Hello,
Recently, I installed an OpenVPN server on my Raspberry Pi using the script from pivpn.io. Connecting to this server works fine from my Android phone. However, if I try to connect from my laptop running Windows 8.1, it connects, but the VPN client has no DNS. I can visit web sites on the client by entering their IP directly, but if I try to enter a normal URL with hostname, I get an error message saying that DNS resolution failed. I cannot resolve any DNS names and therefore cannot visit any sites the regular way. I can ping the DNS server, oddly enough.
On the Android client, using this VPN server works fine, even if I turn off OpenVPN Connect's "DNS Fallback" option. I have configured my server to pass the Google DNS servers 8.8.8.8 and 8.8.4.4 (which are passed to the client, as you can see in the logs).
How do I get the VPN to work properly on the Windows 8.1 client, including DNS? Thanks in advance.
Environment specs and anonymised configuration/log files follow:
*** Server info:
Raspberry Pi Model 3B
Raspbian Jessie (Linux 4.9.35-v7+ #1014 SMP Fri Jun 30 14:47:43 BST 2017 armv7l GNU/Linux)
OpenVPN 2.3.4-5+deb8u2
*** Android client info:
Android 6.0.1 OEM (no root)
Samsung Galaxy S5 mini (SM-G800F)
OpenVPN Connect 1.1.17 (build 76, OpenVPN core 3.0.12)
*** Windows client info:
Windows 8.1 64-bit
OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 20 2017
OpenVPN GUI v11.7.0.0
*** Windows client log:
Fri Aug 25 22:03:46 2017 pkcs11_protected_authentication = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_private_mode = 00000000
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_cert_private = DISABLED
Fri Aug 25 22:03:46 2017 pkcs11_pin_cache_period = -1
Fri Aug 25 22:03:46 2017 pkcs11_id = '[UNDEF]'
Fri Aug 25 22:03:46 2017 pkcs11_id_management = DISABLED
Fri Aug 25 22:03:46 2017 server_network = 0.0.0.0
Fri Aug 25 22:03:46 2017 server_netmask = 0.0.0.0
Fri Aug 25 22:03:46 2017 server_network_ipv6 = ::
Fri Aug 25 22:03:46 2017 server_netbits_ipv6 = 0
Fri Aug 25 22:03:46 2017 server_bridge_ip = 0.0.0.0
Fri Aug 25 22:03:46 2017 server_bridge_netmask = 0.0.0.0
Fri Aug 25 22:03:46 2017 server_bridge_pool_start = 0.0.0.0
Fri Aug 25 22:03:46 2017 server_bridge_pool_end = 0.0.0.0
Fri Aug 25 22:03:46 2017 ifconfig_pool_defined = DISABLED
Fri Aug 25 22:03:46 2017 ifconfig_pool_start = 0.0.0.0
Fri Aug 25 22:03:46 2017 ifconfig_pool_end = 0.0.0.0
Fri Aug 25 22:03:46 2017 ifconfig_pool_netmask = 0.0.0.0
Fri Aug 25 22:03:46 2017 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Aug 25 22:03:46 2017 ifconfig_pool_persist_refresh_freq = 600
Fri Aug 25 22:03:46 2017 ifconfig_ipv6_pool_defined = DISABLED
Fri Aug 25 22:03:46 2017 ifconfig_ipv6_pool_base = ::
Fri Aug 25 22:03:46 2017 ifconfig_ipv6_pool_netbits = 0
Fri Aug 25 22:03:46 2017 n_bcast_buf = 256
Fri Aug 25 22:03:46 2017 tcp_queue_limit = 64
Fri Aug 25 22:03:46 2017 real_hash_size = 256
Fri Aug 25 22:03:46 2017 virtual_hash_size = 256
Fri Aug 25 22:03:46 2017 client_connect_script = '[UNDEF]'
Fri Aug 25 22:03:46 2017 learn_address_script = '[UNDEF]'
Fri Aug 25 22:03:46 2017 client_disconnect_script = '[UNDEF]'
Fri Aug 25 22:03:46 2017 client_config_dir = '[UNDEF]'
Fri Aug 25 22:03:46 2017 ccd_exclusive = DISABLED
Fri Aug 25 22:03:46 2017 tmp_dir = 'C:\Users\IByte\AppData\Local\Temp\'
Fri Aug 25 22:03:46 2017 push_ifconfig_defined = DISABLED
Fri Aug 25 22:03:46 2017 push_ifconfig_local = 0.0.0.0
Fri Aug 25 22:03:46 2017 push_ifconfig_remote_netmask = 0.0.0.0
Fri Aug 25 22:03:46 2017 push_ifconfig_ipv6_defined = DISABLED
Fri Aug 25 22:03:46 2017 push_ifconfig_ipv6_local = ::/0
Fri Aug 25 22:03:46 2017 push_ifconfig_ipv6_remote = ::
Fri Aug 25 22:03:46 2017 enable_c2c = DISABLED
Fri Aug 25 22:03:46 2017 duplicate_cn = DISABLED
Fri Aug 25 22:03:46 2017 cf_max = 0
Fri Aug 25 22:03:46 2017 cf_per = 0
Fri Aug 25 22:03:46 2017 max_clients = 1024
Fri Aug 25 22:03:46 2017 max_routes_per_client = 256
Fri Aug 25 22:03:46 2017 auth_user_pass_verify_script = '[UNDEF]'
Fri Aug 25 22:03:46 2017 auth_user_pass_verify_script_via_file = DISABLED
Fri Aug 25 22:03:46 2017 auth_token_generate = DISABLED
Fri Aug 25 22:03:46 2017 auth_token_lifetime = 0
Fri Aug 25 22:03:46 2017 client = ENABLED
Fri Aug 25 22:03:46 2017 pull = ENABLED
Fri Aug 25 22:03:46 2017 auth_user_pass_file = '[UNDEF]'
Fri Aug 25 22:03:46 2017 show_net_up = DISABLED
Fri Aug 25 22:03:46 2017 route_method = 3
Fri Aug 25 22:03:46 2017 block_outside_dns = DISABLED
Fri Aug 25 22:03:46 2017 ip_win32_defined = DISABLED
Fri Aug 25 22:03:46 2017 ip_win32_type = 3
Fri Aug 25 22:03:46 2017 dhcp_masq_offset = 0
Fri Aug 25 22:03:46 2017 dhcp_lease_time = 31536000
Fri Aug 25 22:03:46 2017 tap_sleep = 0
Fri Aug 25 22:03:46 2017 dhcp_options = DISABLED
Fri Aug 25 22:03:46 2017 dhcp_renew = DISABLED
Fri Aug 25 22:03:46 2017 dhcp_pre_release = DISABLED
Fri Aug 25 22:03:46 2017 domain = '[UNDEF]'
Fri Aug 25 22:03:46 2017 netbios_scope = '[UNDEF]'
Fri Aug 25 22:03:46 2017 netbios_node_type = 0
Fri Aug 25 22:03:46 2017 disable_nbt = DISABLED
Fri Aug 25 22:03:46 2017 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jun 20 2017
Fri Aug 25 22:03:46 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Aug 25 22:03:46 2017 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Fri Aug 25 22:03:46 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri Aug 25 22:03:46 2017 Need hold release from management interface, waiting...
Fri Aug 25 22:03:47 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri Aug 25 22:03:47 2017 MANAGEMENT: CMD 'state on'
Fri Aug 25 22:03:47 2017 MANAGEMENT: CMD 'log all on'
Fri Aug 25 22:03:47 2017 MANAGEMENT: CMD 'echo all on'
Fri Aug 25 22:03:47 2017 MANAGEMENT: CMD 'hold off'
Fri Aug 25 22:03:47 2017 MANAGEMENT: CMD 'hold release'
Fri Aug 25 22:03:54 2017 MANAGEMENT: CMD 'password [...]'
Fri Aug 25 22:03:54 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Aug 25 22:03:54 2017 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 22:03:54 2017 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 22:03:54 2017 LZO compression initializing
Fri Aug 25 22:03:54 2017 Control Channel MTU parms [ L:1622 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Fri Aug 25 22:03:54 2017 MANAGEMENT: >STATE:1503691434,RESOLVE,,,,,,
Fri Aug 25 22:03:55 2017 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Fri Aug 25 22:03:55 2017 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Aug 25 22:03:55 2017 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Aug 25 22:03:55 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]{SERVER-IP-ADDRESS}:1999
Fri Aug 25 22:03:55 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Fri Aug 25 22:03:55 2017 UDP link local: (not bound)
Fri Aug 25 22:03:55 2017 UDP link remote: [AF_INET]{SERVER-IP-ADDRESS}:1999
Fri Aug 25 22:03:55 2017 MANAGEMENT: >STATE:1503691435,WAIT,,,,,,
Fri Aug 25 22:03:55 2017 MANAGEMENT: >STATE:1503691435,AUTH,,,,,,
Fri Aug 25 22:03:55 2017 TLS: Initial packet from [AF_INET]{SERVER-IP-ADDRESS}:1999, sid=02b947b7 415b6172
Fri Aug 25 22:03:55 2017 VERIFY OK: depth=1, CN=ChangeMe
Fri Aug 25 22:03:55 2017 VERIFY KU OK
Fri Aug 25 22:03:55 2017 Validating certificate extended key usage
Fri Aug 25 22:03:55 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Aug 25 22:03:55 2017 VERIFY EKU OK
Fri Aug 25 22:03:55 2017 VERIFY X509NAME OK: CN=server
Fri Aug 25 22:03:55 2017 VERIFY OK: depth=0, CN=server
Fri Aug 25 22:03:55 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Aug 25 22:03:55 2017 [server] Peer Connection Initiated with [AF_INET]{SERVER-IP-ADDRESS}:1999
Fri Aug 25 22:03:56 2017 MANAGEMENT: >STATE:1503691436,GET_CONFIG,,,,,,
Fri Aug 25 22:03:56 2017 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Fri Aug 25 22:03:56 2017 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1 255.255.255.255,route 10.8.0.0 255.255.255.0,route 192.168.2.0 255.255.255.0,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0'
Fri Aug 25 22:03:56 2017 OPTIONS IMPORT: timers and/or timeouts modified
Fri Aug 25 22:03:56 2017 OPTIONS IMPORT: --ifconfig/up options modified
Fri Aug 25 22:03:56 2017 OPTIONS IMPORT: route options modified
Fri Aug 25 22:03:56 2017 OPTIONS IMPORT: route-related options modified
Fri Aug 25 22:03:56 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Aug 25 22:03:56 2017 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:406 ET:0 EL:3 ]
Fri Aug 25 22:03:56 2017 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 25 22:03:56 2017 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 22:03:56 2017 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 25 22:03:56 2017 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 22:03:56 2017 interactive service msg_channel=464
Fri Aug 25 22:03:56 2017 ROUTE_GATEWAY 192.168.2.254/255.255.255.0 I=4 HWADDR=60:36:dd:69:e9:02
Fri Aug 25 22:03:56 2017 open_tun
Fri Aug 25 22:03:56 2017 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{57A30C8A-A511-4F05-85B8-BC3488960EDB}.tap
Fri Aug 25 22:03:56 2017 TAP-Windows Driver Version 9.21
Fri Aug 25 22:03:56 2017 TAP-Windows MTU=1500
Fri Aug 25 22:03:56 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Fri Aug 25 22:03:56 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {57A30C8A-A511-4F05-85B8-BC3488960EDB} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Fri Aug 25 22:03:56 2017 DHCP option string: 06080808 08080808 0404
Fri Aug 25 22:03:56 2017 Successful ARP Flush on interface [21] {57A30C8A-A511-4F05-85B8-BC3488960EDB}
Fri Aug 25 22:03:56 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Aug 25 22:03:56 2017 MANAGEMENT: >STATE:1503691436,ASSIGN_IP,,10.8.0.2,,,,
Fri Aug 25 22:04:01 2017 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Fri Aug 25 22:04:01 2017 MANAGEMENT: >STATE:1503691441,ADD_ROUTES,,,,,,
Fri Aug 25 22:04:01 2017 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.1
Fri Aug 25 22:04:01 2017 Route addition via service succeeded
Fri Aug 25 22:04:01 2017 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.1
Fri Aug 25 22:04:01 2017 Route addition via service succeeded
Fri Aug 25 22:04:01 2017 C:\WINDOWS\system32\route.exe ADD 192.168.2.0 MASK 255.255.255.0 10.8.0.1
Fri Aug 25 22:04:01 2017 Route addition via service succeeded
Fri Aug 25 22:04:01 2017 Initialization Sequence Completed
Fri Aug 25 22:04:01 2017 MANAGEMENT: >STATE:1503691441,CONNECTED,SUCCESS,10.8.0.2,{SERVER-IP-ADDRESS},1999,,
*** Client config:
client
dev tun
proto udp
remote serverhostname.example.com 1999
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server name
cipher AES-256-CBC
auth SHA256
comp-lzo
verb 4
*** Server config:
dev tun
proto udp
port 1999
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server.crt
key /etc/openvpn/easy-rsa/pki/private/server.key
dh /etc/openvpn/easy-rsa/pki/dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OPenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 192.168.2.0 255.255.255.0"
# Set your primary domain name server address for clients
#push "dhcp-option DNS 208.67.222.222"
#push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
#push "redirect-gateway def1" #commented by IByte
#push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-version-min 1.2
tls-auth /etc/openvpn/easy-rsa/pki/ta.key 0
cipher AES-256-CBC
auth SHA256
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
#crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
log /var/log/openvpn.log
verb 4
# Generated for use by PiVPN.io
*** Server log file:
Fri Aug 25 21:48:26 2017 us=254667 Current Parameter Settings:
Fri Aug 25 21:48:26 2017 us=255029 config = '/etc/openvpn/server.conf'
Fri Aug 25 21:48:26 2017 us=255096 mode = 1
Fri Aug 25 21:48:26 2017 us=255156 persist_config = DISABLED
Fri Aug 25 21:48:26 2017 us=255219 persist_mode = 1
Fri Aug 25 21:48:26 2017 us=255278 show_ciphers = DISABLED
Fri Aug 25 21:48:26 2017 us=255336 show_digests = DISABLED
Fri Aug 25 21:48:26 2017 us=255393 show_engines = DISABLED
Fri Aug 25 21:48:26 2017 us=255450 genkey = DISABLED
Fri Aug 25 21:48:26 2017 us=255510 key_pass_file = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=255569 show_tls_ciphers = DISABLED
Fri Aug 25 21:48:26 2017 us=255627 Connection profiles [default]:
Fri Aug 25 21:48:26 2017 us=255688 proto = udp
Fri Aug 25 21:48:26 2017 us=255745 local = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=255803 local_port = 1999
Fri Aug 25 21:48:26 2017 us=255860 remote = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=255917 remote_port = 1999
Fri Aug 25 21:48:26 2017 us=255975 remote_float = DISABLED
Fri Aug 25 21:48:26 2017 us=256031 bind_defined = DISABLED
Fri Aug 25 21:48:26 2017 us=256088 bind_local = ENABLED
Fri Aug 25 21:48:26 2017 us=256146 connect_retry_seconds = 5
Fri Aug 25 21:48:26 2017 us=256204 connect_timeout = 10
Fri Aug 25 21:48:26 2017 us=256261 connect_retry_max = 0
Fri Aug 25 21:48:26 2017 us=256319 socks_proxy_server = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=256378 socks_proxy_port = 0
Fri Aug 25 21:48:26 2017 us=256436 socks_proxy_retry = DISABLED
Fri Aug 25 21:48:26 2017 us=256494 tun_mtu = 1500
Fri Aug 25 21:48:26 2017 us=256552 tun_mtu_defined = ENABLED
Fri Aug 25 21:48:26 2017 us=256610 link_mtu = 1500
Fri Aug 25 21:48:26 2017 us=256667 link_mtu_defined = DISABLED
Fri Aug 25 21:48:26 2017 us=256725 tun_mtu_extra = 0
Fri Aug 25 21:48:26 2017 us=256782 tun_mtu_extra_defined = DISABLED
Fri Aug 25 21:48:26 2017 us=256841 mtu_discover_type = -1
Fri Aug 25 21:48:26 2017 us=256898 fragment = 0
Fri Aug 25 21:48:26 2017 us=256955 mssfix = 1450
Fri Aug 25 21:48:26 2017 us=257014 explicit_exit_notification = 0
Fri Aug 25 21:48:26 2017 us=257071 Connection profiles END
Fri Aug 25 21:48:26 2017 us=257128 remote_random = DISABLED
Fri Aug 25 21:48:26 2017 us=257186 ipchange = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=257243 dev = 'tun'
Fri Aug 25 21:48:26 2017 us=257300 dev_type = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=257358 dev_node = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=257416 lladdr = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=257474 topology = 3
Fri Aug 25 21:48:26 2017 us=257533 tun_ipv6 = DISABLED
Fri Aug 25 21:48:26 2017 us=257591 ifconfig_local = '10.8.0.1'
Fri Aug 25 21:48:26 2017 us=257649 ifconfig_remote_netmask = '255.255.255.0'
Fri Aug 25 21:48:26 2017 us=257709 ifconfig_noexec = DISABLED
Fri Aug 25 21:48:26 2017 us=257767 ifconfig_nowarn = DISABLED
Fri Aug 25 21:48:26 2017 us=257825 ifconfig_ipv6_local = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=257884 ifconfig_ipv6_netbits = 0
Fri Aug 25 21:48:26 2017 us=257942 ifconfig_ipv6_remote = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=258000 shaper = 0
Fri Aug 25 21:48:26 2017 us=258058 mtu_test = 0
Fri Aug 25 21:48:26 2017 us=258116 mlock = DISABLED
Fri Aug 25 21:48:26 2017 us=258176 keepalive_ping = 10
Fri Aug 25 21:48:26 2017 us=258233 keepalive_timeout = 120
Fri Aug 25 21:48:26 2017 us=258291 inactivity_timeout = 0
Fri Aug 25 21:48:26 2017 us=258349 ping_send_timeout = 10
Fri Aug 25 21:48:26 2017 us=258406 ping_rec_timeout = 240
Fri Aug 25 21:48:26 2017 us=258463 ping_rec_timeout_action = 2
Fri Aug 25 21:48:26 2017 us=258520 ping_timer_remote = DISABLED
Fri Aug 25 21:48:26 2017 us=258577 remap_sigusr1 = 0
Fri Aug 25 21:48:26 2017 us=258634 persist_tun = ENABLED
Fri Aug 25 21:48:26 2017 us=258691 persist_local_ip = DISABLED
Fri Aug 25 21:48:26 2017 us=258749 persist_remote_ip = DISABLED
Fri Aug 25 21:48:26 2017 us=258808 persist_key = ENABLED
Fri Aug 25 21:48:26 2017 us=258865 passtos = DISABLED
Fri Aug 25 21:48:26 2017 us=258923 resolve_retry_seconds = 1000000000
Fri Aug 25 21:48:26 2017 us=259034 username = 'nobody'
Fri Aug 25 21:48:26 2017 us=259095 groupname = 'nogroup'
Fri Aug 25 21:48:26 2017 us=259153 chroot_dir = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=259210 cd_dir = '/etc/openvpn'
Fri Aug 25 21:48:26 2017 us=259268 writepid = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=259325 up_script = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=259430 down_script = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=259513 down_pre = DISABLED
Fri Aug 25 21:48:26 2017 us=259573 up_restart = DISABLED
Fri Aug 25 21:48:26 2017 us=259632 up_delay = DISABLED
Fri Aug 25 21:48:26 2017 us=259688 daemon = ENABLED
Fri Aug 25 21:48:26 2017 us=259813 inetd = 0
Fri Aug 25 21:48:26 2017 us=259873 log = ENABLED
Fri Aug 25 21:48:26 2017 us=259931 suppress_timestamps = DISABLED
Fri Aug 25 21:48:26 2017 us=259989 nice = 0
Fri Aug 25 21:48:26 2017 us=260047 verbosity = 4
Fri Aug 25 21:48:26 2017 us=260104 mute = 0
Fri Aug 25 21:48:26 2017 us=260161 gremlin = 0
Fri Aug 25 21:48:26 2017 us=260220 status_file = '/var/log/openvpn-status.log'
Fri Aug 25 21:48:26 2017 us=260279 status_file_version = 3
Fri Aug 25 21:48:26 2017 us=260336 status_file_update_freq = 20
Fri Aug 25 21:48:26 2017 us=260393 occ = ENABLED
Fri Aug 25 21:48:26 2017 us=260451 rcvbuf = 65536
Fri Aug 25 21:48:26 2017 us=260509 sndbuf = 65536
Fri Aug 25 21:48:26 2017 us=260566 mark = 0
Fri Aug 25 21:48:26 2017 us=260624 sockflags = 0
Fri Aug 25 21:48:26 2017 us=260681 fast_io = DISABLED
Fri Aug 25 21:48:26 2017 us=260738 lzo = 7
Fri Aug 25 21:48:26 2017 us=260795 route_script = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=260853 route_default_gateway = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=260911 route_default_metric = 0
Fri Aug 25 21:48:26 2017 us=260970 route_noexec = DISABLED
Fri Aug 25 21:48:26 2017 us=261028 route_delay = 0
Fri Aug 25 21:48:26 2017 us=261089 route_delay_window = 30
Fri Aug 25 21:48:26 2017 us=261148 route_delay_defined = DISABLED
Fri Aug 25 21:48:26 2017 us=261207 route_nopull = DISABLED
Fri Aug 25 21:48:26 2017 us=261266 route_gateway_via_dhcp = DISABLED
Fri Aug 25 21:48:26 2017 us=261326 max_routes = 100
Fri Aug 25 21:48:26 2017 us=261385 allow_pull_fqdn = DISABLED
Fri Aug 25 21:48:26 2017 us=261445 management_addr = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=261504 management_port = 0
Fri Aug 25 21:48:26 2017 us=261562 management_user_pass = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=261622 management_log_history_cache = 250
Fri Aug 25 21:48:26 2017 us=261682 management_echo_buffer_size = 100
Fri Aug 25 21:48:26 2017 us=261741 management_write_peer_info_file = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=261801 management_client_user = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=261860 management_client_group = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=261919 management_flags = 0
Fri Aug 25 21:48:26 2017 us=261978 shared_secret_file = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=262039 key_direction = 1
Fri Aug 25 21:48:26 2017 us=262099 ciphername_defined = ENABLED
Fri Aug 25 21:48:26 2017 us=262158 ciphername = 'AES-256-CBC'
Fri Aug 25 21:48:26 2017 us=262217 authname_defined = ENABLED
Fri Aug 25 21:48:26 2017 us=262276 authname = 'SHA256'
Fri Aug 25 21:48:26 2017 us=262334 prng_hash = 'SHA1'
Fri Aug 25 21:48:26 2017 us=262393 prng_nonce_secret_len = 16
Fri Aug 25 21:48:26 2017 us=262452 keysize = 0
Fri Aug 25 21:48:26 2017 us=262510 engine = DISABLED
Fri Aug 25 21:48:26 2017 us=262568 replay = ENABLED
Fri Aug 25 21:48:26 2017 us=262626 mute_replay_warnings = DISABLED
Fri Aug 25 21:48:26 2017 us=262685 replay_window = 64
Fri Aug 25 21:48:26 2017 us=262743 replay_time = 15
Fri Aug 25 21:48:26 2017 us=262801 packet_id_file = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=262859 use_iv = ENABLED
Fri Aug 25 21:48:26 2017 us=262918 test_crypto = DISABLED
Fri Aug 25 21:48:26 2017 us=262976 tls_server = ENABLED
Fri Aug 25 21:48:26 2017 us=263034 tls_client = DISABLED
Fri Aug 25 21:48:26 2017 us=263093 key_method = 2
Fri Aug 25 21:48:26 2017 us=263153 ca_file = '/etc/openvpn/easy-rsa/pki/ca.crt'
Fri Aug 25 21:48:26 2017 us=263261 ca_path = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=263323 dh_file = '/etc/openvpn/easy-rsa/pki/dh2048.pem'
Fri Aug 25 21:48:26 2017 us=263383 cert_file = '/etc/openvpn/easy-rsa/pki/issued/server.crt'
Fri Aug 25 21:48:26 2017 us=263444 priv_key_file = '/etc/openvpn/easy-rsa/pki/private/server.key'
Fri Aug 25 21:48:26 2017 us=263503 pkcs12_file = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=263561 cipher_list = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=263619 tls_verify = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=263677 tls_export_cert = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=263737 verify_x509_type = 0
Fri Aug 25 21:48:26 2017 us=263795 verify_x509_name = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=263855 crl_file = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=263913 ns_cert_type = 0
Fri Aug 25 21:48:26 2017 us=263972 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264030 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264088 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264147 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264206 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264264 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264321 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264379 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264436 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264494 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264552 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264610 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264669 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264727 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264785 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264843 remote_cert_ku[i] = 0
Fri Aug 25 21:48:26 2017 us=264902 remote_cert_eku = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=264961 ssl_flags = 192
Fri Aug 25 21:48:26 2017 us=265021 tls_timeout = 2
Fri Aug 25 21:48:26 2017 us=265079 renegotiate_bytes = 0
Fri Aug 25 21:48:26 2017 us=265138 renegotiate_packets = 0
Fri Aug 25 21:48:26 2017 us=265198 renegotiate_seconds = 3600
Fri Aug 25 21:48:26 2017 us=265257 handshake_window = 60
Fri Aug 25 21:48:26 2017 us=265314 transition_window = 3600
Fri Aug 25 21:48:26 2017 us=265372 single_session = DISABLED
Fri Aug 25 21:48:26 2017 us=265430 push_peer_info = DISABLED
Fri Aug 25 21:48:26 2017 us=265487 tls_exit = DISABLED
Fri Aug 25 21:48:26 2017 us=265546 tls_auth_file = '/etc/openvpn/easy-rsa/pki/ta.key'
Fri Aug 25 21:48:26 2017 us=265606 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=265665 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=265725 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=265782 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=265842 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=265901 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=265960 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266020 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266080 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266139 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266197 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266256 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266315 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266375 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266434 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266493 pkcs11_protected_authentication = DISABLED
Fri Aug 25 21:48:26 2017 us=266555 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=266615 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=266674 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=266733 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=266837 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=266901 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=266982 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267045 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267105 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267167 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267228 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267288 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267348 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267454 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267538 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267600 pkcs11_private_mode = 00000000
Fri Aug 25 21:48:26 2017 us=267661 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=267720 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=267778 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=267837 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=267896 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=267956 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268016 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268075 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268134 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268193 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268255 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268319 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268386 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268454 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268516 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268578 pkcs11_cert_private = DISABLED
Fri Aug 25 21:48:26 2017 us=268643 pkcs11_pin_cache_period = -1
Fri Aug 25 21:48:26 2017 us=268710 pkcs11_id = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=268775 pkcs11_id_management = DISABLED
Fri Aug 25 21:48:26 2017 us=268851 server_network = 10.8.0.0
Fri Aug 25 21:48:26 2017 us=268936 server_netmask = 255.255.255.0
Fri Aug 25 21:48:26 2017 us=269008 server_network_ipv6 = ::
Fri Aug 25 21:48:26 2017 us=269067 server_netbits_ipv6 = 0
Fri Aug 25 21:48:26 2017 us=269133 server_bridge_ip = 0.0.0.0
Fri Aug 25 21:48:26 2017 us=269199 server_bridge_netmask = 0.0.0.0
Fri Aug 25 21:48:26 2017 us=269264 server_bridge_pool_start = 0.0.0.0
Fri Aug 25 21:48:26 2017 us=269330 server_bridge_pool_end = 0.0.0.0
Fri Aug 25 21:48:26 2017 us=269390 push_entry = 'route 10.8.0.1 255.255.255.255'
Fri Aug 25 21:48:26 2017 us=269450 push_entry = 'route 10.8.0.0 255.255.255.0'
Fri Aug 25 21:48:26 2017 us=269510 push_entry = 'route 192.168.2.0 255.255.255.0'
Fri Aug 25 21:48:26 2017 us=269570 push_entry = 'dhcp-option DNS 8.8.8.8'
Fri Aug 25 21:48:26 2017 us=269630 push_entry = 'dhcp-option DNS 8.8.4.4'
Fri Aug 25 21:48:26 2017 us=269690 push_entry = 'route-gateway 10.8.0.1'
Fri Aug 25 21:48:26 2017 us=269809 push_entry = 'topology subnet'
Fri Aug 25 21:48:26 2017 us=269870 push_entry = 'ping 10'
Fri Aug 25 21:48:26 2017 us=269929 push_entry = 'ping-restart 120'
Fri Aug 25 21:48:26 2017 us=269988 ifconfig_pool_defined = ENABLED
Fri Aug 25 21:48:26 2017 us=270055 ifconfig_pool_start = 10.8.0.2
Fri Aug 25 21:48:26 2017 us=270121 ifconfig_pool_end = 10.8.0.253
Fri Aug 25 21:48:26 2017 us=270189 ifconfig_pool_netmask = 255.255.255.0
Fri Aug 25 21:48:26 2017 us=270249 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=270310 ifconfig_pool_persist_refresh_freq = 600
Fri Aug 25 21:48:26 2017 us=270368 ifconfig_ipv6_pool_defined = DISABLED
Fri Aug 25 21:48:26 2017 us=270433 ifconfig_ipv6_pool_base = ::
Fri Aug 25 21:48:26 2017 us=270494 ifconfig_ipv6_pool_netbits = 0
Fri Aug 25 21:48:26 2017 us=270553 n_bcast_buf = 256
Fri Aug 25 21:48:26 2017 us=270612 tcp_queue_limit = 64
Fri Aug 25 21:48:26 2017 us=270713 real_hash_size = 256
Fri Aug 25 21:48:26 2017 us=270773 virtual_hash_size = 256
Fri Aug 25 21:48:26 2017 us=270833 client_connect_script = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=270892 learn_address_script = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=270951 client_disconnect_script = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=271011 client_config_dir = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=271070 ccd_exclusive = DISABLED
Fri Aug 25 21:48:26 2017 us=271128 tmp_dir = '/tmp'
Fri Aug 25 21:48:26 2017 us=271185 push_ifconfig_defined = DISABLED
Fri Aug 25 21:48:26 2017 us=271251 push_ifconfig_local = 0.0.0.0
Fri Aug 25 21:48:26 2017 us=271316 push_ifconfig_remote_netmask = 0.0.0.0
Fri Aug 25 21:48:26 2017 us=271376 push_ifconfig_ipv6_defined = DISABLED
Fri Aug 25 21:48:26 2017 us=271441 push_ifconfig_ipv6_local = ::/0
Fri Aug 25 21:48:26 2017 us=271515 push_ifconfig_ipv6_remote = ::
Fri Aug 25 21:48:26 2017 us=271577 enable_c2c = ENABLED
Fri Aug 25 21:48:26 2017 us=271635 duplicate_cn = ENABLED
Fri Aug 25 21:48:26 2017 us=271693 cf_max = 0
Fri Aug 25 21:48:26 2017 us=271751 cf_per = 0
Fri Aug 25 21:48:26 2017 us=271810 max_clients = 1024
Fri Aug 25 21:48:26 2017 us=271868 max_routes_per_client = 256
Fri Aug 25 21:48:26 2017 us=271928 auth_user_pass_verify_script = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=271987 auth_user_pass_verify_script_via_file = DISABLED
Fri Aug 25 21:48:26 2017 us=272046 port_share_host = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=272105 port_share_port = 0
Fri Aug 25 21:48:26 2017 us=272163 client = DISABLED
Fri Aug 25 21:48:26 2017 us=272220 pull = DISABLED
Fri Aug 25 21:48:26 2017 us=272278 auth_user_pass_file = '[UNDEF]'
Fri Aug 25 21:48:26 2017 us=272344 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 27 2017
Fri Aug 25 21:48:26 2017 us=272450 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.08
Fri Aug 25 21:48:26 2017 us=278684 Diffie-Hellman initialized with 2048 bit key
Fri Aug 25 21:48:26 2017 us=282591 Control Channel Authentication: using '/etc/openvpn/easy-rsa/pki/ta.key' as a OpenVPN static key file
Fri Aug 25 21:48:26 2017 us=282918 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 21:48:26 2017 us=283005 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 21:48:26 2017 us=283097 TLS-Auth MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Aug 25 21:48:26 2017 us=283223 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Aug 25 21:48:26 2017 us=284992 TUN/TAP device tun0 opened
Fri Aug 25 21:48:26 2017 us=285191 TUN/TAP TX queue length set to 100
Fri Aug 25 21:48:26 2017 us=285310 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Aug 25 21:48:26 2017 us=285462 /sbin/ip link set dev tun0 up mtu 1500
Fri Aug 25 21:48:26 2017 us=293302 /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Fri Aug 25 21:48:26 2017 us=303618 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Aug 25 21:48:26 2017 us=310464 GID set to nogroup
Fri Aug 25 21:48:26 2017 us=310907 UID set to nobody
Fri Aug 25 21:48:26 2017 us=311051 UDPv4 link local (bound): [undef]
Fri Aug 25 21:48:26 2017 us=311131 UDPv4 link remote: [undef]
Fri Aug 25 21:48:26 2017 us=311219 MULTI: multi_init called, r=256 v=256
Fri Aug 25 21:48:26 2017 us=311753 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Fri Aug 25 21:48:26 2017 us=311969 Initialization Sequence Completed
Fri Aug 25 22:03:55 2017 us=346885 MULTI: multi_create_instance called
Fri Aug 25 22:03:55 2017 us=347145 {WIN-CLIENT-IP-ADDRESS}:51742 Re-using SSL/TLS context
Fri Aug 25 22:03:55 2017 us=347298 {WIN-CLIENT-IP-ADDRESS}:51742 LZO compression initialized
Fri Aug 25 22:03:55 2017 us=347844 {WIN-CLIENT-IP-ADDRESS}:51742 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Aug 25 22:03:55 2017 us=347923 {WIN-CLIENT-IP-ADDRESS}:51742 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Aug 25 22:03:55 2017 us=348176 {WIN-CLIENT-IP-ADDRESS}:51742 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Aug 25 22:03:55 2017 us=348272 {WIN-CLIENT-IP-ADDRESS}:51742 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Aug 25 22:03:55 2017 us=348390 {WIN-CLIENT-IP-ADDRESS}:51742 Local Options hash (VER=V4): '8a3b3cca'
Fri Aug 25 22:03:55 2017 us=348443 {WIN-CLIENT-IP-ADDRESS}:51742 Expected Remote Options hash (VER=V4): '73e43c96'
Fri Aug 25 22:03:55 2017 us=348587 {WIN-CLIENT-IP-ADDRESS}:51742 TLS: Initial packet from [AF_INET]{WIN-CLIENT-IP-ADDRESS}:51742, sid=8c3cdc61 630efc35
Fri Aug 25 22:03:55 2017 us=668158 {WIN-CLIENT-IP-ADDRESS}:51742 VERIFY OK: depth=1, CN=ChangeMe
Fri Aug 25 22:03:55 2017 us=669271 {WIN-CLIENT-IP-ADDRESS}:51742 VERIFY OK: depth=0, CN=ibyteqb
Fri Aug 25 22:03:55 2017 us=781126 {WIN-CLIENT-IP-ADDRESS}:51742 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 25 22:03:55 2017 us=781247 {WIN-CLIENT-IP-ADDRESS}:51742 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 22:03:55 2017 us=781302 {WIN-CLIENT-IP-ADDRESS}:51742 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 25 22:03:55 2017 us=781341 {WIN-CLIENT-IP-ADDRESS}:51742 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 22:03:55 2017 us=802184 {WIN-CLIENT-IP-ADDRESS}:51742 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Aug 25 22:03:55 2017 us=802461 {WIN-CLIENT-IP-ADDRESS}:51742 [ibyteqb] Peer Connection Initiated with [AF_INET]{WIN-CLIENT-IP-ADDRESS}:51742
Fri Aug 25 22:03:55 2017 us=802573 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Fri Aug 25 22:03:55 2017 us=802722 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 MULTI: Learn: 10.8.0.2 -> ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742
Fri Aug 25 22:03:55 2017 us=802765 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 MULTI: primary virtual IP for ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742: 10.8.0.2
Fri Aug 25 22:03:56 2017 us=934201 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 PUSH: Received control message: 'PUSH_REQUEST'
Fri Aug 25 22:03:56 2017 us=934380 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 send_push_reply(): safe_cap=940
Fri Aug 25 22:03:56 2017 us=934547 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 SENT CONTROL [ibyteqb]: 'PUSH_REPLY,route 10.8.0.1 255.255.255.255,route 10.8.0.0 255.255.255.0,route 192.168.2.0 255.255.255.0,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0' (status=1)
Fri Aug 25 22:08:46 2017 us=99862 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 [ibyteqb] Inactivity timeout (--ping-restart), restarting
Fri Aug 25 22:08:46 2017 us=100060 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:51742 SIGUSR1[soft,ping-restart] received, client-instance restarting
Fri Aug 25 23:10:55 2017 us=345726 MULTI: multi_create_instance called
Fri Aug 25 23:10:55 2017 us=346152 {WIN-CLIENT-IP-ADDRESS}:60886 Re-using SSL/TLS context
Fri Aug 25 23:10:55 2017 us=346304 {WIN-CLIENT-IP-ADDRESS}:60886 LZO compression initialized
Fri Aug 25 23:10:55 2017 us=346748 {WIN-CLIENT-IP-ADDRESS}:60886 Control Channel MTU parms [ L:1570 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Aug 25 23:10:55 2017 us=346867 {WIN-CLIENT-IP-ADDRESS}:60886 Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Aug 25 23:10:55 2017 us=347062 {WIN-CLIENT-IP-ADDRESS}:60886 Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Aug 25 23:10:55 2017 us=347095 {WIN-CLIENT-IP-ADDRESS}:60886 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Aug 25 23:10:55 2017 us=347184 {WIN-CLIENT-IP-ADDRESS}:60886 Local Options hash (VER=V4): '8a3b3cca'
Fri Aug 25 23:10:55 2017 us=347240 {WIN-CLIENT-IP-ADDRESS}:60886 Expected Remote Options hash (VER=V4): '73e43c96'
Fri Aug 25 23:10:55 2017 us=347416 {WIN-CLIENT-IP-ADDRESS}:60886 TLS: Initial packet from [AF_INET]{WIN-CLIENT-IP-ADDRESS}:60886, sid=3ed1086a 62ab8da7
Fri Aug 25 23:10:55 2017 us=699885 {WIN-CLIENT-IP-ADDRESS}:60886 VERIFY OK: depth=1, CN=ChangeMe
Fri Aug 25 23:10:55 2017 us=701349 {WIN-CLIENT-IP-ADDRESS}:60886 VERIFY OK: depth=0, CN=ibyteqb
Fri Aug 25 23:10:55 2017 us=811237 {WIN-CLIENT-IP-ADDRESS}:60886 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 25 23:10:55 2017 us=811356 {WIN-CLIENT-IP-ADDRESS}:60886 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 23:10:55 2017 us=811393 {WIN-CLIENT-IP-ADDRESS}:60886 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Aug 25 23:10:55 2017 us=811431 {WIN-CLIENT-IP-ADDRESS}:60886 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Aug 25 23:10:55 2017 us=831949 {WIN-CLIENT-IP-ADDRESS}:60886 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Aug 25 23:10:55 2017 us=832100 {WIN-CLIENT-IP-ADDRESS}:60886 [ibyteqb] Peer Connection Initiated with [AF_INET]{WIN-CLIENT-IP-ADDRESS}:60886
Fri Aug 25 23:10:55 2017 us=832184 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Fri Aug 25 23:10:55 2017 us=832321 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 MULTI: Learn: 10.8.0.2 -> ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886
Fri Aug 25 23:10:55 2017 us=832363 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 MULTI: primary virtual IP for ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886: 10.8.0.2
Fri Aug 25 23:10:57 2017 us=25494 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 PUSH: Received control message: 'PUSH_REQUEST'
Fri Aug 25 23:10:57 2017 us=25688 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 send_push_reply(): safe_cap=940
Fri Aug 25 23:10:57 2017 us=25881 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 SENT CONTROL [ibyteqb]: 'PUSH_REPLY,route 10.8.0.1 255.255.255.255,route 10.8.0.0 255.255.255.0,route 192.168.2.0 255.255.255.0,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0' (status=1)
Fri Aug 25 23:15:10 2017 us=736597 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 [ibyteqb] Inactivity timeout (--ping-restart), restarting
Fri Aug 25 23:15:10 2017 us=736793 ibyteqb/{WIN-CLIENT-IP-ADDRESS}:60886 SIGUSR1[soft,ping-restart] received, client-instance restarting
