First: While preparing for posting the logs I found that the errors mentioned above probably occurred due to 'client.conf' was copied by mistake while I was testing the problem. Deleted the file and the 'TLS auth errors above disappeared. The original problem did not go away. Clients can ping each other, but not server and vice versa. See below.
Be prepared... lots of data coming:
INFO:
malin: 213.31.200.89 (ovpn: 192.168.2.28)
agnes: 79.216.19.102 (ovpn: 192.168.2.161)
nina: 81.138.196.216 (ovpn: 192.168.2.163)
ametist: 192.168.199.63
emma: 192.168.193.25
192.168 /------------\
ametist---nina---| INTERNET |---agnes---emma
.199.63 .2.163 \-----v------/ .2.161 .193.25
|
malin
.2.28
malin routing table
malin:/etc/openvpn# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.193.0 192.168.2.161 255.255.255.0 UG 0 0 0 br0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
192.168.199.0 192.168.2.163 255.255.255.0 UG 0 0 0 br0
0.0.0.0 192.168.2.17 0.0.0.0 UG 0 0 0 br0
nina routing table
nina:/tmp# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.193.0 192.168.2.161 255.255.255.0 UG 0 0 0 tap0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
192.168.199.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 eth0
0.0.0.0 192.168.199.3 0.0.0.0 UG 100 0 0 eth0
Test from ametist (inside of nina network)
ametist:/$ ping 192.168.193.25 (emma)
PING 192.168.193.25 (192.168.193.25) 56(84) bytes of data.
64 bytes from 192.168.193.25: icmp_seq=1 ttl=63 time=136 ms
64 bytes from 192.168.193.25: icmp_seq=2 ttl=63 time=59.3 ms
ametist:/$ ping 192.168.2.161 (agnes ovpn)
PING 192.168.2.161 (192.168.2.161) 56(84) bytes of data.
64 bytes from 192.168.2.161: icmp_seq=1 ttl=64 time=135 ms
64 bytes from 192.168.2.161: icmp_seq=2 ttl=64 time=58.5 ms
ametist:/$ ping 192.168.2.28
PING 192.168.2.28 (192.168.2.28) 56(84) bytes of data.
--- 192.168.2.28 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 1010ms
Notice that 'malin' (openvpn-server in it self is unreachable)
Test from malin (openvpn-server)
malin:/etc/openvpn# ping 192.168.2.17
PING 192.168.2.17 (192.168.2.17) 56(84) bytes of data.
64 bytes from 192.168.2.17: icmp_seq=1 ttl=64 time=0.752 ms
64 bytes from 192.168.2.17: icmp_seq=2 ttl=64 time=0.578 ms
malin:/etc/openvpn# ping 192.168.2.163
PING 192.168.2.163 (192.168.2.163) 56(84) bytes of data.
--- 192.168.2.163 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 1009ms
Server can reach it's own gateway, but none of the clients connected. Weird.
openvpn-server-log:
malin:/# openvpn start
Jul 20 03:36:59 malin ovpn-server[26126]: Current Parameter Settings:
Jul 20 03:36:59 malin ovpn-server[26126]: config = '/etc/openvpn/server.conf'
Jul 20 03:36:59 malin ovpn-server[26126]: mode = 1
Jul 20 03:36:59 malin ovpn-server[26126]: persist_config = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: persist_mode = 1
Jul 20 03:36:59 malin ovpn-server[26126]: show_ciphers = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: show_digests = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: show_engines = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: genkey = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: key_pass_file = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: show_tls_ciphers = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: proto = 0
Jul 20 03:36:59 malin ovpn-server[26126]: local = '192.168.2.28'
Jul 20 03:36:59 malin ovpn-server[26126]: remote_list = NULL
Jul 20 03:36:59 malin ovpn-server[26126]: remote_random = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: local_port = 1196
Jul 20 03:36:59 malin ovpn-server[26126]: remote_port = 1196
Jul 20 03:36:59 malin ovpn-server[26126]: remote_float = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: ipchange = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: bind_defined = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: bind_local = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: dev = 'tap1'
Jul 20 03:36:59 malin ovpn-server[26126]: dev_type = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: dev_node = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: lladdr = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: topology = 1
Jul 20 03:36:59 malin ovpn-server[26126]: tun_ipv6 = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_local = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_remote_netmask = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_noexec = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_nowarn = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: shaper = 0
Jul 20 03:36:59 malin ovpn-server[26126]: tun_mtu = 1500
Jul 20 03:36:59 malin ovpn-server[26126]: tun_mtu_defined = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: link_mtu = 1500
Jul 20 03:36:59 malin ovpn-server[26126]: link_mtu_defined = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: tun_mtu_extra = 32
Jul 20 03:36:59 malin ovpn-server[26126]: tun_mtu_extra_defined = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: fragment = 0
Jul 20 03:36:59 malin ovpn-server[26126]: mtu_discover_type = -1
Jul 20 03:36:59 malin ovpn-server[26126]: mtu_test = 0
Jul 20 03:36:59 malin ovpn-server[26126]: mlock = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: keepalive_ping = 10
Jul 20 03:36:59 malin ovpn-server[26126]: keepalive_timeout = 120
Jul 20 03:36:59 malin ovpn-server[26126]: inactivity_timeout = 0
Jul 20 03:36:59 malin ovpn-server[26126]: ping_send_timeout = 10
Jul 20 03:36:59 malin ovpn-server[26126]: ping_rec_timeout = 240
Jul 20 03:36:59 malin ovpn-server[26126]: ping_rec_timeout_action = 2
Jul 20 03:36:59 malin ovpn-server[26126]: ping_timer_remote = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: remap_sigusr1 = 0
Jul 20 03:36:59 malin ovpn-server[26126]: explicit_exit_notification = 0
Jul 20 03:36:59 malin ovpn-server[26126]: persist_tun = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: persist_local_ip = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: persist_remote_ip = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: persist_key = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: mssfix = 1450
Jul 20 03:36:59 malin ovpn-server[26126]: passtos = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: resolve_retry_seconds = 1000000000
Jul 20 03:36:59 malin ovpn-server[26126]: connect_retry_seconds = 5
Jul 20 03:36:59 malin ovpn-server[26126]: connect_timeout = 10
Jul 20 03:36:59 malin ovpn-server[26126]: connect_retry_max = 0
Jul 20 03:36:59 malin ovpn-server[26126]: username = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: groupname = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: chroot_dir = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: cd_dir = '/etc/openvpn'
Jul 20 03:36:59 malin ovpn-server[26126]: writepid = '/var/run/openvpn.server.pid'
Jul 20 03:36:59 malin ovpn-server[26126]: up_script = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: down_script = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: down_pre = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: up_restart = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: up_delay = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: daemon = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: inetd = 0
Jul 20 03:36:59 malin ovpn-server[26126]: log = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: suppress_timestamps = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: nice = 0
Jul 20 03:36:59 malin ovpn-server[26126]: verbosity = 4
Jul 20 03:36:59 malin ovpn-server[26126]: mute = 0
Jul 20 03:36:59 malin ovpn-server[26126]: gremlin = 0
Jul 20 03:36:59 malin ovpn-server[26126]: status_file = 'openvpn-status.log'
Jul 20 03:36:59 malin ovpn-server[26126]: status_file_version = 1
Jul 20 03:36:59 malin ovpn-server[26126]: status_file_update_freq = 60
Jul 20 03:36:59 malin ovpn-server[26126]: occ = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: rcvbuf = 65536
Jul 20 03:36:59 malin ovpn-server[26126]: sndbuf = 65536
Jul 20 03:36:59 malin ovpn-server[26126]: sockflags = 0
Jul 20 03:36:59 malin ovpn-server[26126]: socks_proxy_server = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: socks_proxy_port = 0
Jul 20 03:36:59 malin ovpn-server[26126]: socks_proxy_retry = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: fast_io = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: lzo = 7
Jul 20 03:36:59 malin ovpn-server[26126]: route_script = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: route_default_gateway = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: route_default_metric = 0
Jul 20 03:36:59 malin ovpn-server[26126]: route_noexec = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: route_delay = 0
Jul 20 03:36:59 malin ovpn-server[26126]: route_delay_window = 30
Jul 20 03:36:59 malin ovpn-server[26126]: route_delay_defined = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: route_nopull = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: management_addr = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: management_port = 0
Jul 20 03:36:59 malin ovpn-server[26126]: management_user_pass = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: management_log_history_cache = 250
Jul 20 03:36:59 malin ovpn-server[26126]: management_echo_buffer_size = 100
Jul 20 03:36:59 malin ovpn-server[26126]: management_query_passwords = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: management_hold = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: management_client = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: management_signal = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: management_forget_disconnect = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: management_write_peer_info_file = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: plugin[0] /usr/lib/openvpn/openvpn-auth-pam.so '[/usr/lib/openvpn/openvpn-auth-pam.so] [login]'
Jul 20 03:36:59 malin ovpn-server[26126]: shared_secret_file = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: key_direction = 1
Jul 20 03:36:59 malin ovpn-server[26126]: ciphername_defined = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: ciphername = 'AES-128-CBC'
Jul 20 03:36:59 malin ovpn-server[26126]: authname_defined = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: authname = 'SHA1'
Jul 20 03:36:59 malin ovpn-server[26126]: keysize = 0
Jul 20 03:36:59 malin ovpn-server[26126]: engine = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: replay = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: mute_replay_warnings = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: replay_window = 64
Jul 20 03:36:59 malin ovpn-server[26126]: replay_time = 15
Jul 20 03:36:59 malin ovpn-server[26126]: packet_id_file = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: use_iv = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: test_crypto = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: tls_server = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: tls_client = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: key_method = 2
Jul 20 03:36:59 malin ovpn-server[26126]: ca_file = '/etc/openvpn/keys/ca.crt'
Jul 20 03:36:59 malin ovpn-server[26126]: ca_path = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: dh_file = '/etc/openvpn/keys/dh2048.pem'
Jul 20 03:36:59 malin ovpn-server[26126]: cert_file = '/etc/openvpn/keys/server.crt'
Jul 20 03:36:59 malin ovpn-server[26126]: priv_key_file = '/etc/openvpn/keys/server.key'
Jul 20 03:36:59 malin ovpn-server[26126]: pkcs12_file = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: cipher_list = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: tls_verify = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: tls_remote = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: crl_file = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: ns_cert_type = 0
Jul 20 03:36:59 malin ovpn-server[26126]: remote_cert_ku[i] = 0
Jul 20 03:36:59 malin ovpn-server[26126]: remote_cert_eku = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: tls_timeout = 2
Jul 20 03:36:59 malin ovpn-server[26126]: renegotiate_bytes = 0
Jul 20 03:36:59 malin ovpn-server[26126]: renegotiate_packets = 0
Jul 20 03:36:59 malin ovpn-server[26126]: renegotiate_seconds = 3600
Jul 20 03:36:59 malin ovpn-server[26126]: handshake_window = 60
Jul 20 03:36:59 malin ovpn-server[26126]: transition_window = 3600
Jul 20 03:36:59 malin ovpn-server[26126]: single_session = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: tls_exit = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: tls_auth_file = '/etc/openvpn/keys/ta.key'
Jul 20 03:36:59 malin ovpn-server[26126]: server_network = 0.0.0.0
Jul 20 03:36:59 malin ovpn-server[26126]: server_netmask = 0.0.0.0
Jul 20 03:36:59 malin ovpn-server[26126]: server_bridge_ip = 192.168.2.28
Jul 20 03:36:59 malin ovpn-server[26126]: server_bridge_netmask = 255.255.255.0
Jul 20 03:36:59 malin ovpn-server[26126]: server_bridge_pool_start = 192.168.2.160
Jul 20 03:36:59 malin ovpn-server[26126]: server_bridge_pool_end = 192.168.2.169
Jul 20 03:36:59 malin ovpn-server[26126]: push_list = 'route-gateway 192.168.2.28,ping 10,ping-restart 120'
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_pool_defined = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_pool_start = 192.168.2.160
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_pool_end = 192.168.2.169
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_pool_netmask = 255.255.255.0
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_pool_persist_filename = 'ipp.txt'
Jul 20 03:36:59 malin ovpn-server[26126]: ifconfig_pool_persist_refresh_freq = 600
Jul 20 03:36:59 malin ovpn-server[26126]: n_bcast_buf = 256
Jul 20 03:36:59 malin ovpn-server[26126]: tcp_queue_limit = 64
Jul 20 03:36:59 malin ovpn-server[26126]: real_hash_size = 256
Jul 20 03:36:59 malin ovpn-server[26126]: virtual_hash_size = 256
Jul 20 03:36:59 malin ovpn-server[26126]: client_connect_script = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: learn_address_script = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: client_disconnect_script = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: client_config_dir = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: ccd_exclusive = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: tmp_dir = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: push_ifconfig_defined = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: push_ifconfig_local = 0.0.0.0
Jul 20 03:36:59 malin ovpn-server[26126]: push_ifconfig_remote_netmask = 0.0.0.0
Jul 20 03:36:59 malin ovpn-server[26126]: enable_c2c = ENABLED
Jul 20 03:36:59 malin ovpn-server[26126]: duplicate_cn = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: cf_max = 0
Jul 20 03:36:59 malin ovpn-server[26126]: cf_per = 0
Jul 20 03:36:59 malin ovpn-server[26126]: max_clients = 10
Jul 20 03:36:59 malin ovpn-server[26126]: max_routes_per_client = 256
Jul 20 03:36:59 malin ovpn-server[26126]: client_cert_not_required = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: username_as_common_name = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: auth_user_pass_verify_script = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: auth_user_pass_verify_script_via_file = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: port_share_host = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: port_share_port = 0
Jul 20 03:36:59 malin ovpn-server[26126]: client = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: pull = DISABLED
Jul 20 03:36:59 malin ovpn-server[26126]: auth_user_pass_file = '[UNDEF]'
Jul 20 03:36:59 malin ovpn-server[26126]: OpenVPN 2.1_rc7 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Jun 11 2008
Jul 20 03:36:59 malin ovpn-server[26126]: PLUGIN_INIT: POST /usr/lib/openvpn/openvpn-auth-pam.so '[/usr/lib/openvpn/openvpn-auth-pam.so] [login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Jul 20 03:36:59 malin ovpn-server[26126]: Diffie-Hellman initialized with 2048 bit key
Jul 20 03:36:59 malin ovpn-server[26126]: /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Jul 20 03:36:59 malin ovpn-server[26126]: Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
Jul 20 03:36:59 malin ovpn-server[26126]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:36:59 malin ovpn-server[26126]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:36:59 malin ovpn-server[26126]: TLS-Auth MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]
Jul 20 03:36:59 malin ovpn-server[26126]: TUN/TAP device tap1 opened
Jul 20 03:36:59 malin ovpn-server[26126]: TUN/TAP TX queue length set to 100
Jul 20 03:36:59 malin ovpn-server[26126]: Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Jul 20 03:36:59 malin ovpn-server[26131]: Socket Buffers: R=[124928->131072] S=[124928->131072]
Jul 20 03:36:59 malin ovpn-server[26131]: UDPv4 link local (bound): 192.168.2.28:1196
Jul 20 03:36:59 malin ovpn-server[26131]: UDPv4 link remote: [undef]
Jul 20 03:36:59 malin ovpn-server[26131]: MULTI: multi_init called, r=256 v=256
Jul 20 03:36:59 malin ovpn-server[26131]: IFCONFIG POOL: base=192.168.2.160 size=10
Jul 20 03:36:59 malin ovpn-server[26131]: IFCONFIG POOL LIST
Jul 20 03:36:59 malin ovpn-server[26131]: carrie,192.168.2.160
Jul 20 03:36:59 malin ovpn-server[26131]: agnes,192.168.2.161
Jul 20 03:36:59 malin ovpn-server[26131]: inez,192.168.2.162
Jul 20 03:36:59 malin ovpn-server[26131]: nina,192.168.2.163
Jul 20 03:36:59 malin ovpn-server[26131]: spare4,192.168.2.164
Jul 20 03:36:59 malin ovpn-server[26131]: spare5,192.168.2.165
Jul 20 03:36:59 malin ovpn-server[26131]: spare6,192.168.2.166
Jul 20 03:36:59 malin ovpn-server[26131]: spare7,192.168.2.167
Jul 20 03:36:59 malin ovpn-server[26131]: spare8,192.168.2.168
Jul 20 03:36:59 malin ovpn-server[26131]: spare9,192.168.2.169
Jul 20 03:36:59 malin ovpn-server[26131]: Initialization Sequence Completed
Jul 20 03:38:43 malin ovpn-server[26131]: MULTI: multi_create_instance called
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Re-using SSL/TLS context
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 LZO compression initialized
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Control Channel MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Local Options hash (VER=V4): 'c5677ab3'
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Expected Remote Options hash (VER=V4): 'a7133b47'
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 TLS: Initial packet from 79.216.19.102:44292, sid=254f2ac3 f0a9ee09
Jul 20 03:38:43 malin ovpn-server[26131]: 79.216.19.102:44292 Replay-window backtrack occurred [3]
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 VERIFY OK: depth=1, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=eab-malin/emailAddress=qrt@aib.se
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 VERIFY OK: depth=0, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=agnes/emailAddress=qrt@aib.se
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 TLS: Username/Password authentication succeeded for username 'qrt'
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 20 03:38:44 malin ovpn-server[26131]: 79.216.19.102:44292 [agnes] Peer Connection Initiated with 79.216.19.102:44292
Jul 20 03:38:46 malin ovpn-server[26131]: agnes/79.216.19.102:44292 PUSH: Received control message: 'PUSH_REQUEST'
Jul 20 03:38:46 malin ovpn-server[26131]: agnes/79.216.19.102:44292 SENT CONTROL [agnes]: 'PUSH_REPLY,route-gateway 192.168.2.28,ping 10,ping-restart 120,ifconfig 192.168.2.161 255.255.255.0' (status=1)
Jul 20 03:38:47 malin ovpn-server[26131]: MULTI: multi_create_instance called
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 Re-using SSL/TLS context
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 LZO compression initialized
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 Control Channel MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 Local Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1590,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-128-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 Local Options hash (VER=V4): 'c5677ab3'
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 Expected Remote Options hash (VER=V4): 'a7133b47'
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 TLS: Initial packet from 81.138.196.216:50109, sid=cb416a73 ce48b811
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 VERIFY OK: depth=1, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=eab-malin/emailAddress=qrt@aib.se
Jul 20 03:38:47 malin ovpn-server[26131]: 81.138.196.216:50109 VERIFY OK: depth=0, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=nina/emailAddress=qrt@aib.se
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 TLS: Username/Password authentication succeeded for username 'qrt'
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 20 03:38:48 malin ovpn-server[26131]: 81.138.196.216:50109 [nina] Peer Connection Initiated with 81.138.196.216:50109
Jul 20 03:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 PUSH: Received control message: 'PUSH_REQUEST'
Jul 20 03:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 SENT CONTROL [nina]: 'PUSH_REPLY,route-gateway 192.168.2.28,ping 10,ping-restart 120,ifconfig 192.168.2.163 255.255.255.0' (status=1)
Jul 20 03:38:48 malin ovpn-server[26131]: agnes/79.216.19.102:44292 MULTI: Learn: 4a:03:0f:01:14:8f -> agnes/79.216.19.102:44292
Jul 20 03:43:43 malin ovpn-server[26131]: nina/81.138.196.216:50109 MULTI: Learn: 00:ff:dc:e6:b7:d1 -> nina/81.138.196.216:50109
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 VERIFY OK: depth=1, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=eab-malin/emailAddress=qrt@aib.se
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 VERIFY OK: depth=0, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=agnes/emailAddress=qrt@aib.se
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 TLS: Username/Password authentication succeeded for username 'qrt'
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 04:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 TLS: soft reset sec=0 bytes=100931/0 pkts=1271/0
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 VERIFY OK: depth=1, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=eab-malin/emailAddress=qrt@aib.se
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 VERIFY OK: depth=0, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=nina/emailAddress=qrt@aib.se
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 TLS: Username/Password authentication succeeded for username 'qrt'
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 04:38:48 malin ovpn-server[26131]: nina/81.138.196.216:50109 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 20 05:38:43 malin ovpn-server[26131]: agnes/79.216.19.102:44292 TLS: tls_process: killed expiring key
Jul 20 05:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 VERIFY OK: depth=1, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=eab-malin/emailAddress=qrt@aib.se
Jul 20 05:38:44 malin ovpn-server[26131]: agnes/79.216.19.102:44292 VERIFY OK: depth=0, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=agnes/emailAddress=qrt@aib.se
openvpn-client-log (nina)
nina:/# cat /var/log/syslog | grep vpn
Jul 20 02:35:33 nina ovpn-client[20422]: Preserving previous TUN/TAP instance: tap0
Jul 20 02:35:33 nina ovpn-client[20422]: Initialization Sequence Completed
...
Jul 20 03:35:32 nina ovpn-client[20422]: VERIFY OK: depth=1, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=eab-malin/emailAddress=qrt@aib.se
Jul 20 03:35:32 nina ovpn-client[20422]: VERIFY OK: nsCertType=SERVER
Jul 20 03:35:32 nina ovpn-client[20422]: VERIFY OK: depth=0, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=server/emailAddress=qrt@aib.se
Jul 20 03:35:32 nina ovpn-client[20422]: Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:35:32 nina ovpn-client[20422]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:35:32 nina ovpn-client[20422]: Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:35:32 nina ovpn-client[20422]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:35:32 nina ovpn-client[20422]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 20 03:38:14 nina ovpn-client[20422]: read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
Jul 20 03:40:04 nina ovpn-client[20422]: [server] Inactivity timeout (--ping-restart), restarting
Jul 20 03:40:04 nina ovpn-client[20422]: TCP/UDP: Closing socket
Jul 20 03:40:04 nina ovpn-client[20422]: SIGUSR1[soft,ping-restart] received, process restarting
Jul 20 03:40:04 nina ovpn-client[20422]: Restart pause, 2 second(s)
Jul 20 03:40:06 nina ovpn-client[20422]: Re-using SSL/TLS context
Jul 20 03:40:06 nina ovpn-client[20422]: LZO compression initialized
Jul 20 03:40:06 nina ovpn-client[20422]: Control Channel MTU parms [ L:1590 D:166 EF:66 EB:0 ET:0 EL:0 ]
Jul 20 03:40:06 nina ovpn-client[20422]: Data Channel MTU parms [ L:1590 D:1450 EF:58 EB:135 ET:32 EL:0 AF:3/1 ]
Jul 20 03:40:06 nina ovpn-client[20422]: Local Options hash (VER=V4): 'a7133b47'
Jul 20 03:40:06 nina ovpn-client[20422]: Expected Remote Options hash (VER=V4): 'c5677ab3'
Jul 20 03:40:06 nina ovpn-client[20422]: Socket Buffers: R=[124928->131072] S=[124928->131072]
Jul 20 03:40:06 nina ovpn-client[20422]: UDPv4 link local: [undef]
Jul 20 03:40:06 nina ovpn-client[20422]: UDPv4 link remote: 213.31.200.89:1196
Jul 20 03:40:06 nina ovpn-client[20422]: TLS: Initial packet from 213.31.200.89:1196, sid=dd64a6b7 a1195037
Jul 20 03:40:06 nina ovpn-client[20422]: VERIFY OK: depth=1, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=eab-malin/emailAddress=qrt@aib.se
Jul 20 03:40:06 nina ovpn-client[20422]: VERIFY OK: nsCertType=SERVER
Jul 20 03:40:06 nina ovpn-client[20422]: VERIFY OK: depth=0, /C=SE/ST=STHLM/L=Stockholm/O=Eab/CN=server/emailAddress=qrt@aib.se
Jul 20 03:40:06 nina ovpn-client[20422]: Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:40:06 nina ovpn-client[20422]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:40:06 nina ovpn-client[20422]: Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Jul 20 03:40:06 nina ovpn-client[20422]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Jul 20 03:40:06 nina ovpn-client[20422]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Jul 20 03:40:06 nina ovpn-client[20422]: [server] Peer Connection Initiated with 213.31.200.89:1196
Jul 20 03:40:07 nina ovpn-client[20422]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Jul 20 03:40:08 nina ovpn-client[20422]: PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.2.28,ping 10,ping-restart 120,ifconfig 192.168.2.163 255.255.255.0'
Jul 20 03:40:08 nina ovpn-client[20422]: OPTIONS IMPORT: timers and/or timeouts modified
Jul 20 03:40:08 nina ovpn-client[20422]: OPTIONS IMPORT: --ifconfig/up options modified
Jul 20 03:40:08 nina ovpn-client[20422]: OPTIONS IMPORT: route-related options modified
Jul 20 03:40:08 nina ovpn-client[20422]: Preserving previous TUN/TAP instance: tap0
Jul 20 03:40:08 nina ovpn-client[20422]: Initialization Sequence Completed
It has worked so fine and nice for so long time and now I don't get what's missing!!!