> Sent: Monday, January 30, 2023 at 6:08 PM
> From: "Lev Stipakov" <lstipa...@gmail.com>
> To: "Stella Ashburne" <rewe...@gmx.com>
> Cc: openvpn-users@lists.sourceforge.net
> Subject: Re: [Openvpn-users] OpenVPN-2.6.0-I003-amd64.msi does not work on
> Microsoft Windows 11 if ovpn-dco is enabled
>
> Hi Stella,
>
Hi Lev
> Please post an openvpn log file with verb 4.
>
Part 2 of 2
Please find below the config file with "verb 4" and "--disable-dco" parameters
and the connection log.
My Mozilla Firefox is able to open websites when the dco is disabled.
client
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
verb 4
remote-cert-tls server
ping 10
ping-restart 60
sndbuf 524288
rcvbuf 524288
cipher AES-256-CBC
--disable-dco
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
proto tcp4
pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"
auth-user-pass password.txt
auth-nocache
ca ca.crt
service vpnprovideropenvpn
block-outside-dns
remote-random
remote [ip-address-redacted] 443
2023-01-30 13:03:29 us=421000 DEPRECATED OPTION: --cipher set to 'AES-256-CBC'
but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305).
OpenVPN ignores --cipher for cipher negotiations.
2023-01-30 13:03:29 us=421000 Current Parameter Settings:
2023-01-30 13:03:29 us=421000 config = 'us.ovpn'
2023-01-30 13:03:29 us=421000 mode = 0
2023-01-30 13:03:29 us=421000 show_ciphers = DISABLED
2023-01-30 13:03:29 us=421000 show_digests = DISABLED
2023-01-30 13:03:29 us=421000 show_engines = DISABLED
2023-01-30 13:03:29 us=421000 genkey = DISABLED
2023-01-30 13:03:29 us=421000 genkey_filename = '[UNDEF]'
2023-01-30 13:03:29 us=421000 key_pass_file = '[UNDEF]'
2023-01-30 13:03:29 us=421000 show_tls_ciphers = DISABLED
2023-01-30 13:03:29 us=421000 connect_retry_max = 0
2023-01-30 13:03:29 us=421000 Connection profiles [0]:
2023-01-30 13:03:29 us=421000 proto = tcp4-client
2023-01-30 13:03:29 us=421000 local = '[UNDEF]'
2023-01-30 13:03:29 us=421000 local_port = '[UNDEF]'
2023-01-30 13:03:29 us=421000 remote = 'ip-address-redacted'
2023-01-30 13:03:29 us=421000 remote_port = '443'
2023-01-30 13:03:29 us=421000 remote_float = DISABLED
2023-01-30 13:03:29 us=421000 bind_defined = DISABLED
2023-01-30 13:03:29 us=421000 bind_local = DISABLED
2023-01-30 13:03:29 us=421000 bind_ipv6_only = DISABLED
2023-01-30 13:03:29 us=421000 connect_retry_seconds = 1
2023-01-30 13:03:29 us=421000 connect_timeout = 120
2023-01-30 13:03:29 us=421000 socks_proxy_server = '[UNDEF]'
2023-01-30 13:03:29 us=421000 socks_proxy_port = '[UNDEF]'
2023-01-30 13:03:29 us=421000 tun_mtu = 1500
2023-01-30 13:03:29 us=421000 tun_mtu_defined = ENABLED
2023-01-30 13:03:29 us=421000 link_mtu = 1500
2023-01-30 13:03:29 us=421000 link_mtu_defined = DISABLED
2023-01-30 13:03:29 us=421000 tun_mtu_extra = 0
2023-01-30 13:03:29 us=421000 tun_mtu_extra_defined = DISABLED
2023-01-30 13:03:29 us=421000 tls_mtu = 1250
2023-01-30 13:03:29 us=421000 mtu_discover_type = -1
2023-01-30 13:03:29 us=421000 fragment = 0
2023-01-30 13:03:29 us=421000 mssfix = 1492
2023-01-30 13:03:29 us=421000 mssfix_encap = ENABLED
2023-01-30 13:03:29 us=421000 mssfix_fixed = DISABLED
2023-01-30 13:03:29 us=421000 explicit_exit_notification = 0
2023-01-30 13:03:29 us=421000 tls_auth_file = '[UNDEF]'
2023-01-30 13:03:29 us=421000 key_direction = not set
2023-01-30 13:03:29 us=421000 tls_crypt_file = '[UNDEF]'
2023-01-30 13:03:29 us=421000 tls_crypt_v2_file = '[UNDEF]'
```Connection profiles from [1] to [62] deleted to save space```
2023-01-30 13:03:29 us=437000 Connection profiles [63]:
2023-01-30 13:03:29 us=437000 proto = tcp4-client
2023-01-30 13:03:29 us=437000 local = '[UNDEF]'
2023-01-30 13:03:29 us=437000 local_port = '[UNDEF]'
2023-01-30 13:03:29 us=437000 remote = 'ip-address-redacted'
2023-01-30 13:03:29 us=437000 remote_port = '443'
2023-01-30 13:03:29 us=437000 remote_float = DISABLED
2023-01-30 13:03:29 us=437000 bind_defined = DISABLED
2023-01-30 13:03:29 us=437000 bind_local = DISABLED
2023-01-30 13:03:29 us=437000 bind_ipv6_only = DISABLED
2023-01-30 13:03:29 us=437000 connect_retry_seconds = 1
2023-01-30 13:03:29 us=437000 connect_timeout = 120
2023-01-30 13:03:29 us=437000 socks_proxy_server = '[UNDEF]'
2023-01-30 13:03:29 us=437000 socks_proxy_port = '[UNDEF]'
2023-01-30 13:03:29 us=437000 tun_mtu = 1500
2023-01-30 13:03:29 us=437000 tun_mtu_defined = ENABLED
2023-01-30 13:03:29 us=437000 link_mtu = 1500
2023-01-30 13:03:29 us=437000 link_mtu_defined = DISABLED
2023-01-30 13:03:29 us=437000 tun_mtu_extra = 0
2023-01-30 13:03:29 us=437000 tun_mtu_extra_defined = DISABLED
2023-01-30 13:03:29 us=437000 tls_mtu = 1250
2023-01-30 13:03:29 us=437000 mtu_discover_type = -1
2023-01-30 13:03:29 us=437000 fragment = 0
2023-01-30 13:03:29 us=437000 mssfix = 1492
2023-01-30 13:03:29 us=437000 mssfix_encap = ENABLED
2023-01-30 13:03:29 us=437000 mssfix_fixed = DISABLED
2023-01-30 13:03:29 us=437000 explicit_exit_notification = 0
2023-01-30 13:03:29 us=437000 tls_auth_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 key_direction = not set
2023-01-30 13:03:29 us=437000 tls_crypt_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 tls_crypt_v2_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 Connection profiles END
2023-01-30 13:03:29 us=437000 remote_random = ENABLED
2023-01-30 13:03:29 us=437000 ipchange = '[UNDEF]'
2023-01-30 13:03:29 us=437000 dev = 'tun'
2023-01-30 13:03:29 us=437000 dev_type = '[UNDEF]'
2023-01-30 13:03:29 us=437000 dev_node = '[UNDEF]'
2023-01-30 13:03:29 us=437000 tuntap_options.disable_dco = ENABLED
2023-01-30 13:03:29 us=437000 lladdr = '[UNDEF]'
2023-01-30 13:03:29 us=437000 topology = 1
2023-01-30 13:03:29 us=437000 ifconfig_local = '[UNDEF]'
2023-01-30 13:03:29 us=437000 ifconfig_remote_netmask = '[UNDEF]'
2023-01-30 13:03:29 us=437000 ifconfig_noexec = DISABLED
2023-01-30 13:03:29 us=437000 ifconfig_nowarn = DISABLED
2023-01-30 13:03:29 us=437000 ifconfig_ipv6_local = '[UNDEF]'
2023-01-30 13:03:29 us=437000 ifconfig_ipv6_netbits = 0
2023-01-30 13:03:29 us=437000 ifconfig_ipv6_remote = '[UNDEF]'
2023-01-30 13:03:29 us=437000 shaper = 0
2023-01-30 13:03:29 us=437000 mtu_test = 0
2023-01-30 13:03:29 us=437000 mlock = DISABLED
2023-01-30 13:03:29 us=437000 keepalive_ping = 0
2023-01-30 13:03:29 us=437000 keepalive_timeout = 0
2023-01-30 13:03:29 us=437000 inactivity_timeout = 0
2023-01-30 13:03:29 us=437000 session_timeout = 0
2023-01-30 13:03:29 us=437000 inactivity_minimum_bytes = 0
2023-01-30 13:03:29 us=437000 ping_send_timeout = 10
2023-01-30 13:03:29 us=437000 ping_rec_timeout = 60
2023-01-30 13:03:29 us=437000 ping_rec_timeout_action = 2
2023-01-30 13:03:29 us=437000 ping_timer_remote = DISABLED
2023-01-30 13:03:29 us=437000 remap_sigusr1 = 0
2023-01-30 13:03:29 us=437000 persist_tun = ENABLED
2023-01-30 13:03:29 us=437000 persist_local_ip = DISABLED
2023-01-30 13:03:29 us=437000 persist_remote_ip = DISABLED
2023-01-30 13:03:29 us=437000 persist_key = ENABLED
2023-01-30 13:03:29 us=437000 passtos = DISABLED
2023-01-30 13:03:29 us=437000 resolve_retry_seconds = 1000000000
2023-01-30 13:03:29 us=437000 resolve_in_advance = DISABLED
2023-01-30 13:03:29 us=437000 username = '[UNDEF]'
2023-01-30 13:03:29 us=437000 groupname = '[UNDEF]'
2023-01-30 13:03:29 us=437000 chroot_dir = '[UNDEF]'
2023-01-30 13:03:29 us=437000 cd_dir = '[UNDEF]'
2023-01-30 13:03:29 us=437000 writepid = '[UNDEF]'
2023-01-30 13:03:29 us=437000 up_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 down_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 down_pre = DISABLED
2023-01-30 13:03:29 us=437000 up_restart = DISABLED
2023-01-30 13:03:29 us=437000 up_delay = DISABLED
2023-01-30 13:03:29 us=437000 daemon = DISABLED
2023-01-30 13:03:29 us=437000 log = ENABLED
2023-01-30 13:03:29 us=437000 suppress_timestamps = DISABLED
2023-01-30 13:03:29 us=437000 machine_readable_output = DISABLED
2023-01-30 13:03:29 us=437000 nice = 0
2023-01-30 13:03:29 us=437000 verbosity = 4
2023-01-30 13:03:29 us=437000 mute = 0
2023-01-30 13:03:29 us=437000 status_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 status_file_version = 1
2023-01-30 13:03:29 us=437000 status_file_update_freq = 60
2023-01-30 13:03:29 us=437000 occ = ENABLED
2023-01-30 13:03:29 us=437000 rcvbuf = 524288
2023-01-30 13:03:29 us=437000 sndbuf = 524288
2023-01-30 13:03:29 us=437000 sockflags = 0
2023-01-30 13:03:29 us=437000 fast_io = DISABLED
2023-01-30 13:03:29 us=437000 comp.alg = 0
2023-01-30 13:03:29 us=437000 comp.flags = 24
2023-01-30 13:03:29 us=437000 route_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 route_default_gateway = '[UNDEF]'
2023-01-30 13:03:29 us=437000 route_default_metric = 0
2023-01-30 13:03:29 us=437000 route_noexec = DISABLED
2023-01-30 13:03:29 us=437000 route_delay = 5
2023-01-30 13:03:29 us=437000 route_delay_window = 30
2023-01-30 13:03:29 us=437000 route_delay_defined = ENABLED
2023-01-30 13:03:29 us=437000 route_nopull = DISABLED
2023-01-30 13:03:29 us=437000 route_gateway_via_dhcp = DISABLED
2023-01-30 13:03:29 us=437000 allow_pull_fqdn = DISABLED
2023-01-30 13:03:29 us=437000 Pull filters:
2023-01-30 13:03:29 us=437000 ignore "route-ipv6"
2023-01-30 13:03:29 us=437000 ignore "ifconfig-ipv6"
2023-01-30 13:03:29 us=437000 ignore "route-method"
2023-01-30 13:03:29 us=437000 management_addr = '127.0.0.1'
2023-01-30 13:03:29 us=437000 management_port = '25373'
2023-01-30 13:03:29 us=437000 management_user_pass = 'stdin'
2023-01-30 13:03:29 us=437000 management_log_history_cache = 250
2023-01-30 13:03:29 us=437000 management_echo_buffer_size = 100
2023-01-30 13:03:29 us=437000 management_client_user = '[UNDEF]'
2023-01-30 13:03:29 us=437000 management_client_group = '[UNDEF]'
2023-01-30 13:03:29 us=437000 management_flags = 6
2023-01-30 13:03:29 us=437000 shared_secret_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 key_direction = not set
2023-01-30 13:03:29 us=437000 ciphername = 'AES-256-CBC'
2023-01-30 13:03:29 us=437000 ncp_ciphers =
'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305'
2023-01-30 13:03:29 us=437000 authname = 'SHA1'
2023-01-30 13:03:29 us=437000 engine = DISABLED
2023-01-30 13:03:29 us=437000 replay = ENABLED
2023-01-30 13:03:29 us=437000 mute_replay_warnings = DISABLED
2023-01-30 13:03:29 us=437000 replay_window = 64
2023-01-30 13:03:29 us=437000 replay_time = 15
2023-01-30 13:03:29 us=437000 packet_id_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 test_crypto = DISABLED
2023-01-30 13:03:29 us=437000 tls_server = DISABLED
2023-01-30 13:03:29 us=437000 tls_client = ENABLED
2023-01-30 13:03:29 us=437000 ca_file = 'ca.crt'
2023-01-30 13:03:29 us=437000 ca_path = '[UNDEF]'
2023-01-30 13:03:29 us=437000 dh_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 cert_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 extra_certs_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 priv_key_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 pkcs12_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 cryptoapi_cert = '[UNDEF]'
2023-01-30 13:03:29 us=437000 cipher_list =
'TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA'
2023-01-30 13:03:29 us=437000 cipher_list_tls13 = '[UNDEF]'
2023-01-30 13:03:29 us=437000 tls_cert_profile = '[UNDEF]'
2023-01-30 13:03:29 us=437000 tls_verify = '[UNDEF]'
2023-01-30 13:03:29 us=437000 tls_export_cert = '[UNDEF]'
2023-01-30 13:03:29 us=437000 verify_x509_type = 0
2023-01-30 13:03:29 us=437000 verify_x509_name = '[UNDEF]'
2023-01-30 13:03:29 us=437000 crl_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 ns_cert_type = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 65535
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_ku[i] = 0
2023-01-30 13:03:29 us=437000 remote_cert_eku = 'TLS Web Server
Authentication'
2023-01-30 13:03:29 us=437000 ssl_flags = 192
2023-01-30 13:03:29 us=437000 tls_timeout = 2
2023-01-30 13:03:29 us=437000 renegotiate_bytes = -1
2023-01-30 13:03:29 us=437000 renegotiate_packets = 0
2023-01-30 13:03:29 us=437000 renegotiate_seconds = 3600
2023-01-30 13:03:29 us=437000 handshake_window = 60
2023-01-30 13:03:29 us=437000 transition_window = 3600
2023-01-30 13:03:29 us=437000 single_session = DISABLED
2023-01-30 13:03:29 us=437000 push_peer_info = DISABLED
2023-01-30 13:03:29 us=437000 tls_exit = DISABLED
2023-01-30 13:03:29 us=437000 tls_crypt_v2_metadata = '[UNDEF]'
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_protected_authentication = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_private_mode = 00000000
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_cert_private = DISABLED
2023-01-30 13:03:29 us=437000 pkcs11_pin_cache_period = -1
2023-01-30 13:03:29 us=437000 pkcs11_id = '[UNDEF]'
2023-01-30 13:03:29 us=437000 pkcs11_id_management = DISABLED
2023-01-30 13:03:29 us=437000 server_network = 0.0.0.0
2023-01-30 13:03:29 us=437000 server_netmask = 0.0.0.0
2023-01-30 13:03:29 us=437000 server_network_ipv6 = ::
2023-01-30 13:03:29 us=437000 server_netbits_ipv6 = 0
2023-01-30 13:03:29 us=437000 server_bridge_ip = 0.0.0.0
2023-01-30 13:03:29 us=437000 server_bridge_netmask = 0.0.0.0
2023-01-30 13:03:29 us=437000 server_bridge_pool_start = 0.0.0.0
2023-01-30 13:03:29 us=437000 server_bridge_pool_end = 0.0.0.0
2023-01-30 13:03:29 us=437000 ifconfig_pool_defined = DISABLED
2023-01-30 13:03:29 us=437000 ifconfig_pool_start = 0.0.0.0
2023-01-30 13:03:29 us=437000 ifconfig_pool_end = 0.0.0.0
2023-01-30 13:03:29 us=437000 ifconfig_pool_netmask = 0.0.0.0
2023-01-30 13:03:29 us=437000 ifconfig_pool_persist_filename = '[UNDEF]'
2023-01-30 13:03:29 us=437000 ifconfig_pool_persist_refresh_freq = 600
2023-01-30 13:03:29 us=437000 ifconfig_ipv6_pool_defined = DISABLED
2023-01-30 13:03:29 us=437000 ifconfig_ipv6_pool_base = ::
2023-01-30 13:03:29 us=437000 ifconfig_ipv6_pool_netbits = 0
2023-01-30 13:03:29 us=437000 n_bcast_buf = 256
2023-01-30 13:03:29 us=437000 tcp_queue_limit = 64
2023-01-30 13:03:29 us=437000 real_hash_size = 256
2023-01-30 13:03:29 us=437000 virtual_hash_size = 256
2023-01-30 13:03:29 us=437000 client_connect_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 learn_address_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 client_disconnect_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 client_crresponse_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 client_config_dir = '[UNDEF]'
2023-01-30 13:03:29 us=437000 ccd_exclusive = DISABLED
2023-01-30 13:03:29 us=437000 tmp_dir = 'C:\Users\Stella\AppData\Local\Temp\'
2023-01-30 13:03:29 us=437000 push_ifconfig_defined = DISABLED
2023-01-30 13:03:29 us=437000 push_ifconfig_local = 0.0.0.0
2023-01-30 13:03:29 us=437000 push_ifconfig_remote_netmask = 0.0.0.0
2023-01-30 13:03:29 us=437000 push_ifconfig_ipv6_defined = DISABLED
2023-01-30 13:03:29 us=437000 push_ifconfig_ipv6_local = ::/0
2023-01-30 13:03:29 us=437000 push_ifconfig_ipv6_remote = ::
2023-01-30 13:03:29 us=437000 enable_c2c = DISABLED
2023-01-30 13:03:29 us=437000 duplicate_cn = DISABLED
2023-01-30 13:03:29 us=437000 cf_max = 0
2023-01-30 13:03:29 us=437000 cf_per = 0
2023-01-30 13:03:29 us=437000 cf_initial_max = 100
2023-01-30 13:03:29 us=437000 cf_initial_per = 10
2023-01-30 13:03:29 us=437000 max_clients = 1024
2023-01-30 13:03:29 us=437000 max_routes_per_client = 256
2023-01-30 13:03:29 us=437000 auth_user_pass_verify_script = '[UNDEF]'
2023-01-30 13:03:29 us=437000 auth_user_pass_verify_script_via_file = DISABLED
2023-01-30 13:03:29 us=437000 auth_token_generate = DISABLED
2023-01-30 13:03:29 us=437000 auth_token_lifetime = 0
2023-01-30 13:03:29 us=437000 auth_token_secret_file = '[UNDEF]'
2023-01-30 13:03:29 us=437000 vlan_tagging = DISABLED
2023-01-30 13:03:29 us=437000 vlan_accept = all
2023-01-30 13:03:29 us=437000 vlan_pvid = 1
2023-01-30 13:03:29 us=437000 client = ENABLED
2023-01-30 13:03:29 us=437000 pull = ENABLED
2023-01-30 13:03:29 us=437000 auth_user_pass_file = 'password.txt'
2023-01-30 13:03:29 us=437000 show_net_up = DISABLED
2023-01-30 13:03:29 us=437000 route_method = 3
2023-01-30 13:03:29 us=437000 block_outside_dns = ENABLED
2023-01-30 13:03:29 us=437000 ip_win32_defined = DISABLED
2023-01-30 13:03:29 us=437000 ip_win32_type = 3
2023-01-30 13:03:29 us=437000 dhcp_masq_offset = 0
2023-01-30 13:03:29 us=437000 dhcp_lease_time = 31536000
2023-01-30 13:03:29 us=437000 tap_sleep = 0
2023-01-30 13:03:29 us=437000 dhcp_options = DISABLED
2023-01-30 13:03:29 us=437000 dhcp_renew = DISABLED
2023-01-30 13:03:29 us=437000 dhcp_pre_release = DISABLED
2023-01-30 13:03:29 us=437000 domain = '[UNDEF]'
2023-01-30 13:03:29 us=437000 netbios_scope = '[UNDEF]'
2023-01-30 13:03:29 us=437000 netbios_node_type = 0
2023-01-30 13:03:29 us=437000 disable_nbt = DISABLED
2023-01-30 13:03:29 us=437000 OpenVPN 2.6.0 [git:v2.6.0/b999466418dddb89]
Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] [DCO] built on Jan 25
2023
2023-01-30 13:03:29 us=437000 Windows version 10.0 (Windows 10 or greater),
amd64 executable
2023-01-30 13:03:29 us=437000 library versions: OpenSSL 3.0.7 1 Nov 2022, LZO
2.10
2023-01-30 13:03:29 us=437000 MANAGEMENT: TCP Socket listening on
[AF_INET]127.0.0.1:25373
2023-01-30 13:03:29 us=437000 Need hold release from management interface,
waiting...
2023-01-30 13:03:29 us=921000 MANAGEMENT: Client connected from
[AF_INET]127.0.0.1:51859
2023-01-30 13:03:30 us=31000 MANAGEMENT: CMD 'state on'
2023-01-30 13:03:30 us=31000 MANAGEMENT: CMD 'log on all'
2023-01-30 13:03:30 us=125000 MANAGEMENT: CMD 'echo on all'
2023-01-30 13:03:30 us=125000 MANAGEMENT: CMD 'bytecount 5'
2023-01-30 13:03:30 us=125000 MANAGEMENT: CMD 'state'
2023-01-30 13:03:30 us=125000 MANAGEMENT: CMD 'hold off'
2023-01-30 13:03:30 us=125000 MANAGEMENT: CMD 'hold release'
2023-01-30 13:03:30 us=125000 Control Channel MTU parms [ mss_fix:0 max_frag:0
tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
2023-01-30 13:03:30 us=125000 Data Channel MTU parms [ mss_fix:0 max_frag:0
tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
2023-01-30 13:03:30 us=125000 TCP/UDP: Preserving recently used remote address:
[AF_INET]ip-address-redacted:443
2023-01-30 13:03:30 us=125000 Socket Buffers: R=[65536->524288]
S=[65536->524288]
2023-01-30 13:03:30 us=125000 Attempting to establish TCP connection with
[AF_INET]ip-address-redacted:443
2023-01-30 13:03:30 us=125000 MANAGEMENT: >STATE:1675141410,TCP_CONNECT,,,,,,
2023-01-30 13:03:30 us=390000 TCP connection established with
[AF_INET]ip-address-redacted:443
2023-01-30 13:03:30 us=390000 TCPv4_CLIENT link local: (not bound)
2023-01-30 13:03:30 us=390000 TCPv4_CLIENT link remote:
[AF_INET]ip-address-redacted:443
2023-01-30 13:03:30 us=390000 MANAGEMENT: >STATE:1675141410,WAIT,,,,,,
2023-01-30 13:03:30 us=625000 MANAGEMENT: >STATE:1675141410,AUTH,,,,,,
2023-01-30 13:03:30 us=625000 TLS: Initial packet from
[AF_INET]ip-address-redacted:443, sid=a2dcb24a f203aee8
2023-01-30 13:03:30 us=843000 VERIFY OK: depth=2, C=US, ST=CA, L=LA,
OU=vpnprovider, CN=vpnprovider Root CA v2, emailAddress=secur...@vpnprovider.net
2023-01-30 13:03:30 us=843000 VERIFY OK: depth=1, C=US, ST=CA, OU=vpnprovider,
CN=vpnprovider Intermediate CA v5, emailAddress=secur...@vpnprovider.net
2023-01-30 13:03:30 us=843000 VERIFY KU OK
2023-01-30 13:03:30 us=843000 Validating certificate extended key usage
2023-01-30 13:03:30 us=843000 ++ Certificate has EKU (str) TLS Web Server
Authentication, expects TLS Web Server Authentication
2023-01-30 13:03:30 us=843000 VERIFY EKU OK
2023-01-30 13:03:30 us=843000 VERIFY OK: depth=0, C=US, ST=CA, OU=vpnprovider,
CN=us-dal-ovpn-101.vpnprovider.net, emailAddress=secur...@vpnprovider.net
2023-01-30 13:03:31 us=343000 Control Channel: TLSv1.3, cipher TLSv1.3
TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature:
RSA-SHA256
2023-01-30 13:03:31 us=343000 [us-dal-ovpn-101.vpnprovider.net] Peer Connection
Initiated with [AF_INET]ip-address-redacted:443
2023-01-30 13:03:31 us=343000 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL
reinit_src=1
2023-01-30 13:03:31 us=343000 TLS: tls_multi_process: initial untrusted session
promoted to trusted
2023-01-30 13:03:32 us=453000 MANAGEMENT: >STATE:1675141412,GET_CONFIG,,,,,,
2023-01-30 13:03:32 us=453000 SENT CONTROL [us-111.vpnprovider.net]:
'PUSH_REQUEST' (status=1)
2023-01-30 13:03:33 us=812000 PUSH: Received control message:
'PUSH_REPLY,dhcp-option DNS 10.5.0.1,redirect-gateway def1
bypass-dhcp,route-ipv6 0000::/2,route-ipv6 4000::/2,route-ipv6
8000::/2,route-ipv6 C000::/2,comp-lzo no,route-gateway 10.5.0.1,topology
subnet,socket-flags TCP_NODELAY,ifconfig-ipv6 fdda:d0d0:cafe:443::1004/64
fdda:d0d0:cafe:443::,ifconfig 10.5.0.6 255.255.0.0,peer-id 0,cipher
CHACHA20-POLY1305'
2023-01-30 13:03:33 us=812000 Pushed option removed by filter: 'route-ipv6
0000::/2'
2023-01-30 13:03:33 us=812000 Pushed option removed by filter: 'route-ipv6
4000::/2'
2023-01-30 13:03:33 us=812000 Pushed option removed by filter: 'route-ipv6
8000::/2'
2023-01-30 13:03:33 us=812000 Pushed option removed by filter: 'route-ipv6
C000::/2'
2023-01-30 13:03:33 us=812000 Pushed option removed by filter: 'ifconfig-ipv6
fdda:d0d0:cafe:443::1004/64 fdda:d0d0:cafe:443::'
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: compression parms modified
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: --socket-flags option modified
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: --ifconfig/up options modified
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: route options modified
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: route-related options modified
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option
options modified
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: peer-id set
2023-01-30 13:03:33 us=812000 OPTIONS IMPORT: data channel crypto options
modified
2023-01-30 13:03:33 us=812000 interactive service msg_channel=584
2023-01-30 13:03:33 us=843000 open_tun
2023-01-30 13:03:33 us=859000 tap-windows6 device [OpenVPN TAP-Windows6] opened
2023-01-30 13:03:33 us=859000 TAP-Windows Driver Version 9.24
2023-01-30 13:03:33 us=859000 TAP-Windows MTU=1500
2023-01-30 13:03:33 us=859000 Set TAP-Windows TUN subnet mode
network/local/netmask = 10.5.0.0/10.5.0.6/255.255.0.0 [SUCCEEDED]
2023-01-30 13:03:33 us=859000 Notified TAP-Windows driver to set a DHCP
IP/netmask of 10.5.0.6/255.255.0.0 on interface
{671B149B-9599-493A-BE18-B374E8EFADE6} [DHCP-serv: 10.5.0.0, lease-time:
31536000]
2023-01-30 13:03:33 us=859000 DHCP option string: 06040a05 0001
2023-01-30 13:03:33 us=859000 Successful ARP Flush on interface [9]
{671B149B-9599-493A-BE18-B374E8EFADE6}
2023-01-30 13:03:33 us=875000 do_ifconfig, ipv4=1, ipv6=0
2023-01-30 13:03:33 us=875000 MANAGEMENT:
>STATE:1675141413,ASSIGN_IP,,10.5.0.6,,,,
2023-01-30 13:03:33 us=875000 IPv4 MTU set to 1500 on interface 9 using service
2023-01-30 13:03:33 us=875000 Blocking outside dns using service succeeded.
2023-01-30 13:03:33 us=875000 Data Channel: using negotiated cipher
'CHACHA20-POLY1305'
2023-01-30 13:03:33 us=875000 Data Channel MTU parms [ mss_fix:1385 max_frag:0
tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ]
2023-01-30 13:03:33 us=875000 Outgoing Data Channel: Cipher 'CHACHA20-POLY1305'
initialized with 256 bit key
2023-01-30 13:03:33 us=875000 Incoming Data Channel: Cipher 'CHACHA20-POLY1305'
initialized with 256 bit key
2023-01-30 13:03:39 us=15000 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
2023-01-30 13:03:39 us=15000 C:\Windows\system32\route.exe ADD
ip-address-redacted MASK 255.255.255.255 192.168.1.254
2023-01-30 13:03:39 us=15000 Route addition via service succeeded
2023-01-30 13:03:39 us=15000 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK
128.0.0.0 10.5.0.1
2023-01-30 13:03:39 us=15000 Route addition via service succeeded
2023-01-30 13:03:39 us=31000 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK
128.0.0.0 10.5.0.1
2023-01-30 13:03:39 us=31000 Route addition via service succeeded
2023-01-30 13:03:39 us=31000 Initialization Sequence Completed
2023-01-30 13:03:39 us=31000 MANAGEMENT:
>STATE:1675141419,CONNECTED,SUCCESS,10.5.0.6,ip-address-redacted,443,192.168.10.101,51860
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
