Hi
OpenVPN Connect on macOS, both on updated versions:
macOS: 26.3.1 (a)
OpenVPN Connect: 3.8.1 (5790)
OpenVPN config sent to clients:
setenv FRIENDLY_NAME "My Company"
client
tls-client
pull
dev tun
proto udp4
remote openvpn.example.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
auth-nocache
verb 4
auth SHA512
cipher AES-256-GCM
push-peer-info
OpenVPN server config file:
port 1194
proto udp4
dev tun
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/cph.crt
key /etc/openvpn/easy-rsa/pki/private/cph.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/pki/dh.pem
crl-verify /etc/openvpn/easy-rsa/pki/crl.pem
topology subnet
server 10.37.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 192.168.37.51"
push "dhcp-option DOMAIN company.local"
push "dhcp-option DOMAIN-SEARCH company.local"
push "route 192.168.37.0 255.255.255.0"
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/pki/ta.key 0 # This file is secret
cipher AES-256-GCM
user nobody
group nobody
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log-append /var/log/openvpn/openvpn.log
verb 4
explicit-exit-notify 1
auth SHA512
script-security 2
Issue is that DNS names such as somehost.company.local aren't resolved. I suspect they are sent to global DNS servers. "somehost" is resolved by 192.168.0.51, correctly. Curiously, some apps on macOS work fine (Safari, Terminal) whereas others do not (Chrome, Windows App.)
So, for example, in Chrome, trying to open "https://intranet.company.local" does not work, but "https://intranet/" does (but now we have certificate issues. In Safari, everything works fine.
I know the .local is unfortunate, but it'll require a ton of work to change it.
