OPENVPN reconnect/resume after Provider initiated disconnect

[lomex]

Hi !

I successfully established a vpn between my client (sitting behind a DSL NAT-device) and a server on the internet - Whenever the line gets interrupted (i.e. Provider initiated DSL disconnect after 8 hours) the vpn needs to be restarted manually - which is quite annoying.
Is there any feature available to overcome this issue ?
When the line gets interupted the following logs are seen:

Sat Jun 18 19:24:57 2011 read UDPv4 [ENETUNREACH]: Network is unreachable (code=128)
Sat Jun 18 19:24:58 2011 read UDPv4 [ENETUNREACH]: Network is unreachable (code=128)
Sat Jun 18 19:25:00 2011 read UDPv4 [ENETUNREACH]: Network is unreachable (code=128)
Sat Jun 18 19:25:04 2011 read UDPv4 [ENETUNREACH]: Network is unreachable (code=128)
Sat Jun 18 19:25:11 2011 read UDPv4 [ENETUNREACH]: Network is unreachable (code=128)
Sat Jun 18 19:25:28 2011 read UDPv4 [ENETUNREACH]: Network is unreachable (code=128)
Sat Jun 18 19:25:39 2011 read UDPv4 [ENETUNREACH]: Network is unreachable (code=128)
Sat Jun 18 19:26:51 2011 [xxxx_SRV] Inactivity timeout (--ping-restart), restarting
Sat Jun 18 19:26:51 2011 TCP/UDP: Closing socket
Sat Jun 18 19:26:51 2011 /sbin/route del -net 10.100.0.1 netmask 255.255.255.255
route: SIOCDELRT: Operation not permitted
Sat Jun 18 19:26:51 2011 ERROR: Linux route delete command failed: external program exited with error status: 1
Sat Jun 18 19:26:51 2011 Closing TUN/TAP interface
Sat Jun 18 19:26:51 2011 /sbin/ifconfig tun0 0.0.0.0
ifconfig: SIOCSIFADDR: Permission denied
Sat Jun 18 19:26:51 2011 Linux ip addr del failed: external program exited with error status: 1
Sat Jun 18 19:26:51 2011 SIGUSR1[soft,ping-restart] received, process restarting
Sat Jun 18 19:26:51 2011 Restart pause, 2 second(s)
Sat Jun 18 19:26:53 2011 WARNING: you are using user/group/chroot/setcon without persist-tun -- this may cause restarts to fail
Sat Jun 18 19:26:53 2011 WARNING: you are using user/group/chroot/setcon without persist-key -- this may cause restarts to fail
Sat Jun 18 19:26:53 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Jun 18 19:26:53 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Jun 18 19:26:53 2011 Cannot load certificate file /etc/openvpn/xyz.crt: error:0200100D:system library:fopen:Permission denied: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib


thx
Hans

[janjust]

the warnings pretty much say it all: either drop the 'user nobody' statement (which I'd not recommend) or add

Code: Select all

persist-key
persist-tun

to the client config file to enable automatic recovery.