TLS issue - Several computers not connecting to server

samurai_77

Hello,

I have an issue with several newly bought computers that can not connect to my enterprise's server :

The server is running OpenVPN version 2.1.3 (Windows Server 2012 R2 Standard) and our clients run version 2.4.1 (Windows 10). We have about 20 computers connecting daily to our server, with no issues whatsoever.
The problem is that some newly bought computers can't connect to the server because of a TLS error apparently. We've been working on the issue for almost a month now, tried different versions client side (2.4.1 to 2.4.9 ), checked if all the generated certificates are valid (which they are), if the software client-side is started in admin mode, firewall off, with no result as of today.

The thing is that one of our new computers (made by ASUS) successfully connect to our server, while all the others (DELL and ACER) do not. Even if the certificates are all generated by the same procedure used to generate all previous certificates.

Here are our server configuration file :

local *************
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
ifconfig-pool-persist ipp.txt
push "route 10.8.0.0 255.255.255.0"
push "route 192.168.31.0 255.255.255.0"
keepalive 10 120
tls-auth ta.key 0
persist-key
persist-tun
status openvpn-status.log
verb 4
crl-verify crl.pem
push "dhcp-option DNS *************"
push "dhcp-option DOMAIN art.adds"

Client configuration file :

client
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert pcname.crt
key pcname.key
ns-cert-type server
tls-auth ta.key 1
comp-lzo
verb 4

Server log when the client connects successfully to the server:

Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Re-using SSL/TLS context
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 LZO compression initialized
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Local Options hash (VER=V4): '14168603'
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Expected Remote Options hash (VER=V4): '504e774e'
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 TLS: Initial packet from 92.184.116.11:59429, sid=83811b74 1bdef432
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 CRL CHECK OK: /C=**/ST=***/L=*****/O=******/CN=OpenVPN-CA/emailAddress=*************
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 VERIFY OK: depth=1, /C=**/ST=***/L=*****/O=******/CN=OpenVPN-CA/emailAddress=*************
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 CRL CHECK OK: /C=**/ST=***/O=******/CN=pcname/emailAddress=*************
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 VERIFY OK: depth=0, /C=**/ST=***/O=******/CN=pcname/emailAddress=*************
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov 24 11:16:21 2020 92.184.116.11:59429 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 11:16:22 2020 92.184.116.11:59429 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Nov 24 11:16:22 2020 92.184.116.11:59429 [pcname] Peer Connection Initiated with 92.184.116.11:59429
Tue Nov 24 11:16:22 2020 pcname/92.184.116.11:59429 MULTI: Learn: 10.8.0.194 -> pcname/92.184.116.11:59429
Tue Nov 24 11:16:22 2020 pcname/92.184.116.11:59429 MULTI: primary virtual IP for pcname/92.184.116.11:59429: 10.8.0.194
Tue Nov 24 11:16:23 2020 pcname/92.184.116.11:59429 PUSH: Received control message: 'PUSH_REQUEST'
Tue Nov 24 11:16:23 2020 pcname/92.184.116.11:59429 SENT CONTROL [pcname]: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 192.168.31.0 255.255.255.0,dhcp-option DNS *************,dhcp-option DOMAIN art.adds,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.194 10.8.0.193' (status=1)
Tue Nov 24 11:16:23 2020 pcname/92.184.116.11:59429 Need IPv6 code in mroute_extract_addr_from_packet

Server log when the client fails to connect to the server:

Tue Nov 24 10:28:15 2020 MULTI: multi_create_instance called
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 Re-using SSL/TLS context
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 LZO compression initialized
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 Local Options hash (VER=V4): '14168603'
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 Expected Remote Options hash (VER=V4): '504e774e'
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 TLS: Initial packet from 92.184.116.11:51029, sid=4f9646ef 70f20ecf
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 CRL CHECK OK: /C=**/ST=****/L=***/O=******/CN=OpenVPN-CA/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 VERIFY OK: depth=1, /C=**/ST=****/L=***/O=******/CN=OpenVPN-CA/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 CRL CHECK OK: /C=**/ST=****/O=******/CN=MT-INSPIRON15/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 VERIFY OK: depth=0, /C=**/ST=****/O=******/CN=MT-INSPIRON15/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 TLS_ERROR: BIO read tls_read_plaintext error: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 TLS Error: TLS object -> incoming plaintext read error
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 TLS Error: TLS handshake failed
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 SIGUSR1[soft,tls-error] received, client-instance restarting

Client side log (successfully connecting) :

Tue Nov 24 11:17:16 2020 OpenVPN 2.4.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 22 2017
Tue Nov 24 11:17:16 2020 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Nov 24 11:17:16 2020 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
Enter Management Password:
Tue Nov 24 11:17:16 2020 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Nov 24 11:17:16 2020 Need hold release from management interface, waiting...
Tue Nov 24 11:17:17 2020 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Nov 24 11:17:17 2020 MANAGEMENT: CMD 'state on'
Tue Nov 24 11:17:17 2020 MANAGEMENT: CMD 'log all on'
Tue Nov 24 11:17:17 2020 MANAGEMENT: CMD 'echo all on'
Tue Nov 24 11:17:17 2020 MANAGEMENT: CMD 'hold off'
Tue Nov 24 11:17:17 2020 MANAGEMENT: CMD 'hold release'
Tue Nov 24 11:17:17 2020 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Tue Nov 24 11:17:17 2020 MANAGEMENT: CMD 'password [...]'
Tue Nov 24 11:17:17 2020 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Nov 24 11:17:17 2020 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 11:17:17 2020 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 11:17:17 2020 MANAGEMENT: >STATE:1606213037,RESOLVE,,,,,,
Tue Nov 24 11:17:17 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]*************:1194
Tue Nov 24 11:17:17 2020 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 24 11:17:17 2020 UDP link local: (not bound)
Tue Nov 24 11:17:17 2020 UDP link remote: [AF_INET]*************:1194
Tue Nov 24 11:17:17 2020 MANAGEMENT: >STATE:1606213037,WAIT,,,,,,
Tue Nov 24 11:17:17 2020 MANAGEMENT: >STATE:1606213037,AUTH,,,,,,
Tue Nov 24 11:17:17 2020 TLS: Initial packet from [AF_INET]*************:1194, sid=780cb08c d70a75d8
Tue Nov 24 11:17:18 2020 VERIFY OK: depth=1, C=**, ST=****, L=Orsay, O=******, CN=OpenVPN-CA, emailAddress=***********
Tue Nov 24 11:17:18 2020 VERIFY OK: nsCertType=SERVER
Tue Nov 24 11:17:18 2020 VERIFY OK: depth=0, C=**, ST=****, O=******, CN=server, emailAddress=**************
Tue Nov 24 11:17:18 2020 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Nov 24 11:17:18 2020 [server] Peer Connection Initiated with [AF_INET]*************:1194
Tue Nov 24 11:17:19 2020 MANAGEMENT: >STATE:1606213039,GET_CONFIG,,,,,,
Tue Nov 24 11:17:19 2020 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Tue Nov 24 11:17:19 2020 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.0 255.255.255.0,route 192.168.31.0 255.255.255.0,dhcp-option DNS ************,dhcp-option DOMAIN art.adds,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.194 10.8.0.193'
Tue Nov 24 11:17:19 2020 OPTIONS IMPORT: timers and/or timeouts modified
Tue Nov 24 11:17:19 2020 OPTIONS IMPORT: --ifconfig/up options modified
Tue Nov 24 11:17:19 2020 OPTIONS IMPORT: route options modified
Tue Nov 24 11:17:19 2020 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Nov 24 11:17:19 2020 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov 24 11:17:19 2020 WARNING: INSECURE cipher with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Tue Nov 24 11:17:19 2020 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 11:17:19 2020 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue Nov 24 11:17:19 2020 WARNING: INSECURE cipher with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Tue Nov 24 11:17:19 2020 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 11:17:19 2020 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
Tue Nov 24 11:17:19 2020 interactive service msg_channel=0
Tue Nov 24 11:17:19 2020 ROUTE_GATEWAY 192.168.43.1/255.255.255.0 I=22 HWADDR=ac:7b:a1:03:78:ac
Tue Nov 24 11:17:19 2020 open_tun
Tue Nov 24 11:17:19 2020 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{13628469-4770-49C1-A971-CEE781DAE53A}.tap
Tue Nov 24 11:17:19 2020 TAP-Windows Driver Version 9.21 
Tue Nov 24 11:17:19 2020 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.194/255.255.255.252 on interface {13628469-4770-49C1-A971-CEE781DAE53A} [DHCP-serv: 10.8.0.193, lease-time: 31536000]
Tue Nov 24 11:17:19 2020 Successful ARP Flush on interface [5] {13628469-4770-49C1-A971-CEE781DAE53A}
Tue Nov 24 11:17:19 2020 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Tue Nov 24 11:17:19 2020 MANAGEMENT: >STATE:1606213039,ASSIGN_IP,,10.8.0.194,,,,
Tue Nov 24 11:17:24 2020 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up
Tue Nov 24 11:17:24 2020 MANAGEMENT: >STATE:1606213044,ADD_ROUTES,,,,,,
Tue Nov 24 11:17:24 2020 C:\WINDOWS\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.193
Tue Nov 24 11:17:24 2020 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Tue Nov 24 11:17:24 2020 Route addition via IPAPI succeeded [adaptive]
Tue Nov 24 11:17:24 2020 C:\WINDOWS\system32\route.exe ADD 192.168.31.0 MASK 255.255.255.0 10.8.0.193
Tue Nov 24 11:17:24 2020 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Tue Nov 24 11:17:24 2020 Route addition via IPAPI succeeded [adaptive]
Tue Nov 24 11:17:24 2020 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.193
Tue Nov 24 11:17:24 2020 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
Tue Nov 24 11:17:24 2020 Route addition via IPAPI succeeded [adaptive]
Tue Nov 24 11:17:24 2020 Initialization Sequence Completed
Tue Nov 24 11:17:24 2020 MANAGEMENT: >STATE:1606213044,CONNECTED,SUCCESS,10.8.0.194,*************,1194,,

Client side log (not connecting to server) :

Tue Nov 24 10:29:05 2020 us=611269 Current Parameter Settings:
Tue Nov 24 10:29:05 2020 us=611269   config = 'pcname.ovpn'
Tue Nov 24 10:29:05 2020 us=611269   mode = 0
Tue Nov 24 10:29:05 2020 us=611269   show_ciphers = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   show_digests = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   show_engines = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   genkey = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   key_pass_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   show_tls_ciphers = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   connect_retry_max = 0
Tue Nov 24 10:29:05 2020 us=611269 Connection profiles [0]:
Tue Nov 24 10:29:05 2020 us=611269   proto = udp
Tue Nov 24 10:29:05 2020 us=611269   local = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   local_port = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   remote = '***********'
Tue Nov 24 10:29:05 2020 us=611269   remote_port = '1194'
Tue Nov 24 10:29:05 2020 us=611269   remote_float = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   bind_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   bind_local = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   bind_ipv6_only = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   connect_retry_seconds = 5
Tue Nov 24 10:29:05 2020 us=611269   connect_timeout = 120
Tue Nov 24 10:29:05 2020 us=611269   socks_proxy_server = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   socks_proxy_port = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   tun_mtu = 1500
Tue Nov 24 10:29:05 2020 us=611269   tun_mtu_defined = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   link_mtu = 1500
Tue Nov 24 10:29:05 2020 us=611269   link_mtu_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   tun_mtu_extra = 0
Tue Nov 24 10:29:05 2020 us=611269   tun_mtu_extra_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   mtu_discover_type = -1
Tue Nov 24 10:29:05 2020 us=611269   fragment = 0
Tue Nov 24 10:29:05 2020 us=611269   mssfix = 1450
Tue Nov 24 10:29:05 2020 us=611269   explicit_exit_notification = 0
Tue Nov 24 10:29:05 2020 us=611269 Connection profiles END
Tue Nov 24 10:29:05 2020 us=611269   remote_random = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   ipchange = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   dev = 'tun'
Tue Nov 24 10:29:05 2020 us=611269   dev_type = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   dev_node = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   lladdr = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   topology = 1
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_local = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_remote_netmask = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_noexec = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_nowarn = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_ipv6_local = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_ipv6_netbits = 0
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_ipv6_remote = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   shaper = 0
Tue Nov 24 10:29:05 2020 us=611269   mtu_test = 0
Tue Nov 24 10:29:05 2020 us=611269   mlock = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   keepalive_ping = 0
Tue Nov 24 10:29:05 2020 us=611269   keepalive_timeout = 0
Tue Nov 24 10:29:05 2020 us=611269   inactivity_timeout = 0
Tue Nov 24 10:29:05 2020 us=611269   ping_send_timeout = 0
Tue Nov 24 10:29:05 2020 us=611269   ping_rec_timeout = 0
Tue Nov 24 10:29:05 2020 us=611269   ping_rec_timeout_action = 0
Tue Nov 24 10:29:05 2020 us=611269   ping_timer_remote = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   remap_sigusr1 = 0
Tue Nov 24 10:29:05 2020 us=611269   persist_tun = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   persist_local_ip = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   persist_remote_ip = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   persist_key = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   passtos = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   resolve_retry_seconds = 1000000000
Tue Nov 24 10:29:05 2020 us=611269   resolve_in_advance = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   username = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   groupname = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   chroot_dir = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   cd_dir = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   writepid = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   up_script = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   down_script = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   down_pre = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   up_restart = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   up_delay = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   daemon = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   inetd = 0
Tue Nov 24 10:29:05 2020 us=611269   log = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   suppress_timestamps = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   machine_readable_output = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   nice = 0
Tue Nov 24 10:29:05 2020 us=611269   verbosity = 4
Tue Nov 24 10:29:05 2020 us=611269   mute = 0
Tue Nov 24 10:29:05 2020 us=611269   gremlin = 0
Tue Nov 24 10:29:05 2020 us=611269   status_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   status_file_version = 1
Tue Nov 24 10:29:05 2020 us=611269   status_file_update_freq = 60
Tue Nov 24 10:29:05 2020 us=611269   occ = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   rcvbuf = 0
Tue Nov 24 10:29:05 2020 us=611269   sndbuf = 0
Tue Nov 24 10:29:05 2020 us=611269   sockflags = 0
Tue Nov 24 10:29:05 2020 us=611269   fast_io = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   comp.alg = 2
Tue Nov 24 10:29:05 2020 us=611269   comp.flags = 1
Tue Nov 24 10:29:05 2020 us=611269   route_script = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   route_default_gateway = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   route_default_metric = 0
Tue Nov 24 10:29:05 2020 us=611269   route_noexec = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   route_delay = 5
Tue Nov 24 10:29:05 2020 us=611269   route_delay_window = 30
Tue Nov 24 10:29:05 2020 us=611269   route_delay_defined = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   route_nopull = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   route_gateway_via_dhcp = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   allow_pull_fqdn = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   management_addr = '127.0.0.1'
Tue Nov 24 10:29:05 2020 us=611269   management_port = '25340'
Tue Nov 24 10:29:05 2020 us=611269   management_user_pass = 'stdin'
Tue Nov 24 10:29:05 2020 us=611269   management_log_history_cache = 250
Tue Nov 24 10:29:05 2020 us=611269   management_echo_buffer_size = 100
Tue Nov 24 10:29:05 2020 us=611269   management_write_peer_info_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   management_client_user = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   management_client_group = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   management_flags = 6
Tue Nov 24 10:29:05 2020 us=611269   shared_secret_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   key_direction = 2
Tue Nov 24 10:29:05 2020 us=611269   ciphername = 'BF-CBC'
Tue Nov 24 10:29:05 2020 us=611269   ncp_enabled = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Nov 24 10:29:05 2020 us=611269   authname = 'SHA1'
Tue Nov 24 10:29:05 2020 us=611269   prng_hash = 'SHA1'
Tue Nov 24 10:29:05 2020 us=611269   prng_nonce_secret_len = 16
Tue Nov 24 10:29:05 2020 us=611269   keysize = 0
Tue Nov 24 10:29:05 2020 us=611269   engine = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   replay = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   mute_replay_warnings = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   replay_window = 64
Tue Nov 24 10:29:05 2020 us=611269   replay_time = 15
Tue Nov 24 10:29:05 2020 us=611269   packet_id_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   use_iv = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   test_crypto = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   tls_server = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   tls_client = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   key_method = 2
Tue Nov 24 10:29:05 2020 us=611269   ca_file = 'ca.crt'
Tue Nov 24 10:29:05 2020 us=611269   ca_path = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   dh_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   cert_file = 'pcname.crt'
Tue Nov 24 10:29:05 2020 us=611269   extra_certs_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   priv_key_file = 'pcname.key'
Tue Nov 24 10:29:05 2020 us=611269   pkcs12_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   cryptoapi_cert = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   cipher_list = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   tls_verify = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   tls_export_cert = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   verify_x509_type = 0
Tue Nov 24 10:29:05 2020 us=611269   verify_x509_name = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   crl_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   ns_cert_type = 1
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_ku[i] = 0
Tue Nov 24 10:29:05 2020 us=611269   remote_cert_eku = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   ssl_flags = 0
Tue Nov 24 10:29:05 2020 us=611269   tls_timeout = 2
Tue Nov 24 10:29:05 2020 us=611269   renegotiate_bytes = -1
Tue Nov 24 10:29:05 2020 us=611269   renegotiate_packets = 0
Tue Nov 24 10:29:05 2020 us=611269   renegotiate_seconds = 3600
Tue Nov 24 10:29:05 2020 us=611269   handshake_window = 60
Tue Nov 24 10:29:05 2020 us=611269   transition_window = 3600
Tue Nov 24 10:29:05 2020 us=611269   single_session = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   push_peer_info = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   tls_exit = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   tls_auth_file = 'ta.key'
Tue Nov 24 10:29:05 2020 us=611269   tls_crypt_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_protected_authentication = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_private_mode = 00000000
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_cert_private = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_pin_cache_period = -1
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_id = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   pkcs11_id_management = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   server_network = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   server_netmask = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   server_network_ipv6 = ::
Tue Nov 24 10:29:05 2020 us=611269   server_netbits_ipv6 = 0
Tue Nov 24 10:29:05 2020 us=611269   server_bridge_ip = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   server_bridge_netmask = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   server_bridge_pool_start = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   server_bridge_pool_end = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_pool_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_pool_start = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_pool_end = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_pool_netmask = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_pool_persist_refresh_freq = 600
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_ipv6_pool_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_ipv6_pool_base = ::
Tue Nov 24 10:29:05 2020 us=611269   ifconfig_ipv6_pool_netbits = 0
Tue Nov 24 10:29:05 2020 us=611269   n_bcast_buf = 256
Tue Nov 24 10:29:05 2020 us=611269   tcp_queue_limit = 64
Tue Nov 24 10:29:05 2020 us=611269   real_hash_size = 256
Tue Nov 24 10:29:05 2020 us=611269   virtual_hash_size = 256
Tue Nov 24 10:29:05 2020 us=611269   client_connect_script = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   learn_address_script = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   client_disconnect_script = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   client_config_dir = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   ccd_exclusive = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   tmp_dir = 'C:\Users\ltome\AppData\Local\Temp\'
Tue Nov 24 10:29:05 2020 us=611269   push_ifconfig_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   push_ifconfig_local = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   push_ifconfig_remote_netmask = 0.0.0.0
Tue Nov 24 10:29:05 2020 us=611269   push_ifconfig_ipv6_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   push_ifconfig_ipv6_local = ::/0
Tue Nov 24 10:29:05 2020 us=611269   push_ifconfig_ipv6_remote = ::
Tue Nov 24 10:29:05 2020 us=611269   enable_c2c = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   duplicate_cn = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   cf_max = 0
Tue Nov 24 10:29:05 2020 us=611269   cf_per = 0
Tue Nov 24 10:29:05 2020 us=611269   max_clients = 1024
Tue Nov 24 10:29:05 2020 us=611269   max_routes_per_client = 256
Tue Nov 24 10:29:05 2020 us=611269   auth_user_pass_verify_script = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   auth_user_pass_verify_script_via_file = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   auth_token_generate = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   auth_token_lifetime = 0
Tue Nov 24 10:29:05 2020 us=611269   client = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   pull = ENABLED
Tue Nov 24 10:29:05 2020 us=611269   auth_user_pass_file = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   show_net_up = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   route_method = 0
Tue Nov 24 10:29:05 2020 us=611269   block_outside_dns = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   ip_win32_defined = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   ip_win32_type = 3
Tue Nov 24 10:29:05 2020 us=611269   dhcp_masq_offset = 0
Tue Nov 24 10:29:05 2020 us=611269   dhcp_lease_time = 31536000
Tue Nov 24 10:29:05 2020 us=611269   tap_sleep = 0
Tue Nov 24 10:29:05 2020 us=611269   dhcp_options = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   dhcp_renew = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   dhcp_pre_release = DISABLED
Tue Nov 24 10:29:05 2020 us=611269   domain = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   netbios_scope = '[UNDEF]'
Tue Nov 24 10:29:05 2020 us=611269   netbios_node_type = 0
Tue Nov 24 10:29:05 2020 us=611269   disable_nbt = DISABLED
Tue Nov 24 10:29:05 2020 us=611269 OpenVPN 2.4.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 22 2017
Tue Nov 24 10:29:05 2020 us=611269 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Nov 24 10:29:05 2020 us=611269 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
Enter Management Password:
Tue Nov 24 10:29:05 2020 us=611269 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Nov 24 10:29:05 2020 us=611269 Need hold release from management interface, waiting...
Tue Nov 24 10:29:06 2020 us=106430 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Nov 24 10:29:06 2020 us=222123 MANAGEMENT: CMD 'state on'
Tue Nov 24 10:29:06 2020 us=222123 MANAGEMENT: CMD 'log all on'
Tue Nov 24 10:29:06 2020 us=331592 MANAGEMENT: CMD 'echo all on'
Tue Nov 24 10:29:06 2020 us=331592 MANAGEMENT: CMD 'hold off'
Tue Nov 24 10:29:06 2020 us=331592 MANAGEMENT: CMD 'hold release'
Tue Nov 24 10:29:06 2020 us=331592 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Tue Nov 24 10:29:11 2020 us=58332 MANAGEMENT: CMD 'password [...]'
Tue Nov 24 10:29:11 2020 us=58332 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Nov 24 10:29:11 2020 us=58332 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 10:29:11 2020 us=58332 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Nov 24 10:29:11 2020 us=58332 LZO compression initializing
Tue Nov 24 10:29:11 2020 us=58332 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Nov 24 10:29:11 2020 us=58332 MANAGEMENT: >STATE:1606210151,RESOLVE,,,,,,
Tue Nov 24 10:29:11 2020 us=235363 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Tue Nov 24 10:29:11 2020 us=235363 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Nov 24 10:29:11 2020 us=235363 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Nov 24 10:29:11 2020 us=235363 TCP/UDP: Preserving recently used remote address: [AF_INET]**************:1194
Tue Nov 24 10:29:11 2020 us=235363 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 24 10:29:11 2020 us=235363 UDP link local: (not bound)
Tue Nov 24 10:29:11 2020 us=235363 UDP link remote: [AF_INET]**************:1194
Tue Nov 24 10:29:11 2020 us=235363 MANAGEMENT: >STATE:1606210151,WAIT,,,,,,
Tue Nov 24 10:29:11 2020 us=283056 MANAGEMENT: >STATE:1606210151,AUTH,,,,,,
Tue Nov 24 10:29:11 2020 us=283056 TLS: Initial packet from [AF_INET]**************:1194, sid=3d4bf300 3340bafc
Tue Nov 24 10:29:11 2020 us=658421 VERIFY OK: depth=1, C=**, ST=****, L=Orsay, O=****, CN=OpenVPN-CA, emailAddress=**************
Tue Nov 24 10:29:11 2020 us=658421 VERIFY OK: nsCertType=SERVER
Tue Nov 24 10:29:11 2020 us=658421 VERIFY OK: depth=0, C=**, ST=****, O=****, CN=server, emailAddress=**************
Tue Nov 24 10:30:11 2020 us=8022 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Nov 24 10:30:11 2020 us=8022 TLS Error: TLS handshake failed
Tue Nov 24 10:30:11 2020 us=8022 TCP/UDP: Closing socket
Tue Nov 24 10:30:11 2020 us=8022 SIGUSR1[soft,tls-error] received, process restarting
Tue Nov 24 10:30:11 2020 us=8022 MANAGEMENT: >STATE:1606210211,RECONNECTING,tls-error,,,,,
Tue Nov 24 10:30:11 2020 us=8022 Restart pause, 5 second(s)
Tue Nov 24 10:30:16 2020 us=18554 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
Tue Nov 24 10:30:16 2020 us=18554 Re-using SSL/TLS context
Tue Nov 24 10:30:16 2020 us=18554 LZO compression initializing
Tue Nov 24 10:30:16 2020 us=18554 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Tue Nov 24 10:30:16 2020 us=18554 MANAGEMENT: >STATE:1606210216,RESOLVE,,,,,,
Tue Nov 24 10:30:16 2020 us=18554 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Tue Nov 24 10:30:16 2020 us=18554 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Tue Nov 24 10:30:16 2020 us=18554 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Tue Nov 24 10:30:16 2020 us=18554 TCP/UDP: Preserving recently used remote address: [AF_INET]**************:1194
Tue Nov 24 10:30:16 2020 us=18554 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Nov 24 10:30:16 2020 us=18554 UDP link local: (not bound)
Tue Nov 24 10:30:16 2020 us=18554 UDP link remote: [AF_INET]**************:1194
Tue Nov 24 10:30:16 2020 us=18554 MANAGEMENT: >STATE:1606210216,WAIT,,,,,,
Tue Nov 24 10:30:16 2020 us=96673 MANAGEMENT: >STATE:1606210216,AUTH,,,,,,
Tue Nov 24 10:30:16 2020 us=96673 TLS: Initial packet from [AF_INET]**************:1194, sid=f48bbd09 7aaa8d6d
Tue Nov 24 10:30:16 2020 us=284088 VERIFY OK: depth=1, C=**, ST=****, L=Orsay, O=****, CN=OpenVPN-CA, emailAddress=**************
Tue Nov 24 10:30:16 2020 us=284088 VERIFY OK: nsCertType=SERVER
Tue Nov 24 10:30:16 2020 us=284088 VERIFY OK: depth=0, C=**, ST=****, O=****, CN=server, emailAddress=**************
Tue Nov 24 10:30:18 2020 us=7526 TCP/UDP: Closing socket
Tue Nov 24 10:30:18 2020 us=7526 SIGTERM[hard,] received, process exiting
Tue Nov 24 10:30:18 2020 us=7526 MANAGEMENT: >STATE:1606210218,EXITING,SIGTERM,,,,,

Is there anything that looks suspicious to you?

If you need any information that i did not post, i'd be happy to give them to you, just say the word.

Thanks in advance for your help.

TinCanTech

samurai_77 wrote Server log when the client fails to connect to the server:

Tue Nov 24 10:28:15 2020 92.184.116.11:51029 TLS: Initial packet from 92.184.116.11:51029, sid=4f9646ef 70f20ecf
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 CRL CHECK OK: /C=**/ST=****/L=***/O=******/CN=OpenVPN-CA/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 VERIFY OK: depth=1, /C=**/ST=****/L=***/O=******/CN=OpenVPN-CA/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 CRL CHECK OK: /C=**/ST=****/O=******/CN=MT-INSPIRON15/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 VERIFY OK: depth=0, /C=**/ST=****/O=******/CN=MT-INSPIRON15/emailAddress=****************
Tue Nov 24 10:28:15 2020 92.184.116.11:51029 TLS_ERROR: BIO read tls_read_plaintext error: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

samurai_77 wrote The server is running OpenVPN version 2.1.3

https://community.openvpn.net/openvpn/wiki/SupportedVersions

300000

it is better uprate openvpn server to 2.5 or you will mix up old and new config with all error .