I got OpenVPN working quite smoothly following this debian wiki. I did all the steps, from the raw testing connection, the static key, and finally the certificates option with which I'm quite happy. My server and clients are linux machines, all using Debian 12 - bookworm. Following the above mentioned wiki link I created certificates and configuration files for both server and clients. It works pretty well every time I execute an openvpn instance from command line, like this:
I can access remotely the server from the clients, and then I can shh from either server or client.
But I cannot make it start as a service. So when I reboot my server I have to run openvpn manually from the command line. If I try to restart the openvpn service the tunnel doesn't come up. I'm trying to collect all information possible to find out why. I have read many related topics and guides, but still no luck. I've been a linux users for some years but I'm quite new to openvpn.
I hope someone here could point at where I could start looking for logs to find the cause of the problem.
This is the server configuration file, located at /etc/openvpn/server.conf:[1] Note: I intentionally commented those two lines because I was having some errors regarding them, and anyway I was not interested in forwarding client traffic through the server (and I'm not sure if 192.168.0.0 is a valid general address or I should use my real gateway instead, which by the way it is not 192.168.0.1 or ...1.1.) .
The /var/log/openvpn/openvpn-status.log is quite 'empty':Here is the output when I run openVPN from the command line with --verbose 6. I don't see any error.
sudo openvpn --config /etc/openvpn/server.conf --verb 6
What I don't undestand is why the openvpn service doesn't load when running systemctl restart or at the boot and it doesn't yield any error outputs. Please, where could I start looking for issues?
Code:
sudo openvpn --config /etc/openvpn/server.conf --verb 6But I cannot make it start as a service. So when I reboot my server I have to run openvpn manually from the command line. If I try to restart the openvpn service the tunnel doesn't come up. I'm trying to collect all information possible to find out why. I have read many related topics and guides, but still no luck. I've been a linux users for some years but I'm quite new to openvpn.
I hope someone here could point at where I could start looking for logs to find the cause of the problem.
This is the server configuration file, located at /etc/openvpn/server.conf:
Code:
port 1194proto udpdev tunca /etc/openvpn/easy-rsa/pki/ca.crtcert /etc/openvpn/easy-rsa/pki/issued/server.crtkey /etc/openvpn/easy-rsa/pki/private/server.key dh /etc/openvpn/easy-rsa/pki/dh.pemtopology subnetserver 10.*.*.0 255.255.255.0 ifconfig-pool-persist ipp.txt#push "route 192.168.0.0 255.255.255.0" # [1]#push "redirect-gateway def1 bypass-dhcp" # [1]keepalive 10 120tls-auth /etc/openvpn/server/ta.key 0auth-nocachecipher AES-256-CBCdata-ciphers AES-256-CBCpersist-keypersist-tunstatus /var/log/openvpn/openvpn-status.logverb 3client-to-clientexplicit-exit-notify 1The /var/log/openvpn/openvpn-status.log is quite 'empty':
Code:
OpenVPN CLIENT LISTUpdated,2025-02-08 11:58:59Common Name,Real Address,Bytes Received,Bytes Sent,Connected SinceROUTING TABLEVirtual Address,Common Name,Real Address,Last RefGLOBAL STATSMax bcast/mcast queue length,0ENDsudo openvpn --config /etc/openvpn/server.conf --verb 6
Code:
2025-02-08 13:34:13 us=523668 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.2025-02-08 13:34:13 us=523851 Current Parameter Settings:2025-02-08 13:34:13 us=523880 config = '/etc/openvpn/server.conf'2025-02-08 13:34:13 us=523904 mode = 12025-02-08 13:34:13 us=523928 persist_config = DISABLED2025-02-08 13:34:13 us=523950 persist_mode = 12025-02-08 13:34:13 us=523973 show_ciphers = DISABLED2025-02-08 13:34:13 us=523995 show_digests = DISABLED2025-02-08 13:34:13 us=524017 show_engines = DISABLED2025-02-08 13:34:13 us=524039 genkey = DISABLED2025-02-08 13:34:13 us=524062 genkey_filename = '[UNDEF]'2025-02-08 13:34:13 us=524084 key_pass_file = '[UNDEF]'2025-02-08 13:34:13 us=524106 show_tls_ciphers = DISABLED2025-02-08 13:34:13 us=524128 connect_retry_max = 02025-02-08 13:34:13 us=524151 Connection profiles [0]:2025-02-08 13:34:13 us=524173 proto = udp2025-02-08 13:34:13 us=524196 local = '[UNDEF]'2025-02-08 13:34:13 us=524218 local_port = '1194'2025-02-08 13:34:13 us=524240 remote = '[UNDEF]'2025-02-08 13:34:13 us=524263 remote_port = '1194'2025-02-08 13:34:13 us=524285 remote_float = DISABLED2025-02-08 13:34:13 us=524307 bind_defined = DISABLED2025-02-08 13:34:13 us=524329 bind_local = ENABLED2025-02-08 13:34:13 us=524351 bind_ipv6_only = DISABLED2025-02-08 13:34:13 us=524373 connect_retry_seconds = 12025-02-08 13:34:13 us=524395 connect_timeout = 1202025-02-08 13:34:13 us=524418 socks_proxy_server = '[UNDEF]'2025-02-08 13:34:13 us=524440 socks_proxy_port = '[UNDEF]'2025-02-08 13:34:13 us=524462 tun_mtu = 15002025-02-08 13:34:13 us=524484 tun_mtu_defined = ENABLED2025-02-08 13:34:13 us=524506 link_mtu = 15002025-02-08 13:34:13 us=524528 link_mtu_defined = DISABLED2025-02-08 13:34:13 us=524550 tun_mtu_extra = 02025-02-08 13:34:13 us=524572 tun_mtu_extra_defined = DISABLED2025-02-08 13:34:13 us=524594 tls_mtu = 12502025-02-08 13:34:13 us=524616 mtu_discover_type = -12025-02-08 13:34:13 us=524638 fragment = 02025-02-08 13:34:13 us=524660 mssfix = 14922025-02-08 13:34:13 us=524683 mssfix_encap = ENABLED2025-02-08 13:34:13 us=524705 mssfix_fixed = DISABLED2025-02-08 13:34:13 us=524727 explicit_exit_notification = 12025-02-08 13:34:13 us=524749 tls_auth_file = '[INLINE]'2025-02-08 13:34:13 us=524771 key_direction = 02025-02-08 13:34:13 us=524793 tls_crypt_file = '[UNDEF]'2025-02-08 13:34:13 us=524815 tls_crypt_v2_file = '[UNDEF]'2025-02-08 13:34:13 us=524837 Connection profiles END2025-02-08 13:34:13 us=524859 remote_random = DISABLED2025-02-08 13:34:13 us=524881 ipchange = '[UNDEF]'2025-02-08 13:34:13 us=524903 dev = 'tun'2025-02-08 13:34:13 us=524925 dev_type = '[UNDEF]'2025-02-08 13:34:13 us=524947 dev_node = '[UNDEF]'2025-02-08 13:34:13 us=524969 tuntap_options.disable_dco = ENABLED2025-02-08 13:34:13 us=524992 lladdr = '[UNDEF]'2025-02-08 13:34:13 us=525014 topology = 32025-02-08 13:34:13 us=525036 ifconfig_local = '10.*.*.1'2025-02-08 13:34:13 us=525058 ifconfig_remote_netmask = '255.255.255.0'2025-02-08 13:34:13 us=525080 ifconfig_noexec = DISABLED2025-02-08 13:34:13 us=525102 ifconfig_nowarn = DISABLED2025-02-08 13:34:13 us=525124 ifconfig_ipv6_local = '[UNDEF]'2025-02-08 13:34:13 us=525146 ifconfig_ipv6_netbits = 02025-02-08 13:34:13 us=525168 ifconfig_ipv6_remote = '[UNDEF]'2025-02-08 13:34:13 us=525190 shaper = 02025-02-08 13:34:13 us=525212 mtu_test = 02025-02-08 13:34:13 us=525234 mlock = DISABLED2025-02-08 13:34:13 us=525256 keepalive_ping = 102025-02-08 13:34:13 us=525278 keepalive_timeout = 1202025-02-08 13:34:13 us=525300 inactivity_timeout = 02025-02-08 13:34:13 us=525322 session_timeout = 02025-02-08 13:34:13 us=525344 inactivity_minimum_bytes = 02025-02-08 13:34:13 us=525366 ping_send_timeout = 102025-02-08 13:34:13 us=525389 ping_rec_timeout = 2402025-02-08 13:34:13 us=525411 ping_rec_timeout_action = 22025-02-08 13:34:13 us=525433 ping_timer_remote = DISABLED2025-02-08 13:34:13 us=525475 remap_sigusr1 = 02025-02-08 13:34:13 us=525498 persist_tun = ENABLED2025-02-08 13:34:13 us=525521 persist_local_ip = DISABLED2025-02-08 13:34:13 us=525543 persist_remote_ip = DISABLED2025-02-08 13:34:13 us=525565 persist_key = ENABLED2025-02-08 13:34:13 us=525587 passtos = DISABLED2025-02-08 13:34:13 us=525610 resolve_retry_seconds = 10000000002025-02-08 13:34:13 us=525632 resolve_in_advance = DISABLED2025-02-08 13:34:13 us=525654 username = '[UNDEF]'2025-02-08 13:34:13 us=525676 groupname = '[UNDEF]'2025-02-08 13:34:13 us=525698 chroot_dir = '[UNDEF]'2025-02-08 13:34:13 us=525720 cd_dir = '[UNDEF]'2025-02-08 13:34:13 us=525742 writepid = '[UNDEF]'2025-02-08 13:34:13 us=525764 up_script = '[UNDEF]'2025-02-08 13:34:13 us=525786 down_script = '[UNDEF]'2025-02-08 13:34:13 us=525808 down_pre = DISABLED2025-02-08 13:34:13 us=525830 up_restart = DISABLED2025-02-08 13:34:13 us=525852 up_delay = DISABLED2025-02-08 13:34:13 us=525874 daemon = DISABLED2025-02-08 13:34:13 us=525897 log = DISABLED2025-02-08 13:34:13 us=525919 suppress_timestamps = DISABLED2025-02-08 13:34:13 us=525942 machine_readable_output = DISABLED2025-02-08 13:34:13 us=525964 nice = 02025-02-08 13:34:13 us=525986 verbosity = 62025-02-08 13:34:13 us=526009 mute = 02025-02-08 13:34:13 us=526031 gremlin = 02025-02-08 13:34:13 us=526053 status_file = '/var/log/openvpn/openvpn-status.log'2025-02-08 13:34:13 us=526076 status_file_version = 12025-02-08 13:34:13 us=526098 status_file_update_freq = 602025-02-08 13:34:13 us=526120 occ = ENABLED2025-02-08 13:34:13 us=526142 rcvbuf = 02025-02-08 13:34:13 us=526164 sndbuf = 02025-02-08 13:34:13 us=526186 mark = 02025-02-08 13:34:13 us=526208 sockflags = 02025-02-08 13:34:13 us=526230 fast_io = DISABLED2025-02-08 13:34:13 us=526253 comp.alg = 02025-02-08 13:34:13 us=526275 comp.flags = 242025-02-08 13:34:13 us=526297 route_script = '[UNDEF]'2025-02-08 13:34:13 us=526320 route_default_gateway = '10.*.*.2'2025-02-08 13:34:13 us=526342 route_default_metric = 02025-02-08 13:34:13 us=526364 route_noexec = DISABLED2025-02-08 13:34:13 us=526386 route_delay = 02025-02-08 13:34:13 us=526409 route_delay_window = 302025-02-08 13:34:13 us=526431 route_delay_defined = DISABLED2025-02-08 13:34:13 us=526454 route_nopull = DISABLED2025-02-08 13:34:13 us=526476 route_gateway_via_dhcp = DISABLED2025-02-08 13:34:13 us=526498 allow_pull_fqdn = DISABLED2025-02-08 13:34:13 us=526526 management_addr = '[UNDEF]'2025-02-08 13:34:13 us=526549 management_port = '[UNDEF]'2025-02-08 13:34:13 us=526571 management_user_pass = '[UNDEF]'2025-02-08 13:34:13 us=526594 management_log_history_cache = 2502025-02-08 13:34:13 us=526616 management_echo_buffer_size = 1002025-02-08 13:34:13 us=526639 management_client_user = '[UNDEF]'2025-02-08 13:34:13 us=526661 management_client_group = '[UNDEF]'2025-02-08 13:34:13 us=526683 management_flags = 02025-02-08 13:34:13 us=526706 shared_secret_file = '[UNDEF]'2025-02-08 13:34:13 us=526728 key_direction = 02025-02-08 13:34:13 us=526751 ciphername = 'AES-256-CBC'2025-02-08 13:34:13 us=526773 ncp_ciphers = 'AES-256-CBC'2025-02-08 13:34:13 us=526796 authname = 'SHA1'2025-02-08 13:34:13 us=526818 engine = DISABLED2025-02-08 13:34:13 us=526840 replay = ENABLED2025-02-08 13:34:13 us=526863 mute_replay_warnings = DISABLED2025-02-08 13:34:13 us=526885 replay_window = 642025-02-08 13:34:13 us=526908 replay_time = 152025-02-08 13:34:13 us=526930 packet_id_file = '[UNDEF]'2025-02-08 13:34:13 us=526952 test_crypto = DISABLED2025-02-08 13:34:13 us=526974 tls_server = ENABLED2025-02-08 13:34:13 us=526997 tls_client = DISABLED2025-02-08 13:34:13 us=527019 ca_file = '/etc/openvpn/easy-rsa/pki/ca.crt'2025-02-08 13:34:13 us=527041 ca_path = '[UNDEF]'2025-02-08 13:34:13 us=527064 dh_file = '/etc/openvpn/easy-rsa/pki/dh.pem'2025-02-08 13:34:13 us=527086 cert_file = '/etc/openvpn/easy-rsa/pki/issued/server.crt'2025-02-08 13:34:13 us=527121 extra_certs_file = '[UNDEF]'2025-02-08 13:34:13 us=527144 priv_key_file = '/etc/openvpn/easy-rsa/pki/private/server.key'2025-02-08 13:34:13 us=527167 pkcs12_file = '[UNDEF]'2025-02-08 13:34:13 us=527189 cipher_list = '[UNDEF]'2025-02-08 13:34:13 us=527211 cipher_list_tls13 = '[UNDEF]'2025-02-08 13:34:13 us=527233 tls_cert_profile = '[UNDEF]'2025-02-08 13:34:13 us=527256 tls_verify = '[UNDEF]'2025-02-08 13:34:13 us=527278 tls_export_cert = '[UNDEF]'2025-02-08 13:34:13 us=527300 verify_x509_type = 02025-02-08 13:34:13 us=527324 verify_x509_name = '[UNDEF]'2025-02-08 13:34:13 us=527347 crl_file = '[UNDEF]'2025-02-08 13:34:13 us=527370 ns_cert_type = 02025-02-08 13:34:13 us=527393 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527416 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527439 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527461 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527484 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527507 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527530 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527553 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527576 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527598 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527621 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527664 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527687 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527710 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527732 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527755 remote_cert_ku[i] = 02025-02-08 13:34:13 us=527778 remote_cert_eku = '[UNDEF]'2025-02-08 13:34:13 us=527801 ssl_flags = 1922025-02-08 13:34:13 us=527824 tls_timeout = 22025-02-08 13:34:13 us=527847 renegotiate_bytes = -12025-02-08 13:34:13 us=527870 renegotiate_packets = 02025-02-08 13:34:13 us=527893 renegotiate_seconds = 36002025-02-08 13:34:13 us=527916 handshake_window = 602025-02-08 13:34:13 us=527939 transition_window = 36002025-02-08 13:34:13 us=527962 single_session = DISABLED2025-02-08 13:34:13 us=527984 push_peer_info = DISABLED2025-02-08 13:34:13 us=528007 tls_exit = DISABLED2025-02-08 13:34:13 us=528030 tls_crypt_v2_metadata = '[UNDEF]'2025-02-08 13:34:13 us=528053 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528075 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528099 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528121 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528144 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528167 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528190 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528213 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528236 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528259 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528281 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528304 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528327 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528350 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528372 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528395 pkcs11_protected_authentication = DISABLED2025-02-08 13:34:13 us=528419 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528442 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528465 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528488 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528511 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528534 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528557 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528580 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528603 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528625 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528660 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528683 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528705 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528728 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528750 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528772 pkcs11_private_mode = 000000002025-02-08 13:34:13 us=528794 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528817 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528839 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528861 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528883 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528906 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528928 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528950 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528972 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=528995 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=529017 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=529039 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=529061 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=529083 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=529106 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=529128 pkcs11_cert_private = DISABLED2025-02-08 13:34:13 us=529151 pkcs11_pin_cache_period = -12025-02-08 13:34:13 us=529173 pkcs11_id = '[UNDEF]'2025-02-08 13:34:13 us=529196 pkcs11_id_management = DISABLED2025-02-08 13:34:13 us=529220 server_network = 10.*.*.02025-02-08 13:34:13 us=529244 server_netmask = 255.255.255.02025-02-08 13:34:13 us=529268 server_network_ipv6 = ::2025-02-08 13:34:13 us=529291 server_netbits_ipv6 = 02025-02-08 13:34:13 us=529314 server_bridge_ip = 0.0.0.02025-02-08 13:34:13 us=529338 server_bridge_netmask = 0.0.0.02025-02-08 13:34:13 us=529361 server_bridge_pool_start = 0.0.0.02025-02-08 13:34:13 us=529384 server_bridge_pool_end = 0.0.0.02025-02-08 13:34:13 us=529407 push_entry = 'route-gateway 10.*.*.1'2025-02-08 13:34:13 us=529429 push_entry = 'topology subnet'2025-02-08 13:34:13 us=529452 push_entry = 'ping 10'2025-02-08 13:34:13 us=529474 push_entry = 'ping-restart 120'2025-02-08 13:34:13 us=529496 ifconfig_pool_defined = ENABLED2025-02-08 13:34:13 us=529520 ifconfig_pool_start = 10.*.*.22025-02-08 13:34:13 us=529543 ifconfig_pool_end = 10.*.*.2542025-02-08 13:34:13 us=529566 ifconfig_pool_netmask = 255.255.255.02025-02-08 13:34:13 us=529589 ifconfig_pool_persist_filename = 'ipp.txt'2025-02-08 13:34:13 us=529611 ifconfig_pool_persist_refresh_freq = 6002025-02-08 13:34:13 us=529633 ifconfig_ipv6_pool_defined = DISABLED2025-02-08 13:34:13 us=529656 ifconfig_ipv6_pool_base = ::2025-02-08 13:34:13 us=529679 ifconfig_ipv6_pool_netbits = 02025-02-08 13:34:13 us=529701 n_bcast_buf = 2562025-02-08 13:34:13 us=529724 tcp_queue_limit = 642025-02-08 13:34:13 us=529746 real_hash_size = 2562025-02-08 13:34:13 us=529769 virtual_hash_size = 2562025-02-08 13:34:13 us=529791 client_connect_script = '[UNDEF]'2025-02-08 13:34:13 us=529813 learn_address_script = '[UNDEF]'2025-02-08 13:34:13 us=529846 client_disconnect_script = '[UNDEF]'2025-02-08 13:34:13 us=529869 client_crresponse_script = '[UNDEF]'2025-02-08 13:34:13 us=529891 client_config_dir = '[UNDEF]'2025-02-08 13:34:13 us=529913 ccd_exclusive = DISABLED2025-02-08 13:34:13 us=529936 tmp_dir = '/tmp'2025-02-08 13:34:13 us=529958 push_ifconfig_defined = DISABLED2025-02-08 13:34:13 us=529981 push_ifconfig_local = 0.0.0.02025-02-08 13:34:13 us=530004 push_ifconfig_remote_netmask = 0.0.0.02025-02-08 13:34:13 us=530027 push_ifconfig_ipv6_defined = DISABLED2025-02-08 13:34:13 us=530050 push_ifconfig_ipv6_local = ::/02025-02-08 13:34:13 us=530073 push_ifconfig_ipv6_remote = ::2025-02-08 13:34:13 us=530095 enable_c2c = ENABLED2025-02-08 13:34:13 us=530118 duplicate_cn = DISABLED2025-02-08 13:34:13 us=530141 cf_max = 02025-02-08 13:34:13 us=530174 cf_per = 02025-02-08 13:34:13 us=530197 cf_initial_max = 1002025-02-08 13:34:13 us=530220 cf_initial_per = 102025-02-08 13:34:13 us=530242 max_clients = 10242025-02-08 13:34:13 us=530265 max_routes_per_client = 2562025-02-08 13:34:13 us=530287 auth_user_pass_verify_script = '[UNDEF]'2025-02-08 13:34:13 us=530310 auth_user_pass_verify_script_via_file = DISABLED2025-02-08 13:34:13 us=530332 auth_token_generate = DISABLED2025-02-08 13:34:13 us=530354 auth_token_lifetime = 02025-02-08 13:34:13 us=530377 auth_token_secret_file = '[UNDEF]'2025-02-08 13:34:13 us=530399 port_share_host = '[UNDEF]'2025-02-08 13:34:13 us=530421 port_share_port = '[UNDEF]'2025-02-08 13:34:13 us=530444 vlan_tagging = DISABLED2025-02-08 13:34:13 us=530466 vlan_accept = all2025-02-08 13:34:13 us=530488 vlan_pvid = 12025-02-08 13:34:13 us=530511 client = DISABLED2025-02-08 13:34:13 us=530533 pull = DISABLED2025-02-08 13:34:13 us=530556 auth_user_pass_file = '[UNDEF]'2025-02-08 13:34:13 us=530580 OpenVPN 2.6.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]2025-02-08 13:34:13 us=530617 library versions: OpenSSL 3.0.15 3 Sep 2024, LZO 2.102025-02-08 13:34:13 us=530659 DCO version: N/A2025-02-08 13:34:13 us=530848 net_route_v4_best_gw query: dst 0.0.0.02025-02-08 13:34:13 us=530952 sitnl_send: checking for received messages2025-02-08 13:34:13 us=530991 sitnl_send: rtnl: received 496 bytes2025-02-08 13:34:13 us=531053 net_route_v4_best_gw result: via 192.168.*.1 dev enp4s02025-02-08 13:34:13 us=533785 Diffie-Hellman initialized with 2048 bit keyEnter Private Key Password: *********** 2025-02-08 13:34:17 us=761878 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication2025-02-08 13:34:17 us=762008 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication2025-02-08 13:34:17 us=762129 TLS-Auth MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]2025-02-08 13:34:17 us=762987 TUN/TAP device tun0 opened2025-02-08 13:34:17 us=763045 do_ifconfig, ipv4=1, ipv6=02025-02-08 13:34:17 us=763101 net_iface_mtu_set: mtu 1500 for tun02025-02-08 13:34:17 us=763173 sitnl_send: checking for received messages2025-02-08 13:34:17 us=763204 sitnl_send: rtnl: received 36 bytes2025-02-08 13:34:17 us=763254 net_iface_up: set tun0 up2025-02-08 13:34:17 us=763595 sitnl_send: checking for received messages2025-02-08 13:34:17 us=763663 sitnl_send: rtnl: received 36 bytes2025-02-08 13:34:17 us=763715 net_addr_v4_add: 10.*.*.1/24 dev tun02025-02-08 13:34:17 us=763960 sitnl_send: checking for received messages2025-02-08 13:34:17 us=764011 sitnl_send: rtnl: received 36 bytes2025-02-08 13:34:17 us=764081 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]2025-02-08 13:34:17 us=764117 Could not determine IPv4/IPv6 protocol. Using AF_INET2025-02-08 13:34:17 us=764177 Socket Buffers: R=[212992->212992] S=[212992->212992]2025-02-08 13:34:17 us=764227 UDPv4 link local (bound): [AF_INET][undef]:11942025-02-08 13:34:17 us=764263 UDPv4 link remote: [AF_UNSPEC]2025-02-08 13:34:17 us=764350 MULTI: multi_init called, r=256 v=2562025-02-08 13:34:17 us=764459 IFCONFIG POOL IPv4: base=10.*.*.2 size=2532025-02-08 13:34:17 us=764539 ifconfig_pool_read(), in='client_andalus,10.*.*.2,'2025-02-08 13:34:17 us=764584 succeeded -> ifconfig_pool_set(hand=0)2025-02-08 13:34:17 us=764618 ifconfig_pool_read(), in='clientname,10.*.*.3,'2025-02-08 13:34:17 us=764654 succeeded -> ifconfig_pool_set(hand=1)2025-02-08 13:34:17 us=764691 IFCONFIG POOL LIST2025-02-08 13:34:17 us=764726 client_1,10.*.*.1,2025-02-08 13:34:17 us=764760 client_2,10.*.*.1,2025-02-08 13:34:17 us=764848 Initialization Sequence CompletedStatistics: Posted by anndreih — 2025-02-08 12:46 — Replies 2 — Views 86