oernii
Due to a limitation on openvpn 2.3 client my initialization of routes takes more that 120 second which the server sends via "keepalive 5 120". I tried to override this value in my client config with "keepalive 5 300" and also with "ping-restart 300", but neither works. The client disconnects after 120 seconds, while "ip route add" are still runnig. I am left with no way of connecting.
How can as a client override this timeout value? Can I?
PS: my clients use openct/opesc pkcs11 usb token and with "execve" for each "ip route add" the token is accessed and that takes about 10-15 seconds. My server sends 16 routes 🙁
PS2: with openvpn2.2 it was possible to set "script-security 2 system", which didn't invoke the execve syscall and was much faster at adding routes (0.2 secs)
