1 | Fri Dec 9 23:21:38 2016 us=663541 Current Parameter Settings: |
---|
2 | Fri Dec 9 23:21:38 2016 us=663579 config = 'AWS.conf' |
---|
3 | Fri Dec 9 23:21:38 2016 us=663587 mode = 0 |
---|
4 | Fri Dec 9 23:21:38 2016 us=663592 persist_config = DISABLED |
---|
5 | Fri Dec 9 23:21:38 2016 us=663597 persist_mode = 1 |
---|
6 | Fri Dec 9 23:21:38 2016 us=663602 show_ciphers = DISABLED |
---|
7 | Fri Dec 9 23:21:38 2016 us=663606 show_digests = DISABLED |
---|
8 | Fri Dec 9 23:21:38 2016 us=663610 show_engines = DISABLED |
---|
9 | Fri Dec 9 23:21:38 2016 us=663614 genkey = DISABLED |
---|
10 | Fri Dec 9 23:21:38 2016 us=663619 key_pass_file = '[UNDEF]' |
---|
11 | Fri Dec 9 23:21:38 2016 us=663623 show_tls_ciphers = DISABLED |
---|
12 | Fri Dec 9 23:21:38 2016 us=663627 Connection profiles [default]: |
---|
13 | Fri Dec 9 23:21:38 2016 us=663632 proto = udp |
---|
14 | Fri Dec 9 23:21:38 2016 us=663636 local = '[UNDEF]' |
---|
15 | Fri Dec 9 23:21:38 2016 us=663640 local_port = 0 |
---|
16 | Fri Dec 9 23:21:38 2016 us=663644 remote = 'x.x.x.x' |
---|
17 | Fri Dec 9 23:21:38 2016 us=663648 remote_port = 1194 |
---|
18 | Fri Dec 9 23:21:38 2016 us=663653 remote_float = DISABLED |
---|
19 | Fri Dec 9 23:21:38 2016 us=663657 bind_defined = DISABLED |
---|
20 | Fri Dec 9 23:21:38 2016 us=663661 bind_local = DISABLED |
---|
21 | Fri Dec 9 23:21:38 2016 us=663665 connect_retry_seconds = 5 |
---|
22 | Fri Dec 9 23:21:38 2016 us=663670 connect_timeout = 10 |
---|
23 | Fri Dec 9 23:21:38 2016 us=663674 connect_retry_max = 0 |
---|
24 | Fri Dec 9 23:21:38 2016 us=663678 tun_mtu = 1500 |
---|
25 | Fri Dec 9 23:21:38 2016 us=663682 tun_mtu_defined = ENABLED |
---|
26 | Fri Dec 9 23:21:38 2016 us=663687 link_mtu = 1500 |
---|
27 | Fri Dec 9 23:21:38 2016 us=663691 link_mtu_defined = DISABLED |
---|
28 | Fri Dec 9 23:21:38 2016 us=663695 tun_mtu_extra = 0 |
---|
29 | Fri Dec 9 23:21:38 2016 us=663699 tun_mtu_extra_defined = DISABLED |
---|
30 | Fri Dec 9 23:21:38 2016 us=663703 mtu_discover_type = -1 |
---|
31 | Fri Dec 9 23:21:38 2016 us=663708 fragment = 0 |
---|
32 | Fri Dec 9 23:21:38 2016 us=663712 mssfix = 1450 |
---|
33 | Fri Dec 9 23:21:38 2016 us=663716 explicit_exit_notification = 0 |
---|
34 | Fri Dec 9 23:21:38 2016 us=663720 Connection profiles END |
---|
35 | Fri Dec 9 23:21:38 2016 us=663724 remote_random = DISABLED |
---|
36 | Fri Dec 9 23:21:38 2016 us=663728 ipchange = '[UNDEF]' |
---|
37 | Fri Dec 9 23:21:38 2016 us=663733 dev = 'tun0' |
---|
38 | Fri Dec 9 23:21:38 2016 us=663737 dev_type = '[UNDEF]' |
---|
39 | Fri Dec 9 23:21:38 2016 us=663741 dev_node = '[UNDEF]' |
---|
40 | Fri Dec 9 23:21:38 2016 us=663745 lladdr = '[UNDEF]' |
---|
41 | Fri Dec 9 23:21:38 2016 us=663749 topology = 1 |
---|
42 | Fri Dec 9 23:21:38 2016 us=663753 tun_ipv6 = DISABLED |
---|
43 | Fri Dec 9 23:21:38 2016 us=663757 ifconfig_local = '[UNDEF]' |
---|
44 | Fri Dec 9 23:21:38 2016 us=663761 ifconfig_remote_netmask = '[UNDEF]' |
---|
45 | Fri Dec 9 23:21:38 2016 us=663766 ifconfig_noexec = DISABLED |
---|
46 | Fri Dec 9 23:21:38 2016 us=663770 ifconfig_nowarn = DISABLED |
---|
47 | Fri Dec 9 23:21:38 2016 us=663774 ifconfig_ipv6_local = '[UNDEF]' |
---|
48 | Fri Dec 9 23:21:38 2016 us=663778 ifconfig_ipv6_netbits = 0 |
---|
49 | Fri Dec 9 23:21:38 2016 us=663782 ifconfig_ipv6_remote = '[UNDEF]' |
---|
50 | Fri Dec 9 23:21:38 2016 us=663786 shaper = 0 |
---|
51 | Fri Dec 9 23:21:38 2016 us=663790 mtu_test = 0 |
---|
52 | Fri Dec 9 23:21:38 2016 us=663795 mlock = DISABLED |
---|
53 | Fri Dec 9 23:21:38 2016 us=663799 keepalive_ping = 0 |
---|
54 | Fri Dec 9 23:21:38 2016 us=663803 keepalive_timeout = 0 |
---|
55 | Fri Dec 9 23:21:38 2016 us=663807 inactivity_timeout = 0 |
---|
56 | Fri Dec 9 23:21:38 2016 us=663811 ping_send_timeout = 0 |
---|
57 | Fri Dec 9 23:21:38 2016 us=663815 ping_rec_timeout = 0 |
---|
58 | Fri Dec 9 23:21:38 2016 us=663819 ping_rec_timeout_action = 0 |
---|
59 | Fri Dec 9 23:21:38 2016 us=663823 ping_timer_remote = DISABLED |
---|
60 | Fri Dec 9 23:21:38 2016 us=663827 remap_sigusr1 = 0 |
---|
61 | Fri Dec 9 23:21:38 2016 us=663831 persist_tun = ENABLED |
---|
62 | Fri Dec 9 23:21:38 2016 us=663835 persist_local_ip = DISABLED |
---|
63 | Fri Dec 9 23:21:38 2016 us=663840 persist_remote_ip = DISABLED |
---|
64 | Fri Dec 9 23:21:38 2016 us=663844 persist_key = ENABLED |
---|
65 | Fri Dec 9 23:21:38 2016 us=663848 passtos = DISABLED |
---|
66 | Fri Dec 9 23:21:38 2016 us=663852 resolve_retry_seconds = 1000000000 |
---|
67 | Fri Dec 9 23:21:38 2016 us=663856 username = '[UNDEF]' |
---|
68 | Fri Dec 9 23:21:38 2016 us=663860 groupname = '[UNDEF]' |
---|
69 | Fri Dec 9 23:21:38 2016 us=663864 chroot_dir = '[UNDEF]' |
---|
70 | Fri Dec 9 23:21:38 2016 us=663869 cd_dir = '/etc/openvpn/client' |
---|
71 | Fri Dec 9 23:21:38 2016 us=663875 writepid = '[UNDEF]' |
---|
72 | Fri Dec 9 23:21:38 2016 us=663879 up_script = '/etc/openvpn/up.sh' |
---|
73 | Fri Dec 9 23:21:38 2016 us=663884 down_script = '/etc/openvpn/down.sh' |
---|
74 | Fri Dec 9 23:21:38 2016 us=663888 down_pre = DISABLED |
---|
75 | Fri Dec 9 23:21:38 2016 us=663892 up_restart = DISABLED |
---|
76 | Fri Dec 9 23:21:38 2016 us=663896 up_delay = DISABLED |
---|
77 | Fri Dec 9 23:21:38 2016 us=663900 daemon = ENABLED |
---|
78 | Fri Dec 9 23:21:38 2016 us=663904 inetd = 0 |
---|
79 | Fri Dec 9 23:21:38 2016 us=663908 log = ENABLED |
---|
80 | Fri Dec 9 23:21:38 2016 us=663912 suppress_timestamps = DISABLED |
---|
81 | Fri Dec 9 23:21:38 2016 us=663916 nice = 0 |
---|
82 | Fri Dec 9 23:21:38 2016 us=663920 verbosity = 5 |
---|
83 | Fri Dec 9 23:21:38 2016 us=663924 mute = 0 |
---|
84 | Fri Dec 9 23:21:38 2016 us=663929 gremlin = 0 |
---|
85 | Fri Dec 9 23:21:38 2016 us=663933 status_file = '[UNDEF]' |
---|
86 | Fri Dec 9 23:21:38 2016 us=663937 status_file_version = 1 |
---|
87 | Fri Dec 9 23:21:38 2016 us=663941 status_file_update_freq = 60 |
---|
88 | Fri Dec 9 23:21:38 2016 us=663945 occ = ENABLED |
---|
89 | Fri Dec 9 23:21:38 2016 us=663949 rcvbuf = 0 |
---|
90 | Fri Dec 9 23:21:38 2016 us=663953 sndbuf = 0 |
---|
91 | Fri Dec 9 23:21:38 2016 us=663957 mark = 0 |
---|
92 | Fri Dec 9 23:21:38 2016 us=663961 sockflags = 0 |
---|
93 | Fri Dec 9 23:21:38 2016 us=663965 fast_io = DISABLED |
---|
94 | Fri Dec 9 23:21:38 2016 us=663969 lzo = 7 |
---|
95 | Fri Dec 9 23:21:38 2016 us=663973 route_script = '[UNDEF]' |
---|
96 | Fri Dec 9 23:21:38 2016 us=663978 route_default_gateway = '[UNDEF]' |
---|
97 | Fri Dec 9 23:21:38 2016 us=663982 route_default_metric = 0 |
---|
98 | Fri Dec 9 23:21:38 2016 us=663986 route_noexec = DISABLED |
---|
99 | Fri Dec 9 23:21:38 2016 us=663990 route_delay = 0 |
---|
100 | Fri Dec 9 23:21:38 2016 us=663994 route_delay_window = 30 |
---|
101 | Fri Dec 9 23:21:38 2016 us=663998 route_delay_defined = DISABLED |
---|
102 | Fri Dec 9 23:21:38 2016 us=664009 route_nopull = DISABLED |
---|
103 | Fri Dec 9 23:21:38 2016 us=664014 route_gateway_via_dhcp = DISABLED |
---|
104 | Fri Dec 9 23:21:38 2016 us=664019 max_routes = 100 |
---|
105 | Fri Dec 9 23:21:38 2016 us=664024 allow_pull_fqdn = DISABLED |
---|
106 | Fri Dec 9 23:21:38 2016 us=664028 management_addr = '[UNDEF]' |
---|
107 | Fri Dec 9 23:21:38 2016 us=664032 management_port = 0 |
---|
108 | Fri Dec 9 23:21:38 2016 us=664037 management_user_pass = '[UNDEF]' |
---|
109 | Fri Dec 9 23:21:38 2016 us=664041 management_log_history_cache = 250 |
---|
110 | Fri Dec 9 23:21:38 2016 us=664045 management_echo_buffer_size = 100 |
---|
111 | Fri Dec 9 23:21:38 2016 us=664049 management_write_peer_info_file = '[UNDEF]' |
---|
112 | Fri Dec 9 23:21:38 2016 us=664054 management_client_user = '[UNDEF]' |
---|
113 | Fri Dec 9 23:21:38 2016 us=664058 management_client_group = '[UNDEF]' |
---|
114 | Fri Dec 9 23:21:38 2016 us=664062 management_flags = 0 |
---|
115 | Fri Dec 9 23:21:38 2016 us=664066 shared_secret_file = '[UNDEF]' |
---|
116 | Fri Dec 9 23:21:38 2016 us=664070 key_direction = 0 |
---|
117 | Fri Dec 9 23:21:38 2016 us=664075 ciphername_defined = ENABLED |
---|
118 | Fri Dec 9 23:21:38 2016 us=664079 ciphername = 'BF-CBC' |
---|
119 | Fri Dec 9 23:21:38 2016 us=664083 authname_defined = ENABLED |
---|
120 | Fri Dec 9 23:21:38 2016 us=664087 authname = 'SHA1' |
---|
121 | Fri Dec 9 23:21:38 2016 us=664091 prng_hash = 'SHA1' |
---|
122 | Fri Dec 9 23:21:38 2016 us=664096 prng_nonce_secret_len = 16 |
---|
123 | Fri Dec 9 23:21:38 2016 us=664100 keysize = 0 |
---|
124 | Fri Dec 9 23:21:38 2016 us=664104 engine = DISABLED |
---|
125 | Fri Dec 9 23:21:38 2016 us=664108 replay = ENABLED |
---|
126 | Fri Dec 9 23:21:38 2016 us=664112 mute_replay_warnings = DISABLED |
---|
127 | Fri Dec 9 23:21:38 2016 us=664117 replay_window = 64 |
---|
128 | Fri Dec 9 23:21:38 2016 us=664121 replay_time = 15 |
---|
129 | Fri Dec 9 23:21:38 2016 us=664125 packet_id_file = '[UNDEF]' |
---|
130 | Fri Dec 9 23:21:38 2016 us=664129 use_iv = ENABLED |
---|
131 | Fri Dec 9 23:21:38 2016 us=664133 test_crypto = DISABLED |
---|
132 | Fri Dec 9 23:21:38 2016 us=664137 tls_server = DISABLED |
---|
133 | Fri Dec 9 23:21:38 2016 us=664141 tls_client = ENABLED |
---|
134 | Fri Dec 9 23:21:38 2016 us=664145 key_method = 2 |
---|
135 | Fri Dec 9 23:21:38 2016 us=664150 ca_file = '/etc/openvpn/cabundle.pem' |
---|
136 | Fri Dec 9 23:21:38 2016 us=664154 ca_path = '[UNDEF]' |
---|
137 | Fri Dec 9 23:21:38 2016 us=664158 dh_file = '[UNDEF]' |
---|
138 | Fri Dec 9 23:21:38 2016 us=664162 cert_file = '/etc/openvpn/aws.pem' |
---|
139 | Fri Dec 9 23:21:38 2016 us=664168 extra_certs_file = '[UNDEF]' |
---|
140 | Fri Dec 9 23:21:38 2016 us=664172 priv_key_file = '/etc/openvpn/aws-key.pem' |
---|
141 | Fri Dec 9 23:21:38 2016 us=664177 pkcs12_file = '[UNDEF]' |
---|
142 | Fri Dec 9 23:21:38 2016 us=664181 cipher_list = '[UNDEF]' |
---|
143 | Fri Dec 9 23:21:38 2016 us=664185 tls_verify = '[UNDEF]' |
---|
144 | Fri Dec 9 23:21:38 2016 us=664190 tls_export_cert = '[UNDEF]' |
---|
145 | Fri Dec 9 23:21:38 2016 us=664194 verify_x509_type = 0 |
---|
146 | Fri Dec 9 23:21:38 2016 us=664198 verify_x509_name = '[UNDEF]' |
---|
147 | Fri Dec 9 23:21:38 2016 us=664202 crl_file = '[UNDEF]' |
---|
148 | Fri Dec 9 23:21:38 2016 us=664206 ns_cert_type = 0 |
---|
149 | Fri Dec 9 23:21:38 2016 us=664211 remote_cert_ku[i] = 160 |
---|
150 | Fri Dec 9 23:21:38 2016 us=664215 remote_cert_ku[i] = 136 |
---|
151 | Fri Dec 9 23:21:38 2016 us=664219 remote_cert_ku[i] = 0 |
---|
152 | Fri Dec 9 23:21:38 2016 us=664223 remote_cert_ku[i] = 0 |
---|
153 | Fri Dec 9 23:21:38 2016 us=664227 remote_cert_ku[i] = 0 |
---|
154 | Fri Dec 9 23:21:38 2016 us=664231 remote_cert_ku[i] = 0 |
---|
155 | Fri Dec 9 23:21:38 2016 us=664246 remote_cert_ku[i] = 0 |
---|
156 | Fri Dec 9 23:21:38 2016 us=664255 remote_cert_ku[i] = 0 |
---|
157 | Fri Dec 9 23:21:38 2016 us=664262 remote_cert_ku[i] = 0 |
---|
158 | Fri Dec 9 23:21:38 2016 us=664266 remote_cert_ku[i] = 0 |
---|
159 | Fri Dec 9 23:21:38 2016 us=664270 remote_cert_ku[i] = 0 |
---|
160 | Fri Dec 9 23:21:38 2016 us=664274 remote_cert_ku[i] = 0 |
---|
161 | Fri Dec 9 23:21:38 2016 us=664278 remote_cert_ku[i] = 0 |
---|
162 | Fri Dec 9 23:21:38 2016 us=664282 remote_cert_ku[i] = 0 |
---|
163 | Fri Dec 9 23:21:38 2016 us=664286 remote_cert_ku[i] = 0 |
---|
164 | Fri Dec 9 23:21:38 2016 us=664290 remote_cert_ku[i] = 0 |
---|
165 | Fri Dec 9 23:21:38 2016 us=664294 remote_cert_eku = 'TLS Web Server Authentication' |
---|
166 | Fri Dec 9 23:21:38 2016 us=664298 ssl_flags = 0 |
---|
167 | Fri Dec 9 23:21:38 2016 us=664302 tls_timeout = 2 |
---|
168 | Fri Dec 9 23:21:38 2016 us=664306 renegotiate_bytes = -1 |
---|
169 | Fri Dec 9 23:21:38 2016 us=664311 renegotiate_packets = 0 |
---|
170 | Fri Dec 9 23:21:38 2016 us=664315 renegotiate_seconds = 3600 |
---|
171 | Fri Dec 9 23:21:38 2016 us=664319 handshake_window = 60 |
---|
172 | Fri Dec 9 23:21:38 2016 us=664323 transition_window = 3600 |
---|
173 | Fri Dec 9 23:21:38 2016 us=664327 single_session = DISABLED |
---|
174 | Fri Dec 9 23:21:38 2016 us=664331 push_peer_info = DISABLED |
---|
175 | Fri Dec 9 23:21:38 2016 us=664335 tls_exit = DISABLED |
---|
176 | Fri Dec 9 23:21:38 2016 us=664340 tls_auth_file = '[UNDEF]' |
---|
177 | Fri Dec 9 23:21:38 2016 us=664344 pkcs11_protected_authentication = DISABLED |
---|
178 | Fri Dec 9 23:21:38 2016 us=664348 pkcs11_protected_authentication = DISABLED |
---|
179 | Fri Dec 9 23:21:38 2016 us=664352 pkcs11_protected_authentication = DISABLED |
---|
180 | Fri Dec 9 23:21:38 2016 us=664356 pkcs11_protected_authentication = DISABLED |
---|
181 | Fri Dec 9 23:21:38 2016 us=664360 pkcs11_protected_authentication = DISABLED |
---|
182 | Fri Dec 9 23:21:38 2016 us=664364 pkcs11_protected_authentication = DISABLED |
---|
183 | Fri Dec 9 23:21:38 2016 us=664369 pkcs11_protected_authentication = DISABLED |
---|
184 | Fri Dec 9 23:21:38 2016 us=664373 pkcs11_protected_authentication = DISABLED |
---|
185 | Fri Dec 9 23:21:38 2016 us=664377 pkcs11_protected_authentication = DISABLED |
---|
186 | Fri Dec 9 23:21:38 2016 us=664381 pkcs11_protected_authentication = DISABLED |
---|
187 | Fri Dec 9 23:21:38 2016 us=664385 pkcs11_protected_authentication = DISABLED |
---|
188 | Fri Dec 9 23:21:38 2016 us=664389 pkcs11_protected_authentication = DISABLED |
---|
189 | Fri Dec 9 23:21:38 2016 us=664393 pkcs11_protected_authentication = DISABLED |
---|
190 | Fri Dec 9 23:21:38 2016 us=664397 pkcs11_protected_authentication = DISABLED |
---|
191 | Fri Dec 9 23:21:38 2016 us=664401 pkcs11_protected_authentication = DISABLED |
---|
192 | Fri Dec 9 23:21:38 2016 us=664405 pkcs11_protected_authentication = DISABLED |
---|
193 | Fri Dec 9 23:21:38 2016 us=664409 pkcs11_private_mode = 00000000 |
---|
194 | Fri Dec 9 23:21:38 2016 us=664416 pkcs11_private_mode = 00000000 |
---|
195 | Fri Dec 9 23:21:38 2016 us=664420 pkcs11_private_mode = 00000000 |
---|
196 | Fri Dec 9 23:21:38 2016 us=664425 pkcs11_private_mode = 00000000 |
---|
197 | Fri Dec 9 23:21:38 2016 us=664429 pkcs11_private_mode = 00000000 |
---|
198 | Fri Dec 9 23:21:38 2016 us=664433 pkcs11_private_mode = 00000000 |
---|
199 | Fri Dec 9 23:21:38 2016 us=664437 pkcs11_private_mode = 00000000 |
---|
200 | Fri Dec 9 23:21:38 2016 us=664442 pkcs11_private_mode = 00000000 |
---|
201 | Fri Dec 9 23:21:38 2016 us=664446 pkcs11_private_mode = 00000000 |
---|
202 | Fri Dec 9 23:21:38 2016 us=664450 pkcs11_private_mode = 00000000 |
---|
203 | Fri Dec 9 23:21:38 2016 us=664454 pkcs11_private_mode = 00000000 |
---|
204 | Fri Dec 9 23:21:38 2016 us=664458 pkcs11_private_mode = 00000000 |
---|
205 | Fri Dec 9 23:21:38 2016 us=664462 pkcs11_private_mode = 00000000 |
---|
206 | Fri Dec 9 23:21:38 2016 us=664466 pkcs11_private_mode = 00000000 |
---|
207 | Fri Dec 9 23:21:38 2016 us=664470 pkcs11_private_mode = 00000000 |
---|
208 | Fri Dec 9 23:21:38 2016 us=664474 pkcs11_private_mode = 00000000 |
---|
209 | Fri Dec 9 23:21:38 2016 us=664478 pkcs11_cert_private = DISABLED |
---|
210 | Fri Dec 9 23:21:38 2016 us=664482 pkcs11_cert_private = DISABLED |
---|
211 | Fri Dec 9 23:21:38 2016 us=664486 pkcs11_cert_private = DISABLED |
---|
212 | Fri Dec 9 23:21:38 2016 us=664490 pkcs11_cert_private = DISABLED |
---|
213 | Fri Dec 9 23:21:38 2016 us=664494 pkcs11_cert_private = DISABLED |
---|
214 | Fri Dec 9 23:21:38 2016 us=664498 pkcs11_cert_private = DISABLED |
---|
215 | Fri Dec 9 23:21:38 2016 us=664502 pkcs11_cert_private = DISABLED |
---|
216 | Fri Dec 9 23:21:38 2016 us=664506 pkcs11_cert_private = DISABLED |
---|
217 | Fri Dec 9 23:21:38 2016 us=664510 pkcs11_cert_private = DISABLED |
---|
218 | Fri Dec 9 23:21:38 2016 us=664514 pkcs11_cert_private = DISABLED |
---|
219 | Fri Dec 9 23:21:38 2016 us=664518 pkcs11_cert_private = DISABLED |
---|
220 | Fri Dec 9 23:21:38 2016 us=664522 pkcs11_cert_private = DISABLED |
---|
221 | Fri Dec 9 23:21:38 2016 us=664526 pkcs11_cert_private = DISABLED |
---|
222 | Fri Dec 9 23:21:38 2016 us=664530 pkcs11_cert_private = DISABLED |
---|
223 | Fri Dec 9 23:21:38 2016 us=664535 pkcs11_cert_private = DISABLED |
---|
224 | Fri Dec 9 23:21:38 2016 us=664539 pkcs11_cert_private = DISABLED |
---|
225 | Fri Dec 9 23:21:38 2016 us=664543 pkcs11_pin_cache_period = -1 |
---|
226 | Fri Dec 9 23:21:38 2016 us=664547 pkcs11_id = '[UNDEF]' |
---|
227 | Fri Dec 9 23:21:38 2016 us=664551 pkcs11_id_management = DISABLED |
---|
228 | Fri Dec 9 23:21:38 2016 us=664561 server_network = 0.0.0.0 |
---|
229 | Fri Dec 9 23:21:38 2016 us=664566 server_netmask = 0.0.0.0 |
---|
230 | Fri Dec 9 23:21:38 2016 us=664576 server_network_ipv6 = :: |
---|
231 | Fri Dec 9 23:21:38 2016 us=664580 server_netbits_ipv6 = 0 |
---|
232 | Fri Dec 9 23:21:38 2016 us=664585 server_bridge_ip = 0.0.0.0 |
---|
233 | Fri Dec 9 23:21:38 2016 us=664589 server_bridge_netmask = 0.0.0.0 |
---|
234 | Fri Dec 9 23:21:38 2016 us=664594 server_bridge_pool_start = 0.0.0.0 |
---|
235 | Fri Dec 9 23:21:38 2016 us=664599 server_bridge_pool_end = 0.0.0.0 |
---|
236 | Fri Dec 9 23:21:38 2016 us=664603 ifconfig_pool_defined = DISABLED |
---|
237 | Fri Dec 9 23:21:38 2016 us=664607 ifconfig_pool_start = 0.0.0.0 |
---|
238 | Fri Dec 9 23:21:38 2016 us=664612 ifconfig_pool_end = 0.0.0.0 |
---|
239 | Fri Dec 9 23:21:38 2016 us=664617 ifconfig_pool_netmask = 0.0.0.0 |
---|
240 | Fri Dec 9 23:21:38 2016 us=664621 ifconfig_pool_persist_filename = '[UNDEF]' |
---|
241 | Fri Dec 9 23:21:38 2016 us=664625 ifconfig_pool_persist_refresh_freq = 600 |
---|
242 | Fri Dec 9 23:21:38 2016 us=664629 ifconfig_ipv6_pool_defined = DISABLED |
---|
243 | Fri Dec 9 23:21:38 2016 us=664634 ifconfig_ipv6_pool_base = :: |
---|
244 | Fri Dec 9 23:21:38 2016 us=664638 ifconfig_ipv6_pool_netbits = 0 |
---|
245 | Fri Dec 9 23:21:38 2016 us=664642 n_bcast_buf = 256 |
---|
246 | Fri Dec 9 23:21:38 2016 us=664646 tcp_queue_limit = 64 |
---|
247 | Fri Dec 9 23:21:38 2016 us=664650 real_hash_size = 256 |
---|
248 | Fri Dec 9 23:21:38 2016 us=664654 virtual_hash_size = 256 |
---|
249 | Fri Dec 9 23:21:38 2016 us=664659 client_connect_script = '[UNDEF]' |
---|
250 | Fri Dec 9 23:21:38 2016 us=664663 learn_address_script = '[UNDEF]' |
---|
251 | Fri Dec 9 23:21:38 2016 us=664667 client_disconnect_script = '[UNDEF]' |
---|
252 | Fri Dec 9 23:21:38 2016 us=664671 client_config_dir = '[UNDEF]' |
---|
253 | Fri Dec 9 23:21:38 2016 us=664675 ccd_exclusive = DISABLED |
---|
254 | Fri Dec 9 23:21:38 2016 us=664680 tmp_dir = '/tmp' |
---|
255 | Fri Dec 9 23:21:38 2016 us=664684 push_ifconfig_defined = DISABLED |
---|
256 | Fri Dec 9 23:21:38 2016 us=664688 push_ifconfig_local = 0.0.0.0 |
---|
257 | Fri Dec 9 23:21:38 2016 us=664693 push_ifconfig_remote_netmask = 0.0.0.0 |
---|
258 | Fri Dec 9 23:21:38 2016 us=664697 push_ifconfig_ipv6_defined = DISABLED |
---|
259 | Fri Dec 9 23:21:38 2016 us=664702 push_ifconfig_ipv6_local = ::/0 |
---|
260 | Fri Dec 9 23:21:38 2016 us=664706 push_ifconfig_ipv6_remote = :: |
---|
261 | Fri Dec 9 23:21:38 2016 us=664712 enable_c2c = DISABLED |
---|
262 | Fri Dec 9 23:21:38 2016 us=664716 duplicate_cn = DISABLED |
---|
263 | Fri Dec 9 23:21:38 2016 us=664720 cf_max = 0 |
---|
264 | Fri Dec 9 23:21:38 2016 us=664725 cf_per = 0 |
---|
265 | Fri Dec 9 23:21:38 2016 us=664729 max_clients = 1024 |
---|
266 | Fri Dec 9 23:21:38 2016 us=664733 max_routes_per_client = 256 |
---|
267 | Fri Dec 9 23:21:38 2016 us=664737 auth_user_pass_verify_script = '[UNDEF]' |
---|
268 | Fri Dec 9 23:21:38 2016 us=664742 auth_user_pass_verify_script_via_file = DISABLED |
---|
269 | Fri Dec 9 23:21:38 2016 us=664746 port_share_host = '[UNDEF]' |
---|
270 | Fri Dec 9 23:21:38 2016 us=664750 port_share_port = 0 |
---|
271 | Fri Dec 9 23:21:38 2016 us=664754 client = ENABLED |
---|
272 | Fri Dec 9 23:21:38 2016 us=664758 pull = ENABLED |
---|
273 | Fri Dec 9 23:21:38 2016 us=664762 auth_user_pass_file = '[UNDEF]' |
---|
274 | Fri Dec 9 23:21:38 2016 us=664768 OpenVPN 2.3.13 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec 9 2016 |
---|
275 | Fri Dec 9 23:21:38 2016 us=664778 library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.08 |
---|
276 | Fri Dec 9 23:21:38 2016 us=665192 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts |
---|
277 | Fri Dec 9 23:21:38 2016 us=665876 LZO compression initialized |
---|
278 | Fri Dec 9 23:21:38 2016 us=665930 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ] |
---|
279 | Fri Dec 9 23:21:38 2016 us=665955 Socket Buffers: R=[212992->212992] S=[212992->212992] |
---|
280 | Fri Dec 9 23:21:38 2016 us=665973 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:143 ET:0 EL:3 AF:3/1 ] |
---|
281 | Fri Dec 9 23:21:38 2016 us=665988 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client' |
---|
282 | Fri Dec 9 23:21:38 2016 us=665993 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server' |
---|
283 | Fri Dec 9 23:21:38 2016 us=666015 Local Options hash (VER=V4): '41690919' |
---|
284 | Fri Dec 9 23:21:38 2016 us=666027 Expected Remote Options hash (VER=V4): '530fdded' |
---|
285 | Fri Dec 9 23:21:38 2016 us=666034 UDPv4 link local: [undef] |
---|
286 | Fri Dec 9 23:21:38 2016 us=666041 UDPv4 link remote: [AF_INET]x.x.x.x:1194 |
---|
287 | WRFri Dec 9 23:21:38 2016 us=906462 TLS: Initial packet from [AF_INET]x.x.x.x:1194, sid=374faf4c 4e56ad26 |
---|
288 | WWRWRWRWRFri Dec 9 23:21:39 2016 us=218292 VERIFY OK: depth=2, C=DE, ST=Ellhofen, L=BW, O=aws OU=Operations, CN=aws VPN CA |
---|
289 | Fri Dec 9 23:21:39 2016 us=218581 VERIFY OK: depth=1, C=DE, ST=Ellhofen, L=BW, O=aws OU=Operations, CN=aws VPN Intermediate CA |
---|
290 | Fri Dec 9 23:21:39 2016 us=218838 Validating certificate key usage |
---|
291 | Fri Dec 9 23:21:39 2016 us=218847 ++ Certificate has key usage 00a0, expects 00a0 |
---|
292 | Fri Dec 9 23:21:39 2016 us=218853 VERIFY KU OK |
---|
293 | Fri Dec 9 23:21:39 2016 us=218861 Validating certificate extended key usage |
---|
294 | Fri Dec 9 23:21:39 2016 us=218867 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Server Authentication |
---|
295 | Fri Dec 9 23:21:39 2016 us=218874 ++ Certificate has EKU (oid) 1.3.6.1.5.5.7.3.2, expects TLS Web Server Authentication |
---|
296 | Fri Dec 9 23:21:39 2016 us=218880 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication |
---|
297 | Fri Dec 9 23:21:39 2016 us=218886 VERIFY EKU OK |
---|
298 | Fri Dec 9 23:21:39 2016 us=218891 VERIFY OK: depth=0, C=DE, ST=Ellhofen, L=BW, O=aws OU=Operations, CN=vpn-bastion-us-west-2.aws.lol |
---|
299 | WRWWWWRWRRRRWRFri Dec 9 23:21:40 2016 us=662425 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key |
---|
300 | Fri Dec 9 23:21:40 2016 us=662449 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). |
---|
301 | Fri Dec 9 23:21:40 2016 us=662458 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication |
---|
302 | Fri Dec 9 23:21:40 2016 us=662521 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key |
---|
303 | Fri Dec 9 23:21:40 2016 us=662527 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). |
---|
304 | Fri Dec 9 23:21:40 2016 us=662539 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication |
---|
305 | WFri Dec 9 23:21:40 2016 us=662592 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA |
---|
306 | Fri Dec 9 23:21:40 2016 us=662612 [vpn-bastion-us-west-2.aws.lol] Peer Connection Initiated with [AF_INET]x.x.x.x:1194 |
---|
307 | Fri Dec 9 23:21:42 2016 us=742837 SENT CONTROL [vpn-bastion-us-west-2.aws.lol]: 'PUSH_REQUEST' (status=1) |
---|
308 | WRRFri Dec 9 23:21:43 2016 us=12510 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.255.192.2,dhcp-option DOMAIN aws.lol,dhcp-option DNSMODE full,route 10.255.255.0 255.255.255.0,route 10.255.192.0 255.255.224.0,route 10.255.128.0 255.255.192.0,route 10.255.64.0 255.255.192.0,route 10.255.255.1,topology net30,ping 10,ping-restart 30,ifconfig 10.255.255.18 10.255.255.17' |
---|
309 | Fri Dec 9 23:21:43 2016 us=12612 OPTIONS IMPORT: timers and/or timeouts modified |
---|
310 | Fri Dec 9 23:21:43 2016 us=12622 OPTIONS IMPORT: --ifconfig/up options modified |
---|
311 | Fri Dec 9 23:21:43 2016 us=12629 OPTIONS IMPORT: route options modified |
---|
312 | Fri Dec 9 23:21:43 2016 us=12635 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified |
---|
313 | Fri Dec 9 23:21:43 2016 us=12738 ROUTE_GATEWAY 192.168.178.1/255.255.255.0 IFACE=wlp4s0 HWADDR=18:5e:0f:79:63:46 |
---|
314 | Fri Dec 9 23:21:43 2016 us=12941 TUN/TAP device tun0 opened |
---|
315 | Fri Dec 9 23:21:43 2016 us=12958 TUN/TAP TX queue length set to 100 |
---|
316 | Fri Dec 9 23:21:43 2016 us=12971 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 |
---|
317 | Fri Dec 9 23:21:43 2016 us=12992 /bin/ip link set dev tun0 up mtu 1500 |
---|
318 | Fri Dec 9 23:21:43 2016 us=16064 /bin/ip addr add dev tun0 local 10.255.255.18 peer 10.255.255.17 |
---|
319 | Fri Dec 9 23:21:43 2016 us=17892 /etc/openvpn/up.sh tun0 1500 1542 10.255.255.18 10.255.255.17 init |
---|
320 | Fri Dec 9 23:21:43 2016 us=23585 /bin/ip route add 10.255.255.0/24 via 10.255.255.17 |
---|
321 | Fri Dec 9 23:21:43 2016 us=24547 /bin/ip route add 10.255.192.0/19 via 10.255.255.17 |
---|
322 | Fri Dec 9 23:21:43 2016 us=25497 /bin/ip route add 10.255.128.0/18 via 10.255.255.17 |
---|
323 | Fri Dec 9 23:21:43 2016 us=26320 /bin/ip route add 10.255.64.0/18 via 10.255.255.17 |
---|
324 | Fri Dec 9 23:21:43 2016 us=27162 /bin/ip route add 10.255.255.1/32 via 10.255.255.17 |
---|
325 | Fri Dec 9 23:21:43 2016 us=28180 Initialization Sequence Completed |
---|
326 | WrWrWrWrWrWrWrWRwRwrWrWRwRwRwRwrWrWrWrWRwRwRwRwRwrWrWrWRwrWrWrWrWrWrWRwRwRwRwRwRwRwRwrWrWrWrWrWRwrWrWRwrWrWRwRwRwRwrWrWrWrWrWrWrWrWrWrWrWrWRwrWRwRwrWrWRwRwrWrWrWrWrWrWrWRwrWrWrWrWrWrWrWRwrWRwrWrWRwRwWRRWrWrWrWRwrWrWRwrWrWRwrWRwRwRwRwrWrWrWrWrWRwRwRwrWrWrWRwRwrWrWRwWrWrWRwrWRwFri Dec 9 23:22:47 2016 us=464128 event_wait : Interrupted system call (code=4) |
---|
327 | Fri Dec 9 23:22:47 2016 us=464343 TCP/UDP: Closing socket |
---|
328 | Fri Dec 9 23:22:47 2016 us=464390 /bin/ip route del 10.255.255.1/32 |
---|
329 | Fri Dec 9 23:22:47 2016 us=465339 /bin/ip route del 10.255.64.0/18 |
---|
330 | Fri Dec 9 23:22:47 2016 us=466549 /bin/ip route del 10.255.128.0/18 |
---|
331 | Fri Dec 9 23:22:47 2016 us=467774 /bin/ip route del 10.255.192.0/19 |
---|
332 | Fri Dec 9 23:22:47 2016 us=469065 /bin/ip route del 10.255.255.0/24 |
---|
333 | Fri Dec 9 23:22:47 2016 us=470348 Closing TUN/TAP interface |
---|
334 | Fri Dec 9 23:22:47 2016 us=470405 /bin/ip addr del dev tun0 local 10.255.255.18 peer 10.255.255.17 |
---|
335 | Fri Dec 9 23:22:47 2016 us=487083 /etc/openvpn/down.sh tun0 1500 1542 10.255.255.18 10.255.255.17 init |
---|
336 | Fri Dec 9 23:22:47 2016 us=490165 SIGTERM[hard,] received, process exiting |
---|