search

haugene / docker-transmission-openvpn

Docker container running Transmission torrent client with WebUI over an OpenVPN tunnel
GNU General Public License v3.0
4.1k stars 1.21k forks source link

AUTH_FAILED, data channel cipher negotiation failed (no shared cipher) #2820

Open neuroverflow opened 6 months ago

neuroverflow commented 6 months ago

Is there a pinned issue for this?

Is there an existing or similar issue/discussion for this?

Is there any comment in the documentation for this?

Is this related to a provider?

Are you using the latest release?

Have you tried using the dev branch latest?

Docker run config used

transmission-openvpn: cap_add:

Current Behavior

Stopped suddenly to connect to NordVPN AUTH_FAILED, data channel cipher negotiation failed (no shared cipher)

Expected Behavior

Connect to NordVPN like before

How have you tried to solve the problem?

tried dev branch googled ;)

Log output

2024-03-30T12:46:44.375322588Z Starting container with revision: 54acc3acfa771a96961e2667b6b6e81f78b1fff8 2024-03-30T12:46:44.375427124Z TRANSMISSION_HOME is currently set to: /config/transmission-home 2024-03-30T12:46:44.397590577Z One or more OVERRIDE_DNS addresses found. Will use them to overwrite /etc/resolv.conf 2024-03-30T12:46:44.540854119Z Creating TUN device /dev/net/tun 2024-03-30T12:46:44.547534246Z Using OpenVPN provider: NORDVPN 2024-03-30T12:46:44.547631411Z Running with VPN_CONFIG_SOURCE auto 2024-03-30T12:46:44.547642272Z Provider NORDVPN has a bundled setup script. Defaulting to internal config 2024-03-30T12:46:44.547703486Z Executing setup script for NORDVPN 2024-03-30T12:46:44.550604948Z /etc/openvpn/nordvpn/.. 2024-03-30T12:46:45.768720277Z INFO: OVPN: Checking curl installation 2024-03-30T12:46:45.824061534Z INFO: OVPN: DNS resolution ok 2024-03-30T12:46:46.896241735Z INFO: OVPN: ok, configurations download site reachable 2024-03-30T12:46:46.896416494Z INFO: OVPN: Removing existing configs in /etc/openvpn/nordvpn 2024-03-30T12:46:48.176878439Z Checking NORDPVN API responses 2024-03-30T12:46:48.359326188Z INFO: OVPN:Selecting the best server... 2024-03-30T12:46:48.408486489Z INFO: OVPN: Searching for country : IT (106) 2024-03-30T12:46:48.409971224Z WARNING: OVPN: empty or invalid NORDVPN_CATEGORY (value=). ignoring this parameter. Possible values are: legacy_double_vpn,legacy_onion_over_vpn,legacy_ultra_fast_tv,legacy_anti_ddos,legacy_dedicated_ip,legacy_standard,legacy_netflix_usa,legacy_p2p,legacy_obfuscated_servers,europe,the_americas,asia_pacific,africa_the_middle_east_and_india,anycast-dns,geo_dns,grafana,kapacitor,legacy_socks5_proxy,fastnetmon,. Please check https://haugene.github.io/docker-transmission-openvpn/provider-specific/#nordvpn 2024-03-30T12:46:48.411305853Z INFO: OVPN:Searching for technology: openvpn_tcp 2024-03-30T12:46:48.926137472Z INFO: OVPN: Best server : it232.nordvpn.com, load: null 2024-03-30T12:46:48.926256771Z Best server : it232.nordvpn.com 2024-03-30T12:46:48.928113994Z INFO: OVPN: Downloading config: it232.nordvpn.com.ovpn 2024-03-30T12:46:48.928153856Z INFO: OVPN: Downloading from: https://downloads.nordcdn.com/configs/files/ovpn_tcp/servers/it232.nordvpn.com.tcp.ovpn 2024-03-30T12:46:49.243238817Z OVPN: NORDVPN: selected: it232.nordvpn.com, VPN_PROVIDER_HOME: /etc/openvpn/nordvpn 2024-03-30T12:46:49.250497354Z Starting OpenVPN using config it232.nordvpn.com.ovpn 2024-03-30T12:46:49.254698828Z Modifying /etc/openvpn/nordvpn/it232.nordvpn.com.ovpn for best behaviour in this container 2024-03-30T12:46:49.254834256Z Modification: Point auth-user-pass option to the username/password file 2024-03-30T12:46:49.257834969Z Modification: Change ca certificate path 2024-03-30T12:46:49.261700786Z Modification: Change ping options 2024-03-30T12:46:49.269500180Z Modification: Update/set resolv-retry to 15 seconds 2024-03-30T12:46:49.273950670Z Modification: Change tls-crypt keyfile path 2024-03-30T12:46:49.277744450Z Modification: Set output verbosity to 3 2024-03-30T12:46:49.281822060Z Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop 2024-03-30T12:46:49.285965196Z Modification: Updating status for config failure detection 2024-03-30T12:46:49.295425308Z Setting OpenVPN credentials... 2024-03-30T12:46:49.351794705Z adding route to local network 192.168.0.0/16 via 172.18.0.1 dev eth0 2024-03-30T12:46:49.362396406Z 2024-03-30 13:46:49 OpenVPN 2.5.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 29 2023 2024-03-30T12:46:49.362432511Z 2024-03-30 13:46:49 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2024-03-30T12:46:49.362718773Z 2024-03-30 13:46:49 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2024-03-30T12:46:49.362742601Z 2024-03-30 13:46:49 NOTE: --fast-io is disabled since we are not using UDP 2024-03-30T12:46:49.365491279Z 2024-03-30 13:46:49 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-03-30T12:46:49.365545584Z 2024-03-30 13:46:49 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-03-30T12:46:49.365665679Z 2024-03-30 13:46:49 TCP/UDP: Preserving recently used remote address: [AF_INET]178.249.211.7:443 2024-03-30T12:46:49.365687292Z 2024-03-30 13:46:49 Socket Buffers: R=[131072->131072] S=[16384->16384] 2024-03-30T12:46:49.365701156Z 2024-03-30 13:46:49 Attempting to establish TCP connection with [AF_INET]178.249.211.7:443 [nonblock] 2024-03-30T12:46:49.403957835Z 2024-03-30 13:46:49 TCP connection established with [AF_INET]178.249.211.7:443 2024-03-30T12:46:49.403988467Z 2024-03-30 13:46:49 TCP_CLIENT link local: (not bound) 2024-03-30T12:46:49.403996129Z 2024-03-30 13:46:49 TCP_CLIENT link remote: [AF_INET]178.249.211.7:443 2024-03-30T12:46:49.442350973Z 2024-03-30 13:46:49 TLS: Initial packet from [AF_INET]178.249.211.7:443, sid=40aad1c9 ca4ed2a9 2024-03-30T12:46:49.442546320Z 2024-03-30 13:46:49 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this 2024-03-30T12:46:49.608717741Z 2024-03-30 13:46:49 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA 2024-03-30T12:46:49.608753907Z 2024-03-30 13:46:49 VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA9 2024-03-30T12:46:49.608761916Z 2024-03-30 13:46:49 VERIFY KU OK 2024-03-30T12:46:49.608768618Z 2024-03-30 13:46:49 Validating certificate extended key usage 2024-03-30T12:46:49.608775292Z 2024-03-30 13:46:49 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2024-03-30T12:46:49.608781884Z 2024-03-30 13:46:49 VERIFY EKU OK 2024-03-30T12:46:49.608788213Z 2024-03-30 13:46:49 VERIFY X509NAME OK: CN=it232.nordvpn.com 2024-03-30T12:46:49.608794643Z 2024-03-30 13:46:49 VERIFY OK: depth=0, CN=it232.nordvpn.com 2024-03-30T12:46:49.726085595Z 2024-03-30 13:46:49 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500' 2024-03-30T12:46:49.726175813Z 2024-03-30 13:46:49 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA512 2024-03-30T12:46:49.726204488Z 2024-03-30 13:46:49 [it232.nordvpn.com] Peer Connection Initiated with [AF_INET]178.249.211.7:443 2024-03-30T12:46:50.773692351Z 2024-03-30 13:46:50 SENT CONTROL [it232.nordvpn.com]: 'PUSH_REQUEST' (status=1) 2024-03-30T12:46:50.773746195Z 2024-03-30 13:46:50 AUTH: Received control message: AUTH_FAILED 2024-03-30T12:46:50.774356467Z 2024-03-30 13:46:50 SIGTERM[soft,auth-failure] received, process exiting 2024-03-30T12:46:51.480143945Z Starting container with revision: 54acc3acfa771a96961e2667b6b6e81f78b1fff8 2024-03-30T12:46:51.480213769Z TRANSMISSION_HOME is currently set to: /config/transmission-home 2024-03-30T12:46:51.487235136Z One or more OVERRIDE_DNS addresses found. Will use them to overwrite /etc/resolv.conf 2024-03-30T12:46:51.613413232Z Creating TUN device /dev/net/tun 2024-03-30T12:46:51.623591018Z Using OpenVPN provider: NORDVPN 2024-03-30T12:46:51.623671251Z Running with VPN_CONFIG_SOURCE auto 2024-03-30T12:46:51.623777274Z Provider NORDVPN has a bundled setup script. Defaulting to internal config 2024-03-30T12:46:51.623794721Z Executing setup script for NORDVPN 2024-03-30T12:46:51.626800208Z /etc/openvpn/nordvpn/.. 2024-03-30T12:46:52.847545311Z INFO: OVPN: Checking curl installation 2024-03-30T12:46:52.897856068Z INFO: OVPN: DNS resolution ok 2024-03-30T12:46:53.973590040Z INFO: OVPN: ok, configurations download site reachable 2024-03-30T12:46:53.973733062Z INFO: OVPN: Removing existing configs in /etc/openvpn/nordvpn 2024-03-30T12:46:55.190386682Z Checking NORDPVN API responses 2024-03-30T12:46:55.358647641Z INFO: OVPN:Selecting the best server... 2024-03-30T12:46:55.398244137Z INFO: OVPN: Searching for country : IT (106) 2024-03-30T12:46:55.399901720Z WARNING: OVPN: empty or invalid NORDVPN_CATEGORY (value=). ignoring this parameter. Possible values are: legacy_double_vpn,legacy_onion_over_vpn,legacy_ultra_fast_tv,legacy_anti_ddos,legacy_dedicated_ip,legacy_standard,legacy_netflix_usa,legacy_p2p,legacy_obfuscated_servers,europe,the_americas,asia_pacific,africa_the_middle_east_and_india,anycast-dns,geo_dns,grafana,kapacitor,legacy_socks5_proxy,fastnetmon,. Please check https://haugene.github.io/docker-transmission-openvpn/provider-specific/#nordvpn 2024-03-30T12:46:55.400973293Z INFO: OVPN:Searching for technology: openvpn_tcp 2024-03-30T12:46:55.865309984Z INFO: OVPN: Best server : it232.nordvpn.com, load: null 2024-03-30T12:46:55.865356790Z Best server : it232.nordvpn.com 2024-03-30T12:46:55.867126404Z INFO: OVPN: Downloading config: it232.nordvpn.com.ovpn 2024-03-30T12:46:55.867161106Z INFO: OVPN: Downloading from: https://downloads.nordcdn.com/configs/files/ovpn_tcp/servers/it232.nordvpn.com.tcp.ovpn 2024-03-30T12:46:56.040305134Z OVPN: NORDVPN: selected: it232.nordvpn.com, VPN_PROVIDER_HOME: /etc/openvpn/nordvpn 2024-03-30T12:46:56.048354090Z Starting OpenVPN using config it232.nordvpn.com.ovpn 2024-03-30T12:46:56.052789772Z Modifying /etc/openvpn/nordvpn/it232.nordvpn.com.ovpn for best behaviour in this container 2024-03-30T12:46:56.052821586Z Modification: Point auth-user-pass option to the username/password file 2024-03-30T12:46:56.055476192Z Modification: Change ca certificate path 2024-03-30T12:46:56.059226829Z Modification: Change ping options 2024-03-30T12:46:56.067245142Z Modification: Update/set resolv-retry to 15 seconds 2024-03-30T12:46:56.073819230Z Modification: Change tls-crypt keyfile path 2024-03-30T12:46:56.077575020Z Modification: Set output verbosity to 3 2024-03-30T12:46:56.082228404Z Modification: Remap SIGUSR1 signal to SIGTERM, avoid OpenVPN restart loop 2024-03-30T12:46:56.086428342Z Modification: Updating status for config failure detection 2024-03-30T12:46:56.094021220Z Setting OpenVPN credentials... 2024-03-30T12:46:56.147671572Z adding route to local network 192.168.0.0/16 via 172.18.0.1 dev eth0 2024-03-30T12:46:56.157044000Z 2024-03-30 13:46:56 OpenVPN 2.5.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 29 2023 2024-03-30T12:46:56.157082051Z 2024-03-30 13:46:56 library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10 2024-03-30T12:46:56.157425094Z 2024-03-30 13:46:56 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts 2024-03-30T12:46:56.157446347Z 2024-03-30 13:46:56 NOTE: --fast-io is disabled since we are not using UDP 2024-03-30T12:46:56.159371021Z 2024-03-30 13:46:56 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-03-30T12:46:56.159392722Z 2024-03-30 13:46:56 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication 2024-03-30T12:46:56.159608746Z 2024-03-30 13:46:56 TCP/UDP: Preserving recently used remote address: [AF_INET]178.249.211.7:443 2024-03-30T12:46:56.159659347Z 2024-03-30 13:46:56 Socket Buffers: R=[131072->131072] S=[16384->16384] 2024-03-30T12:46:56.159695880Z 2024-03-30 13:46:56 Attempting to establish TCP connection with [AF_INET]178.249.211.7:443 [nonblock] 2024-03-30T12:46:56.198622775Z 2024-03-30 13:46:56 TCP connection established with [AF_INET]178.249.211.7:443 2024-03-30T12:46:56.198662700Z 2024-03-30 13:46:56 TCP_CLIENT link local: (not bound) 2024-03-30T12:46:56.198672535Z 2024-03-30 13:46:56 TCP_CLIENT link remote: [AF_INET]178.249.211.7:443 2024-03-30T12:46:56.237788404Z 2024-03-30 13:46:56 TLS: Initial packet from [AF_INET]178.249.211.7:443, sid=af9ca463 10cb6ea5 2024-03-30T12:46:56.237903256Z 2024-03-30 13:46:56 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this 2024-03-30T12:46:56.405610169Z 2024-03-30 13:46:56 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA 2024-03-30T12:46:56.405969101Z 2024-03-30 13:46:56 VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA9 2024-03-30T12:46:56.406342379Z 2024-03-30 13:46:56 VERIFY KU OK 2024-03-30T12:46:56.406381932Z 2024-03-30 13:46:56 Validating certificate extended key usage 2024-03-30T12:46:56.406391364Z 2024-03-30 13:46:56 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication 2024-03-30T12:46:56.406398192Z 2024-03-30 13:46:56 VERIFY EKU OK 2024-03-30T12:46:56.406404654Z 2024-03-30 13:46:56 VERIFY X509NAME OK: CN=it232.nordvpn.com 2024-03-30T12:46:56.406411247Z 2024-03-30 13:46:56 VERIFY OK: depth=0, CN=it232.nordvpn.com 2024-03-30T12:46:56.523572110Z 2024-03-30 13:46:56 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1532', remote='tun-mtu 1500' 2024-03-30T12:46:56.523613650Z 2024-03-30 13:46:56 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA512 2024-03-30T12:46:56.523624325Z 2024-03-30 13:46:56 [it232.nordvpn.com] Peer Connection Initiated with [AF_INET]178.249.211.7:443 2024-03-30T12:46:57.570931965Z 2024-03-30 13:46:57 SENT CONTROL [it232.nordvpn.com]: 'PUSH_REQUEST' (status=1) 2024-03-30T12:46:57.702147442Z 2024-03-30 13:46:57 AUTH: Received control message: AUTH_FAILED 2024-03-30T12:46:57.702329770Z 2024-03-30 13:46:57 SIGTERM[soft,auth-failure] received, process exiting

HW/SW Environment

- OS: Ubuntu server
- Docker: 25.0.4

Anything else?

No response

ilike2burnthing commented 6 months ago

No luck here, changing it to either cipher AES-256-GCM or data-ciphers AES-256-GCM, for either the container or the OpenVPN Windows client.

gchenfc commented 6 months ago

The original issue is data channel cipher negotiation failed (no shared cipher). This can be resolved in two ways. ...

Could somebody tell me where configure-openvpn.sh would be located? I am running the container on a Synology NAS.

@pjs0216 If you are running using the docker hub image (haugene/transmission-openvpn), then you'll want to clone the repo, build, then run using your own image. For example,

git clone https://github.com/haugene/docker-transmission-openvpn.git
cd docker-transmission-openvpn
# edit the file in ./openvpn/nordvpn/configure-openvpn.sh
docker build -t my-custom-transmission-openvpn .
docker run [options] my-custom-transmission-openvpn

(docker-build will take a hot sec, maybe 10min or so) (in docker-run or your docker-compose.yml file, replace haugene/transmission-openvpn with my-custom-transmission-openvpn)

P.S. commenting out the line @erdemkose suggested worked for me (at the expense of NordVPN giving a deprecation warning, but at least it works). Might have gotten lucky with the server but seems to be working for now.

erdemkose commented 6 months ago

No luck here, changing it to either cipher AES-256-GCM or data-ciphers AES-256-GCM, for either the container or the OpenVPN Windows client.

I have three ovpn files. I imported them all into Tunnelblick on macOS and the result are below.

@ilike2burnthing Maybe you are having a problem because of openvpn client version. Can you share the ovpn file and the error you get?

ilike2burnthing commented 6 months ago

data-ciphers AES-256-CBC failed for you, but what about data-ciphers AES-256-GCM?

OpenVPN Windows client is v2.6.10 and original NordVPN .ovpn files aren't working in it. Tested the following, original and modified:

fr682.nordvpn.com.tcp443 fr682.nordvpn.com.udp1194 je1.nordvpn.com.tcp443 je1.nordvpn.com.udp1194 ke1.nordvpn.com.udp1194 ky2.nordvpn.com.tcp443 sv1.nordvpn.com.tcp443 sv1.nordvpn.com.udp1194 tt1.nordvpn.com.tcp443 tt1.nordvpn.com.udp1194 uk1697.nordvpn.com.tcp443 uk1705.nordvpn.com.tcp443

What ones have you used which are working?

erdemkose commented 6 months ago

data-ciphers AES-256-CBC failed for you, but what about data-ciphers AES-256-GCM?

It works for me with fr817.nordvpn.com.

cipher AES-256-GCM
data-ciphers AES-256-GCM
OpenVPN 2.6.9 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD]
2024-04-03 05:18:17.938877 library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
erdemkose commented 6 months ago

Tried with the following, and they all work with cipher AES-256-GCM

ilike2burnthing commented 6 months ago

No luck with fr817.nordvpn.com either :/

erdemkose commented 6 months ago

Can you share the error you get?

ilike2burnthing commented 6 months ago

Verbosity set to 6:

2024-04-03 04:52:05 us=46000 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-04-03 04:52:05 us=46000 Current Parameter Settings:
2024-04-03 04:52:05 us=46000   config = 'fr817.nordvpn.com.tcp443.ovpn'
2024-04-03 04:52:05 us=46000   mode = 0
2024-04-03 04:52:05 us=46000   show_ciphers = DISABLED
2024-04-03 04:52:05 us=46000   show_digests = DISABLED
2024-04-03 04:52:05 us=46000   show_engines = DISABLED
2024-04-03 04:52:05 us=46000   genkey = DISABLED
2024-04-03 04:52:05 us=46000   genkey_filename = '[UNDEF]'
2024-04-03 04:52:05 us=46000   key_pass_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   show_tls_ciphers = DISABLED
2024-04-03 04:52:05 us=46000   connect_retry_max = 0
2024-04-03 04:52:05 us=46000 Connection profiles [0]:
2024-04-03 04:52:05 us=46000   proto = tcp-client
2024-04-03 04:52:05 us=46000   local = '[UNDEF]'
2024-04-03 04:52:05 us=46000   local_port = '[UNDEF]'
2024-04-03 04:52:05 us=46000   remote = '138.199.16.219'
2024-04-03 04:52:05 us=46000   remote_port = '443'
2024-04-03 04:52:05 us=46000   remote_float = DISABLED
2024-04-03 04:52:05 us=46000   bind_defined = DISABLED
2024-04-03 04:52:05 us=46000   bind_local = DISABLED
2024-04-03 04:52:05 us=46000   bind_ipv6_only = DISABLED
2024-04-03 04:52:05 us=46000   connect_retry_seconds = 1
2024-04-03 04:52:05 us=46000   connect_timeout = 120
2024-04-03 04:52:05 us=46000   socks_proxy_server = '[UNDEF]'
2024-04-03 04:52:05 us=46000   socks_proxy_port = '[UNDEF]'
2024-04-03 04:52:05 us=46000   tun_mtu = 1500
2024-04-03 04:52:05 us=46000   tun_mtu_defined = ENABLED
2024-04-03 04:52:05 us=46000   link_mtu = 1500
2024-04-03 04:52:05 us=46000   link_mtu_defined = DISABLED
2024-04-03 04:52:05 us=46000   tun_mtu_extra = 32
2024-04-03 04:52:05 us=46000   tun_mtu_extra_defined = ENABLED
2024-04-03 04:52:05 us=46000   tls_mtu = 1250
2024-04-03 04:52:05 us=46000   mtu_discover_type = -1
2024-04-03 04:52:05 us=46000   fragment = 0
2024-04-03 04:52:05 us=46000   mssfix = 1450
2024-04-03 04:52:05 us=46000   mssfix_encap = DISABLED
2024-04-03 04:52:05 us=46000   mssfix_fixed = DISABLED
2024-04-03 04:52:05 us=46000   explicit_exit_notification = 0
2024-04-03 04:52:05 us=46000   tls_auth_file = '[INLINE]'
2024-04-03 04:52:05 us=46000   key_direction = 1
2024-04-03 04:52:05 us=46000   tls_crypt_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   tls_crypt_v2_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000 Connection profiles END
2024-04-03 04:52:05 us=46000   remote_random = ENABLED
2024-04-03 04:52:05 us=46000   ipchange = '[UNDEF]'
2024-04-03 04:52:05 us=46000   dev = 'tun'
2024-04-03 04:52:05 us=46000   dev_type = '[UNDEF]'
2024-04-03 04:52:05 us=46000   dev_node = '[UNDEF]'
2024-04-03 04:52:05 us=46000   tuntap_options.disable_dco = ENABLED
2024-04-03 04:52:05 us=46000   lladdr = '[UNDEF]'
2024-04-03 04:52:05 us=46000   topology = 1
2024-04-03 04:52:05 us=46000   ifconfig_local = '[UNDEF]'
2024-04-03 04:52:05 us=46000   ifconfig_remote_netmask = '[UNDEF]'
2024-04-03 04:52:05 us=46000   ifconfig_noexec = DISABLED
2024-04-03 04:52:05 us=46000   ifconfig_nowarn = DISABLED
2024-04-03 04:52:05 us=46000   ifconfig_ipv6_local = '[UNDEF]'
2024-04-03 04:52:05 us=46000   ifconfig_ipv6_netbits = 0
2024-04-03 04:52:05 us=46000   ifconfig_ipv6_remote = '[UNDEF]'
2024-04-03 04:52:05 us=46000   shaper = 0
2024-04-03 04:52:05 us=46000   mtu_test = 0
2024-04-03 04:52:05 us=46000   mlock = DISABLED
2024-04-03 04:52:05 us=46000   keepalive_ping = 0
2024-04-03 04:52:05 us=46000   keepalive_timeout = 0
2024-04-03 04:52:05 us=46000   inactivity_timeout = 0
2024-04-03 04:52:05 us=46000   session_timeout = 0
2024-04-03 04:52:05 us=46000   inactivity_minimum_bytes = 0
2024-04-03 04:52:05 us=46000   ping_send_timeout = 15
2024-04-03 04:52:05 us=46000   ping_rec_timeout = 0
2024-04-03 04:52:05 us=46000   ping_rec_timeout_action = 2
2024-04-03 04:52:05 us=46000   ping_timer_remote = ENABLED
2024-04-03 04:52:05 us=46000   remap_sigusr1 = 0
2024-04-03 04:52:05 us=46000   persist_tun = ENABLED
2024-04-03 04:52:05 us=46000   persist_local_ip = DISABLED
2024-04-03 04:52:05 us=46000   persist_remote_ip = DISABLED
2024-04-03 04:52:05 us=46000   persist_key = ENABLED
2024-04-03 04:52:05 us=46000   passtos = DISABLED
2024-04-03 04:52:05 us=46000   resolve_retry_seconds = 1000000000
2024-04-03 04:52:05 us=46000   resolve_in_advance = DISABLED
2024-04-03 04:52:05 us=46000   username = '[UNDEF]'
2024-04-03 04:52:05 us=46000   groupname = '[UNDEF]'
2024-04-03 04:52:05 us=46000   chroot_dir = '[UNDEF]'
2024-04-03 04:52:05 us=46000   cd_dir = '[UNDEF]'
2024-04-03 04:52:05 us=46000   writepid = '[UNDEF]'
2024-04-03 04:52:05 us=46000   up_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   down_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   down_pre = DISABLED
2024-04-03 04:52:05 us=46000   up_restart = DISABLED
2024-04-03 04:52:05 us=46000   up_delay = DISABLED
2024-04-03 04:52:05 us=46000   daemon = DISABLED
2024-04-03 04:52:05 us=46000   log = ENABLED
2024-04-03 04:52:05 us=46000   suppress_timestamps = DISABLED
2024-04-03 04:52:05 us=46000   machine_readable_output = DISABLED
2024-04-03 04:52:05 us=46000   nice = 0
2024-04-03 04:52:05 us=46000   verbosity = 6
2024-04-03 04:52:05 us=46000   mute = 0
2024-04-03 04:52:05 us=46000   gremlin = 0
2024-04-03 04:52:05 us=46000   status_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   status_file_version = 1
2024-04-03 04:52:05 us=46000   status_file_update_freq = 60
2024-04-03 04:52:05 us=46000   occ = ENABLED
2024-04-03 04:52:05 us=46000   rcvbuf = 0
2024-04-03 04:52:05 us=46000   sndbuf = 0
2024-04-03 04:52:05 us=46000   sockflags = 0
2024-04-03 04:52:05 us=46000   fast_io = ENABLED
2024-04-03 04:52:05 us=46000   comp.alg = 1
2024-04-03 04:52:05 us=46000   comp.flags = 24
2024-04-03 04:52:05 us=46000   route_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   route_default_gateway = '[UNDEF]'
2024-04-03 04:52:05 us=46000   route_default_metric = 0
2024-04-03 04:52:05 us=46000   route_noexec = DISABLED
2024-04-03 04:52:05 us=46000   route_delay = 5
2024-04-03 04:52:05 us=46000   route_delay_window = 30
2024-04-03 04:52:05 us=46000   route_delay_defined = ENABLED
2024-04-03 04:52:05 us=46000   route_nopull = DISABLED
2024-04-03 04:52:05 us=46000   route_gateway_via_dhcp = DISABLED
2024-04-03 04:52:05 us=46000   allow_pull_fqdn = DISABLED
2024-04-03 04:52:05 us=46000   Pull filters:
2024-04-03 04:52:05 us=46000     ignore "route-method"
2024-04-03 04:52:05 us=46000   management_addr = '127.0.0.1'
2024-04-03 04:52:05 us=46000   management_port = '25356'
2024-04-03 04:52:05 us=46000   management_user_pass = 'stdin'
2024-04-03 04:52:05 us=46000   management_log_history_cache = 250
2024-04-03 04:52:05 us=46000   management_echo_buffer_size = 100
2024-04-03 04:52:05 us=46000   management_client_user = '[UNDEF]'
2024-04-03 04:52:05 us=46000   management_client_group = '[UNDEF]'
2024-04-03 04:52:05 us=46000   management_flags = 6
2024-04-03 04:52:05 us=46000   shared_secret_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   key_direction = 1
2024-04-03 04:52:05 us=46000   ciphername = 'AES-256-GCM'
2024-04-03 04:52:05 us=46000   ncp_ciphers = 'AES-256-GCM'
2024-04-03 04:52:05 us=46000   authname = 'SHA512'
2024-04-03 04:52:05 us=46000   engine = DISABLED
2024-04-03 04:52:05 us=46000   replay = ENABLED
2024-04-03 04:52:05 us=46000   mute_replay_warnings = DISABLED
2024-04-03 04:52:05 us=46000   replay_window = 64
2024-04-03 04:52:05 us=46000   replay_time = 15
2024-04-03 04:52:05 us=46000   packet_id_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   test_crypto = DISABLED
2024-04-03 04:52:05 us=46000   tls_server = DISABLED
2024-04-03 04:52:05 us=46000   tls_client = ENABLED
2024-04-03 04:52:05 us=46000   ca_file = '[INLINE]'
2024-04-03 04:52:05 us=46000   ca_path = '[UNDEF]'
2024-04-03 04:52:05 us=46000   dh_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   cert_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   extra_certs_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   priv_key_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   pkcs12_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   cryptoapi_cert = '[UNDEF]'
2024-04-03 04:52:05 us=46000   cipher_list = '[UNDEF]'
2024-04-03 04:52:05 us=46000   cipher_list_tls13 = '[UNDEF]'
2024-04-03 04:52:05 us=46000   tls_cert_profile = '[UNDEF]'
2024-04-03 04:52:05 us=46000   tls_verify = '[UNDEF]'
2024-04-03 04:52:05 us=46000   tls_export_peer_cert_dir = '[UNDEF]'
2024-04-03 04:52:05 us=46000   verify_x509_type = 1
2024-04-03 04:52:05 us=46000   verify_x509_name = 'CN=fr817.nordvpn.com'
2024-04-03 04:52:05 us=46000   crl_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   ns_cert_type = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 65535
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_ku[i] = 0
2024-04-03 04:52:05 us=46000   remote_cert_eku = 'TLS Web Server Authentication'
2024-04-03 04:52:05 us=46000   ssl_flags = 192
2024-04-03 04:52:05 us=46000   tls_timeout = 2
2024-04-03 04:52:05 us=46000   renegotiate_bytes = -1
2024-04-03 04:52:05 us=46000   renegotiate_packets = 0
2024-04-03 04:52:05 us=46000   renegotiate_seconds = 0
2024-04-03 04:52:05 us=46000   handshake_window = 60
2024-04-03 04:52:05 us=46000   transition_window = 3600
2024-04-03 04:52:05 us=46000   single_session = DISABLED
2024-04-03 04:52:05 us=46000   push_peer_info = DISABLED
2024-04-03 04:52:05 us=46000   tls_exit = DISABLED
2024-04-03 04:52:05 us=46000   tls_crypt_v2_metadata = '[UNDEF]'
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_protected_authentication = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_private_mode = 00000000
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_cert_private = DISABLED
2024-04-03 04:52:05 us=46000   pkcs11_pin_cache_period = -1
2024-04-03 04:52:05 us=46000   pkcs11_id = '[UNDEF]'
2024-04-03 04:52:05 us=46000   pkcs11_id_management = DISABLED
2024-04-03 04:52:05 us=46000   server_network = 0.0.0.0
2024-04-03 04:52:05 us=46000   server_netmask = 0.0.0.0
2024-04-03 04:52:05 us=46000   server_network_ipv6 = ::
2024-04-03 04:52:05 us=46000   server_netbits_ipv6 = 0
2024-04-03 04:52:05 us=46000   server_bridge_ip = 0.0.0.0
2024-04-03 04:52:05 us=46000   server_bridge_netmask = 0.0.0.0
2024-04-03 04:52:05 us=46000   server_bridge_pool_start = 0.0.0.0
2024-04-03 04:52:05 us=46000   server_bridge_pool_end = 0.0.0.0
2024-04-03 04:52:05 us=46000   ifconfig_pool_defined = DISABLED
2024-04-03 04:52:05 us=46000   ifconfig_pool_start = 0.0.0.0
2024-04-03 04:52:05 us=46000   ifconfig_pool_end = 0.0.0.0
2024-04-03 04:52:05 us=46000   ifconfig_pool_netmask = 0.0.0.0
2024-04-03 04:52:05 us=46000   ifconfig_pool_persist_filename = '[UNDEF]'
2024-04-03 04:52:05 us=46000   ifconfig_pool_persist_refresh_freq = 600
2024-04-03 04:52:05 us=46000   ifconfig_ipv6_pool_defined = DISABLED
2024-04-03 04:52:05 us=46000   ifconfig_ipv6_pool_base = ::
2024-04-03 04:52:05 us=46000   ifconfig_ipv6_pool_netbits = 0
2024-04-03 04:52:05 us=46000   n_bcast_buf = 256
2024-04-03 04:52:05 us=46000   tcp_queue_limit = 64
2024-04-03 04:52:05 us=46000   real_hash_size = 256
2024-04-03 04:52:05 us=46000   virtual_hash_size = 256
2024-04-03 04:52:05 us=46000   client_connect_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   learn_address_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   client_disconnect_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   client_crresponse_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   client_config_dir = '[UNDEF]'
2024-04-03 04:52:05 us=46000   ccd_exclusive = DISABLED
2024-04-03 04:52:05 us=46000   tmp_dir = 'C:\Users\WDAGUtilityAccount\AppData\Local\Temp\'
2024-04-03 04:52:05 us=46000   push_ifconfig_defined = DISABLED
2024-04-03 04:52:05 us=46000   push_ifconfig_local = 0.0.0.0
2024-04-03 04:52:05 us=46000   push_ifconfig_remote_netmask = 0.0.0.0
2024-04-03 04:52:05 us=46000   push_ifconfig_ipv6_defined = DISABLED
2024-04-03 04:52:05 us=46000   push_ifconfig_ipv6_local = ::/0
2024-04-03 04:52:05 us=46000   push_ifconfig_ipv6_remote = ::
2024-04-03 04:52:05 us=46000   enable_c2c = DISABLED
2024-04-03 04:52:05 us=46000   duplicate_cn = DISABLED
2024-04-03 04:52:05 us=46000   cf_max = 0
2024-04-03 04:52:05 us=46000   cf_per = 0
2024-04-03 04:52:05 us=46000   cf_initial_max = 100
2024-04-03 04:52:05 us=46000   cf_initial_per = 10
2024-04-03 04:52:05 us=46000   max_clients = 1024
2024-04-03 04:52:05 us=46000   max_routes_per_client = 256
2024-04-03 04:52:05 us=46000   auth_user_pass_verify_script = '[UNDEF]'
2024-04-03 04:52:05 us=46000   auth_user_pass_verify_script_via_file = DISABLED
2024-04-03 04:52:05 us=46000   auth_token_generate = DISABLED
2024-04-03 04:52:05 us=46000   force_key_material_export = DISABLED
2024-04-03 04:52:05 us=46000   auth_token_lifetime = 0
2024-04-03 04:52:05 us=46000   auth_token_secret_file = '[UNDEF]'
2024-04-03 04:52:05 us=46000   vlan_tagging = DISABLED
2024-04-03 04:52:05 us=46000   vlan_accept = all
2024-04-03 04:52:05 us=46000   vlan_pvid = 1
2024-04-03 04:52:05 us=46000   client = ENABLED
2024-04-03 04:52:05 us=46000   pull = ENABLED
2024-04-03 04:52:05 us=46000   auth_user_pass_file = 'stdin'
2024-04-03 04:52:05 us=46000   show_net_up = DISABLED
2024-04-03 04:52:05 us=46000   route_method = 3
2024-04-03 04:52:05 us=46000   block_outside_dns = DISABLED
2024-04-03 04:52:05 us=46000   ip_win32_defined = DISABLED
2024-04-03 04:52:05 us=46000   ip_win32_type = 3
2024-04-03 04:52:05 us=46000   dhcp_masq_offset = 0
2024-04-03 04:52:05 us=46000   dhcp_lease_time = 31536000
2024-04-03 04:52:05 us=46000   tap_sleep = 0
2024-04-03 04:52:05 us=46000   dhcp_options = 0x00000000
2024-04-03 04:52:05 us=46000   dhcp_renew = DISABLED
2024-04-03 04:52:05 us=46000   dhcp_pre_release = DISABLED
2024-04-03 04:52:05 us=46000   domain = '[UNDEF]'
2024-04-03 04:52:05 us=46000   netbios_scope = '[UNDEF]'
2024-04-03 04:52:05 us=46000   netbios_node_type = 0
2024-04-03 04:52:05 us=46000   disable_nbt = DISABLED
2024-04-03 04:52:05 us=46000 OpenVPN 2.6.10 [git:v2.6.10/ba0f62fb950c56a0] Windows [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] [DCO] built on Mar 20 2024
2024-04-03 04:52:05 us=46000 Windows version 10.0 (Windows 10 or greater), amd64 executable
2024-04-03 04:52:05 us=46000 library versions: OpenSSL 3.2.1 30 Jan 2024, LZO 2.10
2024-04-03 04:52:05 us=46000 DCO version: 1.0.1
2024-04-03 04:52:05 us=46000 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25356
2024-04-03 04:52:05 us=46000 Need hold release from management interface, waiting...
2024-04-03 04:52:05 us=62000 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:50716
2024-04-03 04:52:05 us=187000 MANAGEMENT: CMD 'state on'
2024-04-03 04:52:05 us=187000 MANAGEMENT: CMD 'log on all'
2024-04-03 04:52:05 us=765000 MANAGEMENT: CMD 'echo on all'
2024-04-03 04:52:05 us=765000 MANAGEMENT: CMD 'bytecount 5'
2024-04-03 04:52:05 us=765000 MANAGEMENT: CMD 'state'
2024-04-03 04:52:05 us=781000 MANAGEMENT: CMD 'hold off'
2024-04-03 04:52:05 us=781000 MANAGEMENT: CMD 'hold release'
2024-04-03 04:52:06 us=640000 MANAGEMENT: CMD 'username "Auth" "REMOVED"'
2024-04-03 04:52:06 us=671000 MANAGEMENT: CMD 'password [...]'
2024-04-03 04:52:06 us=671000 WARNING: --ping should normally be used with --ping-restart or --ping-exit
2024-04-03 04:52:06 us=671000 NOTE: --fast-io is disabled since we are running on Windows
2024-04-03 04:52:06 us=671000 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2024-04-03 04:52:06 us=671000 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2024-04-03 04:52:06 us=671000 Control Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1250 tun_max_mtu:0 headroom:126 payload:1600 tailroom:126 ET:0 ]
2024-04-03 04:52:06 us=671000 Data Channel MTU parms [ mss_fix:0 max_frag:0 tun_mtu:1500 tun_max_mtu:1600 headroom:136 payload:1800 tailroom:568 ET:32 ]
2024-04-03 04:52:06 us=671000 TCP/UDP: Preserving recently used remote address: [AF_INET]138.199.16.219:443
2024-04-03 04:52:06 us=671000 Socket Buffers: R=[65536->65536] S=[65536->65536]
2024-04-03 04:52:06 us=671000 Attempting to establish TCP connection with [AF_INET]138.199.16.219:443
2024-04-03 04:52:06 us=671000 MANAGEMENT: >STATE:1712116326,TCP_CONNECT,,,,,,
2024-04-03 04:52:06 us=734000 TCP connection established with [AF_INET]138.199.16.219:443
2024-04-03 04:52:06 us=734000 TCPv4_CLIENT link local: (not bound)
2024-04-03 04:52:06 us=734000 TCPv4_CLIENT link remote: [AF_INET]138.199.16.219:443
2024-04-03 04:52:06 us=734000 MANAGEMENT: >STATE:1712116326,WAIT,,,,,,
2024-04-03 04:52:06 us=734000 TCPv4_CLIENT WRITE [86] to [AF_INET]138.199.16.219:443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ 2524354726 3683167083 2265763599 1590411050 3082115097 2263903343 1445071107 2953785411 3749240030 1094890369 1159627013 1009931771 615206552 2697640551 451821415 4277812480 358 215115264 0 ]
2024-04-03 04:52:06 us=781000 TCPv4_CLIENT READ [98] from [AF_INET]138.199.16.219:443: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 895158452 3216336508 4287387716 2689576108 1700885172 858767671 2164414612 120859633 1227844571 664855556 2504315845 4019960533 4294072592 1760980119 1340695491 229297408 358 215115521 0 260061249 2077437684 0 ]
2024-04-03 04:52:06 us=781000 MANAGEMENT: >STATE:1712116326,AUTH,,,,,,
2024-04-03 04:52:06 us=781000 TLS: Initial packet from [AF_INET]138.199.16.219:443, sid=20929862 7eead4e5
2024-04-03 04:52:06 us=781000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-04-03 04:52:06 us=781000 TCPv4_CLIENT WRITE [381] to [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 4165954786 3259592881 3982724573 4048786106 192616040 381327702 2910454053 3390234597 451944268 1644394623 1272716899 398996831 2257870299 822030478 1141500519 1984314112 614 215115265 0 546478178 2129319141 1 369295617 369164289 3021
2024-04-03 04:52:06 us=828000 TCPv4_CLIENT READ [1222] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 889304019 2492098839 862972705 1306283233 609379948 779663045 2278967328 3959680733 166489537 2114593505 2796099457 3539448585 743236311 1375408700 2245849433 4231683328 614 215115522 1 0 260061249 2077437684 1 369296128 2046951424 19
2024-04-03 04:52:06 us=828000 TCPv4_CLIENT WRITE [98] to [AF_INET]138.199.16.219:443: P_ACK_V1 kid=0 [ 2719766892 3910051425 472906478 3452810971 3799134970 719964922 3330860288 443598017 4224750219 926809464 829068317 2675329423 1313897567 3117309823 1080348667 768771328 870 215115266 1 0 546478178 2129319141 ] DATA len=0
2024-04-03 04:52:06 us=828000 TCPv4_CLIENT READ [1222] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 4042554743 2801578639 480759387 17612376 2182295482 718064315 475209806 2778615501 842091045 3502987724 3850561129 2747733503 1246572398 1449103336 3331059781 1680426496 870 215115522 1 0 260061249 2077437684 2 1737739814 1586657721 2
2024-04-03 04:52:06 us=828000 TCPv4_CLIENT WRITE [102] to [AF_INET]138.199.16.219:443: P_ACK_V1 kid=0 [ 2099440543 3358774625 88939591 3382032461 2931671916 817610782 3491232984 1173729725 3119629536 4200247193 3500995312 2762679273 3735952765 2504333312 300101016 1775871744 1126 215115267 2 1 0 546478178 2129319141 ] DATA len=0
2024-04-03 04:52:06 us=828000 TCPv4_CLIENT READ [1222] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 3009771383 1622464626 1460735414 238322514 186681759 1320678969 880485646 381524524 3185335182 2781448857 866398999 1921239215 194442459 2901824135 3462700442 2582803712 1126 215115522 1 0 260061249 2077437684 3 3446539379 3664474939 
2024-04-03 04:52:06 us=828000 TCPv4_CLIENT WRITE [106] to [AF_INET]138.199.16.219:443: P_ACK_V1 kid=0 [ 1067131341 1593743293 2790685183 4249625085 886021808 1372688207 2183304726 1781297586 4140007687 960104273 586858664 709964421 1844509903 3936277533 1776460989 3205412608 1382 215115268 3 2 1 0 546478178 2129319141 ] DATA len=0
2024-04-03 04:52:06 us=828000 TCPv4_CLIENT READ [0] from [AF_INET]138.199.16.219:443: DATA UNDEF len=0
2024-04-03 04:52:06 us=875000 TCPv4_CLIENT READ [1222] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 1586535571 4209597957 934473598 2096801826 1486533606 2614479193 515081803 3317916891 2659657662 446709099 2491909730 1275527578 531930175 3643982430 1934867487 2512749056 1382 215115522 1 0 260061249 2077437684 4 3501541655 179668480
2024-04-03 04:52:06 us=875000 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
2024-04-03 04:52:06 us=875000 VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA9
2024-04-03 04:52:06 us=875000 VERIFY KU OK
2024-04-03 04:52:06 us=875000 Validating certificate extended key usage
2024-04-03 04:52:06 us=875000 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-04-03 04:52:06 us=875000 VERIFY EKU OK
2024-04-03 04:52:06 us=875000 VERIFY X509NAME OK: CN=fr817.nordvpn.com
2024-04-03 04:52:06 us=875000 VERIFY OK: depth=0, CN=fr817.nordvpn.com
2024-04-03 04:52:06 us=875000 TCPv4_CLIENT WRITE [110] to [AF_INET]138.199.16.219:443: P_ACK_V1 kid=0 [ 2609097514 3138968264 18564002 3155816890 4209720768 2371654098 4044681583 2187893375 3058256193 3190349418 1091786140 932313474 3451774739 2288526400 2107938959 3369492736 1638 215115269 4 3 2 1 0 546478178 2129319141 ] DATA len=0
2024-04-03 04:52:06 us=875000 TCPv4_CLIENT READ [459] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 1587555131 3481546566 3002221973 3949753979 4181943729 1996847296 3011770297 3678968445 2538439703 3197176582 1049432619 3733020294 2852027687 2126978528 1764124102 3000470016 1638 215115522 1 0 260061249 2077437684 5 1313581154 15891
2024-04-03 04:52:06 us=875000 TCPv4_CLIENT WRITE [745] to [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 2028841659 1805234443 4019287110 1209653968 1718820502 2869312358 2907185522 998841318 1488616538 1167239537 3097115409 3190216280 2818184072 3243571989 839501824 515856128 1894 215115268 5 4 3 2 546478178 2129319141 2 335741696 16848
2024-04-03 04:52:06 us=968000 TCPv4_CLIENT READ [264] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 320858547 45599130 1384672773 1087589700 197131386 508609714 1888565569 3794956236 1010506942 2146973957 745960630 2116895238 1171734813 53929883 579094575 1387382016 1894 215115523 2 1 0 260061249 2077437684 6 386073344 1253267404 29
2024-04-03 04:52:06 us=968000 TCPv4_CLIENT WRITE [118] to [AF_INET]138.199.16.219:443: P_ACK_V1 kid=0 [ 674632557 4191203803 1231457847 2275253432 131852246 864981738 3109599639 1914926570 316061654 2305469082 2958865788 120680336 1522211426 937608681 2948281994 1580445696 2150 215115271 6 5 4 3 2 1 0 546478178 2129319141 ] DATA len=0
2024-04-03 04:52:07 us=15000 TCPv4_CLIENT READ [342] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 45508908 2345795590 3486098699 2826850684 4058303641 260451750 4248562016 1145184132 2723639846 3521283028 4103409115 3271364905 2889928200 1933423338 392537976 4212703744 2150 215115523 2 1 0 260061249 2077437684 7 386073344 38832000
2024-04-03 04:52:07 us=15000 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bits RSA, signature: RSA-SHA512, peer temporary key: 253 bits X25519
2024-04-03 04:52:07 us=15000 [fr817.nordvpn.com] Peer Connection Initiated with [AF_INET]138.199.16.219:443
2024-04-03 04:52:07 us=15000 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2024-04-03 04:52:07 us=15000 TLS: tls_multi_process: initial untrusted session promoted to trusted
2024-04-03 04:52:07 us=15000 TCPv4_CLIENT WRITE [122] to [AF_INET]138.199.16.219:443: P_ACK_V1 kid=0 [ 4051406818 1621557972 2382148761 405064860 1222469903 3221926515 2120273636 3944559858 625633984 1555552488 435145280 3755990276 3117978995 956591765 4029371906 2740449280 2406 215115272 7 6 5 4 3 2 1 0 546478178 2129319141 ] DATA len=0
2024-04-03 04:52:08 us=140000 MANAGEMENT: >STATE:1712116328,GET_CONFIG,,,,,,
2024-04-03 04:52:08 us=140000 SENT CONTROL [fr817.nordvpn.com]: 'PUSH_REQUEST' (status=1)
2024-04-03 04:52:08 us=140000 TCPv4_CLIENT WRITE [145] to [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 2776614522 136121959 2937366240 2103997533 4276038511 3302932220 4201195488 4226113621 967017643 3432258858 3706451417 1652595255 3710082281 1836272267 2370521266 2452827136 2662 215115268 7 6 5 4 546478178 2129319141 3 386073344 5131
2024-04-03 04:52:08 us=187000 TCPv4_CLIENT READ [106] from [AF_INET]138.199.16.219:443: P_ACK_V1 kid=0 [ 3046287711 1879174159 1674495835 610016461 3071921137 1436447538 327095772 1755509175 34349818 2021863496 2689890800 775083881 49599701 3438871220 498471264 2228227840 2406 215115524 3 2 1 0 260061249 2077437684 ] DATA len=0
2024-04-03 04:52:08 us=281000 TCPv4_CLIENT READ [144] from [AF_INET]138.199.16.219:443: P_CONTROL_V1 kid=0 [ 500933636 1194435181 3133695508 1960815191 1042987277 3756933325 324515045 4218871888 2592613191 2418112050 3131927938 4114590540 481787322 2082164973 1052526218 3344531712 2662 215115524 3 2 1 0 260061249 2077437684 8 386073344 49413
2024-04-03 04:52:08 us=281000 AUTH: Received control message: AUTH_FAILED
2024-04-03 04:52:08 us=281000 TCP/UDP: Closing socket
2024-04-03 04:52:08 us=281000 SIGUSR1[soft,auth-failure] received, process restarting
2024-04-03 04:52:08 us=281000 MANAGEMENT: >STATE:1712116328,RECONNECTING,auth-failure,,,,,
2024-04-03 04:52:08 us=281000 Restart pause, 1 second(s)
2024-04-03 04:52:13 us=328000 MANAGEMENT: Client disconnected
2024-04-03 04:52:13 us=328000 ERROR: could not read Auth username/password/ok/string from management interface
2024-04-03 04:52:13 us=328000 Exiting due to fatal error
erdemkose commented 6 months ago

I could finally test on a Windows machine. I can connect to vpn with the fixed cipher config. You must be facing a real username/password issue. Are you using the latest username/password from the manual setup page? When you reset your account password, your manual setup username and password are also reset.

https://my.nordaccount.com/dashboard/nordvpn/manual-configuration/

ilike2burnthing commented 6 months ago

Yep, although it's just the service password which changes when you reset your account password. I've double-checked, using the copy button so there's definitely no leading/trailing spaces or missing characters.

I can log into my account and therefore also use the Windows client and browser extension, but the servers don't work for them either.

naruyan commented 6 months ago

For anyone who wants a quick dockerfile to build a custom image with the cipher suite change, I'm using this and it workings well:

FROM haugene/transmission-openvpn
RUN sed -i 's/\/cipher AES-256-CBC\/a data-ciphers AES-256-CBC/s\/cipher AES-256-CBC\/cipher AES-256-GCM\\ndata-ciphers AES-256-GCM\/g/g' /etc/openvpn/nordvpn/configure-openvpn.sh
ilike2burnthing commented 6 months ago

No need to build a custom image, just run that sed command from within the container using the current image.

inehmo42 commented 6 months ago

Hi, also facing this issue since yesterday.

I'm using Portainer to run this container and I have no idea how could I try to use these last few workarounds. How would I go about "running the sed command within the container using the current image"?

sillyfrog commented 6 months ago

@inehmo42

Hi, also facing this issue since yesterday.

I'm using Portainer to run this container and I have no idea how could I try to use these last few workarounds. How would I go about "running the sed command within the container using the current image"?

Create a new directory on your server, change to the directory and create a file named Dockerfile (case is important, it must be an upper case D), and into that file, paste the above, ie:

FROM haugene/transmission-openvpn
RUN sed -i 's/\/cipher AES-256-CBC\/a data-ciphers AES-256-CBC/s\/cipher AES-256-CBC\/cipher AES-256-GCM\\ndata-ciphers AES-256-GCM\/g/g' /etc/openvpn/nordvpn/configure-openvpn.sh

Then build the file with a known tag, for example run the command:

docker build -t localhost:5000/transmission-openvpn:latest .

Then where ever you started the container before, rather than using haugene/transmission-openvpn, change that to be localhost:5000/transmission-openvpn:latest

The build must be done on the same server where you'll run the image, and the command to run the image must not pull the image (which is the default if you don't provide arguments), if you need to pull, then you'll need to run a local registry and do a docker push localhost:5000/transmission-openvpn:latest

ilike2burnthing commented 6 months ago

@inehmo42 Portainer > Containers > click Console button (>_) beside the Transmission container name > Connect > paste command > press Enter > Disconnect

sideslip-it commented 6 months ago

Modifying the start.sh with the sed command above and restarting the docker allows the container to start successfully for me. No password changes at all. Just modified the start.sh script.

ilike2burnthing commented 6 months ago

Stopped testing for an hour, went back to it, now it works.

inehmo42 commented 6 months ago

@inehmo42 Portainer > Containers > click Console button (>_) beside the Transmission container name > Connect > paste command

When I try to do this I get "Error Unable to retrieve image details"

I'm also not getting anymore the Cipher error but just this

2024-04-03 09:24:54 SENT CONTROL [lv60.nordvpn.com]: 'PUSH_REQUEST' (status=1) 2024-04-03 09:24:55 AUTH: Received control message: AUTH_FAILED 2024-04-03 09:24:55 SIGTERM[soft,auth-failure] received, process exiting

I haven't done any changes to my NordVPN login or the service password I'm using. I guess I'll give it few hours and try again.

ilike2burnthing commented 6 months ago

When I try to do this I get "Error Unable to retrieve image details"

At what step?

inehmo42 commented 6 months ago

When I try to do this I get "Error Unable to retrieve image details"

At what step?

If the Container isn't started, the Console button isn't available. So I start the container, the button appears, I click it, and then I get blank screen with a popup-message on the top right corner of the screen that says "Error Unable to retrieve image details"

Sorry for not being clear.

ilike2burnthing commented 6 months ago

Give it ~5-10s after starting before clicking. Try a few times if you get that error.

sideslip-it commented 6 months ago

Easiest way to modify the file without running the container is to do the following: sudo su - cd /var/lib/docker/overlay2 find . -name start.sh -print

Look for the directory that contains the openvpn directory for example15376b2a864e62e0e72acea39d80fe1d82346ae942e63244a4620eb81010907df/diff/etc/openvpn

cd 15376b2a864e62e0e72acea39d80fe1d82346ae942e63244a4620eb81010907df/diff/etc/openvpn

Check that configure-openvpn.sh exists and make a backup. Then use the following command

sed -i 's/\/cipher AES-256-CBC\/a data-ciphers AES-256-CBC/s\/cipher AES-256-CBC\/cipher AES-256-GCM\\ndata-ciphers AES-256-GCM\/g/g' configure-openvpn.sh

inehmo42 commented 6 months ago

Easiest way to modify the file without running the container is to do the following: sudo su - cd /var/lib/docker/overlay2 'find . -name start.sh -print`

Look for the directory that contains the openvpn directory for example15376b2a864e62e0e72acea39d80fe1d82346ae942e63244a4620eb81010907df/diff/etc/openvpn

cd 15376b2a864e62e0e72acea39d80fe1d82346ae942e63244a4620eb81010907df/diff/etc/openvpn

Check that configure-openvpn.sh exists and make a backup. Then use the following command

sed -i 's/\/cipher AES-256-CBC\/a data-ciphers AES-256-CBC/s\/cipher AES-256-CBC\/cipher AES-256-GCM\\ndata-ciphers AES-256-GCM\/g/g' configure-openvpn.sh

After running the find command, I get 5 different lines that have /diff/etc/openvpn/

sideslip-it commented 6 months ago

Can you post an image that shows the output like this? image

inehmo42 commented 6 months ago

image

sideslip-it commented 6 months ago

Do you have multiple openvpn containers or containers that are no longer used? You can check which overlay file the transmission docker is using by relating it to the docker ID. The following link shows how to run the command. https://stackoverflow.com/questions/67607874/how-to-find-which-folder-under-overlay2-directory-belong-to-which-container

inehmo42 commented 6 months ago

Do you have multiple openvpn containers or containers that are no longer used?

I deleted old images in Portainer and now there is only one openvpn row.

I managed to run the command and my container is back up again! Thank you so much.

One thing that was different from your instructions was that I have directory nordvpn under the diff/etc/openvpn/ and that's where the configure-openvpn.sh is located. Then I just ran your command and the container popped back up like a champ!

Thanks a lot again!

robiXxu commented 6 months ago

Did they just fixed it? My container started just now (got a notification on the discord)

sebcourant commented 6 months ago

Did they just fixed it? My container started just now (got a notification on the discord)

Seems like it, I just restarted my container, without any of the changes mentioned in this thread, and it worked.

jjjonesjr33 commented 6 months ago

I was locked out for awhile, had to reset password to get nordvpn to clear the timeout lockout. Once that was done I was able to get it working.

For the fix on Unraid containor "Transmission_VPN" error AUTH: Received control message: AUTH_FAILED,Data channel cipher negotiation failed (no shared cipher)

Console into the containor "Transmission_VPN" the moment it boots and past/run sed -i 's/\/cipher AES-256-CBC\/a data-ciphers AES-256-CBC/s\/cipher AES-256-CBC\/cipher AES-256-GCM\\ndata-ciphers AES-256-GCM\/g/g' /etc/openvpn/nordvpn/configure-openvpn.sh

So far this seems to persist on reboot of the container as well. And is now working for me without issues.

sideslip-it commented 6 months ago

Did they just fixed it? My container started just now (got a notification on the discord)

Seems like it, I just restarted my container, without any of the changes mentioned in this thread, and it worked.

Yep I have just deleted my container and recreated it and it has started straight away.

VMBindraban commented 6 months ago

Did they just fixed it? My container started just now (got a notification on the discord)

Seems like it, I just restarted my container, without any of the changes mentioned in this thread, and it worked.

Yep I have just deleted my container and recreated it and it has started straight away.

Still fails here. (NL server)

abramter commented 6 months ago

Just restarted the container without any of the updates and it worked like before.

2024-04-03 00:47:18 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA512 2024-04-03 00:47:18 [ch387.nordvpn.com] Peer Connection Initiated with [AF_INET]82.180.148.247:1194 2024-04-03 00:47:19 SENT CONTROL [ch387.nordvpn.com]: 'PUSH_REQUEST' (status=1) 2024-04-03 00:47:19 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 103.86.96.100,dhcp-option DNS 103.86.99.100,explicit-exit-notify,comp-lzo no,route-gateway 10.8.3.1,topology subnet,ping 60,ping-restart 180,ifconfig 10.8.3.5 255.255.255.0,peer-id 3,cipher AES-256-CBC'

Did a check at https://www.whatismyip.net/tools/torrent-ip-checker/ and had a CH Server IP

PeachesMLG commented 6 months ago

Mine is working now

ilike2burnthing commented 6 months ago

For anyone still having issues, change your image to haugene/transmission-openvpn:dev or pull a new one if already on it (released 5mins ago).

mkjustuk commented 6 months ago

Restarted my (un-altered in anyway) container again and it's now working, so Nord have fixed/changed whatever they needed to.

Nitrousoxide commented 6 months ago

Restarted my (un-altered in anyway) container again and it's now working, so Nord have fixed/changed whatever they needed to.

I pulled the non-dev, regular live image and it worked for me as well. I did reset my password yesterday, though that didn't get it working then. So hopefully everyone's back up and running now.

VMBindraban commented 6 months ago

Confirmed that it works after re-pulling the image. Didn't change the password.

thfondak commented 6 months ago

Wahoo! Thanks, everyone!

julianneswinoga commented 6 months ago

Didn't need to pull the latest, everything Nord just started working for me again. They must've fixed something :woman_shrugging:

ciceroripi commented 6 months ago

I pulled again to be sure, and it's working again.

Micsters commented 6 months ago

Didn't work till i repulled it.. Works now tho.

DiabloBajo commented 6 months ago

Didn't need to pull the latest, everything Nord just started working for me again. They must've fixed something 🤷‍♀️

exactly same here.

bradleyburgess commented 6 months ago

Are you using the latest or the dev tag? (Or something else?)

On Wed, Apr 3, 2024, 10:19 AM Mic @.***> wrote:

Didn't work till i repulled it.. Works now tho.

— Reply to this email directly, view it on GitHub https://github.com/haugene/docker-transmission-openvpn/issues/2820#issuecomment-2034754612, or unsubscribe https://github.com/notifications/unsubscribe-auth/ALNQRRMFBEXLCXCNFUWQLWLY3QFVHAVCNFSM6AAAAABFPRMAESVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAMZUG42TINRRGI . You are receiving this because you are subscribed to this thread.Message ID: @.*** com>

helmsb commented 6 months ago

FYI, repulling latest fixed it for me.

BiggsBounds commented 6 months ago

I submitted a case with Nord yesterday. Today I received a reply that the issue had been resolved. Confirmed the original configuration is working again.

ilike2burnthing commented 6 months ago

Only the dev image has been updated, re-pulling latest was probably just the equivalent of 'turn it off and on again'.

Cubiss commented 6 months ago

Can confirm latest tag build started working yesterday. Dev tag build still works fine, just isn't necessary anymore (for now?).

ilike2burnthing commented 6 months ago

dev doesn't appear to be necessary anymore, no, although the encryption is bumped up to AES-256-GCM.