Openvpn issues with TLS

Installing and Using OpenWrt
1

We havent finished testing in previous thread https://forum.openwrt.org/t/openvpn-installation-multiple-howtos/28768

I tried openvpn osx client and all works fine with TLS, so it looks like it was issue with win7.

I checked the last version of https://openwrt.org/docs/guide-user/services/vpn/openvpn/basic and now its seems its pretty messy...

Another thing is that my openvpn server is running as : --config openvpn-vpnserver.conf, where conf is store in /tmp/etc/openvpn-vpnserver.conf , why in /tmp/etc ??? pretty mess.

2

also server conf contains these section two times

push "redirect-gateway def1"
push "dhcp-option DOMAIN lan"
push "dhcp-option DNS 10.0.1.1"
push "persist-tun"
push "persist-key"
push "redirect-gateway def1"
push "dhcp-option DOMAIN lan"
push "dhcp-option DNS 10.0.1.1"
push "persist-tun"
push "persist-key"

is there any easy way how can i remove one occurrence?

3

Good thing you figured it out.

It seems you are using some previous guide version which utilizes UCI configuration.
It's designed to operate this way by OpenWrt developers to separate runtime configuration from persistent.
The current version of the guide uses a simpler approach.
Both methods have their pros and cons.

uci delete openvpn.vpnserver.push
uci add_list openvpn.vpnserver.push="redirect-gateway def1"
uci add_list openvpn.vpnserver.push="dhcp-option DOMAIN lan"
uci add_list openvpn.vpnserver.push="dhcp-option DNS 10.0.1.1"
uci add_list openvpn.vpnserver.push="persist-tun"
uci add_list openvpn.vpnserver.push="persist-key"
uci commit openvpn
service openvpn restart