Hello, have a problem with a new machine, it have a 2.4.7 version client and server is 2.4.4. On machines with client 2.4.3 all is ok.
Looks like all is running fine but interface have no ipv4 address. Find in /var/log/messages that it deleted immediately after creation.
mode server
daemon
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh2048.pem
topology subnet
server 192.168.92.0 255.255.252.0
ifconfig-pool-persist /var/log/openvpn/ipp.txt
push "route 192.168.85.0 255.255.255.0"
client-to-client
keepalive 20 180
tls-auth /etc/openvpn/keys/ta.key 0 # This file is secret
cipher AES-256-CBC
comp-lzo
max-clients 240
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 4
mute 20
explicit-exit-notify 1
management 0.0.0.0 7505
client
dev tun
proto udp
remote x 1194
resolv-retry infinite
ca ca.crt
cert 140000001.crt
key 140000001.key
tls-client
tls-version-max 1.2
tls-auth ta.key 1
auth SHA1
cipher AES-256-CBC
remote-cert-tls server
comp-lzo
persist-key
persist-tun
log /etc/openvpn/openvpn.log
verb 4
Server log
Mon Aug 3 11:40:08 2020 us=851853 140000001/217.67.182.230:4713 TLS: new session incoming connection from [AF_INET]x.x.x.x:x
Mon Aug 3 11:40:08 2020 us=859260 140000001/217.67.182.230:4713 VERIFY OK: depth=1, C=*, ST=*, L=*, O=*, OU=*, CN=*, name=*, emailAddress=*
Mon Aug 3 11:40:08 2020 us=859438 140000001/217.67.182.230:4713 VERIFY OK: depth=0, C=*, ST=*, L=*, O=*, OU=*, CN=*, name=*, emailAddress=*
Mon Aug 3 11:40:08 2020 us=861529 140000001/217.67.182.230:4713 peer info: IV_VER=2.4.7
Mon Aug 3 11:40:08 2020 us=861555 140000001/217.67.182.230:4713 peer info: IV_PLAT=linux
Mon Aug 3 11:40:08 2020 us=861564 140000001/217.67.182.230:4713 peer info: IV_PROTO=2
Mon Aug 3 11:40:08 2020 us=861572 140000001/217.67.182.230:4713 peer info: IV_LZ4=1
Mon Aug 3 11:40:08 2020 us=861643 140000001/217.67.182.230:4713 peer info: IV_LZ4v2=1
Mon Aug 3 11:40:08 2020 us=861655 140000001/217.67.182.230:4713 peer info: IV_LZO=1
Mon Aug 3 11:40:08 2020 us=861663 140000001/217.67.182.230:4713 peer info: IV_COMP_STUB=1
Mon Aug 3 11:40:08 2020 us=861672 140000001/217.67.182.230:4713 peer info: IV_COMP_STUBv2=1
Mon Aug 3 11:40:08 2020 us=861680 140000001/217.67.182.230:4713 peer info: IV_TCPNL=1
Mon Aug 3 11:40:08 2020 us=861780 140000001/217.67.182.230:4713 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Aug 3 11:40:08 2020 us=861797 140000001/217.67.182.230:4713 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 3 11:40:08 2020 us=861836 140000001/217.67.182.230:4713 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Aug 3 11:40:08 2020 us=861848 140000001/217.67.182.230:4713 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 3 11:40:08 2020 us=861867 140000001/217.67.182.230:4713 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1
Mon Aug 3 11:40:08 2020 us=861971 140000001/217.67.182.230:4713 TLS: tls_multi_process: untrusted session promoted to semi-trusted
Mon Aug 3 11:40:08 2020 us=863738 140000001/217.67.182.230:4713 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Aug 3 11:40:09 2020 us=900027 140000001/217.67.182.230:4713 PUSH: Received control message: 'PUSH_REQUEST'
Mon Aug 3 11:40:09 2020 us=900122 140000001/217.67.182.230:4713 SENT CONTROL [140000001]: 'PUSH_REPLY,route 192.168.85.0 255.255.255.0,route-gateway 192.168.92.1,topology subnet,ping 20,ping-restart 180,ifconfig 192.168.95.2 255.255.252.0,peer-id 0' (status=1)
Client log
on Aug 3 08:40:08 2020 us=848450 WARNING: file '140000001.key' is group or others accessible
Mon Aug 3 08:40:08 2020 us=848490 WARNING: file 'ta.key' is group or others accessible
Mon Aug 3 08:40:08 2020 us=848505 Current Parameter Settings:
Mon Aug 3 08:40:08 2020 us=848511 config = 'xxx'
Mon Aug 3 08:40:08 2020 us=848515 mode = 0
Mon Aug 3 08:40:08 2020 us=848520 persist_config = DISABLED
Mon Aug 3 08:40:08 2020 us=848524 persist_mode = 1
Mon Aug 3 08:40:08 2020 us=848529 show_ciphers = DISABLED
Mon Aug 3 08:40:08 2020 us=848533 show_digests = DISABLED
Mon Aug 3 08:40:08 2020 us=848537 show_engines = DISABLED
Mon Aug 3 08:40:08 2020 us=848541 genkey = DISABLED
Mon Aug 3 08:40:08 2020 us=848546 key_pass_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848550 show_tls_ciphers = DISABLED
Mon Aug 3 08:40:08 2020 us=848554 connect_retry_max = 0
Mon Aug 3 08:40:08 2020 us=848558 Connection profiles [0]:
Mon Aug 3 08:40:08 2020 us=848563 proto = udp
Mon Aug 3 08:40:08 2020 us=848567 local = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848571 local_port = '1194'
Mon Aug 3 08:40:08 2020 us=848575 remote = 'xxx'
Mon Aug 3 08:40:08 2020 us=848580 remote_port = '1194'
Mon Aug 3 08:40:08 2020 us=848585 remote_float = DISABLED
Mon Aug 3 08:40:08 2020 us=848589 bind_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=848593 bind_local = ENABLED
Mon Aug 3 08:40:08 2020 us=848597 bind_ipv6_only = DISABLED
Mon Aug 3 08:40:08 2020 us=848602 connect_retry_seconds = 5
Mon Aug 3 08:40:08 2020 us=848606 connect_timeout = 120
Mon Aug 3 08:40:08 2020 us=848610 socks_proxy_server = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848614 socks_proxy_port = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848619 tun_mtu = 1500
Mon Aug 3 08:40:08 2020 us=848623 tun_mtu_defined = ENABLED
Mon Aug 3 08:40:08 2020 us=848627 link_mtu = 1500
Mon Aug 3 08:40:08 2020 us=848633 link_mtu_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=848639 tun_mtu_extra = 0
Mon Aug 3 08:40:08 2020 us=848644 tun_mtu_extra_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=848648 mtu_discover_type = -1
Mon Aug 3 08:40:08 2020 us=848652 fragment = 0
Mon Aug 3 08:40:08 2020 us=848657 mssfix = 1450
Mon Aug 3 08:40:08 2020 us=848661 explicit_exit_notification = 0
Mon Aug 3 08:40:08 2020 us=848665 Connection profiles END
Mon Aug 3 08:40:08 2020 us=848669 remote_random = DISABLED
Mon Aug 3 08:40:08 2020 us=848673 ipchange = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848677 dev = 'tun'
Mon Aug 3 08:40:08 2020 us=848682 dev_type = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848686 dev_node = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848690 lladdr = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848694 topology = 1
Mon Aug 3 08:40:08 2020 us=848699 ifconfig_local = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848703 ifconfig_remote_netmask = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848707 ifconfig_noexec = DISABLED
Mon Aug 3 08:40:08 2020 us=848711 ifconfig_nowarn = DISABLED
Mon Aug 3 08:40:08 2020 us=848715 ifconfig_ipv6_local = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848720 ifconfig_ipv6_netbits = 0
Mon Aug 3 08:40:08 2020 us=848724 ifconfig_ipv6_remote = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848729 shaper = 0
Mon Aug 3 08:40:08 2020 us=848733 mtu_test = 0
Mon Aug 3 08:40:08 2020 us=848737 mlock = DISABLED
Mon Aug 3 08:40:08 2020 us=848742 keepalive_ping = 0
Mon Aug 3 08:40:08 2020 us=848746 keepalive_timeout = 0
Mon Aug 3 08:40:08 2020 us=848750 inactivity_timeout = 0
Mon Aug 3 08:40:08 2020 us=848754 ping_send_timeout = 0
Mon Aug 3 08:40:08 2020 us=848759 ping_rec_timeout = 0
Mon Aug 3 08:40:08 2020 us=848763 ping_rec_timeout_action = 0
Mon Aug 3 08:40:08 2020 us=848767 ping_timer_remote = DISABLED
Mon Aug 3 08:40:08 2020 us=848773 remap_sigusr1 = 0
Mon Aug 3 08:40:08 2020 us=848777 persist_tun = ENABLED
Mon Aug 3 08:40:08 2020 us=848781 persist_local_ip = DISABLED
Mon Aug 3 08:40:08 2020 us=848785 persist_remote_ip = DISABLED
Mon Aug 3 08:40:08 2020 us=848790 persist_key = ENABLED
Mon Aug 3 08:40:08 2020 us=848808 passtos = DISABLED
Mon Aug 3 08:40:08 2020 us=848814 resolve_retry_seconds = 1000000000
Mon Aug 3 08:40:08 2020 us=848818 resolve_in_advance = DISABLED
Mon Aug 3 08:40:08 2020 us=848822 username = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848827 groupname = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848831 chroot_dir = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848835 cd_dir = '/etc/openvpn/'
Mon Aug 3 08:40:08 2020 us=848839 writepid = '/var/run/openvpn/x.pid'
Mon Aug 3 08:40:08 2020 us=848844 up_script = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848848 down_script = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848852 down_pre = DISABLED
Mon Aug 3 08:40:08 2020 us=848857 up_restart = DISABLED
Mon Aug 3 08:40:08 2020 us=848861 up_delay = DISABLED
Mon Aug 3 08:40:08 2020 us=848865 daemon = ENABLED
Mon Aug 3 08:40:08 2020 us=848869 inetd = 0
Mon Aug 3 08:40:08 2020 us=848874 log = ENABLED
Mon Aug 3 08:40:08 2020 us=848878 suppress_timestamps = DISABLED
Mon Aug 3 08:40:08 2020 us=848882 machine_readable_output = DISABLED
Mon Aug 3 08:40:08 2020 us=848886 nice = 0
Mon Aug 3 08:40:08 2020 us=848891 verbosity = 4
Mon Aug 3 08:40:08 2020 us=848895 mute = 0
Mon Aug 3 08:40:08 2020 us=848899 gremlin = 0
Mon Aug 3 08:40:08 2020 us=848903 status_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848908 status_file_version = 1
Mon Aug 3 08:40:08 2020 us=848912 status_file_update_freq = 60
Mon Aug 3 08:40:08 2020 us=848916 occ = ENABLED
Mon Aug 3 08:40:08 2020 us=848921 rcvbuf = 0
Mon Aug 3 08:40:08 2020 us=848926 sndbuf = 0
Mon Aug 3 08:40:08 2020 us=848931 mark = 0
Mon Aug 3 08:40:08 2020 us=848935 sockflags = 0
Mon Aug 3 08:40:08 2020 us=848939 fast_io = DISABLED
Mon Aug 3 08:40:08 2020 us=848943 comp.alg = 2
Mon Aug 3 08:40:08 2020 us=848948 comp.flags = 1
Mon Aug 3 08:40:08 2020 us=848952 route_script = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848957 route_default_gateway = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=848961 route_default_metric = 0
Mon Aug 3 08:40:08 2020 us=848966 route_noexec = DISABLED
Mon Aug 3 08:40:08 2020 us=848970 route_delay = 0
Mon Aug 3 08:40:08 2020 us=848974 route_delay_window = 30
Mon Aug 3 08:40:08 2020 us=848978 route_delay_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=848983 route_nopull = DISABLED
Mon Aug 3 08:40:08 2020 us=848987 route_gateway_via_dhcp = DISABLED
Mon Aug 3 08:40:08 2020 us=848991 allow_pull_fqdn = DISABLED
Mon Aug 3 08:40:08 2020 us=848996 management_addr = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849000 management_port = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849004 management_user_pass = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849008 management_log_history_cache = 250
Mon Aug 3 08:40:08 2020 us=849013 management_echo_buffer_size = 100
Mon Aug 3 08:40:08 2020 us=849017 management_write_peer_info_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849022 management_client_user = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849026 management_client_group = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849031 management_flags = 0
Mon Aug 3 08:40:08 2020 us=849035 shared_secret_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849039 key_direction = 1
Mon Aug 3 08:40:08 2020 us=849044 ciphername = 'AES-256-CBC'
Mon Aug 3 08:40:08 2020 us=849048 ncp_enabled = DISABLED
Mon Aug 3 08:40:08 2020 us=849053 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Mon Aug 3 08:40:08 2020 us=849057 authname = 'SHA1'
Mon Aug 3 08:40:08 2020 us=849062 prng_hash = 'SHA1'
Mon Aug 3 08:40:08 2020 us=849068 prng_nonce_secret_len = 16
Mon Aug 3 08:40:08 2020 us=849072 keysize = 0
Mon Aug 3 08:40:08 2020 us=849077 engine = DISABLED
Mon Aug 3 08:40:08 2020 us=849081 replay = ENABLED
Mon Aug 3 08:40:08 2020 us=849085 mute_replay_warnings = DISABLED
Mon Aug 3 08:40:08 2020 us=849090 replay_window = 64
Mon Aug 3 08:40:08 2020 us=849094 replay_time = 15
Mon Aug 3 08:40:08 2020 us=849099 packet_id_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849103 use_iv = ENABLED
Mon Aug 3 08:40:08 2020 us=849111 test_crypto = DISABLED
Mon Aug 3 08:40:08 2020 us=849115 tls_server = DISABLED
Mon Aug 3 08:40:08 2020 us=849120 tls_client = ENABLED
Mon Aug 3 08:40:08 2020 us=849125 key_method = 2
Mon Aug 3 08:40:08 2020 us=849129 ca_file = 'ca.crt'
Mon Aug 3 08:40:08 2020 us=849133 ca_path = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849138 dh_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849143 cert_file = '140000001.crt'
Mon Aug 3 08:40:08 2020 us=849147 extra_certs_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849151 priv_key_file = '140000001.key'
Mon Aug 3 08:40:08 2020 us=849156 pkcs12_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849160 cipher_list = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849164 cipher_list_tls13 = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849169 tls_cert_profile = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849173 tls_verify = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849177 tls_export_cert = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849182 verify_x509_type = 0
Mon Aug 3 08:40:08 2020 us=849186 verify_x509_name = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849190 crl_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849195 ns_cert_type = 0
Mon Aug 3 08:40:08 2020 us=849199 remote_cert_ku[i] = 65535
Mon Aug 3 08:40:08 2020 us=849204 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849208 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849213 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849218 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849222 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849226 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849231 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849235 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849239 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849243 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849248 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849252 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849256 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849260 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849265 remote_cert_ku[i] = 0
Mon Aug 3 08:40:08 2020 us=849277 remote_cert_eku = 'TLS Web Server Authentication'
Mon Aug 3 08:40:08 2020 us=849282 ssl_flags = 3072
Mon Aug 3 08:40:08 2020 us=849286 tls_timeout = 2
Mon Aug 3 08:40:08 2020 us=849291 renegotiate_bytes = -1
Mon Aug 3 08:40:08 2020 us=849295 renegotiate_packets = 0
Mon Aug 3 08:40:08 2020 us=849299 renegotiate_seconds = 3600
Mon Aug 3 08:40:08 2020 us=849304 handshake_window = 60
Mon Aug 3 08:40:08 2020 us=849308 transition_window = 3600
Mon Aug 3 08:40:08 2020 us=849314 single_session = DISABLED
Mon Aug 3 08:40:08 2020 us=849318 push_peer_info = DISABLED
Mon Aug 3 08:40:08 2020 us=849323 tls_exit = DISABLED
Mon Aug 3 08:40:08 2020 us=849327 tls_auth_file = 'ta.key'
Mon Aug 3 08:40:08 2020 us=849332 tls_crypt_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849337 server_network = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849342 server_netmask = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849347 server_network_ipv6 = ::
Mon Aug 3 08:40:08 2020 us=849352 server_netbits_ipv6 = 0
Mon Aug 3 08:40:08 2020 us=849357 server_bridge_ip = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849362 server_bridge_netmask = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849368 server_bridge_pool_start = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849372 server_bridge_pool_end = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849377 ifconfig_pool_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=849382 ifconfig_pool_start = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849388 ifconfig_pool_end = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849393 ifconfig_pool_netmask = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849398 ifconfig_pool_persist_filename = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849402 ifconfig_pool_persist_refresh_freq = 600
Mon Aug 3 08:40:08 2020 us=849407 ifconfig_ipv6_pool_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=849411 ifconfig_ipv6_pool_base = ::
Mon Aug 3 08:40:08 2020 us=849416 ifconfig_ipv6_pool_netbits = 0
Mon Aug 3 08:40:08 2020 us=849424 n_bcast_buf = 256
Mon Aug 3 08:40:08 2020 us=849429 tcp_queue_limit = 64
Mon Aug 3 08:40:08 2020 us=849433 real_hash_size = 256
Mon Aug 3 08:40:08 2020 us=849438 virtual_hash_size = 256
Mon Aug 3 08:40:08 2020 us=849442 client_connect_script = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849446 learn_address_script = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849451 client_disconnect_script = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849455 client_config_dir = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849460 ccd_exclusive = DISABLED
Mon Aug 3 08:40:08 2020 us=849464 tmp_dir = '/tmp'
Mon Aug 3 08:40:08 2020 us=849468 push_ifconfig_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=849473 push_ifconfig_local = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849478 push_ifconfig_remote_netmask = 0.0.0.0
Mon Aug 3 08:40:08 2020 us=849483 push_ifconfig_ipv6_defined = DISABLED
Mon Aug 3 08:40:08 2020 us=849488 push_ifconfig_ipv6_local = ::/0
Mon Aug 3 08:40:08 2020 us=849492 push_ifconfig_ipv6_remote = ::
Mon Aug 3 08:40:08 2020 us=849497 enable_c2c = DISABLED
Mon Aug 3 08:40:08 2020 us=849501 duplicate_cn = DISABLED
Mon Aug 3 08:40:08 2020 us=849518 cf_max = 0
Mon Aug 3 08:40:08 2020 us=849521 cf_per = 0
Mon Aug 3 08:40:08 2020 us=849524 max_clients = 1024
Mon Aug 3 08:40:08 2020 us=849528 max_routes_per_client = 256
Mon Aug 3 08:40:08 2020 us=849530 auth_user_pass_verify_script = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849533 auth_user_pass_verify_script_via_file = DISABLED
Mon Aug 3 08:40:08 2020 us=849536 auth_token_generate = DISABLED
Mon Aug 3 08:40:08 2020 us=849539 auth_token_lifetime = 0
Mon Aug 3 08:40:08 2020 us=849541 port_share_host = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849544 port_share_port = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849547 client = ENABLED
Mon Aug 3 08:40:08 2020 us=849550 pull = ENABLED
Mon Aug 3 08:40:08 2020 us=849553 auth_user_pass_file = '[UNDEF]'
Mon Aug 3 08:40:08 2020 us=849557 OpenVPN 2.4.7 x86_64-poky-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb 6 2020
Mon Aug 3 08:40:08 2020 us=849562 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10
Mon Aug 3 08:40:08 2020 us=850194 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 3 08:40:08 2020 us=850208 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 3 08:40:08 2020 us=850214 LZO compression initializing
Mon Aug 3 08:40:08 2020 us=850272 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Mon Aug 3 08:40:08 2020 us=850769 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Mon Aug 3 08:40:08 2020 us=850787 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Mon Aug 3 08:40:08 2020 us=850792 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Mon Aug 3 08:40:08 2020 us=850797 TCP/UDP: Preserving recently used remote address: [AF_INET]5.200.60.245:1194
Mon Aug 3 08:40:08 2020 us=850812 Socket Buffers: R=[212992->212992] S=[212992->212992]
Mon Aug 3 08:40:08 2020 us=850819 UDP link local (bound): [AF_INET][undef]:1194
Mon Aug 3 08:40:08 2020 us=850823 UDP link remote: [AF_INET]x.x.x.x:1194
Mon Aug 3 08:40:08 2020 us=852878 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=eaf53678 b53e7920
Mon Aug 3 08:40:08 2020 us=856392 VERIFY OK: C=*, ST=*, L=*, O=*, OU=*, CN=*, name=*, emailAddress=*
Mon Aug 3 08:40:08 2020 us=856501 VERIFY KU OK
Mon Aug 3 08:40:08 2020 us=856509 Validating certificate extended key usage
Mon Aug 3 08:40:08 2020 us=856514 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Aug 3 08:40:08 2020 us=856523 VERIFY EKU OK
Mon Aug 3 08:40:08 2020 us=856527 VERIFY OK: depth=0, C=*, ST=*, L=*, O=*, OU=*, CN=*, name=*, emailAddress=*
Mon Aug 3 08:40:08 2020 us=862880 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Mon Aug 3 08:40:08 2020 us=862900 [vpn server name] Peer Connection Initiated with [AF_INET]x.x.x.x:1194
Mon Aug 3 08:40:09 2020 us=899058 SENT CONTROL [vpn server name]: 'PUSH_REQUEST' (status=1)
Mon Aug 3 08:40:09 2020 us=901085 PUSH: Received control message: 'PUSH_REPLY,route 192.168.85.0 255.255.255.0,route-gateway 192.168.92.1,topology subnet,ping 20,ping-restart 180,ifconfig 192.168.95.2 255.255.252.0,peer-id 0'
Mon Aug 3 08:40:09 2020 us=901244 OPTIONS IMPORT: timers and/or timeouts modified
Mon Aug 3 08:40:09 2020 us=901286 OPTIONS IMPORT: --ifconfig/up options modified
Mon Aug 3 08:40:09 2020 us=901304 OPTIONS IMPORT: route options modified
Mon Aug 3 08:40:09 2020 us=901317 OPTIONS IMPORT: route-related options modified
Mon Aug 3 08:40:09 2020 us=901329 OPTIONS IMPORT: peer-id set
Mon Aug 3 08:40:09 2020 us=901342 OPTIONS IMPORT: adjusting link_mtu to 1625
Mon Aug 3 08:40:09 2020 us=901372 Data Channel MTU parms [ L:1561 D:1450 EF:61 EB:406 ET:0 EL:3 ]
Mon Aug 3 08:40:09 2020 us=901542 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Aug 3 08:40:09 2020 us=901565 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 3 08:40:09 2020 us=901582 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon Aug 3 08:40:09 2020 us=901599 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Aug 3 08:40:09 2020 us=901857 ROUTE_GATEWAY 192.168.88.1/255.255.255.0 IFACE=eth0 HWADDR=00:13:95:31:11:f0
Mon Aug 3 08:40:09 2020 us=902428 TUN/TAP device tun0 opened
Mon Aug 3 08:40:09 2020 us=902530 TUN/TAP TX queue length set to 100
Mon Aug 3 08:40:09 2020 us=902580 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Mon Aug 3 08:40:09 2020 us=902631 /sbin/ip link set dev tun0 up mtu 1500
Mon Aug 3 08:40:09 2020 us=905285 /sbin/ip addr add dev tun0 192.168.95.2/22 broadcast 192.168.95.255
Mon Aug 3 08:40:09 2020 us=908206 /sbin/ip route add 192.168.85.0/24 via 192.168.92.1
Mon Aug 3 08:40:09 2020 us=910035 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Aug 3 08:40:09 2020 us=910041 Initialization Sequence Completed
/var/log/messages log
ug 3 08:40:08 congatec-tcwl-64 authpriv.notice sudo: admin : TTY=pts/0 ; PWD=/home/admin ; USER=root ; COMMAND=/bin/systemctl restart openvpn@x
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: (null) {RX} 1 packets 48 bytes
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: (null) {TX} 1 packets 48 bytes
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: (null) {update} flags 4240 <DOWN>
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 45 address 00:00:00:00:00:00 mtu 1500
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 45 operstate 2 <DOWN>
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: (null) {del} route fe80:: gw :: scope 0 <UNIVERSE>
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: tun0 {dellink} index 45 operstate 2 <DOWN>
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: (null) {RX} 1 packets 48 bytes
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: (null) {TX} 1 packets 48 bytes
Aug 3 08:40:08 congatec-tcwl-64 daemon.info connmand[317]: (null) {remove} index 45
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {create} index 46 type 65534 <NONE>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {update} flags 4240 <DOWN>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 46 address 00:00:00:00:00:00 mtu 1500
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 46 operstate 2 <DOWN>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 46 address 00:00:00:00:00:00 mtu 1500
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 46 operstate 2 <DOWN>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {update} flags 69841 <UP,RUNNING,LOWER_UP>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 46 address 00:00:00:00:00:00 mtu 1500
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {newlink} index 46 operstate 0 <UNKNOWN>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {add} route ff00:: gw :: scope 0 <UNIVERSE>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {add} route fe80:: gw :: scope 0 <UNIVERSE>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {add} address 192.168.95.2/22 label tun0 family 2
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {add} route 192.168.92.0 gw 0.0.0.0 scope 253 <LINK>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {del} address 192.168.95.2/22 label tun0
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {del} route 192.168.92.0 gw 0.0.0.0 scope 253 <LINK>
Aug 3 08:40:09 congatec-tcwl-64 daemon.info connmand[317]: tun0 {del} route ff00:: gw :: scope 0 <UNIVERSE>
ip address
47: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel qlen 100
link/[65534]
inet6 fe80::1fa6:1a2e:d856:19d/64 scope link
valid_lft forever preferred_lft forever
