Issue after being connected for a few minutes

rmccullough

When I connect to the OpenVPN server I have at home, it works for a couple minutes. I can access resources on my home network, and the internet.

However, after a couple of minutes it seems like I can't access network resources either over the VPN or locally (e.g. internet). This does not appear to be a DNS issue because I had a 'ping' running in a terminal to a VPN resource via IP address. It pings fine and then starts to fail.

Is there something I can look at to investigate what is happening? Is this a mac issue?

My client: Tunnelblick: macOS 10.15.2 (19C57); Tunnelblick 3.8.1 (build 5400)

TinCanTech

Please see:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

rmccullough

I apologize.

port 1194
proto udp
dev tun
ca /usr/local/etc/openvpn/keys/ca.crt
cert /usr/local/etc/openvpn/keys/openvpn-server.crt
key /usr/local/etc/openvpn/keys/openvpn-server.key # This file should be kept secret
dh /usr/local/etc/openvpn/keys/dh.pem
server x.x.x.x 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
keepalive 10 120
tls-auth /usr/local/etc/openvpn/keys/ta.key 0 # This file is secret
remote-cert-tls client
cipher AES-256-CBC
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 4
explicit-exit-notify 1

Tue Jan  7 11:47:05 2020 us=646907 Current Parameter Settings:
Tue Jan  7 11:47:05 2020 us=647175   config = '/usr/local/etc/openvpn/openvpn.conf'
Tue Jan  7 11:47:05 2020 us=647193   mode = 1
Tue Jan  7 11:47:05 2020 us=647207   show_ciphers = DISABLED
Tue Jan  7 11:47:05 2020 us=647221   show_digests = DISABLED
Tue Jan  7 11:47:05 2020 us=647235   show_engines = DISABLED
Tue Jan  7 11:47:05 2020 us=647249   genkey = DISABLED
Tue Jan  7 11:47:05 2020 us=647263   key_pass_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647277   show_tls_ciphers = DISABLED
Tue Jan  7 11:47:05 2020 us=647297   connect_retry_max = 0
Tue Jan  7 11:47:05 2020 us=647311 Connection profiles [0]:
Tue Jan  7 11:47:05 2020 us=647325   proto = udp
Tue Jan  7 11:47:05 2020 us=647339   local = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647353   local_port = '1194'
Tue Jan  7 11:47:05 2020 us=647367   remote = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647381   remote_port = '1194'
Tue Jan  7 11:47:05 2020 us=647395   remote_float = DISABLED
Tue Jan  7 11:47:05 2020 us=647409   bind_defined = DISABLED
Tue Jan  7 11:47:05 2020 us=647428   bind_local = ENABLED
Tue Jan  7 11:47:05 2020 us=647442   bind_ipv6_only = DISABLED
Tue Jan  7 11:47:05 2020 us=647456   connect_retry_seconds = 5
Tue Jan  7 11:47:05 2020 us=647471   connect_timeout = 120
Tue Jan  7 11:47:05 2020 us=647486   socks_proxy_server = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647500   socks_proxy_port = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647513   tun_mtu = 1500
Tue Jan  7 11:47:05 2020 us=647527   tun_mtu_defined = ENABLED
Tue Jan  7 11:47:05 2020 us=647546   link_mtu = 1500
Tue Jan  7 11:47:05 2020 us=647560   link_mtu_defined = DISABLED
Tue Jan  7 11:47:05 2020 us=647573   tun_mtu_extra = 0
Tue Jan  7 11:47:05 2020 us=647587   tun_mtu_extra_defined = DISABLED
Tue Jan  7 11:47:05 2020 us=647601   mtu_discover_type = -1
Tue Jan  7 11:47:05 2020 us=647615   fragment = 0
Tue Jan  7 11:47:05 2020 us=647629   mssfix = 1450
Tue Jan  7 11:47:05 2020 us=647643   explicit_exit_notification = 1
Tue Jan  7 11:47:05 2020 us=647657 Connection profiles END
Tue Jan  7 11:47:05 2020 us=647677   remote_random = DISABLED
Tue Jan  7 11:47:05 2020 us=647692   ipchange = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647706   dev = 'tun'
Tue Jan  7 11:47:05 2020 us=647719   dev_type = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647733   dev_node = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647747   lladdr = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647760   topology = 1
Tue Jan  7 11:47:05 2020 us=647774   ifconfig_local = '10.8.0.1'
Tue Jan  7 11:47:05 2020 us=647788   ifconfig_remote_netmask = '10.8.0.2'
Tue Jan  7 11:47:05 2020 us=647807   ifconfig_noexec = DISABLED
Tue Jan  7 11:47:05 2020 us=647821   ifconfig_nowarn = DISABLED
Tue Jan  7 11:47:05 2020 us=647834   ifconfig_ipv6_local = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647849   ifconfig_ipv6_netbits = 0
Tue Jan  7 11:47:05 2020 us=647862   ifconfig_ipv6_remote = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=647875   shaper = 0
Tue Jan  7 11:47:05 2020 us=647889   mtu_test = 0
Tue Jan  7 11:47:05 2020 us=647902   mlock = DISABLED
Tue Jan  7 11:47:05 2020 us=647922   keepalive_ping = 10
Tue Jan  7 11:47:05 2020 us=647936   keepalive_timeout = 120
Tue Jan  7 11:47:05 2020 us=647949   inactivity_timeout = 0
Tue Jan  7 11:47:05 2020 us=647963   ping_send_timeout = 10
Tue Jan  7 11:47:05 2020 us=647976   ping_rec_timeout = 240
Tue Jan  7 11:47:05 2020 us=647990   ping_rec_timeout_action = 2
Tue Jan  7 11:47:05 2020 us=648003   ping_timer_remote = DISABLED
Tue Jan  7 11:47:05 2020 us=648017   remap_sigusr1 = 0
Tue Jan  7 11:47:05 2020 us=648036   persist_tun = ENABLED
Tue Jan  7 11:47:05 2020 us=648050   persist_local_ip = DISABLED
Tue Jan  7 11:47:05 2020 us=648064   persist_remote_ip = DISABLED
Tue Jan  7 11:47:05 2020 us=648077   persist_key = ENABLED
Tue Jan  7 11:47:05 2020 us=648091   passtos = DISABLED
Tue Jan  7 11:47:05 2020 us=648105   resolve_retry_seconds = 1000000000
Tue Jan  7 11:47:05 2020 us=648119   resolve_in_advance = DISABLED
Tue Jan  7 11:47:05 2020 us=648133   username = 'nobody'
Tue Jan  7 11:47:05 2020 us=648146   groupname = 'nobody'
Tue Jan  7 11:47:05 2020 us=648166   chroot_dir = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648180   cd_dir = '/usr/local/etc/openvpn/'
Tue Jan  7 11:47:05 2020 us=648194   writepid = '/var/run/openvpn.pid'
Tue Jan  7 11:47:05 2020 us=648208   up_script = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648221   down_script = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648235   down_pre = DISABLED
Tue Jan  7 11:47:05 2020 us=648249   up_restart = DISABLED
Tue Jan  7 11:47:05 2020 us=648263   up_delay = DISABLED
Tue Jan  7 11:47:05 2020 us=648283   daemon = ENABLED
Tue Jan  7 11:47:05 2020 us=648297   inetd = 0
Tue Jan  7 11:47:05 2020 us=648311   log = ENABLED
Tue Jan  7 11:47:05 2020 us=648324   suppress_timestamps = DISABLED
Tue Jan  7 11:47:05 2020 us=648338   machine_readable_output = DISABLED
Tue Jan  7 11:47:05 2020 us=648352   nice = 0
Tue Jan  7 11:47:05 2020 us=648365   verbosity = 4
Tue Jan  7 11:47:05 2020 us=648378   mute = 0
Tue Jan  7 11:47:05 2020 us=648392   gremlin = 0
Tue Jan  7 11:47:05 2020 us=648412   status_file = 'openvpn-status.log'
Tue Jan  7 11:47:05 2020 us=648427   status_file_version = 1
Tue Jan  7 11:47:05 2020 us=648441   status_file_update_freq = 60
Tue Jan  7 11:47:05 2020 us=648455   occ = ENABLED
Tue Jan  7 11:47:05 2020 us=648468   rcvbuf = 0
Tue Jan  7 11:47:05 2020 us=648482   sndbuf = 0
Tue Jan  7 11:47:05 2020 us=648495   sockflags = 0
Tue Jan  7 11:47:05 2020 us=648509   fast_io = DISABLED
Tue Jan  7 11:47:05 2020 us=648522   comp.alg = 0
Tue Jan  7 11:47:05 2020 us=648542   comp.flags = 0
Tue Jan  7 11:47:05 2020 us=648556   route_script = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648570   route_default_gateway = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648583   route_default_metric = 0
Tue Jan  7 11:47:05 2020 us=648597   route_noexec = DISABLED
Tue Jan  7 11:47:05 2020 us=648610   route_delay = 0
Tue Jan  7 11:47:05 2020 us=648624   route_delay_window = 30
Tue Jan  7 11:47:05 2020 us=648638   route_delay_defined = DISABLED
Tue Jan  7 11:47:05 2020 us=648652   route_nopull = DISABLED
Tue Jan  7 11:47:05 2020 us=648674   route_gateway_via_dhcp = DISABLED
Tue Jan  7 11:47:05 2020 us=648688   allow_pull_fqdn = DISABLED
Tue Jan  7 11:47:05 2020 us=648703   route 10.8.0.0/255.255.255.0/default (not set)/default (not set)
Tue Jan  7 11:47:05 2020 us=648717   management_addr = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648731   management_port = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648744   management_user_pass = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648758   management_log_history_cache = 250
Tue Jan  7 11:47:05 2020 us=648778   management_echo_buffer_size = 100
Tue Jan  7 11:47:05 2020 us=648792   management_write_peer_info_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648806   management_client_user = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648820   management_client_group = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648834   management_flags = 0
Tue Jan  7 11:47:05 2020 us=648848   shared_secret_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=648862   key_direction = 0
Tue Jan  7 11:47:05 2020 us=648882   ciphername = 'AES-256-CBC'
Tue Jan  7 11:47:05 2020 us=648897   ncp_enabled = ENABLED
Tue Jan  7 11:47:05 2020 us=648911   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Jan  7 11:47:05 2020 us=648925   authname = 'SHA1'
Tue Jan  7 11:47:05 2020 us=648938   prng_hash = 'SHA1'
Tue Jan  7 11:47:05 2020 us=648952   prng_nonce_secret_len = 16
Tue Jan  7 11:47:05 2020 us=648966   keysize = 0
Tue Jan  7 11:47:05 2020 us=648979   engine = DISABLED
Tue Jan  7 11:47:05 2020 us=648993   replay = ENABLED
Tue Jan  7 11:47:05 2020 us=649013   mute_replay_warnings = DISABLED
Tue Jan  7 11:47:05 2020 us=649028   replay_window = 64
Tue Jan  7 11:47:05 2020 us=649041   replay_time = 15
Tue Jan  7 11:47:05 2020 us=649055   packet_id_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649069   use_iv = ENABLED
Tue Jan  7 11:47:05 2020 us=649083   test_crypto = DISABLED
Tue Jan  7 11:47:05 2020 us=649096   tls_server = ENABLED
Tue Jan  7 11:47:05 2020 us=649110   tls_client = DISABLED
Tue Jan  7 11:47:05 2020 us=649124   key_method = 2
Tue Jan  7 11:47:05 2020 us=649145   ca_file = '/usr/local/etc/openvpn/keys/ca.crt'
Tue Jan  7 11:47:05 2020 us=649159   ca_path = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649173   dh_file = '/usr/local/etc/openvpn/keys/dh.pem'
Tue Jan  7 11:47:05 2020 us=649186   cert_file = '/usr/local/etc/openvpn/keys/openvpn-server.crt'
Tue Jan  7 11:47:05 2020 us=649200   extra_certs_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649214   priv_key_file = '/usr/local/etc/openvpn/keys/openvpn-server.key'
Tue Jan  7 11:47:05 2020 us=649234   pkcs12_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649249   cipher_list = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649263   cipher_list_tls13 = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649277   tls_cert_profile = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649290   tls_verify = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649303   tls_export_cert = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649317   verify_x509_type = 0
Tue Jan  7 11:47:05 2020 us=649330   verify_x509_name = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649349   crl_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649364   ns_cert_type = 0
Tue Jan  7 11:47:05 2020 us=649378   remote_cert_ku[i] = 65535
Tue Jan  7 11:47:05 2020 us=649391   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649414   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649427   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649440   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649454   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649467   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649493   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649507   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649521   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649536   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649549   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649563   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649577   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649590   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649604   remote_cert_ku[i] = 0
Tue Jan  7 11:47:05 2020 us=649625   remote_cert_eku = 'TLS Web Client Authentication'
Tue Jan  7 11:47:05 2020 us=649640   ssl_flags = 0
Tue Jan  7 11:47:05 2020 us=649653   tls_timeout = 2
Tue Jan  7 11:47:05 2020 us=649669   renegotiate_bytes = -1
Tue Jan  7 11:47:05 2020 us=649683   renegotiate_packets = 0
Tue Jan  7 11:47:05 2020 us=649697   renegotiate_seconds = 3600
Tue Jan  7 11:47:05 2020 us=649710   handshake_window = 60
Tue Jan  7 11:47:05 2020 us=649724   transition_window = 3600
Tue Jan  7 11:47:05 2020 us=649744   single_session = DISABLED
Tue Jan  7 11:47:05 2020 us=649759   push_peer_info = DISABLED
Tue Jan  7 11:47:05 2020 us=649773   tls_exit = DISABLED
Tue Jan  7 11:47:05 2020 us=649786   tls_auth_file = '/usr/local/etc/openvpn/keys/ta.key'
Tue Jan  7 11:47:05 2020 us=649800   tls_crypt_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=649816   server_network = 10.8.0.0
Tue Jan  7 11:47:05 2020 us=649830   server_netmask = 255.255.255.0
Tue Jan  7 11:47:05 2020 us=649846   server_network_ipv6 = ::
Tue Jan  7 11:47:05 2020 us=649866   server_netbits_ipv6 = 0
Tue Jan  7 11:47:05 2020 us=649881   server_bridge_ip = 0.0.0.0
Tue Jan  7 11:47:05 2020 us=649896   server_bridge_netmask = 0.0.0.0
Tue Jan  7 11:47:05 2020 us=649911   server_bridge_pool_start = 0.0.0.0
Tue Jan  7 11:47:05 2020 us=649926   server_bridge_pool_end = 0.0.0.0
Tue Jan  7 11:47:05 2020 us=649940   push_entry = 'route 192.168.1.0 255.255.255.0'
Tue Jan  7 11:47:05 2020 us=649954   push_entry = 'route 10.8.0.1'
Tue Jan  7 11:47:05 2020 us=649973   push_entry = 'topology net30'
Tue Jan  7 11:47:05 2020 us=649987   push_entry = 'ping 10'
Tue Jan  7 11:47:05 2020 us=650001   push_entry = 'ping-restart 120'
Tue Jan  7 11:47:05 2020 us=650015   ifconfig_pool_defined = ENABLED
Tue Jan  7 11:47:05 2020 us=650029   ifconfig_pool_start = 10.8.0.4
Tue Jan  7 11:47:05 2020 us=650044   ifconfig_pool_end = 10.8.0.251
Tue Jan  7 11:47:05 2020 us=650058   ifconfig_pool_netmask = 0.0.0.0
Tue Jan  7 11:47:05 2020 us=650072   ifconfig_pool_persist_filename = 'ipp.txt'
Tue Jan  7 11:47:05 2020 us=650094   ifconfig_pool_persist_refresh_freq = 600
Tue Jan  7 11:47:05 2020 us=650108   ifconfig_ipv6_pool_defined = DISABLED
Tue Jan  7 11:47:05 2020 us=650123   ifconfig_ipv6_pool_base = ::
Tue Jan  7 11:47:05 2020 us=650137   ifconfig_ipv6_pool_netbits = 0
Tue Jan  7 11:47:05 2020 us=650150   n_bcast_buf = 256
Tue Jan  7 11:47:05 2020 us=650164   tcp_queue_limit = 64
Tue Jan  7 11:47:05 2020 us=650178   real_hash_size = 256
Tue Jan  7 11:47:05 2020 us=650199   virtual_hash_size = 256
Tue Jan  7 11:47:05 2020 us=650213   client_connect_script = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650227   learn_address_script = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650241   client_disconnect_script = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650255   client_config_dir = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650269   ccd_exclusive = DISABLED
Tue Jan  7 11:47:05 2020 us=650282   tmp_dir = '/tmp'
Tue Jan  7 11:47:05 2020 us=650296   push_ifconfig_defined = DISABLED
Tue Jan  7 11:47:05 2020 us=650317   push_ifconfig_local = 0.0.0.0
Tue Jan  7 11:47:05 2020 us=650332   push_ifconfig_remote_netmask = 0.0.0.0
Tue Jan  7 11:47:05 2020 us=650346   push_ifconfig_ipv6_defined = DISABLED
Tue Jan  7 11:47:05 2020 us=650361   push_ifconfig_ipv6_local = ::/0
Tue Jan  7 11:47:05 2020 us=650375   push_ifconfig_ipv6_remote = ::
Tue Jan  7 11:47:05 2020 us=650389   enable_c2c = DISABLED
Tue Jan  7 11:47:05 2020 us=650402   duplicate_cn = DISABLED
Tue Jan  7 11:47:05 2020 us=650416   cf_max = 0
Tue Jan  7 11:47:05 2020 us=650436   cf_per = 0
Tue Jan  7 11:47:05 2020 us=650450   max_clients = 1024
Tue Jan  7 11:47:05 2020 us=650464   max_routes_per_client = 256
Tue Jan  7 11:47:05 2020 us=650478   auth_user_pass_verify_script = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650492   auth_user_pass_verify_script_via_file = DISABLED
Tue Jan  7 11:47:05 2020 us=650505   auth_token_generate = DISABLED
Tue Jan  7 11:47:05 2020 us=650519   auth_token_lifetime = 0
Tue Jan  7 11:47:05 2020 us=650532   port_share_host = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650554   port_share_port = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650569   client = DISABLED
Tue Jan  7 11:47:05 2020 us=650582   pull = DISABLED
Tue Jan  7 11:47:05 2020 us=650596   auth_user_pass_file = '[UNDEF]'
Tue Jan  7 11:47:05 2020 us=650611 OpenVPN 2.4.7 amd64-portbld-freebsd11.2 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Apr  2 2019
Tue Jan  7 11:47:05 2020 us=650629 library versions: OpenSSL 1.0.2o-freebsd  27 Mar 2018, LZO 2.10
Tue Jan  7 11:47:05 2020 us=651480 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Jan  7 11:47:05 2020 us=671024 Diffie-Hellman initialized with 2048 bit key
Tue Jan  7 11:47:05 2020 us=707890 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan  7 11:47:05 2020 us=707936 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Jan  7 11:47:05 2020 us=707959 TLS-Auth MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan  7 11:47:05 2020 us=708254 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=epair0b HWADDR=02:ff:60:9b:c8:80
Tue Jan  7 11:47:05 2020 us=708339 TUN/TAP device /dev/tun0 opened
Tue Jan  7 11:47:05 2020 us=708360 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Jan  7 11:47:05 2020 us=708381 /sbin/ifconfig tun0 10.8.0.1 10.8.0.2 mtu 1500 netmask 255.255.255.255 up
Tue Jan  7 11:47:05 2020 us=713192 /sbin/route add -net 10.8.0.0 10.8.0.2 255.255.255.0
add net 10.8.0.0: gateway 10.8.0.2
Tue Jan  7 11:47:05 2020 us=723023 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:47:05 2020 us=723531 Could not determine IPv4/IPv6 protocol. Using AF_INET6
Tue Jan  7 11:47:05 2020 us=723565 Socket Buffers: R=[42080->42080] S=[9216->9216]
Tue Jan  7 11:47:05 2020 us=723582 setsockopt(IPV6_V6ONLY=0)
Tue Jan  7 11:47:05 2020 us=723631 UDPv6 link local (bound): [AF_INET6][undef]:1194
Tue Jan  7 11:47:05 2020 us=723649 UDPv6 link remote: [AF_UNSPEC]
Tue Jan  7 11:47:05 2020 us=723672 GID set to nobody
Tue Jan  7 11:47:05 2020 us=723694 UID set to nobody
Tue Jan  7 11:47:05 2020 us=723714 MULTI: multi_init called, r=256 v=256
Tue Jan  7 11:47:05 2020 us=723753 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Tue Jan  7 11:47:05 2020 us=723781 ifconfig_pool_read(), in='nooblink-vpn-client,10.8.0.4', TODO: IPv6
Tue Jan  7 11:47:05 2020 us=723811 succeeded -> ifconfig_pool_set()
Tue Jan  7 11:47:05 2020 us=723829 IFCONFIG POOL LIST
Tue Jan  7 11:47:05 2020 us=723844 nooblink-vpn-client,10.8.0.4
Tue Jan  7 11:47:05 2020 us=723887 Initialization Sequence Completed
Tue Jan  7 11:47:14 2020 us=408062 MULTI: multi_create_instance called
Tue Jan  7 11:47:14 2020 us=408172 68.6.219.141:39654 Re-using SSL/TLS context
Tue Jan  7 11:47:14 2020 us=408340 68.6.219.141:39654 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan  7 11:47:14 2020 us=408377 68.6.219.141:39654 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:47:14 2020 us=408435 68.6.219.141:39654 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan  7 11:47:14 2020 us=408452 68.6.219.141:39654 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan  7 11:47:14 2020 us=408503 68.6.219.141:39654 TLS: Initial packet from [AF_INET6]::ffff:68.6.219.141:39654, sid=80eee54f 781cea70
Tue Jan  7 11:47:14 2020 us=607980 68.6.219.141:39654 VERIFY OK: depth=1, CN=FreeNAS OpenVPN CA
Tue Jan  7 11:47:14 2020 us=608166 68.6.219.141:39654 VERIFY KU OK
Tue Jan  7 11:47:14 2020 us=608192 68.6.219.141:39654 Validating certificate extended key usage
Tue Jan  7 11:47:14 2020 us=608212 68.6.219.141:39654 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Tue Jan  7 11:47:14 2020 us=608238 68.6.219.141:39654 VERIFY EKU OK
Tue Jan  7 11:47:14 2020 us=608253 68.6.219.141:39654 VERIFY OK: depth=0, CN=nooblink-vpn-client
Tue Jan  7 11:47:14 2020 us=673496 68.6.219.141:39654 peer info: IV_VER=2.4.6
Tue Jan  7 11:47:14 2020 us=673529 68.6.219.141:39654 peer info: IV_PLAT=linux
Tue Jan  7 11:47:14 2020 us=673546 68.6.219.141:39654 peer info: IV_PROTO=2
Tue Jan  7 11:47:14 2020 us=673571 68.6.219.141:39654 peer info: IV_NCP=2
Tue Jan  7 11:47:14 2020 us=673586 68.6.219.141:39654 peer info: IV_LZ4=1
Tue Jan  7 11:47:14 2020 us=673600 68.6.219.141:39654 peer info: IV_LZ4v2=1
Tue Jan  7 11:47:14 2020 us=673616 68.6.219.141:39654 peer info: IV_LZO=1
Tue Jan  7 11:47:14 2020 us=673630 68.6.219.141:39654 peer info: IV_COMP_STUB=1
Tue Jan  7 11:47:14 2020 us=673648 68.6.219.141:39654 peer info: IV_COMP_STUBv2=1
Tue Jan  7 11:47:14 2020 us=673666 68.6.219.141:39654 peer info: IV_TCPNL=1
Tue Jan  7 11:47:14 2020 us=740686 68.6.219.141:39654 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jan  7 11:47:14 2020 us=740730 68.6.219.141:39654 [nooblink-vpn-client] Peer Connection Initiated with [AF_INET6]::ffff:68.6.219.141:39654
Tue Jan  7 11:47:14 2020 us=740762 nooblink-vpn-client/68.6.219.141:39654 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Tue Jan  7 11:47:14 2020 us=740808 nooblink-vpn-client/68.6.219.141:39654 MULTI: Learn: 10.8.0.6 -> nooblink-vpn-client/68.6.219.141:39654
Tue Jan  7 11:47:14 2020 us=740835 nooblink-vpn-client/68.6.219.141:39654 MULTI: primary virtual IP for nooblink-vpn-client/68.6.219.141:39654: 10.8.0.6
Tue Jan  7 11:47:16 2020 us=182669 nooblink-vpn-client/68.6.219.141:39654 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jan  7 11:47:16 2020 us=182752 nooblink-vpn-client/68.6.219.141:39654 SENT CONTROL [nooblink-vpn-client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM' (status=1)
Tue Jan  7 11:47:16 2020 us=182790 nooblink-vpn-client/68.6.219.141:39654 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Jan  7 11:47:16 2020 us=182817 nooblink-vpn-client/68.6.219.141:39654 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:47:16 2020 us=182932 nooblink-vpn-client/68.6.219.141:39654 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:47:16 2020 us=182962 nooblink-vpn-client/68.6.219.141:39654 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:47:28 2020 us=976684 MULTI: multi_create_instance called
Tue Jan  7 11:47:28 2020 us=976781 174.194.145.136:11737 Re-using SSL/TLS context
Tue Jan  7 11:47:28 2020 us=976908 174.194.145.136:11737 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan  7 11:47:28 2020 us=976931 174.194.145.136:11737 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:47:28 2020 us=976997 174.194.145.136:11737 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan  7 11:47:28 2020 us=977014 174.194.145.136:11737 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan  7 11:47:28 2020 us=977060 174.194.145.136:11737 TLS: Initial packet from [AF_INET6]::ffff:174.194.145.136:11737, sid=ac6440f5 085699c6
Tue Jan  7 11:47:35 2020 us=580446 174.194.145.136:11737 VERIFY OK: depth=1, CN=FreeNAS OpenVPN CA
Tue Jan  7 11:47:35 2020 us=580687 174.194.145.136:11737 VERIFY KU OK
Tue Jan  7 11:47:35 2020 us=580716 174.194.145.136:11737 Validating certificate extended key usage
Tue Jan  7 11:47:35 2020 us=580733 174.194.145.136:11737 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Tue Jan  7 11:47:35 2020 us=580763 174.194.145.136:11737 VERIFY EKU OK
Tue Jan  7 11:47:35 2020 us=580778 174.194.145.136:11737 VERIFY OK: depth=0, CN=nooblink-vpn-client
Tue Jan  7 11:47:37 2020 us=732917 174.194.145.136:11737 peer info: IV_VER=2.4.7
Tue Jan  7 11:47:37 2020 us=732984 174.194.145.136:11737 peer info: IV_PLAT=mac
Tue Jan  7 11:47:37 2020 us=733004 174.194.145.136:11737 peer info: IV_PROTO=2
Tue Jan  7 11:47:37 2020 us=733019 174.194.145.136:11737 peer info: IV_NCP=2
Tue Jan  7 11:47:37 2020 us=733053 174.194.145.136:11737 peer info: IV_LZ4=1
Tue Jan  7 11:47:37 2020 us=733068 174.194.145.136:11737 peer info: IV_LZ4v2=1
Tue Jan  7 11:47:37 2020 us=733082 174.194.145.136:11737 peer info: IV_LZO=1
Tue Jan  7 11:47:37 2020 us=733099 174.194.145.136:11737 peer info: IV_COMP_STUB=1
Tue Jan  7 11:47:37 2020 us=733113 174.194.145.136:11737 peer info: IV_COMP_STUBv2=1
Tue Jan  7 11:47:37 2020 us=733127 174.194.145.136:11737 peer info: IV_TCPNL=1
Tue Jan  7 11:47:37 2020 us=733149 174.194.145.136:11737 peer info: IV_GUI_VER="net.tunnelblick.tunnelblick_5400_3.8.1__build_5400)"
Tue Jan  7 11:47:38 2020 us=99596 174.194.145.136:11737 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jan  7 11:47:38 2020 us=99644 174.194.145.136:11737 [nooblink-vpn-client] Peer Connection Initiated with [AF_INET6]::ffff:174.194.145.136:11737
Tue Jan  7 11:47:38 2020 us=99815 MULTI: new connection by client 'nooblink-vpn-client' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Tue Jan  7 11:47:38 2020 us=99852 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Tue Jan  7 11:47:38 2020 us=99896 MULTI: Learn: 10.8.0.6 -> nooblink-vpn-client/174.194.145.136:11737
Tue Jan  7 11:47:38 2020 us=99912 MULTI: primary virtual IP for nooblink-vpn-client/174.194.145.136:11737: 10.8.0.6
Tue Jan  7 11:47:38 2020 us=216454 nooblink-vpn-client/174.194.145.136:11737 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jan  7 11:47:38 2020 us=216510 nooblink-vpn-client/174.194.145.136:11737 SENT CONTROL [nooblink-vpn-client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 1,cipher AES-256-GCM' (status=1)
Tue Jan  7 11:47:38 2020 us=216530 nooblink-vpn-client/174.194.145.136:11737 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Jan  7 11:47:38 2020 us=216569 nooblink-vpn-client/174.194.145.136:11737 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:47:38 2020 us=216672 nooblink-vpn-client/174.194.145.136:11737 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:47:38 2020 us=216691 nooblink-vpn-client/174.194.145.136:11737 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:47:43 2020 us=508135 nooblink-vpn-client/174.194.145.136:11737 PID_ERR replay-window backtrack occurred [15] [SSL-0] [000000000____0__000000000000000000000000000000000111111111111111] 0:82 0:67 t=1578422863[0] r=[-1,64,15,15,1] sl=[46,64,64,528]
Tue Jan  7 11:47:43 2020 us=686723 nooblink-vpn-client/174.194.145.136:11737 PID_ERR replay-window backtrack occurred [17] [SSL-0] [000000000000____0_0000000000000000000000000000000000111111111111] 0:85 0:68 t=1578422863[0] r=[-1,64,15,17,1] sl=[43,64,64,528]
Tue Jan  7 11:49:38 2020 us=409117 MULTI: multi_create_instance called
Tue Jan  7 11:49:38 2020 us=409231 68.6.219.141:43774 Re-using SSL/TLS context
Tue Jan  7 11:49:38 2020 us=409313 68.6.219.141:43774 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan  7 11:49:38 2020 us=409336 68.6.219.141:43774 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:49:38 2020 us=409382 68.6.219.141:43774 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan  7 11:49:38 2020 us=409409 68.6.219.141:43774 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan  7 11:49:38 2020 us=409449 68.6.219.141:43774 TLS: Initial packet from [AF_INET6]::ffff:68.6.219.141:43774, sid=8fb3dd9a f70b21e4
Tue Jan  7 11:49:38 2020 us=602495 68.6.219.141:43774 VERIFY OK: depth=1, CN=FreeNAS OpenVPN CA
Tue Jan  7 11:49:38 2020 us=602703 68.6.219.141:43774 VERIFY KU OK
Tue Jan  7 11:49:38 2020 us=602731 68.6.219.141:43774 Validating certificate extended key usage
Tue Jan  7 11:49:38 2020 us=602751 68.6.219.141:43774 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Tue Jan  7 11:49:38 2020 us=602767 68.6.219.141:43774 VERIFY EKU OK
Tue Jan  7 11:49:38 2020 us=602783 68.6.219.141:43774 VERIFY OK: depth=0, CN=nooblink-vpn-client
Tue Jan  7 11:49:38 2020 us=669030 68.6.219.141:43774 peer info: IV_VER=2.4.6
Tue Jan  7 11:49:38 2020 us=669066 68.6.219.141:43774 peer info: IV_PLAT=linux
Tue Jan  7 11:49:38 2020 us=669084 68.6.219.141:43774 peer info: IV_PROTO=2
Tue Jan  7 11:49:38 2020 us=669102 68.6.219.141:43774 peer info: IV_NCP=2
Tue Jan  7 11:49:38 2020 us=669118 68.6.219.141:43774 peer info: IV_LZ4=1
Tue Jan  7 11:49:38 2020 us=669135 68.6.219.141:43774 peer info: IV_LZ4v2=1
Tue Jan  7 11:49:38 2020 us=669151 68.6.219.141:43774 peer info: IV_LZO=1
Tue Jan  7 11:49:38 2020 us=669180 68.6.219.141:43774 peer info: IV_COMP_STUB=1
Tue Jan  7 11:49:38 2020 us=669197 68.6.219.141:43774 peer info: IV_COMP_STUBv2=1
Tue Jan  7 11:49:38 2020 us=669214 68.6.219.141:43774 peer info: IV_TCPNL=1
Tue Jan  7 11:49:38 2020 us=732761 68.6.219.141:43774 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jan  7 11:49:38 2020 us=732808 68.6.219.141:43774 [nooblink-vpn-client] Peer Connection Initiated with [AF_INET6]::ffff:68.6.219.141:43774
Tue Jan  7 11:49:38 2020 us=732927 MULTI: new connection by client 'nooblink-vpn-client' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Tue Jan  7 11:49:38 2020 us=732952 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Tue Jan  7 11:49:38 2020 us=732995 MULTI: Learn: 10.8.0.6 -> nooblink-vpn-client/68.6.219.141:43774
Tue Jan  7 11:49:38 2020 us=733027 MULTI: primary virtual IP for nooblink-vpn-client/68.6.219.141:43774: 10.8.0.6
Tue Jan  7 11:49:39 2020 us=900768 nooblink-vpn-client/68.6.219.141:43774 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jan  7 11:49:39 2020 us=900840 nooblink-vpn-client/68.6.219.141:43774 SENT CONTROL [nooblink-vpn-client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM' (status=1)
Tue Jan  7 11:49:39 2020 us=900879 nooblink-vpn-client/68.6.219.141:43774 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Jan  7 11:49:39 2020 us=900904 nooblink-vpn-client/68.6.219.141:43774 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:49:39 2020 us=901005 nooblink-vpn-client/68.6.219.141:43774 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:49:39 2020 us=901023 nooblink-vpn-client/68.6.219.141:43774 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:51:38 2020 us=459925 MULTI: multi_create_instance called
Tue Jan  7 11:51:38 2020 us=460031 174.194.145.136:11719 Re-using SSL/TLS context
Tue Jan  7 11:51:38 2020 us=460123 174.194.145.136:11719 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Jan  7 11:51:38 2020 us=460145 174.194.145.136:11719 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:51:38 2020 us=460191 174.194.145.136:11719 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Tue Jan  7 11:51:38 2020 us=460230 174.194.145.136:11719 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Tue Jan  7 11:51:38 2020 us=460267 174.194.145.136:11719 TLS: Initial packet from [AF_INET6]::ffff:174.194.145.136:11719, sid=29807a94 5e0c7dfe
Tue Jan  7 11:51:38 2020 us=739632 174.194.145.136:11719 VERIFY OK: depth=1, CN=FreeNAS OpenVPN CA
Tue Jan  7 11:51:38 2020 us=739828 174.194.145.136:11719 VERIFY KU OK
Tue Jan  7 11:51:38 2020 us=739855 174.194.145.136:11719 Validating certificate extended key usage
Tue Jan  7 11:51:38 2020 us=739872 174.194.145.136:11719 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Tue Jan  7 11:51:38 2020 us=739887 174.194.145.136:11719 VERIFY EKU OK
Tue Jan  7 11:51:38 2020 us=739915 174.194.145.136:11719 VERIFY OK: depth=0, CN=nooblink-vpn-client
Tue Jan  7 11:51:38 2020 us=852021 174.194.145.136:11719 peer info: IV_VER=2.4.7
Tue Jan  7 11:51:38 2020 us=852055 174.194.145.136:11719 peer info: IV_PLAT=mac
Tue Jan  7 11:51:38 2020 us=852073 174.194.145.136:11719 peer info: IV_PROTO=2
Tue Jan  7 11:51:38 2020 us=852088 174.194.145.136:11719 peer info: IV_NCP=2
Tue Jan  7 11:51:38 2020 us=852102 174.194.145.136:11719 peer info: IV_LZ4=1
Tue Jan  7 11:51:38 2020 us=852129 174.194.145.136:11719 peer info: IV_LZ4v2=1
Tue Jan  7 11:51:38 2020 us=852144 174.194.145.136:11719 peer info: IV_LZO=1
Tue Jan  7 11:51:38 2020 us=852159 174.194.145.136:11719 peer info: IV_COMP_STUB=1
Tue Jan  7 11:51:38 2020 us=852174 174.194.145.136:11719 peer info: IV_COMP_STUBv2=1
Tue Jan  7 11:51:38 2020 us=852189 174.194.145.136:11719 peer info: IV_TCPNL=1
Tue Jan  7 11:51:38 2020 us=852204 174.194.145.136:11719 peer info: IV_GUI_VER="net.tunnelblick.tunnelblick_5400_3.8.1__build_5400)"
Tue Jan  7 11:51:38 2020 us=959998 174.194.145.136:11719 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Jan  7 11:51:38 2020 us=960083 174.194.145.136:11719 [nooblink-vpn-client] Peer Connection Initiated with [AF_INET6]::ffff:174.194.145.136:11719
Tue Jan  7 11:51:38 2020 us=960238 MULTI: new connection by client 'nooblink-vpn-client' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Tue Jan  7 11:51:38 2020 us=960307 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Tue Jan  7 11:51:38 2020 us=960355 MULTI: Learn: 10.8.0.6 -> nooblink-vpn-client/174.194.145.136:11719
Tue Jan  7 11:51:38 2020 us=960373 MULTI: primary virtual IP for nooblink-vpn-client/174.194.145.136:11719: 10.8.0.6
Tue Jan  7 11:51:39 2020 us=148174 nooblink-vpn-client/174.194.145.136:11719 PUSH: Received control message: 'PUSH_REQUEST'
Tue Jan  7 11:51:39 2020 us=148250 nooblink-vpn-client/174.194.145.136:11719 SENT CONTROL [nooblink-vpn-client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 1,cipher AES-256-GCM' (status=1)
Tue Jan  7 11:51:39 2020 us=148271 nooblink-vpn-client/174.194.145.136:11719 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Jan  7 11:51:39 2020 us=148296 nooblink-vpn-client/174.194.145.136:11719 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Tue Jan  7 11:51:39 2020 us=148406 nooblink-vpn-client/174.194.145.136:11719 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:51:39 2020 us=148427 nooblink-vpn-client/174.194.145.136:11719 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Jan  7 11:51:39 2020 us=908198 nooblink-vpn-client/174.194.145.136:11719 PID_ERR replay-window backtrack occurred [1] [SSL-0] [0_000000] 0:8 0:7 t=1578423099[0] r=[0,64,15,1,1] sl=[56,8,64,528]
Tue Jan  7 11:51:40 2020 us=254787 nooblink-vpn-client/174.194.145.136:11719 PID_ERR replay-window backtrack occurred [5] [SSL-0] [00000_00000000000111111111111111] 0:32 0:27 t=1578423100[0] r=[-1,64,15,5,1] sl=[32,32,64,528]
Tue Jan  7 11:51:40 2020 us=821829 nooblink-vpn-client/174.194.145.136:11719 PID_ERR replay-window backtrack occurred [9] [SSL-0] [000000000_000000000000000000000000000000000000000000000000000000] 0:114 0:105 t=1578423100[0] r=[-1,64,15,9,1] sl=[14,64,64,528]
Tue Jan  7 11:51:46 2020 us=528965 nooblink-vpn-client/174.194.145.136:11719 PID_ERR replay-window backtrack occurred [10] [SSL-0] [0_0__0__0__00000000000000000000000000000000000000000000000000000] 0:820 0:810 t=1578423106[0] r=[-2,64,15,10,1] sl=[12,64,64,528]

client
dev tun
proto udp
remote [REMOVED] 1196
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
dhcp-option DNS x.x.x.x
dhcp-option DOMAIN [REMOVED]
redirect-gateway def1
verb 3
key-direction 1
<ca>
[REMOVED]
</ca>
<cert>
[REMOVED]
</cert>
<key>
[REMOVED]
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
[REMOVED]
</tls-auth>

This post was too big to include the client log. Will post next.

rmccullough

Client log:

2020-01-07 10:47:22.068585 *Tunnelblick: macOS 10.15.2 (19C57); Tunnelblick 3.8.1 (build 5400); prior version 3.8.0 (build 5370)
2020-01-07 10:47:22.364088 *Tunnelblick: Attempting connection with FreeNAS OpenVPN using shadow copy; Set nameserver = 1025; monitoring connection
2020-01-07 10:47:22.364807 *Tunnelblick: openvpnstart start FreeNAS\ OpenVPN.tblk 61424 1025 0 1 0 1098544 -ptADGNWradsgnw 2.4.7-openssl-1.0.2t
2020-01-07 10:47:22.385218 *Tunnelblick: openvpnstart starting OpenVPN
2020-01-07 10:47:22.559349 Current Parameter Settings:
2020-01-07 10:47:22.559435   config = '/Library/Application Support/Tunnelblick/Users/[REMOVED]/Contents/Resources/config.ovpn'
2020-01-07 10:47:22.559450   mode = 0
2020-01-07 10:47:22.559461   show_ciphers = DISABLED
2020-01-07 10:47:22.559471   show_digests = DISABLED
2020-01-07 10:47:22.559480   show_engines = DISABLED
2020-01-07 10:47:22.559490   genkey = DISABLED
2020-01-07 10:47:22.559500   key_pass_file = '[UNDEF]'
2020-01-07 10:47:22.559509   show_tls_ciphers = DISABLED
2020-01-07 10:47:22.559519   connect_retry_max = 0
2020-01-07 10:47:22.559528 Connection profiles [0]:
2020-01-07 10:47:22.559538   proto = udp
2020-01-07 10:47:22.559548   local = '[UNDEF]'
2020-01-07 10:47:22.559557   local_port = '[UNDEF]'
2020-01-07 10:47:22.559567   remote = '[REMOVED]'
2020-01-07 10:47:22.559577   remote_port = '1196'
2020-01-07 10:47:22.559586   remote_float = DISABLED
2020-01-07 10:47:22.559595   bind_defined = DISABLED
2020-01-07 10:47:22.559605   bind_local = DISABLED
2020-01-07 10:47:22.559614   bind_ipv6_only = DISABLED
2020-01-07 10:47:22.559624   connect_retry_seconds = 5
2020-01-07 10:47:22.559633   connect_timeout = 120
2020-01-07 10:47:22.559643   xormethod = 0
2020-01-07 10:47:22.559655   xormask = ''
2020-01-07 10:47:22.559665   xormasklen = 0
2020-01-07 10:47:22.559674   socks_proxy_server = '[UNDEF]'
2020-01-07 10:47:22.559684   socks_proxy_port = '[UNDEF]'
2020-01-07 10:47:22.559693   tun_mtu = 1500
2020-01-07 10:47:22.559703   tun_mtu_defined = ENABLED
2020-01-07 10:47:22.559712   link_mtu = 1500
2020-01-07 10:47:22.559722   link_mtu_defined = DISABLED
2020-01-07 10:47:22.559731   tun_mtu_extra = 0
2020-01-07 10:47:22.559740   tun_mtu_extra_defined = DISABLED
2020-01-07 10:47:22.559750   mtu_discover_type = -1
2020-01-07 10:47:22.559759   fragment = 0
2020-01-07 10:47:22.559769   mssfix = 1450
2020-01-07 10:47:22.559778   explicit_exit_notification = 0
2020-01-07 10:47:22.559788 Connection profiles END
2020-01-07 10:47:22.559797   remote_random = DISABLED
2020-01-07 10:47:22.559807   ipchange = '[UNDEF]'
2020-01-07 10:47:22.559816   dev = 'tun'
2020-01-07 10:47:22.559825   dev_type = '[UNDEF]'
2020-01-07 10:47:22.559835   dev_node = '[UNDEF]'
2020-01-07 10:47:22.559844   lladdr = '[UNDEF]'
2020-01-07 10:47:22.559854   topology = 1
2020-01-07 10:47:22.559863   ifconfig_local = '[UNDEF]'
2020-01-07 10:47:22.559877   ifconfig_remote_netmask = '[UNDEF]'
2020-01-07 10:47:22.559886   ifconfig_noexec = DISABLED
2020-01-07 10:47:22.559896   ifconfig_nowarn = DISABLED
2020-01-07 10:47:22.559905   ifconfig_ipv6_local = '[UNDEF]'
2020-01-07 10:47:22.559915   ifconfig_ipv6_netbits = 0
2020-01-07 10:47:22.559924   ifconfig_ipv6_remote = '[UNDEF]'
2020-01-07 10:47:22.559934   shaper = 0
2020-01-07 10:47:22.559943   mtu_test = 0
2020-01-07 10:47:22.559952   mlock = DISABLED
2020-01-07 10:47:22.559962   keepalive_ping = 0
2020-01-07 10:47:22.559971   keepalive_timeout = 0
2020-01-07 10:47:22.559981   inactivity_timeout = 0
2020-01-07 10:47:22.559990   ping_send_timeout = 0
2020-01-07 10:47:22.560000   ping_rec_timeout = 0
2020-01-07 10:47:22.560009   ping_rec_timeout_action = 0
2020-01-07 10:47:22.560021   ping_timer_remote = DISABLED
2020-01-07 10:47:22.560031   remap_sigusr1 = 0
2020-01-07 10:47:22.560040   persist_tun = ENABLED
2020-01-07 10:47:22.560050   persist_local_ip = DISABLED
2020-01-07 10:47:22.560059   persist_remote_ip = DISABLED
2020-01-07 10:47:22.560069   persist_key = ENABLED
2020-01-07 10:47:22.560078   passtos = DISABLED
2020-01-07 10:47:22.560088   resolve_retry_seconds = 1000000000
2020-01-07 10:47:22.560097   resolve_in_advance = DISABLED
2020-01-07 10:47:22.560107   username = '[UNDEF]'
2020-01-07 10:47:22.560116   groupname = '[UNDEF]'
2020-01-07 10:47:22.560125   chroot_dir = '[UNDEF]'
2020-01-07 10:47:22.560135   cd_dir = '/Library/Application Support/Tunnelblick/Users/[REMOVED]/Contents/Resources'
2020-01-07 10:47:22.560145   writepid = '[UNDEF]'
2020-01-07 10:47:22.560154   up_script = '[UNDEF]'
2020-01-07 10:47:22.560186   down_script = '/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw'
2020-01-07 10:47:22.560193   down_pre = DISABLED
2020-01-07 10:47:22.560199   up_restart = DISABLED
2020-01-07 10:47:22.560205   up_delay = DISABLED
2020-01-07 10:47:22.560211   daemon = ENABLED
2020-01-07 10:47:22.560217   inetd = 0
2020-01-07 10:47:22.560223   log = ENABLED
2020-01-07 10:47:22.560232   suppress_timestamps = DISABLED
2020-01-07 10:47:22.560238   machine_readable_output = ENABLED
2020-01-07 10:47:22.560244   nice = 0
2020-01-07 10:47:22.560250   verbosity = 4
2020-01-07 10:47:22.560256   mute = 0
2020-01-07 10:47:22.560262   status_file = '[UNDEF]'
2020-01-07 10:47:22.560268   status_file_version = 1
2020-01-07 10:47:22.560274   status_file_update_freq = 60
2020-01-07 10:47:22.560280   occ = ENABLED
2020-01-07 10:47:22.560286   rcvbuf = 0
2020-01-07 10:47:22.560292   sndbuf = 0
2020-01-07 10:47:22.560298   sockflags = 0
2020-01-07 10:47:22.560304   fast_io = DISABLED
2020-01-07 10:47:22.560310   comp.alg = 0
2020-01-07 10:47:22.560316   comp.flags = 0
2020-01-07 10:47:22.560322   route_script = '/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw'
2020-01-07 10:47:22.560328   route_default_gateway = '[UNDEF]'
2020-01-07 10:47:22.560334   route_default_metric = 0
2020-01-07 10:47:22.560340   route_noexec = DISABLED
2020-01-07 10:47:22.560347   route_delay = 0
2020-01-07 10:47:22.560353   route_delay_window = 30
2020-01-07 10:47:22.560359   route_delay_defined = DISABLED
2020-01-07 10:47:22.560365   route_nopull = DISABLED
2020-01-07 10:47:22.560371   route_gateway_via_dhcp = DISABLED
2020-01-07 10:47:22.560378   allow_pull_fqdn = DISABLED
2020-01-07 10:47:22.560388   [redirect_default_gateway local=0]
2020-01-07 10:47:22.560395   management_addr = '127.0.0.1'
2020-01-07 10:47:22.560401   management_port = '61424'
2020-01-07 10:47:22.560407   management_user_pass = '/Library/Application Support/Tunnelblick/nplofebcibjmdmmpajoiokaenlepgifcckehbdja.mip'
2020-01-07 10:47:22.560413   management_log_history_cache = 250
2020-01-07 10:47:22.560420   management_echo_buffer_size = 100
2020-01-07 10:47:22.560426   management_write_peer_info_file = '[UNDEF]'
2020-01-07 10:47:22.560432   management_client_user = '[UNDEF]'
2020-01-07 10:47:22.560438   management_client_group = '[UNDEF]'
2020-01-07 10:47:22.560444   management_flags = 6
2020-01-07 10:47:22.560451   shared_secret_file = '[UNDEF]'
2020-01-07 10:47:22.560457   key_direction = 1
2020-01-07 10:47:22.560463   ciphername = 'AES-256-CBC'
2020-01-07 10:47:22.560471   ncp_enabled = ENABLED
2020-01-07 10:47:22.560477   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
2020-01-07 10:47:22.560483   authname = 'SHA1'
2020-01-07 10:47:22.560489   prng_hash = 'SHA1'
2020-01-07 10:47:22.560495   prng_nonce_secret_len = 16
2020-01-07 10:47:22.560502   keysize = 0
2020-01-07 10:47:22.560508   engine = DISABLED
2020-01-07 10:47:22.560514   replay = ENABLED
2020-01-07 10:47:22.560520   mute_replay_warnings = DISABLED
2020-01-07 10:47:22.560526   replay_window = 64
2020-01-07 10:47:22.560532   replay_time = 15
2020-01-07 10:47:22.560538   packet_id_file = '[UNDEF]'
2020-01-07 10:47:22.560544   use_iv = ENABLED
2020-01-07 10:47:22.560550   test_crypto = DISABLED
2020-01-07 10:47:22.560556   tls_server = DISABLED
2020-01-07 10:47:22.560562   tls_client = ENABLED
2020-01-07 10:47:22.560568   key_method = 2
2020-01-07 10:47:22.560574   ca_file = '[[INLINE]]'
2020-01-07 10:47:22.560580   ca_path = '[UNDEF]'
2020-01-07 10:47:22.560586   dh_file = '[UNDEF]'
2020-01-07 10:47:22.560592   cert_file = '[[INLINE]]'
2020-01-07 10:47:22.560598   extra_certs_file = '[UNDEF]'
2020-01-07 10:47:22.560604   priv_key_file = '[[INLINE]]'
2020-01-07 10:47:22.560610   pkcs12_file = '[UNDEF]'
2020-01-07 10:47:22.560616   cipher_list = '[UNDEF]'
2020-01-07 10:47:22.560622   cipher_list_tls13 = '[UNDEF]'
2020-01-07 10:47:22.560628   tls_cert_profile = '[UNDEF]'
2020-01-07 10:47:22.560634   tls_verify = '[UNDEF]'
2020-01-07 10:47:22.560655   tls_export_cert = '[UNDEF]'
2020-01-07 10:47:22.560662   verify_x509_type = 0
2020-01-07 10:47:22.560668   verify_x509_name = '[UNDEF]'
2020-01-07 10:47:22.560674   crl_file = '[UNDEF]'
2020-01-07 10:47:22.560680   ns_cert_type = 0
2020-01-07 10:47:22.560686   remote_cert_ku[i] = 65535
2020-01-07 10:47:22.560692   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560698   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560710   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560717   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560722   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560728   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560753   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560758   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560763   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560768   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560773   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560841   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560860   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560867   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560873   remote_cert_ku[i] = 0
2020-01-07 10:47:22.560882   remote_cert_eku = 'TLS Web Server Authentication'
2020-01-07 10:47:22.560891   ssl_flags = 0
2020-01-07 10:47:22.560899   tls_timeout = 2
2020-01-07 10:47:22.560905   renegotiate_bytes = -1
2020-01-07 10:47:22.560910   renegotiate_packets = 0
2020-01-07 10:47:22.560916   renegotiate_seconds = 3600
2020-01-07 10:47:22.560921   handshake_window = 60
2020-01-07 10:47:22.560926   transition_window = 3600
2020-01-07 10:47:22.560932   single_session = DISABLED
2020-01-07 10:47:22.560937   push_peer_info = DISABLED
2020-01-07 10:47:22.560942   tls_exit = DISABLED
2020-01-07 10:47:22.560947   tls_auth_file = '[[INLINE]]'
2020-01-07 10:47:22.560953   tls_crypt_file = '[UNDEF]'
2020-01-07 10:47:22.560958   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.560964   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.560969   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.560974   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.560979   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.560984   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.560990   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.560995   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561000   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561005   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561010   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561016   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561021   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561026   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561031   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561036   pkcs11_protected_authentication = DISABLED
2020-01-07 10:47:22.561042   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561047   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561052   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561058   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561063   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561068   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561073   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561079   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561084   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561089   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561094   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561100   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561105   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561110   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561115   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561120   pkcs11_private_mode = 00000000
2020-01-07 10:47:22.561126   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561131   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561136   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561159   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561165   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561170   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561176   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561181   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561186   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561192   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561197   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561202   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561207   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561213   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561218   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561223   pkcs11_cert_private = DISABLED
2020-01-07 10:47:22.561229   pkcs11_pin_cache_period = -1
2020-01-07 10:47:22.561234   pkcs11_id = '[UNDEF]'
2020-01-07 10:47:22.561239   pkcs11_id_management = DISABLED
2020-01-07 10:47:22.561254   server_network = 0.0.0.0
2020-01-07 10:47:22.561261   server_netmask = 0.0.0.0
2020-01-07 10:47:22.561276   server_network_ipv6 = ::
2020-01-07 10:47:22.561282   server_netbits_ipv6 = 0
2020-01-07 10:47:22.561288   server_bridge_ip = 0.0.0.0
2020-01-07 10:47:22.561294   server_bridge_netmask = 0.0.0.0
2020-01-07 10:47:22.561300   server_bridge_pool_start = 0.0.0.0
2020-01-07 10:47:22.561306   server_bridge_pool_end = 0.0.0.0
2020-01-07 10:47:22.561312   ifconfig_pool_defined = DISABLED
2020-01-07 10:47:22.561318   ifconfig_pool_start = 0.0.0.0
2020-01-07 10:47:22.561326   ifconfig_pool_end = 0.0.0.0
2020-01-07 10:47:22.561333   ifconfig_pool_netmask = 0.0.0.0
2020-01-07 10:47:22.561338   ifconfig_pool_persist_filename = '[UNDEF]'
2020-01-07 10:47:22.561344   ifconfig_pool_persist_refresh_freq = 600
2020-01-07 10:47:22.561349   ifconfig_ipv6_pool_defined = DISABLED
2020-01-07 10:47:22.561355   ifconfig_ipv6_pool_base = ::
2020-01-07 10:47:22.561360   ifconfig_ipv6_pool_netbits = 0
2020-01-07 10:47:22.561366   n_bcast_buf = 256
2020-01-07 10:47:22.561371   tcp_queue_limit = 64
2020-01-07 10:47:22.561376   real_hash_size = 256
2020-01-07 10:47:22.561382   virtual_hash_size = 256
2020-01-07 10:47:22.561387   client_connect_script = '[UNDEF]'
2020-01-07 10:47:22.561392   learn_address_script = '[UNDEF]'
2020-01-07 10:47:22.561398   client_disconnect_script = '[UNDEF]'
2020-01-07 10:47:22.561403   client_config_dir = '[UNDEF]'
2020-01-07 10:47:22.561408   ccd_exclusive = DISABLED
2020-01-07 10:47:22.561414   tmp_dir = '/var/folders/9p/cpfgp4z15nvd2583tfk87lzr0000gn/T/'
2020-01-07 10:47:22.561419   push_ifconfig_defined = DISABLED
2020-01-07 10:47:22.561425   push_ifconfig_local = 0.0.0.0
2020-01-07 10:47:22.561431   push_ifconfig_remote_netmask = 0.0.0.0
2020-01-07 10:47:22.561436   push_ifconfig_ipv6_defined = DISABLED
2020-01-07 10:47:22.561442   push_ifconfig_ipv6_local = ::/0
2020-01-07 10:47:22.561448   push_ifconfig_ipv6_remote = ::
2020-01-07 10:47:22.561453   enable_c2c = DISABLED
2020-01-07 10:47:22.561458   duplicate_cn = DISABLED
2020-01-07 10:47:22.561464   cf_max = 0
2020-01-07 10:47:22.561469   cf_per = 0
2020-01-07 10:47:22.561475   max_clients = 1024
2020-01-07 10:47:22.561480   max_routes_per_client = 256
2020-01-07 10:47:22.561485   auth_user_pass_verify_script = '[UNDEF]'
2020-01-07 10:47:22.561490   auth_user_pass_verify_script_via_file = DISABLED
2020-01-07 10:47:22.561496   auth_token_generate = DISABLED
2020-01-07 10:47:22.561501   auth_token_lifetime = 0
2020-01-07 10:47:22.561506   port_share_host = '[UNDEF]'
2020-01-07 10:47:22.561512   port_share_port = '[UNDEF]'
2020-01-07 10:47:22.561517   client = ENABLED
2020-01-07 10:47:22.561522   pull = ENABLED
2020-01-07 10:47:22.561527   auth_user_pass_file = '[UNDEF]'
2020-01-07 10:47:22.561537 OpenVPN 2.4.7 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Sep 11 2019
2020-01-07 10:47:22.561548 library versions: OpenSSL 1.0.2t  10 Sep 2019, LZO 2.10
2020-01-07 10:47:22.562590 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:61424
2020-01-07 10:47:22.562617 Need hold release from management interface, waiting...
2020-01-07 10:47:22.988361 *Tunnelblick: openvpnstart log:
     OpenVPN started successfully.
     Command used to start OpenVPN (one argument per displayed line):
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.7-openssl-1.0.2t/openvpn
          --daemon
          --log /Library/Application Support/Tunnelblick/Logs/-SUsers-S[REMOVED]-SContents-SResources-Sconfig.ovpn.1025_0_1_0_1098544.61424.openvpn.log
          --cd /Library/Application Support/Tunnelblick/Users/[REMOVED]/Contents/Resources
          --machine-readable-output
          --setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5400 3.8.1 (build 5400)"
          --verb 4
          --config /Library/Application Support/Tunnelblick/Users/[REMOVED]/Contents/Resources/config.ovpn
          --setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Users/[REMOVED]/Contents/Resources
          --verb 4
          --cd /Library/Application Support/Tunnelblick/Users/[REMOVED]/Contents/Resources
          --management 127.0.0.1 61424 /Library/Application Support/Tunnelblick/nplofebcibjmdmmpajoiokaenlepgifcckehbdja.mip
          --management-query-passwords
          --management-hold
          --redirect-gateway def1
          --script-security 2
          --route-up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
          --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
2020-01-07 10:47:22.998432 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:61424
2020-01-07 10:47:23.031178 MANAGEMENT: CMD 'pid'
2020-01-07 10:47:23.031239 MANAGEMENT: CMD 'auth-retry interact'
2020-01-07 10:47:23.031267 MANAGEMENT: CMD 'state on'
2020-01-07 10:47:23.031336 MANAGEMENT: CMD 'state'
2020-01-07 10:47:23.031393 MANAGEMENT: CMD 'bytecount 1'
2020-01-07 10:47:23.032024 *Tunnelblick: Established communication with OpenVPN
2020-01-07 10:47:23.490090 *Tunnelblick: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2020-01-07 10:47:23.493164 MANAGEMENT: CMD 'hold release'
2020-01-07 10:47:23.493620 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2020-01-07 10:47:23.530259 *Tunnelblick: Obtained passphrase from the Keychain
2020-01-07 10:47:23.531248 MANAGEMENT: CMD 'password [...]'
2020-01-07 10:47:23.531372 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2020-01-07 10:47:23.535301 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2020-01-07 10:47:23.535353 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2020-01-07 10:47:23.535441 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2020-01-07 10:47:23.535475 MANAGEMENT: >STATE:1578422843,RESOLVE,,,,,,
2020-01-07 10:47:23.848788 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
2020-01-07 10:47:23.848851 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
2020-01-07 10:47:23.848867 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
2020-01-07 10:47:23.848887 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1196
2020-01-07 10:47:23.849120 Socket Buffers: R=[786896->786896] S=[9216->9216]
2020-01-07 10:47:23.849187 UDP link local: (not bound)
2020-01-07 10:47:23.849233 UDP link remote: [AF_INET]x.x.x.x:1196
2020-01-07 10:47:23.849341 MANAGEMENT: >STATE:1578422843,WAIT,,,,,,
2020-01-07 10:47:29.028663 MANAGEMENT: >STATE:1578422849,AUTH,,,,,,
2020-01-07 10:47:29.028767 TLS: Initial packet from [AF_INET]x.x.x.x:1196, sid=647b1d20 b4ece0c2
2020-01-07 10:47:32.593180 VERIFY OK: depth=1, CN=FreeNAS OpenVPN CA
2020-01-07 10:47:32.593620 VERIFY KU OK
2020-01-07 10:47:32.593651 Validating certificate extended key usage
2020-01-07 10:47:32.593672 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2020-01-07 10:47:32.593687 VERIFY EKU OK
2020-01-07 10:47:32.593701 VERIFY OK: depth=0, CN=openvpn-server
2020-01-07 10:47:37.783772 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2020-01-07 10:47:37.783886 [openvpn-server] Peer Connection Initiated with [AF_INET]x.x.x.x:1196
2020-01-07 10:47:38.018815 MANAGEMENT: >STATE:1578422858,GET_CONFIG,,,,,,
2020-01-07 10:47:38.018947 SENT CONTROL [openvpn-server]: 'PUSH_REQUEST' (status=1)
2020-01-07 10:47:38.276558 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 1,cipher AES-256-GCM'
2020-01-07 10:47:38.276744 OPTIONS IMPORT: timers and/or timeouts modified
2020-01-07 10:47:38.276771 OPTIONS IMPORT: --ifconfig/up options modified
2020-01-07 10:47:38.276786 OPTIONS IMPORT: route options modified
2020-01-07 10:47:38.276800 OPTIONS IMPORT: peer-id set
2020-01-07 10:47:38.276813 OPTIONS IMPORT: adjusting link_mtu to 1624
2020-01-07 10:47:38.276827 OPTIONS IMPORT: data channel crypto options modified
2020-01-07 10:47:38.276841 Data Channel: using negotiated cipher 'AES-256-GCM'
2020-01-07 10:47:38.276914 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
2020-01-07 10:47:38.277266 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-01-07 10:47:38.282593 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-01-07 10:47:38.282969 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2020-01-07 10:47:38.283005 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2020-01-07 10:47:38.283041 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2020-01-07 10:47:38.283055 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2020-01-07 10:47:38.283198 Opened utun device utun4
2020-01-07 10:47:38.283223 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2020-01-07 10:47:38.283241 MANAGEMENT: >STATE:1578422858,ASSIGN_IP,,10.8.0.6,,,,
2020-01-07 10:47:38.283291 /sbin/ifconfig utun4 delete
                           ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2020-01-07 10:47:38.287574 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2020-01-07 10:47:38.287695 /sbin/ifconfig utun4 10.8.0.6 10.8.0.5 mtu 1500 netmask 255.255.255.255 up
2020-01-07 10:47:38.292270 /sbin/route add -net x.x.x.x 172.20.10.1 255.255.255.255
                           add net x.x.x.x: gateway 172.20.10.1
2020-01-07 10:47:38.298856 /sbin/route add -net 0.0.0.0 10.8.0.5 128.0.0.0
                           add net 0.0.0.0: gateway 10.8.0.5
2020-01-07 10:47:38.301684 /sbin/route add -net 128.0.0.0 10.8.0.5 128.0.0.0
                           add net 128.0.0.0: gateway 10.8.0.5
2020-01-07 10:47:38.304122 MANAGEMENT: >STATE:1578422858,ADD_ROUTES,,,,,,
2020-01-07 10:47:38.304176 /sbin/route add -net 192.168.1.0 10.8.0.5 255.255.255.0
                           add net 192.168.1.0: gateway 10.8.0.5
2020-01-07 10:47:38.306503 /sbin/route add -net 10.8.0.1 10.8.0.5 255.255.255.255
                           add net 10.8.0.1: gateway 10.8.0.5
                           10:47:38 *Tunnelblick:  **********************************************
                           10:47:38 *Tunnelblick:  Start of output from client.up.tunnelblick.sh
                           10:47:40 *Tunnelblick:  Disabled IPv6 for 'USB 10/100 LAN'
                           10:47:40 *Tunnelblick:  Disabled IPv6 for 'iPhone USB'
                           10:47:40 *Tunnelblick:  Disabled IPv6 for 'Wi-Fi'
                           10:47:40 *Tunnelblick:  Disabled IPv6 for 'Bluetooth PAN'
                           10:47:40 *Tunnelblick:  Disabled IPv6 for 'Thunderbolt Bridge'
                           10:47:40 *Tunnelblick:  Disabled IPv6 for 'Thunderbolt Ethernet Slot  1'
                           10:47:40 *Tunnelblick:  Retrieved from OpenVPN: name server(s) [ 192.168.1.1 ], domain name [ ***REMOVED*** ], search domain(s) [ ], and SMB server(s) [ ]
                           10:47:40 *Tunnelblick:  Not aggregating ServerAddresses because running on macOS 10.6 or higher
                           10:47:40 *Tunnelblick:  Setting search domains to '***REMOVED***' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                           10:47:42 *Tunnelblick:  Saved the DNS and SMB configurations so they can be restored
                           10:47:42 *Tunnelblick:  Changed DNS ServerAddresses setting from '172.20.10.1' to '192.168.1.1'
                           10:47:42 *Tunnelblick:  Changed DNS SearchDomains setting from '' to '***REMOVED***'
                           10:47:42 *Tunnelblick:  Changed DNS DomainName setting from '' to '***REMOVED***'
                           10:47:42 *Tunnelblick:  Did not change SMB NetBIOSName setting of ''
                           10:47:42 *Tunnelblick:  Did not change SMB Workgroup setting of ''
                           10:47:42 *Tunnelblick:  Did not change SMB WINSAddresses setting of ''
                           10:47:42 *Tunnelblick:  DNS servers '192.168.1.1' will be used for DNS queries when the VPN is active
                           10:47:42 *Tunnelblick:  NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.
                           10:47:42 *Tunnelblick:  Flushed the DNS cache via dscacheutil
                           10:47:42 *Tunnelblick:  /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                           10:47:42 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed
                           10:47:42 *Tunnelblick:  Not notifying mDNSResponderHelper that the DNS cache was flushed because it is not running
                           10:47:42 *Tunnelblick:  Setting up to monitor system configuration with process-network-changes
                           10:47:42 *Tunnelblick:  End of output from client.up.tunnelblick.sh
                           10:47:42 *Tunnelblick:  **********************************************
2020-01-07 10:47:42.477001 Initialization Sequence Completed
2020-01-07 10:47:42.477081 MANAGEMENT: >STATE:1578422862,CONNECTED,SUCCESS,10.8.0.6,x.x.x.x,1196,,
2020-01-07 10:47:42.697309 *Tunnelblick: DNS address 192.168.1.1 is being routed through the VPN
2020-01-07 10:47:47.290625 *Tunnelblick: process-network-changes: A system configuration change was ignored
2020-01-07 10:47:49.903907 *Tunnelblick: This computer's apparent public IP address changed from 174.194.145.136 before connection to 91.207.175.50 after connection
2020-01-07 10:51:38.032036 [openvpn-server] Inactivity timeout (--ping-restart), restarting
2020-01-07 10:51:38.032417 TCP/UDP: Closing socket
2020-01-07 10:51:38.032563 SIGUSR1[soft,ping-restart] received, process restarting
2020-01-07 10:51:38.032595 MANAGEMENT: >STATE:1578423098,RECONNECTING,ping-restart,,,,,
2020-01-07 10:51:38.361318 MANAGEMENT: CMD 'hold release'
2020-01-07 10:51:38.361392 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2020-01-07 10:51:38.361412 Re-using SSL/TLS context
2020-01-07 10:51:38.361539 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2020-01-07 10:51:38.361695 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
2020-01-07 10:51:38.361787 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
2020-01-07 10:51:38.361823 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
2020-01-07 10:51:38.361868 TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1196
2020-01-07 10:51:38.361991 Socket Buffers: R=[786896->786896] S=[9216->9216]
2020-01-07 10:51:38.362019 UDP link local: (not bound)
2020-01-07 10:51:38.362046 UDP link remote: [AF_INET]x.x.x.x:1196
2020-01-07 10:51:38.362084 MANAGEMENT: >STATE:1578423098,WAIT,,,,,,
2020-01-07 10:51:38.362416 MANAGEMENT: CMD 'hold release'
2020-01-07 10:51:38.516643 MANAGEMENT: >STATE:1578423098,AUTH,,,,,,
2020-01-07 10:51:38.516746 TLS: Initial packet from [AF_INET]x.x.x.x:1196, sid=dd77b75c cb043387
2020-01-07 10:51:38.642542 VERIFY OK: depth=1, CN=FreeNAS OpenVPN CA
2020-01-07 10:51:38.642899 VERIFY KU OK
2020-01-07 10:51:38.642955 Validating certificate extended key usage
2020-01-07 10:51:38.642993 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2020-01-07 10:51:38.643011 VERIFY EKU OK
2020-01-07 10:51:38.643023 VERIFY OK: depth=0, CN=openvpn-server
2020-01-07 10:51:38.921107 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2020-01-07 10:51:38.921222 [openvpn-server] Peer Connection Initiated with [AF_INET]x.x.x.x:1196
2020-01-07 10:51:39.051310 MANAGEMENT: >STATE:1578423099,GET_CONFIG,,,,,,
2020-01-07 10:51:39.051384 SENT CONTROL [openvpn-server]: 'PUSH_REQUEST' (status=1)
2020-01-07 10:51:39.432319 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 1,cipher AES-256-GCM'
2020-01-07 10:51:39.432407 OPTIONS IMPORT: timers and/or timeouts modified
2020-01-07 10:51:39.432424 OPTIONS IMPORT: --ifconfig/up options modified
2020-01-07 10:51:39.432440 OPTIONS IMPORT: route options modified
2020-01-07 10:51:39.432453 OPTIONS IMPORT: peer-id set
2020-01-07 10:51:39.432464 OPTIONS IMPORT: adjusting link_mtu to 1624
2020-01-07 10:51:39.432474 OPTIONS IMPORT: data channel crypto options modified
2020-01-07 10:51:39.432486 Data Channel: using negotiated cipher 'AES-256-GCM'
2020-01-07 10:51:39.432503 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
2020-01-07 10:51:39.432591 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-01-07 10:51:39.432605 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-01-07 10:51:39.432618 Preserving previous TUN/TAP instance: utun4
2020-01-07 10:51:39.432640 Initialization Sequence Completed
2020-01-07 10:51:39.432697 MANAGEMENT: >STATE:1578423099,CONNECTED,SUCCESS,10.8.0.6,x.x.x.x,1196,,
2020-01-07 10:51:39.675962 *Tunnelblick: DNS address 192.168.1.1 is being routed through the VPN
2020-01-07 10:51:46.584597 *Tunnelblick: This computer's apparent public IP address changed from 174.194.145.136 before connection to 91.207.175.50 after connection
2020-01-07 10:55:11.370734 *Tunnelblick: Disconnecting; 'Disconnect' (toggle) menu command invoked
2020-01-07 10:55:11.677451 *Tunnelblick: Disconnecting using 'kill'
2020-01-07 10:55:11.843229 event_wait : Interrupted system call (code=4)
2020-01-07 10:55:11.843736 TCP/UDP: Closing socket
2020-01-07 10:55:11.843852 /sbin/route delete -net 192.168.1.0 10.8.0.5 255.255.255.0
                           delete net 192.168.1.0: gateway 10.8.0.5
2020-01-07 10:55:11.847221 /sbin/route delete -net 10.8.0.1 10.8.0.5 255.255.255.255
                           delete net 10.8.0.1: gateway 10.8.0.5
2020-01-07 10:55:11.849594 /sbin/route delete -net x.x.x.x 172.20.10.1 255.255.255.255
                           delete net x.x.x.x: gateway 172.20.10.1
2020-01-07 10:55:11.855767 /sbin/route delete -net 0.0.0.0 10.8.0.5 128.0.0.0
                           delete net 0.0.0.0: gateway 10.8.0.5
2020-01-07 10:55:11.858411 /sbin/route delete -net 128.0.0.0 10.8.0.5 128.0.0.0
                           delete net 128.0.0.0: gateway 10.8.0.5
2020-01-07 10:55:11.860819 Closing TUN/TAP interface
2020-01-07 10:55:11.861270 /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun4 1500 1552 10.8.0.6 10.8.0.5 init
                           10:55:11 *Tunnelblick:  **********************************************
                           10:55:11 *Tunnelblick:  Start of output from client.down.tunnelblick.sh
                           10:55:11 *Tunnelblick:  Cancelled monitoring system configuration changes
                           10:55:12 *Tunnelblick:  Restored State:DNS
                           10:55:12 *Tunnelblick:  Removed Setup:DNS
                           10:55:12 *Tunnelblick:  Restored DNS and SMB settings
                           10:55:12 *Tunnelblick:  Re-enabled IPv6 (automatic) for "USB 10/100 LAN"
                           10:55:12 *Tunnelblick:  Re-enabled IPv6 (automatic) for "iPhone USB"
                           10:55:12 *Tunnelblick:  Re-enabled IPv6 (automatic) for "Wi-Fi"
                           10:55:12 *Tunnelblick:  Re-enabled IPv6 (automatic) for "Bluetooth PAN"
                           10:55:12 *Tunnelblick:  Re-enabled IPv6 (automatic) for "Thunderbolt Bridge"
                           10:55:12 *Tunnelblick:  Re-enabled IPv6 (automatic) for "Thunderbolt Ethernet Slot  1"
                           10:55:12 *Tunnelblick:  Flushed the DNS cache with dscacheutil -flushcache
                           10:55:12 *Tunnelblick:  Notified mDNSResponder that the DNS cache was flushed
                           10:55:12 *Tunnelblick:  End of output from client.down.tunnelblick.sh
                           10:55:12 *Tunnelblick:  **********************************************
2020-01-07 10:55:12.549937 SIGTERM[hard,] received, process exiting
2020-01-07 10:55:12.549980 MANAGEMENT: >STATE:1578423312,EXITING,SIGTERM,,,,,
2020-01-07 10:55:12.913214 *Tunnelblick: Expected disconnection occurred.

TinCanTech

From your server log:

Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect

rmccullough

Where does that option go? On the server? Can I put that into the openvpn.conf file on the server? Or is there another option to put in the conf file?

I think you are right because I have another device that is VPN'd using the same certificate.