Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Mon Jan 30 20:12:55 2017 us=738033 Current Parameter Settings:
- Mon Jan 30 20:12:55 2017 us=738105 config = 'server.conf'
- Mon Jan 30 20:12:55 2017 us=738117 mode = 1
- Mon Jan 30 20:12:55 2017 us=738123 persist_config = DISABLED
- Mon Jan 30 20:12:55 2017 us=738129 persist_mode = 1
- Mon Jan 30 20:12:55 2017 us=738135 show_ciphers = DISABLED
- Mon Jan 30 20:12:55 2017 us=738140 show_digests = DISABLED
- Mon Jan 30 20:12:55 2017 us=738146 show_engines = DISABLED
- Mon Jan 30 20:12:55 2017 us=738152 genkey = DISABLED
- Mon Jan 30 20:12:55 2017 us=738157 key_pass_file = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738163 show_tls_ciphers = DISABLED
- Mon Jan 30 20:12:55 2017 us=738170 Connection profiles [default]:
- Mon Jan 30 20:12:55 2017 us=738177 proto = udp
- Mon Jan 30 20:12:55 2017 us=738183 local = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738188 local_port = 1194
- Mon Jan 30 20:12:55 2017 us=738194 remote = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738199 remote_port = 1194
- Mon Jan 30 20:12:55 2017 us=738205 remote_float = DISABLED
- Mon Jan 30 20:12:55 2017 us=738210 bind_defined = DISABLED
- Mon Jan 30 20:12:55 2017 us=738216 bind_local = ENABLED
- Mon Jan 30 20:12:55 2017 us=738222 connect_retry_seconds = 5
- Mon Jan 30 20:12:55 2017 us=738228 connect_timeout = 10
- Mon Jan 30 20:12:55 2017 us=738233 connect_retry_max = 0
- Mon Jan 30 20:12:55 2017 us=738239 socks_proxy_server = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738262 socks_proxy_port = 0
- Mon Jan 30 20:12:55 2017 us=738271 socks_proxy_retry = DISABLED
- Mon Jan 30 20:12:55 2017 us=738277 tun_mtu = 1500
- Mon Jan 30 20:12:55 2017 us=738283 tun_mtu_defined = ENABLED
- Mon Jan 30 20:12:55 2017 us=738288 link_mtu = 1500
- Mon Jan 30 20:12:55 2017 us=738294 link_mtu_defined = DISABLED
- Mon Jan 30 20:12:55 2017 us=738300 tun_mtu_extra = 0
- Mon Jan 30 20:12:55 2017 us=738305 tun_mtu_extra_defined = DISABLED
- Mon Jan 30 20:12:55 2017 us=738311 mtu_discover_type = -1
- Mon Jan 30 20:12:55 2017 us=738317 fragment = 0
- Mon Jan 30 20:12:55 2017 us=738322 mssfix = 1450
- Mon Jan 30 20:12:55 2017 us=738328 explicit_exit_notification = 0
- Mon Jan 30 20:12:55 2017 us=738334 Connection profiles END
- Mon Jan 30 20:12:55 2017 us=738340 remote_random = DISABLED
- Mon Jan 30 20:12:55 2017 us=738345 ipchange = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738351 dev = 'tun'
- Mon Jan 30 20:12:55 2017 us=738357 dev_type = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738362 dev_node = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738368 lladdr = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738374 topology = 3
- Mon Jan 30 20:12:55 2017 us=738381 tun_ipv6 = DISABLED
- Mon Jan 30 20:12:55 2017 us=738387 ifconfig_local = '10.11.0.1'
- Mon Jan 30 20:12:55 2017 us=738393 ifconfig_remote_netmask = '255.255.255.0'
- Mon Jan 30 20:12:55 2017 us=738399 ifconfig_noexec = DISABLED
- Mon Jan 30 20:12:55 2017 us=738404 ifconfig_nowarn = DISABLED
- Mon Jan 30 20:12:55 2017 us=738410 ifconfig_ipv6_local = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738416 ifconfig_ipv6_netbits = 0
- Mon Jan 30 20:12:55 2017 us=738421 ifconfig_ipv6_remote = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738427 shaper = 0
- Mon Jan 30 20:12:55 2017 us=738433 mtu_test = 0
- Mon Jan 30 20:12:55 2017 us=738438 mlock = DISABLED
- Mon Jan 30 20:12:55 2017 us=738444 keepalive_ping = 0
- Mon Jan 30 20:12:55 2017 us=738449 keepalive_timeout = 0
- Mon Jan 30 20:12:55 2017 us=738455 inactivity_timeout = 0
- Mon Jan 30 20:12:55 2017 us=738461 ping_send_timeout = 10
- Mon Jan 30 20:12:55 2017 us=738466 ping_rec_timeout = 0
- Mon Jan 30 20:12:55 2017 us=738472 ping_rec_timeout_action = 1
- Mon Jan 30 20:12:55 2017 us=738478 ping_timer_remote = DISABLED
- Mon Jan 30 20:12:55 2017 us=738483 remap_sigusr1 = 0
- Mon Jan 30 20:12:55 2017 us=738489 persist_tun = ENABLED
- Mon Jan 30 20:12:55 2017 us=738495 persist_local_ip = DISABLED
- Mon Jan 30 20:12:55 2017 us=738500 persist_remote_ip = DISABLED
- Mon Jan 30 20:12:55 2017 us=738506 persist_key = ENABLED
- Mon Jan 30 20:12:55 2017 us=738511 passtos = DISABLED
- Mon Jan 30 20:12:55 2017 us=738517 resolve_retry_seconds = 1000000000
- Mon Jan 30 20:12:55 2017 us=738531 username = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738537 groupname = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738543 chroot_dir = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738548 cd_dir = '/etc/openvpn/'
- Mon Jan 30 20:12:55 2017 us=738554 writepid = '/var/run/openvpn/server.pid'
- Mon Jan 30 20:12:55 2017 us=738560 up_script = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738566 down_script = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738572 down_pre = DISABLED
- Mon Jan 30 20:12:55 2017 us=738581 up_restart = DISABLED
- Mon Jan 30 20:12:55 2017 us=738591 up_delay = DISABLED
- Mon Jan 30 20:12:55 2017 us=738601 daemon = ENABLED
- Mon Jan 30 20:12:55 2017 us=738611 inetd = 0
- Mon Jan 30 20:12:55 2017 us=738621 log = ENABLED
- Mon Jan 30 20:12:55 2017 us=738630 suppress_timestamps = DISABLED
- Mon Jan 30 20:12:55 2017 us=738636 nice = 0
- Mon Jan 30 20:12:55 2017 us=738642 verbosity = 4
- Mon Jan 30 20:12:55 2017 us=738647 mute = 0
- Mon Jan 30 20:12:55 2017 us=738653 gremlin = 0
- Mon Jan 30 20:12:55 2017 us=738659 status_file = '/var/log/openvpn/openvpn-status.log'
- Mon Jan 30 20:12:55 2017 us=738664 status_file_version = 3
- Mon Jan 30 20:12:55 2017 us=738670 status_file_update_freq = 1
- Mon Jan 30 20:12:55 2017 us=738676 occ = ENABLED
- Mon Jan 30 20:12:55 2017 us=738681 rcvbuf = 0
- Mon Jan 30 20:12:55 2017 us=738687 sndbuf = 0
- Mon Jan 30 20:12:55 2017 us=738692 mark = 0
- Mon Jan 30 20:12:55 2017 us=738698 sockflags = 0
- Mon Jan 30 20:12:55 2017 us=738703 fast_io = DISABLED
- Mon Jan 30 20:12:55 2017 us=738709 lzo = 0
- Mon Jan 30 20:12:55 2017 us=738714 route_script = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738720 route_default_gateway = '10.11.0.2'
- Mon Jan 30 20:12:55 2017 us=738726 route_default_metric = 0
- Mon Jan 30 20:12:55 2017 us=738732 route_noexec = DISABLED
- Mon Jan 30 20:12:55 2017 us=738737 route_delay = 0
- Mon Jan 30 20:12:55 2017 us=738743 route_delay_window = 30
- Mon Jan 30 20:12:55 2017 us=738749 route_delay_defined = DISABLED
- Mon Jan 30 20:12:55 2017 us=738755 route_nopull = DISABLED
- Mon Jan 30 20:12:55 2017 us=738761 route_gateway_via_dhcp = DISABLED
- Mon Jan 30 20:12:55 2017 us=738766 max_routes = 100
- Mon Jan 30 20:12:55 2017 us=738772 allow_pull_fqdn = DISABLED
- Mon Jan 30 20:12:55 2017 us=738778 management_addr = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738784 management_port = 0
- Mon Jan 30 20:12:55 2017 us=738789 management_user_pass = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738795 management_log_history_cache = 250
- Mon Jan 30 20:12:55 2017 us=738801 management_echo_buffer_size = 100
- Mon Jan 30 20:12:55 2017 us=738807 management_write_peer_info_file = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738813 management_client_user = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738819 management_client_group = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738824 management_flags = 0
- Mon Jan 30 20:12:55 2017 us=738836 plugin[0] /etc/openvpn/radius/radiusplugin.so '[/etc/openvpn/radius/radiusplugin.so] [/etc/openvpn/radius/radius.cnf]'
- Mon Jan 30 20:12:55 2017 us=738843 shared_secret_file = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738849 key_direction = 1
- Mon Jan 30 20:12:55 2017 us=738855 ciphername_defined = ENABLED
- Mon Jan 30 20:12:55 2017 us=738861 ciphername = 'BF-CBC'
- Mon Jan 30 20:12:55 2017 us=738867 authname_defined = ENABLED
- Mon Jan 30 20:12:55 2017 us=738873 authname = 'SHA1'
- Mon Jan 30 20:12:55 2017 us=738878 prng_hash = 'SHA1'
- Mon Jan 30 20:12:55 2017 us=738884 prng_nonce_secret_len = 16
- Mon Jan 30 20:12:55 2017 us=738890 keysize = 0
- Mon Jan 30 20:12:55 2017 us=738896 engine = DISABLED
- Mon Jan 30 20:12:55 2017 us=738902 replay = ENABLED
- Mon Jan 30 20:12:55 2017 us=738907 mute_replay_warnings = DISABLED
- Mon Jan 30 20:12:55 2017 us=738913 replay_window = 64
- Mon Jan 30 20:12:55 2017 us=738919 replay_time = 15
- Mon Jan 30 20:12:55 2017 us=738924 packet_id_file = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738930 use_iv = ENABLED
- Mon Jan 30 20:12:55 2017 us=738935 test_crypto = DISABLED
- Mon Jan 30 20:12:55 2017 us=738941 tls_server = ENABLED
- Mon Jan 30 20:12:55 2017 us=738951 tls_client = DISABLED
- Mon Jan 30 20:12:55 2017 us=738957 key_method = 2
- Mon Jan 30 20:12:55 2017 us=738963 ca_file = '/etc/openvpn/keys/ca.crt'
- Mon Jan 30 20:12:55 2017 us=738969 ca_path = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738975 dh_file = '/etc/openvpn/keys/dh.pem'
- Mon Jan 30 20:12:55 2017 us=738981 cert_file = '/etc/openvpn/keys/vpn01.crt'
- Mon Jan 30 20:12:55 2017 us=738987 extra_certs_file = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=738993 priv_key_file = '/etc/openvpn/keys/server.key'
- Mon Jan 30 20:12:55 2017 us=738999 pkcs12_file = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739005 cipher_list = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739011 tls_verify = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739017 tls_export_cert = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739023 verify_x509_type = 0
- Mon Jan 30 20:12:55 2017 us=739028 verify_x509_name = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739034 crl_file = '/etc/openvpn/keys/crl.pem'
- Mon Jan 30 20:12:55 2017 us=739040 ns_cert_type = 0
- Mon Jan 30 20:12:55 2017 us=739046 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739051 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739057 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739062 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739067 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739073 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739078 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739084 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739089 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739095 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739100 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739105 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739111 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739116 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739122 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739127 remote_cert_ku[i] = 0
- Mon Jan 30 20:12:55 2017 us=739133 remote_cert_eku = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739138 ssl_flags = 0
- Mon Jan 30 20:12:55 2017 us=739144 tls_timeout = 0
- Mon Jan 30 20:12:55 2017 us=739150 renegotiate_bytes = -1
- Mon Jan 30 20:12:55 2017 us=739155 renegotiate_packets = 0
- Mon Jan 30 20:12:55 2017 us=739161 renegotiate_seconds = 0
- Mon Jan 30 20:12:55 2017 us=739166 handshake_window = 60
- Mon Jan 30 20:12:55 2017 us=739172 transition_window = 3600
- Mon Jan 30 20:12:55 2017 us=739178 single_session = DISABLED
- Mon Jan 30 20:12:55 2017 us=739184 push_peer_info = DISABLED
- Mon Jan 30 20:12:55 2017 us=739190 tls_exit = DISABLED
- Mon Jan 30 20:12:55 2017 us=739195 tls_auth_file = '/etc/openvpn/keys/ta.key'
- Mon Jan 30 20:12:55 2017 us=739201 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739207 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739213 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739219 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739224 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739230 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739236 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739241 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739319 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739329 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739334 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739340 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739346 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739351 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739357 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739362 pkcs11_protected_authentication = DISABLED
- Mon Jan 30 20:12:55 2017 us=739368 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739380 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739386 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739391 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739397 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739402 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739408 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739413 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739419 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739424 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739429 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739435 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739440 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739446 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739451 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739457 pkcs11_private_mode = 00000000
- Mon Jan 30 20:12:55 2017 us=739462 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739468 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739474 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739479 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739484 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739490 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739496 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739501 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739507 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739513 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739518 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739524 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739529 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739535 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739540 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739549 pkcs11_cert_private = DISABLED
- Mon Jan 30 20:12:55 2017 us=739555 pkcs11_pin_cache_period = -1
- Mon Jan 30 20:12:55 2017 us=739561 pkcs11_id = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739567 pkcs11_id_management = DISABLED
- Mon Jan 30 20:12:55 2017 us=739575 server_network = 10.11.0.0
- Mon Jan 30 20:12:55 2017 us=739581 server_netmask = 255.255.255.0
- Mon Jan 30 20:12:55 2017 us=739593 server_network_ipv6 = ::
- Mon Jan 30 20:12:55 2017 us=739601 server_netbits_ipv6 = 0
- Mon Jan 30 20:12:55 2017 us=739613 server_bridge_ip = 0.0.0.0
- Mon Jan 30 20:12:55 2017 us=739624 server_bridge_netmask = 0.0.0.0
- Mon Jan 30 20:12:55 2017 us=739636 server_bridge_pool_start = 0.0.0.0
- Mon Jan 30 20:12:55 2017 us=739647 server_bridge_pool_end = 0.0.0.0
- Mon Jan 30 20:12:55 2017 us=739654 push_entry = 'persist-key'
- Mon Jan 30 20:12:55 2017 us=739660 push_entry = 'ping 10'
- Mon Jan 30 20:12:55 2017 us=739666 push_entry = 'ping-restart 0'
- Mon Jan 30 20:12:55 2017 us=739672 push_entry = 'persist-tun'
- Mon Jan 30 20:12:55 2017 us=739678 push_entry = 'redirect-gateway def1'
- Mon Jan 30 20:12:55 2017 us=739684 push_entry = 'dhcp-option DNS 8.8.8.8'
- Mon Jan 30 20:12:55 2017 us=739690 push_entry = 'dhcp-option DNS 8.8.4.4'
- Mon Jan 30 20:12:55 2017 us=739696 push_entry = 'route-gateway 10.11.0.1'
- Mon Jan 30 20:12:55 2017 us=739701 push_entry = 'topology subnet'
- Mon Jan 30 20:12:55 2017 us=739707 ifconfig_pool_defined = ENABLED
- Mon Jan 30 20:12:55 2017 us=739714 ifconfig_pool_start = 10.11.0.2
- Mon Jan 30 20:12:55 2017 us=739720 ifconfig_pool_end = 10.11.0.253
- Mon Jan 30 20:12:55 2017 us=739727 ifconfig_pool_netmask = 255.255.255.0
- Mon Jan 30 20:12:55 2017 us=739733 ifconfig_pool_persist_filename = 'ipp.txt'
- Mon Jan 30 20:12:55 2017 us=739739 ifconfig_pool_persist_refresh_freq = 600
- Mon Jan 30 20:12:55 2017 us=739744 ifconfig_ipv6_pool_defined = DISABLED
- Mon Jan 30 20:12:55 2017 us=739751 ifconfig_ipv6_pool_base = ::
- Mon Jan 30 20:12:55 2017 us=739757 ifconfig_ipv6_pool_netbits = 0
- Mon Jan 30 20:12:55 2017 us=739767 n_bcast_buf = 256
- Mon Jan 30 20:12:55 2017 us=739773 tcp_queue_limit = 64
- Mon Jan 30 20:12:55 2017 us=739779 real_hash_size = 256
- Mon Jan 30 20:12:55 2017 us=739785 virtual_hash_size = 256
- Mon Jan 30 20:12:55 2017 us=739790 client_connect_script = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739796 learn_address_script = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739802 client_disconnect_script = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739808 client_config_dir = '/etc/openvpn/ccd'
- Mon Jan 30 20:12:55 2017 us=739814 ccd_exclusive = DISABLED
- Mon Jan 30 20:12:55 2017 us=739819 tmp_dir = '/tmp'
- Mon Jan 30 20:12:55 2017 us=739825 push_ifconfig_defined = DISABLED
- Mon Jan 30 20:12:55 2017 us=739832 push_ifconfig_local = 0.0.0.0
- Mon Jan 30 20:12:55 2017 us=739838 push_ifconfig_remote_netmask = 0.0.0.0
- Mon Jan 30 20:12:55 2017 us=739844 push_ifconfig_ipv6_defined = DISABLED
- Mon Jan 30 20:12:55 2017 us=739851 push_ifconfig_ipv6_local = ::/0
- Mon Jan 30 20:12:55 2017 us=739857 push_ifconfig_ipv6_remote = ::
- Mon Jan 30 20:12:55 2017 us=739863 enable_c2c = DISABLED
- Mon Jan 30 20:12:55 2017 us=739868 duplicate_cn = DISABLED
- Mon Jan 30 20:12:55 2017 us=739874 cf_max = 0
- Mon Jan 30 20:12:55 2017 us=739880 cf_per = 0
- Mon Jan 30 20:12:55 2017 us=739885 max_clients = 100
- Mon Jan 30 20:12:55 2017 us=739891 max_routes_per_client = 256
- Mon Jan 30 20:12:55 2017 us=739897 auth_user_pass_verify_script = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739903 auth_user_pass_verify_script_via_file = DISABLED
- Mon Jan 30 20:12:55 2017 us=739908 port_share_host = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739914 port_share_port = 0
- Mon Jan 30 20:12:55 2017 us=739920 client = DISABLED
- Mon Jan 30 20:12:55 2017 us=739926 pull = DISABLED
- Mon Jan 30 20:12:55 2017 us=739931 auth_user_pass_file = '[UNDEF]'
- Mon Jan 30 20:12:55 2017 us=739939 OpenVPN 2.3.14 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec 7 2016
- Mon Jan 30 20:12:55 2017 us=739951 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
- Mon Jan 30 20:12:55 2017 us=741704 WARNING: --ping should normally be used with --ping-restart or --ping-exit
- Mon Jan 30 20:12:55 2017 us=741748 WARNING: --keepalive option is missing from server config
- Mon Jan 30 20:12:55 2017 RADIUS-PLUGIN: Configfile name: /etc/openvpn/radius/radius.cnf.
- Mon Jan 30 20:12:55 2017 us=746322 PLUGIN_INIT: POST /etc/openvpn/radius/radiusplugin.so '[/etc/openvpn/radius/radiusplugin.so] [/etc/openvpn/radius/radius.cnf]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY|PLUGIN_CLIENT_CONNECT|PLUGIN_CLIENT_DISCONNECT
- Mon Jan 30 20:12:55 2017 us=754792 Diffie-Hellman initialized with 2048 bit key
- Mon Jan 30 20:12:55 2017 us=755351 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
- Mon Jan 30 20:12:55 2017 us=755375 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
- Mon Jan 30 20:12:55 2017 us=755385 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
- Mon Jan 30 20:12:55 2017 us=755401 TLS-Auth MTU parms [ L:1541 D:1184 EF:66 EB:0 ET:0 EL:3 ]
- Mon Jan 30 20:12:55 2017 us=755416 Socket Buffers: R=[212992->212992] S=[212992->212992]
- Mon Jan 30 20:12:55 2017 us=755619 TUN/TAP device tun0 opened
- Mon Jan 30 20:12:55 2017 us=755637 TUN/TAP TX queue length set to 100
- Mon Jan 30 20:12:55 2017 us=755651 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
- Mon Jan 30 20:12:55 2017 us=755672 /usr/sbin/ip link set dev tun0 up mtu 1500
- Mon Jan 30 20:12:55 2017 us=756957 /usr/sbin/ip addr add dev tun0 10.11.0.1/24 broadcast 10.11.0.255
- Mon Jan 30 20:12:55 2017 us=758375 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:12 ET:0 EL:3 ]
- Mon Jan 30 20:12:55 2017 us=758410 UDPv4 link local (bound): [undef]
- Mon Jan 30 20:12:55 2017 us=758419 UDPv4 link remote: [undef]
- Mon Jan 30 20:12:55 2017 us=758433 MULTI: multi_init called, r=256 v=256
- Mon Jan 30 20:12:55 2017 us=758457 IFCONFIG POOL: base=10.11.0.2 size=252, ipv6=0
- Mon Jan 30 20:12:55 2017 us=758480 IFCONFIG POOL LIST
- Mon Jan 30 20:12:55 2017 us=758509 Initialization Sequence Completed
- Mon Jan 30 20:19:34 2017 us=44553 MULTI: multi_create_instance called
- Mon Jan 30 20:19:34 2017 us=44617 44.33.22.11:51965 Re-using SSL/TLS context
- Mon Jan 30 20:19:34 2017 us=44782 44.33.22.11:51965 Control Channel MTU parms [ L:1541 D:1184 EF:66 EB:0 ET:0 EL:3 ]
- Mon Jan 30 20:19:34 2017 us=44796 44.33.22.11:51965 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:12 ET:0 EL:3 ]
- Mon Jan 30 20:19:34 2017 us=44826 44.33.22.11:51965 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
- Mon Jan 30 20:19:34 2017 us=44833 44.33.22.11:51965 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
- Mon Jan 30 20:19:34 2017 us=44864 44.33.22.11:51965 Local Options hash (VER=V4): 'a2e2498c'
- Mon Jan 30 20:19:34 2017 us=44878 44.33.22.11:51965 Expected Remote Options hash (VER=V4): '70f5b3af'
- Mon Jan 30 20:19:34 2017 us=44914 44.33.22.11:51965 TLS: Initial packet from [AF_INET]44.33.22.11:51965, sid=47b9a04c fb8e52bf
- Mon Jan 30 20:19:34 2017 us=220510 44.33.22.11:51965 CRL CHECK OK: CN=Easy-RSA CA
- Mon Jan 30 20:19:34 2017 us=220589 44.33.22.11:51965 VERIFY OK: depth=1, CN=Easy-RSA CA
- Mon Jan 30 20:19:34 2017 us=220868 44.33.22.11:51965 CRL CHECK OK: CN=client
- Mon Jan 30 20:19:34 2017 us=220905 44.33.22.11:51965 VERIFY OK: depth=0, CN=client
- Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: FOREGROUND THREAD: Auth_user_pass_verify thread started.
- Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: FOREGROUND THREAD: New user.
- Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: No attributes Acct Interim Interval or bad length.
- Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: Client config file was not written, overwriteccfiles is false
- .Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: FOREGROUND THREAD: Add user to map.
- Mon Jan 30 20:19:34 2017 us=308765 44.33.22.11:51965 PLUGIN_CALL: POST /etc/openvpn/radius/radiusplugin.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
- Mon Jan 30 20:19:34 2017 us=308818 44.33.22.11:51965 TLS: Username/Password authentication succeeded for username 'user1'
- Mon Jan 30 20:19:34 2017 us=308999 44.33.22.11:51965 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
- Mon Jan 30 20:19:34 2017 us=309010 44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
- Mon Jan 30 20:19:34 2017 us=309018 44.33.22.11:51965 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
- Mon Jan 30 20:19:34 2017 us=309086 44.33.22.11:51965 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
- Mon Jan 30 20:19:34 2017 us=309093 44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
- Mon Jan 30 20:19:34 2017 us=309101 44.33.22.11:51965 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
- Mon Jan 30 20:19:34 2017 us=309108 44.33.22.11:51965 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
- Mon Jan 30 20:19:34 2017 us=355294 44.33.22.11:51965 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
- Mon Jan 30 20:19:34 2017 us=355348 44.33.22.11:51965 [client] Peer Connection Initiated with [AF_INET]44.33.22.11:51965
- Mon Jan 30 20:19:34 2017 us=355397 client/44.33.22.11:51965 MULTI_sva: pool returned IPv4=10.11.0.2, IPv6=(Not enabled)
- Mon Jan 30 20:19:34 2017 us=359361 client/44.33.22.11:51965 PLUGIN_CALL: POST /etc/openvpn/radius/radiusplugin.so/PLUGIN_CLIENT_CONNECT status=0
- Mon Jan 30 20:19:34 2017 us=359410 client/44.33.22.11:51965 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_d1ffd3014884cd1219e7a9844e1b52ed.tmp
- Mon Jan 30 20:19:34 2017 us=359506 client/44.33.22.11:51965 MULTI: Learn: 10.11.0.2 -> client/44.33.22.11:51965
- Mon Jan 30 20:19:34 2017 us=359522 client/44.33.22.11:51965 MULTI: primary virtual IP for client/44.33.22.11:51965: 10.11.0.2
- Mon Jan 30 20:19:36 2017 us=878642 client/44.33.22.11:51965 PUSH: Received control message: 'PUSH_REQUEST'
- Mon Jan 30 20:19:36 2017 us=878697 client/44.33.22.11:51965 send_push_reply(): safe_cap=940
- Mon Jan 30 20:19:36 2017 us=878728 client/44.33.22.11:51965 SENT CONTROL [client]: 'PUSH_REPLY,persist-key,ping 10,ping-restart 0,persist-tun,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.11.0.1,topology subnet,ifconfig 10.11.0.2 255.255.255.0' (status=1)
- Mon Jan 30 20:24:24 2017 us=551925 client/44.33.22.11:51965 TLS: new session incoming connection from [AF_INET]44.33.22.11:51965
- Mon Jan 30 20:24:24 2017 us=713864 client/44.33.22.11:51965 CRL CHECK OK: CN=Easy-RSA CA
- Mon Jan 30 20:24:24 2017 us=713961 client/44.33.22.11:51965 VERIFY OK: depth=1, CN=Easy-RSA CA
- Mon Jan 30 20:24:24 2017 us=714217 client/44.33.22.11:51965 CRL CHECK OK: CN=client
- Mon Jan 30 20:24:24 2017 us=714291 client/44.33.22.11:51965 VERIFY OK: depth=0, CN=client
- Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: FOREGROUND THREAD: isAuthenticated()1Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: FOREGROUND THREAD: isAcct()1Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: No attributes Acct Interim Interval or bad length.
- Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: FOREGROUND THREAD: Don't add the user to the map, it is a rekeying.
- Mon Jan 30 20:24:24 2017 us=782045 client/44.33.22.11:51965 PLUGIN_CALL: POST /etc/openvpn/radius/radiusplugin.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
- Mon Jan 30 20:24:24 2017 us=782095 client/44.33.22.11:51965 TLS: Username/Password authentication succeeded for username 'user1'
- Mon Jan 30 20:24:24 2017 us=782371 client/44.33.22.11:51965 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
- Mon Jan 30 20:24:24 2017 us=782405 client/44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
- Mon Jan 30 20:24:24 2017 us=782429 client/44.33.22.11:51965 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
- Mon Jan 30 20:24:24 2017 us=782539 client/44.33.22.11:51965 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
- Mon Jan 30 20:24:24 2017 us=782552 client/44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
- Mon Jan 30 20:24:24 2017 us=782565 client/44.33.22.11:51965 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
- Mon Jan 30 20:24:24 2017 us=782591 client/44.33.22.11:51965 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1
- Mon Jan 30 20:24:24 2017 us=782752 client/44.33.22.11:51965 TLS: tls_multi_process: untrusted session promoted to semi-trusted
- Mon Jan 30 20:24:24 2017 us=831297 client/44.33.22.11:51965 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
- Mon Jan 30 20:24:27 2017 us=320363 client/44.33.22.11:51965 PUSH: Received control message: 'PUSH_REQUEST'
- Mon Jan 30 20:24:27 2017 us=320385 client/44.33.22.11:51965 send_push_reply(): safe_cap=940
- Mon Jan 30 20:24:27 2017 us=320412 client/44.33.22.11:51965 SENT CONTROL [client]: 'PUSH_REPLY,persist-key,ping 10,ping-restart 0,persist-tun,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.11.0.1,topology subnet,ifconfig 10.11.0.2 255.255.255.0' (status=1)
- Mon Jan 30 20:26:54 2017 us=575 client/44.33.22.11:51965 TLS: soft reset sec=-150 bytes=75320841/67108864 pkts=84686/0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement