Hello again ! Now, i am facing a very weird issue. My connected devices are ok for 4-7 days, and... then, they disconnect. And i need a reboot to make them work again. The logs says: Mon Jul 26 23:43:57 2021 gate_******/92.184.***.***:60371 SIGUSR1[soft,ping-restart] received, client-instance restarting Mon Jul 26 23:43:58 2021 [gate_******] Inactivity timeout (--ping-restart), restarting Mon Jul 26 23:43:58 2021 SIGUSR1[soft,ping-restart] received, client-instance restarting Tue Jul 27 03:18:27 2021 tls-crypt unwrap error: packet too short Tue Jul 27 03:18:27 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:*******:59555 Tue Jul 27 06:36:48 2021 tls-crypt unwrap error: packet too short Tue Jul 27 06:36:48 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:*********:58319 Tue Jul 27 09:25:09 2021 tls-crypt unwrap error: packet too short Tue Jul 27 09:25:09 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:*************:54677 i read some advices about switching from UDP to TCP. Do you think that might help ?

[quote=tontonjab post_id=101052 time=1627402102 user_id=54354] i need a reboot to make them work again. [/quote]Well, you should not because Openvpn recovers from that problem easily. You need to give more details. https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

Thx you, and sorry for the lack of infos: SERVEUR Linux ns3033356 5.8.0-43-generic #49-Ubuntu SMP Fri Feb 5 03:01:28 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux [code]eno1: flags=4163 mtu 1500 inet x.x.x.x netmask 255.255.255.0 broadcast 176.31.182.255 inet6 2001:41d0:8:ed26::1 prefixlen 56 scopeid 0x0 inet6 fe80::4e72:b9ff:fe43:1547 prefixlen 64 scopeid 0x20 ether 4c:72:b9:43:15:47 txqueuelen 1000 (Ethernet) RX packets 152312962 bytes 41359528322 (41.3 GB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 71303444 bytes 38301302236 (38.3 GB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 20 memory 0xfe500000-fe520000 lo: flags=73 mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10 loop txqueuelen 1000 (Local Loopback) RX packets 1060886816 bytes 254660108579 (254.6 GB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1060886816 bytes 254660108579 (254.6 GB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 tun0: flags=4305 mtu 1500 inet 10.8.0.1 netmask 255.255.255.0 destination 10.8.0.1 inet6 fe80::d11e:e61a:e94f:8f7d prefixlen 64 scopeid 0x20 inet6 fd42:42:42:42::1 prefixlen 112 scopeid 0x0 unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC) RX packets 234110 bytes 21804939 (21.8 MB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 610957 bytes 791619725 (791.6 MB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0[/code] [oconf=server] port 1194 proto udp6 dev tun user nobody group nogroup persist-key persist-tun duplicate-cn keepalive 10 120 topology subnet server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "dhcp-option DNS 94.140.14.14" push "dhcp-option DNS 94.140.15.15" push "redirect-gateway def1 bypass-dhcp" server-ipv6 fd42:42:42:42::/112 tun-ipv6 push tun-ipv6 push "route-ipv6 2000::/3" push "redirect-gateway ipv6" dh none ecdh-curve prime256v1 tls-crypt tls-crypt.key crl-verify crl.pem ca ca.crt cert server_XL98c6RoSdvOVX3E.crt key server_XL98c6RoSdvOVX3E.key auth SHA256 cipher AES-128-GCM ncp-ciphers AES-128-GCM tls-server tls-version-min 1.2 tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 client-config-dir /etc/openvpn/ccd status /var/log/openvpn/status.log client-to-client management 127.0.0.1 17562 verb 4 mute 20 status /var/log/openvpn-status.log log-append /var/log/openvpn.log [/oconf] [code] Mon Jul 26 12:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_LZO=1 Mon Jul 26 12:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_COMP_STUB=1 Mon Jul 26 12:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_COMP_STUBv2=1 Mon Jul 26 12:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_TCPNL=1 Mon Jul 26 12:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 12:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 12:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Mon Jul 26 13:56:44 2021 VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB Mon Jul 26 13:56:44 2021 VERIFY OK: depth=0, CN=gate_07062021_0000002 Mon Jul 26 13:56:44 2021 peer info: IV_VER=2.4.4 Mon Jul 26 13:56:44 2021 peer info: IV_PLAT=linux Mon Jul 26 13:56:44 2021 peer info: IV_PROTO=2 Mon Jul 26 13:56:44 2021 peer info: IV_LZ4=1 Mon Jul 26 13:56:44 2021 peer info: IV_LZ4v2=1 Mon Jul 26 13:56:44 2021 peer info: IV_LZO=1 Mon Jul 26 13:56:44 2021 peer info: IV_COMP_STUB=1 Mon Jul 26 13:56:44 2021 peer info: IV_COMP_STUBv2=1 Mon Jul 26 13:56:44 2021 peer info: IV_TCPNL=1 Mon Jul 26 13:56:44 2021 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 13:56:44 2021 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 13:56:44 2021 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 TLS: soft reset sec=0 bytes=26532/-1 pkts=697/0 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 VERIFY OK: depth=0, CN=gate_07062021_0000002 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_VER=2.4.4 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_PLAT=linux Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_PROTO=2 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_LZ4=1 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_LZ4v2=1 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_LZO=1 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_COMP_STUB=1 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_COMP_STUBv2=1 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_TCPNL=1 Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 13:57:53 2021 gate_07062021_0000002/x.x.x.x:60371 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Mon Jul 26 14:56:44 2021 VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB Mon Jul 26 14:56:44 2021 VERIFY OK: depth=0, CN=gate_07062021_0000002 Mon Jul 26 14:56:44 2021 peer info: IV_VER=2.4.4 Mon Jul 26 14:56:44 2021 peer info: IV_PLAT=linux Mon Jul 26 14:56:44 2021 peer info: IV_PROTO=2 Mon Jul 26 14:56:44 2021 peer info: IV_LZ4=1 Mon Jul 26 14:56:44 2021 peer info: IV_LZ4v2=1 Mon Jul 26 14:56:44 2021 peer info: IV_LZO=1 Mon Jul 26 14:56:44 2021 peer info: IV_COMP_STUB=1 Mon Jul 26 14:56:44 2021 peer info: IV_COMP_STUBv2=1 Mon Jul 26 14:56:44 2021 peer info: IV_TCPNL=1 [/code] [SAME LOGS UNDRED TIMES] [code] Mon Jul 26 22:56:44 2021 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 22:56:44 2021 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 22:56:44 2021 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Mon Jul 26 22:57:54 2021 gate_07062021_0000002/x.x.x.x:60371 TLS: tls_process: killed expiring key Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 VERIFY OK: depth=0, CN=gate_07062021_0000002 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_VER=2.4.4 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_PLAT=linux Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_PROTO=2 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_LZ4=1 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_LZ4v2=1 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_LZO=1 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_COMP_STUB=1 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_COMP_STUBv2=1 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 peer info: IV_TCPNL=1 Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 22:57:55 2021 gate_07062021_0000002/x.x.x.x:60371 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Jul 26 22:57:56 2021 gate_07062021_0000002/x.x.x.x:60371 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Mon Jul 26 23:43:57 2021 gate_07062021_0000002/x.x.x.x:60371 [gate_07062021_0000002] Inactivity timeout (--ping-restart), restarting Mon Jul 26 23:43:57 2021 gate_07062021_0000002/x.x.x.x:60371 SIGUSR1[soft,ping-restart] received, client-instance restarting Mon Jul 26 23:43:58 2021 [gate_07062021_0000002] Inactivity timeout (--ping-restart), restarting Mon Jul 26 23:43:58 2021 SIGUSR1[soft,ping-restart] received, client-instance restarting Tue Jul 27 03:18:27 2021 tls-crypt unwrap error: packet too short Tue Jul 27 03:18:27 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:146.88.240.4:59555 Tue Jul 27 06:36:48 2021 tls-crypt unwrap error: packet too short Tue Jul 27 06:36:48 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:192.241.209.207:58319 Tue Jul 27 09:25:09 2021 tls-crypt unwrap error: packet too short Tue Jul 27 09:25:09 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:185.200.118.35:54677 Tue Jul 27 21:58:46 2021 tls-crypt unwrap error: packet too short Tue Jul 27 21:58:46 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:185.200.118.37:59175 Wed Jul 28 03:18:28 2021 tls-crypt unwrap error: packet too short Wed Jul 28 03:18:28 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:146.88.240.4:36938 Wed Jul 28 07:37:29 2021 tls-crypt unwrap error: packet too short Wed Jul 28 07:37:29 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:212.60.13.11:42126 Wed Jul 28 08:36:36 2021 tls-crypt unwrap error: packet too short Wed Jul 28 08:36:36 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:192.241.196.229:52913 Wed Jul 28 08:44:08 2021 tls-crypt unwrap error: packet too short Wed Jul 28 08:44:08 2021 TLS Error: tls-crypt unwrapping failed from [AF_INET6]::ffff:185.200.118.80:43437 Wed Jul 28 09:49:13 2021 176.176.203.106:35961 TLS: Initial packet from [AF_INET6]::ffff:176.176.203.106:35961, sid=827c0065 066cbd16 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB Wed Jul 28 09:49:14 2021 176.176.203.106:35961 VERIFY OK: depth=0, CN=gate-17072021-TEST Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_VER=2.4.4 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_PLAT=linux Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_PROTO=2 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_NCP=2 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_LZ4=1 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_LZ4v2=1 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_LZO=1 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_COMP_STUB=1 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_COMP_STUBv2=1 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 peer info: IV_TCPNL=1 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Wed Jul 28 09:49:14 2021 176.176.203.106:35961 [gate-17072021-TEST] Peer Connection Initiated with [AF_INET6]::ffff:176.176.203.106:35961 Wed Jul 28 09:49:14 2021 gate-17072021-TEST/176.176.203.106:35961 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=fd42:42:42:42::1000 Wed Jul 28 09:49:14 2021 gate-17072021-TEST/176.176.203.106:35961 MULTI: Learn: 10.8.0.2 -> gate-17072021-TEST/176.176.203.106:35961 Wed Jul 28 09:49:14 2021 gate-17072021-TEST/176.176.203.106:35961 MULTI: primary virtual IP for gate-17072021-TEST/176.176.203.106:35961: 10.8.0.2 Wed Jul 28 09:49:14 2021 gate-17072021-TEST/176.176.203.106:35961 MULTI: Learn: fd42:42:42:42::1000 -> gate-17072021-TEST/176.176.203.106:35961 Wed Jul 28 09:49:14 2021 gate-17072021-TEST/176.176.203.106:35961 MULTI: primary virtual IPv6 for gate-17072021-TEST/176.176.203.106:35961: fd42:42:42:42::1000 Wed Jul 28 09:49:15 2021 gate-17072021-TEST/176.176.203.106:35961 PUSH: Received control message: 'PUSH_REQUEST' Wed Jul 28 09:49:15 2021 gate-17072021-TEST/176.176.203.106:35961 SENT CONTROL [gate-17072021-TEST]: 'PUSH_REPLY,dhcp-option DNS 94.140.14.14,dhcp-option DNS 94.140.15.15,redirect-gateway def1 bypass-dhcp,tun-ipv6,route-ipv6 2000::/3,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig-ipv6 fd42:42:42:42::1000/112 fd42:42:42:42::1,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-128-GCM' (status=1) Wed Jul 28 09:49:15 2021 gate-17072021-TEST/176.176.203.106:35961 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Wed Jul 28 09:49:15 2021 gate-17072021-TEST/176.176.203.106:35961 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Wed Jul 28 09:49:33 2021 176.176.203.106:35221 TLS: Initial packet from [AF_INET6]::ffff:176.176.203.106:35221, sid=a0fb4c35 113b71ce Wed Jul 28 09:49:33 2021 176.176.203.106:35221 VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB Wed Jul 28 09:49:33 2021 176.176.203.106:35221 VERIFY OK: depth=0, CN=gate-17072021-TEST Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_VER=2.4.4 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_PLAT=linux Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_PROTO=2 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_NCP=2 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_LZ4=1 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_LZ4v2=1 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_LZO=1 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_COMP_STUB=1 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_COMP_STUBv2=1 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 peer info: IV_TCPNL=1 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Wed Jul 28 09:49:33 2021 176.176.203.106:35221 [gate-17072021-TEST] Peer Connection Initiated with [AF_INET6]::ffff:176.176.203.106:35221 Wed Jul 28 09:49:33 2021 gate-17072021-TEST/176.176.203.106:35221 MULTI_sva: pool returned IPv4=10.8.0.3, IPv6=fd42:42:42:42::1001 Wed Jul 28 09:49:33 2021 gate-17072021-TEST/176.176.203.106:35221 MULTI: Learn: 10.8.0.3 -> gate-17072021-TEST/176.176.203.106:35221 Wed Jul 28 09:49:33 2021 gate-17072021-TEST/176.176.203.106:35221 MULTI: primary virtual IP for gate-17072021-TEST/176.176.203.106:35221: 10.8.0.3 Wed Jul 28 09:49:33 2021 gate-17072021-TEST/176.176.203.106:35221 MULTI: Learn: fd42:42:42:42::1001 -> gate-17072021-TEST/176.176.203.106:35221 Wed Jul 28 09:49:33 2021 gate-17072021-TEST/176.176.203.106:35221 MULTI: primary virtual IPv6 for gate-17072021-TEST/176.176.203.106:35221: fd42:42:42:42::1001 Wed Jul 28 09:49:34 2021 gate-17072021-TEST/176.176.203.106:35221 PUSH: Received control message: 'PUSH_REQUEST' Wed Jul 28 09:49:34 2021 gate-17072021-TEST/176.176.203.106:35221 SENT CONTROL [gate-17072021-TEST]: 'PUSH_REPLY,dhcp-option DNS 94.140.14.14,dhcp-option DNS 94.140.15.15,redirect-gateway def1 bypass-dhcp,tun-ipv6,route-ipv6 2000::/3,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig-ipv6 fd42:42:42:42::1001/112 fd42:42:42:42::1,ifconfig 10.8.0.3 255.255.255.0,peer-id 1,cipher AES-128-GCM' (status=1) Wed Jul 28 09:49:34 2021 gate-17072021-TEST/176.176.203.106:35221 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Wed Jul 28 09:49:34 2021 gate-17072021-TEST/176.176.203.106:35221 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Wed Jul 28 09:49:45 2021 176.176.203.106:38597 TLS: Initial packet from [AF_INET6]::ffff:176.176.203.106:38597, sid=d378ac33 d07c7eb4 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB Wed Jul 28 09:49:45 2021 176.176.203.106:38597 VERIFY OK: depth=0, CN=gate-17072021-TEST Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_VER=2.4.4 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_PLAT=linux Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_PROTO=2 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_NCP=2 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_LZ4=1 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_LZ4v2=1 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_LZO=1 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_COMP_STUB=1 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_COMP_STUBv2=1 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 peer info: IV_TCPNL=1 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Wed Jul 28 09:49:45 2021 176.176.203.106:38597 [gate-17072021-TEST] Peer Connection Initiated with [AF_INET6]::ffff:176.176.203.106:38597 Wed Jul 28 09:49:45 2021 gate-17072021-TEST/176.176.203.106:38597 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=fd42:42:42:42::1002 Wed Jul 28 09:49:45 2021 gate-17072021-TEST/176.176.203.106:38597 MULTI: Learn: 10.8.0.4 -> gate-17072021-TEST/176.176.203.106:38597 Wed Jul 28 09:49:45 2021 gate-17072021-TEST/176.176.203.106:38597 MULTI: primary virtual IP for gate-17072021-TEST/176.176.203.106:38597: 10.8.0.4 Wed Jul 28 09:49:45 2021 gate-17072021-TEST/176.176.203.106:38597 MULTI: Learn: fd42:42:42:42::1002 -> gate-17072021-TEST/176.176.203.106:38597 Wed Jul 28 09:49:45 2021 gate-17072021-TEST/176.176.203.106:38597 MULTI: primary virtual IPv6 for gate-17072021-TEST/176.176.203.106:38597: fd42:42:42:42::1002 Wed Jul 28 09:49:47 2021 gate-17072021-TEST/176.176.203.106:38597 PUSH: Received control message: 'PUSH_REQUEST' Wed Jul 28 09:49:47 2021 gate-17072021-TEST/176.176.203.106:38597 SENT CONTROL [gate-17072021-TEST]: 'PUSH_REPLY,dhcp-option DNS 94.140.14.14,dhcp-option DNS 94.140.15.15,redirect-gateway def1 bypass-dhcp,tun-ipv6,route-ipv6 2000::/3,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig-ipv6 fd42:42:42:42::1002/112 fd42:42:42:42::1,ifconfig 10.8.0.4 255.255.255.0,peer-id 2,cipher AES-128-GCM' (status=1) Wed Jul 28 09:49:47 2021 gate-17072021-TEST/176.176.203.106:38597 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Wed Jul 28 09:49:47 2021 gate-17072021-TEST/176.176.203.106:38597 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Wed Jul 28 09:53:27 2021 gate-17072021-TEST/176.176.203.106:35961 [gate-17072021-TEST] Inactivity timeout (--ping-restart), restarting Wed Jul 28 09:53:27 2021 gate-17072021-TEST/176.176.203.106:35961 SIGUSR1[soft,ping-restart] received, client-instance restarting [/code] Linux klk-fevo-SERIAL 4.14.9-klk #1 SMP Tue Feb 18 14:41:02 CET 2020 armv7l armv7l armv7l GNU/Linux CLIENT [code]eth0 Link encap:Ethernet HWaddr 70:76:FF:05:13:EC inet addr:192.168.1.97 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: 2001:861:59c1:38f0:7276:ffff:fe05:13ec/64 Scope:Global inet6 addr: fe80::7276:ffff:fe05:13ec/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7945 errors:0 dropped:4034 overruns:0 frame:0 TX packets:3416 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1014731 (990.9 KiB) TX bytes:2293154 (2.1 MiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:65890 errors:0 dropped:0 overruns:0 frame:0 TX packets:65890 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:3493379 (3.3 MiB) TX bytes:3493379 (3.3 MiB) tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.8.0.3 P-t-P:10.8.0.3 Mask:255.255.255.0 inet6 addr: fd42:42:42:42::1001/112 Scope:Global inet6 addr: fe80::8797:fe9f:de8a:6832/64 Scope:Link UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:2556 errors:0 dropped:0 overruns:0 frame:0 TX packets:2333 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:182482 (178.2 KiB) TX bytes:2043180 (1.9 MiB) tun1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.8.0.4 P-t-P:10.8.0.4 Mask:255.255.255.0 inet6 addr: fe80::f98:5e7a:ef8c:4a58/64 Scope:Link inet6 addr: fd42:42:42:42::1002/112 Scope:Global UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:18 errors:0 dropped:0 overruns:0 frame:0 TX packets:11 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:3416 (3.3 KiB) TX bytes:528 (528.0 B)[/code] [oconf=client] client proto udp explicit-exit-notify remote x.x.x.x 1194 dev tun resolv-retry infinite nobind persist-key persist-tun remote-cert-tls server verify-x509-name server_XL98c6RoSdvOVX3E name auth SHA256 auth-nocache cipher AES-128-GCM tls-client tls-version-min 1.2 tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 ignore-unknown-option block-outside-dns setenv opt block-outside-dns # Prevent Windows 10 DNS leak verb 3 [/oconf] [code] : R=[163840->163840] S=[163840->163840] 2021-07-28T02:25:07.210023+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T02:25:07.210082+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T02:25:55.330283+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T02:25:55.330357+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS handshake failed 2021-07-28T02:25:55.330833+02:00 klk-fevo-SERIAL openvpn[1642]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T02:25:55.330925+02:00 klk-fevo-SERIAL openvpn[1642]: Restart pause, 300 second(s) 2021-07-28T02:26:07.059462+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T02:26:07.059537+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS handshake failed 2021-07-28T02:26:07.059961+02:00 klk-fevo-SERIAL openvpn[1183]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T02:26:07.060052+02:00 klk-fevo-SERIAL openvpn[1183]: Restart pause, 300 second(s) 2021-07-28T02:30:55.331480+02:00 klk-fevo-SERIAL openvpn[1642]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T02:30:55.331631+02:00 klk-fevo-SERIAL openvpn[1642]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T02:30:55.331686+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link local: (not bound) 2021-07-28T02:30:55.331740+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T02:31:07.060658+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T02:31:07.060806+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T02:31:07.060859+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T02:31:07.060914+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T02:31:55.909807+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T02:31:55.909886+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS handshake failed 2021-07-28T02:31:55.910355+02:00 klk-fevo-SERIAL openvpn[1642]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T02:31:55.910450+02:00 klk-fevo-SERIAL openvpn[1642]: Restart pause, 300 second(s) 2021-07-28T02:32:08.084911+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T02:32:08.084986+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS handshake failed 2021-07-28T02:32:08.085407+02:00 klk-fevo-SERIAL openvpn[1183]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T02:32:08.085501+02:00 klk-fevo-SERIAL openvpn[1183]: Restart pause, 300 second(s) 2021-07-28T02:36:55.911003+02:00 klk-fevo-SERIAL openvpn[1642]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T02:36:55.911155+02:00 klk-fevo-SERIAL openvpn[1642]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T02:36:55.911209+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link local: (not bound) 2021-07-28T02:36:55.911264+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T02:37:08.086068+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T02:37:08.086326+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T02:37:08.086383+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T02:37:08.086477+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T02:37:55.615375+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T02:37:55.615448+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS handshake failed 2021-07-28T02:37:55.615880+02:00 klk-fevo-SERIAL openvpn[1642]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T02:37:55.615975+02:00 klk-fevo-SERIAL openvpn[1642]: Restart pause, 300 second(s) 2021-07-28T02:38:09.108729+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T02:38:09.108806+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS handshake failed 2021-07-28T02:38:09.109266+02:00 klk-fevo-SERIAL openvpn[1183]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T02:38:09.109359+02:00 klk-fevo-SERIAL openvpn[1183]: Restart pause, 300 second(s) 2021-07-28T02:42:55.616581+02:00 klk-fevo-SERIAL openvpn[1642]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T02:42:55.616731+02:00 klk-fevo-SERIAL openvpn[1642]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T02:42:55.616784+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link local: (not bound) 2021-07-28T02:42:55.616836+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T02:43:09.109988+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T02:43:09.110139+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T02:43:09.110193+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T02:43:09.110247+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T02:43:55.744681+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T02:43:55.744754+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS handshake failed 2021-07-28T02:43:55.745184+02:00 klk-fevo-SERIAL openvpn[1642]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T02:43:55.745278+02:00 klk-fevo-SERIAL openvpn[1642]: Restart pause, 300 second(s) 2021-07-28T02:44:09.045475+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) [/code] [SAME LOGS UNDRED AND UNDRED TIMES] [code] 2021-07-28T11:31:06.040715+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:31:23.524703+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:31:23.524857+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:31:23.524909+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T11:31:23.524964+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:32:06.225875+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T11:32:06.225949+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS handshake failed 2021-07-28T11:32:06.226486+02:00 klk-fevo-SERIAL openvpn[1642]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T11:32:06.226582+02:00 klk-fevo-SERIAL openvpn[1642]: Restart pause, 300 second(s) 2021-07-28T11:32:23.978292+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T11:32:23.978399+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS handshake failed 2021-07-28T11:32:23.978822+02:00 klk-fevo-SERIAL openvpn[1183]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T11:32:23.978916+02:00 klk-fevo-SERIAL openvpn[1183]: Restart pause, 300 second(s) 2021-07-28T11:37:06.227137+02:00 klk-fevo-SERIAL openvpn[1642]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:37:06.227290+02:00 klk-fevo-SERIAL openvpn[1642]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:37:06.227342+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link local: (not bound) 2021-07-28T11:37:06.227397+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:37:23.979475+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:37:23.979671+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:37:23.979732+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T11:37:23.979788+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:38:06.310039+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T11:38:06.310112+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS handshake failed 2021-07-28T11:38:06.310535+02:00 klk-fevo-SERIAL openvpn[1642]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T11:38:06.310675+02:00 klk-fevo-SERIAL openvpn[1642]: Restart pause, 300 second(s) 2021-07-28T11:38:23.683907+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T11:38:23.683983+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS handshake failed 2021-07-28T11:38:23.684408+02:00 klk-fevo-SERIAL openvpn[1183]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T11:38:23.684498+02:00 klk-fevo-SERIAL openvpn[1183]: Restart pause, 300 second(s) 2021-07-28T11:43:06.311229+02:00 klk-fevo-SERIAL openvpn[1642]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:43:06.311382+02:00 klk-fevo-SERIAL openvpn[1642]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:43:06.311436+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link local: (not bound) 2021-07-28T11:43:06.311489+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:43:23.685053+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:43:23.685208+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:43:23.685261+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T11:43:23.685316+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:44:06.794551+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T11:44:06.794658+02:00 klk-fevo-SERIAL openvpn[1642]: TLS Error: TLS handshake failed 2021-07-28T11:44:06.795083+02:00 klk-fevo-SERIAL openvpn[1642]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T11:44:06.795175+02:00 klk-fevo-SERIAL openvpn[1642]: Restart pause, 300 second(s) 2021-07-28T11:44:23.687047+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2021-07-28T11:44:23.687122+02:00 klk-fevo-SERIAL openvpn[1183]: TLS Error: TLS handshake failed 2021-07-28T11:44:23.687547+02:00 klk-fevo-SERIAL openvpn[1183]: SIGUSR1[soft,tls-error] received, process restarting 2021-07-28T11:44:23.687640+02:00 klk-fevo-SERIAL openvpn[1183]: Restart pause, 300 second(s) 2021-07-28T11:00:16.359201+02:00 klk-fevo-SERIAL openvpn[1180]: Unrecognized option or missing or extra parameter(s) in /etc/openvpn/gate-17072021-TEST.conf:19: block-outside-dns (2.4.4) 2021-07-28T11:00:16.367264+02:00 klk-fevo-SERIAL openvpn[1180]: OpenVPN 2.4.4 arm-poky-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb 18 2020 2021-07-28T11:00:16.367866+02:00 klk-fevo-SERIAL openvpn[1180]: library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.10 2021-07-28T11:00:16.393570+02:00 klk-fevo-SERIAL openvpn[1183]: Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key 2021-07-28T11:00:16.398203+02:00 klk-fevo-SERIAL openvpn[1183]: Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication 2021-07-28T11:00:16.398988+02:00 klk-fevo-SERIAL openvpn[1183]: Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key 2021-07-28T11:00:16.399480+02:00 klk-fevo-SERIAL openvpn[1183]: Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication 2021-07-28T11:00:16.401580+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:00:16.407800+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:00:16.408872+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T11:00:16.409421+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:00:16.431020+02:00 klk-fevo-SERIAL openvpn[1183]: TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=6aa08bb7 72a981e4 2021-07-28T11:00:16.460883+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB 2021-07-28T11:00:16.475806+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY KU OK 2021-07-28T11:00:16.476396+02:00 klk-fevo-SERIAL openvpn[1183]: Validating certificate extended key usage 2021-07-28T11:00:16.476821+02:00 klk-fevo-SERIAL openvpn[1183]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2021-07-28T11:00:16.477206+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY EKU OK 2021-07-28T11:00:16.478167+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY X509NAME OK: CN=server_XL98c6RoSdvOVX3E 2021-07-28T11:00:16.478680+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY OK: depth=0, CN=server_XL98c6RoSdvOVX3E 2021-07-28T11:00:16.579172+02:00 klk-fevo-SERIAL openvpn[1183]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 2021-07-28T11:00:16.582991+02:00 klk-fevo-SERIAL openvpn[1183]: [server_XL98c6RoSdvOVX3E] Peer Connection Initiated with [AF_INET]x.x.x.x:1194 2021-07-28T11:00:17.782216+02:00 klk-fevo-SERIAL openvpn[1183]: SENT CONTROL [server_XL98c6RoSdvOVX3E]: 'PUSH_REQUEST' (status=1) 2021-07-28T11:00:17.800873+02:00 klk-fevo-SERIAL openvpn[1183]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 94.140.14.14,dhcp-option DNS 94.140.15.15,redirect-gateway def1 bypass-dhcp,tun-ipv6,route-ipv6 2000::/3,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig-ipv6 fd42:42:42:42::1000/112 fd42:42:42:42::1,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-128-GCM' 2021-07-28T11:00:17.801132+02:00 klk-fevo-SERIAL openvpn[1183]: Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore. 2021-07-28T11:00:17.801245+02:00 klk-fevo-SERIAL openvpn[1183]: Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore. 2021-07-28T11:00:17.801505+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: timers and/or timeouts modified 2021-07-28T11:00:17.801551+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: --ifconfig/up options modified 2021-07-28T11:00:17.801588+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: route options modified 2021-07-28T11:00:17.801629+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: route-related options modified 2021-07-28T11:00:17.801668+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2021-07-28T11:00:17.801704+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: peer-id set 2021-07-28T11:00:17.801744+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: adjusting link_mtu to 1624 2021-07-28T11:00:17.801782+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: data channel crypto options modified 2021-07-28T11:00:17.803298+02:00 klk-fevo-SERIAL openvpn[1183]: Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28T11:00:17.803752+02:00 klk-fevo-SERIAL openvpn[1183]: Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28T11:00:17.804938+02:00 klk-fevo-SERIAL openvpn[1183]: ROUTE_GATEWAY 192.168.1.254/255.255.255.0 IFACE=eth0 HWADDR=70:76:ff:05:13:ec 2021-07-28T11:00:17.805575+02:00 klk-fevo-SERIAL openvpn[1183]: GDG6: remote_host_ipv6=n/a 2021-07-28T11:00:17.806879+02:00 klk-fevo-SERIAL openvpn[1183]: ROUTE6_GATEWAY fe80::5a2f:f7ff:fe2c:1cbc IFACE=eth0 2021-07-28T11:00:17.828089+02:00 klk-fevo-SERIAL openvpn[1183]: TUN/TAP device tun0 opened 2021-07-28T11:00:17.833453+02:00 klk-fevo-SERIAL openvpn[1183]: TUN/TAP TX queue length set to 100 2021-07-28T11:00:17.839498+02:00 klk-fevo-SERIAL openvpn[1183]: do_ifconfig, tt->did_ifconfig_ipv6_setup=1 2021-07-28T11:00:17.841422+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip link set dev tun0 up mtu 1500 2021-07-28T11:00:17.990268+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip addr add dev tun0 10.8.0.2/24 broadcast 10.8.0.255 2021-07-28T11:00:18.044362+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 addr add fd42:42:42:42::1000/112 dev tun0 2021-07-28T11:00:18.084561+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route add x.x.x.x/32 via 192.168.1.254 2021-07-28T11:00:18.116717+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route add 0.0.0.0/1 via 10.8.0.1 2021-07-28T11:00:18.135137+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route add 128.0.0.0/1 via 10.8.0.1 2021-07-28T11:00:18.161500+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(2000::/3 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:00:18.161596+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add 2000::/3 dev tun0 2021-07-28T11:00:18.187110+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(::/3 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:00:18.187208+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add ::/3 dev tun0 2021-07-28T11:00:18.210611+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(2000::/4 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:00:18.210708+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add 2000::/4 dev tun0 2021-07-28T11:00:18.232474+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(3000::/4 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:00:18.232569+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add 3000::/4 dev tun0 2021-07-28T11:00:18.255326+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(fc00::/7 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:00:18.255423+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add fc00::/7 dev tun0 2021-07-28T11:00:18.280757+02:00 klk-fevo-SERIAL openvpn[1183]: Initialization Sequence Completed 2021-07-28T11:49:28.361296+02:00 klk-fevo-SERIAL openvpn[1183]: [server_XL98c6RoSdvOVX3E] Inactivity timeout (--ping-restart), restarting 2021-07-28T11:49:28.362083+02:00 klk-fevo-SERIAL openvpn[1183]: SIGUSR1[soft,ping-restart] received, process restarting 2021-07-28T11:49:28.362176+02:00 klk-fevo-SERIAL openvpn[1183]: Restart pause, 5 second(s) 2021-07-28T11:49:33.362768+02:00 klk-fevo-SERIAL openvpn[1183]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:49:33.362923+02:00 klk-fevo-SERIAL openvpn[1183]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:49:33.362975+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link local: (not bound) 2021-07-28T11:49:33.363028+02:00 klk-fevo-SERIAL openvpn[1183]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:49:33.382212+02:00 klk-fevo-SERIAL openvpn[1183]: TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=1f273218 b407cf63 2021-07-28T11:49:33.404813+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB 2021-07-28T11:49:33.417769+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY KU OK 2021-07-28T11:49:33.418334+02:00 klk-fevo-SERIAL openvpn[1183]: Validating certificate extended key usage 2021-07-28T11:49:33.420610+02:00 klk-fevo-SERIAL openvpn[1183]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2021-07-28T11:49:33.421323+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY EKU OK 2021-07-28T11:49:33.421744+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY X509NAME OK: CN=server_XL98c6RoSdvOVX3E 2021-07-28T11:49:33.422189+02:00 klk-fevo-SERIAL openvpn[1183]: VERIFY OK: depth=0, CN=server_XL98c6RoSdvOVX3E 2021-07-28T11:49:33.501609+02:00 klk-fevo-SERIAL openvpn[1183]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 2021-07-28T11:49:33.501746+02:00 klk-fevo-SERIAL openvpn[1183]: [server_XL98c6RoSdvOVX3E] Peer Connection Initiated with [AF_INET]x.x.x.x:1194 2021-07-28T11:49:34.736267+02:00 klk-fevo-SERIAL openvpn[1183]: SENT CONTROL [server_XL98c6RoSdvOVX3E]: 'PUSH_REQUEST' (status=1) 2021-07-28T11:49:34.754936+02:00 klk-fevo-SERIAL openvpn[1183]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 94.140.14.14,dhcp-option DNS 94.140.15.15,redirect-gateway def1 bypass-dhcp,tun-ipv6,route-ipv6 2000::/3,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig-ipv6 fd42:42:42:42::1001/112 fd42:42:42:42::1,ifconfig 10.8.0.3 255.255.255.0,peer-id 1,cipher AES-128-GCM' 2021-07-28T11:49:34.755182+02:00 klk-fevo-SERIAL openvpn[1183]: Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore. 2021-07-28T11:49:34.755273+02:00 klk-fevo-SERIAL openvpn[1183]: Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore. 2021-07-28T11:49:34.755512+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: timers and/or timeouts modified 2021-07-28T11:49:34.755553+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: --ifconfig/up options modified 2021-07-28T11:49:34.755590+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: route options modified 2021-07-28T11:49:34.755627+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: route-related options modified 2021-07-28T11:49:34.755668+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2021-07-28T11:49:34.755707+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: peer-id set 2021-07-28T11:49:34.755745+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: adjusting link_mtu to 1624 2021-07-28T11:49:34.755785+02:00 klk-fevo-SERIAL openvpn[1183]: OPTIONS IMPORT: data channel crypto options modified 2021-07-28T11:49:34.757292+02:00 klk-fevo-SERIAL openvpn[1183]: Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28T11:49:34.757823+02:00 klk-fevo-SERIAL openvpn[1183]: Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28T11:49:34.758252+02:00 klk-fevo-SERIAL openvpn[1183]: Preserving previous TUN/TAP instance: tun0 2021-07-28T11:49:34.758720+02:00 klk-fevo-SERIAL openvpn[1183]: NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. 2021-07-28T11:49:34.759176+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route del x.x.x.x/32 2021-07-28T11:49:34.770475+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route del 0.0.0.0/1 2021-07-28T11:49:34.781280+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route del 128.0.0.0/1 2021-07-28T11:49:34.792152+02:00 klk-fevo-SERIAL openvpn[1183]: delete_route_ipv6(2000::/3) 2021-07-28T11:49:34.792268+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route del 2000::/3 dev tun0 2021-07-28T11:49:34.803428+02:00 klk-fevo-SERIAL openvpn[1183]: delete_route_ipv6(::/3) 2021-07-28T11:49:34.803537+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route del ::/3 dev tun0 2021-07-28T11:49:34.814964+02:00 klk-fevo-SERIAL openvpn[1183]: delete_route_ipv6(2000::/4) 2021-07-28T11:49:34.815076+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route del 2000::/4 dev tun0 2021-07-28T11:49:34.827193+02:00 klk-fevo-SERIAL openvpn[1183]: delete_route_ipv6(3000::/4) 2021-07-28T11:49:34.827314+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route del 3000::/4 dev tun0 2021-07-28T11:49:34.839673+02:00 klk-fevo-SERIAL openvpn[1183]: delete_route_ipv6(fc00::/7) 2021-07-28T11:49:34.839784+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route del fc00::/7 dev tun0 2021-07-28T11:49:34.851411+02:00 klk-fevo-SERIAL openvpn[1183]: Closing TUN/TAP interface 2021-07-28T11:49:34.851521+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip addr del dev tun0 10.8.0.2/24 2021-07-28T11:49:34.872301+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 addr del fd42:42:42:42::1000/112 dev tun0 2021-07-28T11:49:35.933428+02:00 klk-fevo-SERIAL openvpn[1183]: ROUTE_GATEWAY 192.168.1.254/255.255.255.0 IFACE=eth0 HWADDR=70:76:ff:05:13:ec 2021-07-28T11:49:35.933544+02:00 klk-fevo-SERIAL openvpn[1183]: GDG6: remote_host_ipv6=n/a 2021-07-28T11:49:35.933936+02:00 klk-fevo-SERIAL openvpn[1183]: ROUTE6_GATEWAY fe80::5a2f:f7ff:fe2c:1cbc IFACE=eth0 2021-07-28T11:49:35.944776+02:00 klk-fevo-SERIAL openvpn[1183]: TUN/TAP device tun0 opened 2021-07-28T11:49:35.948136+02:00 klk-fevo-SERIAL openvpn[1183]: TUN/TAP TX queue length set to 100 2021-07-28T11:49:35.948645+02:00 klk-fevo-SERIAL openvpn[1183]: do_ifconfig, tt->did_ifconfig_ipv6_setup=1 2021-07-28T11:49:35.949115+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip link set dev tun0 up mtu 1500 2021-07-28T11:49:35.975238+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip addr add dev tun0 10.8.0.3/24 broadcast 10.8.0.255 2021-07-28T11:49:36.005516+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 addr add fd42:42:42:42::1001/112 dev tun0 2021-07-28T11:49:36.031261+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route add x.x.x.x/32 via 192.168.1.254 2021-07-28T11:49:36.048481+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route add 0.0.0.0/1 via 10.8.0.1 2021-07-28T11:49:36.072209+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip route add 128.0.0.0/1 via 10.8.0.1 2021-07-28T11:49:36.083580+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(2000::/3 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:49:36.083676+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add 2000::/3 dev tun0 2021-07-28T11:49:36.095341+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(::/3 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:49:36.095438+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add ::/3 dev tun0 2021-07-28T11:49:36.107301+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(2000::/4 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:49:36.107398+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add 2000::/4 dev tun0 2021-07-28T11:49:36.118761+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(3000::/4 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:49:36.118857+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add 3000::/4 dev tun0 2021-07-28T11:49:36.130139+02:00 klk-fevo-SERIAL openvpn[1183]: add_route_ipv6(fc00::/7 -> fd42:42:42:42::1 metric -1) dev tun0 2021-07-28T11:49:36.130235+02:00 klk-fevo-SERIAL openvpn[1183]: /sbin/ip -6 route add fc00::/7 dev tun0 2021-07-28T11:49:36.142899+02:00 klk-fevo-SERIAL openvpn[1183]: Initialization Sequence Completed 2021-07-28T11:49:45.732402+02:00 klk-fevo-SERIAL openvpn[1641]: Unrecognized option or missing or extra parameter(s) in /etc/openvpn/gate-17072021-TEST.conf:19: block-outside-dns (2.4.4) 2021-07-28T11:49:45.733834+02:00 klk-fevo-SERIAL openvpn[1641]: OpenVPN 2.4.4 arm-poky-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb 18 2020 2021-07-28T11:49:45.734533+02:00 klk-fevo-SERIAL openvpn[1641]: library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.10 2021-07-28T11:49:45.763030+02:00 klk-fevo-SERIAL openvpn[1642]: Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key 2021-07-28T11:49:45.763929+02:00 klk-fevo-SERIAL openvpn[1642]: Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication 2021-07-28T11:49:45.764400+02:00 klk-fevo-SERIAL openvpn[1642]: Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key 2021-07-28T11:49:45.765371+02:00 klk-fevo-SERIAL openvpn[1642]: Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication 2021-07-28T11:49:45.770852+02:00 klk-fevo-SERIAL openvpn[1642]: TCP/UDP: Preserving recently used remote address: [AF_INET]x.x.x.x:1194 2021-07-28T11:49:45.771692+02:00 klk-fevo-SERIAL openvpn[1642]: Socket Buffers: R=[163840->163840] S=[163840->163840] 2021-07-28T11:49:45.772139+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link local: (not bound) 2021-07-28T11:49:45.773241+02:00 klk-fevo-SERIAL openvpn[1642]: UDP link remote: [AF_INET]x.x.x.x:1194 2021-07-28T11:49:45.793183+02:00 klk-fevo-SERIAL openvpn[1642]: TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=09435b5c ee6db952 2021-07-28T11:49:45.816713+02:00 klk-fevo-SERIAL openvpn[1642]: VERIFY OK: depth=1, CN=cn_8AQUbm3PFw5ievQB 2021-07-28T11:49:45.835133+02:00 klk-fevo-SERIAL openvpn[1642]: VERIFY KU OK 2021-07-28T11:49:45.835839+02:00 klk-fevo-SERIAL openvpn[1642]: Validating certificate extended key usage 2021-07-28T11:49:45.836287+02:00 klk-fevo-SERIAL openvpn[1642]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2021-07-28T11:49:45.836679+02:00 klk-fevo-SERIAL openvpn[1642]: VERIFY EKU OK 2021-07-28T11:49:45.837703+02:00 klk-fevo-SERIAL openvpn[1642]: VERIFY X509NAME OK: CN=server_XL98c6RoSdvOVX3E 2021-07-28T11:49:45.838138+02:00 klk-fevo-SERIAL openvpn[1642]: VERIFY OK: depth=0, CN=server_XL98c6RoSdvOVX3E 2021-07-28T11:49:45.931675+02:00 klk-fevo-SERIAL openvpn[1642]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 2021-07-28T11:49:45.931808+02:00 klk-fevo-SERIAL openvpn[1642]: [server_XL98c6RoSdvOVX3E] Peer Connection Initiated with [AF_INET]x.x.x.x:1194 2021-07-28T11:49:47.103668+02:00 klk-fevo-SERIAL openvpn[1642]: SENT CONTROL [server_XL98c6RoSdvOVX3E]: 'PUSH_REQUEST' (status=1) 2021-07-28T11:49:47.122501+02:00 klk-fevo-SERIAL openvpn[1642]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 94.140.14.14,dhcp-option DNS 94.140.15.15,redirect-gateway def1 bypass-dhcp,tun-ipv6,route-ipv6 2000::/3,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig-ipv6 fd42:42:42:42::1002/112 fd42:42:42:42::1,ifconfig 10.8.0.4 255.255.255.0,peer-id 2,cipher AES-128-GCM' 2021-07-28T11:49:47.122856+02:00 klk-fevo-SERIAL openvpn[1642]: Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore. 2021-07-28T11:49:47.123046+02:00 klk-fevo-SERIAL openvpn[1642]: Note: option tun-ipv6 is ignored because modern operating systems do not need special IPv6 tun handling anymore. 2021-07-28T11:49:47.123386+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: timers and/or timeouts modified 2021-07-28T11:49:47.124164+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: --ifconfig/up options modified 2021-07-28T11:49:47.124558+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: route options modified 2021-07-28T11:49:47.124916+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: route-related options modified 2021-07-28T11:49:47.125261+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2021-07-28T11:49:47.125592+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: peer-id set 2021-07-28T11:49:47.125920+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: adjusting link_mtu to 1624 2021-07-28T11:49:47.126244+02:00 klk-fevo-SERIAL openvpn[1642]: OPTIONS IMPORT: data channel crypto options modified 2021-07-28T11:49:47.127674+02:00 klk-fevo-SERIAL openvpn[1642]: Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28T11:49:47.128291+02:00 klk-fevo-SERIAL openvpn[1642]: Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key 2021-07-28T11:49:47.134529+02:00 klk-fevo-SERIAL openvpn[1642]: ROUTE_GATEWAY 192.168.1.254/255.255.255.0 IFACE=eth0 HWADDR=70:76:ff:05:13:ec 2021-07-28T11:49:47.135098+02:00 klk-fevo-SERIAL openvpn[1642]: GDG6: remote_host_ipv6=n/a 2021-07-28T11:49:47.136174+02:00 klk-fevo-SERIAL openvpn[1642]: ROUTE6_GATEWAY :: ON_LINK IFACE=tun0 2021-07-28T11:49:47.146667+02:00 klk-fevo-SERIAL openvpn[1642]: TUN/TAP device tun1 opened 2021-07-28T11:49:47.153428+02:00 klk-fevo-SERIAL openvpn[1642]: TUN/TAP TX queue length set to 100 2021-07-28T11:49:47.154066+02:00 klk-fevo-SERIAL openvpn[1642]: do_ifconfig, tt->did_ifconfig_ipv6_setup=1 2021-07-28T11:49:47.155702+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip link set dev tun1 up mtu 1500 2021-07-28T11:49:47.191077+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip addr add dev tun1 10.8.0.4/24 broadcast 10.8.0.255 2021-07-28T11:49:47.233401+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip -6 addr add fd42:42:42:42::1002/112 dev tun1 2021-07-28T11:49:47.277355+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip route add x.x.x.x/32 via 192.168.1.254 2021-07-28T11:49:47.306315+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route add command failed: external program exited with error status: 2 2021-07-28T11:49:47.306439+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip route add 0.0.0.0/1 via 10.8.0.1 2021-07-28T11:49:47.350360+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route add command failed: external program exited with error status: 2 2021-07-28T11:49:47.350483+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip route add 128.0.0.0/1 via 10.8.0.1 2021-07-28T11:49:47.384665+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route add command failed: external program exited with error status: 2 2021-07-28T11:49:47.384780+02:00 klk-fevo-SERIAL openvpn[1642]: add_route_ipv6(2000::/3 -> fd42:42:42:42::1 metric -1) dev tun1 2021-07-28T11:49:47.384848+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip -6 route add 2000::/3 dev tun1 2021-07-28T11:49:47.408654+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route -6/-A inet6 add command failed: external program exited with error status: 2 2021-07-28T11:49:47.408767+02:00 klk-fevo-SERIAL openvpn[1642]: add_route_ipv6(::/3 -> fd42:42:42:42::1 metric -1) dev tun1 2021-07-28T11:49:47.408836+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip -6 route add ::/3 dev tun1 2021-07-28T11:49:47.439056+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route -6/-A inet6 add command failed: external program exited with error status: 2 2021-07-28T11:49:47.439166+02:00 klk-fevo-SERIAL openvpn[1642]: add_route_ipv6(2000::/4 -> fd42:42:42:42::1 metric -1) dev tun1 2021-07-28T11:49:47.439236+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip -6 route add 2000::/4 dev tun1 2021-07-28T11:49:47.460732+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route -6/-A inet6 add command failed: external program exited with error status: 2 2021-07-28T11:49:47.460845+02:00 klk-fevo-SERIAL openvpn[1642]: add_route_ipv6(3000::/4 -> fd42:42:42:42::1 metric -1) dev tun1 2021-07-28T11:49:47.461043+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip -6 route add 3000::/4 dev tun1 2021-07-28T11:49:47.478351+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route -6/-A inet6 add command failed: external program exited with error status: 2 2021-07-28T11:49:47.478464+02:00 klk-fevo-SERIAL openvpn[1642]: add_route_ipv6(fc00::/7 -> fd42:42:42:42::1 metric -1) dev tun1 2021-07-28T11:49:47.478533+02:00 klk-fevo-SERIAL openvpn[1642]: /sbin/ip -6 route add fc00::/7 dev tun1 2021-07-28T11:49:47.502248+02:00 klk-fevo-SERIAL openvpn[1642]: ERROR: Linux route -6/-A inet6 add command failed: external program exited with error status: 2 2021-07-28T11:49:47.502410+02:00 klk-fevo-SERIAL openvpn[1642]: Initialization Sequence Completed 2021-07-28T12:00:57.753193+02:00 klk-fevo-SERIAL KLK: REFTP INFO New CSV file 64SERIAL_rx_data_20210728090038.csv available [/code]

Inactivity timeout (--ping-restart), restarting you server cut it off after no active you need make it active for keep open server running, just adding this into your server so it will work for you [code]keepalive 90 190 push "ping 190"[/code]

Which version of openvpn does your server use ?

Thx you a lot for your help, i wasnt able to access to internet for a while :( OpenVPN 2.4.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 27 2021 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10 Originally developed by James Yonan Copyright (C) 2002-2018 OpenVPN Inc Compile time defines: enable_async_push=no enable_comp_stub=no enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_iproute2=yes enable_libtool_lock=yes enable_lz4=yes enable_lzo=yes enable_maintainer_mode=no enable_management=yes enable_multihome=yes enable_option_checking=no enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_silent_rules=no enable_small=no enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=yes enable_werror=no enable_win32_dll=yes enable_x509_alt_username=yes with_aix_soname=aix with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_sysroot=no I will try keepalive 90 190 push "ping 190"

[quote=TinCanTech post_id=101083 time=1627471799 user_id=37053] Which version of openvpn does your server use ? [/quote][quote=tontonjab post_id=101173 time=1627770257 user_id=54354] [b]OpenVPN 2.4.9[/b] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on [b]Apr 27 2021[/b] library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10 [/quote]Your client uses version 2.4.4: [quote=tontonjab post_id=101077 time=1627470436 user_id=54354] 2021-07-28T11:00:16.367264+02:00 klk-fevo-SERIAL openvpn[1180]: [b]OpenVPN 2.4.4[/b] arm-poky-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on [b]Feb 18 2020[/b] [/quote]There has been [b]a lot[/b] of development. Upgrade your client or define your compression model. See: --[b]comp-lzo[/b] and --[b]compress[/b] in the manual: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage

I have to use LZO ? according to the doc, for backward comp. Why do you point this ? A cant update openVPN, because its a device from the market. (LoRa gateway).

Try removing this from your client:[code]persist-tun[/code]

Hello TinCan, i have added LZO to my conf, now i have: [olog] Mon Aug 2 15:46:13 2021 us=667023 *.*.*.*:41551 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1550', remote='link-mtu 1549' Mon Aug 2 15:46:13 2021 us=667049 *.*.*.*:41551 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo' Mon Aug 2 15:46:13 2021 us=728478 *.*.*.*:41551 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit EC, curve: prime256v1 Mon Aug 2 15:46:13 2021 us=728548 *.*.*.*:41551 [gate-02082021_0000003] Peer Connection Initiated with [AF_INET6]::ffff:*.*.*.*:41551 Mon Aug 2 15:46:13 2021 us=738208 gate-02082021_0000003/*.*.*.*:41551 MULTI_sva: pool returned IPv4=10.8.0.4, IPv6=fd42:42:42:42::1002 Mon Aug 2 15:46:13 2021 us=738270 gate-02082021_0000003/*.*.*.*:41551 MULTI: Learn: 10.8.0.4 -> gate-02082021_0000003/*.*.*.*:41551 Mon Aug 2 15:46:13 2021 us=738284 gate-02082021_0000003/*.*.*.*:41551 MULTI: primary virtual IP for gate-02082021_0000003/*.*.*.*:41551: 10.8.0.4 Mon Aug 2 15:46:13 2021 us=738296 gate-02082021_0000003/*.*.*.*:41551 MULTI: Learn: fd42:42:42:42::1002 -> gate-02082021_0000003/*.*.*.*:41551 Mon Aug 2 15:46:13 2021 us=738309 gate-02082021_0000003/*.*.*.*:41551 MULTI: primary virtual IPv6 for gate-02082021_0000003/*.*.*.*:41551: fd42:42:42:42::1002 Mon Aug 2 15:46:14 2021 us=915069 gate-02082021_0000003/*.*.*.*:41551 PUSH: Received control message: 'PUSH_REQUEST' Mon Aug 2 15:46:14 2021 us=915225 gate-02082021_0000003/*.*.*.*:41551 SENT CONTROL [gate-02082021_0000003]: 'PUSH_REPLY,dhcp-option DNS 94.140.14.14,dhcp-option DNS 94.140.15.15,redirect-gateway def1 bypass-dhcp,tun-ipv6,route-ipv6 2000::/3,redirect-gateway ipv6,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig-ipv6 fd42:42:42:42::1002/112 fd42:42:42:42::1,ifconfig 10.8.0.4 255.255.255.0,peer-id 2,cipher AES-128-GCM' (status=1) Mon Aug 2 15:46:14 2021 us=915311 gate-02082021_0000003/*.*.*.*:41551 Data Channel MTU parms [ L:1550 D:1450 EF:50 EB:406 ET:0 EL:3 ] Mon Aug 2 15:46:14 2021 us=915514 gate-02082021_0000003/*.*.*.*:41551 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Aug 2 15:46:14 2021 us=915553 gate-02082021_0000003/*.*.*.*:41551 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key Mon Aug 2 15:46:15 2021 us=249623 gate-02082021_0000003/*.*.*.*:41551 Bad LZO decompression header byte: 96 Mon Aug 2 15:46:15 2021 us=303133 gate-17072021-TEST/176.176.203.106:39416 Bad LZO decompression header byte: 42 Mon Aug 2 15:46:15 2021 us=328973 gate-17072021-TEST/176.176.203.106:49496 Bad LZO decompression header byte: 42 Mon Aug 2 15:46:19 2021 us=2714 gate-02082021_0000003/*.*.*.*:41551 Bad LZO decompression header byte: 96 Mon Aug 2 15:46:25 2021 us=520043 gate-17072021-TEST/176.176.203.106:39416 Bad LZO decompression header byte: 42 Mon Aug 2 15:46:25 2021 us=538987 gate-17072021-TEST/176.176.203.106:49496 Bad LZO decompression header byte: 42 Mon Aug 2 15:46:26 2021 us=682303 gate-02082021_0000003/*.*.*.*:41551 Bad LZO decompression header byte: 96 [/olog] I have to add compress lzo to client too ? I have removed persist-tun. Why do you point this ? Since i added compress lzo, everything fail. If i add compress lzo to the client too, i have: Mon Aug 2 15:55:22 2021 us=903752 Float requested for peer 0 to 176.176.203.106:46397 Mon Aug 2 15:55:22 2021 us=903792 AEAD Decrypt error: cipher final failed Mon Aug 2 15:55:32 2021 us=953478 Float requested for peer 0 to 176.176.203.106:46397 Mon Aug 2 15:55:32 2021 us=953526 AEAD Decrypt error: cipher final failed

[quote=tontonjab post_id=101216 time=1627919534 user_id=54354] i have added LZO to my conf [/quote]Use this in your server: [code]comp-lzo no push "comp-lzo no" compress no push "compress no"[/code] Use this in your client: [code]comp-lzo no[/code] [quote=tontonjab post_id=101216 time=1627919534 user_id=54354] I have removed persist-tun. Why do you point this ? [/quote]It interferes with resets.

unwrap error: packet too short

300000

So now you got openvpn working . What do you expect to change ?

tontonjab

as i said, i need to fix IP for each client..

300000

What? The question is drop connection and now jumpping to fix static ip to client . It is very strange when you ask one question and hope to deal with different expectation.

If you like to ask that come came to config and research on how to . Ipp.txt with deal with that but not guaranteed.

tontonjab

I know... sorry. As i said, i tried ipp. and ccd. But no success. I will not bother you with this. Thx you again for your time.

« Previous Page