In addition, I searched the forums and found previous issues related to the keepalive/ping-restart option in the server config which I changed to 25second maximum for timeouts (keepalive 8 25), unfortunately it still seems to take 1 minute to restart so also trying to figure out why this isn't working either...
Thanks.
Server Conf
Server Config
remote-cert-eku "TLS Web Client Authentication"
management localhost 7507
client-to-client
port 1197
proto udp
dev tap
float
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
#topology subnet
ifconfig-pool-persist ipp.txt
keepalive 8 25
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
persist-key
persist-tun
status openvpn3-status.log
verb 4
explicit-exit-notify 1
log server3.log
Server Log at Verb 4
Code: Select all
2021-04-12 15:02:23 us=817093 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2021-04-12 15:02:23 us=817261 WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure
2021-04-12 15:02:23 us=817276 WARNING: file 'server.key' is group or others accessible
2021-04-12 15:02:23 us=817288 Current Parameter Settings:
2021-04-12 15:02:23 us=817294 config = 'server3.conf'
2021-04-12 15:02:23 us=817299 mode = 1
2021-04-12 15:02:23 us=817303 persist_config = DISABLED
2021-04-12 15:02:23 us=817308 persist_mode = 1
2021-04-12 15:02:23 us=817313 show_ciphers = DISABLED
2021-04-12 15:02:23 us=817317 show_digests = DISABLED
2021-04-12 15:02:23 us=817322 show_engines = DISABLED
2021-04-12 15:02:23 us=817326 genkey = DISABLED
2021-04-12 15:02:23 us=817330 genkey_filename = '[UNDEF]'
2021-04-12 15:02:23 us=817335 key_pass_file = '[UNDEF]'
2021-04-12 15:02:23 us=817339 show_tls_ciphers = DISABLED
2021-04-12 15:02:23 us=817343 connect_retry_max = 0
2021-04-12 15:02:23 us=817348 Connection profiles [0]:
2021-04-12 15:02:23 us=817353 proto = udp
2021-04-12 15:02:23 us=817357 local = '[UNDEF]'
2021-04-12 15:02:23 us=817361 local_port = '1197'
2021-04-12 15:02:23 us=817365 remote = '[UNDEF]'
2021-04-12 15:02:23 us=817370 remote_port = '1197'
2021-04-12 15:02:23 us=817374 remote_float = ENABLED
2021-04-12 15:02:23 us=817378 bind_defined = DISABLED
2021-04-12 15:02:23 us=817382 bind_local = ENABLED
2021-04-12 15:02:23 us=817387 bind_ipv6_only = DISABLED
2021-04-12 15:02:23 us=817391 connect_retry_seconds = 5
2021-04-12 15:02:23 us=817395 connect_timeout = 120
2021-04-12 15:02:23 us=817399 socks_proxy_server = '[UNDEF]'
2021-04-12 15:02:23 us=817404 socks_proxy_port = '[UNDEF]'
2021-04-12 15:02:23 us=817408 tun_mtu = 1500
2021-04-12 15:02:23 us=817413 tun_mtu_defined = ENABLED
2021-04-12 15:02:23 us=817417 link_mtu = 1500
2021-04-12 15:02:23 us=817421 link_mtu_defined = DISABLED
2021-04-12 15:02:23 us=817425 tun_mtu_extra = 32
2021-04-12 15:02:23 us=817430 tun_mtu_extra_defined = ENABLED
2021-04-12 15:02:23 us=817434 mtu_discover_type = -1
2021-04-12 15:02:23 us=817439 fragment = 0
2021-04-12 15:02:23 us=817444 mssfix = 1450
2021-04-12 15:02:23 us=817448 explicit_exit_notification = 1
2021-04-12 15:02:23 us=817452 tls_auth_file = '[INLINE]'
2021-04-12 15:02:23 us=817457 key_direction = 0
2021-04-12 15:02:23 us=817461 tls_crypt_file = '[UNDEF]'
2021-04-12 15:02:23 us=817465 tls_crypt_v2_file = '[UNDEF]'
2021-04-12 15:02:23 us=817470 Connection profiles END
2021-04-12 15:02:23 us=817474 remote_random = DISABLED
2021-04-12 15:02:23 us=817478 ipchange = '[UNDEF]'
2021-04-12 15:02:23 us=817482 dev = 'tap'
2021-04-12 15:02:23 us=817487 dev_type = '[UNDEF]'
2021-04-12 15:02:23 us=817491 dev_node = '[UNDEF]'
2021-04-12 15:02:23 us=817495 lladdr = '[UNDEF]'
2021-04-12 15:02:23 us=817499 topology = 1
2021-04-12 15:02:23 us=817503 ifconfig_local = '[UNDEF]'
2021-04-12 15:02:23 us=817508 ifconfig_remote_netmask = '[UNDEF]'
2021-04-12 15:02:23 us=817512 ifconfig_noexec = DISABLED
2021-04-12 15:02:23 us=817516 ifconfig_nowarn = DISABLED
2021-04-12 15:02:23 us=817520 ifconfig_ipv6_local = '[UNDEF]'
2021-04-12 15:02:23 us=817524 ifconfig_ipv6_netbits = 0
2021-04-12 15:02:23 us=817529 ifconfig_ipv6_remote = '[UNDEF]'
2021-04-12 15:02:23 us=817533 shaper = 0
2021-04-12 15:02:23 us=817537 mtu_test = 0
2021-04-12 15:02:23 us=817541 mlock = DISABLED
2021-04-12 15:02:23 us=817546 keepalive_ping = 8
2021-04-12 15:02:23 us=817550 keepalive_timeout = 25
2021-04-12 15:02:23 us=817554 inactivity_timeout = 0
2021-04-12 15:02:23 us=817558 ping_send_timeout = 8
2021-04-12 15:02:23 us=817562 ping_rec_timeout = 50
2021-04-12 15:02:23 us=817567 ping_rec_timeout_action = 2
2021-04-12 15:02:23 us=817576 ping_timer_remote = DISABLED
2021-04-12 15:02:23 us=817580 remap_sigusr1 = 0
2021-04-12 15:02:23 us=817585 persist_tun = ENABLED
2021-04-12 15:02:23 us=817589 persist_local_ip = DISABLED
2021-04-12 15:02:23 us=817593 persist_remote_ip = DISABLED
2021-04-12 15:02:23 us=817598 persist_key = ENABLED
2021-04-12 15:02:23 us=817602 passtos = DISABLED
2021-04-12 15:02:23 us=817606 resolve_retry_seconds = 1000000000
2021-04-12 15:02:23 us=817610 resolve_in_advance = DISABLED
2021-04-12 15:02:23 us=817614 username = '[UNDEF]'
2021-04-12 15:02:23 us=817619 groupname = '[UNDEF]'
2021-04-12 15:02:23 us=817623 chroot_dir = '[UNDEF]'
2021-04-12 15:02:23 us=817627 cd_dir = '/etc/openvpn'
2021-04-12 15:02:23 us=817631 selinux_context = '[UNDEF]'
2021-04-12 15:02:23 us=817635 writepid = '[UNDEF]'
2021-04-12 15:02:23 us=817640 up_script = '[UNDEF]'
2021-04-12 15:02:23 us=817644 down_script = '[UNDEF]'
2021-04-12 15:02:23 us=817648 down_pre = DISABLED
2021-04-12 15:02:23 us=817652 up_restart = DISABLED
2021-04-12 15:02:23 us=817656 up_delay = DISABLED
2021-04-12 15:02:23 us=817661 daemon = DISABLED
2021-04-12 15:02:23 us=817665 inetd = 0
2021-04-12 15:02:23 us=817669 log = ENABLED
2021-04-12 15:02:23 us=817673 suppress_timestamps = DISABLED
2021-04-12 15:02:23 us=817678 machine_readable_output = DISABLED
2021-04-12 15:02:23 us=817682 nice = 0
2021-04-12 15:02:23 us=817686 verbosity = 4
2021-04-12 15:02:23 us=817690 mute = 0
2021-04-12 15:02:23 us=817694 gremlin = 0
2021-04-12 15:02:23 us=817699 status_file = 'openvpn3-status.log'
2021-04-12 15:02:23 us=817703 status_file_version = 1
2021-04-12 15:02:23 us=817707 status_file_update_freq = 60
2021-04-12 15:02:23 us=817711 occ = ENABLED
2021-04-12 15:02:23 us=817716 rcvbuf = 0
2021-04-12 15:02:23 us=817720 sndbuf = 0
2021-04-12 15:02:23 us=817724 mark = 0
2021-04-12 15:02:23 us=817728 sockflags = 0
2021-04-12 15:02:23 us=817732 fast_io = DISABLED
2021-04-12 15:02:23 us=817737 comp.alg = 0
2021-04-12 15:02:23 us=817741 comp.flags = 0
2021-04-12 15:02:23 us=817745 route_script = '[UNDEF]'
2021-04-12 15:02:23 us=817750 route_default_gateway = '[UNDEF]'
2021-04-12 15:02:23 us=817754 route_default_metric = 0
2021-04-12 15:02:23 us=817758 route_noexec = DISABLED
2021-04-12 15:02:23 us=817763 route_delay = 0
2021-04-12 15:02:23 us=817767 route_delay_window = 30
2021-04-12 15:02:23 us=817771 route_delay_defined = DISABLED
2021-04-12 15:02:23 us=817776 route_nopull = DISABLED
2021-04-12 15:02:23 us=817780 route_gateway_via_dhcp = DISABLED
2021-04-12 15:02:23 us=817784 allow_pull_fqdn = DISABLED
2021-04-12 15:02:23 us=817789 management_addr = 'localhost'
2021-04-12 15:02:23 us=817793 management_port = '7507'
2021-04-12 15:02:23 us=817797 management_user_pass = '[UNDEF]'
2021-04-12 15:02:23 us=817802 management_log_history_cache = 250
2021-04-12 15:02:23 us=817807 management_echo_buffer_size = 100
2021-04-12 15:02:23 us=817811 management_write_peer_info_file = '[UNDEF]'
2021-04-12 15:02:23 us=817815 management_client_user = '[UNDEF]'
2021-04-12 15:02:23 us=817820 management_client_group = '[UNDEF]'
2021-04-12 15:02:23 us=817824 management_flags = 0
2021-04-12 15:02:23 us=817828 shared_secret_file = '[UNDEF]'
2021-04-12 15:02:23 us=817833 key_direction = 0
2021-04-12 15:02:23 us=817837 ciphername = 'AES-256-CBC'
2021-04-12 15:02:23 us=817841 ncp_enabled = ENABLED
2021-04-12 15:02:23 us=817846 ncp_ciphers = 'AES-256-GCM:AES-128-GCM:AES-256-CBC'
2021-04-12 15:02:23 us=817850 authname = 'SHA1'
2021-04-12 15:02:23 us=817855 prng_hash = 'SHA1'
2021-04-12 15:02:23 us=817859 prng_nonce_secret_len = 16
2021-04-12 15:02:23 us=817863 keysize = 0
2021-04-12 15:02:23 us=817868 engine = DISABLED
2021-04-12 15:02:23 us=817872 replay = ENABLED
2021-04-12 15:02:23 us=817876 mute_replay_warnings = DISABLED
2021-04-12 15:02:23 us=817881 replay_window = 64
2021-04-12 15:02:23 us=817885 replay_time = 15
2021-04-12 15:02:23 us=817889 packet_id_file = '[UNDEF]'
2021-04-12 15:02:23 us=817896 test_crypto = DISABLED
2021-04-12 15:02:23 us=817901 tls_server = ENABLED
2021-04-12 15:02:23 us=817905 tls_client = DISABLED
2021-04-12 15:02:23 us=817910 ca_file = 'ca.crt'
2021-04-12 15:02:23 us=817914 ca_path = '[UNDEF]'
2021-04-12 15:02:23 us=817918 dh_file = 'dh2048.pem'
2021-04-12 15:02:23 us=817923 cert_file = 'server.crt'
2021-04-12 15:02:23 us=817927 extra_certs_file = '[UNDEF]'
2021-04-12 15:02:23 us=817932 priv_key_file = 'server.key'
2021-04-12 15:02:23 us=817936 pkcs12_file = '[UNDEF]'
2021-04-12 15:02:23 us=817940 cipher_list = '[UNDEF]'
2021-04-12 15:02:23 us=817945 cipher_list_tls13 = '[UNDEF]'
2021-04-12 15:02:23 us=817949 tls_cert_profile = '[UNDEF]'
2021-04-12 15:02:23 us=817953 tls_verify = '[UNDEF]'
2021-04-12 15:02:23 us=817958 tls_export_cert = '[UNDEF]'
2021-04-12 15:02:23 us=817962 verify_x509_type = 0
2021-04-12 15:02:23 us=817966 verify_x509_name = '[UNDEF]'
2021-04-12 15:02:23 us=817971 crl_file = '[UNDEF]'
2021-04-12 15:02:23 us=817975 ns_cert_type = 0
2021-04-12 15:02:23 us=817979 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=817984 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=817988 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=817992 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=817996 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818001 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818005 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818009 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818013 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818017 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818022 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818026 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818030 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818034 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818038 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818043 remote_cert_ku[i] = 0
2021-04-12 15:02:23 us=818047 remote_cert_eku = 'TLS Web Client Authentication'
2021-04-12 15:02:23 us=818051 ssl_flags = 0
2021-04-12 15:02:23 us=818056 tls_timeout = 2
2021-04-12 15:02:23 us=818060 renegotiate_bytes = -1
2021-04-12 15:02:23 us=818065 renegotiate_packets = 0
2021-04-12 15:02:23 us=818069 renegotiate_seconds = 3600
2021-04-12 15:02:23 us=818073 handshake_window = 60
2021-04-12 15:02:23 us=818078 transition_window = 3600
2021-04-12 15:02:23 us=818082 single_session = DISABLED
2021-04-12 15:02:23 us=818086 push_peer_info = DISABLED
2021-04-12 15:02:23 us=818090 tls_exit = DISABLED
2021-04-12 15:02:23 us=818095 tls_crypt_v2_metadata = '[UNDEF]'
2021-04-12 15:02:23 us=818171 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818360 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818366 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818370 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818374 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818379 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818383 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818387 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818392 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818396 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818400 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818405 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818409 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818413 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818418 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818422 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:23 us=818427 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818431 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818435 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818440 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818450 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818454 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818458 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818463 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818467 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818471 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818475 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818480 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818484 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818488 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818492 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818496 pkcs11_private_mode = 00000000
2021-04-12 15:02:23 us=818500 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818505 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818509 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818513 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818517 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818522 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818526 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818530 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818534 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818539 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818543 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818547 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818552 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818556 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818560 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818564 pkcs11_cert_private = DISABLED
2021-04-12 15:02:23 us=818569 pkcs11_pin_cache_period = -1
2021-04-12 15:02:23 us=818573 pkcs11_id = '[UNDEF]'
2021-04-12 15:02:23 us=818578 pkcs11_id_management = DISABLED
2021-04-12 15:02:23 us=818583 server_network = 0.0.0.0
2021-04-12 15:02:23 us=818588 server_netmask = 0.0.0.0
2021-04-12 15:02:23 us=818593 server_network_ipv6 = ::
2021-04-12 15:02:23 us=818598 server_netbits_ipv6 = 0
2021-04-12 15:02:23 us=818603 server_bridge_ip = 192.168.0.254
2021-04-12 15:02:23 us=818608 server_bridge_netmask = 255.255.255.0
2021-04-12 15:02:23 us=818613 server_bridge_pool_start = 192.168.0.100
2021-04-12 15:02:23 us=818618 server_bridge_pool_end = 192.168.0.200
2021-04-12 15:02:23 us=818623 push_entry = 'route-gateway 192.168.0.254'
2021-04-12 15:02:23 us=818627 push_entry = 'ping 8'
2021-04-12 15:02:23 us=818631 push_entry = 'ping-restart 25'
2021-04-12 15:02:23 us=818636 ifconfig_pool_defined = ENABLED
2021-04-12 15:02:23 us=818641 ifconfig_pool_start = 192.168.0.100
2021-04-12 15:02:23 us=818646 ifconfig_pool_end = 192.168.0.200
2021-04-12 15:02:23 us=818651 ifconfig_pool_netmask = 255.255.255.0
2021-04-12 15:02:23 us=818655 ifconfig_pool_persist_filename = 'ipp.txt'
2021-04-12 15:02:23 us=818660 ifconfig_pool_persist_refresh_freq = 600
2021-04-12 15:02:23 us=818664 ifconfig_ipv6_pool_defined = DISABLED
2021-04-12 15:02:23 us=818669 ifconfig_ipv6_pool_base = ::
2021-04-12 15:02:23 us=818673 ifconfig_ipv6_pool_netbits = 0
2021-04-12 15:02:23 us=818678 n_bcast_buf = 256
2021-04-12 15:02:23 us=818682 tcp_queue_limit = 64
2021-04-12 15:02:23 us=818687 real_hash_size = 256
2021-04-12 15:02:23 us=818691 virtual_hash_size = 256
2021-04-12 15:02:23 us=818695 client_connect_script = '[UNDEF]'
2021-04-12 15:02:23 us=818700 learn_address_script = '[UNDEF]'
2021-04-12 15:02:23 us=818704 client_disconnect_script = '[UNDEF]'
2021-04-12 15:02:23 us=818708 client_config_dir = '[UNDEF]'
2021-04-12 15:02:23 us=818713 ccd_exclusive = DISABLED
2021-04-12 15:02:23 us=818717 tmp_dir = '/tmp'
2021-04-12 15:02:23 us=818721 push_ifconfig_defined = DISABLED
2021-04-12 15:02:23 us=818726 push_ifconfig_local = 0.0.0.0
2021-04-12 15:02:23 us=818731 push_ifconfig_remote_netmask = 0.0.0.0
2021-04-12 15:02:23 us=818736 push_ifconfig_ipv6_defined = DISABLED
2021-04-12 15:02:23 us=818743 push_ifconfig_ipv6_local = ::/0
2021-04-12 15:02:23 us=818748 push_ifconfig_ipv6_remote = ::
2021-04-12 15:02:23 us=818753 enable_c2c = ENABLED
2021-04-12 15:02:23 us=818757 duplicate_cn = DISABLED
2021-04-12 15:02:23 us=818761 cf_max = 0
2021-04-12 15:02:23 us=818766 cf_per = 0
2021-04-12 15:02:23 us=818770 max_clients = 1024
2021-04-12 15:02:23 us=818774 max_routes_per_client = 256
2021-04-12 15:02:23 us=818779 auth_user_pass_verify_script = '[UNDEF]'
2021-04-12 15:02:23 us=818783 auth_user_pass_verify_script_via_file = DISABLED
2021-04-12 15:02:23 us=818787 auth_token_generate = DISABLED
2021-04-12 15:02:23 us=818792 auth_token_lifetime = 0
2021-04-12 15:02:23 us=818796 auth_token_secret_file = '[UNDEF]'
2021-04-12 15:02:23 us=818800 port_share_host = '[UNDEF]'
2021-04-12 15:02:23 us=818804 port_share_port = '[UNDEF]'
2021-04-12 15:02:23 us=818809 vlan_tagging = DISABLED
2021-04-12 15:02:23 us=818813 vlan_accept = all
2021-04-12 15:02:23 us=818818 vlan_pvid = 1
2021-04-12 15:02:23 us=818822 client = DISABLED
2021-04-12 15:02:23 us=818826 pull = DISABLED
2021-04-12 15:02:23 us=818830 auth_user_pass_file = '[UNDEF]'
2021-04-12 15:02:23 us=818836 OpenVPN 2.5.1 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 24 2021
2021-04-12 15:02:23 us=818846 library versions: OpenSSL 1.1.1g FIPS 21 Apr 2020, LZO 2.06
2021-04-12 15:02:23 us=819333 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:7507
2021-04-12 15:02:23 us=819428 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
2021-04-12 15:02:23 us=819436 net_route_v4_best_gw query: dst 0.0.0.0
2021-04-12 15:02:23 us=819504 net_route_v4_best_gw result: via 172.31.0.1 dev eth0
2021-04-12 15:02:23 us=820044 Diffie-Hellman initialized with 2048 bit key
2021-04-12 15:02:23 us=820597 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:02:23 us=820609 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:02:23 us=820619 TLS-Auth MTU parms [ L:1653 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-04-12 15:02:23 us=820995 TUN/TAP device tap0 opened
2021-04-12 15:02:23 us=821012 do_ifconfig, ipv4=0, ipv6=0
2021-04-12 15:02:23 us=821035 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2021-04-12 15:02:23 us=821044 Could not determine IPv4/IPv6 protocol. Using AF_INET
2021-04-12 15:02:23 us=821059 Socket Buffers: R=[212992->212992] S=[212992->212992]
2021-04-12 15:02:23 us=821074 UDPv4 link local (bound): [AF_INET][undef]:1197
2021-04-12 15:02:23 us=821082 UDPv4 link remote: [AF_UNSPEC]
2021-04-12 15:02:23 us=821094 MULTI: multi_init called, r=256 v=256
2021-04-12 15:02:23 us=821121 IFCONFIG POOL IPv4: base=192.168.0.100 size=101
2021-04-12 15:02:23 us=821136 ifconfig_pool_read(), in='client2,192.168.0.100,'
2021-04-12 15:02:23 us=821146 succeeded -> ifconfig_pool_set(hand=0)
2021-04-12 15:02:23 us=821153 ifconfig_pool_read(), in='client3,192.168.0.101,'
2021-04-12 15:02:23 us=821160 succeeded -> ifconfig_pool_set(hand=1)
2021-04-12 15:02:23 us=821168 IFCONFIG POOL LIST
2021-04-12 15:02:23 us=821177 client2,192.168.0.100,
2021-04-12 15:02:23 us=821185 client3,192.168.0.101,
2021-04-12 15:02:23 us=821209 Initialization Sequence Completed
2021-04-12 15:02:30 us=510911 MULTI: multi_create_instance called
2021-04-12 15:02:30 us=510958 18.134.163.128:50794 Re-using SSL/TLS context
2021-04-12 15:02:30 us=511025 18.134.163.128:50794 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:02:30 us=511034 18.134.163.128:50794 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:02:30 us=511157 18.134.163.128:50794 Control Channel MTU parms [ L:1653 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-04-12 15:02:30 us=511167 18.134.163.128:50794 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2021-04-12 15:02:30 us=511202 18.134.163.128:50794 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
2021-04-12 15:02:30 us=511209 18.134.163.128:50794 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
2021-04-12 15:02:30 us=511229 18.134.163.128:50794 TLS: Initial packet from [AF_INET]18.134.163.128:50794, sid=b2cd4010 31c14da9
2021-04-12 15:02:30 us=535685 18.134.163.128:50794 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server1, name=server, emailAddress=mail@host.domain
2021-04-12 15:02:30 us=535944 18.134.163.128:50794 Validating certificate extended key usage
2021-04-12 15:02:30 us=535953 18.134.163.128:50794 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-04-12 15:02:30 us=535959 18.134.163.128:50794 VERIFY EKU OK
2021-04-12 15:02:30 us=535964 18.134.163.128:50794 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=client3, name=server, emailAddress=mail@host.domain
2021-04-12 15:02:30 us=536311 18.134.163.128:50794 peer info: IV_VER=2.5.1
2021-04-12 15:02:30 us=536343 18.134.163.128:50794 peer info: IV_PLAT=linux
2021-04-12 15:02:30 us=536355 18.134.163.128:50794 peer info: IV_PROTO=6
2021-04-12 15:02:30 us=536362 18.134.163.128:50794 peer info: IV_NCP=2
2021-04-12 15:02:30 us=536370 18.134.163.128:50794 peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM
2021-04-12 15:02:30 us=536378 18.134.163.128:50794 peer info: IV_LZ4=1
2021-04-12 15:02:30 us=536383 18.134.163.128:50794 peer info: IV_LZ4v2=1
2021-04-12 15:02:30 us=536389 18.134.163.128:50794 peer info: IV_LZO=1
2021-04-12 15:02:30 us=536394 18.134.163.128:50794 peer info: IV_COMP_STUB=1
2021-04-12 15:02:30 us=536399 18.134.163.128:50794 peer info: IV_COMP_STUBv2=1
2021-04-12 15:02:30 us=536404 18.134.163.128:50794 peer info: IV_TCPNL=1
2021-04-12 15:02:30 us=536420 18.134.163.128:50794 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1589', remote='link-mtu 1573'
2021-04-12 15:02:30 us=536432 18.134.163.128:50794 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
2021-04-12 15:02:30 us=537074 18.134.163.128:50794 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
2021-04-12 15:02:30 us=537104 18.134.163.128:50794 [client3] Peer Connection Initiated with [AF_INET]18.134.163.128:50794
2021-04-12 15:02:30 us=537119 client3/18.134.163.128:50794 MULTI_sva: pool returned IPv4=192.168.0.101, IPv6=(Not enabled)
2021-04-12 15:02:30 us=537146 client3/18.134.163.128:50794 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-04-12 15:02:30 us=537161 client3/18.134.163.128:50794 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:411 ET:32 EL:3 ]
2021-04-12 15:02:30 us=537224 client3/18.134.163.128:50794 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:02:30 us=537232 client3/18.134.163.128:50794 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:02:30 us=537254 client3/18.134.163.128:50794 SENT CONTROL [client3]: 'PUSH_REPLY,route-gateway 192.168.0.254,ping 8,ping-restart 25,ifconfig 192.168.0.101 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-04-12 15:02:30 us=547711 client3/18.134.163.128:50794 MULTI: Learn: 52:ed:0b:40:b2:e9@0 -> client3/18.134.163.128:50794
2021-04-12 15:03:20 us=357164 client3/18.134.163.128:50794 [client3] Inactivity timeout (--ping-restart), restarting
2021-04-12 15:03:20 us=357218 client3/18.134.163.128:50794 SIGUSR1[soft,ping-restart] received, client-instance restarting
2021-04-12 15:03:42 us=712763 MULTI: multi_create_instance called
2021-04-12 15:03:42 us=712827 18.134.163.128:39031 Re-using SSL/TLS context
2021-04-12 15:03:42 us=712897 18.134.163.128:39031 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:03:42 us=712919 18.134.163.128:39031 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:03:42 us=712976 18.134.163.128:39031 Control Channel MTU parms [ L:1653 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-04-12 15:03:42 us=712985 18.134.163.128:39031 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2021-04-12 15:03:42 us=713010 18.134.163.128:39031 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
2021-04-12 15:03:42 us=713016 18.134.163.128:39031 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1589,tun-mtu 1532,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
2021-04-12 15:03:42 us=713037 18.134.163.128:39031 TLS: Initial packet from [AF_INET]18.134.163.128:39031, sid=2f43c0d1 4c1cfbe9
2021-04-12 15:03:42 us=735855 18.134.163.128:39031 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server1, name=server, emailAddress=mail@host.domain
2021-04-12 15:03:42 us=736113 18.134.163.128:39031 Validating certificate extended key usage
2021-04-12 15:03:42 us=736122 18.134.163.128:39031 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
2021-04-12 15:03:42 us=736128 18.134.163.128:39031 VERIFY EKU OK
2021-04-12 15:03:42 us=736133 18.134.163.128:39031 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=client3, name=server, emailAddress=mail@host.domain
2021-04-12 15:03:42 us=736520 18.134.163.128:39031 peer info: IV_VER=2.5.1
2021-04-12 15:03:42 us=736534 18.134.163.128:39031 peer info: IV_PLAT=linux
2021-04-12 15:03:42 us=736540 18.134.163.128:39031 peer info: IV_PROTO=6
2021-04-12 15:03:42 us=736546 18.134.163.128:39031 peer info: IV_NCP=2
2021-04-12 15:03:42 us=736552 18.134.163.128:39031 peer info: IV_CIPHERS=AES-256-GCM:AES-128-GCM
2021-04-12 15:03:42 us=736558 18.134.163.128:39031 peer info: IV_LZ4=1
2021-04-12 15:03:42 us=736563 18.134.163.128:39031 peer info: IV_LZ4v2=1
2021-04-12 15:03:42 us=736569 18.134.163.128:39031 peer info: IV_LZO=1
2021-04-12 15:03:42 us=736575 18.134.163.128:39031 peer info: IV_COMP_STUB=1
2021-04-12 15:03:42 us=736581 18.134.163.128:39031 peer info: IV_COMP_STUBv2=1
2021-04-12 15:03:42 us=736587 18.134.163.128:39031 peer info: IV_TCPNL=1
2021-04-12 15:03:42 us=736603 18.134.163.128:39031 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1589', remote='link-mtu 1573'
2021-04-12 15:03:42 us=736617 18.134.163.128:39031 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
2021-04-12 15:03:42 us=737268 18.134.163.128:39031 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
2021-04-12 15:03:42 us=737293 18.134.163.128:39031 [client3] Peer Connection Initiated with [AF_INET]18.134.163.128:39031
2021-04-12 15:03:42 us=737308 client3/18.134.163.128:39031 MULTI_sva: pool returned IPv4=192.168.0.101, IPv6=(Not enabled)
2021-04-12 15:03:42 us=737336 client3/18.134.163.128:39031 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-04-12 15:03:42 us=737349 client3/18.134.163.128:39031 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:411 ET:32 EL:3 ]
2021-04-12 15:03:42 us=737410 client3/18.134.163.128:39031 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:03:42 us=737417 client3/18.134.163.128:39031 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:03:42 us=737439 client3/18.134.163.128:39031 SENT CONTROL [client3]: 'PUSH_REPLY,route-gateway 192.168.0.254,ping 8,ping-restart 25,ifconfig 192.168.0.101 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-04-12 15:03:42 us=751639 client3/18.134.163.128:39031 MULTI: Learn: 06:05:fe:ac:4e:97@0 -> client3/18.134.163.128:39031
2021-04-12 15:04:01 us=423367 event_wait : Interrupted system call (code=4)
2021-04-12 15:04:01 us=423448 SENT CONTROL [client3]: 'RESTART' (status=1)
2021-04-12 15:04:03 us=333065 event_wait : Interrupted system call (code=4)
2021-04-12 15:04:03 us=334161 TCP/UDP: Closing socket
2021-04-12 15:04:03 us=334196 Closing TUN/TAP interface
2021-04-12 15:04:03 us=350248 SIGINT[hard,] received, process exiting
Client Config
client
ca ca.crt
cert client3.crt
key client3.key
tls-auth ta.key 1
remote-cert-eku "TLS Web Server Authentication"
proto udp
remote <cut> 1197 udp
dev tap
verb 4
nobind
log client3_3.log
Client Log
Code: Select all
2021-04-12 15:02:30 us=505821 --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2021-04-12 15:02:30 us=505969 WARNING: file 'client3.key' is group or others accessible
2021-04-12 15:02:30 us=505979 WARNING: file 'ta.key' is group or others accessible
2021-04-12 15:02:30 us=505986 Current Parameter Settings:
2021-04-12 15:02:30 us=505991 config = 'client3_3.ovpn'
2021-04-12 15:02:30 us=505996 mode = 0
2021-04-12 15:02:30 us=506001 persist_config = DISABLED
2021-04-12 15:02:30 us=506005 persist_mode = 1
2021-04-12 15:02:30 us=506010 show_ciphers = DISABLED
2021-04-12 15:02:30 us=506014 show_digests = DISABLED
2021-04-12 15:02:30 us=506018 show_engines = DISABLED
2021-04-12 15:02:30 us=506022 genkey = DISABLED
2021-04-12 15:02:30 us=506026 genkey_filename = '[UNDEF]'
2021-04-12 15:02:30 us=506031 key_pass_file = '[UNDEF]'
2021-04-12 15:02:30 us=506035 show_tls_ciphers = DISABLED
2021-04-12 15:02:30 us=506039 connect_retry_max = 0
2021-04-12 15:02:30 us=506043 Connection profiles [0]:
2021-04-12 15:02:30 us=506048 proto = udp
2021-04-12 15:02:30 us=506053 local = '[UNDEF]'
2021-04-12 15:02:30 us=506057 local_port = '[UNDEF]'
2021-04-12 15:02:30 us=506061 remote = '<cut>'
2021-04-12 15:02:30 us=506065 remote_port = '1197'
2021-04-12 15:02:30 us=506069 remote_float = DISABLED
2021-04-12 15:02:30 us=506074 bind_defined = DISABLED
2021-04-12 15:02:30 us=506078 bind_local = DISABLED
2021-04-12 15:02:30 us=506082 bind_ipv6_only = DISABLED
2021-04-12 15:02:30 us=506086 connect_retry_seconds = 5
2021-04-12 15:02:30 us=506091 connect_timeout = 120
2021-04-12 15:02:30 us=506095 socks_proxy_server = '[UNDEF]'
2021-04-12 15:02:30 us=506099 socks_proxy_port = '[UNDEF]'
2021-04-12 15:02:30 us=506103 tun_mtu = 1500
2021-04-12 15:02:30 us=506108 tun_mtu_defined = ENABLED
2021-04-12 15:02:30 us=506112 link_mtu = 1500
2021-04-12 15:02:30 us=506116 link_mtu_defined = DISABLED
2021-04-12 15:02:30 us=506120 tun_mtu_extra = 32
2021-04-12 15:02:30 us=506125 tun_mtu_extra_defined = ENABLED
2021-04-12 15:02:30 us=506129 mtu_discover_type = -1
2021-04-12 15:02:30 us=506133 fragment = 0
2021-04-12 15:02:30 us=506138 mssfix = 1450
2021-04-12 15:02:30 us=506142 explicit_exit_notification = 0
2021-04-12 15:02:30 us=506146 tls_auth_file = 'ta.key'
2021-04-12 15:02:30 us=506150 key_direction = 1
2021-04-12 15:02:30 us=506155 tls_crypt_file = '[UNDEF]'
2021-04-12 15:02:30 us=506159 tls_crypt_v2_file = '[UNDEF]'
2021-04-12 15:02:30 us=506163 Connection profiles END
2021-04-12 15:02:30 us=506168 remote_random = DISABLED
2021-04-12 15:02:30 us=506172 ipchange = '[UNDEF]'
2021-04-12 15:02:30 us=506176 dev = 'tap'
2021-04-12 15:02:30 us=506180 dev_type = '[UNDEF]'
2021-04-12 15:02:30 us=506184 dev_node = '[UNDEF]'
2021-04-12 15:02:30 us=506189 lladdr = '[UNDEF]'
2021-04-12 15:02:30 us=506193 topology = 1
2021-04-12 15:02:30 us=506197 ifconfig_local = '[UNDEF]'
2021-04-12 15:02:30 us=506201 ifconfig_remote_netmask = '[UNDEF]'
2021-04-12 15:02:30 us=506205 ifconfig_noexec = DISABLED
2021-04-12 15:02:30 us=506210 ifconfig_nowarn = DISABLED
2021-04-12 15:02:30 us=506216 ifconfig_ipv6_local = '[UNDEF]'
2021-04-12 15:02:30 us=506220 ifconfig_ipv6_netbits = 0
2021-04-12 15:02:30 us=506225 ifconfig_ipv6_remote = '[UNDEF]'
2021-04-12 15:02:30 us=506229 shaper = 0
2021-04-12 15:02:30 us=506233 mtu_test = 0
2021-04-12 15:02:30 us=506238 mlock = DISABLED
2021-04-12 15:02:30 us=506242 keepalive_ping = 0
2021-04-12 15:02:30 us=506246 keepalive_timeout = 0
2021-04-12 15:02:30 us=506251 inactivity_timeout = 0
2021-04-12 15:02:30 us=506255 ping_send_timeout = 0
2021-04-12 15:02:30 us=506259 ping_rec_timeout = 0
2021-04-12 15:02:30 us=506263 ping_rec_timeout_action = 0
2021-04-12 15:02:30 us=506268 ping_timer_remote = DISABLED
2021-04-12 15:02:30 us=506272 remap_sigusr1 = 0
2021-04-12 15:02:30 us=506281 persist_tun = DISABLED
2021-04-12 15:02:30 us=506285 persist_local_ip = DISABLED
2021-04-12 15:02:30 us=506289 persist_remote_ip = DISABLED
2021-04-12 15:02:30 us=506294 persist_key = DISABLED
2021-04-12 15:02:30 us=506298 passtos = DISABLED
2021-04-12 15:02:30 us=506302 resolve_retry_seconds = 1000000000
2021-04-12 15:02:30 us=506306 resolve_in_advance = DISABLED
2021-04-12 15:02:30 us=506311 username = '[UNDEF]'
2021-04-12 15:02:30 us=506315 groupname = '[UNDEF]'
2021-04-12 15:02:30 us=506319 chroot_dir = '[UNDEF]'
2021-04-12 15:02:30 us=506323 cd_dir = '[UNDEF]'
2021-04-12 15:02:30 us=506327 selinux_context = '[UNDEF]'
2021-04-12 15:02:30 us=506331 writepid = '[UNDEF]'
2021-04-12 15:02:30 us=506335 up_script = '[UNDEF]'
2021-04-12 15:02:30 us=506340 down_script = '[UNDEF]'
2021-04-12 15:02:30 us=506344 down_pre = DISABLED
2021-04-12 15:02:30 us=506348 up_restart = DISABLED
2021-04-12 15:02:30 us=506352 up_delay = DISABLED
2021-04-12 15:02:30 us=506356 daemon = DISABLED
2021-04-12 15:02:30 us=506361 inetd = 0
2021-04-12 15:02:30 us=506365 log = ENABLED
2021-04-12 15:02:30 us=506369 suppress_timestamps = DISABLED
2021-04-12 15:02:30 us=506373 machine_readable_output = DISABLED
2021-04-12 15:02:30 us=506377 nice = 0
2021-04-12 15:02:30 us=506382 verbosity = 4
2021-04-12 15:02:30 us=506386 mute = 0
2021-04-12 15:02:30 us=506390 gremlin = 0
2021-04-12 15:02:30 us=506394 status_file = '[UNDEF]'
2021-04-12 15:02:30 us=506398 status_file_version = 1
2021-04-12 15:02:30 us=506403 status_file_update_freq = 60
2021-04-12 15:02:30 us=506407 occ = ENABLED
2021-04-12 15:02:30 us=506411 rcvbuf = 0
2021-04-12 15:02:30 us=506416 sndbuf = 0
2021-04-12 15:02:30 us=506420 mark = 0
2021-04-12 15:02:30 us=506424 sockflags = 0
2021-04-12 15:02:30 us=506428 fast_io = DISABLED
2021-04-12 15:02:30 us=506432 comp.alg = 0
2021-04-12 15:02:30 us=506437 comp.flags = 0
2021-04-12 15:02:30 us=506441 route_script = '[UNDEF]'
2021-04-12 15:02:30 us=506446 route_default_gateway = '[UNDEF]'
2021-04-12 15:02:30 us=506450 route_default_metric = 0
2021-04-12 15:02:30 us=506455 route_noexec = DISABLED
2021-04-12 15:02:30 us=506459 route_delay = 0
2021-04-12 15:02:30 us=506463 route_delay_window = 30
2021-04-12 15:02:30 us=506468 route_delay_defined = DISABLED
2021-04-12 15:02:30 us=506472 route_nopull = DISABLED
2021-04-12 15:02:30 us=506476 route_gateway_via_dhcp = DISABLED
2021-04-12 15:02:30 us=506480 allow_pull_fqdn = DISABLED
2021-04-12 15:02:30 us=506485 management_addr = '[UNDEF]'
2021-04-12 15:02:30 us=506489 management_port = '[UNDEF]'
2021-04-12 15:02:30 us=506493 management_user_pass = '[UNDEF]'
2021-04-12 15:02:30 us=506498 management_log_history_cache = 250
2021-04-12 15:02:30 us=506502 management_echo_buffer_size = 100
2021-04-12 15:02:30 us=506506 management_write_peer_info_file = '[UNDEF]'
2021-04-12 15:02:30 us=506511 management_client_user = '[UNDEF]'
2021-04-12 15:02:30 us=506515 management_client_group = '[UNDEF]'
2021-04-12 15:02:30 us=506519 management_flags = 0
2021-04-12 15:02:30 us=506524 shared_secret_file = '[UNDEF]'
2021-04-12 15:02:30 us=506528 key_direction = 1
2021-04-12 15:02:30 us=506533 ciphername = 'BF-CBC'
2021-04-12 15:02:30 us=506537 ncp_enabled = ENABLED
2021-04-12 15:02:30 us=506541 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
2021-04-12 15:02:30 us=506546 authname = 'SHA1'
2021-04-12 15:02:30 us=506550 prng_hash = 'SHA1'
2021-04-12 15:02:30 us=506554 prng_nonce_secret_len = 16
2021-04-12 15:02:30 us=506559 keysize = 0
2021-04-12 15:02:30 us=506563 engine = DISABLED
2021-04-12 15:02:30 us=506568 replay = ENABLED
2021-04-12 15:02:30 us=506572 mute_replay_warnings = DISABLED
2021-04-12 15:02:30 us=506576 replay_window = 64
2021-04-12 15:02:30 us=506581 replay_time = 15
2021-04-12 15:02:30 us=506585 packet_id_file = '[UNDEF]'
2021-04-12 15:02:30 us=506589 test_crypto = DISABLED
2021-04-12 15:02:30 us=506594 tls_server = DISABLED
2021-04-12 15:02:30 us=506604 tls_client = ENABLED
2021-04-12 15:02:30 us=506609 ca_file = 'ca.crt'
2021-04-12 15:02:30 us=506613 ca_path = '[UNDEF]'
2021-04-12 15:02:30 us=506618 dh_file = '[UNDEF]'
2021-04-12 15:02:30 us=506622 cert_file = 'client3.crt'
2021-04-12 15:02:30 us=506627 extra_certs_file = '[UNDEF]'
2021-04-12 15:02:30 us=506631 priv_key_file = 'client3.key'
2021-04-12 15:02:30 us=506635 pkcs12_file = '[UNDEF]'
2021-04-12 15:02:30 us=506640 cipher_list = '[UNDEF]'
2021-04-12 15:02:30 us=506644 cipher_list_tls13 = '[UNDEF]'
2021-04-12 15:02:30 us=506648 tls_cert_profile = '[UNDEF]'
2021-04-12 15:02:30 us=506653 tls_verify = '[UNDEF]'
2021-04-12 15:02:30 us=506657 tls_export_cert = '[UNDEF]'
2021-04-12 15:02:30 us=506661 verify_x509_type = 0
2021-04-12 15:02:30 us=506665 verify_x509_name = '[UNDEF]'
2021-04-12 15:02:30 us=506670 crl_file = '[UNDEF]'
2021-04-12 15:02:30 us=506674 ns_cert_type = 0
2021-04-12 15:02:30 us=506678 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506683 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506687 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506691 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506696 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506700 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506704 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506708 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506713 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506717 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506721 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506726 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506730 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506734 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506738 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506743 remote_cert_ku[i] = 0
2021-04-12 15:02:30 us=506747 remote_cert_eku = 'TLS Web Server Authentication'
2021-04-12 15:02:30 us=506752 ssl_flags = 0
2021-04-12 15:02:30 us=506756 tls_timeout = 2
2021-04-12 15:02:30 us=506761 renegotiate_bytes = -1
2021-04-12 15:02:30 us=506765 renegotiate_packets = 0
2021-04-12 15:02:30 us=506769 renegotiate_seconds = 3600
2021-04-12 15:02:30 us=506774 handshake_window = 60
2021-04-12 15:02:30 us=506778 transition_window = 3600
2021-04-12 15:02:30 us=506783 single_session = DISABLED
2021-04-12 15:02:30 us=506787 push_peer_info = DISABLED
2021-04-12 15:02:30 us=506791 tls_exit = DISABLED
2021-04-12 15:02:30 us=506796 tls_crypt_v2_metadata = '[UNDEF]'
2021-04-12 15:02:30 us=506800 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506804 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506809 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506813 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506817 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506821 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506826 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506830 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506834 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506839 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506843 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506847 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506852 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506856 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506860 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506864 pkcs11_protected_authentication = DISABLED
2021-04-12 15:02:30 us=506869 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506873 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506878 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506882 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506886 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506891 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506895 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506902 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506906 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506911 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506915 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506919 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506924 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506928 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506932 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506936 pkcs11_private_mode = 00000000
2021-04-12 15:02:30 us=506941 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506945 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506949 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506953 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506957 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506962 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506966 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506970 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506974 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506979 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506983 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506987 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506991 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=506995 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=507000 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=507004 pkcs11_cert_private = DISABLED
2021-04-12 15:02:30 us=507008 pkcs11_pin_cache_period = -1
2021-04-12 15:02:30 us=507013 pkcs11_id = '[UNDEF]'
2021-04-12 15:02:30 us=507017 pkcs11_id_management = DISABLED
2021-04-12 15:02:30 us=507023 server_network = 0.0.0.0
2021-04-12 15:02:30 us=507028 server_netmask = 0.0.0.0
2021-04-12 15:02:30 us=507035 server_network_ipv6 = ::
2021-04-12 15:02:30 us=507040 server_netbits_ipv6 = 0
2021-04-12 15:02:30 us=507045 server_bridge_ip = 0.0.0.0
2021-04-12 15:02:30 us=507050 server_bridge_netmask = 0.0.0.0
2021-04-12 15:02:30 us=507054 server_bridge_pool_start = 0.0.0.0
2021-04-12 15:02:30 us=507059 server_bridge_pool_end = 0.0.0.0
2021-04-12 15:02:30 us=507064 ifconfig_pool_defined = DISABLED
2021-04-12 15:02:30 us=507069 ifconfig_pool_start = 0.0.0.0
2021-04-12 15:02:30 us=507074 ifconfig_pool_end = 0.0.0.0
2021-04-12 15:02:30 us=507079 ifconfig_pool_netmask = 0.0.0.0
2021-04-12 15:02:30 us=507083 ifconfig_pool_persist_filename = '[UNDEF]'
2021-04-12 15:02:30 us=507087 ifconfig_pool_persist_refresh_freq = 600
2021-04-12 15:02:30 us=507092 ifconfig_ipv6_pool_defined = DISABLED
2021-04-12 15:02:30 us=507097 ifconfig_ipv6_pool_base = ::
2021-04-12 15:02:30 us=507101 ifconfig_ipv6_pool_netbits = 0
2021-04-12 15:02:30 us=507106 n_bcast_buf = 256
2021-04-12 15:02:30 us=507110 tcp_queue_limit = 64
2021-04-12 15:02:30 us=507115 real_hash_size = 256
2021-04-12 15:02:30 us=507119 virtual_hash_size = 256
2021-04-12 15:02:30 us=507123 client_connect_script = '[UNDEF]'
2021-04-12 15:02:30 us=507128 learn_address_script = '[UNDEF]'
2021-04-12 15:02:30 us=507132 client_disconnect_script = '[UNDEF]'
2021-04-12 15:02:30 us=507136 client_config_dir = '[UNDEF]'
2021-04-12 15:02:30 us=507141 ccd_exclusive = DISABLED
2021-04-12 15:02:30 us=507145 tmp_dir = '/tmp'
2021-04-12 15:02:30 us=507149 push_ifconfig_defined = DISABLED
2021-04-12 15:02:30 us=507156 push_ifconfig_local = 0.0.0.0
2021-04-12 15:02:30 us=507161 push_ifconfig_remote_netmask = 0.0.0.0
2021-04-12 15:02:30 us=507166 push_ifconfig_ipv6_defined = DISABLED
2021-04-12 15:02:30 us=507171 push_ifconfig_ipv6_local = ::/0
2021-04-12 15:02:30 us=507176 push_ifconfig_ipv6_remote = ::
2021-04-12 15:02:30 us=507180 enable_c2c = DISABLED
2021-04-12 15:02:30 us=507184 duplicate_cn = DISABLED
2021-04-12 15:02:30 us=507189 cf_max = 0
2021-04-12 15:02:30 us=507193 cf_per = 0
2021-04-12 15:02:30 us=507197 max_clients = 1024
2021-04-12 15:02:30 us=507204 max_routes_per_client = 256
2021-04-12 15:02:30 us=507209 auth_user_pass_verify_script = '[UNDEF]'
2021-04-12 15:02:30 us=507213 auth_user_pass_verify_script_via_file = DISABLED
2021-04-12 15:02:30 us=507218 auth_token_generate = DISABLED
2021-04-12 15:02:30 us=507222 auth_token_lifetime = 0
2021-04-12 15:02:30 us=507226 auth_token_secret_file = '[UNDEF]'
2021-04-12 15:02:30 us=507230 port_share_host = '[UNDEF]'
2021-04-12 15:02:30 us=507234 port_share_port = '[UNDEF]'
2021-04-12 15:02:30 us=507239 vlan_tagging = DISABLED
2021-04-12 15:02:30 us=507243 vlan_accept = all
2021-04-12 15:02:30 us=507248 vlan_pvid = 1
2021-04-12 15:02:30 us=507252 client = ENABLED
2021-04-12 15:02:30 us=507256 pull = ENABLED
2021-04-12 15:02:30 us=507261 auth_user_pass_file = '[UNDEF]'
2021-04-12 15:02:30 us=507266 OpenVPN 2.5.1 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 24 2021
2021-04-12 15:02:30 us=507275 library versions: OpenSSL 1.1.1g FIPS 21 Apr 2020, LZO 2.06
2021-04-12 15:02:30 us=508439 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:02:30 us=508455 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:02:30 us=508534 Control Channel MTU parms [ L:1653 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-04-12 15:02:30 us=508553 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2021-04-12 15:02:30 us=508572 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 1,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
2021-04-12 15:02:30 us=508578 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 0,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
2021-04-12 15:02:30 us=508586 TCP/UDP: Preserving recently used remote address: [AF_INET]3.10.164.91:1197
2021-04-12 15:02:30 us=508602 Socket Buffers: R=[212992->212992] S=[212992->212992]
2021-04-12 15:02:30 us=508607 UDP link local: (not bound)
2021-04-12 15:02:30 us=508613 UDP link remote: [AF_INET]<cut>:1197
2021-04-12 15:02:30 us=511458 TLS: Initial packet from [AF_INET]<cut>:1197, sid=d7735ccd ce260dc8
2021-04-12 15:02:30 us=523782 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server1, name=server, emailAddress=mail@host.domain
2021-04-12 15:02:30 us=524048 Validating certificate extended key usage
2021-04-12 15:02:30 us=524057 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-04-12 15:02:30 us=524062 VERIFY EKU OK
2021-04-12 15:02:30 us=524066 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=server, emailAddress=mail@host.domain
2021-04-12 15:02:30 us=536585 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1573', remote='link-mtu 1589'
2021-04-12 15:02:30 us=536614 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
2021-04-12 15:02:30 us=536652 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
2021-04-12 15:02:30 us=536669 [server] Peer Connection Initiated with [AF_INET]3.10.164.91:1197
2021-04-12 15:02:30 us=537425 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.0.254,ping 8,ping-restart 25,ifconfig 192.168.0.101 255.255.255.0,peer-id 0,cipher AES-256-GCM'
2021-04-12 15:02:30 us=537474 OPTIONS IMPORT: timers and/or timeouts modified
2021-04-12 15:02:30 us=537480 OPTIONS IMPORT: --ifconfig/up options modified
2021-04-12 15:02:30 us=537485 OPTIONS IMPORT: route-related options modified
2021-04-12 15:02:30 us=537489 OPTIONS IMPORT: peer-id set
2021-04-12 15:02:30 us=537494 OPTIONS IMPORT: adjusting link_mtu to 1656
2021-04-12 15:02:30 us=537499 OPTIONS IMPORT: data channel crypto options modified
2021-04-12 15:02:30 us=537504 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-04-12 15:02:30 us=537516 Data Channel MTU parms [ L:1584 D:1450 EF:52 EB:411 ET:32 EL:3 ]
2021-04-12 15:02:30 us=537590 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:02:30 us=537598 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:02:30 us=538093 TUN/TAP device tap0 opened
2021-04-12 15:02:30 us=538112 do_ifconfig, ipv4=1, ipv6=0
2021-04-12 15:02:30 us=538146 net_iface_mtu_set: mtu 1500 for tap0
2021-04-12 15:02:30 us=538176 net_iface_up: set tap0 up
2021-04-12 15:02:30 us=538261 net_addr_v4_add: 192.168.0.101/24 dev tap0
2021-04-12 15:02:30 us=538341 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2021-04-12 15:02:30 us=538355 Initialization Sequence Completed
2021-04-12 15:03:37 us=686536 [server] Inactivity timeout (--ping-restart), restarting
2021-04-12 15:03:37 us=686754 TCP/UDP: Closing socket
2021-04-12 15:03:37 us=686791 Closing TUN/TAP interface
2021-04-12 15:03:37 us=686799 net_addr_v4_del: 192.168.0.101 dev tap0
2021-04-12 15:03:37 us=711446 SIGUSR1[soft,ping-restart] received, process restarting
2021-04-12 15:03:37 us=711495 Restart pause, 5 second(s)
2021-04-12 15:03:42 us=712190 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:03:42 us=712221 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:03:42 us=712266 Control Channel MTU parms [ L:1653 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-04-12 15:03:42 us=712279 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2021-04-12 15:03:42 us=712304 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 1,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
2021-04-12 15:03:42 us=712309 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 0,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
2021-04-12 15:03:42 us=712319 TCP/UDP: Preserving recently used remote address: [AF_INET]3.10.164.91:1197
2021-04-12 15:03:42 us=712337 Socket Buffers: R=[212992->212992] S=[212992->212992]
2021-04-12 15:03:42 us=712343 UDP link local: (not bound)
2021-04-12 15:03:42 us=712348 UDP link remote: [AF_INET]<cut>:1197
2021-04-12 15:03:42 us=713188 TLS: Initial packet from [AF_INET]<cut>:1197, sid=a7fefe77 d53e8b6c
2021-04-12 15:03:42 us=724488 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server1, name=server, emailAddress=mail@host.domain
2021-04-12 15:03:42 us=724746 Validating certificate extended key usage
2021-04-12 15:03:42 us=724755 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-04-12 15:03:42 us=724759 VERIFY EKU OK
2021-04-12 15:03:42 us=724763 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=server, name=server, emailAddress=mail@host.domain
2021-04-12 15:03:42 us=736775 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1573', remote='link-mtu 1589'
2021-04-12 15:03:42 us=736800 WARNING: 'keysize' is used inconsistently, local='keysize 128', remote='keysize 256'
2021-04-12 15:03:42 us=736838 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
2021-04-12 15:03:42 us=736860 [server] Peer Connection Initiated with [AF_INET]<cut>:1197
2021-04-12 15:03:42 us=737629 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.0.254,ping 8,ping-restart 25,ifconfig 192.168.0.101 255.255.255.0,peer-id 0,cipher AES-256-GCM'
2021-04-12 15:03:42 us=737680 OPTIONS IMPORT: timers and/or timeouts modified
2021-04-12 15:03:42 us=737686 OPTIONS IMPORT: --ifconfig/up options modified
2021-04-12 15:03:42 us=737691 OPTIONS IMPORT: route-related options modified
2021-04-12 15:03:42 us=737696 OPTIONS IMPORT: peer-id set
2021-04-12 15:03:42 us=737701 OPTIONS IMPORT: adjusting link_mtu to 1656
2021-04-12 15:03:42 us=737705 OPTIONS IMPORT: data channel crypto options modified
2021-04-12 15:03:42 us=737711 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-04-12 15:03:42 us=737734 Data Channel MTU parms [ L:1584 D:1450 EF:52 EB:411 ET:32 EL:3 ]
2021-04-12 15:03:42 us=737800 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:03:42 us=737808 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-04-12 15:03:42 us=738081 TUN/TAP device tap0 opened
2021-04-12 15:03:42 us=738098 do_ifconfig, ipv4=1, ipv6=0
2021-04-12 15:03:42 us=738120 net_iface_mtu_set: mtu 1500 for tap0
2021-04-12 15:03:42 us=738152 net_iface_up: set tap0 up
2021-04-12 15:03:42 us=738219 net_addr_v4_add: 192.168.0.101/24 dev tap0
2021-04-12 15:03:42 us=738299 Initialization Sequence Completed
2021-04-12 15:04:01 us=423723 Connection reset command was pushed by server ('')
2021-04-12 15:04:01 us=423876 TCP/UDP: Closing socket
2021-04-12 15:04:01 us=423920 Closing TUN/TAP interface
2021-04-12 15:04:01 us=423930 net_addr_v4_del: 192.168.0.101 dev tap0
2021-04-12 15:04:01 us=443414 SIGUSR1[soft,server-pushed-connection-reset] received, process restarting
2021-04-12 15:04:01 us=443447 Restart pause, 5 second(s)
2021-04-12 15:04:06 us=444193 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:04:06 us=444227 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2021-04-12 15:04:06 us=444267 Control Channel MTU parms [ L:1653 D:1184 EF:66 EB:0 ET:0 EL:3 ]
2021-04-12 15:04:06 us=444279 Data Channel MTU parms [ L:1653 D:1450 EF:121 EB:411 ET:32 EL:3 ]
2021-04-12 15:04:06 us=444303 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 1,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
2021-04-12 15:04:06 us=444309 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1573,tun-mtu 1532,proto UDPv4,keydir 0,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
2021-04-12 15:04:06 us=444318 TCP/UDP: Preserving recently used remote address: [AF_INET]3.10.164.91:1197
2021-04-12 15:04:06 us=444336 Socket Buffers: R=[212992->212992] S=[212992->212992]
2021-04-12 15:04:06 us=444341 UDP link local: (not bound)
2021-04-12 15:04:06 us=444347 UDP link remote: [AF_INET]<cut>:1197
2021-04-12 15:04:31 us=705015 [UNDEF] Inactivity timeout (--ping-restart), restarting
2021-04-12 15:04:31 us=705154 TCP/UDP: Closing socket
2021-04-12 15:04:31 us=705177 SIGUSR1[soft,ping-restart] received, process restarting
2021-04-12 15:04:31 us=705193 Restart pause, 5 second(s)