root@039bd73:~# journalctl --no-page -u openvpn-resin -- Logs begin at Wed 2018-01-10 13:59:29 UTC, end at Mon 2018-03-05 12:51:19 UTC. -- Mar 05 12:21:01 039bd73 systemd[1]: Starting OpenVPN Application On Resin... Mar 05 12:21:01 039bd73 systemd[1]: openvpn-resin.service: PID file /var/run/openvpn/resin.pid not readable (yet?) after start: No such file or directory Mar 05 12:21:01 039bd73 openvpn[711]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Mar 05 12:21:01 039bd73 systemd[1]: Started OpenVPN Application On Resin. Mar 05 12:21:01 039bd73 openvpn[711]: Socket Buffers: R=[87380->87380] S=[16384->16384] Mar 05 12:21:01 039bd73 openvpn[711]: RESOLVE: Cannot resolve host address: vpn.resin.io: No address associated with hostname Mar 05 12:21:01 039bd73 openvpn[711]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay Mar 05 12:21:01 039bd73 openvpn[711]: RESOLVE: Cannot resolve host address: vpn.resin.io: No address associated with hostname Mar 05 12:21:06 039bd73 openvpn[711]: RESOLVE: Cannot resolve host address: vpn.resin.io: No address associated with hostname Mar 05 12:21:11 039bd73 openvpn[711]: Attempting to establish TCP connection with [AF_INET]54.236.88.166:443 [nonblock] Mar 05 12:21:12 039bd73 openvpn[711]: TCP connection established with [AF_INET]54.236.88.166:443 Mar 05 12:21:12 039bd73 openvpn[711]: TCPv4_CLIENT link local: [undef] Mar 05 12:21:12 039bd73 openvpn[711]: TCPv4_CLIENT link remote: [AF_INET]54.236.88.166:443 Mar 05 12:21:12 039bd73 openvpn[711]: TLS: Initial packet from [AF_INET]54.236.88.166:443, sid=03df01c0 64282ec0 Mar 05 12:21:12 039bd73 openvpn[711]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Mar 05 12:21:13 039bd73 openvpn[711]: VERIFY OK: depth=1, C=AU, ST=Some-State, O=Internet Widgits Pty Ltd Mar 05 12:21:13 039bd73 openvpn[711]: Validating certificate key usage Mar 05 12:21:13 039bd73 openvpn[711]: ++ Certificate has key usage 00a0, expects 00a0 Mar 05 12:21:13 039bd73 openvpn[711]: VERIFY KU OK Mar 05 12:21:13 039bd73 openvpn[711]: Validating certificate extended key usage Mar 05 12:21:13 039bd73 openvpn[711]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Mar 05 12:21:13 039bd73 openvpn[711]: VERIFY EKU OK Mar 05 12:21:13 039bd73 openvpn[711]: VERIFY OK: depth=0, C=US, ST=WA, L=Seattle, O=Resin.io, OU=VPN, CN=ResinVPN Mar 05 12:21:13 039bd73 openvpn[711]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Mar 05 12:21:13 039bd73 openvpn[711]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mar 05 12:21:13 039bd73 openvpn[711]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Mar 05 12:21:13 039bd73 openvpn[711]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mar 05 12:21:13 039bd73 openvpn[711]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Mar 05 12:21:13 039bd73 openvpn[711]: [ResinVPN] Peer Connection Initiated with [AF_INET]54.236.88.166:443 Mar 05 12:21:16 039bd73 openvpn[711]: SENT CONTROL [ResinVPN]: 'PUSH_REQUEST' (status=1) Mar 05 12:21:16 039bd73 openvpn[711]: PUSH: Received control message: 'PUSH_REPLY,route 52.4.252.97,sndbuf 0,rcvbuf 0,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.2.27.105 52.4.252.97,peer-id 0' Mar 05 12:21:16 039bd73 openvpn[711]: OPTIONS IMPORT: timers and/or timeouts modified Mar 05 12:21:16 039bd73 openvpn[711]: OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Mar 05 12:21:16 039bd73 openvpn[711]: Socket Buffers: R=[341760->341760] S=[44800->44800] Mar 05 12:21:16 039bd73 openvpn[711]: OPTIONS IMPORT: --socket-flags option modified Mar 05 12:21:16 039bd73 openvpn[711]: Socket flags: TCP_NODELAY=1 succeeded Mar 05 12:21:16 039bd73 openvpn[711]: OPTIONS IMPORT: --ifconfig/up options modified Mar 05 12:21:16 039bd73 openvpn[711]: OPTIONS IMPORT: route options modified Mar 05 12:21:16 039bd73 openvpn[711]: OPTIONS IMPORT: peer-id set Mar 05 12:21:16 039bd73 openvpn[711]: OPTIONS IMPORT: adjusting link_mtu to 1547 Mar 05 12:21:16 039bd73 openvpn[711]: ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=b8:27:eb:67:70:23 Mar 05 12:21:16 039bd73 openvpn[711]: TUN/TAP device resin-vpn opened Mar 05 12:21:16 039bd73 openvpn[711]: TUN/TAP TX queue length set to 100 Mar 05 12:21:16 039bd73 openvpn[711]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Mar 05 12:21:16 039bd73 openvpn[711]: /sbin/ip link set dev resin-vpn up mtu 1500 Mar 05 12:21:16 039bd73 openvpn[711]: /sbin/ip addr add dev resin-vpn local 10.2.27.105 peer 52.4.252.97 Mar 05 12:21:16 039bd73 openvpn[711]: /etc/openvpn/upscript.sh resin-vpn 1500 1547 10.2.27.105 52.4.252.97 init Mar 05 12:21:16 039bd73 openvpn[711]: /sbin/ip route add 52.4.252.97/32 via 52.4.252.97 Mar 05 12:21:16 039bd73 openvpn[711]: ERROR: Linux route add command failed: external program exited with error status: 2 Mar 05 12:21:16 039bd73 openvpn[711]: GID set to openvpn Mar 05 12:21:16 039bd73 openvpn[711]: UID set to openvpn Mar 05 12:21:16 039bd73 openvpn[711]: Initialization Sequence Completed Mar 05 12:40:08 039bd73 openvpn[711]: [ResinVPN] Inactivity timeout (--ping-restart), restarting Mar 05 12:40:08 039bd73 openvpn[711]: /etc/openvpn/downscript.sh resin-vpn 1500 1547 10.2.27.105 52.4.252.97 restart Mar 05 12:40:08 039bd73 openvpn[711]: SIGUSR1[soft,ping-restart] received, process restarting Mar 05 12:40:08 039bd73 openvpn[711]: Restart pause, 5 second(s) Mar 05 12:40:13 039bd73 openvpn[711]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Mar 05 12:40:13 039bd73 openvpn[711]: Socket Buffers: R=[87380->87380] S=[16384->16384] Mar 05 12:40:13 039bd73 openvpn[711]: Attempting to establish TCP connection with [AF_INET]34.201.185.182:443 [nonblock] Mar 05 12:40:14 039bd73 openvpn[711]: TCP connection established with [AF_INET]34.201.185.182:443 Mar 05 12:40:14 039bd73 openvpn[711]: Socket flags: TCP_NODELAY=1 succeeded Mar 05 12:40:14 039bd73 openvpn[711]: TCPv4_CLIENT link local: [undef] Mar 05 12:40:14 039bd73 openvpn[711]: TCPv4_CLIENT link remote: [AF_INET]34.201.185.182:443 Mar 05 12:40:14 039bd73 openvpn[711]: TLS: Initial packet from [AF_INET]34.201.185.182:443, sid=27791b6c b0ac0ca5 Mar 05 12:40:15 039bd73 openvpn[711]: VERIFY OK: depth=1, C=AU, ST=Some-State, O=Internet Widgits Pty Ltd Mar 05 12:40:15 039bd73 openvpn[711]: Validating certificate key usage Mar 05 12:40:15 039bd73 openvpn[711]: ++ Certificate has key usage 00a0, expects 00a0 Mar 05 12:40:15 039bd73 openvpn[711]: VERIFY KU OK Mar 05 12:40:15 039bd73 openvpn[711]: Validating certificate extended key usage Mar 05 12:40:15 039bd73 openvpn[711]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Mar 05 12:40:15 039bd73 openvpn[711]: VERIFY EKU OK Mar 05 12:40:15 039bd73 openvpn[711]: VERIFY OK: depth=0, C=US, ST=WA, L=Seattle, O=Resin.io, OU=VPN, CN=ResinVPN Mar 05 12:40:15 039bd73 openvpn[711]: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Mar 05 12:40:15 039bd73 openvpn[711]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mar 05 12:40:15 039bd73 openvpn[711]: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Mar 05 12:40:15 039bd73 openvpn[711]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mar 05 12:40:15 039bd73 openvpn[711]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Mar 05 12:40:15 039bd73 openvpn[711]: [ResinVPN] Peer Connection Initiated with [AF_INET]34.201.185.182:443 Mar 05 12:40:17 039bd73 openvpn[711]: SENT CONTROL [ResinVPN]: 'PUSH_REQUEST' (status=1) Mar 05 12:40:17 039bd73 openvpn[711]: PUSH: Received control message: 'PUSH_REPLY,route 52.4.252.97,sndbuf 0,rcvbuf 0,ping 10,ping-restart 60,socket-flags TCP_NODELAY,ifconfig 10.2.27.105 52.4.252.97,peer-id 0' Mar 05 12:40:17 039bd73 openvpn[711]: OPTIONS IMPORT: timers and/or timeouts modified Mar 05 12:40:17 039bd73 openvpn[711]: OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Mar 05 12:40:17 039bd73 openvpn[711]: Socket Buffers: R=[341760->341760] S=[44800->44800] Mar 05 12:40:17 039bd73 openvpn[711]: OPTIONS IMPORT: --socket-flags option modified Mar 05 12:40:17 039bd73 openvpn[711]: Socket flags: TCP_NODELAY=1 succeeded Mar 05 12:40:17 039bd73 openvpn[711]: OPTIONS IMPORT: --ifconfig/up options modified Mar 05 12:40:17 039bd73 openvpn[711]: OPTIONS IMPORT: route options modified Mar 05 12:40:17 039bd73 openvpn[711]: OPTIONS IMPORT: peer-id set Mar 05 12:40:17 039bd73 openvpn[711]: OPTIONS IMPORT: adjusting link_mtu to 1547 Mar 05 12:40:17 039bd73 openvpn[711]: Preserving previous TUN/TAP instance: resin-vpn Mar 05 12:40:17 039bd73 openvpn[711]: /etc/openvpn/upscript.sh resin-vpn 1500 1547 10.2.27.105 52.4.252.97 restart Mar 05 12:40:17 039bd73 openvpn[711]: Initialization Sequence Completed