Here is the server conf file:
local 192.168.2.253
port 1194
proto udp
dev tun1
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
server 192.168.44.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.2.0 255.255.255.0"
push "route 172.16.0.0 255.255.255.224"
route 192.168.10.0 255.255.255.0
client-to-client
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /etc/openvpn/openvpn-status.log
log /etc/openvpn/vpn.log
verb 3
script-security 2
and the log
Wed Apr 29 08:56:40 2015 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014
Wed Apr 29 08:56:40 2015 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Apr 29 08:56:40 2015 Diffie-Hellman initialized with 2048 bit key
Wed Apr 29 08:56:40 2015 Control Channel Authentication: using '/etc/openvpn/easy-rsa/keys/ta.key' as a OpenVPN static key file
Wed Apr 29 08:56:40 2015 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 08:56:40 2015 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 08:56:40 2015 TLS-Auth MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Apr 29 08:56:40 2015 Socket Buffers: R=[229376->131072] S=[229376->131072]
Wed Apr 29 08:56:40 2015 ROUTE default_gateway=192.168.2.254
Wed Apr 29 08:56:41 2015 TUN/TAP device tun1 opened
Wed Apr 29 08:56:41 2015 TUN/TAP TX queue length set to 100
Wed Apr 29 08:56:41 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Apr 29 08:56:41 2015 /sbin/ifconfig tun1 192.168.44.1 pointopoint 192.168.44.2 mtu 1500
Wed Apr 29 08:56:41 2015 /sbin/route add -net 192.168.10.0 netmask 255.255.255.0 gw 192.168.44.2
Wed Apr 29 08:56:41 2015 /sbin/route add -net 192.168.44.0 netmask 255.255.255.0 gw 192.168.44.2
Wed Apr 29 08:56:41 2015 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 29 08:56:41 2015 GID set to nogroup
Wed Apr 29 08:56:41 2015 UID set to nobody
Wed Apr 29 08:56:41 2015 UDPv4 link local (bound): [AF_INET]192.168.2.253:1194
Wed Apr 29 08:56:41 2015 UDPv4 link remote: [undef]
Wed Apr 29 08:56:41 2015 MULTI: multi_init called, r=256 v=256
Wed Apr 29 08:56:41 2015 IFCONFIG POOL: base=192.168.44.4 size=62, ipv6=0
Wed Apr 29 08:56:41 2015 ifconfig_pool_read(), in='vlinux,192.168.44.4', TODO: IPv6
Wed Apr 29 08:56:41 2015 succeeded -> ifconfig_pool_set()
Wed Apr 29 08:56:41 2015 ifconfig_pool_read(), in='tablet,192.168.44.8', TODO: IPv6
Wed Apr 29 08:56:41 2015 succeeded -> ifconfig_pool_set()
Wed Apr 29 08:56:41 2015 ifconfig_pool_read(), in='mn-nb003,192.168.44.12', TODO: IPv6
Wed Apr 29 08:56:41 2015 succeeded -> ifconfig_pool_set()
Wed Apr 29 08:56:41 2015 IFCONFIG POOL LIST
Wed Apr 29 08:56:41 2015 vlinux,192.168.44.4
Wed Apr 29 08:56:41 2015 tablet,192.168.44.8
Wed Apr 29 08:56:41 2015 mn-nb003,192.168.44.12
Wed Apr 29 08:56:41 2015 Initialization Sequence Completed
Wed Apr 29 08:57:49 2015 MULTI: multi_create_instance called
Wed Apr 29 08:57:49 2015 80.95.xx.xx:41485 Re-using SSL/TLS context
Wed Apr 29 08:57:49 2015 80.95.xx.xx:41485 LZO compression initialized
Wed Apr 29 08:57:49 2015 80.95.xx.xx:41485 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Apr 29 08:57:49 2015 80.95.xx.xx:41485 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 29 08:57:49 2015 80.95.xx.xx:41485 Local Options hash (VER=V4): '162b04de'
Wed Apr 29 08:57:49 2015 80.95.xx.xx:41485 Expected Remote Options hash (VER=V4): '9e7066d2'
Wed Apr 29 08:57:49 2015 80.95.xx.xx:41485 TLS: Initial packet from [AF_INET]80.95.xx.xx:41485, sid=4f1738f0 c277e0e3
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 VERIFY OK: depth=1, /C=CZ/ST=VC/L=NoveMestoNadMetuji/O=DebianHome/OU=changeme/CN=changeme/name=changeme/emailAddress=my.email@mail.com
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 VERIFY OK: depth=0, /C=CZ/ST=VC/L=NoveMestoNadMetuji/O=DebianHome/OU=changeme/CN=vlinux/name=changeme/emailAddress=my.email@mail.com
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Apr 29 08:57:50 2015 80.95.xx.xx:41485 [vlinux] Peer Connection Initiated with [AF_INET]80.95.xx.xx:41485
Wed Apr 29 08:57:50 2015 vlinux/80.95.xx.xx:41485 MULTI_sva: pool returned IPv4=192.168.44.6, IPv6=1::1a00:0:0:0
Wed Apr 29 08:57:50 2015 vlinux/80.95.xx.xx:41485 MULTI: Learn: 192.168.44.6 -> vlinux/80.95.xx.xx:41485
Wed Apr 29 08:57:50 2015 vlinux/80.95.xx.xx:41485 MULTI: primary virtual IP for vlinux/80.95.xx.xx:41485: 192.168.44.6
Wed Apr 29 08:57:53 2015 vlinux/80.95.xx.xx:41485 PUSH: Received control message: 'PUSH_REQUEST'
Wed Apr 29 08:57:53 2015 vlinux/80.95.xx.xx:41485 send_push_reply(): safe_cap=960
Wed Apr 29 08:57:53 2015 vlinux/80.95.xx.xx:41485 SENT CONTROL [vlinux]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 172.16.0.0 255.255.255.224,route 192.168.44.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.44.6 192.168.44.5' (status=1)
Wed Apr 29 09:27:08 2015 vlinux/80.95.xx.xx:41485 [vlinux] Inactivity timeout (--ping-restart), restarting
Wed Apr 29 09:27:08 2015 vlinux/80.95.xx.xx:41485 SIGUSR1[soft,ping-restart] received, client-instance restarting
Wed Apr 29 09:30:51 2015 MULTI: multi_create_instance called
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Re-using SSL/TLS context
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 LZO compression initialized
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Local Options hash (VER=V4): '162b04de'
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Expected Remote Options hash (VER=V4): '9e7066d2'
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 TLS: Initial packet from [AF_INET]80.95.xx.xx:57461, sid=2635cc6a efc1521e
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 VERIFY OK: depth=1, /C=CZ/ST=VC/L=NoveMestoNadMetuji/O=DebianHome/OU=changeme/CN=changeme/name=changeme/emailAddress=my.email@mail.com
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 VERIFY OK: depth=0, /C=CZ/ST=VC/L=NoveMestoNadMetuji/O=DebianHome/OU=changeme/CN=vlinux/name=changeme/emailAddress=my.email@mail.com
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Apr 29 09:30:51 2015 80.95.xx.xx:57461 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 09:30:52 2015 80.95.xx.xx:57461 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Wed Apr 29 09:30:52 2015 80.95.xx.xx:57461 [vlinux] Peer Connection Initiated with [AF_INET]80.95.xx.xx:57461
Wed Apr 29 09:30:52 2015 vlinux/80.95.xx.xx:57461 MULTI_sva: pool returned IPv4=192.168.44.6, IPv6=1::1a00:0:0:0
Wed Apr 29 09:30:52 2015 vlinux/80.95.xx.xx:57461 MULTI: Learn: 192.168.44.6 -> vlinux/80.95.xx.xx:57461
Wed Apr 29 09:30:52 2015 vlinux/80.95.xx.xx:57461 MULTI: primary virtual IP for vlinux/80.95.xx.xx:57461: 192.168.44.6
Wed Apr 29 09:30:54 2015 vlinux/80.95.xx.xx:57461 PUSH: Received control message: 'PUSH_REQUEST'
Wed Apr 29 09:30:54 2015 vlinux/80.95.xx.xx:57461 send_push_reply(): safe_cap=960
Wed Apr 29 09:30:54 2015 vlinux/80.95.xx.xx:57461 SENT CONTROL [vlinux]: 'PUSH_REPLY,route 192.168.2.0 255.255.255.0,route 172.16.0.0 255.255.255.224,route 192.168.44.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 192.168.44.6 192.168.44.5' (status=1)
Wed Apr 29 10:30:52 2015 vlinux/80.95.xx.xx:57461 VERIFY OK: depth=1, /C=CZ/ST=VC/L=NoveMestoNadMetuji/O=DebianHome/OU=changeme/CN=changeme/name=changeme/emailAddress=my.email@mail.com
Wed Apr 29 10:30:52 2015 vlinux/80.95.xx.xx:57461 VERIFY OK: depth=0, /C=CZ/ST=VC/L=NoveMestoNadMetuji/O=DebianHome/OU=changeme/CN=vlinux/name=changeme/emailAddress=my.email@mail.com
Wed Apr 29 10:30:52 2015 vlinux/80.95.xx.xx:57461 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Apr 29 10:30:52 2015 vlinux/80.95.xx.xx:57461 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 10:30:52 2015 vlinux/80.95.xx.xx:57461 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Apr 29 10:30:52 2015 vlinux/80.95.xx.xx:57461 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Apr 29 10:30:52 2015 vlinux/80.95.xx.xx:57461 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Cleint conf:
client
dev tun0
proto udp
remote 90.178.x.x 1194
#resolve-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
<ca>
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIJAKU/ecj9LUJjMA0GCSqGSIb3DQEBBQUAMIGsMQswCQYD
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIBAjANBgkqhkiG9w0BAQUFADCBrDELMAkGA1UEBhMCQ1ox
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC80lPVfA/+clrr
-----END PRIVATE KEY-----
</key>
tls-auth /etc/openvpn/ta.key 1
cipher AES-256-CBC
comp-lzo
verb 3
script-security 3
Firewall is currently disabled on both site
