My server is hosted on a Ubuntu V16.04 LTS
My client is hosted on Win10
port 1133
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
push "route 10.8.0.1 255.255.255.0"
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote 5.xx.xx.x 1133
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
comp-lzo
setenv opt block-outside-dns
key-direction 1
verb 3
Client log
Wed May 03 01:00:16 2017 OpenVPN 2.4.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 22 2017
Wed May 03 01:00:16 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Wed May 03 01:00:16 2017 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Enter Management Password:
Wed May 03 01:00:16 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed May 03 01:00:16 2017 Need hold release from management interface, waiting...
Wed May 03 01:00:16 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed May 03 01:00:16 2017 MANAGEMENT: CMD 'state on'
Wed May 03 01:00:16 2017 MANAGEMENT: CMD 'log all on'
Wed May 03 01:00:16 2017 MANAGEMENT: CMD 'echo all on'
Wed May 03 01:00:16 2017 MANAGEMENT: CMD 'hold off'
Wed May 03 01:00:16 2017 MANAGEMENT: CMD 'hold release'
Wed May 03 01:00:17 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 03 01:00:17 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 03 01:00:17 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]5.xx.xx.184:1133
Wed May 03 01:00:17 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Wed May 03 01:00:17 2017 UDP link local: (not bound)
Wed May 03 01:00:17 2017 UDP link remote: [AF_INET]5.xx.xx.184:1133
Wed May 03 01:00:17 2017 MANAGEMENT: >STATE:1493769617,WAIT,,,,,,
Wed May 03 01:00:17 2017 MANAGEMENT: >STATE:1493769617,AUTH,,,,,,
Wed May 03 01:00:17 2017 TLS: Initial packet from [AF_INET]5.xx.xx.184:1133, sid=ed49bab2 2286540c
Wed May 03 01:00:17 2017 VERIFY OK: depth=1, CN=ChangeMe
Wed May 03 01:00:17 2017 VERIFY KU OK
Wed May 03 01:00:17 2017 Validating certificate extended key usage
Wed May 03 01:00:17 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed May 03 01:00:17 2017 VERIFY EKU OK
Wed May 03 01:00:17 2017 VERIFY OK: depth=0, CN=server
Wed May 03 01:00:17 2017 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed May 03 01:00:17 2017 [server] Peer Connection Initiated with [AF_INET]5.xx.xx.184:1133
Wed May 03 01:00:18 2017 MANAGEMENT: >STATE:1493769618,GET_CONFIG,,,,,,
Wed May 03 01:00:18 2017 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed May 03 01:00:18 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1 255.255.255.0,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Wed May 03 01:00:18 2017 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 03 01:00:18 2017 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 03 01:00:18 2017 OPTIONS IMPORT: route options modified
Wed May 03 01:00:18 2017 OPTIONS IMPORT: route-related options modified
Wed May 03 01:00:18 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed May 03 01:00:18 2017 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed May 03 01:00:18 2017 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 03 01:00:18 2017 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed May 03 01:00:18 2017 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 03 01:00:18 2017 interactive service msg_channel=652
Wed May 03 01:00:18 2017 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=5 HWADDR=00:19:xx:5b:eb:b9
Wed May 03 01:00:18 2017 open_tun
Wed May 03 01:00:18 2017 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{D508BAEC-180D-xxx-xx48-0A4F13DC21D1}.tap
Wed May 03 01:00:18 2017 TAP-Windows Driver Version 9.21
Wed May 03 01:00:18 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Wed May 03 01:00:18 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {D508BAEC-180D-408E-B348-0A4F13DC21D1} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Wed May 03 01:00:18 2017 Successful ARP Flush on interface [6] {D508BAEC-180D-xxx-B348-0A4F13DC21D1}
Wed May 03 01:00:18 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed May 03 01:00:18 2017 MANAGEMENT: >STATE:1493769618,ASSIGN_IP,,10.8.0.2,,,,
Wed May 03 01:00:18 2017 Blocking outside dns using service succeeded.
Wed May 03 01:00:23 2017 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Wed May 03 01:00:23 2017 C:\Windows\system32\route.exe ADD 5.xx.xx.184 MASK 255.255.255.255 192.168.1.1
Wed May 03 01:00:23 2017 Route addition via service succeeded
Wed May 03 01:00:23 2017 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed May 03 01:00:23 2017 Route addition via service succeeded
Wed May 03 01:00:23 2017 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Wed May 03 01:00:23 2017 Route addition via service succeeded
Wed May 03 01:00:23 2017 MANAGEMENT: >STATE:1493769623,ADD_ROUTES,,,,,,
Wed May 03 01:00:23 2017 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.0 10.8.0.1
Wed May 03 01:00:23 2017 ROUTE: route addition failed using service: The parameter is incorrect. [status=87 if_index=6]
Wed May 03 01:00:23 2017 Route addition via service failed
Wed May 03 01:00:23 2017 Initialization Sequence Completed
Wed May 03 01:00:23 2017 MANAGEMENT: >STATE:1493769623,CONNECTED,SUCCESS,10.8.0.2,5.39.79.184,1133,,
