Hi, i'm new to openvpn and my knowledge of network isn't strong enough to understand what's going wrong. I am running a server(Windows 10 Pro) for a non-profit association where they run a management software (Lexware Vereinsverwaltung Premium). I have configured openvpn and i can access the shares and a SQL Server 2012 but there is a lot of very strange behavior of this software. For example the client of the software tries to open a word document on a server share, which breaks with a rpc error. There are often errors where the software produces an error that it can't write/access a file, but manually it's possible to write to that file. The Server is a Hyper-V Guest(Windows 10 Pro) actually with a bridged network, but in future i want to run it with a NAT-network, because the server should not have access to the rest of my network but to the internet. The ovpn clients are currently all Windows 10 Pro I have a few points that i think are problematic: [list] [*]I can't access the clients from the server side [*]i think a reconnect breaks the connection of the management software client [*]the vpn-network is recognized as a public network [*]there is no gateway defined (and i don't know how to define and what ip to use) [*]...[/list] I hope i didn't forget anything Thanks in advance Holger [oconf=server.ovpn]# Server server 10.8.0.0 255.255.255.0 ifconfig-pool-persist "..\\ipp.txt" port 1194 proto udp dev tun topology subnet # VPN cipher AES-256-CBC comp-lzo # max-clients 5 keepalive 10 120 persist-key persist-tun # Clients client-config-dir "..\\ccd" push "topology subnet" push "route-gateway 10.8.0.1" # push "route 10.8.0.1 255.255.255.0" client-to-client # Zertifikate ca "..\\ca.crt" cert "..\\server.crt" key "..\\server.key" # This file should be kept secret dh "..\\dh2048.pem" # Logging status "..\\openvpn-status.log" log "..\\openvpn.log" ;log-append "..\\openvpn.log" verb 3[/oconf] [oconf=client.ovpn]# Server remote 1194 resolv-retry infinite # Client nobind proto udp dev tun client #client-to-client # VPN cipher AES-256-CBC comp-lzo persist-key persist-tun remote-cert-tls server # Zertifikate ca "..\\ca.crt" cert "..\\client.crt" key "..\\client.key" # Logging status "..\\openvpn-status.log" log "..\\openvpn.log" ;log-append "..\\openvpn.log" verb 3[/oconf]

Please see: [url=https://forums.openvpn.net/viewtopic.php?f=30&t=22603]HOWTO: Request Help ![/url]

strange behavior of Software running over openvpn

elbea64

Hi, i'm new to openvpn and my knowledge of network isn't strong enough to understand what's going wrong.

I am running a server(Windows 10 Pro) for a non-profit association where they run a management software (Lexware Vereinsverwaltung Premium). I have configured openvpn and i can access the shares and a SQL Server 2012 but there is a lot of very strange behavior of this software. For example the client of the software tries to open a word document on a server share, which breaks with a rpc error. There are often errors where the software produces an error that it can't write/access a file, but manually it's possible to write to that file.

The Server is a Hyper-V Guest(Windows 10 Pro) actually with a bridged network, but in future i want to run it with a NAT-network, because the server should not have access to the rest of my network but to the internet.
The ovpn clients are currently all Windows 10 Pro

I have a few points that i think are problematic:

I can't access the clients from the server side
i think a reconnect breaks the connection of the management software client
the vpn-network is recognized as a public network
there is no gateway defined (and i don't know how to define and what ip to use)
...

I hope i didn't forget anything

Thanks in advance
Holger
# Server
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist "..\\ipp.txt"
port 1194
proto udp
dev tun
topology subnet

# VPN
cipher AES-256-CBC
comp-lzo
# max-clients 5
keepalive 10 120
persist-key
persist-tun

# Clients
client-config-dir "..\\ccd"
push "topology subnet"
push "route-gateway 10.8.0.1"
# push "route 10.8.0.1 255.255.255.0"
client-to-client

# Zertifikate
ca "..\\ca.crt"
cert "..\\server.crt"
key "..\\server.key" # This file should be kept secret
dh "..\\dh2048.pem"

# Logging
status "..\\openvpn-status.log"
log "..\\openvpn.log"
;log-append "..\\openvpn.log"
verb 3 # Server
remote <serveraddress> 1194
resolv-retry infinite

# Client
nobind
proto udp
dev tun
client
#client-to-client

# VPN
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
remote-cert-tls server

# Zertifikate
ca "..\\ca.crt"
cert "..\\client.crt"
key "..\\client.key"

# Logging
status "..\\openvpn-status.log"
log "..\\openvpn.log"
;log-append "..\\openvpn.log"
verb 3

TinCanTech

Please see:
HOWTO: Request Help !

elbea64

Sorry, i forgot the LOGs while writing my post. Maybe because i hate editing logfiles 😉

I didn't find a possibility to edit my initial post, so i had to reply.

I use OpenVPN 2.3.12 x86_64-w64-mingw32 on both ends

I have read most links on the page you linked. Unfortunately i have difficulties to understand a lot of the information there, because i'm not native english and my knowledge about networking is limited

Client LOG

Tue Nov 15 18:22:06 2016 us=559137 Current Parameter Settings:
Tue Nov 15 18:22:06 2016 us=559137   config = 'client.ovpn'
Tue Nov 15 18:22:06 2016 us=559137   mode = 0
Tue Nov 15 18:22:06 2016 us=559137   show_ciphers = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   show_digests = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   show_engines = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   genkey = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   key_pass_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=559137   show_tls_ciphers = DISABLED
Tue Nov 15 18:22:06 2016 us=559137 Connection profiles [default]:
Tue Nov 15 18:22:06 2016 us=559137   proto = udp
Tue Nov 15 18:22:06 2016 us=559137   local = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=559137   local_port = 0
Tue Nov 15 18:22:06 2016 us=559137   remote = '<REMOTE_ADDRESS>'
Tue Nov 15 18:22:06 2016 us=559137   remote_port = 1194
Tue Nov 15 18:22:06 2016 us=559137   remote_float = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   bind_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   bind_local = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   connect_retry_seconds = 5
Tue Nov 15 18:22:06 2016 us=559137   connect_timeout = 10
Tue Nov 15 18:22:06 2016 us=559137   connect_retry_max = 0
Tue Nov 15 18:22:06 2016 us=559137   socks_proxy_server = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=559137   socks_proxy_port = 0
Tue Nov 15 18:22:06 2016 us=559137   socks_proxy_retry = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   tun_mtu = 1500
Tue Nov 15 18:22:06 2016 us=559137   tun_mtu_defined = ENABLED
Tue Nov 15 18:22:06 2016 us=559137   link_mtu = 1500
Tue Nov 15 18:22:06 2016 us=559137   link_mtu_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   tun_mtu_extra = 0
Tue Nov 15 18:22:06 2016 us=559137   tun_mtu_extra_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   mtu_discover_type = -1
Tue Nov 15 18:22:06 2016 us=559137   fragment = 0
Tue Nov 15 18:22:06 2016 us=559137   mssfix = 1450
Tue Nov 15 18:22:06 2016 us=559137   explicit_exit_notification = 0
Tue Nov 15 18:22:06 2016 us=559137 Connection profiles END
Tue Nov 15 18:22:06 2016 us=559137   remote_random = DISABLED
Tue Nov 15 18:22:06 2016 us=559137   ipchange = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   dev = 'tun'
Tue Nov 15 18:22:06 2016 us=560136   dev_type = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   dev_node = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   lladdr = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   topology = 1
Tue Nov 15 18:22:06 2016 us=560136   tun_ipv6 = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   ifconfig_local = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   ifconfig_remote_netmask = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   ifconfig_noexec = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   ifconfig_nowarn = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   ifconfig_ipv6_local = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   ifconfig_ipv6_netbits = 0
Tue Nov 15 18:22:06 2016 us=560136   ifconfig_ipv6_remote = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   shaper = 0
Tue Nov 15 18:22:06 2016 us=560136   mtu_test = 0
Tue Nov 15 18:22:06 2016 us=560136   mlock = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   keepalive_ping = 0
Tue Nov 15 18:22:06 2016 us=560136   keepalive_timeout = 0
Tue Nov 15 18:22:06 2016 us=560136   inactivity_timeout = 0
Tue Nov 15 18:22:06 2016 us=560136   ping_send_timeout = 0
Tue Nov 15 18:22:06 2016 us=560136   ping_rec_timeout = 0
Tue Nov 15 18:22:06 2016 us=560136   ping_rec_timeout_action = 0
Tue Nov 15 18:22:06 2016 us=560136   ping_timer_remote = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   remap_sigusr1 = 0
Tue Nov 15 18:22:06 2016 us=560136   persist_tun = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   persist_local_ip = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   persist_remote_ip = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   persist_key = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   passtos = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   resolve_retry_seconds = 1000000000
Tue Nov 15 18:22:06 2016 us=560136   username = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   groupname = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   chroot_dir = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   cd_dir = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   writepid = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   up_script = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   down_script = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   down_pre = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   up_restart = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   up_delay = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   daemon = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   inetd = 0
Tue Nov 15 18:22:06 2016 us=560136   log = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   suppress_timestamps = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   nice = 0
Tue Nov 15 18:22:06 2016 us=560136   verbosity = 4
Tue Nov 15 18:22:06 2016 us=560136   mute = 0
Tue Nov 15 18:22:06 2016 us=560136   gremlin = 0
Tue Nov 15 18:22:06 2016 us=560136   status_file = '..\log\openvpn-status.log'
Tue Nov 15 18:22:06 2016 us=560136   status_file_version = 1
Tue Nov 15 18:22:06 2016 us=560136   status_file_update_freq = 60
Tue Nov 15 18:22:06 2016 us=560136   occ = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   rcvbuf = 0
Tue Nov 15 18:22:06 2016 us=560136   sndbuf = 0
Tue Nov 15 18:22:06 2016 us=560136   sockflags = 0
Tue Nov 15 18:22:06 2016 us=560136   fast_io = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   lzo = 7
Tue Nov 15 18:22:06 2016 us=560136   route_script = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   route_default_gateway = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   route_default_metric = 0
Tue Nov 15 18:22:06 2016 us=560136   route_noexec = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   route_delay = 5
Tue Nov 15 18:22:06 2016 us=560136   route_delay_window = 30
Tue Nov 15 18:22:06 2016 us=560136   route_delay_defined = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   route_nopull = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   route_gateway_via_dhcp = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   max_routes = 100
Tue Nov 15 18:22:06 2016 us=560136   allow_pull_fqdn = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   management_addr = '127.0.0.1'
Tue Nov 15 18:22:06 2016 us=560136   management_port = 25340
Tue Nov 15 18:22:06 2016 us=560136   management_user_pass = 'stdin'
Tue Nov 15 18:22:06 2016 us=560136   management_log_history_cache = 250
Tue Nov 15 18:22:06 2016 us=560136   management_echo_buffer_size = 100
Tue Nov 15 18:22:06 2016 us=560136   management_write_peer_info_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   management_client_user = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   management_client_group = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   management_flags = 6
Tue Nov 15 18:22:06 2016 us=560136   shared_secret_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   key_direction = 0
Tue Nov 15 18:22:06 2016 us=560136   ciphername_defined = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   ciphername = 'AES-256-CBC'
Tue Nov 15 18:22:06 2016 us=560136   authname_defined = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   authname = 'SHA1'
Tue Nov 15 18:22:06 2016 us=560136   prng_hash = 'SHA1'
Tue Nov 15 18:22:06 2016 us=560136   prng_nonce_secret_len = 16
Tue Nov 15 18:22:06 2016 us=560136   keysize = 0
Tue Nov 15 18:22:06 2016 us=560136   engine = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   replay = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   mute_replay_warnings = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   replay_window = 64
Tue Nov 15 18:22:06 2016 us=560136   replay_time = 15
Tue Nov 15 18:22:06 2016 us=560136   packet_id_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   use_iv = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   test_crypto = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   tls_server = DISABLED
Tue Nov 15 18:22:06 2016 us=560136   tls_client = ENABLED
Tue Nov 15 18:22:06 2016 us=560136   key_method = 2
Tue Nov 15 18:22:06 2016 us=560136   ca_file = '..\client-keys\ca.crt'
Tue Nov 15 18:22:06 2016 us=560136   ca_path = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   dh_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   cert_file = '..\client-keys\client.crt'
Tue Nov 15 18:22:06 2016 us=560136   extra_certs_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   priv_key_file = '..\client-keys\client.key'
Tue Nov 15 18:22:06 2016 us=560136   pkcs12_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   cryptoapi_cert = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   cipher_list = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   tls_verify = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   tls_export_cert = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   verify_x509_type = 0
Tue Nov 15 18:22:06 2016 us=560136   verify_x509_name = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   crl_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=560136   ns_cert_type = 0
Tue Nov 15 18:22:06 2016 us=560136   remote_cert_ku[i] = 160
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 136
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_ku[i] = 0
Tue Nov 15 18:22:06 2016 us=561136   remote_cert_eku = 'TLS Web Server Authentication'
Tue Nov 15 18:22:06 2016 us=561136   ssl_flags = 0
Tue Nov 15 18:22:06 2016 us=561136   tls_timeout = 2
Tue Nov 15 18:22:06 2016 us=561136   renegotiate_bytes = 0
Tue Nov 15 18:22:06 2016 us=561136   renegotiate_packets = 0
Tue Nov 15 18:22:06 2016 us=561136   renegotiate_seconds = 3600
Tue Nov 15 18:22:06 2016 us=561136   handshake_window = 60
Tue Nov 15 18:22:06 2016 us=561136   transition_window = 3600
Tue Nov 15 18:22:06 2016 us=561136   single_session = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   push_peer_info = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   tls_exit = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   tls_auth_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_private_mode = 00000000
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_cert_private = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_pin_cache_period = -1
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_id = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=561136   pkcs11_id_management = DISABLED
Tue Nov 15 18:22:06 2016 us=561136   server_network = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=561136   server_netmask = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   server_network_ipv6 = ::
Tue Nov 15 18:22:06 2016 us=563136   server_netbits_ipv6 = 0
Tue Nov 15 18:22:06 2016 us=563136   server_bridge_ip = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   server_bridge_netmask = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   server_bridge_pool_start = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   server_bridge_pool_end = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_pool_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_pool_start = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_pool_end = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_pool_netmask = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_pool_persist_refresh_freq = 600
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_ipv6_pool_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_ipv6_pool_base = ::
Tue Nov 15 18:22:06 2016 us=563136   ifconfig_ipv6_pool_netbits = 0
Tue Nov 15 18:22:06 2016 us=563136   n_bcast_buf = 256
Tue Nov 15 18:22:06 2016 us=563136   tcp_queue_limit = 64
Tue Nov 15 18:22:06 2016 us=563136   real_hash_size = 256
Tue Nov 15 18:22:06 2016 us=563136   virtual_hash_size = 256
Tue Nov 15 18:22:06 2016 us=563136   client_connect_script = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=563136   learn_address_script = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=563136   client_disconnect_script = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=563136   client_config_dir = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=563136   ccd_exclusive = DISABLED
Tue Nov 15 18:22:06 2016 us=563136   tmp_dir = '..\Temp\'
Tue Nov 15 18:22:06 2016 us=563136   push_ifconfig_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=563136   push_ifconfig_local = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 15 18:22:06 2016 us=563136   push_ifconfig_ipv6_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   push_ifconfig_ipv6_local = ::/0
Tue Nov 15 18:22:06 2016 us=564137   push_ifconfig_ipv6_remote = ::
Tue Nov 15 18:22:06 2016 us=564137   enable_c2c = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   duplicate_cn = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   cf_max = 0
Tue Nov 15 18:22:06 2016 us=564137   cf_per = 0
Tue Nov 15 18:22:06 2016 us=564137   max_clients = 1024
Tue Nov 15 18:22:06 2016 us=564137   max_routes_per_client = 256
Tue Nov 15 18:22:06 2016 us=564137   auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=564137   auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   client = ENABLED
Tue Nov 15 18:22:06 2016 us=564137   pull = ENABLED
Tue Nov 15 18:22:06 2016 us=564137   auth_user_pass_file = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=564137   show_net_up = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   route_method = 0
Tue Nov 15 18:22:06 2016 us=564137   block_outside_dns = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   ip_win32_defined = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   ip_win32_type = 3
Tue Nov 15 18:22:06 2016 us=564137   dhcp_masq_offset = 0
Tue Nov 15 18:22:06 2016 us=564137   dhcp_lease_time = 31536000
Tue Nov 15 18:22:06 2016 us=564137   tap_sleep = 0
Tue Nov 15 18:22:06 2016 us=564137   dhcp_options = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   dhcp_renew = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   dhcp_pre_release = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   dhcp_release = DISABLED
Tue Nov 15 18:22:06 2016 us=564137   domain = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=564137   netbios_scope = '[UNDEF]'
Tue Nov 15 18:22:06 2016 us=564137   netbios_node_type = 0
Tue Nov 15 18:22:06 2016 us=564137   disable_nbt = DISABLED
Tue Nov 15 18:22:06 2016 us=564137 OpenVPN 2.3.12 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Oct  3 2016
Tue Nov 15 18:22:06 2016 us=564137 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Nov 15 18:22:06 2016 us=564137 library versions: OpenSSL 1.0.1u  22 Sep 2016, LZO 2.09
Enter Management Password:
Tue Nov 15 18:22:06 2016 us=564137 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Nov 15 18:22:06 2016 us=564137 Need hold release from management interface, waiting...
Tue Nov 15 18:22:07 2016 us=38223 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Nov 15 18:22:07 2016 us=139335 MANAGEMENT: CMD 'state on'
Tue Nov 15 18:22:07 2016 us=139335 MANAGEMENT: CMD 'log all on'
Tue Nov 15 18:22:07 2016 us=384374 MANAGEMENT: CMD 'hold off'
Tue Nov 15 18:22:07 2016 us=386873 MANAGEMENT: CMD 'hold release'
Tue Nov 15 18:22:07 2016 us=522383 LZO compression initialized
Tue Nov 15 18:22:07 2016 us=522383 Control Channel MTU parms [ L:1558 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Nov 15 18:22:07 2016 us=522383 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 15 18:22:07 2016 us=522383 MANAGEMENT: >STATE:1479230527,RESOLVE,,,
Tue Nov 15 18:22:07 2016 us=677443 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Nov 15 18:22:07 2016 us=677443 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Nov 15 18:22:07 2016 us=677443 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Nov 15 18:22:07 2016 us=677443 Local Options hash (VER=V4): '22188c5b'
Tue Nov 15 18:22:07 2016 us=677443 Expected Remote Options hash (VER=V4): 'a8f55717'
Tue Nov 15 18:22:07 2016 us=677443 UDPv4 link local: [undef]
Tue Nov 15 18:22:07 2016 us=677443 UDPv4 link remote: [AF_INET]<SOME_IP>:1194
Tue Nov 15 18:22:07 2016 us=677443 MANAGEMENT: >STATE:1479230527,WAIT,,,
Tue Nov 15 18:22:07 2016 us=733440 MANAGEMENT: >STATE:1479230527,AUTH,,,
Tue Nov 15 18:22:07 2016 us=733440 TLS: Initial packet from [AF_INET]<SOME_IP>:1194, sid=d59dc3f1 65a24158
Tue Nov 15 18:22:07 2016 us=917940 VERIFY OK: depth=1, C=DE, ST=Baden-Wuerttemberg, L=Stuttgart, O=<Organisation>, OU=<OU>, CN=<CN>, name=<NAME>, emailAddress=<EMAIL>
Tue Nov 15 18:22:07 2016 us=918440 Validating certificate key usage
Tue Nov 15 18:22:07 2016 us=918440 ++ Certificate has key usage  00a0, expects 00a0
Tue Nov 15 18:22:07 2016 us=918440 VERIFY KU OK
Tue Nov 15 18:22:07 2016 us=918440 Validating certificate extended key usage
Tue Nov 15 18:22:07 2016 us=918440 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Nov 15 18:22:07 2016 us=918440 VERIFY EKU OK
Tue Nov 15 18:22:07 2016 us=918440 VERIFY OK: depth=0, C=DE, ST=Baden-Wuerttemberg, L=Stuttgart, O=<ORGANISATION, OU=<OU>, CN=<CN>, name=<NAME>, emailAddress=<EMAIL>
Tue Nov 15 18:22:08 2016 us=65957 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Nov 15 18:22:08 2016 us=65957 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 15 18:22:08 2016 us=65957 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Nov 15 18:22:08 2016 us=65957 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 15 18:22:08 2016 us=66438 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Nov 15 18:22:08 2016 us=66438 [<CN>] Peer Connection Initiated with [AF_INET]<SOME_IP>:1194
Tue Nov 15 18:22:09 2016 us=104444 MANAGEMENT: >STATE:1479230529,GET_CONFIG,,,
Tue Nov 15 18:22:10 2016 us=145953 SENT CONTROL [<CN>]: 'PUSH_REQUEST' (status=1)
Tue Nov 15 18:22:10 2016 us=200952 PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.8.0.1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0'
Tue Nov 15 18:22:10 2016 us=200952 OPTIONS IMPORT: timers and/or timeouts modified
Tue Nov 15 18:22:10 2016 us=201453 OPTIONS IMPORT: --ifconfig/up options modified
Tue Nov 15 18:22:10 2016 us=201453 OPTIONS IMPORT: route-related options modified
Tue Nov 15 18:22:10 2016 us=201952 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Nov 15 18:22:10 2016 us=201952 MANAGEMENT: >STATE:1479230530,ASSIGN_IP,,10.8.0.3,
Tue Nov 15 18:22:10 2016 us=201952 open_tun, tt->ipv6=0
Tue Nov 15 18:22:10 2016 us=202952 TAP-WIN32 device [OpenVPN.tap] opened: \\.\Global\{BC858721-D365-4A69-9C9D-DD0D05842285}.tap
Tue Nov 15 18:22:10 2016 us=202952 TAP-Windows Driver Version 9.21 
Tue Nov 15 18:22:10 2016 us=202952 TAP-Windows MTU=1500
Tue Nov 15 18:22:10 2016 us=205452 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.3/255.255.255.0 [SUCCEEDED]
Tue Nov 15 18:22:10 2016 us=205452 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.3/255.255.255.0 on interface {BC858721-D365-4A69-9C9D-DD0D05842285} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Nov 15 18:22:10 2016 us=205452 Successful ARP Flush on interface [23] {BC858721-D365-4A69-9C9D-DD0D05842285}
Tue Nov 15 18:22:15 2016 us=405538 TEST ROUTES: 0/0 succeeded len=0 ret=1 a=0 u/d=up
Tue Nov 15 18:22:15 2016 us=406038 Initialization Sequence Completed
Tue Nov 15 18:22:15 2016 us=406038 MANAGEMENT: >STATE:1479230535,CONNECTED,SUCCESS,10.8.0.3,<SOME_IP>

Server LOG

Tue Nov 15 18:19:33 2016 us=851049 Current Parameter Settings:
Tue Nov 15 18:19:33 2016 us=866807   config = 'server.ovpn'
Tue Nov 15 18:19:33 2016 us=866807   mode = 1
Tue Nov 15 18:19:33 2016 us=866807   show_ciphers = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   show_digests = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   show_engines = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   genkey = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   key_pass_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   show_tls_ciphers = DISABLED
Tue Nov 15 18:19:33 2016 us=866807 Connection profiles [default]:
Tue Nov 15 18:19:33 2016 us=866807   proto = udp
Tue Nov 15 18:19:33 2016 us=866807   local = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   local_port = 1194
Tue Nov 15 18:19:33 2016 us=866807   remote = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   remote_port = 1194
Tue Nov 15 18:19:33 2016 us=866807   remote_float = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   bind_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   bind_local = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   connect_retry_seconds = 5
Tue Nov 15 18:19:33 2016 us=866807   connect_timeout = 10
Tue Nov 15 18:19:33 2016 us=866807   connect_retry_max = 0
Tue Nov 15 18:19:33 2016 us=866807   socks_proxy_server = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   socks_proxy_port = 0
Tue Nov 15 18:19:33 2016 us=866807   socks_proxy_retry = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   tun_mtu = 1500
Tue Nov 15 18:19:33 2016 us=866807   tun_mtu_defined = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   link_mtu = 1500
Tue Nov 15 18:19:33 2016 us=866807   link_mtu_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   tun_mtu_extra = 0
Tue Nov 15 18:19:33 2016 us=866807   tun_mtu_extra_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   mtu_discover_type = -1
Tue Nov 15 18:19:33 2016 us=866807   fragment = 0
Tue Nov 15 18:19:33 2016 us=866807   mssfix = 1450
Tue Nov 15 18:19:33 2016 us=866807   explicit_exit_notification = 0
Tue Nov 15 18:19:33 2016 us=866807 Connection profiles END
Tue Nov 15 18:19:33 2016 us=866807   remote_random = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   ipchange = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   dev = 'tun'
Tue Nov 15 18:19:33 2016 us=866807   dev_type = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   dev_node = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   lladdr = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   topology = 3
Tue Nov 15 18:19:33 2016 us=866807   tun_ipv6 = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_local = '10.8.0.1'
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_remote_netmask = '255.255.255.0'
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_noexec = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_nowarn = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_ipv6_local = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_ipv6_netbits = 0
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_ipv6_remote = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   shaper = 0
Tue Nov 15 18:19:33 2016 us=866807   mtu_test = 0
Tue Nov 15 18:19:33 2016 us=866807   mlock = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   keepalive_ping = 10
Tue Nov 15 18:19:33 2016 us=866807   keepalive_timeout = 120
Tue Nov 15 18:19:33 2016 us=866807   inactivity_timeout = 0
Tue Nov 15 18:19:33 2016 us=866807   ping_send_timeout = 10
Tue Nov 15 18:19:33 2016 us=866807   ping_rec_timeout = 240
Tue Nov 15 18:19:33 2016 us=866807   ping_rec_timeout_action = 2
Tue Nov 15 18:19:33 2016 us=866807   ping_timer_remote = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   remap_sigusr1 = 0
Tue Nov 15 18:19:33 2016 us=866807   persist_tun = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   persist_local_ip = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   persist_remote_ip = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   persist_key = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   passtos = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   resolve_retry_seconds = 1000000000
Tue Nov 15 18:19:33 2016 us=866807   username = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   groupname = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   chroot_dir = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   cd_dir = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   writepid = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   up_script = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   down_script = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   down_pre = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   up_restart = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   up_delay = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   daemon = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   inetd = 0
Tue Nov 15 18:19:33 2016 us=866807   log = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   suppress_timestamps = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   nice = 0
Tue Nov 15 18:19:33 2016 us=866807   verbosity = 4
Tue Nov 15 18:19:33 2016 us=866807   mute = 0
Tue Nov 15 18:19:33 2016 us=866807   gremlin = 0
Tue Nov 15 18:19:33 2016 us=866807   status_file = '..\log\openvpn-status.log'
Tue Nov 15 18:19:33 2016 us=866807   status_file_version = 1
Tue Nov 15 18:19:33 2016 us=866807   status_file_update_freq = 60
Tue Nov 15 18:19:33 2016 us=866807   occ = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   rcvbuf = 0
Tue Nov 15 18:19:33 2016 us=866807   sndbuf = 0
Tue Nov 15 18:19:33 2016 us=866807   sockflags = 0
Tue Nov 15 18:19:33 2016 us=866807   fast_io = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   lzo = 7
Tue Nov 15 18:19:33 2016 us=866807   route_script = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   route_default_gateway = '10.8.0.2'
Tue Nov 15 18:19:33 2016 us=866807   route_default_metric = 0
Tue Nov 15 18:19:33 2016 us=866807   route_noexec = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   route_delay = 0
Tue Nov 15 18:19:33 2016 us=866807   route_delay_window = 30
Tue Nov 15 18:19:33 2016 us=866807   route_delay_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   route_nopull = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   route_gateway_via_dhcp = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   max_routes = 100
Tue Nov 15 18:19:33 2016 us=866807   allow_pull_fqdn = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   management_addr = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   management_port = 0
Tue Nov 15 18:19:33 2016 us=866807   management_user_pass = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   management_log_history_cache = 250
Tue Nov 15 18:19:33 2016 us=866807   management_echo_buffer_size = 100
Tue Nov 15 18:19:33 2016 us=866807   management_write_peer_info_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   management_client_user = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   management_client_group = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   management_flags = 0
Tue Nov 15 18:19:33 2016 us=866807   shared_secret_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   key_direction = 0
Tue Nov 15 18:19:33 2016 us=866807   ciphername_defined = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   ciphername = 'AES-256-CBC'
Tue Nov 15 18:19:33 2016 us=866807   authname_defined = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   authname = 'SHA1'
Tue Nov 15 18:19:33 2016 us=866807   prng_hash = 'SHA1'
Tue Nov 15 18:19:33 2016 us=866807   prng_nonce_secret_len = 16
Tue Nov 15 18:19:33 2016 us=866807   keysize = 0
Tue Nov 15 18:19:33 2016 us=866807   engine = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   replay = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   mute_replay_warnings = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   replay_window = 64
Tue Nov 15 18:19:33 2016 us=866807   replay_time = 15
Tue Nov 15 18:19:33 2016 us=866807   packet_id_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   use_iv = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   test_crypto = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   tls_server = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   tls_client = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   key_method = 2
Tue Nov 15 18:19:33 2016 us=866807   ca_file = '..\server-keys\ca.crt'
Tue Nov 15 18:19:33 2016 us=866807   ca_path = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   dh_file = '..\server-keys\dh2048.pem'
Tue Nov 15 18:19:33 2016 us=866807   cert_file = '..\server-keys\server.crt'
Tue Nov 15 18:19:33 2016 us=866807   extra_certs_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   priv_key_file = '..\server-keys\server.key'
Tue Nov 15 18:19:33 2016 us=866807   pkcs12_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   cryptoapi_cert = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   cipher_list = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   tls_verify = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   tls_export_cert = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   verify_x509_type = 0
Tue Nov 15 18:19:33 2016 us=866807   verify_x509_name = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   crl_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   ns_cert_type = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_ku[i] = 0
Tue Nov 15 18:19:33 2016 us=866807   remote_cert_eku = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   ssl_flags = 0
Tue Nov 15 18:19:33 2016 us=866807   tls_timeout = 2
Tue Nov 15 18:19:33 2016 us=866807   renegotiate_bytes = 0
Tue Nov 15 18:19:33 2016 us=866807   renegotiate_packets = 0
Tue Nov 15 18:19:33 2016 us=866807   renegotiate_seconds = 3600
Tue Nov 15 18:19:33 2016 us=866807   handshake_window = 60
Tue Nov 15 18:19:33 2016 us=866807   transition_window = 3600
Tue Nov 15 18:19:33 2016 us=866807   single_session = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   push_peer_info = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   tls_exit = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   tls_auth_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_protected_authentication = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_private_mode = 00000000
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_cert_private = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_pin_cache_period = -1
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_id = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   pkcs11_id_management = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   server_network = 10.8.0.0
Tue Nov 15 18:19:33 2016 us=866807   server_netmask = 255.255.255.0
Tue Nov 15 18:19:33 2016 us=866807   server_network_ipv6 = ::
Tue Nov 15 18:19:33 2016 us=866807   server_netbits_ipv6 = 0
Tue Nov 15 18:19:33 2016 us=866807   server_bridge_ip = 0.0.0.0
Tue Nov 15 18:19:33 2016 us=866807   server_bridge_netmask = 0.0.0.0
Tue Nov 15 18:19:33 2016 us=866807   server_bridge_pool_start = 0.0.0.0
Tue Nov 15 18:19:33 2016 us=866807   server_bridge_pool_end = 0.0.0.0
Tue Nov 15 18:19:33 2016 us=866807   push_entry = 'topology subnet'
Tue Nov 15 18:19:33 2016 us=866807   push_entry = 'route-gateway 10.8.0.1'
Tue Nov 15 18:19:33 2016 us=866807   push_entry = 'route-gateway 10.8.0.1'
Tue Nov 15 18:19:33 2016 us=866807   push_entry = 'topology subnet'
Tue Nov 15 18:19:33 2016 us=866807   push_entry = 'ping 10'
Tue Nov 15 18:19:33 2016 us=866807   push_entry = 'ping-restart 120'
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_pool_defined = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_pool_start = 10.8.0.2
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_pool_end = 10.8.0.253
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_pool_netmask = 255.255.255.0
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_pool_persist_filename = '..\ipp.txt'
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_pool_persist_refresh_freq = 600
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_ipv6_pool_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_ipv6_pool_base = ::
Tue Nov 15 18:19:33 2016 us=866807   ifconfig_ipv6_pool_netbits = 0
Tue Nov 15 18:19:33 2016 us=866807   n_bcast_buf = 256
Tue Nov 15 18:19:33 2016 us=866807   tcp_queue_limit = 64
Tue Nov 15 18:19:33 2016 us=866807   real_hash_size = 256
Tue Nov 15 18:19:33 2016 us=866807   virtual_hash_size = 256
Tue Nov 15 18:19:33 2016 us=866807   client_connect_script = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   learn_address_script = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   client_disconnect_script = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   client_config_dir = '..\ccd'
Tue Nov 15 18:19:33 2016 us=866807   ccd_exclusive = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   tmp_dir = '..\TEMP\'
Tue Nov 15 18:19:33 2016 us=866807   push_ifconfig_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   push_ifconfig_local = 0.0.0.0
Tue Nov 15 18:19:33 2016 us=866807   push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 15 18:19:33 2016 us=866807   push_ifconfig_ipv6_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   push_ifconfig_ipv6_local = ::/0
Tue Nov 15 18:19:33 2016 us=866807   push_ifconfig_ipv6_remote = ::
Tue Nov 15 18:19:33 2016 us=866807   enable_c2c = ENABLED
Tue Nov 15 18:19:33 2016 us=866807   duplicate_cn = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   cf_max = 0
Tue Nov 15 18:19:33 2016 us=866807   cf_per = 0
Tue Nov 15 18:19:33 2016 us=866807   max_clients = 1024
Tue Nov 15 18:19:33 2016 us=866807   max_routes_per_client = 256
Tue Nov 15 18:19:33 2016 us=866807   auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   client = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   pull = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   auth_user_pass_file = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   show_net_up = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   route_method = 0
Tue Nov 15 18:19:33 2016 us=866807   block_outside_dns = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   ip_win32_defined = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   ip_win32_type = 3
Tue Nov 15 18:19:33 2016 us=866807   dhcp_masq_offset = 0
Tue Nov 15 18:19:33 2016 us=866807   dhcp_lease_time = 31536000
Tue Nov 15 18:19:33 2016 us=866807   tap_sleep = 10
Tue Nov 15 18:19:33 2016 us=866807   dhcp_options = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   dhcp_renew = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   dhcp_pre_release = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   dhcp_release = DISABLED
Tue Nov 15 18:19:33 2016 us=866807   domain = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   netbios_scope = '[UNDEF]'
Tue Nov 15 18:19:33 2016 us=866807   netbios_node_type = 0
Tue Nov 15 18:19:33 2016 us=866807   disable_nbt = DISABLED
Tue Nov 15 18:19:33 2016 us=866807 OpenVPN 2.3.12 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Oct  3 2016
Tue Nov 15 18:19:33 2016 us=866807 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Nov 15 18:19:33 2016 us=866807 library versions: OpenSSL 1.0.1u  22 Sep 2016, LZO 2.09
Tue Nov 15 18:19:34 2016 us=22922 Diffie-Hellman initialized with 2048 bit key
Tue Nov 15 18:19:34 2016 us=38549 TLS-Auth MTU parms [ L:1558 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Nov 15 18:19:34 2016 us=38549 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 15 18:19:34 2016 us=38549 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Nov 15 18:19:34 2016 us=38549 open_tun, tt->ipv6=0
Tue Nov 15 18:19:34 2016 us=54174 TAP-WIN32 device [OpenVPN.tap] opened: \\.\Global\{CEA3EF79-4695-4C1A-B438-B8A59CDF3BEC}.tap
Tue Nov 15 18:19:34 2016 us=54174 TAP-Windows Driver Version 9.21 
Tue Nov 15 18:19:34 2016 us=54174 TAP-Windows MTU=1500
Tue Nov 15 18:19:34 2016 us=54174 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.1/255.255.255.0 [SUCCEEDED]
Tue Nov 15 18:19:34 2016 us=54174 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.0 on interface {CEA3EF79-4695-4C1A-B438-B8A59CDF3BEC} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Nov 15 18:19:34 2016 us=54174 Sleeping for 10 seconds...
Tue Nov 15 18:19:44 2016 us=69887 Successful ARP Flush on interface [12] {CEA3EF79-4695-4C1A-B438-B8A59CDF3BEC}
Tue Nov 15 18:19:44 2016 us=69887 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Nov 15 18:19:44 2016 us=69887 UDPv4 link local (bound): [undef]
Tue Nov 15 18:19:44 2016 us=69887 UDPv4 link remote: [undef]
Tue Nov 15 18:19:44 2016 us=69887 MULTI: multi_init called, r=256 v=256
Tue Nov 15 18:19:44 2016 us=69887 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Tue Nov 15 18:19:44 2016 us=69887 ifconfig_pool_read(), in='client1,10.8.0.2', TODO: IPv6
Tue Nov 15 18:19:44 2016 us=69887 succeeded -> ifconfig_pool_set()
Tue Nov 15 18:19:44 2016 us=69887 ifconfig_pool_read(), in='client2,10.8.0.3', TODO: IPv6
Tue Nov 15 18:19:44 2016 us=69887 succeeded -> ifconfig_pool_set()
Tue Nov 15 18:19:44 2016 us=69887 IFCONFIG POOL LIST
Tue Nov 15 18:19:44 2016 us=69887 client1,10.8.0.2
Tue Nov 15 18:19:44 2016 us=69887 client2,10.8.0.3
Tue Nov 15 18:19:44 2016 us=69887 Initialization Sequence Completed
Tue Nov 15 18:22:01 2016 us=272981 MULTI: multi_create_instance called
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 Re-using SSL/TLS context
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 LZO compression initialized
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 Control Channel MTU parms [ L:1558 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:143 ET:0 EL:3 AF:3/1 ]
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 Local Options hash (VER=V4): 'a8f55717'
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 Expected Remote Options hash (VER=V4): '22188c5b'
Tue Nov 15 18:22:01 2016 us=272981 <SOME_IP>:55912 TLS: Initial packet from [AF_INET]<SOME_IP>:55912, sid=e9d3dbbe 05c74aa2
Tue Nov 15 18:22:01 2016 us=554177 <SOME_IP>:55912 VERIFY OK: depth=1, C=DE, ST=Baden-Wuerttemberg, L=Stuttgart, O=<Organisation>, OU=<OU>, CN=<CN>, name=<NAME>, emailAddress=<EMAIL>
Tue Nov 15 18:22:01 2016 us=554177 <SOME_IP>:55912 VERIFY OK: depth=0, C=DE, ST=Baden-Wuerttemberg, L=Stuttgart, O=<Organisation>, OU=<OU>, CN=client2, name=<NAME>, emailAddress=<EMAIL>
Tue Nov 15 18:22:01 2016 us=601051 <SOME_IP>:55912 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Nov 15 18:22:01 2016 us=601051 <SOME_IP>:55912 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 15 18:22:01 2016 us=601051 <SOME_IP>:55912 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Nov 15 18:22:01 2016 us=601051 <SOME_IP>:55912 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 15 18:22:01 2016 us=663621 <SOME_IP>:55912 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Nov 15 18:22:01 2016 us=663621 <SOME_IP>:55912 [client2] Peer Connection Initiated with [AF_INET]<SOME_IP>:55912
Tue Nov 15 18:22:01 2016 us=663621 client2/<SOME_IP>:55912 MULTI_sva: pool returned IPv4=10.8.0.3, IPv6=(Not enabled)
Tue Nov 15 18:22:01 2016 us=663621 client2/<SOME_IP>:55912 MULTI: Learn: 10.8.0.3 -> client2/<SOME_IP>:55912
Tue Nov 15 18:22:01 2016 us=663621 client2/<SOME_IP>:55912 MULTI: primary virtual IP for client2/<SOME_IP>:55912: 10.8.0.3
Tue Nov 15 18:22:03 2016 us=741824 client2/<SOME_IP>:55912 PUSH: Received control message: 'PUSH_REQUEST'
Tue Nov 15 18:22:03 2016 us=741824 client2/<SOME_IP>:55912 send_push_reply(): safe_cap=940
Tue Nov 15 18:22:03 2016 us=741824 client2/<SOME_IP>:55912 SENT CONTROL [client2]: 'PUSH_REPLY,topology subnet,route-gateway 10.8.0.1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.3 255.255.255.0' (status=1)
Tue Nov 15 18:22:03 2016 us=882387 client2/<SOME_IP>:55912 MULTI: bad source address from client [::], packet dropped
Tue Nov 15 18:49:35 2016 us=7428 TCP/UDP: Closing socket
Tue Nov 15 18:49:35 2016 us=7428 Closing TUN/TAP interface
Tue Nov 15 18:49:35 2016 us=7428 SIGTERM[hard,] received, process exiting

300000

There are wrong with your routing . Just comment push route out and push tolopoly-subnet out to see if it works correct or not . By the way what is mean push route-gateway 10.8.0.1

Can you. Tell what you want to do so. I can recommend correct push config server

The most likely is you use push route with is nonrouteable so when the client connect server it drop that why software. Have trouble connect it .

Make sure check your route correct and try to connect it