aen
Hello!
I'm newbie in openvpn. I set up a mikrotik router as vpn server and I want to use client side with win10. In win 10 I use kaspersky internet security.
First I've several issues but I checked logs and found solutions. But now there is a problem which I cannot identify. Please help me:
2021-05-29 10:15:03 OpenVPN 2.5.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Feb 24 2021
2021-05-29 10:15:03 Windows version 10.0 (Windows 10 or greater) 64bit
2021-05-29 10:15:03 library versions: OpenSSL 1.1.1j 16 Feb 2021, LZO 2.10
Enter Management Password:
2021-05-29 10:15:03 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
2021-05-29 10:15:03 Need hold release from management interface, waiting...
2021-05-29 10:15:04 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
2021-05-29 10:15:04 MANAGEMENT: CMD 'state on'
2021-05-29 10:15:04 MANAGEMENT: CMD 'log all on'
2021-05-29 10:15:04 MANAGEMENT: CMD 'echo all on'
2021-05-29 10:15:04 MANAGEMENT: CMD 'bytecount 5'
2021-05-29 10:15:04 MANAGEMENT: CMD 'hold off'
2021-05-29 10:15:04 MANAGEMENT: CMD 'hold release'
2021-05-29 10:15:12 MANAGEMENT: CMD 'username "Auth" "ket"'
2021-05-29 10:15:12 MANAGEMENT: CMD 'password [...]'
2021-05-29 10:15:12 MANAGEMENT: CMD 'password [...]'
2021-05-29 10:15:12 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2021-05-29 10:15:12 MANAGEMENT: >STATE:1622276112,RESOLVE,,,,,,
2021-05-29 10:15:12 TCP/UDP: Preserving recently used remote address: [AF_INET]222.45.89.244:1194
2021-05-29 10:15:12 Socket Buffers: R=[65536->65536] S=[65536->65536]
2021-05-29 10:15:12 Attempting to establish TCP connection with [AF_INET]222.45.89.244:1194 [nonblock]
2021-05-29 10:15:12 MANAGEMENT: >STATE:1622276112,TCP_CONNECT,,,,,,
2021-05-29 10:15:12 TCP connection established with [AF_INET]222.45.89.244:1194
2021-05-29 10:15:12 TCP_CLIENT link local: (not bound)
2021-05-29 10:15:12 TCP_CLIENT link remote: [AF_INET]222.45.89.244:1194
2021-05-29 10:15:12 MANAGEMENT: >STATE:1622276112,WAIT,,,,,,
2021-05-29 10:15:12 MANAGEMENT: >STATE:1622276112,AUTH,,,,,,
2021-05-29 10:15:12 TLS: Initial packet from [AF_INET]222.45.89.244:1194, sid=d0460ba5 0b72641a
2021-05-29 10:15:12 VERIFY OK: depth=1, CN=ca
2021-05-29 10:15:12 VERIFY KU OK
2021-05-29 10:15:12 Validating certificate extended key usage
2021-05-29 10:15:12 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-05-29 10:15:12 VERIFY EKU OK
2021-05-29 10:15:12 VERIFY OK: depth=0, CN=server
2021-05-29 10:15:12 Connection reset, restarting [0]
2021-05-29 10:15:12 SIGUSR1[soft,connection-reset] received, process restarting
2021-05-29 10:15:12 MANAGEMENT: >STATE:1622276112,RECONNECTING,connection-reset,,,,,
2021-05-29 10:15:12 Restart pause, 5 second(s)
2021-05-29 10:15:17 MANAGEMENT: >STATE:1622276117,RESOLVE,,,,,,
2021-05-29 10:15:17 TCP/UDP: Preserving recently used remote address: [AF_INET]222.45.89.244:1194
2021-05-29 10:15:17 Socket Buffers: R=[65536->65536] S=[65536->65536]
2021-05-29 10:15:17 Attempting to establish TCP connection with [AF_INET]222.45.89.244:1194 [nonblock]
2021-05-29 10:15:17 MANAGEMENT: >STATE:1622276117,TCP_CONNECT,,,,,,
2021-05-29 10:15:17 TCP connection established with [AF_INET]222.45.89.244:1194
2021-05-29 10:15:17 TCP_CLIENT link local: (not bound)
2021-05-29 10:15:17 TCP_CLIENT link remote: [AF_INET]222.45.89.244:1194
2021-05-29 10:15:17 MANAGEMENT: >STATE:1622276117,WAIT,,,,,,
2021-05-29 10:15:17 MANAGEMENT: >STATE:1622276117,AUTH,,,,,,
2021-05-29 10:15:17 TLS: Initial packet from [AF_INET]222.45.89.244:1194, sid=eb8f3ce1 283b2d4c
2021-05-29 10:15:17 VERIFY OK: depth=1, CN=ca
2021-05-29 10:15:17 VERIFY KU OK
2021-05-29 10:15:17 Validating certificate extended key usage
2021-05-29 10:15:17 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-05-29 10:15:17 VERIFY EKU OK
2021-05-29 10:15:17 VERIFY OK: depth=0, CN=server
2021-05-29 10:15:18 Connection reset, restarting [0]
........and it's a never ending cycle.
My config file:
client
proto tcp-client
port 1194
remote XXXXXXXXXXX.sn.mynetname.net
remote-cert-tls server
dev tun
nobind
persist-key
tls-client
ca ca.crt
cert client.crt
key client.key
ping exit
verb 3
data-ciphers-fallback AES-256-CBC
auth SHA1
pull
auth-user-pass
