Thanks for the link, really useful. But it did not solve the problem. my configs:
************************
port 1194
proto udp
dev tun
user nobody
group nogroup
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
#
client-to-client
route 192.168.1.0 255.255.255.0
push "route 192.168.1.0 255.255.255.0"
#
push "redirect-gateway def1 bypass-dhcp"
crl-verify crl.pem
ca ca.crt
cert server.crt
key server.key
tls-auth tls-auth.key 0
dh dh.pem
auth SHA384
cipher AES-256-CBC
ncp-disable
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
#duplicate-cn
compress lzo
status openvpn.log
verb 3
********************************
client ccb
iroute 192.168.1.0 255.255.255.0
********************************
client
proto udp
remote xxxx 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA384
cipher AES-256-CBC
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
compress lzo
setenv opt block-outside-dns
verb 3
********************************
