Package: openvpn
Version: 2.4.0-3
Severity: normal

Dear Maintainer,

When an openvpn client is failing, it gets killed.

openvpn 2.4 is arriving with a client folder '/etc/openvpn/client/' (and a 
server folder).
So I put client files and the server files in their own folder.

I found that the matching systemd commands are :
systemctl enable openvpn-client@yyy.service
systemctl enable openvpn-server@xxx.service

At boot, if server is not reachable, the service is killed:
# Feb  7 21:08:57 lemon openvpn[4925]: SIGTERM[hard,init_instance] received, 
process exiting
# Feb  7 21:08:57 lemon systemd[1]: openvpn-client@yyy.service: Unit entered 
failed state.
# Feb  7 21:08:57 lemon systemd[1]: openvpn-client@yyy.service: Failed with 
result 'timeout'.

Expected result : service not killed
If server is not started/reachable at startup, but became later. I expect the 
client to attempt later.

I tried:
1/
systemctl enable openvpn@client/client-ordinateur.service
 -> Failed to lookup unit file state: Invalid argument

2/
in /etc/default/openvpn : AUTOSTART="yyy"
 -> no start, no log (probably conf not found)

3/
in /etc/default/openvpn : AUTOSTART="client/yyy"
 -> /lib/systemd/system-generators/openvpn-generator failed with error code 1.

4/
I put client files in /etc/openvpn/ and
systemctl enable openvpn@yyy.service
 -> service is not killed even if failing to connect to server
But, I have to place file outside of client folder

Maybe it is not a bug, but a feature (to stop failing service).
With defautl behaviour, openvpn client is attempting to reconnect with 
incremental delay.

I expect to place files in client folder and have a better management of the 
failure case.

Regards,


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (700, 'testing'), (90, 'unstable'), (85, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openvpn depends on:
ii  debconf [debconf-2.0]  1.5.60
ii  init-system-helpers    1.47
ii  iproute2               4.9.0-1
ii  libc6                  2.24-9
ii  liblz4-1               0.0~r131-2
ii  liblzo2-2              2.08-1.2
ii  libpam0g               1.1.8-3.5
ii  libpkcs11-helper1      1.21-1
ii  libssl1.0.2            1.0.2k-1
ii  libsystemd0            232-15
ii  lsb-base               9.20161125

Versions of packages openvpn recommends:
ii  easy-rsa  2.2.2-2

Versions of packages openvpn suggests:
ii  openssl     1.1.0c-2
ii  resolvconf  1.79

-- debconf information:
  openvpn/create_tun: false

Reply via email to