XOR-Patched VPN - Part 2: The Desktop Clients | Tejas's Tech Tips #6

2023-07-10T15:26:10Z

giscus[bot]
bot Jul 10, 2023

XOR-Patched VPN - Part 2: The Desktop Clients | Tejas's Tech Tips

Other Parts

https://blog.tmthecoder.dev/posts/part-2-the-patched-desktop-clients/

MotazHakim · 2023-07-10T16:26:26Z

MotazHakim
Jul 10, 2023 — with giscus

Well, First of all, Huge Thanks to your for your effort and the instructions that i'm sure it toke alot of time
Big Thanks :)

I've applied this tut on my Oracle cloud instance with openvpn 2.5.9 and i'm using Windows client that took about 1 hour to build

and i've tested it on 2 PCs with 2 diff ISPs in the Same country (Egypt)
one PC connected and here's the Log in client app

2023-07-10 19:05:58 OpenVPN 2.5.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jul 10 2023
2023-07-10 19:05:58 Windows version 10.0 (Windows 10 or greater) 64bit
2023-07-10 19:05:58 library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10
2023-07-10 19:05:58 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
2023-07-10 19:05:58 Need hold release from management interface, waiting...
2023-07-10 19:05:59 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
2023-07-10 19:05:59 MANAGEMENT: CMD 'state on'
2023-07-10 19:05:59 MANAGEMENT: CMD 'log on all'
2023-07-10 19:05:59 MANAGEMENT: CMD 'echo on all'
2023-07-10 19:05:59 MANAGEMENT: CMD 'bytecount 5'
2023-07-10 19:05:59 MANAGEMENT: CMD 'state'
2023-07-10 19:05:59 MANAGEMENT: CMD 'hold off'
2023-07-10 19:05:59 MANAGEMENT: CMD 'hold release'
2023-07-10 19:05:59 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2023-07-10 19:05:59 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2023-07-10 19:05:59 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2023-07-10 19:05:59 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2023-07-10 19:05:59 TCP/UDP: Preserving recently used remote address: [AF_INET]129.159.114.164:443
2023-07-10 19:05:59 Socket Buffers: R=[65536->65536] S=[65536->65536]
2023-07-10 19:05:59 Attempting to establish TCP connection with [AF_INET]129.159.114.164:443 [nonblock]
2023-07-10 19:05:59 MANAGEMENT: >STATE:1689005159,TCP_CONNECT,,,,,,
2023-07-10 19:05:59 TCP connection established with [AF_INET]129.159.114.164:443
2023-07-10 19:05:59 TCP_CLIENT link local: (not bound)
2023-07-10 19:05:59 TCP_CLIENT link remote: [AF_INET]129.159.114.164:443
2023-07-10 19:05:59 MANAGEMENT: >STATE:1689005159,WAIT,,,,,,
2023-07-10 19:05:59 MANAGEMENT: >STATE:1689005159,AUTH,,,,,,
2023-07-10 19:05:59 TLS: Initial packet from [AF_INET]129.159.114.164:443, sid=736b1c16 e8e6079e
2023-07-10 19:06:00 VERIFY OK: depth=1, CN=ChangeMe
2023-07-10 19:06:00 VERIFY KU OK
2023-07-10 19:06:00 Validating certificate extended key usage
2023-07-10 19:06:00 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-07-10 19:06:00 VERIFY EKU OK
2023-07-10 19:06:00 VERIFY OK: depth=0, CN=server
2023-07-10 19:06:00 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
2023-07-10 19:06:00 [server] Peer Connection Initiated with [AF_INET]129.159.114.164:443
2023-07-10 19:06:00 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM'
2023-07-10 19:06:00 OPTIONS IMPORT: timers and/or timeouts modified
2023-07-10 19:06:00 OPTIONS IMPORT: --ifconfig/up options modified
2023-07-10 19:06:00 OPTIONS IMPORT: route options modified
2023-07-10 19:06:00 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2023-07-10 19:06:00 OPTIONS IMPORT: peer-id set
2023-07-10 19:06:00 OPTIONS IMPORT: adjusting link_mtu to 1627
2023-07-10 19:06:00 OPTIONS IMPORT: data channel crypto options modified
2023-07-10 19:06:00 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2023-07-10 19:06:00 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2023-07-10 19:06:00 interactive service msg_channel=600
2023-07-10 19:06:00 ROUTE_GATEWAY 10.0.0.1/255.255.255.0 I=20 HWADDR=c8:1f:66:b0:08:f0
2023-07-10 19:06:00 open_tun
2023-07-10 19:06:00 tap-windows6 device [Local Area Connection 2] opened
2023-07-10 19:06:00 TAP-Windows Driver Version 9.24 
2023-07-10 19:06:00 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {C2C6BFC2-592F-4106-A112-C785645F08EA} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
2023-07-10 19:06:00 Successful ARP Flush on interface [67] {C2C6BFC2-592F-4106-A112-C785645F08EA}
2023-07-10 19:06:00 MANAGEMENT: >STATE:1689005160,ASSIGN_IP,,10.8.0.6,,,,
2023-07-10 19:06:00 TUN: setting IPv4 mtu using service failed: [Unknown Win32 Error] [status=536870915 if_index=67]
2023-07-10 19:06:05 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
2023-07-10 19:06:05 C:\Windows\system32\route.exe ADD 129.159.114.164 MASK 255.255.255.255 10.0.0.1
2023-07-10 19:06:05 Route addition via service succeeded
2023-07-10 19:06:05 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
2023-07-10 19:06:05 Route addition via service succeeded
2023-07-10 19:06:05 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
2023-07-10 19:06:05 Route addition via service succeeded
2023-07-10 19:06:05 MANAGEMENT: >STATE:1689005165,ADD_ROUTES,,,,,,
2023-07-10 19:06:05 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
2023-07-10 19:06:06 Route addition via service succeeded
2023-07-10 19:06:06 Initialization Sequence Completed
2023-07-10 19:06:06 MANAGEMENT: >STATE:1689005166,CONNECTED,SUCCESS,10.8.0.6,129.159.114.164,443,10.0.0.210,53484

and theres a red line error

2023-07-10 19:06:00 TUN: setting IPv4 mtu using service failed: [Unknown Win32 Error] [status=536870915 if_index=67]

but it's connected and checked the ip and it's all good

now, the second PC when i try to connect
here's the client Log:

Mon Jul 10 19:09:37 2023 OpenVPN 2.5.9 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jul 10 2023
Mon Jul 10 19:09:37 2023 Windows version 10.0 (Windows 10 or greater) 64bit
Mon Jul 10 19:09:37 2023 library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10
Mon Jul 10 19:09:37 2023 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Mon Jul 10 19:09:37 2023 Need hold release from management interface, waiting...
Mon Jul 10 19:09:38 2023 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Mon Jul 10 19:09:38 2023 MANAGEMENT: CMD 'state on'
Mon Jul 10 19:09:38 2023 MANAGEMENT: CMD 'log on all'
Mon Jul 10 19:09:38 2023 MANAGEMENT: CMD 'echo on all'
Mon Jul 10 19:09:38 2023 MANAGEMENT: CMD 'bytecount 5'
Mon Jul 10 19:09:38 2023 MANAGEMENT: CMD 'state'
Mon Jul 10 19:09:38 2023 MANAGEMENT: CMD 'hold off'
Mon Jul 10 19:09:38 2023 MANAGEMENT: CMD 'hold release'
Mon Jul 10 19:09:38 2023 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Mon Jul 10 19:09:38 2023 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jul 10 19:09:38 2023 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Mon Jul 10 19:09:38 2023 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Jul 10 19:09:38 2023 TCP/UDP: Preserving recently used remote address: [AF_INET]129.159.114.164:443
Mon Jul 10 19:09:38 2023 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Jul 10 19:09:38 2023 Attempting to establish TCP connection with [AF_INET]129.159.114.164:443 [nonblock]
Mon Jul 10 19:09:38 2023 MANAGEMENT: >STATE:1689005378,TCP_CONNECT,,,,,,
Mon Jul 10 19:09:38 2023 TCP connection established with [AF_INET]129.159.114.164:443
Mon Jul 10 19:09:38 2023 TCP_CLIENT link local: (not bound)
Mon Jul 10 19:09:38 2023 TCP_CLIENT link remote: [AF_INET]129.159.114.164:443
Mon Jul 10 19:09:38 2023 MANAGEMENT: >STATE:1689005378,WAIT,,,,,,
Mon Jul 10 19:09:38 2023 MANAGEMENT: >STATE:1689005378,AUTH,,,,,,
Mon Jul 10 19:09:38 2023 TLS: Initial packet from [AF_INET]129.159.114.164:443, sid=84943825 e6dc077d
Mon Jul 10 19:09:39 2023 VERIFY OK: depth=1, CN=ChangeMe
Mon Jul 10 19:09:39 2023 VERIFY KU OK
Mon Jul 10 19:09:39 2023 Validating certificate extended key usage
Mon Jul 10 19:09:39 2023 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Jul 10 19:09:39 2023 VERIFY EKU OK
Mon Jul 10 19:09:39 2023 VERIFY OK: depth=0, CN=server
Mon Jul 10 19:09:39 2023 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bit RSA, signature: RSA-SHA256
Mon Jul 10 19:09:39 2023 [server] Peer Connection Initiated with [AF_INET]129.159.114.164:443
Mon Jul 10 19:09:40 2023 MANAGEMENT: >STATE:1689005380,GET_CONFIG,,,,,,
Mon Jul 10 19:09:40 2023 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon Jul 10 19:09:40 2023 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 1.1.1.1,dhcp-option DNS 1.0.0.1,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM'
Mon Jul 10 19:09:40 2023 OPTIONS IMPORT: timers and/or timeouts modified
Mon Jul 10 19:09:40 2023 OPTIONS IMPORT: --ifconfig/up options modified
Mon Jul 10 19:09:40 2023 OPTIONS IMPORT: route options modified
Mon Jul 10 19:09:40 2023 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Jul 10 19:09:40 2023 OPTIONS IMPORT: peer-id set
Mon Jul 10 19:09:40 2023 OPTIONS IMPORT: adjusting link_mtu to 1627
Mon Jul 10 19:09:40 2023 OPTIONS IMPORT: data channel crypto options modified
Mon Jul 10 19:09:40 2023 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Jul 10 19:09:40 2023 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Jul 10 19:09:40 2023 interactive service msg_channel=0
Mon Jul 10 19:09:40 2023 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=4 HWADDR=40:8d:5c:bb:14:c5
Mon Jul 10 19:09:40 2023 open_tun
Mon Jul 10 19:09:40 2023 tap-windows6 device [Local Area Connection] opened
Mon Jul 10 19:09:40 2023 TAP-Windows Driver Version 9.24 
Mon Jul 10 19:09:40 2023 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {FD0368E9-EBA8-41F6-BC6C-5915FE097151} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Mon Jul 10 19:09:40 2023 NOTE: FlushIpNetTable failed on interface [14] {FD0368E9-EBA8-41F6-BC6C-5915FE097151} (status=5) : Access is denied.  
Mon Jul 10 19:09:40 2023 MANAGEMENT: >STATE:1689005380,ASSIGN_IP,,10.8.0.6,,,,
Mon Jul 10 19:09:40 2023 TUN: Setting IPv4 mtu failed: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Mon Jul 10 19:09:45 2023 C:\Windows\system32\route.exe ADD 129.159.114.164 MASK 255.255.255.255 192.168.1.1
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=4]
Mon Jul 10 19:09:45 2023 Route addition via IPAPI failed [adaptive]
Mon Jul 10 19:09:45 2023 Route addition fallback to route.exe
Mon Jul 10 19:09:45 2023 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jul 10 19:09:45 2023 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 Route addition via IPAPI failed [adaptive]
Mon Jul 10 19:09:45 2023 Route addition fallback to route.exe
Mon Jul 10 19:09:45 2023 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jul 10 19:09:45 2023 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 Route addition via IPAPI failed [adaptive]
Mon Jul 10 19:09:45 2023 Route addition fallback to route.exe
Mon Jul 10 19:09:45 2023 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jul 10 19:09:45 2023 MANAGEMENT: >STATE:1689005385,ADD_ROUTES,,,,,,
Mon Jul 10 19:09:45 2023 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 Route addition via IPAPI failed [adaptive]
Mon Jul 10 19:09:45 2023 Route addition fallback to route.exe
Mon Jul 10 19:09:45 2023 env_block: add PATH=C:\Windows\System32;C:\Windows;C:\Windows\System32\Wbem
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jul 10 19:09:45 2023 Initialization Sequence Completed
Mon Jul 10 19:09:45 2023 MANAGEMENT: >STATE:1689005385,CONNECTED,SUCCESS,10.8.0.6,129.159.114.164,443,192.168.1.2,1585

and the error lines:

Mon Jul 10 19:09:40 2023 TUN: Setting IPv4 mtu failed: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=4]
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1
Mon Jul 10 19:09:45 2023 ROUTE: route addition failed using CreateIpForwardEntry: Access is denied.   [status=5 if_index=14]
Mon Jul 10 19:09:45 2023 ERROR: Windows route add command failed [adaptive]: returned error code 1

and the client app shows it's connected but when i checked my public ip address i've found my original IP without changing

Do you have an explanation?

1 reply

tmthecoder Jul 16, 2023 — with giscus
Maintainer

Hi! It looks like there's an access error. OpenVPN should be run as an administrator, which should fix your errors.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

XOR-Patched VPN - Part 2: The Desktop Clients | Tejas's Tech Tips #6

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

XOR-Patched VPN - Part 2: The Desktop Clients | Tejas's Tech Tips #6

Uh oh!

giscus[bot] bot Jul 10, 2023

XOR-Patched VPN - Part 2: The Desktop Clients | Tejas's Tech Tips

Replies: 1 comment · 1 reply

Uh oh!

MotazHakim Jul 10, 2023 — with giscus

Uh oh!

tmthecoder Jul 16, 2023 — with giscus Maintainer

giscus[bot]
bot Jul 10, 2023

Replies: 1 comment 1 reply

MotazHakim
Jul 10, 2023 — with giscus

tmthecoder Jul 16, 2023 — with giscus
Maintainer