Can't get ethernet bridging to work - just hangs

blik

Hi

I've followed the instructions at https://openvpn.net/community-resources/ethernet-bridging/ pretty carefully but whenever I attempt to connect from my client it just hangs waiting for the server.

FYI. Before converting to a briding setup I did connect successfully and uneventfully with default server and client settings.

You will note I've turned up the verbosity on the server in an attempt to see clues but to no avail.

I've redacted the server hostname and ip address from below for security reasons.

I'm hoping someone can point me in the right direction. I'm surprised it didnt work because I expect that tutorial can be followed many many times and would have been corrected if there was an error or typo. I'm expecting I've done something silly.

Of course I'd be happy to post more info

dev tap0
proto udp
port 1194
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server_zNmQirOsoZz3CuvE.crt
key /etc/openvpn/easy-rsa/pki/private/server_zNmQirOsoZz3CuvE.key
dh none
topology subnet
server-bridge 192.168.100.12 255.255.255.0 192.168.100.210 192.168.100.219
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"
push "redirect-gateway def1"
client-to-client
keepalive 1800 3600
remote-cert-tls client
tls-version-min 1.2
tls-crypt /etc/openvpn/easy-rsa/pki/ta.key
cipher AES-256-CBC
auth SHA256
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
log-append /var/log/openvpn.log
syslog
verb 4

client
dev tap
proto udp
remote REDACTED.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_zNmQirOsoZz3CuvE name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 4

#!/bin/bash

#################################
# Set up Ethernet bridge on Linux
# Requires: bridge-utils
#################################

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth0"
eth_ip="192.168.100.12"
eth_netmask="255.255.255.0"
eth_broadcast="192.168.100.255"

for t in $tap; do
openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
brctl addif $br $t
done

for t in $tap; do
ifconfig $t 0.0.0.0 promisc up
done

ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast

server ifconfig output

br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.100.12  netmask 255.255.255.0  broadcast 192.168.100.255
        inet6 fdd0:7587:bf67:1:a404:2452:8675:e83e  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::7c67:54ff:fe7d:c060  prefixlen 64  scopeid 0x20<link>
        inet6 fd11:59ec:f4e8:1:3ab0:4262:299:5fa  prefixlen 64  scopeid 0x0<global>
        ether 7e:67:54:7d:c0:60  txqueuelen 1000  (Ethernet)
        RX packets 645005  bytes 150734641 (143.7 MiB)
        RX errors 0  dropped 18414  overruns 0  frame 0
        TX packets 4671  bytes 848109 (828.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth0: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
        inet6 fe80::78c2:be19:5b14:d2b  prefixlen 64  scopeid 0x20<link>
        ether b8:27:eb:69:87:56  txqueuelen 1000  (Ethernet)
        RX packets 967814  bytes 219129209 (208.9 MiB)
        RX errors 0  dropped 43  overruns 0  frame 0
        TX packets 12232  bytes 2228312 (2.1 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 54  bytes 6527 (6.3 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 54  bytes 6527 (6.3 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tap0: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
        inet 169.254.12.144  netmask 255.255.0.0  broadcast 169.254.255.255
        inet6 fe80::3a6b:e07f:5a8c:8a9e  prefixlen 64  scopeid 0x20<link>
        ether 7e:67:54:7d:c0:60  txqueuelen 100  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 638124  bytes 148162286 (141.2 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

server log startup

Tue Apr  2 20:23:37 2019 us=543971 Current Parameter Settings:
Tue Apr  2 20:23:37 2019 us=544368   config = '/etc/openvpn/server.conf'
Tue Apr  2 20:23:37 2019 us=544481   mode = 1
Tue Apr  2 20:23:37 2019 us=544575   persist_config = DISABLED
Tue Apr  2 20:23:37 2019 us=544665   persist_mode = 1
Tue Apr  2 20:23:37 2019 us=544784   show_ciphers = DISABLED
Tue Apr  2 20:23:37 2019 us=544906   show_digests = DISABLED
Tue Apr  2 20:23:37 2019 us=545002   show_engines = DISABLED
Tue Apr  2 20:23:37 2019 us=545103   genkey = DISABLED
Tue Apr  2 20:23:37 2019 us=545193   key_pass_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=545284   show_tls_ciphers = DISABLED
Tue Apr  2 20:23:37 2019 us=545363   connect_retry_max = 0
Tue Apr  2 20:23:37 2019 us=545436 Connection profiles [0]:
Tue Apr  2 20:23:37 2019 us=545515   proto = udp
Tue Apr  2 20:23:37 2019 us=545594   local = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=545682   local_port = '1194'
Tue Apr  2 20:23:37 2019 us=545785   remote = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=545888   remote_port = '1194'
Tue Apr  2 20:23:37 2019 us=545972   remote_float = DISABLED
Tue Apr  2 20:23:37 2019 us=546050   bind_defined = DISABLED
Tue Apr  2 20:23:37 2019 us=546128   bind_local = ENABLED
Tue Apr  2 20:23:37 2019 us=546219   bind_ipv6_only = DISABLED
Tue Apr  2 20:23:37 2019 us=546299   connect_retry_seconds = 5
Tue Apr  2 20:23:37 2019 us=546375   connect_timeout = 120
Tue Apr  2 20:23:37 2019 us=546456   socks_proxy_server = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=546563   socks_proxy_port = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=546644   tun_mtu = 1500
Tue Apr  2 20:23:37 2019 us=546727   tun_mtu_defined = ENABLED
Tue Apr  2 20:23:37 2019 us=546799   link_mtu = 1500
Tue Apr  2 20:23:37 2019 us=546885   link_mtu_defined = DISABLED
Tue Apr  2 20:23:37 2019 us=546969   tun_mtu_extra = 32
Tue Apr  2 20:23:37 2019 us=547039   tun_mtu_extra_defined = ENABLED
Tue Apr  2 20:23:37 2019 us=547113   mtu_discover_type = -1
Tue Apr  2 20:23:37 2019 us=547199   fragment = 0
Tue Apr  2 20:23:37 2019 us=547307   mssfix = 1450
Tue Apr  2 20:23:37 2019 us=547405   explicit_exit_notification = 0
Tue Apr  2 20:23:37 2019 us=547495 Connection profiles END
Tue Apr  2 20:23:37 2019 us=547569   remote_random = DISABLED
Tue Apr  2 20:23:37 2019 us=547665   ipchange = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=547779   dev = 'tap0'
Tue Apr  2 20:23:37 2019 us=547875   dev_type = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=547954   dev_node = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=548032   lladdr = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=548102   topology = 3
Tue Apr  2 20:23:37 2019 us=548169   ifconfig_local = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=548238   ifconfig_remote_netmask = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=548309   ifconfig_noexec = DISABLED
Tue Apr  2 20:23:37 2019 us=548381   ifconfig_nowarn = DISABLED
Tue Apr  2 20:23:37 2019 us=548451   ifconfig_ipv6_local = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=548519   ifconfig_ipv6_netbits = 0
Tue Apr  2 20:23:37 2019 us=548587   ifconfig_ipv6_remote = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=548654   shaper = 0
Tue Apr  2 20:23:37 2019 us=548721   mtu_test = 0
Tue Apr  2 20:23:37 2019 us=548785   mlock = DISABLED
Tue Apr  2 20:23:37 2019 us=548851   keepalive_ping = 1800
Tue Apr  2 20:23:37 2019 us=548915   keepalive_timeout = 3600
Tue Apr  2 20:23:37 2019 us=549101   inactivity_timeout = 0
Tue Apr  2 20:23:37 2019 us=549192   ping_send_timeout = 1800
Tue Apr  2 20:23:37 2019 us=549266   ping_rec_timeout = 7200
Tue Apr  2 20:23:37 2019 us=549335   ping_rec_timeout_action = 2
Tue Apr  2 20:23:37 2019 us=549404   ping_timer_remote = DISABLED
Tue Apr  2 20:23:37 2019 us=549472   remap_sigusr1 = 0
Tue Apr  2 20:23:37 2019 us=549542   persist_tun = ENABLED
Tue Apr  2 20:23:37 2019 us=549613   persist_local_ip = DISABLED
Tue Apr  2 20:23:37 2019 us=549684   persist_remote_ip = DISABLED
Tue Apr  2 20:23:37 2019 us=549753   persist_key = ENABLED
Tue Apr  2 20:23:37 2019 us=549881   passtos = DISABLED
Tue Apr  2 20:23:37 2019 us=549952   resolve_retry_seconds = 1000000000
Tue Apr  2 20:23:37 2019 us=550020   resolve_in_advance = DISABLED
Tue Apr  2 20:23:37 2019 us=550089   username = 'nobody'
Tue Apr  2 20:23:37 2019 us=550154   groupname = 'nogroup'
Tue Apr  2 20:23:37 2019 us=550219   chroot_dir = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=550283   cd_dir = '/etc/openvpn'
Tue Apr  2 20:23:37 2019 us=550349   writepid = '/run/openvpn/server.pid'
Tue Apr  2 20:23:37 2019 us=550413   up_script = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=550478   down_script = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=550542   down_pre = DISABLED
Tue Apr  2 20:23:37 2019 us=550608   up_restart = DISABLED
Tue Apr  2 20:23:37 2019 us=550672   up_delay = DISABLED
Tue Apr  2 20:23:37 2019 us=550738   daemon = ENABLED
Tue Apr  2 20:23:37 2019 us=550807   inetd = 0
Tue Apr  2 20:23:37 2019 us=550875   log = ENABLED
Tue Apr  2 20:23:37 2019 us=550959   suppress_timestamps = DISABLED
Tue Apr  2 20:23:37 2019 us=551031   machine_readable_output = DISABLED
Tue Apr  2 20:23:37 2019 us=551101   nice = 0
Tue Apr  2 20:23:37 2019 us=551166   verbosity = 4
Tue Apr  2 20:23:37 2019 us=551232   mute = 0
Tue Apr  2 20:23:37 2019 us=551296   gremlin = 0
Tue Apr  2 20:23:37 2019 us=551361   status_file = '/var/log/openvpn-status.log'
Tue Apr  2 20:23:37 2019 us=551427   status_file_version = 3
Tue Apr  2 20:23:37 2019 us=551493   status_file_update_freq = 20
Tue Apr  2 20:23:37 2019 us=551557   occ = ENABLED
Tue Apr  2 20:23:37 2019 us=551622   rcvbuf = 0
Tue Apr  2 20:23:37 2019 us=551688   sndbuf = 0
Tue Apr  2 20:23:37 2019 us=551754   mark = 0
Tue Apr  2 20:23:37 2019 us=551819   sockflags = 0
Tue Apr  2 20:23:37 2019 us=551885   fast_io = DISABLED
Tue Apr  2 20:23:37 2019 us=551952   comp.alg = 0
Tue Apr  2 20:23:37 2019 us=552022   comp.flags = 0
Tue Apr  2 20:23:37 2019 us=552108   route_script = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=552192   route_default_gateway = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=552281   route_default_metric = 0
Tue Apr  2 20:23:37 2019 us=552393   route_noexec = DISABLED
Tue Apr  2 20:23:37 2019 us=552517   route_delay = 0
Tue Apr  2 20:23:37 2019 us=552615   route_delay_window = 30
Tue Apr  2 20:23:37 2019 us=552701   route_delay_defined = DISABLED
Tue Apr  2 20:23:37 2019 us=552792   route_nopull = DISABLED
Tue Apr  2 20:23:37 2019 us=552879   route_gateway_via_dhcp = DISABLED
Tue Apr  2 20:23:37 2019 us=552956   allow_pull_fqdn = DISABLED
Tue Apr  2 20:23:37 2019 us=553031   management_addr = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=553105   management_port = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=553179   management_user_pass = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=553270   management_log_history_cache = 250
Tue Apr  2 20:23:37 2019 us=553365   management_echo_buffer_size = 100
Tue Apr  2 20:23:37 2019 us=553469   management_write_peer_info_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=553555   management_client_user = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=553638   management_client_group = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=553715   management_flags = 0
Tue Apr  2 20:23:37 2019 us=553795   shared_secret_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=553881   key_direction = 0
Tue Apr  2 20:23:37 2019 us=553961   ciphername = 'AES-256-CBC'
Tue Apr  2 20:23:37 2019 us=554032   ncp_enabled = ENABLED
Tue Apr  2 20:23:37 2019 us=554119   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Apr  2 20:23:37 2019 us=554213   authname = 'SHA256'
Tue Apr  2 20:23:37 2019 us=554289   prng_hash = 'SHA1'
Tue Apr  2 20:23:37 2019 us=554384   prng_nonce_secret_len = 16
Tue Apr  2 20:23:37 2019 us=554476   keysize = 0
Tue Apr  2 20:23:37 2019 us=554552   engine = DISABLED
Tue Apr  2 20:23:37 2019 us=554648   replay = ENABLED
Tue Apr  2 20:23:37 2019 us=554726   mute_replay_warnings = DISABLED
Tue Apr  2 20:23:37 2019 us=554807   replay_window = 64
Tue Apr  2 20:23:37 2019 us=554881   replay_time = 15
Tue Apr  2 20:23:37 2019 us=554963   packet_id_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=555058   use_iv = ENABLED
Tue Apr  2 20:23:37 2019 us=555201   test_crypto = DISABLED
Tue Apr  2 20:23:37 2019 us=555292   tls_server = ENABLED
Tue Apr  2 20:23:37 2019 us=555371   tls_client = DISABLED
Tue Apr  2 20:23:37 2019 us=555442   key_method = 2
Tue Apr  2 20:23:37 2019 us=555515   ca_file = '/etc/openvpn/easy-rsa/pki/ca.crt'
Tue Apr  2 20:23:37 2019 us=555590   ca_path = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=555679   dh_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=555755   cert_file = '/etc/openvpn/easy-rsa/pki/issued/server_zNmQirOsoZz3CuvE.crt'
Tue Apr  2 20:23:37 2019 us=555841   extra_certs_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=555949   priv_key_file = '/etc/openvpn/easy-rsa/pki/private/server_zNmQirOsoZz3CuvE.key'
Tue Apr  2 20:23:37 2019 us=556040   pkcs12_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=556156   cipher_list = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=556248   tls_verify = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=556341   tls_export_cert = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=556420   verify_x509_type = 0
Tue Apr  2 20:23:37 2019 us=556520   verify_x509_name = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=556613   crl_file = '/etc/openvpn/crl.pem'
Tue Apr  2 20:23:37 2019 us=556694   ns_cert_type = 0
Tue Apr  2 20:23:37 2019 us=556768   remote_cert_ku[i] = 128
Tue Apr  2 20:23:37 2019 us=556843   remote_cert_ku[i] = 8
Tue Apr  2 20:23:37 2019 us=556934   remote_cert_ku[i] = 136
Tue Apr  2 20:23:37 2019 us=557011   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557102   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557174   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557246   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557315   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557389   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557463   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557542   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557624   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557698   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557773   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557847   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557921   remote_cert_ku[i] = 0
Tue Apr  2 20:23:37 2019 us=557997   remote_cert_eku = 'TLS Web Client Authentication'
Tue Apr  2 20:23:37 2019 us=558071   ssl_flags = 192
Tue Apr  2 20:23:37 2019 us=558141   tls_timeout = 2
Tue Apr  2 20:23:37 2019 us=558210   renegotiate_bytes = -1
Tue Apr  2 20:23:37 2019 us=558276   renegotiate_packets = 0
Tue Apr  2 20:23:37 2019 us=558343   renegotiate_seconds = 3600
Tue Apr  2 20:23:37 2019 us=558411   handshake_window = 60
Tue Apr  2 20:23:37 2019 us=558483   transition_window = 3600
Tue Apr  2 20:23:37 2019 us=558552   single_session = DISABLED
Tue Apr  2 20:23:37 2019 us=558622   push_peer_info = DISABLED
Tue Apr  2 20:23:37 2019 us=558690   tls_exit = DISABLED
Tue Apr  2 20:23:37 2019 us=558763   tls_auth_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=558839   tls_crypt_file = '/etc/openvpn/easy-rsa/pki/ta.key'
Tue Apr  2 20:23:37 2019 us=558928   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559136   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559290   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559423   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559530   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559633   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559726   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559810   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559902   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=559986   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=560060   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=560135   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=560212   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=560291   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=560460   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=560569   pkcs11_protected_authentication = DISABLED
Tue Apr  2 20:23:37 2019 us=560657   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=560741   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=560822   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=560907   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=560987   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561063   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561147   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561245   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561358   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561445   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561529   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561602   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561694   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561769   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561873   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=561987   pkcs11_private_mode = 00000000
Tue Apr  2 20:23:37 2019 us=562069   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562145   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562223   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562316   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562400   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562476   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562548   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562647   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562734   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562805   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562876   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=562947   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=563027   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=563109   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=563186   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=563273   pkcs11_cert_private = DISABLED
Tue Apr  2 20:23:37 2019 us=563361   pkcs11_pin_cache_period = -1
Tue Apr  2 20:23:37 2019 us=563445   pkcs11_id = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=563538   pkcs11_id_management = DISABLED
Tue Apr  2 20:23:37 2019 us=563634   server_network = 0.0.0.0
Tue Apr  2 20:23:37 2019 us=563773   server_netmask = 0.0.0.0
Tue Apr  2 20:23:37 2019 us=563905   server_network_ipv6 = ::
Tue Apr  2 20:23:37 2019 us=564004   server_netbits_ipv6 = 0
Tue Apr  2 20:23:37 2019 us=564098   server_bridge_ip = 192.168.100.12
Tue Apr  2 20:23:37 2019 us=564189   server_bridge_netmask = 255.255.255.0
Tue Apr  2 20:23:37 2019 us=564276   server_bridge_pool_start = 192.168.100.210
Tue Apr  2 20:23:37 2019 us=564358   server_bridge_pool_end = 192.168.100.219
Tue Apr  2 20:23:37 2019 us=564433   push_entry = 'dhcp-option DNS 8.8.8.8'
Tue Apr  2 20:23:37 2019 us=564518   push_entry = 'dhcp-option DNS 8.8.4.4'
Tue Apr  2 20:23:37 2019 us=564613   push_entry = 'block-outside-dns'
Tue Apr  2 20:23:37 2019 us=564714   push_entry = 'redirect-gateway def1'
Tue Apr  2 20:23:37 2019 us=564806   push_entry = 'route-gateway 192.168.100.12'
Tue Apr  2 20:23:37 2019 us=564885   push_entry = 'ping 1800'
Tue Apr  2 20:23:37 2019 us=564965   push_entry = 'ping-restart 3600'
Tue Apr  2 20:23:37 2019 us=565044   ifconfig_pool_defined = ENABLED
Tue Apr  2 20:23:37 2019 us=565139   ifconfig_pool_start = 192.168.100.210
Tue Apr  2 20:23:37 2019 us=565222   ifconfig_pool_end = 192.168.100.219
Tue Apr  2 20:23:37 2019 us=565311   ifconfig_pool_netmask = 255.255.255.0
Tue Apr  2 20:23:37 2019 us=565421   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=565508   ifconfig_pool_persist_refresh_freq = 600
Tue Apr  2 20:23:37 2019 us=565588   ifconfig_ipv6_pool_defined = DISABLED
Tue Apr  2 20:23:37 2019 us=565744   ifconfig_ipv6_pool_base = ::
Tue Apr  2 20:23:37 2019 us=565830   ifconfig_ipv6_pool_netbits = 0
Tue Apr  2 20:23:37 2019 us=565946   n_bcast_buf = 256
Tue Apr  2 20:23:37 2019 us=566054   tcp_queue_limit = 64
Tue Apr  2 20:23:37 2019 us=566130   real_hash_size = 256
Tue Apr  2 20:23:37 2019 us=566203   virtual_hash_size = 256
Tue Apr  2 20:23:37 2019 us=566319   client_connect_script = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=566420   learn_address_script = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=566495   client_disconnect_script = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=566587   client_config_dir = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=566661   ccd_exclusive = DISABLED
Tue Apr  2 20:23:37 2019 us=566734   tmp_dir = '/tmp'
Tue Apr  2 20:23:37 2019 us=566815   push_ifconfig_defined = DISABLED
Tue Apr  2 20:23:37 2019 us=566903   push_ifconfig_local = 0.0.0.0
Tue Apr  2 20:23:37 2019 us=566981   push_ifconfig_remote_netmask = 0.0.0.0
Tue Apr  2 20:23:37 2019 us=567053   push_ifconfig_ipv6_defined = DISABLED
Tue Apr  2 20:23:37 2019 us=567133   push_ifconfig_ipv6_local = ::/0
Tue Apr  2 20:23:37 2019 us=567217   push_ifconfig_ipv6_remote = ::
Tue Apr  2 20:23:37 2019 us=567293   enable_c2c = ENABLED
Tue Apr  2 20:23:37 2019 us=567366   duplicate_cn = DISABLED
Tue Apr  2 20:23:37 2019 us=567434   cf_max = 0
Tue Apr  2 20:23:37 2019 us=567504   cf_per = 0
Tue Apr  2 20:23:37 2019 us=567572   max_clients = 1024
Tue Apr  2 20:23:37 2019 us=567644   max_routes_per_client = 256
Tue Apr  2 20:23:37 2019 us=567719   auth_user_pass_verify_script = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=567793   auth_user_pass_verify_script_via_file = DISABLED
Tue Apr  2 20:23:37 2019 us=567869   auth_token_generate = DISABLED
Tue Apr  2 20:23:37 2019 us=567940   auth_token_lifetime = 0
Tue Apr  2 20:23:37 2019 us=568011   port_share_host = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=568079   port_share_port = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=568147   client = DISABLED
Tue Apr  2 20:23:37 2019 us=568213   pull = DISABLED
Tue Apr  2 20:23:37 2019 us=568278   auth_user_pass_file = '[UNDEF]'
Tue Apr  2 20:23:37 2019 us=568357 OpenVPN 2.4.0 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Oct 14 2018
Tue Apr  2 20:23:37 2019 us=568469 library versions: OpenSSL 1.0.2r  26 Feb 2019, LZO 2.08
Tue Apr  2 20:23:37 2019 us=572844 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Tue Apr  2 20:23:37 2019 us=581505 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Apr  2 20:23:37 2019 us=581759 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Apr  2 20:23:37 2019 us=581855 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Apr  2 20:23:37 2019 us=581948 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Apr  2 20:23:37 2019 us=582043 TLS-Auth MTU parms [ L:1653 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Apr  2 20:23:37 2019 us=583231 TUN/TAP device tap0 opened
Tue Apr  2 20:23:37 2019 us=583412 TUN/TAP TX queue length set to 100
Tue Apr  2 20:23:37 2019 us=583630 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
Tue Apr  2 20:23:37 2019 us=586086 Could not determine IPv4/IPv6 protocol. Using AF_INET
Tue Apr  2 20:23:37 2019 us=586258 Socket Buffers: R=[163840->163840] S=[163840->163840]
Tue Apr  2 20:23:37 2019 us=586372 UDPv4 link local (bound): [AF_INET][undef]:1194
Tue Apr  2 20:23:37 2019 us=586449 UDPv4 link remote: [AF_UNSPEC]
Tue Apr  2 20:23:37 2019 us=586527 GID set to nogroup
Tue Apr  2 20:23:37 2019 us=586612 UID set to nobody
Tue Apr  2 20:23:37 2019 us=586697 MULTI: multi_init called, r=256 v=256
Tue Apr  2 20:23:37 2019 us=586841 IFCONFIG POOL: base=192.168.100.210 size=10, ipv6=0
Tue Apr  2 20:23:37 2019 us=587244 Initialization Sequence Completed

server log connection attempt

Tue Apr  2 20:32:35 2019 us=988068 MULTI: multi_create_instance called
Tue Apr  2 20:32:35 2019 us=988584 REDACTED_SERVER_IP:53486 Re-using SSL/TLS context
Tue Apr  2 20:32:35 2019 us=989400 REDACTED_SERVER_IP:53486 Control Channel MTU parms [ L:1653 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Apr  2 20:32:35 2019 us=989607 REDACTED_SERVER_IP:53486 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
Tue Apr  2 20:32:35 2019 us=989854 REDACTED_SERVER_IP:53486 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Apr  2 20:32:35 2019 us=989963 REDACTED_SERVER_IP:53486 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Apr  2 20:32:35 2019 us=990220 REDACTED_SERVER_IP:53486 TLS: Initial packet from [AF_INET]REDACTED_SERVER_IP:53486, sid=83bbe0e8 8f72490f
Tue Apr  2 20:33:35 2019 us=86726 REDACTED_SERVER_IP:53486 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Apr  2 20:33:35 2019 us=87119 REDACTED_SERVER_IP:53486 TLS Error: TLS handshake failed
Tue Apr  2 20:33:35 2019 us=87757 REDACTED_SERVER_IP:53486 SIGUSR1[soft,tls-error] received, client-instance restarting
Tue Apr  2 20:33:35 2019 us=933976 MULTI: multi_create_instance called
Tue Apr  2 20:33:35 2019 us=934487 82.132.231.206:60724 Re-using SSL/TLS context
Tue Apr  2 20:33:35 2019 us=934943 82.132.231.206:60724 Control Channel MTU parms [ L:1653 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Apr  2 20:33:35 2019 us=935114 82.132.231.206:60724 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
Tue Apr  2 20:33:35 2019 us=935367 82.132.231.206:60724 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Apr  2 20:33:35 2019 us=935483 82.132.231.206:60724 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Apr  2 20:33:35 2019 us=935725 82.132.231.206:60724 TLS: Initial packet from [AF_INET]82.132.231.206:60724, sid=5a5ae30a 94ffa83a
Tue Apr  2 20:34:35 2019 us=206896 82.132.231.206:60724 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Apr  2 20:34:35 2019 us=207276 82.132.231.206:60724 TLS Error: TLS handshake failed
Tue Apr  2 20:34:35 2019 us=207781 82.132.231.206:60724 SIGUSR1[soft,tls-error] received, client-instance restarting

tunnelblick client diag log

*Tunnelblick: macOS 10.14.3; Tunnelblick 3.7.8 (build 5180); Admin user
git commit 75a15f3fcb6de5a66bb6b7175b720645332ee778


Configuration sandalwood

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/sandalwood.tblk:

client
dev tap
proto udp
remote REDACTED_HOSTNAME 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_zNmQirOsoZz3CuvE name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
[Security-related line(s) omitted]
</ca>
<cert>
[Security-related line(s) omitted]
</cert>
<key>
[Security-related line(s) omitted]
</key>
<tls-crypt>
[Security-related line(s) omitted]
</tls-crypt>


================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) UUID <Linked Against>
  150    0 0xffffff7f80ec8000 0xf000     0xf000     com.displaylink.driver.DisplayLinkDriver (2.5) 1DA0A09D-B08A-3A18-8938-262916805E5C <106 6 5 3>

================================================================================

Files in sandalwood.tblk:
      Contents/Resources/config.ovpn

================================================================================

Configuration preferences:

-keychainHasPrivateKey = 1
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-loggingLevel = 4
-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

skipWarningThatIPAddressDidNotChangeAfterConnection = 1
skipWarningAboutPreAuthorizedActivity = 1
launchAtNextLogin = 1
tunnelblickVersionHistory = (
    "3.7.8 (build 5180)"
)
lastLaunchTime = 575926402.109929
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = tunnel
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
NSWindow Frame ConnectingWindow = 445 456 389 187 0 0 1280 777 
detailsWindowFrameVersion = 5180
detailsWindowFrame = {{111, 178}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = log
leftNavSelectedDisplayName = sandalwood
AdvancedWindowTabIdentifier = vpnCredentials
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SULastCheckTime = 2019-04-02 19:33:22 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: macOS 10.14.3; Tunnelblick 3.7.8 (build 5180)
2019-04-02 20:33:33 *Tunnelblick: Attempting connection with sandalwood; Set nameserver = 1025; monitoring connection
2019-04-02 20:33:33 *Tunnelblick: openvpnstart start sandalwood.tblk 60547 1025 0 3 0 1065330 -ptADGNWradsgnw 2.4.6-openssl-1.0.2q
2019-04-02 20:33:35 *Tunnelblick: openvpnstart log:
     Loading tap-signed.kext
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
     
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.6-openssl-1.0.2q/openvpn
          --daemon
          --log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Ssandalwood.tblk-SContents-SResources-Sconfig.ovpn.1025_0_3_0_1065330.60547.openvpn.log
          --cd /Library/Application Support/Tunnelblick/Shared/sandalwood.tblk/Contents/Resources
          --setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5180 3.7.8 (build 5180)"
          --verb 4
          --config /Library/Application Support/Tunnelblick/Shared/sandalwood.tblk/Contents/Resources/config.ovpn
          --setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Shared/sandalwood.tblk/Contents/Resources
          --verb 4
          --cd /Library/Application Support/Tunnelblick/Shared/sandalwood.tblk/Contents/Resources
          --management 127.0.0.1 60547 /Library/Application Support/Tunnelblick/pmhfmpbcgohiddbhbpbdihcodpmdnjkkdickaacm.mip
          --management-query-passwords
          --management-hold
          --script-security 2
          --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
          --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
          --route-pre-down /Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw

2019-04-02 20:33:34 us=818709 Current Parameter Settings:
2019-04-02 20:33:34 us=819049   config = '/Library/Application Support/Tunnelblick/Shared/sandalwood.tblk/Contents/Resources/config.ovpn'
2019-04-02 20:33:34 us=819068   mode = 0
2019-04-02 20:33:34 us=819082   show_ciphers = DISABLED
2019-04-02 20:33:34 us=819095   show_digests = DISABLED
2019-04-02 20:33:34 us=819109   show_engines = DISABLED
2019-04-02 20:33:34 us=819122   genkey = DISABLED
2019-04-02 20:33:34 us=819134   key_pass_file = '[UNDEF]'
2019-04-02 20:33:34 us=819147   show_tls_ciphers = DISABLED
2019-04-02 20:33:34 us=819160   connect_retry_max = 0
2019-04-02 20:33:34 us=819173 Connection profiles [0]:
2019-04-02 20:33:34 us=819186   proto = udp
2019-04-02 20:33:34 us=819199   local = '[UNDEF]'
2019-04-02 20:33:34 us=819212   local_port = '[UNDEF]'
2019-04-02 20:33:34 us=819225   remote = 'REDACTED_HOSTNAME'
2019-04-02 20:33:34 us=819238   remote_port = '1194'
2019-04-02 20:33:34 us=819251   remote_float = DISABLED
2019-04-02 20:33:34 us=819264   bind_defined = DISABLED
2019-04-02 20:33:34 us=819277   bind_local = DISABLED
2019-04-02 20:33:34 us=819290   bind_ipv6_only = DISABLED
2019-04-02 20:33:34 us=819303   connect_retry_seconds = 5
2019-04-02 20:33:34 us=819316   connect_timeout = 120
2019-04-02 20:33:34 us=819328   xormethod = 0
2019-04-02 20:33:34 us=819341   xormask = ''
2019-04-02 20:33:34 us=819354   xormasklen = 0
2019-04-02 20:33:34 us=819367   socks_proxy_server = '[UNDEF]'
2019-04-02 20:33:34 us=819380   socks_proxy_port = '[UNDEF]'
2019-04-02 20:33:34 us=819393   tun_mtu = 1500
2019-04-02 20:33:34 us=819406   tun_mtu_defined = ENABLED
2019-04-02 20:33:34 us=819419   link_mtu = 1500
2019-04-02 20:33:34 us=819432   link_mtu_defined = DISABLED
2019-04-02 20:33:34 us=819445   tun_mtu_extra = 32
2019-04-02 20:33:34 us=819458   tun_mtu_extra_defined = ENABLED
2019-04-02 20:33:34 us=819471   mtu_discover_type = -1
2019-04-02 20:33:34 us=819484   fragment = 0
2019-04-02 20:33:34 us=819496   mssfix = 1450
2019-04-02 20:33:34 us=819509   explicit_exit_notification = 0
2019-04-02 20:33:34 us=819522 Connection profiles END
2019-04-02 20:33:34 us=819535   remote_random = DISABLED
2019-04-02 20:33:34 us=819548   ipchange = '[UNDEF]'
2019-04-02 20:33:34 us=819561   dev = 'tap'
2019-04-02 20:33:34 us=819573   dev_type = '[UNDEF]'
2019-04-02 20:33:34 us=819586   dev_node = '[UNDEF]'
2019-04-02 20:33:34 us=819599   lladdr = '[UNDEF]'
2019-04-02 20:33:34 us=819611   topology = 1
2019-04-02 20:33:34 us=819624   ifconfig_local = '[UNDEF]'
2019-04-02 20:33:34 us=819637   ifconfig_remote_netmask = '[UNDEF]'
2019-04-02 20:33:34 us=819650   ifconfig_noexec = DISABLED
2019-04-02 20:33:34 us=819662   ifconfig_nowarn = DISABLED
2019-04-02 20:33:34 us=819675   ifconfig_ipv6_local = '[UNDEF]'
2019-04-02 20:33:34 us=819688   ifconfig_ipv6_netbits = 0
2019-04-02 20:33:34 us=819701   ifconfig_ipv6_remote = '[UNDEF]'
2019-04-02 20:33:34 us=819714   shaper = 0
2019-04-02 20:33:34 us=819727   mtu_test = 0
2019-04-02 20:33:34 us=819740   mlock = DISABLED
2019-04-02 20:33:34 us=819753   keepalive_ping = 0
2019-04-02 20:33:34 us=819768   keepalive_timeout = 0
2019-04-02 20:33:34 us=819782   inactivity_timeout = 0
2019-04-02 20:33:34 us=819795   ping_send_timeout = 0
2019-04-02 20:33:34 us=819808   ping_rec_timeout = 0
2019-04-02 20:33:34 us=819821   ping_rec_timeout_action = 0
2019-04-02 20:33:34 us=819834   ping_timer_remote = DISABLED
2019-04-02 20:33:34 us=819846   remap_sigusr1 = 0
2019-04-02 20:33:34 us=819859   persist_tun = ENABLED
2019-04-02 20:33:34 us=819872   persist_local_ip = DISABLED
2019-04-02 20:33:34 us=819885   persist_remote_ip = DISABLED
2019-04-02 20:33:34 us=819898   persist_key = ENABLED
2019-04-02 20:33:34 us=819911   passtos = DISABLED
2019-04-02 20:33:34 us=819935   resolve_retry_seconds = 1000000000
2019-04-02 20:33:34 us=819946   resolve_in_advance = DISABLED
2019-04-02 20:33:34 us=819956   username = '[UNDEF]'
2019-04-02 20:33:34 us=819966   groupname = '[UNDEF]'
2019-04-02 20:33:34 us=819976   chroot_dir = '[UNDEF]'
2019-04-02 20:33:34 us=819986   cd_dir = '/Library/Application Support/Tunnelblick/Shared/sandalwood.tblk/Contents/Resources'
2019-04-02 20:33:34 us=819997   writepid = '[UNDEF]'
2019-04-02 20:33:34 us=820007   up_script = '/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw'
2019-04-02 20:33:34 us=820017   down_script = '/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw'
2019-04-02 20:33:34 us=820027   down_pre = DISABLED
2019-04-02 20:33:34 us=820037   up_restart = DISABLED
2019-04-02 20:33:34 us=820047   up_delay = DISABLED
2019-04-02 20:33:34 us=820057   daemon = ENABLED
2019-04-02 20:33:34 us=820067   inetd = 0
2019-04-02 20:33:34 us=820077   log = ENABLED
2019-04-02 20:33:34 us=820087   suppress_timestamps = DISABLED
2019-04-02 20:33:34 us=820097   machine_readable_output = DISABLED
2019-04-02 20:33:34 us=820106   nice = 0
2019-04-02 20:33:34 us=820116   verbosity = 4
2019-04-02 20:33:34 us=820126   mute = 0
2019-04-02 20:33:34 us=820136   status_file = '[UNDEF]'
2019-04-02 20:33:34 us=820146   status_file_version = 1
2019-04-02 20:33:34 us=820156   status_file_update_freq = 60
2019-04-02 20:33:34 us=820166   occ = ENABLED
2019-04-02 20:33:34 us=820176   rcvbuf = 0
2019-04-02 20:33:34 us=820186   sndbuf = 0
2019-04-02 20:33:34 us=820196   sockflags = 0
2019-04-02 20:33:34 us=820205   fast_io = DISABLED
2019-04-02 20:33:34 us=820215   comp.alg = 0
2019-04-02 20:33:34 us=820225   comp.flags = 0
2019-04-02 20:33:34 us=820235   route_script = '[UNDEF]'
2019-04-02 20:33:34 us=820245   route_default_gateway = '[UNDEF]'
2019-04-02 20:33:34 us=820256   route_default_metric = 0
2019-04-02 20:33:34 us=820266   route_noexec = DISABLED
2019-04-02 20:33:34 us=820277   route_delay = 0
2019-04-02 20:33:34 us=820288   route_delay_window = 30
2019-04-02 20:33:34 us=820298   route_delay_defined = DISABLED
2019-04-02 20:33:34 us=820309   route_nopull = DISABLED
2019-04-02 20:33:34 us=820319   route_gateway_via_dhcp = DISABLED
2019-04-02 20:33:34 us=820329   allow_pull_fqdn = DISABLED
2019-04-02 20:33:34 us=820340   management_addr = '127.0.0.1'
2019-04-02 20:33:34 us=820351   management_port = '60547'
2019-04-02 20:33:34 us=820361   management_user_pass = '/Library/Application Support/Tunnelblick/pmhfmpbcgohiddbhbpbdihcodpmdnjkkdickaacm.mip'
2019-04-02 20:33:34 us=820372   management_log_history_cache = 250
2019-04-02 20:33:34 us=820383   management_echo_buffer_size = 100
2019-04-02 20:33:34 us=820393   management_write_peer_info_file = '[UNDEF]'
2019-04-02 20:33:34 us=820404   management_client_user = '[UNDEF]'
2019-04-02 20:33:34 us=820414   management_client_group = '[UNDEF]'
2019-04-02 20:33:34 us=820425   management_flags = 6
2019-04-02 20:33:34 us=820437   shared_secret_file = '[UNDEF]'
2019-04-02 20:33:34 us=820448   key_direction = not set
2019-04-02 20:33:34 us=820459   ciphername = 'AES-256-CBC'
2019-04-02 20:33:34 us=820469   ncp_enabled = ENABLED
2019-04-02 20:33:34 us=820480   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
2019-04-02 20:33:34 us=820494   authname = 'SHA256'
2019-04-02 20:33:34 us=820505   prng_hash = 'SHA1'
2019-04-02 20:33:34 us=820516   prng_nonce_secret_len = 16
2019-04-02 20:33:34 us=820526   keysize = 0
2019-04-02 20:33:34 us=820536   engine = DISABLED
2019-04-02 20:33:34 us=820547   replay = ENABLED
2019-04-02 20:33:34 us=820557   mute_replay_warnings = DISABLED
2019-04-02 20:33:34 us=820567   replay_window = 64
2019-04-02 20:33:34 us=820589   replay_time = 15
2019-04-02 20:33:34 us=820600   packet_id_file = '[UNDEF]'
2019-04-02 20:33:34 us=820610   use_iv = ENABLED
2019-04-02 20:33:34 us=820620   test_crypto = DISABLED
2019-04-02 20:33:34 us=820631   tls_server = DISABLED
2019-04-02 20:33:34 us=820641   tls_client = ENABLED
2019-04-02 20:33:34 us=820652   key_method = 2
2019-04-02 20:33:34 us=820662   ca_file = '[[INLINE]]'
2019-04-02 20:33:34 us=820673   ca_path = '[UNDEF]'
2019-04-02 20:33:34 us=820683   dh_file = '[UNDEF]'
2019-04-02 20:33:34 us=820693   cert_file = '[[INLINE]]'
2019-04-02 20:33:34 us=820704   extra_certs_file = '[UNDEF]'
2019-04-02 20:33:34 us=820714   priv_key_file = '[[INLINE]]'
2019-04-02 20:33:34 us=820724   pkcs12_file = '[UNDEF]'
2019-04-02 20:33:34 us=820735   cipher_list = '[UNDEF]'
2019-04-02 20:33:34 us=820745   tls_cert_profile = '[UNDEF]'
2019-04-02 20:33:34 us=820755   tls_verify = '[UNDEF]'
2019-04-02 20:33:34 us=820765   tls_export_cert = '[UNDEF]'
2019-04-02 20:33:34 us=820776   verify_x509_type = 2
2019-04-02 20:33:34 us=820786   verify_x509_name = 'server_zNmQirOsoZz3CuvE'
2019-04-02 20:33:34 us=820796   crl_file = '[UNDEF]'
2019-04-02 20:33:34 us=820806   ns_cert_type = 0
2019-04-02 20:33:34 us=820817   remote_cert_ku[i] = 65535
2019-04-02 20:33:34 us=820827   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820838   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820848   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820858   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820869   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820879   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820889   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820899   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820909   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820920   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820930   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820940   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820950   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820960   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820971   remote_cert_ku[i] = 0
2019-04-02 20:33:34 us=820981   remote_cert_eku = 'TLS Web Server Authentication'
2019-04-02 20:33:34 us=820991   ssl_flags = 192
2019-04-02 20:33:34 us=821002   tls_timeout = 2
2019-04-02 20:33:34 us=821012   renegotiate_bytes = -1
2019-04-02 20:33:34 us=821023   renegotiate_packets = 0
2019-04-02 20:33:34 us=821033   renegotiate_seconds = 3600
2019-04-02 20:33:34 us=821043   handshake_window = 60
2019-04-02 20:33:34 us=821054   transition_window = 3600
2019-04-02 20:33:34 us=821065   single_session = DISABLED
2019-04-02 20:33:34 us=821075   push_peer_info = DISABLED
2019-04-02 20:33:34 us=821085   tls_exit = DISABLED
2019-04-02 20:33:34 us=821096   tls_auth_file = '[UNDEF]'
2019-04-02 20:33:34 us=821106   tls_crypt_file = '[[INLINE]]'
2019-04-02 20:33:34 us=821117   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821127   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821138   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821148   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821158   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821169   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821179   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821189   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821200   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821210   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821220   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821231   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821241   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821269   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821280   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821291   pkcs11_protected_authentication = DISABLED
2019-04-02 20:33:34 us=821302   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821313   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821323   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821333   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821344   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821355   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821366   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821376   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821386   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821396   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821407   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821417   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821427   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821438   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821448   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821459   pkcs11_private_mode = 00000000
2019-04-02 20:33:34 us=821469   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821479   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821490   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821500   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821510   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821521   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821531   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821541   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821552   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821562   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821572   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821582   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821593   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821603   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821613   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821624   pkcs11_cert_private = DISABLED
2019-04-02 20:33:34 us=821634   pkcs11_pin_cache_period = -1
2019-04-02 20:33:34 us=821644   pkcs11_id = '[UNDEF]'
2019-04-02 20:33:34 us=821655   pkcs11_id_management = DISABLED
2019-04-02 20:33:34 us=821675   server_network = 0.0.0.0
2019-04-02 20:33:34 us=821686   server_netmask = 0.0.0.0
2019-04-02 20:33:34 us=821705   server_network_ipv6 = ::
2019-04-02 20:33:34 us=821715   server_netbits_ipv6 = 0
2019-04-02 20:33:34 us=821726   server_bridge_ip = 0.0.0.0
2019-04-02 20:33:34 us=821738   server_bridge_netmask = 0.0.0.0
2019-04-02 20:33:34 us=821749   server_bridge_pool_start = 0.0.0.0
2019-04-02 20:33:34 us=821760   server_bridge_pool_end = 0.0.0.0
2019-04-02 20:33:34 us=821770   ifconfig_pool_defined = DISABLED
2019-04-02 20:33:34 us=821781   ifconfig_pool_start = 0.0.0.0
2019-04-02 20:33:34 us=821792   ifconfig_pool_end = 0.0.0.0
2019-04-02 20:33:34 us=821803   ifconfig_pool_netmask = 0.0.0.0
2019-04-02 20:33:34 us=821814   ifconfig_pool_persist_filename = '[UNDEF]'
2019-04-02 20:33:34 us=821824   ifconfig_pool_persist_refresh_freq = 600
2019-04-02 20:33:34 us=821835   ifconfig_ipv6_pool_defined = DISABLED
2019-04-02 20:33:34 us=821846   ifconfig_ipv6_pool_base = ::
2019-04-02 20:33:34 us=821856   ifconfig_ipv6_pool_netbits = 0
2019-04-02 20:33:34 us=821867   n_bcast_buf = 256
2019-04-02 20:33:34 us=821877   tcp_queue_limit = 64
2019-04-02 20:33:34 us=821887   real_hash_size = 256
2019-04-02 20:33:34 us=821897   virtual_hash_size = 256
2019-04-02 20:33:34 us=821908   client_connect_script = '[UNDEF]'
2019-04-02 20:33:34 us=821929   learn_address_script = '[UNDEF]'
2019-04-02 20:33:34 us=821940   client_disconnect_script = '[UNDEF]'
2019-04-02 20:33:34 us=821951   client_config_dir = '[UNDEF]'
2019-04-02 20:33:34 us=821961   ccd_exclusive = DISABLED
2019-04-02 20:33:34 us=821972   tmp_dir = '/var/folders/2f/6b_s_h1x2v5_xsb79fjctzb40000gn/T/'
2019-04-02 20:33:34 us=821982   push_ifconfig_defined = DISABLED
2019-04-02 20:33:34 us=821993   push_ifconfig_local = 0.0.0.0
2019-04-02 20:33:34 us=822005   push_ifconfig_remote_netmask = 0.0.0.0
2019-04-02 20:33:34 us=822015   push_ifconfig_ipv6_defined = DISABLED
2019-04-02 20:33:34 us=822026   push_ifconfig_ipv6_local = ::/0
2019-04-02 20:33:34 us=822037   push_ifconfig_ipv6_remote = ::
2019-04-02 20:33:34 us=822047   enable_c2c = DISABLED
2019-04-02 20:33:34 us=822058   duplicate_cn = DISABLED
2019-04-02 20:33:34 us=822068   cf_max = 0
2019-04-02 20:33:34 us=822078   cf_per = 0
2019-04-02 20:33:34 us=822089   max_clients = 1024
2019-04-02 20:33:34 us=822099   max_routes_per_client = 256
2019-04-02 20:33:34 us=822110   auth_user_pass_verify_script = '[UNDEF]'
2019-04-02 20:33:34 us=822120   auth_user_pass_verify_script_via_file = DISABLED
2019-04-02 20:33:34 us=822131   auth_token_generate = DISABLED
2019-04-02 20:33:34 us=822141   auth_token_lifetime = 0
2019-04-02 20:33:34 us=822151   port_share_host = '[UNDEF]'
2019-04-02 20:33:34 us=822162   port_share_port = '[UNDEF]'
2019-04-02 20:33:34 us=822172   client = ENABLED
2019-04-02 20:33:34 us=822182   pull = ENABLED
2019-04-02 20:33:34 us=822192   auth_user_pass_file = '[UNDEF]'
2019-04-02 20:33:34 us=822204 OpenVPN 2.4.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Nov 29 2018
2019-04-02 20:33:34 us=822221 library versions: OpenSSL 1.0.2q  20 Nov 2018, LZO 2.10
2019-04-02 20:33:34 us=823267 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:60547
2019-04-02 20:33:34 us=823815 Need hold release from management interface, waiting...
2019-04-02 20:33:34 *Tunnelblick: openvpnstart starting OpenVPN
2019-04-02 20:33:35 *Tunnelblick: Established communication with OpenVPN
2019-04-02 20:33:35 us=251095 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:60547
2019-04-02 20:33:35 us=291489 MANAGEMENT: CMD 'pid'
2019-04-02 20:33:35 us=291978 MANAGEMENT: CMD 'auth-retry interact'
2019-04-02 20:33:35 us=292399 MANAGEMENT: CMD 'state on'
2019-04-02 20:33:35 us=292824 MANAGEMENT: CMD 'state'
2019-04-02 20:33:35 us=293279 MANAGEMENT: CMD 'bytecount 1'
2019-04-02 20:33:35 >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2019-04-02 20:33:35 us=453680 MANAGEMENT: CMD 'hold release'
2019-04-02 20:33:35 us=454888 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2019-04-02 20:33:35 *Tunnelblick: Obtained passphrase from the Keychain
2019-04-02 20:33:35 us=482851 MANAGEMENT: CMD 'password [...]'
2019-04-02 20:33:35 us=492189 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2019-04-02 20:33:35 us=492660 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2019-04-02 20:33:35 us=493102 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2019-04-02 20:33:35 us=493492 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2019-04-02 20:33:35 us=493997 Control Channel MTU parms [ L:1653 D:1156 EF:94 EB:0 ET:0 EL:3 ]
2019-04-02 20:33:35 us=494531 MANAGEMENT: >STATE:1554233615,RESOLVE,,,,,,
2019-04-02 20:33:35 us=898972 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2019-04-02 20:33:35 us=899419 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
2019-04-02 20:33:35 us=900202 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
2019-04-02 20:33:35 us=900897 TCP/UDP: Preserving recently used remote address: [AF_INET]REDACTED_IPADDR:1194
2019-04-02 20:33:35 us=901396 Socket Buffers: R=[786896->786896] S=[9216->9216]
2019-04-02 20:33:35 us=902253 UDP link local: (not bound)
2019-04-02 20:33:35 us=902725 UDP link remote: [AF_INET]REDACTED_IPADDR:1194
2019-04-02 20:33:35 us=903591 MANAGEMENT: >STATE:1554233615,WAIT,,,,,,
2019-04-02 20:33:58 *Tunnelblick: Disconnecting; VPN Details??? window disconnect button pressed
2019-04-02 20:33:58 *Tunnelblick: No 'pre-disconnect.sh' script to execute
2019-04-02 20:33:58 *Tunnelblick: Disconnecting using 'kill'
2019-04-02 20:33:58 us=983806 event_wait : Interrupted system call (code=4)
2019-04-02 20:33:58 us=984438 TCP/UDP: Closing socket
2019-04-02 20:33:58 us=985306 SIGTERM[hard,] received, process exiting
2019-04-02 20:33:58 us=985662 MANAGEMENT: >STATE:1554233638,EXITING,SIGTERM,,,,,
2019-04-02 20:34:00 *Tunnelblick: No 'post-disconnect.sh' script to execute
2019-04-02 20:34:00 *Tunnelblick: Expected disconnection occurred.

================================================================================

"Sanitized" full configuration file

client
dev tap
proto udp
remote REDACTED_HOSTNAME 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_zNmQirOsoZz3CuvE name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
 [Security-related line(s) omitted]
</ca>
<cert>
 [Security-related line(s) omitted]
</cert>
<key>
 [Security-related line(s) omitted]
</key>
<tls-crypt>
 [Security-related line(s) omitted]
</tls-crypt>



================================================================================

Network services:

An asterisk (*) denotes that a network service is disabled.
Thunderbolt Ethernet
Thunderbolt Bridge
Wi-Fi
iPhone USB
Bluetooth PAN

Wi-Fi Power (en0): On

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
	inet 127.0.0.1 netmask 0xff000000 
	inet6 ::1 prefixlen 128 
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
	nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
EHC26: flags=0<> mtu 0
EHC29: flags=0<> mtu 0
XHC20: flags=0<> mtu 0
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether 54:26:96:de:60:0b 
	inet6 fe80::44f:d74d:68e3:441e%en0 prefixlen 64 secured scopeid 0x7 
	inet 172.20.10.2 netmask 0xfffffff0 broadcast 172.20.10.15
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect
	status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
	ether 06:26:96:de:60:0b 
	media: autoselect
	status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
	ether 62:ba:d7:e3:6b:74 
	inet6 fe80::60ba:d7ff:fee3:6b74%awdl0 prefixlen 64 scopeid 0x9 
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect
	status: active
en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	options=60<TSO4,TSO6>
	ether 32:00:1a:d8:55:80 
	media: autoselect <full-duplex>
	status: inactive
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	options=60<TSO4,TSO6>
	ether 32:00:1a:d8:55:81 
	media: autoselect <full-duplex>
	status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=63<RXCSUM,TXCSUM,TSO4,TSO6>
	ether 32:00:1a:d8:55:81 
	Configuration:
		id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
		maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
		root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
		ipfilter disabled flags 0x2
	member: en2 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 11 priority 0 path cost 0
	member: en1 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 10 priority 0 path cost 0
	nd6 options=201<PERFORMNUD,DAD>
	media: <unknown type>
	status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
	inet6 fe80::371a:889f:6b46:4559%utun0 prefixlen 64 scopeid 0xd 
	nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
	inet6 fe80::3a53:a700:42da:acff%utun1 prefixlen 64 scopeid 0xe 
	nd6 options=201<PERFORMNUD,DAD>

================================================================================

Console Log:

2019-04-02 20:29:52 Tunnelblick[434] applicationShouldTerminate: termination for unknown reason, probably Command-Q; delayed until 'shutdownTunnelblick' finishes
2019-04-02 20:29:52 Tunnelblick[434] Set 'expect disconnect 0 ALL'
2019-04-02 20:29:52 Tunnelblick[434] Finished shutting down Tunnelblick; allowing termination
2019-04-02 20:29:56 Tunnelblick[1356] Tunnelblick: macOS 10.14.3; Tunnelblick 3.7.8 (build 5180)
2019-04-02 20:29:57 Tunnelblick[1356] DEPRECATED USE in libdispatch client: dispatch source activated with no event handler set; set a breakpoint on _dispatch_bug_deprecated to debug
2019-04-02 20:29:57 Tunnelblick[1356] Sparkle: ===== Tunnelblick =====
2019-04-02 20:29:57 Tunnelblick[1356] Sparkle: Verified appcast signature
2019-04-02 20:29:57 Tunnelblick[1356] Sparkle: Verified appcast signature
2019-04-02 20:32:33 Tunnelblick[1356] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SShared-Ssandalwood-Dtblk-SContents-SResources'
2019-04-02 20:33:00 Tunnelblick[1356] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Ssandalwood-Dtblk-SContents-SResources'
2019-04-02 20:33:15 Tunnelblick[1356] applicationShouldTerminate: termination for unknown reason, probably Command-Q; delayed until 'shutdownTunnelblick' finishes
2019-04-02 20:33:15 Tunnelblick[1356] Set 'expect disconnect 0 ALL'
2019-04-02 20:33:15 Tunnelblick[1356] Finished shutting down Tunnelblick; allowing termination
2019-04-02 20:33:21 Tunnelblick[1406] Tunnelblick: macOS 10.14.3; Tunnelblick 3.7.8 (build 5180)
2019-04-02 20:33:21 Tunnelblick[1406] DEPRECATED USE in libdispatch client: dispatch source activated with no event handler set; set a breakpoint on _dispatch_bug_deprecated to debug
2019-04-02 20:33:22 Tunnelblick[1406] Sparkle: ===== Tunnelblick =====
2019-04-02 20:33:22 Tunnelblick[1406] Sparkle: Verified appcast signature
2019-04-02 20:33:33 Tunnelblick[1406] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SShared-Ssandalwood-Dtblk-SContents-SResources'
2019-04-02 20:33:58 Tunnelblick[1406] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Ssandalwood-Dtblk-SContents-SResources'

TinCanTech

Please add your server routing table.

Also, we find --verb 4 to be the better level.

blik

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default www.routerlogin 0.0.0.0 UG 209 0 0 br0
link-local 0.0.0.0 255.255.0.0 U 208 0 0 tap0
192.168.100.0 0.0.0.0 255.255.255.0 U 209 0 0 br0

TinCanTech

Please repost your server and client logs at verb 4.

See example here: https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

blik

I've edited the logs in my original opening post (to avoid confusion/distraction on the older copy)

TinCanTech

I would prefer to read logs using the [ code ] BBCode please.

blik

Logs updated in original post

TinCanTech

blik wrote Tue Apr 2 20:32:35 2019 us=990220 REDACTED_SERVER_IP:53486 TLS: Initial packet from [AF_INET]REDACTED_SERVER_IP:53486, sid=83bbe0e8 8f72490f
Tue Apr 2 20:33:35 2019 us=86726 REDACTED_SERVER_IP:53486 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) T

blik wrote 2019-04-02 20:33:35 us=902725 UDP link remote: [AF_INET]REDACTED_IPADDR:1194
2019-04-02 20:33:35 us=903591 MANAGEMENT: >STATE:1554233615,WAIT,,,,,,
2019-04-02 20:33:58 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed

This looks like you just quit but that is probably not the case ..

I don't know what you have done wrong, check your network and routing ..

blik

Yes, after 25 seconds of the client just waiting (and having seen this several times previously) I did quit on the client

But you can see on the client that the connection occurred and just 'hung' waiting

2019-04-02 20:33:35 us=251095 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:60547
2019-04-02 20:33:35 us=291489 MANAGEMENT: CMD 'pid'
2019-04-02 20:33:35 us=291978 MANAGEMENT: CMD 'auth-retry interact'
2019-04-02 20:33:35 us=292399 MANAGEMENT: CMD 'state on'
2019-04-02 20:33:35 us=292824 MANAGEMENT: CMD 'state'
2019-04-02 20:33:35 us=293279 MANAGEMENT: CMD 'bytecount 1'
2019-04-02 20:33:35 >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2019-04-02 20:33:35 us=453680 MANAGEMENT: CMD 'hold release'
2019-04-02 20:33:35 us=454888 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2019-04-02 20:33:35 *Tunnelblick: Obtained passphrase from the Keychain
2019-04-02 20:33:35 us=482851 MANAGEMENT: CMD 'password [...]'
2019-04-02 20:33:35 us=492189 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2019-04-02 20:33:35 us=492660 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2019-04-02 20:33:35 us=493102 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2019-04-02 20:33:35 us=493492 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2019-04-02 20:33:35 us=493997 Control Channel MTU parms [ L:1653 D:1156 EF:94 EB:0 ET:0 EL:3 ]
2019-04-02 20:33:35 us=494531 MANAGEMENT: >STATE:1554233615,RESOLVE,,,,,,
2019-04-02 20:33:35 us=898972 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2019-04-02 20:33:35 us=899419 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
2019-04-02 20:33:35 us=900202 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
2019-04-02 20:33:35 us=900897 TCP/UDP: Preserving recently used remote address: [AF_INET]REDACTED_IPADDR:1194
2019-04-02 20:33:35 us=901396 Socket Buffers: R=[786896->786896] S=[9216->9216]
2019-04-02 20:33:35 us=902253 UDP link local: (not bound)
2019-04-02 20:33:35 us=902725 UDP link remote: [AF_INET]REDACTED_IPADDR:1194
2019-04-02 20:33:35 us=903591 MANAGEMENT: >STATE:1554233615,WAIT,,,,,,

The server, at exactly the same time received the connection but didn't appear to do anything

Tue Apr 2 20:32:35 2019 us=988068 MULTI: multi_create_instance called
Tue Apr 2 20:32:35 2019 us=988584 REDACTED_SERVER_IP:53486 Re-using SSL/TLS context
Tue Apr 2 20:32:35 2019 us=989400 REDACTED_SERVER_IP:53486 Control Channel MTU parms [ L:1653 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Apr 2 20:32:35 2019 us=989607 REDACTED_SERVER_IP:53486 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
Tue Apr 2 20:32:35 2019 us=989854 REDACTED_SERVER_IP:53486 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Apr 2 20:32:35 2019 us=989963 REDACTED_SERVER_IP:53486 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Apr 2 20:32:35 2019 us=990220 REDACTED_SERVER_IP:53486 TLS: Initial packet from [AF_INET]REDACTED_SERVER_IP:53486, sid=83bbe0e8 8f72490f
Tue Apr 2 20:33:35 2019 us=86726 REDACTED_SERVER_IP:53486 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Apr 2 20:33:35 2019 us=87119 REDACTED_SERVER_IP:53486 TLS Error: TLS handshake failed
Tue Apr 2 20:33:35 2019 us=87757 REDACTED_SERVER_IP:53486 SIGUSR1[soft,tls-error] received, client-instance restarting
Tue Apr 2 20:33:35 2019 us=933976 MULTI: multi_create_instance called
Tue Apr 2 20:33:35 2019 us=934487 82.132.231.206:60724 Re-using SSL/TLS context
Tue Apr 2 20:33:35 2019 us=934943 82.132.231.206:60724 Control Channel MTU parms [ L:1653 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Apr 2 20:33:35 2019 us=935114 82.132.231.206:60724 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
Tue Apr 2 20:33:35 2019 us=935367 82.132.231.206:60724 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
Tue Apr 2 20:33:35 2019 us=935483 82.132.231.206:60724 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1601,tun-mtu 1532,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
Tue Apr 2 20:33:35 2019 us=935725 82.132.231.206:60724 TLS: Initial packet from [AF_INET]82.132.231.206:60724, sid=5a5ae30a 94ffa83a

I've checked all the networking and routing and nothing seems to be wrong.

Would appreciate any guidance for how I dig deeper on this