Angepinnt How To: OpenVPN

CarlosKay · 13. September 2017, 17:27

Wenn du dann alles so wie beschrieben gemacht hast, kannst du gleich noch folgendes in deine openvpnvti.conf, unter der Zeile "auth-user-pass premiumize.login", eintragen:

Quellcode

auth-nocache
tls-version-min 1.2

Dann sollte der VPN laufen.
Dann kannst noch bei deinen Netzwerkeinstellungen als DNS 8.8.8.8 eintragen.

Darki · 13. September 2017, 20:04

Leute ich bin am verzweifeln...
Ich hab versucht mal die SoloSEv2 per WLan über Handy Hotspot aus dem Internet zu verbinden. Da sagte mir die Box ständig DNS Fehler. Benutze als DNS Adresse die MyFritz DNS.
Bei den anderen Clients funktioniert das Prima. Zu erwähnen: Ich bin Unitymedia Kunde, habe eine IPv6 und eine IPv4. Kann es damit zusammen hängen? Wenn ja, warum funktioniert die Verbindung von extern über die anderen Clients und auch meinen Laptop...

Dann hab ich die DNS gegen die IP des Servers in meinem Internen Netzwerk getauscht. Die SoloSEv2 auch wieder ans Heimnetz angeschlossen. Kommt wieder der gleiche fehler wie oben bereits.

Quellcode

Thu Jan 1 23:00:17 1970 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 23:00:17 1970 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Jan 1 23:00:17 1970 UDPv4 link local: [undef]
Thu Jan 1 23:00:17 1970 UDPv4 link remote: [AF_INET]192.168.178.100:1194
Thu Jan 1 23:00:17 1970 TLS: Initial packet from [AF_INET]192.168.178.100:1194, sid=177f3a1a f55707f2
Thu Jan 1 23:00:17 1970 VERIFY ERROR: depth=1, error=certificate is not yet valid: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=OpenVPN, name=EasyRSA, emailAddress=me@myhost.mydomain
Thu Jan 1 23:00:17 1970 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Thu Jan 1 23:00:17 1970 TLS Error: TLS object -> incoming plaintext read error
Thu Jan 1 23:00:17 1970 TLS Error: TLS handshake failed
Thu Jan 1 23:00:17 1970 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 23:00:17 1970 Restart pause, 2 second(s)
Thu Jan 1 23:00:19 1970 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 23:00:19 1970 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Jan 1 23:00:19 1970 UDPv4 link local: [undef]
Thu Jan 1 23:00:19 1970 UDPv4 link remote: [AF_INET]192.168.178.100:1194
Thu Jan 1 23:00:19 1970 TLS: Initial packet from [AF_INET]192.168.178.100:1194, sid=b633e2a6 01e14ece
Thu Jan 1 23:00:19 1970 VERIFY ERROR: depth=1, error=certificate is not yet valid: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=OpenVPN, name=EasyRSA, emailAddress=me@myhost.mydomain
Thu Jan 1 23:00:19 1970 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Thu Jan 1 23:00:19 1970 TLS Error: TLS object -> incoming plaintext read error
Thu Jan 1 23:00:19 1970 TLS Error: TLS handshake failed
Thu Jan 1 23:00:19 1970 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 23:00:19 1970 Restart pause, 2 second(s)
Thu Jan 1 23:00:21 1970 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu Jan 1 23:00:21 1970 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Jan 1 23:00:21 1970 UDPv4 link local: [undef]
Thu Jan 1 23:00:21 1970 UDPv4 link remote: [AF_INET]192.168.178.100:1194
Thu Jan 1 23:00:21 1970 TLS: Initial packet from [AF_INET]192.168.178.100:1194, sid=2633173a a371243d
Thu Jan 1 23:00:21 1970 VERIFY ERROR: depth=1, error=certificate is not yet valid: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=MyOrganizationalUnit, CN=OpenVPN, name=EasyRSA, emailAddress=me@myhost.mydomain
Thu Jan 1 23:00:21 1970 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Thu Jan 1 23:00:21 1970 TLS Error: TLS object -> incoming plaintext read error
Thu Jan 1 23:00:21 1970 TLS Error: TLS handshake failed
Thu Jan 1 23:00:21 1970 SIGUSR1[soft,tls-error] received, process restarting
Thu Jan 1 23:00:21 1970 Restart pause, 2 second(s)

Alles anzeigen

Warum ist bei dieser Zeile das rote immer anders?

Thu Jan 1 23:00:21 1970 TLS: Initial packet from [AF_INET]192.168.178.100:1194, sid=2633173a a371243d

Banana Joe · 13. September 2017, 22:06

Mach' mal Eines nach dem Anderen. Erstmal sollte DNS laufen, bevor du Probleme beim vpn suchst.

Darki · 13. September 2017, 22:15

Versteh mich nicht falsch. Aber du scheinst dir mein Anliegen nicht richtig durchgelesen zu haben...

Ich habe 3 verschiedene STBs probiert. Alle nacheinander mit der selben Config. 2 davon laufen. Die dritte nicht.
Extakt die gleiche Config und die gleichen Keys. Box 1 läuft. Aus gemacht Box 2 getestet, läuft. Auch aus gemacht, Box 3 getestet, läuft nicht...
Sehen die Configs denn für dich überhaupt richtig aus? Mein Laptop kann sich, verbunden mit dem Hotspot meines Smartphones, also von aussen, ja auch einwandfrei einwählen.
Kann so etwas möglich sein, dass mit der SoloSEv2 was nicht stimmt? Rein Hardware technisch???

Banana Joe · 14. September 2017, 01:30

Ich habe gelesen:
1) laut deinem Beitrag #844 versuchst du dich mit einer internen IP zu verbinden. Das funktioniert so nicht!
2) ebenfalls in Beitrag 844 sagst du, dass DNS nicht funktioniert. Das ist kein ovpn Problem. Kläre das erst, dann können wir hier weiter machen.

Darki · 14. September 2017, 04:54

Guck mal Bitte eine Seite zurück.
Wenn 2 Clients laufen, kann ja an der DNS nichts falsch sein.
Ich besorge mir heute noch eine andere Solo SE V2 und teste es mit der...

Banana Joe · 14. September 2017, 09:53

Ich hab's:
Bei der Solo2 ist die Zeit falsch

Trotzdem muss DNS korrekt funktionieren (mit DNS der Fritzbox hast du übrigens besagten DNS leak)

Darki · 14. September 2017, 12:49

Nicht dein Ernst. Omg und ich verbringe Stunden damit und ich hatte nur ebend das scheiß Tuner Kabel anschließen müssen XD

Was genau meinst du mit DNS Leak. Ich weiß leider nicht, was es ist. Funktionieren tut es nämlich auch so.

Franjo · 14. September 2017, 13:19

Banana Joe schrieb:

Pade schrieb:

Könnte ich denn irgendeiner Log-Datei etwas entnehmen?

Openvpn per Hand von der Konsole aus starten:

Quellcode

openvpn --config /etc/openvpn/KonfigName.conf

Abbruch mit Strg+c

Falls keine/wenig Debugausgaben kommen, in der Config hinzufügen:

Quellcode

verb 5

Da kommt bei mir folgende Ausgabe

Quellcode

root@vusolo2:/etc/openvpn# openvpn --config /etc/openvpn/CG_CH.conf
Thu Sep 14 12:54:39 2017 us=903390 Current Parameter Settings:
Thu Sep 14 12:54:39 2017 us=904188 config = '/etc/openvpn/CG_CH.conf'
Thu Sep 14 12:54:39 2017 us=904357 mode = 0
Thu Sep 14 12:54:39 2017 us=905104 persist_config = DISABLED
Thu Sep 14 12:54:39 2017 us=905276 persist_mode = 1
Thu Sep 14 12:54:39 2017 us=905380 show_ciphers = DISABLED
Thu Sep 14 12:54:39 2017 us=905476 show_digests = DISABLED
Thu Sep 14 12:54:39 2017 us=905572 show_engines = DISABLED
Thu Sep 14 12:54:39 2017 us=905719 genkey = DISABLED
Thu Sep 14 12:54:39 2017 us=905837 key_pass_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=905961 show_tls_ciphers = DISABLED
Thu Sep 14 12:54:39 2017 us=906063 Connection profiles [default]:
Thu Sep 14 12:54:39 2017 us=906162 proto = udp
Thu Sep 14 12:54:39 2017 us=906260 local = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=906357 local_port = 0
Thu Sep 14 12:54:39 2017 us=906453 remote = '1-ch.cg-dialup.net'
Thu Sep 14 12:54:39 2017 us=906551 remote_port = 443
Thu Sep 14 12:54:39 2017 us=906648 remote_float = DISABLED
Thu Sep 14 12:54:39 2017 us=906826 bind_defined = DISABLED
Thu Sep 14 12:54:39 2017 us=906936 bind_local = DISABLED
Thu Sep 14 12:54:39 2017 us=907057 connect_retry_seconds = 5
Thu Sep 14 12:54:39 2017 us=907171 connect_timeout = 10
Thu Sep 14 12:54:39 2017 us=907273 connect_retry_max = 0
Thu Sep 14 12:54:39 2017 us=907372 socks_proxy_server = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=907470 socks_proxy_port = 0
Thu Sep 14 12:54:39 2017 us=907567 socks_proxy_retry = DISABLED
Thu Sep 14 12:54:39 2017 us=907711 tun_mtu = 1500
Thu Sep 14 12:54:39 2017 us=907840 tun_mtu_defined = ENABLED
Thu Sep 14 12:54:39 2017 us=907937 link_mtu = 1500
Thu Sep 14 12:54:39 2017 us=908034 link_mtu_defined = DISABLED
Thu Sep 14 12:54:39 2017 us=908131 tun_mtu_extra = 0
Thu Sep 14 12:54:39 2017 us=908226 tun_mtu_extra_defined = DISABLED
Thu Sep 14 12:54:39 2017 us=908323 mtu_discover_type = -1
Thu Sep 14 12:54:39 2017 us=908421 fragment = 1300
Thu Sep 14 12:54:39 2017 us=908518 mssfix = 1300
Thu Sep 14 12:54:39 2017 us=908617 explicit_exit_notification = 2
Thu Sep 14 12:54:39 2017 us=908733 Connection profiles END
Thu Sep 14 12:54:39 2017 us=908817 remote_random = DISABLED
Thu Sep 14 12:54:39 2017 us=908878 ipchange = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=908937 dev = 'tun'
Thu Sep 14 12:54:39 2017 us=908997 dev_type = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=909056 dev_node = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=909112 lladdr = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=909169 topology = 1
Thu Sep 14 12:54:39 2017 us=909227 tun_ipv6 = DISABLED
Thu Sep 14 12:54:39 2017 us=909285 ifconfig_local = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=909341 ifconfig_remote_netmask = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=909397 ifconfig_noexec = DISABLED
Thu Sep 14 12:54:39 2017 us=909454 ifconfig_nowarn = DISABLED
Thu Sep 14 12:54:39 2017 us=909509 ifconfig_ipv6_local = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=909565 ifconfig_ipv6_netbits = 0
Thu Sep 14 12:54:39 2017 us=909621 ifconfig_ipv6_remote = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=909717 shaper = 0
Thu Sep 14 12:54:39 2017 us=909782 mtu_test = 0
Thu Sep 14 12:54:39 2017 us=909837 mlock = DISABLED
Thu Sep 14 12:54:39 2017 us=909894 keepalive_ping = 0
Thu Sep 14 12:54:39 2017 us=909949 keepalive_timeout = 0
Thu Sep 14 12:54:39 2017 us=910005 inactivity_timeout = 0
Thu Sep 14 12:54:39 2017 us=910060 ping_send_timeout = 5
Thu Sep 14 12:54:39 2017 us=910116 ping_rec_timeout = 60
Thu Sep 14 12:54:39 2017 us=910172 ping_rec_timeout_action = 1
Thu Sep 14 12:54:39 2017 us=910228 ping_timer_remote = ENABLED
Thu Sep 14 12:54:39 2017 us=910284 remap_sigusr1 = 0
Thu Sep 14 12:54:39 2017 us=910747 persist_tun = ENABLED
Thu Sep 14 12:54:39 2017 us=910846 persist_local_ip = DISABLED
Thu Sep 14 12:54:39 2017 us=910903 persist_remote_ip = DISABLED
Thu Sep 14 12:54:39 2017 us=910960 persist_key = ENABLED
Thu Sep 14 12:54:39 2017 us=911017 passtos = DISABLED
Thu Sep 14 12:54:39 2017 us=911073 resolve_retry_seconds = 1000000000
Thu Sep 14 12:54:39 2017 us=911130 username = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=911185 groupname = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=911242 chroot_dir = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=911297 cd_dir = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=911353 writepid = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=911408 up_script = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=911464 down_script = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=911520 down_pre = DISABLED
Thu Sep 14 12:54:39 2017 us=911575 up_restart = DISABLED
Thu Sep 14 12:54:39 2017 us=911630 up_delay = DISABLED
Thu Sep 14 12:54:39 2017 us=911719 daemon = DISABLED
Thu Sep 14 12:54:39 2017 us=911779 inetd = 0
Thu Sep 14 12:54:39 2017 us=911848 log = DISABLED
Thu Sep 14 12:54:39 2017 us=911909 suppress_timestamps = DISABLED
Thu Sep 14 12:54:39 2017 us=911967 nice = 0
Thu Sep 14 12:54:39 2017 us=912023 verbosity = 4
Thu Sep 14 12:54:39 2017 us=912079 mute = 0
Thu Sep 14 12:54:39 2017 us=912135 gremlin = 0
Thu Sep 14 12:54:39 2017 us=912191 status_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=912247 status_file_version = 1
Thu Sep 14 12:54:39 2017 us=912304 status_file_update_freq = 60
Thu Sep 14 12:54:39 2017 us=912359 occ = ENABLED
Thu Sep 14 12:54:39 2017 us=912416 rcvbuf = 65536
Thu Sep 14 12:54:39 2017 us=912472 sndbuf = 65536
Thu Sep 14 12:54:39 2017 us=912527 mark = 0
Thu Sep 14 12:54:39 2017 us=912584 sockflags = 0
Thu Sep 14 12:54:39 2017 us=912642 fast_io = DISABLED
Thu Sep 14 12:54:39 2017 us=912748 lzo = 7
Thu Sep 14 12:54:39 2017 us=912815 route_script = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=912872 route_default_gateway = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=912929 route_default_metric = 0
Thu Sep 14 12:54:39 2017 us=912988 route_noexec = DISABLED
Thu Sep 14 12:54:39 2017 us=913045 route_delay = 5
Thu Sep 14 12:54:39 2017 us=913102 route_delay_window = 30
Thu Sep 14 12:54:39 2017 us=913159 route_delay_defined = ENABLED
Thu Sep 14 12:54:39 2017 us=913217 route_nopull = DISABLED
Thu Sep 14 12:54:39 2017 us=913273 route_gateway_via_dhcp = DISABLED
Thu Sep 14 12:54:39 2017 us=913330 max_routes = 100
Thu Sep 14 12:54:39 2017 us=913386 allow_pull_fqdn = DISABLED
Thu Sep 14 12:54:39 2017 us=913454 [redirect_default_gateway local=0]
Thu Sep 14 12:54:39 2017 us=913515 management_addr = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=913572 management_port = 0
Thu Sep 14 12:54:39 2017 us=913630 management_user_pass = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=914822 management_log_history_cache = 250
Thu Sep 14 12:54:39 2017 us=914981 management_echo_buffer_size = 100
Thu Sep 14 12:54:39 2017 us=915076 management_write_peer_info_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=915185 management_client_user = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=915320 management_client_group = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=915392 management_flags = 0
Thu Sep 14 12:54:39 2017 us=915452 shared_secret_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=915511 key_direction = 0
Thu Sep 14 12:54:39 2017 us=915572 ciphername_defined = ENABLED
Thu Sep 14 12:54:39 2017 us=915631 ciphername = 'AES-256-CBC'
Thu Sep 14 12:54:39 2017 us=915732 authname_defined = ENABLED
Thu Sep 14 12:54:39 2017 us=915795 authname = 'MD5'
Thu Sep 14 12:54:39 2017 us=915854 prng_hash = 'SHA1'
Thu Sep 14 12:54:39 2017 us=915912 prng_nonce_secret_len = 16
Thu Sep 14 12:54:39 2017 us=915970 keysize = 0
Thu Sep 14 12:54:39 2017 us=916027 engine = DISABLED
Thu Sep 14 12:54:39 2017 us=916084 replay = ENABLED
Thu Sep 14 12:54:39 2017 us=916141 mute_replay_warnings = DISABLED
Thu Sep 14 12:54:39 2017 us=916269 replay_window = 64
Thu Sep 14 12:54:39 2017 us=916355 replay_time = 15
Thu Sep 14 12:54:39 2017 us=916442 packet_id_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=916565 use_iv = ENABLED
Thu Sep 14 12:54:39 2017 us=916788 test_crypto = DISABLED
Thu Sep 14 12:54:39 2017 us=916963 tls_server = DISABLED
Thu Sep 14 12:54:39 2017 us=917058 tls_client = ENABLED
Thu Sep 14 12:54:39 2017 us=917185 key_method = 2
Thu Sep 14 12:54:39 2017 us=917247 ca_file = 'ca.crt'
Thu Sep 14 12:54:39 2017 us=917306 ca_path = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917365 dh_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917424 cert_file = 'client.crt'
Thu Sep 14 12:54:39 2017 us=917482 priv_key_file = 'client.key'
Thu Sep 14 12:54:39 2017 us=917539 pkcs12_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917595 cipher_list = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917688 tls_verify = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917755 tls_export_cert = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917813 verify_x509_type = 0
Thu Sep 14 12:54:39 2017 us=917868 verify_x509_name = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917926 crl_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=917981 ns_cert_type = 0
Thu Sep 14 12:54:39 2017 us=918039 remote_cert_ku[i] = 160
Thu Sep 14 12:54:39 2017 us=918095 remote_cert_ku[i] = 136
Thu Sep 14 12:54:39 2017 us=918154 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918211 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918267 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918323 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918380 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918435 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918491 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918546 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918602 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918712 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918781 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918840 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918907 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=918967 remote_cert_ku[i] = 0
Thu Sep 14 12:54:39 2017 us=919025 remote_cert_eku = 'TLS Web Server Authentication'
Thu Sep 14 12:54:39 2017 us=919086 ssl_flags = 0
Thu Sep 14 12:54:39 2017 us=919145 tls_timeout = 2
Thu Sep 14 12:54:39 2017 us=919202 renegotiate_bytes = 0
Thu Sep 14 12:54:39 2017 us=919270 renegotiate_packets = 0
Thu Sep 14 12:54:39 2017 us=919336 renegotiate_seconds = 3600
Thu Sep 14 12:54:39 2017 us=919393 handshake_window = 60
Thu Sep 14 12:54:39 2017 us=919449 transition_window = 3600
Thu Sep 14 12:54:39 2017 us=919505 single_session = DISABLED
Thu Sep 14 12:54:39 2017 us=919561 push_peer_info = DISABLED
Thu Sep 14 12:54:39 2017 us=919616 tls_exit = DISABLED
Thu Sep 14 12:54:39 2017 us=919705 tls_auth_file = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=919842 server_network = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=919933 server_netmask = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920031 server_network_ipv6 = ::
Thu Sep 14 12:54:39 2017 us=920102 server_netbits_ipv6 = 0
Thu Sep 14 12:54:39 2017 us=920166 server_bridge_ip = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920233 server_bridge_netmask = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920296 server_bridge_pool_start = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920359 server_bridge_pool_end = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920418 ifconfig_pool_defined = DISABLED
Thu Sep 14 12:54:39 2017 us=920483 ifconfig_pool_start = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920545 ifconfig_pool_end = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920608 ifconfig_pool_netmask = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=920738 ifconfig_pool_persist_filename = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=920814 ifconfig_pool_persist_refresh_freq = 600
Thu Sep 14 12:54:39 2017 us=920882 ifconfig_ipv6_pool_defined = DISABLED
Thu Sep 14 12:54:39 2017 us=920946 ifconfig_ipv6_pool_base = ::
Thu Sep 14 12:54:39 2017 us=921007 ifconfig_ipv6_pool_netbits = 0
Thu Sep 14 12:54:39 2017 us=921067 n_bcast_buf = 256
Thu Sep 14 12:54:39 2017 us=921124 tcp_queue_limit = 64
Thu Sep 14 12:54:39 2017 us=921181 real_hash_size = 256
Thu Sep 14 12:54:39 2017 us=921237 virtual_hash_size = 256
Thu Sep 14 12:54:39 2017 us=921293 client_connect_script = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=921350 learn_address_script = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=921407 client_disconnect_script = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=921464 client_config_dir = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=921520 ccd_exclusive = DISABLED
Thu Sep 14 12:54:39 2017 us=921577 tmp_dir = '/tmp'
Thu Sep 14 12:54:39 2017 us=921638 push_ifconfig_defined = DISABLED
Thu Sep 14 12:54:39 2017 us=921737 push_ifconfig_local = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=921804 push_ifconfig_remote_netmask = 0.0.0.0
Thu Sep 14 12:54:39 2017 us=921863 push_ifconfig_ipv6_defined = DISABLED
Thu Sep 14 12:54:39 2017 us=921927 push_ifconfig_ipv6_local = ::/0
Thu Sep 14 12:54:39 2017 us=921989 push_ifconfig_ipv6_remote = ::
Thu Sep 14 12:54:39 2017 us=922047 enable_c2c = DISABLED
Thu Sep 14 12:54:39 2017 us=922106 duplicate_cn = DISABLED
Thu Sep 14 12:54:39 2017 us=922162 cf_max = 0
Thu Sep 14 12:54:39 2017 us=922220 cf_per = 0
Thu Sep 14 12:54:39 2017 us=922278 max_clients = 1024
Thu Sep 14 12:54:39 2017 us=922336 max_routes_per_client = 256
Thu Sep 14 12:54:39 2017 us=922394 auth_user_pass_verify_script = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=922452 auth_user_pass_verify_script_via_file = DISABLED
Thu Sep 14 12:54:39 2017 us=922513 port_share_host = '[UNDEF]'
Thu Sep 14 12:54:39 2017 us=922570 port_share_port = 0
Thu Sep 14 12:54:39 2017 us=922627 client = ENABLED
Thu Sep 14 12:54:39 2017 us=922843 pull = ENABLED
Thu Sep 14 12:54:39 2017 us=922919 auth_user_pass_file = '/etc/openvpn/pas.key'
Thu Sep 14 12:54:39 2017 us=922987 OpenVPN 2.3.6 mipsel-oe-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Nov 27 2016
Thu Sep 14 12:54:39 2017 us=923094 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.09
Thu Sep 14 12:54:39 2017 us=925113 WARNING: file '/etc/openvpn/pas.key' is group or others accessible
Thu Sep 14 12:54:39 2017 us=937041 WARNING: file 'client.key' is group or others accessible
Thu Sep 14 12:54:39 2017 us=939351 LZO compression initialized
Thu Sep 14 12:54:39 2017 us=939962 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Sep 14 12:54:39 2017 us=940312 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Sep 14 12:54:39 2017 us=945710 Data Channel MTU parms [ L:1558 D:1300 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Sep 14 12:54:39 2017 us=945849 Fragmentation MTU parms [ L:1558 D:1300 EF:57 EB:135 ET:1 EL:0 AF:3/1 ]
Thu Sep 14 12:54:39 2017 us=946016 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher AES-256-CBC,auth MD5,keysize 256,key-me
thod 2,tls-client'
Thu Sep 14 12:54:39 2017 us=946096 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher AES-256-CBC,auth MD5,keysize
256,key-method 2,tls-server'
Thu Sep 14 12:54:39 2017 us=946238 Local Options hash (VER=V4): '8f40a5db'
Thu Sep 14 12:54:39 2017 us=946344 Expected Remote Options hash (VER=V4): '6ce7e20d'
Thu Sep 14 12:54:39 2017 us=946804 UDPv4 link local: [undef]
Thu Sep 14 12:54:39 2017 us=946950 UDPv4 link remote: [AF_INET]185.32.222.10:443
Thu Sep 14 12:54:39 2017 us=969334 TLS: Initial packet from [AF_INET]185.32.222.10:443, sid=36abf8a5 79cf8870
Thu Sep 14 12:54:39 2017 us=969769 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Sep 14 12:54:40 2017 us=12525 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=RO, L=Bucharest, O=CyberGhost S.A., CN=CyberGhost Root CA, emailAddre
ss=info@cyberghost.ro
Thu Sep 14 12:54:40 2017 us=13101 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Thu Sep 14 12:54:40 2017 us=13233 TLS Error: TLS object -> incoming plaintext read error
Thu Sep 14 12:54:40 2017 us=13294 TLS Error: TLS handshake failed
Thu Sep 14 12:54:40 2017 us=13795 TCP/UDP: Closing socket
Thu Sep 14 12:54:40 2017 us=14009 SIGUSR1[soft,tls-error] received, process restarting
Thu Sep 14 12:54:40 2017 us=14098 Restart pause, 2 second(s)
Thu Sep 14 12:54:42 2017 us=14365 Re-using SSL/TLS context
Thu Sep 14 12:54:42 2017 us=14514 LZO compression initialized
Thu Sep 14 12:54:42 2017 us=15011 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Sep 14 12:54:42 2017 us=15352 Socket Buffers: R=[163840->131072] S=[163840->131072]
Thu Sep 14 12:54:42 2017 us=18314 Data Channel MTU parms [ L:1558 D:1300 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Sep 14 12:54:42 2017 us=18492 Fragmentation MTU parms [ L:1558 D:1300 EF:57 EB:135 ET:1 EL:0 AF:3/1 ]
Thu Sep 14 12:54:42 2017 us=18635 Local Options String: 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,cipher AES-256-CBC,auth MD5,keysize 256,key-met
hod 2,tls-client'

Alles anzeigen

CarlosKay · 14. September 2017, 15:58

Darki schrieb:

Was genau meinst du mit DNS Leak. Ich weiß leider nicht, was es ist. Funktionieren tut es nämlich auch so.

Klar. Nur ist dann der VPN überflüssig. Wenn du als DNS dein Router einträgst, dann übermittelt logischerweise dein ISP deine echte IP-Adresse

Deswegen Google oder Open DNS eintragen. Zum Beispiel: 8.8.8.8
Besser wäre natürlich der DNS deines VPN Anbieters. Allerdings brauchst du dann das update.resolv-conf Skript.

Banana Joe · 14. September 2017, 15:59

Darki schrieb:

Was genau meinst du mit DNS Leak. Ich weiß leider nicht, was es ist. Funktionieren tut es nämlich auch so.

Naja, sämtliche DNS Anfragen gehen dann weiterhin über deinen Router, der diese wiederum an deinen Provider weiterleitet. Soll heißen: am VPN vorbei.

Am Einfachsten einen externen DNS verwenden (google, opendns, uvm.)

Banana Joe · 14. September 2017, 16:05

@Franjo Das sieht nach falschem Zertifikat aus. Oder falsche CA. Versuche mal Zertifikate neu runterladen

CarlosKay · 14. September 2017, 16:34

@Banana Joe: Hab jetzt auch mal das Skript "update-systemd-resolved" versucht.

Fehlermeldung ist ziemlich ähnlich:

Quellcode

Thu Sep 14 16:29:36 2017 /etc/openvpn/update-systemd-resolved tun0 1500 1557 10.8.0.6 255.255.0.0 init
/etc/openvpn/update-systemd-resolved: line 32: syntax error: bad substitution
Thu Sep 14 16:29:36 2017 WARNING: Failed running command (--up/--down): external program exited with error status: 2
Thu Sep 14 16:29:36 2017 Exiting due to fatal error

Banana Joe · 14. September 2017, 17:03

Ah, ich hatte die Frage nach systemd übersehen.
Antwort: Nein! Alle Skripte mit *Systemd* werden nicht funktionieren.

Laut dem Logfile (wo es funktioniert hat) hatest du eh kein dns leak, weil google DNS verwendet wird.

CarlosKay · 14. September 2017, 19:57

Okay.
Und ja stimmt, ich hab die Google DNS manuell in den Netzwerkeinstellungen eingetragen.
Würde es aber eleganter finden, wenn er sich automatisch die DNS des VPNs holen würde. Keine Ahnung wo der Fehler liegt.
Hab übrigens versucht das Ganze mal unter MacOS X 10.11 (El Capitan) zu versuchen. Aber leider klappt das unter El Capitan wohl auch nicht mehr so einfach. Hab aber noch irgendwo 10.10 installiert. Vielleicht übermittelt ja Premiumize.me den DNS doch nicht ...

Darki · 14. September 2017, 21:38

Hey Leute,
ihr habt nicht ganz verstanden wofür ich das alles gemacht habe.
Eine STB steht bei meiner Mutter. Zuhause bei ihr.
Der VPN Server ist ein Raspberry Pi mit OpenVPN bei mir Zuhause.
Ich wollte, ohne irgendwelche Ports frei zu geben, aus der Ferne, also von Zuhause oder egal wo, auf diese STB von Mama zugreifen um helfen zu können, falls was nicht funktioniert.
Die Server Config hab ich auf Seite 42 gepostet. Der gesamte Traffic von ihrer STB soll weiterhin über ihren Internet Anschluss gehen. So wie ich es verstanden habe, funktioniert das jetzt auch. Gleichzeitig kann ich nicht in ihr internes Netz und umgekehrt. Hab ich das so richtig eingestellt?
Die Kommunikation auf die Teilnehmer funktioniert einwandfrei. Soweit bin ich zufrieden.

wsxws · 14. September 2017, 21:43

das ist die falsche richtung

was du eigentlich willst/brauchst ist ein vpn-server auf mutter's vu
da brauchste dann zwar ein offenes port, dafür kannst mutter dann auch bei anderen problemen helfen.

den vpn-server findeste hier: open-VPN für VU+ (mipsel und arm)

Banana Joe · 14. September 2017, 23:42

@Darki Vergiss das mit dem DNS leak, ich hab dein Problem mit dem Anderen hier verwechselt.

So wie @wsxws schreibt, wäre das Setup in deinem Fall etwas einfacher (Stichwort: von zu Hause oder egal wo).
Weil momentan müsstest du noch etwas basteln, um dich dann über extern zu deinen VPN Server hin zu dem von Mama verbinden musst. Aber möglich ist das natürlich auch.

Darki · 15. September 2017, 17:21

Hey Banana Joe,

ich habs gerade testen können. Sitze auf der Arbeit. Meine Uno4k zuhause kann ich mit Putty, FileZilla und auch auf das WebIF drauf.
Auf die Golden Media Triplex mit OpenATV, die woanders steht, kann ich auch mit Putty und FileZilla drauf. Nur das OpenWebIF geht noch nicht, sagt mir: 403.6 IP address rejected.
Wird aber nur eine Einstellung des OpenWebIF sein.

Also scheint alles so zu funktionieren, wie ich es möchte.
Das mit dem Datum war sau dämlich von mir. Ich danke euch auf jeden fall für eure hilfe.

Kann ich es hin bekommen, das nur ein einziger Client, dem sein ganzer Internet Traffic auch über den VPN geht. Alle anderen aber nicht?

Das wäre das letzte was noch fehlt. Alles weitere scheint zu laufen, wie es soll.

Grüße
David

honst · 16. September 2017, 10:55

Hallo zusammen,

ich habe ein Problem mit dem Start von OpenVPN. Teilweise funktioniert der Autostart und teilweise wieder auch nicht und ich muss OpenVPN stoppen und dann wieder auf start gehen damit er läuft.

Könnte wohl jemand sich mal die beiden Logs und meine Config ansehen um zu erkennen warum der Start mal funktioniert und mal nicht.
In die Config hatte ich mal auth-retry interact aufgenommen – brachte aber scheinbar nichts.

Danke Euch für die Hilfe.

Log mit Abbruch

Spoiler anzeigen

Log mit normalen Start

Spoiler anzeigen

Sat Sep 16 10:29:25 2017 us=999516 Current Parameter Settings:
Sat Sep 16 10:29:25 2017 us=999874 config = '/etc/openvpn/openvpnvti.conf'
Sat Sep 16 10:29:25 2017 us=999939 mode = 0
Sat Sep 16 10:29:26 2017 us=354 persist_config = DISABLED
Sat Sep 16 10:29:26 2017 us=436 persist_mode = 1
Sat Sep 16 10:29:26 2017 us=477 show_ciphers = DISABLED
Sat Sep 16 10:29:26 2017 us=518 show_digests = DISABLED
Sat Sep 16 10:29:26 2017 us=559 show_engines = DISABLED
Sat Sep 16 10:29:26 2017 us=598 genkey = DISABLED
Sat Sep 16 10:29:26 2017 us=638 key_pass_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=678 show_tls_ciphers = DISABLED
Sat Sep 16 10:29:26 2017 us=718 Connection profiles [default]:
Sat Sep 16 10:29:26 2017 us=757 proto = udp
Sat Sep 16 10:29:26 2017 us=795 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=833 local_port = 1194
Sat Sep 16 10:29:26 2017 us=871 remote = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=908 remote_port = 1194
Sat Sep 16 10:29:26 2017 us=946 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=1082 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=1132 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=1172 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=1211 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=1250 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=1287 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=1325 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=1362 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=1399 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=1436 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=1473 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=1510 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=1547 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=1584 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=1622 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=1659 fragment = 1300
Sat Sep 16 10:29:26 2017 us=1696 mssfix = 1300
Sat Sep 16 10:29:26 2017 us=1732 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=1770 Connection profiles [0]:
Sat Sep 16 10:29:26 2017 us=1807 proto = udp
Sat Sep 16 10:29:26 2017 us=1844 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=1881 local_port = 0
Sat Sep 16 10:29:26 2017 us=1919 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=1956 remote_port = 149
Sat Sep 16 10:29:26 2017 us=2026 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=2068 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=2105 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=2144 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=2181 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=2219 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=2257 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=2295 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=2333 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=2370 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=2408 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=2445 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=2482 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=2519 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=2557 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=2595 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=2632 fragment = 1300
Sat Sep 16 10:29:26 2017 us=2669 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=2706 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=2743 Connection profiles [1]:
Sat Sep 16 10:29:26 2017 us=2781 proto = udp
Sat Sep 16 10:29:26 2017 us=2820 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=2858 local_port = 0
Sat Sep 16 10:29:26 2017 us=2896 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=2934 remote_port = 1151
Sat Sep 16 10:29:26 2017 us=3024 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=3077 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=3116 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=3154 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=3191 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=3246 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=3287 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=3325 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=3362 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=3399 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=3435 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=3472 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=3510 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=3547 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=3584 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=3621 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=3658 fragment = 1300
Sat Sep 16 10:29:26 2017 us=3694 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=3731 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=3769 Connection profiles [2]:
Sat Sep 16 10:29:26 2017 us=3806 proto = udp
Sat Sep 16 10:29:26 2017 us=3844 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=3881 local_port = 0
Sat Sep 16 10:29:26 2017 us=3918 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=3955 remote_port = 1150
Sat Sep 16 10:29:26 2017 us=4115 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=4168 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=4205 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=4243 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=4281 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=4319 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=4356 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=4393 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=4431 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=4470 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=4508 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=4546 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=4584 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=4622 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=4659 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=4697 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=4734 fragment = 1300
Sat Sep 16 10:29:26 2017 us=4772 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=4809 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=4847 Connection profiles [3]:
Sat Sep 16 10:29:26 2017 us=4886 proto = udp
Sat Sep 16 10:29:26 2017 us=4924 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=4962 local_port = 0
Sat Sep 16 10:29:26 2017 us=5061 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=5102 remote_port = 1149
Sat Sep 16 10:29:26 2017 us=5139 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=5177 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=5215 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=5253 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=5291 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=5329 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=5367 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=5405 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=5442 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=5480 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=5518 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=5555 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=5592 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=5629 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=5667 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=5705 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=5741 fragment = 1300
Sat Sep 16 10:29:26 2017 us=5778 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=5814 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=5852 Connection profiles [4]:
Sat Sep 16 10:29:26 2017 us=5889 proto = udp
Sat Sep 16 10:29:26 2017 us=5927 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=5989 local_port = 0
Sat Sep 16 10:29:26 2017 us=6033 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=6072 remote_port = 1148
Sat Sep 16 10:29:26 2017 us=6109 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=6162 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=6205 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=6244 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=6283 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=6321 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=6358 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=6396 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=6434 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=6472 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=6509 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=6546 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=6584 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=6621 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=6659 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=6697 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=6734 fragment = 1300
Sat Sep 16 10:29:26 2017 us=6771 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=6810 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=6849 Connection profiles [5]:
Sat Sep 16 10:29:26 2017 us=6888 proto = udp
Sat Sep 16 10:29:26 2017 us=6926 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=6963 local_port = 0
Sat Sep 16 10:29:26 2017 us=7051 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=7093 remote_port = 148
Sat Sep 16 10:29:26 2017 us=7132 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=7170 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=7208 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=7246 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=7284 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=7321 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=7357 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=7394 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=7432 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=7469 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=7526 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=7590 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=7669 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=7759 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=7839 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=7914 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=8016 fragment = 1300
Sat Sep 16 10:29:26 2017 us=8071 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=8110 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=8148 Connection profiles [6]:
Sat Sep 16 10:29:26 2017 us=8187 proto = udp
Sat Sep 16 10:29:26 2017 us=8226 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=8265 local_port = 0
Sat Sep 16 10:29:26 2017 us=8306 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=8347 remote_port = 151
Sat Sep 16 10:29:26 2017 us=8387 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=8435 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=8498 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=8543 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=8583 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=8622 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=8660 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=8698 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=8735 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=8774 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=8812 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=8849 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=8887 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=8924 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=8963 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=9066 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=9107 fragment = 1300
Sat Sep 16 10:29:26 2017 us=9146 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=9184 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=9222 Connection profiles [7]:
Sat Sep 16 10:29:26 2017 us=9260 proto = udp
Sat Sep 16 10:29:26 2017 us=9298 local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=9357 local_port = 0
Sat Sep 16 10:29:26 2017 us=9398 remote = 'nuremberg.perfect-privacy.com'
Sat Sep 16 10:29:26 2017 us=9436 remote_port = 150
Sat Sep 16 10:29:26 2017 us=9474 remote_float = DISABLED
Sat Sep 16 10:29:26 2017 us=9511 bind_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=9548 bind_local = DISABLED
Sat Sep 16 10:29:26 2017 us=9587 connect_retry_seconds = 5
Sat Sep 16 10:29:26 2017 us=9625 connect_timeout = 10
Sat Sep 16 10:29:26 2017 us=9663 connect_retry_max = 0
Sat Sep 16 10:29:26 2017 us=9700 socks_proxy_server = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=9738 socks_proxy_port = 0
Sat Sep 16 10:29:26 2017 us=9775 socks_proxy_retry = DISABLED
Sat Sep 16 10:29:26 2017 us=9812 tun_mtu = 1500
Sat Sep 16 10:29:26 2017 us=9850 tun_mtu_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=9887 link_mtu = 1500
Sat Sep 16 10:29:26 2017 us=9924 link_mtu_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=9962 tun_mtu_extra = 0
Sat Sep 16 10:29:26 2017 us=10035 tun_mtu_extra_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=10074 mtu_discover_type = -1
Sat Sep 16 10:29:26 2017 us=10113 fragment = 1300
Sat Sep 16 10:29:26 2017 us=10151 mssfix = 1450
Sat Sep 16 10:29:26 2017 us=10189 explicit_exit_notification = 0
Sat Sep 16 10:29:26 2017 us=10227 Connection profiles END
Sat Sep 16 10:29:26 2017 us=10265 remote_random = ENABLED
Sat Sep 16 10:29:26 2017 us=10304 ipchange = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10343 dev = 'tun'
Sat Sep 16 10:29:26 2017 us=10380 dev_type = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10419 dev_node = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10457 lladdr = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10495 topology = 1
Sat Sep 16 10:29:26 2017 us=10533 tun_ipv6 = DISABLED
Sat Sep 16 10:29:26 2017 us=10571 ifconfig_local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10609 ifconfig_remote_netmask = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10647 ifconfig_noexec = DISABLED
Sat Sep 16 10:29:26 2017 us=10685 ifconfig_nowarn = DISABLED
Sat Sep 16 10:29:26 2017 us=10723 ifconfig_ipv6_local = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10761 ifconfig_ipv6_netbits = 0
Sat Sep 16 10:29:26 2017 us=10800 ifconfig_ipv6_remote = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=10838 shaper = 0
Sat Sep 16 10:29:26 2017 us=10876 mtu_test = 0
Sat Sep 16 10:29:26 2017 us=10914 mlock = DISABLED
Sat Sep 16 10:29:26 2017 us=10953 keepalive_ping = 0
Sat Sep 16 10:29:26 2017 us=11037 keepalive_timeout = 0
Sat Sep 16 10:29:26 2017 us=11083 inactivity_timeout = 604800
Sat Sep 16 10:29:26 2017 us=11123 ping_send_timeout = 5
Sat Sep 16 10:29:26 2017 us=11162 ping_rec_timeout = 120
Sat Sep 16 10:29:26 2017 us=11201 ping_rec_timeout_action = 2
Sat Sep 16 10:29:26 2017 us=11240 ping_timer_remote = DISABLED
Sat Sep 16 10:29:26 2017 us=11278 remap_sigusr1 = 0
Sat Sep 16 10:29:26 2017 us=11895 persist_tun = ENABLED
Sat Sep 16 10:29:26 2017 us=12019 persist_local_ip = DISABLED
Sat Sep 16 10:29:26 2017 us=12069 persist_remote_ip = ENABLED
Sat Sep 16 10:29:26 2017 us=12109 persist_key = ENABLED
Sat Sep 16 10:29:26 2017 us=12147 passtos = DISABLED
Sat Sep 16 10:29:26 2017 us=12185 resolve_retry_seconds = 60
Sat Sep 16 10:29:26 2017 us=12224 username = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=12261 groupname = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=12299 chroot_dir = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=12337 cd_dir = '/etc/openvpn'
Sat Sep 16 10:29:26 2017 us=12376 writepid = '/var/run/openvpn.openvpnvti.pid'
Sat Sep 16 10:29:26 2017 us=12415 up_script = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=12453 down_script = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=12490 down_pre = DISABLED
Sat Sep 16 10:29:26 2017 us=12529 up_restart = DISABLED
Sat Sep 16 10:29:26 2017 us=12570 up_delay = DISABLED
Sat Sep 16 10:29:26 2017 us=12611 daemon = ENABLED
Sat Sep 16 10:29:26 2017 us=12651 inetd = 0
Sat Sep 16 10:29:26 2017 us=12691 log = ENABLED
Sat Sep 16 10:29:26 2017 us=12731 suppress_timestamps = DISABLED
Sat Sep 16 10:29:26 2017 us=12772 nice = 0
Sat Sep 16 10:29:26 2017 us=12827 verbosity = 4
Sat Sep 16 10:29:26 2017 us=12871 mute = 0
Sat Sep 16 10:29:26 2017 us=12911 gremlin = 0
Sat Sep 16 10:29:26 2017 us=12951 status_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=13052 status_file_version = 1
Sat Sep 16 10:29:26 2017 us=13099 status_file_update_freq = 60
Sat Sep 16 10:29:26 2017 us=13140 occ = ENABLED
Sat Sep 16 10:29:26 2017 us=13181 rcvbuf = 65536
Sat Sep 16 10:29:26 2017 us=13220 sndbuf = 65536
Sat Sep 16 10:29:26 2017 us=13257 mark = 0
Sat Sep 16 10:29:26 2017 us=13296 sockflags = 0
Sat Sep 16 10:29:26 2017 us=13333 fast_io = DISABLED
Sat Sep 16 10:29:26 2017 us=13371 lzo = 7
Sat Sep 16 10:29:26 2017 us=13409 route_script = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=13448 route_default_gateway = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=13486 route_default_metric = 0
Sat Sep 16 10:29:26 2017 us=13526 route_noexec = DISABLED
Sat Sep 16 10:29:26 2017 us=13567 route_delay = 2
Sat Sep 16 10:29:26 2017 us=13608 route_delay_window = 30
Sat Sep 16 10:29:26 2017 us=13649 route_delay_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=13689 route_nopull = DISABLED
Sat Sep 16 10:29:26 2017 us=13729 route_gateway_via_dhcp = DISABLED
Sat Sep 16 10:29:26 2017 us=13768 max_routes = 100
Sat Sep 16 10:29:26 2017 us=13806 allow_pull_fqdn = DISABLED
Sat Sep 16 10:29:26 2017 us=14328 [redirect_default_gateway local=0]
Sat Sep 16 10:29:26 2017 us=14408 management_addr = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=14449 management_port = 0
Sat Sep 16 10:29:26 2017 us=14489 management_user_pass = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=14529 management_log_history_cache = 250
Sat Sep 16 10:29:26 2017 us=14567 management_echo_buffer_size = 100
Sat Sep 16 10:29:26 2017 us=14605 management_write_peer_info_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=14643 management_client_user = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=14682 management_client_group = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=14720 management_flags = 0
Sat Sep 16 10:29:26 2017 us=14758 shared_secret_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=14796 key_direction = 2
Sat Sep 16 10:29:26 2017 us=14835 ciphername_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=14873 ciphername = 'AES-256-CBC'
Sat Sep 16 10:29:26 2017 us=14911 authname_defined = ENABLED
Sat Sep 16 10:29:26 2017 us=14949 authname = 'SHA512'
Sat Sep 16 10:29:26 2017 us=15054 prng_hash = 'SHA1'
Sat Sep 16 10:29:26 2017 us=15102 prng_nonce_secret_len = 16
Sat Sep 16 10:29:26 2017 us=15141 keysize = 0
Sat Sep 16 10:29:26 2017 us=15178 engine = DISABLED
Sat Sep 16 10:29:26 2017 us=15216 replay = ENABLED
Sat Sep 16 10:29:26 2017 us=15254 mute_replay_warnings = ENABLED
Sat Sep 16 10:29:26 2017 us=15292 replay_window = 64
Sat Sep 16 10:29:26 2017 us=15330 replay_time = 15
Sat Sep 16 10:29:26 2017 us=15368 packet_id_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=15405 use_iv = ENABLED
Sat Sep 16 10:29:26 2017 us=15443 test_crypto = DISABLED
Sat Sep 16 10:29:26 2017 us=15481 tls_server = DISABLED
Sat Sep 16 10:29:26 2017 us=15519 tls_client = ENABLED
Sat Sep 16 10:29:26 2017 us=15557 key_method = 2
Sat Sep 16 10:29:26 2017 us=15594 ca_file = '[[INLINE]]'
Sat Sep 16 10:29:26 2017 us=15632 ca_path = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=15670 dh_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=15708 cert_file = '[[INLINE]]'
Sat Sep 16 10:29:26 2017 us=15747 priv_key_file = '[[INLINE]]'
Sat Sep 16 10:29:26 2017 us=15784 pkcs12_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=15824 cipher_list = 'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA'
Sat Sep 16 10:29:26 2017 us=15863 tls_verify = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=15902 tls_export_cert = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=15940 verify_x509_type = 0
Sat Sep 16 10:29:26 2017 us=16004 verify_x509_name = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=16047 crl_file = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=16102 ns_cert_type = 1
Sat Sep 16 10:29:26 2017 us=16144 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16184 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16223 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16261 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16299 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16337 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16376 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16415 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16452 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16490 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16528 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16566 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16603 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16642 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16681 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16719 remote_cert_ku[i] = 0
Sat Sep 16 10:29:26 2017 us=16759 remote_cert_eku = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=16798 ssl_flags = 0
Sat Sep 16 10:29:26 2017 us=16838 tls_timeout = 5
Sat Sep 16 10:29:26 2017 us=16879 renegotiate_bytes = 0
Sat Sep 16 10:29:26 2017 us=16919 renegotiate_packets = 0
Sat Sep 16 10:29:26 2017 us=16958 renegotiate_seconds = 3600
Sat Sep 16 10:29:26 2017 us=17053 handshake_window = 120
Sat Sep 16 10:29:26 2017 us=17097 transition_window = 3600
Sat Sep 16 10:29:26 2017 us=17137 single_session = DISABLED
Sat Sep 16 10:29:26 2017 us=17175 push_peer_info = DISABLED
Sat Sep 16 10:29:26 2017 us=17213 tls_exit = DISABLED
Sat Sep 16 10:29:26 2017 us=17253 tls_auth_file = '[[INLINE]]'
Sat Sep 16 10:29:26 2017 us=17847 server_network = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=17933 server_netmask = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18058 server_network_ipv6 = ::
Sat Sep 16 10:29:26 2017 us=18118 server_netbits_ipv6 = 0
Sat Sep 16 10:29:26 2017 us=18165 server_bridge_ip = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18211 server_bridge_netmask = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18254 server_bridge_pool_start = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18297 server_bridge_pool_end = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18338 ifconfig_pool_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=18382 ifconfig_pool_start = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18424 ifconfig_pool_end = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18468 ifconfig_pool_netmask = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=18508 ifconfig_pool_persist_filename = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=18559 ifconfig_pool_persist_refresh_freq = 600
Sat Sep 16 10:29:26 2017 us=18626 ifconfig_ipv6_pool_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=18680 ifconfig_ipv6_pool_base = ::
Sat Sep 16 10:29:26 2017 us=18720 ifconfig_ipv6_pool_netbits = 0
Sat Sep 16 10:29:26 2017 us=18758 n_bcast_buf = 256
Sat Sep 16 10:29:26 2017 us=18797 tcp_queue_limit = 64
Sat Sep 16 10:29:26 2017 us=18836 real_hash_size = 256
Sat Sep 16 10:29:26 2017 us=18874 virtual_hash_size = 256
Sat Sep 16 10:29:26 2017 us=18912 client_connect_script = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=18950 learn_address_script = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=19075 client_disconnect_script = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=19149 client_config_dir = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=19198 ccd_exclusive = DISABLED
Sat Sep 16 10:29:26 2017 us=19238 tmp_dir = '/tmp'
Sat Sep 16 10:29:26 2017 us=19277 push_ifconfig_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=19325 push_ifconfig_local = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=19370 push_ifconfig_remote_netmask = 0.0.0.0
Sat Sep 16 10:29:26 2017 us=19409 push_ifconfig_ipv6_defined = DISABLED
Sat Sep 16 10:29:26 2017 us=19454 push_ifconfig_ipv6_local = ::/0
Sat Sep 16 10:29:26 2017 us=19497 push_ifconfig_ipv6_remote = ::
Sat Sep 16 10:29:26 2017 us=19537 enable_c2c = DISABLED
Sat Sep 16 10:29:26 2017 us=19576 duplicate_cn = DISABLED
Sat Sep 16 10:29:26 2017 us=19613 cf_max = 0
Sat Sep 16 10:29:26 2017 us=19652 cf_per = 0
Sat Sep 16 10:29:26 2017 us=19707 max_clients = 1024
Sat Sep 16 10:29:26 2017 us=19748 max_routes_per_client = 256
Sat Sep 16 10:29:26 2017 us=19787 auth_user_pass_verify_script = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=19825 auth_user_pass_verify_script_via_file = DISABLED
Sat Sep 16 10:29:26 2017 us=19863 port_share_host = '[UNDEF]'
Sat Sep 16 10:29:26 2017 us=19901 port_share_port = 0
Sat Sep 16 10:29:26 2017 us=19939 client = ENABLED
Sat Sep 16 10:29:26 2017 us=20012 pull = ENABLED
Sat Sep 16 10:29:26 2017 us=20059 auth_user_pass_file = '/etc/openvpn/password.txt'
Sat Sep 16 10:29:26 2017 us=20106 OpenVPN 2.3.6 mipsel-oe-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jan 19 2016
Sat Sep 16 10:29:26 2017 us=20667 library versions: OpenSSL 1.0.2a 19 Mar 2015, LZO 2.09
Sat Sep 16 10:29:26 2017 us=27696 WARNING: file '/etc/openvpn/password.txt' is group or others accessible
Sat Sep 16 10:29:26 2017 us=64414 Control Channel Authentication: tls-auth using INLINE static key file
Sat Sep 16 10:29:26 2017 us=67956 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Sep 16 10:29:26 2017 us=68212 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Sep 16 10:29:26 2017 us=69290 LZO compression initialized
Sat Sep 16 10:29:26 2017 us=74380 Control Channel MTU parms [ L:1606 D:210 EF:110 EB:0 ET:0 EL:0 ]
Sat Sep 16 10:29:26 2017 us=74787 Socket Buffers: R=[163840->131072] S=[163840->131072]
Sat Sep 16 10:29:26 2017 us=115557 Data Channel MTU parms [ L:1606 D:1450 EF:106 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Sep 16 10:29:26 2017 us=115655 Fragmentation MTU parms [ L:1606 D:1300 EF:105 EB:135 ET:1 EL:0 AF:3/1 ]
Sat Sep 16 10:29:26 2017 us=116433 Local Options String: 'V4,dev-type tun,link-mtu 1606,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Sat Sep 16 10:29:26 2017 us=116516 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1606,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Sat Sep 16 10:29:26 2017 us=116635 Local Options hash (VER=V4): '73c06b87'
Sat Sep 16 10:29:26 2017 us=116719 Expected Remote Options hash (VER=V4): 'ad1c1209'
Sat Sep 16 10:29:26 2017 us=118877 UDPv4 link local: [undef]
Sat Sep 16 10:29:26 2017 us=119785 UDPv4 link remote: [AF_INET]80.255.10.194:151
Sat Sep 16 10:29:26 2017 us=146696 TLS: Initial packet from [AF_INET]80.255.10.194:151, sid=7444780b 8f7bce2a
Sat Sep 16 10:29:26 2017 us=147364 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Sep 16 10:29:26 2017 us=261138 VERIFY OK: depth=1, C=CH, ST=Zug, L=Zug, O=Perfect Privacy, CN=Perfect Privacy, emailAddress=admin@perfect-privacy.com
Sat Sep 16 10:29:26 2017 us=277471 VERIFY OK: nsCertType=SERVER
Sat Sep 16 10:29:26 2017 us=277583 VERIFY OK: depth=0, C=CH, ST=Zug, O=Perfect Privacy, CN=Server_nuremberg.perfect-privacy.com, emailAddress=admin@perfect-privacy.com
Sat Sep 16 10:29:32 2017 us=895173 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Sep 16 10:29:32 2017 us=895348 Data Channel Encrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Sep 16 10:29:32 2017 us=895498 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sat Sep 16 10:29:32 2017 us=895650 Data Channel Decrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Sep 16 10:29:32 2017 us=896115 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-CAMELLIA256-SHA, 4096 bit RSA
Sat Sep 16 10:29:32 2017 us=896312 [Server_nuremberg.perfect-privacy.com] Peer Connection Initiated with [AF_INET]80.255.10.194:151
Sat Sep 16 10:29:35 2017 us=70198 SENT CONTROL [Server_nuremberg.perfect-privacy.com]: 'PUSH_REQUEST' (status=1)
Sat Sep 16 10:29:35 2017 us=94339 PUSH: Received control message: 'PUSH_REPLY,topology subnet,redirect-gateway def1,sndbuf 131072,rcvbuf 131072,comp-lzo adaptive,route-gateway 10.3.229.1,redirect-gateway ipv6,route-ipv6 2000::/3,ping 10,ping-restart 60,dhcp-option DNS 80.255.10.206,dhcp-option DNS 31.204.153.87,ifconfig-ipv6 fdbf:1d37:bbe0:0:62:5:0:1240/112 fdbf:1d37:bbe0:0:62:5:0:1,ifconfig 10.3.229.240 255.255.255.0,peer-id 0'
Sat Sep 16 10:29:35 2017 us=94831 Options error: unknown --redirect-gateway flag: ipv6
Sat Sep 16 10:29:35 2017 us=95401 OPTIONS IMPORT: timers and/or timeouts modified
Sat Sep 16 10:29:35 2017 us=95508 OPTIONS IMPORT: LZO parms modified
Sat Sep 16 10:29:35 2017 us=95562 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sat Sep 16 10:29:35 2017 us=95648 Socket Buffers: R=[131072->262144] S=[131072->262144]
Sat Sep 16 10:29:35 2017 us=95710 OPTIONS IMPORT: --ifconfig/up options modified
Sat Sep 16 10:29:35 2017 us=95768 OPTIONS IMPORT: route options modified
Sat Sep 16 10:29:35 2017 us=95821 OPTIONS IMPORT: route-related options modified
Sat Sep 16 10:29:35 2017 us=95872 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Sep 16 10:29:35 2017 us=95925 OPTIONS IMPORT: peer-id set
Sat Sep 16 10:29:35 2017 us=97484 ROUTE_GATEWAY 192.168.111.100/255.255.255.0 IFACE=eth0 HWADDR=00:1d:ec:05:b3:8b
Sat Sep 16 10:29:35 2017 us=97673 ROUTE6: default_gateway=UNDEF
Sat Sep 16 10:29:35 2017 us=99074 TUN/TAP device tun0 opened
Sat Sep 16 10:29:35 2017 us=99233 TUN/TAP TX queue length set to 100
Sat Sep 16 10:29:35 2017 us=99368 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=1
Sat Sep 16 10:29:35 2017 us=99576 /sbin/ip link set dev tun0 up mtu 1500
Sat Sep 16 10:29:35 2017 us=104156 /sbin/ip addr add dev tun0 10.3.229.240/24 broadcast 10.3.229.255
Sat Sep 16 10:29:37 2017 us=200181 /sbin/ip route add 80.255.10.194/32 via 192.168.111.100
Sat Sep 16 10:29:37 2017 us=204105 /sbin/ip route add 0.0.0.0/1 via 10.3.229.1
Sat Sep 16 10:29:37 2017 us=208330 /sbin/ip route add 128.0.0.0/1 via 10.3.229.1
Sat Sep 16 10:29:37 2017 us=212886 add_route_ipv6(): not adding 2000::/3, no IPv6 on if tun0
Sat Sep 16 10:29:37 2017 us=213161 Initialization Sequence Completed

Config

Spoiler anzeigen

log /tmp/openvpn.log

auth-retry interact
proto udp
tun-mtu 1500
fragment 1300
mssfix
cipher AES-256-CBC

remote nuremberg.perfect-privacy.com 149
remote nuremberg.perfect-privacy.com 1151
remote nuremberg.perfect-privacy.com 1150
remote nuremberg.perfect-privacy.com 1149
remote nuremberg.perfect-privacy.com 1148
remote nuremberg.perfect-privacy.com 148
remote nuremberg.perfect-privacy.com 151
remote nuremberg.perfect-privacy.com 150

auth SHA512
auth-user-pass /etc/openvpn/password.txt
client
comp-lzo
dev tun
hand-window 120
inactive 604800
mute-replay-warnings
nobind
ns-cert-type server
persist-key
persist-remote-ip
persist-tun
ping 5
ping-restart 120
redirect-gateway def1
remote-random
reneg-sec 3600
resolv-retry 60
route-delay 2
route-method exe
script-security 2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA
tls-timeout 5
verb 4