As title says.
Windows with Openvpn Connect - can open links like https://cms.prod.int
Windows with Community openvpn - site not found
Ubuntu 20.04 + openvpn - site not found
server 10.1.1.0 255.255.255.0
verb 3
crl-verify /etc/openvpn/certs/crl.pem
key /etc/openvpn/certs/pki/private/server.key
ca /etc/openvpn/certs/pki/ca.crt
cert /etc/openvpn/certs/pki/issued/server.crt
dh /etc/openvpn/certs/pki/dh.pem
cipher AES-256-CBC
key-direction 0
keepalive 10 60
persist-key
persist-tun
proto udp
port 443
dev tun0
status /tmp/openvpn-status.log
user nobody
group nogroup
push "route 10.1.16.0 255.255.240.0"
push "route 10.1.16.0 255.255.240.0"
push "route 10.1.32.0 255.255.240.0"
push "dhcp-option DNS 10.1.32.10"
push "route 10.1.0.0 255.255.255.0"
push "route 1.2.3.4 255.255.255.255"
client
nobind
dev tun
remote vpn.mysite.com 443 udp
cipher AES-256-CBC
script-security 2
up /etc/openvpn/update-systemd-resolved
up-restart
down /etc/openvpn/update-systemd-resolved
down-pre
...(keys and certs)
$ ls -la /etc/openvpn
drwxr-xr-x 2 root root 4096 lip 19 2021 client
-rw-r--r-- 1 root root 7432 lip 1 10:49 client.conf
drwxr-xr-x 2 root root 4096 lip 19 2021 server
-rwxr-xr-x 1 root root 1468 lip 19 2021 update-resolv-conf
-rwxr-xr-x 1 root root 12009 maj 19 2019 update-systemd-resolved
To show you the logs i stop openvpn@client service and run the file manually ....
$ sudo openvpn Insync/dominik.panda@mycompany.com/ENVs/prod/vpn/client.ovpn
Wed Jul 6 15:28:52 2022 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 22 2022
Wed Jul 6 15:28:52 2022 library versions: OpenSSL 1.1.1f 31 Mar 2020, LZO 2.10
Wed Jul 6 15:28:52 2022 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Wed Jul 6 15:28:52 2022 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jul 6 15:28:52 2022 TCP/UDP: Preserving recently used remote address: [AF_INET]vpn.mysite.com:443
Wed Jul 6 15:28:52 2022 UDP link local: (not bound)
Wed Jul 6 15:28:52 2022 UDP link remote: [AF_INET]vpn.mysite.com:443
Wed Jul 6 15:28:53 2022 [server] Peer Connection Initiated with [AF_INET]vpn.mysite.com:443
Wed Jul 6 15:28:54 2022 TUN/TAP device tun0 opened
Wed Jul 6 15:28:54 2022 /sbin/ip link set dev tun0 up mtu 1500
Wed Jul 6 15:28:54 2022 /sbin/ip addr add dev tun0 local 10.1.1.26 peer 10.1.1.25
Wed Jul 6 15:28:54 2022 /etc/openvpn/update-systemd-resolved tun0 1500 1557 10.1.1.26 10.1.1.25 init
<14>Jul 6 15:28:54 update-systemd-resolved: Link 'tun0' coming up
<14>Jul 6 15:28:54 update-systemd-resolved: Adding IPv4 DNS Server 10.1.32.10
<14>Jul 6 15:28:54 update-systemd-resolved: SetLinkDNS(102 1 2 4 10 1 32 10)
RTNETLINK answers: File exists
Wed Jul 6 15:28:54 2022 ERROR: Linux route add command failed: external program exited with error status: 2
Wed Jul 6 15:28:54 2022 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
