OpenVPN Connection successfull - but no ping

MarcCDS

Heyho,

we have a problem 🙂. We have a Windows Server 2012r2 which is the OpenVPN Server and we have a Windows 7 OpenVPN-Client. One setup works perfect at a customers firm. Then we decided to setup the same in our own firm, but the connection works perfect but we can not ping and access any shares.

May you can help us. I´m gonna tell you want we done so far.

I installed everything with help of 2 Tutorials I found with google 🙂. Both tutorials are in german , sorry for that.
http://www.tecchannel.de/netzwerk/lan/2027706/workshop_openvpn_auf_einem_windows_server_einrichten/index2.html and http://www.pcwelt.de/ratgeber/OpenVPN-mit-Windows-4984324.html

I give you some Log and Config Files.

Client Log and Config File:

I shortend the config File, cause I used the example file.

local 192.168.14.80
port 1194
proto udp
dev tun
ca ca.crt
cert OPenVPNServer.crt
key OPenVPNServer.key  # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.14.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

Thu Jul 17 12:29:31 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Thu Jul 17 12:29:31 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Thu Jul 17 12:29:32 2014 Diffie-Hellman initialized with 1024 bit key
Thu Jul 17 12:29:32 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Jul 17 12:29:32 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jul 17 12:29:32 2014 open_tun, tt->ipv6=0
Thu Jul 17 12:29:32 2014 TAP-WIN32 device [LAN-Verbindung] opened: \\.\Global\{C274E757-ACC5-473B-801A-81123DDD0CDE}.tap
Thu Jul 17 12:29:32 2014 TAP-Windows Driver Version 9.9 
Thu Jul 17 12:29:32 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.1/255.255.255.252 on interface {C274E757-ACC5-473B-801A-81123DDD0CDE} [DHCP-serv: 10.8.0.2, lease-time: 31536000]
Thu Jul 17 12:29:32 2014 Sleeping for 10 seconds...
Thu Jul 17 12:29:42 2014 Successful ARP Flush on interface [23] {C274E757-ACC5-473B-801A-81123DDD0CDE}
Thu Jul 17 12:29:42 2014 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.2
Thu Jul 17 12:29:42 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Jul 17 12:29:42 2014 Route addition via IPAPI succeeded [adaptive]
Thu Jul 17 12:29:42 2014 UDPv4 link local (bound): [AF_INET]192.168.14.80:1194
Thu Jul 17 12:29:42 2014 UDPv4 link remote: [undef]
Thu Jul 17 12:29:42 2014 MULTI: multi_init called, r=256 v=256
Thu Jul 17 12:29:42 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Thu Jul 17 12:29:42 2014 ifconfig_pool_read(), in='CDS-Chris,10.8.0.4', TODO: IPv6
Thu Jul 17 12:29:42 2014 succeeded -> ifconfig_pool_set()
Thu Jul 17 12:29:42 2014 IFCONFIG POOL LIST
Thu Jul 17 12:29:42 2014 CDS-Chris,10.8.0.4
Thu Jul 17 12:29:42 2014 Initialization Sequence Completed

Logfile and Client Config

client
dev tun
proto udp
remote "static IP Fritzbox" 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert CDS-Chris.crt
key CDS-Chris.key
ns-cert-type server
comp-lzo
verb 3

Thu Jul 17 12:42:04 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Thu Jul 17 12:42:04 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Thu Jul 17 12:42:04 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Jul 17 12:42:04 2014 Need hold release from management interface, waiting...
Thu Jul 17 12:42:05 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Jul 17 12:42:05 2014 MANAGEMENT: CMD 'state on'
Thu Jul 17 12:42:05 2014 MANAGEMENT: CMD 'log all on'
Thu Jul 17 12:42:05 2014 MANAGEMENT: CMD 'hold off'
Thu Jul 17 12:42:05 2014 MANAGEMENT: CMD 'hold release'
Thu Jul 17 12:42:05 2014 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Jul 17 12:42:05 2014 UDPv4 link local: [undef]
Thu Jul 17 12:42:05 2014 UDPv4 link remote: [AF_INET]130.180.25.58:1194
Thu Jul 17 12:42:05 2014 MANAGEMENT: >STATE:1405593725,WAIT,,,
Thu Jul 17 12:42:07 2014 MANAGEMENT: >STATE:1405593727,AUTH,,,
Thu Jul 17 12:42:07 2014 TLS: Initial packet from [AF_INET]130.180.25.58:1194, sid=745a7403 de020849
Thu Jul 17 12:42:08 2014 VERIFY OK: depth=1, C=DE, ST=NRW, L=Essen, O=CDS-Systems, OU=IT, CN=CDS-OpenVPN, name=OPenVPNServer, emailAddress=hotline@cds-systems.de
Thu Jul 17 12:42:08 2014 VERIFY OK: nsCertType=SERVER
Thu Jul 17 12:42:08 2014 VERIFY OK: depth=0, C=DE, ST=NRW, L=Essen, O=CDS-Systems, OU=IT, CN=CDS-OpenVPN, name=OPenVPNServer, emailAddress=hotline@cds-systems.de
Thu Jul 17 12:42:09 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jul 17 12:42:09 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 17 12:42:09 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jul 17 12:42:09 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 17 12:42:09 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jul 17 12:42:09 2014 [CDS-OpenVPN] Peer Connection Initiated with [AF_INET]130.180.25.58:1194
Thu Jul 17 12:42:10 2014 MANAGEMENT: >STATE:1405593730,GET_CONFIG,,,
Thu Jul 17 12:42:11 2014 SENT CONTROL [CDS-OpenVPN]: 'PUSH_REQUEST' (status=1)
Thu Jul 17 12:42:12 2014 PUSH: Received control message: 'PUSH_REPLY,route 192.168.14.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Thu Jul 17 12:42:12 2014 OPTIONS IMPORT: timers and/or timeouts modified
Thu Jul 17 12:42:12 2014 OPTIONS IMPORT: --ifconfig/up options modified
Thu Jul 17 12:42:12 2014 OPTIONS IMPORT: route options modified
Thu Jul 17 12:42:12 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Jul 17 12:42:12 2014 MANAGEMENT: >STATE:1405593732,ASSIGN_IP,,10.8.0.6,
Thu Jul 17 12:42:12 2014 open_tun, tt->ipv6=0
Thu Jul 17 12:42:12 2014 TAP-WIN32 device [LAN-Verbindung] opened: \\.\Global\{D4C0E323-2F69-4B17-AB00-DF383A905B08}.tap
Thu Jul 17 12:42:12 2014 TAP-Windows Driver Version 9.9 
Thu Jul 17 12:42:12 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {D4C0E323-2F69-4B17-AB00-DF383A905B08} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Jul 17 12:42:12 2014 Successful ARP Flush on interface [23] {D4C0E323-2F69-4B17-AB00-DF383A905B08}
Thu Jul 17 12:42:17 2014 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Thu Jul 17 12:42:17 2014 MANAGEMENT: >STATE:1405593737,ADD_ROUTES,,,
Thu Jul 17 12:42:17 2014 C:\Windows\system32\route.exe ADD 192.168.14.0 MASK 255.255.255.0 10.8.0.5
Thu Jul 17 12:42:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Jul 17 12:42:17 2014 Route addition via IPAPI succeeded [adaptive]
Thu Jul 17 12:42:17 2014 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Thu Jul 17 12:42:17 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Thu Jul 17 12:42:17 2014 Route addition via IPAPI succeeded [adaptive]
Thu Jul 17 12:42:17 2014 Initialization Sequence Completed
Thu Jul 17 12:42:17 2014 MANAGEMENT: >STATE:1405593737,CONNECTED,SUCCESS,10.8.0.6,130.180.25.58

I think I make a mistake with my "push "route 192.168.14.0 255.255.255.0"" but I dont have so much knowledge about that.

If you need anything else let me know. I hope I can provide the necessary informations.

I did made an expception for Port 1194 in the firewall. But this is obvious cause i can connect 🙂.

Greetings Marc

maikcat

did you configured firewall on win server to allow traffic from vpn interface?

did you enabled ip forwarding on win server?

Michael.

MarcCDS

Hey,

Ip-Forwarding:

I did make the change in the registry.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters -> IPEnableRouter (REG_DWORD) set to 1

The Firewall is temporarily down to test things.

I chenged the Ip-forwarding but still cant ping or access anything.

🙁

Serverlog when a client is connected

Thu Jul 17 14:28:52 2014 109.41.4.203:51537 TLS: Initial packet from [AF_INET]109.41.4.203:51537, sid=21efa8c7 dc6879e4
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 VERIFY OK: depth=1, C=DE, ST=NRW, L=Essen, O=CDS-Systems, OU=IT, CN=CDS-OpenVPN, name=OPenVPNServer, emailAddress=hotline@cds-systems.de
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 VERIFY OK: depth=0, C=DE, ST=NRW, L=Essen, O=CDS-Systems, OU=IT, CN=CDS-Chris, name=CDS-Chris, emailAddress=hotline@cds-systems.de
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jul 17 14:28:53 2014 109.41.4.203:51537 [CDS-Chris] Peer Connection Initiated with [AF_INET]109.41.4.203:51537
Thu Jul 17 14:28:53 2014 CDS-Chris/109.41.4.203:51537 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Thu Jul 17 14:28:53 2014 CDS-Chris/109.41.4.203:51537 MULTI: Learn: 10.8.0.6 -> CDS-Chris/109.41.4.203:51537
Thu Jul 17 14:28:53 2014 CDS-Chris/109.41.4.203:51537 MULTI: primary virtual IP for CDS-Chris/109.41.4.203:51537: 10.8.0.6
Thu Jul 17 14:28:56 2014 CDS-Chris/109.41.4.203:51537 PUSH: Received control message: 'PUSH_REQUEST'
Thu Jul 17 14:28:56 2014 CDS-Chris/109.41.4.203:51537 send_push_reply(): safe_cap=940
Thu Jul 17 14:28:56 2014 CDS-Chris/109.41.4.203:51537 SENT CONTROL [CDS-Chris]: 'PUSH_REPLY,route 192.168.14.0 255.255.255.0,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5' (status=1)
Thu Jul 17 14:37:32 2014 CDS-Chris/109.41.4.203:51537 [CDS-Chris] Inactivity timeout (--ping-restart), restarting
Thu Jul 17 14:37:32 2014 CDS-Chris/109.41.4.203:51537 SIGUSR1[soft,ping-restart] received, client-instance restarting

maikcat

I did make the change in the registry.

you also rebooted the server...right?

can you post output of the command

netstat -nr

on your client AFTER vpn is up?

can you ping 10.8.0.1 from your client?

Michael.

MarcCDS

Yes, i rebootet the server after the change.

I can ping the 10.8.0.1.

Output of netstat -nr

===========================================================================
Schnittstellenliste
 23...00 ff d4 c0 e3 23 ......TAP-Windows Adapter V9
 16...be 85 56 2d de 39 ......Virtueller Microsoft-Adapter fr direktes WiFi
 15...bc 85 56 2d de 39 ......Broadcom 802.11abgn Wireless SDIO Adapter
 14...bc 85 56 2d de 3a ......Bluetooth-Ger„t (PAN)
 12...98 9c 98 57 5d 54 ......HUAWEI MOBILE
  1...........................Software Loopback Interface 1
 18...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 20...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
 21...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #3
 24...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #4
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
          0.0.0.0          0.0.0.0     109.41.4.204     109.41.4.203    286
         10.8.0.1  255.255.255.255         10.8.0.5         10.8.0.6     30
         10.8.0.4  255.255.255.252   Auf Verbindung          10.8.0.6    286
         10.8.0.6  255.255.255.255   Auf Verbindung          10.8.0.6    286
         10.8.0.7  255.255.255.255   Auf Verbindung          10.8.0.6    286
       109.41.4.0    255.255.255.0   Auf Verbindung      109.41.4.203    286
     109.41.4.203  255.255.255.255   Auf Verbindung      109.41.4.203    286
     109.41.4.255  255.255.255.255   Auf Verbindung      109.41.4.203    286
        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306
        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306
  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
     192.168.14.0    255.255.255.0         10.8.0.5         10.8.0.6     30
        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306
        224.0.0.0        240.0.0.0   Auf Verbindung          10.8.0.6    286
        224.0.0.0        240.0.0.0   Auf Verbindung      109.41.4.203    286
  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
  255.255.255.255  255.255.255.255   Auf Verbindung          10.8.0.6    286
  255.255.255.255  255.255.255.255   Auf Verbindung      109.41.4.203    286
===========================================================================
St„ndige Routen:
  Netzwerkadresse          Netzmaske  Gatewayadresse  Metrik
          0.0.0.0          0.0.0.0     192.168.12.1  Standard 
===========================================================================

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel             Gateway
  1    306 ::1/128                  Auf Verbindung
 20   1030 2002::/16                Auf Verbindung
 20    286 2002:6d29:4cb::6d29:4cb/128
                                    Auf Verbindung
 23    286 fe80::/64                Auf Verbindung
 12    286 fe80::/64                Auf Verbindung
 12    286 fe80::1dd3:31bb:6687:7eef/128
                                    Auf Verbindung
 23    286 fe80::f5b2:936b:9852:42a4/128
                                    Auf Verbindung
  1    306 ff00::/8                 Auf Verbindung
 23    286 ff00::/8                 Auf Verbindung
 12    286 ff00::/8                 Auf Verbindung
===========================================================================
St„ndige Routen:
  Keine

Thx for help your!!! I dont have so much knowledge about routes and so. What I dont understand is, that on one system everything works fine. And on this system it didnt. 🙁

Greetings Marc

maikcat

can you ping your openvpn servers lan ip from your client?

routing table on your client is ok,
if routing is enabled on server,and firewall on server does not block any traffic it should respond...

Michael.

MarcCDS

I cant ping the 192.168.14.80. I tried that several times, everytime i change something. Thats my first indicator that something is wrong.

Yeah firewall is off and I made already an exception for Port 1194 udp for outgoing and incoming traffic. But to be safe i turned the firewall completly off (public private and domain).

So is there anything I can look into or change. Any clue?

Greetings Marc

P.S.: The only difference between those two setups is how the OpenVPN Server recognize the TAP-Windows networkadapter. On the Server of the customer it is recognized as a domain adapter. In my own setup it is recognized as a unidentified public network adapter.

MarcCDS

So i tried something else today.

The Client connect directly to my VPN Server. So the OpenVPN Server and the CLient are in the same network 192.168.14.80 (Server) and 192.168.14.136 (Client).

Wed Jul 30 12:03:56 2014 OpenVPN 2.3.4 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jun  5 2014
Wed Jul 30 12:03:56 2014 library versions: OpenSSL 1.0.1h 5 Jun 2014, LZO 2.05
Enter Management Password:
Wed Jul 30 12:03:56 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25343
Wed Jul 30 12:03:56 2014 Need hold release from management interface, waiting...
Wed Jul 30 12:03:57 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25343
Wed Jul 30 12:03:57 2014 MANAGEMENT: CMD 'state on'
Wed Jul 30 12:03:57 2014 MANAGEMENT: CMD 'log all on'
Wed Jul 30 12:03:57 2014 MANAGEMENT: CMD 'hold off'
Wed Jul 30 12:03:57 2014 MANAGEMENT: CMD 'hold release'
Wed Jul 30 12:03:57 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 30 12:03:57 2014 UDPv4 link local: [undef]
Wed Jul 30 12:03:57 2014 UDPv4 link remote: [AF_INET]192.168.14.80:1194
Wed Jul 30 12:03:57 2014 MANAGEMENT: >STATE:1406714637,WAIT,,,
Wed Jul 30 12:03:57 2014 MANAGEMENT: >STATE:1406714637,AUTH,,,
Wed Jul 30 12:03:57 2014 TLS: Initial packet from [AF_INET]192.168.14.80:1194, sid=55d9d81e e2bf8e91
Wed Jul 30 12:03:57 2014 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=DE, ST=NRW, L=Essen, O=CDS-Systems, OU=IT, CN=CDS-OpenVPN, name=OPenVPNServer, emailAddress=hotline@cds-systems.de
Wed Jul 30 12:03:57 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Jul 30 12:03:57 2014 TLS Error: TLS object -> incoming plaintext read error
Wed Jul 30 12:03:57 2014 TLS Error: TLS handshake failed
Wed Jul 30 12:03:57 2014 SIGUSR1[soft,tls-error] received, process restarting
Wed Jul 30 12:03:57 2014 MANAGEMENT: >STATE:1406714637,RECONNECTING,tls-error,,
Wed Jul 30 12:03:57 2014 Restart pause, 2 second(s)
Wed Jul 30 12:03:59 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 30 12:03:59 2014 UDPv4 link local: [undef]
Wed Jul 30 12:03:59 2014 UDPv4 link remote: [AF_INET]192.168.14.80:1194
Wed Jul 30 12:03:59 2014 MANAGEMENT: >STATE:1406714639,WAIT,,,
Wed Jul 30 12:03:59 2014 MANAGEMENT: >STATE:1406714639,AUTH,,,
Wed Jul 30 12:03:59 2014 TLS: Initial packet from [AF_INET]192.168.14.80:1194, sid=469fe79c 994986c5
Wed Jul 30 12:03:59 2014 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=DE, ST=NRW, L=Essen, O=CDS-Systems, OU=IT, CN=CDS-OpenVPN, name=OPenVPNServer, emailAddress=hotline@cds-systems.de
Wed Jul 30 12:03:59 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Jul 30 12:03:59 2014 TLS Error: TLS object -> incoming plaintext read error
Wed Jul 30 12:03:59 2014 TLS Error: TLS handshake failed
Wed Jul 30 12:03:59 2014 SIGUSR1[soft,tls-error] received, process restarting
Wed Jul 30 12:03:59 2014 MANAGEMENT: >STATE:1406714639,RECONNECTING,tls-error,,
Wed Jul 30 12:03:59 2014 Restart pause, 2 second(s)
Wed Jul 30 12:04:01 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jul 30 12:04:01 2014 UDPv4 link local: [undef]
Wed Jul 30 12:04:01 2014 UDPv4 link remote: [AF_INET]192.168.14.80:1194
Wed Jul 30 12:04:01 2014 MANAGEMENT: >STATE:1406714641,WAIT,,,
Wed Jul 30 12:04:01 2014 MANAGEMENT: >STATE:1406714641,AUTH,,,
Wed Jul 30 12:04:01 2014 TLS: Initial packet from [AF_INET]192.168.14.80:1194, sid=49b9fb6e 020dec66
Wed Jul 30 12:04:01 2014 VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: C=DE, ST=NRW, L=Essen, O=CDS-Systems, OU=IT, CN=CDS-OpenVPN, name=OPenVPNServer, emailAddress=hotline@cds-systems.de
Wed Jul 30 12:04:01 2014 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Wed Jul 30 12:04:01 2014 TLS Error: TLS object -> incoming plaintext read error
Wed Jul 30 12:04:01 2014 TLS Error: TLS handshake failed
Wed Jul 30 12:04:01 2014 SIGUSR1[soft,tls-error] received, process restarting

So when I change the Server Adress from 192.168.14.80 to our router IP I didnt get these messages.

Any idea?

Greetings Marc