So I have a TrueNAS system, on which I have configured the OpenVPN Server service.
OpenVPN clients are assigned IP's in the 192.168.10.0/24 range, the server's local network is in the 192.168.0.0/24 range. 192.168.0.24 is the OpenVPN server's IP.
When the first client connects on OpenVPN, he is assigned the IP 192.168.0.2 and the connection works fine. If a second client connects (with a separate client config & certificate), that user is assigned the next IP, 192.168.0.3. The second connection is established succesfully, but there is no connectivity (e.g. pings do not show replies).
Routes on the server:
??? netstat -r
Routing tables
Internet:
Destination Gateway Flags Netif Expire
default 192.168.0.1 UGS igb0
localhost link#5 UH lo0
192.168.0.0/24 link#1 U igb0
192.168.0.0&0xffff 192.168.10.1 UGS lo0
192.168.0.24 link#1 UHS lo0
192.168.10.0/24 192.168.0.24 UGS igb0
192.168.10.1 link#7 UHS lo0
192.168.10.2 link#7 UH tun0
Internet6:
Destination Gateway Flags Netif Expire
::/96 localhost UGRS lo0
localhost link#5 UH lo0
::ffff:0.0.0.0/96 localhost UGRS lo0
fe80::/10 localhost UGRS lo0
fe80::%igb0/64 link#1 U igb0
fe80::b67a:f1ff:fe link#1 UHS lo0
fe80::%lo0/64 link#5 U lo0
fe80::1%lo0 link#5 UHS lo0
ff02::/16 localhost UGRS lo0
Ifconfig for the tun interface:
tun0: flags=8151<UP,POINTOPOINT,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
options=80000<LINKSTATE>
inet 192.168.10.1 --> 192.168.10.2 netmask 0xffffff00
groups: tun
nd6 options=1<PERFORMNUD>
Opened by PID 56881
Server config:
proto udp
port 1595
dev tun
#dev-type tun -FIXME: This does not work, it is an openvpn issue in FreeBSD
ca /etc/certificates/CA/OpenVPN_ROOT_CA.crt
cert /etc/certificates/OpenVPN_Server.crt
key /etc/certificates/OpenVPN_Server.key
dh /data/dhparam.pem
crl-verify /etc/certificates/CA/OpenVPN_ROOT_CA.crl
server 192.168.10.0 255.255.255.0
user nobody
group nobody
status /var/log/openvpn/openvpn-status.log
log-append /var/log/openvpn/openvpn.log
verb 3
persist-tun
persist-key
remote-cert-tls client
topology subnet
cipher AES-256-CBC
auth SHA256
<tls-crypt> cut </tls-crypt>
local 192.168.0.24
route 192.168.0.24 255.255.25.0 192.168.10.1
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
duplicate-cn
If I ping from an unsuccesful connection and start tcpdump on the server side TUN interface, I can see the messages coming from the client, but no responses. So the issue is definitely on the server and not the client.
(Redacted) server logs:
2021-10-31 09:38:55 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-10-31 09:38:55 OpenVPN 2.5.2 amd64-portbld-freebsd12.0 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Oct 4 2021
2021-10-31 09:38:55 library versions: OpenSSL 1.1.1h-freebsd 24 Aug 2021, LZO 2.10
2021-10-31 09:38:55 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
2021-10-31 09:38:55 Diffie-Hellman initialized with 2048 bit key
2021-10-31 09:38:55 CRL: loaded 1 CRLs from file /etc/certificates/CA/OpenVPN_ROOT_CA.crl
2021-10-31 09:38:55 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:38:55 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:38:55 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:38:55 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:38:55 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=igb0 HWADDR=b4:7a:f1:dd:b0:a4
2021-10-31 09:38:55 TUN/TAP device /dev/tun0 opened
2021-10-31 09:38:55 /sbin/ifconfig tun0 192.168.10.1 192.168.10.2 mtu 1500 netmask 255.255.255.0 up
2021-10-31 09:38:55 /sbin/route add -net 192.168.10.0 192.168.10.2 255.255.255.0
add net 192.168.10.0: gateway 192.168.10.2 fib 0: route already in table
2021-10-31 09:38:55 ERROR: FreeBSD route add command failed: external program exited with error status: 1
2021-10-31 09:38:55 /sbin/route add -net 192.168.0.24 192.168.10.1 255.255.25.0
add net 192.168.0.24: gateway 192.168.10.1 fib 0: route already in table
2021-10-31 09:38:55 ERROR: FreeBSD route add command failed: external program exited with error status: 1
2021-10-31 09:38:55 Could not determine IPv4/IPv6 protocol. Using AF_INET
2021-10-31 09:38:55 Socket Buffers: R=[42080->42080] S=[9216->9216]
2021-10-31 09:38:55 UDPv4 link local (bound): [AF_INET]192.168.0.24:1595
2021-10-31 09:38:55 UDPv4 link remote: [AF_UNSPEC]
2021-10-31 09:38:55 GID set to nobody
2021-10-31 09:38:55 UID set to nobody
2021-10-31 09:38:55 MULTI: multi_init called, r=256 v=256
2021-10-31 09:38:55 IFCONFIG POOL IPv4: base=192.168.10.2 size=252
2021-10-31 09:38:55 Initialization Sequence Completed
2021-10-31 09:38:58 (WAN IP):45202 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:38:58 (WAN IP):45202 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:38:58 (WAN IP):45202 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:38:58 (WAN IP):45202 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:38:58 (WAN IP):45202 TLS: Initial packet from [AF_INET](WAN IP):45202, sid=1c7edfe7 432dc0ef
2021-10-31 09:38:58 (WAN IP):45202 VERIFY KU OK
2021-10-31 09:38:58 (WAN IP):45202 Validating certificate extended key usage
2021-10-31 09:38:58 (WAN IP):45202 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 09:38:58 (WAN IP):45202 VERIFY EKU OK
2021-10-31 09:38:58 (WAN IP):45202 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_VER=3.git::662eae9a:Release
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_PLAT=android
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_NCP=2
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_TCPNL=1
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_PROTO=2
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_AUTO_SESS=1
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
2021-10-31 09:38:58 (WAN IP):45202 peer info: IV_SSO=openurl
2021-10-31 09:38:58 (WAN IP):45202 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 09:38:58 (WAN IP):45202 [(hostname)] Peer Connection Initiated with [AF_INET](WAN IP):45202
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 MULTI_sva: pool returned IPv4=192.168.10.2, IPv6=(Not enabled)
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 MULTI: Learn: 192.168.10.2 -> (hostname)/(WAN IP):45202
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 MULTI: primary virtual IP for (hostname)/(WAN IP):45202: 192.168.10.2
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 09:38:58 (hostname)/(WAN IP):45202 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-10-31 09:39:52 (hostname)/(WAN IP):45202 SIGTERM[soft,remote-exit] received, client-instance exiting
2021-10-31 09:39:56 (WAN IP):46859 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:39:56 (WAN IP):46859 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:39:56 (WAN IP):46859 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:39:56 (WAN IP):46859 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:39:56 (WAN IP):46859 TLS: Initial packet from [AF_INET](WAN IP):46859, sid=e3ab4b4c 9a9c883d
2021-10-31 09:39:56 (WAN IP):46859 VERIFY KU OK
2021-10-31 09:39:56 (WAN IP):46859 Validating certificate extended key usage
2021-10-31 09:39:56 (WAN IP):46859 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 09:39:56 (WAN IP):46859 VERIFY EKU OK
2021-10-31 09:39:56 (WAN IP):46859 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_VER=3.git::662eae9a:Release
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_PLAT=android
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_NCP=2
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_TCPNL=1
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_PROTO=2
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_AUTO_SESS=1
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
2021-10-31 09:39:56 (WAN IP):46859 peer info: IV_SSO=openurl
2021-10-31 09:39:56 (WAN IP):46859 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 09:39:56 (WAN IP):46859 [(hostname)] Peer Connection Initiated with [AF_INET](WAN IP):46859
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 MULTI_sva: pool returned IPv4=192.168.10.2, IPv6=(Not enabled)
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 MULTI: Learn: 192.168.10.2 -> (hostname)/(WAN IP):46859
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 MULTI: primary virtual IP for (hostname)/(WAN IP):46859: 192.168.10.2
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 09:39:56 (hostname)/(WAN IP):46859 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-10-31 09:40:12 (WAN IP):1595 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:40:12 (WAN IP):1595 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:40:12 (WAN IP):1595 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 09:40:12 (WAN IP):1595 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 09:40:12 (WAN IP):1595 TLS: Initial packet from [AF_INET](WAN IP):1595, sid=311ebee4 13949e1f
2021-10-31 09:40:12 (WAN IP):1595 VERIFY KU OK
2021-10-31 09:40:12 (WAN IP):1595 Validating certificate extended key usage
2021-10-31 09:40:12 (WAN IP):1595 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 09:40:12 (WAN IP):1595 VERIFY EKU OK
2021-10-31 09:40:12 (WAN IP):1595 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_VER=2.4.7
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_PLAT=win
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_PROTO=2
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_NCP=2
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_LZ4=1
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_LZ4v2=1
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_LZO=1
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_COMP_STUB=1
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_COMP_STUBv2=1
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_TCPNL=1
2021-10-31 09:40:12 (WAN IP):1595 peer info: IV_GUI_VER=OpenVPN_GUI_11
2021-10-31 09:40:12 (WAN IP):1595 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 09:40:12 (WAN IP):1595 [(hostname)] Peer Connection Initiated with [AF_INET](WAN IP):1595
2021-10-31 09:40:12 (hostname)/(WAN IP):1595 MULTI_sva: pool returned IPv4=192.168.10.3, IPv6=(Not enabled)
2021-10-31 09:40:12 (hostname)/(WAN IP):1595 MULTI: Learn: 192.168.10.3 -> (hostname)/(WAN IP):1595
2021-10-31 09:40:12 (hostname)/(WAN IP):1595 MULTI: primary virtual IP for (hostname)/(WAN IP):1595: 192.168.10.3
2021-10-31 09:40:12 (hostname)/(WAN IP):1595 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 09:40:12 (hostname)/(WAN IP):1595 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 09:40:12 (hostname)/(WAN IP):1595 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 09:40:14 (hostname)/(WAN IP):1595 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 09:40:14 (hostname)/(WAN IP):1595 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.3 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
2021-10-31 09:44:34 (hostname)/(WAN IP):1595 [(hostname)] Inactivity timeout (--ping-restart), restarting
2021-10-31 09:44:34 (hostname)/(WAN IP):1595 SIGUSR1[soft,ping-restart] received, client-instance restarting
2021-10-31 09:48:20 (hostname)/(WAN IP):46859 SIGTERM[soft,remote-exit] received, client-instance exiting
2021-10-31 10:33:31 (WAN IP):37338 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:33:31 (WAN IP):37338 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:33:31 (WAN IP):37338 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:33:31 (WAN IP):37338 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:33:31 (WAN IP):37338 TLS: Initial packet from [AF_INET](WAN IP):37338, sid=19aa60dc 7410cc69
2021-10-31 10:33:31 (WAN IP):37338 tls-crypt unwrap error: bad packet ID (may be a replay): [ #1 / time = (1635672804) 2021-10-31 10:33:24 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
2021-10-31 10:33:31 (WAN IP):37338 tls-crypt unwrap error: packet replay
2021-10-31 10:33:31 (WAN IP):37338 TLS Error: tls-crypt unwrapping failed from [AF_INET](WAN IP):37338
2021-10-31 10:33:31 (WAN IP):37338 VERIFY KU OK
2021-10-31 10:33:31 (WAN IP):37338 Validating certificate extended key usage
2021-10-31 10:33:31 (WAN IP):37338 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 10:33:31 (WAN IP):37338 VERIFY EKU OK
2021-10-31 10:33:31 (WAN IP):37338 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_VER=3.git::662eae9a:Release
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_PLAT=android
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_NCP=2
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_TCPNL=1
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_PROTO=2
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_AUTO_SESS=1
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
2021-10-31 10:33:31 (WAN IP):37338 peer info: IV_SSO=openurl
2021-10-31 10:33:31 (WAN IP):37338 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 10:33:31 (WAN IP):37338 [(hostname)] Peer Connection Initiated with [AF_INET](WAN IP):37338
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 MULTI_sva: pool returned IPv4=192.168.10.2, IPv6=(Not enabled)
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 MULTI: Learn: 192.168.10.2 -> (hostname)/(WAN IP):37338
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 MULTI: primary virtual IP for (hostname)/(WAN IP):37338: 192.168.10.2
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 10:33:31 (hostname)/(WAN IP):37338 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-10-31 10:35:57 84.199.25.59:21122 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:35:57 84.199.25.59:21122 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:35:57 84.199.25.59:21122 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:35:57 84.199.25.59:21122 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:35:57 84.199.25.59:21122 TLS: Initial packet from [AF_INET]84.199.25.59:21122, sid=71cdcfd0 5adaf148
2021-10-31 10:35:58 84.199.25.59:21122 VERIFY KU OK
2021-10-31 10:35:58 84.199.25.59:21122 Validating certificate extended key usage
2021-10-31 10:35:58 84.199.25.59:21122 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 10:35:58 84.199.25.59:21122 VERIFY EKU OK
2021-10-31 10:35:58 84.199.25.59:21122 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_VER=2.4.7
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_PLAT=win
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_PROTO=2
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_NCP=2
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_LZ4=1
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_LZ4v2=1
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_LZO=1
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_COMP_STUB=1
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_COMP_STUBv2=1
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_TCPNL=1
2021-10-31 10:35:58 84.199.25.59:21122 peer info: IV_GUI_VER=OpenVPN_GUI_11
2021-10-31 10:35:58 84.199.25.59:21122 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 10:35:58 84.199.25.59:21122 [(hostname)] Peer Connection Initiated with [AF_INET]84.199.25.59:21122
2021-10-31 10:35:58 (hostname)/84.199.25.59:21122 MULTI_sva: pool returned IPv4=192.168.10.3, IPv6=(Not enabled)
2021-10-31 10:35:58 (hostname)/84.199.25.59:21122 MULTI: Learn: 192.168.10.3 -> (hostname)/84.199.25.59:21122
2021-10-31 10:35:58 (hostname)/84.199.25.59:21122 MULTI: primary virtual IP for (hostname)/84.199.25.59:21122: 192.168.10.3
2021-10-31 10:35:58 (hostname)/84.199.25.59:21122 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 10:35:58 (hostname)/84.199.25.59:21122 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:35:58 (hostname)/84.199.25.59:21122 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:35:59 (hostname)/84.199.25.59:21122 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 10:35:59 (hostname)/84.199.25.59:21122 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.3 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
2021-10-31 10:41:43 (hostname)/84.199.25.59:21122 [(hostname)] Inactivity timeout (--ping-restart), restarting
2021-10-31 10:41:43 (hostname)/84.199.25.59:21122 SIGUSR1[soft,ping-restart] received, client-instance restarting
2021-10-31 10:46:13 (hostname)/(WAN IP):37338 SIGTERM[soft,remote-exit] received, client-instance exiting
2021-10-31 10:47:21 84.199.25.59:13162 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:47:21 84.199.25.59:13162 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:47:21 84.199.25.59:13162 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:47:21 84.199.25.59:13162 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:47:21 84.199.25.59:13162 TLS: Initial packet from [AF_INET]84.199.25.59:13162, sid=b9455879 e35ab278
2021-10-31 10:47:21 84.199.25.59:13162 CRL: loaded 1 CRLs from file /etc/certificates/CA/OpenVPN_ROOT_CA.crl
2021-10-31 10:47:21 84.199.25.59:13162 VERIFY KU OK
2021-10-31 10:47:21 84.199.25.59:13162 Validating certificate extended key usage
2021-10-31 10:47:21 84.199.25.59:13162 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 10:47:21 84.199.25.59:13162 VERIFY EKU OK
2021-10-31 10:47:21 84.199.25.59:13162 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_VER=2.4.7
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_PLAT=win
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_PROTO=2
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_NCP=2
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_LZ4=1
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_LZ4v2=1
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_LZO=1
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_COMP_STUB=1
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_COMP_STUBv2=1
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_TCPNL=1
2021-10-31 10:47:21 84.199.25.59:13162 peer info: IV_GUI_VER=OpenVPN_GUI_11
2021-10-31 10:47:21 84.199.25.59:13162 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 10:47:21 84.199.25.59:13162 [(hostname)] Peer Connection Initiated with [AF_INET]84.199.25.59:13162
2021-10-31 10:47:21 (hostname)/84.199.25.59:13162 MULTI_sva: pool returned IPv4=192.168.10.2, IPv6=(Not enabled)
2021-10-31 10:47:21 (hostname)/84.199.25.59:13162 MULTI: Learn: 192.168.10.2 -> (hostname)/84.199.25.59:13162
2021-10-31 10:47:21 (hostname)/84.199.25.59:13162 MULTI: primary virtual IP for (hostname)/84.199.25.59:13162: 192.168.10.2
2021-10-31 10:47:21 (hostname)/84.199.25.59:13162 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 10:47:21 (hostname)/84.199.25.59:13162 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:47:21 (hostname)/84.199.25.59:13162 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:47:23 (hostname)/84.199.25.59:13162 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 10:47:23 (hostname)/84.199.25.59:13162 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-10-31 10:48:58 (WAN IP):38870 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:48:58 (WAN IP):38870 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:48:58 (WAN IP):38870 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 10:48:58 (WAN IP):38870 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 10:48:58 (WAN IP):38870 TLS: Initial packet from [AF_INET](WAN IP):38870, sid=b8d69951 ea80f309
2021-10-31 10:48:58 (WAN IP):38870 CRL: loaded 1 CRLs from file /etc/certificates/CA/OpenVPN_ROOT_CA.crl
2021-10-31 10:48:58 (WAN IP):38870 VERIFY KU OK
2021-10-31 10:48:58 (WAN IP):38870 Validating certificate extended key usage
2021-10-31 10:48:58 (WAN IP):38870 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 10:48:58 (WAN IP):38870 VERIFY EKU OK
2021-10-31 10:48:58 (WAN IP):38870 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_VER=3.git::662eae9a:Release
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_PLAT=android
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_NCP=2
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_TCPNL=1
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_PROTO=2
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_AUTO_SESS=1
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
2021-10-31 10:48:58 (WAN IP):38870 peer info: IV_SSO=openurl
2021-10-31 10:48:58 (WAN IP):38870 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 10:48:58 (WAN IP):38870 [(hostname)] Peer Connection Initiated with [AF_INET](WAN IP):38870
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 MULTI_sva: pool returned IPv4=192.168.10.3, IPv6=(Not enabled)
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 MULTI: Learn: 192.168.10.3 -> (hostname)/(WAN IP):38870
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 MULTI: primary virtual IP for (hostname)/(WAN IP):38870: 192.168.10.3
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 10:48:58 (hostname)/(WAN IP):38870 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.3 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
2021-10-31 11:24:17 (WAN IP):38201 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 11:24:17 (WAN IP):38201 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 11:24:17 (WAN IP):38201 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 11:24:17 (WAN IP):38201 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 11:24:17 (WAN IP):38201 TLS: Initial packet from [AF_INET](WAN IP):38201, sid=134c9ea6 eb24dbb3
2021-10-31 11:24:17 (WAN IP):38201 CRL: loaded 1 CRLs from file /etc/certificates/CA/OpenVPN_ROOT_CA.crl
2021-10-31 11:24:17 (WAN IP):38201 VERIFY KU OK
2021-10-31 11:24:17 (WAN IP):38201 Validating certificate extended key usage
2021-10-31 11:24:17 (WAN IP):38201 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 11:24:17 (WAN IP):38201 VERIFY EKU OK
2021-10-31 11:24:17 (WAN IP):38201 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_VER=3.git::662eae9a:Release
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_PLAT=android
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_NCP=2
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_TCPNL=1
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_PROTO=2
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_AUTO_SESS=1
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
2021-10-31 11:24:17 (WAN IP):38201 peer info: IV_SSO=openurl
2021-10-31 11:24:17 (WAN IP):38201 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 11:24:17 (WAN IP):38201 [(hostname)] Peer Connection Initiated with [AF_INET](WAN IP):38201
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 MULTI_sva: pool returned IPv4=192.168.10.4, IPv6=(Not enabled)
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 MULTI: Learn: 192.168.10.4 -> (hostname)/(WAN IP):38201
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 MULTI: primary virtual IP for (hostname)/(WAN IP):38201: 192.168.10.4
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 11:24:17 (hostname)/(WAN IP):38201 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.4 255.255.255.0,peer-id 2,cipher AES-256-GCM' (status=1)
2021-10-31 11:27:17 (hostname)/(WAN IP):38870 [(hostname)] Inactivity timeout (--ping-restart), restarting
2021-10-31 11:27:17 (hostname)/(WAN IP):38870 SIGUSR1[soft,ping-restart] received, client-instance restarting
2021-10-31 11:40:12 (hostname)/(WAN IP):38201 SIGTERM[soft,remote-exit] received, client-instance exiting
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 TLS: soft reset sec=3392/3392 bytes=11942173/-1 pkts=32255/0
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 VERIFY KU OK
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 Validating certificate extended key usage
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 VERIFY EKU OK
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_VER=2.4.7
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_PLAT=win
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_PROTO=2
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_LZ4=1
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_LZ4v2=1
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_LZO=1
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_COMP_STUB=1
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_COMP_STUBv2=1
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_TCPNL=1
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 peer info: IV_GUI_VER=OpenVPN_GUI_11
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 11:43:53 (hostname)/84.199.25.59:13162 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 12:08:36 (WAN IP):48012 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 12:08:36 (WAN IP):48012 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 12:08:36 (WAN IP):48012 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2021-10-31 12:08:36 (WAN IP):48012 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2021-10-31 12:08:36 (WAN IP):48012 TLS: Initial packet from [AF_INET](WAN IP):48012, sid=d16c80f8 04c7408c
2021-10-31 12:08:36 (WAN IP):48012 CRL: loaded 1 CRLs from file /etc/certificates/CA/OpenVPN_ROOT_CA.crl
2021-10-31 12:08:36 (WAN IP):48012 VERIFY KU OK
2021-10-31 12:08:36 (WAN IP):48012 Validating certificate extended key usage
2021-10-31 12:08:36 (WAN IP):48012 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 12:08:36 (WAN IP):48012 VERIFY EKU OK
2021-10-31 12:08:36 (WAN IP):48012 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_VER=3.git::662eae9a:Release
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_PLAT=android
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_NCP=2
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_TCPNL=1
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_PROTO=2
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_AUTO_SESS=1
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_GUI_VER=net.openvpn.connect.android_3.2.5-7182
2021-10-31 12:08:36 (WAN IP):48012 peer info: IV_SSO=openurl
2021-10-31 12:08:36 (WAN IP):48012 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 12:08:36 (WAN IP):48012 [(hostname)] Peer Connection Initiated with [AF_INET](WAN IP):48012
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 MULTI_sva: pool returned IPv4=192.168.10.3, IPv6=(Not enabled)
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 MULTI: Learn: 192.168.10.3 -> (hostname)/(WAN IP):48012
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 MULTI: primary virtual IP for (hostname)/(WAN IP):48012: 192.168.10.3
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 12:08:36 (hostname)/(WAN IP):48012 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.3 255.255.255.0,peer-id 1,cipher AES-256-GCM' (status=1)
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 TLS: new session incoming connection from [AF_INET]84.199.25.59:13162
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 VERIFY KU OK
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 Validating certificate extended key usage
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 VERIFY EKU OK
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 VERIFY OK: depth=0, CN=(hostname), C=BE, ST=Antwerpen, L=Merksplas, O=Ifdef, emailAddress=ives.vdf@gmail.com
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_VER=2.4.7
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_PLAT=win
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_PROTO=2
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_NCP=2
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_LZ4=1
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_LZ4v2=1
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_LZO=1
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_COMP_STUB=1
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_COMP_STUBv2=1
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_TCPNL=1
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 peer info: IV_GUI_VER=OpenVPN_GUI_11
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 TLS: tls_multi_process: untrusted session promoted to semi-trusted
2021-10-31 12:09:12 (hostname)/84.199.25.59:13162 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2021-10-31 12:09:13 (hostname)/84.199.25.59:13162 PUSH: Received control message: 'PUSH_REQUEST'
2021-10-31 12:09:13 (hostname)/84.199.25.59:13162 SENT CONTROL [(hostname)]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route-gateway 192.168.10.1,topology subnet,ping 10,ping-restart 120,ifconfig 192.168.10.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Anyone have any idea? The TUN configuration being PtP inet 192.168.10.1 --> 192.168.10.2 worries me somewhat, I'm not sure why it would point to a single client's IP.
