Ubuntu
openvpn package

please merge openvpn from debian

Bug #1536568 reported by Gianfranco Costamagna on 2016-01-21

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	openvpn (Ubuntu)	Fix Released	Undecided	Unassigned

Bug Description

attached debdiff

Revision history for this message

Gianfranco Costamagna (costamagnagianfranco) wrote on 2016-01-21:

debdiff Edit (31.0 KiB, text/html)

Revision history for this message

Gianfranco Costamagna (costamagnagianfranco) wrote on 2016-01-21:

it needs a dinstall before, I grabbed from incoming.d.o :)

Revision history for this message

Martin Pitt (pitti) wrote on 2016-01-21:

Sponsored, thank you!

Changed in openvpn (Ubuntu):
status:	New → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-01-21:

This bug was fixed in the package openvpn - 2.3.10-1ubuntu1

---------------
openvpn (2.3.10-1ubuntu1) xenial; urgency=medium

  * Merge with Debian unstable (LP: #1536568). Remaining Ubuntu changes:
    - debian/openvpn.init.d:
      + Do not use start-stop-daemon and </dev/null to avoid blocking boot.
      + Show per-VPN result messages.
      + Add "--script-security 2" by default for backwards compatabliity.
    - Demote easy-rsa to Suggests

openvpn (2.3.10-1) unstable; urgency=medium

  * New upstream release. (Closes: #804368)
    Drop password_prompt_in_systemd.patch. Applied upstream.
  * Unify pidfile path on systemd and sysV. (Closes: #811010)
    Thanks Guillem Jover for noticing.
  * Increase start-stop-daemon timeout on stop to let openvpn
    tear down the connection properly in some cases.
    (Closes: #799592, #796914)
  * Add CAP_AUDIT_WRITE to openvpn@.service CapabilityBoundingSet
    to fix auth-pam plugin. (Closes: #795313)
  * Patch from Martin Pitt to start OpenVPN before user sessions
    to avoid hidding possible password prompts. (Closes: #803032)
  * Make another copy of t_client.sh to help keeping the build
    environment clean. (Closes: #765447)

-- Gianfranco Costamagna <email address hidden> Thu, 21 Jan 2016 11:37:08 +0100

Changed in openvpn (Ubuntu):
status:	Fix Committed → Fix Released

Revision history for this message

Simon Déziel (sdeziel) wrote on 2016-01-21:

This upgrade caused a regression. When manually starting a VPN with "systemctl start openvpn@foo", the VPN foo connects fine but the call to systemctl never returns. I need to Ctrl-C it to get back at the console.

This was working well with 2.3.8-1ubuntu1.

Revision history for this message

Simon Déziel (sdeziel) wrote on 2016-01-21:

No matter if I Ctrl-C or not, the start job always times out after 90 seconds killing the VPN connection.

Revision history for this message

Simon Déziel (sdeziel) wrote on 2016-01-21:

Somehow, this problem was caused by my override.conf file:

[Service]
# change status update interval from 10 to 600 seconds
ExecStart=
ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.status 600 --cd /etc/openvpn --config /etc/openvpn/%i.conf --writepid /run/openvpn/%i.pid

Recreating /etc/systemd/system/openvpn@.service.d/override.conf with the same content made it work again. Very weird.