[Bug 1454725] Re: openvpn does not use OPTARGS from /etc/default/openvpn

[Simon Déziel]

I just check on 14.04 and 16.04 and the init script automatically adds
"--script-security 2" unless the VPN config contains a script-security
directive.

Problem is that since the switch to systemd, the init script is no
longer used and the daemon is used like this:

  $ systemctl cat openvpn at .service | grep ^ExecStart
ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.status 10 --cd /etc/openvpn --config /etc/openvpn/%i.conf --writepid /run/openvpn/%i.pid

This probably breaks setups relying on "--script-security 2" like yours.
Could you try adding "script-security 2" to /etc/openvpn/infra.conf and
see if it helps?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1454725

Title:
  openvpn does not use OPTARGS from /etc/default/openvpn

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1454725/+subscriptions