$ sudo openvpn is-01.protonvpn.com.udp1194.ovpn
Sat Mar 11 17:46:41 2017 OpenVPN 2.4.0 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Dec 28 2016
Sat Mar 11 17:46:41 2017 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.10
Enter Auth Username: [my username]
Enter Auth Password: *************************
Sat Mar 11 17:47:04 2017 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Sat Mar 11 17:47:04 2017 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Mar 11 17:47:04 2017 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Sat Mar 11 17:47:04 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]185.159.158.100:1194
Sat Mar 11 17:47:04 2017 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sat Mar 11 17:47:04 2017 UDP link local: (not bound)
Sat Mar 11 17:47:04 2017 UDP link remote: [AF_INET]185.159.158.100:1194
Sat Mar 11 17:47:04 2017 TLS: Initial packet from [AF_INET]185.159.158.100:1194, sid=862ea671 eedeb827
Sat Mar 11 17:47:04 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Mar 11 17:47:05 2017 VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
Sat Mar 11 17:47:05 2017 VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
Sat Mar 11 17:47:05 2017 Validating certificate key usage
Sat Mar 11 17:47:05 2017 ++ Certificate has key usage  00a0, expects 00a0
Sat Mar 11 17:47:05 2017 VERIFY KU OK
Sat Mar 11 17:47:05 2017 Validating certificate extended key usage
Sat Mar 11 17:47:05 2017 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat Mar 11 17:47:05 2017 VERIFY EKU OK
Sat Mar 11 17:47:05 2017 VERIFY OK: depth=0, CN=is-01.protonvpn.com
Sat Mar 11 17:47:05 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Mar 11 17:47:05 2017 [is-01.protonvpn.com] Peer Connection Initiated with [AF_INET]185.159.158.100:1194
Sat Mar 11 17:47:06 2017 SENT CONTROL [is-01.protonvpn.com]: 'PUSH_REQUEST' (status=1)
Sat Mar 11 17:47:06 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.8.8.1,sndbuf 524288,rcvbuf 524288,explicit-exit-notify,route-gateway 10.8.8.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.8.10 255.255.255.0,peer-id 8,cipher AES-256-GCM'
Sat Mar 11 17:47:06 2017 Option 'explicit-exit-notify' in [PUSH-OPTIONS]:5 is ignored by previous <connection> blocks
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: timers and/or timeouts modified
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: explicit notify parm(s) modified
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Sat Mar 11 17:47:06 2017 Socket Buffers: R=[212992->425984] S=[212992->425984]
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: --ifconfig/up options modified
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: route options modified
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: route-related options modified
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: peer-id set
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: adjusting link_mtu to 1657
Sat Mar 11 17:47:06 2017 OPTIONS IMPORT: data channel crypto options modified
Sat Mar 11 17:47:06 2017 Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Mar 11 17:47:06 2017 Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Sat Mar 11 17:47:06 2017 ROUTE_GATEWAY 192.168.28.44/255.255.255.0 IFACE=wlp2s0 HWADDR=34:68:95:ed:c0:51
Sat Mar 11 17:47:06 2017 TUN/TAP device tun0 opened
Sat Mar 11 17:47:06 2017 TUN/TAP TX queue length set to 100
Sat Mar 11 17:47:06 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sat Mar 11 17:47:06 2017 /usr/bin/ip link set dev tun0 up mtu 1500
Sat Mar 11 17:47:06 2017 /usr/bin/ip addr add dev tun0 10.8.8.10/24 broadcast 10.8.8.255
Sat Mar 11 17:47:06 2017 /usr/bin/ip route add 185.159.158.100/32 via 192.168.28.44
Sat Mar 11 17:47:07 2017 /usr/bin/ip route add 0.0.0.0/1 via 10.8.8.1
Sat Mar 11 17:47:07 2017 /usr/bin/ip route add 128.0.0.0/1 via 10.8.8.1
Sat Mar 11 17:47:07 2017 Initialization Sequence Completed