Hi, After I upgraded from OpenVPN 2.6 to OpenVPN 2.7 (as a part of the upgrade from Fedora 43 to Fedora 44), the OpenVPN tunnel that had been working without problems for months stopped working. The log of OpenVPN looks normal, with the "Initialization Sequence Completed" entry that always signals an established tunnel. However, no data gets through; there is no response when pinging the tunnel’s remote endpoint or remote DNS server. After I disabled DCO on the client side (--disable-dco), the tunnel started to work. My question is: how could I find out that the culprit is DCO in the first place?
I'm attaching the log. I raised this issue first at https://discussion.fedoraproject.org/t/openvpn-tunnel-stopped-working-after-upgrade-to-fedora-44/191218 Regards, Piotr Dobrogost
[miner@hostx ~]$ sudo /usr/bin/openvpn --config /etc/openvpn/client/sfx.conf [sudo] password for miner: 2026-05-12 22:38:18 DEPRECATED OPTION: --persist-key option ignored. Keys are now always persisted across restarts. 2026-05-12 22:38:18 us=572537 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (DEFAULT). OpenVPN ignores --cipher for cipher negotiations. 2026-05-12 22:38:18 us=572862 WARNING: file '/etc/openvpn/client/sfx.vpn.pdobrogost.p12' is group or others accessible 2026-05-12 22:38:18 us=572895 Current Parameter Settings: 2026-05-12 22:38:18 us=572901 config = '/etc/openvpn/client/sfx.conf' 2026-05-12 22:38:18 us=572905 mode = 0 2026-05-12 22:38:18 us=572911 persist_config = DISABLED 2026-05-12 22:38:18 us=572916 persist_mode = 1 2026-05-12 22:38:18 us=572920 show_ciphers = DISABLED 2026-05-12 22:38:18 us=572925 show_digests = DISABLED 2026-05-12 22:38:18 us=572929 show_engines = DISABLED 2026-05-12 22:38:18 us=572933 genkey = DISABLED 2026-05-12 22:38:18 us=572937 genkey_filename = '[UNDEF]' 2026-05-12 22:38:18 us=572942 key_pass_file = '/etc/openvpn/client/sfx.pass' 2026-05-12 22:38:18 us=572946 show_tls_ciphers = DISABLED 2026-05-12 22:38:18 us=572950 connect_retry_max = 0 2026-05-12 22:38:18 us=572954 Connection profiles [0]: 2026-05-12 22:38:18 us=572959 proto = udp 2026-05-12 22:38:18 us=572963 Local Sockets: 2026-05-12 22:38:18 us=572967 [(null)]:1194-udp 2026-05-12 22:38:18 us=572971 remote = 'vpn.sfx.pl' 2026-05-12 22:38:18 us=572975 remote_port = '1194' 2026-05-12 22:38:18 us=572979 remote_float = DISABLED 2026-05-12 22:38:18 us=572985 bind_defined = DISABLED 2026-05-12 22:38:18 us=572990 bind_local = DISABLED 2026-05-12 22:38:18 us=572995 bind_ipv6_only = DISABLED 2026-05-12 22:38:18 us=573000 connect_retry_seconds = 1 2026-05-12 22:38:18 us=573005 connect_timeout = 120 2026-05-12 22:38:18 us=573009 socks_proxy_server = '[UNDEF]' 2026-05-12 22:38:18 us=573014 socks_proxy_port = '[UNDEF]' 2026-05-12 22:38:18 us=573019 tun_mtu = 1500 2026-05-12 22:38:18 us=573024 tun_mtu_defined = ENABLED 2026-05-12 22:38:18 us=573029 link_mtu = 1500 2026-05-12 22:38:18 us=573033 link_mtu_defined = DISABLED 2026-05-12 22:38:18 us=573039 tun_mtu_extra = 0 2026-05-12 22:38:18 us=573044 tun_mtu_extra_defined = DISABLED 2026-05-12 22:38:18 us=573049 tls_mtu = 1250 2026-05-12 22:38:18 us=573054 mtu_discover_type = -1 2026-05-12 22:38:18 us=573059 fragment = 0 2026-05-12 22:38:18 us=573063 mssfix = 1492 2026-05-12 22:38:18 us=573068 mssfix_encap = ENABLED 2026-05-12 22:38:18 us=573073 mssfix_fixed = DISABLED 2026-05-12 22:38:18 us=573078 explicit_exit_notification = 0 2026-05-12 22:38:18 us=573083 tls_auth_file = '[UNDEF]' 2026-05-12 22:38:18 us=573088 key_direction = not set 2026-05-12 22:38:18 us=573092 tls_crypt_file = '[UNDEF]' 2026-05-12 22:38:18 us=573097 tls_crypt_v2_file = '[UNDEF]' 2026-05-12 22:38:18 us=573102 Connection profiles [1]: 2026-05-12 22:38:18 us=573107 proto = udp 2026-05-12 22:38:18 us=573111 Local Sockets: 2026-05-12 22:38:18 us=573116 [(null)]:1194-udp 2026-05-12 22:38:18 us=573120 remote = 'vpn.sfx.pl' 2026-05-12 22:38:18 us=573125 remote_port = '1196' 2026-05-12 22:38:18 us=573132 remote_float = DISABLED 2026-05-12 22:38:18 us=573136 bind_defined = DISABLED 2026-05-12 22:38:18 us=573141 bind_local = DISABLED 2026-05-12 22:38:18 us=573146 bind_ipv6_only = DISABLED 2026-05-12 22:38:18 us=573151 connect_retry_seconds = 1 2026-05-12 22:38:18 us=573155 connect_timeout = 120 2026-05-12 22:38:18 us=573160 socks_proxy_server = '[UNDEF]' 2026-05-12 22:38:18 us=573165 socks_proxy_port = '[UNDEF]' 2026-05-12 22:38:18 us=573169 tun_mtu = 1500 2026-05-12 22:38:18 us=573174 tun_mtu_defined = ENABLED 2026-05-12 22:38:18 us=573178 link_mtu = 1500 2026-05-12 22:38:18 us=573183 link_mtu_defined = DISABLED 2026-05-12 22:38:18 us=573188 tun_mtu_extra = 0 2026-05-12 22:38:18 us=573193 tun_mtu_extra_defined = DISABLED 2026-05-12 22:38:18 us=573197 tls_mtu = 1250 2026-05-12 22:38:18 us=573202 mtu_discover_type = -1 2026-05-12 22:38:18 us=573207 fragment = 0 2026-05-12 22:38:18 us=573212 mssfix = 1492 2026-05-12 22:38:18 us=573216 mssfix_encap = ENABLED 2026-05-12 22:38:18 us=573221 mssfix_fixed = DISABLED 2026-05-12 22:38:18 us=573225 explicit_exit_notification = 0 2026-05-12 22:38:18 us=573230 tls_auth_file = '[UNDEF]' 2026-05-12 22:38:18 us=573235 key_direction = not set 2026-05-12 22:38:18 us=573240 tls_crypt_file = '[UNDEF]' 2026-05-12 22:38:18 us=573244 tls_crypt_v2_file = '[UNDEF]' 2026-05-12 22:38:18 us=573249 Connection profiles END 2026-05-12 22:38:18 us=573254 remote_random = ENABLED 2026-05-12 22:38:18 us=573259 ipchange = '[UNDEF]' 2026-05-12 22:38:18 us=573264 dev = 'ovpn-sfx' 2026-05-12 22:38:18 us=573268 dev_type = 'tun' 2026-05-12 22:38:18 us=573273 dev_node = '[UNDEF]' 2026-05-12 22:38:18 us=573278 disable_dco = DISABLED 2026-05-12 22:38:18 us=573282 lladdr = '[UNDEF]' 2026-05-12 22:38:18 us=573287 topology = 1 2026-05-12 22:38:18 us=573292 ifconfig_local = '[UNDEF]' 2026-05-12 22:38:18 us=573297 ifconfig_remote_netmask = '[UNDEF]' 2026-05-12 22:38:18 us=573302 ifconfig_noexec = DISABLED 2026-05-12 22:38:18 us=573306 ifconfig_nowarn = DISABLED 2026-05-12 22:38:18 us=573311 ifconfig_ipv6_local = '[UNDEF]' 2026-05-12 22:38:18 us=573316 ifconfig_ipv6_netbits = 0 2026-05-12 22:38:18 us=573321 ifconfig_ipv6_remote = '[UNDEF]' 2026-05-12 22:38:18 us=573326 shaper = 0 2026-05-12 22:38:18 us=573331 mtu_test = 0 2026-05-12 22:38:18 us=573336 mlock = DISABLED 2026-05-12 22:38:18 us=573341 keepalive_ping = 0 2026-05-12 22:38:18 us=573345 keepalive_timeout = 0 2026-05-12 22:38:18 us=573350 inactivity_timeout = 0 2026-05-12 22:38:18 us=573355 session_timeout = 0 2026-05-12 22:38:18 us=573360 inactivity_minimum_bytes = 0 2026-05-12 22:38:18 us=573365 ping_send_timeout = 0 2026-05-12 22:38:18 us=573370 ping_rec_timeout = 0 2026-05-12 22:38:18 us=573375 ping_rec_timeout_action = 0 2026-05-12 22:38:18 us=573380 ping_timer_remote = DISABLED 2026-05-12 22:38:18 us=573384 remap_sigusr1 = 0 2026-05-12 22:38:18 us=573389 persist_tun = ENABLED 2026-05-12 22:38:18 us=573393 persist_local_ip = DISABLED 2026-05-12 22:38:18 us=573399 persist_remote_ip = DISABLED 2026-05-12 22:38:18 us=573403 passtos = DISABLED 2026-05-12 22:38:18 us=573408 resolve_retry_seconds = 1000000000 2026-05-12 22:38:18 us=573413 resolve_in_advance = DISABLED 2026-05-12 22:38:18 us=573418 username = '[UNDEF]' 2026-05-12 22:38:18 us=573423 groupname = '[UNDEF]' 2026-05-12 22:38:18 us=573427 chroot_dir = '[UNDEF]' 2026-05-12 22:38:18 us=573432 cd_dir = '[UNDEF]' 2026-05-12 22:38:18 us=573436 selinux_context = '[UNDEF]' 2026-05-12 22:38:18 us=573441 writepid = '[UNDEF]' 2026-05-12 22:38:18 us=573447 up_script = '/etc/openvpn/client/update-systemd-resolved.sh' 2026-05-12 22:38:18 us=573452 down_script = '/etc/openvpn/client/update-systemd-resolved.sh' 2026-05-12 22:38:18 us=573457 down_pre = ENABLED 2026-05-12 22:38:18 us=573461 up_restart = DISABLED 2026-05-12 22:38:18 us=573466 up_delay = DISABLED 2026-05-12 22:38:18 us=573471 daemon = DISABLED 2026-05-12 22:38:18 us=573476 log = DISABLED 2026-05-12 22:38:18 us=573480 suppress_timestamps = DISABLED 2026-05-12 22:38:18 us=573485 machine_readable_output = DISABLED 2026-05-12 22:38:18 us=573490 nice = 0 2026-05-12 22:38:18 us=573494 verbosity = 5 2026-05-12 22:38:18 us=573499 mute = 0 2026-05-12 22:38:18 us=573504 gremlin = 0 2026-05-12 22:38:18 us=573509 status_file = '[UNDEF]' 2026-05-12 22:38:18 us=573514 status_file_version = 1 2026-05-12 22:38:18 us=573518 status_file_update_freq = 60 2026-05-12 22:38:18 us=573523 occ = ENABLED 2026-05-12 22:38:18 us=573528 rcvbuf = 0 2026-05-12 22:38:18 us=573533 sndbuf = 0 2026-05-12 22:38:18 us=573537 mark = 0 2026-05-12 22:38:18 us=573542 sockflags = 0 2026-05-12 22:38:18 us=573546 comp.alg = 0 2026-05-12 22:38:18 us=573551 comp.flags = 152 2026-05-12 22:38:18 us=573555 route_script = '[UNDEF]' 2026-05-12 22:38:18 us=573560 route_default_gateway = '[UNDEF]' 2026-05-12 22:38:18 us=573565 route_default_metric = 0 2026-05-12 22:38:18 us=573569 route_default_table_id = 0 2026-05-12 22:38:18 us=573574 route_noexec = DISABLED 2026-05-12 22:38:18 us=573579 route_delay = 0 2026-05-12 22:38:18 us=573584 route_delay_window = 30 2026-05-12 22:38:18 us=573588 route_delay_defined = DISABLED 2026-05-12 22:38:18 us=573593 route_nopull = DISABLED 2026-05-12 22:38:18 us=573597 route_gateway_via_dhcp = DISABLED 2026-05-12 22:38:18 us=573601 allow_pull_fqdn = DISABLED 2026-05-12 22:38:18 us=573606 management_addr = '[UNDEF]' 2026-05-12 22:38:18 us=573611 management_port = '[UNDEF]' 2026-05-12 22:38:18 us=573616 management_user_pass = '[UNDEF]' 2026-05-12 22:38:18 us=573621 management_log_history_cache = 250 2026-05-12 22:38:18 us=573625 management_echo_buffer_size = 100 2026-05-12 22:38:18 us=573630 management_client_user = '[UNDEF]' 2026-05-12 22:38:18 us=573635 management_client_group = '[UNDEF]' 2026-05-12 22:38:18 us=573639 management_flags = 0 2026-05-12 22:38:18 us=573644 shared_secret_file = '[UNDEF]' 2026-05-12 22:38:18 us=573649 key_direction = not set 2026-05-12 22:38:18 us=573654 ciphername = 'AES-256-CBC' 2026-05-12 22:38:18 us=573659 ncp_ciphers = 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305' 2026-05-12 22:38:18 us=573664 authname = 'SHA1' 2026-05-12 22:38:18 us=573669 engine = DISABLED 2026-05-12 22:38:18 us=573674 mute_replay_warnings = ENABLED 2026-05-12 22:38:18 us=573678 replay_window = 64 2026-05-12 22:38:18 us=573683 replay_time = 15 2026-05-12 22:38:18 us=573688 packet_id_file = '[UNDEF]' 2026-05-12 22:38:18 us=573692 test_crypto = DISABLED 2026-05-12 22:38:18 us=573696 tls_server = DISABLED 2026-05-12 22:38:18 us=573701 tls_client = ENABLED 2026-05-12 22:38:18 us=573706 ca_file = '[UNDEF]' 2026-05-12 22:38:18 us=573710 ca_path = '[UNDEF]' 2026-05-12 22:38:18 us=573715 dh_file = '[UNDEF]' 2026-05-12 22:38:18 us=573720 cert_file = '[UNDEF]' 2026-05-12 22:38:18 us=573725 extra_certs_file = '[UNDEF]' 2026-05-12 22:38:18 us=573729 priv_key_file = '[UNDEF]' 2026-05-12 22:38:18 us=573734 pkcs12_file = '/etc/openvpn/client/sfx.vpn.pdobrogost.p12' 2026-05-12 22:38:18 us=573739 cipher_list = '[UNDEF]' 2026-05-12 22:38:18 us=573744 cipher_list_tls13 = '[UNDEF]' 2026-05-12 22:38:18 us=573749 tls_cert_profile = '[UNDEF]' 2026-05-12 22:38:18 us=573753 tls_verify = '[UNDEF]' 2026-05-12 22:38:18 us=573758 tls_export_peer_cert_dir = '[UNDEF]' 2026-05-12 22:38:18 us=573764 verify_x509_type = 0 2026-05-12 22:38:18 us=573769 verify_x509_name = '[UNDEF]' 2026-05-12 22:38:18 us=573773 crl_file = '[UNDEF]' 2026-05-12 22:38:18 us=573778 ns_cert_type = 0 2026-05-12 22:38:18 us=573783 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573788 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573792 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573797 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573802 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573806 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573811 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573816 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573820 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573824 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573829 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573834 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573838 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573843 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573848 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573853 remote_cert_ku[i] = 0 2026-05-12 22:38:18 us=573857 remote_cert_eku = '[UNDEF]' 2026-05-12 22:38:18 us=573862 ssl_flags = 192 2026-05-12 22:38:18 us=573866 tls_timeout = 2 2026-05-12 22:38:18 us=573870 renegotiate_bytes = -1 2026-05-12 22:38:18 us=573879 renegotiate_packets = 0 2026-05-12 22:38:18 us=573884 renegotiate_seconds = 3600 2026-05-12 22:38:18 us=573889 handshake_window = 60 2026-05-12 22:38:18 us=573894 transition_window = 3600 2026-05-12 22:38:18 us=573899 single_session = DISABLED 2026-05-12 22:38:18 us=573903 push_peer_info = DISABLED 2026-05-12 22:38:18 us=573908 tls_exit = DISABLED 2026-05-12 22:38:18 us=573913 tls_crypt_v2_metadata = '[UNDEF]' 2026-05-12 22:38:18 us=573917 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573922 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573927 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573932 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573937 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573941 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573946 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573950 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573955 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573960 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573964 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573969 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573974 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573979 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573983 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573988 pkcs11_protected_authentication = DISABLED 2026-05-12 22:38:18 us=573994 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=573998 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574003 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574010 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574014 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574020 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574024 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574029 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574032 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574038 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574043 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574047 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574051 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574055 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574059 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574064 pkcs11_private_mode = 00000000 2026-05-12 22:38:18 us=574069 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574073 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574078 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574082 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574086 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574090 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574094 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574098 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574103 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574107 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574111 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574114 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574118 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574122 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574128 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574134 pkcs11_cert_private = DISABLED 2026-05-12 22:38:18 us=574138 pkcs11_pin_cache_period = -1 2026-05-12 22:38:18 us=574143 pkcs11_id = '[UNDEF]' 2026-05-12 22:38:18 us=574146 pkcs11_id_management = DISABLED 2026-05-12 22:38:18 us=574152 server_network = 0.0.0.0 2026-05-12 22:38:18 us=574156 server_netmask = 0.0.0.0 2026-05-12 22:38:18 us=574161 server_network_ipv6 = :: 2026-05-12 22:38:18 us=574166 server_netbits_ipv6 = 0 2026-05-12 22:38:18 us=574171 server_bridge_ip = 0.0.0.0 2026-05-12 22:38:18 us=574176 server_bridge_netmask = 0.0.0.0 2026-05-12 22:38:18 us=574181 server_bridge_pool_start = 0.0.0.0 2026-05-12 22:38:18 us=574186 server_bridge_pool_end = 0.0.0.0 2026-05-12 22:38:18 us=574190 ifconfig_pool_defined = DISABLED 2026-05-12 22:38:18 us=574195 ifconfig_pool_start = 0.0.0.0 2026-05-12 22:38:18 us=574199 ifconfig_pool_end = 0.0.0.0 2026-05-12 22:38:18 us=574203 ifconfig_pool_netmask = 0.0.0.0 2026-05-12 22:38:18 us=574207 ifconfig_pool_persist_filename = '[UNDEF]' 2026-05-12 22:38:18 us=574210 ifconfig_pool_persist_refresh_freq = 600 2026-05-12 22:38:18 us=574214 ifconfig_ipv6_pool_defined = DISABLED 2026-05-12 22:38:18 us=574219 ifconfig_ipv6_pool_base = :: 2026-05-12 22:38:18 us=574224 ifconfig_ipv6_pool_netbits = 0 2026-05-12 22:38:18 us=574230 n_bcast_buf = 256 2026-05-12 22:38:18 us=574235 tcp_queue_limit = 64 2026-05-12 22:38:18 us=574239 real_hash_size = 0 2026-05-12 22:38:18 us=574243 virtual_hash_size = 0 2026-05-12 22:38:18 us=574248 client_connect_script = '[UNDEF]' 2026-05-12 22:38:18 us=574253 learn_address_script = '[UNDEF]' 2026-05-12 22:38:18 us=574257 client_disconnect_script = '[UNDEF]' 2026-05-12 22:38:18 us=574262 client_crresponse_script = '[UNDEF]' 2026-05-12 22:38:18 us=574267 client_config_dir = '[UNDEF]' 2026-05-12 22:38:18 us=574272 ccd_exclusive = DISABLED 2026-05-12 22:38:18 us=574276 tmp_dir = '/tmp' 2026-05-12 22:38:18 us=574282 push_ifconfig_defined = DISABLED 2026-05-12 22:38:18 us=574287 push_ifconfig_local = 0.0.0.0 2026-05-12 22:38:18 us=574292 push_ifconfig_remote_netmask = 0.0.0.0 2026-05-12 22:38:18 us=574297 push_ifconfig_ipv6_defined = DISABLED 2026-05-12 22:38:18 us=574302 push_ifconfig_ipv6_local = ::/0 2026-05-12 22:38:18 us=574306 push_ifconfig_ipv6_remote = :: 2026-05-12 22:38:18 us=574311 enable_c2c = DISABLED 2026-05-12 22:38:18 us=574316 duplicate_cn = DISABLED 2026-05-12 22:38:18 us=574320 cf_max = 0 2026-05-12 22:38:18 us=574325 cf_per = 0 2026-05-12 22:38:18 us=574330 cf_initial_max = 100 2026-05-12 22:38:18 us=574334 cf_initial_per = 10 2026-05-12 22:38:18 us=574338 max_clients = 1024 2026-05-12 22:38:18 us=574343 max_routes_per_client = 256 2026-05-12 22:38:18 us=574348 auth_user_pass_verify_script = '[UNDEF]' 2026-05-12 22:38:18 us=574353 auth_user_pass_verify_script_via_file = DISABLED 2026-05-12 22:38:18 us=574358 auth_token_generate = DISABLED 2026-05-12 22:38:18 us=574363 force_key_material_export = DISABLED 2026-05-12 22:38:18 us=574367 auth_token_lifetime = 0 2026-05-12 22:38:18 us=574372 auth_token_secret_file = '[UNDEF]' 2026-05-12 22:38:18 us=574377 port_share_host = '[UNDEF]' 2026-05-12 22:38:18 us=574381 port_share_port = '[UNDEF]' 2026-05-12 22:38:18 us=574386 vlan_tagging = DISABLED 2026-05-12 22:38:18 us=574392 vlan_accept = all 2026-05-12 22:38:18 us=574396 vlan_pvid = 1 2026-05-12 22:38:18 us=574401 client = ENABLED 2026-05-12 22:38:18 us=574406 pull = ENABLED 2026-05-12 22:38:18 us=574410 auth_user_pass_file = '[UNDEF]' 2026-05-12 22:38:18 us=574421 OpenVPN 2.7.3 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO] 2026-05-12 22:38:18 us=574431 library versions: OpenSSL 3.5.5 27 Jan 2026, LZO 2.10 2026-05-12 22:38:18 us=574447 DCO version: 7.0.4-200.fc44.x86_64 #1 SMP PREEMPT_DYNAMIC Fri May 8 16:02:43 UTC 2026 2026-05-12 22:38:18 us=574960 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. 2026-05-12 22:38:18 us=574971 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2026-05-12 22:38:18 us=586621 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this 2026-05-12 22:38:18 us=590349 Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ] 2026-05-12 22:38:18 us=600629 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ] 2026-05-12 22:38:18 us=600702 TCP/UDP: Preserving recently used remote address: [AF_INET]178.183.21.13:1196 2026-05-12 22:38:18 us=600727 Socket Buffers: R=[212992->212992] S=[212992->212992] 2026-05-12 22:38:18 us=600736 UDPv4 link local: (not bound) 2026-05-12 22:38:18 us=600743 UDPv4 link remote: [AF_INET]178.183.21.13:1196 WR2026-05-12 22:38:18 us=608498 TLS: Initial packet from [AF_INET]178.183.21.13:1196, sid=3e4feb42 c42ad944 WWRRWRWRWR2026-05-12 22:38:18 us=633180 VERIFY OK: depth=2, C=PL, L=Warszawa, O=Sfx, OU=Sfx CA, CN=Sfx Generation II Root CA 2026-05-12 22:38:18 us=633384 VERIFY OK: depth=1, C=PL, O=Sfx, OU=Sfx CA, CN=Sfx VPN Generation II CA 2026-05-12 22:38:18 us=633514 VERIFY OK: depth=0, C=PL, O=Sfx, OU=Sfx VPN, CN=vpn.sfx.pl WRWWWWWRRRRRWR2026-05-12 22:38:18 us=668981 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 256 bits ECprime256v1, peer signing digest/type: rsa_pkcs1_sha256 RSA, key agreement: secp256r1 2026-05-12 22:38:18 us=669066 [vpn.sfx.pl] Peer Connection Initiated with [AF_INET]178.183.21.13:1196 2026-05-12 22:38:18 us=669092 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1 2026-05-12 22:38:18 us=669243 TLS: tls_multi_process: initial untrusted session promoted to trusted W2026-05-12 22:38:19 us=891668 SENT CONTROL [vpn.sfx.pl]: 'PUSH_REQUEST' (status=1) WRR2026-05-12 22:38:19 us=900289 PUSH: Received control message: 'PUSH_REPLY,route 16.199.114.0 255.255.255.0,route 10.0.0.0 255.0.0.0,dhcp-option DNS 16.199.114.1,explicit-exit-notify 2,route-gateway 10.92.32.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.92.32.186 255.255.252.0,peer-id 0,cipher AES-256-GCM' 2026-05-12 22:38:19 us=900514 OPTIONS IMPORT: --ifconfig/up options modified 2026-05-12 22:38:19 us=900547 OPTIONS IMPORT: route options modified 2026-05-12 22:38:19 us=900566 OPTIONS IMPORT: route-related options modified 2026-05-12 22:38:19 us=900583 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified 2026-05-12 22:38:19 us=900627 net_route_v4_best_gw query: dst 0.0.0.0 2026-05-12 22:38:19 us=900863 net_route_v4_best_gw result: via 192.168.10.1 dev enp5s0 2026-05-12 22:38:19 us=901020 net_route_v4_best_gw query: dst 178.183.21.13 2026-05-12 22:38:19 us=901157 net_route_v4_best_gw result: via 192.168.10.1 dev enp5s0 2026-05-12 22:38:19 us=901582 net_iface_new: add ovpn-sfx type ovpn 2026-05-12 22:38:19 us=902343 DCO device ovpn-sfx opened 2026-05-12 22:38:19 us=902388 ovpn-dco device [ovpn-sfx] opened 2026-05-12 22:38:19 us=902407 do_ifconfig, ipv4=1, ipv6=0 2026-05-12 22:38:19 us=902455 net_iface_mtu_set: mtu 1500 for ovpn-sfx 2026-05-12 22:38:19 us=902625 net_iface_up: set ovpn-sfx up 2026-05-12 22:38:19 us=903477 net_addr_v4_add: 10.92.32.186/22 dev ovpn-sfx 2026-05-12 22:38:19 us=904463 /etc/openvpn/client/update-systemd-resolved.sh ovpn-sfx 1500 0 10.92.32.186 255.255.252.0 init <14>May 12 22:38:19 update-systemd-resolved.sh: Link 'ovpn-sfx' coming up <14>May 12 22:38:19 update-systemd-resolved.sh: Adding DNS Search Domain sfx.local <14>May 12 22:38:19 update-systemd-resolved.sh: Adding IPv4 DNS Server 16.199.114.1 <14>May 12 22:38:19 update-systemd-resolved.sh: SetLinkDNS(8 1 2 4 16 193 144 1) <14>May 12 22:38:19 update-systemd-resolved.sh: SetLinkDomains(8 1 sfx.local false) 2026-05-12 22:38:19 us=926086 net_route_v4_add: 16.199.114.0/24 via 10.92.32.1 dev [NULL] table 0 metric 200 2026-05-12 22:38:19 us=926327 net_route_v4_add: 10.0.0.0/8 via 10.92.32.1 dev [NULL] table 0 metric 200 2026-05-12 22:38:19 us=926519 Data Channel MTU parms [ mss_fix:1400 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1768 tailroom:562 ET:0 ] 2026-05-12 22:38:19 us=926796 Initialization Sequence Completed 2026-05-12 22:38:19 us=926806 Data Channel: cipher 'AES-256-GCM', peer-id: 0 2026-05-12 22:38:19 us=926814 Timers: ping 10, ping-restart 60 2026-05-12 22:38:19 us=926819 Protocol options: explicit-exit-notify 2 W
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
