OpenVPN-Server with dynamic ip

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
evilroach
OpenVpn Newbie
Posts: 19
Joined: Sat Oct 10, 2015 8:56 pm

OpenVPN-Server with dynamic ip

Post by evilroach » Thu Jan 17, 2019 3:21 am

Hi, thanks for any help or hints.

I setted up a openvpn server on a fibre link that has only a dynamic ip assigned by ISP,
and correctly configured a DNS registering script, and setted up a client on VPS.

When the server starts before the client starting, they all work correctly.
But when the client starts prior to the server, or the ip of the server is re-assigned by ISP(my DNS script can update it in 10s at most),
it looks like that the vpn link can not be re-established, unless I restart the openvpn process on the client manually.

The server would certainly be listening on the new ip address, but the client always retry to connect the old ip of the server for hours,
even though the new ip of the server can be resolved correctly by "nslookup my.server.name" or "ping my.server.name".
Seemingly the openvpn process on the client didn't re-resolve the DNS name of the server at all, even though I added the "resolv-retry infinite" option into the config of the client.

What should be added/deleted with my configurations?

the configurations of both are following:
the server:
server.conf

verb 4
proto tcp-server
lport 7794
float
user nobody
group nogroup
daemon
dev tun
persist-tun
persist-key
compress lz4-v2
keepalive 15 60
mode server
server 10.8.0.0 255.255.255.0
push "route 192.168.0.0 255.255.0.0"
push "route 10.8.0.0 255.255.255.0"
ifconfig-pool-persist /etc/openvpn/ip-pool.txt
client-config-dir /etc/openvpn/ccd
ccd-exclusive
status /tmp/ovpn.status 5
status-version 3
log /tmp/ovpn.log
tls-server
remote-cert-tls client
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-crypt>
<dh>
-----BEGIN DH PARAMETERS-----
-----END DH PARAMETERS-----
</dh>


the client:
client.conf

verb 4
client
proto tcp-client
remote name.of.my.server
remote-random
resolv-retry infinite
rport 7794
float
nobind
user nobody
group nobody
chroot /run/openvpn-client/jr-ovpn
tmp-dir /
log-append /tmp/ovpn.log
dev tun
persist-key
persist-tun
compress lz4-v2
keepalive 15 30
pull
tls-client
remote-cert-tls server
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-crypt>


the log of the server:
http://54.218.16.41:7780/ovpn-server.log

the log of the client:
http://54.218.16.41:7780/ovpn-client.log

Thank you very much!
Last edited by evilroach on Fri Jan 18, 2019 2:56 am, edited 3 times in total.
Top
TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: OpenVPN-Server with dynamic ip

Post by TinCanTech » Thu Jan 17, 2019 2:55 pm

Because you have not posted any logs I presume you have not inspected yours:
viewtopic.php?f=30&t=22603#p68963
Top
evilroach
OpenVpn Newbie
Posts: 19
Joined: Sat Oct 10, 2015 8:56 pm

The log of the client

Post by evilroach » Thu Jan 17, 2019 7:47 pm

Code: Select all

Fri Jan 18 02:48:30 2019 us=858923 Current Parameter Settings:
Fri Jan 18 02:48:30 2019 us=858978   config = '/etc/openvpn/client/jr.ovpn'
Fri Jan 18 02:48:30 2019 us=858988   mode = 0
Fri Jan 18 02:48:30 2019 us=858994   persist_config = DISABLED
Fri Jan 18 02:48:30 2019 us=859000   persist_mode = 1
Fri Jan 18 02:48:30 2019 us=859005   show_ciphers = DISABLED
Fri Jan 18 02:48:30 2019 us=859010   show_digests = DISABLED
Fri Jan 18 02:48:30 2019 us=859016   show_engines = DISABLED
Fri Jan 18 02:48:30 2019 us=859021   genkey = DISABLED
Fri Jan 18 02:48:30 2019 us=859026   key_pass_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859031   show_tls_ciphers = DISABLED
Fri Jan 18 02:48:30 2019 us=859037   connect_retry_max = 0
Fri Jan 18 02:48:30 2019 us=859042 Connection profiles [0]:
Fri Jan 18 02:48:30 2019 us=859048   proto = tcp-client
Fri Jan 18 02:48:30 2019 us=859053   local = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859059   local_port = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859064   remote = 'the.dns.name.of.server'
Fri Jan 18 02:48:30 2019 us=859069   remote_port = '7794'
Fri Jan 18 02:48:30 2019 us=859075   remote_float = ENABLED
Fri Jan 18 02:48:30 2019 us=859080   bind_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=859085   bind_local = DISABLED
Fri Jan 18 02:48:30 2019 us=859090   bind_ipv6_only = DISABLED
Fri Jan 18 02:48:30 2019 us=859095   connect_retry_seconds = 5
Fri Jan 18 02:48:30 2019 us=859101   connect_timeout = 120
Fri Jan 18 02:48:30 2019 us=859106   socks_proxy_server = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859111   socks_proxy_port = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859116   tun_mtu = 1500
Fri Jan 18 02:48:30 2019 us=859122   tun_mtu_defined = ENABLED
Fri Jan 18 02:48:30 2019 us=859127   link_mtu = 1500
Fri Jan 18 02:48:30 2019 us=859132   link_mtu_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=859138   tun_mtu_extra = 0
Fri Jan 18 02:48:30 2019 us=859143   tun_mtu_extra_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=859149   mtu_discover_type = -1
Fri Jan 18 02:48:30 2019 us=859154   fragment = 0
Fri Jan 18 02:48:30 2019 us=859160   mssfix = 1450
Fri Jan 18 02:48:30 2019 us=859165   explicit_exit_notification = 0
Fri Jan 18 02:48:30 2019 us=859171 Connection profiles END
Fri Jan 18 02:48:30 2019 us=859176   remote_random = ENABLED
Fri Jan 18 02:48:30 2019 us=859181   ipchange = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859187   dev = 'tun'
Fri Jan 18 02:48:30 2019 us=859192   dev_type = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859197   dev_node = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859202   lladdr = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859208   topology = 1
Fri Jan 18 02:48:30 2019 us=859213   ifconfig_local = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859218   ifconfig_remote_netmask = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859223   ifconfig_noexec = DISABLED
Fri Jan 18 02:48:30 2019 us=859229   ifconfig_nowarn = DISABLED
Fri Jan 18 02:48:30 2019 us=859234   ifconfig_ipv6_local = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859239   ifconfig_ipv6_netbits = 0
Fri Jan 18 02:48:30 2019 us=859244   ifconfig_ipv6_remote = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859250   shaper = 0
Fri Jan 18 02:48:30 2019 us=859255   mtu_test = 0
Fri Jan 18 02:48:30 2019 us=859260   mlock = DISABLED
Fri Jan 18 02:48:30 2019 us=859265   keepalive_ping = 15
Fri Jan 18 02:48:30 2019 us=859271   keepalive_timeout = 30
Fri Jan 18 02:48:30 2019 us=859276   inactivity_timeout = 0
Fri Jan 18 02:48:30 2019 us=859282   ping_send_timeout = 15
Fri Jan 18 02:48:30 2019 us=859287   ping_rec_timeout = 30
Fri Jan 18 02:48:30 2019 us=859292   ping_rec_timeout_action = 2
Fri Jan 18 02:48:30 2019 us=859298   ping_timer_remote = DISABLED
Fri Jan 18 02:48:30 2019 us=859303   remap_sigusr1 = 0
Fri Jan 18 02:48:30 2019 us=859308   persist_tun = ENABLED
Fri Jan 18 02:48:30 2019 us=859314   persist_local_ip = DISABLED
Fri Jan 18 02:48:30 2019 us=859319   persist_remote_ip = DISABLED
Fri Jan 18 02:48:30 2019 us=859324   persist_key = ENABLED
Fri Jan 18 02:48:30 2019 us=859329   passtos = DISABLED
Fri Jan 18 02:48:30 2019 us=859335   resolve_retry_seconds = 1000000000
Fri Jan 18 02:48:30 2019 us=859345   resolve_in_advance = DISABLED
Fri Jan 18 02:48:30 2019 us=859351   username = 'nobody'
Fri Jan 18 02:48:30 2019 us=859356   groupname = 'nobody'
Fri Jan 18 02:48:30 2019 us=859362   chroot_dir = '/run/openvpn-client/jr-ovpn'
Fri Jan 18 02:48:30 2019 us=859367   cd_dir = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859372   selinux_context = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859377   writepid = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859383   up_script = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859388   down_script = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859393   down_pre = DISABLED
Fri Jan 18 02:48:30 2019 us=859399   up_restart = DISABLED
Fri Jan 18 02:48:30 2019 us=859404   up_delay = DISABLED
Fri Jan 18 02:48:30 2019 us=859409   daemon = DISABLED
Fri Jan 18 02:48:30 2019 us=859414   inetd = 0
Fri Jan 18 02:48:30 2019 us=859420   log = ENABLED
Fri Jan 18 02:48:30 2019 us=859425   suppress_timestamps = DISABLED
Fri Jan 18 02:48:30 2019 us=859430   machine_readable_output = DISABLED
Fri Jan 18 02:48:30 2019 us=859436   nice = 0
Fri Jan 18 02:48:30 2019 us=859441   verbosity = 4
Fri Jan 18 02:48:30 2019 us=859446   mute = 0
Fri Jan 18 02:48:30 2019 us=859452   gremlin = 0
Fri Jan 18 02:48:30 2019 us=859457   status_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859472   status_file_version = 1
Fri Jan 18 02:48:30 2019 us=859478   status_file_update_freq = 60
Fri Jan 18 02:48:30 2019 us=859484   occ = ENABLED
Fri Jan 18 02:48:30 2019 us=859489   rcvbuf = 0
Fri Jan 18 02:48:30 2019 us=859494   sndbuf = 0
Fri Jan 18 02:48:30 2019 us=859499   mark = 0
Fri Jan 18 02:48:30 2019 us=859504   sockflags = 0
Fri Jan 18 02:48:30 2019 us=859510   fast_io = DISABLED
Fri Jan 18 02:48:30 2019 us=859515   comp.alg = 11
Fri Jan 18 02:48:30 2019 us=859520   comp.flags = 0
Fri Jan 18 02:48:30 2019 us=859526   route_script = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859531   route_default_gateway = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859536   route_default_metric = 0
Fri Jan 18 02:48:30 2019 us=859542   route_noexec = DISABLED
Fri Jan 18 02:48:30 2019 us=859547   route_delay = 0
Fri Jan 18 02:48:30 2019 us=859552   route_delay_window = 30
Fri Jan 18 02:48:30 2019 us=859558   route_delay_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=859563   route_nopull = DISABLED
Fri Jan 18 02:48:30 2019 us=859569   route_gateway_via_dhcp = DISABLED
Fri Jan 18 02:48:30 2019 us=859574   allow_pull_fqdn = DISABLED
Fri Jan 18 02:48:30 2019 us=859579   management_addr = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859585   management_port = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859590   management_user_pass = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859596   management_log_history_cache = 250
Fri Jan 18 02:48:30 2019 us=859601   management_echo_buffer_size = 100
Fri Jan 18 02:48:30 2019 us=859607   management_write_peer_info_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859625   management_client_user = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859631   management_client_group = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859637   management_flags = 0
Fri Jan 18 02:48:30 2019 us=859642   shared_secret_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859648   key_direction = not set
Fri Jan 18 02:48:30 2019 us=859653   ciphername = 'BF-CBC'
Fri Jan 18 02:48:30 2019 us=859659   ncp_enabled = ENABLED
Fri Jan 18 02:48:30 2019 us=859664   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri Jan 18 02:48:30 2019 us=859670   authname = 'SHA1'
Fri Jan 18 02:48:30 2019 us=859675   prng_hash = 'SHA1'
Fri Jan 18 02:48:30 2019 us=859681   prng_nonce_secret_len = 16
Fri Jan 18 02:48:30 2019 us=859686   keysize = 0
Fri Jan 18 02:48:30 2019 us=859692   engine = DISABLED
Fri Jan 18 02:48:30 2019 us=859697   replay = ENABLED
Fri Jan 18 02:48:30 2019 us=859703   mute_replay_warnings = DISABLED
Fri Jan 18 02:48:30 2019 us=859708   replay_window = 64
Fri Jan 18 02:48:30 2019 us=859713   replay_time = 15
Fri Jan 18 02:48:30 2019 us=859719   packet_id_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859724   use_iv = ENABLED
Fri Jan 18 02:48:30 2019 us=859730   test_crypto = DISABLED
Fri Jan 18 02:48:30 2019 us=859735   tls_server = DISABLED
Fri Jan 18 02:48:30 2019 us=859745   tls_client = ENABLED
Fri Jan 18 02:48:30 2019 us=859750   key_method = 2
Fri Jan 18 02:48:30 2019 us=859756   ca_file = '[[INLINE]]'
Fri Jan 18 02:48:30 2019 us=859761   ca_path = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859766   dh_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859772   cert_file = '[[INLINE]]'
Fri Jan 18 02:48:30 2019 us=859777   extra_certs_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859783   priv_key_file = '[[INLINE]]'
Fri Jan 18 02:48:30 2019 us=859788   pkcs12_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859793   cipher_list = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859798   tls_cert_profile = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859804   tls_verify = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859809   tls_export_cert = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859814   verify_x509_type = 0
Fri Jan 18 02:48:30 2019 us=859828   verify_x509_name = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859837   crl_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859842   ns_cert_type = 0
Fri Jan 18 02:48:30 2019 us=859848   remote_cert_ku[i] = 65535
Fri Jan 18 02:48:30 2019 us=859853   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859858   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859863   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859868   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859874   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859879   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859884   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859889   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859894   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859899   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859904   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859910   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859915   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859920   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859925   remote_cert_ku[i] = 0
Fri Jan 18 02:48:30 2019 us=859930   remote_cert_eku = 'TLS Web Server Authentication'
Fri Jan 18 02:48:30 2019 us=859936   ssl_flags = 0
Fri Jan 18 02:48:30 2019 us=859941   tls_timeout = 2
Fri Jan 18 02:48:30 2019 us=859946   renegotiate_bytes = -1
Fri Jan 18 02:48:30 2019 us=859952   renegotiate_packets = 0
Fri Jan 18 02:48:30 2019 us=859957   renegotiate_seconds = 3600
Fri Jan 18 02:48:30 2019 us=859963   handshake_window = 60
Fri Jan 18 02:48:30 2019 us=859968   transition_window = 3600
Fri Jan 18 02:48:30 2019 us=859974   single_session = DISABLED
Fri Jan 18 02:48:30 2019 us=859979   push_peer_info = DISABLED
Fri Jan 18 02:48:30 2019 us=859984   tls_exit = DISABLED
Fri Jan 18 02:48:30 2019 us=859990   tls_auth_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=859995   tls_crypt_file = '[[INLINE]]'
Fri Jan 18 02:48:30 2019 us=860000   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860006   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860011   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860016   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860022   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860027   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860032   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860037   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860042   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860047   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860053   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860058   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860063   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860068   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860073   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860078   pkcs11_protected_authentication = DISABLED
Fri Jan 18 02:48:30 2019 us=860087   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860093   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860098   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860104   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860109   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860114   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860119   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860125   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860130   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860135   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860140   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860146   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860151   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860156   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860161   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860166   pkcs11_private_mode = 00000000
Fri Jan 18 02:48:30 2019 us=860172   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860177   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860182   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860187   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860193   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860198   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860203   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860208   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860213   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860219   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860224   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860229   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860234   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860240   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860245   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860250   pkcs11_cert_private = DISABLED
Fri Jan 18 02:48:30 2019 us=860256   pkcs11_pin_cache_period = -1
Fri Jan 18 02:48:30 2019 us=860262   pkcs11_id = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860267   pkcs11_id_management = DISABLED
Fri Jan 18 02:48:30 2019 us=860278   server_network = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860284   server_netmask = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860291   server_network_ipv6 = ::
Fri Jan 18 02:48:30 2019 us=860300   server_netbits_ipv6 = 0
Fri Jan 18 02:48:30 2019 us=860306   server_bridge_ip = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860312   server_bridge_netmask = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860318   server_bridge_pool_start = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860324   server_bridge_pool_end = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860329   ifconfig_pool_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=860335   ifconfig_pool_start = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860341   ifconfig_pool_end = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860346   ifconfig_pool_netmask = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860352   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860357   ifconfig_pool_persist_refresh_freq = 600
Fri Jan 18 02:48:30 2019 us=860362   ifconfig_ipv6_pool_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=860371   ifconfig_ipv6_pool_base = ::
Fri Jan 18 02:48:30 2019 us=860377   ifconfig_ipv6_pool_netbits = 0
Fri Jan 18 02:48:30 2019 us=860383   n_bcast_buf = 256
Fri Jan 18 02:48:30 2019 us=860388   tcp_queue_limit = 64
Fri Jan 18 02:48:30 2019 us=860394   real_hash_size = 256
Fri Jan 18 02:48:30 2019 us=860399   virtual_hash_size = 256
Fri Jan 18 02:48:30 2019 us=860404   client_connect_script = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860410   learn_address_script = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860415   client_disconnect_script = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860421   client_config_dir = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860426   ccd_exclusive = DISABLED
Fri Jan 18 02:48:30 2019 us=860435   tmp_dir = '/'
Fri Jan 18 02:48:30 2019 us=860441   push_ifconfig_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=860447   push_ifconfig_local = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860453   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jan 18 02:48:30 2019 us=860459   push_ifconfig_ipv6_defined = DISABLED
Fri Jan 18 02:48:30 2019 us=860472   push_ifconfig_ipv6_local = ::/0
Fri Jan 18 02:48:30 2019 us=860479   push_ifconfig_ipv6_remote = ::
Fri Jan 18 02:48:30 2019 us=860484   enable_c2c = DISABLED
Fri Jan 18 02:48:30 2019 us=860490   duplicate_cn = DISABLED
Fri Jan 18 02:48:30 2019 us=860495   cf_max = 0
Fri Jan 18 02:48:30 2019 us=860501   cf_per = 0
Fri Jan 18 02:48:30 2019 us=860506   max_clients = 1024
Fri Jan 18 02:48:30 2019 us=860511   max_routes_per_client = 256
Fri Jan 18 02:48:30 2019 us=860517   auth_user_pass_verify_script = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860522   auth_user_pass_verify_script_via_file = DISABLED
Fri Jan 18 02:48:30 2019 us=860528   auth_token_generate = DISABLED
Fri Jan 18 02:48:30 2019 us=860533   auth_token_lifetime = 0
Fri Jan 18 02:48:30 2019 us=860538   port_share_host = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860544   port_share_port = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860549   client = ENABLED
Fri Jan 18 02:48:30 2019 us=860554   pull = ENABLED
Fri Jan 18 02:48:30 2019 us=860559   auth_user_pass_file = '[UNDEF]'
Fri Jan 18 02:48:30 2019 us=860567 OpenVPN 2.4.6 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 26 2018
Fri Jan 18 02:48:30 2019 us=860578 library versions: OpenSSL 1.0.2k-fips  26 Jan 2017, LZO 2.06
Fri Jan 18 02:48:30 2019 us=861027 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Fri Jan 18 02:48:30 2019 us=861056 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 18 02:48:30 2019 us=861064 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Fri Jan 18 02:48:30 2019 us=861071 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 18 02:48:30 2019 us=861079 LZ4v2 compression initializing
Fri Jan 18 02:48:30 2019 us=861129 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Fri Jan 18 02:48:30 2019 us=883586 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Fri Jan 18 02:48:30 2019 us=883706 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Jan 18 02:48:30 2019 us=883716 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Jan 18 02:48:30 2019 us=883854 TCP/UDP: Preserving recently used remote address: [AF_INET]"old.ip.of.server":7794
Fri Jan 18 02:48:30 2019 us=883878 Socket Buffers: R=[131072->131072] S=[16384->16384]
Fri Jan 18 02:48:30 2019 us=883886 Attempting to establish TCP connection with [AF_INET]"old.ip.of.server":7794 [nonblock]
Fri Jan 18 02:48:31 2019 us=884084 TCP connection established with [AF_INET]"old.ip.of.server":7794
Fri Jan 18 02:48:31 2019 us=884164 TCP_CLIENT link local: (not bound)
Fri Jan 18 02:48:31 2019 us=884175 TCP_CLIENT link remote: [AF_INET]"old.ip.of.server":7794
Fri Jan 18 02:48:31 2019 us=884183 NOTE: chroot will be delayed because of --client, --pull, or --up-delay
Fri Jan 18 02:48:31 2019 us=884189 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Fri Jan 18 02:48:31 2019 us=922116 TLS: Initial packet from [AF_INET]"old.ip.of.server":7794, sid=5c21d061 4115b333
Fri Jan 18 02:48:32 2019 us=152811 VERIFY OK: depth=1, CN=Easy-RSA CA
Fri Jan 18 02:48:32 2019 us=153018 VERIFY KU OK
Fri Jan 18 02:48:32 2019 us=153033 Validating certificate extended key usage
Fri Jan 18 02:48:32 2019 us=153041 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Jan 18 02:48:32 2019 us=153061 VERIFY EKU OK
Fri Jan 18 02:48:32 2019 us=153068 VERIFY OK: depth=0, CN=jr-vpn-server
Fri Jan 18 02:48:32 2019 us=313099 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Jan 18 02:48:32 2019 us=313170 [jr-vpn-server] Peer Connection Initiated with [AF_INET]"old.ip.of.server":7794
Fri Jan 18 02:48:33 2019 us=472471 SENT CONTROL [jr-vpn-server]: 'PUSH_REQUEST' (status=1)
Fri Jan 18 02:48:33 2019 us=590436 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.0.0,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ping 15,ping-restart 60,ifconfig 10.8.0.4 10.8.0.1,peer-id 0,cipher AES-256-GCM'
Fri Jan 18 02:48:33 2019 us=590560 OPTIONS IMPORT: timers and/or timeouts modified
Fri Jan 18 02:48:33 2019 us=590571 OPTIONS IMPORT: --ifconfig/up options modified
Fri Jan 18 02:48:33 2019 us=590577 OPTIONS IMPORT: route options modified
Fri Jan 18 02:48:33 2019 us=590582 OPTIONS IMPORT: peer-id set
Fri Jan 18 02:48:33 2019 us=590587 OPTIONS IMPORT: adjusting link_mtu to 1627
Fri Jan 18 02:48:33 2019 us=590592 OPTIONS IMPORT: data channel crypto options modified
Fri Jan 18 02:48:33 2019 us=590600 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Jan 18 02:48:33 2019 us=590648 Data Channel MTU parms [ L:1555 D:1450 EF:55 EB:406 ET:0 EL:3 ]
Fri Jan 18 02:48:33 2019 us=590722 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 18 02:48:33 2019 us=590730 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 18 02:48:33 2019 us=590922 ROUTE_GATEWAY 172.19.143.253/255.255.240.0 IFACE=eth0 HWADDR=00:16:3e:0c:36:3e
Fri Jan 18 02:48:33 2019 us=591187 TUN/TAP device tun0 opened
Fri Jan 18 02:48:33 2019 us=591216 TUN/TAP TX queue length set to 100
Fri Jan 18 02:48:33 2019 us=591230 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Jan 18 02:48:33 2019 us=591244 /sbin/ip link set dev tun0 up mtu 1500
Fri Jan 18 02:48:33 2019 us=594168 /sbin/ip addr add dev tun0 local 10.8.0.4 peer 10.8.0.1
Fri Jan 18 02:48:33 2019 us=597591 /sbin/ip route add 192.168.0.0/16 via 10.8.0.1
Fri Jan 18 02:48:33 2019 us=598450 /sbin/ip route add 10.8.0.0/24 via 10.8.0.1
Fri Jan 18 02:48:33 2019 us=602046 /sbin/ip route add 10.8.0.1/32 via 10.8.0.1
RTNETLINK answers: File exists
Fri Jan 18 02:48:33 2019 us=602895 ERROR: Linux route add command failed: external program exited with error status: 2
Thu Jan 17 18:48:33 2019 us=602935 chroot to '/run/openvpn-client/jr-ovpn' and cd to '/' succeeded
Thu Jan 17 18:48:33 2019 us=602950 GID set to nobody
Thu Jan 17 18:48:33 2019 us=602961 UID set to nobody
Thu Jan 17 18:48:33 2019 us=602969 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Jan 17 18:48:33 2019 us=602978 Initialization Sequence Completed
Thu Jan 17 18:49:48 2019 us=838734 [jr-vpn-server] Inactivity timeout (--ping-restart), restarting
Thu Jan 17 18:49:48 2019 us=838932 TCP/UDP: Closing socket
Thu Jan 17 18:49:48 2019 us=839007 SIGUSR1[soft,ping-restart] received, process restarting
Thu Jan 17 18:49:48 2019 us=839027 Restart pause, 5 second(s)
Thu Jan 17 18:49:53 2019 us=839130 Re-using SSL/TLS context
Thu Jan 17 18:49:53 2019 us=839214 LZ4v2 compression initializing
Thu Jan 17 18:49:53 2019 us=839368 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:49:53 2019 us=840151 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:49:53 2019 us=840193 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:49:53 2019 us=840202 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:49:53 2019 us=840219 TCP/UDP: Preserving recently used remote address: [AF_INET]"old.ip.of.server":7794
Thu Jan 17 18:49:53 2019 us=840246 Socket Buffers: R=[131072->131072] S=[16384->16384]
Thu Jan 17 18:49:53 2019 us=840266 Attempting to establish TCP connection with [AF_INET]"old.ip.of.server":7794 [nonblock]
Thu Jan 17 18:51:53 2019 us=854917 TCP: connect to [AF_INET]"old.ip.of.server":7794 failed: Connection timed out
Thu Jan 17 18:51:53 2019 us=855069 SIGUSR1[connection failed(soft),init_instance] received, process restarting
Thu Jan 17 18:51:53 2019 us=855090 Restart pause, 5 second(s)
Thu Jan 17 18:51:58 2019 us=855232 Re-using SSL/TLS context
Thu Jan 17 18:51:58 2019 us=855321 LZ4v2 compression initializing
Thu Jan 17 18:51:58 2019 us=855404 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:51:58 2019 us=856652 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:51:58 2019 us=856669 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:51:58 2019 us=856697 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:51:58 2019 us=856706 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:51:58 2019 us=856799 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:51:58 2019 us=856809 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:51:58 2019 us=856845 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:51:58 2019 us=856861 Restart pause, 5 second(s)
Thu Jan 17 18:52:03 2019 us=856998 Re-using SSL/TLS context
Thu Jan 17 18:52:03 2019 us=857073 LZ4v2 compression initializing
Thu Jan 17 18:52:03 2019 us=857149 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:52:03 2019 us=857333 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:03 2019 us=857347 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:52:03 2019 us=857372 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:52:03 2019 us=857380 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:52:03 2019 us=857454 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:03 2019 us=857462 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:52:03 2019 us=857496 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:52:03 2019 us=857510 Restart pause, 5 second(s)
Thu Jan 17 18:52:08 2019 us=857647 Re-using SSL/TLS context
Thu Jan 17 18:52:08 2019 us=857719 LZ4v2 compression initializing
Thu Jan 17 18:52:08 2019 us=857795 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:52:08 2019 us=857958 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:08 2019 us=857971 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:52:08 2019 us=857998 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:52:08 2019 us=858005 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:52:08 2019 us=858080 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:08 2019 us=858088 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:52:08 2019 us=858123 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:52:08 2019 us=858137 Restart pause, 5 second(s)
Thu Jan 17 18:52:13 2019 us=858254 Re-using SSL/TLS context
Thu Jan 17 18:52:13 2019 us=858326 LZ4v2 compression initializing
Thu Jan 17 18:52:13 2019 us=858416 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:52:13 2019 us=858607 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:13 2019 us=858659 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:52:13 2019 us=858685 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:52:13 2019 us=858693 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:52:13 2019 us=858775 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:13 2019 us=858784 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:52:13 2019 us=858817 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:52:13 2019 us=858831 Restart pause, 5 second(s)
Thu Jan 17 18:52:18 2019 us=858931 Re-using SSL/TLS context
Thu Jan 17 18:52:18 2019 us=859000 LZ4v2 compression initializing
Thu Jan 17 18:52:18 2019 us=859084 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:52:18 2019 us=859248 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:18 2019 us=859260 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:52:18 2019 us=859286 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:52:18 2019 us=859294 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:52:18 2019 us=859369 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:18 2019 us=859378 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:52:18 2019 us=859410 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:52:18 2019 us=859424 Restart pause, 10 second(s)
Thu Jan 17 18:52:28 2019 us=859573 Re-using SSL/TLS context
Thu Jan 17 18:52:28 2019 us=859685 LZ4v2 compression initializing
Thu Jan 17 18:52:28 2019 us=859773 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:52:28 2019 us=859939 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:28 2019 us=859951 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:52:28 2019 us=859978 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:52:28 2019 us=859986 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:52:28 2019 us=860063 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:28 2019 us=860071 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:52:28 2019 us=860114 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:52:28 2019 us=860130 Restart pause, 20 second(s)
Thu Jan 17 18:52:48 2019 us=860244 Re-using SSL/TLS context
Thu Jan 17 18:52:48 2019 us=860318 LZ4v2 compression initializing
Thu Jan 17 18:52:48 2019 us=860395 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:52:48 2019 us=860570 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:48 2019 us=860585 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:52:48 2019 us=860635 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:52:48 2019 us=860662 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:52:48 2019 us=860743 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:52:48 2019 us=860752 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:52:48 2019 us=860785 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:52:48 2019 us=860799 Restart pause, 40 second(s)
Thu Jan 17 18:53:28 2019 us=860942 Re-using SSL/TLS context
Thu Jan 17 18:53:28 2019 us=861017 LZ4v2 compression initializing
Thu Jan 17 18:53:28 2019 us=861096 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Thu Jan 17 18:53:28 2019 us=861268 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:53:28 2019 us=861280 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Thu Jan 17 18:53:28 2019 us=861308 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Jan 17 18:53:28 2019 us=861315 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Jan 17 18:53:28 2019 us=861396 RESOLVE: Cannot resolve host address: the.dns.name.of.server:7794 (System error)
Thu Jan 17 18:53:28 2019 us=861405 Could not determine IPv4/IPv6 protocol
Thu Jan 17 18:53:28 2019 us=861438 SIGUSR1[soft,init_instance] received, process restarting
Thu Jan 17 18:53:28 2019 us=861454 Restart pause, 80 second(s)
......many many retries goes here...
###
# After the openvpn process on the client was restarted manually...
# The log of the client is following:
###

Thu Jan 17 19:21:39 2019 us=393563 /sbin/ip route del 192.168.0.0/16
Thu Jan 17 19:21:39 2019 us=394499 ERROR: Linux route delete command failed: could not execute external program
Thu Jan 17 19:21:39 2019 us=394528 /sbin/ip route del 10.8.0.0/24
Thu Jan 17 19:21:39 2019 us=395280 ERROR: Linux route delete command failed: could not execute external program
Thu Jan 17 19:21:39 2019 us=395308 Closing TUN/TAP interface
Thu Jan 17 19:21:39 2019 us=395323 /sbin/ip addr del dev tun0 local 10.8.0.4 peer 10.8.0.1
Thu Jan 17 19:21:39 2019 us=395931 Linux ip addr del failed: could not execute external program
Thu Jan 17 19:21:39 2019 us=401697 SIGTERM[hard,init_instance] received, process exiting
Fri Jan 18 03:21:39 2019 us=432908 Current Parameter Settings:
Fri Jan 18 03:21:39 2019 us=432954   config = '/etc/openvpn/client/jr.ovpn'
Fri Jan 18 03:21:39 2019 us=432965   mode = 0
Fri Jan 18 03:21:39 2019 us=432972   persist_config = DISABLED
Fri Jan 18 03:21:39 2019 us=432979   persist_mode = 1
Fri Jan 18 03:21:39 2019 us=432985   show_ciphers = DISABLED
Fri Jan 18 03:21:39 2019 us=432991   show_digests = DISABLED
Fri Jan 18 03:21:39 2019 us=432998   show_engines = DISABLED
Fri Jan 18 03:21:39 2019 us=433005   genkey = DISABLED
Fri Jan 18 03:21:39 2019 us=433011   key_pass_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433018   show_tls_ciphers = DISABLED
Fri Jan 18 03:21:39 2019 us=433024   connect_retry_max = 0
Fri Jan 18 03:21:39 2019 us=433031 Connection profiles [0]:
Fri Jan 18 03:21:39 2019 us=433038   proto = tcp-client
Fri Jan 18 03:21:39 2019 us=433045   local = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433051   local_port = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433057   remote = 'the.dns.name.of.server'
Fri Jan 18 03:21:39 2019 us=433064   remote_port = '7794'
Fri Jan 18 03:21:39 2019 us=433070   remote_float = ENABLED
Fri Jan 18 03:21:39 2019 us=433076   bind_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=433083   bind_local = DISABLED
Fri Jan 18 03:21:39 2019 us=433089   bind_ipv6_only = DISABLED
Fri Jan 18 03:21:39 2019 us=433095   connect_retry_seconds = 5
Fri Jan 18 03:21:39 2019 us=433101   connect_timeout = 120
Fri Jan 18 03:21:39 2019 us=433108   socks_proxy_server = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433114   socks_proxy_port = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433121   tun_mtu = 1500
Fri Jan 18 03:21:39 2019 us=433127   tun_mtu_defined = ENABLED
Fri Jan 18 03:21:39 2019 us=433133   link_mtu = 1500
Fri Jan 18 03:21:39 2019 us=433140   link_mtu_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=433146   tun_mtu_extra = 0
Fri Jan 18 03:21:39 2019 us=433152   tun_mtu_extra_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=433159   mtu_discover_type = -1
Fri Jan 18 03:21:39 2019 us=433165   fragment = 0
Fri Jan 18 03:21:39 2019 us=433172   mssfix = 1450
Fri Jan 18 03:21:39 2019 us=433178   explicit_exit_notification = 0
Fri Jan 18 03:21:39 2019 us=433185 Connection profiles END
Fri Jan 18 03:21:39 2019 us=433191   remote_random = ENABLED
Fri Jan 18 03:21:39 2019 us=433198   ipchange = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433204   dev = 'tun'
Fri Jan 18 03:21:39 2019 us=433210   dev_type = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433216   dev_node = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433223   lladdr = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433229   topology = 1
Fri Jan 18 03:21:39 2019 us=433236   ifconfig_local = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433242   ifconfig_remote_netmask = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433261   ifconfig_noexec = DISABLED
Fri Jan 18 03:21:39 2019 us=433273   ifconfig_nowarn = DISABLED
Fri Jan 18 03:21:39 2019 us=433284   ifconfig_ipv6_local = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433294   ifconfig_ipv6_netbits = 0
Fri Jan 18 03:21:39 2019 us=433305   ifconfig_ipv6_remote = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433314   shaper = 0
Fri Jan 18 03:21:39 2019 us=433324   mtu_test = 0
Fri Jan 18 03:21:39 2019 us=433333   mlock = DISABLED
Fri Jan 18 03:21:39 2019 us=433343   keepalive_ping = 15
Fri Jan 18 03:21:39 2019 us=433350   keepalive_timeout = 30
Fri Jan 18 03:21:39 2019 us=433356   inactivity_timeout = 0
Fri Jan 18 03:21:39 2019 us=433362   ping_send_timeout = 15
Fri Jan 18 03:21:39 2019 us=433368   ping_rec_timeout = 30
Fri Jan 18 03:21:39 2019 us=433375   ping_rec_timeout_action = 2
Fri Jan 18 03:21:39 2019 us=433381   ping_timer_remote = DISABLED
Fri Jan 18 03:21:39 2019 us=433387   remap_sigusr1 = 0
Fri Jan 18 03:21:39 2019 us=433393   persist_tun = ENABLED
Fri Jan 18 03:21:39 2019 us=433399   persist_local_ip = DISABLED
Fri Jan 18 03:21:39 2019 us=433405   persist_remote_ip = DISABLED
Fri Jan 18 03:21:39 2019 us=433415   persist_key = ENABLED
Fri Jan 18 03:21:39 2019 us=433425   passtos = DISABLED
Fri Jan 18 03:21:39 2019 us=433436   resolve_retry_seconds = 1000000000
Fri Jan 18 03:21:39 2019 us=433446   resolve_in_advance = DISABLED
Fri Jan 18 03:21:39 2019 us=433457   username = 'nobody'
Fri Jan 18 03:21:39 2019 us=433464   groupname = 'nobody'
Fri Jan 18 03:21:39 2019 us=433470   chroot_dir = '/run/openvpn-client/jr-ovpn'
Fri Jan 18 03:21:39 2019 us=433476   cd_dir = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433482   selinux_context = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433489   writepid = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433495   up_script = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433501   down_script = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433507   down_pre = DISABLED
Fri Jan 18 03:21:39 2019 us=433513   up_restart = DISABLED
Fri Jan 18 03:21:39 2019 us=433519   up_delay = DISABLED
Fri Jan 18 03:21:39 2019 us=433525   daemon = DISABLED
Fri Jan 18 03:21:39 2019 us=433531   inetd = 0
Fri Jan 18 03:21:39 2019 us=433538   log = ENABLED
Fri Jan 18 03:21:39 2019 us=433544   suppress_timestamps = DISABLED
Fri Jan 18 03:21:39 2019 us=433550   machine_readable_output = DISABLED
Fri Jan 18 03:21:39 2019 us=433556   nice = 0
Fri Jan 18 03:21:39 2019 us=433562   verbosity = 4
Fri Jan 18 03:21:39 2019 us=433568   mute = 0
Fri Jan 18 03:21:39 2019 us=433574   gremlin = 0
Fri Jan 18 03:21:39 2019 us=433580   status_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433586   status_file_version = 1
Fri Jan 18 03:21:39 2019 us=433593   status_file_update_freq = 60
Fri Jan 18 03:21:39 2019 us=433599   occ = ENABLED
Fri Jan 18 03:21:39 2019 us=433605   rcvbuf = 0
Fri Jan 18 03:21:39 2019 us=433629   sndbuf = 0
Fri Jan 18 03:21:39 2019 us=433638   mark = 0
Fri Jan 18 03:21:39 2019 us=433644   sockflags = 0
Fri Jan 18 03:21:39 2019 us=433650   fast_io = DISABLED
Fri Jan 18 03:21:39 2019 us=433656   comp.alg = 11
Fri Jan 18 03:21:39 2019 us=433662   comp.flags = 0
Fri Jan 18 03:21:39 2019 us=433668   route_script = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433675   route_default_gateway = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433681   route_default_metric = 0
Fri Jan 18 03:21:39 2019 us=433687   route_noexec = DISABLED
Fri Jan 18 03:21:39 2019 us=433694   route_delay = 0
Fri Jan 18 03:21:39 2019 us=433700   route_delay_window = 30
Fri Jan 18 03:21:39 2019 us=433706   route_delay_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=433712   route_nopull = DISABLED
Fri Jan 18 03:21:39 2019 us=433718   route_gateway_via_dhcp = DISABLED
Fri Jan 18 03:21:39 2019 us=433725   allow_pull_fqdn = DISABLED
Fri Jan 18 03:21:39 2019 us=433731   management_addr = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433737   management_port = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433744   management_user_pass = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433750   management_log_history_cache = 250
Fri Jan 18 03:21:39 2019 us=433762   management_echo_buffer_size = 100
Fri Jan 18 03:21:39 2019 us=433769   management_write_peer_info_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433776   management_client_user = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433782   management_client_group = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433788   management_flags = 0
Fri Jan 18 03:21:39 2019 us=433795   shared_secret_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433801   key_direction = not set
Fri Jan 18 03:21:39 2019 us=433808   ciphername = 'BF-CBC'
Fri Jan 18 03:21:39 2019 us=433814   ncp_enabled = ENABLED
Fri Jan 18 03:21:39 2019 us=433820   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Fri Jan 18 03:21:39 2019 us=433826   authname = 'SHA1'
Fri Jan 18 03:21:39 2019 us=433833   prng_hash = 'SHA1'
Fri Jan 18 03:21:39 2019 us=433839   prng_nonce_secret_len = 16
Fri Jan 18 03:21:39 2019 us=433854   keysize = 0
Fri Jan 18 03:21:39 2019 us=433861   engine = DISABLED
Fri Jan 18 03:21:39 2019 us=433867   replay = ENABLED
Fri Jan 18 03:21:39 2019 us=433873   mute_replay_warnings = DISABLED
Fri Jan 18 03:21:39 2019 us=433880   replay_window = 64
Fri Jan 18 03:21:39 2019 us=433886   replay_time = 15
Fri Jan 18 03:21:39 2019 us=433892   packet_id_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433898   use_iv = ENABLED
Fri Jan 18 03:21:39 2019 us=433905   test_crypto = DISABLED
Fri Jan 18 03:21:39 2019 us=433911   tls_server = DISABLED
Fri Jan 18 03:21:39 2019 us=433917   tls_client = ENABLED
Fri Jan 18 03:21:39 2019 us=433923   key_method = 2
Fri Jan 18 03:21:39 2019 us=433929   ca_file = '[[INLINE]]'
Fri Jan 18 03:21:39 2019 us=433935   ca_path = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433941   dh_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433948   cert_file = '[[INLINE]]'
Fri Jan 18 03:21:39 2019 us=433954   extra_certs_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433960   priv_key_file = '[[INLINE]]'
Fri Jan 18 03:21:39 2019 us=433966   pkcs12_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433973   cipher_list = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433979   tls_cert_profile = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433985   tls_verify = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433991   tls_export_cert = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=433997   verify_x509_type = 0
Fri Jan 18 03:21:39 2019 us=434003   verify_x509_name = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434009   crl_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434015   ns_cert_type = 0
Fri Jan 18 03:21:39 2019 us=434022   remote_cert_ku[i] = 65535
Fri Jan 18 03:21:39 2019 us=434028   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434034   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434040   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434046   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434052   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434058   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434064   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434070   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434076   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434082   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434088   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434093   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434099   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434105   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434111   remote_cert_ku[i] = 0
Fri Jan 18 03:21:39 2019 us=434117   remote_cert_eku = 'TLS Web Server Authentication'
Fri Jan 18 03:21:39 2019 us=434124   ssl_flags = 0
Fri Jan 18 03:21:39 2019 us=434130   tls_timeout = 2
Fri Jan 18 03:21:39 2019 us=434136   renegotiate_bytes = -1
Fri Jan 18 03:21:39 2019 us=434142   renegotiate_packets = 0
Fri Jan 18 03:21:39 2019 us=434148   renegotiate_seconds = 3600
Fri Jan 18 03:21:39 2019 us=434154   handshake_window = 60
Fri Jan 18 03:21:39 2019 us=434161   transition_window = 3600
Fri Jan 18 03:21:39 2019 us=434167   single_session = DISABLED
Fri Jan 18 03:21:39 2019 us=434173   push_peer_info = DISABLED
Fri Jan 18 03:21:39 2019 us=434179   tls_exit = DISABLED
Fri Jan 18 03:21:39 2019 us=434185   tls_auth_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434195   tls_crypt_file = '[[INLINE]]'
Fri Jan 18 03:21:39 2019 us=434202   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434208   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434214   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434221   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434227   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434233   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434239   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434245   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434251   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434257   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434263   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434269   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434275   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434281   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434287   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434292   pkcs11_protected_authentication = DISABLED
Fri Jan 18 03:21:39 2019 us=434299   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434305   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434311   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434318   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434324   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434330   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434336   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434342   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434349   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434355   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434361   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434367   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434373   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434379   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434385   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434392   pkcs11_private_mode = 00000000
Fri Jan 18 03:21:39 2019 us=434398   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434404   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434410   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434416   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434422   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434428   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434434   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434440   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434446   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434452   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434458   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434464   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434470   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434476   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434482   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434488   pkcs11_cert_private = DISABLED
Fri Jan 18 03:21:39 2019 us=434495   pkcs11_pin_cache_period = -1
Fri Jan 18 03:21:39 2019 us=434501   pkcs11_id = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434507   pkcs11_id_management = DISABLED
Fri Jan 18 03:21:39 2019 us=434515   server_network = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434522   server_netmask = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434531   server_network_ipv6 = ::
Fri Jan 18 03:21:39 2019 us=434540   server_netbits_ipv6 = 0
Fri Jan 18 03:21:39 2019 us=434548   server_bridge_ip = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434555   server_bridge_netmask = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434564   server_bridge_pool_start = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434571   server_bridge_pool_end = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434577   ifconfig_pool_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=434584   ifconfig_pool_start = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434591   ifconfig_pool_end = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434598   ifconfig_pool_netmask = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434604   ifconfig_pool_persist_filename = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434620   ifconfig_pool_persist_refresh_freq = 600
Fri Jan 18 03:21:39 2019 us=434629   ifconfig_ipv6_pool_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=434639   ifconfig_ipv6_pool_base = ::
Fri Jan 18 03:21:39 2019 us=434646   ifconfig_ipv6_pool_netbits = 0
Fri Jan 18 03:21:39 2019 us=434653   n_bcast_buf = 256
Fri Jan 18 03:21:39 2019 us=434659   tcp_queue_limit = 64
Fri Jan 18 03:21:39 2019 us=434665   real_hash_size = 256
Fri Jan 18 03:21:39 2019 us=434671   virtual_hash_size = 256
Fri Jan 18 03:21:39 2019 us=434678   client_connect_script = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434685   learn_address_script = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434691   client_disconnect_script = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434697   client_config_dir = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434704   ccd_exclusive = DISABLED
Fri Jan 18 03:21:39 2019 us=434710   tmp_dir = '/'
Fri Jan 18 03:21:39 2019 us=434716   push_ifconfig_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=434724   push_ifconfig_local = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434730   push_ifconfig_remote_netmask = 0.0.0.0
Fri Jan 18 03:21:39 2019 us=434737   push_ifconfig_ipv6_defined = DISABLED
Fri Jan 18 03:21:39 2019 us=434744   push_ifconfig_ipv6_local = ::/0
Fri Jan 18 03:21:39 2019 us=434751   push_ifconfig_ipv6_remote = ::
Fri Jan 18 03:21:39 2019 us=434757   enable_c2c = DISABLED
Fri Jan 18 03:21:39 2019 us=434763   duplicate_cn = DISABLED
Fri Jan 18 03:21:39 2019 us=434770   cf_max = 0
Fri Jan 18 03:21:39 2019 us=434776   cf_per = 0
Fri Jan 18 03:21:39 2019 us=434782   max_clients = 1024
Fri Jan 18 03:21:39 2019 us=434789   max_routes_per_client = 256
Fri Jan 18 03:21:39 2019 us=434795   auth_user_pass_verify_script = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434801   auth_user_pass_verify_script_via_file = DISABLED
Fri Jan 18 03:21:39 2019 us=434808   auth_token_generate = DISABLED
Fri Jan 18 03:21:39 2019 us=434814   auth_token_lifetime = 0
Fri Jan 18 03:21:39 2019 us=434820   port_share_host = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434826   port_share_port = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434833   client = ENABLED
Fri Jan 18 03:21:39 2019 us=434839   pull = ENABLED
Fri Jan 18 03:21:39 2019 us=434851   auth_user_pass_file = '[UNDEF]'
Fri Jan 18 03:21:39 2019 us=434860 OpenVPN 2.4.6 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 26 2018
Fri Jan 18 03:21:39 2019 us=434870 library versions: OpenSSL 1.0.2k-fips  26 Jan 2017, LZO 2.06
Fri Jan 18 03:21:39 2019 us=435300 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Fri Jan 18 03:21:39 2019 us=435326 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 18 03:21:39 2019 us=435334 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Fri Jan 18 03:21:39 2019 us=435342 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Fri Jan 18 03:21:39 2019 us=435351 LZ4v2 compression initializing
Fri Jan 18 03:21:39 2019 us=435395 Control Channel MTU parms [ L:1624 D:1154 EF:96 EB:0 ET:0 EL:3 ]
Fri Jan 18 03:21:39 2019 us=440678 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
Fri Jan 18 03:21:39 2019 us=440714 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Jan 18 03:21:39 2019 us=440722 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Jan 18 03:21:39 2019 us=440833 TCP/UDP: Preserving recently used remote address: [AF_INET]"new.ip.of.server":7794
Fri Jan 18 03:21:39 2019 us=440876 Socket Buffers: R=[131072->131072] S=[16384->16384]
Fri Jan 18 03:21:39 2019 us=440894 Attempting to establish TCP connection with [AF_INET]"new.ip.of.server":7794 [nonblock]
Fri Jan 18 03:21:40 2019 us=441107 TCP connection established with [AF_INET]"new.ip.of.server":7794
Fri Jan 18 03:21:40 2019 us=441178 TCP_CLIENT link local: (not bound)
Fri Jan 18 03:21:40 2019 us=441191 TCP_CLIENT link remote: [AF_INET]"new.ip.of.server":7794
Fri Jan 18 03:21:40 2019 us=441205 NOTE: chroot will be delayed because of --client, --pull, or --up-delay
Fri Jan 18 03:21:40 2019 us=441213 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Fri Jan 18 03:21:40 2019 us=477081 TLS: Initial packet from [AF_INET]"new.ip.of.server":7794, sid=158ddf3b ff70ad70
Fri Jan 18 03:21:40 2019 us=681521 VERIFY OK: depth=1, CN=Easy-RSA CA
Fri Jan 18 03:21:40 2019 us=681741 VERIFY KU OK
Fri Jan 18 03:21:40 2019 us=681758 Validating certificate extended key usage
Fri Jan 18 03:21:40 2019 us=681767 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Fri Jan 18 03:21:40 2019 us=681773 VERIFY EKU OK
Fri Jan 18 03:21:40 2019 us=681779 VERIFY OK: depth=0, CN=jr-vpn-server
Fri Jan 18 03:21:40 2019 us=831649 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Fri Jan 18 03:21:40 2019 us=831725 [jr-vpn-server] Peer Connection Initiated with [AF_INET]"new.ip.of.server":7794
Fri Jan 18 03:21:41 2019 us=960996 SENT CONTROL [jr-vpn-server]: 'PUSH_REQUEST' (status=1)
Fri Jan 18 03:21:42 2019 us=80891 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.0.0,route 10.8.0.0 255.255.255.0,route 10.8.0.1,topology net30,ping 15,ping-restart 60,ifconfig 10.8.0.4 10.8.0.1,peer-id 0,cipher AES-256-GCM'
Fri Jan 18 03:21:42 2019 us=81004 OPTIONS IMPORT: timers and/or timeouts modified
Fri Jan 18 03:21:42 2019 us=81015 OPTIONS IMPORT: --ifconfig/up options modified
Fri Jan 18 03:21:42 2019 us=81021 OPTIONS IMPORT: route options modified
Fri Jan 18 03:21:42 2019 us=81027 OPTIONS IMPORT: peer-id set
Fri Jan 18 03:21:42 2019 us=81033 OPTIONS IMPORT: adjusting link_mtu to 1627
Fri Jan 18 03:21:42 2019 us=81039 OPTIONS IMPORT: data channel crypto options modified
Fri Jan 18 03:21:42 2019 us=81047 Data Channel: using negotiated cipher 'AES-256-GCM'
Fri Jan 18 03:21:42 2019 us=81062 Data Channel MTU parms [ L:1555 D:1450 EF:55 EB:406 ET:0 EL:3 ]
Fri Jan 18 03:21:42 2019 us=81132 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 18 03:21:42 2019 us=81141 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Jan 18 03:21:42 2019 us=81306 ROUTE_GATEWAY 172.19.143.253/255.255.240.0 IFACE=eth0 HWADDR=00:16:3e:0c:36:3e
Fri Jan 18 03:21:42 2019 us=81576 TUN/TAP device tun0 opened
Fri Jan 18 03:21:42 2019 us=81649 TUN/TAP TX queue length set to 100
Fri Jan 18 03:21:42 2019 us=81669 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Jan 18 03:21:42 2019 us=81684 /sbin/ip link set dev tun0 up mtu 1500
Fri Jan 18 03:21:42 2019 us=84840 /sbin/ip addr add dev tun0 local 10.8.0.4 peer 10.8.0.1
Fri Jan 18 03:21:42 2019 us=87658 /sbin/ip route add 192.168.0.0/16 via 10.8.0.1
Fri Jan 18 03:21:42 2019 us=88534 /sbin/ip route add 10.8.0.0/24 via 10.8.0.1
Fri Jan 18 03:21:42 2019 us=89324 /sbin/ip route add 10.8.0.1/32 via 10.8.0.1
RTNETLINK answers: File exists
Fri Jan 18 03:21:42 2019 us=90109 ERROR: Linux route add command failed: external program exited with error status: 2
Thu Jan 17 19:21:42 2019 us=90146 chroot to '/run/openvpn-client/jr-ovpn' and cd to '/' succeeded
Thu Jan 17 19:21:42 2019 us=90163 GID set to nobody
Thu Jan 17 19:21:42 2019 us=90176 UID set to nobody
Thu Jan 17 19:21:42 2019 us=90185 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Jan 17 19:21:42 2019 us=90204 Initialization Sequence Completed
Top
evilroach
OpenVpn Newbie
Posts: 19
Joined: Sat Oct 10, 2015 8:56 pm

Re: OpenVPN-Server with dynamic ip

Post by evilroach » Thu Jan 17, 2019 7:58 pm

TinCanTech wrote: ↑
Thu Jan 17, 2019 2:55 pm
 Because you have not posted any logs I presume you have not inspected yours:
viewtopic.php?f=30&t=22603#p68963
Thank you very much!
I checked the logs indeed, but forgot pasted them here.
I have modified and pasted the logs in original post, please view it.
Top
evilroach
OpenVpn Newbie
Posts: 19
Joined: Sat Oct 10, 2015 8:56 pm

Re: OpenVPN-Server with dynamic ip

Post by evilroach » Thu Jan 17, 2019 8:06 pm

There was another strange thing:
After the link was re-connected, the timestamp in the log of the client had become of an UTC timezone,
although the former was of UTC+8 that was accordingly with the conf of the client.
Top
TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: OpenVPN-Server with dynamic ip

Post by TinCanTech » Thu Jan 17, 2019 8:09 pm

evilroach wrote: ↑
Thu Jan 17, 2019 8:06 pm
 After the link was re-connected
Which is the part of the log that you have not posted ..
Top
evilroach
OpenVpn Newbie
Posts: 19
Joined: Sat Oct 10, 2015 8:56 pm

Re: OpenVPN-Server with dynamic ip

Post by evilroach » Thu Jan 17, 2019 8:18 pm

TinCanTech wrote: ↑
Thu Jan 17, 2019 8:09 pm
evilroach wrote: ↑
Thu Jan 17, 2019 8:06 pm
 After the link was re-connected
Which is the part of the log that you have not posted ..
All of the valuable portion had been pasted. I merely truncated too much retries that would cause the text exceed the limit of the forum.
The logs are consequent(continuously, sorry for my English).
Top
TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: OpenVPN-Server with dynamic ip

Post by TinCanTech » Thu Jan 17, 2019 10:18 pm

If you are having difficulty with this Forum then you can use a paste server and post a link.
Top
evilroach
OpenVpn Newbie
Posts: 19
Joined: Sat Oct 10, 2015 8:56 pm

Re: OpenVPN-Server with dynamic ip

Post by evilroach » Fri Jan 18, 2019 3:05 am

TinCanTech wrote: ↑
Thu Jan 17, 2019 10:18 pm
 If you are having difficulty with this Forum then you can use a paste server and post a link.
Since that I can not find any comments about uploading files in the forum,
finally I had to upload the logs elsewhere, and then make a external URL link.
Hope you can view them.
These are the integral/complete/total logs, that I have cut nothing off.
Sorry about my poor English, I'm a Chinese in fact.
Hope I have expressed things correctly.

Thank you again!
Top
Post Reply

Return to “Server Administration”