Hmac Address not found

Mythic1049

Hi i'm having an extremely hard time getting my client to connect to my server.

Here is my Server config

port 1194
proto udp
dev tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\issued\\RoyerServer.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\private\\RoyerServer.key" # This file should be kept secret
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\dh.pem"
server x.x.x.x 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
tls-auth "C:\\Program Files\\OpenVPN\\easy-rsa\\pki\\easytls\\tls-auth.key" 0 # This file is secret
cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1

Here is my client config

client
dev tun
proto udp
remote royerserver.duckdns.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert RoyerClient.crt
key RoyerClient.key
remote-cert-tls server
tls-auth tls-auth.key 1
cipher AES-256-CBC
verb 3
;mute 20

*Tunnelblick: macOS 10.13.6 (17G14033); Tunnelblick 3.8.4a (build 5601); prior version 3.8.1 (build 5400); Admin user
git commit 73f5ce7b5ccd45d0286a1c9fc30064a914046d3f
The Tunnelblick.app process is not being translated
System Integrity Protection is enabled

Configuration client

"Sanitized" condensed configuration file for /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk:

client
dev tun
proto udp
remote royerserver.duckdns.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert RoyerClient.crt
key RoyerClient.key
remote-cert-tls server
tls-auth tls-auth.key 1
cipher AES-256-CBC
verb 3


================================================================================

Files in client.tblk:
      Contents/Resources/ca.crt
      Contents/Resources/config.ovpn
      Contents/Resources/Roy….crt
      Contents/Resources/Roy….key
      Contents/Resources/tls….key

================================================================================

Tunnelblick Kext Policy Data:


================================================================================

Configuration preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1
tunnelblickVersionHistory = (
    "3.8.4a (build 5601)",
    "3.8.1 (build 5400)"
)
lastLaunchTime = 636949663.99085
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
NSWindow Frame ConnectingWindow = 445 458 389 187 0 0 1280 777 
NSWindow Frame SUUpdateAlert = 330 305 620 392 0 0 1280 777 
detailsWindowFrameVersion = 5601
detailsWindowFrame = {{60, 209}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {167, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = log
leftNavSelectedDisplayName = client
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SULastCheckTime = 2021-03-09 02:27:51 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

Tunnelblick Log:

2021-03-08 19:53:39.224004 *Tunnelblick: macOS 10.13.6 (17G14033); Tunnelblick 3.8.4a (build 5601); prior version 3.8.1 (build 5400)
2021-03-08 19:53:39.525784 *Tunnelblick: Attempting connection with client using shadow copy; Set nameserver = 769; monitoring connection
2021-03-08 19:53:39.526510 *Tunnelblick: openvpnstart start client.tblk 50552 769 0 1 0 1098032 -ptADGNWradsgnw 2.4.9-openssl-1.1.1i
2021-03-08 19:53:39.551698 *Tunnelblick: openvpnstart starting OpenVPN
2021-03-08 19:53:39.740499 OpenVPN 2.4.9 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Dec 14 2020
2021-03-08 19:53:39.740553 library versions: OpenSSL 1.1.1i  8 Dec 2020, LZO 2.10
2021-03-08 19:53:39.742125 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:50552
2021-03-08 19:53:39.742154 Need hold release from management interface, waiting...
2021-03-08 19:53:40.152150 *Tunnelblick: openvpnstart log:
     OpenVPN started successfully.
     Command used to start OpenVPN (one argument per displayed line):
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.9-openssl-1.1.1i/openvpn
          --daemon
          --log /Library/Application Support/Tunnelblick/Logs/-SUsers-Sowner-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sclient.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1098032.50552.openvpn.log
          --cd /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
          --machine-readable-output
          --setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5601 3.8.4a (build 5601)"
          --verb 3
          --config /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
          --setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
          --verb 3
          --cd /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
          --management 127.0.0.1 50552 /Library/Application Support/Tunnelblick/jimijohilplcofabfppbknllhdohhammcfnfkged.mip
          --management-query-passwords
          --management-hold
          --script-security 2
          --route-up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
          --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
2021-03-08 19:53:40.161437 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:50552
2021-03-08 19:53:40.204160 MANAGEMENT: CMD 'pid'
2021-03-08 19:53:40.204211 MANAGEMENT: CMD 'auth-retry interact'
2021-03-08 19:53:40.204248 MANAGEMENT: CMD 'state on'
2021-03-08 19:53:40.204324 MANAGEMENT: CMD 'state'
2021-03-08 19:53:40.204416 MANAGEMENT: CMD 'bytecount 1'
2021-03-08 19:53:40.204742 *Tunnelblick: Established communication with OpenVPN
2021-03-08 19:53:40.206111 *Tunnelblick: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2021-03-08 19:53:40.208942 MANAGEMENT: CMD 'hold release'
2021-03-08 19:53:40.210687 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2021-03-08 19:53:40.219192 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-03-08 19:53:40.219218 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-03-08 19:53:40.221582 MANAGEMENT: >STATE:1615262020,RESOLVE,,,,,,
2021-03-08 19:53:40.297981 TCP/UDP: Preserving recently used remote address: [AF_INET]12.171.254.18:1194
2021-03-08 19:53:40.298080 Socket Buffers: R=[196724->196724] S=[9216->9216]
2021-03-08 19:53:40.298107 UDP link local: (not bound)
2021-03-08 19:53:40.298134 UDP link remote: [AF_INET]12.171.254.18:1194
2021-03-08 19:53:40.298289 MANAGEMENT: >STATE:1615262020,WAIT,,,,,,
2021-03-08 19:53:40.368113 MANAGEMENT: >STATE:1615262020,AUTH,,,,,,
2021-03-08 19:53:40.368239 TLS: Initial packet from [AF_INET]12.171.254.18:1194, sid=074e4b0c 99b91559
2021-03-08 19:53:40.368290 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]12.171.254.18:1194
2021-03-08 19:53:42.434931 MANAGEMENT: >STATE:1615262022,AUTH,,,,,,
2021-03-08 19:53:42.435014 TLS: Initial packet from [AF_INET]12.171.254.18:1194, sid=074e4b0c 99b91559
2021-03-08 19:53:42.435061 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]12.171.254.18:1194
2021-03-08 19:53:45.327437 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed
2021-03-08 19:53:45.474988 *Tunnelblick: Disconnecting using 'kill'
2021-03-08 19:53:45.642625 event_wait : Interrupted system call (code=4)
2021-03-08 19:53:45.644828 SIGTERM[hard,] received, process exiting
2021-03-08 19:53:45.644857 MANAGEMENT: >STATE:1615262025,EXITING,SIGTERM,,,,,
2021-03-08 19:53:45.903117 *Tunnelblick: Expected disconnection occurred.



Network services:

An asterisk (*) denotes that a network service is disabled.
PPPoE
Ethernet
FireWire
Wi-Fi
iPhone USB
Bluetooth PAN
Thunderbolt Bridge

Wi-Fi Power (en1): On

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
	inet 127.0.0.1 netmask 0xff000000 
	inet6 ::1 prefixlen 128 
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
	nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
EHC26: flags=0<> mtu 0
EHC29: flags=0<> mtu 0
XHC20: flags=0<> mtu 0
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
	ether 10:dd:b1:a3:77:e7 
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect (none)
	status: inactive
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether 4c:8d:79:e4:99:00 
	inet6 fe80::834:8bf0:6f5e:b2f1%en1 prefixlen 64 secured scopeid 0x8 
	inet 172.20.10.4 netmask 0xfffffff0 broadcast 172.20.10.15
	inet6 2600:380:4746:16d0:105b:eaf5:288d:5b6a prefixlen 64 autoconf secured 
	inet6 2600:380:4746:16d0:4831:e7b4:57f:9046 prefixlen 64 autoconf temporary 
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect
	status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
	ether 0e:8d:79:e4:99:00 
	media: autoselect
	status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
	ether c2:5b:80:e4:8f:93 
	inet6 fe80::c05b:80ff:fee4:8f93%awdl0 prefixlen 64 scopeid 0xa 
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect
	status: active
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	options=60<TSO4,TSO6>
	ether d2:00:17:35:9d:20 
	media: autoselect <full-duplex>
	status: inactive
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
	lladdr 10:dd:b1:ff:fe:73:59:d2 
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect <full-duplex>
	status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=63<RXCSUM,TXCSUM,TSO4,TSO6>
	ether d2:00:17:35:9d:20 
	Configuration:
		id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
		maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
		root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
		ipfilter disabled flags 0x2
	member: en2 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 11 priority 0 path cost 0
	nd6 options=201<PERFORMNUD,DAD>
	media: <unknown type>
	status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
	inet6 fe80::771a:1700:3f43:ffde%utun0 prefixlen 64 scopeid 0xe 
	nd6 options=201<PERFORMNUD,DAD>
vmnet1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether 00:50:56:c0:00:01 
	inet 172.16.145.1 netmask 0xffffff00 broadcast 172.16.145.255
vmnet8: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether 00:50:56:c0:00:08 
	inet 192.168.126.1 netmask 0xffffff00 broadcast 192.168.126.255

Console Log:

2021-03-08 18:27:39.422650 Tunnelblick[499] Tunnelblick: macOS 10.13.6; Tunnelblick 3.8.4a (build 5601)
2021-03-08 18:27:51.497383 Tunnelblick[499] Sparkle: ===== Tunnelblick =====
2021-03-08 18:27:51.498024 Tunnelblick[499] Sparkle: Verified appcast signature
2021-03-08 18:29:50.434182 tunnelblickd[723] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:29:50.579767 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:30:13.541887 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:30:13.541986 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:30:14.023025 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:30:13.689444. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:30:14.023214 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:30:48.403600 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:31:37.599430 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:31:37.732629 tunnelblickd[756] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:31:37.743732 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:31:41.826961 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:31:41.827047 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:31:42.021345 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:31:41.884234. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:31:42.021460 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:31:57.545272 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:33:47.352669 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:34:28.484041 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:34:59.533567 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:34:59.615181 tunnelblickd[817] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:34:59.678422 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:35:03.954810 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:35:03.954897 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:35:04.147500 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:35:04.010481. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:35:04.147612 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:35:13.324016 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:37:00.716002 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:37:00.810893 tunnelblickd[852] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:37:00.861703 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:37:05.110458 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:37:05.110541 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:37:05.302665 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:37:05.168524. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:37:05.302772 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:37:06.799771 tunnelblickd[852] Status = 251 from tunnelblick-helper command 'start client.tblk 60636 1537 0 1 0 1098032 -ptADGNWradsgnw 2.5.0-openssl-1.1.1i'
2021-03-08 18:37:07.086917 Tunnelblick[499] tunnelblickd status from start: 251
2021-03-08 18:39:08.578679 tunnelblickd[874] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:39:08.608593 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:39:11.690755 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:39:11.690844 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:39:11.881104 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:39:11.746231. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:39:11.881412 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:39:20.252258 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:40:48.268232 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:40:53.568918 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:44:59.325082 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:45:05.497223 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:45:50.260262 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:45:50.360465 tunnelblickd[927] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:45:50.404926 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:45:54.055098 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:45:54.055170 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:45:54.249011 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:45:54.110409. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:45:54.249162 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:46:03.783871 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:46:40.440086 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:46:40.623976 tunnelblickd[927] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:46:40.746878 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:46:44.419891 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:46:44.419983 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:46:44.609881 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:46:44.475114. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:46:44.609989 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:46:52.305068 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:49:43.312154 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:49:43.425138 tunnelblickd[977] Status = 252 from tunnelblick-helper command 'compareShadowCopy client'
2021-03-08 18:49:43.457139 Tunnelblick[499] tunnelblickd status from compareShadowCopy: 252
2021-03-08 18:49:48.390584 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 18:49:48.390654 Tunnelblick[499] Beginning installation or repair
2021-03-08 18:49:48.480881 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 18:49:48.446249. 3 arguments: 0x0001
                                            /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/client1.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Tunnelblick installer finished without error
2021-03-08 18:49:48.481011 Tunnelblick[499] Created or updated secure (shadow) copy of configuration file /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
2021-03-08 18:49:56.254043 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:51:46.521530 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 18:51:53.111594 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 19:05:19.461600 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 19:05:19.461824 Tunnelblick[499] Beginning installation or repair
2021-03-08 19:05:19.662337 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 19:05:19.522846. 2 arguments: 0x2001
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       removed /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       removed /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Tunnelblick installer finished without error
2021-03-08 19:05:19.662594 Tunnelblick[499] Deleted '/Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk'
2021-03-08 19:53:13.168094 Tunnelblick[499] Converting/Installing /Users/owner/Desktop/RoyerClient/client.ovpn: One or more CR characters have been removed or replaced with LF characters
2021-03-08 19:53:13.172337 Tunnelblick[499] isOnRemoteVolume: will check parent of '/private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz'
2021-03-08 19:53:13.173418 Tunnelblick[499] Converting/Installing /Users/owner/Desktop/RoyerClient/client.ovpn: One or more CR characters have been removed or replaced with LF characters
2021-03-08 19:53:13.173969 Tunnelblick[499] isOnRemoteVolume: will check parent of '/private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk/Contents/Resources'
2021-03-08 19:53:13.176039 Tunnelblick[499] Converting/Installing /Users/owner/Desktop/RoyerClient/client.ovpn at line 88: Copied ca.crt, removing CR characters
2021-03-08 19:53:13.176421 Tunnelblick[499] Changed permissions from 644 to 740 on /private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk/Contents/Resources/ca.crt
2021-03-08 19:53:13.177906 Tunnelblick[499] Converting/Installing /Users/owner/Desktop/RoyerClient/client.ovpn at line 89: Copied RoyerClient.crt, removing CR characters
2021-03-08 19:53:13.178311 Tunnelblick[499] Changed permissions from 644 to 740 on /private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk/Contents/Resources/RoyerClient.crt
2021-03-08 19:53:13.179635 Tunnelblick[499] Converting/Installing /Users/owner/Desktop/RoyerClient/client.ovpn at line 90: Copied RoyerClient.key, removing CR characters
2021-03-08 19:53:13.179964 Tunnelblick[499] Changed permissions from 644 to 740 on /private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk/Contents/Resources/RoyerClient.key
2021-03-08 19:53:13.180951 Tunnelblick[499] Converting/Installing /Users/owner/Desktop/RoyerClient/client.ovpn at line 108: Copied tls-auth.key, removing CR characters
2021-03-08 19:53:13.181174 Tunnelblick[499] Changed permissions from 644 to 740 on /private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk/Contents/Resources/tls-auth.key
2021-03-08 19:53:13.181339 Tunnelblick[499] isOnRemoteVolume: will check parent of '/private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk/Contents/Resources/config.ovpn'
2021-03-08 19:53:13.182156 Tunnelblick[499] Converting/Installing /Users/owner/Desktop/RoyerClient/client.ovpn: Converted OpenVPN configuration
2021-03-08 19:53:17.684157 Tunnelblick[499] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2021-03-08 19:53:17.684321 Tunnelblick[499] Beginning installation or repair
2021-03-08 19:53:17.891438 Tunnelblick[499] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-08 19:53:17.747570. 3 arguments: 0x0001
                                            /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                            /private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk
                                       getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick'; owner = 501:80; permissions = 488
                                       Created or checked '/Users/owner/Library/Application Support/Tunnelblick/Configurations'; owner = 501:80; permissions = 488
                                       Copied /private/var/folders/qb/d3xc7p4n72df2x9h0rkqjtcc0000gn/T/Tunnelblick-2vQDuz/client.tblk
                                           to /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk.temp
                                       Renamed /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk.temp
                                            to /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                       Changed ownership of /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk and its contents from 501:20 to 501:80
                                       Copied /Users/owner/Library/Application Support/Tunnelblick/Configurations/client.tblk
                                           to /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/owner/client.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/owner/client.tblk and its contents from 501:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/config.ovpn
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/RoyerClient.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/RoyerClient.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/owner/client.tblk/Contents/Resources/tls-auth.key
                                       Created secure (shadow) copy of client.tblk
                                       Tunnelblick installer finished without error
2021-03-08 19:53:39.223587 Tunnelblick[499] Cleared 'expect disconnect 0 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'
2021-03-08 19:53:45.619389 Tunnelblick[499] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SUsers-Sowner-Sclient-Dtblk-SContents-SResources'

Server starts fine off of its config. The client just fails to connect, but it makes it to authorization so they are communicating. i just dont understand how in the world RSAv3 works. You have to make the keys on different computers? Howcome the tls-auth key is no longer named "ta.key" Older RSA was alot easier for me. And there is almost ZERO documentation on it that actually explains it step by step. Please anybody help im at a loss on this one.

Mythic1049

Bump, even tried RSAv3 one complete machine PKI, STILL getting hmac not found, can i please get some help this is ridiculous.

TinCanTech

TLS Error: cannot locate HMAC in incoming packet - is almost certain to be an incorrect or missing TLS-Auth KEY.

If you are finding it hard to track your server/client config files then please try this:
https://github.com/TinCanTech/easy-tls

Easy-TLS goes as far as humanly possible to guarantee working config files for your servers and clients.
And it also provides excellent security tools to-boot.

Mythic1049

TinCanTech wrote TLS Error: cannot locate HMAC in incoming packet - is almost certain to be the wrong or missing TLS-Auth KEY.

If you are finding it hard to track your server/client config files then please try this:
https://github.com/TinCanTech/easy-tls

Easy-TLS goes as far as humanly possible to guarantee working config files for your servers and clients.
And it also provides excellent security tools to-boot.

I'm using your easy-tls, i follow EVERY step that is listed in the ONLY tutorial "https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-Howto"

My key isn't missing or the wrong key. The file path is written correctly, why are there 5 new different authorization keys instead of the old fashion "ta.key" when i type "./easytls init-tls" ovbiously it creates the tls environment, then when i type "./easytls build-tls-auth" is THAT not my "ta.key"?

i just dont understand why it wont read the key correctly also, if i try to comment out the "tls-auth" line in my config i get a new error that lists my "vars" info and shows information like "email" and "CN" i never put it. How is it grabbing some random shit that i never put it? Especially if i was leaving vars at default and not putting my own info in.

TinCanTech

Mythic1049 wrote I'm using your easy-tls,

Then please raise an issue here:
https://github.com/TinCanTech/easy-tls/issues/152

If you don't have a github account then please use this command:

./easytls -v status

and post the result.

Of course, Easy-TLS is not officially a release version, so you must use some skills to diagnose problems.

Mythic1049 wrote How is it grabbing some random shit that i never put it?

Easy-TLS does not grab random things. Rather, it uses the settings which you have chosen for Easy-RSA.

I am also available on Freenode, as instructed in the Easy-TLS README .. try that may be ?

Mythic1049

EasyRSA Shell
# ./easytls -v status
* Note: using Easy-RSA configuration from: ./vars
* config-file hash check OK
* config-file loaded OK
Easy-RSA: Valid X509 certificates:
  Common-Name RoyerServer1        Serial-number 93B42535540E5933AF7256787541DA09
  Common-Name RoyerClient1        Serial-number A49E5F32F446AB9AA06FCF0C77790C9F
  Common-Name RoyerClient2        Serial-number CCD277A6BB1AC74EDC86BC9585027A3D
  Common-Name RoyerClient3        Serial-number FB8C976F19E955AFC8265EBA25F675CC
Easy-RSA: Revoked X509 certificates:
  No Revoked X509 certificates found
Easy-TLS: Known inline files:
  Common-Name 99e281a19a9ac6bd1fb9bcad4781dbec00257bfd    Serial-number 93B42535540E5933AF7256787541DA09
  Common-Name 7a19506bf056b66bcb0cff9622dd7f6e85c69f2c    Serial-number A49E5F32F446AB9AA06FCF0C77790C9F
Easy-TLS: Invalid inline files:
  No invalid inline files found
Easy-TLS: .inline serial number mismatches:
  No mismatches found
* Inline-index hash check OK
* config-file hash check OK
* Disabled-list hash check OK
* Status complete

When i mentioned random shit, i was talking about how the VARS info, like DN,CN, province, org. It popped up with an error that showed my current vars info being some random stuff i never entered.

TinCanTech

I can see from your output above that you are not using the latest version of Easy-TLS. Please keep up ..

However, you are only using TLS-Auth and I presume inline files from Easy-TLS.

The only errors I can see in your log are generated by the client log..
Because you have not posted your server log.

And those errors have nothing to-do with Easy-TLS because your client is fully connected, according to your log.

Personally. I cannot imagine the mess you are in right now..
Did you try turning it off and on again ? :mrgreen:

TinCanTech

Mythic1049 wrote when i type "./easytls init-tls" ovbiously it creates the tls environment, then when i type "./easytls build-tls-auth" is THAT not my "ta.key"?

No, that is not your TLS-Auth Key. Easy-TLS no longer supports importing external keys. It is simply too wiscii..

Mythic1049

Server log

2021-03-16 17:48:40 us=931909 WARNING: --topology net30 support for server configs with IPv4 pools will be removed in a future release. Please migrate to --topology subnet as soon as possible.
2021-03-16 17:48:40 us=931909 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-03-16 17:48:40 us=931909 --pull-filter ignored for --mode server
2021-03-16 17:48:40 us=931909 Current Parameter Settings:
2021-03-16 17:48:40 us=931909   config = 'RoyerServer.ovpn'
2021-03-16 17:48:40 us=931909   mode = 1
2021-03-16 17:48:40 us=931909   show_ciphers = DISABLED
2021-03-16 17:48:40 us=931909   show_digests = DISABLED
2021-03-16 17:48:40 us=931909   show_engines = DISABLED
2021-03-16 17:48:40 us=931909   genkey = DISABLED
2021-03-16 17:48:40 us=931909   genkey_filename = '[UNDEF]'
2021-03-16 17:48:40 us=931909   key_pass_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   show_tls_ciphers = DISABLED
2021-03-16 17:48:40 us=931909   connect_retry_max = 0
2021-03-16 17:48:40 us=931909 Connection profiles [0]:
2021-03-16 17:48:40 us=931909   proto = udp
2021-03-16 17:48:40 us=931909   local = '[UNDEF]'
2021-03-16 17:48:40 us=931909   local_port = '1194'
2021-03-16 17:48:40 us=931909   remote = '[UNDEF]'
2021-03-16 17:48:40 us=931909   remote_port = '1194'
2021-03-16 17:48:40 us=931909   remote_float = DISABLED
2021-03-16 17:48:40 us=931909   bind_defined = DISABLED
2021-03-16 17:48:40 us=931909   bind_local = ENABLED
2021-03-16 17:48:40 us=931909   bind_ipv6_only = DISABLED
2021-03-16 17:48:40 us=931909   connect_retry_seconds = 5
2021-03-16 17:48:40 us=931909   connect_timeout = 120
2021-03-16 17:48:40 us=931909   socks_proxy_server = '[UNDEF]'
2021-03-16 17:48:40 us=931909   socks_proxy_port = '[UNDEF]'
2021-03-16 17:48:40 us=931909   tun_mtu = 1500
2021-03-16 17:48:40 us=931909   tun_mtu_defined = ENABLED
2021-03-16 17:48:40 us=931909   link_mtu = 1500
2021-03-16 17:48:40 us=931909   link_mtu_defined = DISABLED
2021-03-16 17:48:40 us=931909   tun_mtu_extra = 0
2021-03-16 17:48:40 us=931909   tun_mtu_extra_defined = DISABLED
2021-03-16 17:48:40 us=931909   mtu_discover_type = -1
2021-03-16 17:48:40 us=931909   fragment = 0
2021-03-16 17:48:40 us=931909   mssfix = 1450
2021-03-16 17:48:40 us=931909   explicit_exit_notification = 1
2021-03-16 17:48:40 us=931909   tls_auth_file = '[INLINE]'
2021-03-16 17:48:40 us=931909   key_direction = 0
2021-03-16 17:48:40 us=931909   tls_crypt_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   tls_crypt_v2_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909 Connection profiles END
2021-03-16 17:48:40 us=931909   remote_random = DISABLED
2021-03-16 17:48:40 us=931909   ipchange = '[UNDEF]'
2021-03-16 17:48:40 us=931909   dev = 'tun'
2021-03-16 17:48:40 us=931909   dev_type = '[UNDEF]'
2021-03-16 17:48:40 us=931909   dev_node = '[UNDEF]'
2021-03-16 17:48:40 us=931909   lladdr = '[UNDEF]'
2021-03-16 17:48:40 us=931909   topology = 1
2021-03-16 17:48:40 us=931909   ifconfig_local = '10.10.1.1'
2021-03-16 17:48:40 us=931909   ifconfig_remote_netmask = '10.10.1.2'
2021-03-16 17:48:40 us=931909   ifconfig_noexec = DISABLED
2021-03-16 17:48:40 us=931909   ifconfig_nowarn = DISABLED
2021-03-16 17:48:40 us=931909   ifconfig_ipv6_local = '[UNDEF]'
2021-03-16 17:48:40 us=931909   ifconfig_ipv6_netbits = 0
2021-03-16 17:48:40 us=931909   ifconfig_ipv6_remote = '[UNDEF]'
2021-03-16 17:48:40 us=931909   shaper = 0
2021-03-16 17:48:40 us=931909   mtu_test = 0
2021-03-16 17:48:40 us=931909   mlock = DISABLED
2021-03-16 17:48:40 us=931909   keepalive_ping = 10
2021-03-16 17:48:40 us=931909   keepalive_timeout = 120
2021-03-16 17:48:40 us=931909   inactivity_timeout = 0
2021-03-16 17:48:40 us=931909   ping_send_timeout = 10
2021-03-16 17:48:40 us=931909   ping_rec_timeout = 240
2021-03-16 17:48:40 us=931909   ping_rec_timeout_action = 2
2021-03-16 17:48:40 us=931909   ping_timer_remote = DISABLED
2021-03-16 17:48:40 us=931909   remap_sigusr1 = 0
2021-03-16 17:48:40 us=931909   persist_tun = ENABLED
2021-03-16 17:48:40 us=931909   persist_local_ip = DISABLED
2021-03-16 17:48:40 us=931909   persist_remote_ip = DISABLED
2021-03-16 17:48:40 us=931909   persist_key = ENABLED
2021-03-16 17:48:40 us=931909   passtos = DISABLED
2021-03-16 17:48:40 us=931909   resolve_retry_seconds = 1000000000
2021-03-16 17:48:40 us=931909   resolve_in_advance = DISABLED
2021-03-16 17:48:40 us=931909   username = '[UNDEF]'
2021-03-16 17:48:40 us=931909   groupname = '[UNDEF]'
2021-03-16 17:48:40 us=931909   chroot_dir = '[UNDEF]'
2021-03-16 17:48:40 us=931909   cd_dir = '[UNDEF]'
2021-03-16 17:48:40 us=931909   writepid = '[UNDEF]'
2021-03-16 17:48:40 us=931909   up_script = '[UNDEF]'
2021-03-16 17:48:40 us=931909   down_script = '[UNDEF]'
2021-03-16 17:48:40 us=931909   down_pre = DISABLED
2021-03-16 17:48:40 us=931909   up_restart = DISABLED
2021-03-16 17:48:40 us=931909   up_delay = DISABLED
2021-03-16 17:48:40 us=931909   daemon = DISABLED
2021-03-16 17:48:40 us=931909   inetd = 0
2021-03-16 17:48:40 us=931909   log = ENABLED
2021-03-16 17:48:40 us=931909   suppress_timestamps = DISABLED
2021-03-16 17:48:40 us=931909   machine_readable_output = DISABLED
2021-03-16 17:48:40 us=931909   nice = 0
2021-03-16 17:48:40 us=931909   verbosity = 4
2021-03-16 17:48:40 us=931909   mute = 0
2021-03-16 17:48:40 us=931909   gremlin = 0
2021-03-16 17:48:40 us=931909   status_file = 'openvpn-status.log'
2021-03-16 17:48:40 us=931909   status_file_version = 1
2021-03-16 17:48:40 us=931909   status_file_update_freq = 60
2021-03-16 17:48:40 us=931909   occ = ENABLED
2021-03-16 17:48:40 us=931909   rcvbuf = 0
2021-03-16 17:48:40 us=931909   sndbuf = 0
2021-03-16 17:48:40 us=931909   sockflags = 0
2021-03-16 17:48:40 us=931909   fast_io = DISABLED
2021-03-16 17:48:40 us=931909   comp.alg = 0
2021-03-16 17:48:40 us=931909   comp.flags = 0
2021-03-16 17:48:40 us=931909   route_script = '[UNDEF]'
2021-03-16 17:48:40 us=931909   route_default_gateway = '[UNDEF]'
2021-03-16 17:48:40 us=931909   route_default_metric = 0
2021-03-16 17:48:40 us=931909   route_noexec = DISABLED
2021-03-16 17:48:40 us=931909   route_delay = 0
2021-03-16 17:48:40 us=931909   route_delay_window = 30
2021-03-16 17:48:40 us=931909   route_delay_defined = DISABLED
2021-03-16 17:48:40 us=931909   route_nopull = DISABLED
2021-03-16 17:48:40 us=931909   route_gateway_via_dhcp = DISABLED
2021-03-16 17:48:40 us=931909   allow_pull_fqdn = DISABLED
2021-03-16 17:48:40 us=931909   Pull filters:
2021-03-16 17:48:40 us=931909     ignore "route-method"
2021-03-16 17:48:40 us=931909   route 10.10.1.0/255.255.255.0/default (not set)/default (not set)
2021-03-16 17:48:40 us=931909   management_addr = '127.0.0.1'
2021-03-16 17:48:40 us=931909   management_port = '25340'
2021-03-16 17:48:40 us=931909   management_user_pass = 'stdin'
2021-03-16 17:48:40 us=931909   management_log_history_cache = 250
2021-03-16 17:48:40 us=931909   management_echo_buffer_size = 100
2021-03-16 17:48:40 us=931909   management_write_peer_info_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   management_client_user = '[UNDEF]'
2021-03-16 17:48:40 us=931909   management_client_group = '[UNDEF]'
2021-03-16 17:48:40 us=931909   management_flags = 6
2021-03-16 17:48:40 us=931909   shared_secret_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   key_direction = 0
2021-03-16 17:48:40 us=931909   ciphername = 'AES-256-CBC'
2021-03-16 17:48:40 us=931909   ncp_enabled = ENABLED
2021-03-16 17:48:40 us=931909   ncp_ciphers = 'AES-256-GCM:AES-128-GCM:AES-256-CBC'
2021-03-16 17:48:40 us=931909   authname = 'SHA1'
2021-03-16 17:48:40 us=931909   prng_hash = 'SHA1'
2021-03-16 17:48:40 us=931909   prng_nonce_secret_len = 16
2021-03-16 17:48:40 us=931909   keysize = 0
2021-03-16 17:48:40 us=931909   engine = DISABLED
2021-03-16 17:48:40 us=931909   replay = ENABLED
2021-03-16 17:48:40 us=931909   mute_replay_warnings = DISABLED
2021-03-16 17:48:40 us=931909   replay_window = 64
2021-03-16 17:48:40 us=931909   replay_time = 15
2021-03-16 17:48:40 us=931909   packet_id_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   test_crypto = DISABLED
2021-03-16 17:48:40 us=931909   tls_server = ENABLED
2021-03-16 17:48:40 us=931909   tls_client = DISABLED
2021-03-16 17:48:40 us=931909   ca_file = 'C:\Program Files\OpenVPN\Server\ca.crt'
2021-03-16 17:48:40 us=931909   ca_path = '[UNDEF]'
2021-03-16 17:48:40 us=931909   dh_file = 'C:\Program Files\OpenVPN\Server\dh.pem'
2021-03-16 17:48:40 us=931909   cert_file = 'C:\Program Files\OpenVPN\Server\RoyerServer1.crt'
2021-03-16 17:48:40 us=931909   extra_certs_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   priv_key_file = 'C:\Program Files\OpenVPN\Server\RoyerServer1.key'
2021-03-16 17:48:40 us=931909   pkcs12_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   cryptoapi_cert = '[UNDEF]'
2021-03-16 17:48:40 us=931909   cipher_list = '[UNDEF]'
2021-03-16 17:48:40 us=931909   cipher_list_tls13 = '[UNDEF]'
2021-03-16 17:48:40 us=931909   tls_cert_profile = '[UNDEF]'
2021-03-16 17:48:40 us=931909   tls_verify = '[UNDEF]'
2021-03-16 17:48:40 us=931909   tls_export_cert = '[UNDEF]'
2021-03-16 17:48:40 us=931909   verify_x509_type = 0
2021-03-16 17:48:40 us=931909   verify_x509_name = '[UNDEF]'
2021-03-16 17:48:40 us=931909   crl_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   ns_cert_type = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_ku[i] = 0
2021-03-16 17:48:40 us=931909   remote_cert_eku = '[UNDEF]'
2021-03-16 17:48:40 us=931909   ssl_flags = 0
2021-03-16 17:48:40 us=931909   tls_timeout = 2
2021-03-16 17:48:40 us=931909   renegotiate_bytes = -1
2021-03-16 17:48:40 us=931909   renegotiate_packets = 0
2021-03-16 17:48:40 us=931909   renegotiate_seconds = 3600
2021-03-16 17:48:40 us=931909   handshake_window = 60
2021-03-16 17:48:40 us=931909   transition_window = 3600
2021-03-16 17:48:40 us=931909   single_session = DISABLED
2021-03-16 17:48:40 us=931909   push_peer_info = DISABLED
2021-03-16 17:48:40 us=931909   tls_exit = DISABLED
2021-03-16 17:48:40 us=931909   tls_crypt_v2_metadata = '[UNDEF]'
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_protected_authentication = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_private_mode = 00000000
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_cert_private = DISABLED
2021-03-16 17:48:40 us=931909   pkcs11_pin_cache_period = -1
2021-03-16 17:48:40 us=931909   pkcs11_id = '[UNDEF]'
2021-03-16 17:48:40 us=931909   pkcs11_id_management = DISABLED
2021-03-16 17:48:40 us=931909   server_network = 10.10.1.0
2021-03-16 17:48:40 us=931909   server_netmask = 255.255.255.0
2021-03-16 17:48:40 us=931909   server_network_ipv6 = ::
2021-03-16 17:48:40 us=931909   server_netbits_ipv6 = 0
2021-03-16 17:48:40 us=931909   server_bridge_ip = 0.0.0.0
2021-03-16 17:48:40 us=931909   server_bridge_netmask = 0.0.0.0
2021-03-16 17:48:40 us=931909   server_bridge_pool_start = 0.0.0.0
2021-03-16 17:48:40 us=931909   server_bridge_pool_end = 0.0.0.0
2021-03-16 17:48:40 us=931909   push_entry = 'route 10.10.1.1'
2021-03-16 17:48:40 us=931909   push_entry = 'topology net30'
2021-03-16 17:48:40 us=931909   push_entry = 'ping 10'
2021-03-16 17:48:40 us=931909   push_entry = 'ping-restart 120'
2021-03-16 17:48:40 us=931909   ifconfig_pool_defined = ENABLED
2021-03-16 17:48:40 us=931909   ifconfig_pool_start = 10.10.1.4
2021-03-16 17:48:40 us=931909   ifconfig_pool_end = 10.10.1.251
2021-03-16 17:48:40 us=931909   ifconfig_pool_netmask = 0.0.0.0
2021-03-16 17:48:40 us=931909   ifconfig_pool_persist_filename = 'ipp.txt'
2021-03-16 17:48:40 us=931909   ifconfig_pool_persist_refresh_freq = 600
2021-03-16 17:48:40 us=931909   ifconfig_ipv6_pool_defined = DISABLED
2021-03-16 17:48:40 us=931909   ifconfig_ipv6_pool_base = ::
2021-03-16 17:48:40 us=931909   ifconfig_ipv6_pool_netbits = 0
2021-03-16 17:48:40 us=931909   n_bcast_buf = 256
2021-03-16 17:48:40 us=931909   tcp_queue_limit = 64
2021-03-16 17:48:40 us=931909   real_hash_size = 256
2021-03-16 17:48:40 us=931909   virtual_hash_size = 256
2021-03-16 17:48:40 us=931909   client_connect_script = '[UNDEF]'
2021-03-16 17:48:40 us=931909   learn_address_script = '[UNDEF]'
2021-03-16 17:48:40 us=931909   client_disconnect_script = '[UNDEF]'
2021-03-16 17:48:40 us=931909   client_config_dir = '[UNDEF]'
2021-03-16 17:48:40 us=931909   ccd_exclusive = DISABLED
2021-03-16 17:48:40 us=931909   tmp_dir = 'C:\Users\KSERVE~1\AppData\Local\Temp\'
2021-03-16 17:48:40 us=931909   push_ifconfig_defined = DISABLED
2021-03-16 17:48:40 us=931909   push_ifconfig_local = 0.0.0.0
2021-03-16 17:48:40 us=931909   push_ifconfig_remote_netmask = 0.0.0.0
2021-03-16 17:48:40 us=931909   push_ifconfig_ipv6_defined = DISABLED
2021-03-16 17:48:40 us=931909   push_ifconfig_ipv6_local = ::/0
2021-03-16 17:48:40 us=931909   push_ifconfig_ipv6_remote = ::
2021-03-16 17:48:40 us=931909   enable_c2c = DISABLED
2021-03-16 17:48:40 us=931909   duplicate_cn = DISABLED
2021-03-16 17:48:40 us=931909   cf_max = 0
2021-03-16 17:48:40 us=931909   cf_per = 0
2021-03-16 17:48:40 us=931909   max_clients = 1024
2021-03-16 17:48:40 us=931909   max_routes_per_client = 256
2021-03-16 17:48:40 us=931909   auth_user_pass_verify_script = '[UNDEF]'
2021-03-16 17:48:40 us=931909   auth_user_pass_verify_script_via_file = DISABLED
2021-03-16 17:48:40 us=931909   auth_token_generate = DISABLED
2021-03-16 17:48:40 us=931909   auth_token_lifetime = 0
2021-03-16 17:48:40 us=931909   auth_token_secret_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   vlan_tagging = DISABLED
2021-03-16 17:48:40 us=931909   vlan_accept = all
2021-03-16 17:48:40 us=931909   vlan_pvid = 1
2021-03-16 17:48:40 us=931909   client = DISABLED
2021-03-16 17:48:40 us=931909   pull = DISABLED
2021-03-16 17:48:40 us=931909   auth_user_pass_file = '[UNDEF]'
2021-03-16 17:48:40 us=931909   show_net_up = DISABLED
2021-03-16 17:48:40 us=931909   route_method = 3
2021-03-16 17:48:40 us=931909   block_outside_dns = DISABLED
2021-03-16 17:48:40 us=931909   ip_win32_defined = DISABLED
2021-03-16 17:48:40 us=931909   ip_win32_type = 3
2021-03-16 17:48:40 us=931909   dhcp_masq_offset = 0
2021-03-16 17:48:40 us=931909   dhcp_lease_time = 31536000
2021-03-16 17:48:40 us=931909   tap_sleep = 10
2021-03-16 17:48:40 us=931909   dhcp_options = DISABLED
2021-03-16 17:48:40 us=931909   dhcp_renew = DISABLED
2021-03-16 17:48:40 us=931909   dhcp_pre_release = DISABLED
2021-03-16 17:48:40 us=931909   domain = '[UNDEF]'
2021-03-16 17:48:40 us=931909   netbios_scope = '[UNDEF]'
2021-03-16 17:48:40 us=931909   netbios_node_type = 0
2021-03-16 17:48:40 us=931909   disable_nbt = DISABLED
2021-03-16 17:48:40 us=931909 OpenVPN 2.5.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 24 2021
2021-03-16 17:48:40 us=931909 Windows version 10.0 (Windows 10 or greater) 64bit
2021-03-16 17:48:40 us=931909 library versions: OpenSSL 1.1.1j  16 Feb 2021, LZO 2.10
Enter Management Password:
2021-03-16 17:48:40 us=931909 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
2021-03-16 17:48:40 us=931909 Need hold release from management interface, waiting...
2021-03-16 17:48:41 us=416382 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
2021-03-16 17:48:41 us=525753 MANAGEMENT: CMD 'state on'
2021-03-16 17:48:41 us=525753 MANAGEMENT: CMD 'log all on'
2021-03-16 17:48:41 us=666368 MANAGEMENT: CMD 'echo all on'
2021-03-16 17:48:41 us=666368 MANAGEMENT: CMD 'bytecount 5'
2021-03-16 17:48:41 us=666368 MANAGEMENT: CMD 'hold off'
2021-03-16 17:48:41 us=666368 MANAGEMENT: CMD 'hold release'
2021-03-16 17:48:41 us=681992 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
2021-03-16 17:48:41 us=681992 Diffie-Hellman initialized with 2048 bit key
2021-03-16 17:48:41 us=681992 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-03-16 17:48:41 us=681992 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-03-16 17:48:41 us=681992 TLS-Auth MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-03-16 17:48:41 us=681992 interactive service msg_channel=728
2021-03-16 17:48:41 us=681992 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=16 HWADDR=e0:3f:49:6c:f1:bb
2021-03-16 17:48:41 us=681992 open_tun
2021-03-16 17:48:41 us=681992 tap-windows6 device [OpenVPN TAP-Windows6] opened
2021-03-16 17:48:41 us=681992 TAP-Windows Driver Version 9.24 
2021-03-16 17:48:41 us=681992 TAP-Windows MTU=1500
2021-03-16 17:48:41 us=681992 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.1.1/255.255.255.252 on interface {C5492F28-2FB3-4442-95AD-9C92F8A55959} [DHCP-serv: 10.10.1.2, lease-time: 31536000]
2021-03-16 17:48:41 us=681992 Sleeping for 10 seconds...
2021-03-16 17:48:51 us=773650 Successful ARP Flush on interface [10] {C5492F28-2FB3-4442-95AD-9C92F8A55959}
2021-03-16 17:48:51 us=773650 do_ifconfig, ipv4=1, ipv6=0
2021-03-16 17:48:51 us=773650 MANAGEMENT: >STATE:1615942131,ASSIGN_IP,,10.10.1.1,,,,
2021-03-16 17:48:51 us=773650 IPv4 MTU set to 1500 on interface 10 using service
2021-03-16 17:48:51 us=773650 MANAGEMENT: >STATE:1615942131,ADD_ROUTES,,,,,,
2021-03-16 17:48:51 us=773650 C:\Windows\system32\route.exe ADD 10.10.1.0 MASK 255.255.255.0 10.10.1.2
2021-03-16 17:48:51 us=773650 Route addition via service succeeded
2021-03-16 17:48:51 us=773650 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
2021-03-16 17:48:51 us=773650 Could not determine IPv4/IPv6 protocol. Using AF_INET6
2021-03-16 17:48:51 us=773650 Socket Buffers: R=[65536->65536] S=[65536->65536]
2021-03-16 17:48:51 us=773650 setsockopt(IPV6_V6ONLY=0)
2021-03-16 17:48:51 us=773650 UDPv6 link local (bound): [AF_INET6][undef]:1194
2021-03-16 17:48:51 us=773650 UDPv6 link remote: [AF_UNSPEC]
2021-03-16 17:48:51 us=773650 MULTI: multi_init called, r=256 v=256
2021-03-16 17:48:51 us=773650 IFCONFIG POOL IPv4: base=10.10.1.4 size=62
2021-03-16 17:48:51 us=773650 IFCONFIG POOL LIST
2021-03-16 17:48:51 us=773650 Initialization Sequence Completed
2021-03-16 17:48:51 us=773650 MANAGEMENT: >STATE:1615942131,CONNECTED,SUCCESS,10.10.1.1,,,,

Latest easy-tls version? Unless you've got a version hidden, im using this exact one, "https://github.com/TinCanTech/easy-tls/find/master". Download as a zip and extract to Easyrsa directory, right?

Mythic1049

TinCanTech wrote
Mythic1049 wrote when i type "./easytls init-tls" ovbiously it creates the tls environment, then when i type "./easytls build-tls-auth" is THAT not my "ta.key"?
No, that is not your TLS-Auth Key. Easy-TLS no longer supports importing external keys. It is simply too wiscii..

So for someone who has a simple client-server config, what should the command line for "tls-auth ta.key 1 # file kept secret" look like? I don't see "ta.key" mentioned anywhere in the EAsyRSAv3 tutorial. In regards to creating one i mean.

TinCanTech

For a simple tls auth key (a.k.a. ta.key) you need the same key in both server and client like so:

# Server TLS Auth KEY with Direction 0
# one potato
tls-server
tls-auth /path/to/ta.key 0

# Client TLS Auth KEY with Direction 1
# two patota
tls-client
tls-auth /path/to/ta.key 1

Enjoy the forum tools too .. :lol: ..

Blame for this garbage can be found here:
https://github.com/ecrist/oconf

Mythic1049

TinCanTech wrote For a simple tls auth key (a.k.a. ta.key) you need the same key in both server and client like so:

t;s-auth /path/to/ta.key 0
t;s-auth /path/to/ta.key 1

Enjoy the forum tools too .. :lol:

Ok i get that, but what im saying is, in the new version of EasyRSA V3 how do you create a ta.key? the EasyRSA v2 command doesn't work. And if you're saying TLS-auth isn't the ta.key then do i not need to make a tls-auth key?

TinCanTech

For a simple tls auth key (a.k.a. ta.key) you need the same key in both server and client like so:

# Server TLS Auth KEY with Direction 1
# one potato
tls-auth /path/to/ta.key 0

# Client TLS Auth KEY with Direction 1
# two patota
tls-auth /path/to/ta.key 1

Enjoy the forum tools too .. :lol: ..

Blame for this garbage can be found here:
https://github.com/ecrist/oconf

TinCanTech

Mythic1049 wrote Ok i get that, but what im saying is, in the new version of EasyRSA V3 how do you create a ta.key?

Easy-RSA-3 does not support TLS-Auth Key creation.

Easy-TLS does that instead.

Mythic1049

TinCanTech wrote
Mythic1049 wrote Ok i get that, but what im saying is, in the new version of EasyRSA V3 how do you create a ta.key?
Easy-RSA-3 does not support TLS-Auth Key creation.

Easy-TLS does that instead.

Ok, lol. How do I MAKE a ta.key with your easy-tls? You never got back to me about newer version of your easy-tls aswell.

TinCanTech

What you need to do to start with is this:

Make a backup of your entire Easy-RSA3 directory :!:
Just in case you screw yourself up .. Again.

Download the latest Easy-TLS script to your Easy-RSA3 directory.

And a github star would be nice ..

Next:

Use this command:

./easytls init

Which will initialise your TLS files.

For TLS-AUTH key use:

./easytls build

And select:

[1] TLS-Auth key                   - Legacy HMAC pre-shared key

Then use:

./easytls inline

And select:

[1] Inline-file with TLS-Auth key for Server

To build your server inline file.

Then use:

./easytls inline

And select:

[2] Inline-file with TLS-Auth key for Client

To build your client inline file.

Then you will have what you need.

The rest is up to you..

Mythic1049

After some digging around the forums on how to use inlines on a ovpn config i got everything together yet no improvment.

Server Config

port 1194
proto udp
dev tun

key-direction 0

<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-auth>

<dh>
-----BEGIN DH PARAMETERS-----

-----END DH PARAMETERS-----
</dh>

<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</ca>

<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a6:b4:b1:82:d4:96:a5:f5:17:c8:20:33:25:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Royer
Validity
Not Before: Mar 17 16:15:40 2021 GMT
Not After : Jun 20 16:15:40 2023 GMT
Subject: CN=RoyerServer
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:09:c5:51:11:eb:d9:df:34:38:2c:4c:30:
cf:30:bd:d5:d4:f8:e0:28:5c:f0:7e:bc:4b:15:a3:
b3:be:98:22:00:a8:20:85:7b:8b:46:ea:ce:bf:87:
d6:02:19:2c:92:7b:c7:0f:1f:e3:10:7a:49:05:19:
04:8f:43:d6:d0:01:3a:0a:bc:80:fd:9c:a2:e2:26:
9f:67:29:a2:1f:9f:2f:f7:e7:48:a8:d3:94:cc:7d:
06:09:ff:07:29:04:72:44:ad:f5:6b:48:be:58:ce:
56:ab:25:f4:c8:27:87:4f:14:23:12:9b:3b:6a:8c:
54:02:43:21:7c:9a:66:09:72:e1:90:d8:31:36:d2:
26:44:6d:1d:cb:b4:e2:68:1f:83:99:ae:57:12:80:
3e:56:ff:d3:8b:d5:a3:62:a0:ed:3d:fb:16:ac:7b:
3d:aa:34:51:b5:9b:16:ba:06:95:9f:bb:f6:3f:4d:
29:5f:6e:d7:03:e1:99:de:c7:6b:a8:df:e6:6b:fb:
5c:d4:a7:21:6a:b7:e2:01:1a:d0:58:c4:ff:8d:a0:
89:de:aa:ed:f2:e9:fc:39:3f:0b:c2:0a:25:32:b3:
19:38:28:26:73:08:28:8d:c6:b9:a6:40:0b:27:40:
f7:a7:c4:33:a5:94:89:7b:b4:a4:63:2b:a3:d6:af:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
89:B1:90:6A:DD:2D:69:EB:1B:25:58:0E:66:61:D1:D6:D3:BE:5B:79
X509v3 Authority Key Identifier:
keyid:79:03:54:2F:FB:AE:F2:02:B0:87:4A:3C:78:1C:0A:EF:D1:8B:5A:C4
DirName:/CN=Royer
serial:3A:87:8A:EC:96:FD:6B:9B:6F:9F:A9:11:FD:D3:CC:A1:58:F0:33:41

X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Digital Signature, Key Encipherment
X509v3 Subject Alternative Name:
DNS:RoyerServer
Signature Algorithm: sha256WithRSAEncryption
93:25:00:9c:e2:42:7f:03:f2:58:96:ac:82:39:36:50:5e:c5:
d1:e4:af:67:ea:2c:ce:28:f3:a5:f8:ed:10:25:13:70:d8:13:
32:da:35:6f:ac:d3:c3:2b:a9:e0:3c:4e:cb:9e:b9:b3:01:7a:
16:2f:bc:0d:a0:d7:ce:ca:01:90:2e:25:8d:18:d9:fd:0a:57:
06:26:ef:b8:96:f3:5b:f4:fe:29:ac:6e:9c:3c:23:ac:4c:6d:
c9:4d:07:b6:ea:fb:d3:06:de:2e:42:cd:2f:57:27:f9:80:94:
9f:64:dd:09:85:d6:d2:f6:74:32:71:98:cc:43:01:9d:70:f6:
45:61:d2:b3:4e:ce:a2:47:84:aa:05:98:af:e9:c0:c4:9a:50:
58:01:b3:73:91:13:88:cd:8a:1a:16:af:ef:3f:cd:20:86:51:
05:0e:67:c8:d1:d8:55:8f:97:ed:b2:09:30:78:9d:4c:9c:e7:
37:1b:3a:5c:f3:50:a9:b3:8c:0c:ff:1e:ee:b5:8e:d6:28:f6:
76:85:31:3f:b4:2e:88:f1:ac:2f:fc:f0:f3:a5:0d:2a:e8:fd:
b5:06:30:c4:d8:08:b9:db:11:70:3e:13:6f:7d:c5:3d:2b:1a:
cd:89:9c:11:3f:76:4a:e0:46:61:a3:f6:24:cf:85:24:84:5d:
54:95:d0:60
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----
</key>

server 10.10.1.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120

cipher AES-256-CBC
persist-key
persist-tun
status openvpn-status.log
verb 4
explicit-exit-notify 1

Server Log

2021-03-17 09:45:07 us=933812 WARNING: --topology net30 support for server configs with IPv4 pools will be removed in a future release. Please migrate to --topology subnet as soon as possible.
2021-03-17 09:45:07 us=933812 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-03-17 09:45:07 us=933812 --pull-filter ignored for --mode server
2021-03-17 09:45:07 us=949434 Current Parameter Settings:
2021-03-17 09:45:07 us=949434   config = 'serverinline.ovpn'
2021-03-17 09:45:07 us=949434   mode = 1
2021-03-17 09:45:07 us=949434   show_ciphers = DISABLED
2021-03-17 09:45:07 us=949434   show_digests = DISABLED
2021-03-17 09:45:07 us=949434   show_engines = DISABLED
2021-03-17 09:45:07 us=949434   genkey = DISABLED
2021-03-17 09:45:07 us=949434   genkey_filename = '[UNDEF]'
2021-03-17 09:45:07 us=949434   key_pass_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   show_tls_ciphers = DISABLED
2021-03-17 09:45:07 us=949434   connect_retry_max = 0
2021-03-17 09:45:07 us=949434 Connection profiles [0]:
2021-03-17 09:45:07 us=949434   proto = udp
2021-03-17 09:45:07 us=949434   local = '[UNDEF]'
2021-03-17 09:45:07 us=949434   local_port = '1194'
2021-03-17 09:45:07 us=949434   remote = '[UNDEF]'
2021-03-17 09:45:07 us=949434   remote_port = '1194'
2021-03-17 09:45:07 us=949434   remote_float = DISABLED
2021-03-17 09:45:07 us=949434   bind_defined = DISABLED
2021-03-17 09:45:07 us=949434   bind_local = ENABLED
2021-03-17 09:45:07 us=949434   bind_ipv6_only = DISABLED
2021-03-17 09:45:07 us=949434   connect_retry_seconds = 5
2021-03-17 09:45:07 us=949434   connect_timeout = 120
2021-03-17 09:45:07 us=949434   socks_proxy_server = '[UNDEF]'
2021-03-17 09:45:07 us=949434   socks_proxy_port = '[UNDEF]'
2021-03-17 09:45:07 us=949434   tun_mtu = 1500
2021-03-17 09:45:07 us=949434   tun_mtu_defined = ENABLED
2021-03-17 09:45:07 us=949434   link_mtu = 1500
2021-03-17 09:45:07 us=949434   link_mtu_defined = DISABLED
2021-03-17 09:45:07 us=949434   tun_mtu_extra = 0
2021-03-17 09:45:07 us=949434   tun_mtu_extra_defined = DISABLED
2021-03-17 09:45:07 us=949434   mtu_discover_type = -1
2021-03-17 09:45:07 us=949434   fragment = 0
2021-03-17 09:45:07 us=949434   mssfix = 1450
2021-03-17 09:45:07 us=949434   explicit_exit_notification = 1
2021-03-17 09:45:07 us=949434   tls_auth_file = '[INLINE]'
2021-03-17 09:45:07 us=949434   key_direction = 1
2021-03-17 09:45:07 us=949434   tls_crypt_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   tls_crypt_v2_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434 Connection profiles END
2021-03-17 09:45:07 us=949434   remote_random = DISABLED
2021-03-17 09:45:07 us=949434   ipchange = '[UNDEF]'
2021-03-17 09:45:07 us=949434   dev = 'tun'
2021-03-17 09:45:07 us=949434   dev_type = '[UNDEF]'
2021-03-17 09:45:07 us=949434   dev_node = '[UNDEF]'
2021-03-17 09:45:07 us=949434   lladdr = '[UNDEF]'
2021-03-17 09:45:07 us=949434   topology = 1
2021-03-17 09:45:07 us=949434   ifconfig_local = '10.10.1.1'
2021-03-17 09:45:07 us=949434   ifconfig_remote_netmask = '10.10.1.2'
2021-03-17 09:45:07 us=949434   ifconfig_noexec = DISABLED
2021-03-17 09:45:07 us=949434   ifconfig_nowarn = DISABLED
2021-03-17 09:45:07 us=949434   ifconfig_ipv6_local = '[UNDEF]'
2021-03-17 09:45:07 us=949434   ifconfig_ipv6_netbits = 0
2021-03-17 09:45:07 us=949434   ifconfig_ipv6_remote = '[UNDEF]'
2021-03-17 09:45:07 us=949434   shaper = 0
2021-03-17 09:45:07 us=949434   mtu_test = 0
2021-03-17 09:45:07 us=949434   mlock = DISABLED
2021-03-17 09:45:07 us=949434   keepalive_ping = 10
2021-03-17 09:45:07 us=949434   keepalive_timeout = 120
2021-03-17 09:45:07 us=949434   inactivity_timeout = 0
2021-03-17 09:45:07 us=949434   ping_send_timeout = 10
2021-03-17 09:45:07 us=949434   ping_rec_timeout = 240
2021-03-17 09:45:07 us=949434   ping_rec_timeout_action = 2
2021-03-17 09:45:07 us=949434   ping_timer_remote = DISABLED
2021-03-17 09:45:07 us=949434   remap_sigusr1 = 0
2021-03-17 09:45:07 us=949434   persist_tun = ENABLED
2021-03-17 09:45:07 us=949434   persist_local_ip = DISABLED
2021-03-17 09:45:07 us=949434   persist_remote_ip = DISABLED
2021-03-17 09:45:07 us=949434   persist_key = ENABLED
2021-03-17 09:45:07 us=949434   passtos = DISABLED
2021-03-17 09:45:07 us=949434   resolve_retry_seconds = 1000000000
2021-03-17 09:45:07 us=949434   resolve_in_advance = DISABLED
2021-03-17 09:45:07 us=949434   username = '[UNDEF]'
2021-03-17 09:45:07 us=949434   groupname = '[UNDEF]'
2021-03-17 09:45:07 us=949434   chroot_dir = '[UNDEF]'
2021-03-17 09:45:07 us=949434   cd_dir = '[UNDEF]'
2021-03-17 09:45:07 us=949434   writepid = '[UNDEF]'
2021-03-17 09:45:07 us=949434   up_script = '[UNDEF]'
2021-03-17 09:45:07 us=949434   down_script = '[UNDEF]'
2021-03-17 09:45:07 us=949434   down_pre = DISABLED
2021-03-17 09:45:07 us=949434   up_restart = DISABLED
2021-03-17 09:45:07 us=949434   up_delay = DISABLED
2021-03-17 09:45:07 us=949434   daemon = DISABLED
2021-03-17 09:45:07 us=949434   inetd = 0
2021-03-17 09:45:07 us=949434   log = ENABLED
2021-03-17 09:45:07 us=949434   suppress_timestamps = DISABLED
2021-03-17 09:45:07 us=949434   machine_readable_output = DISABLED
2021-03-17 09:45:07 us=949434   nice = 0
2021-03-17 09:45:07 us=949434   verbosity = 4
2021-03-17 09:45:07 us=949434   mute = 0
2021-03-17 09:45:07 us=949434   gremlin = 0
2021-03-17 09:45:07 us=949434   status_file = 'openvpn-status.log'
2021-03-17 09:45:07 us=949434   status_file_version = 1
2021-03-17 09:45:07 us=949434   status_file_update_freq = 60
2021-03-17 09:45:07 us=949434   occ = ENABLED
2021-03-17 09:45:07 us=949434   rcvbuf = 0
2021-03-17 09:45:07 us=949434   sndbuf = 0
2021-03-17 09:45:07 us=949434   sockflags = 0
2021-03-17 09:45:07 us=949434   fast_io = DISABLED
2021-03-17 09:45:07 us=949434   comp.alg = 0
2021-03-17 09:45:07 us=949434   comp.flags = 0
2021-03-17 09:45:07 us=949434   route_script = '[UNDEF]'
2021-03-17 09:45:07 us=949434   route_default_gateway = '[UNDEF]'
2021-03-17 09:45:07 us=949434   route_default_metric = 0
2021-03-17 09:45:07 us=949434   route_noexec = DISABLED
2021-03-17 09:45:07 us=949434   route_delay = 0
2021-03-17 09:45:07 us=949434   route_delay_window = 30
2021-03-17 09:45:07 us=949434   route_delay_defined = DISABLED
2021-03-17 09:45:07 us=949434   route_nopull = DISABLED
2021-03-17 09:45:07 us=949434   route_gateway_via_dhcp = DISABLED
2021-03-17 09:45:07 us=949434   allow_pull_fqdn = DISABLED
2021-03-17 09:45:07 us=949434   Pull filters:
2021-03-17 09:45:07 us=949434     ignore "route-method"
2021-03-17 09:45:07 us=949434   route 10.10.1.0/255.255.255.0/default (not set)/default (not set)
2021-03-17 09:45:07 us=949434   management_addr = '127.0.0.1'
2021-03-17 09:45:07 us=949434   management_port = '25341'
2021-03-17 09:45:07 us=949434   management_user_pass = 'stdin'
2021-03-17 09:45:07 us=949434   management_log_history_cache = 250
2021-03-17 09:45:07 us=949434   management_echo_buffer_size = 100
2021-03-17 09:45:07 us=949434   management_write_peer_info_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   management_client_user = '[UNDEF]'
2021-03-17 09:45:07 us=949434   management_client_group = '[UNDEF]'
2021-03-17 09:45:07 us=949434   management_flags = 6
2021-03-17 09:45:07 us=949434   shared_secret_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   key_direction = 1
2021-03-17 09:45:07 us=949434   ciphername = 'AES-256-CBC'
2021-03-17 09:45:07 us=949434   ncp_enabled = ENABLED
2021-03-17 09:45:07 us=949434   ncp_ciphers = 'AES-256-GCM:AES-128-GCM:AES-256-CBC'
2021-03-17 09:45:07 us=949434   authname = 'SHA1'
2021-03-17 09:45:07 us=949434   prng_hash = 'SHA1'
2021-03-17 09:45:07 us=949434   prng_nonce_secret_len = 16
2021-03-17 09:45:07 us=949434   keysize = 0
2021-03-17 09:45:07 us=949434   engine = DISABLED
2021-03-17 09:45:07 us=949434   replay = ENABLED
2021-03-17 09:45:07 us=949434   mute_replay_warnings = DISABLED
2021-03-17 09:45:07 us=949434   replay_window = 64
2021-03-17 09:45:07 us=949434   replay_time = 15
2021-03-17 09:45:07 us=949434   packet_id_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   test_crypto = DISABLED
2021-03-17 09:45:07 us=949434   tls_server = ENABLED
2021-03-17 09:45:07 us=949434   tls_client = DISABLED
2021-03-17 09:45:07 us=949434   ca_file = '[INLINE]'
2021-03-17 09:45:07 us=949434   ca_path = '[UNDEF]'
2021-03-17 09:45:07 us=949434   dh_file = '-----BEGIN DH PARAMETERS-----
MIIBCAKCAQEA4GT7HOiYPI9lawMU+LiXwp0bP5UEaEqOFue57fbBwCvEVu0vD+Va
7p7i+l36zNE1otjp9ZzZwxGi7WkBV6fNugkNKuUh0qL8BW9FJshsMeLa0YkVj+L6
sMpQN182sA+4uvk8PyGUnEsmGRIybEAWCMAs+rcE4lsCzfJqCaGItMkO+SnEbEf4
mLqqx2ckzW3FPzo0PKvnnm8eLrYzsOIiFR0YSgGto8tsD09ozQaI7j8q2E/qhhqu
zy0WwYSkdTbifUzHy5LkAx3TF9PGsPmyb5YmfulGV9l7uNYkz9yxbv1Foe5Z2dol
9uPK9rxLPYsNkNZwfOjV4dF5GRmzaQIuewIBAg==
-----END DH PARAMETERS-----
'
2021-03-17 09:45:07 us=949434   cert_file = '[INLINE]'
2021-03-17 09:45:07 us=949434   extra_certs_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   priv_key_file = '[INLINE]'
2021-03-17 09:45:07 us=949434   pkcs12_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   cryptoapi_cert = '[UNDEF]'
2021-03-17 09:45:07 us=949434   cipher_list = '[UNDEF]'
2021-03-17 09:45:07 us=949434   cipher_list_tls13 = '[UNDEF]'
2021-03-17 09:45:07 us=949434   tls_cert_profile = '[UNDEF]'
2021-03-17 09:45:07 us=949434   tls_verify = '[UNDEF]'
2021-03-17 09:45:07 us=949434   tls_export_cert = '[UNDEF]'
2021-03-17 09:45:07 us=949434   verify_x509_type = 0
2021-03-17 09:45:07 us=949434   verify_x509_name = '[UNDEF]'
2021-03-17 09:45:07 us=949434   crl_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   ns_cert_type = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_ku[i] = 0
2021-03-17 09:45:07 us=949434   remote_cert_eku = '[UNDEF]'
2021-03-17 09:45:07 us=949434   ssl_flags = 0
2021-03-17 09:45:07 us=949434   tls_timeout = 2
2021-03-17 09:45:07 us=949434   renegotiate_bytes = -1
2021-03-17 09:45:07 us=949434   renegotiate_packets = 0
2021-03-17 09:45:07 us=949434   renegotiate_seconds = 3600
2021-03-17 09:45:07 us=949434   handshake_window = 60
2021-03-17 09:45:07 us=949434   transition_window = 3600
2021-03-17 09:45:07 us=949434   single_session = DISABLED
2021-03-17 09:45:07 us=949434   push_peer_info = DISABLED
2021-03-17 09:45:07 us=949434   tls_exit = DISABLED
2021-03-17 09:45:07 us=949434   tls_crypt_v2_metadata = '[UNDEF]'
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_protected_authentication = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_private_mode = 00000000
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_cert_private = DISABLED
2021-03-17 09:45:07 us=949434   pkcs11_pin_cache_period = -1
2021-03-17 09:45:07 us=949434   pkcs11_id = '[UNDEF]'
2021-03-17 09:45:07 us=949434   pkcs11_id_management = DISABLED
2021-03-17 09:45:07 us=949434   server_network = 10.10.1.0
2021-03-17 09:45:07 us=949434   server_netmask = 255.255.255.0
2021-03-17 09:45:07 us=949434   server_network_ipv6 = ::
2021-03-17 09:45:07 us=949434   server_netbits_ipv6 = 0
2021-03-17 09:45:07 us=949434   server_bridge_ip = 0.0.0.0
2021-03-17 09:45:07 us=949434   server_bridge_netmask = 0.0.0.0
2021-03-17 09:45:07 us=949434   server_bridge_pool_start = 0.0.0.0
2021-03-17 09:45:07 us=949434   server_bridge_pool_end = 0.0.0.0
2021-03-17 09:45:07 us=949434   push_entry = 'route 10.10.1.1'
2021-03-17 09:45:07 us=949434   push_entry = 'topology net30'
2021-03-17 09:45:07 us=949434   push_entry = 'ping 10'
2021-03-17 09:45:07 us=949434   push_entry = 'ping-restart 120'
2021-03-17 09:45:07 us=949434   ifconfig_pool_defined = ENABLED
2021-03-17 09:45:07 us=949434   ifconfig_pool_start = 10.10.1.4
2021-03-17 09:45:07 us=949434   ifconfig_pool_end = 10.10.1.251
2021-03-17 09:45:07 us=949434   ifconfig_pool_netmask = 0.0.0.0
2021-03-17 09:45:07 us=949434   ifconfig_pool_persist_filename = 'ipp.txt'
2021-03-17 09:45:07 us=949434   ifconfig_pool_persist_refresh_freq = 600
2021-03-17 09:45:07 us=949434   ifconfig_ipv6_pool_defined = DISABLED
2021-03-17 09:45:07 us=949434   ifconfig_ipv6_pool_base = ::
2021-03-17 09:45:07 us=949434   ifconfig_ipv6_pool_netbits = 0
2021-03-17 09:45:07 us=949434   n_bcast_buf = 256
2021-03-17 09:45:07 us=949434   tcp_queue_limit = 64
2021-03-17 09:45:07 us=949434   real_hash_size = 256
2021-03-17 09:45:07 us=949434   virtual_hash_size = 256
2021-03-17 09:45:07 us=949434   client_connect_script = '[UNDEF]'
2021-03-17 09:45:07 us=949434   learn_address_script = '[UNDEF]'
2021-03-17 09:45:07 us=949434   client_disconnect_script = '[UNDEF]'
2021-03-17 09:45:07 us=949434   client_config_dir = '[UNDEF]'
2021-03-17 09:45:07 us=949434   ccd_exclusive = DISABLED
2021-03-17 09:45:07 us=949434   tmp_dir = 'C:\Users\KSERVE~1\AppData\Local\Temp\'
2021-03-17 09:45:07 us=949434   push_ifconfig_defined = DISABLED
2021-03-17 09:45:07 us=949434   push_ifconfig_local = 0.0.0.0
2021-03-17 09:45:07 us=949434   push_ifconfig_remote_netmask = 0.0.0.0
2021-03-17 09:45:07 us=949434   push_ifconfig_ipv6_defined = DISABLED
2021-03-17 09:45:07 us=949434   push_ifconfig_ipv6_local = ::/0
2021-03-17 09:45:07 us=949434   push_ifconfig_ipv6_remote = ::
2021-03-17 09:45:07 us=949434   enable_c2c = DISABLED
2021-03-17 09:45:07 us=949434   duplicate_cn = DISABLED
2021-03-17 09:45:07 us=949434   cf_max = 0
2021-03-17 09:45:07 us=949434   cf_per = 0
2021-03-17 09:45:07 us=949434   max_clients = 1024
2021-03-17 09:45:07 us=949434   max_routes_per_client = 256
2021-03-17 09:45:07 us=949434   auth_user_pass_verify_script = '[UNDEF]'
2021-03-17 09:45:07 us=949434   auth_user_pass_verify_script_via_file = DISABLED
2021-03-17 09:45:07 us=949434   auth_token_generate = DISABLED
2021-03-17 09:45:07 us=949434   auth_token_lifetime = 0
2021-03-17 09:45:07 us=949434   auth_token_secret_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   vlan_tagging = DISABLED
2021-03-17 09:45:07 us=949434   vlan_accept = all
2021-03-17 09:45:07 us=949434   vlan_pvid = 1
2021-03-17 09:45:07 us=949434   client = DISABLED
2021-03-17 09:45:07 us=949434   pull = DISABLED
2021-03-17 09:45:07 us=949434   auth_user_pass_file = '[UNDEF]'
2021-03-17 09:45:07 us=949434   show_net_up = DISABLED
2021-03-17 09:45:07 us=949434   route_method = 3
2021-03-17 09:45:07 us=949434   block_outside_dns = DISABLED
2021-03-17 09:45:07 us=949434   ip_win32_defined = DISABLED
2021-03-17 09:45:07 us=949434   ip_win32_type = 3
2021-03-17 09:45:07 us=949434   dhcp_masq_offset = 0
2021-03-17 09:45:07 us=949434   dhcp_lease_time = 31536000
2021-03-17 09:45:07 us=949434   tap_sleep = 10
2021-03-17 09:45:07 us=949434   dhcp_options = DISABLED
2021-03-17 09:45:07 us=949434   dhcp_renew = DISABLED
2021-03-17 09:45:07 us=949434   dhcp_pre_release = DISABLED
2021-03-17 09:45:07 us=949434   domain = '[UNDEF]'
2021-03-17 09:45:07 us=949434   netbios_scope = '[UNDEF]'
2021-03-17 09:45:07 us=949434   netbios_node_type = 0
2021-03-17 09:45:07 us=949434   disable_nbt = DISABLED
2021-03-17 09:45:07 us=949434 OpenVPN 2.5.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 24 2021
2021-03-17 09:45:07 us=949434 Windows version 10.0 (Windows 10 or greater) 64bit
2021-03-17 09:45:07 us=949434 library versions: OpenSSL 1.1.1j  16 Feb 2021, LZO 2.10
Enter Management Password:
2021-03-17 09:45:07 us=949434 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
2021-03-17 09:45:07 us=949434 Need hold release from management interface, waiting...
2021-03-17 09:45:08 us=418170 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
2021-03-17 09:45:08 us=527540 MANAGEMENT: CMD 'state on'
2021-03-17 09:45:08 us=527540 MANAGEMENT: CMD 'log all on'
2021-03-17 09:45:08 us=715028 MANAGEMENT: CMD 'echo all on'
2021-03-17 09:45:08 us=715028 MANAGEMENT: CMD 'bytecount 5'
2021-03-17 09:45:08 us=715028 MANAGEMENT: CMD 'hold off'
2021-03-17 09:45:08 us=715028 MANAGEMENT: CMD 'hold release'
2021-03-17 09:45:08 us=730652 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
2021-03-17 09:45:08 us=730652 Diffie-Hellman initialized with 2048 bit key
2021-03-17 09:45:08 us=730652 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-03-17 09:45:08 us=730652 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-03-17 09:45:08 us=730652 TLS-Auth MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-03-17 09:45:08 us=730652 interactive service msg_channel=656
2021-03-17 09:45:08 us=730652 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=16 HWADDR=e0:3f:49:6c:f1:bb
2021-03-17 09:45:08 us=730652 open_tun
2021-03-17 09:45:08 us=730652 tap-windows6 device [OpenVPN TAP-Windows6] opened
2021-03-17 09:45:08 us=730652 TAP-Windows Driver Version 9.24 
2021-03-17 09:45:08 us=730652 TAP-Windows MTU=1500
2021-03-17 09:45:08 us=730652 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.1.1/255.255.255.252 on interface {28301CE2-0569-4ECE-8AD1-E76952A75F89} [DHCP-serv: 10.10.1.2, lease-time: 31536000]
2021-03-17 09:45:08 us=730652 Sleeping for 10 seconds...
2021-03-17 09:45:18 us=790089 Successful ARP Flush on interface [10] {28301CE2-0569-4ECE-8AD1-E76952A75F89}
2021-03-17 09:45:18 us=790089 do_ifconfig, ipv4=1, ipv6=0
2021-03-17 09:45:18 us=790089 MANAGEMENT: >STATE:1615999518,ASSIGN_IP,,10.10.1.1,,,,
2021-03-17 09:45:18 us=790089 IPv4 MTU set to 1500 on interface 10 using service
2021-03-17 09:45:18 us=790089 MANAGEMENT: >STATE:1615999518,ADD_ROUTES,,,,,,
2021-03-17 09:45:18 us=790089 C:\Windows\system32\route.exe ADD 10.10.1.0 MASK 255.255.255.0 10.10.1.2
2021-03-17 09:45:18 us=790089 Route addition via service succeeded
2021-03-17 09:45:18 us=790089 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
2021-03-17 09:45:18 us=790089 Could not determine IPv4/IPv6 protocol. Using AF_INET6
2021-03-17 09:45:18 us=790089 Socket Buffers: R=[65536->65536] S=[65536->65536]
2021-03-17 09:45:18 us=790089 setsockopt(IPV6_V6ONLY=0)
2021-03-17 09:45:18 us=790089 UDPv6 link local (bound): [AF_INET6][undef]:1194
2021-03-17 09:45:18 us=790089 UDPv6 link remote: [AF_UNSPEC]
2021-03-17 09:45:18 us=790089 MULTI: multi_init called, r=256 v=256
2021-03-17 09:45:18 us=790089 IFCONFIG POOL IPv4: base=10.10.1.4 size=62
2021-03-17 09:45:18 us=790089 IFCONFIG POOL LIST
2021-03-17 09:45:18 us=790089 Initialization Sequence Completed
2021-03-17 09:45:18 us=790089 MANAGEMENT: >STATE:1615999518,CONNECTED,SUCCESS,10.10.1.1,,,,

EasyRSA Status

EasyRSA Shell
# ./easytls status
Easy-RSA: Valid X509 certificates:
  Common-Name RoyerServer         Serial-number 49A6B4B182D496A5F517C820332538C1
  Common-Name RoyerClient         Serial-number 3BAB350687DF5414848BB78D95056384
Easy-RSA: Revoked X509 certificates:
  No Revoked X509 certificates found
Easy-TLS: Known inline files:
  Common-Name 1ab25bbfe8bc2072cc5416d01c569ba08a1ecc74    Serial-number 49A6B4B182D496A5F517C820332538C1
  Common-Name 896ad133372195e7cb8c02ddfc7ec21c21f27793    Serial-number 3BAB350687DF5414848BB78D95056384
Easy-TLS: Invalid inline files:
  No invalid inline files found
Easy-TLS: .inline serial number mismatches:
  No mismatches found

Client Config

client
dev tun
proto udp
remote royerserver.duckdns.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun

cipher AES-256-CBC

key-direction 1

<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
02ba7ba454445828ae6807cc61fd501e
26a3d97daa9ef4695a9d60c4ce3060ac
1f06b1cb2a6611e89ce212a455a9c277
497365f0ce270309d60ce4b00bf65546
3f142da208f8f92186d60ea1398dc2d8
3e7794244f28dee522fcb2f1e2532ce6
ea629ef87339a40d4d2bd267e87c47d2
2f76e82d2d2832d1b8d71ec50abec008
6422fd79dc5ea1f8c5db5735236cbcb0
a6b9ecf0f4f93d6a7fe6a292cba2658a
6810aaed8570e6c3b0f5a41c81a6ea29
835908ee8e0dd53cf1d82aa7e622c8a4
46cc7357b302d5f83bd95bbeb3a70261
1e9c9d3c75a9288ab8032f02fe645e0a
cf83ebd888c895e48e7f53b6fe79a9b6
5b564675a5be629d3d976ea9ced68df5
-----END OpenVPN Static key V1-----
</tls-auth>

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>

<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ab:35:06:87:df:54:14:84:8b:b7:8d:95:05:63:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Royer
Validity
Not Before: Mar 17 16:15:56 2021 GMT
Not After : Jun 20 16:15:56 2023 GMT
Subject: CN=RoyerClient
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:89:47:e8:19:77:04:46:76:cd:59:08:a4:
4a:48:5f:e1:ee:98:a0:8e:03:9f:6d:ed:17:81:90:
75:47:ac:5a:b8:a9:f2:cd:f8:50:9b:59:1d:6f:01:
68:79:ce:62:ac:c4:ff:e4:7d:27:31:06:1f:ef:5f:
e2:da:4b:53:88:c0:0f:e3:66:c1:7e:eb:7a:dd:3f:
ea:eb:a0:34:c0:d7:de:59:f6:2f:19:d5:f7:49:15:
cf:93:d8:d7:34:ca:62:a7:98:f7:15:d5:a4:9f:be:
6b:44:7e:f5:bf:a7:a5:dd:31:0b:e8:40:de:8e:af:
5d:93:d0:6d:c6:38:1a:6d:59:0d:99:67:2a:9f:39:
6f:00:5c:62:c5:1a:75:b5:5d:b2:a0:08:98:8b:6b:
53:f9:76:a3:b1:20:9f:1b:3e:5d:46:ba:7c:fd:04:
16:5a:3c:6e:ef:0d:e5:01:72:8e:d6:cc:b3:b9:20:
09:b5:16:f2:f8:57:40:57:fe:d5:6a:8d:02:67:b1:
e3:2e:9e:79:36:d6:19:53:e8:b0:77:81:25:17:4a:
e2:0e:3d:ae:69:01:4b:a0:81:db:78:c7:55:f2:68:
85:e5:41:b7:d5:51:fa:dd:d1:d5:ef:bb:15:d9:01:
b0:e1:cb:fd:d6:3c:9c:2d:66:e6:2c:90:b7:92:54:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
89:63:4B:86:75:F9:2C:C8:36:0D:FE:7D:71:FD:5C:5E:63:B2:78:F2
X509v3 Authority Key Identifier:
keyid:79:03:54:2F:FB:AE:F2:02:B0:87:4A:3C:78:1C:0A:EF:D1:8B:5A:C4
DirName:/CN=Royer
serial:3A:87:8A:EC:96:FD:6B:9B:6F:9F:A9:11:FD:D3:CC:A1:58:F0:33:41

X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
4c:ae:8b:14:e1:1d:8d:4a:c7:28:92:09:30:33:a5:42:cd:b5:
31:ab:b0:d0:c2:47:1e:01:85:5c:e9:b1:a9:41:34:34:97:7f:
90:84:25:93:dc:d8:da:6d:35:a3:a3:99:61:83:0b:01:17:3b:
93:fe:0c:f1:84:29:08:bc:58:69:bd:3f:40:39:67:53:31:e8:
07:17:26:e5:07:a5:9a:1a:b2:c8:2d:70:be:77:84:66:40:cf:
d5:f8:b1:27:70:2d:b3:f8:79:c5:4d:e9:da:65:82:b6:60:7f:
78:f6:99:fe:55:24:30:78:65:48:61:36:1c:c7:e4:cc:22:e1:
93:1c:36:ad:a5:5b:f6:53:70:1e:c4:06:8b:fc:40:74:a9:1e:
50:cc:21:92:7e:49:58:4b:41:bf:33:00:38:8c:86:2e:c0:78:
f6:e1:71:03:10:51:b7:8c:6c:e0:19:cc:20:db:cd:9b:42:90:
66:88:f2:81:74:4a:42:5c:16:24:de:df:68:4a:0b:7c:88:e2:
3f:d2:ab:e9:97:75:42:0f:b1:1a:73:32:c6:af:a8:12:73:ac:
ae:68:cc:66:60:e4:3b:ae:27:55:d3:b3:e6:98:c5:69:9d:00:
17:f9:61:e0:09:1f:97:21:02:a8:61:f4:d5:51:ba:19:62:c3:
8e:63:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC9xYlH6Bl3BEZ2
zVkIpEpIX+HumKCOA59t7ReBkHVHrFq4qfLN+FCbWR1vAWh5zmKsxP/kfScxBh/v
X+LaS1OIwA/jZsF+63rdP+rroDTA195Z9i8Z1fdJFc+T2Nc0ymKnmPcV1aSfvmtE
fvW/p6XdMQvoQN6Or12T0G3GOBptWQ2ZZyqfOW8AXGLFGnW1XbKgCJiLa1P5dqOx
IJ8bPl1Gunz9BBZaPG7vDeUBco7WzLO5IAm1FvL4V0BX/tVqjQJnseMunnk21hlT
6LB3gSUXSuIOPa5pAUuggdt4x1XyaIXlQbfVUfrd0dXvuxXZAbDhy/3WPJwtZuYs
kLeSVHt3AgMBAAECggEAMa14Vn6HzAQufgMbf4uidnfDKTaDMSn5nkkmkiBC01Rn
G1hB23FZiJE3h0uTEe/ZHOklI6cvj0HPMlajiAmYAIBmqFzJ4nO6YhjNYok5xhG8
f0hW5CiC53ryL/3fuE4SrVT5uZmH0tmCMxgZNOaqINEqEM6KdEer83nogq9FG8J0
D3v0LRcphb3H2FgU9IoHiRpQYShozCe3V2VRnmHaANuJBvOb6Sz9BuFM2gSzpk7b
va1Chno85Ac+Zrt62qXeYGgQHl48wh3dLui7ugkNMN3pniir13Ek1Z5nQSna4VCx
vquS/tgyakOLj5WZxOT/emSiR+CQCT08HfqEPOBSwQKBgQD2qznQLXQHobvTVQz+
9ctSRImmNPuCiFjd6P28//53fWkSzaHvpdfXvc/6GvtG3XMSHPcWVM0BHxJoZfZB
2X4csptT6VqUOaCdoLUQT1a7FYb68GzuXyIRifGu3Gl+FM3qcHyj+5bzbjyeU/hm
zGF/lT2DR0nqRzQjZF+yIHeunwKBgQDE809hWkOaoLY0BjpFFDlSSLn0nRhYvsMd
W1DjICbh/FP0BroHPNNHNoTzJbYqvexuoPrPJlIhn+g7Wv7xbGY0dgWKdZO1thT2
w6WW7HdsL8w40+NXwz8zTV4knn+veDN7LLUOcUoU1C/XKpNU0vxngSO/T5O7uISx
EQfdC5v8KQKBgC9FCtQxEa4wuTy7bL0jPy5pwfMe7h/KnzUPZCim6g3d85fN3j19
i4plboigSQ0AfP+4m0UlRQ/082McPv/JfRhkxc1jx57mGDh8xpX0jktVycMm9ckM
ZAv2YmE/DdxCgl9t5QTLvtaxhl5U+yJAAmMfp2UT8T87G+u4XXpWLHlDAoGAdgjQ
AStkqs44hHNbBr15IRxe/gAMcFtbekOY9ZX2V6eu9Of3I5FLmjlNcp+eTn1mrmKi
DfYMcQRx3OjLNAtgMX6uEW4n6VZHuCBHJG1xoRAAV+p9LMLiJK/whQfMxG/IgsCn
fhFdcaA9T7m/dK3CAZI+x1A83NtYAvqO+OYVRQkCgYEA4ntJCiI2jYAZOt7ox8jy
bAacpYzMyZ/ZQy7JOYZ+v6J9IpBAubz+c/Mo8gDr90vNBnEVwT70S7ocyRrQFt7G
1el1A9tfxpf97wMSTEVX00Ruyx5VoDbOxu0qpUOiosHS3LxtifmW62xBg4LJnCoy
Jezzwd7dkAO2vrPp276OmGk=
-----END PRIVATE KEY-----
</key>
verb 4

Client Log

1616000360.412773 1 OpenVPN 2.4.9 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Dec 14 2020
1616000360.426892 1 library versions: OpenSSL 1.1.1i  8 Dec 2020, LZO 2.10
1616000360.445365 28000003 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:55794
1616000360.445453 28000003 Need hold release from management interface, waiting...
1616000360.909140 28000003 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:55794
1616000361.014193 46000083 MANAGEMENT: CMD 'pid'
1616000361.014365 46000083 MANAGEMENT: CMD 'auth-retry interact'
1616000361.014480 46000083 MANAGEMENT: CMD 'state on'
1616000361.014664 46000083 MANAGEMENT: CMD 'state'
1616000361.014937 46000083 MANAGEMENT: CMD 'bytecount 1'
1616000361.088199 46000083 MANAGEMENT: CMD 'hold release'
1616000361.107432 40 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
1616000361.107485 40 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
1616000361.125289 14000002 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
1616000361.125374 14000002 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
1616000361.133556 28000003 MANAGEMENT: >STATE:1616000361,RESOLVE,,,,,,
1616000361.265166 1 TCP/UDP: Preserving recently used remote address: [AF_INET]12.171.254.18:1194
1616000361.265465 2b000003 Socket Buffers: R=[196724->196724] S=[9216->9216]
1616000361.265513 1 UDP link local: (not bound)
1616000361.265566 1 UDP link remote: [AF_INET]12.171.254.18:1194
1616000361.265835 28000003 MANAGEMENT: >STATE:1616000361,WAIT,,,,,,
1616000361.396517 28000003 MANAGEMENT: >STATE:1616000361,AUTH,,,,,,
1616000361.396647 14000003 TLS: Initial packet from [AF_INET]12.171.254.18:1194, sid=689768a3 71bc948b
1616000361.396718 3000021 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]12.171.254.18:1194
1616000363.597244 28000003 MANAGEMENT: >STATE:1616000363,AUTH,,,,,,
1616000363.597343 14000003 TLS: Initial packet from [AF_INET]12.171.254.18:1194, sid=689768a3 71bc948b
1616000363.597398 3000021 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]12.171.254.18:1194
1616000368.043512 28000003 MANAGEMENT: >STATE:1616000368,AUTH,,,,,,
1616000368.043681 14000003 TLS: Initial packet from [AF_INET]12.171.254.18:1194, sid=689768a3 71bc948b
1616000368.043741 3000021 TLS Error: cannot locate HMAC in incoming packet from [AF_INET]12.171.254.18:1194
1616000371.817539 1000021 event_wait : Interrupted system call (code=4)
1616000371.824897 1 SIGTERM[hard,] received, process exiting
1616000371.824964 28000003 MANAGEMENT: >STATE:1616000371,EXITING,SIGTERM,,,,,

Hopefully this is easier to understand, before i attempted this i deleted everything i had and started from a clean slate.
I used these topics as references to setting up the inline files
https://forums.openvpn.net/viewtopic.php?t=20860
https://forums.openvpn.net/viewtopic.php?t=26453

The server runs fine off the inlines which tells me i understand the setup, and the client is obviously on but not authorizing on the connection.
I'm using tunnelblick and my Clientconfig is in a folder on my Mac Desktop with the following contents
ca.crt
clientinline.ovpn
royerclient.crt
royerclient.inline
royerclient.key
tls-auth.key

I appreciate your patience and help but i am stuck again.

Mythic1049

I added to get ride of the "WARNING: No server certificate verification method has been enabled. " Thinking if I have it disabled that's why it's not seeing the HMAC correctly but that didn't solve anything.

remote-cert-tls server
tls-auth ta.key 1

I might as well add, my ultimatum here.
I'm trying to use openvpn for remote desktop connections from home to work.

TinCanTech

First of all, you did not use Easy-TLS to create your inline files and if you did then you also edited them.

Second, If you created them on Windows, which it looks very much like you did, and then transferred them to a Mac then my guess would be that the line endings have changed from CRLF to NL. This changes the keys ..

Try to find out if the line endings have been changed.

If they have then you need to find a way to transfer the files without the Line endings changing.

If the line endings have not changed then the only thing that I can imagine is that you somehow corrupted the keys when you edited the files.

For testing purposes, you can try running without TLS-AUTH key on both server and client to see if they can connect.

FTR, Easy-TLS names the TLS-AUTH key file as tls-auth.key not ta.key, so maybe you are simply using the wrong key.

Mythic1049

TinCanTech wrote First of all, you did not use Easy-TLS to create your inline files and if you did then you also edited them.

Second, If you created them on Windows, which it looks very much like you did, and then transferred them to a Mac then my guess would be that the line endings have changed from CRLF to NL. This changes the keys ..

Try to find out if the line endings have been changed.

If they have then you need to find a way to transfer the files without the Line endings changing.

If the line endings have not changed then the only thing that I can imagine is that you somehow corrupted the keys when you edited the files.

For testing purposes, you can try running without TLS-AUTH key on both server and client to see if they can connect.

FTR, Easy-TLS names the TLS-AUTH key file as tls-auth.key not ta.key, so maybe you are simply using the wrong key.

Appreciate the quick reply, I don't understand what makes you think I'm not using Easy-TLS. I'm running the CMD prompt on my windows desktop(Server) I ran the EasyTLS commands you posted, letter for letter i did the EXACT same commands.

How do i cross reference the line endings? I have the ClientConfig open in TextEditor on both my Windows Desktop AND my mac laptop. The HEX and DEC values all look the same. Nothing looks different.

I didn't "edit" anything, I copy pasted everything between <ca></ca> <crt></crt> I didn't remove anything or add anything extra.

I changed "ta.key 1" in my client config to "tls-auth.key 1".