Hello,
My setup:
Home - Openvpn server in bridge mode TAP
Remote Location - Openvpn in client bridge mode TAP
At home I have a router (192.168.2.1) with DHCP pool (192.168.2.2 - 192.168.2.79).
At the remote place I have a router (192.168.2.80) with DHCP pool (192.168.2.81 - 192.168.2.159).
At home I have an Intel Nuc running Ubuntu 16.04 with Openvpn Server 2.4.4 installed and with the address 192.168.2.27
At the remote place I have an Intel Nuc running Ubuntu 16.04 with Openvpn Client 2.4.4. installed and with the address 192.168.2.81
With this configuration I can successfully merge the two networks without redirecting the internet. It is working perfectly.
Both server and client have a script that autostart at boot. This script builds a bridge (br0) with the nucs ethernet port (eno1) and openvpn adapter (tap0)
Note that UFW firewall and Network Manager are disabled on both server and client pc.
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
/etc/openvpn/bridge-start
exit 0
#!/bin/bash
#Define physical ethernet interface to be bridged
#with TAP interface above.
eth=“eno1”
eth_ip=“192.168.2.27”
eth_netmask=“255.255.255.0”
eth_broadcast=“192.168.2.255”
eth_gateway=“192.168.2.1”
eth_mac=“94:c6:91:10:5f:17”
#Define Bidge Interface
br=“br0”
#Define TAP interfaces to be bridged together
tap=“tap0”
#Create the TAP adapter
openvpn --mktun --dev tap0
#Create the bridge and add interfaces
brctl addbr br0
brctl addif br0 eno1
brctl addif br0 tap0
#Configure the bridge
ifconfig tap0 0.0.0.0 promisc up
ifconfig eno1 0.0.0.0 promisc up
ifconfig br0 192.168.2.27 netmask 255.255.255.0 broadcast 192.168.2.255
ip link set br0 address 94:c6:91:10:5f:17
route add default gw 192.168.2.1 br0
tls-server
proto udp4
port 1190
dev tap0
server-bridge
remote-cert-tls client
tls-crypt /etc/openvpn/easy-rsa/keys/ta.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
persist-key
persist-tun
keepalive 10 60
cipher AES-256-GCM
auth SHA512
user nobody
group nogroup
client-to-client
verb 4
daemon
log-append /var/log/openvpn.log
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
/etc/openvpn/bridge-start
exit 0
#!/bin/bash
#Define physical ethernet interface to be bridged
#with TAP interface above.
eth=“eno1”
eth_ip=“192.168.2.81”
eth_netmask=“255.255.255.0”
eth_broadcast=“192.168.2.255”
eth_gateway=“192.168.2.80”
eth_mac=“f4:4d:30:6d:fb:98”
#Define Bidge Interface
br=“br0”
#Define TAP interfaces to be bridged together
tap=“tap0”
#Create the TAP adapter
openvpn --mktun --dev tap0
#Create the bridge and add interfaces
brctl addbr br0
brctl addif br0 eno1
brctl addif br0 tap0
#Configure the bridge
ifconfig tap0 0.0.0.0 promisc up
ifconfig eno1 0.0.0.0 promisc up
ifconfig br0 192.168.2.81 netmask 255.255.255.0 broadcast 192.168.2.255
ip link set br0 address f4:4d:30:6d:fb:98
route add default gw 192.168.2.80 br0
tls-client
dev tap0
proto udp4
remote myhostname.dyndns.org 1190
float
cipher AES-256-GCM
auth SHA512
remote-cert-tls server
tls-crypt /etc/openvpn/clients/ankaran/ta.key
ca /etc/openvpn/clients/ankaran/ca.crt
cert /etc/openvpn/clients/ankaran/client01.crt
key /etc/openvpn/clients/ankaran/client01.key
resolv-retry infinite
persist-key
persist-tun
nobind
verb 4
daemon
log-append /var/log/openvpn.log
The problem is that the client is unable to reconnect to the openvpn server IF the router reboots (and the WAN IP changes since I get a dynamic ip address from my ISP) AND IF I reboot the openvpn server. If I reboot only the client pc I can connect to the server in a very short time.
Tue Feb 27 10:44:45 2018 us=211428 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017
Tue Feb 27 10:44:45 2018 us=211441 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Tue Feb 27 10:44:45 2018 us=215835 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Feb 27 10:44:45 2018 us=215868 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 27 10:44:45 2018 us=215878 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Feb 27 10:44:45 2018 us=215887 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 27 10:44:45 2018 us=215947 Control Channel MTU parms [ L:1581 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Feb 27 10:44:45 2018 us=216479 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 10:44:45 2018 us=216671 TUN/TAP device tap0 opened
Tue Feb 27 10:44:45 2018 us=216695 TUN/TAP TX queue length set to 100
Tue Feb 27 10:44:45 2018 us=216718 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:399 ET:32 EL:3 ]
Tue Feb 27 10:44:45 2018 us=216732 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Tue Feb 27 10:44:45 2018 us=216737 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Tue Feb 27 10:44:45 2018 us=216864 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 10:44:45 2018 us=216874 Could not determine IPv4/IPv6 protocol
Tue Feb 27 10:44:45 2018 us=216913 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 27 10:44:45 2018 us=216929 Restart pause, 5 second(s)
Tue Feb 27 10:44:50 2018 us=217001 Re-using SSL/TLS context
Tue Feb 27 10:44:50 2018 us=217085 Control Channel MTU parms [ L:1581 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Feb 27 10:44:50 2018 us=217253 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 10:44:50 2018 us=217267 Preserving previous TUN/TAP instance: tap0
Tue Feb 27 10:44:50 2018 us=217280 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:399 ET:32 EL:3 ]
Tue Feb 27 10:44:50 2018 us=217299 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Tue Feb 27 10:44:50 2018 us=217307 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Tue Feb 27 10:44:50 2018 us=217417 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 10:44:50 2018 us=217425 Could not determine IPv4/IPv6 protocol
Tue Feb 27 10:44:50 2018 us=217451 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 27 10:44:50 2018 us=217463 Restart pause, 5 second(s)
Tue Feb 27 10:44:55 2018 us=217572 Re-using SSL/TLS context
Tue Feb 27 10:44:55 2018 us=217648 Control Channel MTU parms [ L:1581 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Feb 27 10:44:55 2018 us=252308 Preserving previous TUN/TAP instance: tap0
Tue Feb 27 10:44:55 2018 us=252345 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:399 ET:32 EL:3 ]
Tue Feb 27 10:44:55 2018 us=252365 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Tue Feb 27 10:44:55 2018 us=252371 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Tue Feb 27 10:44:55 2018 us=252381 TCP/UDP: Preserving recently used remote address: [AF_INET]95.237.184.29:1190
Tue Feb 27 10:44:55 2018 us=252397 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Feb 27 10:44:55 2018 us=252404 UDPv4 link local: (not bound)
Tue Feb 27 10:44:55 2018 us=252411 UDPv4 link remote: [AF_INET]95.237.184.29:1190
Tue Feb 27 10:44:55 2018 us=318211 TLS: Initial packet from [AF_INET]95.237.184.29:1190, sid=09612996 e3c5d512
Tue Feb 27 10:44:55 2018 us=388917 VERIFY OK: depth=1, C=IT, ST=IT, L=Rome, O=Rome, OU=Rome, CN=server-CA, name=server, emailAddress=
me@gmail.com
Tue Feb 27 10:44:55 2018 us=389082 VERIFY KU OK
Tue Feb 27 10:44:55 2018 us=389094 Validating certificate extended key usage
Tue Feb 27 10:44:55 2018 us=389100 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Feb 27 10:44:55 2018 us=389105 VERIFY EKU OK
Tue Feb 27 10:44:55 2018 us=389110 VERIFY OK: depth=0, C=IT, ST=IT, L=Rome, O=Rome, OU=Rome, CN=sever-CA, name=server, emailAddress=
me@gmail.com
Tue Feb 27 10:44:55 2018 us=480735 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Feb 27 10:44:55 2018 us=480766 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Feb 27 10:44:55 2018 us=480809 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Feb 27 10:44:55 2018 us=480834 [sever-CA] Peer Connection Initiated with [AF_INET]95.237.184.29:1190
Tue Feb 27 10:44:56 2018 us=34216 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Feb 27 10:44:56 2018 us=34264 Initialization Sequence Completed
Tue Feb 27 11:44:55 2018 us=143357 TLS: soft reset sec=0 bytes=9106264/-1 pkts=20174/0
Tue Feb 27 11:45:55 2018 us=161955 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:45:55 2018 us=162088 TLS Error: TLS handshake failed
Tue Feb 27 11:45:55 2018 us=162132 TLS: move_session: dest=TM_LAME_DUCK src=TM_ACTIVE reinit_src=1
Tue Feb 27 11:47:10 2018 us=99508 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:47:10 2018 us=99637 TLS Error: TLS handshake failed
Tue Feb 27 11:48:25 2018 us=210706 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:48:25 2018 us=210838 TLS Error: TLS handshake failed
Tue Feb 27 11:49:40 2018 us=12229 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:49:40 2018 us=12367 TLS Error: TLS handshake failed
Tue Feb 27 11:50:55 2018 us=333566 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:50:55 2018 us=333700 TLS Error: TLS handshake failed
Tue Feb 27 11:52:10 2018 us=107105 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:52:10 2018 us=107265 TLS Error: TLS handshake failed
Tue Feb 27 11:53:25 2018 us=251569 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:53:25 2018 us=251703 TLS Error: TLS handshake failed
Tue Feb 27 11:53:42 2018 us=743719 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:42 2018 us=861419 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:43 2018 us=70614 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:43 2018 us=282565 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:43 2018 us=714558 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:44 2018 us=578579 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:46 2018 us=274861 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:46 2018 us=275002 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:47 2018 us=333418 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:47 2018 us=544476 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:53:49 2018 us=730560 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:54:40 2018 us=77510 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:54:40 2018 us=77676 TLS Error: TLS handshake failed
Tue Feb 27 11:55:19 2018 us=521346 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:55:20 2018 us=296093 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:55:20 2018 us=506507 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:55:20 2018 us=718496 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:55:21 2018 us=154509 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:55:22 2018 us=18506 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:55:22 2018 us=741949 Recursive routing detected, drop tun packet to [AF_INET]95.237.184.29:1190
Tue Feb 27 11:55:55 2018 us=3605 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:55:55 2018 us=3727 TLS Error: TLS handshake failed
Tue Feb 27 11:57:10 2018 us=343062 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:57:10 2018 us=343200 TLS Error: TLS handshake failed
Tue Feb 27 11:58:25 2018 us=278937 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:58:25 2018 us=279067 TLS Error: TLS handshake failed
Tue Feb 27 11:59:40 2018 us=17037 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 11:59:40 2018 us=17170 TLS Error: TLS handshake failed
Tue Feb 27 12:00:55 2018 us=236703 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Feb 27 12:00:55 2018 us=236836 TLS Error: TLS handshake failed
Tue Feb 27 12:01:29 2018 us=175329 event_wait : Interrupted system call (code=4)
Tue Feb 27 12:01:29 2018 us=175529 TCP/UDP: Closing socket
Tue Feb 27 12:01:29 2018 us=175563 Closing TUN/TAP interface
Tue Feb 27 12:01:29 2018 us=226372 SIGTERM[hard,] received, process exiting
Tue Feb 27 12:01:47 2018 us=398201 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
Tue Feb 27 12:01:47 2018 us=398777 WARNING: file '/etc/openvpn/clients/trst/trst.key' is group or others accessible
Tue Feb 27 12:01:47 2018 us=398797 WARNING: file '/etc/openvpn/clients/trst/ta.key' is group or others accessible
Tue Feb 27 12:01:47 2018 us=398827 Current Parameter Settings:
Tue Feb 27 12:01:47 2018 us=398836 config = '/etc/openvpn/trst.conf'
Tue Feb 27 12:01:47 2018 us=398844 mode = 0
Tue Feb 27 12:01:47 2018 us=398851 persist_config = DISABLED
Tue Feb 27 12:01:47 2018 us=398858 persist_mode = 1
Tue Feb 27 12:01:47 2018 us=398866 show_ciphers = DISABLED
Tue Feb 27 12:01:47 2018 us=398874 show_digests = DISABLED
Tue Feb 27 12:01:47 2018 us=398881 show_engines = DISABLED
Tue Feb 27 12:01:47 2018 us=398888 genkey = DISABLED
Tue Feb 27 12:01:47 2018 us=398894 key_pass_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=398901 show_tls_ciphers = DISABLED
Tue Feb 27 12:01:47 2018 us=398909 connect_retry_max = 0
Tue Feb 27 12:01:47 2018 us=398916 Connection profiles [0]:
Tue Feb 27 12:01:47 2018 us=398924 proto = udp4
Tue Feb 27 12:01:47 2018 us=398931 local = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=398938 local_port = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=398946 remote = 'matejlumevpn.dyndns.org'
Tue Feb 27 12:01:47 2018 us=398953 remote_port = '1190'
Tue Feb 27 12:01:47 2018 us=398960 remote_float = ENABLED
Tue Feb 27 12:01:47 2018 us=398968 bind_defined = DISABLED
Tue Feb 27 12:01:47 2018 us=398975 bind_local = DISABLED
Tue Feb 27 12:01:47 2018 us=398983 bind_ipv6_only = DISABLED
Tue Feb 27 12:01:47 2018 us=398990 connect_retry_seconds = 5
Tue Feb 27 12:01:47 2018 us=398997 connect_timeout = 120
Tue Feb 27 12:01:47 2018 us=399004 socks_proxy_server = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399011 socks_proxy_port = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399019 tun_mtu = 1500
Tue Feb 27 12:01:47 2018 us=399026 tun_mtu_defined = ENABLED
Tue Feb 27 12:01:47 2018 us=399033 link_mtu = 1500
Tue Feb 27 12:01:47 2018 us=399040 link_mtu_defined = DISABLED
Tue Feb 27 12:01:47 2018 us=399047 tun_mtu_extra = 32
Tue Feb 27 12:01:47 2018 us=399055 tun_mtu_extra_defined = ENABLED
Tue Feb 27 12:01:47 2018 us=399063 mtu_discover_type = -1
Tue Feb 27 12:01:47 2018 us=399086 fragment = 0
Tue Feb 27 12:01:47 2018 us=399094 mssfix = 1450
Tue Feb 27 12:01:47 2018 us=399101 explicit_exit_notification = 0
Tue Feb 27 12:01:47 2018 us=399108 Connection profiles END
Tue Feb 27 12:01:47 2018 us=399115 remote_random = DISABLED
Tue Feb 27 12:01:47 2018 us=399123 ipchange = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399130 dev = 'tap0'
Tue Feb 27 12:01:47 2018 us=399138 dev_type = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399145 dev_node = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399152 lladdr = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399160 topology = 1
Tue Feb 27 12:01:47 2018 us=399167 ifconfig_local = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399175 ifconfig_remote_netmask = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399182 ifconfig_noexec = DISABLED
Tue Feb 27 12:01:47 2018 us=399189 ifconfig_nowarn = DISABLED
Tue Feb 27 12:01:47 2018 us=399196 ifconfig_ipv6_local = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399204 ifconfig_ipv6_netbits = 0
Tue Feb 27 12:01:47 2018 us=399211 ifconfig_ipv6_remote = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399218 shaper = 0
Tue Feb 27 12:01:47 2018 us=399225 mtu_test = 0
Tue Feb 27 12:01:47 2018 us=399232 mlock = DISABLED
Tue Feb 27 12:01:47 2018 us=399242 keepalive_ping = 0
Tue Feb 27 12:01:47 2018 us=399249 keepalive_timeout = 0
Tue Feb 27 12:01:47 2018 us=399257 inactivity_timeout = 0
Tue Feb 27 12:01:47 2018 us=399264 ping_send_timeout = 0
Tue Feb 27 12:01:47 2018 us=399271 ping_rec_timeout = 0
Tue Feb 27 12:01:47 2018 us=399278 ping_rec_timeout_action = 0
Tue Feb 27 12:01:47 2018 us=399285 ping_timer_remote = DISABLED
Tue Feb 27 12:01:47 2018 us=399292 remap_sigusr1 = 0
Tue Feb 27 12:01:47 2018 us=399299 persist_tun = ENABLED
Tue Feb 27 12:01:47 2018 us=399307 persist_local_ip = DISABLED
Tue Feb 27 12:01:47 2018 us=399314 persist_remote_ip = DISABLED
Tue Feb 27 12:01:47 2018 us=399321 persist_key = ENABLED
Tue Feb 27 12:01:47 2018 us=399328 passtos = DISABLED
Tue Feb 27 12:01:47 2018 us=399334 resolve_retry_seconds = 1000000000
Tue Feb 27 12:01:47 2018 us=399346 resolve_in_advance = DISABLED
Tue Feb 27 12:01:47 2018 us=399353 username = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399360 groupname = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399367 chroot_dir = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399374 cd_dir = '/etc/openvpn'
Tue Feb 27 12:01:47 2018 us=399381 writepid = '/run/openvpn/trst.pid'
Tue Feb 27 12:01:47 2018 us=399388 up_script = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399577 down_script = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399588 down_pre = DISABLED
Tue Feb 27 12:01:47 2018 us=399596 up_restart = DISABLED
Tue Feb 27 12:01:47 2018 us=399602 up_delay = DISABLED
Tue Feb 27 12:01:47 2018 us=399610 daemon = ENABLED
Tue Feb 27 12:01:47 2018 us=399617 inetd = 0
Tue Feb 27 12:01:47 2018 us=399624 log = ENABLED
Tue Feb 27 12:01:47 2018 us=399630 suppress_timestamps = DISABLED
Tue Feb 27 12:01:47 2018 us=399638 machine_readable_output = DISABLED
Tue Feb 27 12:01:47 2018 us=399645 nice = 0
Tue Feb 27 12:01:47 2018 us=399652 verbosity = 4
Tue Feb 27 12:01:47 2018 us=399659 mute = 0
Tue Feb 27 12:01:47 2018 us=399666 gremlin = 0
Tue Feb 27 12:01:47 2018 us=399674 status_file = '/run/openvpn/trst.status'
Tue Feb 27 12:01:47 2018 us=399681 status_file_version = 1
Tue Feb 27 12:01:47 2018 us=399688 status_file_update_freq = 10
Tue Feb 27 12:01:47 2018 us=399710 occ = ENABLED
Tue Feb 27 12:01:47 2018 us=399718 rcvbuf = 0
Tue Feb 27 12:01:47 2018 us=399725 sndbuf = 0
Tue Feb 27 12:01:47 2018 us=399732 mark = 0
Tue Feb 27 12:01:47 2018 us=399739 sockflags = 0
Tue Feb 27 12:01:47 2018 us=399746 fast_io = DISABLED
Tue Feb 27 12:01:47 2018 us=399754 comp.alg = 0
Tue Feb 27 12:01:47 2018 us=399761 comp.flags = 0
Tue Feb 27 12:01:47 2018 us=399769 route_script = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399777 route_default_gateway = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399784 route_default_metric = 0
Tue Feb 27 12:01:47 2018 us=399791 route_noexec = DISABLED
Tue Feb 27 12:01:47 2018 us=399799 route_delay = 0
Tue Feb 27 12:01:47 2018 us=399806 route_delay_window = 30
Tue Feb 27 12:01:47 2018 us=399813 route_delay_defined = DISABLED
Tue Feb 27 12:01:47 2018 us=399820 route_nopull = DISABLED
Tue Feb 27 12:01:47 2018 us=399827 route_gateway_via_dhcp = DISABLED
Tue Feb 27 12:01:47 2018 us=399834 allow_pull_fqdn = DISABLED
Tue Feb 27 12:01:47 2018 us=399841 management_addr = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399848 management_port = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399856 management_user_pass = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399863 management_log_history_cache = 250
Tue Feb 27 12:01:47 2018 us=399870 management_echo_buffer_size = 100
Tue Feb 27 12:01:47 2018 us=399878 management_write_peer_info_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399885 management_client_user = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399892 management_client_group = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399899 management_flags = 0
Tue Feb 27 12:01:47 2018 us=399906 shared_secret_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=399913 key_direction = 0
Tue Feb 27 12:01:47 2018 us=399920 ciphername = 'AES-256-GCM'
Tue Feb 27 12:01:47 2018 us=399927 ncp_enabled = DISABLED
Tue Feb 27 12:01:47 2018 us=399935 ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Tue Feb 27 12:01:47 2018 us=399942 authname = 'SHA512'
Tue Feb 27 12:01:47 2018 us=399949 prng_hash = 'SHA1'
Tue Feb 27 12:01:47 2018 us=399956 prng_nonce_secret_len = 16
Tue Feb 27 12:01:47 2018 us=399964 keysize = 0
Tue Feb 27 12:01:47 2018 us=399971 engine = DISABLED
Tue Feb 27 12:01:47 2018 us=399978 replay = ENABLED
Tue Feb 27 12:01:47 2018 us=399985 mute_replay_warnings = DISABLED
Tue Feb 27 12:01:47 2018 us=399993 replay_window = 64
Tue Feb 27 12:01:47 2018 us=399999 replay_time = 15
Tue Feb 27 12:01:47 2018 us=400006 packet_id_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400012 use_iv = ENABLED
Tue Feb 27 12:01:47 2018 us=400028 test_crypto = DISABLED
Tue Feb 27 12:01:47 2018 us=400036 tls_server = DISABLED
Tue Feb 27 12:01:47 2018 us=400054 tls_client = ENABLED
Tue Feb 27 12:01:47 2018 us=400062 key_method = 2
Tue Feb 27 12:01:47 2018 us=400070 ca_file = '/etc/openvpn/clients/trst/ca.crt'
Tue Feb 27 12:01:47 2018 us=400077 ca_path = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400083 dh_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400091 cert_file = '/etc/openvpn/clients/trst/trst.crt'
Tue Feb 27 12:01:47 2018 us=400098 extra_certs_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400105 priv_key_file = '/etc/openvpn/clients/trst/trst.key'
Tue Feb 27 12:01:47 2018 us=400112 pkcs12_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400119 cipher_list = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400126 tls_verify = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400133 tls_export_cert = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400140 verify_x509_type = 0
Tue Feb 27 12:01:47 2018 us=400147 verify_x509_name = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400154 crl_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=400161 ns_cert_type = 0
Tue Feb 27 12:01:47 2018 us=400168 remote_cert_ku
= 65535
Tue Feb 27 12:01:47 2018 us=400175 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400181 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400188 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400195 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400202 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400209 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400215 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400222 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400229 remote_cert_ku = 0
Tue Feb 27 12:01:47 2018 us=400236 remote_cert_ku[i] = 0
Tue Feb 27 12:01:47 2018 us=400243 remote_cert_ku[i] = 0
Tue Feb 27 12:01:47 2018 us=401105 remote_cert_ku[i] = 0
Tue Feb 27 12:01:47 2018 us=401118 remote_cert_ku[i] = 0
Tue Feb 27 12:01:47 2018 us=401126 remote_cert_ku[i] = 0
Tue Feb 27 12:01:47 2018 us=401132 remote_cert_ku[i] = 0
Tue Feb 27 12:01:47 2018 us=401140 remote_cert_eku = 'TLS Web Server Authentication'
Tue Feb 27 12:01:47 2018 us=401147 ssl_flags = 0
Tue Feb 27 12:01:47 2018 us=401155 tls_timeout = 2
Tue Feb 27 12:01:47 2018 us=401161 renegotiate_bytes = -1
Tue Feb 27 12:01:47 2018 us=401168 renegotiate_packets = 0
Tue Feb 27 12:01:47 2018 us=401317 renegotiate_seconds = 3600
Tue Feb 27 12:01:47 2018 us=401329 handshake_window = 60
Tue Feb 27 12:01:47 2018 us=401679 transition_window = 3600
Tue Feb 27 12:01:47 2018 us=401687 single_session = DISABLED
Tue Feb 27 12:01:47 2018 us=401692 push_peer_info = DISABLED
Tue Feb 27 12:01:47 2018 us=401699 tls_exit = DISABLED
Tue Feb 27 12:01:47 2018 us=401707 tls_auth_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=401714 tls_crypt_file = '/etc/openvpn/clients/trst/ta.key'
Tue Feb 27 12:01:47 2018 us=401722 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401729 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401736 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401743 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401750 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401757 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401764 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401771 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401778 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401785 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401792 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401800 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401806 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401814 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401821 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401828 pkcs11_protected_authentication = DISABLED
Tue Feb 27 12:01:47 2018 us=401841 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401868 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401875 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401882 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401889 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401896 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401904 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401911 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401917 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401924 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401930 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401958 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401966 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401973 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401979 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401986 pkcs11_private_mode = 00000000
Tue Feb 27 12:01:47 2018 us=401993 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402000 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402007 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402014 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402021 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402028 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402035 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402043 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402050 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402057 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402065 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402072 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402080 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402087 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402095 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402102 pkcs11_cert_private = DISABLED
Tue Feb 27 12:01:47 2018 us=402110 pkcs11_pin_cache_period = -1
Tue Feb 27 12:01:47 2018 us=402118 pkcs11_id = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=402125 pkcs11_id_management = DISABLED
Tue Feb 27 12:01:47 2018 us=402134 server_network = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402143 server_netmask = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402156 server_network_ipv6 = ::
Tue Feb 27 12:01:47 2018 us=402164 server_netbits_ipv6 = 0
Tue Feb 27 12:01:47 2018 us=402172 server_bridge_ip = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402181 server_bridge_netmask = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402188 server_bridge_pool_start = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402196 server_bridge_pool_end = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402204 ifconfig_pool_defined = DISABLED
Tue Feb 27 12:01:47 2018 us=402211 ifconfig_pool_start = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402219 ifconfig_pool_end = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402226 ifconfig_pool_netmask = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=402233 ifconfig_pool_persist_filename = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=402240 ifconfig_pool_persist_refresh_freq = 600
Tue Feb 27 12:01:47 2018 us=402246 ifconfig_ipv6_pool_defined = DISABLED
Tue Feb 27 12:01:47 2018 us=402257 ifconfig_ipv6_pool_base = ::
Tue Feb 27 12:01:47 2018 us=402264 ifconfig_ipv6_pool_netbits = 0
Tue Feb 27 12:01:47 2018 us=402271 n_bcast_buf = 256
Tue Feb 27 12:01:47 2018 us=402278 tcp_queue_limit = 64
Tue Feb 27 12:01:47 2018 us=402285 real_hash_size = 256
Tue Feb 27 12:01:47 2018 us=402292 virtual_hash_size = 256
Tue Feb 27 12:01:47 2018 us=402300 client_connect_script = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=402307 learn_address_script = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=402314 client_disconnect_script = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=402321 client_config_dir = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=402328 ccd_exclusive = DISABLED
Tue Feb 27 12:01:47 2018 us=402340 tmp_dir = '/tmp'
Tue Feb 27 12:01:47 2018 us=402347 push_ifconfig_defined = DISABLED
Tue Feb 27 12:01:47 2018 us=403825 push_ifconfig_local = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=403839 push_ifconfig_remote_netmask = 0.0.0.0
Tue Feb 27 12:01:47 2018 us=403848 push_ifconfig_ipv6_defined = DISABLED
Tue Feb 27 12:01:47 2018 us=403858 push_ifconfig_ipv6_local = ::/0
Tue Feb 27 12:01:47 2018 us=403868 push_ifconfig_ipv6_remote = ::
Tue Feb 27 12:01:47 2018 us=403875 enable_c2c = DISABLED
Tue Feb 27 12:01:47 2018 us=403883 duplicate_cn = DISABLED
Tue Feb 27 12:01:47 2018 us=403890 cf_max = 0
Tue Feb 27 12:01:47 2018 us=403897 cf_per = 0
Tue Feb 27 12:01:47 2018 us=403904 max_clients = 1024
Tue Feb 27 12:01:47 2018 us=403911 max_routes_per_client = 256
Tue Feb 27 12:01:47 2018 us=403919 auth_user_pass_verify_script = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=403926 auth_user_pass_verify_script_via_file = DISABLED
Tue Feb 27 12:01:47 2018 us=403933 auth_token_generate = DISABLED
Tue Feb 27 12:01:47 2018 us=403940 auth_token_lifetime = 0
Tue Feb 27 12:01:47 2018 us=403948 port_share_host = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=403955 port_share_port = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=403962 client = DISABLED
Tue Feb 27 12:01:47 2018 us=403969 pull = DISABLED
Tue Feb 27 12:01:47 2018 us=403976 auth_user_pass_file = '[UNDEF]'
Tue Feb 27 12:01:47 2018 us=403985 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017
Tue Feb 27 12:01:47 2018 us=403998 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Tue Feb 27 12:01:47 2018 us=408347 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Feb 27 12:01:47 2018 us=408375 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 27 12:01:47 2018 us=408386 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Tue Feb 27 12:01:47 2018 us=408397 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 27 12:01:47 2018 us=408451 Control Channel MTU parms [ L:1581 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Feb 27 12:01:47 2018 us=409016 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 12:01:47 2018 us=409261 TUN/TAP device tap0 opened
Tue Feb 27 12:01:47 2018 us=601385 TUN/TAP TX queue length set to 100
Tue Feb 27 12:01:47 2018 us=601460 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:399 ET:32 EL:3 ]
Tue Feb 27 12:01:47 2018 us=601489 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Tue Feb 27 12:01:47 2018 us=601499 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Tue Feb 27 12:01:47 2018 us=601698 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 12:01:47 2018 us=601712 Could not determine IPv4/IPv6 protocol
Tue Feb 27 12:01:47 2018 us=601769 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 27 12:01:47 2018 us=601787 Restart pause, 5 second(s)
Tue Feb 27 12:01:52 2018 us=601874 Re-using SSL/TLS context
Tue Feb 27 12:01:52 2018 us=601967 Control Channel MTU parms [ L:1581 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Feb 27 12:01:52 2018 us=602134 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 12:01:52 2018 us=602145 Preserving previous TUN/TAP instance: tap0
Tue Feb 27 12:01:52 2018 us=602153 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:399 ET:32 EL:3 ]
Tue Feb 27 12:01:52 2018 us=602167 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Tue Feb 27 12:01:52 2018 us=602180 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Tue Feb 27 12:01:52 2018 us=602278 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 12:01:52 2018 us=602286 Could not determine IPv4/IPv6 protocol
Tue Feb 27 12:01:52 2018 us=602312 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 27 12:01:52 2018 us=602324 Restart pause, 5 second(s)
Tue Feb 27 12:01:57 2018 us=602516 Re-using SSL/TLS context
Tue Feb 27 12:01:57 2018 us=602615 Control Channel MTU parms [ L:1581 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Feb 27 12:01:57 2018 us=607247 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 12:01:57 2018 us=607268 Preserving previous TUN/TAP instance: tap0
Tue Feb 27 12:01:57 2018 us=607278 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:399 ET:32 EL:3 ]
Tue Feb 27 12:01:57 2018 us=607294 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Tue Feb 27 12:01:57 2018 us=607300 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Tue Feb 27 12:01:57 2018 us=607401 RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution)
Tue Feb 27 12:01:57 2018 us=607412 Could not determine IPv4/IPv6 protocol
Tue Feb 27 12:01:57 2018 us=607444 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 27 12:01:57 2018 us=607458 Restart pause, 5 second(s)
Tue Feb 27 12:02:02 2018 us=607646 Re-using SSL/TLS context
Tue Feb 27 12:02:02 2018 us=607745 Control Channel MTU parms [ L:1581 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Tue Feb 27 12:02:02 2018 us=608353 Preserving previous TUN/TAP instance: tap0
Tue Feb 27 12:02:02 2018 us=608381 Data Channel MTU parms [ L:1581 D:1450 EF:49 EB:399 ET:32 EL:3 ]
Tue Feb 27 12:02:02 2018 us=608398 Local Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client'
Tue Feb 27 12:02:02 2018 us=608406 Expected Remote Options String (VER=V4): 'V4,dev-type tap,link-mtu 1581,tun-mtu 1532,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-server'
Tue Feb 27 12:02:02 2018 us=608415 TCP/UDP: Preserving recently used remote address: [AF_INET]80.183.10.128:1190
Tue Feb 27 12:02:02 2018 us=608430 Socket Buffers: R=[212992->212992] S=[212992->212992]
Tue Feb 27 12:02:02 2018 us=608437 UDPv4 link local: (not bound)
Tue Feb 27 12:02:02 2018 us=608443 UDPv4 link remote: [AF_INET]80.183.10.128:1190
Tue Feb 27 12:02:02 2018 us=673642 TLS: Initial packet from [AF_INET]80.183.10.128:1190, sid=9a439611 5174b8b5
Tue Feb 27 12:02:02 2018 us=744076 VERIFY OK: depth=1, C=IT, ST=IT, L=Rome, O=Rome, OU=Rome, CN=server-CA, name=server, emailAddress=me@gmail.com
Tue Feb 27 12:02:02 2018 us=744291 VERIFY KU OK
Tue Feb 27 12:02:02 2018 us=744308 Validating certificate extended key usage
Tue Feb 27 12:02:02 2018 us=744316 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Tue Feb 27 12:02:02 2018 us=744321 VERIFY EKU OK
Tue Feb 27 12:02:02 2018 us=744326 VERIFY OK: depth=0, C=IT, ST=IT, L=Rome, O=Rome, OU=Rome, CN=sever-CA, name=server, emailAddress=me@gmail.com
Tue Feb 27 12:02:02 2018 us=836335 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Feb 27 12:02:02 2018 us=836372 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Tue Feb 27 12:02:02 2018 us=836447 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Feb 27 12:02:02 2018 us=836479 [sever-CA] Peer Connection Initiated with [AF_INET]80.183.10.128:1190
Tue Feb 27 12:02:03 2018 us=107258 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Feb 27 12:02:03 2018 us=107291 Initialization Sequence Completed
The error message RESOLVE: Cannot resolve host address: myhostname.dyndns.org:1190 (Temporary failure in name resolution) is very strange since the client pc can ping www.google.com and also myhostname.dyndns.org.
I think that the problem is the "clients side" not the "servers side", since I can successfully connect to my server in bridge mode through the android app "Openvpn Client".
At the moment, the ONLY SOLUTION is REBOOTING the CLIENT. Then all is working. Is this problem related to the bridge-start script and the way I make it autostart at boot?
