OpenVPN on Windows server 2003 standard as primary domain co

mrdebug

I have installed OpenVPN on Windows Server PDC. OpenVPN is configured as client, the server has to connect to a remote server only for administration. In this situation, after a reboot, OpenVPN does not works correctly. I have to restart the service after the server restart.

This is my client.ovpn file:

client
dev tun

proto udp
remote ****.****.*** 1194
resolv-retry infinite

nobind

persist-key
persist-tun

ca C:\\Programmi\\OpenVPN\\config\\ca.crt
cert C:\\Programmi\\OpenVPN\\config\\server03.studiozago.local.crt
key C:\\Programmi\\OpenVPN\\config\\server03.studiozago.local.key

comp-lzo
verb 3

janjust

check the openvpn client log AFTER a reboot of the PDC - if you run openvpn as a service the output is normally logged to something like <CLIENTNAME>.log

mrdebug

Very strange. The log seems ok.
Client (pdc server) side:

Fri Apr 26 14:38:04 2013 TLS: tls_process: killed expiring key
Fri Apr 26 14:38:05 2013 TLS: soft reset sec=0 bytes=37012/0 pkts=705/0
Fri Apr 26 14:38:06 2013 VERIFY OK: depth=1, C=IT, ST=Padova, L=Camposampiero, O=DenisLab, CN=magellano, emailAddress=mrdebug@libero.it
Fri Apr 26 14:38:06 2013 VERIFY OK: depth=0, C=IT, ST=Padova, O=DenisLab, CN=tomcat, emailAddress=mrdebug@libero.it
Fri Apr 26 14:38:06 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 26 14:38:06 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 14:38:06 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 26 14:38:06 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 14:38:06 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 26 15:38:04 2013 VERIFY OK: depth=1, C=IT, ST=Padova, L=Camposampiero, O=DenisLab, CN=magellano, emailAddress=mrdebug@libero.it
Fri Apr 26 15:38:04 2013 VERIFY OK: depth=0, C=IT, ST=Padova, O=DenisLab, CN=tomcat, emailAddress=mrdebug@libero.it
Fri Apr 26 15:38:04 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 26 15:38:04 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 15:38:04 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 26 15:38:04 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 15:38:04 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

Server side (Debian 6)

Fri Apr 26 15:38:16 2013 server02.studiozago.local/95.240.235.212:62906 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 15:38:16 2013 server02.studiozago.local/95.240.235.212:62906 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 26 15:38:16 2013 server02.studiozago.local/95.240.235.212:62906 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 15:38:16 2013 server03.studiozago.local/95.240.235.212:53738 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 26 15:38:16 2013 server03.studiozago.local/95.240.235.212:53738 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 15:38:16 2013 server03.studiozago.local/95.240.235.212:53738 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 26 15:38:16 2013 server03.studiozago.local/95.240.235.212:53738 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 26 15:38:16 2013 server02.studiozago.local/95.240.235.212:62906 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 26 15:38:16 2013 server03.studiozago.local/95.240.235.212:53738 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 26 16:20:13 2013 server02.studiozago.local/95.240.235.212:62906 Replay-window backtrack occurred [1]

But is impossible to ping or connect to the pdc server.
After OpenVPN restart pdc server side all works well.