Hi all,
I set up an OpenVPN server and connected to it successfully from a windows 10 machine. However, the throughput is extremely low, and there is a lot of packet drops running a continuous ping to the server-side LAN.
After troubleshooting for 2 days (sndbuf, rcvbuf, mssfix, fragment, tcp ports etc..) I was not able to resolve the issue.
Finally, I tried to use the OpenVPN-Connect client on the same windows machine and loaded the same client.conf file into it, connected to the same server and to my surprise the throughput was 10x faster.
I collected logs from client and server and compared them head-to-head for both client and server logs and couldn't find anything that stands out.
Is there any fundamental difference between the standard openvpn client vs the openvpn-connect client that could have such an impact on throughput?
Logs Below:
client.conf
client
dev tun
dev-node OpenVPN
proto udp
remote ***.***.***.*** 1195
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
cipher AES-256-CBC
verb 5
Connecting with openvpn standard client:
Client Log:
Tue Apr 14 17:26:03 2020 us=640360 Current Parameter Settings:
Tue Apr 14 17:26:03 2020 us=640360 config = 'client.conf.ovpn'
Tue Apr 14 17:26:03 2020 us=640360 mode = 0
Tue Apr 14 17:26:03 2020 us=640360 show_ciphers = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 show_digests = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 show_engines = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 genkey = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 key_pass_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 show_tls_ciphers = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 connect_retry_max = 0
Tue Apr 14 17:26:03 2020 us=640360 Connection profiles [0]:
Tue Apr 14 17:26:03 2020 us=640360 proto = udp
Tue Apr 14 17:26:03 2020 us=640360 local = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 local_port = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 remote = '***.***.***.***'
Tue Apr 14 17:26:03 2020 us=640360 remote_port = '1195'
Tue Apr 14 17:26:03 2020 us=640360 remote_float = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 bind_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 bind_local = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 bind_ipv6_only = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 connect_retry_seconds = 5
Tue Apr 14 17:26:03 2020 us=640360 connect_timeout = 120
Tue Apr 14 17:26:03 2020 us=640360 socks_proxy_server = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 socks_proxy_port = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 tun_mtu = 1500
Tue Apr 14 17:26:03 2020 us=640360 tun_mtu_defined = ENABLED
Tue Apr 14 17:26:03 2020 us=640360 link_mtu = 1500
Tue Apr 14 17:26:03 2020 us=640360 link_mtu_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 tun_mtu_extra = 0
Tue Apr 14 17:26:03 2020 us=640360 tun_mtu_extra_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 mtu_discover_type = -1
Tue Apr 14 17:26:03 2020 us=640360 fragment = 0
Tue Apr 14 17:26:03 2020 us=640360 mssfix = 1450
Tue Apr 14 17:26:03 2020 us=640360 explicit_exit_notification = 0
Tue Apr 14 17:26:03 2020 us=640360 Connection profiles END
Tue Apr 14 17:26:03 2020 us=640360 remote_random = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 ipchange = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 dev = 'tun'
Tue Apr 14 17:26:03 2020 us=640360 dev_type = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 dev_node = 'OpenVPN'
Tue Apr 14 17:26:03 2020 us=640360 lladdr = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 topology = 1
Tue Apr 14 17:26:03 2020 us=640360 ifconfig_local = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 ifconfig_remote_netmask = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 ifconfig_noexec = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 ifconfig_nowarn = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 ifconfig_ipv6_local = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 ifconfig_ipv6_netbits = 0
Tue Apr 14 17:26:03 2020 us=640360 ifconfig_ipv6_remote = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 shaper = 0
Tue Apr 14 17:26:03 2020 us=640360 mtu_test = 0
Tue Apr 14 17:26:03 2020 us=640360 mlock = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 keepalive_ping = 0
Tue Apr 14 17:26:03 2020 us=640360 keepalive_timeout = 0
Tue Apr 14 17:26:03 2020 us=640360 inactivity_timeout = 0
Tue Apr 14 17:26:03 2020 us=640360 ping_send_timeout = 0
Tue Apr 14 17:26:03 2020 us=640360 ping_rec_timeout = 0
Tue Apr 14 17:26:03 2020 us=640360 ping_rec_timeout_action = 0
Tue Apr 14 17:26:03 2020 us=640360 ping_timer_remote = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 remap_sigusr1 = 0
Tue Apr 14 17:26:03 2020 us=640360 persist_tun = ENABLED
Tue Apr 14 17:26:03 2020 us=640360 persist_local_ip = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 persist_remote_ip = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 persist_key = ENABLED
Tue Apr 14 17:26:03 2020 us=640360 passtos = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 resolve_retry_seconds = 1000000000
Tue Apr 14 17:26:03 2020 us=640360 resolve_in_advance = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 username = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 groupname = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 chroot_dir = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 cd_dir = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 writepid = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 up_script = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 down_script = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 down_pre = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 up_restart = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 up_delay = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 daemon = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 inetd = 0
Tue Apr 14 17:26:03 2020 us=640360 log = ENABLED
Tue Apr 14 17:26:03 2020 us=640360 suppress_timestamps = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 machine_readable_output = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 nice = 0
Tue Apr 14 17:26:03 2020 us=640360 verbosity = 5
Tue Apr 14 17:26:03 2020 us=640360 mute = 0
Tue Apr 14 17:26:03 2020 us=640360 gremlin = 0
Tue Apr 14 17:26:03 2020 us=640360 status_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 status_file_version = 1
Tue Apr 14 17:26:03 2020 us=640360 status_file_update_freq = 60
Tue Apr 14 17:26:03 2020 us=640360 occ = ENABLED
Tue Apr 14 17:26:03 2020 us=640360 rcvbuf = 0
Tue Apr 14 17:26:03 2020 us=640360 sndbuf = 0
Tue Apr 14 17:26:03 2020 us=640360 sockflags = 0
Tue Apr 14 17:26:03 2020 us=640360 fast_io = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 comp.alg = 0
Tue Apr 14 17:26:03 2020 us=640360 comp.flags = 0
Tue Apr 14 17:26:03 2020 us=640360 route_script = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 route_default_gateway = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=640360 route_default_metric = 0
Tue Apr 14 17:26:03 2020 us=640360 route_noexec = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 route_delay = 5
Tue Apr 14 17:26:03 2020 us=640360 route_delay_window = 30
Tue Apr 14 17:26:03 2020 us=640360 route_delay_defined = ENABLED
Tue Apr 14 17:26:03 2020 us=640360 route_nopull = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 route_gateway_via_dhcp = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 allow_pull_fqdn = DISABLED
Tue Apr 14 17:26:03 2020 us=640360 management_addr = '127.0.0.1'
Tue Apr 14 17:26:03 2020 us=640360 management_port = '25342'
Tue Apr 14 17:26:03 2020 us=640360 management_user_pass = 'stdin'
Tue Apr 14 17:26:03 2020 us=640360 management_log_history_cache = 250
Tue Apr 14 17:26:03 2020 us=640360 management_echo_buffer_size = 100
Tue Apr 14 17:26:03 2020 us=641357 management_write_peer_info_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 management_client_user = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 management_client_group = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 management_flags = 6
Tue Apr 14 17:26:03 2020 us=641357 shared_secret_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 key_direction = not set
Tue Apr 14 17:26:03 2020 us=641357 ciphername = 'AES-256-CBC'
Tue Apr 14 17:26:03 2020 us=641357 ncp_enabled = ENABLED
Tue Apr 14 17:26:03 2020 us=641357 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Apr 14 17:26:03 2020 us=641357 authname = 'SHA1'
Tue Apr 14 17:26:03 2020 us=641357 prng_hash = 'SHA1'
Tue Apr 14 17:26:03 2020 us=641357 prng_nonce_secret_len = 16
Tue Apr 14 17:26:03 2020 us=641357 keysize = 0
Tue Apr 14 17:26:03 2020 us=641357 engine = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 replay = ENABLED
Tue Apr 14 17:26:03 2020 us=641357 mute_replay_warnings = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 replay_window = 64
Tue Apr 14 17:26:03 2020 us=641357 replay_time = 15
Tue Apr 14 17:26:03 2020 us=641357 packet_id_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 use_iv = ENABLED
Tue Apr 14 17:26:03 2020 us=641357 test_crypto = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 tls_server = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 tls_client = ENABLED
Tue Apr 14 17:26:03 2020 us=641357 key_method = 2
Tue Apr 14 17:26:03 2020 us=641357 ca_file = 'ca.crt'
Tue Apr 14 17:26:03 2020 us=641357 ca_path = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 dh_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 cert_file = 'client.crt'
Tue Apr 14 17:26:03 2020 us=641357 extra_certs_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 priv_key_file = 'client.key'
Tue Apr 14 17:26:03 2020 us=641357 pkcs12_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 cryptoapi_cert = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 cipher_list = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 cipher_list_tls13 = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 tls_cert_profile = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 tls_verify = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 tls_export_cert = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 verify_x509_type = 0
Tue Apr 14 17:26:03 2020 us=641357 verify_x509_name = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 crl_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 ns_cert_type = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 65535
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_ku[i] = 0
Tue Apr 14 17:26:03 2020 us=641357 remote_cert_eku = 'TLS Web Server Authentication'
Tue Apr 14 17:26:03 2020 us=641357 ssl_flags = 0
Tue Apr 14 17:26:03 2020 us=641357 tls_timeout = 2
Tue Apr 14 17:26:03 2020 us=641357 renegotiate_bytes = -1
Tue Apr 14 17:26:03 2020 us=641357 renegotiate_packets = 0
Tue Apr 14 17:26:03 2020 us=641357 renegotiate_seconds = 3600
Tue Apr 14 17:26:03 2020 us=641357 handshake_window = 60
Tue Apr 14 17:26:03 2020 us=641357 transition_window = 3600
Tue Apr 14 17:26:03 2020 us=641357 single_session = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 push_peer_info = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 tls_exit = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 tls_auth_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 tls_crypt_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_protected_authentication = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_private_mode = 00000000
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_cert_private = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_pin_cache_period = -1
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_id = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 pkcs11_id_management = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 server_network = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 server_netmask = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 server_network_ipv6 = ::
Tue Apr 14 17:26:03 2020 us=641357 server_netbits_ipv6 = 0
Tue Apr 14 17:26:03 2020 us=641357 server_bridge_ip = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 server_bridge_netmask = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 server_bridge_pool_start = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 server_bridge_pool_end = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_pool_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_pool_start = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_pool_end = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_pool_netmask = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_pool_persist_refresh_freq = 600
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_ipv6_pool_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_ipv6_pool_base = ::
Tue Apr 14 17:26:03 2020 us=641357 ifconfig_ipv6_pool_netbits = 0
Tue Apr 14 17:26:03 2020 us=641357 n_bcast_buf = 256
Tue Apr 14 17:26:03 2020 us=641357 tcp_queue_limit = 64
Tue Apr 14 17:26:03 2020 us=641357 real_hash_size = 256
Tue Apr 14 17:26:03 2020 us=641357 virtual_hash_size = 256
Tue Apr 14 17:26:03 2020 us=641357 client_connect_script = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 learn_address_script = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 client_disconnect_script = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 client_config_dir = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=641357 ccd_exclusive = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 tmp_dir = 'C:\Users\msedira\AppData\Local\Temp\'
Tue Apr 14 17:26:03 2020 us=641357 push_ifconfig_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=641357 push_ifconfig_local = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=642354 push_ifconfig_remote_netmask = 0.0.0.0
Tue Apr 14 17:26:03 2020 us=642354 push_ifconfig_ipv6_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 push_ifconfig_ipv6_local = ::/0
Tue Apr 14 17:26:03 2020 us=642354 push_ifconfig_ipv6_remote = ::
Tue Apr 14 17:26:03 2020 us=642354 enable_c2c = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 duplicate_cn = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 cf_max = 0
Tue Apr 14 17:26:03 2020 us=642354 cf_per = 0
Tue Apr 14 17:26:03 2020 us=642354 max_clients = 1024
Tue Apr 14 17:26:03 2020 us=642354 max_routes_per_client = 256
Tue Apr 14 17:26:03 2020 us=642354 auth_user_pass_verify_script = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=642354 auth_user_pass_verify_script_via_file = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 auth_token_generate = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 auth_token_lifetime = 0
Tue Apr 14 17:26:03 2020 us=642354 client = ENABLED
Tue Apr 14 17:26:03 2020 us=642354 pull = ENABLED
Tue Apr 14 17:26:03 2020 us=642354 auth_user_pass_file = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=642354 show_net_up = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 route_method = 0
Tue Apr 14 17:26:03 2020 us=642354 block_outside_dns = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 ip_win32_defined = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 ip_win32_type = 3
Tue Apr 14 17:26:03 2020 us=642354 dhcp_masq_offset = 0
Tue Apr 14 17:26:03 2020 us=642354 dhcp_lease_time = 31536000
Tue Apr 14 17:26:03 2020 us=642354 tap_sleep = 0
Tue Apr 14 17:26:03 2020 us=642354 dhcp_options = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 dhcp_renew = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 dhcp_pre_release = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 domain = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=642354 netbios_scope = '[UNDEF]'
Tue Apr 14 17:26:03 2020 us=642354 netbios_node_type = 0
Tue Apr 14 17:26:03 2020 us=642354 disable_nbt = DISABLED
Tue Apr 14 17:26:03 2020 us=642354 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Tue Apr 14 17:26:03 2020 us=642354 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Apr 14 17:26:03 2020 us=642354 library versions: OpenSSL 1.1.0l 10 Sep 2019, LZO 2.10
Enter Management Password:
Tue Apr 14 17:26:03 2020 us=643355 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25342
Tue Apr 14 17:26:03 2020 us=643355 Need hold release from management interface, waiting...
Tue Apr 14 17:26:04 2020 us=99744 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25342
Tue Apr 14 17:26:04 2020 us=200394 MANAGEMENT: CMD 'state on'
Tue Apr 14 17:26:04 2020 us=200394 MANAGEMENT: CMD 'log all on'
Tue Apr 14 17:26:04 2020 us=340199 MANAGEMENT: CMD 'echo all on'
Tue Apr 14 17:26:04 2020 us=341198 MANAGEMENT: CMD 'bytecount 5'
Tue Apr 14 17:26:04 2020 us=342194 MANAGEMENT: CMD 'hold off'
Tue Apr 14 17:26:04 2020 us=343243 MANAGEMENT: CMD 'hold release'
Tue Apr 14 17:26:04 2020 us=347181 Control Channel MTU parms [ L:1621 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Tue Apr 14 17:26:04 2020 us=347181 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Tue Apr 14 17:26:04 2020 us=347181 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Tue Apr 14 17:26:04 2020 us=347181 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Tue Apr 14 17:26:04 2020 us=347181 TCP/UDP: Preserving recently used remote address: [AF_INET]***.***.***.***:1195
Tue Apr 14 17:26:04 2020 us=347181 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Apr 14 17:26:04 2020 us=347181 UDP link local: (not bound)
Tue Apr 14 17:26:04 2020 us=347181 UDP link remote: [AF_INET]***.***.***.***:1195
Tue Apr 14 17:26:04 2020 us=347181 MANAGEMENT: >STATE:1586870764,WAIT,,,,,,
Tue Apr 14 17:26:04 2020 us=420953 MANAGEMENT: >STATE:1586870764,AUTH,,,,,,
Tue Apr 14 17:26:04 2020 us=420953 TLS: Initial packet from [AF_INET]***.***.***.***:1195, sid=a1a05fdc 75ceb7da
Tue Apr 14 17:26:04 2020 us=536940 VERIFY OK: depth=1, CN=Easy-RSA CA
Tue Apr 14 17:26:04 2020 us=537315 VERIFY KU OK
Tue Apr 14 17:26:04 2020 us=537315 Validating certificate extended key usage
Tue Apr 14 17:26:04 2020 us=537315 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Apr 14 17:26:04 2020 us=537315 VERIFY EKU OK
Tue Apr 14 17:26:04 2020 us=537315 VERIFY OK: depth=0, CN=openvpn
Tue Apr 14 17:26:04 2020 us=648112 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Apr 14 17:26:04 2020 us=648112 [openvpn] Peer Connection Initiated with [AF_INET]***.***.***.***:1195
Tue Apr 14 17:26:05 2020 us=760472 MANAGEMENT: >STATE:1586870765,GET_CONFIG,,,,,,
Tue Apr 14 17:26:05 2020 us=760472 SENT CONTROL [openvpn]: 'PUSH_REQUEST' (status=1)
Tue Apr 14 17:26:05 2020 us=830243 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route-gateway 10.9.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.9.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Tue Apr 14 17:26:05 2020 us=830243 OPTIONS IMPORT: timers and/or timeouts modified
Tue Apr 14 17:26:05 2020 us=830243 OPTIONS IMPORT: --ifconfig/up options modified
Tue Apr 14 17:26:05 2020 us=830243 OPTIONS IMPORT: route options modified
Tue Apr 14 17:26:05 2020 us=830243 OPTIONS IMPORT: route-related options modified
Tue Apr 14 17:26:05 2020 us=830243 OPTIONS IMPORT: peer-id set
Tue Apr 14 17:26:05 2020 us=830243 OPTIONS IMPORT: adjusting link_mtu to 1624
Tue Apr 14 17:26:05 2020 us=830243 OPTIONS IMPORT: data channel crypto options modified
Tue Apr 14 17:26:05 2020 us=830243 Data Channel: using negotiated cipher 'AES-256-GCM'
Tue Apr 14 17:26:05 2020 us=830243 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Tue Apr 14 17:26:05 2020 us=830243 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Apr 14 17:26:05 2020 us=830243 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Apr 14 17:26:05 2020 us=830243 interactive service msg_channel=0
Tue Apr 14 17:26:05 2020 us=836340 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=7 HWADDR=28:c6:3f:08:26:5e
Tue Apr 14 17:26:05 2020 us=862961 open_tun
Tue Apr 14 17:26:05 2020 us=864960 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{F94BC344-C8A1-47BA-9E0C-83AADD89BECC}.tap
Tue Apr 14 17:26:05 2020 us=864960 TAP-Windows Driver Version 9.24
Tue Apr 14 17:26:05 2020 us=864960 TAP-Windows MTU=1500
Tue Apr 14 17:26:05 2020 us=866951 Set TAP-Windows TUN subnet mode network/local/netmask = 10.9.0.0/10.9.0.2/255.255.255.0 [SUCCEEDED]
Tue Apr 14 17:26:05 2020 us=866951 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.9.0.2/255.255.255.0 on interface {F94BC344-C8A1-47BA-9E0C-83AADD89BECC} [DHCP-serv: 10.9.0.254, lease-time: 31536000]
Tue Apr 14 17:26:05 2020 us=869943 Successful ARP Flush on interface [29] {F94BC344-C8A1-47BA-9E0C-83AADD89BECC}
Tue Apr 14 17:26:05 2020 us=873933 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Apr 14 17:26:05 2020 us=873933 MANAGEMENT: >STATE:1586870765,ASSIGN_IP,,10.9.0.2,,,,
Tue Apr 14 17:26:08 2020 us=28239 PID_ERR replay-window backtrack occurred [1] [SSL-0] [0_] 0:2 0:1 t=1586870768[0] r=[0,64,15,1,1] sl=[62,2,64,528]
Tue Apr 14 17:26:10 2020 us=47211 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Tue Apr 14 17:26:10 2020 us=47211 C:\WINDOWS\system32\route.exe ADD ***.***.***.*** MASK 255.255.255.255 192.168.0.1
Tue Apr 14 17:26:10 2020 us=50202 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=50 and dwForwardType=4
Tue Apr 14 17:26:10 2020 us=51054 Route addition via IPAPI succeeded [adaptive]
Tue Apr 14 17:26:10 2020 us=51054 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.9.0.1
Tue Apr 14 17:26:10 2020 us=56228 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Tue Apr 14 17:26:10 2020 us=56228 Route addition via IPAPI succeeded [adaptive]
Tue Apr 14 17:26:10 2020 us=56228 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.9.0.1
Tue Apr 14 17:26:10 2020 us=61404 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Tue Apr 14 17:26:10 2020 us=61404 Route addition via IPAPI succeeded [adaptive]
Tue Apr 14 17:26:10 2020 us=61404 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Apr 14 17:26:10 2020 us=61404 Initialization Sequence Completed
Tue Apr 14 17:26:10 2020 us=61404 MANAGEMENT: >STATE:1586870770,CONNECTED,SUCCESS,10.9.0.2,***.***.***.***,1195,,
Tue Apr 14 17:26:32 2020 us=221757 TCP/UDP: Closing socket
Tue Apr 14 17:26:32 2020 us=221757 C:\WINDOWS\system32\route.exe DELETE ***.***.***.*** MASK 255.255.255.255 192.168.0.1
Tue Apr 14 17:26:32 2020 us=227453 Route deletion via IPAPI succeeded [adaptive]
Tue Apr 14 17:26:32 2020 us=227453 C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.9.0.1
Tue Apr 14 17:26:32 2020 us=235721 Route deletion via IPAPI succeeded [adaptive]
Tue Apr 14 17:26:32 2020 us=235721 C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.9.0.1
Tue Apr 14 17:26:32 2020 us=241704 Route deletion via IPAPI succeeded [adaptive]
Tue Apr 14 17:26:32 2020 us=241704 Closing TUN/TAP interface
Tue Apr 14 17:26:32 2020 us=326736 TAP: DHCP address released
Tue Apr 14 17:26:32 2020 us=330720 SIGTERM[hard,] received, process exiting
Tue Apr 14 17:26:32 2020 us=330720 MANAGEMENT: >STATE:1586870792,EXITING,SIGTERM,,,,,
WRWWRWRWWRRWRWWRRWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWRwRwrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWr
Server Log:
WARNING: file 'server.key' is group or others accessible
Current Parameter Settings:
config = 'server.conf'
mode = 1
persist_config = DISABLED
persist_mode = 1
show_ciphers = DISABLED
show_digests = DISABLED
show_engines = DISABLED
genkey = DISABLED
key_pass_file = '[UNDEF]'
show_tls_ciphers = DISABLED
connect_retry_max = 0
Connection profiles [0]:
proto = udp
local = '[UNDEF]'
local_port = '1195'
remote = '[UNDEF]'
remote_port = '1195'
remote_float = DISABLED
bind_defined = DISABLED
bind_local = ENABLED
bind_ipv6_only = DISABLED
connect_retry_seconds = 5
connect_timeout = 120
socks_proxy_server = '[UNDEF]'
socks_proxy_port = '[UNDEF]'
tun_mtu = 1500
tun_mtu_defined = ENABLED
link_mtu = 1500
link_mtu_defined = DISABLED
tun_mtu_extra = 0
tun_mtu_extra_defined = DISABLED
mtu_discover_type = -1
fragment = 0
mssfix = 1450
explicit_exit_notification = 1
Connection profiles END
remote_random = DISABLED
ipchange = '[UNDEF]'
dev = 'tun'
dev_type = '[UNDEF]'
dev_node = '[UNDEF]'
lladdr = '[UNDEF]'
topology = 3
ifconfig_local = '10.9.0.1'
ifconfig_remote_netmask = '255.255.255.0'
ifconfig_noexec = DISABLED
ifconfig_nowarn = DISABLED
ifconfig_ipv6_local = '[UNDEF]'
ifconfig_ipv6_netbits = 0
ifconfig_ipv6_remote = '[UNDEF]'
shaper = 0
mtu_test = 0
mlock = DISABLED
keepalive_ping = 10
keepalive_timeout = 120
inactivity_timeout = 0
ping_send_timeout = 10
ping_rec_timeout = 240
ping_rec_timeout_action = 2
ping_timer_remote = DISABLED
remap_sigusr1 = 0
persist_tun = ENABLED
persist_local_ip = DISABLED
persist_remote_ip = DISABLED
persist_key = ENABLED
passtos = DISABLED
resolve_retry_seconds = 1000000000
resolve_in_advance = DISABLED
username = '[UNDEF]'
groupname = '[UNDEF]'
chroot_dir = '[UNDEF]'
cd_dir = '[UNDEF]'
selinux_context = '[UNDEF]'
writepid = '[UNDEF]'
up_script = '[UNDEF]'
down_script = '[UNDEF]'
down_pre = DISABLED
up_restart = DISABLED
up_delay = DISABLED
daemon = DISABLED
inetd = 0
log = ENABLED
suppress_timestamps = ENABLED
machine_readable_output = DISABLED
nice = 0
verbosity = 5
mute = 0
gremlin = 0
status_file = 'openvpn-status.log'
status_file_version = 2
status_file_update_freq = 60
occ = ENABLED
rcvbuf = 0
sndbuf = 0
mark = 0
sockflags = 0
fast_io = DISABLED
comp.alg = 0
comp.flags = 0
route_script = '[UNDEF]'
route_default_gateway = '10.9.0.2'
route_default_metric = 0
route_noexec = DISABLED
route_delay = 0
route_delay_window = 30
route_delay_defined = DISABLED
route_nopull = DISABLED
route_gateway_via_dhcp = DISABLED
allow_pull_fqdn = DISABLED
management_addr = '[UNDEF]'
management_port = '[UNDEF]'
management_user_pass = '[UNDEF]'
management_log_history_cache = 250
management_echo_buffer_size = 100
management_write_peer_info_file = '[UNDEF]'
management_client_user = '[UNDEF]'
management_client_group = '[UNDEF]'
management_flags = 0
shared_secret_file = '[UNDEF]'
key_direction = not set
ciphername = 'AES-256-CBC'
ncp_enabled = ENABLED
ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
authname = 'SHA1'
prng_hash = 'SHA1'
prng_nonce_secret_len = 16
keysize = 0
engine = DISABLED
replay = ENABLED
mute_replay_warnings = DISABLED
replay_window = 64
replay_time = 15
packet_id_file = '[UNDEF]'
use_iv = ENABLED
test_crypto = DISABLED
tls_server = ENABLED
tls_client = DISABLED
key_method = 2
ca_file = 'ca.crt'
ca_path = '[UNDEF]'
dh_file = 'dh2048.pem'
cert_file = 'server.crt'
extra_certs_file = '[UNDEF]'
priv_key_file = 'server.key'
pkcs12_file = '[UNDEF]'
cipher_list = '[UNDEF]'
cipher_list_tls13 = '[UNDEF]'
tls_cert_profile = '[UNDEF]'
tls_verify = '[UNDEF]'
tls_export_cert = '[UNDEF]'
verify_x509_type = 0
verify_x509_name = '[UNDEF]'
crl_file = '[UNDEF]'
ns_cert_type = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_eku = '[UNDEF]'
ssl_flags = 0
tls_timeout = 2
renegotiate_bytes = -1
renegotiate_packets = 0
renegotiate_seconds = 3600
handshake_window = 60
transition_window = 3600
single_session = DISABLED
push_peer_info = DISABLED
tls_exit = DISABLED
tls_auth_file = '[UNDEF]'
tls_crypt_file = '[UNDEF]'
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_pin_cache_period = -1
pkcs11_id = '[UNDEF]'
pkcs11_id_management = DISABLED
server_network = 10.9.0.0
server_netmask = 255.255.255.0
server_network_ipv6 = ::
server_netbits_ipv6 = 0
server_bridge_ip = 0.0.0.0
server_bridge_netmask = 0.0.0.0
server_bridge_pool_start = 0.0.0.0
server_bridge_pool_end = 0.0.0.0
push_entry = 'redirect-gateway def1 bypass-dhcp'
push_entry = 'route-gateway 10.9.0.1'
push_entry = 'topology subnet'
push_entry = 'ping 10'
push_entry = 'ping-restart 120'
ifconfig_pool_defined = ENABLED
ifconfig_pool_start = 10.9.0.2
ifconfig_pool_end = 10.9.0.253
ifconfig_pool_netmask = 255.255.255.0
ifconfig_pool_persist_filename = 'ipp.txt'
ifconfig_pool_persist_refresh_freq = 600
ifconfig_ipv6_pool_defined = DISABLED
ifconfig_ipv6_pool_base = ::
ifconfig_ipv6_pool_netbits = 0
n_bcast_buf = 256
tcp_queue_limit = 64
real_hash_size = 256
virtual_hash_size = 256
client_connect_script = '[UNDEF]'
learn_address_script = '[UNDEF]'
client_disconnect_script = '[UNDEF]'
client_config_dir = '[UNDEF]'
ccd_exclusive = DISABLED
tmp_dir = '/tmp'
push_ifconfig_defined = DISABLED
push_ifconfig_local = 0.0.0.0
push_ifconfig_remote_netmask = 0.0.0.0
push_ifconfig_ipv6_defined = DISABLED
push_ifconfig_ipv6_local = ::/0
push_ifconfig_ipv6_remote = ::
enable_c2c = DISABLED
duplicate_cn = DISABLED
cf_max = 0
cf_per = 0
max_clients = 1024
max_routes_per_client = 256
auth_user_pass_verify_script = '[UNDEF]'
auth_user_pass_verify_script_via_file = DISABLED
auth_token_generate = DISABLED
auth_token_lifetime = 0
port_share_host = '[UNDEF]'
port_share_port = '[UNDEF]'
client = DISABLED
pull = DISABLED
auth_user_pass_file = '[UNDEF]'
OpenVPN 2.4.8 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Nov 1 2019
library versions: OpenSSL 1.0.2k-fips 26 Jan 2017, LZO 2.06
Diffie-Hellman initialized with 2048 bit key
TLS-Auth MTU parms [ L:1621 D:1212 EF:38 EB:0 ET:0 EL:3 ]
TUN/TAP device tun0 opened
TUN/TAP TX queue length set to 100
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun0 up mtu 1500
/sbin/ip addr add dev tun0 10.9.0.1/24 broadcast 10.9.0.255
Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Could not determine IPv4/IPv6 protocol. Using AF_INET
Socket Buffers: R=[212992->212992] S=[212992->212992]
UDPv4 link local (bound): [AF_INET][undef]:1195
UDPv4 link remote: [AF_UNSPEC]
MULTI: multi_init called, r=256 v=256
IFCONFIG POOL: base=10.9.0.2 size=252, ipv6=0
ifconfig_pool_read(), in='openvpn-client,10.9.0.2', TODO: IPv6
succeeded -> ifconfig_pool_set()
IFCONFIG POOL LIST
openvpn-client,10.9.0.2
Initialization Sequence Completed
MULTI: multi_create_instance called
***.***.***.***:36921 Re-using SSL/TLS context
***.***.***.***:36921 Control Channel MTU parms [ L:1621 D:1212 EF:38 EB:0 ET:0 EL:3 ]
***.***.***.***:36921 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
***.***.***.***:36921 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
***.***.***.***:36921 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
R***.***.***.***:36921 TLS: Initial packet from [AF_INET]***.***.***.***:36921, sid=13ded07e 4f699364
WRRWWRRWR***.***.***.***:36921 VERIFY OK: depth=1, CN=Easy-RSA CA
***.***.***.***:36921 VERIFY OK: depth=0, CN=openvpn-client
WR***.***.***.***:36921 peer info: IV_VER=2.4.8
***.***.***.***:36921 peer info: IV_PLAT=win
***.***.***.***:36921 peer info: IV_PROTO=2
***.***.***.***:36921 peer info: IV_NCP=2
***.***.***.***:36921 peer info: IV_LZ4=1
***.***.***.***:36921 peer info: IV_LZ4v2=1
***.***.***.***:36921 peer info: IV_LZO=1
***.***.***.***:36921 peer info: IV_COMP_STUB=1
***.***.***.***:36921 peer info: IV_COMP_STUBv2=1
***.***.***.***:36921 peer info: IV_TCPNL=1
***.***.***.***:36921 peer info: IV_GUI_VER=OpenVPN_GUI_11
WR***.***.***.***:36921 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
***.***.***.***:36921 [openvpn-client] Peer Connection Initiated with [AF_INET]***.***.***.***:36921
openvpn-client/***.***.***.***:36921 MULTI_sva: pool returned IPv4=10.9.0.2, IPv6=(Not enabled)
openvpn-client/***.***.***.***:36921 MULTI: Learn: 10.9.0.2 -> openvpn-client/***.***.***.***:36921
openvpn-client/***.***.***.***:36921 MULTI: primary virtual IP for openvpn-client/***.***.***.***:36921: 10.9.0.2
Ropenvpn-client/***.***.***.***:36921 PUSH: Received control message: 'PUSH_REQUEST'
openvpn-client/***.***.***.***:36921 SENT CONTROL [openvpn-client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route-gateway 10.9.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.9.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
openvpn-client/***.***.***.***:36921 Data Channel: using negotiated cipher 'AES-256-GCM'
openvpn-client/***.***.***.***:36921 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
openvpn-client/***.***.***.***:36921 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-client/***.***.***.***:36921 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
WWRRRopenvpn-client/***.***.***.***:36921 MULTI: bad source address from client [::], packet dropped
RRRRRRRRRRRRRRRRRRRrWrWRRRRRRRRRRRRRrWRRRrWRRRRwrWRwrWRRRRrWRwrWRRwrWrWRwrWrWrWRwrWrWRRwRwrWRRwRwrWrWRwrWrWRwrWrWRwRwrWrWrWrWRrWrWrWRwrWRwrWRwrWrWRwRwrWrWrWrWRwrWrWRwRwrWRwrWrWrWrWrWrWRwRwRwRwRwrWrWrWrWRwrWrWRwrWrWRwRRrWrWRRwrWRRrWRwrWRwRwrWrWRwRwrWRwrWrWrWrWRwrWRwRwRwrWRwrWRwrWRwRwrWrWrWRwRwrWRwrWRwRwrWRwrWRwrWRwrWRwRwrWRwrWRwrWRwrWrWRwrWRwRwrWRwrWRwrWRwRwrWrWRwRwrWrWrWRwRwRwRwrWrWRwrWRwRwrWRwrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrWrW
Connecting with OpenVPN Connect Client:
OpenVPN-Connect Client Log:
4/14/2020, 5:38:51 PM OpenVPN core 3.git::f225fcd0 win x86_64 64-bit PT_PROXY built on Mar 19 2020 21:16:20
⏎4/14/2020, 5:38:51 PM Frame=512/2048/512 mssfix-ctrl=1250
⏎4/14/2020, 5:38:51 PM UNUSED OPTIONS
2 [dev-node] [OpenVPN]
5 [resolv-retry] [infinite]
6 [nobind]
7 [persist-key]
8 [persist-tun]
14 [verb] [5]
⏎4/14/2020, 5:38:51 PM Contacting ***.***.***.***:1195 via UDP
⏎4/14/2020, 5:38:51 PM Connecting to [***.***.***.***]:1195 (***.***.***.***) via UDPv4
⏎4/14/2020, 5:38:51 PM EVENT: RESOLVE ⏎4/14/2020, 5:38:51 PM EVENT: WAIT ⏎4/14/2020, 5:38:51 PM EVENT: CONNECTING ⏎4/14/2020, 5:38:51 PM Tunnel Options:V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client
⏎4/14/2020, 5:38:51 PM Creds: UsernameEmpty/PasswordEmpty
⏎4/14/2020, 5:38:51 PM Peer Info:
IV_GUI_VER=OCmacOS_3.1.3-713
IV_VER=3.git::f225fcd0
IV_PLAT=win
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
⏎4/14/2020, 5:38:51 PM VERIFY OK : depth=1
cert. version : 3
serial number : AB:EA:8F:7D:FE:00:17:77
issuer name : CN=Easy-RSA CA
subject name : CN=Easy-RSA CA
issued on : 2020-04-01 11:57:59
expires on : 2030-03-30 11:57:59
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=true
key usage : Key Cert Sign, CRL Sign
⏎4/14/2020, 5:38:51 PM VERIFY OK : depth=0
cert. version : 3
serial number : 1A:AE:6C:7D:1A:37:1F:F4:0E:6F:7B:6F:E0:1B:25:C0
issuer name : CN=Easy-RSA CA
subject name : CN=openvpn
issued on : 2020-04-01 12:01:42
expires on : 2023-03-17 12:01:42
signed using : RSA with SHA-256
RSA key size : 2048 bits
basic constraints : CA=false
subject alt name : openvpn
key usage : Digital Signature, Key Encipherment
ext key usage : TLS Web Server Authentication
⏎4/14/2020, 5:38:51 PM SSL Handshake: TLSv1.2/TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
⏎4/14/2020, 5:38:51 PM Session is ACTIVE
⏎4/14/2020, 5:38:51 PM Sending PUSH_REQUEST to server...
⏎4/14/2020, 5:38:51 PM EVENT: GET_CONFIG ⏎4/14/2020, 5:38:51 PM OPTIONS:
0 [redirect-gateway] [def1] [bypass-dhcp]
1 [route-gateway] [10.9.0.1]
2 [topology] [subnet]
3 [ping] [10]
4 [ping-restart] [120]
5 [ifconfig] [10.9.0.2] [255.255.255.0]
6 [peer-id] [0]
7 [cipher] [AES-256-GCM]
⏎4/14/2020, 5:38:51 PM PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: SHA1
compress: NONE
peer ID: 0
⏎4/14/2020, 5:38:51 PM CAPTURED OPTIONS:
Session Name: ***.***.***.***
Layer: OSI_LAYER_3
Remote Address: ***.***.***.***
Tunnel Addresses:
10.9.0.2/24 -> 10.9.0.1
Reroute Gateway: IPv4=1 IPv6=0 flags=[ ENABLE REROUTE_GW DEF1 BYPASS_DHCP IPv4 ]
Block IPv6: no
Add Routes:
Exclude Routes:
DNS Servers:
Search Domains:
⏎4/14/2020, 5:38:51 PM EVENT: ASSIGN_IP ⏎4/14/2020, 5:38:53 PM SetupClient: transmitting tun setup list to \\.\pipe\agent_ovpnconnect
{
"confirm_event" : "300c000000000000",
"destroy_event" : "d80d000000000000",
"tun" :
{
"adapter_domain_suffix" : "",
"block_ipv6" : false,
"layer" : 3,
"mtu" : 0,
"remote_address" :
{
"address" : "***.***.***.***",
"ipv6" : false
},
"reroute_gw" :
{
"flags" : 307,
"ipv4" : true,
"ipv6" : false
},
"route_metric_default" : -1,
"session_name" : "***.***.***.***",
"tunnel_address_index_ipv4" : 0,
"tunnel_address_index_ipv6" : -1,
"tunnel_addresses" :
[
{
"address" : "10.9.0.2",
"gateway" : "10.9.0.1",
"ipv6" : false,
"metric" : -1,
"net30" : false,
"prefix_length" : 24
}
]
}
}
POST np://[\\.\pipe\agent_ovpnconnect]/tun-setup : 200 OK
TAP ADAPTERS:
guid='{448DED2E-8F6F-4CBC-8279-1F167FE5E9BC}' index=11 name='OpenVPN-Connect'
Open TAP device "OpenVPN-Connect" PATH="\\.\Global\{448DED2E-8F6F-4CBC-8279-1F167FE5E9BC}.tap" SUCCEEDED
TAP-Windows Driver Version 9.23
ActionDeleteAllRoutesOnInterface iface_index=11
netsh interface ip set interface 11 metric=1
Ok.
netsh interface ip set address 11 static 10.9.0.2 255.255.255.0 gateway=10.9.0.1 store=active
netsh interface ip add route ***.***.***.***/32 7 192.168.0.1 store=active
Ok.
netsh interface ip add route 0.0.0.0/1 11 10.9.0.1 store=active
Ok.
netsh interface ip add route 128.0.0.0/1 11 10.9.0.1 store=active
Ok.
ipconfig /flushdns
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
TAP handle: a013000000000000
⏎4/14/2020, 5:38:53 PM Connected via TUN_WIN
⏎4/14/2020, 5:38:53 PM EVENT: CONNECTED ***.***.***.***:1195 (***.***.***.***) via /UDPv4 on TUN_WIN/10.9.0.2/ gw=[10.9.0.1/]⏎
Server Log:
WARNING: file 'server.key' is group or others accessible
Current Parameter Settings:
config = 'server.conf'
mode = 1
persist_config = DISABLED
persist_mode = 1
show_ciphers = DISABLED
show_digests = DISABLED
show_engines = DISABLED
genkey = DISABLED
key_pass_file = '[UNDEF]'
show_tls_ciphers = DISABLED
connect_retry_max = 0
Connection profiles [0]:
proto = udp
local = '[UNDEF]'
local_port = '1195'
remote = '[UNDEF]'
remote_port = '1195'
remote_float = DISABLED
bind_defined = DISABLED
bind_local = ENABLED
bind_ipv6_only = DISABLED
connect_retry_seconds = 5
connect_timeout = 120
socks_proxy_server = '[UNDEF]'
socks_proxy_port = '[UNDEF]'
tun_mtu = 1500
tun_mtu_defined = ENABLED
link_mtu = 1500
link_mtu_defined = DISABLED
tun_mtu_extra = 0
tun_mtu_extra_defined = DISABLED
mtu_discover_type = -1
fragment = 0
mssfix = 1450
explicit_exit_notification = 1
Connection profiles END
remote_random = DISABLED
ipchange = '[UNDEF]'
dev = 'tun'
dev_type = '[UNDEF]'
dev_node = '[UNDEF]'
lladdr = '[UNDEF]'
topology = 3
ifconfig_local = '10.9.0.1'
ifconfig_remote_netmask = '255.255.255.0'
ifconfig_noexec = DISABLED
ifconfig_nowarn = DISABLED
ifconfig_ipv6_local = '[UNDEF]'
ifconfig_ipv6_netbits = 0
ifconfig_ipv6_remote = '[UNDEF]'
shaper = 0
mtu_test = 0
mlock = DISABLED
keepalive_ping = 10
keepalive_timeout = 120
inactivity_timeout = 0
ping_send_timeout = 10
ping_rec_timeout = 240
ping_rec_timeout_action = 2
ping_timer_remote = DISABLED
remap_sigusr1 = 0
persist_tun = ENABLED
persist_local_ip = DISABLED
persist_remote_ip = DISABLED
persist_key = ENABLED
passtos = DISABLED
resolve_retry_seconds = 1000000000
resolve_in_advance = DISABLED
username = '[UNDEF]'
groupname = '[UNDEF]'
chroot_dir = '[UNDEF]'
cd_dir = '[UNDEF]'
selinux_context = '[UNDEF]'
writepid = '[UNDEF]'
up_script = '[UNDEF]'
down_script = '[UNDEF]'
down_pre = DISABLED
up_restart = DISABLED
up_delay = DISABLED
daemon = DISABLED
inetd = 0
log = ENABLED
suppress_timestamps = ENABLED
machine_readable_output = DISABLED
nice = 0
verbosity = 5
mute = 0
gremlin = 0
status_file = 'openvpn-status.log'
status_file_version = 2
status_file_update_freq = 60
occ = ENABLED
rcvbuf = 0
sndbuf = 0
mark = 0
sockflags = 0
fast_io = DISABLED
comp.alg = 0
comp.flags = 0
route_script = '[UNDEF]'
route_default_gateway = '10.9.0.2'
route_default_metric = 0
route_noexec = DISABLED
route_delay = 0
route_delay_window = 30
route_delay_defined = DISABLED
route_nopull = DISABLED
route_gateway_via_dhcp = DISABLED
allow_pull_fqdn = DISABLED
management_addr = '[UNDEF]'
management_port = '[UNDEF]'
management_user_pass = '[UNDEF]'
management_log_history_cache = 250
management_echo_buffer_size = 100
management_write_peer_info_file = '[UNDEF]'
management_client_user = '[UNDEF]'
management_client_group = '[UNDEF]'
management_flags = 0
shared_secret_file = '[UNDEF]'
key_direction = not set
ciphername = 'AES-256-CBC'
ncp_enabled = ENABLED
ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
authname = 'SHA1'
prng_hash = 'SHA1'
prng_nonce_secret_len = 16
keysize = 0
engine = DISABLED
replay = ENABLED
mute_replay_warnings = DISABLED
replay_window = 64
replay_time = 15
packet_id_file = '[UNDEF]'
use_iv = ENABLED
test_crypto = DISABLED
tls_server = ENABLED
tls_client = DISABLED
key_method = 2
ca_file = 'ca.crt'
ca_path = '[UNDEF]'
dh_file = 'dh2048.pem'
cert_file = 'server.crt'
extra_certs_file = '[UNDEF]'
priv_key_file = 'server.key'
pkcs12_file = '[UNDEF]'
cipher_list = '[UNDEF]'
cipher_list_tls13 = '[UNDEF]'
tls_cert_profile = '[UNDEF]'
tls_verify = '[UNDEF]'
tls_export_cert = '[UNDEF]'
verify_x509_type = 0
verify_x509_name = '[UNDEF]'
crl_file = '[UNDEF]'
ns_cert_type = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_ku[i] = 0
remote_cert_eku = '[UNDEF]'
ssl_flags = 0
tls_timeout = 2
renegotiate_bytes = -1
renegotiate_packets = 0
renegotiate_seconds = 3600
handshake_window = 60
transition_window = 3600
single_session = DISABLED
push_peer_info = DISABLED
tls_exit = DISABLED
tls_auth_file = '[UNDEF]'
tls_crypt_file = '[UNDEF]'
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_protected_authentication = DISABLED
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_private_mode = 00000000
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_cert_private = DISABLED
pkcs11_pin_cache_period = -1
pkcs11_id = '[UNDEF]'
pkcs11_id_management = DISABLED
server_network = 10.9.0.0
server_netmask = 255.255.255.0
server_network_ipv6 = ::
server_netbits_ipv6 = 0
server_bridge_ip = 0.0.0.0
server_bridge_netmask = 0.0.0.0
server_bridge_pool_start = 0.0.0.0
server_bridge_pool_end = 0.0.0.0
push_entry = 'redirect-gateway def1 bypass-dhcp'
push_entry = 'route-gateway 10.9.0.1'
push_entry = 'topology subnet'
push_entry = 'ping 10'
push_entry = 'ping-restart 120'
ifconfig_pool_defined = ENABLED
ifconfig_pool_start = 10.9.0.2
ifconfig_pool_end = 10.9.0.253
ifconfig_pool_netmask = 255.255.255.0
ifconfig_pool_persist_filename = 'ipp.txt'
ifconfig_pool_persist_refresh_freq = 600
ifconfig_ipv6_pool_defined = DISABLED
ifconfig_ipv6_pool_base = ::
ifconfig_ipv6_pool_netbits = 0
n_bcast_buf = 256
tcp_queue_limit = 64
real_hash_size = 256
virtual_hash_size = 256
client_connect_script = '[UNDEF]'
learn_address_script = '[UNDEF]'
client_disconnect_script = '[UNDEF]'
client_config_dir = '[UNDEF]'
ccd_exclusive = DISABLED
tmp_dir = '/tmp'
push_ifconfig_defined = DISABLED
push_ifconfig_local = 0.0.0.0
push_ifconfig_remote_netmask = 0.0.0.0
push_ifconfig_ipv6_defined = DISABLED
push_ifconfig_ipv6_local = ::/0
push_ifconfig_ipv6_remote = ::
enable_c2c = DISABLED
duplicate_cn = DISABLED
cf_max = 0
cf_per = 0
max_clients = 1024
max_routes_per_client = 256
auth_user_pass_verify_script = '[UNDEF]'
auth_user_pass_verify_script_via_file = DISABLED
auth_token_generate = DISABLED
auth_token_lifetime = 0
port_share_host = '[UNDEF]'
port_share_port = '[UNDEF]'
client = DISABLED
pull = DISABLED
auth_user_pass_file = '[UNDEF]'
OpenVPN 2.4.8 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Nov 1 2019
library versions: OpenSSL 1.0.2k-fips 26 Jan 2017, LZO 2.06
Diffie-Hellman initialized with 2048 bit key
TLS-Auth MTU parms [ L:1621 D:1212 EF:38 EB:0 ET:0 EL:3 ]
TUN/TAP device tun0 opened
TUN/TAP TX queue length set to 100
do_ifconfig, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun0 up mtu 1500
/sbin/ip addr add dev tun0 10.9.0.1/24 broadcast 10.9.0.255
Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Could not determine IPv4/IPv6 protocol. Using AF_INET
Socket Buffers: R=[212992->212992] S=[212992->212992]
UDPv4 link local (bound): [AF_INET][undef]:1195
UDPv4 link remote: [AF_UNSPEC]
MULTI: multi_init called, r=256 v=256
IFCONFIG POOL: base=10.9.0.2 size=252, ipv6=0
ifconfig_pool_read(), in='openvpn-client,10.9.0.2', TODO: IPv6
succeeded -> ifconfig_pool_set()
IFCONFIG POOL LIST
openvpn-client,10.9.0.2
Initialization Sequence Completed
MULTI: multi_create_instance called
***.***.***.***:61473 Re-using SSL/TLS context
***.***.***.***:61473 Control Channel MTU parms [ L:1621 D:1212 EF:38 EB:0 ET:0 EL:3 ]
***.***.***.***:61473 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
***.***.***.***:61473 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
***.***.***.***:61473 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
R***.***.***.***:61473 TLS: Initial packet from [AF_INET]***.***.***.***:61473, sid=4340606e 08f7e846
WRWWWRR***.***.***.***:61473 VERIFY OK: depth=1, CN=Easy-RSA CA
***.***.***.***:61473 VERIFY OK: depth=0, CN=openvpn-client
WRWR***.***.***.***:61473 peer info: IV_GUI_VER=OCmacOS_3.1.3-713
***.***.***.***:61473 peer info: IV_VER=3.git::f225fcd0
***.***.***.***:61473 peer info: IV_PLAT=win
***.***.***.***:61473 peer info: IV_NCP=2
***.***.***.***:61473 peer info: IV_TCPNL=1
***.***.***.***:61473 peer info: IV_PROTO=2
***.***.***.***:61473 peer info: IV_AUTO_SESS=1
WR***.***.***.***:61473 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
***.***.***.***:61473 [openvpn-client] Peer Connection Initiated with [AF_INET]***.***.***.***:61473
openvpn-client/***.***.***.***:61473 MULTI_sva: pool returned IPv4=10.9.0.2, IPv6=(Not enabled)
openvpn-client/***.***.***.***:61473 MULTI: Learn: 10.9.0.2 -> openvpn-client/***.***.***.***:61473
openvpn-client/***.***.***.***:61473 MULTI: primary virtual IP for openvpn-client/***.***.***.***:61473: 10.9.0.2
Ropenvpn-client/***.***.***.***:61473 PUSH: Received control message: 'PUSH_REQUEST'
openvpn-client/***.***.***.***:61473 SENT CONTROL [openvpn-client]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route-gateway 10.9.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.9.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
openvpn-client/***.***.***.***:61473 Data Channel: using negotiated cipher 'AES-256-GCM'
openvpn-client/***.***.***.***:61473 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
openvpn-client/***.***.***.***:61473 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-client/***.***.***.***:61473 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
WWrWWRRRopenvpn-client/***.***.***.***:61473 MULTI: bad source address from client [::], packet dropped
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRrWRRRRRRrWRwRRRRrWRRRwrWRwRwrWrWrWrWRwRwRwrWRRwRwRwrWRwrWRRRRwRRrWRwRwrWrWRwRwrWrWrWRwRRRRRRRRRRrWrWRwRwrWRRwR
