Strangely enough, I seem to be having the exact same problem. Although, my OpenVPN server is running on FreeBSD and not Linux. Every client config/key can connect just fine via Linux, FreeBSD, Mac OSX, Linux, etc... Just not my phone. There are no errors in the logs and everything seems to connect perfectly. There is just zero traffic once it's connected for some reason.
Versions:
Server: OpenVPN 2.3.6 on FreeBSD 10.1
Client: OpenVPN Connect 1.1.16 (build 64) w/ OpenVPN core 3.0.3 on Android 4.4.2
Server Config:
local 192.168.1.22
daemon OpenVPN
proto udp
port 3500
dev tun0
keepalive 10 120
server 10.10.9.0 255.255.255.0
comp-lzo yes
ca /usr/local/etc/openvpn/keys/ca.crt
dh /usr/local/etc/openvpn/keys/dh1024.pem
cert /usr/local/etc/openvpn/keys/vpn.domain.tld.crt
key /usr/local/etc/openvpn/keys/vpn.domain.tld.key
tls-auth /usr/local/etc/openvpn/keys/ta.key 0
persist-key
persist-tun
duplicate-cn
crl-verify /usr/local/etc/openvpn/keys/crl.pem
client-config-dir /usr/local/etc/openvpn/ccd
ifconfig-pool-persist /usr/local/etc/openvpn/ccd/ipp.txt
client-to-client
log /var/log/openvpn/openvpn.log
status-version 2
status /var/log/openvpn/status.log
;reneg-sec 9999999999
verb 3
mute 20
management localhost 7505
user nobody
group nobody
push "route 192.168.1.0 255.255.255.0"
Client Config:
client
dev tun
proto udp
remote vpn.domain.tld 3500
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
tls-auth ta.key 1
ns-cert-type server
;register-dns
comp-lzo
verb 3
mute 10
Server-side log when connecting:
Wed Apr 22 18:03:56 2015 XX.XX.XX.XX:45163 TLS: Initial packet from [AF_INET]XX.XX.XX.XX:45163, sid=79ec541f 5effc52f
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 CRL CHECK OK: C=US, ST=STATE, L=City, O=domain.tldanization, OU=Security Staff, CN=vpn.domain.tld, name=VPN, emailAddress=admin@domain.tld
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 VERIFY OK: depth=1, C=US, ST=STATE, L=City, O=domain.tldanization, OU=Security Staff, CN=vpn.domain.tld, name=VPN, emailAddress=admin@domain.tld
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 CRL CHECK OK: C=US, ST=STATE, L=City, O=domain.tldanization, OU=domain.tld, CN=client, name=client, emailAddress=user@domain.tld
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 VERIFY OK: depth=0, C=US, ST=STATE, L=City, O=domain.tldanization, OU=domain.tld, CN=client, name=client, emailAddress=user@domain.tld
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Apr 22 18:03:57 2015 XX.XX.XX.XX:45163 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 22 18:03:58 2015 XX.XX.XX.XX:45163 STATEntrol Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Apr 22 18:03:58 2015 XX.XX.XX.XX:45163 [client] Peer STATEnnection Initiated with [AF_INET]XX.XX.XX.XX:45163
Wed Apr 22 18:03:58 2015 client/XX.XX.XX.XX:45163 OPTIONS IMPORT: reading client specific options from: /usr/local/etc/openvpn/ccd/client
Wed Apr 22 18:03:58 2015 client/XX.XX.XX.XX:45163 MULTI: Learn: 10.10.9.5 -> client/XX.XX.XX.XX:45163
Wed Apr 22 18:03:58 2015 client/XX.XX.XX.XX:45163 MULTI: primary virtual IP for client/XX.XX.XX.XX:45163: 10.10.9.5
Wed Apr 22 18:03:58 2015 client/XX.XX.XX.XX:45163 PUSH: Received STATEntrol message: 'PUSH_REQUEST'
Wed Apr 22 18:03:58 2015 client/XX.XX.XX.XX:45163 send_push_reply(): safe_cap=940
Wed Apr 22 18:03:58 2015 client/XX.XX.XX.XX:45163 SENT STATENTROL [client]: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,route 10.10.9.0 255.255.255.0,topology net30,ping 10,ping-restart 120,redirect-gateway def1,dhcp-option DNS 192.168.1.1,ifSTATEnfig 10.10.9.5 10.10.9.6' (status=1)
And client log from phone:
Trying to get this now... I'll update momentarily.
Anyone have any ideas as to what the issue might be?
Thanks in advance!
