Based on https://dev.to/garyker/openvpn-server-and-certificate-management-on-mikrotik-54b3 I tried to setup OpenVPN on my Mikrotik LTE/AP Router: RBwAPR-2nD.
The exact steps:
:global CN vpnserver
:global COUNTRY "PL"
:global STATE "PL"
:global LOC "PL"
:global ORG "PL"
:global OU ""
:global KEYSIZE "2048"
:global waitSec do={:return ($KEYSIZE * 10 / 1024)}
/certificate
add name=ca-template country="$COUNTRY" state="$STATE" locality="$LOC"
organization="$ORG" unit="$OU" common-name="$CN" key-size="$KEYSIZE"
days-valid=3650 key-usage=crl-sign,key-cert-sign
sign ca-template ca-crl-host=127.0.0.1 name="$CN"
:delay [$waitSec]
/certificate
add name=server-template country="$COUNTRY" state="$STATE" locality="$LOC"
organization="$ORG" unit="$OU" common-name="server@$CN" key-size="$KEYSIZE"
days-valid=3650 key-usage=digital-signature,key-encipherment,tls-server
sign server-template ca="$CN" name="server@$CN"
:delay [$waitSec]
/certificate
add name=client-template country="$COUNTRY" state="$STATE" locality="$LOC"
organization="$ORG" unit="$OU" common-name="client"
key-size="$KEYSIZE" days-valid=3650 key-usage=tls-client
/ip pool
add name=VPN-POOL ranges=192.168.252.128-192.168.252.224
/ppp profile
add dns-server=192.168.252.1 local-address=192.168.252.1 name=VPN-PROFILE
remote-address=VPN-POOL use-encryption=yes
/interface ovpn-server server
set auth=sha1 certificate="server@$CN" cipher=aes128,aes192,aes256
default-profile=VPN-PROFILE enabled=yes require-client-certificate=yes 22222
/ip firewall filter
add chain=input dst-port=22222 protocol=tcp comment="Allow OpenVPN"
# move it next to the SSH!
ip firewall filter move 13 destination=3
:global CN vpnserver
:global USERNAME "vepeen"
:global PASSWORD "SECRETPW"
/ppp secret
add name=$USERNAME password=$PASSWORD profile=VPN-PROFILE service=ovpn
/certificate
add name=client-template-to-issue copy-from="client-template"
common-name="$USERNAME@$CN"
sign client-template-to-issue ca="$CN" name="$USERNAME@$CN"
:delay 20
/certificate
export-certificate "$CN" export-passphrase=""
export-certificate "$USERNAME@$CN" export-passphrase="$PASSWORD"
# comments for certs
ca cert_export_vpnserver.crt
cert cert_export_vepeen@vpnserver.crt
key cert_export_vepeen@vpnserver.key
Setup OpenVPN client
Copy the exported certificates from the MikroTik
sftp admin@MikroTik_IP:cert_export_*
But when I try to start OpenVPN from my Ubuntu desktop from behind another ISP:
sudo -i
openvpn vepeen.ovpn
It doesn’t creates any “tun” device (should it?) and no routing entry gets modified on both sides.
Logs:
ubuntu-desktop# openvpn vepeen.ovpn
Mon Dec 20 19:29:17 2021 us=742650 Current Parameter Settings:
Mon Dec 20 19:29:17 2021 us=742690 config = 'vepeen.ovpn'
Mon Dec 20 19:29:17 2021 us=742705 mode = 0
Mon Dec 20 19:29:17 2021 us=742715 NOTE: --mute triggered...
Mon Dec 20 19:29:17 2021 us=742732 279 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:17 2021 us=742749 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 19 2021
Mon Dec 20 19:29:17 2021 us=742764 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Mon Dec 20 19:29:17 2021 us=742801 PKCS#11: pkcs11_initialize - entered
Mon Dec 20 19:29:17 2021 us=742854 PKCS#11: pkcs11_initialize - return 0-'CKR_OK'
Mon Dec 20 19:29:17 2021 us=742874 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Dec 20 19:29:17 2021 us=742883 PO_INIT maxevents=4 flags=0x00000002
Enter Private Key Password: ****************
Mon Dec 20 19:29:25 2021 us=486386 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Dec 20 19:29:25 2021 us=492957 PRNG init md=SHA1 size=36
Mon Dec 20 19:29:25 2021 us=493050 TLS: tls_session_init: entry
Mon Dec 20 19:29:25 2021 us=493083 PID packet_id_init seq_backtrack=64 time_backtrack=15
Mon Dec 20 19:29:25 2021 us=493195 NOTE: --mute triggered...
Mon Dec 20 19:29:25 2021 us=493338 6 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:25 2021 us=493395 Control Channel MTU parms [ L:1623 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Mon Dec 20 19:29:25 2021 us=493454 MTU DYNAMIC mtu=1450, flags=2, 1623 -> 1450
Mon Dec 20 19:29:25 2021 us=493602 GETADDRINFO flags=0x0101 ai_family=0 ai_socktype=1
Mon Dec 20 19:29:25 2021 us=555841 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=0
Mon Dec 20 19:29:25 2021 us=555877 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
Mon Dec 20 19:29:25 2021 us=555910 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Mon Dec 20 19:29:25 2021 us=555921 calc_options_string_link_mtu: link-mtu 1623 -> 1559
Mon Dec 20 19:29:25 2021 us=555941 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes
Mon Dec 20 19:29:25 2021 us=555948 NOTE: --mute triggered...
Mon Dec 20 19:29:25 2021 us=555958 1 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:25 2021 us=555966 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_CLIENT,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
Mon Dec 20 19:29:25 2021 us=555977 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1559,tun-mtu 1500,proto TCPv4_SERVER,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
Mon Dec 20 19:29:25 2021 us=556049 STREAM: RESET
Mon Dec 20 19:29:25 2021 us=556103 STREAM: INIT maxlen=1626
Mon Dec 20 19:29:25 2021 us=556146 TCP/UDP: Preserving recently used remote address: [AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:25 2021 us=556254 Socket Buffers: R=[131072->131072] S=[16384->16384]
Mon Dec 20 19:29:25 2021 us=556304 Attempting to establish TCP connection with [AF_INET]1.2.3.4:22222 [nonblock]
Mon Dec 20 19:29:26 2021 us=556684 TCP connection established with [AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=556765 TCP_CLIENT link local: (not bound)
Mon Dec 20 19:29:26 2021 us=556789 TCP_CLIENT link remote: [AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=556851 TIMER: coarse timer wakeup 1 seconds
Mon Dec 20 19:29:26 2021 us=556925 TLS: tls_multi_process: i=0 state=S_INITIAL, mysid=cba9d374 329f2169, stored-sid=00000000 00000000, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=556968 TLS: tls_process: chg=0 ks=S_INITIAL lame=S_UNDEF to_link->len=0 wakeup=604800
Mon Dec 20 19:29:26 2021 us=557004 NOTE: --mute triggered...
Mon Dec 20 19:29:26 2021 us=557075 16 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:26 2021 us=557136 TCP_CLIENT WRITE [14] to [AF_INET]1.2.3.4:22222: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=cba9d374 329f2169 [ ] pid=0 DATA
Mon Dec 20 19:29:26 2021 us=557162 STREAM: WRITE 14 offset=30
Mon Dec 20 19:29:26 2021 us=557304 TCP_CLIENT write returned 16
Mon Dec 20 19:29:26 2021 us=557352 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=cba9d374 329f2169, stored-sid=00000000 00000000, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=557370 NOTE: --mute triggered...
Mon Dec 20 19:29:26 2021 us=557887 20 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:26 2021 us=557939 TCP_CLIENT READ [14] from [AF_INET]1.2.3.4:22222: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=e94510eb 3a23fcb1 [ ] pid=0 DATA
Mon Dec 20 19:29:26 2021 us=557964 TLS: control channel, op=P_CONTROL_HARD_RESET_SERVER_V2, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=558019 TLS: initial packet test, i=0 state=S_PRE_START, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=00000000 00000000, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=558082 TLS: initial packet test, i=1 state=S_INITIAL, mysid=db90a7b6 26689868, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
Mon Dec 20 19:29:26 2021 us=558108 NOTE: --mute triggered...
Mon Dec 20 19:29:26 2021 us=558140 1 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:26 2021 us=558187 TLS: Initial packet from [AF_INET]1.2.3.4:22222, sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:26 2021 us=558232 TLS: received control channel packet s#=0 sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:26 2021 us=558266 ACK reliable_schedule_now
Mon Dec 20 19:29:26 2021 us=558293 ACK read ID 0 (buf->len=0)
Mon Dec 20 19:29:26 2021 us=558320 NOTE: --mute triggered...
Mon Dec 20 19:29:26 2021 us=558371 19 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:26 2021 us=558444 TCP_CLIENT WRITE [26] to [AF_INET]1.2.3.4:22222: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=cba9d374 329f2169 [ 0 sid=e94510eb 3a23fcb1 ] pid=0 DATA
Mon Dec 20 19:29:26 2021 us=558483 STREAM: WRITE 26 offset=18
Mon Dec 20 19:29:26 2021 us=558535 TCP_CLIENT write returned 28
Mon Dec 20 19:29:26 2021 us=558594 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=cba9d374 329f2169, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=558633 NOTE: --mute triggered...
Mon Dec 20 19:29:26 2021 us=582271 21 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:26 2021 us=582376 TCP_CLIENT READ [22] from [AF_INET]1.2.3.4:22222: P_ACK_V1 kid=0 sid=e94510eb 3a23fcb1 [ 0 sid=cba9d374 329f2169 ]
Mon Dec 20 19:29:26 2021 us=582424 TLS: control channel, op=P_ACK_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=582493 TLS: initial packet test, i=0 state=S_PRE_START, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=582561 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:26 2021 us=582606 NOTE: --mute triggered...
Mon Dec 20 19:29:26 2021 us=582773 24 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:26 2021 us=582975 TCP_CLIENT WRITE [291] to [AF_INET]1.2.3.4:22222: P_CONTROL_V1 kid=0 sid=cba9d374 329f2169 [ ] pid=1 DATA 16030101 10010001 0c030357 bf02c184 59a49559 eccf4c80 9d845f1f 3941213[more...]
Mon Dec 20 19:29:26 2021 us=583003 STREAM: WRITE 291 offset=30
Mon Dec 20 19:29:26 2021 us=583051 TCP_CLIENT write returned 293
Mon Dec 20 19:29:26 2021 us=583098 TLS: tls_multi_process: i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=583122 NOTE: --mute triggered...
Mon Dec 20 19:29:26 2021 us=679838 18 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:26 2021 us=679953 TCP_CLIENT READ [22] from [AF_INET]1.2.3.4:22222: P_ACK_V1 kid=0 sid=e94510eb 3a23fcb1 [ 1 sid=cba9d374 329f2169 ]
Mon Dec 20 19:29:26 2021 us=680000 TLS: control channel, op=P_ACK_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=680058 TLS: initial packet test, i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:26 2021 us=680091 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:26 2021 us=680117 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=24107 21 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=24913 TCP_CLIENT READ [1414] from [AF_INET]1.2.3.4:22222: P_CONTROL_V1 kid=0 sid=e94510eb 3a23fcb1 [ ] pid=1 DATA 16030300 59020000 55030305 7a12b52f 08919741 b4984eb0 e5dcc52a 723e548[more...]
Mon Dec 20 19:29:27 2021 us=24955 TLS: control channel, op=P_CONTROL_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=25011 TLS: initial packet test, i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=25044 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:27 2021 us=25069 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=25211 26 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=25272 TCP_CLIENT WRITE [22] to [AF_INET]1.2.3.4:22222: P_ACK_V1 kid=0 sid=cba9d374 329f2169 [ 1 sid=e94510eb 3a23fcb1 ]
Mon Dec 20 19:29:27 2021 us=25299 STREAM: WRITE 22 offset=35
Mon Dec 20 19:29:27 2021 us=25398 TCP_CLIENT write returned 24
Mon Dec 20 19:29:27 2021 us=25450 TLS: tls_multi_process: i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=25475 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=59652 18 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=60329 TCP_CLIENT READ [980] from [AF_INET]1.2.3.4:22222: P_CONTROL_V1 kid=0 sid=e94510eb 3a23fcb1 [ ] pid=2 DATA 3b67cc8e ed43a2fc 1e6a272e 39036575 1b9cf187 43c7c7c6 0d9af10d d4faf8b[more...]
Mon Dec 20 19:29:27 2021 us=60378 TLS: control channel, op=P_CONTROL_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=60409 TLS: initial packet test, i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=60428 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:27 2021 us=60443 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=60973 11 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=61004 VERIFY OK: depth=1, C=PL, ST=PL, L=PL, O=PL, CN=vpnserver
Mon Dec 20 19:29:27 2021 us=61282 VERIFY OK: depth=0, C=PL, ST=PL, L=PL, O=PL, CN=server@vpnserver
Mon Dec 20 19:29:27 2021 us=61352 SSL state (connect): SSLv3/TLS read server certificate
Mon Dec 20 19:29:27 2021 us=61705 SSL state (connect): SSLv3/TLS read server key exchange
Mon Dec 20 19:29:27 2021 us=61770 SSL state (connect): SSLv3/TLS read server certificate request
Mon Dec 20 19:29:27 2021 us=61804 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=66142 25 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=66578 TCP_CLIENT WRITE [1196] to [AF_INET]1.2.3.4:22222: P_CONTROL_V1 kid=0 sid=cba9d374 329f2169 [ 2 sid=e94510eb 3a23fcb1 ] pid=2 DATA 16030307 440b0007 4000073d 00039230 82038e30 820276a0 03020102 0208058[more...]
Mon Dec 20 19:29:27 2021 us=66596 STREAM: WRITE 1196 offset=18
Mon Dec 20 19:29:27 2021 us=66620 TCP_CLIENT write returned 1198
Mon Dec 20 19:29:27 2021 us=66656 TLS: tls_multi_process: i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=66676 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=66714 19 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=67089 TCP_CLIENT WRITE [1104] to [AF_INET]1.2.3.4:22222: P_CONTROL_V1 kid=0 sid=cba9d374 329f2169 [ ] pid=3 DATA 02820101 00dd5182 dc57f391 46e30203 5e2c04e0 dc66f3ed 70aec40f c38617d[more...]
Mon Dec 20 19:29:27 2021 us=67103 STREAM: WRITE 1104 offset=30
Mon Dec 20 19:29:27 2021 us=67166 TCP_CLIENT write returned 1106
Mon Dec 20 19:29:27 2021 us=67191 TLS: tls_multi_process: i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=67205 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=94379 18 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=94451 TCP_CLIENT READ [22] from [AF_INET]1.2.3.4:22222: P_ACK_V1 kid=0 sid=e94510eb 3a23fcb1 [ 2 sid=cba9d374 329f2169 ]
Mon Dec 20 19:29:27 2021 us=94477 TLS: control channel, op=P_ACK_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=94517 TLS: initial packet test, i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=94539 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:27 2021 us=94555 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=117066 21 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=117161 TCP_CLIENT READ [22] from [AF_INET]1.2.3.4:22222: P_ACK_V1 kid=0 sid=e94510eb 3a23fcb1 [ 3 sid=cba9d374 329f2169 ]
Mon Dec 20 19:29:27 2021 us=117196 TLS: control channel, op=P_ACK_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=117234 TLS: initial packet test, i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=117260 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:27 2021 us=117277 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=153821 21 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=153950 TCP_CLIENT READ [65] from [AF_INET]1.2.3.4:22222: P_CONTROL_V1 kid=0 sid=e94510eb 3a23fcb1 [ ] pid=3 DATA 14030300 01011603 0300286a 9553524d 83fa4ba4 af2c6087 44e3a73d e20f6e8[more...]
Mon Dec 20 19:29:27 2021 us=153989 TLS: control channel, op=P_CONTROL_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=154022 TLS: initial packet test, i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=154043 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:27 2021 us=154060 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=154334 33 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=154509 TCP_CLIENT WRITE [427] to [AF_INET]1.2.3.4:22222: P_CONTROL_V1 kid=0 sid=cba9d374 329f2169 [ 3 sid=e94510eb 3a23fcb1 ] pid=4 DATA 17030301 8c373be5 21b16d9b e323b0f6 ba1c5b86 5e676ef1 b74e82eb 1dad239[more...]
Mon Dec 20 19:29:27 2021 us=154541 STREAM: WRITE 427 offset=18
Mon Dec 20 19:29:27 2021 us=154691 TCP_CLIENT write returned 429
Mon Dec 20 19:29:27 2021 us=154746 TLS: tls_multi_process: i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=154778 NOTE: --mute triggered...
Mon Dec 20 19:29:27 2021 us=186113 18 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:27 2021 us=186214 TCP_CLIENT READ [22] from [AF_INET]1.2.3.4:22222: P_ACK_V1 kid=0 sid=e94510eb 3a23fcb1 [ 4 sid=cba9d374 329f2169 ]
Mon Dec 20 19:29:27 2021 us=186265 TLS: control channel, op=P_ACK_V1, IP=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=186344 TLS: initial packet test, i=0 state=S_SENT_KEY, mysid=cba9d374 329f2169, rec-sid=e94510eb 3a23fcb1, rec-ip=[AF_INET]1.2.3.4:22222, stored-sid=e94510eb 3a23fcb1, stored-ip=[AF_INET]1.2.3.4:22222
Mon Dec 20 19:29:27 2021 us=186393 TLS: found match, session[0], sid=e94510eb 3a23fcb1
Mon Dec 20 19:29:27 2021 us=186426 NOTE: --mute triggered...
^CMon Dec 20 19:29:33 2021 us=426172 50 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:33 2021 us=426287 event_wait : Interrupted system call (code=4)
Mon Dec 20 19:29:33 2021 us=426331 I/O WAIT status=0x0010
Mon Dec 20 19:29:33 2021 us=426379 PID packet_id_free
Mon Dec 20 19:29:33 2021 us=426450 SSL alert (write): warning: close notify
Mon Dec 20 19:29:33 2021 us=426535 NOTE: --mute triggered...
Mon Dec 20 19:29:33 2021 us=426778 13 variation(s) on previous 3 message(s) suppressed by --mute
Mon Dec 20 19:29:33 2021 us=426810 TCP/UDP: Closing socket
Mon Dec 20 19:29:33 2021 us=426944 PID packet_id_free
Mon Dec 20 19:29:33 2021 us=426986 SIGINT[hard,] received, process exiting
Mon Dec 20 19:29:33 2021 us=427014 PKCS#11: pkcs11_terminate - entered
Mon Dec 20 19:29:33 2021 us=427039 PKCS#11: pkcs11h_terminate entry
Mon Dec 20 19:29:33 2021 us=427073 PKCS#11: Terminating openssl
Mon Dec 20 19:29:33 2021 us=427104 NOTE: --mute triggered...
The question: What am I missing setting up a basic OpenVPN on Mikrotik?
I had spent too many hours trying to fix it, no luck. Maybe some routing setting missing on Mikrotik side? Any debug chances on Mikrotik side?
Many-Many thanks.
