OpenVPN Support Forum

Hi,

I have worked with openvpn before and it always worked fine! Now I'm at a new location and proxy seems to be the issue.
I found this thread: http://forums.openvpn.net/topic7945-15.html and replaced the http://www.morzello.com/repository/netw ... ntlmv2.zip openvpn.exe in my portable app (was 1.6.6).

However: still the same issue.
Note: I can't install the openvpn so I need the portable version.

Please advise how to proceed troubleshooting.

Thanks a lot.
J.

Thu Dec 01 17:27:34 2011 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on May 13 2011
Thu Dec 01 17:27:45 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Dec 01 17:27:45 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Dec 01 17:27:46 2011 LZO compression initialized
Thu Dec 01 17:27:46 2011 Attempting to establish TCP connection with 10.x.x.x:80
Thu Dec 01 17:27:46 2011 TCP connection established with 10.x.x.x:80
Thu Dec 01 17:27:46 2011 SIGTERM[soft,init_instance] received, process exiting

=> 10.x.x.x is the proxy, it even doesn't go to the point of contacting my openvpn-server ....

can you post your client config?

Michael.

I guess I need a certificate to connect to Internet. A different certificate then the one I use to connect to my OpenVPN-server.

I see a certificate is installed on my local machine, how can I use it within OpenVPN?

Note: 10.x.x.x = proxy, it's certainly proxy-issue but don't know how to troubleshoot.

Fri Dec 02 09:29:56 2011 Attempting to establish TCP connection with 10.x.x.x:80
Fri Dec 02 09:29:56 2011 TCP connection established with 10.x.x.x:80
Fri Dec 02 09:29:58 2011 TCPv4_CLIENT link local: [undef]
Fri Dec 02 09:29:58 2011 TCPv4_CLIENT link remote: 10.x.x.x:80
Fri Dec 02 09:30:58 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Dec 02 09:30:58 2011 TLS Error: TLS handshake failed
Fri Dec 02 09:30:58 2011 Fatal TLS error (check_tls_errors_co), restarting
Fri Dec 02 09:30:58 2011 SIGUSR1[soft,tls-error] received, process restarting

rerun with added and post the client connection log.

If the client receives SIGTERM , as in your original posting, then there's something *seriously* wrong: the openvpn process was sent a TERMINATE signal (which the proxy will not dp)

Fri Dec 02 09:27:37 2011 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on May 13 2011
Fri Dec 02 09:27:41 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 02 09:27:41 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Dec 02 09:27:41 2011 LZO compression initialized
Fri Dec 02 09:27:41 2011 Attempting to establish TCP connection with 10.x.x.x:80
Fri Dec 02 09:27:41 2011 TCP connection established with 10.x.x.x:80
Fri Dec 02 09:27:43 2011 TCPv4_CLIENT link local: [undef]
Fri Dec 02 09:27:43 2011 TCPv4_CLIENT link remote: 10.x.x.x:80
Fri Dec 02 09:28:43 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Dec 02 09:28:43 2011 TLS Error: TLS handshake failed
Fri Dec 02 09:28:43 2011 Fatal TLS error (check_tls_errors_co), restarting
Fri Dec 02 09:28:43 2011 SIGUSR1[soft,tls-error] received, process restarting
Hi,


I've been troubleshooting this all day long and tried different things (as replacing the openvpn.exe in my portable version). Note: I really cannot use the installable version since I work on different computers.
I'm pretty sure it's the certificate to connect to Internet I have to use (TLS negotiation failed).
I'm not sure what I have to use as proxy: "use config-file, use manually ..." but I certainly have to define the certificate in the config of my machine (Windows XP, no firewall). I exported it (.cert-file). I also need tcp (since there is a proxy) but what to define in config: http-proxy, auto-proxy ...?

Config of client:
-----------------
dev tun
tls-client


remote myopenvpn 443


# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

#redirect-gateway
#auth-nocache

#auto-proxy
#http-proxy 10.x.x.x 80

pull

proto tcp-client

script-security 2

ca ca.crt

comp-lzo

reneg-sec 0

auth-user-pass

#verb 3



This is the connection log:
---------------------------

Fri Dec 02 09:28:48 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 02 09:28:48 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Dec 02 09:28:48 2011 LZO compression initialized
Fri Dec 02 09:28:48 2011 Attempting to establish TCP connection with 10.x.x.x:80
Fri Dec 02 09:28:48 2011 TCP connection established with 10.x.x.x:80
Fri Dec 02 09:28:51 2011 TCPv4_CLIENT link local: [undef]
Fri Dec 02 09:28:51 2011 TCPv4_CLIENT link remote: 10.x.x.x:80
Fri Dec 02 09:29:51 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Dec 02 09:29:51 2011 TLS Error: TLS handshake failed
Fri Dec 02 09:29:51 2011 Fatal TLS error (check_tls_errors_co), restarting
Fri Dec 02 09:29:51 2011 SIGUSR1[soft,tls-error] received, process restarting
Fri Dec 02 09:29:56 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 02 09:29:56 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Dec 02 09:29:56 2011 LZO compression initialized
Fri Dec 02 09:29:56 2011 Attempting to establish TCP connection with 10.x.x.x:80
Fri Dec 02 09:29:56 2011 TCP connection established with 10.x.x.x:80
Fri Dec 02 09:29:58 2011 TCPv4_CLIENT link local: [undef]
Fri Dec 02 09:29:58 2011 TCPv4_CLIENT link remote: 10.x.x.x:80
Fri Dec 02 09:30:58 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Dec 02 09:30:58 2011 TLS Error: TLS handshake failed
Fri Dec 02 09:30:58 2011 Fatal TLS error (check_tls_errors_co), restarting
Fri Dec 02 09:30:58 2011 SIGUSR1[soft,tls-error] received, process restarting
Fri Dec 02 09:31:03 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 02 09:31:03 2011 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Dec 02 09:31:03 2011 LZO compression initialized
Fri Dec 02 09:31:03 2011 Attempting to establish TCP connection with 10.x.x.x:80
Fri Dec 02 09:31:03 2011 TCP connection established with 10.x.x.x:80
Fri Dec 02 09:31:05 2011 TCPv4_CLIENT link local: [undef]
Fri Dec 02 09:31:05 2011 TCPv4_CLIENT link remote: 10.x.x.x:80
Fri Dec 02 09:31:08 2011 SIGTERM[hard,] received, process exiting

Ok, verb 7 now (note: my openvpn listens at 443, 8080 and 80 for troubleshooting issues).
Locally (on a pc which is in the LAN of openvpn-server) I can connect to all those ports on local ip of openvpn as well as external one (so config is ok).

Fri Dec 02 10:25:02 2011 us=546000 Current Parameter Settings:
Fri Dec 02 10:25:02 2011 us=546000 config = 'openvpn.ovpn'
Fri Dec 02 10:25:02 2011 us=546000 mode = 0
Fri Dec 02 10:25:02 2011 us=546000 show_ciphers = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 show_digests = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 show_engines = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 genkey = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 key_pass_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 show_tls_ciphers = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 Connection profiles [default]:
Fri Dec 02 10:25:02 2011 us=546000 proto = udp
Fri Dec 02 10:25:02 2011 us=546000 local = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 local_port = 1194
Fri Dec 02 10:25:02 2011 us=546000 remote = 'myopenvpn'
Fri Dec 02 10:25:02 2011 us=546000 remote_port = 443
Fri Dec 02 10:25:02 2011 us=546000 remote_float = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 bind_defined = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 bind_local = ENABLED
Fri Dec 02 10:25:02 2011 us=546000 connect_retry_seconds = 5
Fri Dec 02 10:25:02 2011 us=546000 connect_timeout = 10
Fri Dec 02 10:25:02 2011 us=546000 connect_retry_max = 0
Fri Dec 02 10:25:02 2011 us=546000 socks_proxy_server = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 socks_proxy_port = 0
Fri Dec 02 10:25:02 2011 us=546000 socks_proxy_retry = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 Connection profiles END
Fri Dec 02 10:25:02 2011 us=546000 remote_random = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 ipchange = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 dev = 'tun'
Fri Dec 02 10:25:02 2011 us=546000 dev_type = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 dev_node = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 lladdr = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 topology = 1
Fri Dec 02 10:25:02 2011 us=546000 tun_ipv6 = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 ifconfig_local = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 ifconfig_remote_netmask = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 ifconfig_noexec = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 ifconfig_nowarn = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 shaper = 0
Fri Dec 02 10:25:02 2011 us=546000 tun_mtu = 1500
Fri Dec 02 10:25:02 2011 us=546000 tun_mtu_defined = ENABLED
Fri Dec 02 10:25:02 2011 us=546000 link_mtu = 1500
Fri Dec 02 10:25:02 2011 us=546000 link_mtu_defined = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 tun_mtu_extra = 0
Fri Dec 02 10:25:02 2011 us=546000 tun_mtu_extra_defined = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 fragment = 0
Fri Dec 02 10:25:02 2011 us=546000 mtu_discover_type = -1
Fri Dec 02 10:25:02 2011 us=546000 mtu_test = 0
Fri Dec 02 10:25:02 2011 us=546000 mlock = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 keepalive_ping = 0
Fri Dec 02 10:25:02 2011 us=546000 keepalive_timeout = 0
Fri Dec 02 10:25:02 2011 us=546000 inactivity_timeout = 0
Fri Dec 02 10:25:02 2011 us=546000 ping_send_timeout = 0
Fri Dec 02 10:25:02 2011 us=546000 ping_rec_timeout = 0
Fri Dec 02 10:25:02 2011 us=546000 ping_rec_timeout_action = 0
Fri Dec 02 10:25:02 2011 us=546000 ping_timer_remote = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 remap_sigusr1 = 0
Fri Dec 02 10:25:02 2011 us=546000 explicit_exit_notification = 0
Fri Dec 02 10:25:02 2011 us=546000 persist_tun = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 persist_local_ip = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 persist_remote_ip = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 persist_key = DISABLED
Fri Dec 02 10:25:02 2011 us=546000 mssfix = 1450
Fri Dec 02 10:25:02 2011 us=546000 resolve_retry_seconds = 1000000000
Fri Dec 02 10:25:02 2011 us=546000 username = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 groupname = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 chroot_dir = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 cd_dir = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=546000 writepid = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=593000 up_script = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=593000 down_script = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=593000 down_pre = DISABLED
Fri Dec 02 10:25:02 2011 us=593000 up_restart = DISABLED
Fri Dec 02 10:25:02 2011 us=593000 up_delay = DISABLED
Fri Dec 02 10:25:02 2011 us=593000 daemon = DISABLED
Fri Dec 02 10:25:02 2011 us=593000 inetd = 0
Fri Dec 02 10:25:02 2011 us=593000 log = DISABLED
Fri Dec 02 10:25:02 2011 us=593000 suppress_timestamps = DISABLED
Fri Dec 02 10:25:02 2011 us=593000 nice = 0
Fri Dec 02 10:25:02 2011 us=593000 verbosity = 7
Fri Dec 02 10:25:02 2011 us=593000 mute = 0
Fri Dec 02 10:25:02 2011 us=593000 gremlin = 0
Fri Dec 02 10:25:02 2011 us=593000 status_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=593000 status_file_version = 1
Fri Dec 02 10:25:02 2011 us=593000 status_file_update_freq = 60
Fri Dec 02 10:25:02 2011 us=593000 occ = ENABLED
Fri Dec 02 10:25:02 2011 us=593000 rcvbuf = 0
Fri Dec 02 10:25:02 2011 us=593000 sndbuf = 0
Fri Dec 02 10:25:02 2011 us=609000 sockflags = 0
Fri Dec 02 10:25:02 2011 us=609000 fast_io = DISABLED
Fri Dec 02 10:25:02 2011 us=609000 lzo = 7
Fri Dec 02 10:25:02 2011 us=609000 route_script = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=609000 route_default_gateway = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=609000 route_default_metric = 0
Fri Dec 02 10:25:02 2011 us=609000 route_noexec = DISABLED
Fri Dec 02 10:25:02 2011 us=609000 route_delay = 5
Fri Dec 02 10:25:02 2011 us=609000 route_delay_window = 30
Fri Dec 02 10:25:02 2011 us=609000 route_delay_defined = ENABLED
Fri Dec 02 10:25:02 2011 us=609000 route_nopull = DISABLED
Fri Dec 02 10:25:02 2011 us=609000 route_gateway_via_dhcp = DISABLED
Fri Dec 02 10:25:02 2011 us=609000 max_routes = 100
Fri Dec 02 10:25:02 2011 us=609000 allow_pull_fqdn = DISABLED
Fri Dec 02 10:25:02 2011 us=609000 management_addr = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=609000 management_port = 0
Fri Dec 02 10:25:02 2011 us=625000 management_user_pass = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=625000 management_log_history_cache = 250
Fri Dec 02 10:25:02 2011 us=625000 management_echo_buffer_size = 100
Fri Dec 02 10:25:02 2011 us=625000 management_write_peer_info_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=625000 management_client_user = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=625000 management_client_group = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=625000 management_flags = 0
Fri Dec 02 10:25:02 2011 us=625000 shared_secret_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=625000 key_direction = 0
Fri Dec 02 10:25:02 2011 us=625000 ciphername_defined = ENABLED
Fri Dec 02 10:25:02 2011 us=625000 ciphername = 'BF-CBC'
Fri Dec 02 10:25:02 2011 us=625000 authname_defined = ENABLED
Fri Dec 02 10:25:02 2011 us=625000 authname = 'SHA1'
Fri Dec 02 10:25:02 2011 us=625000 prng_hash = 'SHA1'
Fri Dec 02 10:25:02 2011 us=625000 prng_nonce_secret_len = 16
Fri Dec 02 10:25:02 2011 us=625000 keysize = 0
Fri Dec 02 10:25:02 2011 us=656000 engine = DISABLED
Fri Dec 02 10:25:02 2011 us=656000 replay = ENABLED
Fri Dec 02 10:25:02 2011 us=656000 mute_replay_warnings = DISABLED
Fri Dec 02 10:25:02 2011 us=656000 replay_window = 64
Fri Dec 02 10:25:02 2011 us=656000 replay_time = 15
Fri Dec 02 10:25:02 2011 us=656000 packet_id_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=656000 use_iv = ENABLED
Fri Dec 02 10:25:02 2011 us=656000 test_crypto = DISABLED
Fri Dec 02 10:25:02 2011 us=656000 tls_server = DISABLED
Fri Dec 02 10:25:02 2011 us=656000 tls_client = ENABLED
Fri Dec 02 10:25:02 2011 us=656000 key_method = 2
Fri Dec 02 10:25:02 2011 us=656000 ca_file = 'ca.crt'
Fri Dec 02 10:25:02 2011 us=656000 ca_path = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=656000 dh_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=656000 cert_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=656000 priv_key_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=656000 pkcs12_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=671000 cryptoapi_cert = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=671000 cipher_list = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=671000 tls_verify = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=671000 tls_remote = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=671000 crl_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=671000 ns_cert_type = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku = 0
Fri Dec 02 10:25:02 2011 us=671000 remote_cert_ku[i] = 0
Fri Dec 02 10:25:02 2011 us=687000 remote_cert_ku[i] = 0
Fri Dec 02 10:25:02 2011 us=687000 remote_cert_ku[i] = 0
Fri Dec 02 10:25:02 2011 us=687000 remote_cert_ku[i] = 0
Fri Dec 02 10:25:02 2011 us=687000 remote_cert_ku[i] = 0
Fri Dec 02 10:25:02 2011 us=687000 remote_cert_ku[i] = 0
Fri Dec 02 10:25:02 2011 us=687000 remote_cert_eku = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=687000 tls_timeout = 2
Fri Dec 02 10:25:02 2011 us=687000 renegotiate_bytes = 0
Fri Dec 02 10:25:02 2011 us=687000 renegotiate_packets = 0
Fri Dec 02 10:25:02 2011 us=687000 renegotiate_seconds = 0
Fri Dec 02 10:25:02 2011 us=687000 handshake_window = 60
Fri Dec 02 10:25:02 2011 us=687000 transition_window = 3600
Fri Dec 02 10:25:02 2011 us=687000 single_session = DISABLED
Fri Dec 02 10:25:02 2011 us=687000 push_peer_info = DISABLED
Fri Dec 02 10:25:02 2011 us=687000 tls_exit = DISABLED
Fri Dec 02 10:25:02 2011 us=703000 tls_auth_file = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=718000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=734000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_private_mode = 00000000
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=750000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_cert_private = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_pin_cache_period = -1
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_id = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=781000 pkcs11_id_management = DISABLED
Fri Dec 02 10:25:02 2011 us=781000 server_network = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=781000 server_netmask = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=781000 server_bridge_ip = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=781000 server_bridge_netmask = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=781000 server_bridge_pool_start = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=796000 server_bridge_pool_end = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=796000 ifconfig_pool_defined = DISABLED
Fri Dec 02 10:25:02 2011 us=796000 ifconfig_pool_start = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=796000 ifconfig_pool_end = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=796000 ifconfig_pool_netmask = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=796000 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=796000 ifconfig_pool_persist_refresh_freq = 600
Fri Dec 02 10:25:02 2011 us=796000 n_bcast_buf = 256
Fri Dec 02 10:25:02 2011 us=796000 tcp_queue_limit = 64
Fri Dec 02 10:25:02 2011 us=796000 real_hash_size = 256
Fri Dec 02 10:25:02 2011 us=796000 virtual_hash_size = 256
Fri Dec 02 10:25:02 2011 us=796000 client_connect_script = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=796000 learn_address_script = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=796000 client_disconnect_script = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=812000 client_config_dir = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=812000 ccd_exclusive = DISABLED
Fri Dec 02 10:25:02 2011 us=812000 tmp_dir = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=812000 push_ifconfig_defined = DISABLED
Fri Dec 02 10:25:02 2011 us=812000 push_ifconfig_local = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=812000 push_ifconfig_remote_netmask = 0.0.0.0
Fri Dec 02 10:25:02 2011 us=812000 enable_c2c = DISABLED
Fri Dec 02 10:25:02 2011 us=812000 duplicate_cn = DISABLED
Fri Dec 02 10:25:02 2011 us=812000 cf_max = 0
Fri Dec 02 10:25:02 2011 us=812000 cf_per = 0
Fri Dec 02 10:25:02 2011 us=812000 max_clients = 1024
Fri Dec 02 10:25:02 2011 us=812000 max_routes_per_client = 256
Fri Dec 02 10:25:02 2011 us=812000 auth_user_pass_verify_script = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=812000 auth_user_pass_verify_script_via_file = DISABLED
Fri Dec 02 10:25:02 2011 us=812000 ssl_flags = 0
Fri Dec 02 10:25:02 2011 us=843000 client = DISABLED
Fri Dec 02 10:25:02 2011 us=843000 pull = ENABLED
Fri Dec 02 10:25:02 2011 us=843000 auth_user_pass_file = 'stdin'
Fri Dec 02 10:25:02 2011 us=843000 show_net_up = DISABLED
Fri Dec 02 10:25:02 2011 us=843000 route_method = 0
Fri Dec 02 10:25:02 2011 us=843000 ip_win32_defined = DISABLED
Fri Dec 02 10:25:02 2011 us=843000 ip_win32_type = 3
Fri Dec 02 10:25:02 2011 us=843000 dhcp_masq_offset = 0
Fri Dec 02 10:25:02 2011 us=843000 dhcp_lease_time = 31536000
Fri Dec 02 10:25:02 2011 us=843000 tap_sleep = 0
Fri Dec 02 10:25:02 2011 us=843000 dhcp_options = DISABLED
Fri Dec 02 10:25:02 2011 us=843000 dhcp_renew = DISABLED
Fri Dec 02 10:25:02 2011 us=843000 dhcp_pre_release = DISABLED
Fri Dec 02 10:25:02 2011 us=843000 dhcp_release = DISABLED
Fri Dec 02 10:25:02 2011 us=843000 domain = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=843000 netbios_scope = '[UNDEF]'
Fri Dec 02 10:25:02 2011 us=859000 netbios_node_type = 0
Fri Dec 02 10:25:02 2011 us=859000 disable_nbt = DISABLED
Fri Dec 02 10:25:02 2011 us=859000 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on May 13 2011
Fri Dec 02 10:25:13 2011 us=62000 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 02 10:25:13 2011 us=62000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Dec 02 10:25:13 2011 us=328000 PRNG init md=SHA1 size=36
Fri Dec 02 10:25:13 2011 us=328000 LZO compression initialized
Fri Dec 02 10:25:13 2011 us=328000 MTU DYNAMIC mtu=0, flags=1, 0 -> 138
Fri Dec 02 10:25:13 2011 us=328000 PID packet_id_init seq_backtrack=64 time_backtrack=15
Fri Dec 02 10:25:13 2011 us=328000 PID packet_id_init seq_backtrack=64 time_backtrack=15
Fri Dec 02 10:25:13 2011 us=328000 PID packet_id_init seq_backtrack=64 time_backtrack=15
Fri Dec 02 10:25:13 2011 us=328000 PID packet_id_init seq_backtrack=64 time_backtrack=15
Fri Dec 02 10:25:13 2011 us=328000 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Dec 02 10:25:13 2011 us=328000 MTU DYNAMIC mtu=1450, flags=2, 1542 -> 1450
Fri Dec 02 10:25:13 2011 us=328000 Socket Buffers: R=[8192->8192] S=[64512->64512]
Fri Dec 02 10:25:13 2011 us=328000 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=1
Fri Dec 02 10:25:13 2011 us=328000 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Dec 02 10:25:13 2011 us=328000 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Dec 02 10:25:13 2011 us=328000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Dec 02 10:25:13 2011 us=328000 Local Options hash (VER=V4): '41690919'
Fri Dec 02 10:25:13 2011 us=328000 Expected Remote Options hash (VER=V4): '530fdded'
Fri Dec 02 10:25:13 2011 us=328000 UDPv4 link local (bound): [undef]:1194
Fri Dec 02 10:25:13 2011 us=328000 UDPv4 link remote: myopenvpn:443
Fri Dec 02 10:25:13 2011 us=328000 UDPv4 WRITE [14] to myopenvpn:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Fri Dec 02 10:25:15 2011 us=421000 UDPv4 WRITE [14] to myopenvpn:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Fri Dec 02 10:25:19 2011 us=609000 UDPv4 WRITE [14] to myopenvpn:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Fri Dec 02 10:25:27 2011 us=312000 UDPv4 WRITE [14] to myopenvpn:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Fri Dec 02 10:25:44 2011 us=140000 UDPv4 WRITE [14] to myopenvpn:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0

this is a UDP-based connection

Fri Dec 02 10:25:13 2011 us=328000 UDPv4 WRITE [14] to myopenvpn:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0

and it is rejected by the server - check the server logs.

What happens with the TCP port 80 connection ?

That you can see in my previous post: SSL rejected.
That's why I mention it has to be the certificate.
It's a reverse proxy I guess.

Fri Dec 02 09:29:56 2011 TCP connection established with 10.x.x.x:80
Fri Dec 02 09:29:58 2011 TCPv4_CLIENT link local: [undef]
Fri Dec 02 09:29:58 2011 TCPv4_CLIENT link remote: 10.x.x.x:80
Fri Dec 02 09:30:58 2011 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Dec 02 09:30:58 2011 TLS Error: TLS handshake failed

aha , your posting 'using a proxy' suggested that you have a line

http-proxy IP 80

in your config somewhere... if it's a reverse proxy then the log makes (some) sense.
and yes, for that log too, the error seems to be a rejected certificate on the server side.

I know, that's why I was looking for a way to inject the certificate in the clientconfig.
My Internet Explorer uses it, I can export it, but I don't know how to tell OpenVpn client to use it to authenticate to the proxy.

I'm not sure I fully understand: how does Internet Explorer use it? what kind of proxy is it? Is this certificate the same certificate as the one need to connect to the VPN server? how would a proxy work over a UDP connection?

Either export the certificate from the MS Certstore or use to have OpenVPN extract it directly from the CryptoStore

I appreciate your help a lot.
However, I explained most what you ask in previous posts: I'don't know for sure which proxy it is: I guess ISA or Bluecoat.
No, it is a different certificate what I already have exported and can use within Openvpn as long as I know how to address it within the config.
I don't use udp, but there is udp indeed in the logfile. I'm not sure if I should use it or not.

If I add the certificate, I get the message (also copied the cert to there were certificate for my openvpn-server is):

Fri Dec 02 14:33:59 2011 us=343000 Cannot load certificate "SUBJ:<HOEDT JAN>" from Microsoft Certificate Store: error:C5065064:microsoft cryptoapi:CertFindCertificateInStore:Cannot find object or property.
Fri Dec 02 14:33:59 2011 us=343000 Exiting

errr, your client config does not show that you're using a proxy; what happens if you uncomment the lines

#auto-proxy
#http-proxy 10.x.x.x 80

and add 'verb 7' ?

Sorry, changed configfile that much that original here is not correct.
This one is the one I'm using now:

dev tun
tls-client

cryptoapicert "SUBJ:<BAERT Steven>"

#remote openvpn 80
remote myopenvpn 8080


# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

#redirect-gateway
#auth-nocache

#auto-proxy
http-proxy 10.x.x.x 80

pull

proto tcp-client

script-security 2

ca ca.crt

comp-lzo

reneg-sec 0

auth-user-pass

verb 7

It cannot load the certificate for the proxy:


Fri Dec 02 14:39:47 2011 us=406000 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on May 13 2011
Fri Dec 02 14:39:56 2011 us=78000 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 02 14:39:56 2011 us=78000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Dec 02 14:39:56 2011 us=265000 Cannot load certificate "SUBJ:<HOEDT JAN>" from Microsoft Certificate Store: error:C5065064:microsoft cryptoapi:CertFindCertificateInStore:Cannot find object or property.
Fri Dec 02 14:39:56 2011 us=265000 Exiting
Fri Dec 02 14:39:56 2011 us=265000 Closing Win32 semaphore 'openvpn_netcmd'

is the subject name of the certificate "<HOEDT JAN>" or "HOEDT JAN" ? in case of the latter , remove the brackets.

I added with/without brackets, with/without SUBJ, no changes.
However, I have a user and a computer certstore, I guess I need to use the computer one?

Fri Dec 02 14:53:05 2011 us=765000 Cannot load certificate "HOEDT JAN" from Microsoft Certificate Store (OpenSSL)

if openvpn is running as a service it uses the computer store; if openvpn is running as a "regular" process then it uses the user store.
you can also specify the certificate using the THUMB tag:

e.g. or You can find the hex pattern by clicking on the certificate in the crypto store, select details , then click on 'thumbprint'.

Looks better now!

However, error is different now:

Fri Dec 02 15:16:49 2011 us=31000 Current Parameter Settings:
Fri Dec 02 15:16:49 2011 us=31000 config = 'openvpn.ovpn'
Fri Dec 02 15:16:49 2011 us=31000 mode = 0
Fri Dec 02 15:16:49 2011 us=31000 show_ciphers = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 show_digests = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 show_engines = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 genkey = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 key_pass_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 show_tls_ciphers = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 Connection profiles [default]:
Fri Dec 02 15:16:49 2011 us=31000 proto = tcp-client
Fri Dec 02 15:16:49 2011 us=31000 local = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 local_port = 0
Fri Dec 02 15:16:49 2011 us=31000 remote = 'myhomeip'
Fri Dec 02 15:16:49 2011 us=31000 remote_port = 1194
Fri Dec 02 15:16:49 2011 us=31000 remote_float = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 bind_defined = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 bind_local = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 connect_retry_seconds = 5
Fri Dec 02 15:16:49 2011 us=31000 connect_timeout = 10
Fri Dec 02 15:16:49 2011 us=31000 connect_retry_max = 0
Fri Dec 02 15:16:49 2011 us=31000 BEGIN http_proxy
Fri Dec 02 15:16:49 2011 us=31000 server = '10.x.x.x'
Fri Dec 02 15:16:49 2011 us=31000 port = 80
Fri Dec 02 15:16:49 2011 us=31000 auth_method_string = 'none'
Fri Dec 02 15:16:49 2011 us=31000 auth_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 retry = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 timeout = 5
Fri Dec 02 15:16:49 2011 us=31000 http_version = '1.0'
Fri Dec 02 15:16:49 2011 us=31000 user_agent = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 END http_proxy
Fri Dec 02 15:16:49 2011 us=31000 socks_proxy_server = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 socks_proxy_port = 0
Fri Dec 02 15:16:49 2011 us=31000 socks_proxy_retry = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 Connection profiles END
Fri Dec 02 15:16:49 2011 us=31000 remote_random = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 ipchange = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 dev = 'tun'
Fri Dec 02 15:16:49 2011 us=31000 dev_type = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 dev_node = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 lladdr = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 topology = 1
Fri Dec 02 15:16:49 2011 us=31000 tun_ipv6 = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 ifconfig_local = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 ifconfig_remote_netmask = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=31000 ifconfig_noexec = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 ifconfig_nowarn = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 shaper = 0
Fri Dec 02 15:16:49 2011 us=31000 tun_mtu = 1500
Fri Dec 02 15:16:49 2011 us=31000 tun_mtu_defined = ENABLED
Fri Dec 02 15:16:49 2011 us=31000 link_mtu = 1500
Fri Dec 02 15:16:49 2011 us=31000 link_mtu_defined = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 tun_mtu_extra = 0
Fri Dec 02 15:16:49 2011 us=31000 tun_mtu_extra_defined = DISABLED
Fri Dec 02 15:16:49 2011 us=31000 fragment = 0
Fri Dec 02 15:16:49 2011 us=31000 mtu_discover_type = -1
Fri Dec 02 15:16:49 2011 us=31000 mtu_test = 0
Fri Dec 02 15:16:49 2011 us=31000 mlock = DISABLED
Fri Dec 02 15:16:49 2011 us=46000 keepalive_ping = 0
Fri Dec 02 15:16:49 2011 us=46000 keepalive_timeout = 0
Fri Dec 02 15:16:49 2011 us=46000 inactivity_timeout = 0
Fri Dec 02 15:16:49 2011 us=46000 ping_send_timeout = 0
Fri Dec 02 15:16:49 2011 us=46000 ping_rec_timeout = 0
Fri Dec 02 15:16:49 2011 us=46000 ping_rec_timeout_action = 0
Fri Dec 02 15:16:49 2011 us=46000 ping_timer_remote = DISABLED
Fri Dec 02 15:16:49 2011 us=46000 remap_sigusr1 = 0
Fri Dec 02 15:16:49 2011 us=46000 explicit_exit_notification = 0
Fri Dec 02 15:16:49 2011 us=46000 persist_tun = DISABLED
Fri Dec 02 15:16:49 2011 us=46000 persist_local_ip = DISABLED
Fri Dec 02 15:16:49 2011 us=46000 persist_remote_ip = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 persist_key = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 mssfix = 1450
Fri Dec 02 15:16:49 2011 us=93000 resolve_retry_seconds = 1000000000
Fri Dec 02 15:16:49 2011 us=93000 username = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=93000 groupname = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=93000 chroot_dir = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=93000 cd_dir = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=93000 writepid = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=93000 up_script = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=93000 down_script = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=93000 down_pre = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 up_restart = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 up_delay = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 daemon = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 inetd = 0
Fri Dec 02 15:16:49 2011 us=93000 log = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 suppress_timestamps = DISABLED
Fri Dec 02 15:16:49 2011 us=93000 nice = 0
Fri Dec 02 15:16:49 2011 us=125000 verbosity = 7
Fri Dec 02 15:16:49 2011 us=125000 mute = 0
Fri Dec 02 15:16:49 2011 us=125000 gremlin = 0
Fri Dec 02 15:16:49 2011 us=125000 status_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=125000 status_file_version = 1
Fri Dec 02 15:16:49 2011 us=125000 status_file_update_freq = 60
Fri Dec 02 15:16:49 2011 us=125000 occ = ENABLED
Fri Dec 02 15:16:49 2011 us=125000 rcvbuf = 0
Fri Dec 02 15:16:49 2011 us=125000 sndbuf = 0
Fri Dec 02 15:16:49 2011 us=125000 sockflags = 0
Fri Dec 02 15:16:49 2011 us=125000 fast_io = DISABLED
Fri Dec 02 15:16:49 2011 us=125000 lzo = 7
Fri Dec 02 15:16:49 2011 us=125000 route_script = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=125000 route_default_gateway = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=125000 route_default_metric = 0
Fri Dec 02 15:16:49 2011 us=125000 route_noexec = DISABLED
Fri Dec 02 15:16:49 2011 us=125000 route_delay = 5
Fri Dec 02 15:16:49 2011 us=125000 route_delay_window = 30
Fri Dec 02 15:16:49 2011 us=140000 route_delay_defined = ENABLED
Fri Dec 02 15:16:49 2011 us=140000 route_nopull = DISABLED
Fri Dec 02 15:16:49 2011 us=140000 route_gateway_via_dhcp = DISABLED
Fri Dec 02 15:16:49 2011 us=140000 max_routes = 100
Fri Dec 02 15:16:49 2011 us=140000 allow_pull_fqdn = DISABLED
Fri Dec 02 15:16:49 2011 us=140000 management_addr = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=140000 management_port = 0
Fri Dec 02 15:16:49 2011 us=140000 management_user_pass = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=140000 management_log_history_cache = 250
Fri Dec 02 15:16:49 2011 us=140000 management_echo_buffer_size = 100
Fri Dec 02 15:16:49 2011 us=140000 management_write_peer_info_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=140000 management_client_user = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=140000 management_client_group = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=140000 management_flags = 0
Fri Dec 02 15:16:49 2011 us=171000 shared_secret_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=171000 key_direction = 0
Fri Dec 02 15:16:49 2011 us=171000 ciphername_defined = ENABLED
Fri Dec 02 15:16:49 2011 us=171000 ciphername = 'BF-CBC'
Fri Dec 02 15:16:49 2011 us=171000 authname_defined = ENABLED
Fri Dec 02 15:16:49 2011 us=171000 authname = 'SHA1'
Fri Dec 02 15:16:49 2011 us=171000 prng_hash = 'SHA1'
Fri Dec 02 15:16:49 2011 us=171000 prng_nonce_secret_len = 16
Fri Dec 02 15:16:49 2011 us=171000 keysize = 0
Fri Dec 02 15:16:49 2011 us=171000 engine = DISABLED
Fri Dec 02 15:16:49 2011 us=171000 replay = ENABLED
Fri Dec 02 15:16:49 2011 us=171000 mute_replay_warnings = DISABLED
Fri Dec 02 15:16:49 2011 us=171000 replay_window = 64
Fri Dec 02 15:16:49 2011 us=171000 replay_time = 15
Fri Dec 02 15:16:49 2011 us=171000 packet_id_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=171000 use_iv = ENABLED
Fri Dec 02 15:16:49 2011 us=171000 test_crypto = DISABLED
Fri Dec 02 15:16:49 2011 us=187000 tls_server = DISABLED
Fri Dec 02 15:16:49 2011 us=187000 tls_client = ENABLED
Fri Dec 02 15:16:49 2011 us=187000 key_method = 2
Fri Dec 02 15:16:49 2011 us=187000 ca_file = 'ca.crt'
Fri Dec 02 15:16:49 2011 us=187000 ca_path = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 dh_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 cert_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 priv_key_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 pkcs12_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 cryptoapi_cert = 'THUMB:4b 9b e4 03 5d bf 18 9a 03 fd 5c b4 67 bb 2f bb f5 3e 54 2b'
Fri Dec 02 15:16:49 2011 us=187000 cipher_list = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 tls_verify = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 tls_remote = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 crl_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=187000 ns_cert_type = 0
Fri Dec 02 15:16:49 2011 us=187000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku[i] = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku[i] = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku[i] = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku[i] = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku[i] = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_ku[i] = 0
Fri Dec 02 15:16:49 2011 us=218000 remote_cert_eku = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=234000 tls_timeout = 2
Fri Dec 02 15:16:49 2011 us=234000 renegotiate_bytes = 0
Fri Dec 02 15:16:49 2011 us=234000 renegotiate_packets = 0
Fri Dec 02 15:16:49 2011 us=234000 renegotiate_seconds = 0
Fri Dec 02 15:16:49 2011 us=234000 handshake_window = 60
Fri Dec 02 15:16:49 2011 us=234000 transition_window = 3600
Fri Dec 02 15:16:49 2011 us=234000 single_session = DISABLED
Fri Dec 02 15:16:49 2011 us=234000 push_peer_info = DISABLED
Fri Dec 02 15:16:49 2011 us=234000 tls_exit = DISABLED
Fri Dec 02 15:16:49 2011 us=234000 tls_auth_file = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=234000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=234000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=234000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=234000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=234000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_protected_authentication = DISABLED
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=265000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=281000 pkcs11_private_mode = 00000000
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=312000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=328000 pkcs11_cert_private = DISABLED
Fri Dec 02 15:16:49 2011 us=328000 pkcs11_pin_cache_period = -1
Fri Dec 02 15:16:49 2011 us=328000 pkcs11_id = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=328000 pkcs11_id_management = DISABLED
Fri Dec 02 15:16:49 2011 us=328000 server_network = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 server_netmask = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 server_bridge_ip = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 server_bridge_netmask = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 server_bridge_pool_start = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 server_bridge_pool_end = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 ifconfig_pool_defined = DISABLED
Fri Dec 02 15:16:49 2011 us=328000 ifconfig_pool_start = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 ifconfig_pool_end = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 ifconfig_pool_netmask = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=328000 ifconfig_pool_persist_filename = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=359000 ifconfig_pool_persist_refresh_freq = 600
Fri Dec 02 15:16:49 2011 us=359000 n_bcast_buf = 256
Fri Dec 02 15:16:49 2011 us=359000 tcp_queue_limit = 64
Fri Dec 02 15:16:49 2011 us=359000 real_hash_size = 256
Fri Dec 02 15:16:49 2011 us=359000 virtual_hash_size = 256
Fri Dec 02 15:16:49 2011 us=359000 client_connect_script = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=359000 learn_address_script = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=359000 client_disconnect_script = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=359000 client_config_dir = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=359000 ccd_exclusive = DISABLED
Fri Dec 02 15:16:49 2011 us=359000 tmp_dir = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=359000 push_ifconfig_defined = DISABLED
Fri Dec 02 15:16:49 2011 us=359000 push_ifconfig_local = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=359000 push_ifconfig_remote_netmask = 0.0.0.0
Fri Dec 02 15:16:49 2011 us=375000 enable_c2c = DISABLED
Fri Dec 02 15:16:49 2011 us=375000 duplicate_cn = DISABLED
Fri Dec 02 15:16:49 2011 us=375000 cf_max = 0
Fri Dec 02 15:16:49 2011 us=375000 cf_per = 0
Fri Dec 02 15:16:49 2011 us=375000 max_clients = 1024
Fri Dec 02 15:16:49 2011 us=375000 max_routes_per_client = 256
Fri Dec 02 15:16:49 2011 us=375000 auth_user_pass_verify_script = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=375000 auth_user_pass_verify_script_via_file = DISABLED
Fri Dec 02 15:16:49 2011 us=375000 ssl_flags = 0
Fri Dec 02 15:16:49 2011 us=375000 client = DISABLED
Fri Dec 02 15:16:49 2011 us=375000 pull = ENABLED
Fri Dec 02 15:16:49 2011 us=375000 auth_user_pass_file = 'stdin'
Fri Dec 02 15:16:49 2011 us=375000 show_net_up = DISABLED
Fri Dec 02 15:16:49 2011 us=375000 route_method = 0
Fri Dec 02 15:16:49 2011 us=375000 ip_win32_defined = DISABLED
Fri Dec 02 15:16:49 2011 us=375000 ip_win32_type = 3
Fri Dec 02 15:16:49 2011 us=406000 dhcp_masq_offset = 0
Fri Dec 02 15:16:49 2011 us=406000 dhcp_lease_time = 31536000
Fri Dec 02 15:16:49 2011 us=406000 tap_sleep = 0
Fri Dec 02 15:16:49 2011 us=406000 dhcp_options = DISABLED
Fri Dec 02 15:16:49 2011 us=406000 dhcp_renew = DISABLED
Fri Dec 02 15:16:49 2011 us=406000 dhcp_pre_release = DISABLED
Fri Dec 02 15:16:49 2011 us=406000 dhcp_release = DISABLED
Fri Dec 02 15:16:49 2011 us=406000 domain = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=406000 netbios_scope = '[UNDEF]'
Fri Dec 02 15:16:49 2011 us=406000 netbios_node_type = 0
Fri Dec 02 15:16:49 2011 us=406000 disable_nbt = DISABLED
Fri Dec 02 15:16:49 2011 us=406000 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on May 13 2011
Fri Dec 02 15:16:54 2011 us=484000 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 02 15:16:54 2011 us=484000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Dec 02 15:16:54 2011 us=703000 PRNG init md=SHA1 size=36
Fri Dec 02 15:16:54 2011 us=703000 LZO compression initialized
Fri Dec 02 15:16:54 2011 us=703000 MTU DYNAMIC mtu=0, flags=1, 0 -> 140
Fri Dec 02 15:16:54 2011 us=703000 PID packet_id_init seq_backtrack=0 time_backtrack=0
Fri Dec 02 15:16:54 2011 us=703000 PID packet_id_init seq_backtrack=0 time_backtrack=0
Fri Dec 02 15:16:54 2011 us=703000 PID packet_id_init seq_backtrack=0 time_backtrack=0
Fri Dec 02 15:16:54 2011 us=703000 PID packet_id_init seq_backtrack=0 time_backtrack=0
Fri Dec 02 15:16:54 2011 us=703000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Dec 02 15:16:54 2011 us=703000 MTU DYNAMIC mtu=1450, flags=2, 1544 -> 1450
Fri Dec 02 15:16:54 2011 us=703000 Socket Buffers: R=[8192->8192] S=[64512->64512]
Fri Dec 02 15:16:54 2011 us=703000 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=1
Fri Dec 02 15:16:54 2011 us=703000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Dec 02 15:16:54 2011 us=703000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Fri Dec 02 15:16:54 2011 us=703000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Fri Dec 02 15:16:54 2011 us=703000 Local Options hash (VER=V4): '69109d17'
Fri Dec 02 15:16:54 2011 us=703000 Expected Remote Options hash (VER=V4): 'c0103fa8'
Fri Dec 02 15:16:54 2011 us=703000 Attempting to establish TCP connection with 10.x.x.x:80
Fri Dec 02 15:16:54 2011 us=703000 TCP connection established with 10.x.x.x:80
Fri Dec 02 15:16:54 2011 us=703000 Send to HTTP proxy: 'CONNECT myhomeip:1194 HTTP/1.0'
Fri Dec 02 15:16:54 2011 us=890000 HTTP proxy returned: 'HTTP/1.1 501 Not Supported'
Fri Dec 02 15:16:54 2011 us=890000 HTTP proxy returned bad status
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 TCP/UDP: Closing socket
Fri Dec 02 15:16:54 2011 us=890000 PID packet_id_free
Fri Dec 02 15:16:54 2011 us=890000 SIGTERM[soft,init_instance] received, process exiting
Fri Dec 02 15:16:54 2011 us=890000 PKCS#11: Removing providers
Fri Dec 02 15:16:54 2011 us=890000 PKCS#11: Releasing sessions
Fri Dec 02 15:16:54 2011 us=890000 PKCS#11: Terminating slotevent
Fri Dec 02 15:16:54 2011 us=890000 PKCS#11: Marking as uninitialized
Fri Dec 02 15:16:54 2011 us=890000 Closing Win32 semaphore 'openvpn_netcmd'