ping 10'
Sun Feb 28 09:10:25 2016 us=243325 push_entry = 'ping-restart 120'
Sun Feb 28 09:10:25 2016 us=243382 ifconfig_pool_defined = ENABLED
Sun Feb 28 09:10:25 2016 us=243446 ifconfig_pool_start = 10.8.0.4
Sun Feb 28 09:10:25 2016 us=243509 ifconfig_pool_end = 10.8.0.251
Sun Feb 28 09:10:25 2016 us=243573 ifconfig_pool_netmask = 0.0.0.0
Sun Feb 28 09:10:25 2016 us=243631 ifconfig_pool_persist_filename = 'ipp.txt'
Sun Feb 28 09:10:25 2016 us=243689 ifconfig_pool_persist_refresh_freq = 600
Sun Feb 28 09:10:25 2016 us=243747 ifconfig_ipv6_pool_defined = DISABLED
Sun Feb 28 09:10:25 2016 us=243808 ifconfig_ipv6_pool_base = ::
Sun Feb 28 09:10:25 2016 us=243866 ifconfig_ipv6_pool_netbits = 0
Sun Feb 28 09:10:25 2016 us=243950 n_bcast_buf = 256
Sun Feb 28 09:10:25 2016 us=244010 tcp_queue_limit = 64
Sun Feb 28 09:10:25 2016 us=244067 real_hash_size = 256
Sun Feb 28 09:10:25 2016 us=244125 virtual_hash_size = 256
Sun Feb 28 09:10:25 2016 us=244182 client_connect_script = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=244240 learn_address_script = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=244298 client_disconnect_script = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=244355 client_config_dir = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=244412 ccd_exclusive = DISABLED
Sun Feb 28 09:10:25 2016 us=244469 tmp_dir = '/tmp'
Sun Feb 28 09:10:25 2016 us=244526 push_ifconfig_defined = DISABLED
Sun Feb 28 09:10:25 2016 us=244590 push_ifconfig_local = 0.0.0.0
Sun Feb 28 09:10:25 2016 us=244653 push_ifconfig_remote_netmask = 0.0.0.0
Sun Feb 28 09:10:25 2016 us=244710 push_ifconfig_ipv6_defined = DISABLED
Sun Feb 28 09:10:25 2016 us=244772 push_ifconfig_ipv6_local = ::/0
Sun Feb 28 09:10:25 2016 us=244834 push_ifconfig_ipv6_remote = ::
Sun Feb 28 09:10:25 2016 us=244892 enable_c2c = ENABLED
Sun Feb 28 09:10:25 2016 us=244949 duplicate_cn = ENABLED
Sun Feb 28 09:10:25 2016 us=245004 cf_max = 0
Sun Feb 28 09:10:25 2016 us=245059 cf_per = 0
Sun Feb 28 09:10:25 2016 us=245114 max_clients = 1024
Sun Feb 28 09:10:25 2016 us=245170 max_routes_per_client = 256
Sun Feb 28 09:10:25 2016 us=245227 auth_user_pass_verify_script = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=245285 auth_user_pass_verify_script_via_file = DISABLED
Sun Feb 28 09:10:25 2016 us=245342 port_share_host = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=245399 port_share_port = 0
Sun Feb 28 09:10:25 2016 us=245455 client = DISABLED
Sun Feb 28 09:10:25 2016 us=245511 pull = DISABLED
Sun Feb 28 09:10:25 2016 us=245568 auth_user_pass_file = '[UNDEF]'
Sun Feb 28 09:10:25 2016 us=245631 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Sun Feb 28 09:10:25 2016 us=245733 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Sun Feb 28 09:10:25 2016 us=246324 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Sun Feb 28 09:10:25 2016 us=412211 Diffie-Hellman initialized with 2048 bit key
Sun Feb 28 09:10:25 2016 us=414702 Control Channel Authentication: using '/etc/openvpn/easy-rsa/easyrsa3/pki/private/ta.key' as a OpenVPN static key file
Sun Feb 28 09:10:25 2016 us=414837 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 28 09:10:25 2016 us=414917 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 28 09:10:25 2016 us=415001 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sun Feb 28 09:10:25 2016 us=415111 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sun Feb 28 09:10:25 2016 us=415736 ROUTE_GATEWAY 10.0.0.1/255.255.255.0 IFACE=eth0 HWADDR=b8:27:eb:2c:2d:45
Sun Feb 28 09:10:25 2016 us=417806 TUN/TAP device tun0 opened
Sun Feb 28 09:10:25 2016 us=417993 TUN/TAP TX queue length set to 100
Sun Feb 28 09:10:25 2016 us=418115 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sun Feb 28 09:10:25 2016 us=418270 /sbin/ip link set dev tun0 up mtu 1500
Sun Feb 28 09:10:25 2016 us=425807 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Feb 28 09:10:25 2016 us=433522 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Feb 28 09:10:25 2016 us=440493 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Feb 28 09:10:25 2016 us=444427 GID set to nogroup
Sun Feb 28 09:10:25 2016 us=444713 UID set to nobody
Sun Feb 28 09:10:25 2016 us=444816 UDPv4 link local (bound): [AF_INET]10.0.0.2:1194
Sun Feb 28 09:10:25 2016 us=444892 UDPv4 link remote: [undef]
Sun Feb 28 09:10:25 2016 us=444965 MULTI: multi_init called, r=256 v=256
Sun Feb 28 09:10:25 2016 us=445430 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Feb 28 09:10:25 2016 us=445520 IFCONFIG POOL LIST
Sun Feb 28 09:10:25 2016 us=445697 Initialization Sequence Completed
Sun Feb 28 09:10:47 2016 us=39865 MULTI: multi_create_instance called
Sun Feb 28 09:10:47 2016 us=40477 10.0.0.10:59271 Re-using SSL/TLS context
Sun Feb 28 09:10:47 2016 us=40815 10.0.0.10:59271 LZO compression initialized
Sun Feb 28 09:10:47 2016 us=42095 10.0.0.10:59271 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sun Feb 28 09:10:47 2016 us=42254 10.0.0.10:59271 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Feb 28 09:10:47 2016 us=42663 10.0.0.10:59271 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Sun Feb 28 09:10:47 2016 us=42765 10.0.0.10:59271 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Sun Feb 28 09:10:47 2016 us=42966 10.0.0.10:59271 Local Options hash (VER=V4): 'a2e63101'
Sun Feb 28 09:10:47 2016 us=43120 10.0.0.10:59271 Expected Remote Options hash (VER=V4): '272f1b58'
Sun Feb 28 09:10:47 2016 us=43376 10.0.0.10:59271 TLS: Initial packet from [AF_INET]10.0.0.10:59271, sid=00c911d7 36a8ec25
Sun Feb 28 09:11:17 2016 us=300059 MULTI: multi_create_instance called
Sun Feb 28 09:11:17 2016 us=301187 10.0.0.14:54847 Re-using SSL/TLS context
Sun Feb 28 09:11:17 2016 us=301857 10.0.0.14:54847 LZO compression initialized
Sun Feb 28 09:11:17 2016 us=303142 10.0.0.14:54847 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sun Feb 28 09:11:17 2016 us=303848 10.0.0.14:54847 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Feb 28 09:11:17 2016 us=304708 10.0.0.14:54847 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Sun Feb 28 09:11:17 2016 us=305280 10.0.0.14:54847 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Sun Feb 28 09:11:17 2016 us=306016 10.0.0.14:54847 Local Options hash (VER=V4): 'a2e63101'
Sun Feb 28 09:11:17 2016 us=306587 10.0.0.14:54847 Expected Remote Options hash (VER=V4): '272f1b58'
Sun Feb 28 09:11:17 2016 us=307336 10.0.0.14:54847 TLS: Initial packet from [AF_INET]10.0.0.14:54847, sid=4411450c c594fb0f
Sun Feb 28 09:11:19 2016 us=568802 MULTI: multi_create_instance called
Sun Feb 28 09:11:19 2016 us=569758 10.0.0.14:65319 Re-using SSL/TLS context
Sun Feb 28 09:11:19 2016 us=570289 10.0.0.14:65319 LZO compression initialized
Sun Feb 28 09:11:19 2016 us=571117 10.0.0.14:65319 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sun Feb 28 09:11:19 2016 us=571637 10.0.0.14:65319 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Feb 28 09:11:19 2016 us=572145 10.0.0.14:65319 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Sun Feb 28 09:11:19 2016 us=572674 10.0.0.14:65319 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Sun Feb 28 09:11:19 2016 us=573142 10.0.0.14:65319 Local Options hash (VER=V4): 'a2e63101'
Sun Feb 28 09:11:19 2016 us=573573 10.0.0.14:65319 Expected Remote Options hash (VER=V4): '272f1b58'
Sun Feb 28 09:11:19 2016 us=574015 10.0.0.14:65319 TLS: Initial packet from [AF_INET]10.0.0.14:65319, sid=8e7af5be 62f5f2c5
iPhone client.log
2016-02-28 09:10:46 ----- OpenVPN Start -----
OpenVPN core 3.0 ios arm64 64-bit
2016-02-28 09:10:46 UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
8 [mute-replay-warnings]
13 [verb] [1]
14 [mute] [20]
2016-02-28 09:10:46 LZO-ASYM init swap=0 asym=0
2016-02-28 09:10:46 EVENT: RESOLVE
2016-02-28 09:10:47 Contacting 10.0.0.2:1194 via UDP
2016-02-28 09:10:47 EVENT: WAIT
2016-02-28 09:10:47 SetTunnelSocket returned 1
2016-02-28 09:10:47 Connecting to www.danielanddandi.com:1194 (10.0.0.2) via UDPv4
2016-02-28 09:10:47 EVENT: CONNECTING
2016-02-28 09:10:47 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client
2016-02-28 09:10:47 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.0.5-177
IV_VER=3.0
IV_PLAT=ios
IV_NCP=1
IV_LZO=1
2016-02-28 09:10:47 VERIFY OK: depth=1
cert. version : 3
serial number : F0:49:0B:23:9F:62:AC:A4
issuer name : CN=DNSDHCPPi
subject name : CN=DNSDHCPPi
issued on : 2016-02-28 00:56:17
expires on : 2026-02-25 00:56:17
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=true
key usage : Key Cert Sign, CRL Sign
2016-02-28 09:10:47 VERIFY OK: depth=0
cert. version : 3
serial number : 03
issuer name : CN=DNSDHCPPi
subject name : CN=server
issued on : 2016-02-28 05:33:16
expires on : 2026-02-25 05:33:16
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=false
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication
2016-02-28 09:10:47 VERIFY FAIL -- bad ns-cert-type in leaf certificate
2016-02-28 09:10:47 Transport Error: PolarSSL: SSL read error : X509 - Certificate verification failed, e.g. CRL, CA or signature check failed
2016-02-28 09:10:47 EVENT: CERT_VERIFY_FAIL PolarSSL: SSL read error : X509 - Certificate verification failed, e.g. CRL, CA or signature check failed [ERR]
2016-02-28 09:10:47 EVENT: DISCONNECTED
2016-02-28 09:10:47 Raw stats on disconnect:
BYTES_IN : 2672
BYTES_OUT : 1062
PACKETS_IN : 20
PACKETS_OUT : 20
SSL_ERROR : 1
CERT_VERIFY_FAIL : 1
2016-02-28 09:10:47 Performance stats on disconnect:
CPU usage (microseconds): 31586
Network bytes per CPU second: 118216
Tunnel bytes per CPU second: 0
2016-02-28 09:10:47 EVENT: DISCONNECT_PENDING
2016-02-28 09:10:47 ----- OpenVPN Stop -----
windows client.log
Sun Feb 28 09:11:11 2016 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Feb 1 2016
Sun Feb 28 09:11:11 2016 Windows version 6.2 (Windows 8 or greater)
Sun Feb 28 09:11:11 2016 library versions: OpenSSL 1.0.1r 28 Jan 2016, LZO 2.09
Enter Management Password:
Sun Feb 28 09:11:16 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Feb 28 09:11:16 2016 Control Channel Authentication: tls-auth using INLINE static key file
Sun Feb 28 09:11:16 2016 UDPv4 link local: [undef]
Sun Feb 28 09:11:16 2016 UDPv4 link remote: [AF_INET]10.0.0.2:1194
Sun Feb 28 09:11:17 2016 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sun Feb 28 09:11:17 2016 TLS Error: TLS object -> incoming plaintext read error
Sun Feb 28 09:11:17 2016 TLS Error: TLS handshake failed
Sun Feb 28 09:11:17 2016 SIGUSR1[soft,tls-error] received, process restarting
Sun Feb 28 09:11:19 2016 UDPv4 link local: [undef]
Sun Feb 28 09:11:19 2016 UDPv4 link remote: [AF_INET]10.0.0.2:1194
Sun Feb 28 09:11:19 2016 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Sun Feb 28 09:11:19 2016 TLS Error: TLS object -> incoming plaintext read error
Sun Feb 28 09:11:19 2016 TLS Error: TLS handshake failed
Sun Feb 28 09:11:19 2016 SIGUSR1[soft,tls-error] received, process restarting
Sun Feb 28 09:11:20 2016 SIGTERM[hard,init_instance] received, process exiting
