Remove this,
Code: Select all
ipconfig-pool-persist ipp.txt
It is spelled wrongly...
There is a better way to reserve tunnel IP but first try it.
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Code: Select all
ipconfig-pool-persist ipp.txt
Code: Select all
port ###<change
proto udp
dev tun
ca ca.crt
cert issued/server.crt
key private/server.key
dh dh.pem
topology subnet
server 172.16.0.0 255.255.255.0
#ipconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 10.10.10.1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 60
tls-auth ta.key 0
cipher AES-256-CBC
#comp-lzo
#user nobody
#group nobody
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
#log-append /var/log/openvpn/openvpn.log ###< for per start log, see log /var/log/openvpn/openvpn.log
log /var/log/openvpn/openvpn.log
verb 4
explicit-exit-notify 1
auth SHA512
route 10.10.10.1 255.255.255.0
Code: Select all
client
#tls-client ###<client already does this
#pull ###<client already does this
dev tun
proto udp
remote hostname port ###<change
resolv-retry infinite
nobind
#dhcp-option DNS 8.8.8.8
persist-key
persist-tun
#key-direction 1 ###<no need, see tls-auth ta.key 1
tls-auth ta.key 1
#comp-lzo
verb 4
ca ca.crt
cert client.crt
key client.key
auth SHA512
cipher AES-256-CBC
#client-config-dir ccd ###<server side option here???
explicit-exit-notify 2
Indeed ..
Code: Select all
Options error: --client-config-dir/--ccd-exclusive requires --mode server
Use --help for more information.
Code: Select all
client
#tls-client
#pull
dev tun
proto udp
remote server port
resolv-retry infinite
nobind
#dhcp-option DNS 8.8.8.8
persist-key
persist-tun
#key-direction 1
verb 4
auth SHA512
cipher AES-256-CBC
#client-config-dir ccd
<ca>
----BEGIN CERTIFICATE-----
----END CERTIFICATE-----
</ca>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
Done each time. I figured it wasn't reloading the profile via app restarts anyway.TinCanTech wrote: ↑Mon Aug 01, 2022 11:58 pmIf the app is Android then the option is probably ignored.
Code: Select all
client
dev tun
proto udp
remote server port
resolv-retry infinite
nobind
persist-key
persist-tun
verb 4
auth SHA512
cipher AES-256-CBC
<ca>
----BEGIN CERTIFICATE-----
----END CERTIFICATE-----
</ca>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>