Hi,
I managed to install openVPN on my CentOS 6.5 VPS server, and I can connect using the Android app on my Samsung S3. However, I don't get internet on my phone.
My goal is to permanently use openVPN on my phone. It should also pass the test at dnsleaktest.com.
Below, please find config files from both server and client, and the server's log file (I couldn't post the clients log because excess of 60,000 characters).
It would be great if you could help me to figure out which settings need to be adjusted.
Thanks a lot!!
Server config:
*************************************************************
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log openvpn.log
verb 4
*************************************************************
Client config:
*************************************************************
client
dev tun
proto udp
remote 199.101.48.170 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert gws3.crt
key gws3.key
ns-cert-type server
comp-lzo
verb 4
*************************************************************
Server log
*************************************************************
Mon Jul 21 17:03:12 2014 us=436242 Current Parameter Settings:
Mon Jul 21 17:03:12 2014 us=436423 config = 'server.conf'
Mon Jul 21 17:03:12 2014 us=436441 mode = 1
Mon Jul 21 17:03:12 2014 us=436452 persist_config = DISABLED
Mon Jul 21 17:03:12 2014 us=436465 persist_mode = 1
Mon Jul 21 17:03:12 2014 us=436475 show_ciphers = DISABLED
Mon Jul 21 17:03:12 2014 us=436484 show_digests = DISABLED
Mon Jul 21 17:03:12 2014 us=436494 show_engines = DISABLED
Mon Jul 21 17:03:12 2014 us=436503 genkey = DISABLED
Mon Jul 21 17:03:12 2014 us=436512 key_pass_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436522 show_tls_ciphers = DISABLED
Mon Jul 21 17:03:12 2014 us=436531 Connection profiles [default]:
Mon Jul 21 17:03:12 2014 us=436541 proto = udp
Mon Jul 21 17:03:12 2014 us=436551 local = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436560 local_port = 1194
Mon Jul 21 17:03:12 2014 us=436569 remote = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436579 remote_port = 1194
Mon Jul 21 17:03:12 2014 us=436588 remote_float = DISABLED
Mon Jul 21 17:03:12 2014 us=436597 bind_defined = DISABLED
Mon Jul 21 17:03:12 2014 us=436606 bind_local = ENABLED
Mon Jul 21 17:03:12 2014 us=436616 connect_retry_seconds = 5
Mon Jul 21 17:03:12 2014 us=436681 connect_timeout = 10
Mon Jul 21 17:03:12 2014 us=436712 connect_retry_max = 0
Mon Jul 21 17:03:12 2014 us=436726 socks_proxy_server = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436735 socks_proxy_port = 0
Mon Jul 21 17:03:12 2014 us=436745 socks_proxy_retry = DISABLED
Mon Jul 21 17:03:12 2014 us=436754 tun_mtu = 1500
Mon Jul 21 17:03:12 2014 us=436763 tun_mtu_defined = ENABLED
Mon Jul 21 17:03:12 2014 us=436773 link_mtu = 1500
Mon Jul 21 17:03:12 2014 us=436782 link_mtu_defined = DISABLED
Mon Jul 21 17:03:12 2014 us=436791 tun_mtu_extra = 0
Mon Jul 21 17:03:12 2014 us=436801 tun_mtu_extra_defined = DISABLED
Mon Jul 21 17:03:12 2014 us=436811 mtu_discover_type = -1
Mon Jul 21 17:03:12 2014 us=436820 fragment = 0
Mon Jul 21 17:03:12 2014 us=436830 mssfix = 1450
Mon Jul 21 17:03:12 2014 us=436841 explicit_exit_notification = 0
Mon Jul 21 17:03:12 2014 us=436854 Connection profiles END
Mon Jul 21 17:03:12 2014 us=436864 remote_random = DISABLED
Mon Jul 21 17:03:12 2014 us=436874 ipchange = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436883 dev = 'tun'
Mon Jul 21 17:03:12 2014 us=436892 dev_type = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436901 dev_node = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436910 lladdr = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436919 topology = 1
Mon Jul 21 17:03:12 2014 us=436928 tun_ipv6 = DISABLED
Mon Jul 21 17:03:12 2014 us=436938 ifconfig_local = '10.8.0.1'
Mon Jul 21 17:03:12 2014 us=436948 ifconfig_remote_netmask = '10.8.0.2'
Mon Jul 21 17:03:12 2014 us=436957 ifconfig_noexec = DISABLED
Mon Jul 21 17:03:12 2014 us=436966 ifconfig_nowarn = DISABLED
Mon Jul 21 17:03:12 2014 us=436976 ifconfig_ipv6_local = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=436985 ifconfig_ipv6_netbits = 0
Mon Jul 21 17:03:12 2014 us=436997 ifconfig_ipv6_remote = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437007 shaper = 0
Mon Jul 21 17:03:12 2014 us=437016 mtu_test = 0
Mon Jul 21 17:03:12 2014 us=437026 mlock = DISABLED
Mon Jul 21 17:03:12 2014 us=437035 keepalive_ping = 10
Mon Jul 21 17:03:12 2014 us=437044 keepalive_timeout = 120
Mon Jul 21 17:03:12 2014 us=437053 inactivity_timeout = 0
Mon Jul 21 17:03:12 2014 us=437063 ping_send_timeout = 10
Mon Jul 21 17:03:12 2014 us=437072 ping_rec_timeout = 240
Mon Jul 21 17:03:12 2014 us=437081 ping_rec_timeout_action = 2
Mon Jul 21 17:03:12 2014 us=437091 ping_timer_remote = DISABLED
Mon Jul 21 17:03:12 2014 us=437100 remap_sigusr1 = 0
Mon Jul 21 17:03:12 2014 us=437109 persist_tun = ENABLED
Mon Jul 21 17:03:12 2014 us=437118 persist_local_ip = DISABLED
Mon Jul 21 17:03:12 2014 us=437127 persist_remote_ip = DISABLED
Mon Jul 21 17:03:12 2014 us=437136 persist_key = ENABLED
Mon Jul 21 17:03:12 2014 us=437145 passtos = DISABLED
Mon Jul 21 17:03:12 2014 us=437155 resolve_retry_seconds = 1000000000
Mon Jul 21 17:03:12 2014 us=437176 username = 'nobody'
Mon Jul 21 17:03:12 2014 us=437186 groupname = 'nobody'
Mon Jul 21 17:03:12 2014 us=437196 chroot_dir = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437205 cd_dir = '/etc/openvpn'
Mon Jul 21 17:03:12 2014 us=437214 writepid = '/var/run/openvpn/server.pid'
Mon Jul 21 17:03:12 2014 us=437224 up_script = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437233 down_script = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437242 down_pre = DISABLED
Mon Jul 21 17:03:12 2014 us=437251 up_restart = DISABLED
Mon Jul 21 17:03:12 2014 us=437260 up_delay = DISABLED
Mon Jul 21 17:03:12 2014 us=437269 daemon = ENABLED
Mon Jul 21 17:03:12 2014 us=437278 inetd = 0
Mon Jul 21 17:03:12 2014 us=437287 log = ENABLED
Mon Jul 21 17:03:12 2014 us=437297 suppress_timestamps = DISABLED
Mon Jul 21 17:03:12 2014 us=437306 nice = 0
Mon Jul 21 17:03:12 2014 us=437315 verbosity = 4
Mon Jul 21 17:03:12 2014 us=437324 mute = 0
Mon Jul 21 17:03:12 2014 us=437333 gremlin = 0
Mon Jul 21 17:03:12 2014 us=437342 status_file = 'openvpn-status.log'
Mon Jul 21 17:03:12 2014 us=437352 status_file_version = 1
Mon Jul 21 17:03:12 2014 us=437361 status_file_update_freq = 60
Mon Jul 21 17:03:12 2014 us=437370 occ = ENABLED
Mon Jul 21 17:03:12 2014 us=437379 rcvbuf = 65536
Mon Jul 21 17:03:12 2014 us=437388 sndbuf = 65536
Mon Jul 21 17:03:12 2014 us=437397 mark = 0
Mon Jul 21 17:03:12 2014 us=437415 sockflags = 0
Mon Jul 21 17:03:12 2014 us=437424 fast_io = DISABLED
Mon Jul 21 17:03:12 2014 us=437434 lzo = 7
Mon Jul 21 17:03:12 2014 us=437443 route_script = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437452 route_default_gateway = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437462 route_default_metric = 0
Mon Jul 21 17:03:12 2014 us=437471 route_noexec = DISABLED
Mon Jul 21 17:03:12 2014 us=437481 route_delay = 0
Mon Jul 21 17:03:12 2014 us=437490 route_delay_window = 30
Mon Jul 21 17:03:12 2014 us=437499 route_delay_defined = DISABLED
Mon Jul 21 17:03:12 2014 us=437508 route_nopull = DISABLED
Mon Jul 21 17:03:12 2014 us=437517 route_gateway_via_dhcp = DISABLED
Mon Jul 21 17:03:12 2014 us=437527 max_routes = 100
Mon Jul 21 17:03:12 2014 us=437536 allow_pull_fqdn = DISABLED
Mon Jul 21 17:03:12 2014 us=437546 route 10.8.0.0/255.255.255.0/nil/nil
Mon Jul 21 17:03:12 2014 us=437555 management_addr = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437565 management_port = 0
Mon Jul 21 17:03:12 2014 us=437574 management_user_pass = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437584 management_log_history_cache = 250
Mon Jul 21 17:03:12 2014 us=437593 management_echo_buffer_size = 100
Mon Jul 21 17:03:12 2014 us=437603 management_write_peer_info_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437612 management_client_user = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437639 management_client_group = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437650 management_flags = 0
Mon Jul 21 17:03:12 2014 us=437660 shared_secret_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437669 key_direction = 0
Mon Jul 21 17:03:12 2014 us=437679 ciphername_defined = ENABLED
Mon Jul 21 17:03:12 2014 us=437688 ciphername = 'BF-CBC'
Mon Jul 21 17:03:12 2014 us=437697 authname_defined = ENABLED
Mon Jul 21 17:03:12 2014 us=437706 authname = 'SHA1'
Mon Jul 21 17:03:12 2014 us=437716 prng_hash = 'SHA1'
Mon Jul 21 17:03:12 2014 us=437725 prng_nonce_secret_len = 16
Mon Jul 21 17:03:12 2014 us=437734 keysize = 0
Mon Jul 21 17:03:12 2014 us=437744 engine = DISABLED
Mon Jul 21 17:03:12 2014 us=437753 replay = ENABLED
Mon Jul 21 17:03:12 2014 us=437762 mute_replay_warnings = DISABLED
Mon Jul 21 17:03:12 2014 us=437772 replay_window = 64
Mon Jul 21 17:03:12 2014 us=437781 replay_time = 15
Mon Jul 21 17:03:12 2014 us=437790 packet_id_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437799 use_iv = ENABLED
Mon Jul 21 17:03:12 2014 us=437808 test_crypto = DISABLED
Mon Jul 21 17:03:12 2014 us=437817 tls_server = ENABLED
Mon Jul 21 17:03:12 2014 us=437827 tls_client = DISABLED
Mon Jul 21 17:03:12 2014 us=437836 key_method = 2
Mon Jul 21 17:03:12 2014 us=437888 ca_file = 'ca.crt'
Mon Jul 21 17:03:12 2014 us=437925 ca_path = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=437956 dh_file = 'dh2048.pem'
Mon Jul 21 17:03:12 2014 us=437986 cert_file = 'server.crt'
Mon Jul 21 17:03:12 2014 us=438016 priv_key_file = 'server.key'
Mon Jul 21 17:03:12 2014 us=438041 pkcs12_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438053 cipher_list = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438062 tls_verify = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438072 tls_export_cert = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438082 verify_x509_type = 0
Mon Jul 21 17:03:12 2014 us=438091 verify_x509_name = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438100 crl_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438109 ns_cert_type = 0
Mon Jul 21 17:03:12 2014 us=438118 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438127 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438136 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438145 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438154 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438163 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438172 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438181 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438190 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438199 remote_cert_ku = 0
Mon Jul 21 17:03:12 2014 us=438208 remote_cert_ku[i] = 0
Mon Jul 21 17:03:12 2014 us=438217 remote_cert_ku[i] = 0
Mon Jul 21 17:03:12 2014 us=438229 remote_cert_ku[i] = 0
Mon Jul 21 17:03:12 2014 us=438238 remote_cert_ku[i] = 0
Mon Jul 21 17:03:12 2014 us=438247 remote_cert_ku[i] = 0
Mon Jul 21 17:03:12 2014 us=438256 remote_cert_ku[i] = 0
Mon Jul 21 17:03:12 2014 us=438266 remote_cert_eku = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438275 ssl_flags = 0
Mon Jul 21 17:03:12 2014 us=438284 tls_timeout = 2
Mon Jul 21 17:03:12 2014 us=438293 renegotiate_bytes = 0
Mon Jul 21 17:03:12 2014 us=438302 renegotiate_packets = 0
Mon Jul 21 17:03:12 2014 us=438311 renegotiate_seconds = 3600
Mon Jul 21 17:03:12 2014 us=438320 handshake_window = 60
Mon Jul 21 17:03:12 2014 us=438330 transition_window = 3600
Mon Jul 21 17:03:12 2014 us=438339 single_session = DISABLED
Mon Jul 21 17:03:12 2014 us=438348 push_peer_info = DISABLED
Mon Jul 21 17:03:12 2014 us=438358 tls_exit = DISABLED
Mon Jul 21 17:03:12 2014 us=438388 tls_auth_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=438416 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438426 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438435 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438445 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438454 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438463 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438473 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438483 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438492 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438502 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438511 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438520 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438529 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438539 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438548 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438557 pkcs11_protected_authentication = DISABLED
Mon Jul 21 17:03:12 2014 us=438568 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438578 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438587 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438597 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438606 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438673 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438688 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438698 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438707 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438716 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438726 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438736 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438745 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438755 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438764 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438773 pkcs11_private_mode = 00000000
Mon Jul 21 17:03:12 2014 us=438782 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438792 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438801 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438810 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438820 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438829 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438838 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438847 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438856 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438866 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438875 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438884 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438893 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438930 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438961 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=438999 pkcs11_cert_private = DISABLED
Mon Jul 21 17:03:12 2014 us=439025 pkcs11_pin_cache_period = -1
Mon Jul 21 17:03:12 2014 us=439062 pkcs11_id = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439093 pkcs11_id_management = DISABLED
Mon Jul 21 17:03:12 2014 us=439127 server_network = 10.8.0.0
Mon Jul 21 17:03:12 2014 us=439142 server_netmask = 255.255.255.0
Mon Jul 21 17:03:12 2014 us=439162 server_network_ipv6 = ::
Mon Jul 21 17:03:12 2014 us=439173 server_netbits_ipv6 = 0
Mon Jul 21 17:03:12 2014 us=439183 server_bridge_ip = 0.0.0.0
Mon Jul 21 17:03:12 2014 us=439193 server_bridge_netmask = 0.0.0.0
Mon Jul 21 17:03:12 2014 us=439203 server_bridge_pool_start = 0.0.0.0
Mon Jul 21 17:03:12 2014 us=439213 server_bridge_pool_end = 0.0.0.0
Mon Jul 21 17:03:12 2014 us=439223 push_entry = 'redirect-gateway def1 bypass-dhcp'
Mon Jul 21 17:03:12 2014 us=439232 push_entry = 'dhcp-option DNS 208.67.222.222'
Mon Jul 21 17:03:12 2014 us=439242 push_entry = 'dhcp-option DNS 208.67.220.220'
Mon Jul 21 17:03:12 2014 us=439252 push_entry = 'route 10.8.0.1'
Mon Jul 21 17:03:12 2014 us=439261 push_entry = 'topology net30'
Mon Jul 21 17:03:12 2014 us=439270 push_entry = 'ping 10'
Mon Jul 21 17:03:12 2014 us=439279 push_entry = 'ping-restart 120'
Mon Jul 21 17:03:12 2014 us=439289 ifconfig_pool_defined = ENABLED
Mon Jul 21 17:03:12 2014 us=439299 ifconfig_pool_start = 10.8.0.4
Mon Jul 21 17:03:12 2014 us=439309 ifconfig_pool_end = 10.8.0.251
Mon Jul 21 17:03:12 2014 us=439319 ifconfig_pool_netmask = 0.0.0.0
Mon Jul 21 17:03:12 2014 us=439329 ifconfig_pool_persist_filename = 'ipp.txt'
Mon Jul 21 17:03:12 2014 us=439339 ifconfig_pool_persist_refresh_freq = 600
Mon Jul 21 17:03:12 2014 us=439348 ifconfig_ipv6_pool_defined = DISABLED
Mon Jul 21 17:03:12 2014 us=439358 ifconfig_ipv6_pool_base = ::
Mon Jul 21 17:03:12 2014 us=439367 ifconfig_ipv6_pool_netbits = 0
Mon Jul 21 17:03:12 2014 us=439376 n_bcast_buf = 256
Mon Jul 21 17:03:12 2014 us=439386 tcp_queue_limit = 64
Mon Jul 21 17:03:12 2014 us=439395 real_hash_size = 256
Mon Jul 21 17:03:12 2014 us=439411 virtual_hash_size = 256
Mon Jul 21 17:03:12 2014 us=439421 client_connect_script = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439431 learn_address_script = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439472 client_disconnect_script = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439486 client_config_dir = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439496 ccd_exclusive = DISABLED
Mon Jul 21 17:03:12 2014 us=439505 tmp_dir = '/tmp'
Mon Jul 21 17:03:12 2014 us=439536 push_ifconfig_defined = DISABLED
Mon Jul 21 17:03:12 2014 us=439573 push_ifconfig_local = 0.0.0.0
Mon Jul 21 17:03:12 2014 us=439605 push_ifconfig_remote_netmask = 0.0.0.0
Mon Jul 21 17:03:12 2014 us=439656 push_ifconfig_ipv6_defined = DISABLED
Mon Jul 21 17:03:12 2014 us=439694 push_ifconfig_ipv6_local = ::/0
Mon Jul 21 17:03:12 2014 us=439725 push_ifconfig_ipv6_remote = ::
Mon Jul 21 17:03:12 2014 us=439757 enable_c2c = DISABLED
Mon Jul 21 17:03:12 2014 us=439771 duplicate_cn = DISABLED
Mon Jul 21 17:03:12 2014 us=439780 cf_max = 0
Mon Jul 21 17:03:12 2014 us=439789 cf_per = 0
Mon Jul 21 17:03:12 2014 us=439799 max_clients = 1024
Mon Jul 21 17:03:12 2014 us=439808 max_routes_per_client = 256
Mon Jul 21 17:03:12 2014 us=439827 auth_user_pass_verify_script = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439862 auth_user_pass_verify_script_via_file = DISABLED
Mon Jul 21 17:03:12 2014 us=439882 port_share_host = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439893 port_share_port = 0
Mon Jul 21 17:03:12 2014 us=439902 client = DISABLED
Mon Jul 21 17:03:12 2014 us=439912 pull = DISABLED
Mon Jul 21 17:03:12 2014 us=439921 auth_user_pass_file = '[UNDEF]'
Mon Jul 21 17:03:12 2014 us=439938 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Mon Jul 21 17:03:12 2014 us=453463 Diffie-Hellman initialized with 2048 bit key
Mon Jul 21 17:03:12 2014 us=458691 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:03:12 2014 us=458782 Socket Buffers: R=[124928->131072] S=[124928->131072]
Mon Jul 21 17:03:12 2014 us=461537 ROUTE_GATEWAY 199.101.48.1/255.255.255.0 IFACE=eth0 HWADDR=00:16:3c:04:b9:9e
Mon Jul 21 17:03:12 2014 us=463412 TUN/TAP device tun0 opened
Mon Jul 21 17:03:12 2014 us=463478 TUN/TAP TX queue length set to 100
Mon Jul 21 17:03:12 2014 us=463503 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Mon Jul 21 17:03:12 2014 us=464311 /sbin/ip link set dev tun0 up mtu 1500
Mon Jul 21 17:03:12 2014 us=475077 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Mon Jul 21 17:03:12 2014 us=482284 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2
Mon Jul 21 17:03:12 2014 us=488082 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:03:12 2014 us=497322 GID set to nobody
Mon Jul 21 17:03:12 2014 us=497444 UID set to nobody
Mon Jul 21 17:03:12 2014 us=498049 UDPv4 link local (bound): [undef]
Mon Jul 21 17:03:12 2014 us=498068 UDPv4 link remote: [undef]
Mon Jul 21 17:03:12 2014 us=498087 MULTI: multi_init called, r=256 v=256
Mon Jul 21 17:03:12 2014 us=498225 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Mon Jul 21 17:03:12 2014 us=694929 ifconfig_pool_read(), in='gws3,10.8.0.4', TODO: IPv6
Mon Jul 21 17:03:12 2014 us=695117 succeeded -> ifconfig_pool_set()
Mon Jul 21 17:03:12 2014 us=695141 IFCONFIG POOL LIST
Mon Jul 21 17:03:12 2014 us=695158 gws3,10.8.0.4
Mon Jul 21 17:03:12 2014 us=695292 Initialization Sequence Completed
Mon Jul 21 17:05:03 2014 us=652087 MULTI: multi_create_instance called
Mon Jul 21 17:05:03 2014 us=652240 108.162.155.122:1194 Re-using SSL/TLS context
Mon Jul 21 17:05:03 2014 us=652327 108.162.155.122:1194 LZO compression initialized
Mon Jul 21 17:05:03 2014 us=652616 108.162.155.122:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:05:03 2014 us=652639 108.162.155.122:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:05:03 2014 us=652846 108.162.155.122:1194 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:05:03 2014 us=652866 108.162.155.122:1194 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:05:03 2014 us=652914 108.162.155.122:1194 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:05:03 2014 us=652933 108.162.155.122:1194 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:05:03 2014 us=652992 108.162.155.122:1194 TLS: Initial packet from [AF_INET]108.162.155.122:1194, sid=7b882a42 19e23288
Mon Jul 21 17:05:04 2014 us=593322 108.162.155.122:1194 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:05:04 2014 us=593597 108.162.155.122:1194 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:05:04 2014 us=765142 108.162.155.122:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:05:04 2014 us=765243 108.162.155.122:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:05:04 2014 us=765300 108.162.155.122:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:05:04 2014 us=765313 108.162.155.122:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:05:04 2014 us=815969 108.162.155.122:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:05:04 2014 us=816090 108.162.155.122:1194 [gws3] Peer Connection Initiated with [AF_INET]108.162.155.122:1194
Mon Jul 21 17:05:04 2014 us=816131 gws3/108.162.155.122:1194 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:05:04 2014 us=816178 gws3/108.162.155.122:1194 MULTI: Learn: 10.8.0.6 -> gws3/108.162.155.122:1194
Mon Jul 21 17:05:04 2014 us=816191 gws3/108.162.155.122:1194 MULTI: primary virtual IP for gws3/108.162.155.122:1194: 10.8.0.6
Mon Jul 21 17:05:15 2014 us=972586 gws3/108.162.155.122:1194 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:05:15 2014 us=972686 gws3/108.162.155.122:1194 send_push_reply(): safe_cap=940
Mon Jul 21 17:05:15 2014 us=972733 gws3/108.162.155.122:1194 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Jul 21 17:07:00 2014 us=95878 MULTI: multi_create_instance called
Mon Jul 21 17:07:00 2014 us=96025 24.114.54.237:7872 Re-using SSL/TLS context
Mon Jul 21 17:07:00 2014 us=96079 24.114.54.237:7872 LZO compression initialized
Mon Jul 21 17:07:00 2014 us=96332 24.114.54.237:7872 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:07:00 2014 us=96355 24.114.54.237:7872 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:07:00 2014 us=96538 24.114.54.237:7872 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:07:00 2014 us=96556 24.114.54.237:7872 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:07:00 2014 us=96579 24.114.54.237:7872 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:07:00 2014 us=96597 24.114.54.237:7872 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:07:00 2014 us=96640 24.114.54.237:7872 TLS: Initial packet from [AF_INET]24.114.54.237:7872, sid=388f33a4 38e290c5
Mon Jul 21 17:07:01 2014 us=387175 24.114.54.237:7872 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:07:01 2014 us=387506 24.114.54.237:7872 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:07:01 2014 us=645072 24.114.54.237:7872 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:07:01 2014 us=645169 24.114.54.237:7872 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:07:01 2014 us=645225 24.114.54.237:7872 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:07:01 2014 us=645238 24.114.54.237:7872 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:07:01 2014 us=712103 24.114.54.237:7872 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:07:01 2014 us=712209 24.114.54.237:7872 [gws3] Peer Connection Initiated with [AF_INET]24.114.54.237:7872
Mon Jul 21 17:07:01 2014 us=712503 MULTI: new connection by client 'gws3' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Jul 21 17:07:01 2014 us=712527 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:07:01 2014 us=712570 MULTI: Learn: 10.8.0.6 -> gws3/24.114.54.237:7872
Mon Jul 21 17:07:01 2014 us=712583 MULTI: primary virtual IP for gws3/24.114.54.237:7872: 10.8.0.6
Mon Jul 21 17:07:04 2014 us=16352 gws3/24.114.54.237:7872 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:07:04 2014 us=16441 gws3/24.114.54.237:7872 send_push_reply(): safe_cap=940
Mon Jul 21 17:07:04 2014 us=16487 gws3/24.114.54.237:7872 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Jul 21 17:08:13 2014 us=242453 MULTI: multi_create_instance called
Mon Jul 21 17:08:13 2014 us=242593 108.162.155.122:1194 Re-using SSL/TLS context
Mon Jul 21 17:08:13 2014 us=242643 108.162.155.122:1194 LZO compression initialized
Mon Jul 21 17:08:13 2014 us=242760 108.162.155.122:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:08:13 2014 us=242777 108.162.155.122:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:08:13 2014 us=242974 108.162.155.122:1194 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:08:13 2014 us=242990 108.162.155.122:1194 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:08:13 2014 us=243013 108.162.155.122:1194 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:08:13 2014 us=243030 108.162.155.122:1194 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:08:13 2014 us=243071 108.162.155.122:1194 TLS: Initial packet from [AF_INET]108.162.155.122:1194, sid=7afd50a3 a2c55dae
Mon Jul 21 17:08:14 2014 us=260346 108.162.155.122:1194 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:08:14 2014 us=260627 108.162.155.122:1194 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:08:14 2014 us=458897 108.162.155.122:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:08:14 2014 us=459000 108.162.155.122:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:08:14 2014 us=459057 108.162.155.122:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:08:14 2014 us=459070 108.162.155.122:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:08:14 2014 us=506535 108.162.155.122:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:08:14 2014 us=506690 108.162.155.122:1194 [gws3] Peer Connection Initiated with [AF_INET]108.162.155.122:1194
Mon Jul 21 17:08:14 2014 us=506990 MULTI: new connection by client 'gws3' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Jul 21 17:08:14 2014 us=507014 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:08:14 2014 us=507057 MULTI: Learn: 10.8.0.6 -> gws3/108.162.155.122:1194
Mon Jul 21 17:08:14 2014 us=507069 MULTI: primary virtual IP for gws3/108.162.155.122:1194: 10.8.0.6
Mon Jul 21 17:08:16 2014 us=962894 gws3/108.162.155.122:1194 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:08:16 2014 us=962997 gws3/108.162.155.122:1194 send_push_reply(): safe_cap=940
Mon Jul 21 17:08:16 2014 us=963047 gws3/108.162.155.122:1194 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Jul 21 17:13:41 2014 us=793447 MULTI: multi_create_instance called
Mon Jul 21 17:13:41 2014 us=793599 24.114.57.235:8138 Re-using SSL/TLS context
Mon Jul 21 17:13:41 2014 us=793655 24.114.57.235:8138 LZO compression initialized
Mon Jul 21 17:13:41 2014 us=793768 24.114.57.235:8138 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:13:41 2014 us=793822 24.114.57.235:8138 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:13:41 2014 us=793976 24.114.57.235:8138 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:13:41 2014 us=793991 24.114.57.235:8138 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:13:41 2014 us=794014 24.114.57.235:8138 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:13:41 2014 us=794031 24.114.57.235:8138 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:13:41 2014 us=794070 24.114.57.235:8138 TLS: Initial packet from [AF_INET]24.114.57.235:8138, sid=bc153151 34da5cd7
Mon Jul 21 17:13:42 2014 us=989911 24.114.57.235:8138 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:13:42 2014 us=990193 24.114.57.235:8138 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:13:43 2014 us=258067 24.114.57.235:8138 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:13:43 2014 us=258162 24.114.57.235:8138 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:13:43 2014 us=258219 24.114.57.235:8138 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:13:43 2014 us=258232 24.114.57.235:8138 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:13:43 2014 us=326158 24.114.57.235:8138 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:13:43 2014 us=326278 24.114.57.235:8138 [gws3] Peer Connection Initiated with [AF_INET]24.114.57.235:8138
Mon Jul 21 17:13:43 2014 us=326503 MULTI: new connection by client 'gws3' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Jul 21 17:13:43 2014 us=326525 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:13:43 2014 us=326566 MULTI: Learn: 10.8.0.6 -> gws3/24.114.57.235:8138
Mon Jul 21 17:13:43 2014 us=326579 MULTI: primary virtual IP for gws3/24.114.57.235:8138: 10.8.0.6
Mon Jul 21 17:13:44 2014 us=888159 gws3/24.114.57.235:8138 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:13:44 2014 us=888252 gws3/24.114.57.235:8138 send_push_reply(): safe_cap=940
Mon Jul 21 17:13:44 2014 us=888311 gws3/24.114.57.235:8138 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Jul 21 17:14:01 2014 us=111991 MULTI: multi_create_instance called
Mon Jul 21 17:14:01 2014 us=112128 108.162.155.122:1194 Re-using SSL/TLS context
Mon Jul 21 17:14:01 2014 us=112150 108.162.155.122:1194 LZO compression initialized
Mon Jul 21 17:14:01 2014 us=112263 108.162.155.122:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:14:01 2014 us=112279 108.162.155.122:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:14:01 2014 us=112438 108.162.155.122:1194 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:14:01 2014 us=112451 108.162.155.122:1194 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:14:01 2014 us=112486 108.162.155.122:1194 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:14:01 2014 us=112504 108.162.155.122:1194 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:14:01 2014 us=112543 108.162.155.122:1194 TLS: Initial packet from [AF_INET]108.162.155.122:1194, sid=8e322db6 48ad4355
Mon Jul 21 17:14:02 2014 us=97099 108.162.155.122:1194 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:14:02 2014 us=97376 108.162.155.122:1194 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:14:02 2014 us=266199 108.162.155.122:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:14:02 2014 us=266288 108.162.155.122:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:14:02 2014 us=266355 108.162.155.122:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:14:02 2014 us=266369 108.162.155.122:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:14:02 2014 us=326929 108.162.155.122:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:14:02 2014 us=327054 108.162.155.122:1194 [gws3] Peer Connection Initiated with [AF_INET]108.162.155.122:1194
Mon Jul 21 17:14:02 2014 us=327283 MULTI: new connection by client 'gws3' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Jul 21 17:14:02 2014 us=327303 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:14:02 2014 us=327344 MULTI: Learn: 10.8.0.6 -> gws3/108.162.155.122:1194
Mon Jul 21 17:14:02 2014 us=327357 MULTI: primary virtual IP for gws3/108.162.155.122:1194: 10.8.0.6
Mon Jul 21 17:14:03 2014 us=978050 gws3/108.162.155.122:1194 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:14:03 2014 us=978137 gws3/108.162.155.122:1194 send_push_reply(): safe_cap=940
Mon Jul 21 17:14:03 2014 us=978184 gws3/108.162.155.122:1194 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Jul 21 17:20:08 2014 us=386730 MULTI: multi_create_instance called
Mon Jul 21 17:20:08 2014 us=386952 108.162.155.122:48819 Re-using SSL/TLS context
Mon Jul 21 17:20:08 2014 us=386977 108.162.155.122:48819 LZO compression initialized
Mon Jul 21 17:20:08 2014 us=387107 108.162.155.122:48819 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:20:08 2014 us=387125 108.162.155.122:48819 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:20:08 2014 us=387283 108.162.155.122:48819 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:20:08 2014 us=387297 108.162.155.122:48819 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:20:08 2014 us=387321 108.162.155.122:48819 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:20:08 2014 us=387337 108.162.155.122:48819 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:20:08 2014 us=387376 108.162.155.122:48819 TLS: Initial packet from [AF_INET]108.162.155.122:48819, sid=b0ad1cb2 278762f7
Mon Jul 21 17:20:09 2014 us=309418 108.162.155.122:48819 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:20:09 2014 us=309691 108.162.155.122:48819 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:20:09 2014 us=490879 108.162.155.122:48819 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:20:09 2014 us=490980 108.162.155.122:48819 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:20:09 2014 us=491037 108.162.155.122:48819 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:20:09 2014 us=491050 108.162.155.122:48819 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:20:09 2014 us=541645 108.162.155.122:48819 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:20:09 2014 us=541774 108.162.155.122:48819 [gws3] Peer Connection Initiated with [AF_INET]108.162.155.122:48819
Mon Jul 21 17:20:09 2014 us=542039 MULTI: new connection by client 'gws3' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Jul 21 17:20:09 2014 us=542060 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:20:09 2014 us=542101 MULTI: Learn: 10.8.0.6 -> gws3/108.162.155.122:48819
Mon Jul 21 17:20:09 2014 us=542114 MULTI: primary virtual IP for gws3/108.162.155.122:48819: 10.8.0.6
Mon Jul 21 17:20:11 2014 us=792510 gws3/108.162.155.122:48819 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:20:11 2014 us=792608 gws3/108.162.155.122:48819 send_push_reply(): safe_cap=940
Mon Jul 21 17:20:11 2014 us=792655 gws3/108.162.155.122:48819 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Jul 21 17:21:13 2014 us=9424 MULTI: multi_create_instance called
Mon Jul 21 17:21:13 2014 us=9580 108.162.155.122:43060 Re-using SSL/TLS context
Mon Jul 21 17:21:13 2014 us=9604 108.162.155.122:43060 LZO compression initialized
Mon Jul 21 17:21:13 2014 us=9732 108.162.155.122:43060 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:21:13 2014 us=9748 108.162.155.122:43060 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:21:13 2014 us=9932 108.162.155.122:43060 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:21:13 2014 us=9977 108.162.155.122:43060 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:21:13 2014 us=10001 108.162.155.122:43060 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:21:13 2014 us=10018 108.162.155.122:43060 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:21:13 2014 us=10055 108.162.155.122:43060 TLS: Initial packet from [AF_INET]108.162.155.122:43060, sid=a5e091c5 9aa35842
Mon Jul 21 17:21:13 2014 us=902946 108.162.155.122:43060 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:21:13 2014 us=903231 108.162.155.122:43060 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:21:14 2014 us=101540 108.162.155.122:43060 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:21:14 2014 us=101633 108.162.155.122:43060 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:21:14 2014 us=101689 108.162.155.122:43060 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:21:14 2014 us=101703 108.162.155.122:43060 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:21:14 2014 us=151216 108.162.155.122:43060 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:21:14 2014 us=151331 108.162.155.122:43060 [gws3] Peer Connection Initiated with [AF_INET]108.162.155.122:43060
Mon Jul 21 17:21:14 2014 us=151562 MULTI: new connection by client 'gws3' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Jul 21 17:21:14 2014 us=151583 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:21:14 2014 us=151624 MULTI: Learn: 10.8.0.6 -> gws3/108.162.155.122:43060
Mon Jul 21 17:21:14 2014 us=151637 MULTI: primary virtual IP for gws3/108.162.155.122:43060: 10.8.0.6
Mon Jul 21 17:21:16 2014 us=215526 gws3/108.162.155.122:43060 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:21:16 2014 us=215620 gws3/108.162.155.122:43060 send_push_reply(): safe_cap=940
Mon Jul 21 17:21:16 2014 us=215669 gws3/108.162.155.122:43060 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Mon Jul 21 17:27:05 2014 us=906254 MULTI: multi_create_instance called
Mon Jul 21 17:27:05 2014 us=906410 108.162.155.122:1194 Re-using SSL/TLS context
Mon Jul 21 17:27:05 2014 us=906435 108.162.155.122:1194 LZO compression initialized
Mon Jul 21 17:27:05 2014 us=906559 108.162.155.122:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Jul 21 17:27:05 2014 us=906576 108.162.155.122:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Jul 21 17:27:05 2014 us=906729 108.162.155.122:1194 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Mon Jul 21 17:27:05 2014 us=906743 108.162.155.122:1194 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Mon Jul 21 17:27:05 2014 us=906766 108.162.155.122:1194 Local Options hash (VER=V4): '530fdded'
Mon Jul 21 17:27:05 2014 us=906784 108.162.155.122:1194 Expected Remote Options hash (VER=V4): '41690919'
Mon Jul 21 17:27:05 2014 us=906856 108.162.155.122:1194 TLS: Initial packet from [AF_INET]108.162.155.122:1194, sid=7e5ca23b a609678f
Mon Jul 21 17:27:06 2014 us=820252 108.162.155.122:1194 VERIFY OK: depth=1, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=Just Core Business Inc. CA, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:27:06 2014 us=820564 108.162.155.122:1194 VERIFY OK: depth=0, C=CA, ST=ON, L=Toronto, O=Just Core Business Inc., OU=server, CN=gws3, name=EasyRSA, emailAddress=openvpn@justcorebusiness.com
Mon Jul 21 17:27:07 2014 us=6130 108.162.155.122:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:27:07 2014 us=6221 108.162.155.122:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:27:07 2014 us=6277 108.162.155.122:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Jul 21 17:27:07 2014 us=6289 108.162.155.122:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Jul 21 17:27:07 2014 us=61011 108.162.155.122:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon Jul 21 17:27:07 2014 us=61126 108.162.155.122:1194 [gws3] Peer Connection Initiated with [AF_INET]108.162.155.122:1194
Mon Jul 21 17:27:07 2014 us=61335 MULTI: new connection by client 'gws3' will cause previous active sessions by this client to be dropped. Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
Mon Jul 21 17:27:07 2014 us=61355 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Mon Jul 21 17:27:07 2014 us=61395 MULTI: Learn: 10.8.0.6 -> gws3/108.162.155.122:1194
Mon Jul 21 17:27:07 2014 us=61408 MULTI: primary virtual IP for gws3/108.162.155.122:1194: 10.8.0.6
Mon Jul 21 17:27:09 2014 us=283043 gws3/108.162.155.122:1194 PUSH: Received control message: 'PUSH_REQUEST'
Mon Jul 21 17:27:09 2014 us=283144 gws3/108.162.155.122:1194 send_push_reply(): safe_cap=940
Mon Jul 21 17:27:09 2014 us=283192 gws3/108.162.155.122:1194 SENT CONTROL [gws3]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
openVPN running, but no internet after connecting
-
MacPhotoBiker
- OpenVpn Newbie
- Posts: 2
- Joined: Mon Jul 21, 2014 9:04 pm
-
MacPhotoBiker
- OpenVpn Newbie
- Posts: 2
- Joined: Mon Jul 21, 2014 9:04 pm
Re: openVPN running, but no internet after connecting
Hi debbie10t,
thanks a lot for your answer.
I followed this tutorial to the letter: http://www.unixmen.com/setup-openvpn-se ... entos-6-5/ and a believe there were no mistakes.
In my opening post I missed to mention that I'm running nginx as a reverse proxy in front of the Apache server (everything works fine, all sits I'm hosting can be accessed with no problem).
Could it be that this causes some problems regarding openVPN?
On my phone I ran a "traceroute 8.8.8.8" after connecting to my VPN, but the only IP address shown is 10.8.0.1, it never goes beyond that.
Honestly, I'm a newbie to openVPN. I read something about a "routing table", but I couldn't figure out where or how to configure it
thanks a lot for your answer.
I followed this tutorial to the letter: http://www.unixmen.com/setup-openvpn-se ... entos-6-5/ and a believe there were no mistakes.
In my opening post I missed to mention that I'm running nginx as a reverse proxy in front of the Apache server (everything works fine, all sits I'm hosting can be accessed with no problem).
Could it be that this causes some problems regarding openVPN?
On my phone I ran a "traceroute 8.8.8.8" after connecting to my VPN, but the only IP address shown is 10.8.0.1, it never goes beyond that.
Honestly, I'm a newbie to openVPN. I read something about a "routing table", but I couldn't figure out where or how to configure it