[Bug]: No internet yet openvpn shows im getting data & Wireguard on same VPS works just fine.

[HyptexPvP]

Make sure your check these beforehand!

• Issues - https://github.com/angristan/openvpn-install/issues
• README and FAQ - https://github.com/angristan/openvpn-install
• Wiki - https://github.com/angristan/openvpn-install/wiki
• Discussions - https://github.com/angristan/openvpn-install/discussions

Server OS

Oracle Linux 8/Oracle Cloud Free (ARM)

OpenVPN version

2.4.12-1.el8

Client

Android Client v3.2.5(7182) / openvpn 2.5.6-1

What is the bug?

I expected for website's to load, but they aren't

For example I attempted to load openvpn.com on my android device. Either says im offline, DNS Error, Your network has been iterrupted etc (Im using chrome).

Running default port btw. Im not sure if the config is needed but i dont mind sending it.

On firefox (Im using linux with the openvpn package) It gave me a basic error but it was

An error occurred during a connection to www.google.com.

The site could be temporarily unavailable or too busy. Try again in a few moments.
If you are unable to load any pages, check your computer’s network connection.
If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web.

As I said wireguard works on the same VPS so im not sure what's so diffrent about it on openvpn.

Relevant log output

This is the log on linux.
2022-05-02 20:55:13 Unrecognized option or missing or extra parameter(s) in home/hyptex/Downloads/conf.ovpn:19: block-outside-dns (2.5.6)
2022-05-02 20:55:13 OpenVPN 2.5.6 [git:makepkg/e8df2e64d6f817e6+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 16 2022
2022-05-02 20:55:13 library versions: OpenSSL 1.1.1n  15 Mar 2022, LZO 2.10
2022-05-02 20:55:13 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2022-05-02 20:55:13 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2022-05-02 20:55:13 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
2022-05-02 20:55:13 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
2022-05-02 20:55:13 TCP/UDP: Preserving recently used remote address: [AF_INET]140.238.147.242:1194
2022-05-02 20:55:13 Socket Buffers: R=[212992->212992] S=[212992->212992]
2022-05-02 20:55:13 UDP link local: (not bound)
2022-05-02 20:55:13 UDP link remote: [AF_INET]140.238.147.242:1194
2022-05-02 20:55:13 TLS: Initial packet from [AF_INET]140.238.147.242:1194, sid=fa66bac8 7cf692d4
2022-05-02 20:55:13 VERIFY OK: depth=1, CN=cn_jj51pb8K59xkTHNK
2022-05-02 20:55:13 VERIFY KU OK
2022-05-02 20:55:13 Validating certificate extended key usage
2022-05-02 20:55:13 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2022-05-02 20:55:13 VERIFY EKU OK
2022-05-02 20:55:13 VERIFY X509NAME OK: CN=server_QDnyfBFyxqaqJkOA
2022-05-02 20:55:13 VERIFY OK: depth=0, CN=server_QDnyfBFyxqaqJkOA
2022-05-02 20:55:13 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 256 bit EC, curve prime256v1, signature: ecdsa-with-SHA256
2022-05-02 20:55:13 [server_QDnyfBFyxqaqJkOA] Peer Connection Initiated with [AF_INET]140.238.147.242:1194
2022-05-02 20:55:15 SENT CONTROL [server_QDnyfBFyxqaqJkOA]: 'PUSH_REQUEST' (status=1)
2022-05-02 20:55:15 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,redirect-gateway def1 bypass-dhcp,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 1,cipher AES-128-GCM'
2022-05-02 20:55:15 OPTIONS IMPORT: timers and/or timeouts modified
2022-05-02 20:55:15 OPTIONS IMPORT: --ifconfig/up options modified
2022-05-02 20:55:15 OPTIONS IMPORT: route options modified
2022-05-02 20:55:15 OPTIONS IMPORT: route-related options modified
2022-05-02 20:55:15 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2022-05-02 20:55:15 OPTIONS IMPORT: peer-id set
2022-05-02 20:55:15 OPTIONS IMPORT: adjusting link_mtu to 1624
2022-05-02 20:55:15 OPTIONS IMPORT: data channel crypto options modified
2022-05-02 20:55:15 Outgoing Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
2022-05-02 20:55:15 Incoming Data Channel: Cipher 'AES-128-GCM' initialized with 128 bit key
2022-05-02 20:55:15 net_route_v4_best_gw query: dst 0.0.0.0
2022-05-02 20:55:15 net_route_v4_best_gw result: via 192.168.2.1 dev wlp2s0
2022-05-02 20:55:15 ROUTE_GATEWAY 192.168.2.1/255.255.255.0 IFACE=wlp2s0 HWADDR=22:9c:96:11:fd:ef
2022-05-02 20:55:15 TUN/TAP device tun0 opened
2022-05-02 20:55:15 net_iface_mtu_set: mtu 1500 for tun0
2022-05-02 20:55:15 net_iface_up: set tun0 up
2022-05-02 20:55:15 net_addr_v4_add: 10.8.0.2/24 dev tun0
2022-05-02 20:55:15 net_route_v4_add: 140.238.147.242/32 via 192.168.2.1 dev [NULL] table 0 metric -1
2022-05-02 20:55:15 net_route_v4_add: 0.0.0.0/1 via 10.8.0.1 dev [NULL] table 0 metric -1
2022-05-02 20:55:15 net_route_v4_add: 128.0.0.0/1 via 10.8.0.1 dev [NULL] table 0 metric -1
2022-05-02 20:55:15 Initialization Sequence Completed

[Zincr0]

Same problem on ubuntu 20.04

Fixed (at least on this system): It was a bug on the kde network manager https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/1847144 (user needs to create manually the static key on the client).

[ohld]

@Zincr0 Thanks for the link, I read it but it is not clear how to apply those fixes to current openvpn-install shell script. Any ideas?