IOS app keeps closing on iphone

porcupine

Hi Folks,

I've been running OpenVPN for the past few months, using a self-hosted split tunnel to push several services over the tunnel (RDP, email, etc.) for compliance reasons.

This has been working great for the most part, however both myself, and a few other clients on the same VPN have noticed that the IOS/Iphone app consistently seems to disconnect/fail to reconnect (often multiple times a day, requiring the user to catch the fact it's not running, and manually re-enable it).

I've noticed in the Iphone Settings area, that the "VPN" toggle is also sometimes flicked to "off", despite no user intervention having put it there.

Upon re-opening the app, sometimes I have to re-enter my certificate password, other times I do not.

I'm running the IOS App v3.2.3.(3760), on a Iphone SE (2018?) using IOS 15.1. I'm setup using a UDP only tunnel, IPv4 only, continuously retry in the app, with compression disabled, , and the profile default minimum TLS, connecting VIA any network (if that helps any).

I tried digging through the forums, and was surprised I couldn't find anyone else experiencing the same issues (since it's been entirely persistent on our end).

Any suggestions on why this might be happening? Since email pushes through it, when the VPN dies, email stops, and unless the user remembers to check/notices the missing icon, they ... well regularly miss emails. It's been a bit of a nuisance...

TinCanTech

Maybe you have a server problem .. ?

porcupine

TinCanTech wrote Maybe you have a server problem .. ?

That's certainly a possibility. The MacOS clients using Tunnelbrick and Windows clients using the OpenVPN connect app don't experience the same issues (ever, VPN is rock solid), but that doesn't mean there's no issue impacting just one client class of course.

Any advice would be appreciated, I've got the client at log level 3, and server using log level 4, but haven't spotted anything obvious.

TinCanTech

You can post configs and logs for inspection as per: https://forums.openvpn.net/viewtopic.php?f=30&t=22603

Catch the logs when the problem occurs ..

porcupine

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

porcupine

Ok, so finally got a valid hit, on verb4, where I caught the VPN dying (and was certain I hadn't done anything like closed the OpenVPN app. Upon discovery, I grabbed the log file, pushed reconnect, and it reconnected without prompting for the certificate password.

Operating System:

: uname -a
Linux server 3.10.0-1160.21.1.el7.x86_64 #1 SMP Tue Mar 16 18:28:22 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

Network:

eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet x.x.x.58  netmask 255.255.255.248  broadcast x.x.x.63
        inet6 Z:Z:Z:Z::2  prefixlen 65  scopeid 0x0<global>
        inet6 Z:Z:Z:Z::9999  prefixlen 65  scopeid 0x0<global>
        inet6 fe80::ec4:7aff:fe47:577e  prefixlen 64  scopeid 0x20<link>
        ether 0c:c4:7a:47:57:7e  txqueuelen 1000  (Ethernet)
        RX packets 55762490  bytes 18289215636 (17.0 GiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 67840392  bytes 47615919140 (44.3 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device memory 0xf7200000-f727ffff

eno1:3: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet x.x.x.62  netmask 255.255.255.248  broadcast x.x.x.63
        ether 0c:c4:7a:47:57:7e  txqueuelen 1000  (Ethernet)
        device memory 0xf7200000-f727ffff

eno1:4: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet y.y.y.199  netmask 255.255.255.248  broadcast y.y.y.199
        ether 0c:c4:7a:47:57:7e  txqueuelen 1000  (Ethernet)
        device memory 0xf7200000-f727ffff

eno2: flags=4098<BROADCAST,MULTICAST>  mtu 1500
        ether 0c:c4:7a:47:57:7f  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device memory 0xf7100000-f717ffff

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 227327  bytes 18811809 (17.9 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 227327  bytes 18811809 (17.9 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet y.y.y.1  netmask 255.255.255.0  destination y.y.y.1
        inet6 2607:f698:100:6::1  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::a2ee:e317:c1c3:6ab3  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 500  (UNSPEC)
        RX packets 1601712  bytes 220329334 (210.1 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1649772  bytes 1077679508 (1.0 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

local x.x.x.62
port 1194
proto udp
dev tun0
ca /etc/openvpn/pki/ca.crt
cert /etc/openvpn/pki/issued/domain.com.crt
key /etc/openvpn/pki/private/domain.com-decrypted.key
dh /etc/openvpn/dh2048.pem
topology subnet
server y.y.y.0 255.255.255.0

server-ipv6 z:z:z:z::/64
tun-ipv6
push tun-ipv6

ifconfig-pool-persist /etc/openvpn/ipp.txt
keepalive 5 60
tls-auth /etc/openvpn/ta.key 0

data-ciphers AES-256-CBC
cipher AES-256-CBC
#other ciphers to add to the negotiation option, separated by colons, Note: you cannot specify multiple base ciphers in line above.
ncp-ciphers AES-256-GCM

#compression not secure, do not use.
#compress lz4-v2
#push "compress lz4-v2"
max-clients 50

# reduce the OpenVPN daemon's privileges after initialization.
user nobody
group nobody

# The persist options will try to avoid accessing certain resources on restart
# that may no longer be accessible because of the privilege downgrade.
persist-key
persist-tun

# Output a short status file showing current connections, truncated and rewritten every minute.
status /var/log/openvpn-status.log
log-append /var/log/openvpn.log

# Set the appropriate level of log file verbosity.
# 0 is silent, except for fatal errors
# 4 is reasonable for general usage
# 5 and 6 can help to debug connection problems
# 9 is extremely verbose
verb 4

# Silence repeating messages. At mos X sequential messages of the same message category will be output to the log.
mute 15

# Notify the client that when the server restarts so it can automatically reconnect.
explicit-exit-notify 1

push "route a.a.a.a 255.255.255.255"

push "route b.b.b.b 255.255.255.255"

push "route c.c.c.c 255.255.255.255"

push "route d.d.d.d 255.255.255.255"

push "route e.e.e.e 255.255.255.255"
push "route-ipv6 f:f:f:f::/64"

client
dev tun
proto udp
remote vpn.domain.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
verb 4
key-direction 1
keepalive 5 60

<ca>
-----BEGIN CERTIFICATE-----
[x]
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-auth>
[x]
</tls-auth>

Client Log:

2021-12-03 19:17:12 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:17:12 EVENT: ASSIGN_IP

2021-12-03 19:17:12 NIP: preparing TUN network settings

2021-12-03 19:17:12 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:17:12 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:17:12 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:17:12 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:17:12 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:17:12 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:17:12 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:17:12 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:17:12 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:17:12 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:17:12 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:17:12 Connected via NetworkExtensionTUN

2021-12-03 19:17:12 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:18:43 OS Event: SLEEP

2021-12-03 19:18:43 EVENT: PAUSE

2021-12-03 19:19:50 OS Event: WAKEUP

2021-12-03 19:19:53 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:19:53 STANDARD RESUME

2021-12-03 19:19:53 EVENT: RESUME

2021-12-03 19:19:53 EVENT: RECONNECTING

2021-12-03 19:19:53 EVENT: RESOLVE

2021-12-03 19:19:53 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:19:53 EVENT: WAIT

2021-12-03 19:19:53 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:19:53 EVENT: CONNECTING

2021-12-03 19:19:53 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:19:53 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:19:53 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:19:53 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:19:53 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:19:53 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:19:53 Session is ACTIVE

2021-12-03 19:19:53 EVENT: GET_CONFIG

2021-12-03 19:19:53 Sending PUSH_REQUEST to server...

2021-12-03 19:19:53 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:19:53 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:19:53 EVENT: ASSIGN_IP

2021-12-03 19:19:53 NIP: preparing TUN network settings

2021-12-03 19:19:53 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:19:53 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:19:53 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:19:53 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:19:53 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:19:53 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:19:53 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:19:53 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:19:53 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:19:53 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:19:53 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:19:53 Connected via NetworkExtensionTUN

2021-12-03 19:19:53 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:21:37 OS Event: SLEEP

2021-12-03 19:21:37 EVENT: PAUSE

2021-12-03 19:22:52 OS Event: WAKEUP

2021-12-03 19:22:55 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:22:55 STANDARD RESUME

2021-12-03 19:22:55 EVENT: RESUME

2021-12-03 19:22:55 EVENT: RECONNECTING

2021-12-03 19:22:55 EVENT: RESOLVE

2021-12-03 19:22:55 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:22:55 EVENT: WAIT

2021-12-03 19:22:55 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:22:55 EVENT: CONNECTING

2021-12-03 19:22:55 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:22:55 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:22:55 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:22:55 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:22:55 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:22:55 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:22:55 Session is ACTIVE

2021-12-03 19:22:55 EVENT: GET_CONFIG

2021-12-03 19:22:55 Sending PUSH_REQUEST to server...

2021-12-03 19:22:55 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:22:55 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:22:55 EVENT: ASSIGN_IP

2021-12-03 19:22:55 NIP: preparing TUN network settings

2021-12-03 19:22:55 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:22:55 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:22:55 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:22:55 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:22:55 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:22:55 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:22:55 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:22:55 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:22:55 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:22:55 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:22:55 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:22:55 Connected via NetworkExtensionTUN

2021-12-03 19:22:55 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:24:22 OS Event: SLEEP

2021-12-03 19:24:22 EVENT: PAUSE

2021-12-03 19:25:29 OS Event: WAKEUP

2021-12-03 19:25:32 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:25:32 STANDARD RESUME

2021-12-03 19:25:32 EVENT: RESUME

2021-12-03 19:25:32 EVENT: RECONNECTING

2021-12-03 19:25:32 EVENT: RESOLVE

2021-12-03 19:25:32 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:25:32 EVENT: WAIT

2021-12-03 19:25:32 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:25:32 EVENT: CONNECTING

2021-12-03 19:25:32 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:25:32 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:25:32 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:25:32 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:25:32 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:25:32 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:25:32 Session is ACTIVE

2021-12-03 19:25:32 EVENT: GET_CONFIG

2021-12-03 19:25:32 Sending PUSH_REQUEST to server...

2021-12-03 19:25:32 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:25:32 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:25:32 EVENT: ASSIGN_IP

2021-12-03 19:25:32 NIP: preparing TUN network settings

2021-12-03 19:25:32 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:25:32 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:25:32 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:25:32 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:25:32 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:25:32 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:25:32 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:25:32 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:25:32 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:25:32 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:25:32 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:25:32 Connected via NetworkExtensionTUN

2021-12-03 19:25:32 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:27:55 OS Event: SLEEP

2021-12-03 19:27:55 EVENT: PAUSE

2021-12-03 19:30:00 OS Event: WAKEUP

2021-12-03 19:30:03 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:30:03 STANDARD RESUME

2021-12-03 19:30:03 EVENT: RESUME

2021-12-03 19:30:03 EVENT: RECONNECTING

2021-12-03 19:30:03 EVENT: RESOLVE

2021-12-03 19:30:03 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:30:03 EVENT: WAIT

2021-12-03 19:30:03 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:30:03 EVENT: CONNECTING

2021-12-03 19:30:03 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:30:03 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:30:03 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:30:03 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:30:03 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:30:03 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:30:03 Session is ACTIVE

2021-12-03 19:30:03 EVENT: GET_CONFIG

2021-12-03 19:30:03 Sending PUSH_REQUEST to server...

2021-12-03 19:30:03 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:30:03 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:30:03 EVENT: ASSIGN_IP

2021-12-03 19:30:03 NIP: preparing TUN network settings

2021-12-03 19:30:03 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:30:03 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:30:03 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:30:03 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:30:03 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:30:03 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:30:03 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:30:03 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:30:03 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:30:03 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:30:03 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:30:03 Connected via NetworkExtensionTUN

2021-12-03 19:30:03 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:32:52 OS Event: SLEEP

2021-12-03 19:32:52 EVENT: PAUSE

2021-12-03 19:33:07 OS Event: WAKEUP

2021-12-03 19:33:10 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:33:10 STANDARD RESUME

2021-12-03 19:33:10 EVENT: RESUME

2021-12-03 19:33:10 EVENT: RECONNECTING

2021-12-03 19:33:10 EVENT: RESOLVE

2021-12-03 19:33:10 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:33:10 EVENT: WAIT

2021-12-03 19:33:10 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:33:10 EVENT: CONNECTING

2021-12-03 19:33:10 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:33:10 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:33:10 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:33:10 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:33:10 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:33:11 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:33:11 Session is ACTIVE

2021-12-03 19:33:11 EVENT: GET_CONFIG

2021-12-03 19:33:11 Sending PUSH_REQUEST to server...

2021-12-03 19:33:11 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:33:11 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:33:11 EVENT: ASSIGN_IP

2021-12-03 19:33:11 NIP: preparing TUN network settings

2021-12-03 19:33:11 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:33:11 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:33:11 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:33:11 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:33:11 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:33:11 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:33:11 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:33:11 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:33:11 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:33:11 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:33:11 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:33:11 Connected via NetworkExtensionTUN

2021-12-03 19:33:11 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:34:44 OS Event: SLEEP

2021-12-03 19:34:44 EVENT: PAUSE

2021-12-03 19:36:07 OS Event: WAKEUP

2021-12-03 19:36:10 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:36:10 STANDARD RESUME

2021-12-03 19:36:10 EVENT: RESUME

2021-12-03 19:36:10 EVENT: RECONNECTING

2021-12-03 19:36:10 EVENT: RESOLVE

2021-12-03 19:36:10 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:36:10 EVENT: WAIT

2021-12-03 19:36:10 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:36:10 EVENT: CONNECTING

2021-12-03 19:36:10 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:36:10 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:36:10 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:36:10 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:36:10 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:36:10 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:36:10 Session is ACTIVE

2021-12-03 19:36:10 EVENT: GET_CONFIG

2021-12-03 19:36:10 Sending PUSH_REQUEST to server...

2021-12-03 19:36:10 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [1] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:36:10 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 1

2021-12-03 19:36:10 EVENT: ASSIGN_IP

2021-12-03 19:36:10 NIP: preparing TUN network settings

2021-12-03 19:36:10 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:36:10 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:36:10 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:36:10 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:36:10 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:36:10 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:36:10 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:36:10 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:36:10 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:36:10 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:36:10 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:36:10 Connected via NetworkExtensionTUN

2021-12-03 19:36:10 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:38:57 OS Event: SLEEP

2021-12-03 19:38:57 EVENT: PAUSE

2021-12-03 19:40:16 OS Event: WAKEUP

2021-12-03 19:40:19 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:40:19 STANDARD RESUME

2021-12-03 19:40:19 EVENT: RESUME

2021-12-03 19:40:19 EVENT: RECONNECTING

2021-12-03 19:40:19 EVENT: RESOLVE

2021-12-03 19:40:19 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:40:19 EVENT: WAIT

2021-12-03 19:40:19 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:40:19 EVENT: CONNECTING

2021-12-03 19:40:19 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:40:19 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:40:19 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:40:19 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:40:19 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:40:19 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:40:19 Session is ACTIVE

2021-12-03 19:40:19 EVENT: GET_CONFIG

2021-12-03 19:40:19 Sending PUSH_REQUEST to server...

2021-12-03 19:40:19 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:40:19 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:40:19 EVENT: ASSIGN_IP

2021-12-03 19:40:19 NIP: preparing TUN network settings

2021-12-03 19:40:19 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:40:19 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:40:19 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:40:19 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:40:19 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:40:19 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:40:19 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:40:19 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:40:19 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:40:19 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:40:19 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:40:19 Connected via NetworkExtensionTUN

2021-12-03 19:40:19 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:42:10 OS Event: SLEEP

2021-12-03 19:42:10 EVENT: PAUSE

2021-12-03 19:42:49 OS Event: WAKEUP

2021-12-03 19:42:52 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:42:52 STANDARD RESUME

2021-12-03 19:42:52 EVENT: RESUME

2021-12-03 19:42:52 EVENT: RECONNECTING

2021-12-03 19:42:52 EVENT: RESOLVE

2021-12-03 19:42:52 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:42:52 EVENT: WAIT

2021-12-03 19:42:52 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:42:52 EVENT: CONNECTING

2021-12-03 19:42:52 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:42:52 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:42:52 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:42:52 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:42:52 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:42:52 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:42:52 Session is ACTIVE

2021-12-03 19:42:52 EVENT: GET_CONFIG

2021-12-03 19:42:52 Sending PUSH_REQUEST to server...

2021-12-03 19:42:52 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:42:52 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:42:52 EVENT: ASSIGN_IP

2021-12-03 19:42:52 NIP: preparing TUN network settings

2021-12-03 19:42:52 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:42:52 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:42:52 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:42:52 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:42:52 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:42:52 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:42:52 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:42:52 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:42:52 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:42:52 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:42:52 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:42:52 Connected via NetworkExtensionTUN

2021-12-03 19:42:52 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:44:35 OS Event: SLEEP

2021-12-03 19:44:35 EVENT: PAUSE

2021-12-03 19:45:38 OS Event: WAKEUP

2021-12-03 19:45:41 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:45:41 STANDARD RESUME

2021-12-03 19:45:41 EVENT: RESUME

2021-12-03 19:45:41 EVENT: RECONNECTING

2021-12-03 19:45:41 EVENT: RESOLVE

2021-12-03 19:45:41 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:45:41 EVENT: WAIT

2021-12-03 19:45:41 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:45:41 EVENT: CONNECTING

2021-12-03 19:45:41 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:45:41 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:45:41 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:45:41 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:45:41 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:45:41 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:45:41 Session is ACTIVE

2021-12-03 19:45:41 EVENT: GET_CONFIG

2021-12-03 19:45:41 Sending PUSH_REQUEST to server...

2021-12-03 19:45:41 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:45:41 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:45:41 EVENT: ASSIGN_IP

2021-12-03 19:45:41 NIP: preparing TUN network settings

2021-12-03 19:45:41 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:45:41 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:45:41 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:45:41 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:45:41 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:45:41 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:45:41 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:45:41 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:45:41 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:45:41 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:45:41 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:45:41 Connected via NetworkExtensionTUN

2021-12-03 19:45:41 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:47:10 OS Event: SLEEP

2021-12-03 19:47:10 EVENT: PAUSE

2021-12-03 19:48:40 OS Event: WAKEUP

2021-12-03 19:48:43 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:48:43 STANDARD RESUME

2021-12-03 19:48:43 EVENT: RESUME

2021-12-03 19:48:43 EVENT: RECONNECTING

2021-12-03 19:48:43 EVENT: RESOLVE

2021-12-03 19:48:44 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:48:44 EVENT: WAIT

2021-12-03 19:48:44 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:48:44 EVENT: CONNECTING

2021-12-03 19:48:44 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:48:44 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:48:44 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:48:44 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:48:44 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:48:44 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:48:44 Session is ACTIVE

2021-12-03 19:48:44 EVENT: GET_CONFIG

2021-12-03 19:48:44 Sending PUSH_REQUEST to server...

2021-12-03 19:48:44 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:48:44 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:48:44 EVENT: ASSIGN_IP

2021-12-03 19:48:44 NIP: preparing TUN network settings

2021-12-03 19:48:44 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:48:44 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:48:44 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:48:44 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:48:44 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:48:44 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:48:44 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:48:44 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:48:44 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:48:44 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:48:44 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:48:44 Connected via NetworkExtensionTUN

2021-12-03 19:48:44 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:48:48 OS Event: SLEEP

2021-12-03 19:48:48 EVENT: PAUSE

2021-12-03 19:48:49 OS Event: WAKEUP

2021-12-03 19:48:52 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:48:52 STANDARD RESUME

2021-12-03 19:48:52 EVENT: RESUME

2021-12-03 19:48:52 EVENT: RECONNECTING

2021-12-03 19:48:52 EVENT: RESOLVE

2021-12-03 19:48:52 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:48:52 EVENT: WAIT

2021-12-03 19:48:52 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:48:59 EVENT: CONNECTING

2021-12-03 19:49:18 OS Event: SLEEP

2021-12-03 19:49:18 EVENT: PAUSE

2021-12-03 19:50:19 OS Event: WAKEUP

2021-12-03 19:50:22 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:50:22 STANDARD RESUME

2021-12-03 19:50:22 EVENT: RESUME

2021-12-03 19:50:22 EVENT: RECONNECTING

2021-12-03 19:50:22 EVENT: RESOLVE

2021-12-03 19:50:22 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:50:22 EVENT: WAIT

2021-12-03 19:50:22 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:50:22 EVENT: CONNECTING

2021-12-03 19:50:22 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:50:22 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:50:22 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:50:22 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:50:22 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:50:22 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:50:22 Session is ACTIVE

2021-12-03 19:50:22 EVENT: GET_CONFIG

2021-12-03 19:50:22 Sending PUSH_REQUEST to server...

2021-12-03 19:50:22 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:50:22 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:50:22 EVENT: ASSIGN_IP

2021-12-03 19:50:22 NIP: preparing TUN network settings

2021-12-03 19:50:22 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:50:22 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:50:22 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:50:22 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:50:22 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:50:22 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:50:22 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:50:22 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:50:22 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:50:22 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:50:22 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:50:22 Connected via NetworkExtensionTUN

2021-12-03 19:50:22 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 19:50:30 OS Event: SLEEP

2021-12-03 19:50:30 EVENT: PAUSE

2021-12-03 19:55:48 OS Event: WAKEUP

2021-12-03 19:55:51 RESUME TEST: Internet:ReachableViaWiFi/-R -------

2021-12-03 19:55:51 STANDARD RESUME

2021-12-03 19:55:51 EVENT: RESUME

2021-12-03 19:55:51 EVENT: RECONNECTING

2021-12-03 19:55:51 EVENT: RESOLVE

2021-12-03 19:55:59 Transport Error: DNS resolve error on 'vpndomain.com' for UDP session: DNS/RRset does not exist

2021-12-03 19:55:59 Client terminated, restarting in 2000 ms...

2021-12-03 19:55:59 NIP: iOS reported network status unavailable

2021-12-03 19:55:59 OS Event: NET UNAVAILABLE (PAUSE): Internet:NotReachable/-- -------

2021-12-03 19:55:59 EVENT: PAUSE

2021-12-03 19:56:00 NIP: iOS reported network status available

2021-12-03 19:56:00 OS Event: NET AVAILABLE (RESUME): Internet:ReachableViaWWAN/WR t------ allow=1

2021-12-03 19:56:03 RECONNECT TEST: Internet:ReachableViaWWAN/WR t------

2021-12-03 19:56:03 ACTIVE PAUSE

2021-12-03 19:56:04 RESUME TEST: Internet:ReachableViaWWAN/WR t------

2021-12-03 19:56:04 STANDARD RESUME

2021-12-03 19:56:04 EVENT: RESUME

2021-12-03 19:56:04 EVENT: RECONNECTING

2021-12-03 19:56:04 EVENT: RESOLVE

2021-12-03 19:56:04 Contacting [x.x.x.62]:1194/UDP via UDP

2021-12-03 19:56:04 EVENT: WAIT

2021-12-03 19:56:04 Connecting to [vpndomain.com]:1194 (x.x.x.62) via UDPv4

2021-12-03 19:56:04 EVENT: CONNECTING

2021-12-03 19:56:04 Tunnel Options:V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,keydir 1,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client

2021-12-03 19:56:04 Creds: UsernameEmpty/PasswordEmpty

2021-12-03 19:56:04 Peer Info:
IV_VER=3.git::58b92569
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_AUTO_SESS=1
IV_GUI_VER=net.openvpn.connect.ios_3.2.3-3760
IV_SSO=openurl
IV_BS64DL=1


2021-12-03 19:56:04 VERIFY OK: depth=1, /CN=OpenVPN

2021-12-03 19:56:04 VERIFY OK: depth=0, /CN=vpndomain.com

2021-12-03 19:56:04 SSL Handshake: CN=vpndomain.com, TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2021-12-03 19:56:04 Session is ACTIVE

2021-12-03 19:56:04 EVENT: GET_CONFIG

2021-12-03 19:56:04 Sending PUSH_REQUEST to server...

2021-12-03 19:56:04 OPTIONS:
0 [tun-ipv6] 
1 [route] [a.a.a66] [255.255.255.255] 
2 [route] [b.b.b.10] [255.255.255.255] 
3 [route] [b.b.b.11] [255.255.255.255] 
4 [route] [b.b.b.246] [255.255.255.255] 
5 [route] [c.c.c.4] [255.255.255.255] 
6 [route-ipv6] [z:z:z:1::/64] 
7 [tun-ipv6] 
8 [route-gateway] [y.y.y.1] 
9 [topology] [subnet] 
10 [ping] [5] 
11 [ping-restart] [60] 
12 [ifconfig-ipv6] [z:z:z:6::1003/64] [z:z:z:6::1] 
13 [ifconfig] [y.y.y.5] [255.255.255.0] 
14 [peer-id] [0] 
15 [cipher] [AES-256-GCM] 


2021-12-03 19:56:04 PROTOCOL OPTIONS:
cipher: AES-256-GCM
digest: NONE
compress: NONE
peer ID: 0

2021-12-03 19:56:04 EVENT: ASSIGN_IP

2021-12-03 19:56:04 NIP: preparing TUN network settings

2021-12-03 19:56:04 NIP: init TUN network settings with endpoint: x.x.x.62

2021-12-03 19:56:04 NIP: adding IPv4 address to network settings y.y.y.5/255.255.255.0

2021-12-03 19:56:04 NIP: adding (included) IPv4 route y.y.y.0/24

2021-12-03 19:56:04 NIP: adding IPv6 address to network settings z:z:z:6::1003/64

2021-12-03 19:56:04 NIP: adding (included) IPv6 route z:z:z:6::/64

2021-12-03 19:56:04 NIP: adding (included) IPv4 route a.a.a66/32

2021-12-03 19:56:04 NIP: adding (included) IPv4 route b.b.b.10/32

2021-12-03 19:56:04 NIP: adding (included) IPv4 route b.b.b.11/32

2021-12-03 19:56:04 NIP: adding (included) IPv4 route b.b.b.246/32

2021-12-03 19:56:04 NIP: adding (included) IPv4 route c.c.c.4/32

2021-12-03 19:56:04 NIP: adding (included) IPv6 route z:z:z:1::/64

2021-12-03 19:56:04 Connected via NetworkExtensionTUN

2021-12-03 19:56:04 EVENT: CONNECTED vpndomain.com:1194 (x.x.x.62) via /UDPv4 on NetworkExtensionTUN/y.y.y.5/z:z:z:6::1003 gw=[/]

2021-12-03 20:16:44 NIP: iOS reported network status unavailable

2021-12-03 20:16:44 OS Event: NET UNAVAILABLE (PAUSE): Internet:NotReachable/W- -------

Server Log:

@server /var/log: grep "2021-12-03" openvpn.log-20211205  | grep "20:" | grep client-id
2021-12-03 01:20:36 us=735298 z.z.z.47:11669 VERIFY OK: depth=0, CN=client-id
2021-12-03 09:24:26 us=814581 client-id/x.x.x.2:46620 MULTI: primary virtual IP for client-id/x.x.x.2:46620: y.y.y.5
2021-12-03 09:24:26 us=814619 client-id/x.x.x.2:46620 MULTI: primary virtual IPv6 for client-id/x.x.x.2:46620: z:z:z:6::1003
2021-12-03 10:49:40 us=941537 client-id/x.x.x.2:34220 MULTI: primary virtual IP for client-id/x.x.x.2:34220: y.y.y.5
2021-12-03 10:49:40 us=941592 client-id/x.x.x.2:34220 MULTI: primary virtual IPv6 for client-id/x.x.x.2:34220: z:z:z:6::1003
2021-12-03 15:20:31 us=136930 client-id/x.x.x.2:43810 SIGTERM[soft,remote-exit] received, client-instance exiting
2021-12-03 15:20:35 us=752629 x.x.x.2:41450 VERIFY OK: depth=0, CN=client-id
2021-12-03 15:20:35 us=780804 x.x.x.2:41450 [client-id] Peer Connection Initiated with [AF_INET]x.x.x.2:41450
2021-12-03 15:20:35 us=780883 client-id/x.x.x.2:41450 MULTI_sva: pool returned IPv4=y.y.y.5, IPv6=z:z:z:6::1003
2021-12-03 15:20:35 us=781009 client-id/x.x.x.2:41450 MULTI: Learn: y.y.y.5 -> client-id/x.x.x.2:41450
2021-12-03 15:20:35 us=781038 client-id/x.x.x.2:41450 MULTI: primary virtual IP for client-id/x.x.x.2:41450: y.y.y.5
2021-12-03 15:20:35 us=781070 client-id/x.x.x.2:41450 MULTI: Learn: z:z:z:6::1003 -> client-id/x.x.x.2:41450
2021-12-03 15:20:35 us=781098 client-id/x.x.x.2:41450 MULTI: primary virtual IPv6 for client-id/x.x.x.2:41450: z:z:z:6::1003
2021-12-03 15:20:35 us=781178 client-id/x.x.x.2:41450 Data Channel: using negotiated cipher 'AES-256-GCM'
2021-12-03 15:20:35 us=781225 client-id/x.x.x.2:41450 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
2021-12-03 15:20:35 us=781399 client-id/x.x.x.2:41450 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-12-03 15:20:35 us=781428 client-id/x.x.x.2:41450 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2021-12-03 15:20:35 us=787246 client-id/x.x.x.2:41450 PUSH: Received control message: 'PUSH_REQUEST'
2021-12-03 15:20:35 us=787402 client-id/x.x.x.2:41450 SENT CONTROL [client-id]: 'PUSH_REPLY,tun-ipv6,route a.a.a.66 255.255.255.255,route b.b.b.10 255.255.255.255,route b.b.b.11 255.255.255.255,route b.b.b.246 255.255.255.255,route c.c.c.4 255.255.255.255,route-ipv6 z:z:z:1::/64,tun-ipv6,route-gateway y.y.y.1,topology subnet,ping 5,ping-restart 60,ifconfig-ipv6 z:z:z:6::1003/64 z:z:z:6::1,ifconfig y.y.y.5 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
2021-12-03 15:20:43 us=688031 client-id/x.x.x.2:41450 SIGTERM[soft,remote-exit] received, client-instance exiting
2021-12-03 20:18:11 us=28524 client-id/z.z.z.71:22861 [client-id] Inactivity timeout (--ping-restart), restarting
2021-12-03 20:18:11 us=28657 client-id/z.z.z.71:22861 SIGUSR1[soft,ping-restart] received, client-instance restarting
@server /var/log:

The server log is filtered to just hits for the client in question. The best part here, is I have a pretty solid hint of what was happening to the client hardware (aka the iphone) at the time it disconnected. I entered an underground parking garage with zero cell or wifi signal.

Looks like the issue here, is the openvpn client on the iphone simply didn't attempt to reconnect (as I couldn't have been in the garage/out of service > 5 minutes realistically speaking). This might explain how this keeps happening (as the parking garage near work has no reception on the bottom floor, at least one site has no reception in the elevators once the doors close, etc.

Thoughts? Is this enough detail to diagnose?

porcupine

So uh, given the > 10 days of inactivity, I'm gonna guess this is just one of those things that either nobody knows how to fix, or can't be fixed in the current version of the app/setup/etc?

It's super frustrating, but at least we've figured out how to reproduce it with reasonable consistency (and know when we're liable to run into it, so we spot it and restart the vpn)...

TinCanTech

You said you understood the problem .. the car park.

There are no obvious problems in the snippets of the log you posted ...

This is dubious though:

data-ciphers AES-256-CBC
cipher AES-256-CBC
ncp-ciphers AES-256-GCM

I recommend that you only use --data-ciphers

porcupine

TinCanTech wrote You said you understood the problem .. the car park.

There are no obvious problems in the snippets of the log you posted ...

Well it's not the car park that's the problem. It's the fact the IOS app doesn't retry connecting when it's got no internet access. It seems once it knows it has no internet access, it goes to sleep, and it's game over. That's not a problem any end user can resolve obviously.

TinCanTech wrote This is dubious though:

data-ciphers AES-256-CBC
cipher AES-256-CBC
ncp-ciphers AES-256-GCM

I recommend that you only use --data-ciphers

Hrm, I can take a poke into removing them, are they deprecated? I didn't spot anything indicating as such (likely a leftover from initial setup).

TinCanTech

porcupine wrote It's the fact the IOS app doesn't retry connecting when it's got no internet access

It can't connect until access is restored. Sorry, I don't know how to setup your phone.

porcupine wrote are they deprecated?

Yes and almost .. https://community.openvpn.net/openvpn/wiki/CipherNegotiation

porcupine

TinCanTech wrote
porcupine wrote It's the fact the IOS app doesn't retry connecting when it's got no internet access
It can't connect until access is restored. Sorry, I don't know how to setup your phone.

I feel like there might be a bit of a miscommunication here.

What I'm saying is, this behaviour appears to be reproducible on [multiple] IOS devices, where once the phone looses internet connectivity on both Wifi and LTE for some arbitrary amount of time [short, IE: < 10 minutes], the app will no longer obey the app configured directive for "Connection Timeout - Continuously Retry", which is what appears to be causing the issue I'm describing.

For clarity, I don't expect the app to magically connect without any internet connection, but I do expect the app to "continuously retry" when that's it's configured directive (which would then presumably manage to reconnect, once the phone did have internet access again, right?).

This is a configuration directive set in the Openvpn IOS app, it's not some general phone setting, for absolute clarity.

TinCanTech wrote
porcupine wrote are they deprecated?
Yes and almost .. https://community.openvpn.net/openvpn/wiki/CipherNegotiation

Fair enough, I'll pull the redundant directives out of the configuration.

TinCanTech

porcupine wrote What I'm saying is, this behaviour appears to be reproducible on [multiple] IOS devices, where once the phone looses internet connectivity on both Wifi and LTE for some arbitrary amount of time [short, IE: < 10 minutes], the app will no longer obey the app configured directive for "Connection Timeout - Continuously Retry", which is what appears to be causing the issue I'm describing.

For clarity, I don't expect the app to magically connect without any internet connection, but I do expect the app to "continuously retry" when that's it's configured directive (which would then presumably manage to reconnect, once the phone did have internet access again, right?).

ok.

This is the first time such a report has been made, I guess this could be an unexpected bug.

I recommend you raise a ticket for it here:
https://support.openvpn.com/hc/en-us/requests/new

porcupine

TinCanTech wrote
This is the first time such a report has been made, I guess this could be an unexpected bug.

I recommend you raise a ticket for it here:
https://support.openvpn.com/hc/en-us/requests/new

Fair enough, I've done so 🙂

ovpn_user

porcupine wrote So uh, given the > 10 days of inactivity, I'm gonna guess this is just one of those things that either nobody knows how to fix, or can't be fixed in the current version of the app/setup/etc?

It's super frustrating, but at least we've figured out how to reproduce it with reasonable consistency (and know when we're liable to run into it, so we spot it and restart the vpn)...

Chiming in with "me too!" I'm running OpenVPN client 3.2.3 (though I've had this problem for quite a while so multiple versions) on an iphone 12 mini currently at iOS 15.2 (version caveat applies as before), connecting to a self-hosted server running on an RPi4 currently running Linux pivpn 5.10.63-v7l+ #1496 and OpenVPN 2.4.7 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 28 2021
library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10

The problem began as I recall when I got this new phone early this year. I don't recall seeing it with my prior iPhone.

I see two issues:

The client will lose connection and cannot reconnect even when the phone has network access (the activity spinner in the app spins continously). However if I turn it off and back on it connects immediately.

The client will autonomously & silently turn itself off as porcupine describes. I will not realize it generally until I get home and go to turn it off, only to find it's already off.

I don't know if I'm having it turn off due to lost network access. I'm not driving through tunnels etc, just going about my day. There's no obvious clue when it happens. Very frustrating, and certainly insecure!

Is there a link to issue opened?

porcupine

Just to update this, per @TinCanTech's advice, I opened a ticket with the OpenVPN support team, linked to this thread. Unsurprisingly, immediately upon leaning I was inquiring about community edition, they washed their hands "no free support", as one does, exactly what I expected to happen.

That said, the language the operator used provided a little bit of insight on the matter, specifically:

OpenVPN Support wrote The issue you are describing appears to be related to the OpenVPN open source community version.

and

OpenVPN Support wrote To be fair, I also sent this to our QA app team to check, and hopefully, in the future release, this will be attended. Thanks! have a good one!

I'm not sure how the server edition used would have any impact on the app behaving properly, specifically when not connected to any server, unless this was an intentional leave-behind, but even for the paranoid, that wouldn't make any sense either (I mean who is going to buy a commercial product, when the free version doesn't work?).

That said, I got the distinct impression that this wasn't news to the operator, it was something they were properly aware of, for whatever reason.

TinCanTech

It seems to be the OpenVPN Inc. Goto solution: Not our problem .. Even though it clearly is.

Ass holes do the same in politics ... just deny everything.

ovpn_user

Well FWIW I've found that to reproduce the problem takes simply switching from one of my wifi networks to the other. So that comports with the car park scenario -- momentarily losing network access disables VPN reconnection.

I'm on one WLAN with VPN connected; I go to settings and select a different WLAN; the phone drops the first WLAN and connects to the second; and when I then check the VPN-enable slider in the app it's in the off position.

If the OpenVPN folks don't want to fix their app, are there recommended alternative apps that will work with my OpenVPN server?

vpn_usser

I can confirm the issue. Yesterday I've had upgraded from iOS 14.8.1 to iOS 15.3 and a VPN connection has started to disconnect after WiFi/LTE reconnects...
In OpenVPN options I have Continuosly Retry, so not the issue. No changes was made to any config related to OpenVPN clients or OpenVPN server - have been using the self-hosted OpenVPN server for years starting iOS 10 - worked well for reconnects (let's say in 99% cases). After upgrading to iOS 15.3 - VPN connection just dies when WiFi signal is low. Have to manually open the app or go to settings to re-establish.
So, the issue is related to OpenVPN connection re-establishing - probably, iOS 15 has changed something related to events for WiFi/LTE: connected/disconnected states etc. Looks like it can be the issue.

iOS 15.3
OpenVPN iOS 3.2.3 (3760)
Happens with unstable WiFi/LTE signal

openvpn_inc

porcupine wrote Just to update this, per @TinCanTech's advice, I opened a ticket with the OpenVPN support team, linked to this thread. Unsurprisingly, immediately upon leaning I was inquiring about community edition, they washed their hands "no free support", as one does, exactly what I expected to happen.

That said, the language the operator used provided a little bit of insight on the matter, specifically:

OpenVPN Support wrote The issue you are describing appears to be related to the OpenVPN open source community version.
and
OpenVPN Support wrote To be fair, I also sent this to our QA app team to check, and hopefully, in the future release, this will be attended. Thanks! have a good one!
I'm not sure how the server edition used would have any impact on the app behaving properly, specifically when not connected to any server, unless this was an intentional leave-behind, but even for the paranoid, that wouldn't make any sense either (I mean who is going to buy a commercial product, when the free version doesn't work?).

That said, I got the distinct impression that this wasn't news to the operator, it was something they were properly aware of, for whatever reason.

Hi porc,

I am one of those Support people, and no, we don't have a whole lot of iOS users of our commercial software (OpenVPN Access Server) or service (OpenVPN Cloud.) So if it has a bug we probably are not aware -- I sure was not. And we have very limited ability to try to reproduce such a bug. (I have a Mac, but not an iOS device.)

I agree, if we have an OpenVPN Connect bug, we should try to fix it, even if the reports are from non-customers. Higher-ups have told us this as well. Sure, we like to dispose of a ticket easily if we can, but i don't think our team would knowingly turn a blind eye toward a software bug. I am pleased with the people on our team.

Please post the ticket number here, and I will look into it. But I might not get to it before Tuesday because of my schedule.

regards, rob0

porcupine

Hi rob0,

Glad to hear it's gotten some traction! The ticket # was "400322", from 18-Dec-2021.

Let me know if there's anything else I can do to help. I have access to nearly every aspect of the equation for this issue, both as an impacted end user, but also root access on the vpn server, and the net/ip admin for the ASN in question. Everything except the cell carrier, I can test/fiddle with, granted I'm relatively green when it comes to openVPN 🙂.