I've been doing much research and trying out different configurations on my own but nothing seems to solve the issue. I have the OpenVPN server.conf set with "inactive 60 1000000". It's short for testing purposes.
When the inactive triggers, the openvpn logs get the following lines, which seem correct:
Code: Select all
Inactivity timeout (--inactive), exiting
SIGTERM[soft,inactive] received, client-instance exiting
Am I doing something wrong? Is this intended behaviour? Are the client side applications supposed to automatically disconnect in a more visible/transparent manner?
My Server Conf (server.conf)
Server Config
management localhost 7505
log /var/log/openvpn/openvpn.log
status /etc/openvpn/openvpn-status.log
local 172.31.76.155
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"
inactive 60 1000000
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
verb 3
crl-verify crl.pem
explicit-exit-notify
log /var/log/openvpn/openvpn.log
status /etc/openvpn/openvpn-status.log
local 172.31.76.155
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "block-outside-dns"
inactive 60 1000000
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
verb 3
crl-verify crl.pem
explicit-exit-notify
Shared Client Config (client-common.txt)
Shared Client Config
client
dev tun
proto udp
remote 35.170.250.83 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
ignore-unknown-option block-outside-dns
verb 3
dev tun
proto udp
remote 35.170.250.83 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
ignore-unknown-option block-outside-dns
verb 3