Ok, this morning I startet VPN at around 6:30 and was then away for half an hour and at around 7:00 when I activated my Mac again, it prompted me for password.
In the log I see at start:
2026-04-15 06:32:54.409762 *Tunnelblick: macOS 26.4.1 (25E253); Tunnelblick 8.0.1 (build 6301); prior version 8.0 (build 6300)
2026-04-15 06:32:55.021772 *Tunnelblick: Attempting connection with XXXXXX-VPN using shadow copy; Set nameserver = 0x00000301; monitoring connection
...
2026-04-15 06:32:55.474214 OpenVPN 2.6.14 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD]
...
2026-04-15 06:32:55.647379 *Tunnelblick: openvpnstart log:
*Tunnelblick: Some entries have been removed because the log is too long
Then around 15min later I see 350 times the same log message:
2026-04-15 06:48:19.206672 AEAD Decrypt error: bad packet ID (may be a replay): [ #624294 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
2026-04-15 06:48:19.265082 AEAD Decrypt error: bad packet ID (may be a replay): [ #624646 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
2026-04-15 06:48:19.265156 AEAD Decrypt error: bad packet ID (may be a replay): [ #624647 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
...
And then I see the restart:
2026-04-15 07:03:01.642076 [XXXXXX-VPN-USER] Inactivity timeout (--ping-restart), restarting
2026-04-15 07:03:01.786295 SIGUSR1[soft,ping-restart] received, process restarting
2026-04-15 07:03:01.788498 MANAGEMENT: >STATE:1776229381,RECONNECTING,ping-restart,,,,,
...