OpenVPN connection drop and reconnect

Kurogane

I'm having problems with stability when i connect in my VPN server.

The problem is i lose connectivity on the internet but not in the VPN and happen randomly.

I'm not sure what happen or what is the issue i'm facing, on the logs says i have "replay-window backtrack occurred" when i lost connectivity. I tried to tweak what i found on internet ex: mtu, mssfix, change proto and port and still same issue.

I'm using this VPN to forward traffic over the VPN.

Can anyone tell me what could be the issue?

dev tun
persist-key
persist-tun
topology subnet
port 2194
proto udp
keepalive 10 120

ca /etc/openvpn/ca.crt
cert /etc/openvpn/yui.crt
key /etc/openvpn/yui.key
dh none

server 10.9.0.0 255.255.255.0

explicit-exit-notify 1

client-config-dir ccd
verify-client-cert
client-to-client

compress lz4-v2
push "compress lz4-v2"

push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

tls-crypt /etc/openvpn/ta.key
auth SHA512 # This needs to be in client.ovpn too though.
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384

ifconfig-pool-persist ipp.txt
status openvpn-status.log
log openvpn.log
verb 4

client
dev tun
persist-key
persist-tun
proto udp
nobind
remote-cert-tls server
auth SHA512
compress lz4-v2
verb 4

remote 1.2.3.4 2194

ca ca.crt
cert user.crt
key user.key
tls-crypt ta.key

Server Logs

Thu Feb 15 13:53:19 2018 us=61134 Current Parameter Settings:
Thu Feb 15 13:53:19 2018 us=61147   config = 'vpn.conf'
Thu Feb 15 13:53:19 2018 us=61157   mode = 1
Thu Feb 15 13:53:19 2018 us=61166   persist_config = DISABLED
Thu Feb 15 13:53:19 2018 us=61176   persist_mode = 1
Thu Feb 15 13:53:19 2018 us=61189   show_ciphers = DISABLED
Thu Feb 15 13:53:19 2018 us=61199   show_digests = DISABLED
Thu Feb 15 13:53:19 2018 us=61208   show_engines = DISABLED
Thu Feb 15 13:53:19 2018 us=61218   genkey = DISABLED
Thu Feb 15 13:53:19 2018 us=61228   key_pass_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61237   show_tls_ciphers = DISABLED
Thu Feb 15 13:53:19 2018 us=61248   connect_retry_max = 0
Thu Feb 15 13:53:19 2018 us=61258 Connection profiles [0]:
Thu Feb 15 13:53:19 2018 us=61270   proto = udp
Thu Feb 15 13:53:19 2018 us=61280   local = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61290   local_port = '2194'
Thu Feb 15 13:53:19 2018 us=61299   remote = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61309   remote_port = '2194'
Thu Feb 15 13:53:19 2018 us=61318   remote_float = DISABLED
Thu Feb 15 13:53:19 2018 us=61328   bind_defined = DISABLED
Thu Feb 15 13:53:19 2018 us=61338   bind_local = ENABLED
Thu Feb 15 13:53:19 2018 us=61348   bind_ipv6_only = DISABLED
Thu Feb 15 13:53:19 2018 us=61358   connect_retry_seconds = 5
Thu Feb 15 13:53:19 2018 us=61367   connect_timeout = 120
Thu Feb 15 13:53:19 2018 us=61377   socks_proxy_server = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61387   socks_proxy_port = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61397   tun_mtu = 1500
Thu Feb 15 13:53:19 2018 us=61407   tun_mtu_defined = ENABLED
Thu Feb 15 13:53:19 2018 us=61417   link_mtu = 1500
Thu Feb 15 13:53:19 2018 us=61431   link_mtu_defined = DISABLED
Thu Feb 15 13:53:19 2018 us=61440   tun_mtu_extra = 0
Thu Feb 15 13:53:19 2018 us=61450   tun_mtu_extra_defined = DISABLED
Thu Feb 15 13:53:19 2018 us=61461   mtu_discover_type = -1
Thu Feb 15 13:53:19 2018 us=61470   fragment = 0
Thu Feb 15 13:53:19 2018 us=61480   mssfix = 1450
Thu Feb 15 13:53:19 2018 us=61490   explicit_exit_notification = 0
Thu Feb 15 13:53:19 2018 us=61500 Connection profiles END
Thu Feb 15 13:53:19 2018 us=61510   remote_random = DISABLED
Thu Feb 15 13:53:19 2018 us=61521   ipchange = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61531   dev = 'tun'
Thu Feb 15 13:53:19 2018 us=61541   dev_type = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61551   dev_node = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61561   lladdr = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61571   topology = 3
Thu Feb 15 13:53:19 2018 us=61581   ifconfig_local = '10.9.0.1'
Thu Feb 15 13:53:19 2018 us=61592   ifconfig_remote_netmask = '255.255.255.0'
Thu Feb 15 13:53:19 2018 us=61602   ifconfig_noexec = DISABLED
Thu Feb 15 13:53:19 2018 us=61612   ifconfig_nowarn = DISABLED
Thu Feb 15 13:53:19 2018 us=61621   ifconfig_ipv6_local = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61631   ifconfig_ipv6_netbits = 0
Thu Feb 15 13:53:19 2018 us=61641   ifconfig_ipv6_remote = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61650   shaper = 0
Thu Feb 15 13:53:19 2018 us=61660   mtu_test = 0
Thu Feb 15 13:53:19 2018 us=61670   mlock = DISABLED
Thu Feb 15 13:53:19 2018 us=61679   keepalive_ping = 10
Thu Feb 15 13:53:19 2018 us=61689   keepalive_timeout = 120
Thu Feb 15 13:53:19 2018 us=61698   inactivity_timeout = 0
Thu Feb 15 13:53:19 2018 us=61708   ping_send_timeout = 10
Thu Feb 15 13:53:19 2018 us=61718   ping_rec_timeout = 240
Thu Feb 15 13:53:19 2018 us=61728   ping_rec_timeout_action = 2
Thu Feb 15 13:53:19 2018 us=61738   ping_timer_remote = DISABLED
Thu Feb 15 13:53:19 2018 us=61748   remap_sigusr1 = 0
Thu Feb 15 13:53:19 2018 us=61758   persist_tun = ENABLED
Thu Feb 15 13:53:19 2018 us=61767   persist_local_ip = DISABLED
Thu Feb 15 13:53:19 2018 us=61777   persist_remote_ip = DISABLED
Thu Feb 15 13:53:19 2018 us=61786   persist_key = ENABLED
Thu Feb 15 13:53:19 2018 us=61796   passtos = DISABLED
Thu Feb 15 13:53:19 2018 us=61822   resolve_retry_seconds = 1000000000
Thu Feb 15 13:53:19 2018 us=61832   resolve_in_advance = DISABLED
Thu Feb 15 13:53:19 2018 us=61846   username = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61860   groupname = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61870   chroot_dir = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61880   cd_dir = '/etc/openvpn'
Thu Feb 15 13:53:19 2018 us=61889   selinux_context = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61899   writepid = '/var/run/openvpn/vpn.pid'
Thu Feb 15 13:53:19 2018 us=61908   up_script = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61918   down_script = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=61933   down_pre = DISABLED
Thu Feb 15 13:53:19 2018 us=61943   up_restart = DISABLED
Thu Feb 15 13:53:19 2018 us=61953   up_delay = DISABLED
Thu Feb 15 13:53:19 2018 us=61963   daemon = ENABLED
Thu Feb 15 13:53:19 2018 us=61972   inetd = 0
Thu Feb 15 13:53:19 2018 us=61982   log = ENABLED
Thu Feb 15 13:53:19 2018 us=61991   suppress_timestamps = DISABLED
Thu Feb 15 13:53:19 2018 us=62001   machine_readable_output = DISABLED
Thu Feb 15 13:53:19 2018 us=62010   nice = 0
Thu Feb 15 13:53:19 2018 us=62019   verbosity = 4
Thu Feb 15 13:53:19 2018 us=62029   mute = 0
Thu Feb 15 13:53:19 2018 us=62038   gremlin = 0
Thu Feb 15 13:53:19 2018 us=62047   status_file = 'openvpn-status.log'
Thu Feb 15 13:53:19 2018 us=62056   status_file_version = 1
Thu Feb 15 13:53:19 2018 us=62066   status_file_update_freq = 60
Thu Feb 15 13:53:19 2018 us=62075   occ = ENABLED
Thu Feb 15 13:53:19 2018 us=62091   rcvbuf = 0
Thu Feb 15 13:53:19 2018 us=62101   sndbuf = 0
Thu Feb 15 13:53:19 2018 us=62111   mark = 0
Thu Feb 15 13:53:19 2018 us=62120   sockflags = 0
Thu Feb 15 13:53:19 2018 us=62130   fast_io = DISABLED
Thu Feb 15 13:53:19 2018 us=62139   comp.alg = 11
Thu Feb 15 13:53:19 2018 us=62149   comp.flags = 0
Thu Feb 15 13:53:19 2018 us=62159   route_script = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62169   route_default_gateway = '10.9.0.2'
Thu Feb 15 13:53:19 2018 us=62178   route_default_metric = 0
Thu Feb 15 13:53:19 2018 us=62188   route_noexec = DISABLED
Thu Feb 15 13:53:19 2018 us=62197   route_delay = 0
Thu Feb 15 13:53:19 2018 us=62207   route_delay_window = 30
Thu Feb 15 13:53:19 2018 us=62216   route_delay_defined = DISABLED
Thu Feb 15 13:53:19 2018 us=62225   route_nopull = DISABLED
Thu Feb 15 13:53:19 2018 us=62235   route_gateway_via_dhcp = DISABLED
Thu Feb 15 13:53:19 2018 us=62244   allow_pull_fqdn = DISABLED
Thu Feb 15 13:53:19 2018 us=62255   route 192.168.0.0/255.255.255.0/default (not set)/default (not set)
Thu Feb 15 13:53:19 2018 us=62265   route 172.16.1.0/255.255.255.0/default (not set)/default (not set)
Thu Feb 15 13:53:19 2018 us=62275   management_addr = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62285   management_port = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62295   management_user_pass = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62304   management_log_history_cache = 250
Thu Feb 15 13:53:19 2018 us=62314   management_echo_buffer_size = 100
Thu Feb 15 13:53:19 2018 us=62324   management_write_peer_info_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62334   management_client_user = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62343   management_client_group = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62353   management_flags = 0
Thu Feb 15 13:53:19 2018 us=62362   shared_secret_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62372   key_direction = 0
Thu Feb 15 13:53:19 2018 us=62382   ciphername = 'BF-CBC'
Thu Feb 15 13:53:19 2018 us=62391   ncp_enabled = ENABLED
Thu Feb 15 13:53:19 2018 us=62401   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Thu Feb 15 13:53:19 2018 us=62410   authname = 'SHA512'
Thu Feb 15 13:53:19 2018 us=62420   prng_hash = 'SHA1'
Thu Feb 15 13:53:19 2018 us=62430   prng_nonce_secret_len = 16
Thu Feb 15 13:53:19 2018 us=62440   keysize = 0
Thu Feb 15 13:53:19 2018 us=62449   engine = DISABLED
Thu Feb 15 13:53:19 2018 us=62459   replay = ENABLED
Thu Feb 15 13:53:19 2018 us=62469   mute_replay_warnings = DISABLED
Thu Feb 15 13:53:19 2018 us=62478   replay_window = 64
Thu Feb 15 13:53:19 2018 us=62496   replay_time = 15
Thu Feb 15 13:53:19 2018 us=62506   packet_id_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62516   use_iv = ENABLED
Thu Feb 15 13:53:19 2018 us=62525   test_crypto = DISABLED
Thu Feb 15 13:53:19 2018 us=62535   tls_server = ENABLED
Thu Feb 15 13:53:19 2018 us=62545   tls_client = DISABLED
Thu Feb 15 13:53:19 2018 us=62554   key_method = 2
Thu Feb 15 13:53:19 2018 us=62564   ca_file = '/etc/openvpn/ca.crt'
Thu Feb 15 13:53:19 2018 us=62574   ca_path = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62583   dh_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62593   cert_file = '/etc/openvpn/yui.crt'
Thu Feb 15 13:53:19 2018 us=62603   extra_certs_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62613   priv_key_file = '/etc/openvpn/yui.key'
Thu Feb 15 13:53:19 2018 us=62623   pkcs12_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62633   cipher_list = 'TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384'
Thu Feb 15 13:53:19 2018 us=62643   tls_verify = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62653   tls_export_cert = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62663   verify_x509_type = 0
Thu Feb 15 13:53:19 2018 us=62672   verify_x509_name = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62682   crl_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62692   ns_cert_type = 0
Thu Feb 15 13:53:19 2018 us=62701   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62711   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62721   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62730   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62741   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62751   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62761   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62771   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62781   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62791   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62803   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62812   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62821   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62832   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62846   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62858   remote_cert_ku[i] = 0
Thu Feb 15 13:53:19 2018 us=62867   remote_cert_eku = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62877   ssl_flags = 192
Thu Feb 15 13:53:19 2018 us=62888   tls_timeout = 2
Thu Feb 15 13:53:19 2018 us=62897   renegotiate_bytes = -1
Thu Feb 15 13:53:19 2018 us=62907   renegotiate_packets = 0
Thu Feb 15 13:53:19 2018 us=62917   renegotiate_seconds = 3600
Thu Feb 15 13:53:19 2018 us=62927   handshake_window = 60
Thu Feb 15 13:53:19 2018 us=62937   transition_window = 3600
Thu Feb 15 13:53:19 2018 us=62947   single_session = DISABLED
Thu Feb 15 13:53:19 2018 us=62957   push_peer_info = DISABLED
Thu Feb 15 13:53:19 2018 us=62967   tls_exit = DISABLED
Thu Feb 15 13:53:19 2018 us=62978   tls_auth_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=62989   tls_crypt_file = '/etc/openvpn/ta.key'
Thu Feb 15 13:53:19 2018 us=63000   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63010   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63020   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63030   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63040   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63050   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63060   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63069   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63080   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63097   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63107   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63117   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63126   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63136   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63159   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63169   pkcs11_protected_authentication = DISABLED
Thu Feb 15 13:53:19 2018 us=63180   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63190   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63199   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63209   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63219   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63233   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63243   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63253   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63263   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63275   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63285   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63295   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63304   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63314   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63323   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63332   pkcs11_private_mode = 00000000
Thu Feb 15 13:53:19 2018 us=63342   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63351   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63360   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63370   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63380   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63389   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63399   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63408   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63418   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63427   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63437   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63446   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63456   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63465   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63474   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63484   pkcs11_cert_private = DISABLED
Thu Feb 15 13:53:19 2018 us=63495   pkcs11_pin_cache_period = -1
Thu Feb 15 13:53:19 2018 us=63504   pkcs11_id = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=63514   pkcs11_id_management = DISABLED
Thu Feb 15 13:53:19 2018 us=63527   server_network = 10.9.0.0
Thu Feb 15 13:53:19 2018 us=63537   server_netmask = 255.255.255.0
Thu Feb 15 13:53:19 2018 us=63561   server_network_ipv6 = ::
Thu Feb 15 13:53:19 2018 us=63572   server_netbits_ipv6 = 0
Thu Feb 15 13:53:19 2018 us=63583   server_bridge_ip = 0.0.0.0
Thu Feb 15 13:53:19 2018 us=63594   server_bridge_netmask = 0.0.0.0
Thu Feb 15 13:53:19 2018 us=63604   server_bridge_pool_start = 0.0.0.0
Thu Feb 15 13:53:19 2018 us=63615   server_bridge_pool_end = 0.0.0.0
Thu Feb 15 13:53:19 2018 us=63625   push_entry = 'route 172.16.1.0 255.255.255.0'
Thu Feb 15 13:53:19 2018 us=63635   push_entry = 'route 192.168.0.0 255.255.255.0'
Thu Feb 15 13:53:19 2018 us=63645   push_entry = 'compress lz4-v2'
Thu Feb 15 13:53:19 2018 us=63655   push_entry = 'redirect-gateway def1'
Thu Feb 15 13:53:19 2018 us=63664   push_entry = 'dhcp-option DNS 8.8.8.8'
Thu Feb 15 13:53:19 2018 us=63674   push_entry = 'dhcp-option DNS 8.8.4.4'
Thu Feb 15 13:53:19 2018 us=63684   push_entry = 'route-gateway 10.9.0.1'
Thu Feb 15 13:53:19 2018 us=63694   push_entry = 'topology subnet'
Thu Feb 15 13:53:19 2018 us=63704   push_entry = 'ping 10'
Thu Feb 15 13:53:19 2018 us=63713   push_entry = 'ping-restart 120'
Thu Feb 15 13:53:19 2018 us=63723   ifconfig_pool_defined = ENABLED
Thu Feb 15 13:53:19 2018 us=63734   ifconfig_pool_start = 10.9.0.2
Thu Feb 15 13:53:19 2018 us=63745   ifconfig_pool_end = 10.9.0.253
Thu Feb 15 13:53:19 2018 us=63756   ifconfig_pool_netmask = 255.255.255.0
Thu Feb 15 13:53:19 2018 us=63766   ifconfig_pool_persist_filename = 'ipp.txt'
Thu Feb 15 13:53:19 2018 us=63785   ifconfig_pool_persist_refresh_freq = 600
Thu Feb 15 13:53:19 2018 us=63796   ifconfig_ipv6_pool_defined = DISABLED
Thu Feb 15 13:53:19 2018 us=63807   ifconfig_ipv6_pool_base = ::
Thu Feb 15 13:53:19 2018 us=63817   ifconfig_ipv6_pool_netbits = 0
Thu Feb 15 13:53:19 2018 us=63827   n_bcast_buf = 256
Thu Feb 15 13:53:19 2018 us=63838   tcp_queue_limit = 64
Thu Feb 15 13:53:19 2018 us=63853   real_hash_size = 256
Thu Feb 15 13:53:19 2018 us=63863   virtual_hash_size = 256
Thu Feb 15 13:53:19 2018 us=63873   client_connect_script = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=63883   learn_address_script = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=63893   client_disconnect_script = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=63903   client_config_dir = 'ccd'
Thu Feb 15 13:53:19 2018 us=63912   ccd_exclusive = DISABLED
Thu Feb 15 13:53:19 2018 us=63922   tmp_dir = '/tmp'
Thu Feb 15 13:53:19 2018 us=63932   push_ifconfig_defined = DISABLED
Thu Feb 15 13:53:19 2018 us=63942   push_ifconfig_local = 0.0.0.0
Thu Feb 15 13:53:19 2018 us=63953   push_ifconfig_remote_netmask = 0.0.0.0
Thu Feb 15 13:53:19 2018 us=63963   push_ifconfig_ipv6_defined = DISABLED
Thu Feb 15 13:53:19 2018 us=63974   push_ifconfig_ipv6_local = ::/0
Thu Feb 15 13:53:19 2018 us=63984   push_ifconfig_ipv6_remote = ::
Thu Feb 15 13:53:19 2018 us=63994   enable_c2c = ENABLED
Thu Feb 15 13:53:19 2018 us=64003   duplicate_cn = DISABLED
Thu Feb 15 13:53:19 2018 us=64013   cf_max = 0
Thu Feb 15 13:53:19 2018 us=64022   cf_per = 0
Thu Feb 15 13:53:19 2018 us=64032   max_clients = 1024
Thu Feb 15 13:53:19 2018 us=64041   max_routes_per_client = 256
Thu Feb 15 13:53:19 2018 us=64051   auth_user_pass_verify_script = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=64060   auth_user_pass_verify_script_via_file = DISABLED
Thu Feb 15 13:53:19 2018 us=64070   auth_token_generate = DISABLED
Thu Feb 15 13:53:19 2018 us=64080   auth_token_lifetime = 0
Thu Feb 15 13:53:19 2018 us=64095   port_share_host = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=64105   port_share_port = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=64115   client = DISABLED
Thu Feb 15 13:53:19 2018 us=64124   pull = DISABLED
Thu Feb 15 13:53:19 2018 us=64134   auth_user_pass_file = '[UNDEF]'
Thu Feb 15 13:53:19 2018 us=64150 OpenVPN 2.4.4 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017
Thu Feb 15 13:53:19 2018 us=64167 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.03
Thu Feb 15 13:53:19 2018 us=67564 ECDH curve secp521r1 added
Thu Feb 15 13:53:19 2018 us=67904 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Feb 15 13:53:19 2018 us=67966 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Feb 15 13:53:19 2018 us=67988 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Feb 15 13:53:19 2018 us=68011 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Feb 15 13:53:19 2018 us=68057 TLS-Auth MTU parms [ L:1622 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Thu Feb 15 13:53:19 2018 us=68485 ROUTE_GATEWAY ON_LINK IFACE=venet0 HWADDR=00:00:00:00:00:00
Thu Feb 15 13:53:19 2018 us=68917 TUN/TAP device tun0 opened
Thu Feb 15 13:53:19 2018 us=68964 TUN/TAP TX queue length set to 100
Thu Feb 15 13:53:19 2018 us=68995 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Feb 15 13:53:19 2018 us=69027 /sbin/ip link set dev tun0 up mtu 1500
Thu Feb 15 13:53:19 2018 us=75683 /sbin/ip addr add dev tun0 10.9.0.1/24 broadcast 10.9.0.255
Thu Feb 15 13:53:19 2018 us=77955 /sbin/ip route add 172.16.1.0/24 via 10.9.0.2
Thu Feb 15 13:53:19 2018 us=80350 /sbin/ip route add 192.168.0.0/24 via 10.9.0.2
Thu Feb 15 13:53:19 2018 us=82347 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Feb 15 13:53:19 2018 us=82427 Could not determine IPv4/IPv6 protocol. Using AF_INET
Thu Feb 15 13:53:19 2018 us=82487 Socket Buffers: R=[133120->133120] S=[133120->133120]
Thu Feb 15 13:53:19 2018 us=82565 UDPv4 link local (bound): [AF_INET][undef]:2194
Thu Feb 15 13:53:19 2018 us=82588 UDPv4 link remote: [AF_UNSPEC]
Thu Feb 15 13:53:19 2018 us=82624 MULTI: multi_init called, r=256 v=256
Thu Feb 15 13:53:19 2018 us=82701 IFCONFIG POOL: base=10.9.0.2 size=252, ipv6=0
Thu Feb 15 13:53:19 2018 us=82746 ifconfig_pool_read(), in='user.localhost,10.9.0.2', TODO: IPv6
Thu Feb 15 13:53:19 2018 us=82774 succeeded -> ifconfig_pool_set()
Thu Feb 15 13:53:19 2018 us=82798 IFCONFIG POOL LIST
Thu Feb 15 13:53:19 2018 us=82827 user.localhost,10.9.0.2
Thu Feb 15 13:53:19 2018 us=82915 Initialization Sequence Completed
Thu Feb 15 21:29:01 2018 us=911925 MULTI: multi_create_instance called
Thu Feb 15 21:29:01 2018 us=934427 1.2.3.5:57857 Re-using SSL/TLS context
Thu Feb 15 21:29:01 2018 us=934647 1.2.3.5:57857 LZ4v2 compression initializing
Thu Feb 15 21:29:01 2018 us=935681 1.2.3.5:57857 Control Channel MTU parms [ L:1622 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Thu Feb 15 21:29:01 2018 us=935734 1.2.3.5:57857 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Feb 15 21:29:01 2018 us=937675 1.2.3.5:57857 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1586,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA512,keysize 128,key-method 2,tls-server'
Thu Feb 15 21:29:01 2018 us=937760 1.2.3.5:57857 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1586,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA512,keysize 128,key-method 2,tls-client'
Thu Feb 15 21:29:01 2018 us=937993 1.2.3.5:57857 TLS: Initial packet from [AF_INET]1.2.3.5:57857, sid=a673c926 c7e12947
Thu Feb 15 21:29:02 2018 us=81423 1.2.3.5:57857 VERIFY OK: depth=1, C=USA, ST=USA, L=USA, O=Localhost, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 21:29:02 2018 us=87724 1.2.3.5:57857 VERIFY OK: depth=0, C=USA, ST=USA, L=USA, O=Localhost, OU=Hosting, CN=user.localhost, emailAddress=user@localhost
Thu Feb 15 21:29:02 2018 us=154537 1.2.3.5:57857 peer info: IV_VER=2.4.4
Thu Feb 15 21:29:02 2018 us=154611 1.2.3.5:57857 peer info: IV_PLAT=win
Thu Feb 15 21:29:02 2018 us=154631 1.2.3.5:57857 peer info: IV_PROTO=2
Thu Feb 15 21:29:02 2018 us=154648 1.2.3.5:57857 peer info: IV_NCP=2
Thu Feb 15 21:29:02 2018 us=154664 1.2.3.5:57857 peer info: IV_LZ4=1
Thu Feb 15 21:29:02 2018 us=154681 1.2.3.5:57857 peer info: IV_LZ4v2=1
Thu Feb 15 21:29:02 2018 us=154697 1.2.3.5:57857 peer info: IV_LZO=1
Thu Feb 15 21:29:02 2018 us=154714 1.2.3.5:57857 peer info: IV_COMP_STUB=1
Thu Feb 15 21:29:02 2018 us=154730 1.2.3.5:57857 peer info: IV_COMP_STUBv2=1
Thu Feb 15 21:29:02 2018 us=154746 1.2.3.5:57857 peer info: IV_TCPNL=1
Thu Feb 15 21:29:02 2018 us=154763 1.2.3.5:57857 peer info: IV_GUI_VER=OpenVPN_GUI_11
Thu Feb 15 21:29:02 2018 us=208041 1.2.3.5:57857 Control Channel: TLUSA1.2, cipher TLUSA1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 521 bit EC, curve: secp521r1
Thu Feb 15 21:29:02 2018 us=208131 1.2.3.5:57857 [user.localhost] Peer Connection Initiated with [AF_INET]1.2.3.5:57857
Thu Feb 15 21:29:02 2018 us=239345 user.localhost/1.2.3.5:57857 OPTIONS IMPORT: reading client specific options from: ccd/user.localhost
Thu Feb 15 21:29:02 2018 us=245275 user.localhost/1.2.3.5:57857 MULTI_USAa: pool returned IPv4=10.9.0.2, IPv6=(Not enabled)
Thu Feb 15 21:29:02 2018 us=245396 user.localhost/1.2.3.5:57857 MULTI: Learn: 10.9.0.2 -> user.localhost/1.2.3.5:57857
Thu Feb 15 21:29:02 2018 us=245422 user.localhost/1.2.3.5:57857 MULTI: primary virtual IP for user.localhost/1.2.3.5:57857: 10.9.0.2
Thu Feb 15 21:29:03 2018 us=370949 user.localhost/1.2.3.5:57857 PUSH: Received control message: 'PUSH_REQUEST'
Thu Feb 15 21:29:03 2018 us=371042 user.localhost/1.2.3.5:57857 SENT CONTROL [user.localhost]: 'PUSH_REPLY,compress lz4-v2,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.9.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.9.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Thu Feb 15 21:29:03 2018 us=371070 user.localhost/1.2.3.5:57857 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Feb 15 21:29:03 2018 us=371095 user.localhost/1.2.3.5:57857 Data Channel MTU parms [ L:1550 D:1450 EF:50 EB:406 ET:0 EL:3 ]
Thu Feb 15 21:29:03 2018 us=373268 user.localhost/1.2.3.5:57857 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 21:29:03 2018 us=373387 user.localhost/1.2.3.5:57857 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 21:29:03 2018 us=479693 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [1] [SSL-0] [0___0] 0:5 0:4 t=1518751743[0] r=[0,64,15,1,1] sl=[59,5,64,528]
Thu Feb 15 21:29:03 2018 us=479814 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [6] [SSL-0] [0_000__0] 0:8 0:2 t=1518751743[0] r=[0,64,15,6,1] sl=[56,8,64,528]
Thu Feb 15 21:29:03 2018 us=479845 user.localhost/1.2.3.5:57857 MULTI: bad source address from client [::], packet dropped
Thu Feb 15 21:29:08 2018 us=565982 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [7] [SSL-0] [00_0000_00000000000000000000000000000111222222222233333333333333] 0:103 0:96 t=1518751748[0] r=[0,64,15,7,1] sl=[25,64,64,528]
Thu Feb 15 21:29:13 2018 us=552122 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [10] [SSL-0] [0__0__0_00_00000000000000000000000000000111111111111111111111111] 0:563 0:553 t=1518751753[0] r=[0,64,15,10,1] sl=[13,64,64,528]
Thu Feb 15 21:29:14 2018 us=555690 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [11] [SSL-0] [0_____00000_0_00000000000000000000000000000000111111111111111111] 0:674 0:663 t=1518751754[0] r=[-1,64,15,11,1] sl=[30,64,64,528]
Thu Feb 15 21:29:14 2018 us=556185 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [16] [SSL-0] [0000000000000000_00000000000000000000000000000000111111111111111] 0:677 0:661 t=1518751754[0] r=[-1,64,15,16,1] sl=[27,64,64,528]
Thu Feb 15 21:29:33 2018 us=586087 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [49] [SSL-0] [0000000000000000000000000000000000000000000000000_00000000000111] 0:2422 0:2373 t=1518751773[0] r=[0,64,15,49,1] sl=[10,64,64,528]
Thu Feb 15 21:30:25 2018 us=487037 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [77] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:7679 0:7602 t=1518751825[0] r=[-2,64,15,77,1] sl=[1,64,64,528]
Thu Feb 15 21:30:25 2018 us=487273 user.localhost/1.2.3.5:57857 PID_ERR large diff [77] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:7679 0:7602 t=1518751825[0] r=[-2,64,15,77,1] sl=[1,64,64,528]
Thu Feb 15 21:30:25 2018 us=487299 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #7602 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:51:28 2018 us=877310 user.localhost/1.2.3.5:57857 PID_ERR large diff [69] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:176067 0:175998 t=1518753088[0] r=[0,64,15,77,1] sl=[40,64,64,528]
Thu Feb 15 21:51:28 2018 us=949717 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #175998 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:51:28 2018 us=950004 user.localhost/1.2.3.5:57857 PID_ERR large diff [74] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:176073 0:175999 t=1518753088[0] r=[0,64,15,77,1] sl=[34,64,64,528]
Thu Feb 15 21:51:28 2018 us=950024 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #175999 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:51:28 2018 us=950065 user.localhost/1.2.3.5:57857 PID_ERR large diff [73] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:176073 0:176000 t=1518753088[0] r=[0,64,15,77,1] sl=[34,64,64,528]
Thu Feb 15 21:51:28 2018 us=956425 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #176000 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:52:05 2018 us=543794 user.localhost/1.2.3.5:57857 PID_ERR large diff [68] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:181197 0:181129 t=1518753125[0] r=[-2,64,15,77,1] sl=[30,64,64,528]
Thu Feb 15 21:52:05 2018 us=544186 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #181129 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:52:05 2018 us=550826 user.localhost/1.2.3.5:57857 PID_ERR large diff [66] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:181197 0:181131 t=1518753125[0] r=[-2,64,15,77,1] sl=[30,64,64,528]
Thu Feb 15 21:52:05 2018 us=550888 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #181131 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:52:32 2018 us=576853 user.localhost/1.2.3.5:57857 PID_ERR large diff [64] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:184376 0:184312 t=1518753152[0] r=[-4,64,15,77,1] sl=[51,64,64,528]
Thu Feb 15 21:52:32 2018 us=576927 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #184312 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:52:59 2018 us=563035 user.localhost/1.2.3.5:57857 PID_ERR large diff [70] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:187514 0:187444 t=1518753179[0] r=[-1,64,15,77,1] sl=[49,64,64,528]
Thu Feb 15 21:52:59 2018 us=563257 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #187444 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:52:59 2018 us=568107 user.localhost/1.2.3.5:57857 PID_ERR large diff [69] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:187514 0:187445 t=1518753179[0] r=[-1,64,15,77,1] sl=[49,64,64,528]
Thu Feb 15 21:52:59 2018 us=568166 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #187445 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:56:32 2018 us=546067 user.localhost/1.2.3.5:57857 PID_ERR large diff [72] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:213774 0:213702 t=1518753392[0] r=[-4,64,15,77,1] sl=[29,64,64,528]
Thu Feb 15 21:56:32 2018 us=547212 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #213702 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:56:50 2018 us=614476 user.localhost/1.2.3.5:57857 PID_ERR large diff [64] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:216009 0:215945 t=1518753410[0] r=[-2,64,15,77,1] sl=[34,64,64,528]
Thu Feb 15 21:56:50 2018 us=614958 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #215945 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:12 2018 us=594828 user.localhost/1.2.3.5:57857 PID_ERR large diff [65] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:221822 0:221757 t=1518753432[0] r=[-4,64,15,77,1] sl=[45,64,64,528]
Thu Feb 15 21:57:12 2018 us=595100 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #221757 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:17 2018 us=539735 user.localhost/1.2.3.5:57857 PID_ERR large diff [72] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:224424 0:224352 t=1518753437[0] r=[-4,64,15,77,1] sl=[3,64,64,528]
Thu Feb 15 21:57:17 2018 us=539802 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #224352 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:18 2018 us=553999 user.localhost/1.2.3.5:57857 PID_ERR large diff [72] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225056 0:224984 t=1518753438[0] r=[0,64,15,77,1] sl=[11,64,64,528]
Thu Feb 15 21:57:18 2018 us=554063 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #224984 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:19 2018 us=532370 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [81] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225404 0:225323 t=1518753439[0] r=[-1,64,15,81,1] sl=[47,64,64,528]
Thu Feb 15 21:57:19 2018 us=532450 user.localhost/1.2.3.5:57857 PID_ERR large diff [81] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225404 0:225323 t=1518753439[0] r=[-1,64,15,81,1] sl=[47,64,64,528]
Thu Feb 15 21:57:19 2018 us=532474 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #225323 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:19 2018 us=540458 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [103] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225427 0:225324 t=1518753439[0] r=[-1,64,15,103,1] sl=[24,64,64,528]
Thu Feb 15 21:57:19 2018 us=540530 user.localhost/1.2.3.5:57857 PID_ERR large diff [103] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225427 0:225324 t=1518753439[0] r=[-1,64,15,103,1] sl=[24,64,64,528]
Thu Feb 15 21:57:19 2018 us=540553 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #225324 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:19 2018 us=540613 user.localhost/1.2.3.5:57857 PID_ERR large diff [102] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225427 0:225325 t=1518753439[0] r=[-1,64,15,103,1] sl=[24,64,64,528]
Thu Feb 15 21:57:19 2018 us=540633 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #225325 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:19 2018 us=540688 user.localhost/1.2.3.5:57857 PID_ERR large diff [101] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225427 0:225326 t=1518753439[0] r=[-1,64,15,103,1] sl=[24,64,64,528]
Thu Feb 15 21:57:19 2018 us=540706 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #225326 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 21:57:19 2018 us=540759 user.localhost/1.2.3.5:57857 PID_ERR large diff [100] [SSL-0] [0000000000000000000000000000000000000000000000000000000000000000] 0:225427 0:225327 t=1518753439[0] r=[-1,64,15,103,1] sl=[24,64,64,528]
Thu Feb 15 21:57:19 2018 us=540811 user.localhost/1.2.3.5:57857 AEAD Decrypt error: bad packet ID (may be a replay): [ #225327 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Thu Feb 15 22:29:02 2018 us=54089 user.localhost/1.2.3.5:57857 VERIFY OK: depth=1, C=USA, ST=USA, L=USA, O=Localhost, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 22:29:02 2018 us=75286 user.localhost/1.2.3.5:57857 VERIFY OK: depth=0, C=USA, ST=USA, L=USA, O=Localhost, OU=Hosting, CN=user.localhost, emailAddress=user@localhost
Thu Feb 15 22:29:02 2018 us=156114 user.localhost/1.2.3.5:57857 peer info: IV_VER=2.4.4
Thu Feb 15 22:29:02 2018 us=156196 user.localhost/1.2.3.5:57857 peer info: IV_PLAT=win
Thu Feb 15 22:29:02 2018 us=156224 user.localhost/1.2.3.5:57857 peer info: IV_PROTO=2
Thu Feb 15 22:29:02 2018 us=156245 user.localhost/1.2.3.5:57857 peer info: IV_LZ4=1
Thu Feb 15 22:29:02 2018 us=156266 user.localhost/1.2.3.5:57857 peer info: IV_LZ4v2=1
Thu Feb 15 22:29:02 2018 us=156286 user.localhost/1.2.3.5:57857 peer info: IV_LZO=1
Thu Feb 15 22:29:02 2018 us=156306 user.localhost/1.2.3.5:57857 peer info: IV_COMP_STUB=1
Thu Feb 15 22:29:02 2018 us=156327 user.localhost/1.2.3.5:57857 peer info: IV_COMP_STUBv2=1
Thu Feb 15 22:29:02 2018 us=156347 user.localhost/1.2.3.5:57857 peer info: IV_TCPNL=1
Thu Feb 15 22:29:02 2018 us=156366 user.localhost/1.2.3.5:57857 peer info: IV_GUI_VER=OpenVPN_GUI_11
Thu Feb 15 22:29:02 2018 us=161696 user.localhost/1.2.3.5:57857 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 22:29:02 2018 us=161813 user.localhost/1.2.3.5:57857 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 22:29:02 2018 us=232372 user.localhost/1.2.3.5:57857 Control Channel: TLUSA1.2, cipher TLUSA1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 521 bit EC, curve: secp521r1
Thu Feb 15 22:30:01 2018 us=874020 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [1] [SSL-1] [0_0000000000000000000000] 0:24 0:23 t=1518755401[0] r=[0,64,15,1,1] sl=[40,24,64,528]
Thu Feb 15 22:30:02 2018 us=479945 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [2] [SSL-1] [00__0000000000011111111111111111111111111] 0:41 0:39 t=1518755402[0] r=[-1,64,15,2,1] sl=[23,41,64,528]
Thu Feb 15 22:30:02 2018 us=480123 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [6] [SSL-1] [0__000_0000000000011111111111111111111111111] 0:44 0:38 t=1518755402[0] r=[-1,64,15,6,1] sl=[20,44,64,528]
Thu Feb 15 22:30:02 2018 us=843663 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [8] [SSL-1] [0_____00_0000000000000000000000000000000000000000000000000000000] 0:96 0:88 t=1518755402[0] r=[-1,64,15,8,1] sl=[32,64,64,528]
Thu Feb 15 22:30:07 2018 us=496349 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [9] [SSL-1] [0__0_0_00_000000000000000000000000000000000000111111111111111111] 0:431 0:422 t=1518755407[0] r=[-1,64,15,9,1] sl=[17,64,64,528]
Thu Feb 15 22:30:07 2018 us=496583 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [10] [SSL-1] [0_0_0__0_0_00000000000000000000000000000000000000011111111111111] 0:435 0:425 t=1518755407[0] r=[-1,64,15,10,1] sl=[13,64,64,528]
Thu Feb 15 22:30:27 2018 us=517082 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [34] [SSL-1] [0000000000000000000000000000000000_00000000000000000000000000000] 0:2054 0:2020 t=1518755427[0] r=[-1,64,15,34,1] sl=[58,64,64,528]
Thu Feb 15 22:30:53 2018 us=489779 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [35] [SSL-1] [00000000000000000000000000000000000_0000000000000011111111111111] 0:4475 0:4440 t=1518755453[0] r=[-2,64,15,35,1] sl=[5,64,64,528]
Thu Feb 15 22:31:09 2018 us=490102 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [39] [SSL-1] [000000000000000000000000000000000000000_000000000000001111111111] 0:5962 0:5923 t=1518755469[0] r=[-3,64,15,39,1] sl=[54,64,64,528]
Thu Feb 15 22:35:27 2018 us=512481 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [41] [SSL-1] [00000000000000000000000000000000000000000_0000000000000000000000] 0:26671 0:26630 t=1518755727[0] r=[-1,64,15,41,1] sl=[17,64,64,528]
Thu Feb 15 22:44:03 2018 us=475966 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [48] [SSL-1] [00000000000000000000000000000000000000000000000__000000000000001] 0:70808 0:70760 t=1518756243[0] r=[-2,64,15,48,1] sl=[40,64,64,528]
Thu Feb 15 22:55:20 2018 us=473634 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [50] [SSL-1] [00000000000000000000000000000000000000000000000000_0000000000000] 0:144577 0:144527 t=1518756920[0] r=[-4,64,15,50,1] sl=[63,64,64,528]
Thu Feb 15 22:55:28 2018 us=462977 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [52] [SSL-1] [0000000000000000000000000000000000000000000000000000_00000000000] 0:145496 0:145444 t=1518756928[0] r=[-2,64,15,52,1] sl=[40,64,64,528]
Thu Feb 15 23:29:01 2018 us=86149 user.localhost/1.2.3.5:57857 TLS: tls_process: killed expiring key
Thu Feb 15 23:29:01 2018 us=759112 user.localhost/1.2.3.5:57857 VERIFY OK: depth=1, C=USA, ST=USA, L=USA, O=Localhost, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 23:29:01 2018 us=765421 user.localhost/1.2.3.5:57857 VERIFY OK: depth=0, C=USA, ST=USA, L=USA, O=Localhost, OU=Hosting, CN=user.localhost, emailAddress=user@localhost
Thu Feb 15 23:29:01 2018 us=824152 user.localhost/1.2.3.5:57857 peer info: IV_VER=2.4.4
Thu Feb 15 23:29:01 2018 us=824211 user.localhost/1.2.3.5:57857 peer info: IV_PLAT=win
Thu Feb 15 23:29:01 2018 us=824259 user.localhost/1.2.3.5:57857 peer info: IV_PROTO=2
Thu Feb 15 23:29:01 2018 us=824279 user.localhost/1.2.3.5:57857 peer info: IV_LZ4=1
Thu Feb 15 23:29:01 2018 us=824296 user.localhost/1.2.3.5:57857 peer info: IV_LZ4v2=1
Thu Feb 15 23:29:01 2018 us=824312 user.localhost/1.2.3.5:57857 peer info: IV_LZO=1
Thu Feb 15 23:29:01 2018 us=824328 user.localhost/1.2.3.5:57857 peer info: IV_COMP_STUB=1
Thu Feb 15 23:29:01 2018 us=824344 user.localhost/1.2.3.5:57857 peer info: IV_COMP_STUBv2=1
Thu Feb 15 23:29:01 2018 us=824360 user.localhost/1.2.3.5:57857 peer info: IV_TCPNL=1
Thu Feb 15 23:29:01 2018 us=824376 user.localhost/1.2.3.5:57857 peer info: IV_GUI_VER=OpenVPN_GUI_11
Thu Feb 15 23:29:01 2018 us=824624 user.localhost/1.2.3.5:57857 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 23:29:01 2018 us=824802 user.localhost/1.2.3.5:57857 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 23:29:01 2018 us=871505 user.localhost/1.2.3.5:57857 Control Channel: TLUSA1.2, cipher TLUSA1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 521 bit EC, curve: secp521r1
Thu Feb 15 23:30:02 2018 us=407193 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [1] [SSL-2] [0_0000000000000000000000000000000000111111111111111111111111] 0:60 0:59 t=1518759002[0] r=[-1,64,15,1,1] sl=[4,60,64,528]
Thu Feb 15 23:30:05 2018 us=807084 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [2] [SSL-2] [00_0000033333333333333333333333333333333333344444444444444444444] 0:68 0:66 t=1518759005[0] r=[-4,64,15,2,1] sl=[60,64,64,528]
Thu Feb 15 23:30:05 2018 us=807322 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [3] [SSL-2] [000_000000003333333333333333333333333333333333334444444444444444] 0:72 0:69 t=1518759005[0] r=[-4,64,15,3,1] sl=[56,64,64,528]
Thu Feb 15 23:30:05 2018 us=808992 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [4] [SSL-2] [00_0_0000000_000000000000000000000000000000000000000000003333333] 0:117 0:113 t=1518759005[0] r=[-4,64,15,4,1] sl=[11,64,64,528]
Thu Feb 15 23:30:05 2018 us=809126 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [12] [SSL-2] [000000000000_000000000000000000000000000000000000000000003333333] 0:117 0:105 t=1518759005[0] r=[-4,64,15,12,1] sl=[11,64,64,528]
Thu Feb 15 23:30:07 2018 us=444875 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [14] [SSL-2] [0____0_0000000_0000000000000000000000000011111111111111111111111] 0:571 0:557 t=1518759007[0] r=[-1,64,15,14,1] sl=[43,64,64,528]
Thu Feb 15 23:30:25 2018 us=418060 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [15] [SSL-2] [000000000000000_000000000000000000000000000000001111111111111111] 0:2496 0:2481 t=1518759025[0] r=[-4,64,15,15,1] sl=[27,64,64,528]
Thu Feb 15 23:30:33 2018 us=740476 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [16] [SSL-2] [0000000000000000_00000000000000000000000000000000000000000000000] 0:3813 0:3797 t=1518759033[0] r=[-2,64,15,16,1] sl=[54,64,64,528]
Thu Feb 15 23:32:17 2018 us=404190 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [24] [SSL-2] [00000000000000000000000__000011111111111111111111111111111111111] 0:14830 0:14806 t=1518759137[0] r=[-1,64,15,24,1] sl=[45,64,64,528]
Thu Feb 15 23:33:55 2018 us=419644 user.localhost/1.2.3.5:57857 PID_ERR replay-window backtrack occurred [53] [SSL-2] [00000000000000000000000000000000000000000000000000000_0000000000] 0:25210 0:25157 t=1518759235[0] r=[-4,64,15,53,1] sl=[33,64,64,528]
Fri Feb 16 00:11:06 2018 us=593177 user.localhost/1.2.3.5:57857 [user.localhost] Inactivity timeout (--ping-restart), restarting
Fri Feb 16 00:11:06 2018 us=593371 user.localhost/1.2.3.5:57857 SIGUSR1[soft,ping-restart] received, client-instance restarting

Kurogane

Client Logs

Thu Feb 15 21:29:02 2018 us=323397 Current Parameter Settings:
Thu Feb 15 21:29:02 2018 us=323397   config = 'user.ovpn'
Thu Feb 15 21:29:02 2018 us=323397   mode = 0
Thu Feb 15 21:29:02 2018 us=324399   show_ciphers = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   show_digests = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   show_engines = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   genkey = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   key_pass_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   show_tls_ciphers = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   connect_retry_max = 0
Thu Feb 15 21:29:02 2018 us=324399 Connection profiles [0]:
Thu Feb 15 21:29:02 2018 us=324399   proto = udp
Thu Feb 15 21:29:02 2018 us=324399   local = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   local_port = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   remote = '1.2.3.4'
Thu Feb 15 21:29:02 2018 us=324399   remote_port = '2194'
Thu Feb 15 21:29:02 2018 us=324399   remote_float = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   bind_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   bind_local = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   bind_ipv6_only = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   connect_retry_seconds = 5
Thu Feb 15 21:29:02 2018 us=324399   connect_timeout = 120
Thu Feb 15 21:29:02 2018 us=324399   socks_proxy_server = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   socks_proxy_port = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   tun_mtu = 1500
Thu Feb 15 21:29:02 2018 us=324399   tun_mtu_defined = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   link_mtu = 1500
Thu Feb 15 21:29:02 2018 us=324399   link_mtu_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   tun_mtu_extra = 0
Thu Feb 15 21:29:02 2018 us=324399   tun_mtu_extra_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   mtu_discover_type = -1
Thu Feb 15 21:29:02 2018 us=324399   fragment = 0
Thu Feb 15 21:29:02 2018 us=324399   mssfix = 1450
Thu Feb 15 21:29:02 2018 us=324399   explicit_exit_notification = 0
Thu Feb 15 21:29:02 2018 us=324399 Connection profiles END
Thu Feb 15 21:29:02 2018 us=324399   remote_random = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   ipchange = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   dev = 'tun'
Thu Feb 15 21:29:02 2018 us=324399   dev_type = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   dev_node = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   lladdr = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   topology = 1
Thu Feb 15 21:29:02 2018 us=324399   ifconfig_local = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   ifconfig_remote_netmask = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   ifconfig_noexec = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   ifconfig_nowarn = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   ifconfig_ipv6_local = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   ifconfig_ipv6_netbits = 0
Thu Feb 15 21:29:02 2018 us=324399   ifconfig_ipv6_remote = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   shaper = 0
Thu Feb 15 21:29:02 2018 us=324399   mtu_test = 0
Thu Feb 15 21:29:02 2018 us=324399   mlock = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   keepalive_ping = 0
Thu Feb 15 21:29:02 2018 us=324399   keepalive_timeout = 0
Thu Feb 15 21:29:02 2018 us=324399   inactivity_timeout = 0
Thu Feb 15 21:29:02 2018 us=324399   ping_send_timeout = 0
Thu Feb 15 21:29:02 2018 us=324399   ping_rec_timeout = 0
Thu Feb 15 21:29:02 2018 us=324399   ping_rec_timeout_action = 0
Thu Feb 15 21:29:02 2018 us=324399   ping_timer_remote = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   remap_sigusr1 = 0
Thu Feb 15 21:29:02 2018 us=324399   persist_tun = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   persist_local_ip = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   persist_remote_ip = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   persist_key = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   passtos = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   resolve_retry_seconds = 1000000000
Thu Feb 15 21:29:02 2018 us=324399   resolve_in_advance = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   username = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   groupname = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   chroot_dir = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   cd_dir = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   writepid = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   up_script = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   down_script = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   down_pre = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   up_restart = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   up_delay = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   daemon = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   inetd = 0
Thu Feb 15 21:29:02 2018 us=324399   log = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   suppress_timestamps = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   machine_readable_output = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   nice = 0
Thu Feb 15 21:29:02 2018 us=324399   verbosity = 4
Thu Feb 15 21:29:02 2018 us=324399   mute = 0
Thu Feb 15 21:29:02 2018 us=324399   gremlin = 0
Thu Feb 15 21:29:02 2018 us=324399   status_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   status_file_version = 1
Thu Feb 15 21:29:02 2018 us=324399   status_file_update_freq = 60
Thu Feb 15 21:29:02 2018 us=324399   occ = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   rcvbuf = 0
Thu Feb 15 21:29:02 2018 us=324399   sndbuf = 0
Thu Feb 15 21:29:02 2018 us=324399   sockflags = 0
Thu Feb 15 21:29:02 2018 us=324399   fast_io = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   comp.alg = 11
Thu Feb 15 21:29:02 2018 us=324399   comp.flags = 0
Thu Feb 15 21:29:02 2018 us=324399   route_script = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   route_default_gateway = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   route_default_metric = 0
Thu Feb 15 21:29:02 2018 us=324399   route_noexec = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   route_delay = 5
Thu Feb 15 21:29:02 2018 us=324399   route_delay_window = 30
Thu Feb 15 21:29:02 2018 us=324399   route_delay_defined = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   route_nopull = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   route_gateway_via_dhcp = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   allow_pull_fqdn = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   management_addr = '127.0.0.1'
Thu Feb 15 21:29:02 2018 us=324399   management_port = '25342'
Thu Feb 15 21:29:02 2018 us=324399   management_user_pass = 'stdin'
Thu Feb 15 21:29:02 2018 us=324399   management_log_history_cache = 250
Thu Feb 15 21:29:02 2018 us=324399   management_echo_buffer_size = 100
Thu Feb 15 21:29:02 2018 us=324399   management_write_peer_info_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   management_client_user = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   management_client_group = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   management_flags = 6
Thu Feb 15 21:29:02 2018 us=324399   shared_secret_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   key_direction = 0
Thu Feb 15 21:29:02 2018 us=324399   ciphername = 'BF-CBC'
Thu Feb 15 21:29:02 2018 us=324399   ncp_enabled = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Thu Feb 15 21:29:02 2018 us=324399   authname = 'SHA512'
Thu Feb 15 21:29:02 2018 us=324399   prng_hash = 'SHA1'
Thu Feb 15 21:29:02 2018 us=324399   prng_nonce_secret_len = 16
Thu Feb 15 21:29:02 2018 us=324399   keysize = 0
Thu Feb 15 21:29:02 2018 us=324399   engine = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   replay = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   mute_replay_warnings = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   replay_window = 64
Thu Feb 15 21:29:02 2018 us=324399   replay_time = 15
Thu Feb 15 21:29:02 2018 us=324399   packet_id_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   use_iv = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   test_crypto = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   tls_server = DISABLED
Thu Feb 15 21:29:02 2018 us=324399   tls_client = ENABLED
Thu Feb 15 21:29:02 2018 us=324399   key_method = 2
Thu Feb 15 21:29:02 2018 us=324399   ca_file = 'ca.crt'
Thu Feb 15 21:29:02 2018 us=324399   ca_path = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=324399   dh_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   cert_file = 'user.crt'
Thu Feb 15 21:29:02 2018 us=325399   extra_certs_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   priv_key_file = 'user.key'
Thu Feb 15 21:29:02 2018 us=325399   pkcs12_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   cryptoapi_cert = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   cipher_list = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   tls_verify = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   tls_export_cert = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   verify_x509_type = 0
Thu Feb 15 21:29:02 2018 us=325399   verify_x509_name = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   crl_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   ns_cert_type = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 65535
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_ku[i] = 0
Thu Feb 15 21:29:02 2018 us=325399   remote_cert_eku = 'TLS Web Server Authentication'
Thu Feb 15 21:29:02 2018 us=325399   ssl_flags = 0
Thu Feb 15 21:29:02 2018 us=325399   tls_timeout = 2
Thu Feb 15 21:29:02 2018 us=325399   renegotiate_bytes = -1
Thu Feb 15 21:29:02 2018 us=325399   renegotiate_packets = 0
Thu Feb 15 21:29:02 2018 us=325399   renegotiate_seconds = 3600
Thu Feb 15 21:29:02 2018 us=325399   handshake_window = 60
Thu Feb 15 21:29:02 2018 us=325399   transition_window = 3600
Thu Feb 15 21:29:02 2018 us=325399   single_session = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   push_peer_info = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   tls_exit = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   tls_auth_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   tls_crypt_file = 'ta.key'
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_protected_authentication = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_private_mode = 00000000
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_cert_private = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_pin_cache_period = -1
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_id = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   pkcs11_id_management = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   server_network = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   server_netmask = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   server_network_ipv6 = ::
Thu Feb 15 21:29:02 2018 us=325399   server_netbits_ipv6 = 0
Thu Feb 15 21:29:02 2018 us=325399   server_bridge_ip = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   server_bridge_netmask = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   server_bridge_pool_start = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   server_bridge_pool_end = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_pool_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_pool_start = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_pool_end = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_pool_netmask = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_pool_persist_refresh_freq = 600
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_ipv6_pool_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_ipv6_pool_base = ::
Thu Feb 15 21:29:02 2018 us=325399   ifconfig_ipv6_pool_netbits = 0
Thu Feb 15 21:29:02 2018 us=325399   n_bcast_buf = 256
Thu Feb 15 21:29:02 2018 us=325399   tcp_queue_limit = 64
Thu Feb 15 21:29:02 2018 us=325399   real_hash_size = 256
Thu Feb 15 21:29:02 2018 us=325399   virtual_hash_size = 256
Thu Feb 15 21:29:02 2018 us=325399   client_connect_script = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   learn_address_script = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   client_disconnect_script = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   client_config_dir = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   ccd_exclusive = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   tmp_dir = 'C:\Users\user\AppData\Local\Temp\'
Thu Feb 15 21:29:02 2018 us=325399   push_ifconfig_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   push_ifconfig_local = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   push_ifconfig_remote_netmask = 0.0.0.0
Thu Feb 15 21:29:02 2018 us=325399   push_ifconfig_ipv6_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   push_ifconfig_ipv6_local = ::/0
Thu Feb 15 21:29:02 2018 us=325399   push_ifconfig_ipv6_remote = ::
Thu Feb 15 21:29:02 2018 us=325399   enable_c2c = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   duplicate_cn = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   cf_max = 0
Thu Feb 15 21:29:02 2018 us=325399   cf_per = 0
Thu Feb 15 21:29:02 2018 us=325399   max_clients = 1024
Thu Feb 15 21:29:02 2018 us=325399   max_routes_per_client = 256
Thu Feb 15 21:29:02 2018 us=325399   auth_user_pass_verify_script = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=325399   auth_user_pass_verify_script_via_file = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   auth_token_generate = DISABLED
Thu Feb 15 21:29:02 2018 us=325399   auth_token_lifetime = 0
Thu Feb 15 21:29:02 2018 us=325399   client = ENABLED
Thu Feb 15 21:29:02 2018 us=325399   pull = ENABLED
Thu Feb 15 21:29:02 2018 us=326401   auth_user_pass_file = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=326401   show_net_up = DISABLED
Thu Feb 15 21:29:02 2018 us=326401   route_method = 3
Thu Feb 15 21:29:02 2018 us=326401   block_outside_dns = DISABLED
Thu Feb 15 21:29:02 2018 us=326401   ip_win32_defined = DISABLED
Thu Feb 15 21:29:02 2018 us=326401   ip_win32_type = 3
Thu Feb 15 21:29:02 2018 us=326401   dhcp_masq_offset = 0
Thu Feb 15 21:29:02 2018 us=326401   dhcp_lease_time = 31536000
Thu Feb 15 21:29:02 2018 us=326401   tap_sleep = 0
Thu Feb 15 21:29:02 2018 us=326401   dhcp_options = DISABLED
Thu Feb 15 21:29:02 2018 us=326401   dhcp_renew = DISABLED
Thu Feb 15 21:29:02 2018 us=326401   dhcp_pre_release = DISABLED
Thu Feb 15 21:29:02 2018 us=326401   domain = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=326401   netbios_scope = '[UNDEF]'
Thu Feb 15 21:29:02 2018 us=326401   netbios_node_type = 0
Thu Feb 15 21:29:02 2018 us=326401   disable_nbt = DISABLED
Thu Feb 15 21:29:02 2018 us=326401 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Thu Feb 15 21:29:02 2018 us=326401 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Feb 15 21:29:02 2018 us=326401 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Thu Feb 15 21:29:02 2018 us=326401 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Thu Feb 15 21:29:02 2018 us=326401 Need hold release from management interface, waiting...
Thu Feb 15 21:29:02 2018 us=803371 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Thu Feb 15 21:29:02 2018 us=904434 MANAGEMENT: CMD 'state on'
Thu Feb 15 21:29:02 2018 us=904434 MANAGEMENT: CMD 'log all on'
Thu Feb 15 21:29:03 2018 us=16611 MANAGEMENT: CMD 'echo all on'
Thu Feb 15 21:29:03 2018 us=18613 MANAGEMENT: CMD 'hold off'
Thu Feb 15 21:29:03 2018 us=20615 MANAGEMENT: CMD 'hold release'
Thu Feb 15 21:29:03 2018 us=138081 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Feb 15 21:29:03 2018 us=138081 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Feb 15 21:29:03 2018 us=138081 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Feb 15 21:29:03 2018 us=138081 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Feb 15 21:29:03 2018 us=138081 LZ4v2 compression initializing
Thu Feb 15 21:29:03 2018 us=138081 Control Channel MTU parms [ L:1622 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Thu Feb 15 21:29:03 2018 us=138081 Data Channel MTU parms [ L:1622 D:1432 EF:122 EB:406 ET:0 EL:3 ]
Thu Feb 15 21:29:03 2018 us=138081 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1586,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA512,keysize 128,key-method 2,tls-client'
Thu Feb 15 21:29:03 2018 us=138081 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1586,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA512,keysize 128,key-method 2,tls-server'
Thu Feb 15 21:29:03 2018 us=138081 TCP/UDP: Preserving recently used remote address: [AF_INET]1.2.3.4:2194
Thu Feb 15 21:29:03 2018 us=138081 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Feb 15 21:29:03 2018 us=138081 UDP link local: (not bound)
Thu Feb 15 21:29:03 2018 us=138081 UDP link remote: [AF_INET]1.2.3.4:2194
Thu Feb 15 21:29:03 2018 us=138081 MANAGEMENT: >STATE:1518751743,WAIT,,,,,,
Thu Feb 15 21:29:03 2018 us=266722 MANAGEMENT: >STATE:1518751743,AUTH,,,,,,
Thu Feb 15 21:29:03 2018 us=266722 TLS: Initial packet from [AF_INET]1.2.3.4:2194, sid=b4b0afb7 3c0252fb
Thu Feb 15 21:29:03 2018 us=340836 VERIFY OK: depth=1, C=USA, ST=USA, L=USA, O=domain, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 21:29:03 2018 us=341837 VERIFY KU OK
Thu Feb 15 21:29:03 2018 us=341837 Validating certificate extended key usage
Thu Feb 15 21:29:03 2018 us=341837 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Feb 15 21:29:03 2018 us=341837 VERIFY EKU OK
Thu Feb 15 21:29:03 2018 us=341837 VERIFY OK: depth=0, C=USA, ST=USA, L=USA, O=domain, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 21:29:03 2018 us=479942 Control Channel: TLUSA1.2, cipher TLUSA1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 521 bit EC, curve: secp521r1
Thu Feb 15 21:29:03 2018 us=479942 [vpn.localhost] Peer Connection Initiated with [AF_INET]1.2.3.4:2194
Thu Feb 15 21:29:04 2018 us=644312 MANAGEMENT: >STATE:1518751744,GET_CONFIG,,,,,,
Thu Feb 15 21:29:04 2018 us=644312 SENT CONTROL [vpn.localhost]: 'PUSH_REQUEST' (status=1)
Thu Feb 15 21:29:04 2018 us=701310 PUSH: Received control message: 'PUSH_REPLY,compress lz4-v2,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.9.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.9.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: timers and/or timeouts modified
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: compression parms modified
Thu Feb 15 21:29:04 2018 us=701310 LZ4v2 compression initializing
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: --ifconfig/up options modified
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: route options modified
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: route-related options modified
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: peer-id set
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: adjusting link_mtu to 1625
Thu Feb 15 21:29:04 2018 us=701310 OPTIONS IMPORT: data channel crypto options modified
Thu Feb 15 21:29:04 2018 us=701310 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Feb 15 21:29:04 2018 us=701310 Data Channel MTU parms [ L:1553 D:1432 EF:53 EB:406 ET:0 EL:3 ]
Thu Feb 15 21:29:04 2018 us=701310 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 21:29:04 2018 us=701310 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 21:29:04 2018 us=702311 interactive service msg_channel=820
Thu Feb 15 21:29:04 2018 us=704313 ROUTE_GATEWAY 172.16.1.1/255.255.255.0 I=5 HWADDR=ac:22:0b:52:25:95
Thu Feb 15 21:29:04 2018 us=711320 open_tun
Thu Feb 15 21:29:04 2018 us=711320 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{45F56FFB-B36E-4E2F-A3FF-E63C65CFCF75}.tap
Thu Feb 15 21:29:04 2018 us=711320 TAP-Windows Driver Version 9.21 
Thu Feb 15 21:29:04 2018 us=711320 TAP-Windows MTU=1500
Thu Feb 15 21:29:04 2018 us=712321 Set TAP-Windows TUN subnet mode network/local/netmask = 10.9.0.0/10.9.0.2/255.255.255.0 [SUCCEEDED]
Thu Feb 15 21:29:04 2018 us=712321 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.0.2/255.255.255.0 on interface {45F56FFB-B36E-4E2F-A3FF-E63C65CFCF75} [DHCP-serv: 10.9.0.254, lease-time: 31536000]
Thu Feb 15 21:29:04 2018 us=712321 DHCP option string: 06080808 08080808 0404
Thu Feb 15 21:29:04 2018 us=713322 Successful ARP Flush on interface [7] {45F56FFB-B36E-4E2F-A3FF-E63C65CFCF75}
Thu Feb 15 21:29:04 2018 us=716324 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Feb 15 21:29:04 2018 us=716324 MANAGEMENT: >STATE:1518751744,ASSIGN_IP,,10.9.0.2,,,,
Thu Feb 15 21:29:09 2018 us=816315 TEST ROUTES: 3/3 succeeded len=2 ret=1 a=0 u/d=up
Thu Feb 15 21:29:09 2018 us=816315 C:\WINDOWS\system32\route.exe ADD 1.2.3.4 MASK 255.255.255.255 172.16.1.1
Thu Feb 15 21:29:09 2018 us=817315 Route addition via service succeeded
Thu Feb 15 21:29:09 2018 us=817315 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.9.0.1
Thu Feb 15 21:29:09 2018 us=819317 Route addition via service succeeded
Thu Feb 15 21:29:09 2018 us=819317 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.9.0.1
Thu Feb 15 21:29:09 2018 us=820318 Route addition via service succeeded
Thu Feb 15 21:29:09 2018 us=824322 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Feb 15 21:29:09 2018 us=824322 Initialization Sequence Completed
Thu Feb 15 21:29:09 2018 us=824322 MANAGEMENT: >STATE:1518751749,CONNECTED,SUCCESS,10.9.0.2,1.2.3.4,2194,,
Thu Feb 15 21:29:13 2018 us=413480 PID_ERR replay-window backtrack occurred [1] [SSL-0] [0_00000000000000000011111111111111111111111111222222222222222222] 0:92 0:91 t=1518751753[0] r=[-4,64,15,1,1] sl=[36,64,64,528]
Thu Feb 15 21:30:26 2018 us=81981 PID_ERR replay-window backtrack occurred [2] [SSL-0] [00_0000000000000000000000000000001111111111111111111111111111111] 0:2432 0:2430 t=1518751826[0] r=[-2,64,15,2,1] sl=[0,64,64,528]
Thu Feb 15 21:30:26 2018 us=751327 PID_ERR replay-window backtrack occurred [3] [SSL-0] [0___000000000000000000000000000000000000000000000000000000000000] 0:2929 0:2926 t=1518751826[0] r=[-2,64,15,3,1] sl=[15,64,64,528]
Thu Feb 15 21:49:47 2018 us=325832 PID_ERR replay-window backtrack occurred [10] [SSL-0] [0__0000000_00000000000000000000000000000000000000000000000000000] 0:93865 0:93855 t=1518752987[0] r=[-3,64,15,10,1] sl=[23,64,64,528]
Thu Feb 15 22:29:03 2018 us=4158 TLS: soft reset sec=0 bytes=152107172/-1 pkts=701211/0
Thu Feb 15 22:29:03 2018 us=343591 VERIFY OK: depth=1, C=USA, ST=USA, L=USA, O=domain, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 22:29:03 2018 us=346095 VERIFY KU OK
Thu Feb 15 22:29:03 2018 us=346595 Validating certificate extended key usage
Thu Feb 15 22:29:03 2018 us=346595 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Feb 15 22:29:03 2018 us=346595 VERIFY EKU OK
Thu Feb 15 22:29:03 2018 us=346595 VERIFY OK: depth=0, C=USA, ST=USA, L=USA, O=domain, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 22:29:03 2018 us=554797 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 22:29:03 2018 us=554797 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 22:29:03 2018 us=554797 Control Channel: TLUSA1.2, cipher TLUSA1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 521 bit EC, curve: secp521r1
Thu Feb 15 22:30:08 2018 us=383387 PID_ERR replay-window backtrack occurred [1] [SSL-1] [0_00000000001111111111111111111111111111111112222222222222222222] 0:212 0:211 t=1518755408[0] r=[-1,64,15,1,1] sl=[44,64,64,528]
Thu Feb 15 22:30:47 2018 us=274793 PID_ERR replay-window backtrack occurred [3] [SSL-1] [0___000000000000000000000000000000000000000111111111111111111111] 0:1795 0:1792 t=1518755447[0] r=[0,64,15,3,1] sl=[61,64,64,528]
Thu Feb 15 22:44:52 2018 us=603187 PID_ERR replay-window backtrack occurred [4] [SSL-1] [00_0_00000000000000000000000000000000000000000000000000000111111] 0:42167 0:42163 t=1518756292[0] r=[0,64,15,4,1] sl=[9,64,64,528]
Thu Feb 15 23:02:58 2018 us=970336 PID_ERR replay-window backtrack occurred [6] [SSL-1] [0_000__000000000000000000000000000033333333333333333333333333333] 0:100835 0:100829 t=1518757378[0] r=[0,64,15,6,1] sl=[29,64,64,528]
Thu Feb 15 23:29:03 2018 us=19093 TLS: soft reset sec=0 bytes=117722196/-1 pkts=605681/0
Thu Feb 15 23:29:03 2018 us=158577 VERIFY OK: depth=1, C=USA, ST=USA, L=USA, O=domain, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 23:29:03 2018 us=160580 VERIFY KU OK
Thu Feb 15 23:29:03 2018 us=160580 Validating certificate extended key usage
Thu Feb 15 23:29:03 2018 us=160580 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Feb 15 23:29:03 2018 us=160580 VERIFY EKU OK
Thu Feb 15 23:29:03 2018 us=160580 VERIFY OK: depth=0, C=USA, ST=USA, L=USA, O=domain, OU=Hosting, CN=vpn.localhost, emailAddress=user@localhost
Thu Feb 15 23:29:03 2018 us=285946 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 23:29:03 2018 us=285946 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Feb 15 23:29:03 2018 us=285946 Control Channel: TLUSA1.2, cipher TLUSA1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, 521 bit EC, curve: secp521r1
Thu Feb 15 23:30:28 2018 us=44644 PID_ERR replay-window backtrack occurred [1] [SSL-2] [0_00001111111111111111111111111111111222222222222222222222222222] 0:867 0:866 t=1518759028[0] r=[0,64,15,1,1] sl=[29,64,64,528]

Here when the problem happen

Reply from 8.8.8.8: bytes=32 time=57ms TTL=60
Reply from 8.8.8.8: bytes=32 time=73ms TTL=60
Reply from 8.8.8.8: bytes=32 time=51ms TTL=49
Reply from 8.8.8.8: bytes=32 time=67ms TTL=49
Reply from 8.8.8.8: bytes=32 time=41ms TTL=49
Reply from 8.8.8.8: bytes=32 time=50ms TTL=49
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Reply from 10.9.0.2: Destination host unreachable.
Request timed out.
Reply from 10.9.0.2: Destination host unreachable.
Request timed out.
Reply from 8.8.8.8: bytes=32 time=69ms TTL=60
Reply from 8.8.8.8: bytes=32 time=57ms TTL=60
Reply from 8.8.8.8: bytes=32 time=60ms TTL=60
Reply from 8.8.8.8: bytes=32 time=54ms TTL=60
Reply from 8.8.8.8: bytes=32 time=57ms TTL=60
Reply from 8.8.8.8: bytes=32 time=58ms TTL=60
Reply from 8.8.8.8: bytes=32 time=54ms TTL=60

TinCanTech

What type of server do you have .. is it a router for example ?

Kurogane

Its a server running on Centos 6.9

TinCanTech

From what you have posted, you are getting reconnected every hour due to --reneg-sec (this is normal)
I don't know why you get the replay and other errors .. are you using virtualbox at all ?

Kurogane

No but, i'm on Modem --> Router --> PC

Not happen in an hour if not in few minutes very random can happen in 3min 15min 30min or 1h it is very inconsistent.

TinCanTech

TinCanTech wrote you are getting reconnected every hour due to --reneg-sec (this is normal)

I presume you understand this ..

Kurogane wrote i'm on Modem --> Router --> PC

Not happen in an hour if not in few minutes very random

Maybe something is wrong with your network hardware ..

Kurogane

TinCanTech wrote
TinCanTech wrote you are getting reconnected every hour due to --reneg-sec (this is normal)
I presume you understand this ..

No exactly, if i understand renegotiates the TLS keys right? what is suppose have relationship between the error happen to min in few minutes to --reneg-sec every hour? if i miss something can you explain to me.

I notice i think is something client side (me) because i tested in differents servers (owned and pay VPN services) and still this issue.

TinCanTech

Kurogane wrote
TinCanTech wrote
TinCanTech wrote you are getting reconnected every hour due to --reneg-sec (this is normal)
I presume you understand this ..
No exactly, if i understand renegotiates the TLS keys right? what is suppose have relationship between the error happen to min in few minutes to --reneg-sec every hour? if i miss something can you explain to me.

--reneg-sec is set to 3600 (One hour) by default .. so they happen once per hour, you can change it if you want to but that is not recommended.

Kurogane wrote I notice i think is something client side (me) because i tested in differents servers (owned and pay VPN services) and still this issue.

If you experience the same problems with many servers then it sounds like something is wrong with your end. (Network hardware or ISP)