Edit: Resolved. There was an eth0 interface where eth1 should have been in the routing configuration. Thanks!
Greetings, we have run into a snag while configuring the OpenVPN service.
We have two servers.
Name: Web
Public/Internet IP: 165.227.91.177 Mask:255.255.240.0 (eth0)
Private/Internal IP: 10.136.120.223 Â Mask:255.255.0.0 (eth1)
CentOS6
Name: DB
Public/Internet IP: 159.89.95.29 Mask:255.255.240.0 (eth0)
Private/Internal IP: 10.136.122.39 Â Mask:255.255.0.0 (eth1)
CentOS6
We are trying to install OpenVPN on the server named Web in order to hide the server named DB behind a firewall with NO outside access. The only way to communicate with the DB server is via the private network and thus the VPN that allows access into the private network.
We can NOT connect to the Server DB via the private IP (10.136.122.39) which is what we need to be able to do with the VPN.
Server Web can ping and connect to Server DB via SSH just fine via the private network.
We have mostly been following this guide which looks to depict our situation very well to get OpenVPN setup, but are having issues.
https://community.openvpn.net/openvpn/wiki/BridgingAndRouting
We can successfully connect to the VPN server via VPN client.
We can log into SSH on the Server Web using the private IP.
Public facing internet services show the IP of the client while connected as the Server Web (165.227.91.177) as expected because the client is connected.
The following represents the steps we have taken in order to install and configure OpenVPN:
# Install OpenVPN
# https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-6
# Had issue with easy-rsa. Had to install it from yum as well. We got v3 so had to follow a different setup.
# https://www.howtoforge.com/tutorial/how-to-install-openvpn-server-and-client-with-easy-rsa-3-on-centos-7/
wget http://dl.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm
rpm -Uvh epel-release-6-8.noarch.rpm
yum install openvpn easy-rsa -y
mkdir -p /etc/openvpn/easy-rsa/keys
cp -rf /usr/share/easy-rsa/3.0/* /etc/openvpn/easy-rsa/
touch /etc/openvpn/easy-rsa/vars
vim /etc/openvpn/easy-rsa/vars
# FILE CONTENTS:
set_var EASYRSA Â Â Â Â Â Â Â Â "$PWD"
set_var EASYRSA_PKI Â Â Â Â Â Â "$EASYRSA/pki"
set_var EASYRSA_DN Â Â Â Â Â Â Â "cn_only"
set_var EASYRSA_REQ_COUNTRY Â Â "USA"
set_var EASYRSA_REQ_PROVINCE Â Â "Florida"
set_var EASYRSA_REQ_CITY Â Â Â Â "Jacksonville"
set_var EASYRSA_REQ_ORG Â Â Â Â "horizonlinetech CERTIFICATE AUTHORITY"
set_var EASYRSA_REQ_EMAIL Â Â Â "support@horizonlinetech.com"
set_var EASYRSA_REQ_OU Â Â Â Â Â "HORIZONLINETECH EASY CA"
set_var EASYRSA_KEY_SIZE Â Â Â Â 2048
set_var EASYRSA_ALGO Â Â Â Â Â Â rsa
set_var EASYRSA_CA_EXPIRE Â Â Â 7500
set_var EASYRSA_CERT_EXPIRE Â Â 365
set_var EASYRSA_NS_SUPPORT Â Â Â "no"
set_var EASYRSA_NS_COMMENT Â Â Â "HORIZONLINETECH CERTIFICATE AUTHORITY"
set_var EASYRSA_EXT_DIR Â Â Â Â "$EASYRSA/x509-types"
set_var EASYRSA_SSL_CONF Â Â Â Â "$EASYRSA/openssl-1.0.cnf"
set_var EASYRSA_DIGEST Â Â Â Â Â "sha256"
# END FILE CONTENTS
cd /etc/openvpn/easy-rsa/
./easyrsa init-pki
./easyrsa build-ca
# Give name horizonlinetech
# Give password
./easyrsa gen-req horizonlinetech nopass
# Verify with OpenSSL
./easyrsa sign-req server horizonlinetech
# Give name hlt-client
./easyrsa gen-req hlt-client nopass
./easyrsa sign-req client hlt-client
# Verify with OpenSSL
openssl verify -CAfile pki/ca.crt pki/issued/hlt-client.crt
./easyrsa gen-dh
mkdir -p /etc/openvpn/server
mkdir -p /etc/openvpn/client
cp pki/ca.crt /etc/openvpn/server/
cp pki/issued/horizonlinetech.crt /etc/openvpn/server/
cp pki/private/horizonlinetech.key /etc/openvpn/server/
cp pki/ca.crt /etc/openvpn/client/
cp pki/issued/hlt-client.crt /etc/openvpn/client/
cp pki/private/hlt-client.key /etc/openvpn/client/
cp pki/dh.pem /etc/openvpn/server/
# Update OpenVPN server.conf
touch /etc/openvpn/server.conf
# FILE CONTENTS
# OpenVPN Port, Protocol and the Tun
port 1194
proto udp
dev tun
topology subnet
# OpenVPN Server Certificate - CA, server key and certificate
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/horizonlinetech.crt
key /etc/openvpn/server/horizonlinetech.key
# DH and CRL key
dh /etc/openvpn/server/dh.pem
#crl-verify /etc/openvpn/server/crl.pem
# Network Configuration - Internal network
# Redirect all Connection through OpenVPN Server
server 10.10.1.0 255.255.255.0
push "redirect-gateway def1"
push "route 10.136.0.0 255.255.0.0"
# Using the DNS from https://dns.watch
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
#Enable multiple client to connect with same Certificate key
duplicate-cn
# TLS Security
cipher AES-256-CBC
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
auth SHA512
auth-nocache
# Other Configuration
keepalive 20 60
persist-key
persist-tun
comp-lzo yes
daemon
user nobody
group nobody
# OpenVPN Log
log-append /var/log/openvpn.log
verb 3
# END FILE CONTENTS
# https://community.openvpn.net/openvpn/wiki/BridgingAndRouting
iptables -I FORWARD -i tun0 -o eth1 -s 10.10.1.0/24 -d 10.136.0.0/16 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -i tun0 -o eth0 -s 10.10.1.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -i eth1 -o eth0 -s 10.136.0.0/16 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.136.0.0/16 -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 10.10.1.0/24 -o eth -j MASQUERADE
# Original INCORRECT command
# iptables -t nat -A POSTROUTING -s 10.10.1.0/24 -o eth0 -j MASQUERADE
service iptables save
# Set the following option to TRUE
# Controls IP packet forwarding
vim /etc/sysctl.conf
# Add line:
# net.ipv4.ip_forward = 1
sysctl -p
service openvpn start
chkconfig openvpn on
######## Now test OpenVPN by connecting to it from your machine
# Client encryption files are found at /etc/openvpn/client
# Copy the client encryption files to local hard drive into one directory.
# Create new file hlt-client.ovpn in the same directory as the copied client encryption files.
# Put the following file contents into the hlt-client.ovpn file
# FILE CONTENTS
client
dev tun
proto udp
remote 165.227.91.177 1194
ca ca.crt
cert hlt-client.crt
key hlt-client.key
cipher AES-256-CBC
auth SHA512
auth-nocache
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
resolv-retry infinite
compress lzo
nobind
persist-key
persist-tun
mute-replay-warnings
verb 3
# END FILE CONTENTS
# Download Windows OpenVPN client and test the configuration
# https://github.com/OpenVPN/openvpn-gui
# https://portapps.io/app/openvpn-portable/
# Import hlt-client.ovpn to the OpenVPN client
# Copy the client encryption key files to the same directory that the OpenVPN client copies hlt-client.ovpn to.
Server Config
port 1194
proto udp
dev tun
topology subnet
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/horizonlinetech.crt
key /etc/openvpn/server/horizonlinetech.key
dh /etc/openvpn/server/dh.pem
server 10.10.1.0 255.255.255.0
push "redirect-gateway def1"
push "route 10.136.0.0 255.255.0.0"
route 10.136.0.0 255.255.0.0
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
duplicate-cn
cipher AES-256-CBC
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
auth SHA512
auth-nocache
keepalive 20 60
persist-key
persist-tun
comp-lzo yes
daemon
user nobody
group nobody
log-append /var/log/openvpn.log
verb 4
Client Config
client
dev tun
proto udp
remote 165.227.91.177 1194
ca ca.crt
cert hlt-client.crt
key hlt-client.key
cipher AES-256-CBC
auth SHA512
auth-nocache
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
resolv-retry infinite
compress lzo
nobind
persist-key
persist-tun
mute-replay-warnings
verb 4
Server Log
Thu Nov 7 22:20:22 2019 us=15815 Current Parameter Settings:
Thu Nov 7 22:20:22 2019 us=15903 config = 'server.conf'
Thu Nov 7 22:20:22 2019 us=15917 mode = 1
Thu Nov 7 22:20:22 2019 us=15930 persist_config = DISABLED
Thu Nov 7 22:20:22 2019 us=15942 persist_mode = 1
Thu Nov 7 22:20:22 2019 us=15953 show_ciphers = DISABLED
Thu Nov 7 22:20:22 2019 us=15964 show_digests = DISABLED
Thu Nov 7 22:20:22 2019 us=15976 show_engines = DISABLED
Thu Nov 7 22:20:22 2019 us=15987 genkey = DISABLED
Thu Nov 7 22:20:22 2019 us=15999 key_pass_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16010 show_tls_ciphers = DISABLED
Thu Nov 7 22:20:22 2019 us=16018 connect_retry_max = 0
Thu Nov 7 22:20:22 2019 us=16026 Connection profiles [0]:
Thu Nov 7 22:20:22 2019 us=16042 proto = udp
Thu Nov 7 22:20:22 2019 us=16055 local = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16069 local_port = '1194'
Thu Nov 7 22:20:22 2019 us=16080 remote = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16091 remote_port = '1194'
Thu Nov 7 22:20:22 2019 us=16101 remote_float = DISABLED
Thu Nov 7 22:20:22 2019 us=16113 bind_defined = DISABLED
Thu Nov 7 22:20:22 2019 us=16126 bind_local = ENABLED
Thu Nov 7 22:20:22 2019 us=16137 bind_ipv6_only = DISABLED
Thu Nov 7 22:20:22 2019 us=16149 connect_retry_seconds = 5
Thu Nov 7 22:20:22 2019 us=16160 connect_timeout = 120
Thu Nov 7 22:20:22 2019 us=16172 socks_proxy_server = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16183 socks_proxy_port = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16195 tun_mtu = 1500
Thu Nov 7 22:20:22 2019 us=16206 tun_mtu_defined = ENABLED
Thu Nov 7 22:20:22 2019 us=16218 link_mtu = 1500
Thu Nov 7 22:20:22 2019 us=16230 link_mtu_defined = DISABLED
Thu Nov 7 22:20:22 2019 us=16244 tun_mtu_extra = 0
Thu Nov 7 22:20:22 2019 us=16255 tun_mtu_extra_defined = DISABLED
Thu Nov 7 22:20:22 2019 us=16265 mtu_discover_type = -1
Thu Nov 7 22:20:22 2019 us=16276 fragment = 0
Thu Nov 7 22:20:22 2019 us=16288 mssfix = 1450
Thu Nov 7 22:20:22 2019 us=16302 explicit_exit_notification = 0
Thu Nov 7 22:20:22 2019 us=16315 Connection profiles END
Thu Nov 7 22:20:22 2019 us=16327 remote_random = DISABLED
Thu Nov 7 22:20:22 2019 us=16342 ipchange = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16354 dev = 'tun'
Thu Nov 7 22:20:22 2019 us=16367 dev_type = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16379 dev_node = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16390 lladdr = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16402 topology = 3
Thu Nov 7 22:20:22 2019 us=16415 ifconfig_local = '10.10.1.1'
Thu Nov 7 22:20:22 2019 us=16426 ifconfig_remote_netmask = '255.255.255.0'
Thu Nov 7 22:20:22 2019 us=16437 ifconfig_noexec = DISABLED
Thu Nov 7 22:20:22 2019 us=16448 ifconfig_nowarn = DISABLED
Thu Nov 7 22:20:22 2019 us=16478 ifconfig_ipv6_local = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16490 ifconfig_ipv6_netbits = 0
Thu Nov 7 22:20:22 2019 us=16502 ifconfig_ipv6_remote = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16513 shaper = 0
Thu Nov 7 22:20:22 2019 us=16543 mtu_test = 0
Thu Nov 7 22:20:22 2019 us=16555 mlock = DISABLED
Thu Nov 7 22:20:22 2019 us=16567 keepalive_ping = 20
Thu Nov 7 22:20:22 2019 us=16580 keepalive_timeout = 60
Thu Nov 7 22:20:22 2019 us=16592 inactivity_timeout = 0
Thu Nov 7 22:20:22 2019 us=16606 ping_send_timeout = 20
Thu Nov 7 22:20:22 2019 us=16617 ping_rec_timeout = 120
Thu Nov 7 22:20:22 2019 us=16628 ping_rec_timeout_action = 2
Thu Nov 7 22:20:22 2019 us=16641 ping_timer_remote = DISABLED
Thu Nov 7 22:20:22 2019 us=16652 remap_sigusr1 = 0
Thu Nov 7 22:20:22 2019 us=16664 persist_tun = ENABLED
Thu Nov 7 22:20:22 2019 us=16675 persist_local_ip = DISABLED
Thu Nov 7 22:20:22 2019 us=16687 persist_remote_ip = DISABLED
Thu Nov 7 22:20:22 2019 us=16698 persist_key = ENABLED
Thu Nov 7 22:20:22 2019 us=16713 passtos = DISABLED
Thu Nov 7 22:20:22 2019 us=16725 resolve_retry_seconds = 1000000000
Thu Nov 7 22:20:22 2019 us=16736 resolve_in_advance = DISABLED
Thu Nov 7 22:20:22 2019 us=16748 username = 'nobody'
Thu Nov 7 22:20:22 2019 us=16767 groupname = 'nobody'
Thu Nov 7 22:20:22 2019 us=16781 chroot_dir = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16794 cd_dir = '/etc/openvpn'
Thu Nov 7 22:20:22 2019 us=16805 selinux_context = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16817 writepid = '/var/run/openvpn/server.pid'
Thu Nov 7 22:20:22 2019 us=16829 up_script = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16840 down_script = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=16852 down_pre = DISABLED
Thu Nov 7 22:20:22 2019 us=16863 up_restart = DISABLED
Thu Nov 7 22:20:22 2019 us=16874 up_delay = DISABLED
Thu Nov 7 22:20:22 2019 us=16886 daemon = ENABLED
Thu Nov 7 22:20:22 2019 us=16899 inetd = 0
Thu Nov 7 22:20:22 2019 us=16912 log = ENABLED
Thu Nov 7 22:20:22 2019 us=16923 suppress_timestamps = DISABLED
Thu Nov 7 22:20:22 2019 us=16934 machine_readable_output = DISABLED
Thu Nov 7 22:20:22 2019 us=16946 nice = 0
Thu Nov 7 22:20:22 2019 us=16959 verbosity = 4
Thu Nov 7 22:20:22 2019 us=16971 mute = 0
Thu Nov 7 22:20:22 2019 us=16985 gremlin = 0
Thu Nov 7 22:20:22 2019 us=16996 status_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17006 status_file_version = 1
Thu Nov 7 22:20:22 2019 us=17019 status_file_update_freq = 60
Thu Nov 7 22:20:22 2019 us=17031 occ = ENABLED
Thu Nov 7 22:20:22 2019 us=17042 rcvbuf = 0
Thu Nov 7 22:20:22 2019 us=17053 sndbuf = 0
Thu Nov 7 22:20:22 2019 us=17064 mark = 0
Thu Nov 7 22:20:22 2019 us=17076 sockflags = 0
Thu Nov 7 22:20:22 2019 us=17088 fast_io = DISABLED
Thu Nov 7 22:20:22 2019 us=17101 comp.alg = 2
Thu Nov 7 22:20:22 2019 us=17113 comp.flags = 0
Thu Nov 7 22:20:22 2019 us=17126 route_script = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17138 route_default_gateway = '10.10.1.2'
Thu Nov 7 22:20:22 2019 us=17149 route_default_metric = 0
Thu Nov 7 22:20:22 2019 us=17161 route_noexec = DISABLED
Thu Nov 7 22:20:22 2019 us=17173 route_delay = 0
Thu Nov 7 22:20:22 2019 us=17187 route_delay_window = 30
Thu Nov 7 22:20:22 2019 us=17199 route_delay_defined = DISABLED
Thu Nov 7 22:20:22 2019 us=17212 route_nopull = DISABLED
Thu Nov 7 22:20:22 2019 us=17224 route_gateway_via_dhcp = DISABLED
Thu Nov 7 22:20:22 2019 us=17236 allow_pull_fqdn = DISABLED
Thu Nov 7 22:20:22 2019 us=17252 route 10.136.0.0/255.255.0.0/default (not set)/default (not set)
Thu Nov 7 22:20:22 2019 us=17263 management_addr = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17275 management_port = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17287 management_user_pass = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17299 management_log_history_cache = 250
Thu Nov 7 22:20:22 2019 us=17310 management_echo_buffer_size = 100
Thu Nov 7 22:20:22 2019 us=17325 management_write_peer_info_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17337 management_client_user = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17348 management_client_group = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17360 management_flags = 0
Thu Nov 7 22:20:22 2019 us=17371 shared_secret_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17384 key_direction = not set
Thu Nov 7 22:20:22 2019 us=17397 ciphername = 'AES-256-CBC'
Thu Nov 7 22:20:22 2019 us=17411 ncp_enabled = ENABLED
Thu Nov 7 22:20:22 2019 us=17422 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Thu Nov 7 22:20:22 2019 us=17445 authname = 'SHA512'
Thu Nov 7 22:20:22 2019 us=17457 prng_hash = 'SHA1'
Thu Nov 7 22:20:22 2019 us=17469 prng_nonce_secret_len = 16
Thu Nov 7 22:20:22 2019 us=17481 keysize = 0
Thu Nov 7 22:20:22 2019 us=17492 engine = DISABLED
Thu Nov 7 22:20:22 2019 us=17503 replay = ENABLED
Thu Nov 7 22:20:22 2019 us=17536 mute_replay_warnings = DISABLED
Thu Nov 7 22:20:22 2019 us=17551 replay_window = 64
Thu Nov 7 22:20:22 2019 us=17563 replay_time = 15
Thu Nov 7 22:20:22 2019 us=17575 packet_id_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17589 use_iv = ENABLED
Thu Nov 7 22:20:22 2019 us=17600 test_crypto = DISABLED
Thu Nov 7 22:20:22 2019 us=17612 tls_server = ENABLED
Thu Nov 7 22:20:22 2019 us=17624 tls_client = DISABLED
Thu Nov 7 22:20:22 2019 us=17641 key_method = 2
Thu Nov 7 22:20:22 2019 us=17653 ca_file = '/etc/openvpn/server/ca.crt'
Thu Nov 7 22:20:22 2019 us=17664 ca_path = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17676 dh_file = '/etc/openvpn/server/dh.pem'
Thu Nov 7 22:20:22 2019 us=17688 cert_file = '/etc/openvpn/server/horizonlinetech.crt'
Thu Nov 7 22:20:22 2019 us=17700 extra_certs_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17713 priv_key_file = '/etc/openvpn/server/horizonlinetech.key'
Thu Nov 7 22:20:22 2019 us=17725 pkcs12_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17747 cipher_list = 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256'
Thu Nov 7 22:20:22 2019 us=17760 cipher_list_tls13 = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17772 tls_cert_profile = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17783 tls_verify = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17795 tls_export_cert = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17807 verify_x509_type = 0
Thu Nov 7 22:20:22 2019 us=17819 verify_x509_name = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17832 crl_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=17845 ns_cert_type = 0
Thu Nov 7 22:20:22 2019 us=17857 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17869 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17880 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17892 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17903 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17914 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17925 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17937 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17948 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17959 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17970 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17982 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=17994 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=18008 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=18018 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=18029 remote_cert_ku[i] = 0
Thu Nov 7 22:20:22 2019 us=18041 remote_cert_eku = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=18053 ssl_flags = 192
Thu Nov 7 22:20:22 2019 us=18065 tls_timeout = 2
Thu Nov 7 22:20:22 2019 us=18076 renegotiate_bytes = -1
Thu Nov 7 22:20:22 2019 us=18087 renegotiate_packets = 0
Thu Nov 7 22:20:22 2019 us=18099 renegotiate_seconds = 3600
Thu Nov 7 22:20:22 2019 us=18110 handshake_window = 60
Thu Nov 7 22:20:22 2019 us=18122 transition_window = 3600
Thu Nov 7 22:20:22 2019 us=18134 single_session = DISABLED
Thu Nov 7 22:20:22 2019 us=18146 push_peer_info = DISABLED
Thu Nov 7 22:20:22 2019 us=18158 tls_exit = DISABLED
Thu Nov 7 22:20:22 2019 us=18171 tls_auth_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=18182 tls_crypt_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=18193 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18205 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18217 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18229 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18240 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18252 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18263 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18275 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18287 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18299 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18310 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18324 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18336 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18349 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18365 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18377 pkcs11_protected_authentication = DISABLED
Thu Nov 7 22:20:22 2019 us=18389 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18415 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18427 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18439 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18450 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18462 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18473 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18484 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18496 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18507 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18532 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18545 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18560 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18571 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18584 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18595 pkcs11_private_mode = 00000000
Thu Nov 7 22:20:22 2019 us=18607 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18618 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18630 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18641 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18652 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18664 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18675 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18687 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18698 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18709 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18721 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18732 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18743 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18755 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18767 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18778 pkcs11_cert_private = DISABLED
Thu Nov 7 22:20:22 2019 us=18793 pkcs11_pin_cache_period = -1
Thu Nov 7 22:20:22 2019 us=18804 pkcs11_id = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=18817 pkcs11_id_management = DISABLED
Thu Nov 7 22:20:22 2019 us=18832 server_network = 10.10.1.0
Thu Nov 7 22:20:22 2019 us=18845 server_netmask = 255.255.255.0
Thu Nov 7 22:20:22 2019 us=18866 server_network_ipv6 = ::
Thu Nov 7 22:20:22 2019 us=18878 server_netbits_ipv6 = 0
Thu Nov 7 22:20:22 2019 us=18890 server_bridge_ip = 0.0.0.0
Thu Nov 7 22:20:22 2019 us=18903 server_bridge_netmask = 0.0.0.0
Thu Nov 7 22:20:22 2019 us=18916 server_bridge_pool_start = 0.0.0.0
Thu Nov 7 22:20:22 2019 us=18929 server_bridge_pool_end = 0.0.0.0
Thu Nov 7 22:20:22 2019 us=18943 push_entry = 'redirect-gateway def1'
Thu Nov 7 22:20:22 2019 us=18955 push_entry = 'route 10.136.0.0 255.255.0.0'
Thu Nov 7 22:20:22 2019 us=18968 push_entry = 'dhcp-option DNS 8.8.8.8'
Thu Nov 7 22:20:22 2019 us=18980 push_entry = 'dhcp-option DNS 8.8.4.4'
Thu Nov 7 22:20:22 2019 us=18992 push_entry = 'route-gateway 10.10.1.1'
Thu Nov 7 22:20:22 2019 us=19004 push_entry = 'topology subnet'
Thu Nov 7 22:20:22 2019 us=19015 push_entry = 'ping 20'
Thu Nov 7 22:20:22 2019 us=19026 push_entry = 'ping-restart 60'
Thu Nov 7 22:20:22 2019 us=19038 ifconfig_pool_defined = ENABLED
Thu Nov 7 22:20:22 2019 us=19050 ifconfig_pool_start = 10.10.1.2
Thu Nov 7 22:20:22 2019 us=19063 ifconfig_pool_end = 10.10.1.253
Thu Nov 7 22:20:22 2019 us=19081 ifconfig_pool_netmask = 255.255.255.0
Thu Nov 7 22:20:22 2019 us=19094 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19106 ifconfig_pool_persist_refresh_freq = 600
Thu Nov 7 22:20:22 2019 us=19120 ifconfig_ipv6_pool_defined = DISABLED
Thu Nov 7 22:20:22 2019 us=19137 ifconfig_ipv6_pool_base = ::
Thu Nov 7 22:20:22 2019 us=19148 ifconfig_ipv6_pool_netbits = 0
Thu Nov 7 22:20:22 2019 us=19159 n_bcast_buf = 256
Thu Nov 7 22:20:22 2019 us=19170 tcp_queue_limit = 64
Thu Nov 7 22:20:22 2019 us=19182 real_hash_size = 256
Thu Nov 7 22:20:22 2019 us=19194 virtual_hash_size = 256
Thu Nov 7 22:20:22 2019 us=19206 client_connect_script = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19219 learn_address_script = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19230 client_disconnect_script = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19242 client_config_dir = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19252 ccd_exclusive = DISABLED
Thu Nov 7 22:20:22 2019 us=19264 tmp_dir = '/tmp'
Thu Nov 7 22:20:22 2019 us=19278 push_ifconfig_defined = DISABLED
Thu Nov 7 22:20:22 2019 us=19290 push_ifconfig_local = 0.0.0.0
Thu Nov 7 22:20:22 2019 us=19304 push_ifconfig_remote_netmask = 0.0.0.0
Thu Nov 7 22:20:22 2019 us=19316 push_ifconfig_ipv6_defined = DISABLED
Thu Nov 7 22:20:22 2019 us=19328 push_ifconfig_ipv6_local = ::/0
Thu Nov 7 22:20:22 2019 us=19345 push_ifconfig_ipv6_remote = ::
Thu Nov 7 22:20:22 2019 us=19357 enable_c2c = DISABLED
Thu Nov 7 22:20:22 2019 us=19368 duplicate_cn = ENABLED
Thu Nov 7 22:20:22 2019 us=19380 cf_max = 0
Thu Nov 7 22:20:22 2019 us=19391 cf_per = 0
Thu Nov 7 22:20:22 2019 us=19403 max_clients = 1024
Thu Nov 7 22:20:22 2019 us=19414 max_routes_per_client = 256
Thu Nov 7 22:20:22 2019 us=19426 auth_user_pass_verify_script = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19478 auth_user_pass_verify_script_via_file = DISABLED
Thu Nov 7 22:20:22 2019 us=19490 auth_token_generate = DISABLED
Thu Nov 7 22:20:22 2019 us=19503 auth_token_lifetime = 0
Thu Nov 7 22:20:22 2019 us=19544 port_share_host = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19558 port_share_port = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19569 client = DISABLED
Thu Nov 7 22:20:22 2019 us=19581 pull = DISABLED
Thu Nov 7 22:20:22 2019 us=19592 auth_user_pass_file = '[UNDEF]'
Thu Nov 7 22:20:22 2019 us=19610 OpenVPN 2.4.7 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019
Thu Nov 7 22:20:22 2019 us=19628 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.03
Thu Nov 7 22:20:22 2019 us=28572 Diffie-Hellman initialized with 2048 bit key
Thu Nov 7 22:20:22 2019 us=29181 Failed to extract curve from certificate (UNDEF), using secp384r1 instead.
Thu Nov 7 22:20:22 2019 us=29206 ECDH curve secp384r1 added
Thu Nov 7 22:20:22 2019 us=29261 TLS-Auth MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Nov 7 22:20:22 2019 us=29545 ROUTE_GATEWAY 165.227.80.1/255.255.240.0 IFACE=eth0 HWADDR=f2:d7:50:70:ba:19
Thu Nov 7 22:20:22 2019 us=29889 TUN/TAP device tun0 opened
Thu Nov 7 22:20:22 2019 us=29915 TUN/TAP TX queue length set to 100
Thu Nov 7 22:20:22 2019 us=29938 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Nov 7 22:20:22 2019 us=29958 /sbin/ip link set dev tun0 up mtu 1500
Thu Nov 7 22:20:22 2019 us=32020 /sbin/ip addr add dev tun0 10.10.1.1/24 broadcast 10.10.1.255
Thu Nov 7 22:20:22 2019 us=33284 /sbin/ip route add 10.136.0.0/16 via 10.10.1.2
RTNETLINK answers: File exists
Thu Nov 7 22:20:22 2019 us=34875 ERROR: Linux route add command failed: external program exited with error status: 2
Thu Nov 7 22:20:22 2019 us=34923 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Nov 7 22:20:22 2019 us=35276 Could not determine IPv4/IPv6 protocol. Using AF_INET
Thu Nov 7 22:20:22 2019 us=35303 Socket Buffers: R=[124928->124928] S=[124928->124928]
Thu Nov 7 22:20:22 2019 us=35332 UDPv4 link local (bound): [AF_INET][undef]:1194
Thu Nov 7 22:20:22 2019 us=35344 UDPv4 link remote: [AF_UNSPEC]
Thu Nov 7 22:20:22 2019 us=35364 GID set to nobody
Thu Nov 7 22:20:22 2019 us=35383 UID set to nobody
Thu Nov 7 22:20:22 2019 us=35405 MULTI: multi_init called, r=256 v=256
Thu Nov 7 22:20:22 2019 us=35456 IFCONFIG POOL: base=10.10.1.2 size=252, ipv6=0
Thu Nov 7 22:20:22 2019 us=35513 Initialization Sequence Completed
Thu Nov 7 22:20:26 2019 us=201 MULTI: multi_create_instance called
Thu Nov 7 22:20:26 2019 us=282 104.191.127.3:55021 Re-using SSL/TLS context
Thu Nov 7 22:20:26 2019 us=299 104.191.127.3:55021 LZO compression initializing
Thu Nov 7 22:20:26 2019 us=461 104.191.127.3:55021 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Nov 7 22:20:26 2019 us=473 104.191.127.3:55021 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Nov 7 22:20:26 2019 us=529 104.191.127.3:55021 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Thu Nov 7 22:20:26 2019 us=541 104.191.127.3:55021 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Thu Nov 7 22:20:26 2019 us=582 104.191.127.3:55021 TLS: Initial packet from [AF_INET]104.191.127.3:55021, sid=0839826a afe4db3d
Thu Nov 7 22:20:26 2019 us=93119 104.191.127.3:55021 VERIFY OK: depth=1, CN=Horizonlinetech
Thu Nov 7 22:20:26 2019 us=93260 104.191.127.3:55021 VERIFY OK: depth=0, CN=hlt-client
Thu Nov 7 22:20:26 2019 us=137374 104.191.127.3:55021 peer info: IV_VER=2.4.8
Thu Nov 7 22:20:26 2019 us=137431 104.191.127.3:55021 peer info: IV_PLAT=win
Thu Nov 7 22:20:26 2019 us=137440 104.191.127.3:55021 peer info: IV_PROTO=2
Thu Nov 7 22:20:26 2019 us=137447 104.191.127.3:55021 peer info: IV_NCP=2
Thu Nov 7 22:20:26 2019 us=137454 104.191.127.3:55021 peer info: IV_LZ4=1
Thu Nov 7 22:20:26 2019 us=137460 104.191.127.3:55021 peer info: IV_LZ4v2=1
Thu Nov 7 22:20:26 2019 us=137467 104.191.127.3:55021 peer info: IV_LZO=1
Thu Nov 7 22:20:26 2019 us=137474 104.191.127.3:55021 peer info: IV_COMP_STUB=1
Thu Nov 7 22:20:26 2019 us=137480 104.191.127.3:55021 peer info: IV_COMP_STUBv2=1
Thu Nov 7 22:20:26 2019 us=137487 104.191.127.3:55021 peer info: IV_TCPNL=1
Thu Nov 7 22:20:26 2019 us=137494 104.191.127.3:55021 peer info: IV_GUI_VER=OpenVPN_GUI_11
Thu Nov 7 22:20:26 2019 us=177335 104.191.127.3:55021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Nov 7 22:20:26 2019 us=177400 104.191.127.3:55021 [hlt-client] Peer Connection Initiated with [AF_INET]104.191.127.3:55021
Thu Nov 7 22:20:26 2019 us=177447 hlt-client/104.191.127.3:55021 MULTI_sva: pool returned IPv4=10.10.1.2, IPv6=(Not enabled)
Thu Nov 7 22:20:26 2019 us=177492 hlt-client/104.191.127.3:55021 MULTI: Learn: 10.10.1.2 -> hlt-client/104.191.127.3:55021
Thu Nov 7 22:20:26 2019 us=177502 hlt-client/104.191.127.3:55021 MULTI: primary virtual IP for hlt-client/104.191.127.3:55021: 10.10.1.2
Thu Nov 7 22:20:27 2019 us=433862 hlt-client/104.191.127.3:55021 PUSH: Received control message: 'PUSH_REQUEST'
Thu Nov 7 22:20:27 2019 us=433942 hlt-client/104.191.127.3:55021 SENT CONTROL [hlt-client]: 'PUSH_REPLY,redirect-gateway def1,route 10.136.0.0 255.255.0.0,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.10.1.1,topology subnet,ping 20,ping-restart 60,ifconfig 10.10.1.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Thu Nov 7 22:20:27 2019 us=433967 hlt-client/104.191.127.3:55021 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Nov 7 22:20:27 2019 us=433987 hlt-client/104.191.127.3:55021 Data Channel MTU parms [ L:1550 D:1450 EF:50 EB:406 ET:0 EL:3 ]
Thu Nov 7 22:20:27 2019 us=434100 hlt-client/104.191.127.3:55021 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Nov 7 22:20:27 2019 us=434111 hlt-client/104.191.127.3:55021 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Nov 7 22:20:27 2019 us=795075 hlt-client/104.191.127.3:55021 MULTI: bad source address from client [::], packet dropped
Client Log
Thu Nov 07 17:20:30 2019 us=250126 Current Parameter Settings:
Thu Nov 07 17:20:30 2019 us=251124 config = 'hlt-client.ovpn'
Thu Nov 07 17:20:30 2019 us=251124 mode = 0
Thu Nov 07 17:20:30 2019 us=251124 show_ciphers = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 show_digests = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 show_engines = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 genkey = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 key_pass_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 show_tls_ciphers = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 connect_retry_max = 0
Thu Nov 07 17:20:30 2019 us=251124 Connection profiles [0]:
Thu Nov 07 17:20:30 2019 us=251124 proto = udp
Thu Nov 07 17:20:30 2019 us=251124 local = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 local_port = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 remote = '165.227.91.177'
Thu Nov 07 17:20:30 2019 us=251124 remote_port = '1194'
Thu Nov 07 17:20:30 2019 us=251124 remote_float = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 bind_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 bind_local = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 bind_ipv6_only = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 connect_retry_seconds = 5
Thu Nov 07 17:20:30 2019 us=251124 connect_timeout = 120
Thu Nov 07 17:20:30 2019 us=251124 socks_proxy_server = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 socks_proxy_port = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 tun_mtu = 1500
Thu Nov 07 17:20:30 2019 us=251124 tun_mtu_defined = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 link_mtu = 1500
Thu Nov 07 17:20:30 2019 us=251124 link_mtu_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 tun_mtu_extra = 0
Thu Nov 07 17:20:30 2019 us=251124 tun_mtu_extra_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 mtu_discover_type = -1
Thu Nov 07 17:20:30 2019 us=251124 fragment = 0
Thu Nov 07 17:20:30 2019 us=251124 mssfix = 1450
Thu Nov 07 17:20:30 2019 us=251124 explicit_exit_notification = 0
Thu Nov 07 17:20:30 2019 us=251124 Connection profiles END
Thu Nov 07 17:20:30 2019 us=251124 remote_random = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 ipchange = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 dev = 'tun'
Thu Nov 07 17:20:30 2019 us=251124 dev_type = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 dev_node = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 lladdr = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 topology = 1
Thu Nov 07 17:20:30 2019 us=251124 ifconfig_local = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 ifconfig_remote_netmask = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 ifconfig_noexec = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 ifconfig_nowarn = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 ifconfig_ipv6_local = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 ifconfig_ipv6_netbits = 0
Thu Nov 07 17:20:30 2019 us=251124 ifconfig_ipv6_remote = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 shaper = 0
Thu Nov 07 17:20:30 2019 us=251124 mtu_test = 0
Thu Nov 07 17:20:30 2019 us=251124 mlock = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 keepalive_ping = 0
Thu Nov 07 17:20:30 2019 us=251124 keepalive_timeout = 0
Thu Nov 07 17:20:30 2019 us=251124 inactivity_timeout = 0
Thu Nov 07 17:20:30 2019 us=251124 ping_send_timeout = 0
Thu Nov 07 17:20:30 2019 us=251124 ping_rec_timeout = 0
Thu Nov 07 17:20:30 2019 us=251124 ping_rec_timeout_action = 0
Thu Nov 07 17:20:30 2019 us=251124 ping_timer_remote = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 remap_sigusr1 = 0
Thu Nov 07 17:20:30 2019 us=251124 persist_tun = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 persist_local_ip = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 persist_remote_ip = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 persist_key = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 passtos = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 resolve_retry_seconds = 1000000000
Thu Nov 07 17:20:30 2019 us=251124 resolve_in_advance = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 username = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 groupname = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 chroot_dir = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 cd_dir = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 writepid = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 up_script = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 down_script = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 down_pre = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 up_restart = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 up_delay = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 daemon = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 inetd = 0
Thu Nov 07 17:20:30 2019 us=251124 log = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 suppress_timestamps = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 machine_readable_output = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 nice = 0
Thu Nov 07 17:20:30 2019 us=251124 verbosity = 4
Thu Nov 07 17:20:30 2019 us=251124 mute = 0
Thu Nov 07 17:20:30 2019 us=251124 gremlin = 0
Thu Nov 07 17:20:30 2019 us=251124 status_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 status_file_version = 1
Thu Nov 07 17:20:30 2019 us=251124 status_file_update_freq = 60
Thu Nov 07 17:20:30 2019 us=251124 occ = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 rcvbuf = 0
Thu Nov 07 17:20:30 2019 us=251124 sndbuf = 0
Thu Nov 07 17:20:30 2019 us=251124 sockflags = 0
Thu Nov 07 17:20:30 2019 us=251124 fast_io = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 comp.alg = 2
Thu Nov 07 17:20:30 2019 us=251124 comp.flags = 0
Thu Nov 07 17:20:30 2019 us=251124 route_script = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 route_default_gateway = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 route_default_metric = 0
Thu Nov 07 17:20:30 2019 us=251124 route_noexec = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 route_delay = 5
Thu Nov 07 17:20:30 2019 us=251124 route_delay_window = 30
Thu Nov 07 17:20:30 2019 us=251124 route_delay_defined = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 route_nopull = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 route_gateway_via_dhcp = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 allow_pull_fqdn = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 Pull filters:
Thu Nov 07 17:20:30 2019 us=251124 ignore "route-method"
Thu Nov 07 17:20:30 2019 us=251124 management_addr = '127.0.0.1'
Thu Nov 07 17:20:30 2019 us=251124 management_port = '25340'
Thu Nov 07 17:20:30 2019 us=251124 management_user_pass = 'stdin'
Thu Nov 07 17:20:30 2019 us=251124 management_log_history_cache = 250
Thu Nov 07 17:20:30 2019 us=251124 management_echo_buffer_size = 100
Thu Nov 07 17:20:30 2019 us=251124 management_write_peer_info_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 management_client_user = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 management_client_group = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 management_flags = 6
Thu Nov 07 17:20:30 2019 us=251124 shared_secret_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 key_direction = not set
Thu Nov 07 17:20:30 2019 us=251124 ciphername = 'AES-256-CBC'
Thu Nov 07 17:20:30 2019 us=251124 ncp_enabled = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Thu Nov 07 17:20:30 2019 us=251124 authname = 'SHA512'
Thu Nov 07 17:20:30 2019 us=251124 prng_hash = 'SHA1'
Thu Nov 07 17:20:30 2019 us=251124 prng_nonce_secret_len = 16
Thu Nov 07 17:20:30 2019 us=251124 keysize = 0
Thu Nov 07 17:20:30 2019 us=251124 engine = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 replay = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 mute_replay_warnings = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 replay_window = 64
Thu Nov 07 17:20:30 2019 us=251124 replay_time = 15
Thu Nov 07 17:20:30 2019 us=251124 packet_id_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 use_iv = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 test_crypto = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 tls_server = DISABLED
Thu Nov 07 17:20:30 2019 us=251124 tls_client = ENABLED
Thu Nov 07 17:20:30 2019 us=251124 key_method = 2
Thu Nov 07 17:20:30 2019 us=251124 ca_file = 'ca.crt'
Thu Nov 07 17:20:30 2019 us=251124 ca_path = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 dh_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 cert_file = 'hlt-client.crt'
Thu Nov 07 17:20:30 2019 us=251124 extra_certs_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 priv_key_file = 'hlt-client.key'
Thu Nov 07 17:20:30 2019 us=251124 pkcs12_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 cryptoapi_cert = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 cipher_list = 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256'
Thu Nov 07 17:20:30 2019 us=251124 cipher_list_tls13 = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 tls_cert_profile = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 tls_verify = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 tls_export_cert = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 verify_x509_type = 0
Thu Nov 07 17:20:30 2019 us=251124 verify_x509_name = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 crl_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=251124 ns_cert_type = 0
Thu Nov 07 17:20:30 2019 us=251124 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=251124 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=251124 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=251124 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=251124 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=251124 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_ku[i] = 0
Thu Nov 07 17:20:30 2019 us=252121 remote_cert_eku = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 ssl_flags = 192
Thu Nov 07 17:20:30 2019 us=252121 tls_timeout = 2
Thu Nov 07 17:20:30 2019 us=252121 renegotiate_bytes = -1
Thu Nov 07 17:20:30 2019 us=252121 renegotiate_packets = 0
Thu Nov 07 17:20:30 2019 us=252121 renegotiate_seconds = 3600
Thu Nov 07 17:20:30 2019 us=252121 handshake_window = 60
Thu Nov 07 17:20:30 2019 us=252121 transition_window = 3600
Thu Nov 07 17:20:30 2019 us=252121 single_session = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 push_peer_info = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 tls_exit = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 tls_auth_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 tls_crypt_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_protected_authentication = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_private_mode = 00000000
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_cert_private = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_pin_cache_period = -1
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_id = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 pkcs11_id_management = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 server_network = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 server_netmask = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 server_network_ipv6 = ::
Thu Nov 07 17:20:30 2019 us=252121 server_netbits_ipv6 = 0
Thu Nov 07 17:20:30 2019 us=252121 server_bridge_ip = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 server_bridge_netmask = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 server_bridge_pool_start = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 server_bridge_pool_end = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_pool_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_pool_start = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_pool_end = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_pool_netmask = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_pool_persist_refresh_freq = 600
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_ipv6_pool_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_ipv6_pool_base = ::
Thu Nov 07 17:20:30 2019 us=252121 ifconfig_ipv6_pool_netbits = 0
Thu Nov 07 17:20:30 2019 us=252121 n_bcast_buf = 256
Thu Nov 07 17:20:30 2019 us=252121 tcp_queue_limit = 64
Thu Nov 07 17:20:30 2019 us=252121 real_hash_size = 256
Thu Nov 07 17:20:30 2019 us=252121 virtual_hash_size = 256
Thu Nov 07 17:20:30 2019 us=252121 client_connect_script = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 learn_address_script = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 client_disconnect_script = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 client_config_dir = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 ccd_exclusive = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 tmp_dir = 'C:\Users\chris\AppData\Local\Temp\'
Thu Nov 07 17:20:30 2019 us=252121 push_ifconfig_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 push_ifconfig_local = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 push_ifconfig_remote_netmask = 0.0.0.0
Thu Nov 07 17:20:30 2019 us=252121 push_ifconfig_ipv6_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 push_ifconfig_ipv6_local = ::/0
Thu Nov 07 17:20:30 2019 us=252121 push_ifconfig_ipv6_remote = ::
Thu Nov 07 17:20:30 2019 us=252121 enable_c2c = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 duplicate_cn = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 cf_max = 0
Thu Nov 07 17:20:30 2019 us=252121 cf_per = 0
Thu Nov 07 17:20:30 2019 us=252121 max_clients = 1024
Thu Nov 07 17:20:30 2019 us=252121 max_routes_per_client = 256
Thu Nov 07 17:20:30 2019 us=252121 auth_user_pass_verify_script = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 auth_user_pass_verify_script_via_file = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 auth_token_generate = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 auth_token_lifetime = 0
Thu Nov 07 17:20:30 2019 us=252121 client = ENABLED
Thu Nov 07 17:20:30 2019 us=252121 pull = ENABLED
Thu Nov 07 17:20:30 2019 us=252121 auth_user_pass_file = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 show_net_up = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 route_method = 3
Thu Nov 07 17:20:30 2019 us=252121 block_outside_dns = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 ip_win32_defined = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 ip_win32_type = 3
Thu Nov 07 17:20:30 2019 us=252121 dhcp_masq_offset = 0
Thu Nov 07 17:20:30 2019 us=252121 dhcp_lease_time = 31536000
Thu Nov 07 17:20:30 2019 us=252121 tap_sleep = 0
Thu Nov 07 17:20:30 2019 us=252121 dhcp_options = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 dhcp_renew = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 dhcp_pre_release = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 domain = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 netbios_scope = '[UNDEF]'
Thu Nov 07 17:20:30 2019 us=252121 netbios_node_type = 0
Thu Nov 07 17:20:30 2019 us=252121 disable_nbt = DISABLED
Thu Nov 07 17:20:30 2019 us=252121 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Thu Nov 07 17:20:30 2019 us=252121 Windows version 6.2 (Windows 8 or greater) 64bit
Thu Nov 07 17:20:30 2019 us=252121 library versions: OpenSSL 1.1.0l 10 Sep 2019, LZO 2.10
Enter Management Password:
Thu Nov 07 17:20:30 2019 us=253118 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Nov 07 17:20:30 2019 us=253118 Need hold release from management interface, waiting...
Thu Nov 07 17:20:30 2019 us=736973 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Nov 07 17:20:30 2019 us=837709 MANAGEMENT: CMD 'state on'
Thu Nov 07 17:20:30 2019 us=837709 MANAGEMENT: CMD 'log all on'
Thu Nov 07 17:20:30 2019 us=981319 MANAGEMENT: CMD 'echo all on'
Thu Nov 07 17:20:30 2019 us=983314 MANAGEMENT: CMD 'bytecount 5'
Thu Nov 07 17:20:30 2019 us=984311 MANAGEMENT: CMD 'hold off'
Thu Nov 07 17:20:30 2019 us=986306 MANAGEMENT: CMD 'hold release'
Thu Nov 07 17:20:30 2019 us=986306 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Nov 07 17:20:30 2019 us=989298 LZO compression initializing
Thu Nov 07 17:20:30 2019 us=989298 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Thu Nov 07 17:20:30 2019 us=989298 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Nov 07 17:20:30 2019 us=989298 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-client'
Thu Nov 07 17:20:30 2019 us=989298 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA512,keysize 256,key-method 2,tls-server'
Thu Nov 07 17:20:30 2019 us=989298 TCP/UDP: Preserving recently used remote address: [AF_INET]165.227.91.177:1194
Thu Nov 07 17:20:30 2019 us=989298 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Nov 07 17:20:30 2019 us=989298 UDP link local: (not bound)
Thu Nov 07 17:20:30 2019 us=989298 UDP link remote: [AF_INET]165.227.91.177:1194
Thu Nov 07 17:20:30 2019 us=989298 MANAGEMENT: >STATE:1573165230,WAIT,,,,,,
Thu Nov 07 17:20:31 2019 us=29191 MANAGEMENT: >STATE:1573165231,AUTH,,,,,,
Thu Nov 07 17:20:31 2019 us=29191 TLS: Initial packet from [AF_INET]165.227.91.177:1194, sid=46f467aa 3c8703c4
Thu Nov 07 17:20:31 2019 us=77063 VERIFY OK: depth=1, CN=Horizonlinetech
Thu Nov 07 17:20:31 2019 us=77063 VERIFY OK: depth=0, CN=horizonlinetech
Thu Nov 07 17:20:31 2019 us=167849 Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Nov 07 17:20:31 2019 us=167849 [horizonlinetech] Peer Connection Initiated with [AF_INET]165.227.91.177:1194
Thu Nov 07 17:20:32 2019 us=425770 MANAGEMENT: >STATE:1573165232,GET_CONFIG,,,,,,
Thu Nov 07 17:20:32 2019 us=425770 SENT CONTROL [horizonlinetech]: 'PUSH_REQUEST' (status=1)
Thu Nov 07 17:20:32 2019 us=462677 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route 10.136.0.0 255.255.0.0,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.10.1.1,topology subnet,ping 20,ping-restart 60,ifconfig 10.10.1.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: timers and/or timeouts modified
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: --ifconfig/up options modified
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: route options modified
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: route-related options modified
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: peer-id set
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: adjusting link_mtu to 1625
Thu Nov 07 17:20:32 2019 us=462677 OPTIONS IMPORT: data channel crypto options modified
Thu Nov 07 17:20:32 2019 us=462677 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Nov 07 17:20:32 2019 us=462677 Data Channel MTU parms [ L:1553 D:1450 EF:53 EB:406 ET:0 EL:3 ]
Thu Nov 07 17:20:32 2019 us=462677 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Nov 07 17:20:32 2019 us=462677 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Nov 07 17:20:32 2019 us=462677 interactive service msg_channel=744
Thu Nov 07 17:20:32 2019 us=465668 ROUTE_GATEWAY 192.168.1.254/255.255.255.0 I=5 HWADDR=70:85:c2:34:c0:f9
Thu Nov 07 17:20:32 2019 us=473618 open_tun
Thu Nov 07 17:20:32 2019 us=474616 TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{8C06C515-7E88-4067-B115-A25F6F818032}.tap
Thu Nov 07 17:20:32 2019 us=474616 TAP-Windows Driver Version 9.24
Thu Nov 07 17:20:32 2019 us=474616 TAP-Windows MTU=1500
Thu Nov 07 17:20:32 2019 us=475612 Set TAP-Windows TUN subnet mode network/local/netmask = 10.10.1.0/10.10.1.2/255.255.255.0 [SUCCEEDED]
Thu Nov 07 17:20:32 2019 us=476610 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.1.2/255.255.255.0 on interface {8C06C515-7E88-4067-B115-A25F6F818032} [DHCP-serv: 10.10.1.254, lease-time: 31536000]
Thu Nov 07 17:20:32 2019 us=476610 DHCP option string: 06080808 08080808 0404
Thu Nov 07 17:20:32 2019 us=476610 Successful ARP Flush on interface [16] {8C06C515-7E88-4067-B115-A25F6F818032}
Thu Nov 07 17:20:32 2019 us=479602 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Nov 07 17:20:32 2019 us=479602 MANAGEMENT: >STATE:1573165232,ASSIGN_IP,,10.10.1.2,,,,
Thu Nov 07 17:20:37 2019 us=810505 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Thu Nov 07 17:20:37 2019 us=810505 C:\WINDOWS\system32\route.exe ADD 165.227.91.177 MASK 255.255.255.255 192.168.1.254
Thu Nov 07 17:20:37 2019 us=814494 Route addition via service succeeded
Thu Nov 07 17:20:37 2019 us=814494 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.10.1.1
Thu Nov 07 17:20:37 2019 us=817485 Route addition via service succeeded
Thu Nov 07 17:20:37 2019 us=817485 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.10.1.1
Thu Nov 07 17:20:37 2019 us=819482 Route addition via service succeeded
Thu Nov 07 17:20:37 2019 us=819482 MANAGEMENT: >STATE:1573165237,ADD_ROUTES,,,,,,
Thu Nov 07 17:20:37 2019 us=819482 C:\WINDOWS\system32\route.exe ADD 10.136.0.0 MASK 255.255.0.0 10.10.1.1
Thu Nov 07 17:20:37 2019 us=821475 Route addition via service succeeded
Thu Nov 07 17:20:37 2019 us=821475 Initialization Sequence Completed
Thu Nov 07 17:20:37 2019 us=821475 MANAGEMENT: >STATE:1573165237,CONNECTED,SUCCESS,10.10.1.2,165.227.91.177,1194,,
