r33006

 daemon.notice openvpn[1046]: OpenVPN 2.4.3 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug  3 2017
 daemon.notice openvpn[1046]: library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.09
 daemon.notice openvpn[1174]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
 daemon.warn openvpn[1174]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
 daemon.notice openvpn[1174]: Diffie-Hellman initialized with 2048 bit key
 daemon.warn openvpn[1174]: WARNING: Your certificate is not yet valid!
 daemon.notice openvpn[1174]: TUN/TAP device tun2 opened
 daemon.notice openvpn[1174]: TUN/TAP TX queue length set to 100
 daemon.notice openvpn[1174]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
 daemon.notice openvpn[1174]: /sbin/ifconfig tun2 10.19.63.225 netmask 255.255.255.224 mtu 1500 broadcast 10.19.63.255
 daemon.notice openvpn[1174]: Socket Buffers: R=[180224->180224] S=[180224->180224]
 daemon.notice openvpn[1174]: UDPv4 link local (bound): [AF_INET][undef]:xxxxx
 daemon.notice openvpn[1174]: UDPv4 link remote: [AF_UNSPEC]
 daemon.notice openvpn[1174]: MULTI: multi_init called, r=256 v=256
 daemon.notice openvpn[1174]: IFCONFIG POOL: base=10.19.63.226 size=28, ipv6=0
 daemon.notice openvpn[1174]: IFCONFIG POOL LIST

# cat /tmp/openvpn/openvpn.conf
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port xxxxx
proto udp4
cipher aes-256-cbc
auth sha256
client-connect /tmp/openvpn/clcon.sh
client-disconnect /tmp/openvpn/cldiscon.sh
client-config-dir /tmp/openvpn/ccd
comp-lzo adaptive
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
push "redirect-gateway def1"
fast-io
tun-mtu 1500
mtu-disc yes
server 10.19.63.224  255.255.255.224
dev tun2
push "route 10.72.28.0 255.255.254.0"
push "dhcp-option DNS 10.72.28.13"

--------------

r33194
 daemon.notice openvpn[1028]: OpenVPN 2.4.3 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug 24 2017
 daemon.notice openvpn[1028]: library versions: OpenSSL 1.1.0f  25 May 2017, LZO 2.09
 daemon.notice openvpn[1158]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
 daemon.warn openvpn[1158]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
 daemon.notice openvpn[1158]: Diffie-Hellman initialized with 2048 bit key
 daemon.err openvpn[1158]: OpenSSL: error:140AB18E:lib(20):func(171):reason(398)
 daemon.err openvpn[1158]: Cannot load certificate file /tmp/openvpn/cert.pem
 daemon.notice openvpn[1158]: Exiting due to fatal error

# cat /tmp/openvpn/openvpn.conf
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port xxxxx
proto udp4
cipher aes-256-cbc
auth sha256
client-connect /tmp/openvpn/clcon.sh
client-disconnect /tmp/openvpn/cldiscon.sh
client-config-dir /tmp/openvpn/ccd
comp-lzo adaptive
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
push "redirect-gateway def1"
fast-io
tun-mtu 1500
mtu-disc yes
server 10.19.63.224  255.255.255.224
dev tun2
push "route 10.72.28.0 255.255.254.0"
push "dhcp-option DNS 10.72.28.13"