I have been using OpenVPN on a Windows 10 VM for a few years with no issues and recently OpenVPN TAP has stopped working (applications using it no longer can send or receive any traffic).
![Screenshot 2024-06-01 130101.png Click image for larger version
Name: Screenshot 2024-06-01 130101.png
Views: 126
Size: 61.9 KB
ID: 243](filedata/fetch?id=243&d=1717274581)
I have been using OpenVPN with Privado VPN, based on the installation instructions and configuration files here. So far I have tried the following with no luck:
I'm using Windows 10 Home Version 22H2, Build 19045.4412, running on Unraid 6.12.8. Here is the log when connecting to a server, there appears to be an error regarding the cipher however I am not sure if this is related to the OpenVPN TAP not working. Interestingly the server does successfully connect but the OpenVPN TAP still shows as Network Cable Unplugged and is unusable through specific applications.
2024-06-01 13:11:21 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). OpenVPN ignores --cipher for cipher negotiations.
2024-06-01 13:11:21 OpenVPN 2.6.10 [git:v2.6.10/ba0f62fb950c56a0] Windows [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] [DCO] built on May 23 2024
2024-06-01 13:11:21 Windows version 10.0 (Windows 10 or greater), amd64 executable
2024-06-01 13:11:21 library versions: OpenSSL 3.2.1 30 Jan 2024, LZO 2.10
2024-06-01 13:11:21 DCO version: 1.2.1
2024-06-01 13:11:21 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25345
2024-06-01 13:11:21 Need hold release from management interface, waiting...
2024-06-01 13:11:21 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:49755
2024-06-01 13:11:21 MANAGEMENT: CMD 'state on'
2024-06-01 13:11:21 MANAGEMENT: CMD 'log on all'
2024-06-01 13:11:21 MANAGEMENT: CMD 'echo on all'
2024-06-01 13:11:21 MANAGEMENT: CMD 'bytecount 5'
2024-06-01 13:11:21 MANAGEMENT: CMD 'state'
2024-06-01 13:11:21 MANAGEMENT: CMD 'hold off'
2024-06-01 13:11:21 MANAGEMENT: CMD 'hold release'
2024-06-01 13:11:23 MANAGEMENT: CMD 'username "Auth" "uniconulyief"'
2024-06-01 13:11:23 MANAGEMENT: CMD 'password [...]'
2024-06-01 13:11:23 MANAGEMENT: >STATE:1717272683,RESOLVE,,,,,,
2024-06-01 13:11:23 TCP/UDP: Preserving recently used remote address: [AF_INET]91.148.238.11:1194
2024-06-01 13:11:23 ovpn-dco device [OpenVPN Data Channel Offload] opened
2024-06-01 13:11:23 UDP link local: (not bound)
2024-06-01 13:11:23 UDP link remote: [AF_INET]91.148.238.11:1194
2024-06-01 13:11:23 MANAGEMENT: >STATE:1717272683,WAIT,,,,,,
2024-06-01 13:11:23 MANAGEMENT: >STATE:1717272683,AUTH,,,,,,
2024-06-01 13:11:23 TLS: Initial packet from [AF_INET]91.148.238.11:1194, sid=ab97dd55 5a9bfb0d
2024-06-01 13:11:23 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-06-01 13:11:23 VERIFY OK: depth=1, CN=Privado
2024-06-01 13:11:23 VERIFY KU OK
2024-06-01 13:11:23 Validating certificate extended key usage
2024-06-01 13:11:23 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-06-01 13:11:23 VERIFY EKU OK
2024-06-01 13:11:23 VERIFY OK: depth=0, CN=zrh-010.vpn.privado.io
2024-06-01 13:11:24 Control Channel: TLSv1.2, cipher SSLv3 DHE-RSA-AES256-SHA, peer certificate: 4096 bits RSA, signature: RSA-SHA512, peer temporary key: 4096 bits DH
2024-06-01 13:11:24 [zrh-010.vpn.privado.io] Peer Connection Initiated with [AF_INET]91.148.238.11:1194
2024-06-01 13:11:24 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2024-06-01 13:11:24 TLS: tls_multi_process: initial untrusted session promoted to trusted
2024-06-01 13:11:25 MANAGEMENT: >STATE:1717272685,GET_CONFIG,,,,,,
2024-06-01 13:11:25 SENT CONTROL [zrh-010.vpn.privado.io]: 'PUSH_REQUEST' (status=1)
2024-06-01 13:11:25 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 198.18.0.1,dhcp-option DNS 198.18.0.2,rcvbuf 493216,sndbuf 493216,explicit-exit-notify 5,route-gateway 172.21.20.1,topology subnet,ping 20,ping-restart 40,ifconfig 172.21.21.73 255.255.254.0,peer-id 3,cipher AES-256-GCM'
2024-06-01 13:11:25 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
2024-06-01 13:11:25 NOTE: setsockopt SO_SNDBUF=493216 failed
2024-06-01 13:11:25 NOTE: setsockopt SO_RCVBUF=493216 failed
2024-06-01 13:11:25 Socket Buffers: R=[0->0] S=[0->0]
2024-06-01 13:11:25 OPTIONS IMPORT: --ifconfig/up options modified
2024-06-01 13:11:25 OPTIONS IMPORT: route options modified
2024-06-01 13:11:25 OPTIONS IMPORT: route-related options modified
2024-06-01 13:11:25 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2024-06-01 13:11:25 interactive service msg_channel=604
2024-06-01 13:11:25 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=17 HWADDR=52:54:00:d9:82:45
2024-06-01 13:11:25 GDG6: remote_host_ipv6=n/a
2024-06-01 13:11:25 NOTE: GetBestInterfaceEx returned error: Element not found. (code=1168)
2024-06-01 13:11:25 ROUTE6: default_gateway=UNDEF
2024-06-01 13:11:25 MANAGEMENT: >STATE:1717272685,ASSIGN_IP,,172.21.21.73,,,,
2024-06-01 13:11:25 INET address service: add 172.21.21.73/23
2024-06-01 13:11:25 IPv4 dns servers set using service
2024-06-01 13:11:25 IPv4 MTU set to 1500 on interface 7 using service
2024-06-01 13:11:25 Data Channel: cipher 'AES-256-GCM', peer-id: 3
2024-06-01 13:11:25 Timers: ping 20, ping-restart 40
2024-06-01 13:11:25 Protocol options: explicit-exit-notify 5
2024-06-01 13:11:29 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 91.148.238.11 MASK 255.255.255.255 192.168.0.1
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 172.21.20.1
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 172.21.20.1
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 MANAGEMENT: >STATE:1717272689,ADD_ROUTES,,,,,,
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 172.21.20.1 METRIC 200
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for OpenVPN Data Channel Offload, therefore the route installation may fail or may not work as expected.
2024-06-01 13:11:29 add_route_ipv6(::/0 -> :: metric 200) IF 7
2024-06-01 13:11:29 IPv6 route addition via service succeeded
2024-06-01 13:11:29 Initialization Sequence Completed
2024-06-01 13:11:29 MANAGEMENT: >STATE:1717272689,CONNECTED,SUCCESS,172.21.21.73 ,9 1.148.238.11,1194,,
I have been using OpenVPN with Privado VPN, based on the installation instructions and configuration files here. So far I have tried the following with no luck:
- Uninstalled and reinstalled the latest version of OpenVPN (2.6.10).
- Replaced the config files with the latest provided by Privado VPN.
- Restarted the VM as well as all OpenVPN Services.
I'm using Windows 10 Home Version 22H2, Build 19045.4412, running on Unraid 6.12.8. Here is the log when connecting to a server, there appears to be an error regarding the cipher however I am not sure if this is related to the OpenVPN TAP not working. Interestingly the server does successfully connect but the OpenVPN TAP still shows as Network Cable Unplugged and is unusable through specific applications.
2024-06-01 13:11:21 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). OpenVPN ignores --cipher for cipher negotiations.
2024-06-01 13:11:21 OpenVPN 2.6.10 [git:v2.6.10/ba0f62fb950c56a0] Windows [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] [DCO] built on May 23 2024
2024-06-01 13:11:21 Windows version 10.0 (Windows 10 or greater), amd64 executable
2024-06-01 13:11:21 library versions: OpenSSL 3.2.1 30 Jan 2024, LZO 2.10
2024-06-01 13:11:21 DCO version: 1.2.1
2024-06-01 13:11:21 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25345
2024-06-01 13:11:21 Need hold release from management interface, waiting...
2024-06-01 13:11:21 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:49755
2024-06-01 13:11:21 MANAGEMENT: CMD 'state on'
2024-06-01 13:11:21 MANAGEMENT: CMD 'log on all'
2024-06-01 13:11:21 MANAGEMENT: CMD 'echo on all'
2024-06-01 13:11:21 MANAGEMENT: CMD 'bytecount 5'
2024-06-01 13:11:21 MANAGEMENT: CMD 'state'
2024-06-01 13:11:21 MANAGEMENT: CMD 'hold off'
2024-06-01 13:11:21 MANAGEMENT: CMD 'hold release'
2024-06-01 13:11:23 MANAGEMENT: CMD 'username "Auth" "uniconulyief"'
2024-06-01 13:11:23 MANAGEMENT: CMD 'password [...]'
2024-06-01 13:11:23 MANAGEMENT: >STATE:1717272683,RESOLVE,,,,,,
2024-06-01 13:11:23 TCP/UDP: Preserving recently used remote address: [AF_INET]91.148.238.11:1194
2024-06-01 13:11:23 ovpn-dco device [OpenVPN Data Channel Offload] opened
2024-06-01 13:11:23 UDP link local: (not bound)
2024-06-01 13:11:23 UDP link remote: [AF_INET]91.148.238.11:1194
2024-06-01 13:11:23 MANAGEMENT: >STATE:1717272683,WAIT,,,,,,
2024-06-01 13:11:23 MANAGEMENT: >STATE:1717272683,AUTH,,,,,,
2024-06-01 13:11:23 TLS: Initial packet from [AF_INET]91.148.238.11:1194, sid=ab97dd55 5a9bfb0d
2024-06-01 13:11:23 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-06-01 13:11:23 VERIFY OK: depth=1, CN=Privado
2024-06-01 13:11:23 VERIFY KU OK
2024-06-01 13:11:23 Validating certificate extended key usage
2024-06-01 13:11:23 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-06-01 13:11:23 VERIFY EKU OK
2024-06-01 13:11:23 VERIFY OK: depth=0, CN=zrh-010.vpn.privado.io
2024-06-01 13:11:24 Control Channel: TLSv1.2, cipher SSLv3 DHE-RSA-AES256-SHA, peer certificate: 4096 bits RSA, signature: RSA-SHA512, peer temporary key: 4096 bits DH
2024-06-01 13:11:24 [zrh-010.vpn.privado.io] Peer Connection Initiated with [AF_INET]91.148.238.11:1194
2024-06-01 13:11:24 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2024-06-01 13:11:24 TLS: tls_multi_process: initial untrusted session promoted to trusted
2024-06-01 13:11:25 MANAGEMENT: >STATE:1717272685,GET_CONFIG,,,,,,
2024-06-01 13:11:25 SENT CONTROL [zrh-010.vpn.privado.io]: 'PUSH_REQUEST' (status=1)
2024-06-01 13:11:25 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 198.18.0.1,dhcp-option DNS 198.18.0.2,rcvbuf 493216,sndbuf 493216,explicit-exit-notify 5,route-gateway 172.21.20.1,topology subnet,ping 20,ping-restart 40,ifconfig 172.21.21.73 255.255.254.0,peer-id 3,cipher AES-256-GCM'
2024-06-01 13:11:25 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
2024-06-01 13:11:25 NOTE: setsockopt SO_SNDBUF=493216 failed
2024-06-01 13:11:25 NOTE: setsockopt SO_RCVBUF=493216 failed
2024-06-01 13:11:25 Socket Buffers: R=[0->0] S=[0->0]
2024-06-01 13:11:25 OPTIONS IMPORT: --ifconfig/up options modified
2024-06-01 13:11:25 OPTIONS IMPORT: route options modified
2024-06-01 13:11:25 OPTIONS IMPORT: route-related options modified
2024-06-01 13:11:25 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2024-06-01 13:11:25 interactive service msg_channel=604
2024-06-01 13:11:25 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=17 HWADDR=52:54:00:d9:82:45
2024-06-01 13:11:25 GDG6: remote_host_ipv6=n/a
2024-06-01 13:11:25 NOTE: GetBestInterfaceEx returned error: Element not found. (code=1168)
2024-06-01 13:11:25 ROUTE6: default_gateway=UNDEF
2024-06-01 13:11:25 MANAGEMENT: >STATE:1717272685,ASSIGN_IP,,172.21.21.73,,,,
2024-06-01 13:11:25 INET address service: add 172.21.21.73/23
2024-06-01 13:11:25 IPv4 dns servers set using service
2024-06-01 13:11:25 IPv4 MTU set to 1500 on interface 7 using service
2024-06-01 13:11:25 Data Channel: cipher 'AES-256-GCM', peer-id: 3
2024-06-01 13:11:25 Timers: ping 20, ping-restart 40
2024-06-01 13:11:25 Protocol options: explicit-exit-notify 5
2024-06-01 13:11:29 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 91.148.238.11 MASK 255.255.255.255 192.168.0.1
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 172.21.20.1
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 172.21.20.1
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 MANAGEMENT: >STATE:1717272689,ADD_ROUTES,,,,,,
2024-06-01 13:11:29 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 0.0.0.0 172.21.20.1 METRIC 200
2024-06-01 13:11:29 Route addition via service succeeded
2024-06-01 13:11:29 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for OpenVPN Data Channel Offload, therefore the route installation may fail or may not work as expected.
2024-06-01 13:11:29 add_route_ipv6(::/0 -> :: metric 200) IF 7
2024-06-01 13:11:29 IPv6 route addition via service succeeded
2024-06-01 13:11:29 Initialization Sequence Completed
2024-06-01 13:11:29 MANAGEMENT: >STATE:1717272689,CONNECTED,SUCCESS,172.21.21.73 ,9 1.148.238.11,1194,,