bvillers@tampabay.rr.com
Newbie here...
2.4.7 server on CentOS7.
Certs, keys, compression, and ciphers seem fine. logging into server works.
Firewall NAT rule: NAT port 1194 to OpenVPN server port 1194.
Tap, udp
I see no errors. But, can ping nothing on LAN from remote client.
Can ping any address from OpenVPN server.
###############
Client config:
local machineNamexxx
port 1194
client
dev tap
proto udp
remote external-address-URL 1194
auth-user-pass
resolv-retry infinite
persist-key
persist-tun
capath "C:\\Program Files\\OpenVPN\\config\\"
ca ca.crt
cert DESKTOP-xxxxxx.crt
key DESKTOP-xxxxxxxxxxx.key
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
auth SHA256
compress lz4-v2
status openvpn-status.log
log openvpn.log
verb 4
###################################################
Server Config:
local xxx.yyy.zzz.111
port 1194
proto udp
dev tap
cd /etc/openvpn
server-bridge x.y.z.0 255.255.255.0 x.y.z.27 x.y.z.33
push "route-gateway x.y.z.1"
push "route x.y.z.0 255.255.255.0"
writepid /etc/openvpn/openvpn.1.pid
reneg-sec 3600
verify-client-cert require
plugin /usr/lib64/ope...in-auth-pam.so login
ca /usr/sh...ki/ca.crt
cert /usr/...i/issued/CMEVPN.crt
key /usr/sha...ivate/srv.key
dh /usr/s.../dh.pem
topology subnet
push "dhcp-option DNS x.y.z.1"
push "dhcp-option DNS x.y.z.2"
push "dhcp-option DNS x.y.z.3"
ifconfig-pool-persist ipp.txt
remote-cert-tls client
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
auth SHA256
compress lz4-v2
push "compress lz4-v2"
max-clients 35
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 6
explicit-exit-notify 1
askpass /.../pa
####################################################
Server Log excerpt:
Current Parameter Settings:
config = 'server.conf'
mode = 1
persist_config = DISABLED
persist_mode = 1
show_ciphers = DISABLED
show_digests = DISABLED
show_engines = DISABLED
genkey = DISABLED
key_pass_file = '/etc/ope'
show_tls_ciphers = DISABLED
connect_retry_max = 0
Connection profiles [0]:
proto = udp
local = 'x.y.z.55'
local_port = '1194'
remote = '[UNDEF]'
remote_port = '1194'
remote_float = DISABLED
bind_defined = DISABLED
bind_local = ENABLED
bind_ipv6_only = DISABLED
connect_retry_seconds = 5
connect_timeout = 120
socks_proxy_server = '[UNDEF]'
socks_proxy_port = '[UNDEF]'
tun_mtu = 1500
tun_mtu_defined = ENABLED
link_mtu = 1500
link_mtu_defined = DISABLED
tun_mtu_extra = 32
tun_mtu_extra_defined = ENABLED
mtu_discover_type = -1
fragment = 0
mssfix = 1450
explicit_exit_notification = 1
Connection profiles END
remote_random = DISABLED
ipchange = '[UNDEF]'
dev = 'tap'
dev_type = '[UNDEF]'
dev_node = '[UNDEF]'
lladdr = '[UNDEF]'
topology = 3
ifconfig_local = '[UNDEF]'
ifconfig_remote_netmask = '[UNDEF]'
ifconfig_noexec = DISABLED
ifconfig_nowarn = DISABLED
ifconfig_ipv6_local = '[UNDEF]'
ifconfig_ipv6_netbits = 0
ifconfig_ipv6_remote = '[UNDEF]'
shaper = 0
mtu_test = 0
mlock = DISABLED
keepalive_ping = 10
keepalive_timeout = 120
inactivity_timeout = 0
ping_send_timeout = 10
ping_rec_timeout = 240
ping_rec_timeout_action = 2
ping_timer_remote = DISABLED
remap_sigusr1 = 0
persist_tun = ENABLED
persist_local_ip = DISABLED
persist_remote_ip = DISABLED
persist_key = ENABLED
passtos = DISABLED
resolve_retry_seconds = 1000000000
resolve_in_advance = DISABLED
username = 'nobody'
groupname = 'nobody'
chroot_dir = '[UNDEF]'
cd_dir = '/etc/openvpn'
selinux_context = '[UNDEF]'
writepid = '/etc/openvpn/openvpn.1.pid'
up_script = '[UNDEF]'
down_script = '[UNDEF]'
down_pre = DISABLED
up_restart = DISABLED
up_delay = DISABLED
daemon = DISABLED
inetd = 0
log = ENABLED
suppress_timestamps = DISABLED
machine_readable_output = DISABLED
nice = 0
verbosity = 6
mute = 0
gremlin = 0
status_file = 'openvpn-status.log'
status_file_version = 1
status_file_update_freq = 60
occ = ENABLED
rcvbuf = 0
sndbuf = 0
mark = 0
sockflags = 0
fast_io = DISABLED
comp.alg = 11
comp.flags = 0
route_script = '[UNDEF]'
route_default_gateway = '[UNDEF]'
route_default_metric = 0
route_noexec = DISABLED
route_delay = 0
route_delay_window = 30
route_delay_defined = DISABLED
route_nopull = DISABLED
route_gateway_via_dhcp = DISABLED
allow_pull_fqdn = DISABLED
management_addr = '[UNDEF]'
management_port = '[UNDEF]'
management_user_pass = '[UNDEF]'
management_log_history_cache = 250
management_echo_buffer_size = 100
management_write_peer_info_file = '[UNDEF]'
management_client_user = '[UNDEF]'
management_client_group = '[UNDEF]'
management_flags = 0
plugin[0] /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so '[/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so] [login]'
shared_secret_file = '[UNDEF]'
key_direction = 0
ciphername = 'AES-256-CBC'
ncp_enabled = ENABLED
ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
authname = 'SHA256'
prng_hash = 'SHA1'
prng_nonce_secret_len = 16
keysize = 0
engine = DISABLED
replay = ENABLED
mute_replay_warnings = DISABLED
replay_window = 64
replay_time = 15
packet_id_file = '[UNDEF]'
use_iv = ENABLED
test_crypto = DISABLED
tls_server = ENABLED
tls_client = DISABLED
key_method = 2
ca_file = '/usr/.../pki/ca.crt'
ca_path = '[UNDEF]'
dh_file = '/usr/.../pki/dh.pem'
cert_file = '/usr/.../pki/issued/srvr.crt'
extra_certs_file = '[UNDEF]'
priv_key_file = '/usr/.../pki/private/srvr.key'
pkcs12_file = '[UNDEF]'
cipher_list = '[UNDEF]'
cipher_list_tls13 = '[UNDEF]'
tls_cert_profile = '[UNDEF]'
tls_verify = '[UNDEF]'
tls_export_cert = '[UNDEF]'
verify_x509_type = 0
verify_x509_name = '[UNDEF]'
crl_file = '[UNDEF]'
ns_cert_type = 0
remote_cert_ku = 65535
remote_cert_eku = 'TLS Web Client Authentication'
ssl_flags = 0
tls_timeout = 2
renegotiate_bytes = -1
renegotiate_packets = 0
renegotiate_seconds = 3600
handshake_window = 60
transition_window = 3600
single_session = DISABLED
push_peer_info = DISABLED
tls_exit = DISABLED
tls_auth_file = 'ta.key'
tls_crypt_file = '[UNDEF]'
pkcs11_protected_authentication = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_pin_cache_period = -1
pkcs11_id = '[UNDEF]'
pkcs11_id_management = DISABLED
server_network = 0.0.0.0
server_netmask = 0.0.0.0
server_network_ipv6 = ::
server_netbits_ipv6 = 0
server_bridge_ip = x.y.z.1
server_bridge_netmask = 255.255.255.0
server_bridge_pool_start = x.y.z.27
server_bridge_pool_end = x.y.z.33
push_entry = 'route-gateway x.y.z.1'
push_entry = 'route x.y.z.1 255.255.255.0'
push_entry = 'dhcp-option DNS x.y.z.250'
push_entry = 'dhcp-option DNS x.y.z.140'
push_entry = 'dhcp-option DNS x.y.z.253'
push_entry = 'compress lz4-v2'
push_entry = 'route-gateway x.y.z.1'
push_entry = 'ping 10'
push_entry = 'ping-restart 120'
ifconfig_pool_defined = ENABLED
ifconfig_pool_start = x.y.z.27
ifconfig_pool_end = x.y.z.33
ifconfig_pool_netmask = 255.255.255.0
ifconfig_pool_persist_filename = 'ipp.txt'
ifconfig_pool_persist_refresh_freq = 600
ifconfig_ipv6_pool_defined = DISABLED
ifconfig_ipv6_pool_base = ::
ifconfig_ipv6_pool_netbits = 0
n_bcast_buf = 256
tcp_queue_limit = 64
real_hash_size = 256
virtual_hash_size = 256
client_connect_script = '[UNDEF]'
learn_address_script = '[UNDEF]'
client_disconnect_script = '[UNDEF]'
client_config_dir = '[UNDEF]'
ccd_exclusive = DISABLED
tmp_dir = '/tmp'
push_ifconfig_defined = DISABLED
push_ifconfig_local = 0.0.0.0
push_ifconfig_remote_netmask = 0.0.0.0
push_ifconfig_ipv6_defined = DISABLED
push_ifconfig_ipv6_local = ::/0
push_ifconfig_ipv6_remote = ::
enable_c2c = DISABLED
duplicate_cn = DISABLED
cf_max = 0
cf_per = 0
max_clients = 35
max_routes_per_client = 256
auth_user_pass_verify_script = '[UNDEF]'
auth_user_pass_verify_script_via_file = DISABLED
auth_token_generate = DISABLED
auth_token_lifetime = 0
port_share_host = '[UNDEF]'
port_share_port = '[UNDEF]'
client = DISABLED
pull = DISABLED
auth_user_pass_file = '[UNDEF]'
OpenVPN 2.4.7 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
library versions: OpenSSL 1.0.2k-fips 26 Jan 2017, LZO 2.06
NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
'login'
PLUGIN_INIT: POST /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so '[/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so] [login]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Diffie-Hellman initialized with 2048 bit key
Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
TLS-Auth MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
TUN/TAP device tap0 opened
TUN/TAP TX queue length set to 100
Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Could not determine IPv4/IPv6 protocol. Using AF_INET
Socket Buffers: R=[212992->212992] S=[212992->212992]
UDPv4 link local (bound): [AF_INET]x.y.z.55:1194
UDPv4 link remote: [AF_UNSPEC]
GID set to nobody
UID set to nobody
MULTI: multi_init called, r=256 v=256
IFCONFIG POOL: base=x.y.z.27 size=7, ipv6=0
ifconfig_pool_read(), in='clientMachine.fqdn.com,x.y.z.30', TODO: IPv6
succeeded -> ifconfig_pool_set()
ifconfig_pool_read(), in='DELL-ALL-IN-ONE,x.y.z.31', TODO: IPv6
succeeded -> ifconfig_pool_set()
IFCONFIG POOL LIST
clientMachine.fqdn.com,x.y.z.30
DELL-ALL-IN-ONE,x.y.z.31
Initialization Sequence Completed
TLS Error: cannot locate HMAC in incoming packet from [AF_INET]x2.y1.z1.:63647
MULTI: multi_create_instance called
x0.y1.z1.:1194 Re-using SSL/TLS context
x0.y1.z1.:1194 LZ4v2 compression initializing
x0.y1.z1.:1194 Control Channel MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
x0.y1.z1.:1194 Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
x0.y1.z1.:1194 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
x0.y1.z1.:1194 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
x0.y1.z1.:1194 UDPv4 READ [54] from [AF_INET]x0.y1.z1.:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 pid=[ #1 ] [ ] pid=0 DATA len=0
x0.y1.z1.:1194 TLS: Initial packet from [AF_INET]x0.y1.z1.:1194, sid=9c0a7d02 7be3aa0a
x0.y1.z1.:1194 VERIFY OK: depth=1, CN=srvr
x0.y1.z1.:1194 VERIFY KU OK
x0.y1.z1.:1194 Validating certificate extended key usage
x0.y1.z1.:1194 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
x0.y1.z1.:1194 VERIFY EKU OK
x0.y1.z1.:1194 VERIFY OK: depth=0, CN=clientMachine.fqdn.com
x0.y1.z1.:1194 UDPv4 WRITE [117] to [AF_INET]x0.y1.z1.:1194: P_CONTROL_V1 kid=0 pid=[ #5 ] [ 3 ] pid=3 DATA len=51
x0.y1.z1.:1194 UDPv4 READ [534] from [AF_INET]x0.y1.z1.:1194: P_CONTROL_V1 kid=0 pid=[ #7 ] [ 3 ] pid=4 DATA len=468
x0.y1.z1.:1194 peer info: IV_VER=2.4.7
x0.y1.z1.:1194 peer info: IV_PLAT=win
x0.y1.z1.:1194 peer info: IV_PROTO=2
x0.y1.z1.:1194 peer info: IV_NCP=2
x0.y1.z1.:1194 peer info: IV_LZ4=1
x0.y1.z1.:1194 peer info: IV_LZ4v2=1
x0.y1.z1.:1194 peer info: IV_LZO=1
x0.y1.z1.:1194 peer info: IV_COMP_STUB=1
x0.y1.z1.:1194 peer info: IV_COMP_STUBv2=1
x0.y1.z1.:1194 peer info: IV_TCPNL=1
x0.y1.z1.:1194 peer info: IV_GUI_VER=OpenVPN_GUI_11
AUTH-PAM: BACKGROUND: received command code: 0
AUTH-PAM: BACKGROUND: USER: bvillers
AUTH-PAM: BACKGROUND: my_conv[0] query='Password: ' style=1
x0.y1.z1.:1194 PLUGIN_CALL: POST /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
x0.y1.z1.:1194 TLS: Username/Password authentication succeeded for username 'bvillers'
x0.y1.z1.:1194 UDPv4 WRITE [321] to [AF_INET]x0.y1.z1.:1194: P_CONTROL_V1 kid=0 pid=[ #6 ] [ 4 ] pid=4 DATA len=255
x0.y1.z1.:1194 UDPv4 READ [62] from [AF_INET]x0.y1.z1.:1194: P_ACK_V1 kid=0 pid=[ #8 ] [ 4 ]
x0.y1.z1.:1194 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
x0.y1.z1.:1194 [clientMachine.fqdn.com] Peer Connection Initiated with [AF_INET]x0.y1.z1.:1194
clientMachine.fqdn.com/x0.y1.z1.:1194 MULTI_sva: pool returned IPv4=x.y.z.30, IPv6=(Not enabled)
clientMachine.fqdn.com/x0.y1.z1.:1194 UDPv4 READ [96] from [AF_INET]x0.y1.z1.:1194: P_CONTROL_V1 kid=0 pid=[ #9 ] [ ] pid=5 DATA len=42
clientMachine.fqdn.com/x0.y1.z1.:1194 PUSH: Received control message: 'PUSH_REQUEST'
clientMachine.fqdn.com/x0.y1.z1.:1194 SENT CONTROL [clientMachine.fqdn.com]: 'PUSH_REPLY,route-gateway x.y.z.1,route x.y.z.1 255.255.255.0,dhcp-option DNS x.y.z.250,dhcp-option DNS x.y.z.140,dhcp-option DNS x.y.z.253,compress lz4-v2,route-gateway x.y.z.1,ping 10,ping-restart 120,ifconfig x.y.z.30 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
clientMachine.fqdn.com/x0.y1.z1.:1194 Data Channel: using negotiated cipher 'AES-256-GCM'
clientMachine.fqdn.com/x0.y1.z1.:1194 Data Channel MTU parms [ L:1582 D:1450 EF:50 EB:411 ET:32 EL:3 ]
clientMachine.fqdn.com/x0.y1.z1.:1194 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
clientMachine.fqdn.com/x0.y1.z1.:1194 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
clientMachine.fqdn.com/x0.y1.z1.:1194 UDPv4 WRITE [62] to [AF_INET]x0.y1.z1.:1194: P_ACK_V1 kid=0 pid=[ #7 ] [ 5 ]
clientMachine.fqdn.com/x0.y1.z1.:1194 UDPv4 WRITE [367] to [AF_INET]x0.y1.z1.:1194: P_CONTROL_V1 kid=0 pid=[ #8 ] [ ] pid=5 DATA len=313
ntMachine.fqdn.com/x0.y1.z1.:1194 UDPv4 READ [62] from [AF_INET]x0.y1.z1.:1194: P_ACK_V1 kid=0 pid=[ #10 ] [ 5 ]
clientMachine.fqdn.com/x0.y1.z1.:1194 UDPv4 READ [114] from [AF_INET]x0.y1.z1.:1194: P_DATA_V2 kid=0 DATA len=113
clientMachine.fqdn.com/x0.y1.z1.:1194 MULTI: Learn: 00:ff:21:89:dd:09 -> clientMachine.fqdn.com/x0.y1.z1.:1194
clientMachine.fqdn.com/x0.y1.z1.:1194 TUN WRITE [90]
clientMachine.fqdn.com/x0.y1.z1.:1194 UDPv4 READ [78] from [AF_INET]x0.y1.z1.:1194: P_DATA_V2 kid=0 DATA len=77
clientMachine.fqdn.com/x0.y1.z1.:1194 TUN WRITE [54]
clientMachine.fqdn.com/x0.y1.z1.:1194 UDPv4 READ [66] from [AF_INET]x0.y1.z1.:1194: P_DATA_V2 kid=0 DATA len=65
###############################################
Client log excerpt
Current Parameter Settings:
config = 'machineNameFQDN.com.ovpn'
mode = 0
show_ciphers = DISABLED
show_digests = DISABLED
show_engines = DISABLED
genkey = DISABLED
key_pass_file = '[UNDEF]'
show_tls_ciphers = DISABLED
connect_retry_max = 0
Connection profiles [0]:
proto = udp
local = 'machineNameFQDN.com'
local_port = '1194'
remote = 'VPN.URL.com'
remote_port = '1194'
remote_float = DISABLED
bind_defined = DISABLED
bind_local = ENABLED
bind_ipv6_only = DISABLED
connect_retry_seconds = 5
connect_timeout = 120
socks_proxy_server = '[UNDEF]'
socks_proxy_port = '[UNDEF]'
tun_mtu = 1500
tun_mtu_defined = ENABLED
link_mtu = 1500
link_mtu_defined = DISABLED
tun_mtu_extra = 32
tun_mtu_extra_defined = ENABLED
mtu_discover_type = -1
fragment = 0
mssfix = 1450
explicit_exit_notification = 0
Connection profiles END
remote_random = DISABLED
ipchange = '[UNDEF]'
dev = 'tap'
dev_type = '[UNDEF]'
dev_node = '[UNDEF]'
lladdr = '[UNDEF]'
topology = 1
ifconfig_local = '[UNDEF]'
ifconfig_remote_netmask = '[UNDEF]'
ifconfig_noexec = DISABLED
ifconfig_nowarn = DISABLED
ifconfig_ipv6_local = '[UNDEF]'
ifconfig_ipv6_netbits = 0
ifconfig_ipv6_remote = '[UNDEF]'
shaper = 0
mtu_test = 0
mlock = DISABLED
keepalive_ping = 0
keepalive_timeout = 0
inactivity_timeout = 0
ping_send_timeout = 0
ping_rec_timeout = 0
ping_rec_timeout_action = 0
ping_timer_remote = DISABLED
remap_sigusr1 = 0
persist_tun = ENABLED
persist_local_ip = DISABLED
persist_remote_ip = DISABLED
persist_key = ENABLED
passtos = DISABLED
resolve_retry_seconds = 1000000000
resolve_in_advance = DISABLED
username = '[UNDEF]'
groupname = '[UNDEF]'
chroot_dir = '[UNDEF]'
cd_dir = '[UNDEF]'
writepid = '[UNDEF]'
up_script = '[UNDEF]'
down_script = '[UNDEF]'
down_pre = DISABLED
up_restart = DISABLED
up_delay = DISABLED
daemon = DISABLED
inetd = 0
log = ENABLED
suppress_timestamps = DISABLED
machine_readable_output = DISABLED
nice = 0
verbosity = 4
mute = 0
gremlin = 0
status_file = 'openvpn-status.log'
status_file_version = 1
status_file_update_freq = 60
occ = ENABLED
rcvbuf = 0
sndbuf = 0
sockflags = 0
fast_io = DISABLED
comp.alg = 11
comp.flags = 0
route_script = '[UNDEF]'
route_default_gateway = '[UNDEF]'
route_default_metric = 0
route_noexec = DISABLED
route_delay = 5
route_delay_window = 30
route_delay_defined = ENABLED
route_nopull = DISABLED
route_gateway_via_dhcp = DISABLED
allow_pull_fqdn = DISABLED
Pull filters:
ignore "route-method"
management_addr = '127.0.0.1'
management_port = '25341'
management_user_pass = 'stdin'
management_log_history_cache = 250
management_echo_buffer_size = 100
management_write_peer_info_file = '[UNDEF]'
management_client_user = '[UNDEF]'
management_client_group = '[UNDEF]'
management_flags = 6
shared_secret_file = '[UNDEF]'
key_direction = 1
ciphername = 'AES-256-CBC'
ncp_enabled = ENABLED
ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
authname = 'SHA256'
prng_hash = 'SHA1'
prng_nonce_secret_len = 16
keysize = 0
engine = DISABLED
replay = ENABLED
mute_replay_warnings = DISABLED
replay_window = 64
replay_time = 15
packet_id_file = '[UNDEF]'
use_iv = ENABLED
test_crypto = DISABLED
tls_server = DISABLED
tls_client = ENABLED
key_method = 2
ca_file = 'ca.crt'
ca_path = 'C:\Program Files\OpenVPN\config\'
dh_file = '[UNDEF]'
cert_file = 'machineNameFQDN.com.crt'
extra_certs_file = '[UNDEF]'
priv_key_file = 'machineNameFQDN.com.key'
pkcs12_file = '[UNDEF]'
cryptoapi_cert = '[UNDEF]'
cipher_list = '[UNDEF]'
cipher_list_tls13 = '[UNDEF]'
tls_cert_profile = '[UNDEF]'
tls_verify = '[UNDEF]'
tls_export_cert = '[UNDEF]'
verify_x509_type = 0
verify_x509_name = '[UNDEF]'
crl_file = '[UNDEF]'
ns_cert_type = 0
remote_cert_ku = 65535
remote_cert_ku = 0
remote_cert_ku = 0
remote_cert_ku = 0
remote_cert_ku = 0
remote_cert_ku = 0
remote_cert_ku = 0
remote_cert_ku = 0
remote_cert_ku = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_eku = 'TLS Web Server Authentication'
ssl_flags = 0
tls_timeout = 2
renegotiate_bytes = -1
renegotiate_packets = 0
renegotiate_seconds = 3600
handshake_window = 60
transition_window = 3600
single_session = DISABLED
push_peer_info = DISABLED
tls_exit = DISABLED
tls_auth_file = 'ta.key'
tls_crypt_file = '[UNDEF]'
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_pin_cache_period = -1
pkcs11_id = '[UNDEF]'
pkcs11_id_management = DISABLED
server_network = 0.0.0.0
server_netmask = 0.0.0.0
server_network_ipv6 = ::
server_netbits_ipv6 = 0
server_bridge_ip = 0.0.0.0
server_bridge_netmask = 0.0.0.0
server_bridge_pool_start = 0.0.0.0
server_bridge_pool_end = 0.0.0.0
ifconfig_pool_defined = DISABLED
ifconfig_pool_start = 0.0.0.0
ifconfig_pool_end = 0.0.0.0
ifconfig_pool_netmask = 0.0.0.0
ifconfig_pool_persist_filename = '[UNDEF]'
ifconfig_pool_persist_refresh_freq = 600
ifconfig_ipv6_pool_defined = DISABLED
ifconfig_ipv6_pool_base = ::
ifconfig_ipv6_pool_netbits = 0
n_bcast_buf = 256
tcp_queue_limit = 64
real_hash_size = 256
virtual_hash_size = 256
client_connect_script = '[UNDEF]'
learn_address_script = '[UNDEF]'
client_disconnect_script = '[UNDEF]'
client_config_dir = '[UNDEF]'
ccd_exclusive = DISABLED
tmp_dir = 'pathName\AppData\Local\Temp\'
push_ifconfig_defined = DISABLED
push_ifconfig_local = 0.0.0.0
push_ifconfig_remote_netmask = 0.0.0.0
push_ifconfig_ipv6_defined = DISABLED
push_ifconfig_ipv6_local = ::/0
push_ifconfig_ipv6_remote = ::
enable_c2c = DISABLED
duplicate_cn = DISABLED
cf_max = 0
cf_per = 0
max_clients = 1024
max_routes_per_client = 256
auth_user_pass_verify_script = '[UNDEF]'
auth_user_pass_verify_script_via_file = DISABLED
auth_token_generate = DISABLED
auth_token_lifetime = 0
client = ENABLED
pull = ENABLED
auth_user_pass_file = 'stdin'
show_net_up = DISABLED
route_method = 3
block_outside_dns = DISABLED
ip_win32_defined = DISABLED
ip_win32_type = 3
dhcp_masq_offset = 0
dhcp_lease_time = 31536000
tap_sleep = 0
dhcp_options = DISABLED
dhcp_renew = DISABLED
dhcp_pre_release = DISABLED
domain = '[UNDEF]'
netbios_scope = '[UNDEF]'
netbios_node_type = 0
disable_nbt = DISABLED
OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 21 2019
Windows version 6.2 (Windows 8 or greater) 64bit
library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Need hold release from management interface, waiting...
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
MANAGEMENT: CMD 'state on'
MANAGEMENT: CMD 'log all on'
MANAGEMENT: CMD 'echo all on'
MANAGEMENT: CMD 'bytecount 5'
MANAGEMENT: CMD 'hold off'
MANAGEMENT: CMD 'hold release'
MANAGEMENT: CMD 'username "Auth" "bvillers"'
MANAGEMENT: CMD 'password [...]'
Note: cannot open openvpn-status.log for WRITE
MANAGEMENT: CMD 'password [...]'
WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
WARNING: experimental option --capath C:\Program Files\OpenVPN\config\
Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
LZ4v2 compression initializing
Control Channel MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
MANAGEMENT: >STATE:1555319220,RESOLVE,,,,,,
Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
TCP/UDP: Preserving recently used remote address: [AF_INET]xx.yy.zz.abc:1194
Socket Buffers: R=[65536->65536] S=[65536->65536]
UDP link local (bound): [AF_INET]192.168.0.16:1194
UDP link remote: [AF_INET]xx.yy.zz.abc:1194
MANAGEMENT: >STATE:1555319220,WAIT,,,,,,
MANAGEMENT: >STATE:1555319220,AUTH,,,,,,
TLS: Initial packet from [AF_INET]xx.yy.zz.abc:1194, sid=70a8766e 125749c7
VERIFY WARNING: depth=0, unable to get certificate CRL: CN=CMEVPN
VERIFY WARNING: depth=1, unable to get certificate CRL: CN=CMEVPN
VERIFY OK: depth=1, CN=CMEVPN
VERIFY KU OK
Validating certificate extended key usage
++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
VERIFY EKU OK
VERIFY OK: depth=0, CN=CMEVPN
Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
[CMEVPN] Peer Connection Initiated with [AF_INET]xx.yy.zz.abc:1194
MANAGEMENT: >STATE:1555319221,GET_CONFIG,,,,,,
SENT CONTROL [CMEVPN]: 'PUSH_REQUEST' (status=1)
PUSH: Received control message: 'PUSH_REPLY,route-gateway x.y.z1,route x.y.z0 255.255.255.0,dhcp-option DNS x.y.z250,dhcp-option DNS x.y.z140,dhcp-option DNS x.y.z253,compress lz4-v2,route-gateway x.y.z1,ping 10,ping-restart 120,ifconfig x.y.z30 255.255.255.0,peer-id 0,cipher AES-256-GCM'
OPTIONS IMPORT: timers and/or timeouts modified
OPTIONS IMPORT: compression parms modified
LZ4v2 compression initializing
OPTIONS IMPORT: --ifconfig/up options modified
OPTIONS IMPORT: route options modified
OPTIONS IMPORT: route-related options modified
OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
OPTIONS IMPORT: peer-id set
OPTIONS IMPORT: adjusting link_mtu to 1657
OPTIONS IMPORT: data channel crypto options modified
Data Channel: using negotiated cipher 'AES-256-GCM'
Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ]
Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
interactive service msg_channel=816
ROUTE_GATEWAY 192.168.0.1/255.255.252.0 I=7 HWADDR=38:59:f9:1e:46:29
open_tun
TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{2189DD09-5F6B-4761-9B1E-EC26134F6D5E}.tap
TAP-Windows Driver Version 9.21
TAP-Windows MTU=1500
Notified TAP-Windows driver to set a DHCP IP/netmask of x.y.z30/255.255.255.0 on interface {2189DD09-5F6B-4761-9B1E-EC26134F6D5E} [DHCP-serv: x.y.z0, lease-time: 31536000]
DHCP option string: 060c0ad9 00fa0ad9 008c0ad9 00fd
Successful ARP Flush on interface [5] {2189DD09-5F6B-4761-9B1E-EC26134F6D5E}
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
MANAGEMENT: >STATE:1555319221,ASSIGN_IP,,x.y.z30,,,,
TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
MANAGEMENT: >STATE:1555319226,ADD_ROUTES,,,,,,
C:\WINDOWS\system32\route.exe ADD x.y.z0 MASK 255.255.255.0 x.y.z1
Route addition via service succeeded
Initialization Sequence Completed
MANAGEMENT: >STATE:1555319226,CONNECTED,SUCCESS,x.y.z30,xx.yy.zz.abc,1194,192.168.0.16,1194
Connection reset command was pushed by server ('')
TCP/UDP: Closing socket
SIGUSR1[soft,server-pushed-connection-reset] received, process restarting
MANAGEMENT: >STATE:1555321750,RECONNECTING,server-pushed-connection-reset,,,,,
Restart pause, 5 second(s)
MANAGEMENT: Client disconnected
ERROR: could not read Auth username/password/ok/string from management interface
Exiting due to fatal error
C:\WINDOWS\system32\route.exe DELETE x.y.z0 MASK 255.255.255.0 x.y.z1
Route deletion via service succeeded
Closing TUN/TAP interface
TAP: DHCP address released
Current Parameter Settings:
config = 'machineNameFQDN.com.ovpn'
mode = 0
show_ciphers = DISABLED
show_digests = DISABLED
show_engines = DISABLED
genkey = DISABLED
key_pass_file = '[UNDEF]'
show_tls_ciphers = DISABLED
connect_retry_max = 0
Connection profiles [0]:
proto = udp
local = 'machineNameFQDN.com'
local_port = '1194'
remote = 'VPN.URL.com'
remote_port = '1194'
remote_float = DISABLED
bind_defined = DISABLED
bind_local = ENABLED
bind_ipv6_only = DISABLED
connect_retry_seconds = 5
connect_timeout = 120
socks_proxy_server = '[UNDEF]'
socks_proxy_port = '[UNDEF]'
tun_mtu = 1500
tun_mtu_defined = ENABLED
link_mtu = 1500
link_mtu_defined = DISABLED
tun_mtu_extra = 32
tun_mtu_extra_defined = ENABLED
mtu_discover_type = -1
fragment = 0
mssfix = 1450
explicit_exit_notification = 0
Connection profiles END
remote_random = DISABLED
ipchange = '[UNDEF]'
dev = 'tap'
dev_type = '[UNDEF]'
dev_node = '[UNDEF]'
lladdr = '[UNDEF]'
topology = 1
ifconfig_local = '[UNDEF]'
ifconfig_remote_netmask = '[UNDEF]'
ifconfig_noexec = DISABLED
ifconfig_nowarn = DISABLED
ifconfig_ipv6_local = '[UNDEF]'
ifconfig_ipv6_netbits = 0
ifconfig_ipv6_remote = '[UNDEF]'
shaper = 0
mtu_test = 0
mlock = DISABLED
keepalive_ping = 0
keepalive_timeout = 0
inactivity_timeout = 0
ping_send_timeout = 0
ping_rec_timeout = 0
ping_rec_timeout_action = 0
ping_timer_remote = DISABLED
remap_sigusr1 = 0
persist_tun = ENABLED
persist_local_ip = DISABLED
persist_remote_ip = DISABLED
persist_key = ENABLED
passtos = DISABLED
resolve_retry_seconds = 1000000000
resolve_in_advance = DISABLED
username = '[UNDEF]'
groupname = '[UNDEF]'
chroot_dir = '[UNDEF]'
cd_dir = '[UNDEF]'
writepid = '[UNDEF]'
up_script = '[UNDEF]'
down_script = '[UNDEF]'
down_pre = DISABLED
up_restart = DISABLED
up_delay = DISABLED
daemon = DISABLED
inetd = 0
log = ENABLED
suppress_timestamps = DISABLED
machine_readable_output = DISABLED
nice = 0
verbosity = 4
mute = 0
gremlin = 0
status_file = 'openvpn-status.log'
status_file_version = 1
status_file_update_freq = 60
occ = ENABLED
rcvbuf = 0
sndbuf = 0
sockflags = 0
fast_io = DISABLED
comp.alg = 11
comp.flags = 0
route_script = '[UNDEF]'
route_default_gateway = '[UNDEF]'
route_default_metric = 0
route_noexec = DISABLED
route_delay = 5
route_delay_window = 30
route_delay_defined = ENABLED
route_nopull = DISABLED
route_gateway_via_dhcp = DISABLED
allow_pull_fqdn = DISABLED
Pull filters:
ignore "route-method"
management_addr = '127.0.0.1'
management_port = '25341'
management_user_pass = 'stdin'
management_log_history_cache = 250
management_echo_buffer_size = 100
management_write_peer_info_file = '[UNDEF]'
management_client_user = '[UNDEF]'
management_client_group = '[UNDEF]'
management_flags = 6
shared_secret_file = '[UNDEF]'
key_direction = 1
ciphername = 'AES-256-CBC'
ncp_enabled = ENABLED
ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
authname = 'SHA256'
prng_hash = 'SHA1'
prng_nonce_secret_len = 16
keysize = 0
engine = DISABLED
replay = ENABLED
mute_replay_warnings = DISABLED
replay_window = 64
replay_time = 15
packet_id_file = '[UNDEF]'
use_iv = ENABLED
test_crypto = DISABLED
tls_server = DISABLED
tls_client = ENABLED
key_method = 2
ca_file = 'ca.crt'
ca_path = 'C:\Program Files\OpenVPN\config\'
dh_file = '[UNDEF]'
cert_file = 'machineNameFQDN.com.crt'
extra_certs_file = '[UNDEF]'
priv_key_file = 'machineNameFQDN.com.key'
pkcs12_file = '[UNDEF]'
cryptoapi_cert = '[UNDEF]'
cipher_list = '[UNDEF]'
cipher_list_tls13 = '[UNDEF]'
tls_cert_profile = '[UNDEF]'
tls_verify = '[UNDEF]'
tls_export_cert = '[UNDEF]'
verify_x509_type = 0
verify_x509_name = '[UNDEF]'
crl_file = '[UNDEF]'
ns_cert_type = 0
remote_cert_ku[i] = 65535
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_eku = 'TLS Web Server Authentication'
ssl_flags = 0
tls_timeout = 2
renegotiate_bytes = -1
renegotiate_packets = 0
renegotiate_seconds = 3600
handshake_window = 60
transition_window = 3600
single_session = DISABLED
push_peer_info = DISABLED
tls_exit = DISABLED
tls_auth_file = 'ta.key'
tls_crypt_file = '[UNDEF]'
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_pin_cache_period = -1
pkcs11_id = '[UNDEF]'
pkcs11_id_management = DISABLED
server_network = 0.0.0.0
server_netmask = 0.0.0.0
server_network_ipv6 = ::
server_netbits_ipv6 = 0
server_bridge_ip = 0.0.0.0
server_bridge_netmask = 0.0.0.0
server_bridge_pool_start = 0.0.0.0
server_bridge_pool_end = 0.0.0.0
ifconfig_pool_defined = DISABLED
ifconfig_pool_start = 0.0.0.0
ifconfig_pool_end = 0.0.0.0
ifconfig_pool_netmask = 0.0.0.0
ifconfig_pool_persist_filename = '[UNDEF]'
ifconfig_pool_persist_refresh_freq = 600
ifconfig_ipv6_pool_defined = DISABLED
ifconfig_ipv6_pool_base = ::
ifconfig_ipv6_pool_netbits = 0
n_bcast_buf = 256
tcp_queue_limit = 64
real_hash_size = 256
virtual_hash_size = 256
client_connect_script = '[UNDEF]'
learn_address_script = '[UNDEF]'
client_disconnect_script = '[UNDEF]'
client_config_dir = '[UNDEF]'
ccd_exclusive = DISABLED
tmp_dir = 'pathName\AppData\Local\Temp\'
push_ifconfig_defined = DISABLED
push_ifconfig_local = 0.0.0.0
push_ifconfig_remote_netmask = 0.0.0.0
push_ifconfig_ipv6_defined = DISABLED
push_ifconfig_ipv6_local = ::/0
push_ifconfig_ipv6_remote = ::
enable_c2c = DISABLED
duplicate_cn = DISABLED
cf_max = 0
cf_per = 0
max_clients = 1024
max_routes_per_client = 256
auth_user_pass_verify_script = '[UNDEF]'
auth_user_pass_verify_script_via_file = DISABLED
auth_token_generate = DISABLED
auth_token_lifetime = 0
client = ENABLED
pull = ENABLED
auth_user_pass_file = 'stdin'
show_net_up = DISABLED
route_method = 3
block_outside_dns = DISABLED
ip_win32_defined = DISABLED
ip_win32_type = 3
dhcp_masq_offset = 0
dhcp_lease_time = 31536000
tap_sleep = 0
dhcp_options = DISABLED
dhcp_renew = DISABLED
dhcp_pre_release = DISABLED
domain = '[UNDEF]'
netbios_scope = '[UNDEF]'
netbios_node_type = 0
disable_nbt = DISABLED
OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 21 2019
Windows version 6.2 (Windows 8 or greater) 64bit
library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Need hold release from management interface, waiting...
MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
MANAGEMENT: CMD 'state on'
MANAGEMENT: CMD 'log all on'
MANAGEMENT: CMD 'echo all on'
MANAGEMENT: CMD 'bytecount 5'
MANAGEMENT: CMD 'hold off'
MANAGEMENT: CMD 'hold release'
MANAGEMENT: CMD 'username "Auth" "bvillers"'
MANAGEMENT: CMD 'password [...]'
Note: cannot open openvpn-status.log for WRITE
MANAGEMENT: CMD 'password [...]'
WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
WARNING: experimental option --capath C:\Program Files\OpenVPN\config\
tgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
coming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
4v2 compression initializing
ntrol Channel MTU parms [ L:1654 D:1172 EF:78 EB:0 ET:0 EL:3 ]
ANAGEMENT: >STATE:1555321947,RESOLVE,,,,,,
ata Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
ocal Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
xpected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1602,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
CP/UDP: Preserving recently used remote address: [AF_INET]xx.yy.zz.abc:1194
ocket Buffers: R=[65536->65536] S=[65536->65536]
DP link local (bound): [AF_INET]192.168.0.16:1194
DP link remote: [AF_INET]xx.yy.zz.abc:1194
ANAGEMENT: >STATE:1555321947,WAIT,,,,,,
MANAGEMENT: >STATE:1555321947,AUTH,,,,,,
TLS: Initial packet from [AF_INET]xx.yy.zz.abc:1194, sid=37b7e014 72df3bad
VERIFY WARNING: depth=0, unable to get certificate CRL: CN=CMEVPN
VERIFY WARNING: depth=1, unable to get certificate CRL: CN=CMEVPN
VERIFY OK: depth=1, CN=CMEVPN
VERIFY KU OK
Validating certificate extended key usage
++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
VERIFY EKU OK
VERIFY OK: depth=0, CN=CMEVPN
Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
[CMEVPN] Peer Connection Initiated with [AF_INET]xx.yy.zz.abc:1194
MANAGEMENT: >STATE:1555321948,GET_CONFIG,,,,,,
SENT CONTROL [CMEVPN]: 'PUSH_REQUEST' (status=1)
PUSH: Received control message: 'PUSH_REPLY,route-gateway x.y.z1,route x.y.z1 255.255.255.0,dhcp-option DNS x.y.z250,dhcp-option DNS x.y.z140,dhcp-option DNS x.y.z253,compress lz4-v2,route-gateway x.y.z1,ping 10,ping-restart 120,ifconfig x.y.z30 255.255.255.0,peer-id 0,cipher AES-256-GCM'
OPTIONS IMPORT: timers and/or timeouts modified
OPTIONS IMPORT: compression parms modified
LZ4v2 compression initializing
OPTIONS IMPORT: --ifconfig/up options modified
OPTIONS IMPORT: route options modified
OPTIONS IMPORT: route-related options modified
OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
OPTIONS IMPORT: peer-id set
OPTIONS IMPORT: adjusting link_mtu to 1657
OPTIONS IMPORT: data channel crypto options modified
Data Channel: using negotiated cipher 'AES-256-GCM'
Data Channel MTU parms [ L:1585 D:1450 EF:53 EB:411 ET:32 EL:3 ]
Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
interactive service msg_channel=792
ROUTE_GATEWAY 192.168.0.1/255.255.252.0 I=7 HWADDR=38:59:f9:1e:46:29
open_tun
TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{2189DD09-5F6B-4761-9B1E-EC26134F6D5E}.tap
TAP-Windows Driver Version 9.21
TAP-Windows MTU=1500
Notified TAP-Windows driver to set a DHCP IP/netmask of x.y.z30/255.255.255.0 on interface {2189DD09-5F6B-4761-9B1E-EC26134F6D5E} [DHCP-serv: x.y.z0, lease-time: 31536000]
DHCP option string: 060c0ad9 00fa0ad9 008c0ad9 00fd
Successful ARP Flush on interface [5] {2189DD09-5F6B-4761-9B1E-EC26134F6D5E}
