Advertisement
Guest User

openvpn-server.log

a guest
Jan 30th, 2017
155
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 28.16 KB | None | 0 0
  1. Mon Jan 30 20:12:55 2017 us=738033 Current Parameter Settings:
  2. Mon Jan 30 20:12:55 2017 us=738105 config = 'server.conf'
  3. Mon Jan 30 20:12:55 2017 us=738117 mode = 1
  4. Mon Jan 30 20:12:55 2017 us=738123 persist_config = DISABLED
  5. Mon Jan 30 20:12:55 2017 us=738129 persist_mode = 1
  6. Mon Jan 30 20:12:55 2017 us=738135 show_ciphers = DISABLED
  7. Mon Jan 30 20:12:55 2017 us=738140 show_digests = DISABLED
  8. Mon Jan 30 20:12:55 2017 us=738146 show_engines = DISABLED
  9. Mon Jan 30 20:12:55 2017 us=738152 genkey = DISABLED
  10. Mon Jan 30 20:12:55 2017 us=738157 key_pass_file = '[UNDEF]'
  11. Mon Jan 30 20:12:55 2017 us=738163 show_tls_ciphers = DISABLED
  12. Mon Jan 30 20:12:55 2017 us=738170 Connection profiles [default]:
  13. Mon Jan 30 20:12:55 2017 us=738177 proto = udp
  14. Mon Jan 30 20:12:55 2017 us=738183 local = '[UNDEF]'
  15. Mon Jan 30 20:12:55 2017 us=738188 local_port = 1194
  16. Mon Jan 30 20:12:55 2017 us=738194 remote = '[UNDEF]'
  17. Mon Jan 30 20:12:55 2017 us=738199 remote_port = 1194
  18. Mon Jan 30 20:12:55 2017 us=738205 remote_float = DISABLED
  19. Mon Jan 30 20:12:55 2017 us=738210 bind_defined = DISABLED
  20. Mon Jan 30 20:12:55 2017 us=738216 bind_local = ENABLED
  21. Mon Jan 30 20:12:55 2017 us=738222 connect_retry_seconds = 5
  22. Mon Jan 30 20:12:55 2017 us=738228 connect_timeout = 10
  23. Mon Jan 30 20:12:55 2017 us=738233 connect_retry_max = 0
  24. Mon Jan 30 20:12:55 2017 us=738239 socks_proxy_server = '[UNDEF]'
  25. Mon Jan 30 20:12:55 2017 us=738262 socks_proxy_port = 0
  26. Mon Jan 30 20:12:55 2017 us=738271 socks_proxy_retry = DISABLED
  27. Mon Jan 30 20:12:55 2017 us=738277 tun_mtu = 1500
  28. Mon Jan 30 20:12:55 2017 us=738283 tun_mtu_defined = ENABLED
  29. Mon Jan 30 20:12:55 2017 us=738288 link_mtu = 1500
  30. Mon Jan 30 20:12:55 2017 us=738294 link_mtu_defined = DISABLED
  31. Mon Jan 30 20:12:55 2017 us=738300 tun_mtu_extra = 0
  32. Mon Jan 30 20:12:55 2017 us=738305 tun_mtu_extra_defined = DISABLED
  33. Mon Jan 30 20:12:55 2017 us=738311 mtu_discover_type = -1
  34. Mon Jan 30 20:12:55 2017 us=738317 fragment = 0
  35. Mon Jan 30 20:12:55 2017 us=738322 mssfix = 1450
  36. Mon Jan 30 20:12:55 2017 us=738328 explicit_exit_notification = 0
  37. Mon Jan 30 20:12:55 2017 us=738334 Connection profiles END
  38. Mon Jan 30 20:12:55 2017 us=738340 remote_random = DISABLED
  39. Mon Jan 30 20:12:55 2017 us=738345 ipchange = '[UNDEF]'
  40. Mon Jan 30 20:12:55 2017 us=738351 dev = 'tun'
  41. Mon Jan 30 20:12:55 2017 us=738357 dev_type = '[UNDEF]'
  42. Mon Jan 30 20:12:55 2017 us=738362 dev_node = '[UNDEF]'
  43. Mon Jan 30 20:12:55 2017 us=738368 lladdr = '[UNDEF]'
  44. Mon Jan 30 20:12:55 2017 us=738374 topology = 3
  45. Mon Jan 30 20:12:55 2017 us=738381 tun_ipv6 = DISABLED
  46. Mon Jan 30 20:12:55 2017 us=738387 ifconfig_local = '10.11.0.1'
  47. Mon Jan 30 20:12:55 2017 us=738393 ifconfig_remote_netmask = '255.255.255.0'
  48. Mon Jan 30 20:12:55 2017 us=738399 ifconfig_noexec = DISABLED
  49. Mon Jan 30 20:12:55 2017 us=738404 ifconfig_nowarn = DISABLED
  50. Mon Jan 30 20:12:55 2017 us=738410 ifconfig_ipv6_local = '[UNDEF]'
  51. Mon Jan 30 20:12:55 2017 us=738416 ifconfig_ipv6_netbits = 0
  52. Mon Jan 30 20:12:55 2017 us=738421 ifconfig_ipv6_remote = '[UNDEF]'
  53. Mon Jan 30 20:12:55 2017 us=738427 shaper = 0
  54. Mon Jan 30 20:12:55 2017 us=738433 mtu_test = 0
  55. Mon Jan 30 20:12:55 2017 us=738438 mlock = DISABLED
  56. Mon Jan 30 20:12:55 2017 us=738444 keepalive_ping = 0
  57. Mon Jan 30 20:12:55 2017 us=738449 keepalive_timeout = 0
  58. Mon Jan 30 20:12:55 2017 us=738455 inactivity_timeout = 0
  59. Mon Jan 30 20:12:55 2017 us=738461 ping_send_timeout = 10
  60. Mon Jan 30 20:12:55 2017 us=738466 ping_rec_timeout = 0
  61. Mon Jan 30 20:12:55 2017 us=738472 ping_rec_timeout_action = 1
  62. Mon Jan 30 20:12:55 2017 us=738478 ping_timer_remote = DISABLED
  63. Mon Jan 30 20:12:55 2017 us=738483 remap_sigusr1 = 0
  64. Mon Jan 30 20:12:55 2017 us=738489 persist_tun = ENABLED
  65. Mon Jan 30 20:12:55 2017 us=738495 persist_local_ip = DISABLED
  66. Mon Jan 30 20:12:55 2017 us=738500 persist_remote_ip = DISABLED
  67. Mon Jan 30 20:12:55 2017 us=738506 persist_key = ENABLED
  68. Mon Jan 30 20:12:55 2017 us=738511 passtos = DISABLED
  69. Mon Jan 30 20:12:55 2017 us=738517 resolve_retry_seconds = 1000000000
  70. Mon Jan 30 20:12:55 2017 us=738531 username = '[UNDEF]'
  71. Mon Jan 30 20:12:55 2017 us=738537 groupname = '[UNDEF]'
  72. Mon Jan 30 20:12:55 2017 us=738543 chroot_dir = '[UNDEF]'
  73. Mon Jan 30 20:12:55 2017 us=738548 cd_dir = '/etc/openvpn/'
  74. Mon Jan 30 20:12:55 2017 us=738554 writepid = '/var/run/openvpn/server.pid'
  75. Mon Jan 30 20:12:55 2017 us=738560 up_script = '[UNDEF]'
  76. Mon Jan 30 20:12:55 2017 us=738566 down_script = '[UNDEF]'
  77. Mon Jan 30 20:12:55 2017 us=738572 down_pre = DISABLED
  78. Mon Jan 30 20:12:55 2017 us=738581 up_restart = DISABLED
  79. Mon Jan 30 20:12:55 2017 us=738591 up_delay = DISABLED
  80. Mon Jan 30 20:12:55 2017 us=738601 daemon = ENABLED
  81. Mon Jan 30 20:12:55 2017 us=738611 inetd = 0
  82. Mon Jan 30 20:12:55 2017 us=738621 log = ENABLED
  83. Mon Jan 30 20:12:55 2017 us=738630 suppress_timestamps = DISABLED
  84. Mon Jan 30 20:12:55 2017 us=738636 nice = 0
  85. Mon Jan 30 20:12:55 2017 us=738642 verbosity = 4
  86. Mon Jan 30 20:12:55 2017 us=738647 mute = 0
  87. Mon Jan 30 20:12:55 2017 us=738653 gremlin = 0
  88. Mon Jan 30 20:12:55 2017 us=738659 status_file = '/var/log/openvpn/openvpn-status.log'
  89. Mon Jan 30 20:12:55 2017 us=738664 status_file_version = 3
  90. Mon Jan 30 20:12:55 2017 us=738670 status_file_update_freq = 1
  91. Mon Jan 30 20:12:55 2017 us=738676 occ = ENABLED
  92. Mon Jan 30 20:12:55 2017 us=738681 rcvbuf = 0
  93. Mon Jan 30 20:12:55 2017 us=738687 sndbuf = 0
  94. Mon Jan 30 20:12:55 2017 us=738692 mark = 0
  95. Mon Jan 30 20:12:55 2017 us=738698 sockflags = 0
  96. Mon Jan 30 20:12:55 2017 us=738703 fast_io = DISABLED
  97. Mon Jan 30 20:12:55 2017 us=738709 lzo = 0
  98. Mon Jan 30 20:12:55 2017 us=738714 route_script = '[UNDEF]'
  99. Mon Jan 30 20:12:55 2017 us=738720 route_default_gateway = '10.11.0.2'
  100. Mon Jan 30 20:12:55 2017 us=738726 route_default_metric = 0
  101. Mon Jan 30 20:12:55 2017 us=738732 route_noexec = DISABLED
  102. Mon Jan 30 20:12:55 2017 us=738737 route_delay = 0
  103. Mon Jan 30 20:12:55 2017 us=738743 route_delay_window = 30
  104. Mon Jan 30 20:12:55 2017 us=738749 route_delay_defined = DISABLED
  105. Mon Jan 30 20:12:55 2017 us=738755 route_nopull = DISABLED
  106. Mon Jan 30 20:12:55 2017 us=738761 route_gateway_via_dhcp = DISABLED
  107. Mon Jan 30 20:12:55 2017 us=738766 max_routes = 100
  108. Mon Jan 30 20:12:55 2017 us=738772 allow_pull_fqdn = DISABLED
  109. Mon Jan 30 20:12:55 2017 us=738778 management_addr = '[UNDEF]'
  110. Mon Jan 30 20:12:55 2017 us=738784 management_port = 0
  111. Mon Jan 30 20:12:55 2017 us=738789 management_user_pass = '[UNDEF]'
  112. Mon Jan 30 20:12:55 2017 us=738795 management_log_history_cache = 250
  113. Mon Jan 30 20:12:55 2017 us=738801 management_echo_buffer_size = 100
  114. Mon Jan 30 20:12:55 2017 us=738807 management_write_peer_info_file = '[UNDEF]'
  115. Mon Jan 30 20:12:55 2017 us=738813 management_client_user = '[UNDEF]'
  116. Mon Jan 30 20:12:55 2017 us=738819 management_client_group = '[UNDEF]'
  117. Mon Jan 30 20:12:55 2017 us=738824 management_flags = 0
  118. Mon Jan 30 20:12:55 2017 us=738836 plugin[0] /etc/openvpn/radius/radiusplugin.so '[/etc/openvpn/radius/radiusplugin.so] [/etc/openvpn/radius/radius.cnf]'
  119. Mon Jan 30 20:12:55 2017 us=738843 shared_secret_file = '[UNDEF]'
  120. Mon Jan 30 20:12:55 2017 us=738849 key_direction = 1
  121. Mon Jan 30 20:12:55 2017 us=738855 ciphername_defined = ENABLED
  122. Mon Jan 30 20:12:55 2017 us=738861 ciphername = 'BF-CBC'
  123. Mon Jan 30 20:12:55 2017 us=738867 authname_defined = ENABLED
  124. Mon Jan 30 20:12:55 2017 us=738873 authname = 'SHA1'
  125. Mon Jan 30 20:12:55 2017 us=738878 prng_hash = 'SHA1'
  126. Mon Jan 30 20:12:55 2017 us=738884 prng_nonce_secret_len = 16
  127. Mon Jan 30 20:12:55 2017 us=738890 keysize = 0
  128. Mon Jan 30 20:12:55 2017 us=738896 engine = DISABLED
  129. Mon Jan 30 20:12:55 2017 us=738902 replay = ENABLED
  130. Mon Jan 30 20:12:55 2017 us=738907 mute_replay_warnings = DISABLED
  131. Mon Jan 30 20:12:55 2017 us=738913 replay_window = 64
  132. Mon Jan 30 20:12:55 2017 us=738919 replay_time = 15
  133. Mon Jan 30 20:12:55 2017 us=738924 packet_id_file = '[UNDEF]'
  134. Mon Jan 30 20:12:55 2017 us=738930 use_iv = ENABLED
  135. Mon Jan 30 20:12:55 2017 us=738935 test_crypto = DISABLED
  136. Mon Jan 30 20:12:55 2017 us=738941 tls_server = ENABLED
  137. Mon Jan 30 20:12:55 2017 us=738951 tls_client = DISABLED
  138. Mon Jan 30 20:12:55 2017 us=738957 key_method = 2
  139. Mon Jan 30 20:12:55 2017 us=738963 ca_file = '/etc/openvpn/keys/ca.crt'
  140. Mon Jan 30 20:12:55 2017 us=738969 ca_path = '[UNDEF]'
  141. Mon Jan 30 20:12:55 2017 us=738975 dh_file = '/etc/openvpn/keys/dh.pem'
  142. Mon Jan 30 20:12:55 2017 us=738981 cert_file = '/etc/openvpn/keys/vpn01.crt'
  143. Mon Jan 30 20:12:55 2017 us=738987 extra_certs_file = '[UNDEF]'
  144. Mon Jan 30 20:12:55 2017 us=738993 priv_key_file = '/etc/openvpn/keys/server.key'
  145. Mon Jan 30 20:12:55 2017 us=738999 pkcs12_file = '[UNDEF]'
  146. Mon Jan 30 20:12:55 2017 us=739005 cipher_list = '[UNDEF]'
  147. Mon Jan 30 20:12:55 2017 us=739011 tls_verify = '[UNDEF]'
  148. Mon Jan 30 20:12:55 2017 us=739017 tls_export_cert = '[UNDEF]'
  149. Mon Jan 30 20:12:55 2017 us=739023 verify_x509_type = 0
  150. Mon Jan 30 20:12:55 2017 us=739028 verify_x509_name = '[UNDEF]'
  151. Mon Jan 30 20:12:55 2017 us=739034 crl_file = '/etc/openvpn/keys/crl.pem'
  152. Mon Jan 30 20:12:55 2017 us=739040 ns_cert_type = 0
  153. Mon Jan 30 20:12:55 2017 us=739046 remote_cert_ku[i] = 0
  154. Mon Jan 30 20:12:55 2017 us=739051 remote_cert_ku[i] = 0
  155. Mon Jan 30 20:12:55 2017 us=739057 remote_cert_ku[i] = 0
  156. Mon Jan 30 20:12:55 2017 us=739062 remote_cert_ku[i] = 0
  157. Mon Jan 30 20:12:55 2017 us=739067 remote_cert_ku[i] = 0
  158. Mon Jan 30 20:12:55 2017 us=739073 remote_cert_ku[i] = 0
  159. Mon Jan 30 20:12:55 2017 us=739078 remote_cert_ku[i] = 0
  160. Mon Jan 30 20:12:55 2017 us=739084 remote_cert_ku[i] = 0
  161. Mon Jan 30 20:12:55 2017 us=739089 remote_cert_ku[i] = 0
  162. Mon Jan 30 20:12:55 2017 us=739095 remote_cert_ku[i] = 0
  163. Mon Jan 30 20:12:55 2017 us=739100 remote_cert_ku[i] = 0
  164. Mon Jan 30 20:12:55 2017 us=739105 remote_cert_ku[i] = 0
  165. Mon Jan 30 20:12:55 2017 us=739111 remote_cert_ku[i] = 0
  166. Mon Jan 30 20:12:55 2017 us=739116 remote_cert_ku[i] = 0
  167. Mon Jan 30 20:12:55 2017 us=739122 remote_cert_ku[i] = 0
  168. Mon Jan 30 20:12:55 2017 us=739127 remote_cert_ku[i] = 0
  169. Mon Jan 30 20:12:55 2017 us=739133 remote_cert_eku = '[UNDEF]'
  170. Mon Jan 30 20:12:55 2017 us=739138 ssl_flags = 0
  171. Mon Jan 30 20:12:55 2017 us=739144 tls_timeout = 0
  172. Mon Jan 30 20:12:55 2017 us=739150 renegotiate_bytes = -1
  173. Mon Jan 30 20:12:55 2017 us=739155 renegotiate_packets = 0
  174. Mon Jan 30 20:12:55 2017 us=739161 renegotiate_seconds = 0
  175. Mon Jan 30 20:12:55 2017 us=739166 handshake_window = 60
  176. Mon Jan 30 20:12:55 2017 us=739172 transition_window = 3600
  177. Mon Jan 30 20:12:55 2017 us=739178 single_session = DISABLED
  178. Mon Jan 30 20:12:55 2017 us=739184 push_peer_info = DISABLED
  179. Mon Jan 30 20:12:55 2017 us=739190 tls_exit = DISABLED
  180. Mon Jan 30 20:12:55 2017 us=739195 tls_auth_file = '/etc/openvpn/keys/ta.key'
  181. Mon Jan 30 20:12:55 2017 us=739201 pkcs11_protected_authentication = DISABLED
  182. Mon Jan 30 20:12:55 2017 us=739207 pkcs11_protected_authentication = DISABLED
  183. Mon Jan 30 20:12:55 2017 us=739213 pkcs11_protected_authentication = DISABLED
  184. Mon Jan 30 20:12:55 2017 us=739219 pkcs11_protected_authentication = DISABLED
  185. Mon Jan 30 20:12:55 2017 us=739224 pkcs11_protected_authentication = DISABLED
  186. Mon Jan 30 20:12:55 2017 us=739230 pkcs11_protected_authentication = DISABLED
  187. Mon Jan 30 20:12:55 2017 us=739236 pkcs11_protected_authentication = DISABLED
  188. Mon Jan 30 20:12:55 2017 us=739241 pkcs11_protected_authentication = DISABLED
  189. Mon Jan 30 20:12:55 2017 us=739319 pkcs11_protected_authentication = DISABLED
  190. Mon Jan 30 20:12:55 2017 us=739329 pkcs11_protected_authentication = DISABLED
  191. Mon Jan 30 20:12:55 2017 us=739334 pkcs11_protected_authentication = DISABLED
  192. Mon Jan 30 20:12:55 2017 us=739340 pkcs11_protected_authentication = DISABLED
  193. Mon Jan 30 20:12:55 2017 us=739346 pkcs11_protected_authentication = DISABLED
  194. Mon Jan 30 20:12:55 2017 us=739351 pkcs11_protected_authentication = DISABLED
  195. Mon Jan 30 20:12:55 2017 us=739357 pkcs11_protected_authentication = DISABLED
  196. Mon Jan 30 20:12:55 2017 us=739362 pkcs11_protected_authentication = DISABLED
  197. Mon Jan 30 20:12:55 2017 us=739368 pkcs11_private_mode = 00000000
  198. Mon Jan 30 20:12:55 2017 us=739380 pkcs11_private_mode = 00000000
  199. Mon Jan 30 20:12:55 2017 us=739386 pkcs11_private_mode = 00000000
  200. Mon Jan 30 20:12:55 2017 us=739391 pkcs11_private_mode = 00000000
  201. Mon Jan 30 20:12:55 2017 us=739397 pkcs11_private_mode = 00000000
  202. Mon Jan 30 20:12:55 2017 us=739402 pkcs11_private_mode = 00000000
  203. Mon Jan 30 20:12:55 2017 us=739408 pkcs11_private_mode = 00000000
  204. Mon Jan 30 20:12:55 2017 us=739413 pkcs11_private_mode = 00000000
  205. Mon Jan 30 20:12:55 2017 us=739419 pkcs11_private_mode = 00000000
  206. Mon Jan 30 20:12:55 2017 us=739424 pkcs11_private_mode = 00000000
  207. Mon Jan 30 20:12:55 2017 us=739429 pkcs11_private_mode = 00000000
  208. Mon Jan 30 20:12:55 2017 us=739435 pkcs11_private_mode = 00000000
  209. Mon Jan 30 20:12:55 2017 us=739440 pkcs11_private_mode = 00000000
  210. Mon Jan 30 20:12:55 2017 us=739446 pkcs11_private_mode = 00000000
  211. Mon Jan 30 20:12:55 2017 us=739451 pkcs11_private_mode = 00000000
  212. Mon Jan 30 20:12:55 2017 us=739457 pkcs11_private_mode = 00000000
  213. Mon Jan 30 20:12:55 2017 us=739462 pkcs11_cert_private = DISABLED
  214. Mon Jan 30 20:12:55 2017 us=739468 pkcs11_cert_private = DISABLED
  215. Mon Jan 30 20:12:55 2017 us=739474 pkcs11_cert_private = DISABLED
  216. Mon Jan 30 20:12:55 2017 us=739479 pkcs11_cert_private = DISABLED
  217. Mon Jan 30 20:12:55 2017 us=739484 pkcs11_cert_private = DISABLED
  218. Mon Jan 30 20:12:55 2017 us=739490 pkcs11_cert_private = DISABLED
  219. Mon Jan 30 20:12:55 2017 us=739496 pkcs11_cert_private = DISABLED
  220. Mon Jan 30 20:12:55 2017 us=739501 pkcs11_cert_private = DISABLED
  221. Mon Jan 30 20:12:55 2017 us=739507 pkcs11_cert_private = DISABLED
  222. Mon Jan 30 20:12:55 2017 us=739513 pkcs11_cert_private = DISABLED
  223. Mon Jan 30 20:12:55 2017 us=739518 pkcs11_cert_private = DISABLED
  224. Mon Jan 30 20:12:55 2017 us=739524 pkcs11_cert_private = DISABLED
  225. Mon Jan 30 20:12:55 2017 us=739529 pkcs11_cert_private = DISABLED
  226. Mon Jan 30 20:12:55 2017 us=739535 pkcs11_cert_private = DISABLED
  227. Mon Jan 30 20:12:55 2017 us=739540 pkcs11_cert_private = DISABLED
  228. Mon Jan 30 20:12:55 2017 us=739549 pkcs11_cert_private = DISABLED
  229. Mon Jan 30 20:12:55 2017 us=739555 pkcs11_pin_cache_period = -1
  230. Mon Jan 30 20:12:55 2017 us=739561 pkcs11_id = '[UNDEF]'
  231. Mon Jan 30 20:12:55 2017 us=739567 pkcs11_id_management = DISABLED
  232. Mon Jan 30 20:12:55 2017 us=739575 server_network = 10.11.0.0
  233. Mon Jan 30 20:12:55 2017 us=739581 server_netmask = 255.255.255.0
  234. Mon Jan 30 20:12:55 2017 us=739593 server_network_ipv6 = ::
  235. Mon Jan 30 20:12:55 2017 us=739601 server_netbits_ipv6 = 0
  236. Mon Jan 30 20:12:55 2017 us=739613 server_bridge_ip = 0.0.0.0
  237. Mon Jan 30 20:12:55 2017 us=739624 server_bridge_netmask = 0.0.0.0
  238. Mon Jan 30 20:12:55 2017 us=739636 server_bridge_pool_start = 0.0.0.0
  239. Mon Jan 30 20:12:55 2017 us=739647 server_bridge_pool_end = 0.0.0.0
  240. Mon Jan 30 20:12:55 2017 us=739654 push_entry = 'persist-key'
  241. Mon Jan 30 20:12:55 2017 us=739660 push_entry = 'ping 10'
  242. Mon Jan 30 20:12:55 2017 us=739666 push_entry = 'ping-restart 0'
  243. Mon Jan 30 20:12:55 2017 us=739672 push_entry = 'persist-tun'
  244. Mon Jan 30 20:12:55 2017 us=739678 push_entry = 'redirect-gateway def1'
  245. Mon Jan 30 20:12:55 2017 us=739684 push_entry = 'dhcp-option DNS 8.8.8.8'
  246. Mon Jan 30 20:12:55 2017 us=739690 push_entry = 'dhcp-option DNS 8.8.4.4'
  247. Mon Jan 30 20:12:55 2017 us=739696 push_entry = 'route-gateway 10.11.0.1'
  248. Mon Jan 30 20:12:55 2017 us=739701 push_entry = 'topology subnet'
  249. Mon Jan 30 20:12:55 2017 us=739707 ifconfig_pool_defined = ENABLED
  250. Mon Jan 30 20:12:55 2017 us=739714 ifconfig_pool_start = 10.11.0.2
  251. Mon Jan 30 20:12:55 2017 us=739720 ifconfig_pool_end = 10.11.0.253
  252. Mon Jan 30 20:12:55 2017 us=739727 ifconfig_pool_netmask = 255.255.255.0
  253. Mon Jan 30 20:12:55 2017 us=739733 ifconfig_pool_persist_filename = 'ipp.txt'
  254. Mon Jan 30 20:12:55 2017 us=739739 ifconfig_pool_persist_refresh_freq = 600
  255. Mon Jan 30 20:12:55 2017 us=739744 ifconfig_ipv6_pool_defined = DISABLED
  256. Mon Jan 30 20:12:55 2017 us=739751 ifconfig_ipv6_pool_base = ::
  257. Mon Jan 30 20:12:55 2017 us=739757 ifconfig_ipv6_pool_netbits = 0
  258. Mon Jan 30 20:12:55 2017 us=739767 n_bcast_buf = 256
  259. Mon Jan 30 20:12:55 2017 us=739773 tcp_queue_limit = 64
  260. Mon Jan 30 20:12:55 2017 us=739779 real_hash_size = 256
  261. Mon Jan 30 20:12:55 2017 us=739785 virtual_hash_size = 256
  262. Mon Jan 30 20:12:55 2017 us=739790 client_connect_script = '[UNDEF]'
  263. Mon Jan 30 20:12:55 2017 us=739796 learn_address_script = '[UNDEF]'
  264. Mon Jan 30 20:12:55 2017 us=739802 client_disconnect_script = '[UNDEF]'
  265. Mon Jan 30 20:12:55 2017 us=739808 client_config_dir = '/etc/openvpn/ccd'
  266. Mon Jan 30 20:12:55 2017 us=739814 ccd_exclusive = DISABLED
  267. Mon Jan 30 20:12:55 2017 us=739819 tmp_dir = '/tmp'
  268. Mon Jan 30 20:12:55 2017 us=739825 push_ifconfig_defined = DISABLED
  269. Mon Jan 30 20:12:55 2017 us=739832 push_ifconfig_local = 0.0.0.0
  270. Mon Jan 30 20:12:55 2017 us=739838 push_ifconfig_remote_netmask = 0.0.0.0
  271. Mon Jan 30 20:12:55 2017 us=739844 push_ifconfig_ipv6_defined = DISABLED
  272. Mon Jan 30 20:12:55 2017 us=739851 push_ifconfig_ipv6_local = ::/0
  273. Mon Jan 30 20:12:55 2017 us=739857 push_ifconfig_ipv6_remote = ::
  274. Mon Jan 30 20:12:55 2017 us=739863 enable_c2c = DISABLED
  275. Mon Jan 30 20:12:55 2017 us=739868 duplicate_cn = DISABLED
  276. Mon Jan 30 20:12:55 2017 us=739874 cf_max = 0
  277. Mon Jan 30 20:12:55 2017 us=739880 cf_per = 0
  278. Mon Jan 30 20:12:55 2017 us=739885 max_clients = 100
  279. Mon Jan 30 20:12:55 2017 us=739891 max_routes_per_client = 256
  280. Mon Jan 30 20:12:55 2017 us=739897 auth_user_pass_verify_script = '[UNDEF]'
  281. Mon Jan 30 20:12:55 2017 us=739903 auth_user_pass_verify_script_via_file = DISABLED
  282. Mon Jan 30 20:12:55 2017 us=739908 port_share_host = '[UNDEF]'
  283. Mon Jan 30 20:12:55 2017 us=739914 port_share_port = 0
  284. Mon Jan 30 20:12:55 2017 us=739920 client = DISABLED
  285. Mon Jan 30 20:12:55 2017 us=739926 pull = DISABLED
  286. Mon Jan 30 20:12:55 2017 us=739931 auth_user_pass_file = '[UNDEF]'
  287. Mon Jan 30 20:12:55 2017 us=739939 OpenVPN 2.3.14 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec 7 2016
  288. Mon Jan 30 20:12:55 2017 us=739951 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
  289. Mon Jan 30 20:12:55 2017 us=741704 WARNING: --ping should normally be used with --ping-restart or --ping-exit
  290. Mon Jan 30 20:12:55 2017 us=741748 WARNING: --keepalive option is missing from server config
  291. Mon Jan 30 20:12:55 2017 RADIUS-PLUGIN: Configfile name: /etc/openvpn/radius/radius.cnf.
  292. Mon Jan 30 20:12:55 2017 us=746322 PLUGIN_INIT: POST /etc/openvpn/radius/radiusplugin.so '[/etc/openvpn/radius/radiusplugin.so] [/etc/openvpn/radius/radius.cnf]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY|PLUGIN_CLIENT_CONNECT|PLUGIN_CLIENT_DISCONNECT
  293. Mon Jan 30 20:12:55 2017 us=754792 Diffie-Hellman initialized with 2048 bit key
  294. Mon Jan 30 20:12:55 2017 us=755351 Control Channel Authentication: using '/etc/openvpn/keys/ta.key' as a OpenVPN static key file
  295. Mon Jan 30 20:12:55 2017 us=755375 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
  296. Mon Jan 30 20:12:55 2017 us=755385 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
  297. Mon Jan 30 20:12:55 2017 us=755401 TLS-Auth MTU parms [ L:1541 D:1184 EF:66 EB:0 ET:0 EL:3 ]
  298. Mon Jan 30 20:12:55 2017 us=755416 Socket Buffers: R=[212992->212992] S=[212992->212992]
  299. Mon Jan 30 20:12:55 2017 us=755619 TUN/TAP device tun0 opened
  300. Mon Jan 30 20:12:55 2017 us=755637 TUN/TAP TX queue length set to 100
  301. Mon Jan 30 20:12:55 2017 us=755651 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
  302. Mon Jan 30 20:12:55 2017 us=755672 /usr/sbin/ip link set dev tun0 up mtu 1500
  303. Mon Jan 30 20:12:55 2017 us=756957 /usr/sbin/ip addr add dev tun0 10.11.0.1/24 broadcast 10.11.0.255
  304. Mon Jan 30 20:12:55 2017 us=758375 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:12 ET:0 EL:3 ]
  305. Mon Jan 30 20:12:55 2017 us=758410 UDPv4 link local (bound): [undef]
  306. Mon Jan 30 20:12:55 2017 us=758419 UDPv4 link remote: [undef]
  307. Mon Jan 30 20:12:55 2017 us=758433 MULTI: multi_init called, r=256 v=256
  308. Mon Jan 30 20:12:55 2017 us=758457 IFCONFIG POOL: base=10.11.0.2 size=252, ipv6=0
  309. Mon Jan 30 20:12:55 2017 us=758480 IFCONFIG POOL LIST
  310. Mon Jan 30 20:12:55 2017 us=758509 Initialization Sequence Completed
  311. Mon Jan 30 20:19:34 2017 us=44553 MULTI: multi_create_instance called
  312. Mon Jan 30 20:19:34 2017 us=44617 44.33.22.11:51965 Re-using SSL/TLS context
  313. Mon Jan 30 20:19:34 2017 us=44782 44.33.22.11:51965 Control Channel MTU parms [ L:1541 D:1184 EF:66 EB:0 ET:0 EL:3 ]
  314. Mon Jan 30 20:19:34 2017 us=44796 44.33.22.11:51965 Data Channel MTU parms [ L:1541 D:1450 EF:41 EB:12 ET:0 EL:3 ]
  315. Mon Jan 30 20:19:34 2017 us=44826 44.33.22.11:51965 Local Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 0,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
  316. Mon Jan 30 20:19:34 2017 us=44833 44.33.22.11:51965 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
  317. Mon Jan 30 20:19:34 2017 us=44864 44.33.22.11:51965 Local Options hash (VER=V4): 'a2e2498c'
  318. Mon Jan 30 20:19:34 2017 us=44878 44.33.22.11:51965 Expected Remote Options hash (VER=V4): '70f5b3af'
  319. Mon Jan 30 20:19:34 2017 us=44914 44.33.22.11:51965 TLS: Initial packet from [AF_INET]44.33.22.11:51965, sid=47b9a04c fb8e52bf
  320. Mon Jan 30 20:19:34 2017 us=220510 44.33.22.11:51965 CRL CHECK OK: CN=Easy-RSA CA
  321. Mon Jan 30 20:19:34 2017 us=220589 44.33.22.11:51965 VERIFY OK: depth=1, CN=Easy-RSA CA
  322. Mon Jan 30 20:19:34 2017 us=220868 44.33.22.11:51965 CRL CHECK OK: CN=client
  323. Mon Jan 30 20:19:34 2017 us=220905 44.33.22.11:51965 VERIFY OK: depth=0, CN=client
  324. Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: FOREGROUND THREAD: Auth_user_pass_verify thread started.
  325. Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: FOREGROUND THREAD: New user.
  326. Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: No attributes Acct Interim Interval or bad length.
  327. Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: Client config file was not written, overwriteccfiles is false
  328. .Mon Jan 30 20:19:34 2017 RADIUS-PLUGIN: FOREGROUND THREAD: Add user to map.
  329. Mon Jan 30 20:19:34 2017 us=308765 44.33.22.11:51965 PLUGIN_CALL: POST /etc/openvpn/radius/radiusplugin.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
  330. Mon Jan 30 20:19:34 2017 us=308818 44.33.22.11:51965 TLS: Username/Password authentication succeeded for username 'user1'
  331. Mon Jan 30 20:19:34 2017 us=308999 44.33.22.11:51965 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
  332. Mon Jan 30 20:19:34 2017 us=309010 44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
  333. Mon Jan 30 20:19:34 2017 us=309018 44.33.22.11:51965 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
  334. Mon Jan 30 20:19:34 2017 us=309086 44.33.22.11:51965 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
  335. Mon Jan 30 20:19:34 2017 us=309093 44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
  336. Mon Jan 30 20:19:34 2017 us=309101 44.33.22.11:51965 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
  337. Mon Jan 30 20:19:34 2017 us=309108 44.33.22.11:51965 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
  338. Mon Jan 30 20:19:34 2017 us=355294 44.33.22.11:51965 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
  339. Mon Jan 30 20:19:34 2017 us=355348 44.33.22.11:51965 [client] Peer Connection Initiated with [AF_INET]44.33.22.11:51965
  340. Mon Jan 30 20:19:34 2017 us=355397 client/44.33.22.11:51965 MULTI_sva: pool returned IPv4=10.11.0.2, IPv6=(Not enabled)
  341. Mon Jan 30 20:19:34 2017 us=359361 client/44.33.22.11:51965 PLUGIN_CALL: POST /etc/openvpn/radius/radiusplugin.so/PLUGIN_CLIENT_CONNECT status=0
  342. Mon Jan 30 20:19:34 2017 us=359410 client/44.33.22.11:51965 OPTIONS IMPORT: reading client specific options from: /tmp/openvpn_cc_d1ffd3014884cd1219e7a9844e1b52ed.tmp
  343. Mon Jan 30 20:19:34 2017 us=359506 client/44.33.22.11:51965 MULTI: Learn: 10.11.0.2 -> client/44.33.22.11:51965
  344. Mon Jan 30 20:19:34 2017 us=359522 client/44.33.22.11:51965 MULTI: primary virtual IP for client/44.33.22.11:51965: 10.11.0.2
  345. Mon Jan 30 20:19:36 2017 us=878642 client/44.33.22.11:51965 PUSH: Received control message: 'PUSH_REQUEST'
  346. Mon Jan 30 20:19:36 2017 us=878697 client/44.33.22.11:51965 send_push_reply(): safe_cap=940
  347. Mon Jan 30 20:19:36 2017 us=878728 client/44.33.22.11:51965 SENT CONTROL [client]: 'PUSH_REPLY,persist-key,ping 10,ping-restart 0,persist-tun,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.11.0.1,topology subnet,ifconfig 10.11.0.2 255.255.255.0' (status=1)
  348. Mon Jan 30 20:24:24 2017 us=551925 client/44.33.22.11:51965 TLS: new session incoming connection from [AF_INET]44.33.22.11:51965
  349. Mon Jan 30 20:24:24 2017 us=713864 client/44.33.22.11:51965 CRL CHECK OK: CN=Easy-RSA CA
  350. Mon Jan 30 20:24:24 2017 us=713961 client/44.33.22.11:51965 VERIFY OK: depth=1, CN=Easy-RSA CA
  351. Mon Jan 30 20:24:24 2017 us=714217 client/44.33.22.11:51965 CRL CHECK OK: CN=client
  352. Mon Jan 30 20:24:24 2017 us=714291 client/44.33.22.11:51965 VERIFY OK: depth=0, CN=client
  353. Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: FOREGROUND THREAD: isAuthenticated()1Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: FOREGROUND THREAD: isAcct()1Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: No attributes Acct Interim Interval or bad length.
  354. Mon Jan 30 20:24:24 2017 RADIUS-PLUGIN: FOREGROUND THREAD: Don't add the user to the map, it is a rekeying.
  355. Mon Jan 30 20:24:24 2017 us=782045 client/44.33.22.11:51965 PLUGIN_CALL: POST /etc/openvpn/radius/radiusplugin.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
  356. Mon Jan 30 20:24:24 2017 us=782095 client/44.33.22.11:51965 TLS: Username/Password authentication succeeded for username 'user1'
  357. Mon Jan 30 20:24:24 2017 us=782371 client/44.33.22.11:51965 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
  358. Mon Jan 30 20:24:24 2017 us=782405 client/44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
  359. Mon Jan 30 20:24:24 2017 us=782429 client/44.33.22.11:51965 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
  360. Mon Jan 30 20:24:24 2017 us=782539 client/44.33.22.11:51965 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
  361. Mon Jan 30 20:24:24 2017 us=782552 client/44.33.22.11:51965 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
  362. Mon Jan 30 20:24:24 2017 us=782565 client/44.33.22.11:51965 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
  363. Mon Jan 30 20:24:24 2017 us=782591 client/44.33.22.11:51965 TLS: move_session: dest=TM_ACTIVE src=TM_UNTRUSTED reinit_src=1
  364. Mon Jan 30 20:24:24 2017 us=782752 client/44.33.22.11:51965 TLS: tls_multi_process: untrusted session promoted to semi-trusted
  365. Mon Jan 30 20:24:24 2017 us=831297 client/44.33.22.11:51965 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
  366. Mon Jan 30 20:24:27 2017 us=320363 client/44.33.22.11:51965 PUSH: Received control message: 'PUSH_REQUEST'
  367. Mon Jan 30 20:24:27 2017 us=320385 client/44.33.22.11:51965 send_push_reply(): safe_cap=940
  368. Mon Jan 30 20:24:27 2017 us=320412 client/44.33.22.11:51965 SENT CONTROL [client]: 'PUSH_REPLY,persist-key,ping 10,ping-restart 0,persist-tun,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 10.11.0.1,topology subnet,ifconfig 10.11.0.2 255.255.255.0' (status=1)
  369. Mon Jan 30 20:26:54 2017 us=575 client/44.33.22.11:51965 TLS: soft reset sec=-150 bytes=75320841/67108864 pkts=84686/0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement