The NS OpenVPN module should be updated to use the latest systemd unit files

Support
,
#1

NethServer Version: NS7
Module: OpenVPN

Since OpenVPN 2.4 (Well, 2.3.18 really) the single systemd unit file was split into 2 files. One for a server configuration, the other for a client.

It appears that the CentOS rpm maintainer is still including the “old” single systemd unit file, which is no longer shipped as part of the OpenVPN tarball. Once that ceases to be included, the NS OpenVPN support will break.

Cheers.

1 Like
#2

do you have some link please ?

#3

Here’s the commit.

As I said, luckily the CentOS maintainer is currently still including the deprecated unit file, which is why it’s still working today.

I did raise this at the time it was originally pushed.

Cheers.

1 Like
#4

Committed by: Gert Doering 2014-11-24

#5

And CentOS pushed through version 2.4.1, the first CentOS rpm with that update, in April '17.

How long do you trust that the deprecated file will continue to be part of the rpm.

Cheers.

#6

Yep we can see the full sources at https://sourceforge.net/p/openvpn/openvpn/ci/release/2.4/~/tree/distro/systemd/

It seems that other commits came, probably the maintainer know it is a breaking change, so it could explain why it is not released.

did you use this systemd service file ?

#7

I confirm that the openvpn service crashes

#8

NS still uses the “old” file for RoadWarrior support, which I currently use, but am looking at dropping in favour of WireGuard.

I use the new -client format for an outbound VPN, created and maintained outside of the NS framework.

Cheers.

#9

this is an advocacy for a script to download and follow updates @davidep

#10

We have to stay tuned with upstream developments :blush:

2 Likes