Hi!
Serverside: CentOS 7.6 + OpenVPN installed with
nyr script
Clientside: Windows 7 + OpenVPN 2.4.7 [latest]
Clients are 10 computers with OpenVPNService with autostart enabled (autoconnect in seconds after load).
Everything works fine except some cases after reboot.
Steps to reproduce: keep making power ON/OFF on client PC and check if there is internet or not. So every 4 or 5th case I caught situation when I see VPN connected (on client side I see connected status in logs, on server side I see it in logs and in my management tools also).
This problem is unconstant so I dont understand what to change in my configurations.
Need help with this. Thanks in advance!
Configs and logs (in the moment of connect user rbxuser08 after reboot) attached.
Server config
port 1194
proto udp
dev tun
#sndbuf 0
#rcvbuf 0
sndbuf 524288
rcvbuf 524288
push "sndbuf 524288"
push "rcvbuf 524288"
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
push "explicit-exit-notify 3"
keepalive 10 60
cipher AES-256-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
#log-append openvpn-messages.log
verb 4
crl-verify crl.pem
duplicate-cn
#learn-address /etc/openvpn/limit.sh
#script-security 3
management 127.0.0.1 7505
Client config
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote myvpndomain.icu 1194 <---------- hidden original domain
resolv-retry infinite
nobind
persist-key
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
setenv opt block-outside-dns
key-direction 1
verb 3
<ca> <-------------- certificates cutoff
Server log
Sep 15 10:29:32 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 MULTI_sva: pool returned IPv4=10.8.0.3, IPv6=(Not enabled)
Sep 15 10:29:32 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 MULTI: Learn: 10.8.0.3 -> rbxuser08/85.26.234.111:22292
Sep 15 10:29:32 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 MULTI: primary virtual IP for rbxuser08/85.26.234.111:22292: 10.8.0.3
Sep 15 10:29:34 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 PUSH: Received control message: 'PUSH_REQUEST'
Sep 15 10:29:34 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 SENT CONTROL [rbxuser08]: 'PUSH_REPLY,sndbuf 524288,rcvbuf 524288,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,explicit-exit-notify 3,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.3 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
Sep 15 10:29:34 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 Data Channel: using negotiated cipher 'AES-256-GCM'
Sep 15 10:29:34 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Sep 15 10:29:34 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 15 10:29:34 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 15 10:29:34 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 MULTI: bad source address from client [::], packet dropped
Sep 15 10:30:55 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:30997 [rbxuser08] Inactivity timeout (--ping-restart), restarting
Sep 15 10:30:55 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:30997 SIGUSR1[soft,ping-restart] received, client-instance restarting
Sep 15 10:31:39 vpnserver openvpn[1457]: MULTI: multi_create_instance called
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 Re-using SSL/TLS context
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 Control Channel MTU parms [ L:1621 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 TLS: Initial packet from [AF_INET]85.26.234.111:59476, sid=56008863 ed1c0f31
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 WARNING: Failed to stat CRL file, not (re)loading CRL.
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 VERIFY OK: depth=1, CN=ChangeMe
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 VERIFY OK: depth=0, CN=rbxuser08
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_VER=2.4.7
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_PLAT=win
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_PROTO=2
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_NCP=2
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_LZ4=1
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_LZ4v2=1
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_LZO=1
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_COMP_STUB=1
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_COMP_STUBv2=1
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 peer info: IV_TCPNL=1
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sep 15 10:31:39 vpnserver openvpn[1457]: 85.26.234.111:59476 [rbxuser08] Peer Connection Initiated with [AF_INET]85.26.234.111:59476
Sep 15 10:31:39 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=(Not enabled)
Sep 15 10:31:39 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 MULTI: Learn: 10.8.0.4 -> rbxuser08/85.26.234.111:59476
Sep 15 10:31:39 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 MULTI: primary virtual IP for rbxuser08/85.26.234.111:59476: 10.8.0.4
Sep 15 10:31:40 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 PUSH: Received control message: 'PUSH_REQUEST'
Sep 15 10:31:40 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 SENT CONTROL [rbxuser08]: 'PUSH_REPLY,sndbuf 524288,rcvbuf 524288,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,explicit-exit-notify 3,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.4 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
Sep 15 10:31:40 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 Data Channel: using negotiated cipher 'AES-256-GCM'
Sep 15 10:31:40 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Sep 15 10:31:40 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 15 10:31:40 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sep 15 10:31:40 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:59476 MULTI: bad source address from client [::], packet dropped
Sep 15 10:33:01 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 [rbxuser08] Inactivity timeout (--ping-restart), restarting
Sep 15 10:33:01 vpnserver openvpn[1457]: rbxuser08/85.26.234.111:22292 SIGUSR1[soft,ping-restart] received, client-instance restarting
Sep 15 10:34:17 vpnserver openvpn[1457]: MANAGEMENT: Client connected from [AF_INET]127.0.0.1:7505
Sep 15 10:34:17 vpnserver openvpn[1457]: MANAGEMENT: CMD 'version'
Sep 15 10:34:17 vpnserver openvpn[1457]: MANAGEMENT: CMD 'state'
Sep 15 10:34:17 vpnserver openvpn[1457]: MANAGEMENT: CMD 'status 3'
Sep 15 10:34:17 vpnserver openvpn[1457]: MANAGEMENT: CMD 'quit'
Sep 15 10:34:17 vpnserver openvpn[1457]: MANAGEMENT: Client disconnected
Sep 15 10:35:19 vpnserver openvpn[1457]: MANAGEMENT: Client connected from [AF_INET]127.0.0.1:7505
Sep 15 10:35:19 vpnserver openvpn[1457]: MANAGEMENT: CMD 'version'
Sep 15 10:35:19 vpnserver openvpn[1457]: MANAGEMENT: CMD 'state'
Sep 15 10:35:19 vpnserver openvpn[1457]: MANAGEMENT: CMD 'status 3'
Sep 15 10:35:19 vpnserver openvpn[1457]: MANAGEMENT: CMD 'quit'
Sep 15 10:35:19 vpnserver openvpn[1457]: MANAGEMENT: Client disconnected
Sep 15 10:35:22 vpnserver openvpn[1457]: MANAGEMENT: Client connected from [AF_INET]127.0.0.1:7505
Sep 15 10:35:22 vpnserver openvpn[1457]: MANAGEMENT: CMD 'version'
Sep 15 10:35:22 vpnserver openvpn[1457]: MANAGEMENT: CMD 'state'
Sep 15 10:35:22 vpnserver openvpn[1457]: MANAGEMENT: CMD 'status 3'
Sep 15 10:35:22 vpnserver openvpn[1457]: MANAGEMENT: CMD 'quit'
Sep 15 10:35:22 vpnserver openvpn[1457]: MANAGEMENT: Client disconnected
Client log
Sun Sep 15 14:31:38 2019 us=78125 Current Parameter Settings:
Sun Sep 15 14:31:38 2019 us=78125 config = 'c:\Program Files\OpenVPN\config\rbxuser08.ovpn'
Sun Sep 15 14:31:38 2019 us=78125 mode = 0
Sun Sep 15 14:31:38 2019 us=78125 show_ciphers = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 show_digests = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 show_engines = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 genkey = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 key_pass_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 show_tls_ciphers = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 connect_retry_max = 0
Sun Sep 15 14:31:38 2019 us=78125 Connection profiles [0]:
Sun Sep 15 14:31:38 2019 us=78125 proto = udp
Sun Sep 15 14:31:38 2019 us=78125 local = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 local_port = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 remote = 'myvpndomain.icu' <------------ hidden original domain
Sun Sep 15 14:31:38 2019 us=78125 remote_port = '1194'
Sun Sep 15 14:31:38 2019 us=78125 remote_float = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 bind_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 bind_local = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 bind_ipv6_only = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 connect_retry_seconds = 5
Sun Sep 15 14:31:38 2019 us=78125 connect_timeout = 120
Sun Sep 15 14:31:38 2019 us=78125 socks_proxy_server = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 socks_proxy_port = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 tun_mtu = 1500
Sun Sep 15 14:31:38 2019 us=78125 tun_mtu_defined = ENABLED
Sun Sep 15 14:31:38 2019 us=78125 link_mtu = 1500
Sun Sep 15 14:31:38 2019 us=78125 link_mtu_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 tun_mtu_extra = 0
Sun Sep 15 14:31:38 2019 us=78125 tun_mtu_extra_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 mtu_discover_type = -1
Sun Sep 15 14:31:38 2019 us=78125 fragment = 0
Sun Sep 15 14:31:38 2019 us=78125 mssfix = 1450
Sun Sep 15 14:31:38 2019 us=78125 explicit_exit_notification = 0
Sun Sep 15 14:31:38 2019 us=78125 Connection profiles END
Sun Sep 15 14:31:38 2019 us=78125 remote_random = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 ipchange = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 dev = 'tun'
Sun Sep 15 14:31:38 2019 us=78125 dev_type = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 dev_node = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 lladdr = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 topology = 1
Sun Sep 15 14:31:38 2019 us=78125 ifconfig_local = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 ifconfig_remote_netmask = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 ifconfig_noexec = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 ifconfig_nowarn = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 ifconfig_ipv6_local = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 ifconfig_ipv6_netbits = 0
Sun Sep 15 14:31:38 2019 us=78125 ifconfig_ipv6_remote = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=78125 shaper = 0
Sun Sep 15 14:31:38 2019 us=78125 mtu_test = 0
Sun Sep 15 14:31:38 2019 us=78125 mlock = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 keepalive_ping = 0
Sun Sep 15 14:31:38 2019 us=78125 keepalive_timeout = 0
Sun Sep 15 14:31:38 2019 us=78125 inactivity_timeout = 0
Sun Sep 15 14:31:38 2019 us=78125 ping_send_timeout = 0
Sun Sep 15 14:31:38 2019 us=78125 ping_rec_timeout = 0
Sun Sep 15 14:31:38 2019 us=78125 ping_rec_timeout_action = 0
Sun Sep 15 14:31:38 2019 us=78125 ping_timer_remote = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 remap_sigusr1 = 0
Sun Sep 15 14:31:38 2019 us=78125 persist_tun = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 persist_local_ip = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 persist_remote_ip = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 persist_key = ENABLED
Sun Sep 15 14:31:38 2019 us=78125 passtos = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 resolve_retry_seconds = 1000000000
Sun Sep 15 14:31:38 2019 us=78125 resolve_in_advance = DISABLED
Sun Sep 15 14:31:38 2019 us=78125 username = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=328125 groupname = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=328125 chroot_dir = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=328125 cd_dir = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=328125 writepid = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=328125 up_script = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=328125 down_script = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=328125 down_pre = DISABLED
Sun Sep 15 14:31:38 2019 us=328125 up_restart = DISABLED
Sun Sep 15 14:31:38 2019 us=328125 up_delay = DISABLED
Sun Sep 15 14:31:38 2019 us=328125 daemon = DISABLED
Sun Sep 15 14:31:38 2019 us=328125 inetd = 0
Sun Sep 15 14:31:38 2019 us=328125 log = DISABLED
Sun Sep 15 14:31:38 2019 us=328125 suppress_timestamps = DISABLED
Sun Sep 15 14:31:38 2019 us=328125 machine_readable_output = DISABLED
Sun Sep 15 14:31:38 2019 us=328125 nice = 0
Sun Sep 15 14:31:38 2019 us=328125 verbosity = 4
Sun Sep 15 14:31:38 2019 us=328125 mute = 0
Sun Sep 15 14:31:38 2019 us=328125 gremlin = 0
Sun Sep 15 14:31:38 2019 us=359375 status_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 status_file_version = 1
Sun Sep 15 14:31:38 2019 us=359375 status_file_update_freq = 60
Sun Sep 15 14:31:38 2019 us=359375 occ = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 rcvbuf = 0
Sun Sep 15 14:31:38 2019 us=359375 sndbuf = 0
Sun Sep 15 14:31:38 2019 us=359375 sockflags = 0
Sun Sep 15 14:31:38 2019 us=359375 fast_io = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 comp.alg = 0
Sun Sep 15 14:31:38 2019 us=359375 comp.flags = 0
Sun Sep 15 14:31:38 2019 us=359375 route_script = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 route_default_gateway = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 route_default_metric = 0
Sun Sep 15 14:31:38 2019 us=359375 route_noexec = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 route_delay = 5
Sun Sep 15 14:31:38 2019 us=359375 route_delay_window = 30
Sun Sep 15 14:31:38 2019 us=359375 route_delay_defined = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 route_nopull = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 route_gateway_via_dhcp = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 allow_pull_fqdn = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 management_addr = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 management_port = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 management_user_pass = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 management_log_history_cache = 250
Sun Sep 15 14:31:38 2019 us=359375 management_echo_buffer_size = 100
Sun Sep 15 14:31:38 2019 us=359375 management_write_peer_info_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 management_client_user = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 management_client_group = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 management_flags = 0
Sun Sep 15 14:31:38 2019 us=359375 shared_secret_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 key_direction = 1
Sun Sep 15 14:31:38 2019 us=359375 ciphername = 'AES-256-CBC'
Sun Sep 15 14:31:38 2019 us=359375 ncp_enabled = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Sep 15 14:31:38 2019 us=359375 authname = 'SHA512'
Sun Sep 15 14:31:38 2019 us=359375 prng_hash = 'SHA1'
Sun Sep 15 14:31:38 2019 us=359375 prng_nonce_secret_len = 16
Sun Sep 15 14:31:38 2019 us=359375 keysize = 0
Sun Sep 15 14:31:38 2019 us=359375 engine = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 replay = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 mute_replay_warnings = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 replay_window = 64
Sun Sep 15 14:31:38 2019 us=359375 replay_time = 15
Sun Sep 15 14:31:38 2019 us=359375 packet_id_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 use_iv = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 test_crypto = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 tls_server = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 tls_client = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 key_method = 2
Sun Sep 15 14:31:38 2019 us=359375 ca_file = '[[INLINE]]'
Sun Sep 15 14:31:38 2019 us=359375 ca_path = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 dh_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 cert_file = '[[INLINE]]'
Sun Sep 15 14:31:38 2019 us=359375 extra_certs_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 priv_key_file = '[[INLINE]]'
Sun Sep 15 14:31:38 2019 us=359375 pkcs12_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 cryptoapi_cert = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 cipher_list = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 cipher_list_tls13 = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 tls_cert_profile = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 tls_verify = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 tls_export_cert = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 verify_x509_type = 0
Sun Sep 15 14:31:38 2019 us=359375 verify_x509_name = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 crl_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 ns_cert_type = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 65535
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_ku[i] = 0
Sun Sep 15 14:31:38 2019 us=359375 remote_cert_eku = 'TLS Web Server Authentication'
Sun Sep 15 14:31:38 2019 us=359375 ssl_flags = 0
Sun Sep 15 14:31:38 2019 us=359375 tls_timeout = 2
Sun Sep 15 14:31:38 2019 us=359375 renegotiate_bytes = -1
Sun Sep 15 14:31:38 2019 us=359375 renegotiate_packets = 0
Sun Sep 15 14:31:38 2019 us=359375 renegotiate_seconds = 3600
Sun Sep 15 14:31:38 2019 us=359375 handshake_window = 60
Sun Sep 15 14:31:38 2019 us=359375 transition_window = 3600
Sun Sep 15 14:31:38 2019 us=359375 single_session = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 push_peer_info = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 tls_exit = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 tls_auth_file = '[[INLINE]]'
Sun Sep 15 14:31:38 2019 us=359375 tls_crypt_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_protected_authentication = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_private_mode = 00000000
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_cert_private = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_pin_cache_period = -1
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_id = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 pkcs11_id_management = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 server_network = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 server_netmask = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 server_network_ipv6 = ::
Sun Sep 15 14:31:38 2019 us=359375 server_netbits_ipv6 = 0
Sun Sep 15 14:31:38 2019 us=359375 server_bridge_ip = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 server_bridge_netmask = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 server_bridge_pool_start = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 server_bridge_pool_end = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_pool_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_pool_start = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_pool_end = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_pool_netmask = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_pool_persist_filename = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_pool_persist_refresh_freq = 600
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_ipv6_pool_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_ipv6_pool_base = ::
Sun Sep 15 14:31:38 2019 us=359375 ifconfig_ipv6_pool_netbits = 0
Sun Sep 15 14:31:38 2019 us=359375 n_bcast_buf = 256
Sun Sep 15 14:31:38 2019 us=359375 tcp_queue_limit = 64
Sun Sep 15 14:31:38 2019 us=359375 real_hash_size = 256
Sun Sep 15 14:31:38 2019 us=359375 virtual_hash_size = 256
Sun Sep 15 14:31:38 2019 us=359375 client_connect_script = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 learn_address_script = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 client_disconnect_script = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 client_config_dir = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 ccd_exclusive = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 tmp_dir = 'C:\Windows\TEMP\'
Sun Sep 15 14:31:38 2019 us=359375 push_ifconfig_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 push_ifconfig_local = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 push_ifconfig_remote_netmask = 0.0.0.0
Sun Sep 15 14:31:38 2019 us=359375 push_ifconfig_ipv6_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 push_ifconfig_ipv6_local = ::/0
Sun Sep 15 14:31:38 2019 us=359375 push_ifconfig_ipv6_remote = ::
Sun Sep 15 14:31:38 2019 us=359375 enable_c2c = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 duplicate_cn = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 cf_max = 0
Sun Sep 15 14:31:38 2019 us=359375 cf_per = 0
Sun Sep 15 14:31:38 2019 us=359375 max_clients = 1024
Sun Sep 15 14:31:38 2019 us=359375 max_routes_per_client = 256
Sun Sep 15 14:31:38 2019 us=359375 auth_user_pass_verify_script = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 auth_user_pass_verify_script_via_file = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 auth_token_generate = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 auth_token_lifetime = 0
Sun Sep 15 14:31:38 2019 us=359375 client = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 pull = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 auth_user_pass_file = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 show_net_up = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 route_method = 0
Sun Sep 15 14:31:38 2019 us=359375 block_outside_dns = ENABLED
Sun Sep 15 14:31:38 2019 us=359375 ip_win32_defined = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 ip_win32_type = 3
Sun Sep 15 14:31:38 2019 us=359375 dhcp_masq_offset = 0
Sun Sep 15 14:31:38 2019 us=359375 dhcp_lease_time = 31536000
Sun Sep 15 14:31:38 2019 us=359375 tap_sleep = 0
Sun Sep 15 14:31:38 2019 us=359375 dhcp_options = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 dhcp_renew = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 dhcp_pre_release = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 domain = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 netbios_scope = '[UNDEF]'
Sun Sep 15 14:31:38 2019 us=359375 netbios_node_type = 0
Sun Sep 15 14:31:38 2019 us=359375 disable_nbt = DISABLED
Sun Sep 15 14:31:38 2019 us=359375 OpenVPN 2.4.7 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019
Sun Sep 15 14:31:38 2019 us=359375 Windows version 6.1 (Windows 7) 32bit
Sun Sep 15 14:31:38 2019 us=359375 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO 2.10
Sun Sep 15 14:31:38 2019 us=390625 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Sep 15 14:31:38 2019 us=390625 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sun Sep 15 14:31:38 2019 us=390625 Control Channel MTU parms [ L:1621 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Sun Sep 15 14:31:38 2019 us=593750 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Sun Sep 15 14:31:38 2019 us=593750 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Sun Sep 15 14:31:38 2019 us=593750 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1601,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Sun Sep 15 14:31:38 2019 us=593750 TCP/UDP: Preserving recently used remote address: [AF_INET]178.62.190.92:1194
Sun Sep 15 14:31:38 2019 us=593750 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Sep 15 14:31:38 2019 us=593750 UDP link local: (not bound)
Sun Sep 15 14:31:38 2019 us=593750 UDP link remote: [AF_INET]178.62.190.92:1194
Sun Sep 15 14:31:38 2019 us=699218 TLS: Initial packet from [AF_INET]178.62.190.92:1194, sid=2360533e 48f22ff6
Sun Sep 15 14:31:38 2019 us=803710 VERIFY OK: depth=1, CN=ChangeMe
Sun Sep 15 14:31:38 2019 us=804687 VERIFY KU OK
Sun Sep 15 14:31:38 2019 us=804687 Validating certificate extended key usage
Sun Sep 15 14:31:38 2019 us=804687 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Sep 15 14:31:38 2019 us=804687 VERIFY EKU OK
Sun Sep 15 14:31:38 2019 us=804687 VERIFY OK: depth=0, CN=server
Sun Sep 15 14:31:39 2019 us=39062 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun Sep 15 14:31:39 2019 us=39062 [server] Peer Connection Initiated with [AF_INET]178.62.190.92:1194
Sun Sep 15 14:31:40 2019 us=226562 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Sep 15 14:31:40 2019 us=320312 PUSH: Received control message: 'PUSH_REPLY,sndbuf 524288,rcvbuf 524288,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,explicit-exit-notify 3,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.8.0.4 255.255.255.0,peer-id 2,cipher AES-256-GCM'
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: timers and/or timeouts modified
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: explicit notify parm(s) modified
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sun Sep 15 14:31:40 2019 us=320312 Socket Buffers: R=[8192->524288] S=[8192->524288]
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: --ifconfig/up options modified
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: route options modified
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: route-related options modified
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: peer-id set
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: adjusting link_mtu to 1624
Sun Sep 15 14:31:40 2019 us=320312 OPTIONS IMPORT: data channel crypto options modified
Sun Sep 15 14:31:40 2019 us=320312 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Sep 15 14:31:40 2019 us=320312 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Sun Sep 15 14:31:40 2019 us=320312 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Sep 15 14:31:40 2019 us=320312 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Sep 15 14:31:40 2019 us=320312 interactive service msg_channel=0
Sun Sep 15 14:31:40 2019 us=320312 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=12 HWADDR=00:25:22:92:e5:92
Sun Sep 15 14:31:40 2019 us=320312 open_tun
Sun Sep 15 14:31:40 2019 us=320312 TAP-WIN32 device [Подключение по локальной сети 2] opened: \\.\Global\{1BCD52F2-2069-432A-934F-084B3C3453D4}.tap
Sun Sep 15 14:31:40 2019 us=320312 TAP-Windows Driver Version 9.23
Sun Sep 15 14:31:40 2019 us=320312 TAP-Windows MTU=1500
Sun Sep 15 14:31:40 2019 us=320312 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.4/255.255.255.0 [SUCCEEDED]
Sun Sep 15 14:31:40 2019 us=320312 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.4/255.255.255.0 on interface {1BCD52F2-2069-432A-934F-084B3C3453D4} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Sun Sep 15 14:31:40 2019 us=320312 DHCP option string: 06080101 01010100 0001
Sun Sep 15 14:31:40 2019 us=320312 Successful ARP Flush on interface [13] {1BCD52F2-2069-432A-934F-084B3C3453D4}
Sun Sep 15 14:31:40 2019 us=335937 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Sep 15 14:31:40 2019 us=335937 Blocking outside DNS
Sun Sep 15 14:31:40 2019 us=335937 Block_DNS: WFP engine opened
Sun Sep 15 14:31:40 2019 us=351562 Block_DNS: Added a persistent sublayer with pre-defined UUID
Sun Sep 15 14:31:40 2019 us=351562 Block_DNS: Added permit filters for exe_path
Sun Sep 15 14:31:40 2019 us=351562 Block_DNS: Added block filters for all interfaces
Sun Sep 15 14:31:40 2019 us=367187 Block_DNS: Added permit filters for TAP interface
Sun Sep 15 14:31:45 2019 us=539062 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Sun Sep 15 14:31:45 2019 us=539062 C:\Windows\system32\route.exe ADD 178.62.190.92 MASK 255.255.255.255 192.168.1.1
Sun Sep 15 14:31:45 2019 us=539062 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
Sun Sep 15 14:31:45 2019 us=539062 Route addition via IPAPI succeeded [adaptive]
Sun Sep 15 14:31:45 2019 us=539062 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Sun Sep 15 14:31:45 2019 us=539062 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Sun Sep 15 14:31:45 2019 us=539062 Route addition via IPAPI succeeded [adaptive]
Sun Sep 15 14:31:45 2019 us=539062 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Sun Sep 15 14:31:45 2019 us=539062 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=3 and dwForwardType=4
Sun Sep 15 14:31:45 2019 us=539062 Route addition via IPAPI succeeded [adaptive]
Sun Sep 15 14:31:45 2019 us=539062 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Sep 15 14:31:45 2019 us=539062 Initialization Sequence Completed
After successful connection I can find MANAGEMENT: >STATE:1568558101,CONNECTED,SUCCESS,10.8.0.2,178.62.190.92,1194,,
in client log, but there is NO such string in the log above...
PS if I make 'kill 123' in my server console then client connects to VPN and internet works fine. I'm confused...
