Server
FreeBSD pfSense.localdomain 11.1-RELEASE-p6 FreeBSD 11.1-RELEASE-p6 #8 r313908+a5b33c9d1c4(RELENG_2_4): Tue Dec 12 13:51:24 CST 2017 root@buildbot2.netgate.com:/builder/ce-242/tmp/obj/builder/ce-242/tmp/FreeBSD-src/sys/pfSense amd64
dev ovpns1
verb 1
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-256-CBC
auth SHA256
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
multihome
engine cryptodev
tls-server
server xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
client-config-dir /var/etc/openvpn-csc/server1
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'XXX' 1"
lport xxxx
management /var/etc/openvpn/server1.sock unix
push "dhcp-option DNS xxx.xxx.xxx.xxx"
push "dhcp-option DNS xxx.xxx.xxx.xxx"
push "block-outside-dns"
push "register-dns"
push "redirect-gateway def1"
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.4096
tls-crypt /var/etc/openvpn/server1.tls-crypt
ncp-ciphers AES-256-GCM:AES-128-GCM
persist-remote-ip
float
topology subnet
verb 4
log-append /var/log/openvpn_duo_autopush.log
plugin /opt/duo/duo_openvpn.so 'xxx xxx api-xxx.duosecurity.com'
auth-user-pass-optional
reneg-sec 0
push "reneg-sec 0"
Server logs:
us=747430 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=958737 MANAGEMENT: CMD 'status 2'
us=174677 MANAGEMENT: CMD 'quit'
us=174792 MANAGEMENT: Client disconnected
us=834139 MULTI: multi_create_instance called
us=834250 PEER.IP.ADD.CLIENT Re-using SSL/TLS context
us=834461 PEER.IP.ADD.CLIENT Control Channel MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
us=834487 PEER.IP.ADD.CLIENT Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
us=834553 PEER.IP.ADD.CLIENT Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
us=834573 PEER.IP.ADD.CLIENT Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
us=834707 PEER.IP.ADD.CLIENT TLS: Initial packet from [AF_INET6]::ffff:PEER.IP.ADD.CLIENT:10910 (via ::ffff:192.168.255.5%em0), sid=688fab06 baaa1223
us=10196 PEER.IP.ADD.CLIENT VERIFY SCRIPT OK: depth=1, C=Country, ST=Location, L=Location, O=Organization, emailAddress=email@domain.com, CN=CN
us=10253 PEER.IP.ADD.CLIENT VERIFY OK: depth=1, C=Country, ST=Location, L=Location, O=Organization, emailAddress=email@domain.com, CN=CN
us=18463 PEER.IP.ADD.CLIENT VERIFY SCRIPT OK: depth=0, C=Country, ST=Location, L=Location, O=Organization, emailAddress=email@domain.com, CN=username
us=18547 PEER.IP.ADD.CLIENT VERIFY OK: depth=0, C=Country, ST=Location, L=Location, O=Organization, emailAddress=email@domain.com, CN=username
us=79749 PEER.IP.ADD.CLIENT peer info: IV_VER=2.4.4
us=79809 PEER.IP.ADD.CLIENT peer info: IV_PLAT=win
us=79826 PEER.IP.ADD.CLIENT peer info: IV_PROTO=2
us=79836 PEER.IP.ADD.CLIENT peer info: IV_NCP=2
us=79846 PEER.IP.ADD.CLIENT peer info: IV_LZ4=1
us=79856 PEER.IP.ADD.CLIENT peer info: IV_LZ4v2=1
us=79867 PEER.IP.ADD.CLIENT peer info: IV_LZO=1
us=79879 PEER.IP.ADD.CLIENT peer info: IV_COMP_STUB=1
us=79895 PEER.IP.ADD.CLIENT peer info: IV_COMP_STUBv2=1
us=79952 PEER.IP.ADD.CLIENT peer info: IV_TCPNL=1
us=79962 PEER.IP.ADD.CLIENT peer info: IV_GUI_VER=OpenVPN_GUI_11
us=81958 PEER.IP.ADD.CLIENT PLUGIN_CALL: POST /opt/duo/duo_openvpn.so/PLUGIN_AUTH_USER_PASS_VERIFY status=2
us=82314 PEER.IP.ADD.CLIENT TLS: Username/Password authentication deferred for username ''
us=130357 PEER.IP.ADD.CLIENT Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
us=130495 PEER.IP.ADD.CLIENT [username] Peer Connection Initiated with [AF_INET6]::ffff:PEER.IP.ADD.CLIENT:10910 (via ::ffff:192.168.255.5%em0)
us=324404 PEER.IP.ADD.CLIENT PUSH: Received control message: 'PUSH_REQUEST'
us=674189 PEER.IP.ADD.CLIENT PUSH: Received control message: 'PUSH_REQUEST'
us=787340 PEER.IP.ADD.CLIENT [username] Inactivity timeout (--ping-restart), restarting
us=787416 PEER.IP.ADD.CLIENT SIGUSR1[soft,ping-restart] received, client-instance restarting
us=75154 PEER.IP.ADD.CLIENT PUSH: Received control message: 'PUSH_REQUEST'
us=473776 PEER.IP.ADD.CLIENT PUSH: Received control message: 'PUSH_REQUEST'
us=903919 PEER.IP.ADD.CLIENT PUSH: Received control message: 'PUSH_REQUEST'
us=313620 PEER.IP.ADD.CLIENT PUSH: Received control message: 'PUSH_REQUEST'
us=684814 PEER.IP.ADD.CLIENT PUSH: Received control message: 'PUSH_REQUEST'
us=695961 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=911356 MANAGEMENT: CMD 'status 2'
us=126497 MANAGEMENT: CMD 'quit'
us=126564 MANAGEMENT: Client disconnected
us=52730 PEER.IP.ADD.CLIENT SIGTERM[soft,auth-control-exit] received, client-instance exiting
us=664313 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=871306 MANAGEMENT: CMD 'status 2'
us=88096 MANAGEMENT: CMD 'quit'
us=88211 MANAGEMENT: Client disconnected
us=677085 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=888112 MANAGEMENT: CMD 'status 2'
us=102489 MANAGEMENT: CMD 'quit'
us=102603 MANAGEMENT: Client disconnected
us=658410 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=872290 MANAGEMENT: CMD 'status 2'
us=88601 MANAGEMENT: CMD 'quit'
us=88691 MANAGEMENT: Client disconnected
us=690919 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=907821 MANAGEMENT: CMD 'status 2'
us=124397 MANAGEMENT: CMD 'quit'
us=124507 MANAGEMENT: Client disconnected
us=679181 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=894170 MANAGEMENT: CMD 'status 2'
us=109671 MANAGEMENT: CMD 'quit'
us=109764 MANAGEMENT: Client disconnected
us=636652 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=850444 MANAGEMENT: CMD 'status 2'
us=53404 MANAGEMENT: CMD 'quit'
us=53521 MANAGEMENT: Client disconnected
us=699976 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=914165 MANAGEMENT: CMD 'status 2'
us=128730 MANAGEMENT: CMD 'quit'
us=128807 MANAGEMENT: Client disconnected
us=638702 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=848733 MANAGEMENT: CMD 'status 2'
us=63249 MANAGEMENT: CMD 'quit'
us=63328 MANAGEMENT: Client disconnected
us=640769 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=854156 MANAGEMENT: CMD 'status 2'
us=68447 MANAGEMENT: CMD 'quit'
us=68775 MANAGEMENT: Client disconnected
us=571326 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=782998 MANAGEMENT: CMD 'status 2'
us=997806 MANAGEMENT: CMD 'quit'
us=998014 MANAGEMENT: Client disconnected
us=624660 MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
us=836678 MANAGEMENT: CMD 'status 2'
us=58324 MANAGEMENT: CMD 'quit'
us=58383 MANAGEMENT: Client disconnected
Client
Microsoft Windows [Version 10.0.16299.248]
dev tun
persist-tun
persist-key
cipher AES-256-CBC
ncp-ciphers AES-256-GCM:AES-128-GCM
auth SHA256
tls-client
client
resolv-retry infinite
remote x.x.x.x udp
verify-x509-name "XXX" name
pkcs12 pfSense-udp-989-user.p12
tls-crypt pfSense-udp-989-user-tls.key
remote-cert-tls server
reneg-sec 0
verb 4
Client logs:
us=325209 Current Parameter Settings:
us=325209 config = 'pfSense-udp-xxxx-username-config.ovpn'
us=325209 mode = 0
us=325209 show_ciphers = DISABLED
us=325209 show_digests = DISABLED
us=325209 show_engines = DISABLED
us=325209 genkey = DISABLED
us=325209 key_pass_file = '[UNDEF]'
us=325209 show_tls_ciphers = DISABLED
us=325209 connect_retry_max = 0
us=325209 Connection profiles [0]:
us=325209 proto = udp
us=326186 local = '[UNDEF]'
us=326186 local_port = '1194'
us=326186 remote = 'PEER.IP.ADD.SERVER'
us=326186 remote_port = 'xxxx'
us=326186 remote_float = DISABLED
us=326186 bind_defined = DISABLED
us=326186 bind_local = ENABLED
us=326186 bind_ipv6_only = DISABLED
us=326186 connect_retry_seconds = 5
us=326186 connect_timeout = 120
us=326186 socks_proxy_server = '[UNDEF]'
us=326186 socks_proxy_port = '[UNDEF]'
us=326186 tun_mtu = 1500
us=326186 tun_mtu_defined = ENABLED
us=326186 link_mtu = 1500
us=326186 link_mtu_defined = DISABLED
us=326186 tun_mtu_extra = 0
us=326186 tun_mtu_extra_defined = DISABLED
us=326186 mtu_discover_type = -1
us=326186 fragment = 0
us=326186 mssfix = 1450
us=326186 explicit_exit_notification = 0
us=326186 Connection profiles END
us=326186 remote_random = DISABLED
us=326186 ipchange = '[UNDEF]'
us=326186 dev = 'tun'
us=326186 dev_type = '[UNDEF]'
us=326186 dev_node = '[UNDEF]'
us=326186 lladdr = '[UNDEF]'
us=326186 topology = 1
us=326186 ifconfig_local = '[UNDEF]'
us=326186 ifconfig_remote_netmask = '[UNDEF]'
us=326186 ifconfig_noexec = DISABLED
us=326186 ifconfig_nowarn = DISABLED
us=326186 ifconfig_ipv6_local = '[UNDEF]'
us=326186 ifconfig_ipv6_netbits = 0
us=326186 ifconfig_ipv6_remote = '[UNDEF]'
us=326186 shaper = 0
us=326186 mtu_test = 0
us=326186 mlock = DISABLED
us=326186 keepalive_ping = 0
us=326186 keepalive_timeout = 0
us=326186 inactivity_timeout = 0
us=326186 ping_send_timeout = 0
us=326186 ping_rec_timeout = 0
us=326186 ping_rec_timeout_action = 0
us=326186 ping_timer_remote = DISABLED
us=326186 remap_sigusr1 = 0
us=326186 persist_tun = ENABLED
us=326186 persist_local_ip = DISABLED
us=326186 persist_remote_ip = DISABLED
us=326186 persist_key = ENABLED
us=326186 passtos = DISABLED
us=326186 resolve_retry_seconds = 1000000000
us=326186 resolve_in_advance = DISABLED
us=326186 username = '[UNDEF]'
us=326186 groupname = '[UNDEF]'
us=326186 chroot_dir = '[UNDEF]'
us=326186 cd_dir = '[UNDEF]'
us=326186 writepid = '[UNDEF]'
us=326186 up_script = '[UNDEF]'
us=326186 down_script = '[UNDEF]'
us=326186 down_pre = DISABLED
us=326186 up_restart = DISABLED
us=326186 up_delay = DISABLED
us=326186 daemon = DISABLED
us=326186 inetd = 0
us=326186 log = ENABLED
us=326186 suppress_timestamps = DISABLED
us=326186 machine_readable_output = DISABLED
us=326186 nice = 0
us=326186 verbosity = 4
us=326186 mute = 0
us=326186 gremlin = 0
us=326186 status_file = '[UNDEF]'
us=326186 status_file_version = 1
us=326186 status_file_update_freq = 60
us=326186 occ = ENABLED
us=326186 rcvbuf = 0
us=326186 sndbuf = 0
us=326186 sockflags = 0
us=326186 fast_io = DISABLED
us=326186 comp.alg = 0
us=326186 comp.flags = 0
us=326186 route_script = '[UNDEF]'
us=326186 route_default_gateway = '[UNDEF]'
us=326186 route_default_metric = 0
us=326186 route_noexec = DISABLED
us=326186 route_delay = 5
us=326186 route_delay_window = 30
us=326186 route_delay_defined = ENABLED
us=327162 route_nopull = DISABLED
us=327162 route_gateway_via_dhcp = DISABLED
us=327162 allow_pull_fqdn = DISABLED
us=327162 management_addr = '127.0.0.1'
us=327162 management_port = '25340'
us=327162 management_user_pass = 'stdin'
us=327162 management_log_history_cache = 250
us=327162 management_echo_buffer_size = 100
us=327162 management_write_peer_info_file = '[UNDEF]'
us=327162 management_client_user = '[UNDEF]'
us=327162 management_client_group = '[UNDEF]'
us=327162 management_flags = 6
us=327162 shared_secret_file = '[UNDEF]'
us=327162 key_direction = 0
us=327162 ciphername = 'AES-256-CBC'
us=327162 ncp_enabled = ENABLED
us=327162 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
us=327162 authname = 'SHA256'
us=327162 prng_hash = 'SHA1'
us=327162 prng_nonce_secret_len = 16
us=327162 keysize = 0
us=327162 engine = DISABLED
us=327162 replay = ENABLED
us=327162 mute_replay_warnings = DISABLED
us=327162 replay_window = 64
us=327162 replay_time = 15
us=327162 packet_id_file = '[UNDEF]'
us=327162 use_iv = ENABLED
us=327162 test_crypto = DISABLED
us=327162 tls_server = DISABLED
us=327162 tls_client = ENABLED
us=327162 key_method = 2
us=327162 ca_file = '[UNDEF]'
us=327162 ca_path = '[UNDEF]'
us=327162 dh_file = '[UNDEF]'
us=327162 cert_file = '[UNDEF]'
us=327162 extra_certs_file = '[UNDEF]'
us=327162 priv_key_file = '[UNDEF]'
us=327162 pkcs12_file = 'pfSense-udp-xxxx-username.p12'
us=327162 cryptoapi_cert = '[UNDEF]'
us=327162 cipher_list = '[UNDEF]'
us=327162 tls_verify = '[UNDEF]'
us=327162 tls_export_cert = '[UNDEF]'
us=327162 verify_x509_type = 2
us=327162 verify_x509_name = 'CN'
us=327162 crl_file = '[UNDEF]'
us=327162 ns_cert_type = 0
us=327162 remote_cert_ku[i] = 65535
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_ku[i] = 0
us=327162 remote_cert_eku = 'TLS Web Server Authentication'
us=327162 ssl_flags = 0
us=327162 tls_timeout = 2
us=327162 renegotiate_bytes = -1
us=327162 renegotiate_packets = 0
us=327162 renegotiate_seconds = 0
us=327162 handshake_window = 60
us=327162 transition_window = 3600
us=327162 single_session = DISABLED
us=327162 push_peer_info = DISABLED
us=327162 tls_exit = DISABLED
us=327162 tls_auth_file = '[UNDEF]'
us=327162 tls_crypt_file = 'pfSense-udp-xxxx-username-tls.key'
us=327162 pkcs11_protected_authentication = DISABLED
us=327162 pkcs11_protected_authentication = DISABLED
us=327162 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_protected_authentication = DISABLED
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_private_mode = 00000000
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_cert_private = DISABLED
us=328140 pkcs11_pin_cache_period = -1
us=328140 pkcs11_id = '[UNDEF]'
us=328140 pkcs11_id_management = DISABLED
us=328140 server_network = 0.0.0.0
us=328140 server_netmask = 0.0.0.0
us=328140 server_network_ipv6 = ::
us=328140 server_netbits_ipv6 = 0
us=328140 server_bridge_ip = 0.0.0.0
us=328140 server_bridge_netmask = 0.0.0.0
us=328140 server_bridge_pool_start = 0.0.0.0
us=328140 server_bridge_pool_end = 0.0.0.0
us=328140 ifconfig_pool_defined = DISABLED
us=328140 ifconfig_pool_start = 0.0.0.0
us=328140 ifconfig_pool_end = 0.0.0.0
us=328140 ifconfig_pool_netmask = 0.0.0.0
us=328140 ifconfig_pool_persist_filename = '[UNDEF]'
us=328140 ifconfig_pool_persist_refresh_freq = 600
us=328140 ifconfig_ipv6_pool_defined = DISABLED
us=328140 ifconfig_ipv6_pool_base = ::
us=328140 ifconfig_ipv6_pool_netbits = 0
us=328140 n_bcast_buf = 256
us=328140 tcp_queue_limit = 64
us=328140 real_hash_size = 256
us=328140 virtual_hash_size = 256
us=328140 client_connect_script = '[UNDEF]'
us=328140 learn_address_script = '[UNDEF]'
us=328140 client_disconnect_script = '[UNDEF]'
us=328140 client_config_dir = '[UNDEF]'
us=328140 ccd_exclusive = DISABLED
us=328140 tmp_dir = 'C:\Users\user\AppData\Local\Temp\'
us=328140 push_ifconfig_defined = DISABLED
us=328140 push_ifconfig_local = 0.0.0.0
us=328140 push_ifconfig_remote_netmask = 0.0.0.0
us=328140 push_ifconfig_ipv6_defined = DISABLED
us=328140 push_ifconfig_ipv6_local = ::/0
us=328140 push_ifconfig_ipv6_remote = ::
us=328140 enable_c2c = DISABLED
us=328140 duplicate_cn = DISABLED
us=328140 cf_max = 0
us=328140 cf_per = 0
us=328140 max_clients = 1024
us=328140 max_routes_per_client = 256
us=328140 auth_user_pass_verify_script = '[UNDEF]'
us=328140 auth_user_pass_verify_script_via_file = DISABLED
us=328140 auth_token_generate = DISABLED
us=328140 auth_token_lifetime = 0
us=328140 client = ENABLED
us=328140 pull = ENABLED
us=328140 auth_user_pass_file = '[UNDEF]'
us=328140 show_net_up = DISABLED
us=328140 route_method = 3
us=328140 block_outside_dns = DISABLED
us=328140 ip_win32_defined = DISABLED
us=328140 ip_win32_type = 3
us=329119 dhcp_masq_offset = 0
us=329119 dhcp_lease_time = 31536000
us=329119 tap_sleep = 0
us=329119 dhcp_options = DISABLED
us=329119 dhcp_renew = DISABLED
us=329119 dhcp_pre_release = DISABLED
us=329119 domain = '[UNDEF]'
us=329119 netbios_scope = '[UNDEF]'
us=329119 netbios_node_type = 0
us=329119 disable_nbt = DISABLED
us=329119 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
us=329119 Windows version 6.2 (Windows 8 or greater) 64bit
us=329119 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.10
Enter Management Password:
us=330094 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
us=330094 Need hold release from management interface, waiting...
us=798196 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
us=900809 MANAGEMENT: CMD 'state on'
us=903733 MANAGEMENT: CMD 'log all on'
us=145110 MANAGEMENT: CMD 'echo all on'
us=147064 MANAGEMENT: CMD 'hold off'
us=149019 MANAGEMENT: CMD 'hold release'
us=325899 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
us=325899 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
us=325899 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
us=325899 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
us=326877 Control Channel MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
us=326877 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
us=326877 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
us=326877 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
us=326877 TCP/UDP: Preserving recently used remote address: [AF_INET]PEER.IP.ADD.SERVER:xxxx
us=326877 Socket Buffers: R=[65536->65536] S=[65536->65536]
us=326877 UDP link local (bound): [AF_INET][undef]:1194
us=326877 UDP link remote: [AF_INET]PEER.IP.ADD.SERVER:xxxx
us=326877 MANAGEMENT: >STATE:1519345865,WAIT,,,,,,
us=389419 MANAGEMENT: >STATE:1519345865,AUTH,,,,,,
us=389419 TLS: Initial packet from [AF_INET]PEER.IP.ADD.SERVER:xxxx, sid=93c5cc7f e6a9f3de
us=450988 VERIFY OK: depth=1, C=Country, ST=Location, L=Location, O=Organization, emailAddress=email@domain.com, CN=CN
us=450988 VERIFY KU OK
us=450988 Validating certificate extended key usage
us=450988 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
us=450988 VERIFY EKU OK
us=450988 VERIFY X509NAME OK: C=Country, ST=Location, L=Location, O=Organization, emailAddress=email@domain.com, CN=CN
us=450988 VERIFY OK: depth=0, C=Country, ST=Location, L=Location, O=Organization, emailAddress=email@domain.com, CN=CN
us=636675 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
us=636675 [CN] Peer Connection Initiated with [AF_INET]PEER.IP.ADD.SERVER:xxxx
us=822061 MANAGEMENT: >STATE:1519345866,GET_CONFIG,,,,,,
us=822061 SENT CONTROL [CN]: 'PUSH_REQUEST' (status=1)
us=65929 SENT CONTROL [CN]: 'PUSH_REQUEST' (status=1)
us=411431 SENT CONTROL [CN]: 'PUSH_REQUEST' (status=1)
us=970947 SENT CONTROL [CN]: 'PUSH_REQUEST' (status=1)
us=255171 SENT CONTROL [CN]: 'PUSH_REQUEST' (status=1)
us=808817 SENT CONTROL [CN]: 'PUSH_REQUEST' (status=1)
us=80050 SENT CONTROL [CN]: 'PUSH_REQUEST' (status=1)
us=888912 TCP/UDP: Closing socket
us=888912 SIGTERM[hard,] received, process exiting
us=888912 MANAGEMENT: >STATE:1519345899,EXITING,SIGTERM,,,,,
No pushes received on phone. Duo saying they are not seeing any hits.
Thanks for your help. (And guidance on format!)
