Hi,
I used to have a pure OpenVPN setup at home (UDP ports) that worked well whenever I am In China.
On my recent trips, my OpenVPN setup wasn't working on one telecom provider, while it was working very well on another. Further research showed me that DPI may be implemented on that other telco and that's the reason why my OpenVPN setup can't get past the handshake on that particular telco.
That research led me to STunnel.. I have set it up at my home and it seems to work on my Mac laptop (at least, when I test the connectivity while still not in China). But when I use SSL Droid and OpenVPN Connect on android using practically the same setup configuration (except for the OpenVPN keys), I am stuck with an EOF error on OpenVPN
Error log on server:
Mon Dec 10 03:54:47 2018 TCP connection established with [AF_INET]127.0.0.1:42492
Mon Dec 10 03:54:48 2018 127.0.0.1:42492 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Mon Dec 10 03:54:48 2018 127.0.0.1:42492 Connection reset, restarting [0]
Mon Dec 10 03:54:48 2018 127.0.0.1:42492 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 04:05:46 2018 TCP connection established with [AF_INET]127.0.0.1:42494
Mon Dec 10 04:05:46 2018 127.0.0.1:42494 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Mon Dec 10 04:05:46 2018 127.0.0.1:42494 Connection reset, restarting [0]
Mon Dec 10 04:05:46 2018 127.0.0.1:42494 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 08:51:44 2018 TCP connection established with [AF_INET]127.0.0.1:42502
Mon Dec 10 08:51:44 2018 127.0.0.1:42502 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Mon Dec 10 08:51:44 2018 127.0.0.1:42502 Connection reset, restarting [0]
Mon Dec 10 08:51:44 2018 127.0.0.1:42502 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:48:22 2018 TCP connection established with [AF_INET]127.0.0.1:42508
Mon Dec 10 09:48:23 2018 127.0.0.1:42508 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Mon Dec 10 09:48:23 2018 127.0.0.1:42508 Connection reset, restarting [0]
Mon Dec 10 09:48:23 2018 127.0.0.1:42508 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:49:20 2018 TCP connection established with [AF_INET]127.0.0.1:42510
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 TLS: Initial packet from [AF_INET]127.0.0.1:42510, sid=43e490f3 4bd8e532
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:49:20 2018 127.0.0.1:42510 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42510
Mon Dec 10 09:49:20 2018 kss1xp20pro/127.0.0.1:42510 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:49:20 2018 kss1xp20pro/127.0.0.1:42510 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42510
Mon Dec 10 09:49:20 2018 kss1xp20pro/127.0.0.1:42510 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42510: 10.8.2.2
Mon Dec 10 09:49:21 2018 kss1xp20pro/127.0.0.1:42510 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:49:21 2018 kss1xp20pro/127.0.0.1:42510 send_push_reply(): safe_cap=940
Mon Dec 10 09:49:21 2018 kss1xp20pro/127.0.0.1:42510 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:50:09 2018 kss1xp20pro/127.0.0.1:42510 Connection reset, restarting [0]
Mon Dec 10 09:50:09 2018 kss1xp20pro/127.0.0.1:42510 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:19 2018 TCP connection established with [AF_INET]127.0.0.1:42512
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 TLS: Initial packet from [AF_INET]127.0.0.1:42512, sid=7aae9b95 202e97c0
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:51:19 2018 127.0.0.1:42512 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42512
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42512
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42512: 10.8.2.2
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 send_push_reply(): safe_cap=940
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 Connection reset, restarting [-1]
Mon Dec 10 09:51:19 2018 kss1xp20pro/127.0.0.1:42512 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:20 2018 TCP connection established with [AF_INET]127.0.0.1:42514
Mon Dec 10 09:51:20 2018 127.0.0.1:42514 Connection reset, restarting [0]
Mon Dec 10 09:51:20 2018 127.0.0.1:42514 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:20 2018 TCP connection established with [AF_INET]127.0.0.1:42516
Mon Dec 10 09:51:25 2018 TCP connection established with [AF_INET]127.0.0.1:42518
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 TLS: Initial packet from [AF_INET]127.0.0.1:42518, sid=a5c8816b bbcfc10f
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:51:25 2018 127.0.0.1:42518 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42518
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42518
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42518: 10.8.2.2
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 send_push_reply(): safe_cap=940
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:51:25 2018 127.0.0.1:42516 Connection reset, restarting [-1]
Mon Dec 10 09:51:25 2018 127.0.0.1:42516 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 Connection reset, restarting [-1]
Mon Dec 10 09:51:25 2018 kss1xp20pro/127.0.0.1:42518 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:26 2018 TCP connection established with [AF_INET]127.0.0.1:42520
Mon Dec 10 09:51:26 2018 127.0.0.1:42520 Connection reset, restarting [0]
Mon Dec 10 09:51:26 2018 127.0.0.1:42520 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:26 2018 TCP connection established with [AF_INET]127.0.0.1:42522
Mon Dec 10 09:51:30 2018 TCP connection established with [AF_INET]127.0.0.1:42524
Mon Dec 10 09:51:30 2018 127.0.0.1:42524 TLS: Initial packet from [AF_INET]127.0.0.1:42524, sid=cf0da2c0 1eb67a71
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:51:31 2018 127.0.0.1:42524 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42524
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42524
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42524: 10.8.2.2
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 send_push_reply(): safe_cap=940
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 Connection reset, restarting [-1]
Mon Dec 10 09:51:31 2018 kss1xp20pro/127.0.0.1:42524 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:31 2018 127.0.0.1:42522 Connection reset, restarting [-1]
Mon Dec 10 09:51:31 2018 127.0.0.1:42522 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:32 2018 TCP connection established with [AF_INET]127.0.0.1:42526
Mon Dec 10 09:51:32 2018 127.0.0.1:42526 Connection reset, restarting [0]
Mon Dec 10 09:51:32 2018 127.0.0.1:42526 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:32 2018 TCP connection established with [AF_INET]127.0.0.1:42528
Mon Dec 10 09:51:36 2018 TCP connection established with [AF_INET]127.0.0.1:42530
Mon Dec 10 09:51:36 2018 127.0.0.1:42530 TLS: Initial packet from [AF_INET]127.0.0.1:42530, sid=39403099 c0d6011e
Mon Dec 10 09:51:36 2018 127.0.0.1:42530 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:36 2018 127.0.0.1:42530 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:37 2018 127.0.0.1:42530 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:37 2018 127.0.0.1:42530 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:37 2018 127.0.0.1:42530 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:37 2018 127.0.0.1:42530 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:37 2018 127.0.0.1:42530 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:51:37 2018 127.0.0.1:42530 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42530
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42530
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42530: 10.8.2.2
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 send_push_reply(): safe_cap=940
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:51:37 2018 127.0.0.1:42528 Connection reset, restarting [-1]
Mon Dec 10 09:51:37 2018 127.0.0.1:42528 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 Connection reset, restarting [-1]
Mon Dec 10 09:51:37 2018 kss1xp20pro/127.0.0.1:42530 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:38 2018 TCP connection established with [AF_INET]127.0.0.1:42532
Mon Dec 10 09:51:38 2018 127.0.0.1:42532 Connection reset, restarting [0]
Mon Dec 10 09:51:38 2018 127.0.0.1:42532 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:38 2018 TCP connection established with [AF_INET]127.0.0.1:42534
Mon Dec 10 09:51:42 2018 TCP connection established with [AF_INET]127.0.0.1:42536
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 TLS: Initial packet from [AF_INET]127.0.0.1:42536, sid=42810ec7 25990b8a
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:51:42 2018 127.0.0.1:42536 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42536
Mon Dec 10 09:51:42 2018 kss1xp20pro/127.0.0.1:42536 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:51:42 2018 kss1xp20pro/127.0.0.1:42536 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42536
Mon Dec 10 09:51:42 2018 kss1xp20pro/127.0.0.1:42536 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42536: 10.8.2.2
Mon Dec 10 09:51:43 2018 kss1xp20pro/127.0.0.1:42536 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:51:43 2018 kss1xp20pro/127.0.0.1:42536 send_push_reply(): safe_cap=940
Mon Dec 10 09:51:43 2018 kss1xp20pro/127.0.0.1:42536 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:51:43 2018 kss1xp20pro/127.0.0.1:42536 Connection reset, restarting [-1]
Mon Dec 10 09:51:43 2018 kss1xp20pro/127.0.0.1:42536 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:43 2018 127.0.0.1:42534 Connection reset, restarting [-1]
Mon Dec 10 09:51:43 2018 127.0.0.1:42534 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:43 2018 TCP connection established with [AF_INET]127.0.0.1:42538
Mon Dec 10 09:51:44 2018 127.0.0.1:42538 Connection reset, restarting [0]
Mon Dec 10 09:51:44 2018 127.0.0.1:42538 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:44 2018 TCP connection established with [AF_INET]127.0.0.1:42540
Mon Dec 10 09:51:48 2018 TCP connection established with [AF_INET]127.0.0.1:42542
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 TLS: Initial packet from [AF_INET]127.0.0.1:42542, sid=23e99a1e 7686bf2f
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:51:48 2018 127.0.0.1:42542 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42542
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42542
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42542: 10.8.2.2
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 send_push_reply(): safe_cap=940
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:51:48 2018 127.0.0.1:42540 Connection reset, restarting [-1]
Mon Dec 10 09:51:48 2018 127.0.0.1:42540 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 Connection reset, restarting [-1]
Mon Dec 10 09:51:48 2018 kss1xp20pro/127.0.0.1:42542 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:49 2018 TCP connection established with [AF_INET]127.0.0.1:42544
Mon Dec 10 09:51:49 2018 127.0.0.1:42544 Connection reset, restarting [0]
Mon Dec 10 09:51:49 2018 127.0.0.1:42544 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:51:50 2018 TCP connection established with [AF_INET]127.0.0.1:42546
Mon Dec 10 09:51:54 2018 TCP connection established with [AF_INET]127.0.0.1:42548
Mon Dec 10 09:51:54 2018 127.0.0.1:42548 TLS: Initial packet from [AF_INET]127.0.0.1:42548, sid=02d95647 1f67aa04
Mon Dec 10 09:52:11 2018 TCP connection established with [AF_INET]127.0.0.1:42550
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 TLS: Initial packet from [AF_INET]127.0.0.1:42550, sid=b78abe7b c94307bb
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:52:12 2018 127.0.0.1:42550 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42550
Mon Dec 10 09:52:12 2018 kss1xp20pro/127.0.0.1:42550 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:52:12 2018 kss1xp20pro/127.0.0.1:42550 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42550
Mon Dec 10 09:52:12 2018 kss1xp20pro/127.0.0.1:42550 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42550: 10.8.2.2
Mon Dec 10 09:52:13 2018 kss1xp20pro/127.0.0.1:42550 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:52:13 2018 kss1xp20pro/127.0.0.1:42550 send_push_reply(): safe_cap=940
Mon Dec 10 09:52:13 2018 kss1xp20pro/127.0.0.1:42550 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:52:18 2018 127.0.0.1:42546 Connection reset, restarting [-1]
Mon Dec 10 09:52:18 2018 127.0.0.1:42546 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:52:18 2018 127.0.0.1:42548 Connection reset, restarting [-1]
Mon Dec 10 09:52:18 2018 127.0.0.1:42548 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:52:59 2018 kss1xp20pro/127.0.0.1:42550 Connection reset, restarting [0]
Mon Dec 10 09:52:59 2018 kss1xp20pro/127.0.0.1:42550 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:53:26 2018 TCP connection established with [AF_INET]127.0.0.1:42552
Mon Dec 10 09:53:33 2018 127.0.0.1:42552 Connection reset, restarting [0]
Mon Dec 10 09:53:33 2018 127.0.0.1:42552 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:53:38 2018 TCP connection established with [AF_INET]127.0.0.1:42554
Mon Dec 10 09:53:38 2018 127.0.0.1:42554 Connection reset, restarting [0]
Mon Dec 10 09:53:38 2018 127.0.0.1:42554 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:53:44 2018 TCP connection established with [AF_INET]127.0.0.1:42556
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 TLS: Initial packet from [AF_INET]127.0.0.1:42556, sid=c8f02499 c3913a72
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:53:44 2018 127.0.0.1:42556 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42556
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42556
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42556: 10.8.2.2
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 send_push_reply(): safe_cap=940
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 Connection reset, restarting [-1]
Mon Dec 10 09:53:44 2018 kss1xp20pro/127.0.0.1:42556 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:53:49 2018 TCP connection established with [AF_INET]127.0.0.1:42558
Mon Dec 10 09:53:49 2018 127.0.0.1:42558 TLS: Initial packet from [AF_INET]127.0.0.1:42558, sid=711cb319 497550ff
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:53:50 2018 127.0.0.1:42558 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42558
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42558
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42558: 10.8.2.2
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 send_push_reply(): safe_cap=940
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 Connection reset, restarting [-1]
Mon Dec 10 09:53:50 2018 kss1xp20pro/127.0.0.1:42558 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:53:55 2018 TCP connection established with [AF_INET]127.0.0.1:42560
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 TLS: Initial packet from [AF_INET]127.0.0.1:42560, sid=afe24852 09f72c72
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:53:55 2018 127.0.0.1:42560 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42560
Mon Dec 10 09:53:55 2018 kss1xp20pro/127.0.0.1:42560 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:53:55 2018 kss1xp20pro/127.0.0.1:42560 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42560
Mon Dec 10 09:53:55 2018 kss1xp20pro/127.0.0.1:42560 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42560: 10.8.2.2
Mon Dec 10 09:53:55 2018 kss1xp20pro/127.0.0.1:42560 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:53:55 2018 kss1xp20pro/127.0.0.1:42560 send_push_reply(): safe_cap=940
Mon Dec 10 09:53:55 2018 kss1xp20pro/127.0.0.1:42560 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:53:56 2018 kss1xp20pro/127.0.0.1:42560 Connection reset, restarting [-1]
Mon Dec 10 09:53:56 2018 kss1xp20pro/127.0.0.1:42560 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:54:01 2018 TCP connection established with [AF_INET]127.0.0.1:42562
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 TLS: Initial packet from [AF_INET]127.0.0.1:42562, sid=627a2669 a2fd472b
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:54:01 2018 127.0.0.1:42562 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42562
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42562
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42562: 10.8.2.2
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 send_push_reply(): safe_cap=940
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 Connection reset, restarting [-1]
Mon Dec 10 09:54:01 2018 kss1xp20pro/127.0.0.1:42562 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 09:54:06 2018 TCP connection established with [AF_INET]127.0.0.1:42564
Mon Dec 10 09:54:06 2018 127.0.0.1:42564 TLS: Initial packet from [AF_INET]127.0.0.1:42564, sid=dd09d359 d547c0ea
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 VERIFY OK: depth=1, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=JFI-MBC CA, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 VERIFY OK: depth=0, C=PH, ST=BUL, L=PULILAN, O=JFI-MBC, OU=JFI-MBC, CN=kss1xp20pro, name=UBUNTUVPN, emailAddress=wowiesy@gmail.com
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Dec 10 09:54:07 2018 127.0.0.1:42564 [kss1xp20pro] Peer Connection Initiated with [AF_INET]127.0.0.1:42564
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 MULTI_sva: pool returned IPv4=10.8.2.2, IPv6=(Not enabled)
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 MULTI: Learn: 10.8.2.2 -> kss1xp20pro/127.0.0.1:42564
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 MULTI: primary virtual IP for kss1xp20pro/127.0.0.1:42564: 10.8.2.2
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 PUSH: Received control message: 'PUSH_REQUEST'
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 send_push_reply(): safe_cap=940
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 SENT CONTROL [kss1xp20pro]: 'PUSH_REPLY,route 192.168.100.0 255.255.255.0,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 192.168.100.2,route-gateway 10.8.2.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.2.2 255.255.255.0' (status=1)
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 Connection reset, restarting [-1]
Mon Dec 10 09:54:07 2018 kss1xp20pro/127.0.0.1:42564 SIGUSR1[soft,connection-reset] received, client-instance restarting
Mon Dec 10 10:04:04 2018 TCP connection established with [AF_INET]127.0.0.1:42566
Mon Dec 10 10:04:04 2018 127.0.0.1:42566 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1563 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Mon Dec 10 10:04:04 2018 127.0.0.1:42566 Connection reset, restarting [0]
Mon Dec 10 10:04:04 2018 127.0.0.1:42566 SIGUSR1[soft,connection-reset] received, client-instance restarting
My OpenVPN client config:
client
dev tun
proto tcp
remote 127.0.0.1 1193
remote-random
resolv-retry infinite
nobind
persist-key
persist-tun
ca BULVPN.ca.crt
cert BULVPN.kss1xp20pro.crt
key BULVPN.kss1xp20pro.key
remote-cert-tls server
redirect-gateway def1
route 210.4.112.70 255.255.255.255 net_gateway
tls-auth BULVPN.ta.key 1
cipher AES-128-CBC
comp-lzo
verb 3
My SERVER OpenVPN config:
port 34567
proto tcp
dev tun
topology subnet
ca /etc/openvpn/ca.crt
cert /etc/openvpn/BULVPNSERVER.crt
key /etc/openvpn/BULVPNSERVER.key # This file should be kept secret
dh /etc/openvpn/dh2048.pem
server 10.8.2.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.100.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.100.2"
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-128-CBC # AES
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.BULVPN-ssl-tunnel.log
verb 3
STunnel SERVER config:
# Location of the certificate that we created
cert = /etc/stunnel/stunnel.pem
# Name of the connection
[bulvpn-localhost]
# The port to listen on
accept = 8443
# Connect to the local OpenVPN server
connect = 127.0.0.1:34567
STunnel CLIENT config:
pid =/usr/local/etc/stunnel/stunnel.pid
output =/usr/local/etc/stunnel/stunnel.log
cert =/usr/local/etc/stunnel/bulvpntunnel.stunnel.pem
debug = 7
foreground = yes
[openvpn-localhost]
client = yes
accept = 127.0.0.1:1193
connect = ww.xx.yy.zz:8443
My wife is going to China in a few days and I am hoping I will be able to get this working so I can set her iOS device for this as well (hopefully not much iOS specific challenges along the way)... altho I haven't checked out if an iOS counterpart for SSL Droid is available...
I will set her up on ordinary OpenVPN to connect to that other telco as a backup plan though... but will be better if I can get this STunnel working perfectly.
