Page 1 of 1

Ip not assigned to my client (running on macbook pro). Server running on EC2 nano instance on aws

Posted: Sun Sep 16, 2018 12:57 pm
by miyamoto
Hello,

I'm not able to connect to an openvpn server that I deployed on a aws EC2 nano instance.
I've posted all the required information according to viewtopic.php?f=30&t=22603#p68963
Will be grateful if you could guide me how to solve my issue :(



* Server *

operating system

Code: Select all

uname -a
Linux ip-172-31-42-185 4.14.67-66.56.amzn1.x86_64 #1 SMP Tue Sep 4 22:03:21 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
# uname -a

Network setup:

Code: Select all

ifconfig
eth0      Link encap:Ethernet  HWaddr 06:29:D8:54:2E:5C
          inet adr:172.31.42.185  Bcast:172.31.47.255  Masque:255.255.240.0
          adr inet6: fe80::429:d8ff:fe54:2e5c/64 Scope:Lien
          UP BROADCAST RUNNING MULTICAST  MTU:9001  Metric:1
          RX packets:6660 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2414 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:7684664 (7.3 MiB)  TX bytes:295359 (288.4 KiB)

lo        Link encap:Boucle locale
          inet adr:127.0.0.1  Masque:255.0.0.0
          adr inet6: ::1/128 Scope:Hôte
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:2 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:140 (140.0 b)  TX bytes:140 (140.0 b)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet adr:10.8.0.1  P-t-P:10.8.0.2  Masque:255.255.255.255
          adr inet6: fe80::6a4:e9ed:47c4:2036/64 Scope:Lien
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:100
          RX bytes:0 (0.0 b)  TX bytes:432 (432.0 b)
Server config file:

Code: Select all

port 1194
proto udp
dev tun
;dev-node MyTap
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server.crt
key /etc/openvpn/easy-rsa/pki/private/server.key
dh /etc/openvpn/easy-rsa/pki/dh.pem
;topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
;compress lz4-v2
;push "compress lz4-v2"
;comp-lzo
;max-clients 100
;user nobody
;group nobody
persist-key
persist-tun
status openvpn-status.log
;log         openvpn.log
;log-append  openvpn.log
verb 4
;mute 20
explicit-exit-notify 1
Server log (at --verb 4 and client IP address removed)

Code: Select all

Sun Sep 16 12:23:03 2018 us=948371 WARNING: file '/etc/openvpn/easy-rsa/pki/private/server.key' is group or others accessible
Sun Sep 16 12:23:03 2018 us=948466 Current Parameter Settings:
Sun Sep 16 12:23:03 2018 us=948512   config = '/etc/openvpn/server.conf'
Sun Sep 16 12:23:03 2018 us=948552   mode = 1
Sun Sep 16 12:23:03 2018 us=948589   persist_config = DISABLED
Sun Sep 16 12:23:03 2018 us=948626   persist_mode = 1
Sun Sep 16 12:23:03 2018 us=948662   show_ciphers = DISABLED
Sun Sep 16 12:23:03 2018 us=948712   show_digests = DISABLED
Sun Sep 16 12:23:03 2018 us=948750   show_engines = DISABLED
Sun Sep 16 12:23:03 2018 us=948789   genkey = DISABLED
Sun Sep 16 12:23:03 2018 us=948820   key_pass_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=948844   show_tls_ciphers = DISABLED
Sun Sep 16 12:23:03 2018 us=948866   connect_retry_max = 0
Sun Sep 16 12:23:03 2018 us=948888 Connection profiles [0]:
Sun Sep 16 12:23:03 2018 us=948911   proto = udp
Sun Sep 16 12:23:03 2018 us=948932   local = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=948954   local_port = '1194'
Sun Sep 16 12:23:03 2018 us=948977   remote = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=948998   remote_port = '1194'
Sun Sep 16 12:23:03 2018 us=949020   remote_float = DISABLED
Sun Sep 16 12:23:03 2018 us=949042   bind_defined = DISABLED
Sun Sep 16 12:23:03 2018 us=949063   bind_local = ENABLED
Sun Sep 16 12:23:03 2018 us=949084   bind_ipv6_only = DISABLED
Sun Sep 16 12:23:03 2018 us=949106   connect_retry_seconds = 5
Sun Sep 16 12:23:03 2018 us=949128   connect_timeout = 120
Sun Sep 16 12:23:03 2018 us=949149   socks_proxy_server = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949171   socks_proxy_port = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949193   tun_mtu = 1500
Sun Sep 16 12:23:03 2018 us=949214   tun_mtu_defined = ENABLED
Sun Sep 16 12:23:03 2018 us=949247   link_mtu = 1500
Sun Sep 16 12:23:03 2018 us=949268   link_mtu_defined = DISABLED
Sun Sep 16 12:23:03 2018 us=949289   tun_mtu_extra = 0
Sun Sep 16 12:23:03 2018 us=949309   tun_mtu_extra_defined = DISABLED
Sun Sep 16 12:23:03 2018 us=949330   mtu_discover_type = -1
Sun Sep 16 12:23:03 2018 us=949351   fragment = 0
Sun Sep 16 12:23:03 2018 us=949372   mssfix = 1450
Sun Sep 16 12:23:03 2018 us=949393   explicit_exit_notification = 1
Sun Sep 16 12:23:03 2018 us=949414 Connection profiles END
Sun Sep 16 12:23:03 2018 us=949434   remote_random = DISABLED
Sun Sep 16 12:23:03 2018 us=949455   ipchange = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949476   dev = 'tun'
Sun Sep 16 12:23:03 2018 us=949497   dev_type = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949528   dev_node = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949551   lladdr = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949572   topology = 1
Sun Sep 16 12:23:03 2018 us=949593   ifconfig_local = '10.8.0.1'
Sun Sep 16 12:23:03 2018 us=949621   ifconfig_remote_netmask = '10.8.0.2'
Sun Sep 16 12:23:03 2018 us=949644   ifconfig_noexec = DISABLED
Sun Sep 16 12:23:03 2018 us=949665   ifconfig_nowarn = DISABLED
Sun Sep 16 12:23:03 2018 us=949686   ifconfig_ipv6_local = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949707   ifconfig_ipv6_netbits = 0
Sun Sep 16 12:23:03 2018 us=949728   ifconfig_ipv6_remote = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=949749   shaper = 0
Sun Sep 16 12:23:03 2018 us=949772   mtu_test = 0
Sun Sep 16 12:23:03 2018 us=949794   mlock = DISABLED
Sun Sep 16 12:23:03 2018 us=949815   keepalive_ping = 10
Sun Sep 16 12:23:03 2018 us=949835   keepalive_timeout = 120
Sun Sep 16 12:23:03 2018 us=949856   inactivity_timeout = 0
Sun Sep 16 12:23:03 2018 us=949889   ping_send_timeout = 10
Sun Sep 16 12:23:03 2018 us=949910   ping_rec_timeout = 240
Sun Sep 16 12:23:03 2018 us=949932   ping_rec_timeout_action = 2
Sun Sep 16 12:23:03 2018 us=949953   ping_timer_remote = DISABLED
Sun Sep 16 12:23:03 2018 us=949975   remap_sigusr1 = 0
Sun Sep 16 12:23:03 2018 us=949997   persist_tun = ENABLED
Sun Sep 16 12:23:03 2018 us=950018   persist_local_ip = DISABLED
Sun Sep 16 12:23:03 2018 us=950039   persist_remote_ip = DISABLED
Sun Sep 16 12:23:03 2018 us=950061   persist_key = ENABLED
Sun Sep 16 12:23:03 2018 us=950083   passtos = DISABLED
Sun Sep 16 12:23:03 2018 us=950104   resolve_retry_seconds = 1000000000
Sun Sep 16 12:23:03 2018 us=950126   resolve_in_advance = DISABLED
Sun Sep 16 12:23:03 2018 us=950147   username = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950169   groupname = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950190   chroot_dir = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950238   cd_dir = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950261   selinux_context = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950283   writepid = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950305   up_script = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950338   down_script = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950358   down_pre = DISABLED
Sun Sep 16 12:23:03 2018 us=950379   up_restart = DISABLED
Sun Sep 16 12:23:03 2018 us=950400   up_delay = DISABLED
Sun Sep 16 12:23:03 2018 us=950421   daemon = DISABLED
Sun Sep 16 12:23:03 2018 us=950441   inetd = 0
Sun Sep 16 12:23:03 2018 us=950462   log = DISABLED
Sun Sep 16 12:23:03 2018 us=950483   suppress_timestamps = DISABLED
Sun Sep 16 12:23:03 2018 us=950503   machine_readable_output = DISABLED
Sun Sep 16 12:23:03 2018 us=950524   nice = 0
Sun Sep 16 12:23:03 2018 us=950545   verbosity = 4
Sun Sep 16 12:23:03 2018 us=950565   mute = 0
Sun Sep 16 12:23:03 2018 us=950585   gremlin = 0
Sun Sep 16 12:23:03 2018 us=950605   status_file = 'openvpn-status.log'
Sun Sep 16 12:23:03 2018 us=950626   status_file_version = 1
Sun Sep 16 12:23:03 2018 us=950647   status_file_update_freq = 60
Sun Sep 16 12:23:03 2018 us=950667   occ = ENABLED
Sun Sep 16 12:23:03 2018 us=950688   rcvbuf = 0
Sun Sep 16 12:23:03 2018 us=950708   sndbuf = 0
Sun Sep 16 12:23:03 2018 us=950732   mark = 0
Sun Sep 16 12:23:03 2018 us=950753   sockflags = 0
Sun Sep 16 12:23:03 2018 us=950785   fast_io = DISABLED
Sun Sep 16 12:23:03 2018 us=950806   comp.alg = 0
Sun Sep 16 12:23:03 2018 us=950828   comp.flags = 0
Sun Sep 16 12:23:03 2018 us=950850   route_script = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950872   route_default_gateway = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=950894   route_default_metric = 0
Sun Sep 16 12:23:03 2018 us=950920   route_noexec = DISABLED
Sun Sep 16 12:23:03 2018 us=950943   route_delay = 0
Sun Sep 16 12:23:03 2018 us=950965   route_delay_window = 30
Sun Sep 16 12:23:03 2018 us=950986   route_delay_defined = DISABLED
Sun Sep 16 12:23:03 2018 us=951008   route_nopull = DISABLED
Sun Sep 16 12:23:03 2018 us=951030   route_gateway_via_dhcp = DISABLED
Sun Sep 16 12:23:03 2018 us=951051   allow_pull_fqdn = DISABLED
Sun Sep 16 12:23:03 2018 us=951084   route 10.8.0.0/255.255.255.0/default (not set)/default (not set)
Sun Sep 16 12:23:03 2018 us=951106   management_addr = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951128   management_port = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951148   management_user_pass = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951169   management_log_history_cache = 250
Sun Sep 16 12:23:03 2018 us=951190   management_echo_buffer_size = 100
Sun Sep 16 12:23:03 2018 us=951211   management_write_peer_info_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951233   management_client_user = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951254   management_client_group = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951275   management_flags = 0
Sun Sep 16 12:23:03 2018 us=951296   shared_secret_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951317   key_direction = 1
Sun Sep 16 12:23:03 2018 us=951338   ciphername = 'AES-256-CBC'
Sun Sep 16 12:23:03 2018 us=951359   ncp_enabled = ENABLED
Sun Sep 16 12:23:03 2018 us=951391   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Sep 16 12:23:03 2018 us=951413   authname = 'SHA1'
Sun Sep 16 12:23:03 2018 us=951435   prng_hash = 'SHA1'
Sun Sep 16 12:23:03 2018 us=951457   prng_nonce_secret_len = 16
Sun Sep 16 12:23:03 2018 us=951478   keysize = 0
Sun Sep 16 12:23:03 2018 us=951499   engine = DISABLED
Sun Sep 16 12:23:03 2018 us=951521   replay = ENABLED
Sun Sep 16 12:23:03 2018 us=951542   mute_replay_warnings = DISABLED
Sun Sep 16 12:23:03 2018 us=951564   replay_window = 64
Sun Sep 16 12:23:03 2018 us=951585   replay_time = 15
Sun Sep 16 12:23:03 2018 us=951606   packet_id_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951628   use_iv = ENABLED
Sun Sep 16 12:23:03 2018 us=951649   test_crypto = DISABLED
Sun Sep 16 12:23:03 2018 us=951670   tls_server = ENABLED
Sun Sep 16 12:23:03 2018 us=951692   tls_client = DISABLED
Sun Sep 16 12:23:03 2018 us=951713   key_method = 2
Sun Sep 16 12:23:03 2018 us=951734   ca_file = '/etc/openvpn/easy-rsa/pki/ca.crt'
Sun Sep 16 12:23:03 2018 us=951768   ca_path = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951788   dh_file = '/etc/openvpn/easy-rsa/pki/dh.pem'
Sun Sep 16 12:23:03 2018 us=951810   cert_file = '/etc/openvpn/easy-rsa/pki/issued/server.crt'
Sun Sep 16 12:23:03 2018 us=951832   extra_certs_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951853   priv_key_file = '/etc/openvpn/easy-rsa/pki/private/server.key'
Sun Sep 16 12:23:03 2018 us=951874   pkcs12_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951896   cipher_list = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951916   tls_verify = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951937   tls_export_cert = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=951958   verify_x509_type = 0
Sun Sep 16 12:23:03 2018 us=951978   verify_x509_name = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=952011   crl_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=952033   ns_cert_type = 0
Sun Sep 16 12:23:03 2018 us=952054   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952075   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952096   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952118   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952139   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952160   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952182   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952203   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952224   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952245   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952267   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952288   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952314   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952336   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952357   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952379   remote_cert_ku[i] = 0
Sun Sep 16 12:23:03 2018 us=952400   remote_cert_eku = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=952422   ssl_flags = 0
Sun Sep 16 12:23:03 2018 us=952443   tls_timeout = 2
Sun Sep 16 12:23:03 2018 us=952475   renegotiate_bytes = -1
Sun Sep 16 12:23:03 2018 us=952496   renegotiate_packets = 0
Sun Sep 16 12:23:03 2018 us=952517   renegotiate_seconds = 3600
Sun Sep 16 12:23:03 2018 us=952538   handshake_window = 60
Sun Sep 16 12:23:03 2018 us=952559   transition_window = 3600
Sun Sep 16 12:23:03 2018 us=952580   single_session = DISABLED
Sun Sep 16 12:23:03 2018 us=952601   push_peer_info = DISABLED
Sun Sep 16 12:23:03 2018 us=952621   tls_exit = DISABLED
Sun Sep 16 12:23:03 2018 us=952642   tls_auth_file = 'ta.key'
Sun Sep 16 12:23:03 2018 us=952675   tls_crypt_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=952697   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952719   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952741   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952763   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952785   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952807   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952828   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952850   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952872   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952893   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952915   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952937   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952958   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=952980   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=953002   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=953024   pkcs11_protected_authentication = DISABLED
Sun Sep 16 12:23:03 2018 us=953046   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953068   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953089   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953111   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953132   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953153   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953175   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953196   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953218   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953250   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953270   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953291   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953312   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953332   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953353   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953373   pkcs11_private_mode = 00000000
Sun Sep 16 12:23:03 2018 us=953406   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953428   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953449   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953471   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953492   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953513   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953535   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953556   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953577   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953602   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953623   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953645   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953675   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953699   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953721   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953742   pkcs11_cert_private = DISABLED
Sun Sep 16 12:23:03 2018 us=953764   pkcs11_pin_cache_period = -1
Sun Sep 16 12:23:03 2018 us=953785   pkcs11_id = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=953807   pkcs11_id_management = DISABLED
Sun Sep 16 12:23:03 2018 us=953830   server_network = 10.8.0.0
Sun Sep 16 12:23:03 2018 us=953852   server_netmask = 255.255.255.0
Sun Sep 16 12:23:03 2018 us=953877   server_network_ipv6 = ::
Sun Sep 16 12:23:03 2018 us=953899   server_netbits_ipv6 = 0
Sun Sep 16 12:23:03 2018 us=953922   server_bridge_ip = 0.0.0.0
Sun Sep 16 12:23:03 2018 us=953944   server_bridge_netmask = 0.0.0.0
Sun Sep 16 12:23:03 2018 us=953966   server_bridge_pool_start = 0.0.0.0
Sun Sep 16 12:23:03 2018 us=953988   server_bridge_pool_end = 0.0.0.0
Sun Sep 16 12:23:03 2018 us=954010   push_entry = 'route 10.8.0.1'
Sun Sep 16 12:23:03 2018 us=954032   push_entry = 'topology net30'
Sun Sep 16 12:23:03 2018 us=954054   push_entry = 'ping 10'
Sun Sep 16 12:23:03 2018 us=954075   push_entry = 'ping-restart 120'
Sun Sep 16 12:23:03 2018 us=954097   ifconfig_pool_defined = ENABLED
Sun Sep 16 12:23:03 2018 us=954119   ifconfig_pool_start = 10.8.0.4
Sun Sep 16 12:23:03 2018 us=954141   ifconfig_pool_end = 10.8.0.251
Sun Sep 16 12:23:03 2018 us=954163   ifconfig_pool_netmask = 0.0.0.0
Sun Sep 16 12:23:03 2018 us=954184   ifconfig_pool_persist_filename = 'ipp.txt'
Sun Sep 16 12:23:03 2018 us=954245   ifconfig_pool_persist_refresh_freq = 600
Sun Sep 16 12:23:03 2018 us=954270   ifconfig_ipv6_pool_defined = DISABLED
Sun Sep 16 12:23:03 2018 us=954293   ifconfig_ipv6_pool_base = ::
Sun Sep 16 12:23:03 2018 us=954315   ifconfig_ipv6_pool_netbits = 0
Sun Sep 16 12:23:03 2018 us=954337   n_bcast_buf = 256
Sun Sep 16 12:23:03 2018 us=954358   tcp_queue_limit = 64
Sun Sep 16 12:23:03 2018 us=954380   real_hash_size = 256
Sun Sep 16 12:23:03 2018 us=954401   virtual_hash_size = 256
Sun Sep 16 12:23:03 2018 us=954423   client_connect_script = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=954445   learn_address_script = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=954466   client_disconnect_script = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=954491   client_config_dir = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=954514   ccd_exclusive = DISABLED
Sun Sep 16 12:23:03 2018 us=954536   tmp_dir = '/tmp'
Sun Sep 16 12:23:03 2018 us=954557   push_ifconfig_defined = DISABLED
Sun Sep 16 12:23:03 2018 us=954580   push_ifconfig_local = 0.0.0.0
Sun Sep 16 12:23:03 2018 us=954602   push_ifconfig_remote_netmask = 0.0.0.0
Sun Sep 16 12:23:03 2018 us=954623   push_ifconfig_ipv6_defined = DISABLED
Sun Sep 16 12:23:03 2018 us=954645   push_ifconfig_ipv6_local = ::/0
Sun Sep 16 12:23:03 2018 us=954667   push_ifconfig_ipv6_remote = ::
Sun Sep 16 12:23:03 2018 us=954689   enable_c2c = DISABLED
Sun Sep 16 12:23:03 2018 us=954711   duplicate_cn = DISABLED
Sun Sep 16 12:23:03 2018 us=954732   cf_max = 0
Sun Sep 16 12:23:03 2018 us=954753   cf_per = 0
Sun Sep 16 12:23:03 2018 us=954774   max_clients = 1024
Sun Sep 16 12:23:03 2018 us=954795   max_routes_per_client = 256
Sun Sep 16 12:23:03 2018 us=954817   auth_user_pass_verify_script = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=954839   auth_user_pass_verify_script_via_file = DISABLED
Sun Sep 16 12:23:03 2018 us=954860   auth_token_generate = DISABLED
Sun Sep 16 12:23:03 2018 us=954882   auth_token_lifetime = 0
Sun Sep 16 12:23:03 2018 us=954903   port_share_host = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=954924   port_share_port = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=954946   client = DISABLED
Sun Sep 16 12:23:03 2018 us=954967   pull = DISABLED
Sun Sep 16 12:23:03 2018 us=954988   auth_user_pass_file = '[UNDEF]'
Sun Sep 16 12:23:03 2018 us=955011 OpenVPN 2.4.4 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Nov  1 2017
Sun Sep 16 12:23:03 2018 us=955043 library versions: OpenSSL 1.0.2k-fips  26 Jan 2017, LZO 2.08
Sun Sep 16 12:23:03 2018 us=955403 Diffie-Hellman initialized with 2048 bit key
Sun Sep 16 12:23:03 2018 us=955733 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 16 12:23:03 2018 us=955774 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 16 12:23:03 2018 us=955804 TLS-Auth MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Sun Sep 16 12:23:03 2018 us=955947 ROUTE_GATEWAY 172.31.32.1/255.255.240.0 IFACE=eth0 HWADDR=06:29:d8:54:2e:5c
Sun Sep 16 12:23:03 2018 us=956395 TUN/TAP device tun0 opened
Sun Sep 16 12:23:03 2018 us=956461 TUN/TAP TX queue length set to 100
Sun Sep 16 12:23:03 2018 us=956495 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Sep 16 12:23:03 2018 us=956526 /sbin/ip link set dev tun0 up mtu 1500
Sun Sep 16 12:23:03 2018 us=957929 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Sun Sep 16 12:23:03 2018 us=959609 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Sun Sep 16 12:23:03 2018 us=960210 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Sun Sep 16 12:23:03 2018 us=960227 Could not determine IPv4/IPv6 protocol. Using AF_INET
Sun Sep 16 12:23:03 2018 us=960242 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun Sep 16 12:23:03 2018 us=960255 UDPv4 link local (bound): [AF_INET][undef]:1194
Sun Sep 16 12:23:03 2018 us=960260 UDPv4 link remote: [AF_UNSPEC]
Sun Sep 16 12:23:03 2018 us=960269 MULTI: multi_init called, r=256 v=256
Sun Sep 16 12:23:03 2018 us=960286 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sun Sep 16 12:23:03 2018 us=960294 ifconfig_pool_read(), in='client1,10.8.0.4', TODO: IPv6
Sun Sep 16 12:23:03 2018 us=960300 succeeded -> ifconfig_pool_set()
Sun Sep 16 12:23:03 2018 us=960306 IFCONFIG POOL LIST
Sun Sep 16 12:23:03 2018 us=960311 client1,10.8.0.4
Sun Sep 16 12:23:03 2018 us=960327 Initialization Sequence Completed
Sun Sep 16 12:25:09 2018 us=927114 MULTI: multi_create_instance called
Sun Sep 16 12:25:09 2018 us=927168 <client-ip>:61036 Re-using SSL/TLS context
Sun Sep 16 12:25:09 2018 us=927255 <client-ip>:61036 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Sun Sep 16 12:25:09 2018 us=927266 <client-ip>:61036 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Sun Sep 16 12:25:09 2018 us=927292 <client-ip>:61036 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Sun Sep 16 12:25:09 2018 us=927305 <client-ip>:61036 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Sun Sep 16 12:25:09 2018 us=928006 <client-ip>:61036 TLS: Initial packet from [AF_INET]<client-ip>:61036, sid=c8fd730a 3b2c11d5
Sun Sep 16 12:25:10 2018 us=111410 <client-ip>:61036 VERIFY OK: depth=1, CN=bs
Sun Sep 16 12:25:10 2018 us=111585 <client-ip>:61036 VERIFY OK: depth=0, CN=client1
Sun Sep 16 12:25:10 2018 us=134960 <client-ip>:61036 peer info: IV_VER=2.4.6
Sun Sep 16 12:25:10 2018 us=135068 <client-ip>:61036 peer info: IV_PLAT=mac
Sun Sep 16 12:25:10 2018 us=135159 <client-ip>:61036 peer info: IV_PROTO=2
Sun Sep 16 12:25:10 2018 us=135227 <client-ip>:61036 peer info: IV_NCP=2
Sun Sep 16 12:25:10 2018 us=135265 <client-ip>:61036 peer info: IV_LZ4=1
Sun Sep 16 12:25:10 2018 us=135301 <client-ip>:61036 peer info: IV_LZ4v2=1
Sun Sep 16 12:25:10 2018 us=135336 <client-ip>:61036 peer info: IV_LZO=1
Sun Sep 16 12:25:10 2018 us=135372 <client-ip>:61036 peer info: IV_COMP_STUB=1
Sun Sep 16 12:25:10 2018 us=135409 <client-ip>:61036 peer info: IV_COMP_STUBv2=1
Sun Sep 16 12:25:10 2018 us=135462 <client-ip>:61036 peer info: IV_TCPNL=1
Sun Sep 16 12:25:10 2018 us=213847 <client-ip>:61036 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun Sep 16 12:25:10 2018 us=213913 <client-ip>:61036 [client1] Peer Connection Initiated with [AF_INET]<client-ip>:61036
Sun Sep 16 12:25:10 2018 us=213974 client1/<client-ip>:61036 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Sun Sep 16 12:25:10 2018 us=214045 client1/<client-ip>:61036 MULTI: Learn: 10.8.0.6 -> client1/<client-ip>:61036
Sun Sep 16 12:25:10 2018 us=214083 client1/<client-ip>:61036 MULTI: primary virtual IP for client1/<client-ip>:61036: 10.8.0.6
Sun Sep 16 12:25:11 2018 us=409797 client1/<client-ip>:61036 PUSH: Received control message: 'PUSH_REQUEST'
Sun Sep 16 12:25:11 2018 us=409964 client1/<client-ip>:61036 SENT CONTROL [client1]: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM' (status=1)
Sun Sep 16 12:25:11 2018 us=410009 client1/<client-ip>:61036 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Sep 16 12:25:11 2018 us=410070 client1/<client-ip>:61036 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Sun Sep 16 12:25:11 2018 us=410187 client1/<client-ip>:61036 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Sep 16 12:25:11 2018 us=410245 client1/<client-ip>:61036 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
* Client *

Operating system:

Code: Select all

system_profiler SPSoftwareDataType
Software:

    System Software Overview:

      System Version: macOS 10.13.6 (17G65)
      Kernel Version: Darwin 17.7.0
      Boot Volume: Macintosh HD
      Boot Mode: Normal
      Computer Name: MacBook Pro
      User Name: Miyamoto
      Secure Virtual Memory: Enabled
      System Integrity Protection: Enabled
      Time since boot: 31 days 2:41
Network setup:

Code: Select all

ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
	inet 127.0.0.1 netmask 0xff000000
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
	nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
XHC0: flags=0<> mtu 0
XHC20: flags=0<> mtu 0
XHC1: flags=0<> mtu 0
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether 8c:85:90:80:a8:9d
	inet6 fe80::1c2a:d86e:8ea:e8db%en0 prefixlen 64 secured scopeid 0x8
	inet 192.168.1.31 netmask 0xffffff00 broadcast 192.168.1.255
	inet6 2a02:a03f:5275:7d00:476:fcfc:eea1:4afe prefixlen 64 autoconf secured
	inet6 2a02:a03f:5275:7d00:49f3:6c7a:c324:8906 prefixlen 64 autoconf temporary
	inet6 fd19:e291:5933::49d:872d:3aa4:b846 prefixlen 64 autoconf secured
	inet6 fd19:e291:5933::b0a4:c8b6:3b2a:b197 prefixlen 64 autoconf temporary
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect
	status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
	ether 0e:85:90:80:a8:9d
	media: autoselect
	status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
	ether 0e:60:c8:f8:21:05
	inet6 fe80::c60:c8ff:fef8:2105%awdl0 prefixlen 64 scopeid 0xa
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect
	status: active
en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	options=60<TSO4,TSO6>
	ether fe:00:40:08:e8:01
	media: autoselect <full-duplex>
	status: inactive
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	options=60<TSO4,TSO6>
	ether fe:00:40:08:e8:00
	media: autoselect <full-duplex>
	status: inactive
en3: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	options=60<TSO4,TSO6>
	ether fe:00:40:08:e8:05
	media: autoselect <full-duplex>
	status: inactive
en4: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
	options=60<TSO4,TSO6>
	ether fe:00:40:08:e8:04
	media: autoselect <full-duplex>
	status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=63<RXCSUM,TXCSUM,TSO4,TSO6>
	ether fe:00:40:08:e8:01
	Configuration:
		id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
		maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
		root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
		ipfilter disabled flags 0x2
	member: en1 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 11 priority 0 path cost 0
	member: en2 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 12 priority 0 path cost 0
	member: en3 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 13 priority 0 path cost 0
	member: en4 flags=3<LEARNING,DISCOVER>
	        ifmaxaddr 0 port 14 priority 0 path cost 0
	nd6 options=201<PERFORMNUD,DAD>
	media: <unknown type>
	status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
	inet6 fe80::b765:eb20:9cc:1eea%utun0 prefixlen 64 scopeid 0x10
	nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
	inet6 fe80::59d:143d:3f2d:ce%utun1 prefixlen 64 scopeid 0x11
	nd6 options=201<PERFORMNUD,DAD>
en5: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether ac:de:48:00:11:22
	inet6 fe80::aede:48ff:fe00:1122%en5 prefixlen 64 scopeid 0x7
	nd6 options=201<PERFORMNUD,DAD>
	media: autoselect
	status: active
utun2: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
	inet 10.8.0.6 --> 10.8.0.5 netmask 0xffffffff
Client config file:

Code: Select all

client
;dev tap
dev tun
cipher AES-256-GCM
;dev-node MyTap
;proto tcp
proto udp
remote <server-ip> 1194
ca /.openvpn/ca.crt
cert /.openvpn/client1.crt
key /.openvpn/client1.key
tls-auth /.openvpn/ta.key 1
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nobody
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
remote-cert-tls server
cipher AES-256-CBC
verb 4
;mute 20
Client log (at --verb 4 and server name and IP address removed)

Code: Select all

Sun Sep 16 14:25:06 2018 us=843587 WARNING: file '/.openvpn/client1.key' is group or others accessible
Sun Sep 16 14:25:06 2018 us=844232 WARNING: file '/.openvpn/ta.key' is group or others accessible
Sun Sep 16 14:25:06 2018 us=844259 Current Parameter Settings:
Sun Sep 16 14:25:06 2018 us=844267   config = './client.conf'
Sun Sep 16 14:25:06 2018 us=844273   mode = 0
Sun Sep 16 14:25:06 2018 us=844279   show_ciphers = DISABLED
Sun Sep 16 14:25:06 2018 us=844285   show_digests = DISABLED
Sun Sep 16 14:25:06 2018 us=844290   show_engines = DISABLED
Sun Sep 16 14:25:06 2018 us=844297   genkey = DISABLED
Sun Sep 16 14:25:06 2018 us=844303   key_pass_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844308   show_tls_ciphers = DISABLED
Sun Sep 16 14:25:06 2018 us=844314   connect_retry_max = 0
Sun Sep 16 14:25:06 2018 us=844320 Connection profiles [0]:
Sun Sep 16 14:25:06 2018 us=844326   proto = udp
Sun Sep 16 14:25:06 2018 us=844333   local = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844339   local_port = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844345   remote = '<server-ip>'
Sun Sep 16 14:25:06 2018 us=844351   remote_port = '1194'
Sun Sep 16 14:25:06 2018 us=844357   remote_float = DISABLED
Sun Sep 16 14:25:06 2018 us=844363   bind_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=844370   bind_local = DISABLED
Sun Sep 16 14:25:06 2018 us=844375   bind_ipv6_only = DISABLED
Sun Sep 16 14:25:06 2018 us=844381   connect_retry_seconds = 5
Sun Sep 16 14:25:06 2018 us=844387   connect_timeout = 120
Sun Sep 16 14:25:06 2018 us=844393   socks_proxy_server = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844400   socks_proxy_port = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844406   tun_mtu = 1500
Sun Sep 16 14:25:06 2018 us=844412   tun_mtu_defined = ENABLED
Sun Sep 16 14:25:06 2018 us=844418   link_mtu = 1500
Sun Sep 16 14:25:06 2018 us=844424   link_mtu_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=844430   tun_mtu_extra = 0
Sun Sep 16 14:25:06 2018 us=844437   tun_mtu_extra_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=844443   mtu_discover_type = -1
Sun Sep 16 14:25:06 2018 us=844449   fragment = 0
Sun Sep 16 14:25:06 2018 us=844455   mssfix = 1450
Sun Sep 16 14:25:06 2018 us=844461   explicit_exit_notification = 0
Sun Sep 16 14:25:06 2018 us=844467 Connection profiles END
Sun Sep 16 14:25:06 2018 us=844474   remote_random = DISABLED
Sun Sep 16 14:25:06 2018 us=844479   ipchange = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844486   dev = 'tun'
Sun Sep 16 14:25:06 2018 us=844492   dev_type = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844498   dev_node = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844504   lladdr = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844510   topology = 1
Sun Sep 16 14:25:06 2018 us=844516   ifconfig_local = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844523   ifconfig_remote_netmask = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844528   ifconfig_noexec = DISABLED
Sun Sep 16 14:25:06 2018 us=844534   ifconfig_nowarn = DISABLED
Sun Sep 16 14:25:06 2018 us=844540   ifconfig_ipv6_local = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844547   ifconfig_ipv6_netbits = 0
Sun Sep 16 14:25:06 2018 us=844554   ifconfig_ipv6_remote = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844560   shaper = 0
Sun Sep 16 14:25:06 2018 us=844566   mtu_test = 0
Sun Sep 16 14:25:06 2018 us=844572   mlock = DISABLED
Sun Sep 16 14:25:06 2018 us=844578   keepalive_ping = 0
Sun Sep 16 14:25:06 2018 us=844584   keepalive_timeout = 0
Sun Sep 16 14:25:06 2018 us=844591   inactivity_timeout = 0
Sun Sep 16 14:25:06 2018 us=844596   ping_send_timeout = 0
Sun Sep 16 14:25:06 2018 us=844602   ping_rec_timeout = 0
Sun Sep 16 14:25:06 2018 us=844608   ping_rec_timeout_action = 0
Sun Sep 16 14:25:06 2018 us=844614   ping_timer_remote = DISABLED
Sun Sep 16 14:25:06 2018 us=844624   remap_sigusr1 = 0
Sun Sep 16 14:25:06 2018 us=844631   persist_tun = ENABLED
Sun Sep 16 14:25:06 2018 us=844636   persist_local_ip = DISABLED
Sun Sep 16 14:25:06 2018 us=844642   persist_remote_ip = DISABLED
Sun Sep 16 14:25:06 2018 us=844649   persist_key = ENABLED
Sun Sep 16 14:25:06 2018 us=844655   passtos = DISABLED
Sun Sep 16 14:25:06 2018 us=844661   resolve_retry_seconds = 1000000000
Sun Sep 16 14:25:06 2018 us=844670   resolve_in_advance = DISABLED
Sun Sep 16 14:25:06 2018 us=844677   username = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844683   groupname = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844689   chroot_dir = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844695   cd_dir = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844701   writepid = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844706   up_script = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844713   down_script = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844719   down_pre = DISABLED
Sun Sep 16 14:25:06 2018 us=844724   up_restart = DISABLED
Sun Sep 16 14:25:06 2018 us=844730   up_delay = DISABLED
Sun Sep 16 14:25:06 2018 us=844736   daemon = DISABLED
Sun Sep 16 14:25:06 2018 us=844742   inetd = 0
Sun Sep 16 14:25:06 2018 us=844748   log = DISABLED
Sun Sep 16 14:25:06 2018 us=844755   suppress_timestamps = DISABLED
Sun Sep 16 14:25:06 2018 us=844760   machine_readable_output = DISABLED
Sun Sep 16 14:25:06 2018 us=844767   nice = 0
Sun Sep 16 14:25:06 2018 us=844772   verbosity = 4
Sun Sep 16 14:25:06 2018 us=844778   mute = 0
Sun Sep 16 14:25:06 2018 us=844785   status_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844791   status_file_version = 1
Sun Sep 16 14:25:06 2018 us=844797   status_file_update_freq = 60
Sun Sep 16 14:25:06 2018 us=844803   occ = ENABLED
Sun Sep 16 14:25:06 2018 us=844809   rcvbuf = 0
Sun Sep 16 14:25:06 2018 us=844815   sndbuf = 0
Sun Sep 16 14:25:06 2018 us=844822   sockflags = 0
Sun Sep 16 14:25:06 2018 us=844827   fast_io = DISABLED
Sun Sep 16 14:25:06 2018 us=844834   comp.alg = 0
Sun Sep 16 14:25:06 2018 us=844840   comp.flags = 0
Sun Sep 16 14:25:06 2018 us=844845   route_script = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844851   route_default_gateway = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844858   route_default_metric = 0
Sun Sep 16 14:25:06 2018 us=844864   route_noexec = DISABLED
Sun Sep 16 14:25:06 2018 us=844870   route_delay = 0
Sun Sep 16 14:25:06 2018 us=844876   route_delay_window = 30
Sun Sep 16 14:25:06 2018 us=844882   route_delay_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=844889   route_nopull = DISABLED
Sun Sep 16 14:25:06 2018 us=844896   route_gateway_via_dhcp = DISABLED
Sun Sep 16 14:25:06 2018 us=844903   allow_pull_fqdn = DISABLED
Sun Sep 16 14:25:06 2018 us=844909   management_addr = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844915   management_port = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844921   management_user_pass = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844928   management_log_history_cache = 250
Sun Sep 16 14:25:06 2018 us=844935   management_echo_buffer_size = 100
Sun Sep 16 14:25:06 2018 us=844941   management_write_peer_info_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844948   management_client_user = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844954   management_client_group = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844961   management_flags = 0
Sun Sep 16 14:25:06 2018 us=844967   shared_secret_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=844973   key_direction = 1
Sun Sep 16 14:25:06 2018 us=844980   ciphername = 'AES-256-CBC'
Sun Sep 16 14:25:06 2018 us=844986   ncp_enabled = ENABLED
Sun Sep 16 14:25:06 2018 us=844993   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun Sep 16 14:25:06 2018 us=844999   authname = 'SHA1'
Sun Sep 16 14:25:06 2018 us=845006   prng_hash = 'SHA1'
Sun Sep 16 14:25:06 2018 us=845012   prng_nonce_secret_len = 16
Sun Sep 16 14:25:06 2018 us=845018   keysize = 0
Sun Sep 16 14:25:06 2018 us=845024   engine = DISABLED
Sun Sep 16 14:25:06 2018 us=845031   replay = ENABLED
Sun Sep 16 14:25:06 2018 us=845037   mute_replay_warnings = DISABLED
Sun Sep 16 14:25:06 2018 us=845047   replay_window = 64
Sun Sep 16 14:25:06 2018 us=845054   replay_time = 15
Sun Sep 16 14:25:06 2018 us=845060   packet_id_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845066   use_iv = ENABLED
Sun Sep 16 14:25:06 2018 us=845072   test_crypto = DISABLED
Sun Sep 16 14:25:06 2018 us=845078   tls_server = DISABLED
Sun Sep 16 14:25:06 2018 us=845084   tls_client = ENABLED
Sun Sep 16 14:25:06 2018 us=845089   key_method = 2
Sun Sep 16 14:25:06 2018 us=845095   ca_file = '/.openvpn/ca.crt'
Sun Sep 16 14:25:06 2018 us=845101   ca_path = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845107   dh_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845113   cert_file = /.openvpn/client1.crt'
Sun Sep 16 14:25:06 2018 us=845119   extra_certs_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845126   priv_key_file = '/.openvpn/client1.key'
Sun Sep 16 14:25:06 2018 us=845170   pkcs12_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845179   cipher_list = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845185   tls_cert_profile = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845191   tls_verify = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845266   tls_export_cert = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845303   verify_x509_type = 0
Sun Sep 16 14:25:06 2018 us=845333   verify_x509_name = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845342   crl_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=845348   ns_cert_type = 0
Sun Sep 16 14:25:06 2018 us=845370   remote_cert_ku[i] = 65535
Sun Sep 16 14:25:06 2018 us=845377   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845384   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845390   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845411   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845417   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845436   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845443   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845448   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845476   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845484   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845490   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845496   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845501   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845507   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845513   remote_cert_ku[i] = 0
Sun Sep 16 14:25:06 2018 us=845519   remote_cert_eku = 'TLS Web Server Authentication'
Sun Sep 16 14:25:06 2018 us=845524   ssl_flags = 0
Sun Sep 16 14:25:06 2018 us=849814   tls_timeout = 2
Sun Sep 16 14:25:06 2018 us=849830   renegotiate_bytes = -1
Sun Sep 16 14:25:06 2018 us=849837   renegotiate_packets = 0
Sun Sep 16 14:25:06 2018 us=849843   renegotiate_seconds = 3600
Sun Sep 16 14:25:06 2018 us=849849   handshake_window = 60
Sun Sep 16 14:25:06 2018 us=849855   transition_window = 3600
Sun Sep 16 14:25:06 2018 us=849861   single_session = DISABLED
Sun Sep 16 14:25:06 2018 us=849867   push_peer_info = DISABLED
Sun Sep 16 14:25:06 2018 us=849873   tls_exit = DISABLED
Sun Sep 16 14:25:06 2018 us=849879   tls_auth_file = '/.openvpn/ta.key'
Sun Sep 16 14:25:06 2018 us=849886   tls_crypt_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=849892   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=849899   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=849905   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=849911   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850101   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850111   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850118   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850125   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850131   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850138   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850145   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850151   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850158   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850765   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850779   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850786   pkcs11_protected_authentication = DISABLED
Sun Sep 16 14:25:06 2018 us=850876   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850886   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850893   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850898   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850904   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850909   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850915   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850920   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850926   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850932   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850938   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=850944   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=852107   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=852134   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=852143   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=852150   pkcs11_private_mode = 00000000
Sun Sep 16 14:25:06 2018 us=852156   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852162   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852169   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852175   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852182   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852188   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852194   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852200   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852206   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852212   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852217   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852594   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852606   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852617   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852626   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852633   pkcs11_cert_private = DISABLED
Sun Sep 16 14:25:06 2018 us=852641   pkcs11_pin_cache_period = -1
Sun Sep 16 14:25:06 2018 us=852649   pkcs11_id = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=852657   pkcs11_id_management = DISABLED
Sun Sep 16 14:25:06 2018 us=852694   server_network = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852711   server_netmask = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852771   server_network_ipv6 = ::
Sun Sep 16 14:25:06 2018 us=852787   server_netbits_ipv6 = 0
Sun Sep 16 14:25:06 2018 us=852802   server_bridge_ip = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852816   server_bridge_netmask = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852831   server_bridge_pool_start = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852846   server_bridge_pool_end = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852859   ifconfig_pool_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=852872   ifconfig_pool_start = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852885   ifconfig_pool_end = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852906   ifconfig_pool_netmask = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=852924   ifconfig_pool_persist_filename = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=852937   ifconfig_pool_persist_refresh_freq = 600
Sun Sep 16 14:25:06 2018 us=852948   ifconfig_ipv6_pool_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=852958   ifconfig_ipv6_pool_base = ::
Sun Sep 16 14:25:06 2018 us=852972   ifconfig_ipv6_pool_netbits = 0
Sun Sep 16 14:25:06 2018 us=852986   n_bcast_buf = 256
Sun Sep 16 14:25:06 2018 us=852998   tcp_queue_limit = 64
Sun Sep 16 14:25:06 2018 us=853011   real_hash_size = 256
Sun Sep 16 14:25:06 2018 us=853023   virtual_hash_size = 256
Sun Sep 16 14:25:06 2018 us=853036   client_connect_script = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853048   learn_address_script = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853061   client_disconnect_script = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853075   client_config_dir = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853086   ccd_exclusive = DISABLED
Sun Sep 16 14:25:06 2018 us=853096   tmp_dir = '/tmp'
Sun Sep 16 14:25:06 2018 us=853105   push_ifconfig_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=853118   push_ifconfig_local = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=853132   push_ifconfig_remote_netmask = 0.0.0.0
Sun Sep 16 14:25:06 2018 us=853145   push_ifconfig_ipv6_defined = DISABLED
Sun Sep 16 14:25:06 2018 us=853159   push_ifconfig_ipv6_local = ::/0
Sun Sep 16 14:25:06 2018 us=853171   push_ifconfig_ipv6_remote = ::
Sun Sep 16 14:25:06 2018 us=853184   enable_c2c = DISABLED
Sun Sep 16 14:25:06 2018 us=853191   duplicate_cn = DISABLED
Sun Sep 16 14:25:06 2018 us=853198   cf_max = 0
Sun Sep 16 14:25:06 2018 us=853205   cf_per = 0
Sun Sep 16 14:25:06 2018 us=853212   max_clients = 1024
Sun Sep 16 14:25:06 2018 us=853218   max_routes_per_client = 256
Sun Sep 16 14:25:06 2018 us=853225   auth_user_pass_verify_script = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853232   auth_user_pass_verify_script_via_file = DISABLED
Sun Sep 16 14:25:06 2018 us=853239   auth_token_generate = DISABLED
Sun Sep 16 14:25:06 2018 us=853246   auth_token_lifetime = 0
Sun Sep 16 14:25:06 2018 us=853252   port_share_host = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853259   port_share_port = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853266   client = ENABLED
Sun Sep 16 14:25:06 2018 us=853272   pull = ENABLED
Sun Sep 16 14:25:06 2018 us=853279   auth_user_pass_file = '[UNDEF]'
Sun Sep 16 14:25:06 2018 us=853294 OpenVPN 2.4.6 x86_64-apple-darwin17.5.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on May  1 2018
Sun Sep 16 14:25:06 2018 us=853690 library versions: OpenSSL 1.0.2p  14 Aug 2018, LZO 2.10
Enter Private Key Password:
Sun Sep 16 14:25:09 2018 us=852318 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Sep 16 14:25:09 2018 us=864514 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 16 14:25:09 2018 us=864532 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Sep 16 14:25:09 2018 us=864620 Control Channel MTU parms [ L:1621 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Sun Sep 16 14:25:09 2018 us=864875 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Sun Sep 16 14:25:09 2018 us=864907 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Sun Sep 16 14:25:09 2018 us=864916 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Sun Sep 16 14:25:09 2018 us=864938 TCP/UDP: Preserving recently used remote address: [AF_INET]<server-ip>:1194
Sun Sep 16 14:25:09 2018 us=865024 Socket Buffers: R=[196724->196724] S=[9216->9216]
Sun Sep 16 14:25:09 2018 us=865037 UDP link local: (not bound)
Sun Sep 16 14:25:09 2018 us=865047 UDP link remote: [AF_INET]<server-ip>1194
Sun Sep 16 14:25:09 2018 us=935044 TLS: Initial packet from [AF_INET]<server-ip>:1194, sid=af041815 2c303c0d
Sun Sep 16 14:25:09 2018 us=976360 VERIFY OK: depth=1, CN=bs
Sun Sep 16 14:25:09 2018 us=977090 VERIFY KU OK
Sun Sep 16 14:25:09 2018 us=977104 Validating certificate extended key usage
Sun Sep 16 14:25:09 2018 us=977113 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sun Sep 16 14:25:09 2018 us=977119 VERIFY EKU OK
Sun Sep 16 14:25:09 2018 us=977125 VERIFY OK: depth=0, CN=server
Sun Sep 16 14:25:10 2018 us=146537 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun Sep 16 14:25:10 2018 us=146602 [server] Peer Connection Initiated with [AF_INET]<server-ip>:1194
Sun Sep 16 14:25:11 2018 us=394173 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Sep 16 14:25:11 2018 us=419963 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM'
Sun Sep 16 14:25:11 2018 us=420018 OPTIONS IMPORT: timers and/or timeouts modified
Sun Sep 16 14:25:11 2018 us=420030 OPTIONS IMPORT: --ifconfig/up options modified
Sun Sep 16 14:25:11 2018 us=420037 OPTIONS IMPORT: route options modified
Sun Sep 16 14:25:11 2018 us=420043 OPTIONS IMPORT: peer-id set
Sun Sep 16 14:25:11 2018 us=420049 OPTIONS IMPORT: adjusting link_mtu to 1624
Sun Sep 16 14:25:11 2018 us=420055 OPTIONS IMPORT: data channel crypto options modified
Sun Sep 16 14:25:11 2018 us=420063 Data Channel: using negotiated cipher 'AES-256-GCM'
Sun Sep 16 14:25:11 2018 us=420077 Data Channel MTU parms [ L:1552 D:1450 EF:52 EB:406 ET:0 EL:3 ]
Sun Sep 16 14:25:11 2018 us=420160 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Sep 16 14:25:11 2018 us=420174 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Sun Sep 16 14:25:11 2018 us=420425 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
Sun Sep 16 14:25:11 2018 us=420445 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
Sun Sep 16 14:25:11 2018 us=420544 Opened utun device utun2
Sun Sep 16 14:25:11 2018 us=420553 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Sep 16 14:25:11 2018 us=420564 /sbin/ifconfig utun2 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
Sun Sep 16 14:25:11 2018 us=447282 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Sun Sep 16 14:25:11 2018 us=447378 /sbin/ifconfig utun2 10.8.0.6 10.8.0.5 mtu 1500 netmask 255.255.255.255 up
Sun Sep 16 14:25:11 2018 us=453326 /sbin/route add -net 10.8.0.1 10.8.0.5 255.255.255.255
add net 10.8.0.1: gateway 10.8.0.5
Sun Sep 16 14:25:11 2018 us=462152 Initialization Sequence Completed

Error message in client logs

Code: Select all

Sun Sep 16 14:25:11 2018 us=420425 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
Sun Sep 16 14:25:11 2018 us=420445 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
Sun Sep 16 14:25:11 2018 us=420544 Opened utun device utun2
Sun Sep 16 14:25:11 2018 us=420553 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun Sep 16 14:25:11 2018 us=420564 /sbin/ifconfig utun2 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address


thank you very much for your help

Re: Ip not assigned to my client (running on macbook pro). Server running on EC2 nano instance on aws

Posted: Sun Sep 16, 2018 1:08 pm
by TinCanTech
miyamoto wrote:
Sun Sep 16, 2018 12:57 pm
I've posted all the required information
Well done.
miyamoto wrote:
Sun Sep 16, 2018 12:57 pm
Will be grateful if you could guide me how to solve my issue
There is no issue .. look carefully at your log:
miyamoto wrote:
Sun Sep 16, 2018 12:57 pm
Sun Sep 16 14:25:11 2018 us=420564 /sbin/ifconfig utun2 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
Sun Sep 16 14:25:11 2018 us=447282 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Sun Sep 16 14:25:11 2018 us=447378 /sbin/ifconfig utun2 10.8.0.6 10.8.0.5 mtu 1500 netmask 255.255.255.255 up
Sun Sep 16 14:25:11 2018 us=453326 /sbin/route add -net 10.8.0.1 10.8.0.5 255.255.255.255
add net 10.8.0.1: gateway 10.8.0.5
Sun Sep 16 14:25:11 2018 us=462152 Initialization Sequence Completed
Your VPN is working normally.

Re: Ip not assigned to my client (running on macbook pro). Server running on EC2 nano instance on aws

Posted: Sun Sep 16, 2018 1:31 pm
by miyamoto
thanks TinCanTech for your reply!

Well the message looks fine but I'm not able to ping

Code: Select all

ping 10.8.0.6
PING 10.8.0.6 (10.8.0.6): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
and my ip on (iplocation) still shows my home address

Re: Ip not assigned to my client (running on macbook pro). Server running on EC2 nano instance on aws

Posted: Sun Sep 16, 2018 2:44 pm
by TinCanTech
Check your firewalls to allow 10.8.0.0/24

Also, can your client ping the server at 10.8.0.1 ?

Re: Ip not assigned to my client (running on macbook pro). Server running on EC2 nano instance on aws

Posted: Sun Sep 16, 2018 4:41 pm
by miyamoto
TinCanTech wrote:
Sun Sep 16, 2018 2:44 pm
Check your firewalls to allow 10.8.0.0/24

Also, can your client ping the server at 10.8.0.1 ?
firewall on my macbook is de-activated

I'm able to ping 10.8.0.1 but not able to ping 10.8.0.6 (really strange :()

Code: Select all

ping 10.8.0.1
PING 10.8.0.1 (10.8.0.1): 56 data bytes
64 bytes from 10.8.0.1: icmp_seq=0 ttl=255 time=41.461 ms
64 bytes from 10.8.0.1: icmp_seq=1 ttl=255 time=88.097 ms
64 bytes from 10.8.0.1: icmp_seq=2 ttl=255 time=134.758 ms
^C
--- 10.8.0.1 ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 41.461/88.105/134.758/38.088 ms