Openvpn 2.4.6 on Ubuntu Bionic 18.04

Sunmeplz

Hi,
I'm wondered that there is no package for the latest version of openvpn for latest LTS version of ubuntu(only 2.4.4 is available).
The problem is the server has version 2.4.6 and when I'm trying to use 2.4.4 the DNS resolve feature didn't work and this is critical for me.

I tried to build from source but got error while running ./configure: configure:4129: error: C compiler cannot create executables

Can you please advice to build the latest version?

This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.

It was created by OpenVPN configure 2.4.6, which was
generated by GNU Autoconf 2.69.  Invocation command line was

  $ ./configure 

## --------- ##
## Platform. ##
## --------- ##

hostname = clevo
uname -m = x86_64
uname -r = 4.15.0-20-generic
uname -s = Linux
uname -v = #21-Ubuntu SMP Tue Apr 24 06:16:15 UTC 2018

/usr/bin/uname -p = unknown
/bin/uname -X     = unknown

/bin/arch              = unknown
/usr/bin/arch -k       = unknown
/usr/convex/getsysinfo = unknown
/usr/bin/hostinfo      = unknown
/bin/machine           = unknown
/usr/bin/oslevel       = unknown
/bin/universe          = unknown

PATH: /usr/local/sbin
PATH: /usr/local/bin
PATH: /usr/sbin
PATH: /usr/bin
PATH: /sbin
PATH: /bin
PATH: /usr/games
PATH: /usr/local/games


## ----------- ##
## Core tests. ##
## ----------- ##

configure:3018: checking for a BSD-compatible install
configure:3086: result: /usr/bin/install -c
configure:3097: checking whether build environment is sane
configure:3152: result: yes
configure:3303: checking for a thread-safe mkdir -p
configure:3342: result: /bin/mkdir -p
configure:3349: checking for gawk
configure:3365: found /usr/bin/gawk
configure:3376: result: gawk
configure:3387: checking whether make sets $(MAKE)
configure:3409: result: yes
configure:3438: checking whether make supports nested variables
configure:3455: result: yes
configure:3584: checking build system type
configure:3598: result: x86_64-pc-linux-gnu
configure:3618: checking host system type
configure:3631: result: x86_64-pc-linux-gnu
configure:3663: checking for style of include used by make
configure:3691: result: GNU
configure:3762: checking for gcc
configure:3778: found /usr/bin/gcc
configure:3789: result: gcc
configure:4018: checking for C compiler version
configure:4027: gcc --version >&5
gcc (Ubuntu 7.3.0-16ubuntu3) 7.3.0
Copyright (C) 2017 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

configure:4038: $? = 0
configure:4027: gcc -v >&5
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/7/lto-wrapper
OFFLOAD_TARGET_NAMES=nvptx-none
OFFLOAD_TARGET_DEFAULT=1
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Ubuntu 7.3.0-16ubuntu3' --with-bugurl=file:///usr/share/doc/gcc-7/README.Bugs --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++ --prefix=/usr --with-gcc-major-version-only --with-as=/usr/bin/x86_64-linux-gnu-as --with-ld=/usr/bin/x86_64-linux-gnu-ld --program-suffix=-7 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --with-sysroot=/ --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-gnu-unique-object --disable-vtable-verify --enable-libmpx --enable-plugin --enable-default-pie --with-system-zlib --with-target-system-zlib --enable-objc-gc=auto --enable-multiarch --disable-werror --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu
Thread model: posix
gcc version 7.3.0 (Ubuntu 7.3.0-16ubuntu3) 
configure:4038: $? = 0
configure:4027: gcc -V >&5
gcc: error: unrecognized command line option '-V'
gcc: fatal error: no input files
compilation terminated.
configure:4038: $? = 1
configure:4027: gcc -qversion >&5
gcc: error: unrecognized command line option '-qversion'; did you mean '--version'?
gcc: fatal error: no input files
compilation terminated.
configure:4038: $? = 1
configure:4058: checking whether the C compiler works
configure:4080: gcc    conftest.c  >&5
/usr/bin/x86_64-linux-gnu-ld: cannot find Scrt1.o: No such file or directory
/usr/bin/x86_64-linux-gnu-ld: cannot find crti.o: No such file or directory
collect2: error: ld returned 1 exit status
configure:4084: $? = 1
configure:4122: result: no
configure: failed program was:
| /* confdefs.h */
| #define PACKAGE_NAME "OpenVPN"
| #define PACKAGE_TARNAME "openvpn"
| #define PACKAGE_VERSION "2.4.6"
| #define PACKAGE_STRING "OpenVPN 2.4.6"
| #define PACKAGE_BUGREPORT "openvpn-users@lists.sourceforge.net"
| #define PACKAGE_URL ""
| #define OPENVPN_VERSION_RESOURCE 2,4,6,0
| #define OPENVPN_VERSION_MAJOR 2
| #define OPENVPN_VERSION_MINOR 4
| #define OPENVPN_VERSION_PATCH ".6"
| #define PACKAGE "openvpn"
| #define VERSION "2.4.6"
| /* end confdefs.h.  */
| 
| int
| main ()
| {
| 
|   ;
|   return 0;
| }
configure:4127: error: in `/home/sun/apps/openvpn-2.4.6':
configure:4129: error: C compiler cannot create executables
See `config.log' for more details

## ---------------- ##
## Cache variables. ##
## ---------------- ##

ac_cv_build=x86_64-pc-linux-gnu
ac_cv_env_CC_set=
ac_cv_env_CC_value=
ac_cv_env_CFLAGS_set=
ac_cv_env_CFLAGS_value=
ac_cv_env_CPPFLAGS_set=
ac_cv_env_CPPFLAGS_value=
ac_cv_env_CPP_set=
ac_cv_env_CPP_value=
ac_cv_env_GIT_set=
ac_cv_env_GIT_value=
ac_cv_env_IFCONFIG_set=
ac_cv_env_IFCONFIG_value=
ac_cv_env_IPROUTE_set=
ac_cv_env_IPROUTE_value=
ac_cv_env_LDFLAGS_set=
ac_cv_env_LDFLAGS_value=
ac_cv_env_LIBPAM_CFLAGS_set=
ac_cv_env_LIBPAM_CFLAGS_value=
ac_cv_env_LIBPAM_LIBS_set=
ac_cv_env_LIBPAM_LIBS_value=
ac_cv_env_LIBS_set=
ac_cv_env_LIBS_value=
ac_cv_env_LT_SYS_LIBRARY_PATH_set=
ac_cv_env_LT_SYS_LIBRARY_PATH_value=
ac_cv_env_LZ4_CFLAGS_set=
ac_cv_env_LZ4_CFLAGS_value=
ac_cv_env_LZ4_LIBS_set=
ac_cv_env_LZ4_LIBS_value=
ac_cv_env_LZO_CFLAGS_set=
ac_cv_env_LZO_CFLAGS_value=
ac_cv_env_LZO_LIBS_set=
ac_cv_env_LZO_LIBS_value=
ac_cv_env_MAN2HTML_set=
ac_cv_env_MAN2HTML_value=
ac_cv_env_MBEDTLS_CFLAGS_set=
ac_cv_env_MBEDTLS_CFLAGS_value=
ac_cv_env_MBEDTLS_LIBS_set=
ac_cv_env_MBEDTLS_LIBS_value=
ac_cv_env_NETSTAT_set=
ac_cv_env_NETSTAT_value=
ac_cv_env_OPENSSL_CFLAGS_set=
ac_cv_env_OPENSSL_CFLAGS_value=
ac_cv_env_OPENSSL_LIBS_set=
ac_cv_env_OPENSSL_LIBS_value=
ac_cv_env_P11KIT_CFLAGS_set=
ac_cv_env_P11KIT_CFLAGS_value=
ac_cv_env_P11KIT_LIBS_set=
ac_cv_env_P11KIT_LIBS_value=
ac_cv_env_PKCS11_HELPER_CFLAGS_set=
ac_cv_env_PKCS11_HELPER_CFLAGS_value=
ac_cv_env_PKCS11_HELPER_LIBS_set=
ac_cv_env_PKCS11_HELPER_LIBS_value=
ac_cv_env_PKG_CONFIG_LIBDIR_set=
ac_cv_env_PKG_CONFIG_LIBDIR_value=
ac_cv_env_PKG_CONFIG_PATH_set=
ac_cv_env_PKG_CONFIG_PATH_value=
ac_cv_env_PKG_CONFIG_set=
ac_cv_env_PKG_CONFIG_value=
ac_cv_env_PLUGINDIR_set=
ac_cv_env_PLUGINDIR_value=
ac_cv_env_ROUTE_set=
ac_cv_env_ROUTE_value=
ac_cv_env_SYSTEMD_ASK_PASSWORD_set=
ac_cv_env_SYSTEMD_ASK_PASSWORD_value=
ac_cv_env_SYSTEMD_UNIT_DIR_set=
ac_cv_env_SYSTEMD_UNIT_DIR_value=
ac_cv_env_TAP_CFLAGS_set=
ac_cv_env_TAP_CFLAGS_value=
ac_cv_env_TMPFILES_DIR_set=
ac_cv_env_TMPFILES_DIR_value=
ac_cv_env_build_alias_set=
ac_cv_env_build_alias_value=
ac_cv_env_host_alias_set=
ac_cv_env_host_alias_value=
ac_cv_env_libsystemd_CFLAGS_set=
ac_cv_env_libsystemd_CFLAGS_value=
ac_cv_env_libsystemd_LIBS_set=
ac_cv_env_libsystemd_LIBS_value=
ac_cv_env_target_alias_set=
ac_cv_env_target_alias_value=
ac_cv_host=x86_64-pc-linux-gnu
ac_cv_path_install='/usr/bin/install -c'
ac_cv_path_mkdir=/bin/mkdir
ac_cv_prog_AWK=gawk
ac_cv_prog_ac_ct_CC=gcc
ac_cv_prog_make_make_set=yes
am_cv_make_support_nested_variables=yes

## ----------------- ##
## Output variables. ##
## ----------------- ##

ACLOCAL='${SHELL} /home/sun/apps/openvpn-2.4.6/missing aclocal-1.15'
AMDEPBACKSLASH='\'
AMDEP_FALSE='#'
AMDEP_TRUE=''
AMTAR='$${TAR-tar}'
AM_BACKSLASH='\'
AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
AM_DEFAULT_VERBOSITY='1'
AM_V='$(V)'
AR=''
AS=''
AUTOCONF='${SHELL} /home/sun/apps/openvpn-2.4.6/missing autoconf'
AUTOHEADER='${SHELL} /home/sun/apps/openvpn-2.4.6/missing autoheader'
AUTOMAKE='${SHELL} /home/sun/apps/openvpn-2.4.6/missing automake-1.15'
AWK='gawk'
CC='gcc'
CCDEPMODE=''
CFLAGS=''
CMAKE=''
CMOCKA_INITIALIZED_FALSE=''
CMOCKA_INITIALIZED_TRUE=''
CPP=''
CPPFLAGS=''
CYGPATH_W='echo'
DEFS=''
DEPDIR='.deps'
DLLTOOL=''
DL_LIBS=''
DSYMUTIL=''
DUMPBIN=''
ECHO_C=''
ECHO_N='-n'
ECHO_T=''
EGREP=''
ENABLE_CRYPTO_FALSE=''
ENABLE_CRYPTO_TRUE=''
ENABLE_PLUGIN_AUTH_PAM_FALSE=''
ENABLE_PLUGIN_AUTH_PAM_TRUE=''
ENABLE_PLUGIN_DOWN_ROOT_FALSE=''
ENABLE_PLUGIN_DOWN_ROOT_TRUE=''
ENABLE_SYSTEMD_FALSE=''
ENABLE_SYSTEMD_TRUE=''
EXEEXT=''
FGREP=''
GIT=''
GIT_CHECKOUT_FALSE=''
GIT_CHECKOUT_TRUE=''
GREP=''
HAVE_LD_WRAP_SUPPORT_FALSE=''
HAVE_LD_WRAP_SUPPORT_TRUE=''
IFCONFIG=''
INSTALL_DATA='${INSTALL} -m 644'
INSTALL_PROGRAM='${INSTALL}'
INSTALL_SCRIPT='${INSTALL}'
INSTALL_STRIP_PROGRAM='$(install_sh) -c -s'
IPROUTE=''
LD=''
LDFLAGS=''
LIBOBJS=''
LIBPAM_CFLAGS=''
LIBPAM_LIBS=''
LIBS=''
LIBTOOL=''
LIPO=''
LN_S=''
LTLIBOBJS=''
LT_SYS_LIBRARY_PATH=''
LZ4_CFLAGS=''
LZ4_LIBS=''
LZO_CFLAGS=''
LZO_LIBS=''
MAKEINFO='${SHELL} /home/sun/apps/openvpn-2.4.6/missing makeinfo'
MAN2HTML=''
MANIFEST_TOOL=''
MBEDTLS_CFLAGS=''
MBEDTLS_LIBS=''
MKDIR_P='/bin/mkdir -p'
NETSTAT=''
NM=''
NMEDIT=''
OBJDUMP=''
OBJEXT=''
OPENSSL_CFLAGS=''
OPENSSL_LIBS=''
OPENVPN_VERSION_MAJOR='2'
OPENVPN_VERSION_MINOR='4'
OPENVPN_VERSION_PATCH='.6'
OPTIONAL_CRYPTO_CFLAGS=''
OPTIONAL_CRYPTO_LIBS=''
OPTIONAL_DL_LIBS=''
OPTIONAL_LZ4_CFLAGS=''
OPTIONAL_LZ4_LIBS=''
OPTIONAL_LZO_CFLAGS=''
OPTIONAL_LZO_LIBS=''
OPTIONAL_PKCS11_HELPER_CFLAGS=''
OPTIONAL_PKCS11_HELPER_LIBS=''
OPTIONAL_SELINUX_LIBS=''
OPTIONAL_SYSTEMD_LIBS=''
OTOOL64=''
OTOOL=''
P11KIT_CFLAGS=''
P11KIT_LIBS=''
PACKAGE='openvpn'
PACKAGE_BUGREPORT='openvpn-users@lists.sourceforge.net'
PACKAGE_NAME='OpenVPN'
PACKAGE_STRING='OpenVPN 2.4.6'
PACKAGE_TARNAME='openvpn'
PACKAGE_URL=''
PACKAGE_VERSION='2.4.6'
PATH_SEPARATOR=':'
PKCS11_HELPER_CFLAGS=''
PKCS11_HELPER_LIBS=''
PKG_CONFIG=''
PKG_CONFIG_LIBDIR=''
PKG_CONFIG_PATH=''
PLUGINDIR=''
PLUGIN_AUTH_PAM_CFLAGS=''
PLUGIN_AUTH_PAM_LIBS=''
RANLIB=''
RC=''
ROUTE=''
SED=''
SELINUX_LIBS=''
SET_MAKE=''
SHELL='/bin/bash'
SOCKETS_LIBS=''
STRIP=''
SYSTEMD_ASK_PASSWORD=''
SYSTEMD_UNIT_DIR=''
TAP_CFLAGS=''
TAP_WIN_COMPONENT_ID=''
TAP_WIN_MIN_MAJOR=''
TAP_WIN_MIN_MINOR=''
TEST_CFLAGS=''
TEST_LDFLAGS=''
TMPFILES_DIR=''
VENDOR_BUILD_ROOT=''
VENDOR_DIST_ROOT=''
VENDOR_SRC_ROOT=''
VERSION='2.4.6'
WIN32_FALSE=''
WIN32_TRUE=''
ac_ct_AR=''
ac_ct_CC='gcc'
ac_ct_DUMPBIN=''
am__EXEEXT_FALSE=''
am__EXEEXT_TRUE=''
am__fastdepCC_FALSE=''
am__fastdepCC_TRUE=''
am__include='include'
am__isrc=''
am__leading_dot='.'
am__nodep='_no'
am__quote=''
am__tar='$${TAR-tar} chof - "$$tardir"'
am__untar='$${TAR-tar} xf -'
bindir='${exec_prefix}/bin'
build='x86_64-pc-linux-gnu'
build_alias=''
build_cpu='x86_64'
build_os='linux-gnu'
build_vendor='pc'
datadir='${datarootdir}'
datarootdir='${prefix}/share'
docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
dvidir='${docdir}'
exec_prefix='NONE'
host='x86_64-pc-linux-gnu'
host_alias=''
host_cpu='x86_64'
host_os='linux-gnu'
host_vendor='pc'
htmldir='${docdir}'
includedir='${prefix}/include'
infodir='${datarootdir}/info'
install_sh='${SHELL} /home/sun/apps/openvpn-2.4.6/install-sh'
libdir='${exec_prefix}/lib'
libexecdir='${exec_prefix}/libexec'
libsystemd_CFLAGS=''
libsystemd_LIBS=''
localedir='${datarootdir}/locale'
localstatedir='${prefix}/var'
mandir='${datarootdir}/man'
mkdir_p='$(MKDIR_P)'
oldincludedir='/usr/include'
pdfdir='${docdir}'
plugindir=''
prefix='NONE'
program_transform_name='s,x,x,'
psdir='${docdir}'
runstatedir='${localstatedir}/run'
sampledir=''
sbindir='${exec_prefix}/sbin'
sharedstatedir='${prefix}/com'
sysconfdir='${prefix}/etc'
systemdunitdir=''
target_alias=''
tmpfilesdir=''

## ----------- ##
## confdefs.h. ##
## ----------- ##

/* confdefs.h */
#define PACKAGE_NAME "OpenVPN"
#define PACKAGE_TARNAME "openvpn"
#define PACKAGE_VERSION "2.4.6"
#define PACKAGE_STRING "OpenVPN 2.4.6"
#define PACKAGE_BUGREPORT "openvpn-users@lists.sourceforge.net"
#define PACKAGE_URL ""
#define OPENVPN_VERSION_RESOURCE 2,4,6,0
#define OPENVPN_VERSION_MAJOR 2
#define OPENVPN_VERSION_MINOR 4
#define OPENVPN_VERSION_PATCH ".6"
#define PACKAGE "openvpn"
#define VERSION "2.4.6"

configure: exit 77

TinCanTech

See https://openvpn.net/index.php/open-source/downloads.html

Sunmeplz

TinCanTech wrote See https://openvpn.net/index.php/open-source/downloads.html

Hi, what should I find there? I have already seen this post, just simple instuctions ./config && make
There is also no prebuild packages for bionic.

TinCanTech

Oops .. there is no repo for 18.04 yet.

TinCanTech

Sunmeplz wrote The problem is the server has version 2.4.6 and when I'm trying to use 2.4.4 the DNS resolve feature didn't work

Please see:
HOWTO: Request Help ! {2}

Sunmeplz

TinCanTech wrote
Sunmeplz wrote The problem is the server has version 2.4.6 and when I'm trying to use 2.4.4 the DNS resolve feature didn't work
Please see:
HOWTO: Request Help ! {2}

uname -a
Linux clevo 4.15.0-20-generic #21-Ubuntu SMP Tue Apr 24 06:16:15 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

cat  /etc/os-release
NAME="Linux Mint"
VERSION="19 (Tara)"
ID=linuxmint
ID_LIKE=ubuntu
PRETTY_NAME="Linux Mint 19"
VERSION_ID="19"
HOME_URL="https://www.linuxmint.com/"
SUPPORT_URL="https://forums.ubuntu.com/"
BUG_REPORT_URL="http://linuxmint-troubleshooting-guide.readthedocs.io/en/latest/"
PRIVACY_POLICY_URL="https://www.linuxmint.com/"
VERSION_CODENAME=tara
UBUNTU_CODENAME=bionic

Openvpn 2.4.4 from repo works fine, except DNS issue
On another PC openvpn 2.4.6 works fine with same config

client
nobind
dev tun
remote-cert-tls server

remote myhost 443 tcp

<key>
-----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</cert>
<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</ca>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-auth>

redirect-gateway def1

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

TinCanTech

Your log at --verb 4

Also, do not use Network-Manager for testing.

Start in a terminal window with:

me@home /etc/openvpn $ sudo openvpn --config /path/to/my-config.conf

Sunmeplz

TinCanTech wrote Also, do not use Network-Manager for testing.

Network manager don't pass this configuration for a reason

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

which needs to pass this option from server

push "dhcp-option DNS 10.8.0.2"
push "dhcp-option DNS 10.8.0.2"

the log below


Thu Sep 13 16:29:44 2018 us=363102 Current Parameter Settings:
Thu Sep 13 16:29:44 2018 us=363121   config = '/home/sun/Documents/evgeny-notebook.ovpn'
Thu Sep 13 16:29:44 2018 us=363126   mode = 0
Thu Sep 13 16:29:44 2018 us=363129   persist_config = DISABLED
Thu Sep 13 16:29:44 2018 us=363133   persist_mode = 1
Thu Sep 13 16:29:44 2018 us=363135   show_ciphers = DISABLED
Thu Sep 13 16:29:44 2018 us=363138   show_digests = DISABLED
Thu Sep 13 16:29:44 2018 us=363142   show_engines = DISABLED
Thu Sep 13 16:29:44 2018 us=363146   genkey = DISABLED
Thu Sep 13 16:29:44 2018 us=363149   key_pass_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363152   show_tls_ciphers = DISABLED
Thu Sep 13 16:29:44 2018 us=363156   connect_retry_max = 0
Thu Sep 13 16:29:44 2018 us=363159 Connection profiles [0]:
Thu Sep 13 16:29:44 2018 us=363162   proto = tcp-client
Thu Sep 13 16:29:44 2018 us=363166   local = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363169   local_port = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363172   remote = 'myhost_dns_name'
Thu Sep 13 16:29:44 2018 us=363175   remote_port = '443'
Thu Sep 13 16:29:44 2018 us=363178   remote_float = DISABLED
Thu Sep 13 16:29:44 2018 us=363181   bind_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=363185   bind_local = DISABLED
Thu Sep 13 16:29:44 2018 us=363188   bind_ipv6_only = DISABLED
Thu Sep 13 16:29:44 2018 us=363192   connect_retry_seconds = 5
Thu Sep 13 16:29:44 2018 us=363195   connect_timeout = 120
Thu Sep 13 16:29:44 2018 us=363198   socks_proxy_server = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363202   socks_proxy_port = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363205   tun_mtu = 1500
Thu Sep 13 16:29:44 2018 us=363209   tun_mtu_defined = ENABLED
Thu Sep 13 16:29:44 2018 us=363212   link_mtu = 1500
Thu Sep 13 16:29:44 2018 us=363215   link_mtu_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=363219   tun_mtu_extra = 0
Thu Sep 13 16:29:44 2018 us=363222   tun_mtu_extra_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=363225   mtu_discover_type = -1
Thu Sep 13 16:29:44 2018 us=363228   fragment = 0
Thu Sep 13 16:29:44 2018 us=363232   mssfix = 1450
Thu Sep 13 16:29:44 2018 us=363235   explicit_exit_notification = 0
Thu Sep 13 16:29:44 2018 us=363239 Connection profiles END
Thu Sep 13 16:29:44 2018 us=363242   remote_random = DISABLED
Thu Sep 13 16:29:44 2018 us=363245   ipchange = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363248   dev = 'tun'
Thu Sep 13 16:29:44 2018 us=363252   dev_type = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363255   dev_node = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363258   lladdr = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363262   topology = 1
Thu Sep 13 16:29:44 2018 us=363265   ifconfig_local = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363269   ifconfig_remote_netmask = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363273   ifconfig_noexec = DISABLED
Thu Sep 13 16:29:44 2018 us=363277   ifconfig_nowarn = DISABLED
Thu Sep 13 16:29:44 2018 us=363280   ifconfig_ipv6_local = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363284   ifconfig_ipv6_netbits = 0
Thu Sep 13 16:29:44 2018 us=363288   ifconfig_ipv6_remote = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363292   shaper = 0
Thu Sep 13 16:29:44 2018 us=363295   mtu_test = 0
Thu Sep 13 16:29:44 2018 us=363299   mlock = DISABLED
Thu Sep 13 16:29:44 2018 us=363302   keepalive_ping = 0
Thu Sep 13 16:29:44 2018 us=363305   keepalive_timeout = 0
Thu Sep 13 16:29:44 2018 us=363309   inactivity_timeout = 0
Thu Sep 13 16:29:44 2018 us=363313   ping_send_timeout = 0
Thu Sep 13 16:29:44 2018 us=363316   ping_rec_timeout = 0
Thu Sep 13 16:29:44 2018 us=363320   ping_rec_timeout_action = 0
Thu Sep 13 16:29:44 2018 us=363323   ping_timer_remote = DISABLED
Thu Sep 13 16:29:44 2018 us=363326   remap_sigusr1 = 0
Thu Sep 13 16:29:44 2018 us=363330   persist_tun = DISABLED
Thu Sep 13 16:29:44 2018 us=363333   persist_local_ip = DISABLED
Thu Sep 13 16:29:44 2018 us=363337   persist_remote_ip = DISABLED
Thu Sep 13 16:29:44 2018 us=363340   persist_key = DISABLED
Thu Sep 13 16:29:44 2018 us=363343   passtos = DISABLED
Thu Sep 13 16:29:44 2018 us=363347   resolve_retry_seconds = 1000000000
Thu Sep 13 16:29:44 2018 us=363350   resolve_in_advance = DISABLED
Thu Sep 13 16:29:44 2018 us=363354   username = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363357   groupname = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363360   chroot_dir = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363364   cd_dir = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363368   writepid = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363371   up_script = '/etc/openvpn/update-resolv-conf'
Thu Sep 13 16:29:44 2018 us=363374   down_script = '/etc/openvpn/update-resolv-conf'
Thu Sep 13 16:29:44 2018 us=363378   down_pre = DISABLED
Thu Sep 13 16:29:44 2018 us=363381   up_restart = DISABLED
Thu Sep 13 16:29:44 2018 us=363384   up_delay = DISABLED
Thu Sep 13 16:29:44 2018 us=363388   daemon = DISABLED
Thu Sep 13 16:29:44 2018 us=363391   inetd = 0
Thu Sep 13 16:29:44 2018 us=363394   log = DISABLED
Thu Sep 13 16:29:44 2018 us=363398   suppress_timestamps = DISABLED
Thu Sep 13 16:29:44 2018 us=363401   machine_readable_output = DISABLED
Thu Sep 13 16:29:44 2018 us=363405   nice = 0
Thu Sep 13 16:29:44 2018 us=363408   verbosity = 4
Thu Sep 13 16:29:44 2018 us=363411   mute = 0
Thu Sep 13 16:29:44 2018 us=363414   gremlin = 0
Thu Sep 13 16:29:44 2018 us=363418   status_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363422   status_file_version = 1
Thu Sep 13 16:29:44 2018 us=363425   status_file_update_freq = 60
Thu Sep 13 16:29:44 2018 us=363429   occ = ENABLED
Thu Sep 13 16:29:44 2018 us=363433   rcvbuf = 0
Thu Sep 13 16:29:44 2018 us=363436   sndbuf = 0
Thu Sep 13 16:29:44 2018 us=363440   mark = 0
Thu Sep 13 16:29:44 2018 us=363443   sockflags = 0
Thu Sep 13 16:29:44 2018 us=363447   fast_io = DISABLED
Thu Sep 13 16:29:44 2018 us=363450   comp.alg = 0
Thu Sep 13 16:29:44 2018 us=363454   comp.flags = 0
Thu Sep 13 16:29:44 2018 us=363457   route_script = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363460   route_default_gateway = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363464   route_default_metric = 0
Thu Sep 13 16:29:44 2018 us=363468   route_noexec = DISABLED
Thu Sep 13 16:29:44 2018 us=363471   route_delay = 0
Thu Sep 13 16:29:44 2018 us=363475   route_delay_window = 30
Thu Sep 13 16:29:44 2018 us=363478   route_delay_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=363482   route_nopull = DISABLED
Thu Sep 13 16:29:44 2018 us=363485   route_gateway_via_dhcp = DISABLED
Thu Sep 13 16:29:44 2018 us=363488   allow_pull_fqdn = DISABLED
Thu Sep 13 16:29:44 2018 us=363492   [redirect_default_gateway local=0]
Thu Sep 13 16:29:44 2018 us=363496   management_addr = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363500   management_port = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363503   management_user_pass = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363507   management_log_history_cache = 250
Thu Sep 13 16:29:44 2018 us=363511   management_echo_buffer_size = 100
Thu Sep 13 16:29:44 2018 us=363514   management_write_peer_info_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363518   management_client_user = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363521   management_client_group = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363524   management_flags = 0
Thu Sep 13 16:29:44 2018 us=363528   shared_secret_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363531   key_direction = 2
Thu Sep 13 16:29:44 2018 us=363535   ciphername = 'BF-CBC'
Thu Sep 13 16:29:44 2018 us=363538   ncp_enabled = ENABLED
Thu Sep 13 16:29:44 2018 us=363542   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Thu Sep 13 16:29:44 2018 us=363545   authname = 'SHA1'
Thu Sep 13 16:29:44 2018 us=363549   prng_hash = 'SHA1'
Thu Sep 13 16:29:44 2018 us=363552   prng_nonce_secret_len = 16
Thu Sep 13 16:29:44 2018 us=363556   keysize = 0
Thu Sep 13 16:29:44 2018 us=363559   engine = DISABLED
Thu Sep 13 16:29:44 2018 us=363563   replay = ENABLED
Thu Sep 13 16:29:44 2018 us=363566   mute_replay_warnings = DISABLED
Thu Sep 13 16:29:44 2018 us=363570   replay_window = 64
Thu Sep 13 16:29:44 2018 us=363573   replay_time = 15
Thu Sep 13 16:29:44 2018 us=363577   packet_id_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363580   use_iv = ENABLED
Thu Sep 13 16:29:44 2018 us=363583   test_crypto = DISABLED
Thu Sep 13 16:29:44 2018 us=363587   tls_server = DISABLED
Thu Sep 13 16:29:44 2018 us=363591   tls_client = ENABLED
Thu Sep 13 16:29:44 2018 us=363594   key_method = 2
Thu Sep 13 16:29:44 2018 us=363598   ca_file = '[[INLINE]]'
Thu Sep 13 16:29:44 2018 us=363602   ca_path = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363605   dh_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363608   cert_file = '[[INLINE]]'
Thu Sep 13 16:29:44 2018 us=363612   extra_certs_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363616   priv_key_file = '[[INLINE]]'
Thu Sep 13 16:29:44 2018 us=363619   pkcs12_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363623   cipher_list = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363626   tls_verify = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363629   tls_export_cert = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363633   verify_x509_type = 0
Thu Sep 13 16:29:44 2018 us=363637   verify_x509_name = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363640   crl_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363644   ns_cert_type = 0
Thu Sep 13 16:29:44 2018 us=363648   remote_cert_ku[i] = 65535
Thu Sep 13 16:29:44 2018 us=363651   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363654   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363658   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363661   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363665   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363668   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363672   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363675   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363678   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363682   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363685   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363689   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363692   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363696   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363699   remote_cert_ku[i] = 0
Thu Sep 13 16:29:44 2018 us=363703   remote_cert_eku = 'TLS Web Server Authentication'
Thu Sep 13 16:29:44 2018 us=363706   ssl_flags = 0
Thu Sep 13 16:29:44 2018 us=363710   tls_timeout = 2
Thu Sep 13 16:29:44 2018 us=363714   renegotiate_bytes = -1
Thu Sep 13 16:29:44 2018 us=363717   renegotiate_packets = 0
Thu Sep 13 16:29:44 2018 us=363720   renegotiate_seconds = 3600
Thu Sep 13 16:29:44 2018 us=363724   handshake_window = 60
Thu Sep 13 16:29:44 2018 us=363727   transition_window = 3600
Thu Sep 13 16:29:44 2018 us=363731   single_session = DISABLED
Thu Sep 13 16:29:44 2018 us=363735   push_peer_info = DISABLED
Thu Sep 13 16:29:44 2018 us=363738   tls_exit = DISABLED
Thu Sep 13 16:29:44 2018 us=363742   tls_auth_file = '[[INLINE]]'
Thu Sep 13 16:29:44 2018 us=363745   tls_crypt_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363749   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363752   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363756   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363759   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363763   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363766   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363769   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363773   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363777   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363780   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363783   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363787   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363790   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363794   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363797   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363801   pkcs11_protected_authentication = DISABLED
Thu Sep 13 16:29:44 2018 us=363804   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363808   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363812   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363815   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363819   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363822   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363825   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363829   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363832   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363836   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363839   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363843   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363846   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363849   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363853   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363856   pkcs11_private_mode = 00000000
Thu Sep 13 16:29:44 2018 us=363859   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363863   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363866   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363869   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363872   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363876   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363879   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363883   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363886   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363890   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363893   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363897   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363900   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363903   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363906   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363910   pkcs11_cert_private = DISABLED
Thu Sep 13 16:29:44 2018 us=363914   pkcs11_pin_cache_period = -1
Thu Sep 13 16:29:44 2018 us=363917   pkcs11_id = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363920   pkcs11_id_management = DISABLED
Thu Sep 13 16:29:44 2018 us=363924   server_network = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363928   server_netmask = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363934   server_network_ipv6 = ::
Thu Sep 13 16:29:44 2018 us=363938   server_netbits_ipv6 = 0
Thu Sep 13 16:29:44 2018 us=363942   server_bridge_ip = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363945   server_bridge_netmask = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363949   server_bridge_pool_start = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363953   server_bridge_pool_end = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363957   ifconfig_pool_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=363960   ifconfig_pool_start = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363964   ifconfig_pool_end = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363968   ifconfig_pool_netmask = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=363972   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=363977   ifconfig_pool_persist_refresh_freq = 600
Thu Sep 13 16:29:44 2018 us=363980   ifconfig_ipv6_pool_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=363984   ifconfig_ipv6_pool_base = ::
Thu Sep 13 16:29:44 2018 us=363988   ifconfig_ipv6_pool_netbits = 0
Thu Sep 13 16:29:44 2018 us=363991   n_bcast_buf = 256
Thu Sep 13 16:29:44 2018 us=363995   tcp_queue_limit = 64
Thu Sep 13 16:29:44 2018 us=363998   real_hash_size = 256
Thu Sep 13 16:29:44 2018 us=364002   virtual_hash_size = 256
Thu Sep 13 16:29:44 2018 us=364005   client_connect_script = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364008   learn_address_script = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364012   client_disconnect_script = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364016   client_config_dir = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364019   ccd_exclusive = DISABLED
Thu Sep 13 16:29:44 2018 us=364023   tmp_dir = '/tmp'
Thu Sep 13 16:29:44 2018 us=364026   push_ifconfig_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=364030   push_ifconfig_local = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=364034   push_ifconfig_remote_netmask = 0.0.0.0
Thu Sep 13 16:29:44 2018 us=364037   push_ifconfig_ipv6_defined = DISABLED
Thu Sep 13 16:29:44 2018 us=364041   push_ifconfig_ipv6_local = ::/0
Thu Sep 13 16:29:44 2018 us=364045   push_ifconfig_ipv6_remote = ::
Thu Sep 13 16:29:44 2018 us=364048   enable_c2c = DISABLED
Thu Sep 13 16:29:44 2018 us=364051   duplicate_cn = DISABLED
Thu Sep 13 16:29:44 2018 us=364055   cf_max = 0
Thu Sep 13 16:29:44 2018 us=364058   cf_per = 0
Thu Sep 13 16:29:44 2018 us=364062   max_clients = 1024
Thu Sep 13 16:29:44 2018 us=364065   max_routes_per_client = 256
Thu Sep 13 16:29:44 2018 us=364068   auth_user_pass_verify_script = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364072   auth_user_pass_verify_script_via_file = DISABLED
Thu Sep 13 16:29:44 2018 us=364076   auth_token_generate = DISABLED
Thu Sep 13 16:29:44 2018 us=364079   auth_token_lifetime = 0
Thu Sep 13 16:29:44 2018 us=364083   port_share_host = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364086   port_share_port = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364090   client = ENABLED
Thu Sep 13 16:29:44 2018 us=364093   pull = ENABLED
Thu Sep 13 16:29:44 2018 us=364097   auth_user_pass_file = '[UNDEF]'
Thu Sep 13 16:29:44 2018 us=364101 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 10 2018
Thu Sep 13 16:29:44 2018 us=364107 library versions: OpenSSL 1.1.0g  2 Nov 2017, LZO 2.08
Thu Sep 13 16:29:44 2018 us=364145 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Sep 13 16:29:44 2018 us=364383 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 13 16:29:44 2018 us=364392 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Sep 13 16:29:44 2018 us=364427 Control Channel MTU parms [ L:1623 D:1182 EF:68 EB:0 ET:0 EL:3 ]
Thu Sep 13 16:29:44 2018 us=480684 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Thu Sep 13 16:29:44 2018 us=480785 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1543,tun-mtu 1500,proto TCPv4_CLIENT,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Thu Sep 13 16:29:44 2018 us=480806 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1543,tun-mtu 1500,proto TCPv4_SERVER,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Thu Sep 13 16:29:44 2018 us=480832 TCP/UDP: Preserving recently used remote address: [AF_INET]myhost:443
Thu Sep 13 16:29:44 2018 us=480872 Socket Buffers: R=[87380->87380] S=[16384->16384]
Thu Sep 13 16:29:44 2018 us=480888 Attempting to establish TCP connection with [AF_INET]myhost:443 [nonblock]
Thu Sep 13 16:29:45 2018 us=481362 TCP connection established with [AF_INET]myhost:443
Thu Sep 13 16:29:45 2018 us=481434 TCP_CLIENT link local: (not bound)
Thu Sep 13 16:29:45 2018 us=481455 TCP_CLIENT link remote: [AF_INET]myhost:443
Thu Sep 13 16:29:45 2018 us=626389 TLS: Initial packet from [AF_INET]myhost:443, sid=ab849b5e f0bd8586
Thu Sep 13 16:29:46 2018 us=96027 VERIFY OK: depth=1, CN=myhost_dns_name
Thu Sep 13 16:29:46 2018 us=96432 VERIFY KU OK
Thu Sep 13 16:29:46 2018 us=96472 Validating certificate extended key usage
Thu Sep 13 16:29:46 2018 us=96491 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Sep 13 16:29:46 2018 us=96508 VERIFY EKU OK
Thu Sep 13 16:29:46 2018 us=96527 VERIFY OK: depth=0, CN=myhost_dns_name
Thu Sep 13 16:29:46 2018 us=509291 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1543', remote='link-mtu 1544'
Thu Sep 13 16:29:46 2018 us=509446 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Thu Sep 13 16:29:46 2018 us=509615 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Sep 13 16:29:46 2018 us=509675 [myhost_dns_name] Peer Connection Initiated with [AF_INET]myhost:443
Thu Sep 13 16:29:47 2018 us=544211 SENT CONTROL [myhost_dns_name]: 'PUSH_REQUEST' (status=1)
Thu Sep 13 16:29:47 2018 us=851430 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.8.0.2,dhcp-option DNS 10.8.0.2,comp-lzo no,route 192.168.255.1,topology net30,ping 10,ping-restart 60,ifconfig 192.168.255.14 192.168.255.13,peer-id 0,cipher AES-256-GCM'
Thu Sep 13 16:29:47 2018 us=851672 OPTIONS IMPORT: timers and/or timeouts modified
Thu Sep 13 16:29:47 2018 us=851705 OPTIONS IMPORT: compression parms modified
Thu Sep 13 16:29:47 2018 us=851736 OPTIONS IMPORT: --ifconfig/up options modified
Thu Sep 13 16:29:47 2018 us=851762 OPTIONS IMPORT: route options modified
Thu Sep 13 16:29:47 2018 us=851786 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Sep 13 16:29:47 2018 us=851811 OPTIONS IMPORT: peer-id set
Thu Sep 13 16:29:47 2018 us=851840 OPTIONS IMPORT: adjusting link_mtu to 1626
Thu Sep 13 16:29:47 2018 us=851866 OPTIONS IMPORT: data channel crypto options modified
Thu Sep 13 16:29:47 2018 us=851896 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Sep 13 16:29:47 2018 us=851945 Data Channel MTU parms [ L:1554 D:1450 EF:54 EB:406 ET:0 EL:3 ]
Thu Sep 13 16:29:47 2018 us=852185 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Sep 13 16:29:47 2018 us=852231 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Sep 13 16:29:47 2018 us=852537 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=wlo1 HWADDR=b4:6b:fc:15:2a:ac
Thu Sep 13 16:29:47 2018 us=853159 TUN/TAP device tun0 opened
Thu Sep 13 16:29:47 2018 us=853348 TUN/TAP TX queue length set to 100
Thu Sep 13 16:29:47 2018 us=853404 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Sep 13 16:29:47 2018 us=853454 /sbin/ip link set dev tun0 up mtu 1500
Thu Sep 13 16:29:47 2018 us=856624 /sbin/ip addr add dev tun0 local 192.168.255.14 peer 192.168.255.13
Thu Sep 13 16:29:47 2018 us=858952 /etc/openvpn/update-resolv-conf tun0 1500 1554 192.168.255.14 192.168.255.13 init
Thu Sep 13 16:29:47 2018 us=860332 /sbin/ip route add myhost/32 via 192.168.0.1
Thu Sep 13 16:29:47 2018 us=860909 /sbin/ip route add 0.0.0.0/1 via 192.168.255.13
Thu Sep 13 16:29:47 2018 us=861517 /sbin/ip route add 128.0.0.0/1 via 192.168.255.13
Thu Sep 13 16:29:47 2018 us=862128 /sbin/ip route add 192.168.255.1/32 via 192.168.255.13
Thu Sep 13 16:29:47 2018 us=862712 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Sep 13 16:29:47 2018 us=862729 Initialization Sequence Completed

I got this issue previously and it was solved by upgrading client to 2.4.6 version

TinCanTech

Your /etc/openvpn/update-resolv-conf is not picking up dhcp-option DNS 10.8.0.2

This is what I see:

Thu Sep 13 15:37:09 2018 us=69166 /etc/openvpn/update-resolv-conf tunc63110 1500 1552 10.63.110.226 10.63.110.225 init
dhcp-option DNS 8.8.8.8

I use push "dhcp-option DNS 8.8.8.8"

Sunmeplz

This configuration is necessary for using internal amazon private cloud dns.
As I said everything is fine on 2.4.6 version.
Is it possible to build it for bionic?
Have you plan to add bionic to distribution list?
Thanks for your time

TinCanTech

Sunmeplz wrote Is it possible to build it for bionic?

Yes, simply follow the instructions ...

Sunmeplz wrote Have you plan to add bionic to distribution list?

Yes but it is not a high priority. Don't wait for it ...

Sunmeplz

Thank you, I will write an update if I resolve this

TinCanTech

You could post the log of your working client ..

Sunmeplz

You was rigth, the issue was that resolveconf is replaced with systemd-resolve, so previous config didn't applied
The solution is to install resoulveconf as it works good with systemd-resolve.
resoulveconf relinks /etc/resolve.conf with itseft config and systemd-resolve create local stub dns "server" with already linked in /etc/resolve.conf

sudo apt install resolvconf

#check you dns here
cat /etc/resolv.conf

and you keep your existing configuration

Here useful post
https://blog.narrativ.com/openvpn-with-ubuntu-18-04-c9eed9ab9a1c

Thank you for you time, you turm me right way

sles

Hello!

Any plans to provide repository for 18.04 in near future?

Thank you!

rgaufman

Any news on a bionic repo? 😛

shenzhensuzy

I'm pretty sure you can build OpenVPN 2.4.6 on Ubuntu Bionic 18.04 like this:

cd ~/Downloads
wget http://swupdate.openvpn.org/community/releases/openvpn-2.4.6.tar.gz
tar xvf openvpn-2.4.6.tar.gz

sudo apt-get install build-essential libssl-dev iproute2 liblz4-dev liblzo2-dev libpam0g-dev libpkcs11-helper1-dev libsystemd-dev resolvconf pkg-config

./configure --enable-systemd --enable-async-push --enable-iproute2
make
sudo make install

trochdewei

You should avoid install software using make install. It's better download source https://packages.debian.org/source/unstable/openvpn and build it as decribed in https://wiki.debian.org/BuildingTutorial