Nov 2 16:01:25 openvpn 29472 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. Nov 2 16:01:25 openvpn 29472 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Nov 2 16:01:25 openvpn 29472 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Nov 2 16:01:25 openvpn 29472 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Nov 2 16:01:25 openvpn 29472 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1440) Nov 2 16:01:25 openvpn 29472 TCP/UDP: Preserving recently used remote address: [AF_INET]188.246.0.50:1194 Nov 2 16:01:25 openvpn 29472 Socket Buffers: R=[42080->1048576] S=[57344->1048576] Nov 2 16:01:25 openvpn 29472 UDPv4 link local (bound): [AF_INET]192.168.178.20:0 Nov 2 16:01:25 openvpn 29472 UDPv4 link remote: [AF_INET]188.246.0.50:1194 Nov 2 16:01:25 openvpn 29472 write UDPv4: No route to host (code=65) Nov 2 16:01:27 openvpn 29472 TLS: Initial packet from [AF_INET]188.246.0.50:1194, sid=7981dffe c386ee4b Nov 2 16:01:27 openvpn 29472 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Nov 2 16:01:27 openvpn 29472 VERIFY OK: depth=1, C=DE, ST=NRW, L=Wuppertal, O=Portunity GmbH, CN=Portunity GmbH CA, emailAddress=hostmaster@portuniy.de Nov 2 16:01:27 openvpn 29472 VERIFY OK: nsCertType=SERVER Nov 2 16:01:27 openvpn 29472 VERIFY OK: depth=0, C=DE, ST=NRW, L=Wuppertal, O=Portunity GmbH, CN=server, emailAddress=hostmaster@portuniy.de Nov 2 16:01:27 openvpn 29472 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA Nov 2 16:01:27 openvpn 29472 [server] Peer Connection Initiated with [AF_INET]188.246.0.50:1194 Nov 2 16:01:28 openvpn 29472 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Nov 2 16:01:28 openvpn 29472 PUSH: Received control message: 'PUSH_REPLY,ifconfig-ipv6 2a02:a00:e00f:ffff::9:3996/64 2a02:a00:e00f:ffff::1,ping 10,ping-restart 60,route-ipv6 fe80::8,tun-ipv6,route-gateway 188.246.4.1,topology subnet,ifconfig 188.246.7.27 255.255.252.0' Nov 2 16:01:28 openvpn 29472 OPTIONS IMPORT: timers and/or timeouts modified Nov 2 16:01:28 openvpn 29472 OPTIONS IMPORT: --ifconfig/up options modified Nov 2 16:01:28 openvpn 29472 OPTIONS IMPORT: route options modified Nov 2 16:01:28 openvpn 29472 OPTIONS IMPORT: route-related options modified Nov 2 16:01:28 openvpn 29472 Outgoing Data Channel: Cipher 'BF-CBC' initialized with 128 bit key Nov 2 16:01:28 openvpn 29472 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Nov 2 16:01:28 openvpn 29472 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication Nov 2 16:01:28 openvpn 29472 Incoming Data Channel: Cipher 'BF-CBC' initialized with 128 bit key Nov 2 16:01:28 openvpn 29472 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Nov 2 16:01:28 openvpn 29472 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication Nov 2 16:01:28 openvpn 29472 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks. Nov 2 16:01:28 openvpn 29472 ROUTE_GATEWAY 192.168.178.1/255.255.255.0 IFACE=igb0 HWADDR=00:0e:c4:d0:56:75 Nov 2 16:01:28 openvpn 29472 GDG6: remote_host_ipv6=n/a Nov 2 16:01:28 openvpn 29472 GDG6: problem writing to routing socket Nov 2 16:01:28 openvpn 29472 ROUTE6: default_gateway=UNDEF Nov 2 16:01:28 openvpn 29472 TUN/TAP device ovpnc1 exists previously, keep at program end Nov 2 16:01:28 openvpn 29472 TUN/TAP device /dev/tun1 opened Nov 2 16:01:28 openvpn 29472 ioctl(TUNSIFMODE): Device busy (errno=16) Nov 2 16:01:28 openvpn 29472 do_ifconfig, tt->did_ifconfig_ipv6_setup=1 Nov 2 16:01:28 openvpn 29472 /sbin/ifconfig ovpnc1 188.246.7.27 188.246.4.1 mtu 1440 netmask 255.255.252.0 up Nov 2 16:01:28 openvpn 29472 /sbin/route add -net 188.246.4.0 188.246.4.1 255.255.252.0 Nov 2 16:01:28 openvpn 29472 /sbin/ifconfig ovpnc1 inet6 2a02:a00:e00f:ffff::9:3996/64 Nov 2 16:01:28 openvpn 29472 /usr/local/sbin/ovpn-linkup ovpnc1 1440 1485 188.246.7.27 255.255.252.0 init Nov 2 16:01:28 openvpn 29472 /sbin/route add -net 188.246.0.50 192.168.178.1 255.255.255.255 Nov 2 16:01:28 openvpn 29472 /sbin/route delete -net 0.0.0.0 192.168.178.1 0.0.0.0 Nov 2 16:01:28 openvpn 29472 /sbin/route add -net 0.0.0.0 188.246.4.1 0.0.0.0 Nov 2 16:01:28 openvpn 29472 add_route_ipv6(::/0 -> 2a02:a00:e00f:ffff::9:3996 metric -1) dev ovpnc1 Nov 2 16:01:28 openvpn 29472 /sbin/route add -inet6 ::/0 -iface ovpnc1 Nov 2 16:01:28 openvpn 29472 add_route_ipv6(fe80::/64 -> 2a02:a00:e00f:ffff::1 metric -1) dev ovpnc1 Nov 2 16:01:28 openvpn 29472 /sbin/route add -inet6 fe80::/64 -iface ovpnc1 Nov 2 16:01:28 openvpn 29472 Initialization Sequence Completed