First off, I am new here; please be gentle if there are any taboos I break. That said:
I've setup OVPN on a server for a small office, so users can update information while out of town. Everything seems to work fine for most clients (Windows 7,8,10 and Mac OSX). I've been having issues with one system; Linux Mint 17.1 XFCE.
Once I get OVPN installed & configured, everything works fine UNTIL I reboot the system. The next time it comes up, OVPN will not work. It throws out several errors, and either fails or (more likely) seems to be caught in a loop where it continuously resets. I've reinstalled the OS several times, and it's always the same; it works the first time (I can even dis-connect and re-connect multiple times), but after that first power down, it ceases to function. I've poked around online, but can't seem to find this combination of issues (it is always possible I'm just searching incorrectly, of course). Any help would be appreciated; client config & terminal output are below.
Client Configuration
client
dev tun
proto tcp
remote "[XXXXX]" 1200
resolv-retry 5
nobind
user nobody
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/Client.crt
key /etc/openvpn/Client.key
ns-cert-type server
comp-lzo
verb 3
Terminal Output
OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
WARNING: file '/etc/openvpn/Client.key' is group or others accessible
Socket Buffers: R=[87380->131072] S=[16384->131072]
NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Attempting to establish TCP connection with [AF_INET]xxx.xxx.xxx.xxx:1200 [nonblock]
TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:1200
TCPv4_CLIENT link local: [undef]
TCPv4_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:1200
TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:1200, sid=4cc4f8af 54236cbe
VERIFY OK: depth=1, C=US, ST=CA, L=City, O=Office, OU=Services, CN=Servername, emailAddress=my@email.address
VERIFY OK: nsCertType=SERVER
VERIFY OK: depth=0, C=US, ST=CA, O=Office, OU=Services, CN=server, emailAddress=my@email.address
Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
[server] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1200
SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.14 10.8.0.13'
OPTIONS IMPORT: timers and/or timeouts modified
OPTIONS IMPORT: --ifconfig/up options modified
OPTIONS IMPORT: route options modified
ROUTE_GATEWAY 192.168.0.1/255.255.255.0 IFACE=wlan0 HWADDR=00:25:4b:8e:36:5e
TUN/TAP device tun1 opened
TUN/TAP TX queue length set to 100
do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
/sbin/ip link set dev tun1 up mtu 1500
/sbin/ip addr add dev tun1 local 10.8.0.14 peer 10.8.0.13
/sbin/ip route add 10.8.0.1/32 via 10.8.0.13
RTNETLINK answers: File exists
ERROR: Linux route add command failed: external program exited with error status: 2
UID set to nobody
Initialization Sequence Completed
Connection reset, restarting [-1]
SIGUSR1[soft,connection-reset] received, process restarting
Restart pause, 5 second(s)
From that point the output repeats continuously.
