openvpn is not able to resolve server hostname if it's started before network connection is available.
Sun Jan 5 15:00:34 2014 us=572459 RESOLVE: Cannot resolve host address: hardynet.cz: Temporary failure in name resolution
once network connection is active openvpn won't send dns query to nameserver defined in /etc/resolve.conf. Instead it keeps sending dns queries to 127.0.0.1 (no idea why) which results in no connection to vpn server.
getent resolves hostname without problem
getent hosts hardynet.cz
89.185.248.54 hardynet.cz
openvpn log:
Sun Jan 5 15:00:34 2014 us=503455 Current Parameter Settings:
Sun Jan 5 15:00:34 2014 us=504283 config = 'hardynet.cz.conf'
Sun Jan 5 15:00:34 2014 us=504484 mode = 0
Sun Jan 5 15:00:34 2014 us=504714 persist_config = DISABLED
Sun Jan 5 15:00:34 2014 us=504935 persist_mode = 1
Sun Jan 5 15:00:34 2014 us=505133 show_ciphers = DISABLED
Sun Jan 5 15:00:34 2014 us=505309 show_digests = DISABLED
Sun Jan 5 15:00:34 2014 us=505527 show_engines = DISABLED
Sun Jan 5 15:00:34 2014 us=505717 genkey = DISABLED
Sun Jan 5 15:00:34 2014 us=505893 key_pass_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=506069 show_tls_ciphers = DISABLED
Sun Jan 5 15:00:34 2014 us=506243 Connection profiles [default]:
Sun Jan 5 15:00:34 2014 us=506428 proto = tcp-client
Sun Jan 5 15:00:34 2014 us=506601 local = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=506774 local_port = 0
Sun Jan 5 15:00:34 2014 us=506947 remote = 'hardynet.cz'
Sun Jan 5 15:00:34 2014 us=507114 remote_port = 1194
Sun Jan 5 15:00:34 2014 us=507283 remote_float = DISABLED
Sun Jan 5 15:00:34 2014 us=507479 bind_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=507684 bind_local = DISABLED
Sun Jan 5 15:00:34 2014 us=507863 connect_retry_seconds = 5
Sun Jan 5 15:00:34 2014 us=508042 connect_timeout = 10
Sun Jan 5 15:00:34 2014 us=508215 connect_retry_max = 0
Sun Jan 5 15:00:34 2014 us=508400 socks_proxy_server = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=508575 socks_proxy_port = 0
Sun Jan 5 15:00:34 2014 us=508750 socks_proxy_retry = DISABLED
Sun Jan 5 15:00:34 2014 us=508923 tun_mtu = 1500
Sun Jan 5 15:00:34 2014 us=509095 tun_mtu_defined = ENABLED
Sun Jan 5 15:00:34 2014 us=509267 link_mtu = 1500
Sun Jan 5 15:00:34 2014 us=509453 link_mtu_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=509627 tun_mtu_extra = 0
Sun Jan 5 15:00:34 2014 us=509801 tun_mtu_extra_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=509974 mtu_discover_type = -1
Sun Jan 5 15:00:34 2014 us=510148 fragment = 0
Sun Jan 5 15:00:34 2014 us=510321 mssfix = 1450
Sun Jan 5 15:00:34 2014 us=510507 explicit_exit_notification = 0
Sun Jan 5 15:00:34 2014 us=510685 Connection profiles END
Sun Jan 5 15:00:34 2014 us=510859 remote_random = DISABLED
Sun Jan 5 15:00:34 2014 us=511033 ipchange = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=511201 dev = 'tun'
Sun Jan 5 15:00:34 2014 us=511414 dev_type = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=511580 dev_node = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=511786 lladdr = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=511970 topology = 1
Sun Jan 5 15:00:34 2014 us=512147 tun_ipv6 = DISABLED
Sun Jan 5 15:00:34 2014 us=512325 ifconfig_local = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=512509 ifconfig_remote_netmask = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=512688 ifconfig_noexec = DISABLED
Sun Jan 5 15:00:34 2014 us=512867 ifconfig_nowarn = DISABLED
Sun Jan 5 15:00:34 2014 us=513043 ifconfig_ipv6_local = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=513220 ifconfig_ipv6_netbits = 0
Sun Jan 5 15:00:34 2014 us=513417 ifconfig_ipv6_remote = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=513596 shaper = 0
Sun Jan 5 15:00:34 2014 us=513776 mtu_test = 0
Sun Jan 5 15:00:34 2014 us=513955 mlock = DISABLED
Sun Jan 5 15:00:34 2014 us=514133 keepalive_ping = 0
Sun Jan 5 15:00:34 2014 us=514311 keepalive_timeout = 0
Sun Jan 5 15:00:34 2014 us=514501 inactivity_timeout = 0
Sun Jan 5 15:00:34 2014 us=514679 ping_send_timeout = 0
Sun Jan 5 15:00:34 2014 us=514855 ping_rec_timeout = 0
Sun Jan 5 15:00:34 2014 us=515033 ping_rec_timeout_action = 0
Sun Jan 5 15:00:34 2014 us=515207 ping_timer_remote = DISABLED
Sun Jan 5 15:00:34 2014 us=515403 remap_sigusr1 = 0
Sun Jan 5 15:00:34 2014 us=515573 persist_tun = DISABLED
Sun Jan 5 15:00:34 2014 us=515815 persist_local_ip = DISABLED
Sun Jan 5 15:00:34 2014 us=516016 persist_remote_ip = DISABLED
Sun Jan 5 15:00:34 2014 us=516196 persist_key = ENABLED
Sun Jan 5 15:00:34 2014 us=516387 passtos = DISABLED
Sun Jan 5 15:00:34 2014 us=516568 resolve_retry_seconds = 1000000000
Sun Jan 5 15:00:34 2014 us=516748 username = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=516926 groupname = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=517103 chroot_dir = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=517280 cd_dir = '/etc/openvpn/'
Sun Jan 5 15:00:34 2014 us=517510 writepid = '/var/run/openvpn/hardynet.cz.pid'
Sun Jan 5 15:00:34 2014 us=517690 up_script = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=517869 down_script = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=518047 down_pre = DISABLED
Sun Jan 5 15:00:34 2014 us=518225 up_restart = DISABLED
Sun Jan 5 15:00:34 2014 us=518425 up_delay = DISABLED
Sun Jan 5 15:00:34 2014 us=518605 daemon = DISABLED
Sun Jan 5 15:00:34 2014 us=518782 inetd = 0
Sun Jan 5 15:00:34 2014 us=518960 log = DISABLED
Sun Jan 5 15:00:34 2014 us=519138 suppress_timestamps = DISABLED
Sun Jan 5 15:00:34 2014 us=519314 nice = 0
Sun Jan 5 15:00:34 2014 us=519502 verbosity = 5
Sun Jan 5 15:00:34 2014 us=519675 mute = 0
Sun Jan 5 15:00:34 2014 us=519853 gremlin = 0
Sun Jan 5 15:00:34 2014 us=520053 status_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=520233 status_file_version = 1
Sun Jan 5 15:00:34 2014 us=520440 status_file_update_freq = 60
Sun Jan 5 15:00:34 2014 us=520617 occ = ENABLED
Sun Jan 5 15:00:34 2014 us=520791 rcvbuf = 65536
Sun Jan 5 15:00:34 2014 us=520965 sndbuf = 65536
Sun Jan 5 15:00:34 2014 us=521139 mark = 0
Sun Jan 5 15:00:34 2014 us=521312 sockflags = 0
Sun Jan 5 15:00:34 2014 us=521498 fast_io = DISABLED
Sun Jan 5 15:00:34 2014 us=521670 lzo = 7
Sun Jan 5 15:00:34 2014 us=521843 route_script = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=522017 route_default_gateway = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=522191 route_default_metric = 0
Sun Jan 5 15:00:34 2014 us=522375 route_noexec = DISABLED
Sun Jan 5 15:00:34 2014 us=522549 route_delay = 0
Sun Jan 5 15:00:34 2014 us=522723 route_delay_window = 30
Sun Jan 5 15:00:34 2014 us=522897 route_delay_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=523070 route_nopull = DISABLED
Sun Jan 5 15:00:34 2014 us=523251 route_gateway_via_dhcp = DISABLED
Sun Jan 5 15:00:34 2014 us=523433 max_routes = 100
Sun Jan 5 15:00:34 2014 us=523595 allow_pull_fqdn = DISABLED
Sun Jan 5 15:00:34 2014 us=523756 management_addr = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=523917 management_port = 0
Sun Jan 5 15:00:34 2014 us=524130 management_user_pass = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=524348 management_log_history_cache = 250
Sun Jan 5 15:00:34 2014 us=524536 management_echo_buffer_size = 100
Sun Jan 5 15:00:34 2014 us=524706 management_write_peer_info_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=524865 management_client_user = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=525024 management_client_group = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=525183 management_flags = 0
Sun Jan 5 15:00:34 2014 us=525366 shared_secret_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=525538 key_direction = 0
Sun Jan 5 15:00:34 2014 us=525705 ciphername_defined = ENABLED
Sun Jan 5 15:00:34 2014 us=525865 ciphername = 'BF-CBC'
Sun Jan 5 15:00:34 2014 us=526023 authname_defined = ENABLED
Sun Jan 5 15:00:34 2014 us=526180 authname = 'SHA1'
Sun Jan 5 15:00:34 2014 us=526353 prng_hash = 'SHA1'
Sun Jan 5 15:00:34 2014 us=526551 prng_nonce_secret_len = 16
Sun Jan 5 15:00:34 2014 us=526732 keysize = 0
Sun Jan 5 15:00:34 2014 us=526909 engine = DISABLED
Sun Jan 5 15:00:34 2014 us=527085 replay = ENABLED
Sun Jan 5 15:00:34 2014 us=527262 mute_replay_warnings = DISABLED
Sun Jan 5 15:00:34 2014 us=527461 replay_window = 64
Sun Jan 5 15:00:34 2014 us=527629 replay_time = 15
Sun Jan 5 15:00:34 2014 us=527794 packet_id_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=527959 use_iv = ENABLED
Sun Jan 5 15:00:34 2014 us=528145 test_crypto = DISABLED
Sun Jan 5 15:00:34 2014 us=528364 tls_server = DISABLED
Sun Jan 5 15:00:34 2014 us=528555 tls_client = ENABLED
Sun Jan 5 15:00:34 2014 us=528728 key_method = 2
Sun Jan 5 15:00:34 2014 us=528908 ca_file = '/etc/openvpn/cumlik.hardynet.cz/ca.crt'
Sun Jan 5 15:00:34 2014 us=529082 ca_path = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=529255 dh_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=529439 cert_file = '/etc/openvpn/cumlik.hardynet.cz/cumlik.crt'
Sun Jan 5 15:00:34 2014 us=529613 priv_key_file = '/etc/openvpn/cumlik.hardynet.cz/cumlik.key'
Sun Jan 5 15:00:34 2014 us=529787 pkcs12_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=529961 cipher_list = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=530133 tls_verify = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=530307 tls_export_cert = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=530496 verify_x509_type = 0
Sun Jan 5 15:00:34 2014 us=530669 verify_x509_name = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=530846 crl_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=531020 ns_cert_type = 0
Sun Jan 5 15:00:34 2014 us=531194 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=531383 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=531554 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=531718 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=531879 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=532040 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=532200 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=532428 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=532611 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=532789 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=532969 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=533148 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=533325 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=533514 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=533693 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=533871 remote_cert_ku[i] = 0
Sun Jan 5 15:00:34 2014 us=534048 remote_cert_eku = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=534228 ssl_flags = 0
Sun Jan 5 15:00:34 2014 us=534422 tls_timeout = 2
Sun Jan 5 15:00:34 2014 us=534608 renegotiate_bytes = 0
Sun Jan 5 15:00:34 2014 us=534787 renegotiate_packets = 0
Sun Jan 5 15:00:34 2014 us=534966 renegotiate_seconds = 3600
Sun Jan 5 15:00:34 2014 us=535144 handshake_window = 60
Sun Jan 5 15:00:34 2014 us=535322 transition_window = 3600
Sun Jan 5 15:00:34 2014 us=535510 single_session = DISABLED
Sun Jan 5 15:00:34 2014 us=535690 push_peer_info = DISABLED
Sun Jan 5 15:00:34 2014 us=535865 tls_exit = DISABLED
Sun Jan 5 15:00:34 2014 us=536037 tls_auth_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=536208 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=536410 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=536608 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=536788 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=536967 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=537146 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=537323 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=537510 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=537688 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=537865 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=538043 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=538222 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=538424 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=538603 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=538783 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=538960 pkcs11_protected_authentication = DISABLED
Sun Jan 5 15:00:34 2014 us=539142 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=539321 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=539501 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=539668 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=539832 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=539988 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=540140 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=540292 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=540575 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=540766 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=540945 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=541123 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=541301 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=541486 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=541666 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=541845 pkcs11_private_mode = 00000000
Sun Jan 5 15:00:34 2014 us=542021 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=542200 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=542395 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=542577 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=542755 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=542935 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=543112 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=543291 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=543479 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=543658 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=543836 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=544014 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=544186 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=544372 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=544540 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=544743 pkcs11_cert_private = DISABLED
Sun Jan 5 15:00:34 2014 us=544916 pkcs11_pin_cache_period = -1
Sun Jan 5 15:00:34 2014 us=545086 pkcs11_id = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=545255 pkcs11_id_management = DISABLED
Sun Jan 5 15:00:34 2014 us=545518 server_network = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=545705 server_netmask = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=545896 server_network_ipv6 = ::
Sun Jan 5 15:00:34 2014 us=546077 server_netbits_ipv6 = 0
Sun Jan 5 15:00:34 2014 us=546258 server_bridge_ip = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=546463 server_bridge_netmask = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=546647 server_bridge_pool_start = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=546828 server_bridge_pool_end = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=547008 ifconfig_pool_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=547189 ifconfig_pool_start = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=547389 ifconfig_pool_end = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=547572 ifconfig_pool_netmask = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=547750 ifconfig_pool_persist_filename = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=547927 ifconfig_pool_persist_refresh_freq = 600
Sun Jan 5 15:00:34 2014 us=548106 ifconfig_ipv6_pool_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=548278 ifconfig_ipv6_pool_base = ::
Sun Jan 5 15:00:34 2014 us=548469 ifconfig_ipv6_pool_netbits = 0
Sun Jan 5 15:00:34 2014 us=548637 n_bcast_buf = 256
Sun Jan 5 15:00:34 2014 us=548899 tcp_queue_limit = 64
Sun Jan 5 15:00:34 2014 us=549083 real_hash_size = 256
Sun Jan 5 15:00:34 2014 us=549262 virtual_hash_size = 256
Sun Jan 5 15:00:34 2014 us=549454 client_connect_script = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=549633 learn_address_script = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=549812 client_disconnect_script = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=549991 client_config_dir = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=550169 ccd_exclusive = DISABLED
Sun Jan 5 15:00:34 2014 us=550350 tmp_dir = '/tmp'
Sun Jan 5 15:00:34 2014 us=550531 push_ifconfig_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=550713 push_ifconfig_local = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=550894 push_ifconfig_remote_netmask = 0.0.0.0
Sun Jan 5 15:00:34 2014 us=551072 push_ifconfig_ipv6_defined = DISABLED
Sun Jan 5 15:00:34 2014 us=551252 push_ifconfig_ipv6_local = ::/0
Sun Jan 5 15:00:34 2014 us=551444 push_ifconfig_ipv6_remote = ::
Sun Jan 5 15:00:34 2014 us=551623 enable_c2c = DISABLED
Sun Jan 5 15:00:34 2014 us=551801 duplicate_cn = DISABLED
Sun Jan 5 15:00:34 2014 us=551980 cf_max = 0
Sun Jan 5 15:00:34 2014 us=552158 cf_per = 0
Sun Jan 5 15:00:34 2014 us=552349 max_clients = 1024
Sun Jan 5 15:00:34 2014 us=552524 max_routes_per_client = 256
Sun Jan 5 15:00:34 2014 us=552691 auth_user_pass_verify_script = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=552879 auth_user_pass_verify_script_via_file = DISABLED
Sun Jan 5 15:00:34 2014 us=553075 port_share_host = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=553252 port_share_port = 0
Sun Jan 5 15:00:34 2014 us=553437 client = ENABLED
Sun Jan 5 15:00:34 2014 us=553612 pull = ENABLED
Sun Jan 5 15:00:34 2014 us=553787 auth_user_pass_file = '[UNDEF]'
Sun Jan 5 15:00:34 2014 us=553966 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Sun Jan 5 15:00:34 2014 us=554751 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Jan 5 15:00:34 2014 us=557745 LZO compression initialized
Sun Jan 5 15:00:34 2014 us=557895 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Jan 5 15:00:34 2014 us=559208 Socket Buffers: R=[87380->131072] S=[16384->131072]
Sun Jan 5 15:00:34 2014 us=567940 RESOLVE: Cannot resolve host address: hardynet.cz: Temporary failure in name resolution
Sun Jan 5 15:00:34 2014 us=568136 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Jan 5 15:00:34 2014 us=568442 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Sun Jan 5 15:00:34 2014 us=568619 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Sun Jan 5 15:00:34 2014 us=568814 Local Options hash (VER=V4): '69109d17'
Sun Jan 5 15:00:34 2014 us=568986 Expected Remote Options hash (VER=V4): 'c0103fa8'
Sun Jan 5 15:00:34 2014 us=572459 RESOLVE: Cannot resolve host address: hardynet.cz: Temporary failure in name resolution
Sun Jan 5 15:00:39 2014 us=575756 RESOLVE: Cannot resolve host address: hardynet.cz: Temporary failure in name resolution
Sun Jan 5 15:00:44 2014 us=579063 RESOLVE: Cannot resolve host address: hardynet.cz: Temporary failure in name resolution
Sun Jan 5 15:00:49 2014 us=582290 RESOLVE: Cannot resolve host address: hardynet.cz: Temporary failure in name resolution
Sun Jan 5 15:00:54 2014 us=586864 RESOLVE: Cannot resolve host address: hardynet.cz: Temporary failure in name resolution
some additional info:
[root@cumlik ~]$ openvpn --version
OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Sep 12 2013
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net>
Compile time defines: enable_crypto=yes enable_debug=yes enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_eurephia=yes enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=yes enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_pthread=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_win32_dll=yes enable_x509_alt_username=yes with_crypto_library=openssl with_gnu_ld=yes with_iproute_path=/sbin/ip with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_sysroot=no
[root@cumlik ~]$ cat /etc/openvpn/hardynet.cz.conf |grep -v -e ^# -e ^\; -e ^$
client
pull
dev tun
proto tcp
remote hardynet.cz
resolv-retry infinite
nobind
persist-key
ca /etc/openvpn/cumlik.hardynet.cz/ca.crt
cert /etc/openvpn/cumlik.hardynet.cz/cumlik.crt
key /etc/openvpn/cumlik.hardynet.cz/cumlik.key
comp-lzo
verb 5
[root@cumlik ~]$ cat /etc/redhat-release
Fedora release 19 (Schrödinger’s Cat)
[root@cumlik ~]$ uname -a
Linux cumlik.hardynet.cz 3.9.5-301.fc19.x86_64 #1 SMP Tue Jun 11 19:39:38 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
strace shows that openvpn is sending dns queries to 127.0.0.1 instead of nameserver defined in resolv.conf, tcpdump shows the same:
open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=767, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80bdd56000
read(4, "127.0.0.1 localhost localhost."..., 4096) = 767
read(4, "", 4096) = 0
close(4) = 0
munmap(0x7f80bdd56000, 4096) = 0
socket(PF_INET, SOCK_DGRAM|SOCK_NONBLOCK, IPPROTO_IP) = 4
connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=4, events=POLLOUT}], 1, 0) = 1 ([{fd=4, revents=POLLOUT}])
sendto(4, "m\242\1\0\0\1\0\0\0\0\0\0\10hardynet\2cz\0\0\1\0\1", 29, MSG_NOSIGNAL, NULL, 0) = 29
poll([{fd=4, events=POLLIN}], 1, 5000) = 1 ([{fd=4, revents=POLLERR}])
close(4) = 0
socket(PF_INET, SOCK_DGRAM|SOCK_NONBLOCK, IPPROTO_IP) = 4
connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=4, events=POLLOUT}], 1, 0) = 1 ([{fd=4, revents=POLLOUT}])
sendto(4, "m\242\1\0\0\1\0\0\0\0\0\0\10hardynet\2cz\0\0\1\0\1", 29, MSG_NOSIGNAL, NULL, 0) = 29
poll([{fd=4, events=POLLIN}], 1, 5000) = 1 ([{fd=4, revents=POLLERR}])
close(4) = 0
socket(PF_INET, SOCK_DGRAM|SOCK_NONBLOCK, IPPROTO_IP) = 4
connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=4, events=POLLOUT}], 1, 0) = 1 ([{fd=4, revents=POLLOUT}])
sendto(4, "#.\1\0\0\1\0\0\0\0\0\0\10hardynet\2cz\10hardyne"..., 41, MSG_NOSIGNAL, NULL, 0) = 41
poll([{fd=4, events=POLLIN}], 1, 5000) = 1 ([{fd=4, revents=POLLERR}])
close(4) = 0
socket(PF_INET, SOCK_DGRAM|SOCK_NONBLOCK, IPPROTO_IP) = 4
connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=4, events=POLLOUT}], 1, 0) = 1 ([{fd=4, revents=POLLOUT}])
sendto(4, "#.\1\0\0\1\0\0\0\0\0\0\10hardynet\2cz\10hardyne"..., 41, MSG_NOSIGNAL, NULL, 0) = 41
poll([{fd=4, events=POLLIN}], 1, 5000) = 1 ([{fd=4, revents=POLLERR}])
close(4) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2246, ...}) = 0
write(1, "Sun Jan 5 14:15:27 2014 RESOLVE"..., 113) = 113
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
nanosleep({5, 0}, 0x7fff0903a5c0) = 0
connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=4, events=POLLOUT}], 1, 0) = 1 ([{fd=4, revents=POLLOUT}])
sendto(4, "#.\1\0\0\1\0\0\0\0\0\0\10hardynet\2cz\10hardyne"..., 41, MSG_NOSIGNAL, NULL, 0) = 41
poll([{fd=4, events=POLLIN}], 1, 5000) = 1 ([{fd=4, revents=POLLERR}])
close(4) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2246, ...}) = 0
write(1, "Sun Jan 5 14:15:27 2014 RESOLVE"..., 113) = 113
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
nanosleep({5, 0}, 0x7fff0903a5c0) = 0
when openvpn is started/restarted after network connection is available hostname will be resolved without an issue.
seams like a bug to me.
Any ideas?
Thanks
