I installed openvpn a couple of years ago and it was a 5 minute job. Today I have a new computer and I have been working on install fo 6 hours.
I use Linode openvpn package on debian. And 2.4.9 for my client.
For the life of me, I cant figure out how to get things running. Below is as far as I get in the log.
Mon Jan 04 13:55:26 2021 us=613514 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Mon Jan 04 13:55:26 2021 us=613514 Current Parameter Settings:
Mon Jan 04 13:55:26 2021 us=613514 config = 'vpnlinode.ovpn'
Mon Jan 04 13:55:26 2021 us=613514 mode = 0
Mon Jan 04 13:55:26 2021 us=613514 show_ciphers = DISABLED
Mon Jan 04 13:55:26 2021 us=613514 show_digests = DISABLED
Mon Jan 04 13:55:26 2021 us=613514 show_engines = DISABLED
Mon Jan 04 13:55:26 2021 us=613514 genkey = DISABLED
Mon Jan 04 13:55:26 2021 us=613514 key_pass_file = '[UNDEF]'
Mon Jan 04 13:55:26 2021 us=613514 show_tls_ciphers = DISABLED
Mon Jan 04 13:55:26 2021 us=613514 connect_retry_max = 0
Mon Jan 04 13:55:26 2021 us=613514 NOTE: --mute triggered...
Mon Jan 04 13:55:26 2021 us=613514 285 variation(s) on previous 10 message(s) suppressed by --mute
Mon Jan 04 13:55:26 2021 us=613514 OpenVPN 2.4.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 16 2020
Mon Jan 04 13:55:26 2021 us=613514 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Jan 04 13:55:26 2021 us=613514 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Enter Management Password:
Mon Jan 04 13:55:26 2021 us=613514 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jan 04 13:55:26 2021 us=613514 Need hold release from management interface, waiting...
Mon Jan 04 13:55:27 2021 us=61476 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jan 04 13:55:27 2021 us=177363 MANAGEMENT: CMD 'state on'
Mon Jan 04 13:55:27 2021 us=177363 MANAGEMENT: CMD 'log all on'
Mon Jan 04 13:55:27 2021 us=218188 MANAGEMENT: CMD 'echo all on'
Mon Jan 04 13:55:27 2021 us=218188 MANAGEMENT: CMD 'bytecount 5'
Mon Jan 04 13:55:27 2021 us=218188 MANAGEMENT: CMD 'hold off'
Mon Jan 04 13:55:27 2021 us=218188 MANAGEMENT: CMD 'hold release'
Mon Jan 04 13:55:27 2021 us=218188 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Mon Jan 04 13:55:27 2021 us=218188 Outgoing Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jan 04 13:55:27 2021 us=218188 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Mon Jan 04 13:55:27 2021 us=218188 Outgoing Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 04 13:55:27 2021 us=218188 Incoming Static Key Encryption: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jan 04 13:55:27 2021 us=218188 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Mon Jan 04 13:55:27 2021 us=218188 Incoming Static Key Encryption: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jan 04 13:55:27 2021 us=218188 LZO compression initializing
Mon Jan 04 13:55:27 2021 us=218188 interactive service msg_channel=740
Mon Jan 04 13:55:27 2021 us=218188 open_tun
Mon Jan 04 13:55:27 2021 us=218188 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{1B587C49-A409-4143-A91C-46998E1305F4}.tap
Mon Jan 04 13:55:27 2021 us=218188 TAP-Windows Driver Version 9.24
Mon Jan 04 13:55:27 2021 us=218188 TAP-Windows MTU=1500
Mon Jan 04 13:55:27 2021 us=233818 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.3.0.1/255.255.255.0 on interface {1B587C49-A409-4143-A91C-46998E1305F4} [DHCP-serv: 10.3.0.0, lease-time: 31536000]
Mon Jan 04 13:55:27 2021 us=233818 Successful ARP Flush on interface [13] {1B587C49-A409-4143-A91C-46998E1305F4}
Mon Jan 04 13:55:27 2021 us=233818 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Mon Jan 04 13:55:27 2021 us=233818 MANAGEMENT: >STATE:1609786527,ASSIGN_IP,,10.3.0.1,,,,
Mon Jan 04 13:55:27 2021 us=233818 Data Channel MTU parms [ L:1577 D:1450 EF:45 EB:398 ET:32 EL:3 ]
Mon Jan 04 13:55:27 2021 us=233818 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1577,tun-mtu 1532,proto UDPv4,ifconfig 10.3.0.0 255.255.255.0,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Mon Jan 04 13:55:27 2021 us=233818 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1577,tun-mtu 1532,proto UDPv4,ifconfig 10.3.0.0 255.255.255.0,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,secret'
Mon Jan 04 13:55:27 2021 us=233818 TCP/UDP: Preserving recently used remote address: [AF_INET]192.46.219.65:1194
Mon Jan 04 13:55:27 2021 us=233818 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jan 04 13:55:27 2021 us=233818 UDP link local (bound): [AF_INET][undef]:1194
Mon Jan 04 13:55:27 2021 us=233818 UDP link remote: [AF_INET]192.46.219.65:1194
Mon Jan 04 13:57:27 2021 us=921545 NOTE: failed to obtain options consistency info from peer -- this could occur if the remote peer is running a version of OpenVPN before 1.5-beta8 or if there is a network connectivity problem, and will not necessarily prevent OpenVPN from running (0 bytes received from peer, 0 bytes authenticated data channel traffic) -- you can disable the options consistency check with --disable-occ.
