Re: [Openvpn-users] How to properly upgrade openvpn server on Ubuntu servers (18.04 and 20.04)?

2022-07-05 Thread Nathan Stratton Treadway
On Tue, Jul 05, 2022 at 14:40:31 +0200, Bo Berglund wrote:
> Hopefully I can get there and upgrade it on location come September.
> I don't dare doing that remotely.

Agreed.

> Here you go:
> 
> $ apt-cache policy openvpn
> openvpn:
>   Installed: 2.4.7-xenial0
>   Candidate: 2.4.7-xenial0
>   Version table:
>  *** 2.4.7-xenial0 100
> 100 /var/lib/dpkg/status
>  2.4.4-2ubuntu1.7 500
> 500 http://us.archive.ubuntu.com/ubuntu bionic-updates/main amd64
> Packages
> 500 http://security.ubuntu.com/ubuntu bionic-security/main amd64
> Packages
>  2.4.4-2ubuntu1 500
> 500 http://us.archive.ubuntu.com/ubuntu bionic/main amd64 Packages

Yeah, this confirms that the system sees openvpn 2.4.4 out in the Ubuntu
Bionic archives but currently has the 2.4.7-xenial0 (i.e. from
build.openvpn.net) package installed.

If you can log in to that server directly (i.e. not over the OpenVPN
link), then you should be safe using the "apt install" commands to force
installation of the 2.4.4-2ubuntu1.7 package and then try bringing up
the link to see if 2.4.4 works in that environment (with the plan to
switch back to the build.openvpn.net packages if it doesn't...)

Alternately, you can follow the notes in the OpenVPN community wiki page
to re-enable the build.openvpn.net repository, presumably using a
"...debian/openvpn/2.4 bionic main" line.  

(Looks like if you do that, you'll be offered openvpn 2.4.11_bionic0 as
the available version to upgrade to...)



Nathan



Nathan Stratton Treadway  -  natha...@ontko.com  -  Mid-Atlantic region
Ray Ontko & Co.  -  Software consulting services  -   http://www.ontko.com/
 GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt   ID: 1023D/ECFB6239
 Key fingerprint = 6AD8 485E 20B9 5C71 231C  0C32 15F3 ADCD ECFB 6239


___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Re: [Openvpn-users] How to properly upgrade openvpn server on Ubuntu servers (18.04 and 20.04)?

2022-07-05 Thread Bo Berglund
On Tue, 5 Jul 2022 02:14:05 -0400, Nathan Stratton Treadway 
wrote:

>On Sun, Jul 03, 2022 at 21:55:13 +0200, Bo Berglund wrote:
>> And now I had a look at our office server (Ubuntu 18.04 LTS) and it looks the
>> same:
>> 
>> $ openvpn --version
>> OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] 
>> [PKCS11]
>> [MH/PKTINFO] [AEAD] built on Feb 19 2019
>> 
>> This server is running 18.04.6 LTS and was upgraded from Ubuntu 16.04 LTS
>> probably back in 2019.
>> 
>> OpenVPN was installed in the 16.04 days and has been stopped at 2.4.7 since
>> quite some time it seems. It too needs an upgrade.
>
>Note that my previous emails have all been focusing on the server
>running Ubuntu 20.04 LTS.
>
>The situation on the 18.04 server is a bit different, since the OpenVPN
>version included in stock Bionic is 2.4.4 -- so you'd actually have to
>downgrade the upstream OpenVPN version to switch from your current
>package to the Ubuntu package.

This server became due for a distribution upgrade when Covid19 had already hit.
It is located in Texas and my twice per year visits there have been cancelled
since Sept 2019.
That is why it has not been upgraded to 20.04...
Hopefully I can get there and upgrade it on location come September.
I don't dare doing that remotely.

>That may well be fine for your use case, but obviously it would be a
>bigger change than the switch from one 2.4.7 package to a different
>2.4.7 package that is under discussion on the server running Ubuntu
>20.04.
>
>Anyway, posting the output of "apt-cache policy openvpn" on that server
>here would help confirm the exact package versions your system currently
>knows about...

Here you go:

$ apt-cache policy openvpn
openvpn:
  Installed: 2.4.7-xenial0
  Candidate: 2.4.7-xenial0
  Version table:
 *** 2.4.7-xenial0 100
100 /var/lib/dpkg/status
 2.4.4-2ubuntu1.7 500
500 http://us.archive.ubuntu.com/ubuntu bionic-updates/main amd64
Packages
500 http://security.ubuntu.com/ubuntu bionic-security/main amd64
Packages
 2.4.4-2ubuntu1 500
500 http://us.archive.ubuntu.com/ubuntu bionic/main amd64 Packages


-- 
Bo Berglund
Developer in Sweden



___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users