Client Certs have Key Usages of Digital Signature and Key Agreement
Server Cert has Key Usages of Digital Signature, Key Encipherment and Key Agreement
both folders where the certs are include a certificate with the chain of all the CA's (signers), master CA, intermediate signing CA for the domain and CA that signs all vpn certificates
Both client and server certificates also hold the entire chain of signers.
works wonderfully for a windows 10 client
get the failure on a window 7 client
Do I need to create certs in a different manner for windows 7?
[oconf=server cert]
X509v3 Basic Constraints critical:
CA:FALSE
X509v3 Subject Key Identifier:
C3:6E:72:07:B8:B9:85:19:A6:21:5B:54:EE:4D:8B:2E:D8:37:91:92
X509v3 Key Usage:
Digital Signature, Key Encipherment, Key Agreement
X509v3 Extended Key Usage:
TLS Web Server Authentication
Netscape Cert Type:
SSL Server
Netscape Comment:
xca certificate
[/oconf]
[oconf=client cert]
X509v3 Basic Constraints critical:
CA:FALSE
X509v3 Subject Key Identifier:
6A:96:D3:6D:16:F0:20:FC:3E:68:AE:37:D0:55:CD:0A:49:86:5B:CD
X509v3 Key Usage:
Digital Signature, Key Agreement
X509v3 Extended Key Usage:
TLS Web Client Authentication, IPSec User
Netscape Cert Type:
SSL Client
Netscape Comment:
xca certificate
[/oconf]
[oconf=signing cert chain]
Certificate chain holds CA:
X509v3 Basic Constraints:
CA:TRUE
X509v3 Subject Key Identifier:
A0:BF:99:9B:99:03:14:BF:A0:74:FD:17:94:51:F2:5D:A0:7D:E5:EC
X509v3 Key Usage:
Certificate Sign
Netscape Cert Type:
SSL CA, Object Signing CA
Intermediate CA Signing Cert:
X509v3 Basic Constraints critical:
CA:TRUE
X509v3 Subject Key Identifier:
6A:96:D3:6D:16:F0:20:FC:3E:68:AE:37:D0:55:CD:0A:49:86:5B:CD
X509v3 Key Usage:
Certificate Sign, CRL Sign
Netscape Cert Type:
SSL CA, S/MIME CA, Object Signing CA
Netscape Comment:
xca certificate
VPN Signing Cert:
X509v3 Basic Constraints critical:
CA:TRUE
X509v3 Subject Key Identifier:
26:73:0E:E9:EC:E1:DD:26:C9:F0:DA:DC:D6:87:38:F3:70:CC:43:36
X509v3 Key Usage:
Digital Signature, Certificate Sign, CRL Sign
Netscape Cert Type:
Object Signing, SSL CA, S/MIME CA, Object Signing CA
Netscape Comment:
xca certificate
[/oconf]
[oconf=server config]
server 10.8.0.0 255.255.255.0
#this forces the bind on the local server machine wifi connection
#this is essentially you openvpn server than you want clients to
#bind to. without it, openvpn will try to bind to any damned address
#it sees fit.
local 220.220.200.102
dev tun
proto udp4
port 1194
topology subnet
stale-routes-check 240
connect-retry-max 5
float
persist-key
persist-tun
mlock
syslog OpenVPN
log c:\\openvpn\\log\\OpenVPNLog
status c:\\openvpn\\log\\openvpn-status.log
verb 5
push-peer-info
max-clients 10
tls-server
remote-cert-tls client
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
#script-security 2
#client-connect 'c:\\python27\\python.exe c:\\openvpn\\scripts\\clientconnect.py'
#learn-address 'c:\\python27\\python.exe c:\\openvpn\\scripts\\learn_address.py'
#client-disconnect 'c:\\python27\\python.exe c:\\openvpn\\scripts\\clientdisconnect.py'
#client-connect 'c:\\openvpn\\scripts\\client_connect.bat'
ca c:\\openvpn\\XCA\\vpn_jgelinas_com_ca_chain.crt
cert c:\\openvpn\\XCA\\Server_Certificate.crt
key c:\\openvpn\\XCA\\Server_Certificate.key # This file should be kept secret
dh c:\\OpenVPN\\XCA\\dh_2048.xca
ifconfig-pool-persist ipp.txt
keepalive 10 120
tls-auth c:\\openvpn\\ta.key 0 # This file is secret
mute 20
explicit-exit-notify 1
management 127.0.0.1 1193
management-query-passwords
management-signal
management-forget-disconnect
auth-retry interact
[/oconf]
[oconf=server log]
Tue Dec 26 21:14:22 2017 Warning on use of --daemon/--inetd: this operating system lacks daemon logging features, therefore when I become a daemon, I won't be able to log status or error messages
Tue Dec 26 21:14:22 2017 us=467564 Current Parameter Settings:
Tue Dec 26 21:14:22 2017 us=467564 config = 'server.ovpn'
Tue Dec 26 21:14:22 2017 us=467564 mode = 1
Tue Dec 26 21:14:22 2017 us=467564 show_ciphers = DISABLED
Tue Dec 26 21:14:22 2017 us=467564 show_digests = DISABLED
Tue Dec 26 21:14:22 2017 us=467564 show_engines = DISABLED
Tue Dec 26 21:14:22 2017 us=467564 genkey = DISABLED
Tue Dec 26 21:14:22 2017 us=467564 key_pass_file = '[UNDEF]'
Tue Dec 26 21:14:22 2017 us=467564 show_tls_ciphers = DISABLED
Tue Dec 26 21:14:22 2017 us=467564 connect_retry_max = 5
Tue Dec 26 21:14:22 2017 us=467564 Connection profiles [0]:
Tue Dec 26 21:14:22 2017 us=467564 proto = udp4
Tue Dec 26 21:14:22 2017 us=467564 local = '220.220.200.102'
Tue Dec 26 21:14:22 2017 us=467564 local_port = '1194'
Tue Dec 26 21:14:22 2017 us=468057 remote = '[UNDEF]'
Tue Dec 26 21:14:22 2017 us=468057 remote_port = '1194'
Tue Dec 26 21:14:22 2017 us=468057 remote_float = ENABLED
Tue Dec 26 21:14:22 2017 us=468057 bind_defined = DISABLED
Tue Dec 26 21:14:22 2017 us=468057 bind_local = ENABLED
Tue Dec 26 21:14:22 2017 us=468057 bind_ipv6_only = DISABLED
Tue Dec 26 21:14:22 2017 us=468057 NOTE: --mute triggered...
Tue Dec 26 21:14:22 2017 us=468057 278 variation(s) on previous 20 message(s) suppressed by --mute
Tue Dec 26 21:14:22 2017 us=468057 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Tue Dec 26 21:14:22 2017 us=468057 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Dec 26 21:14:22 2017 us=468057 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
Tue Dec 26 21:14:22 2017 us=468057 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Dec 26 21:14:22 2017 us=469361 Need hold release from management interface, waiting...
Tue Dec 26 21:14:22 2017 us=920966 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Dec 26 21:14:23 2017 us=21994 MANAGEMENT: CMD 'state on'
Tue Dec 26 21:14:23 2017 us=21994 MANAGEMENT: CMD 'log all on'
Tue Dec 26 21:14:23 2017 us=69013 MANAGEMENT: CMD 'hold off'
Tue Dec 26 21:14:23 2017 us=71023 MANAGEMENT: CMD 'hold release'
Tue Dec 26 21:14:23 2017 us=71023 WARNING: mlockall call failed (function not implemented)
Tue Dec 26 21:14:23 2017 us=295566 Diffie-Hellman initialized with 2048 bit key
Tue Dec 26 21:14:23 2017 us=297067 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 26 21:14:23 2017 us=297567 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 26 21:14:23 2017 us=297567 TLS-Auth MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 26 21:14:23 2017 us=297567 interactive service msg_channel=0
Tue Dec 26 21:14:23 2017 us=297567 open_tun
Tue Dec 26 21:14:23 2017 us=299067 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{4BB8E901-560D-409C-877B-915326279F5E}.tap
Tue Dec 26 21:14:23 2017 us=299567 TAP-Windows Driver Version 9.21
Tue Dec 26 21:14:23 2017 us=299567 TAP-Windows MTU=1500
Tue Dec 26 21:14:23 2017 us=303070 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.1/255.255.255.0 [SUCCEEDED]
Tue Dec 26 21:14:23 2017 us=303070 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.0 on interface {4BB8E901-560D-409C-877B-915326279F5E} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Tue Dec 26 21:14:23 2017 us=303568 Sleeping for 10 seconds...
Tue Dec 26 21:14:33 2017 us=309233 Successful ARP Flush on interface [9] {4BB8E901-560D-409C-877B-915326279F5E}
Tue Dec 26 21:14:33 2017 us=314236 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Dec 26 21:14:33 2017 us=314236 MANAGEMENT: >STATE:1514340873,ASSIGN_IP,,10.8.0.1,,,,
Tue Dec 26 21:14:33 2017 us=314236 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 26 21:14:33 2017 us=314736 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Dec 26 21:14:33 2017 us=314736 UDPv4 link local (bound): [AF_INET]220.220.200.102:1194
Tue Dec 26 21:14:33 2017 us=314736 UDPv4 link remote: [AF_UNSPEC]
Tue Dec 26 21:14:33 2017 us=314736 MULTI: multi_init called, r=256 v=256
Tue Dec 26 21:14:33 2017 us=315235 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Tue Dec 26 21:14:33 2017 us=315235 ifconfig_pool_read(), in='vpn.jgelinas.com Jean Gelinas,10.8.0.2', TODO: IPv6
Tue Dec 26 21:14:33 2017 us=315235 succeeded -> ifconfig_pool_set()
Tue Dec 26 21:14:33 2017 us=315235 IFCONFIG POOL LIST
Tue Dec 26 21:14:33 2017 us=315235 vpn.jgelinas.com Jean Gelinas,10.8.0.2
Tue Dec 26 21:14:33 2017 us=315235 Initializing stale route check timer to run every 240 seconds and to removing routes with activity timeout older than 240 seconds
Tue Dec 26 21:14:33 2017 us=315235 Initialization Sequence Completed
Tue Dec 26 21:14:33 2017 us=315235 MANAGEMENT: >STATE:1514340873,CONNECTED,SUCCESS,10.8.0.1,,,220.220.200.102,1194
Tue Dec 26 21:35:41 2017 us=314394 MULTI: multi_create_instance called
Tue Dec 26 21:35:41 2017 us=314394 220.220.200.100:62517 Re-using SSL/TLS context
Tue Dec 26 21:35:41 2017 us=314394 220.220.200.100:62517 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 26 21:35:41 2017 us=314394 220.220.200.100:62517 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 26 21:35:41 2017 us=314394 220.220.200.100:62517 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Dec 26 21:35:41 2017 us=314394 220.220.200.100:62517 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Dec 26 21:35:41 2017 us=314394 220.220.200.100:62517 TLS: Initial packet from [AF_INET]220.220.200.100:62517, sid=c3c28f64 c62d4a47
Tue Dec 26 21:35:44 2017 us=553163 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:45 2017 us=630514 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:46 2017 us=409886 MULTI: multi_create_instance called
Tue Dec 26 21:35:46 2017 us=409886 220.220.200.100:62518 Re-using SSL/TLS context
Tue Dec 26 21:35:46 2017 us=410882 220.220.200.100:62518 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 26 21:35:46 2017 us=410882 220.220.200.100:62518 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 26 21:35:46 2017 us=410882 220.220.200.100:62518 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Dec 26 21:35:46 2017 us=410882 220.220.200.100:62518 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Dec 26 21:35:46 2017 us=410882 220.220.200.100:62518 TLS: Initial packet from [AF_INET]220.220.200.100:62518, sid=34f70054 9eec0d3e
Tue Dec 26 21:35:46 2017 us=457901 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:48 2017 us=865750 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:49 2017 us=945132 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:50 2017 us=902954 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:51 2017 us=522636 MULTI: multi_create_instance called
Tue Dec 26 21:35:51 2017 us=522636 220.220.200.100:62519 Re-using SSL/TLS context
Tue Dec 26 21:35:51 2017 us=523637 220.220.200.100:62519 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 26 21:35:51 2017 us=523637 220.220.200.100:62519 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 26 21:35:51 2017 us=523637 220.220.200.100:62519 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Dec 26 21:35:51 2017 us=523637 220.220.200.100:62519 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Dec 26 21:35:51 2017 us=523637 220.220.200.100:62519 TLS: Initial packet from [AF_INET]220.220.200.100:62519, sid=1f6baf7a 168f01c7
Tue Dec 26 21:35:53 2017 us=147140 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:54 2017 us=20331 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:55 2017 us=266945 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:56 2017 us=53156 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:57 2017 us=63502 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:35:59 2017 us=94153 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:01 2017 us=944129 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:03 2017 us=35475 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:07 2017 us=467271 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:08 2017 us=672593 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:12 2017 us=198527 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:13 2017 us=257312 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:17 2017 us=153537 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:19 2017 us=246660 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:23 2017 us=580372 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:24 2017 us=834528 read UDPv4: Unknown error (code=10054)
Tue Dec 26 21:36:41 2017 us=300834 220.220.200.100:62517 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 26 21:36:41 2017 us=300834 220.220.200.100:62517 TLS Error: TLS handshake failed
Tue Dec 26 21:36:41 2017 us=300834 220.220.200.100:62517 SIGUSR1[soft,tls-error] received, client-instance restarting
Tue Dec 26 21:36:46 2017 us=875961 220.220.200.100:62518 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 26 21:36:46 2017 us=875961 220.220.200.100:62518 TLS Error: TLS handshake failed
Tue Dec 26 21:36:46 2017 us=875961 220.220.200.100:62518 SIGUSR1[soft,tls-error] received, client-instance restarting
Tue Dec 26 21:36:52 2017 us=75804 220.220.200.100:62519 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Dec 26 21:36:52 2017 us=75804 220.220.200.100:62519 TLS Error: TLS handshake failed
Tue Dec 26 21:36:52 2017 us=75804 220.220.200.100:62519 SIGUSR1[soft,tls-error] received, client-instance restarting
[/oconf]
[oconf=client config]
client
remote vpn.jeangelinas.com
proto udp4
port 1194
dev tun
pull
tls-client
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca c:\\openvpn\\clients\\jeangelinas\\vpn_jgelinas_com_ca_chain.crt
cert c:\\openvpn\\clients\\jeangelinas\\jeangelinas.crt
key c:\\openvpn\\clients\\jeangelinas\\jeangelinas.key
dh c:\\openvpn\\clients\\jeangelinas\\dh_2048.xca
remote-cert-tls server
tls-auth c:\\openvpn\\clients\\jeangelinas\\ta.key 1
# Set log file verbosity.
verb 6
# Silence repeating messages
;mute 20
[/oconf]
[oconf=client log]
Tue Dec 26 21:35:35 2017 us=73888 Current Parameter Settings:
Tue Dec 26 21:35:35 2017 us=73888 config = 'client.ovpn'
Tue Dec 26 21:35:35 2017 us=73888 mode = 0
Tue Dec 26 21:35:35 2017 us=73888 show_ciphers = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 show_digests = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 show_engines = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 genkey = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 key_pass_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 show_tls_ciphers = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 connect_retry_max = 0
Tue Dec 26 21:35:35 2017 us=73888 Connection profiles [0]:
Tue Dec 26 21:35:35 2017 us=73888 proto = udp4
Tue Dec 26 21:35:35 2017 us=73888 local = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 local_port = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 remote = 'vpn.jeangelinas.com'
Tue Dec 26 21:35:35 2017 us=73888 remote_port = '1194'
Tue Dec 26 21:35:35 2017 us=73888 remote_float = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 bind_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 bind_local = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 bind_ipv6_only = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 connect_retry_seconds = 5
Tue Dec 26 21:35:35 2017 us=73888 connect_timeout = 120
Tue Dec 26 21:35:35 2017 us=73888 socks_proxy_server = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 socks_proxy_port = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 tun_mtu = 1500
Tue Dec 26 21:35:35 2017 us=73888 tun_mtu_defined = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 link_mtu = 1500
Tue Dec 26 21:35:35 2017 us=73888 link_mtu_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 tun_mtu_extra = 0
Tue Dec 26 21:35:35 2017 us=73888 tun_mtu_extra_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 mtu_discover_type = -1
Tue Dec 26 21:35:35 2017 us=73888 fragment = 0
Tue Dec 26 21:35:35 2017 us=73888 mssfix = 1450
Tue Dec 26 21:35:35 2017 us=73888 explicit_exit_notification = 0
Tue Dec 26 21:35:35 2017 us=73888 Connection profiles END
Tue Dec 26 21:35:35 2017 us=73888 remote_random = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 ipchange = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 dev = 'tun'
Tue Dec 26 21:35:35 2017 us=73888 dev_type = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 dev_node = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 lladdr = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 topology = 1
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_local = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_remote_netmask = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_noexec = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_nowarn = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_ipv6_local = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_ipv6_netbits = 0
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_ipv6_remote = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 shaper = 0
Tue Dec 26 21:35:35 2017 us=73888 mtu_test = 0
Tue Dec 26 21:35:35 2017 us=73888 mlock = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 keepalive_ping = 0
Tue Dec 26 21:35:35 2017 us=73888 keepalive_timeout = 0
Tue Dec 26 21:35:35 2017 us=73888 inactivity_timeout = 0
Tue Dec 26 21:35:35 2017 us=73888 ping_send_timeout = 0
Tue Dec 26 21:35:35 2017 us=73888 ping_rec_timeout = 0
Tue Dec 26 21:35:35 2017 us=73888 ping_rec_timeout_action = 0
Tue Dec 26 21:35:35 2017 us=73888 ping_timer_remote = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 remap_sigusr1 = 0
Tue Dec 26 21:35:35 2017 us=73888 persist_tun = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 persist_local_ip = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 persist_remote_ip = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 persist_key = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 passtos = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 resolve_retry_seconds = 1000000000
Tue Dec 26 21:35:35 2017 us=73888 resolve_in_advance = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 username = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 groupname = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 chroot_dir = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 cd_dir = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 writepid = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 up_script = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 down_script = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 down_pre = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 up_restart = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 up_delay = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 daemon = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 inetd = 0
Tue Dec 26 21:35:35 2017 us=73888 log = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 suppress_timestamps = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 machine_readable_output = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 nice = 0
Tue Dec 26 21:35:35 2017 us=73888 verbosity = 6
Tue Dec 26 21:35:35 2017 us=73888 mute = 0
Tue Dec 26 21:35:35 2017 us=73888 gremlin = 0
Tue Dec 26 21:35:35 2017 us=73888 status_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 status_file_version = 1
Tue Dec 26 21:35:35 2017 us=73888 status_file_update_freq = 60
Tue Dec 26 21:35:35 2017 us=73888 occ = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 rcvbuf = 0
Tue Dec 26 21:35:35 2017 us=73888 sndbuf = 0
Tue Dec 26 21:35:35 2017 us=73888 sockflags = 0
Tue Dec 26 21:35:35 2017 us=73888 fast_io = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 comp.alg = 0
Tue Dec 26 21:35:35 2017 us=73888 comp.flags = 0
Tue Dec 26 21:35:35 2017 us=73888 route_script = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 route_default_gateway = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 route_default_metric = 0
Tue Dec 26 21:35:35 2017 us=73888 route_noexec = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 route_delay = 5
Tue Dec 26 21:35:35 2017 us=73888 route_delay_window = 30
Tue Dec 26 21:35:35 2017 us=73888 route_delay_defined = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 route_nopull = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 route_gateway_via_dhcp = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 allow_pull_fqdn = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 management_addr = '127.0.0.1'
Tue Dec 26 21:35:35 2017 us=73888 management_port = '25340'
Tue Dec 26 21:35:35 2017 us=73888 management_user_pass = 'stdin'
Tue Dec 26 21:35:35 2017 us=73888 management_log_history_cache = 250
Tue Dec 26 21:35:35 2017 us=73888 management_echo_buffer_size = 100
Tue Dec 26 21:35:35 2017 us=73888 management_write_peer_info_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 management_client_user = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 management_client_group = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 management_flags = 6
Tue Dec 26 21:35:35 2017 us=73888 shared_secret_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 key_direction = 2
Tue Dec 26 21:35:35 2017 us=73888 ciphername = 'BF-CBC'
Tue Dec 26 21:35:35 2017 us=73888 ncp_enabled = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Dec 26 21:35:35 2017 us=73888 authname = 'SHA1'
Tue Dec 26 21:35:35 2017 us=73888 prng_hash = 'SHA1'
Tue Dec 26 21:35:35 2017 us=73888 prng_nonce_secret_len = 16
Tue Dec 26 21:35:35 2017 us=73888 keysize = 0
Tue Dec 26 21:35:35 2017 us=73888 engine = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 replay = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 mute_replay_warnings = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 replay_window = 64
Tue Dec 26 21:35:35 2017 us=73888 replay_time = 15
Tue Dec 26 21:35:35 2017 us=73888 packet_id_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 use_iv = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 test_crypto = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 tls_server = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 tls_client = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 key_method = 2
Tue Dec 26 21:35:35 2017 us=73888 ca_file = 'c:\openvpn\clients\jeangelinas\vpn_jgelinas_com_ca_chain.crt'
Tue Dec 26 21:35:35 2017 us=73888 ca_path = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 dh_file = 'c:\openvpn\clients\jeangelinas\dh_2048.xca'
Tue Dec 26 21:35:35 2017 us=73888 cert_file = 'c:\openvpn\clients\jeangelinas\jeangelinas.crt'
Tue Dec 26 21:35:35 2017 us=73888 extra_certs_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 priv_key_file = 'c:\openvpn\clients\jeangelinas\jeangelinas.key'
Tue Dec 26 21:35:35 2017 us=73888 pkcs12_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 cryptoapi_cert = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 cipher_list = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 tls_verify = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 tls_export_cert = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 verify_x509_type = 0
Tue Dec 26 21:35:35 2017 us=73888 verify_x509_name = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 crl_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 ns_cert_type = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 160
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 136
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_ku[i] = 0
Tue Dec 26 21:35:35 2017 us=73888 remote_cert_eku = 'TLS Web Server Authentication'
Tue Dec 26 21:35:35 2017 us=73888 ssl_flags = 0
Tue Dec 26 21:35:35 2017 us=73888 tls_timeout = 2
Tue Dec 26 21:35:35 2017 us=73888 renegotiate_bytes = -1
Tue Dec 26 21:35:35 2017 us=73888 renegotiate_packets = 0
Tue Dec 26 21:35:35 2017 us=73888 renegotiate_seconds = 3600
Tue Dec 26 21:35:35 2017 us=73888 handshake_window = 60
Tue Dec 26 21:35:35 2017 us=73888 transition_window = 3600
Tue Dec 26 21:35:35 2017 us=73888 single_session = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 push_peer_info = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 tls_exit = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 tls_auth_file = 'c:\openvpn\clients\jeangelinas\ta.key'
Tue Dec 26 21:35:35 2017 us=73888 tls_crypt_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_protected_authentication = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_private_mode = 00000000
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_cert_private = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_pin_cache_period = -1
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_id = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 pkcs11_id_management = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 server_network = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 server_netmask = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 server_network_ipv6 = ::
Tue Dec 26 21:35:35 2017 us=73888 server_netbits_ipv6 = 0
Tue Dec 26 21:35:35 2017 us=73888 server_bridge_ip = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 server_bridge_netmask = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 server_bridge_pool_start = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 server_bridge_pool_end = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_pool_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_pool_start = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_pool_end = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_pool_netmask = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_pool_persist_refresh_freq = 600
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_ipv6_pool_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_ipv6_pool_base = ::
Tue Dec 26 21:35:35 2017 us=73888 ifconfig_ipv6_pool_netbits = 0
Tue Dec 26 21:35:35 2017 us=73888 n_bcast_buf = 256
Tue Dec 26 21:35:35 2017 us=73888 tcp_queue_limit = 64
Tue Dec 26 21:35:35 2017 us=73888 real_hash_size = 256
Tue Dec 26 21:35:35 2017 us=73888 virtual_hash_size = 256
Tue Dec 26 21:35:35 2017 us=73888 client_connect_script = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 learn_address_script = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 client_disconnect_script = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 client_config_dir = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 ccd_exclusive = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 tmp_dir = 'C:\Users\Daddy\AppData\Local\Temp\'
Tue Dec 26 21:35:35 2017 us=73888 push_ifconfig_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 push_ifconfig_local = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 push_ifconfig_remote_netmask = 0.0.0.0
Tue Dec 26 21:35:35 2017 us=73888 push_ifconfig_ipv6_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 push_ifconfig_ipv6_local = ::/0
Tue Dec 26 21:35:35 2017 us=73888 push_ifconfig_ipv6_remote = ::
Tue Dec 26 21:35:35 2017 us=73888 enable_c2c = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 duplicate_cn = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 cf_max = 0
Tue Dec 26 21:35:35 2017 us=73888 cf_per = 0
Tue Dec 26 21:35:35 2017 us=73888 max_clients = 1024
Tue Dec 26 21:35:35 2017 us=73888 max_routes_per_client = 256
Tue Dec 26 21:35:35 2017 us=73888 auth_user_pass_verify_script = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 auth_user_pass_verify_script_via_file = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 auth_token_generate = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 auth_token_lifetime = 0
Tue Dec 26 21:35:35 2017 us=73888 client = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 pull = ENABLED
Tue Dec 26 21:35:35 2017 us=73888 auth_user_pass_file = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 show_net_up = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 route_method = 3
Tue Dec 26 21:35:35 2017 us=73888 block_outside_dns = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 ip_win32_defined = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 ip_win32_type = 3
Tue Dec 26 21:35:35 2017 us=73888 dhcp_masq_offset = 0
Tue Dec 26 21:35:35 2017 us=73888 dhcp_lease_time = 31536000
Tue Dec 26 21:35:35 2017 us=73888 tap_sleep = 0
Tue Dec 26 21:35:35 2017 us=73888 dhcp_options = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 dhcp_renew = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 dhcp_pre_release = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 dhcp_release = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 domain = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 netbios_scope = '[UNDEF]'
Tue Dec 26 21:35:35 2017 us=73888 netbios_node_type = 0
Tue Dec 26 21:35:35 2017 us=73888 disable_nbt = DISABLED
Tue Dec 26 21:35:35 2017 us=73888 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 31 2017
Tue Dec 26 21:35:35 2017 us=73888 Windows version 6.1 (Windows 7) 64bit
Tue Dec 26 21:35:35 2017 us=73888 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Enter Management Password:
Tue Dec 26 21:35:35 2017 us=73888 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Dec 26 21:35:35 2017 us=73888 Need hold release from management interface, waiting...
Tue Dec 26 21:35:35 2017 us=557489 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Dec 26 21:35:35 2017 us=666689 MANAGEMENT: CMD 'state on'
Tue Dec 26 21:35:35 2017 us=666689 MANAGEMENT: CMD 'log all on'
Tue Dec 26 21:35:35 2017 us=760289 MANAGEMENT: CMD 'hold off'
Tue Dec 26 21:35:35 2017 us=760289 MANAGEMENT: CMD 'hold release'
Tue Dec 26 21:35:35 2017 us=900689 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 26 21:35:35 2017 us=900689 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Dec 26 21:35:35 2017 us=900689 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 26 21:35:35 2017 us=900689 MANAGEMENT: >STATE:1514342135,RESOLVE,,,,,,
Tue Dec 26 21:35:36 2017 us=41090 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 26 21:35:36 2017 us=41090 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Dec 26 21:35:36 2017 us=41090 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Dec 26 21:35:36 2017 us=41090 TCP/UDP: Preserving recently used remote address: [AF_INET]73.60.45.141:1194
Tue Dec 26 21:35:36 2017 us=41090 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Dec 26 21:35:36 2017 us=41090 UDPv4 link local: (not bound)
Tue Dec 26 21:35:36 2017 us=41090 UDPv4 link remote: [AF_INET]73.60.45.141:1194
Tue Dec 26 21:35:36 2017 us=41090 MANAGEMENT: >STATE:1514342136,WAIT,,,,,,
Tue Dec 26 21:35:36 2017 us=41090 UDPv4 WRITE [42] to [AF_INET]73.60.45.141:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Tue Dec 26 21:35:36 2017 us=41090 UDPv4 READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Dec 26 21:35:36 2017 us=41090 UDPv4 READ [54] from [AF_INET]73.60.45.141:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Tue Dec 26 21:35:36 2017 us=41090 MANAGEMENT: >STATE:1514342136,AUTH,,,,,,
Tue Dec 26 21:35:36 2017 us=41090 TLS: Initial packet from [AF_INET]73.60.45.141:1194, sid=3f658e3e ff07c3d8
Tue Dec 26 21:35:36 2017 us=41090 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Tue Dec 26 21:35:36 2017 us=41090 UDPv4 WRITE [215] to [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=173
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 READ [1172] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #2 ] [ 1 ] pid=1 DATA len=1118
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #4 ] [ 1 ]
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=2 DATA len=1118
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #5 ] [ 2 ]
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=3 DATA len=1118
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #6 ] [ 3 ]
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=4 DATA len=1118
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #7 ] [ 4 ]
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=5 DATA len=1118
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #8 ] [ 5 ]
Tue Dec 26 21:35:36 2017 us=72290 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=6 DATA len=1118
Tue Dec 26 21:35:36 2017 us=72290 VERIFY OK: depth=3, C=US, ST=NH, L=Manchester, O=jgelinas.com, OU=jgelinas.com, CN=jgelinas.com Master CA, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:36 2017 us=72290 VERIFY OK: depth=2, C=US, ST=NH, L=Manchester, O=jgelinas.com, OU=jgelinas.com, CN=jgelinas.com Intermediate Signing CA, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:36 2017 us=72290 VERIFY OK: depth=1, C=US, ST=NH, L=Manchester, O=vpn.jgelinas.com, OU=vpn.jgelinas.com, CN=Signing Certificate for vpn.jgelinas.com, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:36 2017 us=72290 Validating certificate key usage
Tue Dec 26 21:35:36 2017 us=72290 ++ Certificate has key usage 00a8, expects 00a0
Tue Dec 26 21:35:36 2017 us=72290 ++ Certificate has key usage 00a8, expects 0088
Tue Dec 26 21:35:36 2017 us=72290 VERIFY KU ERROR
Tue Dec 26 21:35:36 2017 us=72290 OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Tue Dec 26 21:35:36 2017 us=72290 TLS_ERROR: BIO read tls_read_plaintext error
Tue Dec 26 21:35:36 2017 us=72290 TLS Error: TLS object -> incoming plaintext read error
Tue Dec 26 21:35:36 2017 us=72290 TLS Error: TLS handshake failed
Tue Dec 26 21:35:36 2017 us=72290 TCP/UDP: Closing socket
Tue Dec 26 21:35:36 2017 us=72290 SIGUSR1[soft,tls-error] received, process restarting
Tue Dec 26 21:35:36 2017 us=72290 MANAGEMENT: >STATE:1514342136,RECONNECTING,tls-error,,,,,
Tue Dec 26 21:35:36 2017 us=72290 Restart pause, 5 second(s)
Tue Dec 26 21:35:41 2017 us=142299 Re-using SSL/TLS context
Tue Dec 26 21:35:41 2017 us=142299 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 26 21:35:41 2017 us=142299 MANAGEMENT: >STATE:1514342141,RESOLVE,,,,,,
Tue Dec 26 21:35:41 2017 us=142299 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 26 21:35:41 2017 us=142299 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Dec 26 21:35:41 2017 us=142299 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Dec 26 21:35:41 2017 us=142299 TCP/UDP: Preserving recently used remote address: [AF_INET]73.60.45.141:1194
Tue Dec 26 21:35:41 2017 us=142299 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Dec 26 21:35:41 2017 us=142299 UDPv4 link local: (not bound)
Tue Dec 26 21:35:41 2017 us=142299 UDPv4 link remote: [AF_INET]73.60.45.141:1194
Tue Dec 26 21:35:41 2017 us=142299 MANAGEMENT: >STATE:1514342141,WAIT,,,,,,
Tue Dec 26 21:35:41 2017 us=142299 UDPv4 WRITE [42] to [AF_INET]73.60.45.141:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Tue Dec 26 21:35:41 2017 us=142299 UDPv4 READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Dec 26 21:35:41 2017 us=142299 UDPv4 READ [54] from [AF_INET]73.60.45.141:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Tue Dec 26 21:35:41 2017 us=142299 MANAGEMENT: >STATE:1514342141,AUTH,,,,,,
Tue Dec 26 21:35:41 2017 us=142299 TLS: Initial packet from [AF_INET]73.60.45.141:1194, sid=7e6f8547 66ff824e
Tue Dec 26 21:35:41 2017 us=142299 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Tue Dec 26 21:35:41 2017 us=142299 UDPv4 WRITE [215] to [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=173
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 READ [1172] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #2 ] [ 1 ] pid=1 DATA len=1118
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #4 ] [ 1 ]
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=2 DATA len=1118
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #5 ] [ 2 ]
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=3 DATA len=1118
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #6 ] [ 3 ]
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=4 DATA len=1118
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #7 ] [ 4 ]
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=5 DATA len=1118
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #8 ] [ 5 ]
Tue Dec 26 21:35:41 2017 us=173499 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=6 DATA len=1118
Tue Dec 26 21:35:41 2017 us=173499 VERIFY OK: depth=3, C=US, ST=NH, L=Manchester, O=jgelinas.com, OU=jgelinas.com, CN=jgelinas.com Master CA, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:41 2017 us=173499 VERIFY OK: depth=2, C=US, ST=NH, L=Manchester, O=jgelinas.com, OU=jgelinas.com, CN=jgelinas.com Intermediate Signing CA, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:41 2017 us=173499 VERIFY OK: depth=1, C=US, ST=NH, L=Manchester, O=vpn.jgelinas.com, OU=vpn.jgelinas.com, CN=Signing Certificate for vpn.jgelinas.com, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:41 2017 us=173499 Validating certificate key usage
Tue Dec 26 21:35:41 2017 us=173499 ++ Certificate has key usage 00a8, expects 00a0
Tue Dec 26 21:35:41 2017 us=173499 ++ Certificate has key usage 00a8, expects 0088
Tue Dec 26 21:35:41 2017 us=173499 VERIFY KU ERROR
Tue Dec 26 21:35:41 2017 us=173499 OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Tue Dec 26 21:35:41 2017 us=173499 TLS_ERROR: BIO read tls_read_plaintext error
Tue Dec 26 21:35:41 2017 us=173499 TLS Error: TLS object -> incoming plaintext read error
Tue Dec 26 21:35:41 2017 us=173499 TLS Error: TLS handshake failed
Tue Dec 26 21:35:41 2017 us=173499 TCP/UDP: Closing socket
Tue Dec 26 21:35:41 2017 us=189099 SIGUSR1[soft,tls-error] received, process restarting
Tue Dec 26 21:35:41 2017 us=189099 MANAGEMENT: >STATE:1514342141,RECONNECTING,tls-error,,,,,
Tue Dec 26 21:35:41 2017 us=189099 Restart pause, 5 second(s)
Tue Dec 26 21:35:46 2017 us=259108 Re-using SSL/TLS context
Tue Dec 26 21:35:46 2017 us=259108 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Dec 26 21:35:46 2017 us=259108 MANAGEMENT: >STATE:1514342146,RESOLVE,,,,,,
Tue Dec 26 21:35:46 2017 us=259108 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Dec 26 21:35:46 2017 us=259108 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Dec 26 21:35:46 2017 us=259108 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Dec 26 21:35:46 2017 us=259108 TCP/UDP: Preserving recently used remote address: [AF_INET]73.60.45.141:1194
Tue Dec 26 21:35:46 2017 us=259108 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Dec 26 21:35:46 2017 us=259108 UDPv4 link local: (not bound)
Tue Dec 26 21:35:46 2017 us=259108 UDPv4 link remote: [AF_INET]73.60.45.141:1194
Tue Dec 26 21:35:46 2017 us=259108 MANAGEMENT: >STATE:1514342146,WAIT,,,,,,
Tue Dec 26 21:35:46 2017 us=259108 UDPv4 WRITE [42] to [AF_INET]73.60.45.141:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
Tue Dec 26 21:35:46 2017 us=259108 UDPv4 READ [0] from [AF_UNSPEC]: DATA UNDEF len=-1
Tue Dec 26 21:35:46 2017 us=259108 UDPv4 READ [54] from [AF_INET]73.60.45.141:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 pid=[ #1 ] [ 0 ] pid=0 DATA len=0
Tue Dec 26 21:35:46 2017 us=259108 MANAGEMENT: >STATE:1514342146,AUTH,,,,,,
Tue Dec 26 21:35:46 2017 us=259108 TLS: Initial packet from [AF_INET]73.60.45.141:1194, sid=8cf12b3e 4bbdb3a5
Tue Dec 26 21:35:46 2017 us=259108 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #2 ] [ 0 ]
Tue Dec 26 21:35:46 2017 us=259108 UDPv4 WRITE [215] to [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=1 DATA len=173
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 READ [1172] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #2 ] [ 1 ] pid=1 DATA len=1118
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #4 ] [ 1 ]
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #3 ] [ ] pid=2 DATA len=1118
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #5 ] [ 2 ]
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #4 ] [ ] pid=3 DATA len=1118
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #6 ] [ 3 ]
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ ] pid=4 DATA len=1118
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #7 ] [ 4 ]
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ ] pid=5 DATA len=1118
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 WRITE [50] to [AF_INET]73.60.45.141:1194: P_ACK_V1 kid=0 pid=[ #8 ] [ 5 ]
Tue Dec 26 21:35:46 2017 us=274708 UDPv4 READ [1160] from [AF_INET]73.60.45.141:1194: P_CONTROL_V1 kid=0 pid=[ #7 ] [ ] pid=6 DATA len=1118
Tue Dec 26 21:35:46 2017 us=274708 VERIFY OK: depth=3, C=US, ST=NH, L=Manchester, O=jgelinas.com, OU=jgelinas.com, CN=jgelinas.com Master CA, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:46 2017 us=290308 VERIFY OK: depth=2, C=US, ST=NH, L=Manchester, O=jgelinas.com, OU=jgelinas.com, CN=jgelinas.com Intermediate Signing CA, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:46 2017 us=290308 VERIFY OK: depth=1, C=US, ST=NH, L=Manchester, O=vpn.jgelinas.com, OU=vpn.jgelinas.com, CN=Signing Certificate for vpn.jgelinas.com, emailAddress=jgelinas3333@gmail.com
Tue Dec 26 21:35:46 2017 us=290308 Validating certificate key usage
Tue Dec 26 21:35:46 2017 us=290308 ++ Certificate has key usage 00a8, expects 00a0
Tue Dec 26 21:35:46 2017 us=290308 ++ Certificate has key usage 00a8, expects 0088
Tue Dec 26 21:35:46 2017 us=290308 VERIFY KU ERROR
Tue Dec 26 21:35:46 2017 us=290308 OpenSSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Tue Dec 26 21:35:46 2017 us=290308 TLS_ERROR: BIO read tls_read_plaintext error
Tue Dec 26 21:35:46 2017 us=290308 TLS Error: TLS object -> incoming plaintext read error
Tue Dec 26 21:35:46 2017 us=290308 TLS Error: TLS handshake failed
Tue Dec 26 21:35:46 2017 us=290308 TCP/UDP: Closing socket
Tue Dec 26 21:35:46 2017 us=290308 SIGUSR1[soft,tls-error] received, process restarting
Tue Dec 26 21:35:46 2017 us=290308 MANAGEMENT: >STATE:1514342146,RECONNECTING,tls-error,,,,,
Tue Dec 26 21:35:46 2017 us=290308 Restart pause, 5 second(s)
Tue Dec 26 21:35:50 2017 us=346315 SIGTERM[hard,init_instance] received, process exiting
Tue Dec 26 21:35:50 2017 us=346315 MANAGEMENT: >STATE:1514342150,EXITING,init_instance,,,,,
[/oconf]
