Unreliable connection on Windows 10 Home 64-bit

omortis

Hello All,

I have OpenVPN server setup on Debian stable 8, and Clients setup on Windows 7, Linux and OSX (TunnelBlick) and everything works very well.

However, the client is completely wonky on a Windows 10 64-bit home client. It worked fine until one day I walked away and let the workstation go to sleep with the VPN connected, and now I have to "Delete all TAP adapters" and "Add a new TAP adapter" all the time just to get it to connect, and then the connection is only good for a few minutes.

I've tried uninstalling and reinstalling OpenVPN and numerous reboots. I'm a Linux/OSX guy so I'm kind of at sea here.

The Windows client thinks it's connected, and the OpenVPN GUI icon is green:

Ethernet adapter Ethernet 5:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::fc9f:f7ae:fb83:8ba5%13
   IPv4 Address. . . . . . . . . . . : 10.8.0.14
   Subnet Mask . . . . . . . . . . . : 255.255.255.252
   Default Gateway . . . . . . . . . :

Still, no connection.

On the Debian Stable 8.7 server:

journalctl -f

and

systemctl status openvpn*.service -l

give no useful info for this connection issue. As I said, all other clients are bulletproof.

Any help appreciated.

Thanks,

John

OpeVPN 2.4.1-1601
Windows 10 Home 64-bit
port 1194
proto udp
dev tun
ca /root/openvpn-pki/stacked.crt
cert /root/openvpn-pki/xxx.crt
key /root/openvpn-pki/xxx.key
dh /root/openvpn-pki/dhparams2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
tls-auth /root/openvpn-pki/ta.key 0
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 6 client
dev tun
proto udp
remote x.x.x.x 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca C:/xxxstacked.crt
cert C:/xxx.crt
key C:/xxx.key
remote-cert-tls server
tls-auth C:/Users/John/OpenVPN/pki/ta.key 1
cipher AES-256-CBC
comp-lzo
verb 4 Tue Apr 11 20:43:59 2017 us=584211 Current Parameter Settings:
Tue Apr 11 20:43:59 2017 us=584211 config = 'tasha.ovpn'
Tue Apr 11 20:43:59 2017 us=584211 mode = 0
Tue Apr 11 20:43:59 2017 us=584211 show_ciphers = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 show_digests = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 show_engines = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 genkey = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 key_pass_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 show_tls_ciphers = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 connect_retry_max = 0
Tue Apr 11 20:43:59 2017 us=584211 Connection profiles [0]:
Tue Apr 11 20:43:59 2017 us=584211 proto = udp
Tue Apr 11 20:43:59 2017 us=584211 local = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 local_port = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 remote = 'x.x.x.x'
Tue Apr 11 20:43:59 2017 us=584211 remote_port = '1194'
Tue Apr 11 20:43:59 2017 us=584211 remote_float = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 bind_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 bind_local = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 bind_ipv6_only = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 connect_retry_seconds = 5
Tue Apr 11 20:43:59 2017 us=584211 connect_timeout = 120
Tue Apr 11 20:43:59 2017 us=584211 socks_proxy_server = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 socks_proxy_port = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 tun_mtu = 1500
Tue Apr 11 20:43:59 2017 us=584211 tun_mtu_defined = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 link_mtu = 1500
Tue Apr 11 20:43:59 2017 us=584211 link_mtu_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 tun_mtu_extra = 0
Tue Apr 11 20:43:59 2017 us=584211 tun_mtu_extra_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 mtu_discover_type = -1
Tue Apr 11 20:43:59 2017 us=584211 fragment = 0
Tue Apr 11 20:43:59 2017 us=584211 mssfix = 1450
Tue Apr 11 20:43:59 2017 us=584211 explicit_exit_notification = 0
Tue Apr 11 20:43:59 2017 us=584211 Connection profiles END
Tue Apr 11 20:43:59 2017 us=584211 remote_random = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 ipchange = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 dev = 'tun'
Tue Apr 11 20:43:59 2017 us=584211 dev_type = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 dev_node = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 lladdr = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 topology = 1
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_local = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_remote_netmask = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_noexec = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_nowarn = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_ipv6_local = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_ipv6_netbits = 0
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_ipv6_remote = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 shaper = 0
Tue Apr 11 20:43:59 2017 us=584211 mtu_test = 0
Tue Apr 11 20:43:59 2017 us=584211 mlock = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 keepalive_ping = 0
Tue Apr 11 20:43:59 2017 us=584211 keepalive_timeout = 0
Tue Apr 11 20:43:59 2017 us=584211 inactivity_timeout = 0
Tue Apr 11 20:43:59 2017 us=584211 ping_send_timeout = 0
Tue Apr 11 20:43:59 2017 us=584211 ping_rec_timeout = 0
Tue Apr 11 20:43:59 2017 us=584211 ping_rec_timeout_action = 0
Tue Apr 11 20:43:59 2017 us=584211 ping_timer_remote = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 remap_sigusr1 = 0
Tue Apr 11 20:43:59 2017 us=584211 persist_tun = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 persist_local_ip = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 persist_remote_ip = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 persist_key = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 passtos = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 resolve_retry_seconds = 1000000000
Tue Apr 11 20:43:59 2017 us=584211 resolve_in_advance = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 username = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 groupname = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 chroot_dir = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 cd_dir = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 writepid = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 up_script = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 down_script = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 down_pre = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 up_restart = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 up_delay = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 daemon = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 inetd = 0
Tue Apr 11 20:43:59 2017 us=584211 log = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 suppress_timestamps = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 machine_readable_output = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 nice = 0
Tue Apr 11 20:43:59 2017 us=584211 verbosity = 4
Tue Apr 11 20:43:59 2017 us=584211 mute = 0
Tue Apr 11 20:43:59 2017 us=584211 gremlin = 0
Tue Apr 11 20:43:59 2017 us=584211 status_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 status_file_version = 1
Tue Apr 11 20:43:59 2017 us=584211 status_file_update_freq = 60
Tue Apr 11 20:43:59 2017 us=584211 occ = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 rcvbuf = 0
Tue Apr 11 20:43:59 2017 us=584211 sndbuf = 0
Tue Apr 11 20:43:59 2017 us=584211 sockflags = 0
Tue Apr 11 20:43:59 2017 us=584211 fast_io = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 comp.alg = 2
Tue Apr 11 20:43:59 2017 us=584211 comp.flags = 1
Tue Apr 11 20:43:59 2017 us=584211 route_script = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 route_default_gateway = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 route_default_metric = 0
Tue Apr 11 20:43:59 2017 us=584211 route_noexec = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 route_delay = 5
Tue Apr 11 20:43:59 2017 us=584211 route_delay_window = 30
Tue Apr 11 20:43:59 2017 us=584211 route_delay_defined = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 route_nopull = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 route_gateway_via_dhcp = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 allow_pull_fqdn = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 management_addr = '127.0.0.1'
Tue Apr 11 20:43:59 2017 us=584211 management_port = '25340'
Tue Apr 11 20:43:59 2017 us=584211 management_user_pass = 'stdin'
Tue Apr 11 20:43:59 2017 us=584211 management_log_history_cache = 250
Tue Apr 11 20:43:59 2017 us=584211 management_echo_buffer_size = 100
Tue Apr 11 20:43:59 2017 us=584211 management_write_peer_info_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 management_client_user = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 management_client_group = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 management_flags = 6
Tue Apr 11 20:43:59 2017 us=584211 shared_secret_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 key_direction = 2
Tue Apr 11 20:43:59 2017 us=584211 ciphername = 'AES-256-CBC'
Tue Apr 11 20:43:59 2017 us=584211 ncp_enabled = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Apr 11 20:43:59 2017 us=584211 authname = 'SHA1'
Tue Apr 11 20:43:59 2017 us=584211 prng_hash = 'SHA1'
Tue Apr 11 20:43:59 2017 us=584211 prng_nonce_secret_len = 16
Tue Apr 11 20:43:59 2017 us=584211 keysize = 0
Tue Apr 11 20:43:59 2017 us=584211 engine = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 replay = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 mute_replay_warnings = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 replay_window = 64
Tue Apr 11 20:43:59 2017 us=584211 replay_time = 15
Tue Apr 11 20:43:59 2017 us=584211 packet_id_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 use_iv = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 test_crypto = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 tls_server = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 tls_client = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 key_method = 2
Tue Apr 11 20:43:59 2017 us=584211 ca_file = 'C:/xxx/stacked.crt'
Tue Apr 11 20:43:59 2017 us=584211 ca_path = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 dh_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 cert_file = 'C:/xxx.crt'
Tue Apr 11 20:43:59 2017 us=584211 extra_certs_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 priv_key_file = 'C:/xxx.key'
Tue Apr 11 20:43:59 2017 us=584211 pkcs12_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 cryptoapi_cert = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 cipher_list = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 tls_verify = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 tls_export_cert = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 verify_x509_type = 0
Tue Apr 11 20:43:59 2017 us=584211 verify_x509_name = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 crl_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 ns_cert_type = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 65535
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku[i] = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku[i] = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku[i] = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku[i] = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku[i] = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_ku[i] = 0
Tue Apr 11 20:43:59 2017 us=584211 remote_cert_eku = 'TLS Web Server Authentication'
Tue Apr 11 20:43:59 2017 us=584211 ssl_flags = 0
Tue Apr 11 20:43:59 2017 us=584211 tls_timeout = 2
Tue Apr 11 20:43:59 2017 us=584211 renegotiate_bytes = -1
Tue Apr 11 20:43:59 2017 us=584211 renegotiate_packets = 0
Tue Apr 11 20:43:59 2017 us=584211 renegotiate_seconds = 3600
Tue Apr 11 20:43:59 2017 us=584211 handshake_window = 60
Tue Apr 11 20:43:59 2017 us=584211 transition_window = 3600
Tue Apr 11 20:43:59 2017 us=584211 single_session = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 push_peer_info = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 tls_exit = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 tls_auth_file = 'C:/xxx/ta.key'
Tue Apr 11 20:43:59 2017 us=584211 tls_crypt_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_protected_authentication = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_private_mode = 00000000
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_cert_private = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_pin_cache_period = -1
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_id = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 pkcs11_id_management = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 server_network = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 server_netmask = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 server_network_ipv6 = ::
Tue Apr 11 20:43:59 2017 us=584211 server_netbits_ipv6 = 0
Tue Apr 11 20:43:59 2017 us=584211 server_bridge_ip = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 server_bridge_netmask = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 server_bridge_pool_start = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 server_bridge_pool_end = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_pool_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_pool_start = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_pool_end = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_pool_netmask = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_pool_persist_refresh_freq = 600
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_ipv6_pool_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_ipv6_pool_base = ::
Tue Apr 11 20:43:59 2017 us=584211 ifconfig_ipv6_pool_netbits = 0
Tue Apr 11 20:43:59 2017 us=584211 n_bcast_buf = 256
Tue Apr 11 20:43:59 2017 us=584211 tcp_queue_limit = 64
Tue Apr 11 20:43:59 2017 us=584211 real_hash_size = 256
Tue Apr 11 20:43:59 2017 us=584211 virtual_hash_size = 256
Tue Apr 11 20:43:59 2017 us=584211 client_connect_script = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 learn_address_script = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 client_disconnect_script = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 client_config_dir = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 ccd_exclusive = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 tmp_dir = 'C:\xxxTemp\'
Tue Apr 11 20:43:59 2017 us=584211 push_ifconfig_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 push_ifconfig_local = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 push_ifconfig_remote_netmask = 0.0.0.0
Tue Apr 11 20:43:59 2017 us=584211 push_ifconfig_ipv6_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 push_ifconfig_ipv6_local = ::/0
Tue Apr 11 20:43:59 2017 us=584211 push_ifconfig_ipv6_remote = ::
Tue Apr 11 20:43:59 2017 us=584211 enable_c2c = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 duplicate_cn = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 cf_max = 0
Tue Apr 11 20:43:59 2017 us=584211 cf_per = 0
Tue Apr 11 20:43:59 2017 us=584211 max_clients = 1024
Tue Apr 11 20:43:59 2017 us=584211 max_routes_per_client = 256
Tue Apr 11 20:43:59 2017 us=584211 auth_user_pass_verify_script = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 auth_user_pass_verify_script_via_file = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 auth_token_generate = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 auth_token_lifetime = 0
Tue Apr 11 20:43:59 2017 us=584211 client = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 pull = ENABLED
Tue Apr 11 20:43:59 2017 us=584211 auth_user_pass_file = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 show_net_up = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 route_method = 0
Tue Apr 11 20:43:59 2017 us=584211 block_outside_dns = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 ip_win32_defined = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 ip_win32_type = 3
Tue Apr 11 20:43:59 2017 us=584211 dhcp_masq_offset = 0
Tue Apr 11 20:43:59 2017 us=584211 dhcp_lease_time = 31536000
Tue Apr 11 20:43:59 2017 us=584211 tap_sleep = 0
Tue Apr 11 20:43:59 2017 us=584211 dhcp_options = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 dhcp_renew = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 dhcp_pre_release = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 domain = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 netbios_scope = '[UNDEF]'
Tue Apr 11 20:43:59 2017 us=584211 netbios_node_type = 0
Tue Apr 11 20:43:59 2017 us=584211 disable_nbt = DISABLED
Tue Apr 11 20:43:59 2017 us=584211 OpenVPN 2.4.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 22 2017
Tue Apr 11 20:43:59 2017 us=584211 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Apr 11 20:43:59 2017 us=584211 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Enter Management Password:
Tue Apr 11 20:43:59 2017 us=584211 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Apr 11 20:43:59 2017 us=584211 Need hold release from management interface, waiting...
Tue Apr 11 20:44:00 2017 us=84263 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Apr 11 20:44:00 2017 us=193640 MANAGEMENT: CMD 'state on'
Tue Apr 11 20:44:00 2017 us=193640 MANAGEMENT: CMD 'log all on'
Tue Apr 11 20:44:00 2017 us=271770 MANAGEMENT: CMD 'echo all on'
Tue Apr 11 20:44:00 2017 us=271770 MANAGEMENT: CMD 'hold off'
Tue Apr 11 20:44:00 2017 us=271770 MANAGEMENT: CMD 'hold release'
Tue Apr 11 20:44:00 2017 us=383444 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 11 20:44:00 2017 us=383444 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 11 20:44:00 2017 us=383444 LZO compression initializing
Tue Apr 11 20:44:00 2017 us=383444 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Apr 11 20:44:00 2017 us=383444 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Tue Apr 11 20:44:00 2017 us=383444 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Apr 11 20:44:00 2017 us=383444 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Apr 11 20:44:00 2017 us=383444 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Tue Apr 11 20:44:00 2017 us=383444 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Apr 11 20:44:00 2017 us=383444 UDP link local: (not bound)
Tue Apr 11 20:44:00 2017 us=383444 UDP link remote: [AF_INET]x.x.x.x:1194
Tue Apr 11 20:44:00 2017 us=383444 MANAGEMENT: >STATE:1491957840,WAIT,,,,,,
Tue Apr 11 20:44:00 2017 us=414695 MANAGEMENT: >STATE:1491957840,AUTH,,,,,,
Tue Apr 11 20:44:00 2017 us=414695 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=da9ea6b8 7f4e362f
Tue Apr 11 20:44:00 2017 us=727203 VERIFY OK: depth=2, C=US, O=xxx, CN=Root CA
Tue Apr 11 20:44:00 2017 us=727203 VERIFY OK: depth=1, C=US, O=xxx, CN=Sub CA
Tue Apr 11 20:44:00 2017 us=727203 VERIFY KU OK
Tue Apr 11 20:44:00 2017 us=727203 Validating certificate extended key usage
Tue Apr 11 20:44:00 2017 us=727203 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Server Authentication
Tue Apr 11 20:44:00 2017 us=727203 ++ Certificate has EKU (oid) 1.3.6.1.5.5.7.3.2, expects TLS Web Server Authentication
Tue Apr 11 20:44:00 2017 us=727203 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Apr 11 20:44:00 2017 us=727203 VERIFY EKU OK
Tue Apr 11 20:44:00 2017 us=727203 VERIFY OK: depth=0, C=US, ST=New York, O=xxx, OU=Water Street Brewing Co., CN=www.rewapps.com, emailAddress=jbleichert@gmail.com
Tue Apr 11 20:44:00 2017 us=870255 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Apr 11 20:44:00 2017 us=870255 [x.x.x] Peer Connection Initiated with [AF_INET]x.x.x.x:1194
Tue Apr 11 20:44:02 2017 us=107627 MANAGEMENT: >STATE:1491957842,GET_CONFIG,,,,,,
Tue Apr 11 20:44:02 2017 us=107627 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:44:02 2017 us=123252 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13'
Tue Apr 11 20:44:02 2017 us=123252 OPTIONS IMPORT: timers and/or timeouts modified
Tue Apr 11 20:44:02 2017 us=123252 OPTIONS IMPORT: --ifconfig/up options modified
Tue Apr 11 20:44:02 2017 us=123252 OPTIONS IMPORT: route options modified
Tue Apr 11 20:44:02 2017 us=123252 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:406 ET:0 EL:3 ]
Tue Apr 11 20:44:02 2017 us=123252 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Apr 11 20:44:02 2017 us=123252 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 11 20:44:02 2017 us=123252 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Apr 11 20:44:02 2017 us=123252 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 11 20:44:02 2017 us=123252 interactive service msg_channel=0
Tue Apr 11 20:44:02 2017 us=123252 ROUTE_GATEWAY 192.168.86.1/255.255.255.0 I=16 HWADDR=94:de:80:b8:15:74
Tue Apr 11 20:44:02 2017 us=123252 open_tun
Tue Apr 11 20:44:02 2017 us=123252 TAP-WIN32 device [Ethernet 5] opened: \\.\Global\{4ABDC945-E734-415C-8B50-EE2FEAA2FA4C}.tap
Tue Apr 11 20:44:02 2017 us=123252 TAP-Windows Driver Version 9.21
Tue Apr 11 20:44:02 2017 us=123252 TAP-Windows MTU=1500
Tue Apr 11 20:44:02 2017 us=123252 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.14/255.255.255.252 on interface {4ABDC945-E734-415C-8B50-EE2FEAA2FA4C} [DHCP-serv: 10.8.0.13, lease-time: 31536000]
Tue Apr 11 20:44:02 2017 us=123252 Successful ARP Flush on interface [13] {4ABDC945-E734-415C-8B50-EE2FEAA2FA4C}
Tue Apr 11 20:44:02 2017 us=123252 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Apr 11 20:44:02 2017 us=123252 MANAGEMENT: >STATE:1491957842,ASSIGN_IP,,10.8.0.14,,,,
Tue Apr 11 20:44:07 2017 us=806989 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Tue Apr 11 20:44:07 2017 us=806989 MANAGEMENT: >STATE:1491957847,ADD_ROUTES,,,,,,
Tue Apr 11 20:44:07 2017 us=806989 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.13
Tue Apr 11 20:44:07 2017 us=806989 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Tue Apr 11 20:44:07 2017 us=806989 Route addition via IPAPI succeeded [adaptive]
Tue Apr 11 20:44:07 2017 us=806989 Initialization Sequence Completed
Tue Apr 11 20:44:07 2017 us=806989 MANAGEMENT: >STATE:1491957847,CONNECTED,SUCCESS,10.8.0.14,x.x.x.x,1194,,
Tue Apr 11 20:46:57 2017 us=340199 [x.x.x] Inactivity timeout (--ping-restart), restarting
Tue Apr 11 20:46:57 2017 us=340199 TCP/UDP: Closing socket
Tue Apr 11 20:46:57 2017 us=340199 SIGUSR1[soft,ping-restart] received, process restarting
Tue Apr 11 20:46:57 2017 us=340199 MANAGEMENT: >STATE:1491958017,RECONNECTING,ping-restart,,,,,
Tue Apr 11 20:46:57 2017 us=340199 Restart pause, 5 second(s)
Tue Apr 11 20:47:02 2017 us=371081 Re-using SSL/TLS context
Tue Apr 11 20:47:02 2017 us=371081 LZO compression initializing
Tue Apr 11 20:47:02 2017 us=371081 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Apr 11 20:47:02 2017 us=371081 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Tue Apr 11 20:47:02 2017 us=371081 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Apr 11 20:47:02 2017 us=371081 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Apr 11 20:47:02 2017 us=371081 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Tue Apr 11 20:47:02 2017 us=371081 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Apr 11 20:47:02 2017 us=371081 UDP link local: (not bound)
Tue Apr 11 20:47:02 2017 us=371081 UDP link remote: [AF_INET]x.x.x.x:1194
Tue Apr 11 20:47:02 2017 us=371081 MANAGEMENT: >STATE:1491958022,WAIT,,,,,,
Tue Apr 11 20:47:02 2017 us=386710 MANAGEMENT: >STATE:1491958022,AUTH,,,,,,
Tue Apr 11 20:47:02 2017 us=386710 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=c18607a1 c87bd102
Tue Apr 11 20:47:02 2017 us=677110 VERIFY OK: depth=2, C=US, O=xxx, CN=Root CA
Tue Apr 11 20:47:02 2017 us=677110 VERIFY OK: depth=1, C=US, O=xxx, CN=Sub CA
Tue Apr 11 20:47:02 2017 us=677110 VERIFY KU OK
Tue Apr 11 20:47:02 2017 us=677110 Validating certificate extended key usage
Tue Apr 11 20:47:02 2017 us=677110 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Server Authentication
Tue Apr 11 20:47:02 2017 us=677110 ++ Certificate has EKU (oid) 1.3.6.1.5.5.7.3.2, expects TLS Web Server Authentication
Tue Apr 11 20:47:02 2017 us=677110 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Apr 11 20:47:02 2017 us=677110 VERIFY EKU OK
Tue Apr 11 20:47:02 2017 us=677110 VERIFY OK: depth=0, C=US, ST=New York, O=xxx, OU=Water Street Brewing Co., CN=x.x.x, emailAddress=jbleichert@gmail.com
Tue Apr 11 20:47:02 2017 us=833356 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Apr 11 20:47:02 2017 us=833356 [x.x.x] Peer Connection Initiated with [AF_INET]x.x.x.x:1194
Tue Apr 11 20:47:04 2017 us=13137 MANAGEMENT: >STATE:1491958024,GET_CONFIG,,,,,,
Tue Apr 11 20:47:04 2017 us=13137 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:09 2017 us=367348 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:14 2017 us=915446 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:19 2017 us=332627 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:24 2017 us=748484 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:29 2017 us=541968 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:34 2017 us=799463 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:40 2017 us=123922 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:45 2017 us=294098 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:50 2017 us=318190 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:47:55 2017 us=477635 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:48:00 2017 us=612622 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:48:06 2017 us=19106 No reply from server after sending 12 push requests
Tue Apr 11 20:48:06 2017 us=19106 TCP/UDP: Closing socket
Tue Apr 11 20:48:06 2017 us=19106 SIGUSR1[soft,no-push-reply] received, process restarting
Tue Apr 11 20:48:06 2017 us=19106 MANAGEMENT: >STATE:1491958086,RECONNECTING,no-push-reply,,,,,
Tue Apr 11 20:48:06 2017 us=19106 Restart pause, 5 second(s)
Tue Apr 11 20:48:11 2017 us=47025 Re-using SSL/TLS context
Tue Apr 11 20:48:11 2017 us=47025 LZO compression initializing
Tue Apr 11 20:48:11 2017 us=47025 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Apr 11 20:48:11 2017 us=47025 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Tue Apr 11 20:48:11 2017 us=47025 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Apr 11 20:48:11 2017 us=47025 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Apr 11 20:48:11 2017 us=47025 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194
Tue Apr 11 20:48:11 2017 us=47025 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Apr 11 20:48:11 2017 us=47025 UDP link local: (not bound)
Tue Apr 11 20:48:11 2017 us=47025 UDP link remote: [AF_INET]x.x.x.x:1194
Tue Apr 11 20:48:11 2017 us=47025 MANAGEMENT: >STATE:1491958091,WAIT,,,,,,
Tue Apr 11 20:48:11 2017 us=72042 MANAGEMENT: >STATE:1491958091,AUTH,,,,,,
Tue Apr 11 20:48:11 2017 us=72042 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=7091c626 2604960a
Tue Apr 11 20:48:11 2017 us=378754 VERIFY OK: depth=2, C=US, O=xxxx, CN=Root CA
Tue Apr 11 20:48:11 2017 us=378754 VERIFY OK: depth=1, C=US, O=xxxs, CN=Sub CA
Tue Apr 11 20:48:11 2017 us=379752 VERIFY KU OK
Tue Apr 11 20:48:11 2017 us=379752 Validating certificate extended key usage
Tue Apr 11 20:48:11 2017 us=379752 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Server Authentication
Tue Apr 11 20:48:11 2017 us=379752 ++ Certificate has EKU (oid) 1.3.6.1.5.5.7.3.2, expects TLS Web Server Authentication
Tue Apr 11 20:48:11 2017 us=379752 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Apr 11 20:48:11 2017 us=379752 VERIFY EKU OK
Tue Apr 11 20:48:11 2017 us=379752 VERIFY OK: depth=0, C=US, ST=New York, O=xxx, OU=Water Street Brewing Co., CN=x.x.x, emailAddress=jbleichert@gmail.com
Tue Apr 11 20:48:11 2017 us=513861 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Apr 11 20:48:11 2017 us=513861 [x.x.x] Peer Connection Initiated with [AF_INET]x.x.x.x:1194
Tue Apr 11 20:48:12 2017 us=736267 MANAGEMENT: >STATE:1491958092,GET_CONFIG,,,,,,
Tue Apr 11 20:48:12 2017 us=736267 SENT CONTROL [x.x.x]: 'PUSH_REQUEST' (status=1)
Tue Apr 11 20:48:12 2017 us=759013 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13'
Tue Apr 11 20:48:12 2017 us=759013 OPTIONS IMPORT: timers and/or timeouts modified
Tue Apr 11 20:48:12 2017 us=759013 OPTIONS IMPORT: --ifconfig/up options modified
Tue Apr 11 20:48:12 2017 us=759013 OPTIONS IMPORT: route options modified
Tue Apr 11 20:48:12 2017 us=759013 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:406 ET:0 EL:3 ]
Tue Apr 11 20:48:12 2017 us=759013 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Apr 11 20:48:12 2017 us=759013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 11 20:48:12 2017 us=759013 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Tue Apr 11 20:48:12 2017 us=759013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 11 20:48:12 2017 us=759013 Preserving previous TUN/TAP instance: Ethernet 5
Tue Apr 11 20:48:12 2017 us=759013 Initialization Sequence Completed
Tue Apr 11 20:48:12 2017 us=759013 MANAGEMENT: >STATE:1491958092,CONNECTED,SUCCESS,10.8.0.14,x.x.x.x,1194,,

TinCanTech

Please add your server log at verb 4 also.

From your client log I can see that the server pushes --ping and --ping-restart but then the client times out on --ping and subsequently the server does not reply to PUSH_REQUEST. Something appears to be wrong with the control channel.

This could be related to the TAP driver and may need some expert eyes to investigate. I will ask on the mailing list for some extra help.

Here is the information we have regarding such problems:
https://community.openvpn.net/openvpn/wiki/281-what-to-do-if-the-installation-of-the-tap-win32-driver-fails
https://community.openvpn.net/openvpn/wiki/ManagingWindowsTAPDrivers

However, as you have identified a specific problem it may be useful for the community if we can identify exactly what is wrong before you make any further changes to your windows client.

omortis

TinCanTech: thanks for the quick reply. I'll be booted into linux on that desktop for a while anyway and will make no changes to the Windows install. No problem leaving it alone for further investigation. I am unavailable during the day (corp. firewall and all that) but around in the evenings during EST. Feel free to PM me the mailing list details.

Edit: Note that the OpenVPN client had been working well on that system for several days but I was manually connecting and then disconnecting. The only behavior that changed is that the system went to sleep while connected. Maybe that will help the TAP folks pinpoint what went wrong...

Thanks!

John

TinCanTech

TinCanTech wrotePlease add your server log at verb 4 also.

Without this we cannot help.

Also, according to what you have posted so far, the problem is not related to the TAP driver.

omortis

I will post the server log file on Saturday, will be afk for a bit. Sorry, didn't see that in your post this morning...

John

omortis

The server log with verb 4 is attached here. I changed verb from 6 -> 4, restarted the OpenVPN service on Debian stable, then rebooted Windows 10.

For the record, Windows 10 is connected just fine right now and the connection seems stable, though the OpenVPN GUI icon is not "green"? It may be fine now? There are some packet drops at the bottom of this log. And yes, I changed permissions on the key ...

ipconfig in ConEMU:

Ethernet adapter Ethernet 5:

   Connection-specific DNS Suffix  . :
   Link-local IPv6 Address . . . . . : fe80::fc9f:f7ae:fb83:8ba5%6
   IPv4 Address. . . . . . . . . . . : 10.8.0.14
   Subnet Mask . . . . . . . . . . . : 255.255.255.252
   Default Gateway . . . . . . . . . :

Tunnel adapter isatap.{A76E5F36-65B4-453F-9219-7F2389ADF9C2}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . :
   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:953c:2011:2613:3f57:a9e1
   Link-local IPv6 Address . . . . . : fe80::2011:2613:3f57:a9e1%19
   Default Gateway . . . . . . . . . : ::

Tunnel adapter isatap.{FA98E2AA-D56F-4200-ABC7-95658D30C562}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Tunnel adapter isatap.lan:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : lan

Tunnel adapter isatap.{4ABDC945-E734-415C-8B50-EE2FEAA2FA4C}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :

Sat Apr 15 12:47:57 2017 us=652397 Current Parameter Settings:
Sat Apr 15 12:47:57 2017 us=652456 config = '/etc/openvpn/server.conf'
Sat Apr 15 12:47:57 2017 us=652464 mode = 1
Sat Apr 15 12:47:57 2017 us=652468 persist_config = DISABLED
Sat Apr 15 12:47:57 2017 us=652472 persist_mode = 1
Sat Apr 15 12:47:57 2017 us=652476 show_ciphers = DISABLED
Sat Apr 15 12:47:57 2017 us=652480 show_digests = DISABLED
Sat Apr 15 12:47:57 2017 us=652484 show_engines = DISABLED
Sat Apr 15 12:47:57 2017 us=652488 genkey = DISABLED
Sat Apr 15 12:47:57 2017 us=652492 key_pass_file = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652496 show_tls_ciphers = DISABLED
Sat Apr 15 12:47:57 2017 us=652501 Connection profiles [default]:
Sat Apr 15 12:47:57 2017 us=652505 proto = udp
Sat Apr 15 12:47:57 2017 us=652509 local = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652514 local_port = 1194
Sat Apr 15 12:47:57 2017 us=652518 remote = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652522 remote_port = 1194
Sat Apr 15 12:47:57 2017 us=652526 remote_float = DISABLED
Sat Apr 15 12:47:57 2017 us=652530 bind_defined = DISABLED
Sat Apr 15 12:47:57 2017 us=652534 bind_local = ENABLED
Sat Apr 15 12:47:57 2017 us=652538 connect_retry_seconds = 5
Sat Apr 15 12:47:57 2017 us=652543 connect_timeout = 10
Sat Apr 15 12:47:57 2017 us=652547 connect_retry_max = 0
Sat Apr 15 12:47:57 2017 us=652551 socks_proxy_server = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652555 socks_proxy_port = 0
Sat Apr 15 12:47:57 2017 us=652559 socks_proxy_retry = DISABLED
Sat Apr 15 12:47:57 2017 us=652563 tun_mtu = 1500
Sat Apr 15 12:47:57 2017 us=652567 tun_mtu_defined = ENABLED
Sat Apr 15 12:47:57 2017 us=652571 link_mtu = 1500
Sat Apr 15 12:47:57 2017 us=652575 link_mtu_defined = DISABLED
Sat Apr 15 12:47:57 2017 us=652579 tun_mtu_extra = 0
Sat Apr 15 12:47:57 2017 us=652583 tun_mtu_extra_defined = DISABLED
Sat Apr 15 12:47:57 2017 us=652587 mtu_discover_type = -1
Sat Apr 15 12:47:57 2017 us=652591 fragment = 0
Sat Apr 15 12:47:57 2017 us=652595 mssfix = 1450
Sat Apr 15 12:47:57 2017 us=652599 explicit_exit_notification = 0
Sat Apr 15 12:47:57 2017 us=652603 Connection profiles END
Sat Apr 15 12:47:57 2017 us=652607 remote_random = DISABLED
Sat Apr 15 12:47:57 2017 us=652611 ipchange = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652615 dev = 'tun'
Sat Apr 15 12:47:57 2017 us=652619 dev_type = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652623 dev_node = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652627 lladdr = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652631 topology = 1
Sat Apr 15 12:47:57 2017 us=652635 tun_ipv6 = DISABLED
Sat Apr 15 12:47:57 2017 us=652639 ifconfig_local = '10.8.0.1'
Sat Apr 15 12:47:57 2017 us=652643 ifconfig_remote_netmask = '10.8.0.2'
Sat Apr 15 12:47:57 2017 us=652647 ifconfig_noexec = DISABLED
Sat Apr 15 12:47:57 2017 us=652651 ifconfig_nowarn = DISABLED
Sat Apr 15 12:47:57 2017 us=652655 ifconfig_ipv6_local = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652659 ifconfig_ipv6_netbits = 0
Sat Apr 15 12:47:57 2017 us=652663 ifconfig_ipv6_remote = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652667 shaper = 0
Sat Apr 15 12:47:57 2017 us=652671 mtu_test = 0
Sat Apr 15 12:47:57 2017 us=652675 mlock = DISABLED
Sat Apr 15 12:47:57 2017 us=652679 keepalive_ping = 10
Sat Apr 15 12:47:57 2017 us=652683 keepalive_timeout = 120
Sat Apr 15 12:47:57 2017 us=652687 inactivity_timeout = 0
Sat Apr 15 12:47:57 2017 us=652691 ping_send_timeout = 10
Sat Apr 15 12:47:57 2017 us=652695 ping_rec_timeout = 240
Sat Apr 15 12:47:57 2017 us=652699 ping_rec_timeout_action = 2
Sat Apr 15 12:47:57 2017 us=652703 ping_timer_remote = DISABLED
Sat Apr 15 12:47:57 2017 us=652707 remap_sigusr1 = 0
Sat Apr 15 12:47:57 2017 us=652711 persist_tun = ENABLED
Sat Apr 15 12:47:57 2017 us=652715 persist_local_ip = DISABLED
Sat Apr 15 12:47:57 2017 us=652719 persist_remote_ip = DISABLED
Sat Apr 15 12:47:57 2017 us=652723 persist_key = ENABLED
Sat Apr 15 12:47:57 2017 us=652727 passtos = DISABLED
Sat Apr 15 12:47:57 2017 us=652731 resolve_retry_seconds = 1000000000
Sat Apr 15 12:47:57 2017 us=652740 username = 'nobody'
Sat Apr 15 12:47:57 2017 us=652745 groupname = 'nogroup'
Sat Apr 15 12:47:57 2017 us=652749 chroot_dir = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652753 cd_dir = '/etc/openvpn'
Sat Apr 15 12:47:57 2017 us=652757 writepid = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652761 up_script = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652765 down_script = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652768 down_pre = DISABLED
Sat Apr 15 12:47:57 2017 us=652772 up_restart = DISABLED
Sat Apr 15 12:47:57 2017 us=652776 up_delay = DISABLED
Sat Apr 15 12:47:57 2017 us=652780 daemon = ENABLED
Sat Apr 15 12:47:57 2017 us=652784 inetd = 0
Sat Apr 15 12:47:57 2017 us=652788 log = ENABLED
Sat Apr 15 12:47:57 2017 us=652792 suppress_timestamps = DISABLED
Sat Apr 15 12:47:57 2017 us=652796 nice = 0
Sat Apr 15 12:47:57 2017 us=652800 verbosity = 4
Sat Apr 15 12:47:57 2017 us=652804 mute = 0
Sat Apr 15 12:47:57 2017 us=652808 gremlin = 0
Sat Apr 15 12:47:57 2017 us=652812 status_file = 'openvpn-status.log'
Sat Apr 15 12:47:57 2017 us=652816 status_file_version = 1
Sat Apr 15 12:47:57 2017 us=652820 status_file_update_freq = 10
Sat Apr 15 12:47:57 2017 us=652824 occ = ENABLED
Sat Apr 15 12:47:57 2017 us=652828 rcvbuf = 65536
Sat Apr 15 12:47:57 2017 us=652832 sndbuf = 65536
Sat Apr 15 12:47:57 2017 us=652836 mark = 0
Sat Apr 15 12:47:57 2017 us=652840 sockflags = 0
Sat Apr 15 12:47:57 2017 us=652844 fast_io = DISABLED
Sat Apr 15 12:47:57 2017 us=652848 lzo = 7
Sat Apr 15 12:47:57 2017 us=652852 route_script = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652856 route_default_gateway = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652860 route_default_metric = 0
Sat Apr 15 12:47:57 2017 us=652864 route_noexec = DISABLED
Sat Apr 15 12:47:57 2017 us=652868 route_delay = 0
Sat Apr 15 12:47:57 2017 us=652873 route_delay_window = 30
Sat Apr 15 12:47:57 2017 us=652877 route_delay_defined = DISABLED
Sat Apr 15 12:47:57 2017 us=652881 route_nopull = DISABLED
Sat Apr 15 12:47:57 2017 us=652885 route_gateway_via_dhcp = DISABLED
Sat Apr 15 12:47:57 2017 us=652889 max_routes = 100
Sat Apr 15 12:47:57 2017 us=652893 allow_pull_fqdn = DISABLED
Sat Apr 15 12:47:57 2017 us=652898 route 10.8.0.0/255.255.255.0/nil/nil
Sat Apr 15 12:47:57 2017 us=652902 management_addr = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652906 management_port = 0
Sat Apr 15 12:47:57 2017 us=652910 management_user_pass = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652914 management_log_history_cache = 250
Sat Apr 15 12:47:57 2017 us=652918 management_echo_buffer_size = 100
Sat Apr 15 12:47:57 2017 us=652922 management_write_peer_info_file = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652926 management_client_user = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652930 management_client_group = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652935 management_flags = 0
Sat Apr 15 12:47:57 2017 us=652943 shared_secret_file = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=652948 key_direction = 1
Sat Apr 15 12:47:57 2017 us=652952 ciphername_defined = ENABLED
Sat Apr 15 12:47:57 2017 us=652956 ciphername = 'AES-256-CBC'
Sat Apr 15 12:47:57 2017 us=652961 authname_defined = ENABLED
Sat Apr 15 12:47:57 2017 us=652964 authname = 'SHA1'
Sat Apr 15 12:47:57 2017 us=652969 prng_hash = 'SHA1'
Sat Apr 15 12:47:57 2017 us=652973 prng_nonce_secret_len = 16
Sat Apr 15 12:47:57 2017 us=652977 keysize = 0
Sat Apr 15 12:47:57 2017 us=652981 engine = DISABLED
Sat Apr 15 12:47:57 2017 us=652985 replay = ENABLED
Sat Apr 15 12:47:57 2017 us=652989 mute_replay_warnings = DISABLED
Sat Apr 15 12:47:57 2017 us=652993 replay_window = 64
Sat Apr 15 12:47:57 2017 us=652997 replay_time = 15
Sat Apr 15 12:47:57 2017 us=653001 packet_id_file = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653005 use_iv = ENABLED
Sat Apr 15 12:47:57 2017 us=653009 test_crypto = DISABLED
Sat Apr 15 12:47:57 2017 us=653013 tls_server = ENABLED
Sat Apr 15 12:47:57 2017 us=653017 tls_client = DISABLED
Sat Apr 15 12:47:57 2017 us=653021 key_method = 2
Sat Apr 15 12:47:57 2017 us=653029 ca_file = '/root/openvpn-pki/stacked.crt'
Sat Apr 15 12:47:57 2017 us=653033 ca_path = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653037 dh_file = '/root/openvpn-pki/dhparams2048.pem'
Sat Apr 15 12:47:57 2017 us=653041 cert_file = '/root/openvpn-pki/tasha/tasha.openvpn.crt'
Sat Apr 15 12:47:57 2017 us=653046 priv_key_file = '/root/openvpn-pki/tasha/tasha.key'
Sat Apr 15 12:47:57 2017 us=653050 pkcs12_file = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653054 cipher_list = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653058 tls_verify = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653062 tls_export_cert = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653066 verify_x509_type = 0
Sat Apr 15 12:47:57 2017 us=653070 verify_x509_name = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653074 crl_file = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653078 ns_cert_type = 0
Sat Apr 15 12:47:57 2017 us=653082 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653086 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653090 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653094 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653097 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653101 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653105 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653109 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653113 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653117 remote_cert_ku = 0
Sat Apr 15 12:47:57 2017 us=653121 remote_cert_ku[i] = 0
Sat Apr 15 12:47:57 2017 us=653124 remote_cert_ku[i] = 0
Sat Apr 15 12:47:57 2017 us=653128 remote_cert_ku[i] = 0
Sat Apr 15 12:47:57 2017 us=653132 remote_cert_ku[i] = 0
Sat Apr 15 12:47:57 2017 us=653136 remote_cert_ku[i] = 0
Sat Apr 15 12:47:57 2017 us=653140 remote_cert_ku[i] = 0
Sat Apr 15 12:47:57 2017 us=653144 remote_cert_eku = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653148 ssl_flags = 0
Sat Apr 15 12:47:57 2017 us=653152 tls_timeout = 2
Sat Apr 15 12:47:57 2017 us=653156 renegotiate_bytes = 0
Sat Apr 15 12:47:57 2017 us=653160 renegotiate_packets = 0
Sat Apr 15 12:47:57 2017 us=653164 renegotiate_seconds = 3600
Sat Apr 15 12:47:57 2017 us=653168 handshake_window = 60
Sat Apr 15 12:47:57 2017 us=653172 transition_window = 3600
Sat Apr 15 12:47:57 2017 us=653176 single_session = DISABLED
Sat Apr 15 12:47:57 2017 us=653180 push_peer_info = DISABLED
Sat Apr 15 12:47:57 2017 us=653184 tls_exit = DISABLED
Sat Apr 15 12:47:57 2017 us=653188 tls_auth_file = '/root/openvpn-pki/ta.key'
Sat Apr 15 12:47:57 2017 us=653192 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653196 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653200 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653204 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653210 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653215 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653219 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653223 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653226 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653230 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653234 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653238 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653242 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653246 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653250 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653254 pkcs11_protected_authentication = DISABLED
Sat Apr 15 12:47:57 2017 us=653259 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653263 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653267 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653274 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653278 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653282 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653286 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653296 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653302 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653306 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653310 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653314 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653318 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653322 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653326 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653329 pkcs11_private_mode = 00000000
Sat Apr 15 12:47:57 2017 us=653333 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653337 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653341 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653345 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653349 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653353 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653357 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653360 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653364 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653368 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653372 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653376 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653380 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653383 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653387 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653391 pkcs11_cert_private = DISABLED
Sat Apr 15 12:47:57 2017 us=653395 pkcs11_pin_cache_period = -1
Sat Apr 15 12:47:57 2017 us=653399 pkcs11_id = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653403 pkcs11_id_management = DISABLED
Sat Apr 15 12:47:57 2017 us=653408 server_network = 10.8.0.0
Sat Apr 15 12:47:57 2017 us=653413 server_netmask = 255.255.255.0
Sat Apr 15 12:47:57 2017 us=653421 server_network_ipv6 = ::
Sat Apr 15 12:47:57 2017 us=653425 server_netbits_ipv6 = 0
Sat Apr 15 12:47:57 2017 us=653430 server_bridge_ip = 0.0.0.0
Sat Apr 15 12:47:57 2017 us=653435 server_bridge_netmask = 0.0.0.0
Sat Apr 15 12:47:57 2017 us=653439 server_bridge_pool_start = 0.0.0.0
Sat Apr 15 12:47:57 2017 us=653444 server_bridge_pool_end = 0.0.0.0
Sat Apr 15 12:47:57 2017 us=653448 push_entry = 'route 10.8.0.0 255.255.255.0'
Sat Apr 15 12:47:57 2017 us=653452 push_entry = 'topology net30'
Sat Apr 15 12:47:57 2017 us=653457 push_entry = 'ping 10'
Sat Apr 15 12:47:57 2017 us=653461 push_entry = 'ping-restart 120'
Sat Apr 15 12:47:57 2017 us=653465 ifconfig_pool_defined = ENABLED
Sat Apr 15 12:47:57 2017 us=653472 ifconfig_pool_start = 10.8.0.4
Sat Apr 15 12:47:57 2017 us=653478 ifconfig_pool_end = 10.8.0.251
Sat Apr 15 12:47:57 2017 us=653483 ifconfig_pool_netmask = 0.0.0.0
Sat Apr 15 12:47:57 2017 us=653487 ifconfig_pool_persist_filename = 'ipp.txt'
Sat Apr 15 12:47:57 2017 us=653491 ifconfig_pool_persist_refresh_freq = 600
Sat Apr 15 12:47:57 2017 us=653495 ifconfig_ipv6_pool_defined = DISABLED
Sat Apr 15 12:47:57 2017 us=653500 ifconfig_ipv6_pool_base = ::
Sat Apr 15 12:47:57 2017 us=653504 ifconfig_ipv6_pool_netbits = 0
Sat Apr 15 12:47:57 2017 us=653509 n_bcast_buf = 256
Sat Apr 15 12:47:57 2017 us=653513 tcp_queue_limit = 64
Sat Apr 15 12:47:57 2017 us=653517 real_hash_size = 256
Sat Apr 15 12:47:57 2017 us=653521 virtual_hash_size = 256
Sat Apr 15 12:47:57 2017 us=653525 client_connect_script = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653529 learn_address_script = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653533 client_disconnect_script = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653537 client_config_dir = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653545 ccd_exclusive = DISABLED
Sat Apr 15 12:47:57 2017 us=653549 tmp_dir = '/tmp'
Sat Apr 15 12:47:57 2017 us=653553 push_ifconfig_defined = DISABLED
Sat Apr 15 12:47:57 2017 us=653558 push_ifconfig_local = 0.0.0.0
Sat Apr 15 12:47:57 2017 us=653563 push_ifconfig_remote_netmask = 0.0.0.0
Sat Apr 15 12:47:57 2017 us=653567 push_ifconfig_ipv6_defined = DISABLED
Sat Apr 15 12:47:57 2017 us=653573 push_ifconfig_ipv6_local = ::/0
Sat Apr 15 12:47:57 2017 us=653578 push_ifconfig_ipv6_remote = ::
Sat Apr 15 12:47:57 2017 us=653582 enable_c2c = ENABLED
Sat Apr 15 12:47:57 2017 us=653586 duplicate_cn = DISABLED
Sat Apr 15 12:47:57 2017 us=653591 cf_max = 0
Sat Apr 15 12:47:57 2017 us=653595 cf_per = 0
Sat Apr 15 12:47:57 2017 us=653599 max_clients = 1024
Sat Apr 15 12:47:57 2017 us=653603 max_routes_per_client = 256
Sat Apr 15 12:47:57 2017 us=653607 auth_user_pass_verify_script = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653611 auth_user_pass_verify_script_via_file = DISABLED
Sat Apr 15 12:47:57 2017 us=653615 port_share_host = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653619 port_share_port = 0
Sat Apr 15 12:47:57 2017 us=653623 client = DISABLED
Sat Apr 15 12:47:57 2017 us=653627 pull = DISABLED
Sat Apr 15 12:47:57 2017 us=653631 auth_user_pass_file = '[UNDEF]'
Sat Apr 15 12:47:57 2017 us=653641 OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 12 2015
Sat Apr 15 12:47:57 2017 us=653653 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.08
Sat Apr 15 12:47:57 2017 us=654186 Diffie-Hellman initialized with 2048 bit key
Sat Apr 15 12:47:57 2017 us=654489 WARNING: file '/root/openvpn-pki/tasha/tasha.key' is group or others accessible
Sat Apr 15 12:47:57 2017 us=654744 Control Channel Authentication: using '/root/openvpn-pki/ta.key' as a OpenVPN static key file
Sat Apr 15 12:47:57 2017 us=654761 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:47:57 2017 us=654767 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:47:57 2017 us=654775 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Apr 15 12:47:57 2017 us=654789 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sat Apr 15 12:47:57 2017 us=654879 ROUTE_GATEWAY a.b.c.d/255.255.255.0 IFACE=eth0 HWADDR=f2:3c:91:e4:6f:07
Sat Apr 15 12:47:57 2017 us=655906 TUN/TAP device tun0 opened
Sat Apr 15 12:47:57 2017 us=655928 TUN/TAP TX queue length set to 100
Sat Apr 15 12:47:57 2017 us=655939 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Apr 15 12:47:57 2017 us=655954 /sbin/ip link set dev tun0 up mtu 1500
Sat Apr 15 12:47:57 2017 us=656882 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sat Apr 15 12:47:57 2017 us=659134 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sat Apr 15 12:47:57 2017 us=659966 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Apr 15 12:47:57 2017 us=660507 GID set to nogroup
Sat Apr 15 12:47:57 2017 us=661055 UID set to nobody
Sat Apr 15 12:47:57 2017 us=661087 UDPv4 link local (bound): [undef]
Sat Apr 15 12:47:57 2017 us=661097 UDPv4 link remote: [undef]
Sat Apr 15 12:47:57 2017 us=661106 MULTI: multi_init called, r=256 v=256
Sat Apr 15 12:47:57 2017 us=661168 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Apr 15 12:47:57 2017 us=661180 ifconfig_pool_read(), in='x.x.x,10.8.0.4', TODO: IPv6
Sat Apr 15 12:47:57 2017 us=661191 succeeded -> ifconfig_pool_set()
Sat Apr 15 12:47:57 2017 us=661196 ifconfig_pool_read(), in='Debian Stable Guest VM,10.8.0.8', TODO: IPv6
Sat Apr 15 12:47:57 2017 us=661201 succeeded -> ifconfig_pool_set()
Sat Apr 15 12:47:57 2017 us=661205 ifconfig_pool_read(), in='Ratbone Windows 10 Desktop,10.8.0.12', TODO: IPv6
Sat Apr 15 12:47:57 2017 us=661209 succeeded -> ifconfig_pool_set()
Sat Apr 15 12:47:57 2017 us=661213 ifconfig_pool_read(), in='firx MacBook Pro,10.8.0.16', TODO: IPv6
Sat Apr 15 12:47:57 2017 us=661218 succeeded -> ifconfig_pool_set()
Sat Apr 15 12:47:57 2017 us=661230 ifconfig_pool_read(), in='Binkley Windows 7 Pro MICROS Server,10.8.0.20', TODO: IPv6
Sat Apr 15 12:47:57 2017 us=661234 succeeded -> ifconfig_pool_set()
Sat Apr 15 12:47:57 2017 us=661238 ifconfig_pool_read(), in='Debian Stable 7.11 DB/Apache2,10.8.0.24', TODO: IPv6
Sat Apr 15 12:47:57 2017 us=661242 succeeded -> ifconfig_pool_set()
Sat Apr 15 12:47:57 2017 us=661247 IFCONFIG POOL LIST
Sat Apr 15 12:47:57 2017 us=661252 x.x.x,10.8.0.4
Sat Apr 15 12:47:57 2017 us=661256 Debian Stable Guest VM,10.8.0.8
Sat Apr 15 12:47:57 2017 us=661260 Ratbone Windows 10 Desktop,10.8.0.12
Sat Apr 15 12:47:57 2017 us=661265 firx MacBook Pro,10.8.0.16
Sat Apr 15 12:47:57 2017 us=661269 Binkley Windows 7 Pro MICROS Server,10.8.0.20
Sat Apr 15 12:47:57 2017 us=661274 Debian Stable 7.11 DB/Apache2,10.8.0.24
Sat Apr 15 12:47:57 2017 us=661301 Initialization Sequence Completed
Sat Apr 15 12:49:19 2017 us=223365 MULTI: multi_create_instance called
Sat Apr 15 12:49:19 2017 us=223482 a.b.c.d:52018 Re-using SSL/TLS context
Sat Apr 15 12:49:19 2017 us=223544 a.b.c.d:52018 LZO compression initialized
Sat Apr 15 12:49:19 2017 us=223952 a.b.c.d:52018 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Apr 15 12:49:19 2017 us=223968 a.b.c.d:52018 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Apr 15 12:49:19 2017 us=224009 a.b.c.d:52018 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Sat Apr 15 12:49:19 2017 us=224016 a.b.c.d:52018 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Sat Apr 15 12:49:19 2017 us=224050 a.b.c.d:52018 Local Options hash (VER=V4): '162b04de'
Sat Apr 15 12:49:19 2017 us=224070 a.b.c.d:52018 Expected Remote Options hash (VER=V4): '9e7066d2'
Sat Apr 15 12:49:19 2017 us=224099 a.b.c.d:52018 TLS: Initial packet from [AF_INET]a.b.c.d:52018, sid=d3d133e0 8b4fc9c7
Sat Apr 15 12:49:19 2017 us=710511 a.b.c.d:52018 VERIFY OK: depth=2, C=US, O=xxxx, CN=Root CA
Sat Apr 15 12:49:19 2017 us=710821 a.b.c.d:52018 VERIFY OK: depth=1, C=US, O=xxxx, CN=Sub CA
Sat Apr 15 12:49:19 2017 us=711122 a.b.c.d:52018 VERIFY OK: depth=0, C=US, ST=New York, O=xxxx, OU=xxxxx Street Brewing Co., CN=Ratbone Windows 10 Desktop, emailAddress=xxxxx@gmail.com
Sat Apr 15 12:49:19 2017 us=761498 a.b.c.d:52018 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Apr 15 12:49:19 2017 us=761549 a.b.c.d:52018 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:49:19 2017 us=761556 a.b.c.d:52018 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Apr 15 12:49:19 2017 us=761561 a.b.c.d:52018 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:49:19 2017 us=783697 a.b.c.d:52018 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Apr 15 12:49:19 2017 us=783769 a.b.c.d:52018 [Ratbone Windows 10 Desktop] Peer Connection Initiated with [AF_INET]a.b.c.d:52018
Sat Apr 15 12:49:19 2017 us=783790 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI_sva: pool returned IPv4=10.8.0.14, IPv6=(Not enabled)
Sat Apr 15 12:49:19 2017 us=783817 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: Learn: 10.8.0.14 -> Ratbone Windows 10 Desktop/a.b.c.d:52018
Sat Apr 15 12:49:19 2017 us=783824 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: primary virtual IP for Ratbone Windows 10 Desktop/a.b.c.d:52018: 10.8.0.14
Sat Apr 15 12:49:20 2017 us=832539 Ratbone Windows 10 Desktop/a.b.c.d:52018 PUSH: Received control message: 'PUSH_REQUEST'
Sat Apr 15 12:49:20 2017 us=832601 Ratbone Windows 10 Desktop/a.b.c.d:52018 send_push_reply(): safe_cap=940
Sat Apr 15 12:49:20 2017 us=832638 Ratbone Windows 10 Desktop/a.b.c.d:52018 SENT CONTROL [Ratbone Windows 10 Desktop]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13' (status=1)
Sat Apr 15 12:49:20 2017 us=881670 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=886525 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=896284 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=901749 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=927480 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [::], packet dropped
Sat Apr 15 12:49:20 2017 us=927569 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=927586 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=968260 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=968366 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=968389 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=975702 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=975810 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=975839 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:20 2017 us=981107 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=301320 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=380142 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=380227 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=380250 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=396422 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=396510 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=396528 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=396540 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=425695 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=723600 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=723702 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=728918 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=895268 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=927082 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:21 2017 us=927197 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:22 2017 us=144597 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:23 2017 us=895217 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:23 2017 us=960655 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:23 2017 us=960723 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:23 2017 us=967255 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:23 2017 us=971850 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:24 2017 us=379214 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:24 2017 us=428542 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:24 2017 us=926718 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:26 2017 us=6063 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:26 2017 us=6128 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:26 2017 us=11364 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:26 2017 us=427577 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:26 2017 us=427640 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:26 2017 us=427650 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:27 2017 us=901534 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:28 2017 us=934772 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:35 2017 us=902596 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:51 2017 us=909656 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:49:56 2017 us=390419 MULTI: multi_create_instance called
Sat Apr 15 12:49:56 2017 us=390522 e.f.g.h:58425 Re-using SSL/TLS context
Sat Apr 15 12:49:56 2017 us=390571 e.f.g.h:58425 LZO compression initialized
Sat Apr 15 12:49:56 2017 us=390734 e.f.g.h:58425 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Apr 15 12:49:56 2017 us=390752 e.f.g.h:58425 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Apr 15 12:49:56 2017 us=390801 e.f.g.h:58425 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Sat Apr 15 12:49:56 2017 us=390813 e.f.g.h:58425 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Sat Apr 15 12:49:56 2017 us=390837 e.f.g.h:58425 Local Options hash (VER=V4): '162b04de'
Sat Apr 15 12:49:56 2017 us=390853 e.f.g.h:58425 Expected Remote Options hash (VER=V4): '9e7066d2'
Sat Apr 15 12:49:56 2017 us=390890 e.f.g.h:58425 TLS: Initial packet from [AF_INET]e.f.g.h:58425, sid=5d1f63a3 400fb7a8
Sat Apr 15 12:49:57 2017 us=371036 e.f.g.h:58425 VERIFY OK: depth=2, C=US, O=xxxx, CN=Root CA
Sat Apr 15 12:49:57 2017 us=371424 e.f.g.h:58425 VERIFY OK: depth=1, C=US, O=xxxx, CN=Sub CA
Sat Apr 15 12:49:57 2017 us=371796 e.f.g.h:58425 VERIFY OK: depth=0, C=US, ST=New York, O=xxxx, OU=xxxxx Street Brewing Co., CN=Debian Stable 7.11 DB/Apache2, emailAddress=xxxxx@gmail.com
Sat Apr 15 12:49:57 2017 us=477554 e.f.g.h:58425 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Apr 15 12:49:57 2017 us=477606 e.f.g.h:58425 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:49:57 2017 us=477613 e.f.g.h:58425 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Apr 15 12:49:57 2017 us=477619 e.f.g.h:58425 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:49:57 2017 us=517946 e.f.g.h:58425 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Apr 15 12:49:57 2017 us=518017 e.f.g.h:58425 [Debian Stable 7.11 DB/Apache2] Peer Connection Initiated with [AF_INET]e.f.g.h:58425
Sat Apr 15 12:49:57 2017 us=518052 Debian Stable 7.11 DB/Apache2/e.f.g.h:58425 MULTI_sva: pool returned IPv4=10.8.0.26, IPv6=(Not enabled)
Sat Apr 15 12:49:57 2017 us=518080 Debian Stable 7.11 DB/Apache2/e.f.g.h:58425 MULTI: Learn: 10.8.0.26 -> Debian Stable 7.11 DB/Apache2/e.f.g.h:58425
Sat Apr 15 12:49:57 2017 us=518087 Debian Stable 7.11 DB/Apache2/e.f.g.h:58425 MULTI: primary virtual IP for Debian Stable 7.11 DB/Apache2/e.f.g.h:58425: 10.8.0.26
Sat Apr 15 12:49:58 2017 us=339076 MULTI: multi_create_instance called
Sat Apr 15 12:49:58 2017 us=340198 e.f.g.h:50808 Re-using SSL/TLS context
Sat Apr 15 12:49:58 2017 us=340248 e.f.g.h:50808 LZO compression initialized
Sat Apr 15 12:49:58 2017 us=340407 e.f.g.h:50808 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Apr 15 12:49:58 2017 us=340425 e.f.g.h:50808 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Apr 15 12:49:58 2017 us=340464 e.f.g.h:50808 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Sat Apr 15 12:49:58 2017 us=340473 e.f.g.h:50808 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Sat Apr 15 12:49:58 2017 us=340496 e.f.g.h:50808 Local Options hash (VER=V4): '162b04de'
Sat Apr 15 12:49:58 2017 us=340511 e.f.g.h:50808 Expected Remote Options hash (VER=V4): '9e7066d2'
Sat Apr 15 12:49:58 2017 us=340552 e.f.g.h:50808 TLS: Initial packet from [AF_INET]e.f.g.h:50808, sid=11d03721 86e72bd3
Sat Apr 15 12:49:59 2017 us=799 e.f.g.h:50808 VERIFY OK: depth=2, C=US, O=xxxx, CN=Root CA
Sat Apr 15 12:49:59 2017 us=1325 e.f.g.h:50808 VERIFY OK: depth=1, C=US, O=xxxx, CN=Sub CA
Sat Apr 15 12:49:59 2017 us=1854 e.f.g.h:50808 VERIFY OK: depth=0, C=US, ST=New York, O=xxxx, OU=xxxxx Street Brewing Co., CN=Binkley Windows 7 Pro MICROS Server, emailAddress=xxxxx@gmail.com
Sat Apr 15 12:49:59 2017 us=82090 e.f.g.h:50808 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Apr 15 12:49:59 2017 us=82207 e.f.g.h:50808 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:49:59 2017 us=82220 e.f.g.h:50808 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Apr 15 12:49:59 2017 us=82230 e.f.g.h:50808 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 15 12:49:59 2017 us=118946 e.f.g.h:50808 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Apr 15 12:49:59 2017 us=119039 e.f.g.h:50808 [Binkley Windows 7 Pro MICROS Server] Peer Connection Initiated with [AF_INET]e.f.g.h:50808
Sat Apr 15 12:49:59 2017 us=119084 Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808 MULTI_sva: pool returned IPv4=10.8.0.22, IPv6=(Not enabled)
Sat Apr 15 12:49:59 2017 us=119133 Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808 MULTI: Learn: 10.8.0.22 -> Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808
Sat Apr 15 12:49:59 2017 us=119145 Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808 MULTI: primary virtual IP for Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808: 10.8.0.22
Sat Apr 15 12:50:00 2017 us=176087 Debian Stable 7.11 DB/Apache2/e.f.g.h:58425 PUSH: Received control message: 'PUSH_REQUEST'
Sat Apr 15 12:50:00 2017 us=176159 Debian Stable 7.11 DB/Apache2/e.f.g.h:58425 send_push_reply(): safe_cap=940
Sat Apr 15 12:50:00 2017 us=176194 Debian Stable 7.11 DB/Apache2/e.f.g.h:58425 SENT CONTROL [Debian Stable 7.11 DB/Apache2]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.26 10.8.0.25' (status=1)
Sat Apr 15 12:50:00 2017 us=218743 Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808 PUSH: Received control message: 'PUSH_REQUEST'
Sat Apr 15 12:50:00 2017 us=218810 Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808 send_push_reply(): safe_cap=940
Sat Apr 15 12:50:00 2017 us=218875 Binkley Windows 7 Pro MICROS Server/e.f.g.h:50808 SENT CONTROL [Binkley Windows 7 Pro MICROS Server]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.22 10.8.0.21' (status=1)
Sat Apr 15 12:50:20 2017 us=879361 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=883773 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=890739 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=895290 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=901998 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=902071 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=902094 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=902114 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=902146 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:20 2017 us=939305 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:21 2017 us=315839 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:50:23 2017 us=925078 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:51:09 2017 us=147380 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped
Sat Apr 15 12:51:09 2017 us=438671 Ratbone Windows 10 Desktop/a.b.c.d:52018 MULTI: bad source address from client [fe80::fc9f:f7ae:fb83:8ba5], packet dropped

TinCanTech

omortis wroteFor the record, Windows 10 is connected just fine right now and the connection seems stable,

OK.

omortis wrotethough the OpenVPN GUI icon is not "green"? It may be fine now?

Look for errors in your client log file.

omortis wroteThere are some packet drops at the bottom of this log

The packets are dropped by the server because the server does not know the source address fe80::

In your case this can be safely ignored because your VPN does not configure or use IPv6.

omortis

TinCanTech wroteLook for errors in your client log file.

The OpenVPN client log is clean and looks good. The OpenVPN GUI log is from 4 days ago and shows all the errors above. It seems the OpenVPN service and GUI are disjoint - the OpenVPN service is fine (rock solid and stable for over an hour now) but the GUI does not think I'm connected. The GUI is extraneous to me, I really don't care about it, but I would like to know what happened...

TinCanTech wroteThe packets are dropped by the server because the server does not know the source address fe80::

In your case this can be safely ignored because your VPN does not configure or use IPv6.

Yes, that's what I thought. Someday!

Thanks for the continued feedback, I appreciate it.

JB

TinCanTech

omortis wroteThe OpenVPN client log is clean and looks good. The OpenVPN GUI log is from 4 days ago and shows all the errors above. It seems the OpenVPN service and GUI are disjoint - the OpenVPN service is fine (rock solid and stable for over an hour now) but the GUI does not think I'm connected. The GUI is extraneous to me, I really don't care about it, but I would like to know what happened...

The openvpn-GUI only shows status for instances started by the openvpn-GUI.

The openvpn log is written to different places depending on how you run openvpn.

Openvpn 2.4.1 Log:

Started with openvpn-GUI
Log file is written to: \Users\{user-name}\Openvpn\Log\{config-file-name}.log
Started with openvpn-service or openvpn-legacy-service
Log file is written to: \Program Files\Openvpn\Log\{config-file-name}.log