Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

#872 closed User question (notabug)

openvpn help me I do not want to connect. Her record the message "ERROR: --dev tun also requires --ifconfig" in Windows 10

Reported by: axers199 Owned by:
Priority: major Milestone: release 2.4.0
Component: OpenVPN Connect Version: OpenVPN 2.2.2 (Community Ed)
Severity: Not set (select this one, unless your'e a OpenVPN developer) Keywords: ERROR: --dev tun also requires --ifconfig
Cc:

Description

okeh I do not know what the cause of this fault. but I had to uninstall and reinstall again still will not connect

Sat Apr 08 19:30:31 2017 DEPRECATED OPTION: http-proxy-retry and socks-proxy-retry: In OpenVPN 2.4 proxy connection retries are handled like regular connections. Use connect-retry-max 1 to get a similar behavior as before.
Sat Apr 08 19:30:31 2017 OpenVPN 2.4.0 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 31 2017
Sat Apr 08 19:30:31 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Sat Apr 08 19:30:31 2017 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
Enter Management Password:
Sat Apr 08 19:30:31 2017 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Sat Apr 08 19:30:31 2017 Need hold release from management interface, waiting...
Sat Apr 08 19:30:31 2017 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Sat Apr 08 19:30:31 2017 MANAGEMENT: CMD 'state on'
Sat Apr 08 19:30:31 2017 MANAGEMENT: CMD 'log all on'
Sat Apr 08 19:30:31 2017 MANAGEMENT: CMD 'hold off'
Sat Apr 08 19:30:31 2017 MANAGEMENT: CMD 'hold release'
Sat Apr 08 19:30:33 2017 MANAGEMENT: CMD 'username "Auth" "bestvpnssh.com-nadibs"'
Sat Apr 08 19:30:33 2017 MANAGEMENT: CMD 'password [...]'
Sat Apr 08 19:30:33 2017 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Apr 08 19:30:33 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]202.152.240.50:3128
Sat Apr 08 19:30:33 2017 Socket Buffers: R=[65536->65536] S=[65536->65536]
Sat Apr 08 19:30:33 2017 Attempting to establish TCP connection with [AF_INET]202.152.240.50:3128 [nonblock]
Sat Apr 08 19:30:33 2017 MANAGEMENT: >STATE:1491654633,TCP_CONNECT,,,,,,
Sat Apr 08 19:30:34 2017 TCP connection established with [AF_INET]202.152.240.50:3128
Sat Apr 08 19:30:34 2017 Send to HTTP proxy: 'CONNECT 128.199.109.61:443 HTTP/1.0'
Sat Apr 08 19:30:34 2017 Send to HTTP proxy: ' X-Online-Host: 123.xl.co.id/min_balance7'
Sat Apr 08 19:30:34 2017 Send to HTTP proxy: ' Host: 123.xl.co.id/min_balance7'
Sat Apr 08 19:30:34 2017 Send to HTTP proxy: ' Connection: Keep-alive'
Sat Apr 08 19:30:34 2017 Send to HTTP proxy: ' KBps/MBps-stabilizer'
Sat Apr 08 19:30:34 2017 Send to HTTP proxy: ' Content-Length: 999999999999'
Sat Apr 08 19:30:34 2017 Send to HTTP proxy: 'Host: 128.199.109.61'
Sat Apr 08 19:30:36 2017 HTTP proxy returned: 'HTTP/1.1 200 OK'
Sat Apr 08 19:30:38 2017 TCP_CLIENT link local: (not bound)
Sat Apr 08 19:30:38 2017 TCP_CLIENT link remote: [AF_INET]202.152.240.50:3128
Sat Apr 08 19:30:38 2017 MANAGEMENT: >STATE:1491654638,WAIT,,,,,,
Sat Apr 08 19:30:38 2017 MANAGEMENT: >STATE:1491654638,AUTH,,,,,,
Sat Apr 08 19:30:38 2017 TLS: Initial packet from [AF_INET]202.152.240.50:3128, sid=30d710ba fb72ff76
Sat Apr 08 19:30:38 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Apr 08 19:30:39 2017 VERIFY OK: depth=1, C=sg, ST=sg, L=sg, O=sg, OU=sg, CN=sg, name=sg, emailAddress=sg
Sat Apr 08 19:30:39 2017 VERIFY OK: depth=0, C=sg, ST=sg, L=sg, O=sg, OU=sg, CN=sg, name=sg, emailAddress=sg
Sat Apr 08 19:30:41 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sat Apr 08 19:30:41 2017 [sg] Peer Connection Initiated with [AF_INET]202.152.240.50:3128
Sat Apr 08 19:30:42 2017 MANAGEMENT: >STATE:1491654642,GET_CONFIG,,,,,,
Sat Apr 08 19:30:42 2017 SENT CONTROL [sg]: 'PUSH_REQUEST' (status=1)
Sat Apr 08 19:30:43 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 5,ping-restart 30'
Sat Apr 08 19:30:44 2017 OPTIONS IMPORT: timers and/or timeouts modified
Sat Apr 08 19:30:44 2017 OPTIONS IMPORT: --ifconfig/up options modified
Sat Apr 08 19:30:44 2017 OPTIONS IMPORT: route options modified
Sat Apr 08 19:30:44 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Apr 08 19:30:44 2017 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 08 19:30:44 2017 WARNING: INSECURE cipher with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Sat Apr 08 19:30:44 2017 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 08 19:30:44 2017 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Apr 08 19:30:44 2017 WARNING: INSECURE cipher with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
Sat Apr 08 19:30:44 2017 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Apr 08 19:30:44 2017 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
Sat Apr 08 19:30:44 2017 interactive service msg_channel=616
Sat Apr 08 19:30:44 2017 ROUTE_GATEWAY 10.133.170.8/255.255.255.255 I=44 HWADDR=00:00:00:00:00:00
Sat Apr 08 19:30:44 2017 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Sat Apr 08 19:30:44 2017 OpenVPN ROUTE: failed to parse/resolve route for host/network: 10.8.0.1
Sat Apr 08 19:30:44 2017 OpenVPN ROUTE: OpenVPN needs a gateway parameter for a --route option and no default was specified by either --route-gateway or --ifconfig options
Sat Apr 08 19:30:44 2017 OpenVPN ROUTE: failed to parse/resolve route for host/network: 0.0.0.0
Sat Apr 08 19:30:44 2017 open_tun
Sat Apr 08 19:30:44 2017 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{86838268-896F-469A-9331-ABE057822500}.tap
Sat Apr 08 19:30:44 2017 TAP-Windows Driver Version 9.9 
Sat Apr 08 19:30:44 2017 MANAGEMENT: Client disconnected
Sat Apr 08 19:30:44 2017 ERROR: --dev tun also requires --ifconfig
Sat Apr 08 19:30:44 2017 Exiting due to fatal error

please help me

Change History (2)

comment:1 Changed 7 years ago by Gert Döring

Resolution: notabug
Status: newclosed
Type: Bug / DefectUser question

The server you are connecting to is not sending all required parameters (in PUSH_REPLY, the "ifconfig" option is missing).

This is not an OpenVPN bug but a config problem on the server side.

If you run the server yourself, please read up on the --server option for the server side.

comment:2 Changed 7 years ago by tct

@ axers199 - Please send your question to the openvpn Forum, Read This First:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963

Note: See TracTickets for help on using tickets.