dmajchszak
Hi,
My name is Dave M and I am a contractor that has used OpenVPN to work remotely for years via VPN. Recently, I had to fully recover and rebuild my windows 7 workstation. Since then, and after installing a recent copy of OpenVPN, I have been unable to connect to the server (FreeBSD) that I had been using for 4 years previously. I think that I have the necessary firewall ports opened but somehow it appears that the VPN connection is blocked on a listen. When all is going well, I generally establish work session connections via ssh and cygwin.
Here is a copy of my configuration file (I can't provide the servers):
#
# Sample OpenVPN configuration file for
# office using a pre-shared static key.
#
# '#' or ';' may be used to delimit comments.
# Use a dynamic tun device.
# For Linux 2.2 or non-Linux OSes,
# you may want to use an explicit
# unit number such as "tun1".
# OpenVPN also supports virtual
# ethernet "tap" devices.
#remote 71.42.238.10
remote bravo.acciodata.com
dev tun
# 10.1.85.2 is our remote VPN endpoint (home).
# 10.1.85.1 is our local VPN endpoint (office).
ifconfig 10.1.85.2 10.1.85.1
# Our up script will establish routes
# once the VPN is alive.
# Our pre-shared static key
secret openvpn.key
# OpenVPN uses UDP port 5000 by default.
# Each OpenVPN tunnel must use
# a different port number.
# lport or rport can be used
# to denote different ports
# for local and remote.
port 5085
proto tcp-server
#port 5000
float
# Downgrade UID and GID to
# "nobody" after initialization
# for extra security.
; user nobody
; group nobody
# If you built OpenVPN with
# LZO compression, uncomment
# out the following line.
comp-lzo
# Send a UDP ping to remote once
# every 15 seconds to keep
# stateful firewall connection
# alive. Uncomment this
# out if you are using a stateful
# firewall.
ping 15
# Uncomment this section for a more reliable detection when a system
# loses its connection. For example, dial-ups or laptops that
# travel to other locations.
; ping 15
; ping-restart 45
; ping-timer-rem
persist-tun
persist-key
# Verbosity level.
# 0 -- quiet except for fatal errors.
# 1 -- mostly quiet, but display non-fatal network errors.
# 3 -- medium output, good for normal operation.
# 9 -- verbose, good for troubleshooting
verb 5
And here is a copy of the latest log file:
Thu Sep 01 15:04:54 2016 us=919050 Current Parameter Settings:
Thu Sep 01 15:04:54 2016 us=919050 config = 'daveM_home.ovpn'
Thu Sep 01 15:04:54 2016 us=919050 mode = 0
Thu Sep 01 15:04:54 2016 us=919050 show_ciphers = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 show_digests = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 show_engines = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 genkey = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 key_pass_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 show_tls_ciphers = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 Connection profiles [default]:
Thu Sep 01 15:04:54 2016 us=919050 proto = tcp-server
Thu Sep 01 15:04:54 2016 us=919050 local = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 local_port = 5085
Thu Sep 01 15:04:54 2016 us=919050 remote = 'bravo.acciodata.com'
Thu Sep 01 15:04:54 2016 us=919050 remote_port = 5085
Thu Sep 01 15:04:54 2016 us=919050 remote_float = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 bind_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 bind_local = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 connect_retry_seconds = 5
Thu Sep 01 15:04:54 2016 us=919050 connect_timeout = 10
Thu Sep 01 15:04:54 2016 us=919050 connect_retry_max = 0
Thu Sep 01 15:04:54 2016 us=919050 socks_proxy_server = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 socks_proxy_port = 0
Thu Sep 01 15:04:54 2016 us=919050 socks_proxy_retry = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 tun_mtu = 1500
Thu Sep 01 15:04:54 2016 us=919050 tun_mtu_defined = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 link_mtu = 1500
Thu Sep 01 15:04:54 2016 us=919050 link_mtu_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 tun_mtu_extra = 0
Thu Sep 01 15:04:54 2016 us=919050 tun_mtu_extra_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 mtu_discover_type = -1
Thu Sep 01 15:04:54 2016 us=919050 fragment = 0
Thu Sep 01 15:04:54 2016 us=919050 mssfix = 1450
Thu Sep 01 15:04:54 2016 us=919050 explicit_exit_notification = 0
Thu Sep 01 15:04:54 2016 us=919050 Connection profiles END
Thu Sep 01 15:04:54 2016 us=919050 remote_random = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ipchange = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 dev = 'tun'
Thu Sep 01 15:04:54 2016 us=919050 dev_type = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 dev_node = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 lladdr = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 topology = 1
Thu Sep 01 15:04:54 2016 us=919050 tun_ipv6 = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_local = '10.1.85.2'
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_remote_netmask = '10.1.85.1'
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_noexec = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_nowarn = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_ipv6_local = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_ipv6_netbits = 0
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_ipv6_remote = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 shaper = 0
Thu Sep 01 15:04:54 2016 us=919050 mtu_test = 0
Thu Sep 01 15:04:54 2016 us=919050 mlock = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 keepalive_ping = 0
Thu Sep 01 15:04:54 2016 us=919050 keepalive_timeout = 0
Thu Sep 01 15:04:54 2016 us=919050 inactivity_timeout = 0
Thu Sep 01 15:04:54 2016 us=919050 ping_send_timeout = 15
Thu Sep 01 15:04:54 2016 us=919050 ping_rec_timeout = 0
Thu Sep 01 15:04:54 2016 us=919050 ping_rec_timeout_action = 0
Thu Sep 01 15:04:54 2016 us=919050 ping_timer_remote = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 remap_sigusr1 = 0
Thu Sep 01 15:04:54 2016 us=919050 persist_tun = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 persist_local_ip = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 persist_remote_ip = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 persist_key = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 passtos = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 resolve_retry_seconds = 1000000000
Thu Sep 01 15:04:54 2016 us=919050 username = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 groupname = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 chroot_dir = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 cd_dir = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 writepid = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 up_script = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 down_script = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 down_pre = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 up_restart = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 up_delay = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 daemon = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 inetd = 0
Thu Sep 01 15:04:54 2016 us=919050 log = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 suppress_timestamps = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 nice = 0
Thu Sep 01 15:04:54 2016 us=919050 verbosity = 5
Thu Sep 01 15:04:54 2016 us=919050 mute = 0
Thu Sep 01 15:04:54 2016 us=919050 gremlin = 0
Thu Sep 01 15:04:54 2016 us=919050 status_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 status_file_version = 1
Thu Sep 01 15:04:54 2016 us=919050 status_file_update_freq = 60
Thu Sep 01 15:04:54 2016 us=919050 occ = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 rcvbuf = 0
Thu Sep 01 15:04:54 2016 us=919050 sndbuf = 0
Thu Sep 01 15:04:54 2016 us=919050 sockflags = 0
Thu Sep 01 15:04:54 2016 us=919050 fast_io = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 lzo = 7
Thu Sep 01 15:04:54 2016 us=919050 route_script = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 route_default_gateway = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 route_default_metric = 0
Thu Sep 01 15:04:54 2016 us=919050 route_noexec = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 route_delay = 5
Thu Sep 01 15:04:54 2016 us=919050 route_delay_window = 30
Thu Sep 01 15:04:54 2016 us=919050 route_delay_defined = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 route_nopull = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 route_gateway_via_dhcp = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 max_routes = 100
Thu Sep 01 15:04:54 2016 us=919050 allow_pull_fqdn = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 management_addr = '127.0.0.1'
Thu Sep 01 15:04:54 2016 us=919050 management_port = 25340
Thu Sep 01 15:04:54 2016 us=919050 management_user_pass = 'stdin'
Thu Sep 01 15:04:54 2016 us=919050 management_log_history_cache = 250
Thu Sep 01 15:04:54 2016 us=919050 management_echo_buffer_size = 100
Thu Sep 01 15:04:54 2016 us=919050 management_write_peer_info_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 management_client_user = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 management_client_group = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 management_flags = 6
Thu Sep 01 15:04:54 2016 us=919050 shared_secret_file = 'openvpn.key'
Thu Sep 01 15:04:54 2016 us=919050 key_direction = 0
Thu Sep 01 15:04:54 2016 us=919050 ciphername_defined = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 ciphername = 'BF-CBC'
Thu Sep 01 15:04:54 2016 us=919050 authname_defined = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 authname = 'SHA1'
Thu Sep 01 15:04:54 2016 us=919050 prng_hash = 'SHA1'
Thu Sep 01 15:04:54 2016 us=919050 prng_nonce_secret_len = 16
Thu Sep 01 15:04:54 2016 us=919050 keysize = 0
Thu Sep 01 15:04:54 2016 us=919050 engine = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 replay = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 mute_replay_warnings = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 replay_window = 64
Thu Sep 01 15:04:54 2016 us=919050 replay_time = 15
Thu Sep 01 15:04:54 2016 us=919050 packet_id_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 use_iv = ENABLED
Thu Sep 01 15:04:54 2016 us=919050 test_crypto = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 tls_server = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 tls_client = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 key_method = 2
Thu Sep 01 15:04:54 2016 us=919050 ca_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 ca_path = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 dh_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 cert_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 extra_certs_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 priv_key_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 pkcs12_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 cryptoapi_cert = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 cipher_list = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 tls_verify = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 tls_export_cert = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 verify_x509_type = 0
Thu Sep 01 15:04:54 2016 us=919050 verify_x509_name = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 crl_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 ns_cert_type = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku[i] = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku[i] = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku[i] = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku[i] = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku[i] = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_ku[i] = 0
Thu Sep 01 15:04:54 2016 us=919050 remote_cert_eku = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 ssl_flags = 0
Thu Sep 01 15:04:54 2016 us=919050 tls_timeout = 2
Thu Sep 01 15:04:54 2016 us=919050 renegotiate_bytes = 0
Thu Sep 01 15:04:54 2016 us=919050 renegotiate_packets = 0
Thu Sep 01 15:04:54 2016 us=919050 renegotiate_seconds = 3600
Thu Sep 01 15:04:54 2016 us=919050 handshake_window = 60
Thu Sep 01 15:04:54 2016 us=919050 transition_window = 3600
Thu Sep 01 15:04:54 2016 us=919050 single_session = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 push_peer_info = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 tls_exit = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 tls_auth_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_protected_authentication = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_private_mode = 00000000
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_cert_private = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_pin_cache_period = -1
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_id = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 pkcs11_id_management = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 server_network = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 server_netmask = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 server_network_ipv6 = ::
Thu Sep 01 15:04:54 2016 us=919050 server_netbits_ipv6 = 0
Thu Sep 01 15:04:54 2016 us=919050 server_bridge_ip = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 server_bridge_netmask = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 server_bridge_pool_start = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 server_bridge_pool_end = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_pool_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_pool_start = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_pool_end = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_pool_netmask = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_pool_persist_refresh_freq = 600
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_ipv6_pool_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_ipv6_pool_base = ::
Thu Sep 01 15:04:54 2016 us=919050 ifconfig_ipv6_pool_netbits = 0
Thu Sep 01 15:04:54 2016 us=919050 n_bcast_buf = 256
Thu Sep 01 15:04:54 2016 us=919050 tcp_queue_limit = 64
Thu Sep 01 15:04:54 2016 us=919050 real_hash_size = 256
Thu Sep 01 15:04:54 2016 us=919050 virtual_hash_size = 256
Thu Sep 01 15:04:54 2016 us=919050 client_connect_script = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 learn_address_script = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 client_disconnect_script = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 client_config_dir = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 ccd_exclusive = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 tmp_dir = 'C:\Users\dmajchs\AppData\Local\Temp\'
Thu Sep 01 15:04:54 2016 us=919050 push_ifconfig_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 push_ifconfig_local = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 push_ifconfig_remote_netmask = 0.0.0.0
Thu Sep 01 15:04:54 2016 us=919050 push_ifconfig_ipv6_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 push_ifconfig_ipv6_local = ::/0
Thu Sep 01 15:04:54 2016 us=919050 push_ifconfig_ipv6_remote = ::
Thu Sep 01 15:04:54 2016 us=919050 enable_c2c = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 duplicate_cn = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 cf_max = 0
Thu Sep 01 15:04:54 2016 us=919050 cf_per = 0
Thu Sep 01 15:04:54 2016 us=919050 max_clients = 1024
Thu Sep 01 15:04:54 2016 us=919050 max_routes_per_client = 256
Thu Sep 01 15:04:54 2016 us=919050 auth_user_pass_verify_script = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 auth_user_pass_verify_script_via_file = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 client = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 pull = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 auth_user_pass_file = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 show_net_up = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 route_method = 0
Thu Sep 01 15:04:54 2016 us=919050 block_outside_dns = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ip_win32_defined = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 ip_win32_type = 3
Thu Sep 01 15:04:54 2016 us=919050 dhcp_masq_offset = 0
Thu Sep 01 15:04:54 2016 us=919050 dhcp_lease_time = 31536000
Thu Sep 01 15:04:54 2016 us=919050 tap_sleep = 0
Thu Sep 01 15:04:54 2016 us=919050 dhcp_options = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 dhcp_renew = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 dhcp_pre_release = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 dhcp_release = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 domain = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 netbios_scope = '[UNDEF]'
Thu Sep 01 15:04:54 2016 us=919050 netbios_node_type = 0
Thu Sep 01 15:04:54 2016 us=919050 disable_nbt = DISABLED
Thu Sep 01 15:04:54 2016 us=919050 OpenVPN 2.3.12 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 23 2016
Thu Sep 01 15:04:54 2016 us=919050 Windows version 6.1 (Windows 7) 64bit
Thu Sep 01 15:04:54 2016 us=919050 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09
Enter Management Password:
Thu Sep 01 15:04:54 2016 us=919050 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Sep 01 15:04:54 2016 us=919050 Need hold release from management interface, waiting...
Thu Sep 01 15:04:54 2016 us=950251 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Sep 01 15:04:55 2016 us=59451 MANAGEMENT: CMD 'state on'
Thu Sep 01 15:04:55 2016 us=59451 MANAGEMENT: CMD 'log all on'
Thu Sep 01 15:04:55 2016 us=121851 MANAGEMENT: CMD 'hold off'
Thu Sep 01 15:04:55 2016 us=121851 MANAGEMENT: CMD 'hold release'
Thu Sep 01 15:04:55 2016 us=121851 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Thu Sep 01 15:04:55 2016 us=121851 Static Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Sep 01 15:04:55 2016 us=121851 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Thu Sep 01 15:04:55 2016 us=121851 Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 01 15:04:55 2016 us=121851 Static Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Sep 01 15:04:55 2016 us=121851 WARNING: this cipher's block size is less than 128 bit (64 bit). Consider using a --cipher with a larger block size.
Thu Sep 01 15:04:55 2016 us=121851 Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 01 15:04:55 2016 us=121851 LZO compression initialized
Thu Sep 01 15:04:55 2016 us=121851 Socket Buffers: R=[8192->8192] S=[8192->8192]
Thu Sep 01 15:04:55 2016 us=121851 MANAGEMENT: >STATE:1472756695,RESOLVE,,,
Thu Sep 01 15:04:55 2016 us=184251 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Sep 01 15:04:55 2016 us=184251 MANAGEMENT: >STATE:1472756695,ASSIGN_IP,,10.1.85.2,
Thu Sep 01 15:04:55 2016 us=184251 open_tun, tt->ipv6=0
Thu Sep 01 15:04:55 2016 us=184251 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{5E0B78CF-C191-4EFE-883C-E78855638E73}.tap
Thu Sep 01 15:04:55 2016 us=184251 TAP-Windows Driver Version 9.21
Thu Sep 01 15:04:55 2016 us=184251 TAP-Windows MTU=1500
Thu Sep 01 15:04:55 2016 us=184251 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.1.85.2/255.255.255.252 on interface {5E0B78CF-C191-4EFE-883C-E78855638E73} [DHCP-serv: 10.1.85.1, lease-time: 31536000]
Thu Sep 01 15:04:55 2016 us=184251 Successful ARP Flush on interface [17] {5E0B78CF-C191-4EFE-883C-E78855638E73}
Thu Sep 01 15:04:55 2016 us=184251 Data Channel MTU parms [ L:1547 D:1450 EF:47 EB:143 ET:0 EL:3 AF:3/1 ]
Thu Sep 01 15:04:55 2016 us=184251 Local Options String: 'V4,dev-type tun,link-mtu 1547,tun-mtu 1500,proto TCPv4_SERVER,ifconfig 10.1.85.1 10.1.85.2,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Sep 01 15:04:55 2016 us=184251 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1547,tun-mtu 1500,proto TCPv4_CLIENT,ifconfig 10.1.85.2 10.1.85.1,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Thu Sep 01 15:04:55 2016 us=184251 Local Options hash (VER=V4): '5bdbdc1d'
Thu Sep 01 15:04:55 2016 us=184251 Expected Remote Options hash (VER=V4): '57305b4a'
Thu Sep 01 15:04:55 2016 us=184251 Listening for incoming TCP connection on [undef]
dmajchszak
Yes, I have been in constant contact with them but I sometime doubt the quality of the information I receive from them. For instance, they gave me the original configuration file but it was missing the statement, remote bravo.acciodata.com (my server). I added the statement. I am able to ping bravo.acciodata.com but my VPN connection never completes.
dmajchszak
Please close this issue as resolved. The problem was that the configuration contained the statement, proto tcp-server which was incorrect in this context. After testing an explicit remote statement containing both the port and protocol (tcp-client), a connection was established. I then replaced the proto statement with tcp-client and all was well. The moral of this story is don't trust the gift of a well intentioned configuration file.
