[Solved] PLC siemens vs OpenVPN server

bigsrl

Hello everybody!

I write here after 5-day of test....but without success. 🙁 🙁 🙁 🙁 🙁 🙁 🙁 🙁

I have an Siemens RTU3030C; it's like a little low-energy PLC to measure water level or pressur ecc...it use an UMTS connection to remote management; due to NAT problem, it can automatically connect to an external OpenVPN server; so I tried to configure an OpenVPN server (using a raspberrypi) in my enterprise.

Siemens specification about server config is:

OpenVPN is implemented on the RTU as a TUN device (routing mode). The following
security functions are supported:
● Encryption
The data to be transferred is encrypted with the CBC method. As standard, AES-256,
DES-168 (DES-EDE3) or BF (Blowfish in Cipher Block Chaining) can be used.
● Authentication of the connection partner
As hash algorithms for authenticating the user data SHA-1, SHA-224 or SHA-256 can be
used.
They RTU uses OpenVPN version V2.3.4.
OpenVPN server
The OpenVPN server must support the following functions:
● OpenVPN V2.3.3 or higher
● OpenSSL with TLS as of version 1.2
● Configuration of the server for TLS version 1.2 four
● Use of "tls-version-min 1.0" in the OpenVPN configuration

my openvpn config file is

dev tun
proto udp
port 1194

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh512.pem

user nobody
group nogroup

remote-cert-tls client

server 10.8.0.0 255.255.255.0
persist-key
persist-tun

tls-server

tls-auth ./easy-rsa/keys/ta.key 1

#tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA
tls-cipher DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA

auth SHA256
#cipher BF-CBC
cipher AES-256-CBC

tls-version-min 1.0

push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

comp-lzo no

log-append /var/log/openvpn

on Siemens configuration page, i have only this parameter:

(obviously on OpenVPN i put my public IP)

Unfortunately log on Siemens PLC is just "work" or "down't work"... :roll: and in openvpn log file i found this error:

Mon Jun 20 12:20:58 2016 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Mon Jun 20 12:20:58 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Mon Jun 20 12:20:58 2016 WARNING: --keepalive option is missing from server config
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-AES256-GCM-SHA384', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-AES256-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-CBC-SHA256'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-AES128-GCM-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-GCM-SHA256'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-AES128-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-CBC-SHA256'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-CAMELLIA256-SHA', please use IANA name 'TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-AES256-SHA', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-CBC-SHA'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-CAMELLIA128-SHA', please use IANA name 'TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'DHE-RSA-AES128-SHA', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-CBC-SHA'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'CAMELLIA256-SHA', please use IANA name 'TLS-RSA-WITH-CAMELLIA-256-CBC-SHA'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'AES256-SHA', please use IANA name 'TLS-RSA-WITH-AES-256-CBC-SHA'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'CAMELLIA128-SHA', please use IANA name 'TLS-RSA-WITH-CAMELLIA-128-CBC-SHA'
Mon Jun 20 12:20:58 2016 Deprecated TLS cipher name 'AES128-SHA', please use IANA name 'TLS-RSA-WITH-AES-128-CBC-SHA'
Mon Jun 20 12:20:58 2016 Control Channel Authentication: using './easy-rsa/keys/ta.key' as a OpenVPN static key file
Mon Jun 20 12:20:58 2016 TUN/TAP device tun0 opened
Mon Jun 20 12:20:58 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jun 20 12:20:58 2016 /sbin/ip link set dev tun0 up mtu 1500
Mon Jun 20 12:20:58 2016 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Jun 20 12:20:58 2016 GID set to nogroup
Mon Jun 20 12:20:58 2016 UID set to nobody
Mon Jun 20 12:20:58 2016 UDPv4 link local (bound): [undef]
Mon Jun 20 12:20:58 2016 UDPv4 link remote: [undef]
Mon Jun 20 12:20:58 2016 Initialization Sequence Completed
Mon Jun 20 12:23:12 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10530
Mon Jun 20 12:23:16 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10530
Mon Jun 20 12:23:23 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10964
Mon Jun 20 12:23:26 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10964
Mon Jun 20 12:30:06 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10423
Mon Jun 20 12:30:09 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10423
Mon Jun 20 12:30:17 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10990
Mon Jun 20 12:30:21 2016 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]5.170.220.6:10990

please someone can help me? I don't know where is the problem...I tried everythink, but sure, it's the first openvpn server I try to set up in my life...

thanks guy

bigsrl

A little update,

I change openvpn.conf with this configuration

dev tun
proto udp
port 1194

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh512.pem


comp-lzo no

user nobody
group nogroup

remote-cert-tls client

server 10.8.0.0 255.255.255.0
persist-key
persist-tun

tls-server

#tls-auth ./easy-rsa/keys/ta.key 0

#tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA
tls-cipher DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA

auth SHA256
#cipher BF-CBC
cipher AES-256-CBC

keepalive 5 20
client-to-client

ping-timer-rem

tls-version-min 1.0

push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"


verb 4
log-append /var/log/openvpn

and i set verbose for log=4

so, new log is

Mon Jun 20 13:39:30 2016 us=254221 Current Parameter Settings:
Mon Jun 20 13:39:30 2016 us=254720   config = 'openvpn.conf'
Mon Jun 20 13:39:30 2016 us=254829   mode = 1
Mon Jun 20 13:39:30 2016 us=254916   persist_config = DISABLED
Mon Jun 20 13:39:30 2016 us=255001   persist_mode = 1
Mon Jun 20 13:39:30 2016 us=255084   show_ciphers = DISABLED
Mon Jun 20 13:39:30 2016 us=255166   show_digests = DISABLED
Mon Jun 20 13:39:30 2016 us=255248   show_engines = DISABLED
Mon Jun 20 13:39:30 2016 us=255330   genkey = DISABLED
Mon Jun 20 13:39:30 2016 us=255413   key_pass_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=255495   show_tls_ciphers = DISABLED
Mon Jun 20 13:39:30 2016 us=255578 Connection profiles [default]:
Mon Jun 20 13:39:30 2016 us=255664   proto = udp
Mon Jun 20 13:39:30 2016 us=255747   local = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=255831   local_port = 1194
Mon Jun 20 13:39:30 2016 us=255914   remote = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=255997   remote_port = 1194
Mon Jun 20 13:39:30 2016 us=256078   remote_float = DISABLED
Mon Jun 20 13:39:30 2016 us=256159   bind_defined = DISABLED
Mon Jun 20 13:39:30 2016 us=256241   bind_local = ENABLED
Mon Jun 20 13:39:30 2016 us=256323   connect_retry_seconds = 5
Mon Jun 20 13:39:30 2016 us=256406   connect_timeout = 10
Mon Jun 20 13:39:30 2016 us=256488   connect_retry_max = 0
Mon Jun 20 13:39:30 2016 us=256570   socks_proxy_server = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=256654   socks_proxy_port = 0
Mon Jun 20 13:39:30 2016 us=256736   socks_proxy_retry = DISABLED
Mon Jun 20 13:39:30 2016 us=256819   tun_mtu = 1500
Mon Jun 20 13:39:30 2016 us=256901   tun_mtu_defined = ENABLED
Mon Jun 20 13:39:30 2016 us=256983   link_mtu = 1500
Mon Jun 20 13:39:30 2016 us=257064   link_mtu_defined = DISABLED
Mon Jun 20 13:39:30 2016 us=257148   tun_mtu_extra = 0
Mon Jun 20 13:39:30 2016 us=257230   tun_mtu_extra_defined = DISABLED
Mon Jun 20 13:39:30 2016 us=257313   mtu_discover_type = -1
Mon Jun 20 13:39:30 2016 us=257395   fragment = 0
Mon Jun 20 13:39:30 2016 us=257477   mssfix = 1450
Mon Jun 20 13:39:30 2016 us=257561   explicit_exit_notification = 0
Mon Jun 20 13:39:30 2016 us=257646 Connection profiles END
Mon Jun 20 13:39:30 2016 us=257728   remote_random = DISABLED
Mon Jun 20 13:39:30 2016 us=257811   ipchange = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=257893   dev = 'tun'
Mon Jun 20 13:39:30 2016 us=257975   dev_type = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=258057   dev_node = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=258139   lladdr = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=258223   topology = 1
Mon Jun 20 13:39:30 2016 us=258305   tun_ipv6 = DISABLED
Mon Jun 20 13:39:30 2016 us=258387   ifconfig_local = '10.8.0.1'
Mon Jun 20 13:39:30 2016 us=258470   ifconfig_remote_netmask = '10.8.0.2'
Mon Jun 20 13:39:30 2016 us=258554   ifconfig_noexec = DISABLED
Mon Jun 20 13:39:30 2016 us=258636   ifconfig_nowarn = DISABLED
Mon Jun 20 13:39:30 2016 us=258720   ifconfig_ipv6_local = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=258805   ifconfig_ipv6_netbits = 0
Mon Jun 20 13:39:30 2016 us=258887   ifconfig_ipv6_remote = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=258971   shaper = 0
Mon Jun 20 13:39:30 2016 us=259054   mtu_test = 0
Mon Jun 20 13:39:30 2016 us=259135   mlock = DISABLED
Mon Jun 20 13:39:30 2016 us=259218   keepalive_ping = 5
Mon Jun 20 13:39:30 2016 us=259300   keepalive_timeout = 20
Mon Jun 20 13:39:30 2016 us=259382   inactivity_timeout = 0
Mon Jun 20 13:39:30 2016 us=259464   ping_send_timeout = 5
Mon Jun 20 13:39:30 2016 us=259547   ping_rec_timeout = 40
Mon Jun 20 13:39:30 2016 us=259629   ping_rec_timeout_action = 2
Mon Jun 20 13:39:30 2016 us=259712   ping_timer_remote = ENABLED
Mon Jun 20 13:39:30 2016 us=259795   remap_sigusr1 = 0
Mon Jun 20 13:39:30 2016 us=259877   persist_tun = ENABLED
Mon Jun 20 13:39:30 2016 us=259959   persist_local_ip = DISABLED
Mon Jun 20 13:39:30 2016 us=260042   persist_remote_ip = DISABLED
Mon Jun 20 13:39:30 2016 us=260124   persist_key = ENABLED
Mon Jun 20 13:39:30 2016 us=260206   passtos = DISABLED
Mon Jun 20 13:39:30 2016 us=260290   resolve_retry_seconds = 1000000000
Mon Jun 20 13:39:30 2016 us=260422   username = 'nobody'
Mon Jun 20 13:39:30 2016 us=260507   groupname = 'nogroup'
Mon Jun 20 13:39:30 2016 us=260590   chroot_dir = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=260672   cd_dir = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=260755   writepid = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=260836   up_script = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=260918   down_script = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=260999   down_pre = DISABLED
Mon Jun 20 13:39:30 2016 us=261082   up_restart = DISABLED
Mon Jun 20 13:39:30 2016 us=261163   up_delay = DISABLED
Mon Jun 20 13:39:30 2016 us=261244   daemon = DISABLED
Mon Jun 20 13:39:30 2016 us=261326   inetd = 0
Mon Jun 20 13:39:30 2016 us=261408   log = ENABLED
Mon Jun 20 13:39:30 2016 us=261490   suppress_timestamps = DISABLED
Mon Jun 20 13:39:30 2016 us=261573   nice = 0
Mon Jun 20 13:39:30 2016 us=261655   verbosity = 4
Mon Jun 20 13:39:30 2016 us=261738   mute = 0
Mon Jun 20 13:39:30 2016 us=261818   gremlin = 0
Mon Jun 20 13:39:30 2016 us=261899   status_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=261981   status_file_version = 1
Mon Jun 20 13:39:30 2016 us=262064   status_file_update_freq = 60
Mon Jun 20 13:39:30 2016 us=262146   occ = ENABLED
Mon Jun 20 13:39:30 2016 us=262228   rcvbuf = 65536
Mon Jun 20 13:39:30 2016 us=262310   sndbuf = 65536
Mon Jun 20 13:39:30 2016 us=262391   mark = 0
Mon Jun 20 13:39:30 2016 us=262474   sockflags = 0
Mon Jun 20 13:39:30 2016 us=262554   fast_io = DISABLED
Mon Jun 20 13:39:30 2016 us=262636   lzo = 1
Mon Jun 20 13:39:30 2016 us=262717   route_script = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=262799   route_default_gateway = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=262882   route_default_metric = 0
Mon Jun 20 13:39:30 2016 us=262965   route_noexec = DISABLED
Mon Jun 20 13:39:30 2016 us=263049   route_delay = 0
Mon Jun 20 13:39:30 2016 us=263132   route_delay_window = 30
Mon Jun 20 13:39:30 2016 us=263215   route_delay_defined = DISABLED
Mon Jun 20 13:39:30 2016 us=263300   route_nopull = DISABLED
Mon Jun 20 13:39:30 2016 us=263382   route_gateway_via_dhcp = DISABLED
Mon Jun 20 13:39:30 2016 us=263467   max_routes = 100
Mon Jun 20 13:39:30 2016 us=263550   allow_pull_fqdn = DISABLED
Mon Jun 20 13:39:30 2016 us=263638   route 10.8.0.0/255.255.255.0/nil/nil
Mon Jun 20 13:39:30 2016 us=263723   management_addr = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=263807   management_port = 0
Mon Jun 20 13:39:30 2016 us=263890   management_user_pass = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=263975   management_log_history_cache = 250
Mon Jun 20 13:39:30 2016 us=264136   management_echo_buffer_size = 100
Mon Jun 20 13:39:30 2016 us=264227   management_write_peer_info_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=264314   management_client_user = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=264399   management_client_group = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=264483   management_flags = 0
Mon Jun 20 13:39:30 2016 us=264567   shared_secret_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=264652   key_direction = 0
Mon Jun 20 13:39:30 2016 us=264736   ciphername_defined = ENABLED
Mon Jun 20 13:39:30 2016 us=264820   ciphername = 'AES-256-CBC'
Mon Jun 20 13:39:30 2016 us=264905   authname_defined = ENABLED
Mon Jun 20 13:39:30 2016 us=264989   authname = 'SHA256'
Mon Jun 20 13:39:30 2016 us=265072   prng_hash = 'SHA1'
Mon Jun 20 13:39:30 2016 us=265157   prng_nonce_secret_len = 16
Mon Jun 20 13:39:30 2016 us=265240   keysize = 0
Mon Jun 20 13:39:30 2016 us=265322   engine = DISABLED
Mon Jun 20 13:39:30 2016 us=265405   replay = ENABLED
Mon Jun 20 13:39:30 2016 us=265488   mute_replay_warnings = DISABLED
Mon Jun 20 13:39:30 2016 us=265572   replay_window = 64
Mon Jun 20 13:39:30 2016 us=265656   replay_time = 15
Mon Jun 20 13:39:30 2016 us=265739   packet_id_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=265822   use_iv = ENABLED
Mon Jun 20 13:39:30 2016 us=265906   test_crypto = DISABLED
Mon Jun 20 13:39:30 2016 us=265989   tls_server = ENABLED
Mon Jun 20 13:39:30 2016 us=266072   tls_client = DISABLED
Mon Jun 20 13:39:30 2016 us=266155   key_method = 2
Mon Jun 20 13:39:30 2016 us=266285   ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Mon Jun 20 13:39:30 2016 us=266375   ca_path = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=266460   dh_file = '/etc/openvpn/easy-rsa/keys/dh512.pem'
Mon Jun 20 13:39:30 2016 us=266546   cert_file = '/etc/openvpn/easy-rsa/keys/server.crt'
Mon Jun 20 13:39:30 2016 us=266631   priv_key_file = '/etc/openvpn/easy-rsa/keys/server.key'
Mon Jun 20 13:39:30 2016 us=266717   pkcs12_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=266803   cipher_list = 'DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA'
Mon Jun 20 13:39:30 2016 us=266889   tls_verify = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=266973   tls_export_cert = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=267059   verify_x509_type = 0
Mon Jun 20 13:39:30 2016 us=267142   verify_x509_name = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=267226   crl_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=267310   ns_cert_type = 0
Mon Jun 20 13:39:30 2016 us=267394   remote_cert_ku[i] = 128
Mon Jun 20 13:39:30 2016 us=267477   remote_cert_ku[i] = 8
Mon Jun 20 13:39:30 2016 us=267561   remote_cert_ku[i] = 136
Mon Jun 20 13:39:30 2016 us=267644   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=267728   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=267810   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=267893   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=267976   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268059   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268143   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268227   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268311   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268394   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268477   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268561   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268645   remote_cert_ku[i] = 0
Mon Jun 20 13:39:30 2016 us=268730   remote_cert_eku = 'TLS Web Client Authentication'
Mon Jun 20 13:39:30 2016 us=268816   ssl_flags = 64
Mon Jun 20 13:39:30 2016 us=268899   tls_timeout = 2
Mon Jun 20 13:39:30 2016 us=268983   renegotiate_bytes = 0
Mon Jun 20 13:39:30 2016 us=269067   renegotiate_packets = 0
Mon Jun 20 13:39:30 2016 us=269150   renegotiate_seconds = 3600
Mon Jun 20 13:39:30 2016 us=269234   handshake_window = 60
Mon Jun 20 13:39:30 2016 us=269317   transition_window = 3600
Mon Jun 20 13:39:30 2016 us=269399   single_session = DISABLED
Mon Jun 20 13:39:30 2016 us=269481   push_peer_info = DISABLED
Mon Jun 20 13:39:30 2016 us=269563   tls_exit = DISABLED
Mon Jun 20 13:39:30 2016 us=269645   tls_auth_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=269730   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=269814   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=269899   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=269983   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270068   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270153   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270237   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270322   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270406   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270491   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270576   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270660   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270745   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270829   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270914   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=270998   pkcs11_protected_authentication = DISABLED
Mon Jun 20 13:39:30 2016 us=271126   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271214   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271300   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271384   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271469   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271555   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271642   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271729   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271816   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271902   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=271988   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=272094   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=272184   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=272270   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=272355   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=272440   pkcs11_private_mode = 00000000
Mon Jun 20 13:39:30 2016 us=272524   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=272608   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=272691   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=272775   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=272859   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=272944   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273028   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273111   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273195   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273278   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273361   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273443   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273527   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273611   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273695   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273778   pkcs11_cert_private = DISABLED
Mon Jun 20 13:39:30 2016 us=273862   pkcs11_pin_cache_period = -1
Mon Jun 20 13:39:30 2016 us=273946   pkcs11_id = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=274103   pkcs11_id_management = DISABLED
Mon Jun 20 13:39:30 2016 us=274220   server_network = 10.8.0.0
Mon Jun 20 13:39:30 2016 us=274320   server_netmask = 255.255.255.0
Mon Jun 20 13:39:30 2016 us=274417   server_network_ipv6 = ::
Mon Jun 20 13:39:30 2016 us=274503   server_netbits_ipv6 = 0
Mon Jun 20 13:39:30 2016 us=274595   server_bridge_ip = 0.0.0.0
Mon Jun 20 13:39:30 2016 us=274690   server_bridge_netmask = 0.0.0.0
Mon Jun 20 13:39:30 2016 us=274796   server_bridge_pool_start = 0.0.0.0
Mon Jun 20 13:39:30 2016 us=274893   server_bridge_pool_end = 0.0.0.0
Mon Jun 20 13:39:30 2016 us=274979   push_entry = 'redirect-gateway def1'
Mon Jun 20 13:39:30 2016 us=275064   push_entry = 'dhcp-option DNS 8.8.8.8'
Mon Jun 20 13:39:30 2016 us=275149   push_entry = 'dhcp-option DNS 8.8.4.4'
Mon Jun 20 13:39:30 2016 us=275234   push_entry = 'route 10.8.0.0 255.255.255.0'
Mon Jun 20 13:39:30 2016 us=275319   push_entry = 'topology net30'
Mon Jun 20 13:39:30 2016 us=275403   push_entry = 'ping 5'
Mon Jun 20 13:39:30 2016 us=275486   push_entry = 'ping-restart 20'
Mon Jun 20 13:39:30 2016 us=275569   ifconfig_pool_defined = ENABLED
Mon Jun 20 13:39:30 2016 us=275663   ifconfig_pool_start = 10.8.0.4
Mon Jun 20 13:39:30 2016 us=275755   ifconfig_pool_end = 10.8.0.251
Mon Jun 20 13:39:30 2016 us=275849   ifconfig_pool_netmask = 0.0.0.0
Mon Jun 20 13:39:30 2016 us=275933   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=276019   ifconfig_pool_persist_refresh_freq = 600
Mon Jun 20 13:39:30 2016 us=276104   ifconfig_ipv6_pool_defined = DISABLED
Mon Jun 20 13:39:30 2016 us=276194   ifconfig_ipv6_pool_base = ::
Mon Jun 20 13:39:30 2016 us=276279   ifconfig_ipv6_pool_netbits = 0
Mon Jun 20 13:39:30 2016 us=276364   n_bcast_buf = 256
Mon Jun 20 13:39:30 2016 us=276487   tcp_queue_limit = 64
Mon Jun 20 13:39:30 2016 us=276573   real_hash_size = 256
Mon Jun 20 13:39:30 2016 us=276656   virtual_hash_size = 256
Mon Jun 20 13:39:30 2016 us=276738   client_connect_script = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=276822   learn_address_script = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=276907   client_disconnect_script = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=276991   client_config_dir = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=277075   ccd_exclusive = DISABLED
Mon Jun 20 13:39:30 2016 us=277157   tmp_dir = '/tmp'
Mon Jun 20 13:39:30 2016 us=277240   push_ifconfig_defined = DISABLED
Mon Jun 20 13:39:30 2016 us=277333   push_ifconfig_local = 0.0.0.0
Mon Jun 20 13:39:30 2016 us=277425   push_ifconfig_remote_netmask = 0.0.0.0
Mon Jun 20 13:39:30 2016 us=277510   push_ifconfig_ipv6_defined = DISABLED
Mon Jun 20 13:39:30 2016 us=277603   push_ifconfig_ipv6_local = ::/0
Mon Jun 20 13:39:30 2016 us=277694   push_ifconfig_ipv6_remote = ::
Mon Jun 20 13:39:30 2016 us=277779   enable_c2c = ENABLED
Mon Jun 20 13:39:30 2016 us=277861   duplicate_cn = DISABLED
Mon Jun 20 13:39:30 2016 us=277943   cf_max = 0
Mon Jun 20 13:39:30 2016 us=278025   cf_per = 0
Mon Jun 20 13:39:30 2016 us=278106   max_clients = 1024
Mon Jun 20 13:39:30 2016 us=278188   max_routes_per_client = 256
Mon Jun 20 13:39:30 2016 us=278272   auth_user_pass_verify_script = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=278357   auth_user_pass_verify_script_via_file = DISABLED
Mon Jun 20 13:39:30 2016 us=278441   port_share_host = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=278525   port_share_port = 0
Mon Jun 20 13:39:30 2016 us=278607   client = DISABLED
Mon Jun 20 13:39:30 2016 us=278689   pull = DISABLED
Mon Jun 20 13:39:30 2016 us=278771   auth_user_pass_file = '[UNDEF]'
Mon Jun 20 13:39:30 2016 us=278863 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Mon Jun 20 13:39:30 2016 us=278988 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Mon Jun 20 13:39:30 2016 us=282702 Diffie-Hellman initialized with 512 bit key
Mon Jun 20 13:39:30 2016 us=286770 Deprecated TLS cipher name 'DHE-RSA-AES256-GCM-SHA384', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384'
Mon Jun 20 13:39:30 2016 us=286934 Deprecated TLS cipher name 'DHE-RSA-AES256-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-CBC-SHA256'
Mon Jun 20 13:39:30 2016 us=287034 Deprecated TLS cipher name 'DHE-RSA-AES128-GCM-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-GCM-SHA256'
Mon Jun 20 13:39:30 2016 us=287127 Deprecated TLS cipher name 'DHE-RSA-AES128-SHA256', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-CBC-SHA256'
Mon Jun 20 13:39:30 2016 us=287222 Deprecated TLS cipher name 'DHE-RSA-CAMELLIA256-SHA', please use IANA name 'TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=287314 Deprecated TLS cipher name 'DHE-RSA-AES256-SHA', please use IANA name 'TLS-DHE-RSA-WITH-AES-256-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=287407 Deprecated TLS cipher name 'DHE-RSA-CAMELLIA128-SHA', please use IANA name 'TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=287497 Deprecated TLS cipher name 'DHE-RSA-AES128-SHA', please use IANA name 'TLS-DHE-RSA-WITH-AES-128-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=287582 Deprecated TLS cipher name 'CAMELLIA256-SHA', please use IANA name 'TLS-RSA-WITH-CAMELLIA-256-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=287664 Deprecated TLS cipher name 'AES256-SHA', please use IANA name 'TLS-RSA-WITH-AES-256-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=287748 Deprecated TLS cipher name 'CAMELLIA128-SHA', please use IANA name 'TLS-RSA-WITH-CAMELLIA-128-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=287829 Deprecated TLS cipher name 'AES128-SHA', please use IANA name 'TLS-RSA-WITH-AES-128-CBC-SHA'
Mon Jun 20 13:39:30 2016 us=288282 TLS-Auth MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 13:39:30 2016 us=288443 Socket Buffers: R=[163840->131072] S=[163840->131072]
Mon Jun 20 13:39:30 2016 us=289181 ROUTE_GATEWAY 192.168.77.1/255.255.255.0 IFACE=eth0 HWADDR=b8:27:eb:93:5c:ab
Mon Jun 20 13:39:30 2016 us=291890 TUN/TAP device tun0 opened
Mon Jun 20 13:39:30 2016 us=292184 TUN/TAP TX queue length set to 100
Mon Jun 20 13:39:30 2016 us=292401 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jun 20 13:39:30 2016 us=292677 /sbin/ip link set dev tun0 up mtu 1500
Mon Jun 20 13:39:30 2016 us=301686 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Jun 20 13:39:30 2016 us=313445 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Jun 20 13:39:30 2016 us=331236 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 13:39:30 2016 us=335196 GID set to nogroup
Mon Jun 20 13:39:30 2016 us=335406 UID set to nobody
Mon Jun 20 13:39:30 2016 us=335517 UDPv4 link local (bound): [undef]
Mon Jun 20 13:39:30 2016 us=335607 UDPv4 link remote: [undef]
Mon Jun 20 13:39:30 2016 us=335723 MULTI: multi_init called, r=256 v=256
Mon Jun 20 13:39:30 2016 us=335947 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Jun 20 13:39:30 2016 us=336174 Initialization Sequence Completed
Mon Jun 20 13:40:27 2016 us=429122 MULTI: multi_create_instance called
Mon Jun 20 13:40:27 2016 us=429640 5.170.1.62:60469 Re-using SSL/TLS context
Mon Jun 20 13:40:27 2016 us=429917 5.170.1.62:60469 LZO compression initialized
Mon Jun 20 13:40:27 2016 us=430629 5.170.1.62:60469 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 13:40:27 2016 us=430791 5.170.1.62:60469 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 13:40:27 2016 us=431052 5.170.1.62:60469 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 13:40:27 2016 us=431147 5.170.1.62:60469 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 13:40:27 2016 us=431349 5.170.1.62:60469 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 13:40:27 2016 us=431502 5.170.1.62:60469 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 13:40:27 2016 us=431733 5.170.1.62:60469 TLS: Initial packet from [AF_INET]5.170.1.62:60469, sid=6a36b9c0 8957097e
Mon Jun 20 13:40:40 2016 us=672711 MULTI: multi_create_instance called
Mon Jun 20 13:40:40 2016 us=673152 5.170.1.62:59989 Re-using SSL/TLS context
Mon Jun 20 13:40:40 2016 us=673368 5.170.1.62:59989 LZO compression initialized
Mon Jun 20 13:40:40 2016 us=674258 5.170.1.62:59989 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 13:40:40 2016 us=674431 5.170.1.62:59989 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 13:40:40 2016 us=674690 5.170.1.62:59989 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 13:40:40 2016 us=674787 5.170.1.62:59989 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 13:40:40 2016 us=674959 5.170.1.62:59989 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 13:40:40 2016 us=675109 5.170.1.62:59989 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 13:40:40 2016 us=675331 5.170.1.62:59989 TLS: Initial packet from [AF_INET]5.170.1.62:59989, sid=5c269116 8cd7e4ee
Mon Jun 20 13:41:27 2016 us=208762 5.170.1.62:60469 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jun 20 13:41:27 2016 us=209051 5.170.1.62:60469 TLS Error: TLS handshake failed
Mon Jun 20 13:41:27 2016 us=209692 5.170.1.62:60469 SIGUSR1[soft,tls-error] received, client-instance restarting
Mon Jun 20 13:41:40 2016 us=349525 5.170.1.62:59989 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jun 20 13:41:40 2016 us=349788 5.170.1.62:59989 TLS Error: TLS handshake failed
Mon Jun 20 13:41:40 2016 us=350314 5.170.1.62:59989 SIGUSR1[soft,tls-error] received, client-instance restarting

😐 😐 😐 😐 😐 😐 😐 😐 😐

TinCanTech

bigsrl wrotetls-server

tls-auth ./easy-rsa/keys/ta.key 1

This is wrong .. See --tls-auth in The Manual v23x

Also, it looks like your Siemens device does not have support for --tls-auth

bigsrl

I remove

tls-auth ./easy-rsa/keys/ta.key 1 putting a "#" (see second post) but problem remain

probably you're asking me while I'm writing new post, sorry

TinCanTech

Try with a basic server conf: dev tun
proto udp
port 1194

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh512.pem

comp-lzo no

# user nobody
# group nogroup

# remote-cert-tls client

server 10.8.0.0 255.255.255.0
# persist-key
# persist-tun

# tls-server

#tls-auth ./easy-rsa/keys/ta.key 0

#tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA
# tls-cipher DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA

auth SHA256
#cipher BF-CBC
cipher AES-256-CBC

keepalive 10 60
client-to-client

ping-timer-rem

# tls-version-min 1.0

# push "redirect-gateway def1"
# push "dhcp-option DNS 8.8.8.8"
# push "dhcp-option DNS 8.8.4.4"

verb 4
log-append /var/log/openvpn

bigsrl

With basic server conf log are:

Mon Jun 20 14:30:17 2016 us=828371 Current Parameter Settings:
Mon Jun 20 14:30:17 2016 us=828913   config = 'openvpn.conf'
Mon Jun 20 14:30:17 2016 us=829023   mode = 1
Mon Jun 20 14:30:17 2016 us=829108   persist_config = DISABLED
Mon Jun 20 14:30:17 2016 us=829194   persist_mode = 1
Mon Jun 20 14:30:17 2016 us=829277   show_ciphers = DISABLED
Mon Jun 20 14:30:17 2016 us=829359   show_digests = DISABLED
Mon Jun 20 14:30:17 2016 us=829445   show_engines = DISABLED
Mon Jun 20 14:30:17 2016 us=829530   genkey = DISABLED
Mon Jun 20 14:30:17 2016 us=829614   key_pass_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=829696   show_tls_ciphers = DISABLED
Mon Jun 20 14:30:17 2016 us=829780 Connection profiles [default]:
Mon Jun 20 14:30:17 2016 us=829867   proto = udp
Mon Jun 20 14:30:17 2016 us=829950   local = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=830034   local_port = 1194
Mon Jun 20 14:30:17 2016 us=830116   remote = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=830199   remote_port = 1194
Mon Jun 20 14:30:17 2016 us=830282   remote_float = DISABLED
Mon Jun 20 14:30:17 2016 us=830363   bind_defined = DISABLED
Mon Jun 20 14:30:17 2016 us=830445   bind_local = ENABLED
Mon Jun 20 14:30:17 2016 us=830527   connect_retry_seconds = 5
Mon Jun 20 14:30:17 2016 us=830611   connect_timeout = 10
Mon Jun 20 14:30:17 2016 us=830693   connect_retry_max = 0
Mon Jun 20 14:30:17 2016 us=830775   socks_proxy_server = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=830859   socks_proxy_port = 0
Mon Jun 20 14:30:17 2016 us=830940   socks_proxy_retry = DISABLED
Mon Jun 20 14:30:17 2016 us=831024   tun_mtu = 1500
Mon Jun 20 14:30:17 2016 us=831106   tun_mtu_defined = ENABLED
Mon Jun 20 14:30:17 2016 us=831188   link_mtu = 1500
Mon Jun 20 14:30:17 2016 us=831269   link_mtu_defined = DISABLED
Mon Jun 20 14:30:17 2016 us=831353   tun_mtu_extra = 0
Mon Jun 20 14:30:17 2016 us=831435   tun_mtu_extra_defined = DISABLED
Mon Jun 20 14:30:17 2016 us=831518   mtu_discover_type = -1
Mon Jun 20 14:30:17 2016 us=831601   fragment = 0
Mon Jun 20 14:30:17 2016 us=831682   mssfix = 1450
Mon Jun 20 14:30:17 2016 us=831764   explicit_exit_notification = 0
Mon Jun 20 14:30:17 2016 us=831847 Connection profiles END
Mon Jun 20 14:30:17 2016 us=831928   remote_random = DISABLED
Mon Jun 20 14:30:17 2016 us=832011   ipchange = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=832093   dev = 'tun'
Mon Jun 20 14:30:17 2016 us=832175   dev_type = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=832257   dev_node = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=832339   lladdr = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=832423   topology = 1
Mon Jun 20 14:30:17 2016 us=832504   tun_ipv6 = DISABLED
Mon Jun 20 14:30:17 2016 us=832586   ifconfig_local = '10.8.0.1'
Mon Jun 20 14:30:17 2016 us=832669   ifconfig_remote_netmask = '10.8.0.2'
Mon Jun 20 14:30:17 2016 us=832753   ifconfig_noexec = DISABLED
Mon Jun 20 14:30:17 2016 us=832836   ifconfig_nowarn = DISABLED
Mon Jun 20 14:30:17 2016 us=832920   ifconfig_ipv6_local = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=833003   ifconfig_ipv6_netbits = 0
Mon Jun 20 14:30:17 2016 us=833085   ifconfig_ipv6_remote = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=833168   shaper = 0
Mon Jun 20 14:30:17 2016 us=833250   mtu_test = 0
Mon Jun 20 14:30:17 2016 us=833332   mlock = DISABLED
Mon Jun 20 14:30:17 2016 us=833415   keepalive_ping = 10
Mon Jun 20 14:30:17 2016 us=833497   keepalive_timeout = 60
Mon Jun 20 14:30:17 2016 us=833580   inactivity_timeout = 0
Mon Jun 20 14:30:17 2016 us=833663   ping_send_timeout = 10
Mon Jun 20 14:30:17 2016 us=833745   ping_rec_timeout = 120
Mon Jun 20 14:30:17 2016 us=833828   ping_rec_timeout_action = 2
Mon Jun 20 14:30:17 2016 us=833911   ping_timer_remote = ENABLED
Mon Jun 20 14:30:17 2016 us=834075   remap_sigusr1 = 0
Mon Jun 20 14:30:17 2016 us=834186   persist_tun = DISABLED
Mon Jun 20 14:30:17 2016 us=834273   persist_local_ip = DISABLED
Mon Jun 20 14:30:17 2016 us=834358   persist_remote_ip = DISABLED
Mon Jun 20 14:30:17 2016 us=834462   persist_key = DISABLED
Mon Jun 20 14:30:17 2016 us=834551   passtos = DISABLED
Mon Jun 20 14:30:17 2016 us=834637   resolve_retry_seconds = 1000000000
Mon Jun 20 14:30:17 2016 us=834770   username = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=834859   groupname = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=834941   chroot_dir = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=835024   cd_dir = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=835106   writepid = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=835188   up_script = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=835271   down_script = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=835353   down_pre = DISABLED
Mon Jun 20 14:30:17 2016 us=835434   up_restart = DISABLED
Mon Jun 20 14:30:17 2016 us=835515   up_delay = DISABLED
Mon Jun 20 14:30:17 2016 us=835597   daemon = DISABLED
Mon Jun 20 14:30:17 2016 us=835679   inetd = 0
Mon Jun 20 14:30:17 2016 us=835760   log = ENABLED
Mon Jun 20 14:30:17 2016 us=835842   suppress_timestamps = DISABLED
Mon Jun 20 14:30:17 2016 us=835924   nice = 0
Mon Jun 20 14:30:17 2016 us=836007   verbosity = 4
Mon Jun 20 14:30:17 2016 us=836089   mute = 0
Mon Jun 20 14:30:17 2016 us=836171   gremlin = 0
Mon Jun 20 14:30:17 2016 us=836253   status_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=836335   status_file_version = 1
Mon Jun 20 14:30:17 2016 us=836418   status_file_update_freq = 60
Mon Jun 20 14:30:17 2016 us=836501   occ = ENABLED
Mon Jun 20 14:30:17 2016 us=836583   rcvbuf = 65536
Mon Jun 20 14:30:17 2016 us=836665   sndbuf = 65536
Mon Jun 20 14:30:17 2016 us=836746   mark = 0
Mon Jun 20 14:30:17 2016 us=836828   sockflags = 0
Mon Jun 20 14:30:17 2016 us=836910   fast_io = DISABLED
Mon Jun 20 14:30:17 2016 us=836992   lzo = 1
Mon Jun 20 14:30:17 2016 us=837074   route_script = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=837156   route_default_gateway = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=837239   route_default_metric = 0
Mon Jun 20 14:30:17 2016 us=837322   route_noexec = DISABLED
Mon Jun 20 14:30:17 2016 us=837407   route_delay = 0
Mon Jun 20 14:30:17 2016 us=837490   route_delay_window = 30
Mon Jun 20 14:30:17 2016 us=837575   route_delay_defined = DISABLED
Mon Jun 20 14:30:17 2016 us=837659   route_nopull = DISABLED
Mon Jun 20 14:30:17 2016 us=837742   route_gateway_via_dhcp = DISABLED
Mon Jun 20 14:30:17 2016 us=837827   max_routes = 100
Mon Jun 20 14:30:17 2016 us=837911   allow_pull_fqdn = DISABLED
Mon Jun 20 14:30:17 2016 us=838000   route 10.8.0.0/255.255.255.0/nil/nil
Mon Jun 20 14:30:17 2016 us=838084   management_addr = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=838170   management_port = 0
Mon Jun 20 14:30:17 2016 us=838253   management_user_pass = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=838338   management_log_history_cache = 250
Mon Jun 20 14:30:17 2016 us=838423   management_echo_buffer_size = 100
Mon Jun 20 14:30:17 2016 us=838508   management_write_peer_info_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=838593   management_client_user = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=838678   management_client_group = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=838763   management_flags = 0
Mon Jun 20 14:30:17 2016 us=838847   shared_secret_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=838932   key_direction = 0
Mon Jun 20 14:30:17 2016 us=839015   ciphername_defined = ENABLED
Mon Jun 20 14:30:17 2016 us=839098   ciphername = 'AES-256-CBC'
Mon Jun 20 14:30:17 2016 us=839183   authname_defined = ENABLED
Mon Jun 20 14:30:17 2016 us=839267   authname = 'SHA256'
Mon Jun 20 14:30:17 2016 us=839350   prng_hash = 'SHA1'
Mon Jun 20 14:30:17 2016 us=839435   prng_nonce_secret_len = 16
Mon Jun 20 14:30:17 2016 us=839518   keysize = 0
Mon Jun 20 14:30:17 2016 us=839600   engine = DISABLED
Mon Jun 20 14:30:17 2016 us=839684   replay = ENABLED
Mon Jun 20 14:30:17 2016 us=839766   mute_replay_warnings = DISABLED
Mon Jun 20 14:30:17 2016 us=839849   replay_window = 64
Mon Jun 20 14:30:17 2016 us=839933   replay_time = 15
Mon Jun 20 14:30:17 2016 us=840015   packet_id_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=840097   use_iv = ENABLED
Mon Jun 20 14:30:17 2016 us=840180   test_crypto = DISABLED
Mon Jun 20 14:30:17 2016 us=840263   tls_server = ENABLED
Mon Jun 20 14:30:17 2016 us=840346   tls_client = DISABLED
Mon Jun 20 14:30:17 2016 us=840430   key_method = 2
Mon Jun 20 14:30:17 2016 us=840558   ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Mon Jun 20 14:30:17 2016 us=840646   ca_path = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=840731   dh_file = '/etc/openvpn/easy-rsa/keys/dh512.pem'
Mon Jun 20 14:30:17 2016 us=840817   cert_file = '/etc/openvpn/easy-rsa/keys/server.crt'
Mon Jun 20 14:30:17 2016 us=840903   priv_key_file = '/etc/openvpn/easy-rsa/keys/server.key'
Mon Jun 20 14:30:17 2016 us=840987   pkcs12_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=841071   cipher_list = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=841154   tls_verify = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=841238   tls_export_cert = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=841323   verify_x509_type = 0
Mon Jun 20 14:30:17 2016 us=841407   verify_x509_name = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=841490   crl_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=841574   ns_cert_type = 0
Mon Jun 20 14:30:17 2016 us=841658   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=841742   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=841826   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=841911   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=841995   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842078   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842161   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842242   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842325   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842409   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842494   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842578   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842662   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842745   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842829   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842913   remote_cert_ku[i] = 0
Mon Jun 20 14:30:17 2016 us=842996   remote_cert_eku = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=843080   ssl_flags = 0
Mon Jun 20 14:30:17 2016 us=843164   tls_timeout = 2
Mon Jun 20 14:30:17 2016 us=843247   renegotiate_bytes = 0
Mon Jun 20 14:30:17 2016 us=843330   renegotiate_packets = 0
Mon Jun 20 14:30:17 2016 us=843415   renegotiate_seconds = 3600
Mon Jun 20 14:30:17 2016 us=843498   handshake_window = 60
Mon Jun 20 14:30:17 2016 us=843582   transition_window = 3600
Mon Jun 20 14:30:17 2016 us=843664   single_session = DISABLED
Mon Jun 20 14:30:17 2016 us=843746   push_peer_info = DISABLED
Mon Jun 20 14:30:17 2016 us=843827   tls_exit = DISABLED
Mon Jun 20 14:30:17 2016 us=843910   tls_auth_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=844037   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844141   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844228   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844314   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844399   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844484   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844569   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844653   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844737   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844820   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844905   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=844990   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=845074   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=845159   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=845243   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=845327   pkcs11_protected_authentication = DISABLED
Mon Jun 20 14:30:17 2016 us=845415   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=845502   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=845591   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=845689   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=845833   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=845926   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846015   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846103   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846190   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846276   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846361   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846447   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846532   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846618   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846703   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846789   pkcs11_private_mode = 00000000
Mon Jun 20 14:30:17 2016 us=846873   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=846957   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847041   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847124   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847208   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847292   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847376   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847460   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847543   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847627   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847711   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847795   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847879   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=847963   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=848046   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=848130   pkcs11_cert_private = DISABLED
Mon Jun 20 14:30:17 2016 us=848215   pkcs11_pin_cache_period = -1
Mon Jun 20 14:30:17 2016 us=848298   pkcs11_id = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=848382   pkcs11_id_management = DISABLED
Mon Jun 20 14:30:17 2016 us=848497   server_network = 10.8.0.0
Mon Jun 20 14:30:17 2016 us=848596   server_netmask = 255.255.255.0
Mon Jun 20 14:30:17 2016 us=848692   server_network_ipv6 = ::
Mon Jun 20 14:30:17 2016 us=848778   server_netbits_ipv6 = 0
Mon Jun 20 14:30:17 2016 us=848871   server_bridge_ip = 0.0.0.0
Mon Jun 20 14:30:17 2016 us=848965   server_bridge_netmask = 0.0.0.0
Mon Jun 20 14:30:17 2016 us=849058   server_bridge_pool_start = 0.0.0.0
Mon Jun 20 14:30:17 2016 us=849152   server_bridge_pool_end = 0.0.0.0
Mon Jun 20 14:30:17 2016 us=849237   push_entry = 'route 10.8.0.0 255.255.255.0'
Mon Jun 20 14:30:17 2016 us=849322   push_entry = 'topology net30'
Mon Jun 20 14:30:17 2016 us=849405   push_entry = 'ping 10'
Mon Jun 20 14:30:17 2016 us=849488   push_entry = 'ping-restart 60'
Mon Jun 20 14:30:17 2016 us=849573   ifconfig_pool_defined = ENABLED
Mon Jun 20 14:30:17 2016 us=849666   ifconfig_pool_start = 10.8.0.4
Mon Jun 20 14:30:17 2016 us=849761   ifconfig_pool_end = 10.8.0.251
Mon Jun 20 14:30:17 2016 us=849855   ifconfig_pool_netmask = 0.0.0.0
Mon Jun 20 14:30:17 2016 us=849939   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=850025   ifconfig_pool_persist_refresh_freq = 600
Mon Jun 20 14:30:17 2016 us=850109   ifconfig_ipv6_pool_defined = DISABLED
Mon Jun 20 14:30:17 2016 us=850198   ifconfig_ipv6_pool_base = ::
Mon Jun 20 14:30:17 2016 us=850282   ifconfig_ipv6_pool_netbits = 0
Mon Jun 20 14:30:17 2016 us=850367   n_bcast_buf = 256
Mon Jun 20 14:30:17 2016 us=850449   tcp_queue_limit = 64
Mon Jun 20 14:30:17 2016 us=850532   real_hash_size = 256
Mon Jun 20 14:30:17 2016 us=850614   virtual_hash_size = 256
Mon Jun 20 14:30:17 2016 us=850697   client_connect_script = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=850780   learn_address_script = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=850865   client_disconnect_script = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=850949   client_config_dir = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=851033   ccd_exclusive = DISABLED
Mon Jun 20 14:30:17 2016 us=851156   tmp_dir = '/tmp'
Mon Jun 20 14:30:17 2016 us=851244   push_ifconfig_defined = DISABLED
Mon Jun 20 14:30:17 2016 us=851336   push_ifconfig_local = 0.0.0.0
Mon Jun 20 14:30:17 2016 us=851429   push_ifconfig_remote_netmask = 0.0.0.0
Mon Jun 20 14:30:17 2016 us=851514   push_ifconfig_ipv6_defined = DISABLED
Mon Jun 20 14:30:17 2016 us=851606   push_ifconfig_ipv6_local = ::/0
Mon Jun 20 14:30:17 2016 us=851695   push_ifconfig_ipv6_remote = ::
Mon Jun 20 14:30:17 2016 us=851778   enable_c2c = ENABLED
Mon Jun 20 14:30:17 2016 us=851860   duplicate_cn = DISABLED
Mon Jun 20 14:30:17 2016 us=851942   cf_max = 0
Mon Jun 20 14:30:17 2016 us=852023   cf_per = 0
Mon Jun 20 14:30:17 2016 us=852104   max_clients = 1024
Mon Jun 20 14:30:17 2016 us=852185   max_routes_per_client = 256
Mon Jun 20 14:30:17 2016 us=852267   auth_user_pass_verify_script = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=852352   auth_user_pass_verify_script_via_file = DISABLED
Mon Jun 20 14:30:17 2016 us=852437   port_share_host = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=852521   port_share_port = 0
Mon Jun 20 14:30:17 2016 us=852603   client = DISABLED
Mon Jun 20 14:30:17 2016 us=852685   pull = DISABLED
Mon Jun 20 14:30:17 2016 us=852769   auth_user_pass_file = '[UNDEF]'
Mon Jun 20 14:30:17 2016 us=852861 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Mon Jun 20 14:30:17 2016 us=852991 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Mon Jun 20 14:30:17 2016 us=856784 Diffie-Hellman initialized with 512 bit key
Mon Jun 20 14:30:17 2016 us=860755 TLS-Auth MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 14:30:17 2016 us=860941 Socket Buffers: R=[163840->131072] S=[163840->131072]
Mon Jun 20 14:30:17 2016 us=861679 ROUTE_GATEWAY 192.168.77.1/255.255.255.0 IFACE=eth0 HWADDR=b8:27:eb:93:5c:ab
Mon Jun 20 14:30:17 2016 us=863549 TUN/TAP device tun0 opened
Mon Jun 20 14:30:17 2016 us=863787 TUN/TAP TX queue length set to 100
Mon Jun 20 14:30:17 2016 us=863980 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jun 20 14:30:17 2016 us=864485 /sbin/ip link set dev tun0 up mtu 1500
Mon Jun 20 14:30:17 2016 us=874409 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Jun 20 14:30:17 2016 us=883677 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Jun 20 14:30:17 2016 us=891451 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 14:30:17 2016 us=891668 UDPv4 link local (bound): [undef]
Mon Jun 20 14:30:17 2016 us=891768 UDPv4 link remote: [undef]
Mon Jun 20 14:30:17 2016 us=891867 MULTI: multi_init called, r=256 v=256
Mon Jun 20 14:30:17 2016 us=892072 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Jun 20 14:30:17 2016 us=892249 Initialization Sequence Completed
Mon Jun 20 14:30:20 2016 us=847729 MULTI: multi_create_instance called
Mon Jun 20 14:30:20 2016 us=848104 5.170.1.113:15075 Re-using SSL/TLS context
Mon Jun 20 14:30:20 2016 us=848345 5.170.1.113:15075 LZO compression initialized
Mon Jun 20 14:30:20 2016 us=849075 5.170.1.113:15075 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 14:30:20 2016 us=849220 5.170.1.113:15075 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 14:30:20 2016 us=849470 5.170.1.113:15075 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 14:30:20 2016 us=849556 5.170.1.113:15075 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 14:30:20 2016 us=849743 5.170.1.113:15075 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 14:30:20 2016 us=849891 5.170.1.113:15075 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 14:30:20 2016 us=850119 5.170.1.113:15075 TLS: Initial packet from [AF_INET]5.170.1.113:15075, sid=af854eaf 731be688
Mon Jun 20 14:30:57 2016 us=407206 MULTI: multi_create_instance called
Mon Jun 20 14:30:57 2016 us=407766 5.170.1.144:20606 Re-using SSL/TLS context
Mon Jun 20 14:30:57 2016 us=408011 5.170.1.144:20606 LZO compression initialized
Mon Jun 20 14:30:57 2016 us=408636 5.170.1.144:20606 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 14:30:57 2016 us=408780 5.170.1.144:20606 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 14:30:57 2016 us=409020 5.170.1.144:20606 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 14:30:57 2016 us=409106 5.170.1.144:20606 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 14:30:57 2016 us=409264 5.170.1.144:20606 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 14:30:57 2016 us=409403 5.170.1.144:20606 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 14:30:57 2016 us=409617 5.170.1.144:20606 TLS: Initial packet from [AF_INET]5.170.1.144:20606, sid=e709d712 e3aa533f
Mon Jun 20 14:31:10 2016 us=340532 MULTI: multi_create_instance called
Mon Jun 20 14:31:10 2016 us=341021 5.170.1.144:20953 Re-using SSL/TLS context
Mon Jun 20 14:31:10 2016 us=341193 5.170.1.144:20953 LZO compression initialized
Mon Jun 20 14:31:10 2016 us=341821 5.170.1.144:20953 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 14:31:10 2016 us=341959 5.170.1.144:20953 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 14:31:10 2016 us=342195 5.170.1.144:20953 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 14:31:10 2016 us=342281 5.170.1.144:20953 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 14:31:10 2016 us=342437 5.170.1.144:20953 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 14:31:10 2016 us=342576 5.170.1.144:20953 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 14:31:10 2016 us=342826 5.170.1.144:20953 TLS: Initial packet from [AF_INET]5.170.1.144:20953, sid=2c889d93 5a2c8383
Mon Jun 20 14:31:20 2016 us=902181 5.170.1.113:15075 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Jun 20 14:31:20 2016 us=902438 5.170.1.113:15075 TLS Error: TLS handshake failed
Mon Jun 20 14:31:20 2016 us=903095 5.170.1.113:15075 SIGUSR1[soft,tls-error] received, client-instance restarting

PLC side just a simple "OpenVPN: TLS error occurred"...as usual

TinCanTech

bigsrl wroteI have an Siemens RTU3030C

I cannot support this device ..

Try setting up a normal windows or linux client to test that your server and network are working correctly.
Then try setting up the RTU.

bigsrl

right, i configured my laptop now to use openvpn client with .ovpn file generaed from my raspberry

server log

Mon Jun 20 15:23:18 2016 us=433439 Current Parameter Settings:
Mon Jun 20 15:23:18 2016 us=433798   config = 'openvpn.conf'
Mon Jun 20 15:23:18 2016 us=433877   mode = 1
Mon Jun 20 15:23:18 2016 us=433935   persist_config = DISABLED
Mon Jun 20 15:23:18 2016 us=434054   persist_mode = 1
Mon Jun 20 15:23:18 2016 us=434132   show_ciphers = DISABLED
Mon Jun 20 15:23:18 2016 us=434190   show_digests = DISABLED
Mon Jun 20 15:23:18 2016 us=434245   show_engines = DISABLED
Mon Jun 20 15:23:18 2016 us=434300   genkey = DISABLED
Mon Jun 20 15:23:18 2016 us=434354   key_pass_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=434409   show_tls_ciphers = DISABLED
Mon Jun 20 15:23:18 2016 us=434465 Connection profiles [default]:
Mon Jun 20 15:23:18 2016 us=434524   proto = udp
Mon Jun 20 15:23:18 2016 us=434579   local = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=434635   local_port = 1194
Mon Jun 20 15:23:18 2016 us=434690   remote = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=434745   remote_port = 1194
Mon Jun 20 15:23:18 2016 us=434799   remote_float = DISABLED
Mon Jun 20 15:23:18 2016 us=434854   bind_defined = DISABLED
Mon Jun 20 15:23:18 2016 us=434908   bind_local = ENABLED
Mon Jun 20 15:23:18 2016 us=434962   connect_retry_seconds = 5
Mon Jun 20 15:23:18 2016 us=435017   connect_timeout = 10
Mon Jun 20 15:23:18 2016 us=435072   connect_retry_max = 0
Mon Jun 20 15:23:18 2016 us=435126   socks_proxy_server = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=435182   socks_proxy_port = 0
Mon Jun 20 15:23:18 2016 us=435236   socks_proxy_retry = DISABLED
Mon Jun 20 15:23:18 2016 us=435292   tun_mtu = 1500
Mon Jun 20 15:23:18 2016 us=435346   tun_mtu_defined = ENABLED
Mon Jun 20 15:23:18 2016 us=435401   link_mtu = 1500
Mon Jun 20 15:23:18 2016 us=435455   link_mtu_defined = DISABLED
Mon Jun 20 15:23:18 2016 us=435511   tun_mtu_extra = 0
Mon Jun 20 15:23:18 2016 us=435565   tun_mtu_extra_defined = DISABLED
Mon Jun 20 15:23:18 2016 us=435621   mtu_discover_type = -1
Mon Jun 20 15:23:18 2016 us=435676   fragment = 0
Mon Jun 20 15:23:18 2016 us=435730   mssfix = 1450
Mon Jun 20 15:23:18 2016 us=435785   explicit_exit_notification = 0
Mon Jun 20 15:23:18 2016 us=435840 Connection profiles END
Mon Jun 20 15:23:18 2016 us=435894   remote_random = DISABLED
Mon Jun 20 15:23:18 2016 us=435949   ipchange = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=436004   dev = 'tun'
Mon Jun 20 15:23:18 2016 us=436058   dev_type = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=436112   dev_node = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=436166   lladdr = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=436221   topology = 1
Mon Jun 20 15:23:18 2016 us=436275   tun_ipv6 = DISABLED
Mon Jun 20 15:23:18 2016 us=436330   ifconfig_local = '10.8.0.1'
Mon Jun 20 15:23:18 2016 us=436385   ifconfig_remote_netmask = '10.8.0.2'
Mon Jun 20 15:23:18 2016 us=436440   ifconfig_noexec = DISABLED
Mon Jun 20 15:23:18 2016 us=436496   ifconfig_nowarn = DISABLED
Mon Jun 20 15:23:18 2016 us=436551   ifconfig_ipv6_local = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=436607   ifconfig_ipv6_netbits = 0
Mon Jun 20 15:23:18 2016 us=436661   ifconfig_ipv6_remote = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=436717   shaper = 0
Mon Jun 20 15:23:18 2016 us=436771   mtu_test = 0
Mon Jun 20 15:23:18 2016 us=436825   mlock = DISABLED
Mon Jun 20 15:23:18 2016 us=436880   keepalive_ping = 10
Mon Jun 20 15:23:18 2016 us=436934   keepalive_timeout = 60
Mon Jun 20 15:23:18 2016 us=436989   inactivity_timeout = 0
Mon Jun 20 15:23:18 2016 us=437044   ping_send_timeout = 10
Mon Jun 20 15:23:18 2016 us=437099   ping_rec_timeout = 120
Mon Jun 20 15:23:18 2016 us=437154   ping_rec_timeout_action = 2
Mon Jun 20 15:23:18 2016 us=437209   ping_timer_remote = ENABLED
Mon Jun 20 15:23:18 2016 us=437265   remap_sigusr1 = 0
Mon Jun 20 15:23:18 2016 us=437319   persist_tun = DISABLED
Mon Jun 20 15:23:18 2016 us=437373   persist_local_ip = DISABLED
Mon Jun 20 15:23:18 2016 us=437429   persist_remote_ip = DISABLED
Mon Jun 20 15:23:18 2016 us=437501   persist_key = DISABLED
Mon Jun 20 15:23:18 2016 us=437560   passtos = DISABLED
Mon Jun 20 15:23:18 2016 us=437616   resolve_retry_seconds = 1000000000
Mon Jun 20 15:23:18 2016 us=437708   username = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=437767   groupname = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=437822   chroot_dir = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=437877   cd_dir = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=437932   writepid = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=437986   up_script = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=438041   down_script = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=438095   down_pre = DISABLED
Mon Jun 20 15:23:18 2016 us=438149   up_restart = DISABLED
Mon Jun 20 15:23:18 2016 us=438204   up_delay = DISABLED
Mon Jun 20 15:23:18 2016 us=438258   daemon = DISABLED
Mon Jun 20 15:23:18 2016 us=438312   inetd = 0
Mon Jun 20 15:23:18 2016 us=438366   log = ENABLED
Mon Jun 20 15:23:18 2016 us=438420   suppress_timestamps = DISABLED
Mon Jun 20 15:23:18 2016 us=438475   nice = 0
Mon Jun 20 15:23:18 2016 us=438530   verbosity = 4
Mon Jun 20 15:23:18 2016 us=438584   mute = 0
Mon Jun 20 15:23:18 2016 us=438638   gremlin = 0
Mon Jun 20 15:23:18 2016 us=438692   status_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=438747   status_file_version = 1
Mon Jun 20 15:23:18 2016 us=438801   status_file_update_freq = 60
Mon Jun 20 15:23:18 2016 us=438856   occ = ENABLED
Mon Jun 20 15:23:18 2016 us=438911   rcvbuf = 65536
Mon Jun 20 15:23:18 2016 us=438966   sndbuf = 65536
Mon Jun 20 15:23:18 2016 us=439020   mark = 0
Mon Jun 20 15:23:18 2016 us=439075   sockflags = 0
Mon Jun 20 15:23:18 2016 us=439129   fast_io = DISABLED
Mon Jun 20 15:23:18 2016 us=439183   lzo = 1
Mon Jun 20 15:23:18 2016 us=439236   route_script = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=439291   route_default_gateway = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=439346   route_default_metric = 0
Mon Jun 20 15:23:18 2016 us=439401   route_noexec = DISABLED
Mon Jun 20 15:23:18 2016 us=439456   route_delay = 0
Mon Jun 20 15:23:18 2016 us=439511   route_delay_window = 30
Mon Jun 20 15:23:18 2016 us=439566   route_delay_defined = DISABLED
Mon Jun 20 15:23:18 2016 us=439622   route_nopull = DISABLED
Mon Jun 20 15:23:18 2016 us=439677   route_gateway_via_dhcp = DISABLED
Mon Jun 20 15:23:18 2016 us=439733   max_routes = 100
Mon Jun 20 15:23:18 2016 us=439789   allow_pull_fqdn = DISABLED
Mon Jun 20 15:23:18 2016 us=439848   route 10.8.0.0/255.255.255.0/nil/nil
Mon Jun 20 15:23:18 2016 us=439904   management_addr = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=439960   management_port = 0
Mon Jun 20 15:23:18 2016 us=440015   management_user_pass = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=440072   management_log_history_cache = 250
Mon Jun 20 15:23:18 2016 us=440128   management_echo_buffer_size = 100
Mon Jun 20 15:23:18 2016 us=440185   management_write_peer_info_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=440241   management_client_user = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=440298   management_client_group = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=440355   management_flags = 0
Mon Jun 20 15:23:18 2016 us=440411   shared_secret_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=440467   key_direction = 0
Mon Jun 20 15:23:18 2016 us=440523   ciphername_defined = ENABLED
Mon Jun 20 15:23:18 2016 us=440580   ciphername = 'AES-256-CBC'
Mon Jun 20 15:23:18 2016 us=440636   authname_defined = ENABLED
Mon Jun 20 15:23:18 2016 us=440692   authname = 'SHA256'
Mon Jun 20 15:23:18 2016 us=440747   prng_hash = 'SHA1'
Mon Jun 20 15:23:18 2016 us=440803   prng_nonce_secret_len = 16
Mon Jun 20 15:23:18 2016 us=440858   keysize = 0
Mon Jun 20 15:23:18 2016 us=440912   engine = DISABLED
Mon Jun 20 15:23:18 2016 us=440967   replay = ENABLED
Mon Jun 20 15:23:18 2016 us=441021   mute_replay_warnings = DISABLED
Mon Jun 20 15:23:18 2016 us=441077   replay_window = 64
Mon Jun 20 15:23:18 2016 us=441132   replay_time = 15
Mon Jun 20 15:23:18 2016 us=441186   packet_id_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=441241   use_iv = ENABLED
Mon Jun 20 15:23:18 2016 us=441296   test_crypto = DISABLED
Mon Jun 20 15:23:18 2016 us=441352   tls_server = ENABLED
Mon Jun 20 15:23:18 2016 us=441407   tls_client = DISABLED
Mon Jun 20 15:23:18 2016 us=441463   key_method = 2
Mon Jun 20 15:23:18 2016 us=441548   ca_file = '/etc/openvpn/easy-rsa/keys/ca.crt'
Mon Jun 20 15:23:18 2016 us=441608   ca_path = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=441665   dh_file = '/etc/openvpn/easy-rsa/keys/dh512.pem'
Mon Jun 20 15:23:18 2016 us=441722   cert_file = '/etc/openvpn/easy-rsa/keys/server.crt'
Mon Jun 20 15:23:18 2016 us=441779   priv_key_file = '/etc/openvpn/easy-rsa/keys/server.key'
Mon Jun 20 15:23:18 2016 us=441837   pkcs12_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=441893   cipher_list = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=441948   tls_verify = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=442003   tls_export_cert = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=442059   verify_x509_type = 0
Mon Jun 20 15:23:18 2016 us=442115   verify_x509_name = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=442171   crl_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=442227   ns_cert_type = 0
Mon Jun 20 15:23:18 2016 us=442283   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442339   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442395   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442450   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442505   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442560   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442615   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442670   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442724   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442779   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442834   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442889   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=442945   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=443000   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=443055   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=443110   remote_cert_ku[i] = 0
Mon Jun 20 15:23:18 2016 us=443165   remote_cert_eku = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=443221   ssl_flags = 0
Mon Jun 20 15:23:18 2016 us=443276   tls_timeout = 2
Mon Jun 20 15:23:18 2016 us=443333   renegotiate_bytes = 0
Mon Jun 20 15:23:18 2016 us=443388   renegotiate_packets = 0
Mon Jun 20 15:23:18 2016 us=443443   renegotiate_seconds = 3600
Mon Jun 20 15:23:18 2016 us=443498   handshake_window = 60
Mon Jun 20 15:23:18 2016 us=443552   transition_window = 3600
Mon Jun 20 15:23:18 2016 us=443607   single_session = DISABLED
Mon Jun 20 15:23:18 2016 us=443661   push_peer_info = DISABLED
Mon Jun 20 15:23:18 2016 us=443715   tls_exit = DISABLED
Mon Jun 20 15:23:18 2016 us=443769   tls_auth_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=443824   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=443881   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=443937   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444023   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444097   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444155   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444211   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444267   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444323   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444379   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444435   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444492   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444548   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444605   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444660   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444717   pkcs11_protected_authentication = DISABLED
Mon Jun 20 15:23:18 2016 us=444775   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=444833   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=444891   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=444947   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445032   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445091   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445150   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445208   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445266   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445323   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445380   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445437   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445494   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445551   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445607   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445664   pkcs11_private_mode = 00000000
Mon Jun 20 15:23:18 2016 us=445721   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=445776   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=445832   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=445887   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=445943   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=445999   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446055   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446111   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446166   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446222   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446278   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446332   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446388   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446444   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446500   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446556   pkcs11_cert_private = DISABLED
Mon Jun 20 15:23:18 2016 us=446612   pkcs11_pin_cache_period = -1
Mon Jun 20 15:23:18 2016 us=446667   pkcs11_id = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=446723   pkcs11_id_management = DISABLED
Mon Jun 20 15:23:18 2016 us=446798   server_network = 10.8.0.0
Mon Jun 20 15:23:18 2016 us=446863   server_netmask = 255.255.255.0
Mon Jun 20 15:23:18 2016 us=446929   server_network_ipv6 = ::
Mon Jun 20 15:23:18 2016 us=446986   server_netbits_ipv6 = 0
Mon Jun 20 15:23:18 2016 us=447048   server_bridge_ip = 0.0.0.0
Mon Jun 20 15:23:18 2016 us=447110   server_bridge_netmask = 0.0.0.0
Mon Jun 20 15:23:18 2016 us=447171   server_bridge_pool_start = 0.0.0.0
Mon Jun 20 15:23:18 2016 us=447233   server_bridge_pool_end = 0.0.0.0
Mon Jun 20 15:23:18 2016 us=447289   push_entry = 'route 10.8.0.0 255.255.255.0'
Mon Jun 20 15:23:18 2016 us=447344   push_entry = 'topology net30'
Mon Jun 20 15:23:18 2016 us=447399   push_entry = 'ping 10'
Mon Jun 20 15:23:18 2016 us=447454   push_entry = 'ping-restart 60'
Mon Jun 20 15:23:18 2016 us=447510   ifconfig_pool_defined = ENABLED
Mon Jun 20 15:23:18 2016 us=447572   ifconfig_pool_start = 10.8.0.4
Mon Jun 20 15:23:18 2016 us=447635   ifconfig_pool_end = 10.8.0.251
Mon Jun 20 15:23:18 2016 us=447698   ifconfig_pool_netmask = 0.0.0.0
Mon Jun 20 15:23:18 2016 us=447754   ifconfig_pool_persist_filename = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=447810   ifconfig_pool_persist_refresh_freq = 600
Mon Jun 20 15:23:18 2016 us=447867   ifconfig_ipv6_pool_defined = DISABLED
Mon Jun 20 15:23:18 2016 us=447927   ifconfig_ipv6_pool_base = ::
Mon Jun 20 15:23:18 2016 us=447983   ifconfig_ipv6_pool_netbits = 0
Mon Jun 20 15:23:18 2016 us=448040   n_bcast_buf = 256
Mon Jun 20 15:23:18 2016 us=448094   tcp_queue_limit = 64
Mon Jun 20 15:23:18 2016 us=448149   real_hash_size = 256
Mon Jun 20 15:23:18 2016 us=448203   virtual_hash_size = 256
Mon Jun 20 15:23:18 2016 us=448259   client_connect_script = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=448315   learn_address_script = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=448371   client_disconnect_script = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=448426   client_config_dir = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=448482   ccd_exclusive = DISABLED
Mon Jun 20 15:23:18 2016 us=448563   tmp_dir = '/tmp'
Mon Jun 20 15:23:18 2016 us=448620   push_ifconfig_defined = DISABLED
Mon Jun 20 15:23:18 2016 us=448682   push_ifconfig_local = 0.0.0.0
Mon Jun 20 15:23:18 2016 us=448743   push_ifconfig_remote_netmask = 0.0.0.0
Mon Jun 20 15:23:18 2016 us=448799   push_ifconfig_ipv6_defined = DISABLED
Mon Jun 20 15:23:18 2016 us=448860   push_ifconfig_ipv6_local = ::/0
Mon Jun 20 15:23:18 2016 us=448920   push_ifconfig_ipv6_remote = ::
Mon Jun 20 15:23:18 2016 us=448975   enable_c2c = ENABLED
Mon Jun 20 15:23:18 2016 us=449029   duplicate_cn = DISABLED
Mon Jun 20 15:23:18 2016 us=449083   cf_max = 0
Mon Jun 20 15:23:18 2016 us=449136   cf_per = 0
Mon Jun 20 15:23:18 2016 us=449189   max_clients = 1024
Mon Jun 20 15:23:18 2016 us=449244   max_routes_per_client = 256
Mon Jun 20 15:23:18 2016 us=449299   auth_user_pass_verify_script = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=449355   auth_user_pass_verify_script_via_file = DISABLED
Mon Jun 20 15:23:18 2016 us=449412   port_share_host = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=449467   port_share_port = 0
Mon Jun 20 15:23:18 2016 us=449521   client = DISABLED
Mon Jun 20 15:23:18 2016 us=449576   pull = DISABLED
Mon Jun 20 15:23:18 2016 us=449631   auth_user_pass_file = '[UNDEF]'
Mon Jun 20 15:23:18 2016 us=449692 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 23 2016
Mon Jun 20 15:23:18 2016 us=449770 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Mon Jun 20 15:23:18 2016 us=452421 Diffie-Hellman initialized with 512 bit key
Mon Jun 20 15:23:18 2016 us=455356 TLS-Auth MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 15:23:18 2016 us=455524 Socket Buffers: R=[163840->131072] S=[163840->131072]
Mon Jun 20 15:23:18 2016 us=456080 ROUTE_GATEWAY 192.168.77.1/255.255.255.0 IFACE=eth0 HWADDR=b8:27:eb:93:5c:ab
Mon Jun 20 15:23:18 2016 us=459369 TUN/TAP device tun0 opened
Mon Jun 20 15:23:18 2016 us=459588 TUN/TAP TX queue length set to 100
Mon Jun 20 15:23:18 2016 us=459731 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jun 20 15:23:18 2016 us=459885 /sbin/ip link set dev tun0 up mtu 1500
Mon Jun 20 15:23:18 2016 us=466989 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Jun 20 15:23:18 2016 us=474140 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Jun 20 15:23:18 2016 us=479945 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 15:23:18 2016 us=480167 UDPv4 link local (bound): [undef]
Mon Jun 20 15:23:18 2016 us=480289 UDPv4 link remote: [undef]
Mon Jun 20 15:23:18 2016 us=480403 MULTI: multi_init called, r=256 v=256
Mon Jun 20 15:23:18 2016 us=480595 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Jun 20 15:23:18 2016 us=481346 Initialization Sequence Completed
Mon Jun 20 15:23:23 2016 us=902763 MULTI: multi_create_instance called
Mon Jun 20 15:23:23 2016 us=903163 5.170.73.104:63931 Re-using SSL/TLS context
Mon Jun 20 15:23:23 2016 us=903401 5.170.73.104:63931 LZO compression initialized
Mon Jun 20 15:23:23 2016 us=904357 5.170.73.104:63931 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 15:23:23 2016 us=904531 5.170.73.104:63931 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 15:23:23 2016 us=904788 5.170.73.104:63931 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 15:23:23 2016 us=904877 5.170.73.104:63931 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 15:23:23 2016 us=905073 5.170.73.104:63931 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 15:23:23 2016 us=905220 5.170.73.104:63931 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 15:23:23 2016 us=905453 5.170.73.104:63931 TLS: Initial packet from [AF_INET]5.170.73.104:63931, sid=4295a670 5bf11c0a
Mon Jun 20 15:23:26 2016 us=278988 MULTI: multi_create_instance called
Mon Jun 20 15:23:26 2016 us=279435 5.170.73.104:63754 Re-using SSL/TLS context
Mon Jun 20 15:23:26 2016 us=279674 5.170.73.104:63754 LZO compression initialized
Mon Jun 20 15:23:26 2016 us=280274 5.170.73.104:63754 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 15:23:26 2016 us=280419 5.170.73.104:63754 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 15:23:26 2016 us=280661 5.170.73.104:63754 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 15:23:26 2016 us=280748 5.170.73.104:63754 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 15:23:26 2016 us=280905 5.170.73.104:63754 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 15:23:26 2016 us=281047 5.170.73.104:63754 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 15:23:26 2016 us=281306 5.170.73.104:63754 TLS: Initial packet from [AF_INET]5.170.73.104:63754, sid=5db8e4f9 f5b5f0d6
Mon Jun 20 15:23:28 2016 us=681372 MULTI: multi_create_instance called
Mon Jun 20 15:23:28 2016 us=681868 5.170.73.104:64297 Re-using SSL/TLS context
Mon Jun 20 15:23:28 2016 us=682039 5.170.73.104:64297 LZO compression initialized
Mon Jun 20 15:23:28 2016 us=682700 5.170.73.104:64297 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 15:23:28 2016 us=682847 5.170.73.104:64297 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 15:23:28 2016 us=683159 5.170.73.104:64297 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 15:23:28 2016 us=683283 5.170.73.104:64297 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 15:23:28 2016 us=683452 5.170.73.104:64297 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 15:23:28 2016 us=683596 5.170.73.104:64297 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 15:23:28 2016 us=683818 5.170.73.104:64297 TLS: Initial packet from [AF_INET]5.170.73.104:64297, sid=ff1ca733 a5c73462
Mon Jun 20 15:23:31 2016 us=59310 MULTI: multi_create_instance called
Mon Jun 20 15:23:31 2016 us=59794 5.170.73.104:63746 Re-using SSL/TLS context
Mon Jun 20 15:23:31 2016 us=59989 5.170.73.104:63746 LZO compression initialized
Mon Jun 20 15:23:31 2016 us=60615 5.170.73.104:63746 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jun 20 15:23:31 2016 us=60759 5.170.73.104:63746 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jun 20 15:23:31 2016 us=61004 5.170.73.104:63746 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Mon Jun 20 15:23:31 2016 us=61094 5.170.73.104:63746 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Mon Jun 20 15:23:31 2016 us=61259 5.170.73.104:63746 Local Options hash (VER=V4): '79a26cd9'
Mon Jun 20 15:23:31 2016 us=61406 5.170.73.104:63746 Expected Remote Options hash (VER=V4): 'fc8ba345'
Mon Jun 20 15:23:31 2016 us=61618 5.170.73.104:63746 TLS: Initial packet from [AF_INET]5.170.73.104:63746, sid=c65132c7 8a179237
Mon Jun 20 15:23:34 2016 us=890262 event_wait : Interrupted system call (code=4)
Mon Jun 20 15:23:34 2016 us=892626 TCP/UDP: Closing socket
Mon Jun 20 15:23:34 2016 us=893079 /sbin/ip route del 10.8.0.0/24
Mon Jun 20 15:23:34 2016 us=900236 Closing TUN/TAP interface
Mon Jun 20 15:23:34 2016 us=900597 /sbin/ip addr del dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Jun 20 15:23:34 2016 us=994415 SIGINT[hard,] received, process exiting

client side log (sorry it's a screenshot to be quick)

it seems like dh key too short; i reduced it from 2048 bit to 512 cause uploading a .key to siemens RTU will be show an error due to too large key file...but I'm not sure that's the only problem. Anyway my laptop doesn't connect to openvon server 😐 😐

TinCanTech

You can see from your screen shot: "DH Key too small" .. 512bit is too small.

Use easyrsa to create a new PKI from scratch with a 2048bit key etc.

Setting up your own Certificate Authority (CA) and generating certificates and keys for an OpenVPN server and multiple clients

bigsrl

Ok, i changed configuration in vars to set dh encryption at 1024 bit and now my laptop (and also my siemens RTU!!) connecting correctly to the openvpn server!! :mrgreen: :mrgreen: :mrgreen: :mrgreen: :mrgreen: thanks!!!

After 5 day of work, found VPN led ON is fantastic!

ok, now i have another problem, I generated something about 25/30 client key, put one on RTU and one on my laptop: each openVPN client windows (2 laptop) after connecting receive:

IP 10.8.0.xxx
SUB 255.255.255.252
NO GATEWAY
DNS1: 8.8.8.8
DNS2: 8.8.4.4

no one can ping each other and no communication between client.

but RTU, after connection, receive:

IP address 10.8.0.10
Subnet mask 10.8.0.9
why??

Raspberry cannot ping no one client , no laptop, no RTU, nothing

all client after connection cannot ping 8.8.8.8...

I simply will have all mine RTU connected to openvpn server; a pc connected as client of OpenVPN server need to retrive the http page of each RTU.

Sure my problem is in gateway or in routing...

I changed iptables configration with command

sudo iptables -t nat -A POSTROUTING -s 10.0.0.0/8 ! -d 10.0.0.0/8 -o eth0 -j MASQUERADE
I've also modified the cronotab, inserting @reboot sudo iptables -t nat -A POSTROUTING -s 10.0.0.0/8 ! -d 10.0.0.0/8 -o eth0 -j MASQUERADE

my server log is:

Tue Jun 21 14:08:41 2016 us=645131 client2/5.170.4.150:18930 [client2] Inactivity timeout (--ping-restart), restarting
Tue Jun 21 14:08:41 2016 us=645485 client2/5.170.4.150:18930 SIGUSR1[soft,ping-restart] received, client-instance restarting
Tue Jun 21 14:08:50 2016 us=901765 MULTI: multi_create_instance called
Tue Jun 21 14:08:50 2016 us=902096 5.170.5.194:41545 Re-using SSL/TLS context
Tue Jun 21 14:08:50 2016 us=902247 5.170.5.194:41545 LZO compression initialized
Tue Jun 21 14:08:50 2016 us=902776 5.170.5.194:41545 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jun 21 14:08:50 2016 us=902918 5.170.5.194:41545 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jun 21 14:08:50 2016 us=903154 5.170.5.194:41545 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Jun 21 14:08:50 2016 us=903244 5.170.5.194:41545 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Jun 21 14:08:50 2016 us=903402 5.170.5.194:41545 Local Options hash (VER=V4): '79a26cd9'
Tue Jun 21 14:08:50 2016 us=903546 5.170.5.194:41545 Expected Remote Options hash (VER=V4): 'fc8ba345'
Tue Jun 21 14:08:50 2016 us=903762 5.170.5.194:41545 TLS: Initial packet from [AF_INET]5.170.5.194:41545, sid=ee6f493e 614d57e9
Tue Jun 21 14:08:58 2016 us=677454 5.170.5.194:41545 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jun 21 14:08:58 2016 us=679292 5.170.5.194:41545 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=clientkey, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jun 21 14:08:59 2016 us=232110 5.170.5.194:41545 NOTE: Options consistency check may be skewed by version differences
Tue Jun 21 14:08:59 2016 us=232361 5.170.5.194:41545 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Tue Jun 21 14:08:59 2016 us=232479 5.170.5.194:41545 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tun'
Tue Jun 21 14:08:59 2016 us=232587 5.170.5.194:41545 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1570'
Tue Jun 21 14:08:59 2016 us=232695 5.170.5.194:41545 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1500'
Tue Jun 21 14:08:59 2016 us=232800 5.170.5.194:41545 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Tue Jun 21 14:08:59 2016 us=232908 5.170.5.194:41545 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher AES-256-CBC'
Tue Jun 21 14:08:59 2016 us=233011 5.170.5.194:41545 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA256'
Tue Jun 21 14:08:59 2016 us=233115 5.170.5.194:41545 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 256'
Tue Jun 21 14:08:59 2016 us=233222 5.170.5.194:41545 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Tue Jun 21 14:08:59 2016 us=233329 5.170.5.194:41545 WARNING: 'tls-client' is present in local config but missing in remote config, local='tls-client'
Tue Jun 21 14:08:59 2016 us=234358 5.170.5.194:41545 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 21 14:08:59 2016 us=234492 5.170.5.194:41545 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jun 21 14:08:59 2016 us=234591 5.170.5.194:41545 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 21 14:08:59 2016 us=234698 5.170.5.194:41545 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jun 21 14:08:59 2016 us=580836 5.170.5.194:41545 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Jun 21 14:08:59 2016 us=581235 5.170.5.194:41545 [clientkey] Peer Connection Initiated with [AF_INET]5.170.5.194:41545
Tue Jun 21 14:08:59 2016 us=581476 clientkey/5.170.5.194:41545 MULTI_sva: pool returned IPv4=10.8.0.10, IPv6=(Not enabled)
Tue Jun 21 14:08:59 2016 us=581809 clientkey/5.170.5.194:41545 MULTI: Learn: 10.8.0.10 -> clientkey/5.170.5.194:41545
Tue Jun 21 14:08:59 2016 us=581921 clientkey/5.170.5.194:41545 MULTI: primary virtual IP for clientkey/5.170.5.194:41545: 10.8.0.10
Tue Jun 21 14:09:01 2016 us=902337 clientkey/5.170.5.194:41545 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jun 21 14:09:01 2016 us=902561 clientkey/5.170.5.194:41545 send_push_reply(): safe_cap=940
Tue Jun 21 14:09:01 2016 us=902854 clientkey/5.170.5.194:41545 SENT CONTROL [clientkey]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 60,ifconfig 10.8.0.10 10.8.0.9' (status=1)
Tue Jun 21 14:09:13 2016 us=207072 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:09:22 2016 us=823260 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:09:32 2016 us=538144 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:09:43 2016 us=285807 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:09:53 2016 us=906869 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:10:03 2016 us=501735 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:10:14 2016 us=414191 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:10:24 2016 us=445440 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:10:35 2016 us=129074 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:10:44 2016 us=869106 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:10:54 2016 us=466433 clientkey/5.170.5.194:41545 Bad LZO decompression header byte: 42
Tue Jun 21 14:11:02 2016 us=619955 clientkey/5.170.5.194:41545 [clientkey] Inactivity timeout (--ping-restart), restarting
Tue Jun 21 14:11:02 2016 us=620312 clientkey/5.170.5.194:41545 SIGUSR1[soft,ping-restart] received, client-instance restarting
Tue Jun 21 14:12:05 2016 us=283038 MULTI: multi_create_instance called
Tue Jun 21 14:12:05 2016 us=283396 5.170.5.194:41707 Re-using SSL/TLS context
Tue Jun 21 14:12:05 2016 us=283522 5.170.5.194:41707 LZO compression initialized
Tue Jun 21 14:12:05 2016 us=284048 5.170.5.194:41707 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jun 21 14:12:05 2016 us=284235 5.170.5.194:41707 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jun 21 14:12:05 2016 us=284511 5.170.5.194:41707 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Jun 21 14:12:05 2016 us=284605 5.170.5.194:41707 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Jun 21 14:12:05 2016 us=284771 5.170.5.194:41707 Local Options hash (VER=V4): '79a26cd9'
Tue Jun 21 14:12:05 2016 us=284917 5.170.5.194:41707 Expected Remote Options hash (VER=V4): 'fc8ba345'
Tue Jun 21 14:12:05 2016 us=285140 5.170.5.194:41707 TLS: Initial packet from [AF_INET]5.170.5.194:41707, sid=1b7e313e 728b73ac
Tue Jun 21 14:12:16 2016 us=189997 5.170.5.194:41707 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jun 21 14:12:16 2016 us=191937 5.170.5.194:41707 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=clientkey, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jun 21 14:12:16 2016 us=737163 5.170.5.194:41707 NOTE: Options consistency check may be skewed by version differences
Tue Jun 21 14:12:16 2016 us=737386 5.170.5.194:41707 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Tue Jun 21 14:12:16 2016 us=737537 5.170.5.194:41707 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tun'
Tue Jun 21 14:12:16 2016 us=737616 5.170.5.194:41707 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1570'
Tue Jun 21 14:12:16 2016 us=737687 5.170.5.194:41707 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1500'
Tue Jun 21 14:12:16 2016 us=737756 5.170.5.194:41707 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Tue Jun 21 14:12:16 2016 us=737828 5.170.5.194:41707 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher AES-256-CBC'
Tue Jun 21 14:12:16 2016 us=737897 5.170.5.194:41707 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA256'
Tue Jun 21 14:12:16 2016 us=737966 5.170.5.194:41707 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 256'
Tue Jun 21 14:12:16 2016 us=738036 5.170.5.194:41707 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Tue Jun 21 14:12:16 2016 us=738105 5.170.5.194:41707 WARNING: 'tls-client' is present in local config but missing in remote config, local='tls-client'
Tue Jun 21 14:12:16 2016 us=738813 5.170.5.194:41707 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 21 14:12:16 2016 us=738913 5.170.5.194:41707 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jun 21 14:12:16 2016 us=738981 5.170.5.194:41707 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 21 14:12:16 2016 us=739051 5.170.5.194:41707 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jun 21 14:12:17 2016 us=87027 5.170.5.194:41707 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Jun 21 14:12:17 2016 us=87200 5.170.5.194:41707 [clientkey] Peer Connection Initiated with [AF_INET]5.170.5.194:41707
Tue Jun 21 14:12:17 2016 us=87342 clientkey/5.170.5.194:41707 MULTI_sva: pool returned IPv4=10.8.0.10, IPv6=(Not enabled)
Tue Jun 21 14:12:17 2016 us=87564 clientkey/5.170.5.194:41707 MULTI: Learn: 10.8.0.10 -> clientkey/5.170.5.194:41707
Tue Jun 21 14:12:17 2016 us=87640 clientkey/5.170.5.194:41707 MULTI: primary virtual IP for clientkey/5.170.5.194:41707: 10.8.0.10
Tue Jun 21 14:12:18 2016 us=328570 clientkey/5.170.5.194:41707 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jun 21 14:12:18 2016 us=328752 clientkey/5.170.5.194:41707 send_push_reply(): safe_cap=940
Tue Jun 21 14:12:18 2016 us=328957 clientkey/5.170.5.194:41707 SENT CONTROL [clientkey]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 60,ifconfig 10.8.0.10 10.8.0.9' (status=1)
Tue Jun 21 14:12:29 2016 us=88438 clientkey/5.170.5.194:41707 Bad LZO decompression header byte: 42
Tue Jun 21 14:12:33 2016 us=363976 MULTI: multi_create_instance called
Tue Jun 21 14:12:33 2016 us=364343 5.170.4.150:18851 Re-using SSL/TLS context
Tue Jun 21 14:12:33 2016 us=364525 5.170.4.150:18851 LZO compression initialized
Tue Jun 21 14:12:33 2016 us=365054 5.170.4.150:18851 Control Channel MTU parms [ L:1570 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Jun 21 14:12:33 2016 us=365197 5.170.4.150:18851 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Jun 21 14:12:33 2016 us=365431 5.170.4.150:18851 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Jun 21 14:12:33 2016 us=365517 5.170.4.150:18851 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Jun 21 14:12:33 2016 us=365674 5.170.4.150:18851 Local Options hash (VER=V4): '79a26cd9'
Tue Jun 21 14:12:33 2016 us=365897 5.170.4.150:18851 Expected Remote Options hash (VER=V4): 'fc8ba345'
Tue Jun 21 14:12:33 2016 us=366123 5.170.4.150:18851 TLS: Initial packet from [AF_INET]5.170.4.150:18851, sid=dddf99bc cc3ef981
Tue Jun 21 14:12:33 2016 us=968759 5.170.4.150:18851 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=Fort-Funston CA, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jun 21 14:12:33 2016 us=970098 5.170.4.150:18851 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=client2, name=EasyRSA, emailAddress=me@myhost.mydomain
Tue Jun 21 14:12:34 2016 us=62368 5.170.4.150:18851 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1570', remote='link-mtu 1541'
Tue Jun 21 14:12:34 2016 us=62568 5.170.4.150:18851 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Tue Jun 21 14:12:34 2016 us=62667 5.170.4.150:18851 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
Tue Jun 21 14:12:34 2016 us=62758 5.170.4.150:18851 WARNING: 'auth' is used inconsistently, local='auth SHA256', remote='auth SHA1'
Tue Jun 21 14:12:34 2016 us=62853 5.170.4.150:18851 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
Tue Jun 21 14:12:34 2016 us=63842 5.170.4.150:18851 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 21 14:12:34 2016 us=63938 5.170.4.150:18851 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jun 21 14:12:34 2016 us=64028 5.170.4.150:18851 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Jun 21 14:12:34 2016 us=64101 5.170.4.150:18851 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Jun 21 14:12:34 2016 us=111909 5.170.4.150:18851 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Jun 21 14:12:34 2016 us=116362 5.170.4.150:18851 [client2] Peer Connection Initiated with [AF_INET]5.170.4.150:18851
Tue Jun 21 14:12:34 2016 us=116567 client2/5.170.4.150:18851 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Tue Jun 21 14:12:34 2016 us=116797 client2/5.170.4.150:18851 MULTI: Learn: 10.8.0.6 -> client2/5.170.4.150:18851
Tue Jun 21 14:12:34 2016 us=116873 client2/5.170.4.150:18851 MULTI: primary virtual IP for client2/5.170.4.150:18851: 10.8.0.6
Tue Jun 21 14:12:36 2016 us=166225 client2/5.170.4.150:18851 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jun 21 14:12:36 2016 us=166480 client2/5.170.4.150:18851 send_push_reply(): safe_cap=940
Tue Jun 21 14:12:36 2016 us=166776 client2/5.170.4.150:18851 SENT CONTROL [client2]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 60,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Tue Jun 21 14:12:36 2016 us=263334 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=268268 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=271978 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=280734 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=301988 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=309704 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=331993 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=338276 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=341990 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=358258 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=378281 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=379568 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=379754 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=381135 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=381326 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=425770 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=507795 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=522221 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=633271 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=664603 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=697446 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=702090 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=704583 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=708559 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=722003 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=723408 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=729615 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=755752 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=769467 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=773211 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=776956 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=782079 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=787167 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=787340 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=791970 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=795794 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=800787 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=853488 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=853672 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=853845 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=854014 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=879514 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=914528 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=942033 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:36 2016 us=974560 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=5780 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=38288 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=68269 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=100732 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=113451 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=115772 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=120201 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=129490 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=160745 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=195804 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=214700 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=225806 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=469706 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=471291 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=471528 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=471714 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=471888 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=472060 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=472229 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=472455 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=488311 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=505770 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=537028 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=539579 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=568301 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=599539 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=631990 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=661977 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=679481 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=698264 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=728275 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=755738 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=785756 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=831989 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=864605 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=881993 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=911994 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=944539 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=958233 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=959450 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=966202 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:37 2016 us=974509 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=8785 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=37322 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=84519 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=99566 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=130879 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=162078 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=178229 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=194653 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=224534 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=258297 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=288278 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=318266 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=350738 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=382023 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=385684 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=413259 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=457364 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=468275 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=474521 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=506995 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=538258 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=584583 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=611199 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=612027 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=632029 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=662034 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=693314 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=724560 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=755743 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=788244 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=822002 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=849686 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=882070 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=912055 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=944539 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:38 2016 us=974546 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=5800 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=38309 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=68288 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=99495 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=133244 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=162069 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=194571 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=224555 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=255780 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=288256 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=301973 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=308204 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=309435 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=318243 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=349518 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=380740 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=415758 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=444489 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=468237 clientkey/5.170.5.194:41707 Bad LZO decompression header byte: 42
Tue Jun 21 14:12:39 2016 us=489491 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=507007 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=554531 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=568255 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=600756 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=630719 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=662020 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=694506 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=728268 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=745679 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=746916 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=755736 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=785738 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=823227 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:39 2016 us=850746 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:40 2016 us=722180 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:40 2016 us=725745 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:40 2016 us=728214 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:41 2016 us=99483 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:41 2016 us=104475 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:42 2016 us=575822 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:42 2016 us=918290 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:42 2016 us=943503 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:42 2016 us=975741 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:42 2016 us=995672 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=8680 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=40741 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=88274 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=104497 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=134486 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=163216 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=201974 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=225727 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=303267 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=304444 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=305692 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=319466 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=352150 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=458313 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=460733 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=463282 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=474465 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=507206 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=538293 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=568693 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=600760 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=632002 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=664629 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=695771 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=725754 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=757035 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=789512 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=833436 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=854624 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=881968 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=913460 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=944456 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:43 2016 us=975765 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=5736 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=38587 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=68241 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=98226 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=129467 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=161956 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=193347 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=224497 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=255753 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=288253 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=318252 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=350717 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=381963 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=411984 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=443235 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=473266 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=504458 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=538225 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=568252 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=599455 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=631950 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=661968 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=675665 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=694459 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=724454 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=755733 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=788581 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=818230 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=849469 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=882111 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=912087 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=958259 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:44 2016 us=974493 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=5739 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=38274 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=68590 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=100699 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=131967 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=175778 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=194487 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=225888 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=255839 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=288287 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=318643 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=350722 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=382026 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=412110 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=444486 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=475741 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=505726 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=538213 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=568240 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=600689 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=631968 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=661967 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=694460 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=739476 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=755704 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=788268 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=818225 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=850707 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=879457 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=911954 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=943205 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:45 2016 us=973244 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=5730 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=39480 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=68235 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=99448 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=131964 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=469015 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=478868 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=488856 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=546075 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=591093 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:46 2016 us=668466 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:49 2016 us=942034 clientkey/5.170.5.194:41707 Bad LZO decompression header byte: 42
Tue Jun 21 14:12:51 2016 us=309589 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:56 2016 us=575762 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:56 2016 us=581951 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:56 2016 us=995748 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed
Tue Jun 21 14:12:57 2016 us=1924 client2/5.170.4.150:18851 Authenticate/Decrypt packet error: packet HMAC authentication failed

5.170.5.194 is the RTU
5.170.4.150 is my laptop

server configuration is

dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
comp-lzo no
user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
push "redirect-gateway def1"
push "remote-gateway 10.8.0.1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
auth SHA256
cipher AES-256-CBC
verb 4
client-to-client
log-append /var/log/openvpn

any idea?

thanks mane, you'r helping me too much

TinCanTech

bigsrl wrotei changed configuration in vars to set dh encryption at 1024 bit

Most security services consider 1024bit to be compromised .. 2048bit is the current standard.

bigsrl wroteRTU, after connection, receive:

IP address 10.8.0.10
Subnet mask 10.8.0.9
why??

This is --tolopogy net30 .. See --tolopogy in The Manual v23x

Please also see the HOWTO here:

Also, UMTS appears to not work well with openvpn --redirect-gateway see this thread for some help:
https://forums.openvpn.net/viewtopic.php?f=17&t=21913

Finally, ensure your local firewalls are configured to allow VPN packets.

bigsrl

Ok, now I have all operative

mine openVPN server file config is this:

dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
#comp-lzo no
mode server
tls-server
server 10.8.0.0 255.255.255.0
auth SHA256
cipher AES-256-CBC
keepalive 10 60
client-to-client
push "redirect-gateway autolocal"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
ping-timer-rem
verb 4
log-append /var/log/openvpn

client config for my pc:

dev tun
client
proto udp
remote OPENVPNPUBLICIP 1194
#resolv-retry infinite
#nobind
#persist-key
#persist-tun
auth SHA256
cipher AES-256-CBC
ca ca.crt
cert client28.crt
key client28.key
verb 4

and in RTU I put this configuration:

I also need remove all information in client certificate due to RTU too long certificate advisory, leaving in file just che certificate (from begin to end cetificate)

thanks everyone for the support, this 3D is SOLVED

And I hope it can help someone other.
thanks
bye bye

TinCanTech

Thanks for letting us know your solution 8-)