server log
Fri Mar 1 08:02:19 2019 us=940868 Current Parameter Settings:
Fri Mar 1 08:02:19 2019 us=941101 config = '/etc/openvpn/server.conf'
Fri Mar 1 08:02:19 2019 us=941157 mode = 1
Fri Mar 1 08:02:19 2019 us=941206 persist_config = DISABLED
Fri Mar 1 08:02:19 2019 us=941255 persist_mode = 1
Fri Mar 1 08:02:19 2019 us=941303 show_ciphers = DISABLED
Fri Mar 1 08:02:19 2019 us=941350 show_digests = DISABLED
Fri Mar 1 08:02:19 2019 us=941397 show_engines = DISABLED
Fri Mar 1 08:02:19 2019 us=941443 genkey = DISABLED
Fri Mar 1 08:02:19 2019 us=941490 key_pass_file = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=941539 show_tls_ciphers = DISABLED
Fri Mar 1 08:02:19 2019 us=941586 Connection profiles [default]:
Fri Mar 1 08:02:19 2019 us=941635 proto = udp
Fri Mar 1 08:02:19 2019 us=941682 local = '192.168.0.100'
Fri Mar 1 08:02:19 2019 us=941729 local_port = 1100
Fri Mar 1 08:02:19 2019 us=941775 remote = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=941821 remote_port = 1100
Fri Mar 1 08:02:19 2019 us=941867 remote_float = DISABLED
Fri Mar 1 08:02:19 2019 us=941914 bind_defined = DISABLED
Fri Mar 1 08:02:19 2019 us=941960 bind_local = ENABLED
Fri Mar 1 08:02:19 2019 us=942007 connect_retry_seconds = 5
Fri Mar 1 08:02:19 2019 us=942053 connect_timeout = 10
Fri Mar 1 08:02:19 2019 us=942099 connect_retry_max = 0
Fri Mar 1 08:02:19 2019 us=942146 socks_proxy_server = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=942193 socks_proxy_port = 0
Fri Mar 1 08:02:19 2019 us=942239 socks_proxy_retry = DISABLED
Fri Mar 1 08:02:19 2019 us=942285 tun_mtu = 1500
Fri Mar 1 08:02:19 2019 us=942331 tun_mtu_defined = ENABLED
Fri Mar 1 08:02:19 2019 us=942377 link_mtu = 1500
Fri Mar 1 08:02:19 2019 us=942423 link_mtu_defined = DISABLED
Fri Mar 1 08:02:19 2019 us=942469 tun_mtu_extra = 0
Fri Mar 1 08:02:19 2019 us=942516 tun_mtu_extra_defined = DISABLED
Fri Mar 1 08:02:19 2019 us=942562 mtu_discover_type = -1
Fri Mar 1 08:02:19 2019 us=942608 fragment = 0
Fri Mar 1 08:02:19 2019 us=942654 mssfix = 1450
Fri Mar 1 08:02:19 2019 us=942700 explicit_exit_notification = 0
Fri Mar 1 08:02:19 2019 us=942746 Connection profiles END
Fri Mar 1 08:02:19 2019 us=942793 remote_random = DISABLED
Fri Mar 1 08:02:19 2019 us=942839 ipchange = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=942885 dev = 'tun'
Fri Mar 1 08:02:19 2019 us=942931 dev_type = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=942977 dev_node = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=943023 lladdr = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=943069 topology = 3
Fri Mar 1 08:02:19 2019 us=943115 tun_ipv6 = DISABLED
Fri Mar 1 08:02:19 2019 us=943162 ifconfig_local = '10.8.0.1'
Fri Mar 1 08:02:19 2019 us=943209 ifconfig_remote_netmask = '255.255.255.0'
Fri Mar 1 08:02:19 2019 us=943257 ifconfig_noexec = DISABLED
Fri Mar 1 08:02:19 2019 us=943304 ifconfig_nowarn = DISABLED
Fri Mar 1 08:02:19 2019 us=943352 ifconfig_ipv6_local = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=943399 ifconfig_ipv6_netbits = 0
Fri Mar 1 08:02:19 2019 us=943446 ifconfig_ipv6_remote = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=943493 shaper = 0
Fri Mar 1 08:02:19 2019 us=943539 mtu_test = 0
Fri Mar 1 08:02:19 2019 us=943585 mlock = DISABLED
Fri Mar 1 08:02:19 2019 us=943632 keepalive_ping = 1800
Fri Mar 1 08:02:19 2019 us=943678 keepalive_timeout = 3600
Fri Mar 1 08:02:19 2019 us=943724 inactivity_timeout = 0
Fri Mar 1 08:02:19 2019 us=943771 ping_send_timeout = 1800
Fri Mar 1 08:02:19 2019 us=943817 ping_rec_timeout = 7200
Fri Mar 1 08:02:19 2019 us=943863 ping_rec_timeout_action = 2
Fri Mar 1 08:02:19 2019 us=943909 ping_timer_remote = DISABLED
Fri Mar 1 08:02:19 2019 us=943957 remap_sigusr1 = 0
Fri Mar 1 08:02:19 2019 us=944004 persist_tun = ENABLED
Fri Mar 1 08:02:19 2019 us=944050 persist_local_ip = DISABLED
Fri Mar 1 08:02:19 2019 us=944097 persist_remote_ip = DISABLED
Fri Mar 1 08:02:19 2019 us=944144 persist_key = ENABLED
Fri Mar 1 08:02:19 2019 us=944190 passtos = DISABLED
Fri Mar 1 08:02:19 2019 us=944237 resolve_retry_seconds = 1000000000
Fri Mar 1 08:02:19 2019 us=944296 username = 'nobody'
Fri Mar 1 08:02:19 2019 us=944344 groupname = 'nogroup'
Fri Mar 1 08:02:19 2019 us=944390 chroot_dir = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=944437 cd_dir = '/etc/openvpn'
Fri Mar 1 08:02:19 2019 us=944483 writepid = '/run/openvpn/server.pid'
Fri Mar 1 08:02:19 2019 us=944530 up_script = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=944576 down_script = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=944622 down_pre = DISABLED
Fri Mar 1 08:02:19 2019 us=944668 up_restart = DISABLED
Fri Mar 1 08:02:19 2019 us=944715 up_delay = DISABLED
Fri Mar 1 08:02:19 2019 us=944761 daemon = ENABLED
Fri Mar 1 08:02:19 2019 us=944807 inetd = 0
Fri Mar 1 08:02:19 2019 us=944853 log = ENABLED
Fri Mar 1 08:02:19 2019 us=944979 suppress_timestamps = DISABLED
Fri Mar 1 08:02:19 2019 us=945033 nice = 0
Fri Mar 1 08:02:19 2019 us=945081 verbosity = 4
Fri Mar 1 08:02:19 2019 us=945127 mute = 0
Fri Mar 1 08:02:19 2019 us=945173 gremlin = 0
Fri Mar 1 08:02:19 2019 us=945220 status_file = '/var/log/openvpn-status.log'
Fri Mar 1 08:02:19 2019 us=945267 status_file_version = 3
Fri Mar 1 08:02:19 2019 us=945313 status_file_update_freq = 20
Fri Mar 1 08:02:19 2019 us=945359 occ = ENABLED
Fri Mar 1 08:02:19 2019 us=945406 rcvbuf = 65536
Fri Mar 1 08:02:19 2019 us=945452 sndbuf = 65536
Fri Mar 1 08:02:19 2019 us=945497 mark = 0
Fri Mar 1 08:02:19 2019 us=945544 sockflags = 0
Fri Mar 1 08:02:19 2019 us=945590 fast_io = DISABLED
Fri Mar 1 08:02:19 2019 us=945636 lzo = 0
Fri Mar 1 08:02:19 2019 us=945691 route_script = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=945739 route_default_gateway = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=945787 route_default_metric = 0
Fri Mar 1 08:02:19 2019 us=945834 route_noexec = DISABLED
Fri Mar 1 08:02:19 2019 us=945880 route_delay = 0
Fri Mar 1 08:02:19 2019 us=945928 route_delay_window = 30
Fri Mar 1 08:02:19 2019 us=945976 route_delay_defined = DISABLED
Fri Mar 1 08:02:19 2019 us=946025 route_nopull = DISABLED
Fri Mar 1 08:02:19 2019 us=946072 route_gateway_via_dhcp = DISABLED
Fri Mar 1 08:02:19 2019 us=946122 max_routes = 100
Fri Mar 1 08:02:19 2019 us=946169 allow_pull_fqdn = DISABLED
Fri Mar 1 08:02:19 2019 us=946217 management_addr = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=946265 management_port = 0
Fri Mar 1 08:02:19 2019 us=946312 management_user_pass = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=946360 management_log_history_cache = 250
Fri Mar 1 08:02:19 2019 us=946409 management_echo_buffer_size = 100
Fri Mar 1 08:02:19 2019 us=946457 management_write_peer_info_file = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=946506 management_client_user = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=946554 management_client_group = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=946601 management_flags = 0
Fri Mar 1 08:02:19 2019 us=946649 shared_secret_file = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=946697 key_direction = 1
Fri Mar 1 08:02:19 2019 us=946745 ciphername_defined = ENABLED
Fri Mar 1 08:02:19 2019 us=946792 ciphername = 'AES-256-CBC'
Fri Mar 1 08:02:19 2019 us=946841 authname_defined = ENABLED
Fri Mar 1 08:02:19 2019 us=946888 authname = 'SHA256'
Fri Mar 1 08:02:19 2019 us=946935 prng_hash = 'SHA1'
Fri Mar 1 08:02:19 2019 us=946982 prng_nonce_secret_len = 16
Fri Mar 1 08:02:19 2019 us=947030 keysize = 0
Fri Mar 1 08:02:19 2019 us=947076 engine = DISABLED
Fri Mar 1 08:02:19 2019 us=947124 replay = ENABLED
Fri Mar 1 08:02:19 2019 us=947171 mute_replay_warnings = DISABLED
Fri Mar 1 08:02:19 2019 us=947219 replay_window = 64
Fri Mar 1 08:02:19 2019 us=947266 replay_time = 15
Fri Mar 1 08:02:19 2019 us=947313 packet_id_file = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=947360 use_iv = ENABLED
Fri Mar 1 08:02:19 2019 us=947407 test_crypto = DISABLED
Fri Mar 1 08:02:19 2019 us=947455 tls_server = ENABLED
Fri Mar 1 08:02:19 2019 us=947502 tls_client = DISABLED
Fri Mar 1 08:02:19 2019 us=947550 key_method = 2
Fri Mar 1 08:02:19 2019 us=947609 ca_file = '/etc/openvpn/easy-rsa/pki/ca.crt'
Fri Mar 1 08:02:19 2019 us=947658 ca_path = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=947707 dh_file = '/etc/openvpn/easy-rsa/pki/dh2048.pem'
Fri Mar 1 08:02:19 2019 us=947756 cert_file = '/etc/openvpn/easy-rsa/pki/issued/server_mrgfW12YT7HBTO8Q.crt'
Fri Mar 1 08:02:19 2019 us=947806 priv_key_file = '/etc/openvpn/easy-rsa/pki/private/server_mrgfW12YT7HBTO8Q.key'
Fri Mar 1 08:02:19 2019 us=947855 pkcs12_file = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=947902 cipher_list = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=947949 tls_verify = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=947996 tls_export_cert = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=948044 verify_x509_type = 0
Fri Mar 1 08:02:19 2019 us=948092 verify_x509_name = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=948139 crl_file = '/etc/openvpn/crl.pem'
Fri Mar 1 08:02:19 2019 us=948186 ns_cert_type = 0
Fri Mar 1 08:02:19 2019 us=948233 remote_cert_ku[i] = 128
Fri Mar 1 08:02:19 2019 us=948280 remote_cert_ku[i] = 8
Fri Mar 1 08:02:19 2019 us=948328 remote_cert_ku[i] = 136
Fri Mar 1 08:02:19 2019 us=948376 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948423 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948470 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948517 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948563 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948610 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948656 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948703 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948750 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948796 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948843 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948890 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948937 remote_cert_ku[i] = 0
Fri Mar 1 08:02:19 2019 us=948985 remote_cert_eku = 'TLS Web Client Authentication'
Fri Mar 1 08:02:19 2019 us=949033 ssl_flags = 192
Fri Mar 1 08:02:19 2019 us=949080 tls_timeout = 2
Fri Mar 1 08:02:19 2019 us=949127 renegotiate_bytes = 0
Fri Mar 1 08:02:19 2019 us=949174 renegotiate_packets = 0
Fri Mar 1 08:02:19 2019 us=949222 renegotiate_seconds = 3600
Fri Mar 1 08:02:19 2019 us=949270 handshake_window = 60
Fri Mar 1 08:02:19 2019 us=949317 transition_window = 3600
Fri Mar 1 08:02:19 2019 us=949364 single_session = DISABLED
Fri Mar 1 08:02:19 2019 us=949410 push_peer_info = DISABLED
Fri Mar 1 08:02:19 2019 us=949456 tls_exit = DISABLED
Fri Mar 1 08:02:19 2019 us=949504 tls_auth_file = '/etc/openvpn/easy-rsa/pki/ta.key'
Fri Mar 1 08:02:19 2019 us=949553 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949602 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949650 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949698 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949746 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949795 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949843 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949891 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949939 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=949987 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=950034 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=950082 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=950131 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=950179 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=950227 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=950276 pkcs11_protected_authentication = DISABLED
Fri Mar 1 08:02:19 2019 us=950325 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950374 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950433 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950483 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950533 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950581 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950629 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950677 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950725 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950774 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950823 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950872 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950920 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=950969 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=951018 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=951067 pkcs11_private_mode = 00000000
Fri Mar 1 08:02:19 2019 us=951115 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951163 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951210 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951258 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951306 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951355 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951403 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951451 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951499 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951547 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951594 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951642 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951690 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951739 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951787 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951835 pkcs11_cert_private = DISABLED
Fri Mar 1 08:02:19 2019 us=951884 pkcs11_pin_cache_period = -1
Fri Mar 1 08:02:19 2019 us=951932 pkcs11_id = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=951980 pkcs11_id_management = DISABLED
Fri Mar 1 08:02:19 2019 us=952034 server_network = 10.8.0.0
Fri Mar 1 08:02:19 2019 us=952103 server_netmask = 255.255.255.0
Fri Mar 1 08:02:19 2019 us=952160 server_network_ipv6 = ::
Fri Mar 1 08:02:19 2019 us=952208 server_netbits_ipv6 = 0
Fri Mar 1 08:02:19 2019 us=952262 server_bridge_ip = 0.0.0.0
Fri Mar 1 08:02:19 2019 us=952317 server_bridge_netmask = 0.0.0.0
Fri Mar 1 08:02:19 2019 us=952371 server_bridge_pool_start = 0.0.0.0
Fri Mar 1 08:02:19 2019 us=952427 server_bridge_pool_end = 0.0.0.0
Fri Mar 1 08:02:19 2019 us=952476 push_entry = 'dhcp-option DNS 8.8.8.8'
Fri Mar 1 08:02:19 2019 us=952525 push_entry = 'dhcp-option DNS 8.8.4.4'
Fri Mar 1 08:02:19 2019 us=952573 push_entry = 'dhcp-option DNS 10.8.0.1'
Fri Mar 1 08:02:19 2019 us=952623 push_entry = 'block-outside-dns'
Fri Mar 1 08:02:19 2019 us=952671 push_entry = 'redirect-gateway def1 bypass-dhcp'
Fri Mar 1 08:02:19 2019 us=952720 push_entry = 'route 10.8.0.0 255.255.255.0'
Fri Mar 1 08:02:19 2019 us=952769 push_entry = 'route 10.8.0.1 255.255.255.255'
Fri Mar 1 08:02:19 2019 us=952818 push_entry = 'route-gateway 10.8.0.1'
Fri Mar 1 08:02:19 2019 us=952866 push_entry = 'topology subnet'
Fri Mar 1 08:02:19 2019 us=952914 push_entry = 'ping 1800'
Fri Mar 1 08:02:19 2019 us=952961 push_entry = 'ping-restart 3600'
Fri Mar 1 08:02:19 2019 us=953008 ifconfig_pool_defined = ENABLED
Fri Mar 1 08:02:19 2019 us=953062 ifconfig_pool_start = 10.8.0.2
Fri Mar 1 08:02:19 2019 us=953117 ifconfig_pool_end = 10.8.0.253
Fri Mar 1 08:02:19 2019 us=953173 ifconfig_pool_netmask = 255.255.255.0
Fri Mar 1 08:02:19 2019 us=953222 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=953272 ifconfig_pool_persist_refresh_freq = 600
Fri Mar 1 08:02:19 2019 us=953320 ifconfig_ipv6_pool_defined = DISABLED
Fri Mar 1 08:02:19 2019 us=953382 ifconfig_ipv6_pool_base = ::
Fri Mar 1 08:02:19 2019 us=953432 ifconfig_ipv6_pool_netbits = 0
Fri Mar 1 08:02:19 2019 us=953481 n_bcast_buf = 256
Fri Mar 1 08:02:19 2019 us=953528 tcp_queue_limit = 64
Fri Mar 1 08:02:19 2019 us=953575 real_hash_size = 256
Fri Mar 1 08:02:19 2019 us=953622 virtual_hash_size = 256
Fri Mar 1 08:02:19 2019 us=953669 client_connect_script = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=953717 learn_address_script = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=953764 client_disconnect_script = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=953812 client_config_dir = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=953860 ccd_exclusive = DISABLED
Fri Mar 1 08:02:19 2019 us=953906 tmp_dir = '/tmp'
Fri Mar 1 08:02:19 2019 us=953953 push_ifconfig_defined = DISABLED
Fri Mar 1 08:02:19 2019 us=954007 push_ifconfig_local = 0.0.0.0
Fri Mar 1 08:02:19 2019 us=954062 push_ifconfig_remote_netmask = 0.0.0.0
Fri Mar 1 08:02:19 2019 us=954111 push_ifconfig_ipv6_defined = DISABLED
Fri Mar 1 08:02:19 2019 us=954164 push_ifconfig_ipv6_local = ::/0
Fri Mar 1 08:02:19 2019 us=954217 push_ifconfig_ipv6_remote = ::
Fri Mar 1 08:02:19 2019 us=954265 enable_c2c = ENABLED
Fri Mar 1 08:02:19 2019 us=954312 duplicate_cn = ENABLED
Fri Mar 1 08:02:19 2019 us=954358 cf_max = 0
Fri Mar 1 08:02:19 2019 us=954404 cf_per = 0
Fri Mar 1 08:02:19 2019 us=954451 max_clients = 1024
Fri Mar 1 08:02:19 2019 us=954498 max_routes_per_client = 256
Fri Mar 1 08:02:19 2019 us=954546 auth_user_pass_verify_script = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=954594 auth_user_pass_verify_script_via_file = DISABLED
Fri Mar 1 08:02:19 2019 us=954642 port_share_host = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=954689 port_share_port = 0
Fri Mar 1 08:02:19 2019 us=954735 client = DISABLED
Fri Mar 1 08:02:19 2019 us=954781 pull = DISABLED
Fri Mar 1 08:02:19 2019 us=954828 auth_user_pass_file = '[UNDEF]'
Fri Mar 1 08:02:19 2019 us=954883 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 27 2017
Fri Mar 1 08:02:19 2019 us=955047 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.08
Fri Mar 1 08:02:19 2019 us=956017 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Fri Mar 1 08:02:19 2019 us=957842 Diffie-Hellman initialized with 2048 bit key
Fri Mar 1 08:02:19 2019 us=960186 Control Channel Authentication: using '/etc/openvpn/easy-rsa/pki/ta.key' as a OpenVPN static key file
Fri Mar 1 08:02:19 2019 us=960288 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Mar 1 08:02:19 2019 us=960354 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Mar 1 08:02:19 2019 us=960425 TLS-Auth MTU parms [ L:1569 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Mar 1 08:02:19 2019 us=960515 Socket Buffers: R=[163840->131072] S=[163840->131072]
Fri Mar 1 08:02:19 2019 us=964588 TUN/TAP device tun0 opened
Fri Mar 1 08:02:19 2019 us=964744 TUN/TAP TX queue length set to 100
Fri Mar 1 08:02:19 2019 us=964867 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Mar 1 08:02:19 2019 us=965135 /sbin/ip link set dev tun0 up mtu 1500
Fri Mar 1 08:02:19 2019 us=971371 /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Fri Mar 1 08:02:19 2019 us=979267 Data Channel MTU parms [ L:1569 D:1450 EF:69 EB:4 ET:0 EL:0 ]
Fri Mar 1 08:02:19 2019 us=985281 GID set to nogroup
Fri Mar 1 08:02:19 2019 us=985503 UID set to nobody
Fri Mar 1 08:02:19 2019 us=985627 UDPv4 link local (bound): [AF_INET]192.168.0.100:1100
Fri Mar 1 08:02:19 2019 us=985690 UDPv4 link remote: [undef]
Fri Mar 1 08:02:19 2019 us=985756 MULTI: multi_init called, r=256 v=256
Fri Mar 1 08:02:19 2019 us=986262 IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
Fri Mar 1 08:02:19 2019 us=986442 Initialization Sequence Completed
Fri Mar 1 08:03:54 2019 us=291608 MULTI: multi_create_instance called
Fri Mar 1 08:03:54 2019 us=291912 208.111.113.201:12003 Re-using SSL/TLS context
Fri Mar 1 08:03:54 2019 us=292781 208.111.113.201:12003 Control Channel MTU parms [ L:1569 D:178 EF:78 EB:0 ET:0 EL:0 ]
Fri Mar 1 08:03:54 2019 us=292851 208.111.113.201:12003 Data Channel MTU parms [ L:1569 D:1450 EF:69 EB:4 ET:0 EL:0 ]
Fri Mar 1 08:03:54 2019 us=293128 208.111.113.201:12003 Local Options String: 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Fri Mar 1 08:03:54 2019 us=293178 208.111.113.201:12003 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Fri Mar 1 08:03:54 2019 us=293302 208.111.113.201:12003 Local Options hash (VER=V4): '66f5538f'
Fri Mar 1 08:03:54 2019 us=293394 208.111.113.201:12003 Expected Remote Options hash (VER=V4): 'c7c95cbc'
Fri Mar 1 08:03:54 2019 us=293529 208.111.113.201:12003 TLS: Initial packet from [AF_INET]208.111.113.201:12003, sid=e7e5ccff 472962fe
Fri Mar 1 08:03:54 2019 us=625620 208.111.113.201:12003 PID_ERR replay-window backtrack occurred [1] [TLS_AUTH-0] [0_0000] 1551423834:6 1551423834:5 t=1551423834[0] r=[0,64,15,1,1] sl=[58,6,64,272]
Fri Mar 1 08:03:55 2019 us=244397 208.111.113.201:12003 CRL CHECK OK: CN=ChangeMe
Fri Mar 1 08:03:55 2019 us=244609 208.111.113.201:12003 VERIFY OK: depth=1, CN=ChangeMe
Fri Mar 1 08:03:55 2019 us=246689 208.111.113.201:12003 Validating certificate key usage
Fri Mar 1 08:03:55 2019 us=246745 208.111.113.201:12003 ++ Certificate has key usage 0080, expects 0080
Fri Mar 1 08:03:55 2019 us=246794 208.111.113.201:12003 VERIFY KU OK
Fri Mar 1 08:03:55 2019 us=246858 208.111.113.201:12003 Validating certificate extended key usage
Fri Mar 1 08:03:55 2019 us=246912 208.111.113.201:12003 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Fri Mar 1 08:03:55 2019 us=246959 208.111.113.201:12003 VERIFY EKU OK
Fri Mar 1 08:03:55 2019 us=247356 208.111.113.201:12003 CRL CHECK OK: CN=LaptopY700
Fri Mar 1 08:03:55 2019 us=247486 208.111.113.201:12003 VERIFY OK: depth=0, CN=LaptopY700
Fri Mar 1 08:03:55 2019 us=470377 208.111.113.201:12003 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Mar 1 08:03:55 2019 us=470511 208.111.113.201:12003 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Mar 1 08:03:55 2019 us=470580 208.111.113.201:12003 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Mar 1 08:03:55 2019 us=470646 208.111.113.201:12003 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Mar 1 08:03:55 2019 us=521149 208.111.113.201:12003 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Mar 1 08:03:55 2019 us=521279 208.111.113.201:12003 [LaptopY700] Peer Connection Initiated with [AF_INET]208.111.113.201:12003
Fri Mar 1 08:03:55 2019 us=521399 LaptopY700/208.111.113.201:12003 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Fri Mar 1 08:03:55 2019 us=521636 LaptopY700/208.111.113.201:12003 MULTI: Learn: 10.8.0.2 -> LaptopY700/208.111.113.201:12003
Fri Mar 1 08:03:55 2019 us=521706 LaptopY700/208.111.113.201:12003 MULTI: primary virtual IP for LaptopY700/208.111.113.201:12003: 10.8.0.2
Fri Mar 1 08:03:55 2019 us=521872 LaptopY700/208.111.113.201:12003 PUSH: Received control message: 'PUSH_REQUEST'
Fri Mar 1 08:03:55 2019 us=521930 LaptopY700/208.111.113.201:12003 send_push_reply(): safe_cap=940
Fri Mar 1 08:03:55 2019 us=522075 LaptopY700/208.111.113.201:12003 SENT CONTROL [LaptopY700]: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,dhcp-option DNS 10.8.0.1,block-outside-dns,redirect-gateway def1 bypass-dhcp,route 10.8.0.0 255.255.255.0,route 10.8.0.1 255.255.255.255,route-gateway 10.8.0.1,topology subnet,ping 1800,ping-restart 3600,ifconfig 10.8.0.2 255.255.255.0' (status=1)
Fri Mar 1 08:03:55 2019 us=653281 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:03:55 2019 us=654424 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:03:55 2019 us=656590 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:03:55 2019 us=656724 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:03:55 2019 us=952933 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:03:56 2019 us=724091 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:03:59 2019 us=629245 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:04:07 2019 us=319585 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:04:37 2019 us=375713 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:06:29 2019 us=515103 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
Fri Mar 1 08:08:16 2019 us=345979 LaptopY700/208.111.113.201:12003 MULTI: bad source address from client [fd62::a261:e3c2:74a3:caa6], packet dropped
client log
8:43:25.294 -- ----- OpenVPN Start -----
08:43:25.295 -- EVENT: CORE_THREAD_ACTIVE
08:43:25.298 -- Frame=512/2048/512 mssfix-ctrl=1250
08:43:25.300 -- UNUSED OPTIONS
4 [resolv-retry] [infinite]
5 [nobind]
6 [persist-key]
7 [persist-tun]
11 [verify-x509-name] [server_mrgfW12YT7HBTO8Q] [name]
14 [auth-nocache]
15 [verb] [4]
08:43:25.301 -- EVENT: RESOLVE
08:43:25.305 -- Contacting 76.35.125.186:1100 via UDP
08:43:25.305 -- EVENT: WAIT
08:43:25.316 -- Connecting to 76.35.125.186:1100 via UDPv4
08:43:25.371 -- EVENT: CONNECTING
08:43:25.373 -- Tunnel Options:V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client
08:43:25.373 -- Creds: UsernameEmpty/PasswordEmpty
08:43:25.374 -- Peer Info:
IV_GUI_VER=OC30Android
IV_VER=3.2
IV_PLAT=android
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
08:43:25.855 -- VERIFY OK : depth=1
cert. version : 3
serial number : 95:AC:F7:E4:7D:19:C4:85
issuer name : CN=ChangeMe
subject name : CN=ChangeMe
issued on : 2019-02-26 17:18:45
expires on : 2029-02-23 17:18:45
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=true
key usage : Key Cert Sign, CRL Sign
08:43:25.857 -- VERIFY OK : depth=0
cert. version : 3
serial number : A0:9E:A8:18:EF:AD:F2:A6:32:52:55:16:82:A7:59:E5
issuer name : CN=ChangeMe
subject name : CN=server_mrgfW12YT7HBTO8Q
issued on : 2019-02-26 17:18:58
expires on : 2029-02-23 17:18:58
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=false
subject alt name : server_mrgfW12YT7HBTO8Q
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication
08:43:26.520 -- SSL Handshake: TLSv1.2/TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
08:43:26.523 -- Session is ACTIVE
08:43:26.525 -- EVENT: GET_CONFIG
08:43:26.530 -- Sending PUSH_REQUEST to server...
08:43:26.586 -- OPTIONS:
0 [dhcp-option] [DNS] [8.8.8.8]
1 [dhcp-option] [DNS] [8.8.4.4]
2 [dhcp-option] [DNS] [10.8.0.1]
3 [block-outside-dns]
4 [redirect-gateway] [def1] [bypass-dhcp]
5 [route] [10.8.0.0] [255.255.255.0]
6 [route] [10.8.0.1] [255.255.255.255]
7 [route-gateway] [10.8.0.1]
8 [topology] [subnet]
9 [ping] [1800]
10 [ping-restart] [3600]
11 [ifconfig] [10.8.0.4] [255.255.255.0]
08:43:26.587 -- PROTOCOL OPTIONS:
cipher: AES-256-CBC
digest: SHA256
compress: NONE
peer ID: -1
08:43:26.587 -- EVENT: ASSIGN_IP
08:43:26.701 -- Connected via tun
08:43:26.707 -- EVENT: CONNECTED info='76.35.125.186:1100 via /UDPv4 on tun/10.8.0.4/ gw=[10.8.0.1/]' trans=TO_CONNECTED
