built on Aug 14 2020
Jan 2 15:41:17 ovpn-client1[18779]: library versions: OpenSSL 1.1.1g 21 Apr 2020, LZO 2.08
Jan 2 15:41:17 ovpn-client1[18780]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Jan 2 15:41:17 ovpn-client1[18780]: Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Jan 2 15:41:17 ovpn-client1[18780]: Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Jan 2 15:41:17 ovpn-client1[18780]: LZO compression initializing
Jan 2 15:41:17 ovpn-client1[18780]: Control Channel MTU parms [ L:1626 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Jan 2 15:41:17 ovpn-client1[18780]: Data Channel MTU parms [ L:1626 D:1300 EF:126 EB:407 ET:0 EL:3 ]
Jan 2 15:41:17 ovpn-client1[18780]: Fragmentation MTU parms [ L:1626 D:1300 EF:125 EB:407 ET:1 EL:3 ]
Jan 2 15:41:17 ovpn-client1[18780]: Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1606,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
Jan 2 15:41:17 ovpn-client1[18780]: Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1606,tun-mtu 1500,proto UDPv4,comp-lzo,mtu-dynamic,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
Jan 2 15:41:17 ovpn-client1[18780]: TCP/UDP: Preserving recently used remote address: [AF_INET]85.17.64.131:1151
Jan 2 15:41:17 ovpn-client1[18780]: Socket Buffers: R=[524288->524288] S=[524288->524288]
Jan 2 15:41:17 ovpn-client1[18780]: UDP link local: (not bound)
Jan 2 15:41:17 ovpn-client1[18780]: UDP link remote: [AF_INET]85.17.64.131:1151
Jan 2 15:41:17 ovpn-client1[18780]: TLS: Initial packet from [AF_INET]85.17.64.131:1151, sid=3b18f41b 90dd3d58
Jan 2 15:41:17 ovpn-client1[18780]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Jan 2 15:41:18 ovpn-client1[18780]: VERIFY OK: depth=1, C=CH, ST=Zug, L=Zug, O=Perfect Privacy, CN=Perfect Privacy, emailAddress=
admin@perfect-privacy.com
Jan 2 15:41:18 ovpn-client1[18780]: VERIFY KU OK
Jan 2 15:41:18 ovpn-client1[18780]: Validating certificate extended key usage
Jan 2 15:41:18 ovpn-client1[18780]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Jan 2 15:41:18 ovpn-client1[18780]: VERIFY EKU OK
Jan 2 15:41:18 ovpn-client1[18780]: VERIFY OK: depth=0, C=CH, ST=Zug, O=Perfect Privacy, CN=Server_amsterdam.perfect-privacy.com, emailAddress=
admin@perfect-privacy.com
Jan 2 15:41:18 ovpn-client1[18780]: Control Channel: TLSv1.2, cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Jan 2 15:41:18 ovpn-client1[18780]: [Server_amsterdam.perfect-privacy.com] Peer Connection Initiated with [AF_INET]85.17.64.131:1151
Jan 2 15:41:19 ovpn-client1[18780]: SENT CONTROL [Server_amsterdam.perfect-privacy.com]: 'PUSH_REQUEST' (status=1)
Jan 2 15:41:19 ovpn-client1[18780]: PUSH: Received control message: 'PUSH_REPLY,topology subnet,redirect-gateway def1 ipv6,sndbuf 131072,rcvbuf 131072,route-ipv6 2000::/3,comp-lzo adaptive,route-gateway 10.4.85.1,ping 10,ping-restart 60,dhcp-option DNS 5.79.98.56,dhcp-option DNS 185.17.184.3,ifconfig-ipv6 fdbf:1d37:bbe0:0:69:5:0:1a/112 fdbf:1d37:bbe0:0:69:5:0:1,ifconfig 10.4.85.26 255.255.255.0,peer-id 19,cipher AES-256-GCM'
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: timers and/or timeouts modified
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: compression parms modified
Jan 2 15:41:19 ovpn-client1[18780]: LZO compression initializing
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Jan 2 15:41:19 ovpn-client1[18780]: Socket Buffers: R=[524288->262144] S=[524288->262144]
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: --ifconfig/up options modified
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: route options modified
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: route-related options modified
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: peer-id set
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: adjusting link_mtu to 1629
Jan 2 15:41:19 ovpn-client1[18780]: OPTIONS IMPORT: data channel crypto options modified
Jan 2 15:41:19 ovpn-client1[18780]: Data Channel: using negotiated cipher 'AES-256-GCM'
Jan 2 15:41:19 ovpn-client1[18780]: Data Channel MTU parms [ L:1557 D:1300 EF:57 EB:407 ET:0 EL:3 ]
Jan 2 15:41:19 ovpn-client1[18780]: Fragmentation MTU parms [ L:1626 D:1300 EF:53 EB:407 ET:1 EL:3 ]
Jan 2 15:41:19 ovpn-client1[18780]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Jan 2 15:41:19 ovpn-client1[18780]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Jan 2 15:41:19 ovpn-client1[18780]: GDG6: remote_host_ipv6=n/a
Jan 2 15:41:19 ovpn-client1[18780]: TUN/TAP device tun11 opened
Jan 2 15:41:19 ovpn-client1[18780]: TUN/TAP TX queue length set to 1000
Jan 2 15:41:19 ovpn-client1[18780]: do_ifconfig, tt->did_ifconfig_ipv6_setup=1
Jan 2 15:41:19 ovpn-client1[18780]: /sbin/ifconfig tun11 10.4.85.26 netmask 255.255.255.0 mtu 1500 broadcast 10.4.85.255
Jan 2 15:41:19 lldpd[1352]: removal request for address of 10.4.87.18%34, but no knowledge of it
Jan 2 15:41:19 lldpd[1352]: removal request for address of 10.4.85.26%34, but no knowledge of it
Jan 2 15:41:19 lldpd[1352]: removal request for address of 10.4.85.26%34, but no knowledge of it
Jan 2 15:41:19 ovpn-client1[18780]: /sbin/ifconfig tun11 add fdbf:1d37:bbe0:0:69:5:0:1a/112
Jan 2 15:41:19 ovpn-client1[18780]: Linux ifconfig inet6 failed: external program exited with error status: 1
Jan 2 15:41:19 ovpn-client1[18780]: Exiting due to fatal error
auth-user-pass
client
dev tun
hand-window 120
inactive 604800
mute-replay-warnings
nobind
persist-key
persist-remote-ip
persist-tun
ping 5
ping-restart 120
redirect-gateway def1
remote-random
reneg-sec 3600
resolv-retry 60
route-delay 2
route-method exe
script-security 2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA
tls-timeout 5
verb 4
pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"
tun-ipv6
tun-mtu 1500
proto udp
fragment 1300
mssfix
comp-lzo
key-direction 1
ich nutze merlin. aber die box unten meckert, dass es zuviele zeichen wären. kann ich auch die .ovpn editieren und nochmals hochladen? wo genau kommen deine befehle rein oder macht die zeile keinen unterschied? oder passt das so?