I've been desperately trying to connect an OpenVPN Server 2.6.1 with iOS Connect 3.4.0 for a week. Other operating systems work normally. When I connect the iOS device via wifi, the tunnel also works normally. The ping to the internet works normally. Access to the local network also works normally. Only UDP/TCP connections to the Internet from iOS devices do not work. I can see all packets in the tunnel device with tcpdump.
I am starting openvpn in a docker container connected to a traefik reverse proxy also in a docker container and get the following error in log messages:
Code: Select all
openvpn-udp | 2023-10-26 21:40:20 us=284568 read UDPv4 [ECONNREFUSED]: Connection refused (fd=6,code=111)
openvpn-udp | 2023-10-26 21:40:20 us=339633 Float requested for peer 1 to 172.20.0.19:50418
openvpn-udp | 2023-10-26 21:40:20 us=339692 peer 1 (myuser) floated from 172.20.0.19:55344 to [AF_INET]172.20.0.19:50418
Please give me a hint, I'm really desperate!
server.conf:
Code: Select all
# OpenVPN server configuration
server 10.30.200.0 255.255.255.128
port 1194
proto udp
dev tun
dev-type tun
ca /etc/openvpn/pki/ca.crt
cert /etc/openvpn/pki/issued/vpn.mydomain.com.crt
key /etc/openvpn/pki/private/vpn.mydomain.com.key
dh /etc/openvpn/pki/dh.pem
push "dhcp-option DNS 10.30.20.10"
push "dhcp-option DNS 10.30.20.15"
push "dhcp-option DNS 10.40.20.10"
push "dhcp-option DOMAIN mydomain.com"
compress migrate
keepalive 10 60
push "redirect-gateway def1"
# As we're using LDAP, each client can use the same certificate
duplicate-cn
tls-server
tls-auth /etc/openvpn/pki/ta.key 0
tls-cipher TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
tls-ciphersuites TLS-AES-256-GCM-SHA384:TLS-CHACHA20-POLY1305-SHA256:TLS-AES-128-GCM-SHA256:TLS-AES-128-CCM-8-SHA256:TLS-AES-128-CCM-SHA256
auth SHA512
user nobody
group nogroup
persist-key
persist-tun
status /etc/openvpn/openvpn-status.log
log-append /proc/1/fd/1
verb 4
# Do not force renegotiation of client
reneg-sec 0
plugin /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn
verify-client-cert optional
username-as-common-name
client-config-dir /etc/openvpn/ccd
route 10.30.230.0 255.255.255.128
Code: Select all
client
tls-client
dev tun
persist-key
persist-tun
remote-cert-tls server
key-direction 1
auth SHA512
auth-nocache
proto udp
reneg-sec 0
redirect-gateway def1
auth-user-pass
##Un-comment these lines when using Linux
##in order to set the DNS server:
## If your Linux distro uses systemd-resolved:
#script-security 2
#up /etc/openvpn/update-systemd-resolved
#down /etc/openvpn/update-systemd-resolved
## Otherwise:
#script-security 2
#up /etc/openvpn/update-resolv-conf
#down /etc/openvpn/update-resolv-conf
# Set log file verbosity
verb 4
<connection>
remote vpn.mydomain.com 1194 udp
float
nobind
</connection>
<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction 1
Code: Select all
openvpn-udp | + exec openvpn --config /etc/openvpn/server.conf
openvpn-udp | 2023-10-26 20:49:18 us=184440 WARNING: --topology net30 support for server configs with IPv4 pools will be removed in a future release. Please migrate to --topology subnet as soon as possible.
openvpn-udp | 2023-10-26 20:49:18 us=186146 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
openvpn-udp | 2023-10-26 20:49:18 us=186338 Note: NOT using '--topology subnet' disables data channel offload.
openvpn-udp | 2023-10-26 20:49:18 us=186367 WARNING: POTENTIALLY DANGEROUS OPTION --verify-client-cert none|optional may accept clients which do not present a certificate
openvpn-udp | 2023-10-26 20:49:18 us=186412 Current Parameter Settings:
openvpn-udp | 2023-10-26 20:49:18 us=186420 config = '/etc/openvpn/server.conf'
openvpn-udp | 2023-10-26 20:49:18 us=186426 mode = 1
openvpn-udp | 2023-10-26 20:49:18 us=186433 persist_config = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186439 persist_mode = 1
openvpn-udp | 2023-10-26 20:49:18 us=186445 show_ciphers = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186451 show_digests = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186457 show_engines = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186464 genkey = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186470 genkey_filename = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186476 key_pass_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186482 show_tls_ciphers = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186488 connect_retry_max = 0
openvpn-udp | 2023-10-26 20:49:18 us=186494 Connection profiles [0]:
openvpn-udp | 2023-10-26 20:49:18 us=186500 proto = udp
openvpn-udp | 2023-10-26 20:49:18 us=186506 local = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186512 local_port = '1194'
openvpn-udp | 2023-10-26 20:49:18 us=186518 remote = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186525 remote_port = '1194'
openvpn-udp | 2023-10-26 20:49:18 us=186531 remote_float = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186537 bind_defined = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186543 bind_local = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=186549 bind_ipv6_only = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186555 connect_retry_seconds = 1
openvpn-udp | 2023-10-26 20:49:18 us=186561 connect_timeout = 120
openvpn-udp | 2023-10-26 20:49:18 us=186567 socks_proxy_server = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186573 socks_proxy_port = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186579 tun_mtu = 1500
openvpn-udp | 2023-10-26 20:49:18 us=186585 tun_mtu_defined = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=186591 link_mtu = 1500
openvpn-udp | 2023-10-26 20:49:18 us=186597 link_mtu_defined = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186603 tun_mtu_extra = 0
openvpn-udp | 2023-10-26 20:49:18 us=186609 tun_mtu_extra_defined = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186616 tls_mtu = 1250
openvpn-udp | 2023-10-26 20:49:18 us=186622 mtu_discover_type = -1
openvpn-udp | 2023-10-26 20:49:18 us=186628 fragment = 0
openvpn-udp | 2023-10-26 20:49:18 us=186634 mssfix = 1492
openvpn-udp | 2023-10-26 20:49:18 us=186640 mssfix_encap = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=186646 mssfix_fixed = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186652 explicit_exit_notification = 0
openvpn-udp | 2023-10-26 20:49:18 us=186658 tls_auth_file = '[INLINE]'
openvpn-udp | 2023-10-26 20:49:18 us=186664 key_direction = 0
openvpn-udp | 2023-10-26 20:49:18 us=186671 tls_crypt_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186677 tls_crypt_v2_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186683 Connection profiles END
openvpn-udp | 2023-10-26 20:49:18 us=186689 remote_random = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186696 ipchange = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186702 dev = 'tun'
openvpn-udp | 2023-10-26 20:49:18 us=186708 dev_type = 'tun'
openvpn-udp | 2023-10-26 20:49:18 us=186714 dev_node = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186720 tuntap_options.disable_dco = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=186726 lladdr = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186783 topology = 1
openvpn-udp | 2023-10-26 20:49:18 us=186799 ifconfig_local = '10.30.200.1'
openvpn-udp | 2023-10-26 20:49:18 us=186806 ifconfig_remote_netmask = '10.30.200.2'
openvpn-udp | 2023-10-26 20:49:18 us=186812 ifconfig_noexec = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186818 ifconfig_nowarn = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186824 ifconfig_ipv6_local = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186830 ifconfig_ipv6_netbits = 0
openvpn-udp | 2023-10-26 20:49:18 us=186837 ifconfig_ipv6_remote = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=186843 shaper = 0
openvpn-udp | 2023-10-26 20:49:18 us=186872 mtu_test = 0
openvpn-udp | 2023-10-26 20:49:18 us=186881 mlock = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=186887 keepalive_ping = 10
openvpn-udp | 2023-10-26 20:49:18 us=186893 keepalive_timeout = 60
openvpn-udp | 2023-10-26 20:49:18 us=186899 inactivity_timeout = 0
openvpn-udp | 2023-10-26 20:49:18 us=186905 session_timeout = 0
openvpn-udp | 2023-10-26 20:49:18 us=186912 inactivity_minimum_bytes = 0
openvpn-udp | 2023-10-26 20:49:18 us=186942 ping_send_timeout = 10
openvpn-udp | 2023-10-26 20:49:18 us=187048 ping_rec_timeout = 120
openvpn-udp | 2023-10-26 20:49:18 us=187068 ping_rec_timeout_action = 2
openvpn-udp | 2023-10-26 20:49:18 us=187075 ping_timer_remote = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187082 remap_sigusr1 = 0
openvpn-udp | 2023-10-26 20:49:18 us=187088 persist_tun = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=187094 persist_local_ip = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187100 persist_remote_ip = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187106 persist_key = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=187112 passtos = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187119 resolve_retry_seconds = 1000000000
openvpn-udp | 2023-10-26 20:49:18 us=187153 resolve_in_advance = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187221 username = 'nobody'
openvpn-udp | 2023-10-26 20:49:18 us=187229 groupname = 'nogroup'
openvpn-udp | 2023-10-26 20:49:18 us=187239 chroot_dir = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187245 cd_dir = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187258 writepid = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187265 up_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187337 down_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187346 down_pre = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187352 up_restart = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187358 up_delay = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187364 daemon = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187375 log = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=187382 suppress_timestamps = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187393 machine_readable_output = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187400 nice = 0
openvpn-udp | 2023-10-26 20:49:18 us=187406 verbosity = 4
openvpn-udp | 2023-10-26 20:49:18 us=187413 mute = 0
openvpn-udp | 2023-10-26 20:49:18 us=187419 gremlin = 0
openvpn-udp | 2023-10-26 20:49:18 us=187425 status_file = '/etc/openvpn/openvpn-status.log'
openvpn-udp | 2023-10-26 20:49:18 us=187431 status_file_version = 1
openvpn-udp | 2023-10-26 20:49:18 us=187441 status_file_update_freq = 60
openvpn-udp | 2023-10-26 20:49:18 us=187447 occ = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=187453 rcvbuf = 0
openvpn-udp | 2023-10-26 20:49:18 us=187459 sndbuf = 0
openvpn-udp | 2023-10-26 20:49:18 us=187465 mark = 0
openvpn-udp | 2023-10-26 20:49:18 us=187471 sockflags = 0
openvpn-udp | 2023-10-26 20:49:18 us=187477 fast_io = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187484 comp.alg = 0
openvpn-udp | 2023-10-26 20:49:18 us=187490 comp.flags = 32
openvpn-udp | 2023-10-26 20:49:18 us=187496 route_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187502 route_default_gateway = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187508 route_default_metric = 0
openvpn-udp | 2023-10-26 20:49:18 us=187515 route_noexec = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187521 route_delay = 0
openvpn-udp | 2023-10-26 20:49:18 us=187527 route_delay_window = 30
openvpn-udp | 2023-10-26 20:49:18 us=187533 route_delay_defined = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187541 route_nopull = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187548 route_gateway_via_dhcp = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187554 allow_pull_fqdn = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187561 route 10.30.200.0/255.255.255.128/default (not set)/default (not set)
openvpn-udp | 2023-10-26 20:49:18 us=187567 route 10.30.230.0/255.255.255.128/default (not set)/default (not set)
openvpn-udp | 2023-10-26 20:49:18 us=187574 management_addr = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187580 management_port = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187586 management_user_pass = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187592 management_log_history_cache = 250
openvpn-udp | 2023-10-26 20:49:18 us=187599 management_echo_buffer_size = 100
openvpn-udp | 2023-10-26 20:49:18 us=187606 management_client_user = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187612 management_client_group = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187618 management_flags = 0
openvpn-udp | 2023-10-26 20:49:18 us=187626 plugin[0] /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so '[/usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so] [openvpn]'
openvpn-udp | 2023-10-26 20:49:18 us=187632 shared_secret_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187639 key_direction = 0
openvpn-udp | 2023-10-26 20:49:18 us=187647 ciphername = 'BF-CBC'
openvpn-udp | 2023-10-26 20:49:18 us=187653 ncp_ciphers = 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305'
openvpn-udp | 2023-10-26 20:49:18 us=187660 authname = 'SHA512'
openvpn-udp | 2023-10-26 20:49:18 us=187666 engine = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187672 replay = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=187678 mute_replay_warnings = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187685 replay_window = 64
openvpn-udp | 2023-10-26 20:49:18 us=187691 replay_time = 15
openvpn-udp | 2023-10-26 20:49:18 us=187697 packet_id_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187703 test_crypto = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187709 tls_server = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=187716 tls_client = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=187722 ca_file = '/etc/openvpn/pki/ca.crt'
openvpn-udp | 2023-10-26 20:49:18 us=187728 ca_path = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187735 dh_file = '/etc/openvpn/pki/dh.pem'
openvpn-udp | 2023-10-26 20:49:18 us=187741 cert_file = '/etc/openvpn/pki/issued/vpn.mydomain.com.crt'
openvpn-udp | 2023-10-26 20:49:18 us=187749 extra_certs_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187756 priv_key_file = '/etc/openvpn/pki/private/vpn.mydomain.com.key'
openvpn-udp | 2023-10-26 20:49:18 us=187762 pkcs12_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187790 cipher_list = 'TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256'
openvpn-udp | 2023-10-26 20:49:18 us=187797 cipher_list_tls13 = 'TLS-AES-256-GCM-SHA384:TLS-CHACHA20-POLY1305-SHA256:TLS-AES-128-GCM-SHA256:TLS-AES-128-CCM-8-SHA256:TLS-AES-128-CCM-SHA256'
openvpn-udp | 2023-10-26 20:49:18 us=187803 tls_cert_profile = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187809 tls_verify = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187815 tls_export_cert = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187821 verify_x509_type = 0
openvpn-udp | 2023-10-26 20:49:18 us=187828 verify_x509_name = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187834 crl_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187840 ns_cert_type = 0
openvpn-udp | 2023-10-26 20:49:18 us=187846 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187853 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187859 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187865 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187873 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187879 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187885 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187891 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187897 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187903 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187909 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187915 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187921 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187927 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187934 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187940 remote_cert_ku[i] = 0
openvpn-udp | 2023-10-26 20:49:18 us=187946 remote_cert_eku = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=187953 ssl_flags = 198
openvpn-udp | 2023-10-26 20:49:18 us=187959 tls_timeout = 2
openvpn-udp | 2023-10-26 20:49:18 us=187965 renegotiate_bytes = -1
openvpn-udp | 2023-10-26 20:49:18 us=187982 renegotiate_packets = 0
openvpn-udp | 2023-10-26 20:49:18 us=187988 renegotiate_seconds = 0
openvpn-udp | 2023-10-26 20:49:18 us=187994 handshake_window = 60
openvpn-udp | 2023-10-26 20:49:18 us=188000 transition_window = 3600
openvpn-udp | 2023-10-26 20:49:18 us=188006 single_session = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188013 push_peer_info = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188020 tls_exit = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188026 tls_crypt_v2_metadata = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188032 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188038 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188045 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188051 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188057 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188063 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188069 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188075 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188084 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188090 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188096 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188102 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188108 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188114 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188120 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188127 pkcs11_protected_authentication = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188133 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188139 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188145 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188151 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188158 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188164 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188170 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188177 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188210 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188243 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188251 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188257 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188263 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188269 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188275 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188281 pkcs11_private_mode = 00000000
openvpn-udp | 2023-10-26 20:49:18 us=188287 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188293 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188299 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188306 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188312 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188318 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188324 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188330 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188339 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188345 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188351 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188357 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188363 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188369 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188375 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188382 pkcs11_cert_private = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188388 pkcs11_pin_cache_period = -1
openvpn-udp | 2023-10-26 20:49:18 us=188394 pkcs11_id = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188400 pkcs11_id_management = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188407 server_network = 10.30.200.0
openvpn-udp | 2023-10-26 20:49:18 us=188414 server_netmask = 255.255.255.128
openvpn-udp | 2023-10-26 20:49:18 us=188421 server_network_ipv6 = ::
openvpn-udp | 2023-10-26 20:49:18 us=188427 server_netbits_ipv6 = 0
openvpn-udp | 2023-10-26 20:49:18 us=188434 server_bridge_ip = 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=188450 server_bridge_netmask = 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=188458 server_bridge_pool_start = 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=188464 server_bridge_pool_end = 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=188471 push_entry = 'dhcp-option DNS 10.30.20.10'
openvpn-udp | 2023-10-26 20:49:18 us=188500 push_entry = 'dhcp-option DNS 10.30.20.15'
openvpn-udp | 2023-10-26 20:49:18 us=188507 push_entry = 'dhcp-option DNS 10.30.20.15'
openvpn-udp | 2023-10-26 20:49:18 us=188513 push_entry = 'dhcp-option DOMAIN mydomain.com'
openvpn-udp | 2023-10-26 20:49:18 us=188519 push_entry = 'redirect-gateway def1'
openvpn-udp | 2023-10-26 20:49:18 us=188525 push_entry = 'route 10.30.200.1'
openvpn-udp | 2023-10-26 20:49:18 us=188531 push_entry = 'topology net30'
openvpn-udp | 2023-10-26 20:49:18 us=188538 push_entry = 'ping 10'
openvpn-udp | 2023-10-26 20:49:18 us=188544 push_entry = 'ping-restart 60'
openvpn-udp | 2023-10-26 20:49:18 us=188550 ifconfig_pool_defined = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=188557 ifconfig_pool_start = 10.30.200.4
openvpn-udp | 2023-10-26 20:49:18 us=188571 ifconfig_pool_end = 10.30.200.123
openvpn-udp | 2023-10-26 20:49:18 us=188578 ifconfig_pool_netmask = 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=188592 ifconfig_pool_persist_filename = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188599 ifconfig_pool_persist_refresh_freq = 600
openvpn-udp | 2023-10-26 20:49:18 us=188605 ifconfig_ipv6_pool_defined = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188612 ifconfig_ipv6_pool_base = ::
openvpn-udp | 2023-10-26 20:49:18 us=188618 ifconfig_ipv6_pool_netbits = 0
openvpn-udp | 2023-10-26 20:49:18 us=188625 n_bcast_buf = 256
openvpn-udp | 2023-10-26 20:49:18 us=188634 tcp_queue_limit = 64
openvpn-udp | 2023-10-26 20:49:18 us=188641 real_hash_size = 256
openvpn-udp | 2023-10-26 20:49:18 us=188647 virtual_hash_size = 256
openvpn-udp | 2023-10-26 20:49:18 us=188654 client_connect_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188660 learn_address_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188666 client_disconnect_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188672 client_crresponse_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188678 client_config_dir = '/etc/openvpn/ccd'
openvpn-udp | 2023-10-26 20:49:18 us=188685 ccd_exclusive = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188691 tmp_dir = '/tmp'
openvpn-udp | 2023-10-26 20:49:18 us=188704 push_ifconfig_defined = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188711 push_ifconfig_local = 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=188722 push_ifconfig_remote_netmask = 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=188729 push_ifconfig_ipv6_defined = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188736 push_ifconfig_ipv6_local = ::/0
openvpn-udp | 2023-10-26 20:49:18 us=188742 push_ifconfig_ipv6_remote = ::
openvpn-udp | 2023-10-26 20:49:18 us=188749 enable_c2c = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188755 duplicate_cn = ENABLED
openvpn-udp | 2023-10-26 20:49:18 us=188762 cf_max = 0
openvpn-udp | 2023-10-26 20:49:18 us=188768 cf_per = 0
openvpn-udp | 2023-10-26 20:49:18 us=188774 cf_initial_max = 100
openvpn-udp | 2023-10-26 20:49:18 us=188780 cf_initial_per = 10
openvpn-udp | 2023-10-26 20:49:18 us=188787 max_clients = 1024
openvpn-udp | 2023-10-26 20:49:18 us=188793 max_routes_per_client = 256
openvpn-udp | 2023-10-26 20:49:18 us=188799 auth_user_pass_verify_script = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188805 auth_user_pass_verify_script_via_file = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188814 auth_token_generate = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188820 auth_token_lifetime = 0
openvpn-udp | 2023-10-26 20:49:18 us=188826 auth_token_secret_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188832 port_share_host = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188838 port_share_port = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188844 vlan_tagging = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188851 vlan_accept = all
openvpn-udp | 2023-10-26 20:49:18 us=188857 vlan_pvid = 1
openvpn-udp | 2023-10-26 20:49:18 us=188864 client = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188870 pull = DISABLED
openvpn-udp | 2023-10-26 20:49:18 us=188876 auth_user_pass_file = '[UNDEF]'
openvpn-udp | 2023-10-26 20:49:18 us=188884 OpenVPN 2.6.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
openvpn-udp | 2023-10-26 20:49:18 us=188903 library versions: OpenSSL 3.0.8 7 Feb 2023, LZO 2.10
openvpn-udp | 2023-10-26 20:49:18 us=189004 WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
openvpn-udp | 2023-10-26 20:49:18 us=189026 net_route_v4_best_gw query: dst 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=189107 net_route_v4_best_gw result: via 172.21.0.1 dev eth0
openvpn-udp | 2023-10-26 20:49:18 us=189532 PLUGIN AUTH-PAM: BACKGROUND: INIT service='openvpn'
openvpn-udp | 2023-10-26 20:49:18 us=189602 PLUGIN AUTH-PAM: BACKGROUND: initialization succeeded
openvpn-udp | 2023-10-26 20:49:18 us=189647 PLUGIN AUTH-PAM: initialization succeeded (fg)
openvpn-udp | 2023-10-26 20:49:18 us=189673 PLUGIN_INIT: POST /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so '[/usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so] [openvpn]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
openvpn-udp | 2023-10-26 20:49:18 us=192208 Diffie-Hellman initialized with 2048 bit key
openvpn-udp | 2023-10-26 20:49:18 us=195182 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-udp | 2023-10-26 20:49:18 us=195372 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-udp | 2023-10-26 20:49:18 us=195536 TLS-Auth MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
openvpn-udp | 2023-10-26 20:49:18 us=195909 net_route_v4_best_gw query: dst 0.0.0.0
openvpn-udp | 2023-10-26 20:49:18 us=196101 net_route_v4_best_gw result: via 172.21.0.1 dev eth0
openvpn-udp | 2023-10-26 20:49:18 us=196197 ROUTE_GATEWAY 172.21.0.1/255.255.0.0 IFACE=eth0 HWADDR=xxx:xx:xx:xx:xx:xx
openvpn-udp | 2023-10-26 20:49:18 us=196483 TUN/TAP device tun0 opened
openvpn-udp | 2023-10-26 20:49:18 us=196507 do_ifconfig, ipv4=1, ipv6=0
openvpn-udp | 2023-10-26 20:49:18 us=196527 net_iface_mtu_set: mtu 1500 for tun0
openvpn-udp | 2023-10-26 20:49:18 us=196577 net_iface_up: set tun0 up
openvpn-udp | 2023-10-26 20:49:18 us=196661 net_addr_ptp_v4_add: 10.30.200.1 peer 10.30.200.2 dev tun0
openvpn-udp | 2023-10-26 20:49:18 us=196768 net_route_v4_add: 10.30.230.0/25 via 10.30.200.2 dev [NULL] table 0 metric -1
openvpn-udp | 2023-10-26 20:49:18 us=196823 net_route_v4_add: 10.30.200.0/25 via 10.30.200.2 dev [NULL] table 0 metric -1
openvpn-udp | 2023-10-26 20:49:18 us=196903 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
openvpn-udp | 2023-10-26 20:49:18 us=197251 Could not determine IPv4/IPv6 protocol. Using AF_INET
openvpn-udp | 2023-10-26 20:49:18 us=197293 Socket Buffers: R=[212992->212992] S=[212992->212992]
openvpn-udp | 2023-10-26 20:49:18 us=197338 UDPv4 link local (bound): [AF_INET][undef]:1194
openvpn-udp | 2023-10-26 20:49:18 us=197351 UDPv4 link remote: [AF_UNSPEC]
openvpn-udp | 2023-10-26 20:49:18 us=198656 UID set to nobody
openvpn-udp | 2023-10-26 20:49:18 us=198709 GID set to nogroup
openvpn-udp | 2023-10-26 20:49:18 us=198735 Capabilities retained: CAP_NET_ADMIN
openvpn-udp | 2023-10-26 20:49:18 us=198792 MULTI: multi_init called, r=256 v=256
openvpn-udp | 2023-10-26 20:49:18 us=198887 IFCONFIG POOL IPv4: base=10.30.200.4 size=30
openvpn-udp | 2023-10-26 20:49:18 us=198959 Initialization Sequence Completed
openvpn-udp | 2023-10-26 20:56:43 us=42783 Connection Attempt MULTI: multi_create_instance called
openvpn-udp | 2023-10-26 20:56:43 us=42865 172.20.0.19:45233 Re-using SSL/TLS context
openvpn-udp | 2023-10-26 20:56:43 us=42932 172.20.0.19:45233 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-udp | 2023-10-26 20:56:43 us=42961 172.20.0.19:45233 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
openvpn-udp | 2023-10-26 20:56:43 us=43183 172.20.0.19:45233 Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
openvpn-udp | 2023-10-26 20:56:43 us=43206 172.20.0.19:45233 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
openvpn-udp | 2023-10-26 20:56:43 us=112174 172.20.0.19:45233 peer info: IV_VER=3.8.2connect1
openvpn-udp | 2023-10-26 20:56:43 us=112273 172.20.0.19:45233 peer info: IV_PLAT=ios
openvpn-udp | 2023-10-26 20:56:43 us=112310 172.20.0.19:45233 peer info: IV_NCP=2
openvpn-udp | 2023-10-26 20:56:43 us=112359 172.20.0.19:45233 peer info: IV_TCPNL=1
openvpn-udp | 2023-10-26 20:56:43 us=112398 172.20.0.19:45233 peer info: IV_PROTO=990
openvpn-udp | 2023-10-26 20:56:43 us=112436 172.20.0.19:45233 peer info: IV_MTU=1600
openvpn-udp | 2023-10-26 20:56:43 us=112467 172.20.0.19:45233 peer info: IV_CIPHERS=AES-128-CBC:AES-192-CBC:AES-256-CBC:AES-128-GCM:AES-192-GCM:AES-256-GCM:CHACHA20-POLY1305
openvpn-udp | 2023-10-26 20:56:43 us=112495 172.20.0.19:45233 peer info: IV_GUI_VER=net.openvpn.connect.ios_3.4.0-5457
openvpn-udp | 2023-10-26 20:56:43 us=112526 172.20.0.19:45233 peer info: IV_SSO=webauth,openurl,crtext
openvpn-udp | 2023-10-26 20:56:43 us=112558 172.20.0.19:45233 peer info: IV_BS64DL=1
openvpn-udp | 2023-10-26 20:56:43 us=113218 PLUGIN AUTH-PAM: BACKGROUND: received command code: 0
openvpn-udp | 2023-10-26 20:56:43 us=113281 PLUGIN AUTH-PAM: BACKGROUND: USER: myuser
openvpn-udp | 2023-10-26 20:56:43 us=113294 PLUGIN AUTH-PAM: BACKGROUND: REMOTE: 172.20.0.19
openvpn-udp | 2023-10-26 20:56:43 us=117461 PLUGIN AUTH-PAM: BACKGROUND: my_conv[0] query='Password: ' style=1
openvpn-udp | 2023-10-26 20:56:43 us=154417 172.20.0.19:45233 PLUGIN_CALL: POST /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
openvpn-udp | 2023-10-26 20:56:43 us=154526 172.20.0.19:45233 TLS: Username/Password authentication succeeded for username 'myuser' [CN SET]
openvpn-udp | 2023-10-26 20:56:43 us=154642 172.20.0.19:45233 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
openvpn-udp | 2023-10-26 20:56:43 us=154706 172.20.0.19:45233 TLS: tls_multi_process: initial untrusted session promoted to trusted
openvpn-udp | 2023-10-26 20:56:43 us=202775 172.20.0.19:45233 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384
openvpn-udp | 2023-10-26 20:56:43 us=202861 172.20.0.19:45233 [myuser] Peer Connection Initiated with [AF_INET]172.20.0.19:45233
openvpn-udp | 2023-10-26 20:56:43 us=202885 myuser/172.20.0.19:45233 MULTI_sva: pool returned IPv4=10.30.200.6, IPv6=(Not enabled)
openvpn-udp | 2023-10-26 20:56:43 us=202923 myuser/172.20.0.19:45233 OPTIONS IMPORT: reading client specific options from: /etc/openvpn/ccd/myuser
openvpn-udp | 2023-10-26 20:56:43 us=202979 myuser/172.20.0.19:45233 MULTI: Learn: 10.30.230.1 -> myuser/172.20.0.19:45233
openvpn-udp | 2023-10-26 20:56:43 us=202987 myuser/172.20.0.19:45233 MULTI: primary virtual IP for myuser/172.20.0.19:45233: 10.30.230.1
openvpn-udp | 2023-10-26 20:56:43 us=203013 myuser/172.20.0.19:45233 Data Channel MTU parms [ mss_fix:1400 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
openvpn-udp | 2023-10-26 20:56:43 us=203057 myuser/172.20.0.19:45233 Outgoing dynamic tls-crypt: Cipher 'AES-256-CTR' initialized with 256 bit key
openvpn-udp | 2023-10-26 20:56:43 us=203122 myuser/172.20.0.19:45233 Outgoing dynamic tls-crypt: Using 256 bit message hash 'SHA256' for HMAC authentication
openvpn-udp | 2023-10-26 20:56:43 us=203192 myuser/172.20.0.19:45233 Incoming dynamic tls-crypt: Cipher 'AES-256-CTR' initialized with 256 bit key
openvpn-udp | 2023-10-26 20:56:43 us=203240 myuser/172.20.0.19:45233 Incoming dynamic tls-crypt: Using 256 bit message hash 'SHA256' for HMAC authentication
openvpn-udp | 2023-10-26 20:56:43 us=203300 myuser/172.20.0.19:45233 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-udp | 2023-10-26 20:56:43 us=203342 myuser/172.20.0.19:45233 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
openvpn-udp | 2023-10-26 20:56:43 us=203383 myuser/172.20.0.19:45233 SENT CONTROL [myuser]: 'PUSH_REPLY,dhcp-option DNS 10.30.20.10,dhcp-option DNS 10.30.20.15,dhcp-option DNS 10.30.20.15,dhcp-option DOMAIN mydomain.com,redirect-gateway def1,route 10.30.200.1,topology net30,ping 10,ping-restart 60,ifconfig 10.30.230.1 10.30.230.2,peer-id 0,cipher AES-256-GCM,protocol-flags cc-exit tls-ekm dyn-tls-crypt,tun-mtu 1500' (status=1)
openvpn-udp | 2023-10-26 20:56:43 us=205307 myuser/172.20.0.19:45233 PUSH: Received control message: 'PUSH_REQUEST'
openvpn-udp | 2023-10-26 20:56:44 us=42070 myuser/172.20.0.19:45233 Data Channel: cipher 'AES-256-GCM', peer-id: 0
openvpn-udp | 2023-10-26 20:56:44 us=42182 myuser/172.20.0.19:45233 Timers: ping 10, ping-restart 120
openvpn-udp | 2023-10-26 20:56:44 us=42195 myuser/172.20.0.19:45233 Protocol options: protocol-flags cc-exit tls-ekm dyn-tls-crypt