Hello.
I have been googling for the last 3 days and I'm at the wit's end.
I have set up an OpenVPN server through modification of sample files and following howto at the community OpenVPN pages. The server is running Xubuntu 17.10, binaries were installed from repositories (OpenVPN 2.4.3 x86_64-pc-linux-gnu built on Jul 3 2017). It is a standalone device on LAN behind a router with NAT.
I have:
- enabled port forwarding on my router for both TCP and UDP,
- temporarily disabled firewall, both on the router and the server
- contacted my ISP to verify the ports are opened,
- double checked by temporarily listening on the TCP port with sshd - connection worked ok.
My client is a Windows 7 Enterprise laptop connected to a domain with OpenVPN 2.4.5 (x86_64-w64-mingw32 built on Mar 1 2018) and OpenVPN GUI v11.10.0.0 client. All testing was done through wi-fi hotspot from my cell phone (outside the Active Directory domain network).
As suggested on other threads on this forum dealing with similar situation, I have tried setting up TCP connection as well, right now both are running alongside each other. I'll post TCP config and logs in a standalone post because of the length limit. The setup of both TCP and UDP servers is identical with the exception of protocol, subnet and explicit-exit-notify (commented out in TCP config).
Another post suggested trying tcpdump. Output can be found below. I also added output of ifconfig.
The problem is the client refuses to establish the connection, be it TCP or UDP from an outside network (internet). I eliminated the ISP side causing trouble by connecting the client directly on the WAN port of my router (with firewall completely disabled and port forwarding set up). The problem was exactly the same. The error message is different for UDP and TCP but I'm guessing the problem is the same. The strange thing is everything works as expected when connecting from the LAN.
The error message from UDP (complete log below):
TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
TLS Error: TLS handshake failed
The error message from TCP (complete log in the next post):
TCP: connect to [AF_INET]XXX.XXX.XXX.XXX:xxx failed: Unknown error
SIGUSR1[connection failed(soft),init_instance] received, process restarting
I'll be very grateful for any help or hints.
Here are configuration files and logs:
Subnets, usernames and MAC addresses are altered. Ports logged are local and are redirected on my router.
ifconfig:
enp2s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.180.250 netmask 255.255.255.0 broadcast 192.168.180.255
inet6 AABB::CCDD:EEAA:BBCC:DDEE prefixlen 64 scopeid 0x20<link>
ether AA:BB:CC:AA:BB:CC txqueuelen 1000 (Ethernet)
RX packets 82397 bytes 15528611 (15.5 MB)
RX errors 0 dropped 18 overruns 0 frame 0
TX packets 70978 bytes 44482560 (44.4 MB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 10749 bytes 13127165 (13.1 MB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 10749 bytes 13127165 (13.1 MB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 172.24.240.1 netmask 255.255.255.255 destination 172.24.240.2
inet6 AABB::CCDD:EEAA:BBCC:DDEE prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 103 bytes 5978 (5.9 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tun1: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 172.24.230.1 netmask 255.255.255.255 destination 172.24.230.2
inet6 AABB::CCDD:EEAA:BBCC:DDEE prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 103 bytes 5978 (5.9 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
UDP server
UDP server configuration:
;local a.b.c.d
port 1194
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
;topology subnet
;server 10.8.0.0 255.255.255.0
server 172.24.230.0 255.255.255.0
ifconfig-pool-persist ipp-udp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
;compress lz4-v2
;push "compress lz4-v2"
;comp-lzo
;max-clients 100
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status-udp.log
log openvpn-udp.log
;log-append openvpn.log
verb 4
;mute 20
explicit-exit-notify 1
server-udp startup log:
#openvpn-udp.log with clean start (service restarted)
Mon Mar 26 15:03:32 2018 us=325013 WARNING: file 'server.key' is group or others accessible
Mon Mar 26 15:03:32 2018 us=325181 WARNING: file 'ta.key' is group or others accessible
Mon Mar 26 15:03:32 2018 us=325264 Current Parameter Settings:
Mon Mar 26 15:03:32 2018 us=325299 config = '/etc/openvpn/server-udp.conf'
Mon Mar 26 15:03:32 2018 us=325334 mode = 1
Mon Mar 26 15:03:32 2018 us=325369 persist_config = DISABLED
Mon Mar 26 15:03:32 2018 us=325403 persist_mode = 1
Mon Mar 26 15:03:32 2018 us=325438 show_ciphers = DISABLED
Mon Mar 26 15:03:32 2018 us=325473 show_digests = DISABLED
Mon Mar 26 15:03:32 2018 us=325507 show_engines = DISABLED
Mon Mar 26 15:03:32 2018 us=325542 genkey = DISABLED
Mon Mar 26 15:03:32 2018 us=325576 key_pass_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=325610 show_tls_ciphers = DISABLED
Mon Mar 26 15:03:32 2018 us=325645 connect_retry_max = 0
Mon Mar 26 15:03:32 2018 us=325680 Connection profiles [0]:
Mon Mar 26 15:03:32 2018 us=325715 proto = udp
Mon Mar 26 15:03:32 2018 us=325750 local = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=325784 local_port = '1194'
Mon Mar 26 15:03:32 2018 us=325818 remote = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=325853 remote_port = '1194'
Mon Mar 26 15:03:32 2018 us=325887 remote_float = DISABLED
Mon Mar 26 15:03:32 2018 us=325922 bind_defined = DISABLED
Mon Mar 26 15:03:32 2018 us=325956 bind_local = ENABLED
Mon Mar 26 15:03:32 2018 us=325990 bind_ipv6_only = DISABLED
Mon Mar 26 15:03:32 2018 us=326025 connect_retry_seconds = 5
Mon Mar 26 15:03:32 2018 us=326060 connect_timeout = 120
Mon Mar 26 15:03:32 2018 us=326094 socks_proxy_server = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=326128 socks_proxy_port = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=326163 tun_mtu = 1500
Mon Mar 26 15:03:32 2018 us=326197 tun_mtu_defined = ENABLED
Mon Mar 26 15:03:32 2018 us=326232 link_mtu = 1500
Mon Mar 26 15:03:32 2018 us=326266 link_mtu_defined = DISABLED
Mon Mar 26 15:03:32 2018 us=326301 tun_mtu_extra = 0
Mon Mar 26 15:03:32 2018 us=326336 tun_mtu_extra_defined = DISABLED
Mon Mar 26 15:03:32 2018 us=326370 mtu_discover_type = -1
Mon Mar 26 15:03:32 2018 us=326405 fragment = 0
Mon Mar 26 15:03:32 2018 us=326439 mssfix = 1450
Mon Mar 26 15:03:32 2018 us=326474 explicit_exit_notification = 1
Mon Mar 26 15:03:32 2018 us=326508 Connection profiles END
Mon Mar 26 15:03:32 2018 us=326543 remote_random = DISABLED
Mon Mar 26 15:03:32 2018 us=326577 ipchange = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=326611 dev = 'tun'
Mon Mar 26 15:03:32 2018 us=326655 dev_type = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=326690 dev_node = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=326724 lladdr = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=326759 topology = 1
Mon Mar 26 15:03:32 2018 us=326793 ifconfig_local = '172.24.230.1'
Mon Mar 26 15:03:32 2018 us=326828 ifconfig_remote_netmask = '172.24.230.2'
Mon Mar 26 15:03:32 2018 us=326863 ifconfig_noexec = DISABLED
Mon Mar 26 15:03:32 2018 us=326897 ifconfig_nowarn = DISABLED
Mon Mar 26 15:03:32 2018 us=326932 ifconfig_ipv6_local = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=326966 ifconfig_ipv6_netbits = 0
Mon Mar 26 15:03:32 2018 us=327001 ifconfig_ipv6_remote = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=327036 shaper = 0
Mon Mar 26 15:03:32 2018 us=327070 mtu_test = 0
Mon Mar 26 15:03:32 2018 us=327105 mlock = DISABLED
Mon Mar 26 15:03:32 2018 us=327139 keepalive_ping = 10
Mon Mar 26 15:03:32 2018 us=327174 keepalive_timeout = 120
Mon Mar 26 15:03:32 2018 us=327209 inactivity_timeout = 0
Mon Mar 26 15:03:32 2018 us=327292 ping_send_timeout = 10
Mon Mar 26 15:03:32 2018 us=327348 ping_rec_timeout = 240
Mon Mar 26 15:03:32 2018 us=327383 ping_rec_timeout_action = 2
Mon Mar 26 15:03:32 2018 us=327418 ping_timer_remote = DISABLED
Mon Mar 26 15:03:32 2018 us=327453 remap_sigusr1 = 0
Mon Mar 26 15:03:32 2018 us=327487 persist_tun = ENABLED
Mon Mar 26 15:03:32 2018 us=327521 persist_local_ip = DISABLED
Mon Mar 26 15:03:32 2018 us=327556 persist_remote_ip = DISABLED
Mon Mar 26 15:03:32 2018 us=327590 persist_key = ENABLED
Mon Mar 26 15:03:32 2018 us=327648 passtos = DISABLED
Mon Mar 26 15:03:32 2018 us=327683 resolve_retry_seconds = 1000000000
Mon Mar 26 15:03:32 2018 us=327718 resolve_in_advance = DISABLED
Mon Mar 26 15:03:32 2018 us=327752 username = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=327787 groupname = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=327821 chroot_dir = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=327856 cd_dir = '/etc/openvpn'
Mon Mar 26 15:03:32 2018 us=327891 writepid = '/run/openvpn/server-udp.pid'
Mon Mar 26 15:03:32 2018 us=327925 up_script = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=327959 down_script = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=327994 down_pre = DISABLED
Mon Mar 26 15:03:32 2018 us=328028 up_restart = DISABLED
Mon Mar 26 15:03:32 2018 us=328063 up_delay = DISABLED
Mon Mar 26 15:03:32 2018 us=328097 daemon = ENABLED
Mon Mar 26 15:03:32 2018 us=328132 inetd = 0
Mon Mar 26 15:03:32 2018 us=328166 log = ENABLED
Mon Mar 26 15:03:32 2018 us=328201 suppress_timestamps = DISABLED
Mon Mar 26 15:03:32 2018 us=328235 machine_readable_output = DISABLED
Mon Mar 26 15:03:32 2018 us=328270 nice = 0
Mon Mar 26 15:03:32 2018 us=328305 verbosity = 4
Mon Mar 26 15:03:32 2018 us=328339 mute = 0
Mon Mar 26 15:03:32 2018 us=328374 gremlin = 0
Mon Mar 26 15:03:32 2018 us=328408 status_file = 'openvpn-status-udp.log'
Mon Mar 26 15:03:32 2018 us=328443 status_file_version = 1
Mon Mar 26 15:03:32 2018 us=328478 status_file_update_freq = 10
Mon Mar 26 15:03:32 2018 us=328512 occ = ENABLED
Mon Mar 26 15:03:32 2018 us=328547 rcvbuf = 0
Mon Mar 26 15:03:32 2018 us=328581 sndbuf = 0
Mon Mar 26 15:03:32 2018 us=328616 mark = 0
Mon Mar 26 15:03:32 2018 us=328650 sockflags = 0
Mon Mar 26 15:03:32 2018 us=328684 fast_io = DISABLED
Mon Mar 26 15:03:32 2018 us=328719 comp.alg = 0
Mon Mar 26 15:03:32 2018 us=328754 comp.flags = 0
Mon Mar 26 15:03:32 2018 us=328789 route_script = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=328823 route_default_gateway = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=328858 route_default_metric = 0
Mon Mar 26 15:03:32 2018 us=328893 route_noexec = DISABLED
Mon Mar 26 15:03:32 2018 us=328928 route_delay = 0
Mon Mar 26 15:03:32 2018 us=328963 route_delay_window = 30
Mon Mar 26 15:03:32 2018 us=328997 route_delay_defined = DISABLED
Mon Mar 26 15:03:32 2018 us=329032 route_nopull = DISABLED
Mon Mar 26 15:03:32 2018 us=329066 route_gateway_via_dhcp = DISABLED
Mon Mar 26 15:03:32 2018 us=329101 allow_pull_fqdn = DISABLED
Mon Mar 26 15:03:32 2018 us=329137 route 172.24.230.0/255.255.255.0/default (not set)/default (not set)
Mon Mar 26 15:03:32 2018 us=329173 management_addr = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=329208 management_port = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=329243 management_user_pass = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=329278 management_log_history_cache = 250
Mon Mar 26 15:03:32 2018 us=329313 management_echo_buffer_size = 100
Mon Mar 26 15:03:32 2018 us=329348 management_write_peer_info_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=329384 management_client_user = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=329419 management_client_group = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=329454 management_flags = 0
Mon Mar 26 15:03:32 2018 us=329489 shared_secret_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=329524 key_direction = 1
Mon Mar 26 15:03:32 2018 us=329559 ciphername = 'AES-256-CBC'
Mon Mar 26 15:03:32 2018 us=329594 ncp_enabled = ENABLED
Mon Mar 26 15:03:32 2018 us=329629 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Mon Mar 26 15:03:32 2018 us=329665 authname = 'SHA1'
Mon Mar 26 15:03:32 2018 us=329700 prng_hash = 'SHA1'
Mon Mar 26 15:03:32 2018 us=329735 prng_nonce_secret_len = 16
Mon Mar 26 15:03:32 2018 us=329770 keysize = 0
Mon Mar 26 15:03:32 2018 us=329805 engine = DISABLED
Mon Mar 26 15:03:32 2018 us=329840 replay = ENABLED
Mon Mar 26 15:03:32 2018 us=329875 mute_replay_warnings = DISABLED
Mon Mar 26 15:03:32 2018 us=329910 replay_window = 64
Mon Mar 26 15:03:32 2018 us=329946 replay_time = 15
Mon Mar 26 15:03:32 2018 us=329996 packet_id_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330032 use_iv = ENABLED
Mon Mar 26 15:03:32 2018 us=330067 test_crypto = DISABLED
Mon Mar 26 15:03:32 2018 us=330102 tls_server = ENABLED
Mon Mar 26 15:03:32 2018 us=330137 tls_client = DISABLED
Mon Mar 26 15:03:32 2018 us=330172 key_method = 2
Mon Mar 26 15:03:32 2018 us=330207 ca_file = 'ca.crt'
Mon Mar 26 15:03:32 2018 us=330242 ca_path = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330277 dh_file = 'dh2048.pem'
Mon Mar 26 15:03:32 2018 us=330312 cert_file = 'server.crt'
Mon Mar 26 15:03:32 2018 us=330347 extra_certs_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330382 priv_key_file = 'server.key'
Mon Mar 26 15:03:32 2018 us=330417 pkcs12_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330451 cipher_list = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330486 tls_verify = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330521 tls_export_cert = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330556 verify_x509_type = 0
Mon Mar 26 15:03:32 2018 us=330591 verify_x509_name = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330626 crl_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=330661 ns_cert_type = 0
Mon Mar 26 15:03:32 2018 us=330696 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330731 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330766 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330802 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330837 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330872 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330907 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330942 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=330978 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331013 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331048 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331083 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331118 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331153 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331188 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331223 remote_cert_ku[i] = 0
Mon Mar 26 15:03:32 2018 us=331286 remote_cert_eku = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=331328 ssl_flags = 0
Mon Mar 26 15:03:32 2018 us=331363 tls_timeout = 2
Mon Mar 26 15:03:32 2018 us=331398 renegotiate_bytes = -1
Mon Mar 26 15:03:32 2018 us=331433 renegotiate_packets = 0
Mon Mar 26 15:03:32 2018 us=331469 renegotiate_seconds = 3600
Mon Mar 26 15:03:32 2018 us=331504 handshake_window = 60
Mon Mar 26 15:03:32 2018 us=331539 transition_window = 3600
Mon Mar 26 15:03:32 2018 us=331574 single_session = DISABLED
Mon Mar 26 15:03:32 2018 us=331609 push_peer_info = DISABLED
Mon Mar 26 15:03:32 2018 us=331644 tls_exit = DISABLED
Mon Mar 26 15:03:32 2018 us=331679 tls_auth_file = 'ta.key'
Mon Mar 26 15:03:32 2018 us=331714 tls_crypt_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=331749 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=331784 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=331819 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=331855 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=331890 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=331925 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=331960 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=331995 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332030 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332065 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332100 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332135 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332171 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332206 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332241 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332294 pkcs11_protected_authentication = DISABLED
Mon Mar 26 15:03:32 2018 us=332331 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332367 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332403 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332438 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332474 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332509 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332545 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332580 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332616 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332651 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332687 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332722 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332758 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332793 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332829 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332864 pkcs11_private_mode = 00000000
Mon Mar 26 15:03:32 2018 us=332899 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=332934 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=332969 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333004 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333049 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333085 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333121 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333156 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333191 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333226 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333261 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333296 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333331 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333366 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333401 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333436 pkcs11_cert_private = DISABLED
Mon Mar 26 15:03:32 2018 us=333472 pkcs11_pin_cache_period = -1
Mon Mar 26 15:03:32 2018 us=333507 pkcs11_id = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=333542 pkcs11_id_management = DISABLED
Mon Mar 26 15:03:32 2018 us=333580 server_network = 172.24.230.0
Mon Mar 26 15:03:32 2018 us=333618 server_netmask = 255.255.255.0
Mon Mar 26 15:03:32 2018 us=333656 server_network_ipv6 = ::
Mon Mar 26 15:03:32 2018 us=333691 server_netbits_ipv6 = 0
Mon Mar 26 15:03:32 2018 us=333729 server_bridge_ip = 0.0.0.0
Mon Mar 26 15:03:32 2018 us=333766 server_bridge_netmask = 0.0.0.0
Mon Mar 26 15:03:32 2018 us=333804 server_bridge_pool_start = 0.0.0.0
Mon Mar 26 15:03:32 2018 us=333841 server_bridge_pool_end = 0.0.0.0
Mon Mar 26 15:03:32 2018 us=333881 push_entry = 'route 172.24.230.1'
Mon Mar 26 15:03:32 2018 us=333930 push_entry = 'topology net30'
Mon Mar 26 15:03:32 2018 us=333980 push_entry = 'ping 10'
Mon Mar 26 15:03:32 2018 us=334028 push_entry = 'ping-restart 120'
Mon Mar 26 15:03:32 2018 us=334071 ifconfig_pool_defined = ENABLED
Mon Mar 26 15:03:32 2018 us=334110 ifconfig_pool_start = 172.24.230.4
Mon Mar 26 15:03:32 2018 us=334149 ifconfig_pool_end = 172.24.230.251
Mon Mar 26 15:03:32 2018 us=334187 ifconfig_pool_netmask = 0.0.0.0
Mon Mar 26 15:03:32 2018 us=334223 ifconfig_pool_persist_filename = 'ipp-udp.txt'
Mon Mar 26 15:03:32 2018 us=334259 ifconfig_pool_persist_refresh_freq = 600
Mon Mar 26 15:03:32 2018 us=334295 ifconfig_ipv6_pool_defined = DISABLED
Mon Mar 26 15:03:32 2018 us=334333 ifconfig_ipv6_pool_base = ::
Mon Mar 26 15:03:32 2018 us=334369 ifconfig_ipv6_pool_netbits = 0
Mon Mar 26 15:03:32 2018 us=334405 n_bcast_buf = 256
Mon Mar 26 15:03:32 2018 us=334440 tcp_queue_limit = 64
Mon Mar 26 15:03:32 2018 us=334476 real_hash_size = 256
Mon Mar 26 15:03:32 2018 us=334539 virtual_hash_size = 256
Mon Mar 26 15:03:32 2018 us=334591 client_connect_script = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=334638 learn_address_script = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=334688 client_disconnect_script = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=334734 client_config_dir = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=334779 ccd_exclusive = DISABLED
Mon Mar 26 15:03:32 2018 us=334825 tmp_dir = '/tmp'
Mon Mar 26 15:03:32 2018 us=334871 push_ifconfig_defined = DISABLED
Mon Mar 26 15:03:32 2018 us=334924 push_ifconfig_local = 0.0.0.0
Mon Mar 26 15:03:32 2018 us=335531 push_ifconfig_remote_netmask = 0.0.0.0
Mon Mar 26 15:03:32 2018 us=335642 push_ifconfig_ipv6_defined = DISABLED
Mon Mar 26 15:03:32 2018 us=336332 push_ifconfig_ipv6_local = ::/0
Mon Mar 26 15:03:32 2018 us=336430 push_ifconfig_ipv6_remote = ::
Mon Mar 26 15:03:32 2018 us=336477 enable_c2c = DISABLED
Mon Mar 26 15:03:32 2018 us=336513 duplicate_cn = DISABLED
Mon Mar 26 15:03:32 2018 us=336549 cf_max = 0
Mon Mar 26 15:03:32 2018 us=336584 cf_per = 0
Mon Mar 26 15:03:32 2018 us=336620 max_clients = 1024
Mon Mar 26 15:03:32 2018 us=336655 max_routes_per_client = 256
Mon Mar 26 15:03:32 2018 us=336691 auth_user_pass_verify_script = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=336726 auth_user_pass_verify_script_via_file = DISABLED
Mon Mar 26 15:03:32 2018 us=336761 auth_token_generate = DISABLED
Mon Mar 26 15:03:32 2018 us=336796 auth_token_lifetime = 0
Mon Mar 26 15:03:32 2018 us=336831 port_share_host = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=336866 port_share_port = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=336901 client = DISABLED
Mon Mar 26 15:03:32 2018 us=336936 pull = DISABLED
Mon Mar 26 15:03:32 2018 us=336971 auth_user_pass_file = '[UNDEF]'
Mon Mar 26 15:03:32 2018 us=337011 OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 3 2017
Mon Mar 26 15:03:32 2018 us=337065 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Mon Mar 26 15:03:32 2018 us=339153 Diffie-Hellman initialized with 2048 bit key
Mon Mar 26 15:03:32 2018 us=341356 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 26 15:03:32 2018 us=341486 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 26 15:03:32 2018 us=341562 TLS-Auth MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Mon Mar 26 15:03:32 2018 us=342395 ROUTE_GATEWAY 192.168.180.1/255.255.255.0 IFACE=enp2s0 HWADDR=AA:BB:CC:AA:BB:CC
Mon Mar 26 15:03:32 2018 us=343415 TUN/TAP device tun1 opened
Mon Mar 26 15:03:32 2018 us=343599 TUN/TAP TX queue length set to 100
Mon Mar 26 15:03:32 2018 us=343718 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Mon Mar 26 15:03:32 2018 us=343814 /sbin/ip link set dev tun1 up mtu 1500
Mon Mar 26 15:03:32 2018 us=349976 /sbin/ip addr add dev tun1 local 172.24.230.1 peer 172.24.230.2
Mon Mar 26 15:03:32 2018 us=354528 /sbin/ip route add 172.24.230.0/24 via 172.24.230.2
Mon Mar 26 15:03:32 2018 us=360268 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Mon Mar 26 15:03:32 2018 us=360409 Could not determine IPv4/IPv6 protocol. Using AF_INET
Mon Mar 26 15:03:32 2018 us=360516 Socket Buffers: R=[212992->212992] S=[212992->212992]
Mon Mar 26 15:03:32 2018 us=360598 UDPv4 link local (bound): [AF_INET][undef]:1194
Mon Mar 26 15:03:32 2018 us=360652 UDPv4 link remote: [AF_UNSPEC]
Mon Mar 26 15:03:32 2018 us=360720 MULTI: multi_init called, r=256 v=256
Mon Mar 26 15:03:32 2018 us=360841 IFCONFIG POOL: base=172.24.230.4 size=62, ipv6=0
Mon Mar 26 15:03:32 2018 us=360919 ifconfig_pool_read(), in='user,172.24.230.4', TODO: IPv6
Mon Mar 26 15:03:32 2018 us=360972 succeeded -> ifconfig_pool_set()
Mon Mar 26 15:03:32 2018 us=361028 IFCONFIG POOL LIST
Mon Mar 26 15:03:32 2018 us=361081 user,172.24.230.4
Mon Mar 26 15:03:32 2018 us=363072 Initialization Sequence Completed
Connection log:
# no change in openvpn-udp.log file
tcpdump:
# tcpdump -A 'udp and port 1154' -w file
# tcpdump -r file
17:36:26.034912 IP client.56820 > server.1154: UDP, length 42
17:36:28.372122 IP client.56820 > server.1154: UDP, length 42
17:36:31.914906 IP client.56820 > server.1154: UDP, length 42
17:36:39.890216 IP client.56820 > server.1154: UDP, length 42
17:36:55.716607 IP client.56820 > server.1154: UDP, length 42
17:37:31.553719 IP client.65312 > server.1154: UDP, length 42
17:37:33.778426 IP client.65312 > server.1154: UDP, length 42
17:37:38.226009 IP client.65312 > server.1154: UDP, length 42
17:37:45.618108 IP client.65312 > server.1154: UDP, length 42
17:38:01.750872 IP client.65312 > server.1154: UDP, length 42
17:38:37.462124 IP client.63333 > server.1154: UDP, length 42
17:38:38.604879 IP client.63333 > server.1154: UDP, length 42
17:38:43.157365 IP client.63333 > server.1154: UDP, length 42
17:38:51.046641 IP client.63333 > server.1154: UDP, length 42
UDP client
UDP client configuration:
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
;remote my-remote--1 1194
;remote my-server-2 1194
remote XXX.XXX.XXX.XXX xxx
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nogroup
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
<ca>
-----BEGIN CERTIFICATE-----
contents
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
contents
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
contents
-----END PRIVATE KEY-----
</key>
remote-cert-tls server
;tls-auth ta.key 1
key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
contents
-----END OpenVPN Static key V1-----
</tls-auth>
cipher AES-256-CBC
#comp-lzo
verb 4
;mute 20
Connection log:
Mon Mar 26 17:36:24 2018 us=848200 Current Parameter Settings:
Mon Mar 26 17:36:24 2018 us=849200 config = 'client-udp.ovpn'
Mon Mar 26 17:36:24 2018 us=849200 mode = 0
Mon Mar 26 17:36:24 2018 us=849200 show_ciphers = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 show_digests = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 show_engines = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 genkey = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 key_pass_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 show_tls_ciphers = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 connect_retry_max = 0
Mon Mar 26 17:36:24 2018 us=849200 Connection profiles [0]:
Mon Mar 26 17:36:24 2018 us=849200 proto = udp
Mon Mar 26 17:36:24 2018 us=849200 local = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 local_port = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 remote = 'XXX.XXX.XXX.XXX'
Mon Mar 26 17:36:24 2018 us=849200 remote_port = 'xxx'
Mon Mar 26 17:36:24 2018 us=849200 remote_float = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 bind_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 bind_local = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 bind_ipv6_only = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 connect_retry_seconds = 5
Mon Mar 26 17:36:24 2018 us=849200 connect_timeout = 120
Mon Mar 26 17:36:24 2018 us=849200 socks_proxy_server = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 socks_proxy_port = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 tun_mtu = 1500
Mon Mar 26 17:36:24 2018 us=849200 tun_mtu_defined = ENABLED
Mon Mar 26 17:36:24 2018 us=849200 link_mtu = 1500
Mon Mar 26 17:36:24 2018 us=849200 link_mtu_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 tun_mtu_extra = 0
Mon Mar 26 17:36:24 2018 us=849200 tun_mtu_extra_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 mtu_discover_type = -1
Mon Mar 26 17:36:24 2018 us=849200 fragment = 0
Mon Mar 26 17:36:24 2018 us=849200 mssfix = 1450
Mon Mar 26 17:36:24 2018 us=849200 explicit_exit_notification = 0
Mon Mar 26 17:36:24 2018 us=849200 Connection profiles END
Mon Mar 26 17:36:24 2018 us=849200 remote_random = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 ipchange = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 dev = 'tun'
Mon Mar 26 17:36:24 2018 us=849200 dev_type = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 dev_node = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 lladdr = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 topology = 1
Mon Mar 26 17:36:24 2018 us=849200 ifconfig_local = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 ifconfig_remote_netmask = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 ifconfig_noexec = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 ifconfig_nowarn = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 ifconfig_ipv6_local = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 ifconfig_ipv6_netbits = 0
Mon Mar 26 17:36:24 2018 us=849200 ifconfig_ipv6_remote = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 shaper = 0
Mon Mar 26 17:36:24 2018 us=849200 mtu_test = 0
Mon Mar 26 17:36:24 2018 us=849200 mlock = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 keepalive_ping = 0
Mon Mar 26 17:36:24 2018 us=849200 keepalive_timeout = 0
Mon Mar 26 17:36:24 2018 us=849200 inactivity_timeout = 0
Mon Mar 26 17:36:24 2018 us=849200 ping_send_timeout = 0
Mon Mar 26 17:36:24 2018 us=849200 ping_rec_timeout = 0
Mon Mar 26 17:36:24 2018 us=849200 ping_rec_timeout_action = 0
Mon Mar 26 17:36:24 2018 us=849200 ping_timer_remote = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 remap_sigusr1 = 0
Mon Mar 26 17:36:24 2018 us=849200 persist_tun = ENABLED
Mon Mar 26 17:36:24 2018 us=849200 persist_local_ip = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 persist_remote_ip = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 persist_key = ENABLED
Mon Mar 26 17:36:24 2018 us=849200 passtos = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 resolve_retry_seconds = 1000000000
Mon Mar 26 17:36:24 2018 us=849200 resolve_in_advance = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 username = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 groupname = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 chroot_dir = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 cd_dir = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 writepid = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 up_script = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 down_script = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 down_pre = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 up_restart = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 up_delay = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 daemon = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 inetd = 0
Mon Mar 26 17:36:24 2018 us=849200 log = ENABLED
Mon Mar 26 17:36:24 2018 us=849200 suppress_timestamps = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 machine_readable_output = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 nice = 0
Mon Mar 26 17:36:24 2018 us=849200 verbosity = 4
Mon Mar 26 17:36:24 2018 us=849200 mute = 0
Mon Mar 26 17:36:24 2018 us=849200 gremlin = 0
Mon Mar 26 17:36:24 2018 us=849200 status_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 status_file_version = 1
Mon Mar 26 17:36:24 2018 us=849200 status_file_update_freq = 60
Mon Mar 26 17:36:24 2018 us=849200 occ = ENABLED
Mon Mar 26 17:36:24 2018 us=849200 rcvbuf = 0
Mon Mar 26 17:36:24 2018 us=849200 sndbuf = 0
Mon Mar 26 17:36:24 2018 us=849200 sockflags = 0
Mon Mar 26 17:36:24 2018 us=849200 fast_io = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 comp.alg = 0
Mon Mar 26 17:36:24 2018 us=849200 comp.flags = 0
Mon Mar 26 17:36:24 2018 us=849200 route_script = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 route_default_gateway = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=849200 route_default_metric = 0
Mon Mar 26 17:36:24 2018 us=849200 route_noexec = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 route_delay = 5
Mon Mar 26 17:36:24 2018 us=849200 route_delay_window = 30
Mon Mar 26 17:36:24 2018 us=849200 route_delay_defined = ENABLED
Mon Mar 26 17:36:24 2018 us=849200 route_nopull = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 route_gateway_via_dhcp = DISABLED
Mon Mar 26 17:36:24 2018 us=849200 allow_pull_fqdn = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 management_addr = '127.0.0.1'
Mon Mar 26 17:36:24 2018 us=850200 management_port = '25341'
Mon Mar 26 17:36:24 2018 us=850200 management_user_pass = 'stdin'
Mon Mar 26 17:36:24 2018 us=850200 management_log_history_cache = 250
Mon Mar 26 17:36:24 2018 us=850200 management_echo_buffer_size = 100
Mon Mar 26 17:36:24 2018 us=850200 management_write_peer_info_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 management_client_user = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 management_client_group = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 management_flags = 6
Mon Mar 26 17:36:24 2018 us=850200 shared_secret_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 key_direction = 1
Mon Mar 26 17:36:24 2018 us=850200 ciphername = 'AES-256-CBC'
Mon Mar 26 17:36:24 2018 us=850200 ncp_enabled = ENABLED
Mon Mar 26 17:36:24 2018 us=850200 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Mon Mar 26 17:36:24 2018 us=850200 authname = 'SHA1'
Mon Mar 26 17:36:24 2018 us=850200 prng_hash = 'SHA1'
Mon Mar 26 17:36:24 2018 us=850200 prng_nonce_secret_len = 16
Mon Mar 26 17:36:24 2018 us=850200 keysize = 0
Mon Mar 26 17:36:24 2018 us=850200 engine = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 replay = ENABLED
Mon Mar 26 17:36:24 2018 us=850200 mute_replay_warnings = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 replay_window = 64
Mon Mar 26 17:36:24 2018 us=850200 replay_time = 15
Mon Mar 26 17:36:24 2018 us=850200 packet_id_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 use_iv = ENABLED
Mon Mar 26 17:36:24 2018 us=850200 test_crypto = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 tls_server = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 tls_client = ENABLED
Mon Mar 26 17:36:24 2018 us=850200 key_method = 2
Mon Mar 26 17:36:24 2018 us=850200 ca_file = '[[INLINE]]'
Mon Mar 26 17:36:24 2018 us=850200 ca_path = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 dh_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 cert_file = '[[INLINE]]'
Mon Mar 26 17:36:24 2018 us=850200 extra_certs_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 priv_key_file = '[[INLINE]]'
Mon Mar 26 17:36:24 2018 us=850200 pkcs12_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 cryptoapi_cert = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 cipher_list = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 tls_cert_profile = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 tls_verify = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 tls_export_cert = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 verify_x509_type = 0
Mon Mar 26 17:36:24 2018 us=850200 verify_x509_name = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 crl_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 ns_cert_type = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 65535
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_ku[i] = 0
Mon Mar 26 17:36:24 2018 us=850200 remote_cert_eku = 'TLS Web Server Authentication'
Mon Mar 26 17:36:24 2018 us=850200 ssl_flags = 0
Mon Mar 26 17:36:24 2018 us=850200 tls_timeout = 2
Mon Mar 26 17:36:24 2018 us=850200 renegotiate_bytes = -1
Mon Mar 26 17:36:24 2018 us=850200 renegotiate_packets = 0
Mon Mar 26 17:36:24 2018 us=850200 renegotiate_seconds = 3600
Mon Mar 26 17:36:24 2018 us=850200 handshake_window = 60
Mon Mar 26 17:36:24 2018 us=850200 transition_window = 3600
Mon Mar 26 17:36:24 2018 us=850200 single_session = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 push_peer_info = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 tls_exit = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 tls_auth_file = '[[INLINE]]'
Mon Mar 26 17:36:24 2018 us=850200 tls_crypt_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_protected_authentication = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_private_mode = 00000000
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_cert_private = DISABLED
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_pin_cache_period = -1
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_id = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=850200 pkcs11_id_management = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 server_network = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 server_netmask = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 server_network_ipv6 = ::
Mon Mar 26 17:36:24 2018 us=851200 server_netbits_ipv6 = 0
Mon Mar 26 17:36:24 2018 us=851200 server_bridge_ip = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 server_bridge_netmask = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 server_bridge_pool_start = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 server_bridge_pool_end = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_pool_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_pool_start = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_pool_end = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_pool_netmask = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_pool_persist_refresh_freq = 600
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_ipv6_pool_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_ipv6_pool_base = ::
Mon Mar 26 17:36:24 2018 us=851200 ifconfig_ipv6_pool_netbits = 0
Mon Mar 26 17:36:24 2018 us=851200 n_bcast_buf = 256
Mon Mar 26 17:36:24 2018 us=851200 tcp_queue_limit = 64
Mon Mar 26 17:36:24 2018 us=851200 real_hash_size = 256
Mon Mar 26 17:36:24 2018 us=851200 virtual_hash_size = 256
Mon Mar 26 17:36:24 2018 us=851200 client_connect_script = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 learn_address_script = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 client_disconnect_script = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 client_config_dir = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 ccd_exclusive = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 tmp_dir = 'C:\Users\user\AppData\Local\Temp\'
Mon Mar 26 17:36:24 2018 us=851200 push_ifconfig_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 push_ifconfig_local = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 push_ifconfig_remote_netmask = 0.0.0.0
Mon Mar 26 17:36:24 2018 us=851200 push_ifconfig_ipv6_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 push_ifconfig_ipv6_local = ::/0
Mon Mar 26 17:36:24 2018 us=851200 push_ifconfig_ipv6_remote = ::
Mon Mar 26 17:36:24 2018 us=851200 enable_c2c = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 duplicate_cn = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 cf_max = 0
Mon Mar 26 17:36:24 2018 us=851200 cf_per = 0
Mon Mar 26 17:36:24 2018 us=851200 max_clients = 1024
Mon Mar 26 17:36:24 2018 us=851200 max_routes_per_client = 256
Mon Mar 26 17:36:24 2018 us=851200 auth_user_pass_verify_script = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 auth_user_pass_verify_script_via_file = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 auth_token_generate = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 auth_token_lifetime = 0
Mon Mar 26 17:36:24 2018 us=851200 client = ENABLED
Mon Mar 26 17:36:24 2018 us=851200 pull = ENABLED
Mon Mar 26 17:36:24 2018 us=851200 auth_user_pass_file = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 show_net_up = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 route_method = 3
Mon Mar 26 17:36:24 2018 us=851200 block_outside_dns = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 ip_win32_defined = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 ip_win32_type = 3
Mon Mar 26 17:36:24 2018 us=851200 dhcp_masq_offset = 0
Mon Mar 26 17:36:24 2018 us=851200 dhcp_lease_time = 31536000
Mon Mar 26 17:36:24 2018 us=851200 tap_sleep = 0
Mon Mar 26 17:36:24 2018 us=851200 dhcp_options = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 dhcp_renew = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 dhcp_pre_release = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 domain = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 netbios_scope = '[UNDEF]'
Mon Mar 26 17:36:24 2018 us=851200 netbios_node_type = 0
Mon Mar 26 17:36:24 2018 us=851200 disable_nbt = DISABLED
Mon Mar 26 17:36:24 2018 us=851200 OpenVPN 2.4.5 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 1 2018
Mon Mar 26 17:36:24 2018 us=851200 Windows version 6.1 (Windows 7) 64bit
Mon Mar 26 17:36:24 2018 us=851200 library versions: OpenSSL 1.1.0f 25 May 2017, LZO 2.10
Enter Management Password:
Mon Mar 26 17:36:24 2018 us=859200 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Mon Mar 26 17:36:24 2018 us=859200 Need hold release from management interface, waiting...
Mon Mar 26 17:36:25 2018 us=294200 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Mon Mar 26 17:36:25 2018 us=395200 MANAGEMENT: CMD 'state on'
Mon Mar 26 17:36:25 2018 us=396200 MANAGEMENT: CMD 'log all on'
Mon Mar 26 17:36:25 2018 us=488200 MANAGEMENT: CMD 'echo all on'
Mon Mar 26 17:36:25 2018 us=489200 MANAGEMENT: CMD 'bytecount 5'
Mon Mar 26 17:36:25 2018 us=490200 MANAGEMENT: CMD 'hold off'
Mon Mar 26 17:36:25 2018 us=491200 MANAGEMENT: CMD 'hold release'
Mon Mar 26 17:36:25 2018 us=527200 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 26 17:36:25 2018 us=527200 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Mar 26 17:36:25 2018 us=527200 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Mon Mar 26 17:36:25 2018 us=528200 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Mon Mar 26 17:36:25 2018 us=528200 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Mon Mar 26 17:36:25 2018 us=528200 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Mon Mar 26 17:36:25 2018 us=528200 TCP/UDP: Preserving recently used remote address: [AF_INET]XXX.XXX.XXX.XXX:xxx
Mon Mar 26 17:36:25 2018 us=528200 Socket Buffers: R=[8192->8192] S=[64512->64512]
Mon Mar 26 17:36:25 2018 us=528200 UDP link local: (not bound)
Mon Mar 26 17:36:25 2018 us=528200 UDP link remote: [AF_INET]XXX.XXX.XXX.XXX:xxx
Mon Mar 26 17:36:25 2018 us=529200 MANAGEMENT: >STATE:1522078585,WAIT,,,,,,
Mon Mar 26 17:37:26 2018 us=57200 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 26 17:37:26 2018 us=57200 TLS Error: TLS handshake failed
Mon Mar 26 17:37:26 2018 us=58200 TCP/UDP: Closing socket
Mon Mar 26 17:37:26 2018 us=65200 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 26 17:37:26 2018 us=65200 MANAGEMENT: >STATE:1522078646,RECONNECTING,tls-error,,,,,
Mon Mar 26 17:37:26 2018 us=65200 Restart pause, 5 second(s)
Mon Mar 26 17:37:31 2018 us=65200 Re-using SSL/TLS context
Mon Mar 26 17:37:31 2018 us=66200 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Mon Mar 26 17:37:31 2018 us=66200 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Mon Mar 26 17:37:31 2018 us=66200 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Mon Mar 26 17:37:31 2018 us=66200 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Mon Mar 26 17:37:31 2018 us=66200 TCP/UDP: Preserving recently used remote address: [AF_INET]XXX.XXX.XXX.XXX:xxx
Mon Mar 26 17:37:31 2018 us=66200 Socket Buffers: R=[8192->8192] S=[64512->64512]
Mon Mar 26 17:37:31 2018 us=66200 UDP link local: (not bound)
Mon Mar 26 17:37:31 2018 us=67200 UDP link remote: [AF_INET]XXX.XXX.XXX.XXX:xxx
Mon Mar 26 17:37:31 2018 us=67200 MANAGEMENT: >STATE:1522078651,WAIT,,,,,,
Mon Mar 26 17:38:31 2018 us=971200 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon Mar 26 17:38:31 2018 us=971200 TLS Error: TLS handshake failed
Mon Mar 26 17:38:31 2018 us=972200 TCP/UDP: Closing socket
Mon Mar 26 17:38:31 2018 us=972200 SIGUSR1[soft,tls-error] received, process restarting
Mon Mar 26 17:38:31 2018 us=972200 MANAGEMENT: >STATE:1522078711,RECONNECTING,tls-error,,,,,
Mon Mar 26 17:38:31 2018 us=972200 Restart pause, 5 second(s)
Mon Mar 26 17:38:36 2018 us=972200 Re-using SSL/TLS context
Mon Mar 26 17:38:36 2018 us=972200 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Mon Mar 26 17:38:36 2018 us=972200 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Mon Mar 26 17:38:36 2018 us=972200 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Mon Mar 26 17:38:36 2018 us=972200 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Mon Mar 26 17:38:36 2018 us=972200 TCP/UDP: Preserving recently used remote address: [AF_INET]XXX.XXX.XXX.XXX:xxx
Mon Mar 26 17:38:36 2018 us=972200 Socket Buffers: R=[8192->8192] S=[64512->64512]
Mon Mar 26 17:38:36 2018 us=973200 UDP link local: (not bound)
Mon Mar 26 17:38:36 2018 us=973200 UDP link remote: [AF_INET]XXX.XXX.XXX.XXX:xxx
Mon Mar 26 17:38:36 2018 us=973200 MANAGEMENT: >STATE:1522078716,WAIT,,,,,,
Mon Mar 26 17:39:04 2018 us=20200 TCP/UDP: Closing socket
Mon Mar 26 17:39:04 2018 us=21200 SIGTERM[hard,] received, process exiting
Mon Mar 26 17:39:04 2018 us=21200 MANAGEMENT: >STATE:1522078744,EXITING,SIGTERM,,,,,
TCP configurations and logs follow in the next post.
