[Solved]problems setting up openvpn on openwrt (tls-crypt unwrap error: packet too short)

JordanThompson

Hi all,
I am a noob to openvpn and am trying to get it set up so that I can remotely connect to my hosts inside of my home network from my laptop when I am out and about.
I created the following files from my laptop using instructions from https://openwrt.org/docs/guide-user/services/vpn/openvpn/basic and copied the server.conf file to the router.

Here is my /etc/config/openwrt file (this is more for reference as it is not used in my manual testing below):

openvpn 'myServer'
option enabled '1'
option config '/etc/openvpn/server.conf'

Here is my /etc/openvpn/server.conf file:

verb 3
user nobody
group nogroup
dev tun0
port 1194
proto udp
server 10.13.1.0 255.255.255.0
topology subnet
client-to-client
keepalive 10 120
persist-tun
persist-key
duplicate-cn
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
push "persist-tun"
push "persist-key"
<dh>
-----BEGIN DH PARAMETERS-----
bunch of spagheti
-----END DH PARAMETERS-----
</dh>
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
bunch of spagheti
-----END OpenVPN Static key V1-----
</tls-crypt>
<ca>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
bunch of spagheti
-----END PRIVATE KEY-----
</key>

On the laptop side, I have the following in my client.ovpn file:

verb 3
dev tun
nobind
client
remote my host udp
auth-nocache
remote-cert-tls server
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
bunch of spagheti
-----END OpenVPN Static key V1-----
</tls-crypt>
<ca>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
bunch of spagheti
-----END PRIVATE KEY-----
</key>

Here is the output from running openvpn manually:

/etc/config# openvpn /etc/openvpn/server.conf
Wed Mar 11 18:25:10 2020 OpenVPN 2.4.5 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Wed Mar 11 18:25:10 2020 library versions: OpenSSL 1.0.2u  20 Dec 2019, LZO 2.10
Wed Mar 11 18:25:10 2020 Diffie-Hellman initialized with 2048 bit key
Wed Mar 11 18:25:10 2020 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Mar 11 18:25:10 2020 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Mar 11 18:25:10 2020 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Wed Mar 11 18:25:10 2020 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Wed Mar 11 18:25:10 2020 TUN/TAP device tun0 opened
Wed Mar 11 18:25:10 2020 TUN/TAP TX queue length set to 100
Wed Mar 11 18:25:10 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Mar 11 18:25:10 2020 /sbin/ifconfig tun0 10.13.1.1 netmask 255.255.255.0 mtu 1500 broadcast 10.13.1.255
Wed Mar 11 18:25:10 2020 Could not determine IPv4/IPv6 protocol. Using AF_INET
Wed Mar 11 18:25:10 2020 Socket Buffers: R=[163840->163840] S=[163840->163840]
Wed Mar 11 18:25:10 2020 UDPv4 link local (bound): [AF_INET][undef]:1194
Wed Mar 11 18:25:10 2020 UDPv4 link remote: [AF_UNSPEC]
Wed Mar 11 18:25:10 2020 GID set to nogroup
Wed Mar 11 18:25:10 2020 UID set to nobody
Wed Mar 11 18:25:10 2020 MULTI: multi_init called, r=256 v=256
Wed Mar 11 18:25:10 2020 IFCONFIG POOL: base=10.13.1.2 size=252, ipv6=0
Wed Mar 11 18:25:10 2020 Initialization Sequence Completed
Wed Mar 11 18:25:16 2020 tls-crypt unwrap error: packet too short
Wed Mar 11 18:25:16 2020 TLS Error: tls-crypt unwrapping failed from [AF_INET]10.13.0.43:57553
Wed Mar 11 18:25:17 2020 tls-crypt unwrap error: packet too short
Wed Mar 11 18:25:17 2020 TLS Error: tls-crypt unwrapping failed from [AF_INET]10.13.0.43:57553
Wed Mar 11 18:25:18 2020 tls-crypt unwrap error: packet too short
Wed Mar 11 18:25:18 2020 TLS Error: tls-crypt unwrapping failed from [AF_INET]10.13.0.43:57553

Finally found the logs on the client side:

2020-03-12 08:58:16-0400 [HTTPChannel,4266,] Profile approve: profile u'my host' signed_by=None was previously seen, approval=True
2020-03-12 08:58:16-0400 [HTTPChannel,4266,] OpenVPN my_host_p4530 instantiated
2020-03-12 08:58:16-0400 [HTTPChannel,4266,] pyovpn.client.vpncli.MyOMIServer starting on "u'/Library/Application Support/OpenVPN/sock/ovpn-U2xPchfn6y5Y.sock'"
2020-03-12 08:58:16-0400 [-] (Port None Closed)
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u">INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info"
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'>HOLD:Waiting for hold release'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] TO OMI: ['state on']
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: real-time state notification set to ON'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] TO OMI: ['echo on']
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: real-time echo notification set to ON'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] TO OMI: ['bytecount 1']
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: bytecount interval changed'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] TO OMI: ['hold off']
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: hold flag set to OFF'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] TO OMI: ['hold release']
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: hold release succeeded'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] OpenVPN start: name='my_host_p4530' sev='info' msg='process started successfully'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_5ETRL8o2tmvgmD9X_5', 10] kw={} ret=[{'type': 'PROFILE', 'state': 'connect', 'profile_id': 'my_host_p4530', 'cookie': 'TRAY_CLIENT_anJ0_OV88unPL', 'timestamp': 1584017896}]
2020-03-12 08:58:16-0400 [MyOMIClient,0,] *** API CALL f=xmlrpc_Connect args=[{'new_only': True, 'cookie': 'TRAY_CLIENT_anJ0_OV88unPL', 'profile_id': 'my_host_p4530', 'type': 'static', 'non_interactive': False}, ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT', 'BYTECOUNT'], {}] kw={} ret='sess_my_host_85_p4530_02SXW1WFzcmZXdZU_1'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'>REMOTE:my_host,1194,udp'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] TO OMI: ['remote ACCEPT']
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: remote command succeeded'
2020-03-12 08:58:16-0400 [HTTPChannel,4267,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p4530_02SXW1WFzcmZXdZU_1', 10] kw={} ret=[{'active': True, 'timestamp': 1584017896, 'type': 'ACTIVE', 'last': None}]
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'>STATE:1584017896,RESOLVE,,,'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] *** STATE 1584017896,RESOLVE,,,
2020-03-12 08:58:16-0400 [MyOMIClient,0,] FROM OMI: u'>STATE:1584017896,WAIT,,,'
2020-03-12 08:58:16-0400 [MyOMIClient,0,] *** STATE 1584017896,WAIT,,,
2020-03-12 08:58:16-0400 [HTTPChannel,4269,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p4530_02SXW1WFzcmZXdZU_1', 10] kw={} ret=[{'timestamp': 1584017896, 'state': u'RESOLVE', 'type': 'STATE'}, {'timestamp': 1584017896, 'state': u'WAIT', 'type': 'STATE'}]
2020-03-12 08:58:22-0400 [HTTPChannel,4276,] TO OMI: ['exit']
2020-03-12 08:58:22-0400 [MyOMIClient,0,] OMI Cancel pending deferred ['exit']
2020-03-12 08:58:22-0400 [-] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p4530_02SXW1WFzcmZXdZU_1', 10] kw={} ret=[{'active': False, 'timestamp': 1584017902, 'type': 'ACTIVE', 'last': True}]
2020-03-12 08:58:22-0400 [-] OpenVPN my_host_p4530 stop: process stopped with exit code 0
2020-03-12 08:58:22-0400 [-] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_5ETRL8o2tmvgmD9X_5', 10] kw={} ret=[{'timestamp': 1584017902, 'state': 'disconnect', 'profile_id': 'my_host_p4530', 'type': 'PROFILE'}]
2020-03-12 08:58:22-0400 [-] *** API CALL f=xmlrpc_DisconnectAll args=[] kw={} ret=[(True, ('my_host_p4530', 0))]
2020-03-12 08:58:22-0400 [HTTPChannel,4277,] *** API CALL f=xmlrpc_EnumProfiles args=[] kw={} ret=[{'hash': '55a0f7e4168741b258f3f052021d39747cba3bf28a25f36b9b73ae3f1faf9428', 'name': u'my_host', 'global': False, 'host': umy_host', 'snapshot': {'active': {'active': False, 'timestamp': 1584017902, 'type': 'ACTIVE', 'last': True}, 'state': {'timestamp': 1584017896, 'state': 'DISCONNECTED', 'type': 'STATE'}, 'delete_pending': True, 'cookie': 'TRAY_CLIENT_anJ0_OV88unPL', 'bytecount': {'timestamp': 1584017901, 'out': u'70', 'type': 'BYTECOUNT', 'in': u'0'}}, 'owner': u'jrt', 'remote_hosts': [u'my_host'], 'type': ['static'], 'id': u'my_host_p4530', 'access_allowed': True}]
2020-03-12 08:58:22-0400 [HTTPChannel,4278,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p4530_02SXW1WFzcmZXdZU_1', 10] kw={} ret=[{'timestamp': 1584017902, 'type': 'DELETE_PENDING'}]

Thanks in advance, I would really appreciate any help you could give me!

TinCanTech

I don't know what is wrong but here are some pointers.

JordanThompson wrote push "persist-tun"
push "persist-key"

Clients generally do not need to perist the key or tun device so using them in the client config or pushing them is not recommended for most circumstances.

JordanThompson wroteverb 3

For debugging use "verb 4"

JordanThompson wrote I created the following files from my laptop using instructions from https://openwrt.org/docs/guide-user/ser ... vpn/basic and copied the server.conf file to the router.

Make sure when you did this the line endingings in the server config have not messed up the keys etc.

Lastly, configure compression:
comp-lzo no
compress
push "comp-lzo no"
push "compress"

These may help ..

JordanThompson

Thanks for getting back to me.
I have updated the server-side configuration file as suggested:
Here is my /etc/openvpn/server.conf file:

verb 4
user nobody
group nogroup
dev tun0
port 1194
proto udp
server 10.13.1.0 255.255.255.0
topology subnet
client-to-client
keepalive 10 120
push "dhcp-option DNS 10.13.0.1"
push "dhcp-option DOMAIN lan"
push "redirect-gateway def1"
log "/tmp/openvpn.log"
<dh>
-----BEGIN DH PARAMETERS-----
bunch of spagheti
-----END DH PARAMETERS-----
</dh>
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
bunch of spagheti
-----END OpenVPN Static key V1-----
</tls-crypt>
<ca>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
bunch of spagheti
-----END PRIVATE KEY-----
</key>

On the laptop side, I (now) have the following in my client.ovpn file:

verb 4
dev tun
nobind
client
remote my_host 1194 udp
auth-nocache
remote-cert-tls server
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
bunch of spagheti
-----END OpenVPN Static key V1-----
</tls-crypt>
<ca>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
bunch of spagheti
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
bunch of spagheti
-----END PRIVATE KEY-----
</key>

serverlogs:

Thu Mar 12 10:39:44 2020 us=915250 OpenVPN 2.4.5 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Thu Mar 12 10:39:44 2020 us=915450 library versions: OpenSSL 1.0.2u  20 Dec 2019, LZO 2.10
Thu Mar 12 10:39:44 2020 us=916001 WARNING: you are using user/group/chroot/setcon without persist-tun -- this may cause restarts to fail
Thu Mar 12 10:39:44 2020 us=916204 WARNING: you are using user/group/chroot/setcon without persist-key -- this may cause restarts to fail
Thu Mar 12 10:39:44 2020 us=918161 Diffie-Hellman initialized with 2048 bit key
Thu Mar 12 10:39:44 2020 us=920090 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Mar 12 10:39:44 2020 us=920335 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Mar 12 10:39:44 2020 us=920516 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Mar 12 10:39:44 2020 us=920695 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Mar 12 10:39:44 2020 us=920875 TLS-Auth MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Thu Mar 12 10:39:44 2020 us=927162 TUN/TAP device tun0 opened
Thu Mar 12 10:39:44 2020 us=927999 TUN/TAP TX queue length set to 100
Thu Mar 12 10:39:44 2020 us=928224 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Mar 12 10:39:44 2020 us=928426 /sbin/ifconfig tun0 10.13.1.1 netmask 255.255.255.0 mtu 1500 broadcast 10.13.1.255
Thu Mar 12 10:39:44 2020 us=959257 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Thu Mar 12 10:39:44 2020 us=959636 Could not determine IPv4/IPv6 protocol. Using AF_INET
Thu Mar 12 10:39:44 2020 us=959827 Socket Buffers: R=[163840->163840] S=[163840->163840]
Thu Mar 12 10:39:44 2020 us=960012 UDPv4 link local (bound): [AF_INET][undef]:1194
Thu Mar 12 10:39:44 2020 us=960155 UDPv4 link remote: [AF_UNSPEC]
Thu Mar 12 10:39:44 2020 us=960314 GID set to nogroup
Thu Mar 12 10:39:44 2020 us=960477 UID set to nobody
Thu Mar 12 10:39:44 2020 us=960647 MULTI: multi_init called, r=256 v=256
Thu Mar 12 10:39:44 2020 us=960879 IFCONFIG POOL: base=10.13.1.2 size=252, ipv6=0
Thu Mar 12 10:39:44 2020 us=961652 Initialization Sequence Completed
Thu Mar 12 10:39:53 2020 us=113015 tls-crypt unwrap error: packet too short
Thu Mar 12 10:39:53 2020 us=113373 TLS Error: tls-crypt unwrapping failed from [AF_INET]10.13.0.43:63346
Thu Mar 12 10:39:54 2020 us=181245 tls-crypt unwrap error: packet too short
Thu Mar 12 10:39:54 2020 us=181656 TLS Error: tls-crypt unwrapping failed from [AF_INET]10.13.0.43:63346
Thu Mar 12 10:39:55 2020 us=177893 tls-crypt unwrap error: packet too short
Thu Mar 12 10:39:55 2020 us=178204 TLS Error: tls-crypt unwrapping failed from [AF_INET]10.13.0.43:63346
Thu Mar 12 10:39:56 2020 us=249367 tls-crypt unwrap error: packet too short
Thu Mar 12 10:39:56 2020 us=249713 TLS Error: tls-crypt unwrapping failed from [AF_INET]10.13.0.43:63346

client logs (located at /Library/Application\ Support/OpenVPN/log/openvpn.log on my macbook):

2020-03-12 09:47:00-0400 [-] Profile approve: profile u'my_host' signed_by=None has been remembered for automatic future approval
2020-03-12 09:47:00-0400 [-] OpenVPN my_host_p3929 instantiated
2020-03-12 09:47:00-0400 [-] pyovpn.client.vpncli.MyOMIServer starting on "u'/Library/Application Support/OpenVPN/sock/ovpn-0bIKAZK92QLE.sock'"
2020-03-12 09:47:00-0400 [-] (Port None Closed)
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u">INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info"
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'>HOLD:Waiting for hold release'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] TO OMI: ['state on']
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: real-time state notification set to ON'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] TO OMI: ['echo on']
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: real-time echo notification set to ON'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] TO OMI: ['bytecount 1']
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: bytecount interval changed'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] TO OMI: ['hold off']
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: hold flag set to OFF'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] TO OMI: ['hold release']
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: hold release succeeded'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] OpenVPN start: name='my_host_p3929' sev='info' msg='process started successfully'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_OtgRlLdSe4G7S0G2_7', 10] kw={} ret=[{'type': 'PROFILE', 'state': 'connect', 'profile_id': 'my_host_p3929', 'cookie': 'TRAY_CLIENT_anJ0_7iPXhica', 'timestamp': 1584020820}]
2020-03-12 09:47:00-0400 [MyOMIClient,0,] *** API CALL f=xmlrpc_Connect args=[{'new_only': True, 'cookie': 'TRAY_CLIENT_anJ0_7iPXhica', 'profile_id': 'my_host_p3929', 'type': 'static', 'non_interactive': False}, ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT', 'BYTECOUNT'], {}] kw={} ret='sess_my_host_p3929_vT8SxFB3Q98AZ3gr_1'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'>REMOTE:my_host,1194,udp'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] TO OMI: ['remote ACCEPT']
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'SUCCESS: remote command succeeded'
2020-03-12 09:47:00-0400 [HTTPChannel,4711,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p3929_vT8SxFB3Q98AZ3gr_1', 10] kw={} ret=[{'active': True, 'timestamp': 1584020820, 'type': 'ACTIVE', 'last': None}]
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'>STATE:1584020820,RESOLVE,,,'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] *** STATE 1584020820,RESOLVE,,,
2020-03-12 09:47:00-0400 [MyOMIClient,0,] FROM OMI: u'>STATE:1584020820,WAIT,,,'
2020-03-12 09:47:00-0400 [MyOMIClient,0,] *** STATE 1584020820,WAIT,,,
2020-03-12 09:47:00-0400 [HTTPChannel,4713,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p3929_vT8SxFB3Q98AZ3gr_1', 10] kw={} ret=[{'timestamp': 1584020820, 'state': u'RESOLVE', 'type': 'STATE'}, {'timestamp': 1584020820, 'state': u'WAIT', 'type': 'STATE'}]
2020-03-12 09:47:10-0400 [MyOMIClient,0,] FROM OMI: u'>STATE:1584020830,RECONNECTING,,,'
2020-03-12 09:47:10-0400 [MyOMIClient,0,] *** STATE 1584020830,RECONNECTING,,,
2020-03-12 09:47:10-0400 [MyOMIClient,0,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p3929_vT8SxFB3Q98AZ3gr_1', 10] kw={} ret=[{'timestamp': 1584020830, 'state': u'RECONNECTING', 'type': 'STATE'}]
2020-03-12 09:47:10-0400 [MyOMIClient,0,] FROM OMI: u'>STATE:1584020830,WAIT,,,'
2020-03-12 09:47:10-0400 [MyOMIClient,0,] *** STATE 1584020830,WAIT,,,
2020-03-12 09:47:10-0400 [HTTPChannel,4724,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p3929_vT8SxFB3Q98AZ3gr_1', 10] kw={} ret=[{'timestamp': 1584020830, 'state': u'WAIT', 'type': 'STATE'}]
2020-03-12 09:47:11-0400 [HTTPChannel,4728,] TO OMI: ['exit']
2020-03-12 09:47:12-0400 [MyOMIClient,0,] OMI Cancel pending deferred ['exit']
2020-03-12 09:47:12-0400 [-] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p3929_vT8SxFB3Q98AZ3gr_1', 10] kw={} ret=[{'active': False, 'timestamp': 1584020832, 'type': 'ACTIVE', 'last': True}]
2020-03-12 09:47:12-0400 [-] OpenVPN my_host_p3929 stop: process stopped with exit code 0
2020-03-12 09:47:12-0400 [-] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_OtgRlLdSe4G7S0G2_7', 10] kw={} ret=[{'timestamp': 1584020832, 'state': 'disconnect', 'profile_id': 'my_host_p3929', 'type': 'PROFILE'}]
2020-03-12 09:47:12-0400 [-] *** API CALL f=xmlrpc_DisconnectAll args=[] kw={} ret=[(True, ('my_host_p3929', 0))]
2020-03-12 09:47:12-0400 [HTTPChannel,4729,] *** API CALL f=xmlrpc_Poll args=['sess_my_host_p3929_vT8SxFB3Q98AZ3gr_1', 10] kw={} ret=[{'timestamp': 1584020832, 'type': 'DELETE_PENDING'}]
2020-03-12 09:47:12-0400 [HTTPChannel,4730,] *** API CALL f=xmlrpc_EnumProfiles args=[] kw={} ret=[{'hash': '8bcfbe1e36ecf77e13a8b0a059adc31e9e3e2ba6774741653f635597a024aeaf', 'name': u'my_host', 'global': False, 'host': u'my_host', 'snapshot': {'active': {'active': False, 'timestamp': 1584020832, 'type': 'ACTIVE', 'last': True}, 'state': {'timestamp': 1584020830, 'state': 'DISCONNECTED', 'type': 'STATE'}, 'delete_pending': True, 'cookie': 'TRAY_CLIENT_anJ0_7iPXhica', 'bytecount': {'timestamp': 1584020831, 'out': u'154', 'type': 'BYTECOUNT', 'in': u'0'}}, 'owner': u'jrt', 'remote_hosts': [u'my_host'], 'type': ['static'], 'id': u'my_host_p3929', 'access_allowed': True}]

TinCanTech

That is not an openvpn log from your client.

Use --log as you do in the server config to get the openvpn log from your client.

Also, post the version of openvpn on the client.

JordanThompson

TinCanTech wrote That is not an openvpn log from your client.

Use --log as you do in the server config to get the openvpn log from your client.

After running this on the client:

/usr/local/sbin/openvpn --log /tmp/openvpn.log --config /Users/jrt/vpn/EasyRSA-v3.0.6/client.ovpn

Wow! what a difference in verbosity! There is an "Operation not permitted" towards the bottom. Note that for clarity on the server side I have changed:

server 192.168.8.0 255.255.255.0

Thu Mar 12 11:53:24 2020 us=222311 Current Parameter Settings:
Thu Mar 12 11:53:24 2020 us=222869   config = '/Users/jrt/vpn/EasyRSA-v3.0.6/client.ovpn'
Thu Mar 12 11:53:24 2020 us=222887   mode = 0
Thu Mar 12 11:53:24 2020 us=222901   show_ciphers = DISABLED
Thu Mar 12 11:53:24 2020 us=222913   show_digests = DISABLED
Thu Mar 12 11:53:24 2020 us=222948   show_engines = DISABLED
Thu Mar 12 11:53:24 2020 us=222992   genkey = DISABLED
Thu Mar 12 11:53:24 2020 us=223008   key_pass_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223022   show_tls_ciphers = DISABLED
Thu Mar 12 11:53:24 2020 us=223033   connect_retry_max = 0
Thu Mar 12 11:53:24 2020 us=223111 Connection profiles [0]:
Thu Mar 12 11:53:24 2020 us=223151   proto = udp
Thu Mar 12 11:53:24 2020 us=223170   local = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223182   local_port = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223193   remote = 'my_host'
Thu Mar 12 11:53:24 2020 us=223203   remote_port = '1194'
Thu Mar 12 11:53:24 2020 us=223215   remote_float = DISABLED
Thu Mar 12 11:53:24 2020 us=223232   bind_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=223245   bind_local = DISABLED
Thu Mar 12 11:53:24 2020 us=223256   bind_ipv6_only = DISABLED
Thu Mar 12 11:53:24 2020 us=223267   connect_retry_seconds = 5
Thu Mar 12 11:53:24 2020 us=223278   connect_timeout = 120
Thu Mar 12 11:53:24 2020 us=223289   socks_proxy_server = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223300   socks_proxy_port = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223311   tun_mtu = 1500
Thu Mar 12 11:53:24 2020 us=223325   tun_mtu_defined = ENABLED
Thu Mar 12 11:53:24 2020 us=223338   link_mtu = 1500
Thu Mar 12 11:53:24 2020 us=223350   link_mtu_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=223361   tun_mtu_extra = 0
Thu Mar 12 11:53:24 2020 us=223372   tun_mtu_extra_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=223383   mtu_discover_type = -1
Thu Mar 12 11:53:24 2020 us=223394   fragment = 0
Thu Mar 12 11:53:24 2020 us=223405   mssfix = 1450
Thu Mar 12 11:53:24 2020 us=223416   explicit_exit_notification = 0
Thu Mar 12 11:53:24 2020 us=223427 Connection profiles END
Thu Mar 12 11:53:24 2020 us=223438   remote_random = DISABLED
Thu Mar 12 11:53:24 2020 us=223449   ipchange = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223460   dev = 'tun'
Thu Mar 12 11:53:24 2020 us=223471   dev_type = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223483   dev_node = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223494   lladdr = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223505   topology = 1
Thu Mar 12 11:53:24 2020 us=223516   ifconfig_local = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223534   ifconfig_remote_netmask = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223574   ifconfig_noexec = DISABLED
Thu Mar 12 11:53:24 2020 us=223606   ifconfig_nowarn = DISABLED
Thu Mar 12 11:53:24 2020 us=223624   ifconfig_ipv6_local = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223637   ifconfig_ipv6_netbits = 0
Thu Mar 12 11:53:24 2020 us=223678   ifconfig_ipv6_remote = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223696   shaper = 0
Thu Mar 12 11:53:24 2020 us=223708   mtu_test = 0
Thu Mar 12 11:53:24 2020 us=223719   mlock = DISABLED
Thu Mar 12 11:53:24 2020 us=223730   keepalive_ping = 0
Thu Mar 12 11:53:24 2020 us=223740   keepalive_timeout = 0
Thu Mar 12 11:53:24 2020 us=223751   inactivity_timeout = 0
Thu Mar 12 11:53:24 2020 us=223763   ping_send_timeout = 0
Thu Mar 12 11:53:24 2020 us=223774   ping_rec_timeout = 0
Thu Mar 12 11:53:24 2020 us=223786   ping_rec_timeout_action = 0
Thu Mar 12 11:53:24 2020 us=223797   ping_timer_remote = DISABLED
Thu Mar 12 11:53:24 2020 us=223809   remap_sigusr1 = 0
Thu Mar 12 11:53:24 2020 us=223841   persist_tun = DISABLED
Thu Mar 12 11:53:24 2020 us=223870   persist_local_ip = DISABLED
Thu Mar 12 11:53:24 2020 us=223883   persist_remote_ip = DISABLED
Thu Mar 12 11:53:24 2020 us=223894   persist_key = DISABLED
Thu Mar 12 11:53:24 2020 us=223905   passtos = DISABLED
Thu Mar 12 11:53:24 2020 us=223916   resolve_retry_seconds = 1000000000
Thu Mar 12 11:53:24 2020 us=223928   resolve_in_advance = DISABLED
Thu Mar 12 11:53:24 2020 us=223939   username = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223965   groupname = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223973   chroot_dir = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223980   cd_dir = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223987   writepid = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=223995   up_script = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224006   down_script = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224018   down_pre = DISABLED
Thu Mar 12 11:53:24 2020 us=224026   up_restart = DISABLED
Thu Mar 12 11:53:24 2020 us=224033   up_delay = DISABLED
Thu Mar 12 11:53:24 2020 us=224040   daemon = DISABLED
Thu Mar 12 11:53:24 2020 us=224047   inetd = 0
Thu Mar 12 11:53:24 2020 us=224054   log = ENABLED
Thu Mar 12 11:53:24 2020 us=224061   suppress_timestamps = DISABLED
Thu Mar 12 11:53:24 2020 us=224068   machine_readable_output = DISABLED
Thu Mar 12 11:53:24 2020 us=224075   nice = 0
Thu Mar 12 11:53:24 2020 us=224083   verbosity = 4
Thu Mar 12 11:53:24 2020 us=224090   mute = 0
Thu Mar 12 11:53:24 2020 us=224097   status_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224104   status_file_version = 1
Thu Mar 12 11:53:24 2020 us=224111   status_file_update_freq = 60
Thu Mar 12 11:53:24 2020 us=224118   occ = ENABLED
Thu Mar 12 11:53:24 2020 us=224125   rcvbuf = 0
Thu Mar 12 11:53:24 2020 us=224132   sndbuf = 0
Thu Mar 12 11:53:24 2020 us=224139   sockflags = 0
Thu Mar 12 11:53:24 2020 us=224146   fast_io = DISABLED
Thu Mar 12 11:53:24 2020 us=224153   comp.alg = 0
Thu Mar 12 11:53:24 2020 us=224160   comp.flags = 0
Thu Mar 12 11:53:24 2020 us=224167   route_script = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224174   route_default_gateway = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224181   route_default_metric = 0
Thu Mar 12 11:53:24 2020 us=224188   route_noexec = DISABLED
Thu Mar 12 11:53:24 2020 us=224195   route_delay = 0
Thu Mar 12 11:53:24 2020 us=224202   route_delay_window = 30
Thu Mar 12 11:53:24 2020 us=224210   route_delay_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=224217   route_nopull = DISABLED
Thu Mar 12 11:53:24 2020 us=224224   route_gateway_via_dhcp = DISABLED
Thu Mar 12 11:53:24 2020 us=224231   allow_pull_fqdn = DISABLED
Thu Mar 12 11:53:24 2020 us=224242   management_addr = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224250   management_port = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224258   management_user_pass = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224265   management_log_history_cache = 250
Thu Mar 12 11:53:24 2020 us=224273   management_echo_buffer_size = 100
Thu Mar 12 11:53:24 2020 us=224280   management_write_peer_info_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224287   management_client_user = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224294   management_client_group = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224301   management_flags = 0
Thu Mar 12 11:53:24 2020 us=224309   shared_secret_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224318   key_direction = not set
Thu Mar 12 11:53:24 2020 us=224326   ciphername = 'BF-CBC'
Thu Mar 12 11:53:24 2020 us=224333   ncp_enabled = ENABLED
Thu Mar 12 11:53:24 2020 us=224340   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Thu Mar 12 11:53:24 2020 us=224347   authname = 'SHA1'
Thu Mar 12 11:53:24 2020 us=224355   prng_hash = 'SHA1'
Thu Mar 12 11:53:24 2020 us=224362   prng_nonce_secret_len = 16
Thu Mar 12 11:53:24 2020 us=224369   keysize = 0
Thu Mar 12 11:53:24 2020 us=224377   engine = DISABLED
Thu Mar 12 11:53:24 2020 us=224384   replay = ENABLED
Thu Mar 12 11:53:24 2020 us=224391   mute_replay_warnings = DISABLED
Thu Mar 12 11:53:24 2020 us=224398   replay_window = 64
Thu Mar 12 11:53:24 2020 us=224405   replay_time = 15
Thu Mar 12 11:53:24 2020 us=224412   packet_id_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224419   use_iv = ENABLED
Thu Mar 12 11:53:24 2020 us=224426   test_crypto = DISABLED
Thu Mar 12 11:53:24 2020 us=224434   tls_server = DISABLED
Thu Mar 12 11:53:24 2020 us=224441   tls_client = ENABLED
Thu Mar 12 11:53:24 2020 us=224448   key_method = 2
Thu Mar 12 11:53:24 2020 us=224456   ca_file = '[[INLINE]]'
Thu Mar 12 11:53:24 2020 us=224463   ca_path = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224470   dh_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224490   cert_file = '[[INLINE]]'
Thu Mar 12 11:53:24 2020 us=224499   extra_certs_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224506   priv_key_file = '[[INLINE]]'
Thu Mar 12 11:53:24 2020 us=224513   pkcs12_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224520   cipher_list = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224527   cipher_list_tls13 = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224535   tls_cert_profile = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224542   tls_verify = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224549   tls_export_cert = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224556   verify_x509_type = 0
Thu Mar 12 11:53:24 2020 us=224564   verify_x509_name = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224571   crl_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224578   ns_cert_type = 0
Thu Mar 12 11:53:24 2020 us=224585   remote_cert_ku[i] = 65535
Thu Mar 12 11:53:24 2020 us=224593   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224600   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224607   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224615   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224622   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224629   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224636   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224643   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224650   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224657   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224664   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224672   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224679   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224686   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224693   remote_cert_ku[i] = 0
Thu Mar 12 11:53:24 2020 us=224700   remote_cert_eku = 'TLS Web Server Authentication'
Thu Mar 12 11:53:24 2020 us=224708   ssl_flags = 0
Thu Mar 12 11:53:24 2020 us=224715   tls_timeout = 2
Thu Mar 12 11:53:24 2020 us=224722   renegotiate_bytes = -1
Thu Mar 12 11:53:24 2020 us=224730   renegotiate_packets = 0
Thu Mar 12 11:53:24 2020 us=224737   renegotiate_seconds = 3600
Thu Mar 12 11:53:24 2020 us=224744   handshake_window = 60
Thu Mar 12 11:53:24 2020 us=224754   transition_window = 3600
Thu Mar 12 11:53:24 2020 us=224764   single_session = DISABLED
Thu Mar 12 11:53:24 2020 us=224772   push_peer_info = DISABLED
Thu Mar 12 11:53:24 2020 us=224779   tls_exit = DISABLED
Thu Mar 12 11:53:24 2020 us=224786   tls_auth_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=224794   tls_crypt_file = '[[INLINE]]'
Thu Mar 12 11:53:24 2020 us=224801   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224808   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224816   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224823   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224830   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224837   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224844   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224852   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224859   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224866   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224874   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224881   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224888   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224895   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224903   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224910   pkcs11_protected_authentication = DISABLED
Thu Mar 12 11:53:24 2020 us=224917   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224925   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224932   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224940   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224963   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224971   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224978   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224985   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224992   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=224999   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=225006   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=225014   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=225021   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=225028   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=225035   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=225042   pkcs11_private_mode = 00000000
Thu Mar 12 11:53:24 2020 us=225049   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225056   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225063   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225070   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225078   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225085   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225092   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225101   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225111   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225118   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225125   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225132   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225140   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225147   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225154   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225161   pkcs11_cert_private = DISABLED
Thu Mar 12 11:53:24 2020 us=225168   pkcs11_pin_cache_period = -1
Thu Mar 12 11:53:24 2020 us=225175   pkcs11_id = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225182   pkcs11_id_management = DISABLED
Thu Mar 12 11:53:24 2020 us=225202   server_network = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225211   server_netmask = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225223   server_network_ipv6 = ::
Thu Mar 12 11:53:24 2020 us=225231   server_netbits_ipv6 = 0
Thu Mar 12 11:53:24 2020 us=225238   server_bridge_ip = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225246   server_bridge_netmask = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225254   server_bridge_pool_start = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225261   server_bridge_pool_end = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225269   ifconfig_pool_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=225276   ifconfig_pool_start = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225284   ifconfig_pool_end = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225291   ifconfig_pool_netmask = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225299   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225307   ifconfig_pool_persist_refresh_freq = 600
Thu Mar 12 11:53:24 2020 us=225314   ifconfig_ipv6_pool_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=225321   ifconfig_ipv6_pool_base = ::
Thu Mar 12 11:53:24 2020 us=225329   ifconfig_ipv6_pool_netbits = 0
Thu Mar 12 11:53:24 2020 us=225336   n_bcast_buf = 256
Thu Mar 12 11:53:24 2020 us=225343   tcp_queue_limit = 64
Thu Mar 12 11:53:24 2020 us=225350   real_hash_size = 256
Thu Mar 12 11:53:24 2020 us=225357   virtual_hash_size = 256
Thu Mar 12 11:53:24 2020 us=225364   client_connect_script = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225371   learn_address_script = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225379   client_disconnect_script = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225386   client_config_dir = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225393   ccd_exclusive = DISABLED
Thu Mar 12 11:53:24 2020 us=225401   tmp_dir = '/var/folders/f7/6584frsj3zlc0wt_284gjf280000gn/T/'
Thu Mar 12 11:53:24 2020 us=225408   push_ifconfig_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=225416   push_ifconfig_local = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225436   push_ifconfig_remote_netmask = 0.0.0.0
Thu Mar 12 11:53:24 2020 us=225443   push_ifconfig_ipv6_defined = DISABLED
Thu Mar 12 11:53:24 2020 us=225451   push_ifconfig_ipv6_local = ::/0
Thu Mar 12 11:53:24 2020 us=225458   push_ifconfig_ipv6_remote = ::
Thu Mar 12 11:53:24 2020 us=225467   enable_c2c = DISABLED
Thu Mar 12 11:53:24 2020 us=225475   duplicate_cn = DISABLED
Thu Mar 12 11:53:24 2020 us=225482   cf_max = 0
Thu Mar 12 11:53:24 2020 us=225489   cf_per = 0
Thu Mar 12 11:53:24 2020 us=225496   max_clients = 1024
Thu Mar 12 11:53:24 2020 us=225504   max_routes_per_client = 256
Thu Mar 12 11:53:24 2020 us=225511   auth_user_pass_verify_script = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225519   auth_user_pass_verify_script_via_file = DISABLED
Thu Mar 12 11:53:24 2020 us=225526   auth_token_generate = DISABLED
Thu Mar 12 11:53:24 2020 us=225533   auth_token_lifetime = 0
Thu Mar 12 11:53:24 2020 us=225540   port_share_host = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225548   port_share_port = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225555   client = ENABLED
Thu Mar 12 11:53:24 2020 us=225562   pull = ENABLED
Thu Mar 12 11:53:24 2020 us=225569   auth_user_pass_file = '[UNDEF]'
Thu Mar 12 11:53:24 2020 us=225578 OpenVPN 2.4.8 x86_64-apple-darwin19.0.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Nov  1 2019
Thu Mar 12 11:53:24 2020 us=225594 library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10
Thu Mar 12 11:53:24 2020 us=227986 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Mar 12 11:53:24 2020 us=228024 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Mar 12 11:53:24 2020 us=228037 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Thu Mar 12 11:53:24 2020 us=228048 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Mar 12 11:53:24 2020 us=228177 Control Channel MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Thu Mar 12 11:53:24 2020 us=228548 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Thu Mar 12 11:53:24 2020 us=228597 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 12 11:53:24 2020 us=228610 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 12 11:53:24 2020 us=228631 TCP/UDP: Preserving recently used remote address: [AF_INET]my_host:1194
Thu Mar 12 11:53:24 2020 us=228720 Socket Buffers: R=[786896->786896] S=[9216->9216]
Thu Mar 12 11:53:24 2020 us=228736 UDP link local: (not bound)
Thu Mar 12 11:53:24 2020 us=228749 UDP link remote: [AF_INET]my_host:1194
Thu Mar 12 11:53:24 2020 us=425699 TLS: Initial packet from [AF_INET]my_host:1194, sid=97977065 fefde10b
Thu Mar 12 11:53:24 2020 us=714185 VERIFY OK: depth=1, CN=vpnca
Thu Mar 12 11:53:24 2020 us=714466 VERIFY KU OK
Thu Mar 12 11:53:24 2020 us=714493 Validating certificate extended key usage
Thu Mar 12 11:53:24 2020 us=714509 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Thu Mar 12 11:53:24 2020 us=714522 VERIFY EKU OK
Thu Mar 12 11:53:24 2020 us=714533 VERIFY OK: depth=0, CN=vpnserver
Thu Mar 12 11:53:25 2020 us=259373 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Mar 12 11:53:25 2020 us=259487 [vpnserver] Peer Connection Initiated with [AF_INET]my_host:1194
Thu Mar 12 11:53:26 2020 us=445435 SENT CONTROL [vpnserver]: 'PUSH_REQUEST' (status=1)
Thu Mar 12 11:53:26 2020 us=695950 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.13.0.1,dhcp-option DOMAIN lan,redirect-gateway def1,route-gateway 192.168.8.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.8.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Thu Mar 12 11:53:26 2020 us=696137 OPTIONS IMPORT: timers and/or timeouts modified
Thu Mar 12 11:53:26 2020 us=696228 OPTIONS IMPORT: --ifconfig/up options modified
Thu Mar 12 11:53:26 2020 us=696252 OPTIONS IMPORT: route options modified
Thu Mar 12 11:53:26 2020 us=696271 OPTIONS IMPORT: route-related options modified
Thu Mar 12 11:53:26 2020 us=696287 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Mar 12 11:53:26 2020 us=696303 OPTIONS IMPORT: peer-id set
Thu Mar 12 11:53:26 2020 us=696320 OPTIONS IMPORT: adjusting link_mtu to 1624
Thu Mar 12 11:53:26 2020 us=696337 OPTIONS IMPORT: data channel crypto options modified
Thu Mar 12 11:53:26 2020 us=696357 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Mar 12 11:53:26 2020 us=696389 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Thu Mar 12 11:53:26 2020 us=696560 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Mar 12 11:53:26 2020 us=696597 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Mar 12 11:53:26 2020 us=696958 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697003 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697029 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697050 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697071 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697092 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697112 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697133 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697153 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697174 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697195 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)
Thu Mar 12 11:53:26 2020 us=697216 Opening utun (connect(AF_SYS_CONTROL)): Operation not permitted (errno=1)

Also, post the version of openvpn on the client.

openvpn --version
OpenVPN 2.4.8 x86_64-apple-darwin19.0.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Nov  1 2019
library versions: OpenSSL 1.1.1d  10 Sep 2019, LZO 2.10
Originally developed by James Yonan
Copyright (C) 2002-2018 OpenVPN Inc <sales@openvpn.net>
Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=no enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=no enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_management=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_werror=no enable_win32_dll=yes enable_x509_alt_username=no with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=no with_mem_check=no with_sysroot=no

JordanThompson

@tincantech When I run the command as root, everything works fine(!) Thanks for pointing me to running the client command with the --log parameter by hand. I think I need to reinstall my client (or at the very least, this is a mac problem)

Now, how do I close this topic as "solved"?