Page MenuHomeVyOS Platform

OpenVPN: do not stop/start service on configuration change
Closed, ResolvedPublicFEATURE REQUEST

Description

Implement support for systemd reload of the OpenVPN service to not drop connections during reconfiguration.

Details

Difficulty level
Easy (less than an hour)
Version
1.4-rolling-202111120317 && 1.3.0-epa3
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Improvement (missing useful functionality)

Event Timeline

c-po changed the task status from Open to In progress.Nov 15 2021, 8:07 PM
c-po claimed this task.
c-po triaged this task as Normal priority.
c-po created this task.
c-po changed Difficulty level from Unknown (require assessment) to Easy (less than an hour).
c-po changed Version from - to 1.4-rolling-202111120317 && 1.3.0-epa3.
c-po changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
c-po changed Issue type from Unspecified (please specify) to Improvement (missing useful functionality).
Nov 15 21:23:22 LR1 systemd[1]: Reloading OpenVPN connection to vtun1.
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: event_wait : Interrupted system call (code=4)
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: Closing TUN/TAP interface
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: net_addr_ptp_v4_del: 10.255.1.1 dev vtun1
Nov 15 21:23:22 LR1 systemd[1]: Reloaded OpenVPN connection to vtun1.
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: SIGHUP[hard,] received, process restarting
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: WARNING: file '/run/openvpn/vtun1_shared.key' is group or others accessible
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: library versions: OpenSSL 1.1.1k  25 Mar 2021, LZO 2.10
Nov 15 21:23:22 LR1 openvpn-vtun1[13941]: Restart pause, 5 second(s)
c-po moved this task from Backlog to Finished on the VyOS 1.3 Equuleus (1.3.0) board.