XG 18, SSL VPN android: no shared ciphers

Hi,

I've got a fresh new install of X.G. 18. Everything runs well *but*...

SSL VPNs can't be stablished from android devices. I've tested every combination of cipher and authentication, but the log still shows "no shared cipher".

-------------------

Mon May  3 13:10:30 2021 us=52099 [3330] TCP connection established with [AF_INET6]::ffff:1XX.1XX.2XX.2:45776
Mon May  3 13:10:30 2021 us=52115 [3330] TCPv6_SERVER link remote: [AF_INET6]::ffff:1XX.1XX.2XX.2:45776
Mon May  3 13:10:30 2021 us=52561 [3330] ::ffff:1XX.1XX.2XX.2 TCPv6_SERVER READ [14] from [AF_INET6]::ffff:1XX.1XX.2XX.2:45776: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Mon May  3 13:10:30 2021 us=52571 [3330] ::ffff:1XX.1XX.2XX.2 TLS: Initial packet from [AF_INET6]::ffff:1XX.1XX.2XX.2:45776, sid=c548a4be 80665ec5
Mon May  3 13:10:30 2021 us=52587 [3330] ::ffff:1XX.1XX.2XX.2 TCPv6_SERVER WRITE [26] to [AF_INET6]::ffff:1XX.1XX.2XX.2:45776: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Mon May  3 13:10:30 2021 us=82158 [3330] ::ffff:1XX.1XX.2XX.2 TCPv6_SERVER READ [265] from [AF_INET6]::ffff:1XX.1XX.2XX.2:45776: P_CONTROL_V1 kid=0 [ 0 ] pid=1 DATA len=239
Mon May  3 13:10:30 2021 us=82233 [3330] ::ffff:1XX.1XX.2XX.2 TLS_ERROR: BIO read tls_read_plaintext error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher
Mon May  3 13:10:30 2021 us=82242 [3330] ::ffff:1XX.1XX.2XX.2 TLS Error: TLS object -> incoming plaintext read error
Mon May  3 13:10:30 2021 us=82249 [3330] ::ffff:1XX.1XX.2XX.2 TLS Error: TLS handshake failed
Mon May  3 13:10:30 2021 us=82277 [3330] ::ffff:1XX.1XX.2XX.2 Fatal TLS error (check_tls_errors_co), restarting
Mon May  3 13:10:30 2021 us=82286 [3330] ::ffff:1XX.1XX.2XX.2 SIGUSR1[soft,tls-error] received, client-instance restarting

--------------------

Any idea? I am using the OpenVPN Connect android client, and I have tried to activate AES-CBC cipher algoritm under "Settings".



Edited TAG
[edited by: emmosophos at 11:05 PM (GMT -7) on 3 May 2021]
Parents
  • Hi ,

    Thanks for reaching out to the Community! 

    What is the current firmware version on your firewall? The errors in the logs suggested it's an issue with the TLS handshake; it could be related to the user certificate. 

    I'd suggest you delete the user certificate and redownload the configuration for the user. When you login to the user portal and download the configuration, the process will re-generate the user certificate.

    You could find the user certificate under Certificates > Search for the username to find the user certificate.  

     

     
    Harsh Patel (H_Patel)

    Community Support Engineer | Sophos Technical Support
    Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' button.

  • Thanks very much for the answer.

    Thi is 18.0.4 MR4. The user was created 1 hour ago, so I don't think that deleting it and creating it again will make any difference. Please tell me if it is worth giving it a try.

    What is driving me mad is the "no shared cipher" message. What has changed so there are no common ciphers between the openvpn connect client and a sophos XG?

    Best regards.

Reply
  • Thanks very much for the answer.

    Thi is 18.0.4 MR4. The user was created 1 hour ago, so I don't think that deleting it and creating it again will make any difference. Please tell me if it is worth giving it a try.

    What is driving me mad is the "no shared cipher" message. What has changed so there are no common ciphers between the openvpn connect client and a sophos XG?

    Best regards.

Children
  • Hi ,

    Thanks for the update. 

    Are you able to connect to the SSL Remote VPN from a different device? Is the default certificate on the firewall properly configured? 

    If you made any changes to the configuration on the firewall related to the SSL VPN, you'd have to download the new configuration.

    Reference screenshot: 

    Thanks,

     

     
    Harsh Patel (H_Patel)

    Community Support Engineer | Sophos Technical Support
    Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' button.

  • Sure. SSL access is working from PCs. It is just android phones that can't connect.  That is the weird thing about it.

    I've not tested from iphones (no one at hand) but will try tomorrow.

  • Try to use MR5 and redo this test. Check the android settings, which TLS Version is enforced by the phone. I do not have a android device.

    See: https://forums.openvpn.net/viewtopic.php?t=25487

    The Android device could have a preference to select specific ciphers, which are not supported on Xg. 

    __________________________________________________________________________________________________________________

  • Unfortunately MR5 is still not available for this firewall (it is an HA cluster, and it takes a bit more to receive updates). The problem with the tls version in the phone can be the key... any idea on how I can force to use a compatible tls version?

  • I've checked again today with a Linux machine (debian 10), and it looks like the problem can be replicated here.

    ----- sslvpn.log-------------------------

    Tue May  4 12:16:08 2021 us=325133 [3330] MULTI: multi_create_instance called
    Tue May  4 12:16:08 2021 us=325186 [3330] Re-using SSL/TLS context
    Tue May  4 12:16:08 2021 us=325195 [3330] LZO compression initialized
    Tue May  4 12:16:08 2021 us=325229 [3330] Control Channel MTU parms [ L:1572 D:140 EF:40 EB:0 ET:0 EL:0 ]
    Tue May  4 12:16:08 2021 us=325241 [3330] Data Channel MTU parms [ L:1572 D:1450 EF:72 EB:135 ET:0 EL:0 AF:3/1 ]
    Tue May  4 12:16:08 2021 us=325267 [3330] Local Options String: 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-server'
    Tue May  4 12:16:08 2021 us=325273 [3330] Expected Remote Options String: 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-client'
    Tue May  4 12:16:08 2021 us=325285 [3330] Local Options hash (VER=V4): 'b6eac465'
    Tue May  4 12:16:08 2021 us=325296 [3330] Expected Remote Options hash (VER=V4): 'b67e7382'
    Tue May  4 12:16:08 2021 us=325310 [3330] TCP connection established with [AF_INET6]::ffff:1XX.1XX.2XX.2:56268
    Tue May  4 12:16:08 2021 us=325318 [3330] TCPv6_SERVER link local (bound): [undef]
    Tue May  4 12:16:08 2021 us=325326 [3330] TCPv6_SERVER link remote: [AF_INET6]::ffff:1XX.1XX.2XX.2:56268
    Tue May  4 12:16:09 2021 us=2543 [3330] CID is :4
    Tue May  4 12:16:09 2021 us=2558 [3330] CID is :4629
    Tue May  4 12:16:09 2021 us=2571 [3330] CID is :42
    Tue May  4 12:16:09 2021 us=2584 [3330] CID is :4625
    Tue May  4 12:16:09 2021 us=298896 [3330] ::ffff:1XX.1XX.2XX.2 TCPv6_SERVER READ [14] from [AF_INET6]::ffff:1XX.1XX.2XX.2:56268: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
    Tue May  4 12:16:09 2021 us=298909 [3330] ::ffff:1XX.1XX.2XX.2 TLS: Initial packet from [AF_INET6]::ffff:1XX.1XX.2XX.2:56268, sid=96d5aef6 a2800600
    Tue May  4 12:16:09 2021 us=298930 [3330] ::ffff:1XX.1XX.2XX.2 TCPv6_SERVER WRITE [26] to [AF_INET6]::ffff:1XX.1XX.2XX.2:56268: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
    Tue May  4 12:16:09 2021 us=326469 [3330] ::ffff:1XX.1XX.2XX.2 TCPv6_SERVER READ [22] from [AF_INET6]::ffff:1XX.1XX.2XX.2:56268: P_ACK_V1 kid=0 [ 0 ]
    Tue May  4 12:16:09 2021 us=397848 [3330] ::ffff:1XX.1XX.2XX.2 TCPv6_SERVER READ [303] from [AF_INET6]::ffff:1XX.1XX.2XX.2:56268: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=289
    Tue May  4 12:16:09 2021 us=397924 [3330] ::ffff:1XX.1XX.2XX.2 TLS_ERROR: BIO read tls_read_plaintext error: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher
    Tue May  4 12:16:09 2021 us=397933 [3330] ::ffff:1XX.1XX.2XX.2 TLS Error: TLS object -> incoming plaintext read error
    Tue May  4 12:16:09 2021 us=397940 [3330] ::ffff:1XX.1XX.2XX.2 TLS Error: TLS handshake failed
    Tue May  4 12:16:09 2021 us=397970 [3330] ::ffff:1XX.1XX.2XX.2 Fatal TLS error (check_tls_errors_co), restarting
    Tue May  4 12:16:09 2021 us=397978 [3330] ::ffff:1XX.1XX.2XX.2 SIGUSR1[soft,tls-error] received, client-instance restarting
    Tue May  4 12:16:09 2021 us=398000 [3330] TCP/UDP: Closing socket

    ----------------------------

    meanwhile, in  the client:

    -------------------------------

    Tue May  4 12:16:08 2021 us=867214 PKCS#11: pkcs11_initialize - entered
    Tue May  4 12:16:08 2021 us=867331 PKCS#11: pkcs11_initialize - return 0-'CKR_OK'
    Tue May  4 12:16:08 2021 us=867372 PO_INIT maxevents=4 flags=0x00000002
    Tue May  4 12:16:08 2021 us=868100 PRNG init md=SHA1 size=36
    Tue May  4 12:16:08 2021 us=868142 TLS: tls_session_init: entry
    Tue May  4 12:16:08 2021 us=868158 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:08 2021 us=868195 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:08 2021 us=868208 TLS: tls_session_init: new session object, sid=96d5aef6 a2800600
    Tue May  4 12:16:08 2021 us=868215 TLS: tls_session_init: entry
    Tue May  4 12:16:08 2021 us=868227 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:08 2021 us=868259 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:08 2021 us=868281 TLS: tls_session_init: new session object, sid=7e8c24b8 4551b7d8
    Tue May  4 12:16:08 2021 us=868291 Control Channel MTU parms [ L:1624 D:1210 EF:40 EB:0 ET:0 EL:3 ]
    Tue May  4 12:16:08 2021 us=868307 MTU DYNAMIC mtu=1450, flags=2, 1624 -> 1450
    Tue May  4 12:16:08 2021 us=868319 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=0
    Tue May  4 12:16:08 2021 us=868328 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
    Tue May  4 12:16:08 2021 us=868342 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 68 bytes
    Tue May  4 12:16:08 2021 us=868350 calc_options_string_link_mtu: link-mtu 1624 -> 1572
    Tue May  4 12:16:08 2021 us=868365 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 68 bytes
    Tue May  4 12:16:08 2021 us=868373 calc_options_string_link_mtu: link-mtu 1624 -> 1572
    Tue May  4 12:16:08 2021 us=868385 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-client'
    Tue May  4 12:16:08 2021 us=868393 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-server'
    Tue May  4 12:16:08 2021 us=868407 STREAM: RESET
    Tue May  4 12:16:08 2021 us=868414 STREAM: INIT maxlen=1627
    Tue May  4 12:16:08 2021 us=868425 TCP/UDP: Preserving recently used remote address: [AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:08 2021 us=868461 Socket Buffers: R=[131072->131072] S=[16384->16384]
    Tue May  4 12:16:08 2021 us=868470 Attempting to establish TCP connection with [AF_INET]1XX.2XX.1XX.148:8443 [nonblock]
    Tue May  4 12:16:09 2021 us=868613 TCP connection established with [AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=868657 TCP_CLIENT link local: (not bound)
    Tue May  4 12:16:09 2021 us=868673 TCP_CLIENT link remote: [AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=868689 TIMER: coarse timer wakeup 1 seconds
    Tue May  4 12:16:09 2021 us=868709 TLS: tls_multi_process: i=0 state=S_INITIAL, mysid=96d5aef6 a2800600, stored-sid=00000000 00000000, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=868722 TLS: tls_process: chg=0 ks=S_INITIAL lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:09 2021 us=868732 ACK mark active outgoing ID 0
    Tue May  4 12:16:09 2021 us=868744 TLS: Initial Handshake, sid=96d5aef6 a2800600
    Tue May  4 12:16:09 2021 us=868759 ACK reliable_can_send active=1 current=1 : [1] 0
    Tue May  4 12:16:09 2021 us=868768 ACK reliable_send ID 0 (size=4 to=2)
    Tue May  4 12:16:09 2021 us=868777 Reliable -> TCP/UDP
    Tue May  4 12:16:09 2021 us=868786 ACK reliable_send_timeout 2 [1] 0
    Tue May  4 12:16:09 2021 us=868795 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:09 2021 us=868810 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=7e8c24b8 4551b7d8, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=868825 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=868842 RANDOM USEC=177335
    Tue May  4 12:16:09 2021 us=868852 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:09 2021 us=868861 PO_CTL rwflags=0x0003 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=868874 I/O WAIT T?|T?|SR|SW [1/177335]
    Tue May  4 12:16:09 2021 us=868886 PO_WAIT[0,0] fd=3 rev=0x00000004 rwflags=0x0002 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=868895  event_wait returned 1
    Tue May  4 12:16:09 2021 us=868914 I/O WAIT status=0x0002
    Tue May  4 12:16:09 2021 us=868932 TCP_CLIENT WRITE [14] to [AF_INET]1XX.2XX.1XX.148:8443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=96d5aef6 a2800600 [ ] pid=0 DATA
    Tue May  4 12:16:09 2021 us=868942 STREAM: WRITE 14 offset=30
    Tue May  4 12:16:09 2021 us=869000 TCP_CLIENT write returned 16
    Tue May  4 12:16:09 2021 us=869018 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=96d5aef6 a2800600, stored-sid=00000000 00000000, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=869028 TLS: tls_process: chg=0 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:09 2021 us=869038 ACK reliable_can_send active=1 current=0 : [1] 0
    Tue May  4 12:16:09 2021 us=869097 SSL state (connect): before SSL initialization
    Tue May  4 12:16:09 2021 us=869328 SSL state (connect): SSLv3/TLS write client hello
    Tue May  4 12:16:09 2021 us=869352 ACK reliable_send_timeout 2 [1] 0
    Tue May  4 12:16:09 2021 us=869365 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:09 2021 us=869381 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=7e8c24b8 4551b7d8, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=869397 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=869410 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:09 2021 us=869419 PO_CTL rwflags=0x0001 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=869432 I/O WAIT T?|T?|SR|Sw [1/177335]
    Tue May  4 12:16:09 2021 us=896268 PO_WAIT[0,0] fd=3 rev=0x00000001 rwflags=0x0001 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=896307  event_wait returned 1
    Tue May  4 12:16:09 2021 us=896316 I/O WAIT status=0x0001
    Tue May  4 12:16:09 2021 us=896323 STREAM: GET NEXT len=1627
    Tue May  4 12:16:09 2021 us=896334 STREAM: ADD length_added=28
    Tue May  4 12:16:09 2021 us=896340 STREAM: ADD returned TRUE, buf_len=26, residual_len=0
    Tue May  4 12:16:09 2021 us=896346 STREAM: GET FINAL len=26
    Tue May  4 12:16:09 2021 us=896352 STREAM: RESET
    Tue May  4 12:16:09 2021 us=896358 TCP_CLIENT read returned 26
    Tue May  4 12:16:09 2021 us=896377 TCP_CLIENT READ [26] from [AF_INET]1XX.2XX.1XX.148:8443: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=9233acb4 88b270d5 [ 0 sid=96d5aef6 a2800600 ] pid=0 DATA
    Tue May  4 12:16:09 2021 us=896386 TLS: control channel, op=P_CONTROL_HARD_RESET_SERVER_V2, IP=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=896400 TLS: initial packet test, i=0 state=S_PRE_START, mysid=96d5aef6 a2800600, rec-sid=9233acb4 88b270d5, rec-ip=[AF_INET]1XX.2XX.1XX.148:8443, stored-sid=00000000 00000000, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=896414 TLS: initial packet test, i=1 state=S_INITIAL, mysid=7e8c24b8 4551b7d8, rec-sid=9233acb4 88b270d5, rec-ip=[AF_INET]1XX.2XX.1XX.148:8443, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=896429 TLS: initial packet test, i=2 state=S_UNDEF, mysid=00000000 00000000, rec-sid=9233acb4 88b270d5, rec-ip=[AF_INET]1XX.2XX.1XX.148:8443, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=896439 TLS: Initial packet from [AF_INET]1XX.2XX.1XX.148:8443, sid=9233acb4 88b270d5
    Tue May  4 12:16:09 2021 us=896447 TLS: received control channel packet s#=0 sid=9233acb4 88b270d5
    Tue May  4 12:16:09 2021 us=896453 ACK reliable_schedule_now
    Tue May  4 12:16:09 2021 us=896459 ACK received for pid 0, deleting from send buffer
    Tue May  4 12:16:09 2021 us=896466 ACK read ID 0 (buf->len=0)
    Tue May  4 12:16:09 2021 us=896472 ACK RWBS rel->size=8 rel->packet_id=00000000 id=00000000 ret=1

    Tue May  4 12:16:09 2021 us=896480 ACK mark active incoming ID 0
    Tue May  4 12:16:09 2021 us=896486 ACK acknowledge ID 0 (ack->len=1)
    Tue May  4 12:16:09 2021 us=896502 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=96d5aef6 a2800600, stored-sid=9233acb4 88b270d5, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=896510 TLS: tls_process: chg=0 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:09 2021 us=896517 ACK reliable_can_send active=0 current=0 : [1]
    Tue May  4 12:16:09 2021 us=896523 Incoming Ciphertext -> TLS
    Tue May  4 12:16:09 2021 us=896538 TLS: tls_process: chg=1 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:09 2021 us=896545 ACK reliable_can_send active=0 current=0 : [1]
    Tue May  4 12:16:09 2021 us=896553 ACK write ID 0 (ack->len=1, n=1)
    Tue May  4 12:16:09 2021 us=896559 Dedicated ACK -> TCP/UDP
    Tue May  4 12:16:09 2021 us=896565 ACK reliable_send_timeout 604800 [1]
    Tue May  4 12:16:09 2021 us=896571 TLS: tls_process: timeout set to 60
    Tue May  4 12:16:09 2021 us=896581 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=7e8c24b8 4551b7d8, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=896592 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=896600 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:09 2021 us=896607 PO_CTL rwflags=0x0003 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=896616 I/O WAIT T?|T?|SR|SW [1/177335]
    Tue May  4 12:16:09 2021 us=896625 PO_WAIT[0,0] fd=3 rev=0x00000004 rwflags=0x0002 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=896632  event_wait returned 1
    Tue May  4 12:16:09 2021 us=896637 I/O WAIT status=0x0002
    Tue May  4 12:16:09 2021 us=896650 TCP_CLIENT WRITE [22] to [AF_INET]1XX.2XX.1XX.148:8443: P_ACK_V1 kid=0 sid=96d5aef6 a2800600 [ 0 sid=9233acb4 88b270d5 ]
    Tue May  4 12:16:09 2021 us=896657 STREAM: WRITE 22 offset=35
    Tue May  4 12:16:09 2021 us=896684 TCP_CLIENT write returned 24
    Tue May  4 12:16:09 2021 us=896696 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=96d5aef6 a2800600, stored-sid=9233acb4 88b270d5, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=896703 TLS: tls_process: chg=0 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:09 2021 us=896710 STATE S_START
    Tue May  4 12:16:09 2021 us=896716 ACK reliable_can_send active=0 current=0 : [1]
    Tue May  4 12:16:09 2021 us=896742 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    Tue May  4 12:16:09 2021 us=896757 STATE S_SENT_KEY
    Tue May  4 12:16:09 2021 us=896766 BIO read tls_read_ciphertext 289 bytes
    Tue May  4 12:16:09 2021 us=896772 ACK mark active outgoing ID 1
    Tue May  4 12:16:09 2021 us=896777 Outgoing Ciphertext -> Reliable
    Tue May  4 12:16:09 2021 us=896784 TLS: tls_process: chg=1 ks=S_SENT_KEY lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:09 2021 us=896791 ACK reliable_can_send active=1 current=1 : [2] 1
    Tue May  4 12:16:09 2021 us=896797 ACK reliable_send ID 1 (size=293 to=2)
    Tue May  4 12:16:09 2021 us=896803 Reliable -> TCP/UDP
    Tue May  4 12:16:09 2021 us=896809 ACK reliable_send_timeout 2 [2] 1
    Tue May  4 12:16:09 2021 us=896815 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:09 2021 us=896825 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=7e8c24b8 4551b7d8, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=896835 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=896843 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:09 2021 us=896849 PO_CTL rwflags=0x0003 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=896857 I/O WAIT T?|T?|SR|SW [1/177335]
    Tue May  4 12:16:09 2021 us=896865 PO_WAIT[0,0] fd=3 rev=0x00000004 rwflags=0x0002 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=896871  event_wait returned 1
    Tue May  4 12:16:09 2021 us=896877 I/O WAIT status=0x0002
    Tue May  4 12:16:09 2021 us=896967 TCP_CLIENT WRITE [303] to [AF_INET]1XX.2XX.1XX.148:8443: P_CONTROL_V1 kid=0 sid=96d5aef6 a2800600 [ ] pid=1 DATA 16030101 1c010001 180303a0 30c22e99 634c850e 224f9505 6e1056f5 ffa5bf2[more...]
    Tue May  4 12:16:09 2021 us=896975 STREAM: WRITE 303 offset=30
    Tue May  4 12:16:09 2021 us=896984 TCP_CLIENT write returned 305
    Tue May  4 12:16:09 2021 us=896995 TLS: tls_multi_process: i=0 state=S_SENT_KEY, mysid=96d5aef6 a2800600, stored-sid=9233acb4 88b270d5, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:09 2021 us=897002 TLS: tls_process: chg=0 ks=S_SENT_KEY lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:09 2021 us=897009 ACK reliable_can_send active=1 current=0 : [2] 1
    Tue May  4 12:16:09 2021 us=897018 ACK reliable_send_timeout 2 [2] 1
    Tue May  4 12:16:09 2021 us=897024 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:09 2021 us=897034 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=7e8c24b8 4551b7d8, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=897044 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:09 2021 us=897051 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:09 2021 us=897058 PO_CTL rwflags=0x0001 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=897067 I/O WAIT T?|T?|SR|Sw [1/177335]
    Tue May  4 12:16:09 2021 us=994441 PO_WAIT[0,0] fd=3 rev=0x00000001 rwflags=0x0001 arg=0x5627edc42198
    Tue May  4 12:16:09 2021 us=994490  event_wait returned 1
    Tue May  4 12:16:09 2021 us=994504 I/O WAIT status=0x0001
    Tue May  4 12:16:09 2021 us=994516 STREAM: GET NEXT len=1627
    Tue May  4 12:16:09 2021 us=994533 Connection reset, restarting [0]
    Tue May  4 12:16:09 2021 us=994549 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994624 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994646 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994656 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994677 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994686 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994696 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994705 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994715 TCP/UDP: Closing socket
    Tue May  4 12:16:09 2021 us=994782 PID packet_id_free
    Tue May  4 12:16:09 2021 us=994803 SIGUSR1[soft,connection-reset] received, process restarting
    Tue May  4 12:16:09 2021 us=994827 Restart pause, 5 second(s)

    Tue May  4 12:16:14 2021 us=994911 PO_INIT maxevents=4 flags=0x00000002
    Tue May  4 12:16:14 2021 us=994962 Re-using SSL/TLS context
    Tue May  4 12:16:14 2021 us=994980 TLS: tls_session_init: entry
    Tue May  4 12:16:14 2021 us=994998 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:14 2021 us=995052 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:14 2021 us=995065 TLS: tls_session_init: new session object, sid=01364176 465edc6d
    Tue May  4 12:16:14 2021 us=995074 TLS: tls_session_init: entry
    Tue May  4 12:16:14 2021 us=995084 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:14 2021 us=995108 PID packet_id_init seq_backtrack=64 time_backtrack=15
    Tue May  4 12:16:14 2021 us=995121 TLS: tls_session_init: new session object, sid=efb7faee 14abdaab
    Tue May  4 12:16:14 2021 us=995140 Control Channel MTU parms [ L:1624 D:1210 EF:40 EB:0 ET:0 EL:3 ]
    Tue May  4 12:16:14 2021 us=995156 MTU DYNAMIC mtu=1450, flags=2, 1624 -> 1450
    Tue May  4 12:16:14 2021 us=995171 RESOLVE_REMOTE flags=0x0101 phase=1 rrs=0 sig=-1 status=0
    Tue May  4 12:16:14 2021 us=995182 Data Channel MTU parms [ L:1624 D:1450 EF:124 EB:406 ET:0 EL:3 ]
    Tue May  4 12:16:14 2021 us=995203 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 68 bytes
    Tue May  4 12:16:14 2021 us=995213 calc_options_string_link_mtu: link-mtu 1624 -> 1572
    Tue May  4 12:16:14 2021 us=995232 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 68 bytes
    Tue May  4 12:16:14 2021 us=995241 calc_options_string_link_mtu: link-mtu 1624 -> 1572
    Tue May  4 12:16:14 2021 us=995255 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-client'
    Tue May  4 12:16:14 2021 us=995265 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1572,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher AES-128-CBC,auth SHA256,keysize 128,key-method 2,tls-server'
    Tue May  4 12:16:14 2021 us=995281 STREAM: RESET
    Tue May  4 12:16:14 2021 us=995288 STREAM: INIT maxlen=1627
    Tue May  4 12:16:14 2021 us=995301 TCP/UDP: Preserving recently used remote address: [AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:14 2021 us=995336 Socket Buffers: R=[131072->131072] S=[16384->16384]
    Tue May  4 12:16:14 2021 us=995348 Attempting to establish TCP connection with [AF_INET]1XX.2XX.1XX.148:8443 [nonblock]

    Tue May  4 12:16:15 2021 us=995492 TCP connection established with [AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:15 2021 us=995531 TCP_CLIENT link local: (not bound)
    Tue May  4 12:16:15 2021 us=995541 TCP_CLIENT link remote: [AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:15 2021 us=995553 TIMER: coarse timer wakeup 1 seconds
    Tue May  4 12:16:15 2021 us=995571 TLS: tls_multi_process: i=0 state=S_INITIAL, mysid=01364176 465edc6d, stored-sid=00000000 00000000, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:15 2021 us=995579 TLS: tls_process: chg=0 ks=S_INITIAL lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:15 2021 us=995587 ACK mark active outgoing ID 0
    Tue May  4 12:16:15 2021 us=995595 TLS: Initial Handshake, sid=01364176 465edc6d
    Tue May  4 12:16:15 2021 us=995603 ACK reliable_can_send active=1 current=1 : [1] 0
    Tue May  4 12:16:15 2021 us=995609 ACK reliable_send ID 0 (size=4 to=2)
    Tue May  4 12:16:15 2021 us=995616 Reliable -> TCP/UDP
    Tue May  4 12:16:15 2021 us=995623 ACK reliable_send_timeout 2 [1] 0
    Tue May  4 12:16:15 2021 us=995629 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:15 2021 us=995641 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=efb7faee 14abdaab, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:15 2021 us=995652 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:15 2021 us=995664 RANDOM USEC=132678
    Tue May  4 12:16:15 2021 us=995671 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:15 2021 us=995678 PO_CTL rwflags=0x0003 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:15 2021 us=995688 I/O WAIT T?|T?|SR|SW [1/132678]
    Tue May  4 12:16:15 2021 us=995697 PO_WAIT[0,0] fd=3 rev=0x00000004 rwflags=0x0002 arg=0x5627edc42198
    Tue May  4 12:16:15 2021 us=995703  event_wait returned 1
    Tue May  4 12:16:15 2021 us=995711 I/O WAIT status=0x0002
    Tue May  4 12:16:15 2021 us=995724 TCP_CLIENT WRITE [14] to [AF_INET]1XX.2XX.1XX.148:8443: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=01364176 465edc6d [ ] pid=0 DATA
    Tue May  4 12:16:15 2021 us=995731 STREAM: WRITE 14 offset=30
    Tue May  4 12:16:15 2021 us=995784 TCP_CLIENT write returned 16
    Tue May  4 12:16:15 2021 us=995806 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=01364176 465edc6d, stored-sid=00000000 00000000, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:15 2021 us=995814 TLS: tls_process: chg=0 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:15 2021 us=995821 ACK reliable_can_send active=1 current=0 : [1] 0
    Tue May  4 12:16:15 2021 us=995861 SSL state (connect): before SSL initialization
    Tue May  4 12:16:15 2021 us=996025 SSL state (connect): SSLv3/TLS write client hello
    Tue May  4 12:16:15 2021 us=996040 ACK reliable_send_timeout 2 [1] 0
    Tue May  4 12:16:15 2021 us=996047 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:15 2021 us=996058 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=efb7faee 14abdaab, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:15 2021 us=996070 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:15 2021 us=996080 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:15 2021 us=996086 PO_CTL rwflags=0x0001 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:15 2021 us=996096 I/O WAIT T?|T?|SR|Sw [1/132678]
    Tue May  4 12:16:16 2021 us=23491 PO_WAIT[0,0] fd=3 rev=0x00000001 rwflags=0x0001 arg=0x5627edc42198
    Tue May  4 12:16:16 2021 us=23547  event_wait returned 1
    Tue May  4 12:16:16 2021 us=23557 I/O WAIT status=0x0001
    Tue May  4 12:16:16 2021 us=23568 STREAM: GET NEXT len=1627
    Tue May  4 12:16:16 2021 us=23583 STREAM: ADD length_added=28
    Tue May  4 12:16:16 2021 us=23590 STREAM: ADD returned TRUE, buf_len=26, residual_len=0
    Tue May  4 12:16:16 2021 us=23597 STREAM: GET FINAL len=26
    Tue May  4 12:16:16 2021 us=23604 STREAM: RESET
    Tue May  4 12:16:16 2021 us=23611 TCP_CLIENT read returned 26
    Tue May  4 12:16:16 2021 us=23631 TCP_CLIENT READ [26] from [AF_INET]1XX.2XX.1XX.148:8443: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=5412783c d0f06c30 [ 0 sid=01364176 465edc6d ] pid=0 DATA
    Tue May  4 12:16:16 2021 us=23641 TLS: control channel, op=P_CONTROL_HARD_RESET_SERVER_V2, IP=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:16 2021 us=23668 TLS: initial packet test, i=0 state=S_PRE_START, mysid=01364176 465edc6d, rec-sid=5412783c d0f06c30, rec-ip=[AF_INET]1XX.2XX.1XX.148:8443, stored-sid=00000000 00000000, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:16 2021 us=23704 TLS: initial packet test, i=1 state=S_INITIAL, mysid=efb7faee 14abdaab, rec-sid=5412783c d0f06c30, rec-ip=[AF_INET]1XX.2XX.1XX.148:8443, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:16 2021 us=23722 TLS: initial packet test, i=2 state=S_UNDEF, mysid=00000000 00000000, rec-sid=5412783c d0f06c30, rec-ip=[AF_INET]1XX.2XX.1XX.148:8443, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:16 2021 us=23734 TLS: Initial packet from [AF_INET]1XX.2XX.1XX.148:8443, sid=5412783c d0f06c30
    Tue May  4 12:16:16 2021 us=23743 TLS: received control channel packet s#=0 sid=5412783c d0f06c30
    Tue May  4 12:16:16 2021 us=23751 ACK reliable_schedule_now
    Tue May  4 12:16:16 2021 us=23758 ACK received for pid 0, deleting from send buffer
    Tue May  4 12:16:16 2021 us=23766 ACK read ID 0 (buf->len=0)
    Tue May  4 12:16:16 2021 us=23774 ACK RWBS rel->size=8 rel->packet_id=00000000 id=00000000 ret=1

    Tue May  4 12:16:16 2021 us=23782 ACK mark active incoming ID 0
    Tue May  4 12:16:16 2021 us=23789 ACK acknowledge ID 0 (ack->len=1)
    Tue May  4 12:16:16 2021 us=23799 TIMER: coarse timer wakeup 1 seconds
    Tue May  4 12:16:16 2021 us=23815 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=01364176 465edc6d, stored-sid=5412783c d0f06c30, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:16 2021 us=23824 TLS: tls_process: chg=0 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:16 2021 us=23832 ACK reliable_can_send active=0 current=0 : [1]
    Tue May  4 12:16:16 2021 us=23839 Incoming Ciphertext -> TLS
    Tue May  4 12:16:16 2021 us=23857 TLS: tls_process: chg=1 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:16 2021 us=23866 ACK reliable_can_send active=0 current=0 : [1]
    Tue May  4 12:16:16 2021 us=23878 ACK write ID 0 (ack->len=1, n=1)
    Tue May  4 12:16:16 2021 us=23886 Dedicated ACK -> TCP/UDP
    Tue May  4 12:16:16 2021 us=23896 ACK reliable_send_timeout 604800 [1]
    Tue May  4 12:16:16 2021 us=23902 TLS: tls_process: timeout set to 59
    Tue May  4 12:16:16 2021 us=23912 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=efb7faee 14abdaab, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:16 2021 us=23923 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:16 2021 us=23932 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:16 2021 us=23938 PO_CTL rwflags=0x0003 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:16 2021 us=23948 I/O WAIT T?|T?|SR|SW [1/132678]
    Tue May  4 12:16:16 2021 us=23957 PO_WAIT[0,0] fd=3 rev=0x00000004 rwflags=0x0002 arg=0x5627edc42198
    Tue May  4 12:16:16 2021 us=23964  event_wait returned 1
    Tue May  4 12:16:16 2021 us=23970 I/O WAIT status=0x0002
    Tue May  4 12:16:16 2021 us=23982 TCP_CLIENT WRITE [22] to [AF_INET]1XX.2XX.1XX.148:8443: P_ACK_V1 kid=0 sid=01364176 465edc6d [ 0 sid=5412783c d0f06c30 ]
    Tue May  4 12:16:16 2021 us=23989 STREAM: WRITE 22 offset=35
    Tue May  4 12:16:16 2021 us=24031 TCP_CLIENT write returned 24
    Tue May  4 12:16:16 2021 us=24043 TLS: tls_multi_process: i=0 state=S_PRE_START, mysid=01364176 465edc6d, stored-sid=5412783c d0f06c30, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:16 2021 us=24050 TLS: tls_process: chg=0 ks=S_PRE_START lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:16 2021 us=24058 STATE S_START
    Tue May  4 12:16:16 2021 us=24064 ACK reliable_can_send active=0 current=0 : [1]
    Tue May  4 12:16:16 2021 us=24093 STATE S_SENT_KEY
    Tue May  4 12:16:16 2021 us=24103 BIO read tls_read_ciphertext 289 bytes
    Tue May  4 12:16:16 2021 us=24109 ACK mark active outgoing ID 1
    Tue May  4 12:16:16 2021 us=24114 Outgoing Ciphertext -> Reliable
    Tue May  4 12:16:16 2021 us=24121 TLS: tls_process: chg=1 ks=S_SENT_KEY lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:16 2021 us=24127 ACK reliable_can_send active=1 current=1 : [2] 1
    Tue May  4 12:16:16 2021 us=24134 ACK reliable_send ID 1 (size=293 to=2)
    Tue May  4 12:16:16 2021 us=24140 Reliable -> TCP/UDP
    Tue May  4 12:16:16 2021 us=24146 ACK reliable_send_timeout 2 [2] 1
    Tue May  4 12:16:16 2021 us=24152 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:16 2021 us=24161 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=efb7faee 14abdaab, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:16 2021 us=24172 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:16 2021 us=24180 STREAM: SET NEXT, buf=[536,0] next=[536,1627] len=-1 maxlen=1627
    Tue May  4 12:16:16 2021 us=24186 PO_CTL rwflags=0x0003 ev=3 arg=0x5627edc42198
    Tue May  4 12:16:16 2021 us=24194 I/O WAIT T?|T?|SR|SW [1/132678]
    Tue May  4 12:16:16 2021 us=24201 PO_WAIT[0,0] fd=3 rev=0x00000004 rwflags=0x0002 arg=0x5627edc42198
    Tue May  4 12:16:16 2021 us=24208  event_wait returned 1
    Tue May  4 12:16:16 2021 us=24213 I/O WAIT status=0x0002
    Tue May  4 12:16:16 2021 us=24287 TCP_CLIENT WRITE [303] to [AF_INET]1XX.2XX.1XX.148:8443: P_CONTROL_V1 kid=0 sid=01364176 465edc6d [ ] pid=1 DATA 16030101 1c010001 1803036f 8488b7d8 5b499170 138afda1 405a34e5 85d81dd[more...]
    Tue May  4 12:16:16 2021 us=24295 STREAM: WRITE 303 offset=30
    Tue May  4 12:16:16 2021 us=24303 TCP_CLIENT write returned 305
    Tue May  4 12:16:16 2021 us=24314 TLS: tls_multi_process: i=0 state=S_SENT_KEY, mysid=01364176 465edc6d, stored-sid=5412783c d0f06c30, stored-ip=[AF_INET]1XX.2XX.1XX.148:8443
    Tue May  4 12:16:16 2021 us=24321 TLS: tls_process: chg=0 ks=S_SENT_KEY lame=S_UNDEF to_link->len=0 wakeup=604800
    Tue May  4 12:16:16 2021 us=24328 ACK reliable_can_send active=1 current=0 : [2] 1
    Tue May  4 12:16:16 2021 us=24337 ACK reliable_send_timeout 2 [2] 1
    Tue May  4 12:16:16 2021 us=24342 TLS: tls_process: timeout set to 2
    Tue May  4 12:16:16 2021 us=24352 TLS: tls_multi_process: i=1 state=S_INITIAL, mysid=efb7faee 14abdaab, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]
    Tue May  4 12:16:16 2021 us=24362 TLS: tls_multi_process: i=2 state=S_UNDEF, mysid=00000000 00000000, stored-sid=00000000 00000000, stored-ip=[AF_UNSPEC]

    ----------------------------------------------------------------

    If I compare the "local" and "remote" options of both they mactch perfectly.

    What can be the issue?


  •  
    Emmanuel (EmmoSophos)
    Community Support Engineer | Sophos Technical Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.