Activity log for bug #1124398

Date Who What changed Old value New value Message
2013-02-13 18:41:36 Marc Gariépy bug added bug
2013-02-13 21:09:36 Stéphane Graber nominated for series Ubuntu Precise
2013-02-13 21:09:36 Stéphane Graber bug task added openvpn (Ubuntu Precise)
2013-02-13 21:09:36 Stéphane Graber nominated for series Ubuntu Quantal
2013-02-13 21:09:36 Stéphane Graber bug task added openvpn (Ubuntu Quantal)
2013-02-13 21:11:08 Stéphane Graber openvpn (Ubuntu): status New In Progress
2013-02-13 21:12:37 Stéphane Graber openvpn (Ubuntu): status In Progress Fix Committed
2013-02-13 21:13:34 Stéphane Graber openvpn (Ubuntu Precise): status New In Progress
2013-02-13 21:16:16 Stéphane Graber description On ubuntu 12.04, the option ""--script-security 2"" is never added to the command line of openvpn daemon here is the diff that need to be applied to the /etc/init.d/openvpn to start the daemon correctly. If you need more information, please let me know. ================================= --- /tmp/openvpn 2013-02-13 13:40:53.885828899 -0500 +++ /etc/init.d/openvpn 2013-02-13 13:13:52.598704452 -0500 @@ -89,7 +89,7 @@ --pidfile /var/run/openvpn.$NAME.pid \ --exec $DAEMON -- $OPTARGS --writepid /var/run/openvpn.$NAME.pid \ $DAEMONARG $STATUSARG --cd $CONFIG_DIR \ - --config $CONFIG_DIR/$NAME.conf < /dev/null || STATUS=1 + --config $CONFIG_DIR/$NAME.conf $script_security < /dev/null || STATUS=1 [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /var/run/openvpn.$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid ================================= == Rationale == The openvpn init script calculates script_security based on what's set in /etc/default/openvpn, however that variable isn't currently being passed to openvpn itself. This was likely caused by a mismerge with Debian. == Test case == 1) Set script_security in /etc/default/openvpn 2) Restart openvpn 3) Ensure that --script-security is passed to the daemon == Regression potential == Can't think of any, unless someone had an invalid script_security value which was currently being ignored and may then break their VPN. However this is technically a bad config and wouldn't really qualify as a bug. --- original bug report --- On ubuntu 12.04, the option ""--script-security 2"" is never added to the command line of openvpn daemon here is the diff that need to be applied to the /etc/init.d/openvpn to start the daemon correctly. If you need more information, please let me know. ================================= --- /tmp/openvpn 2013-02-13 13:40:53.885828899 -0500 +++ /etc/init.d/openvpn 2013-02-13 13:13:52.598704452 -0500 @@ -89,7 +89,7 @@          --pidfile /var/run/openvpn.$NAME.pid \          --exec $DAEMON -- $OPTARGS --writepid /var/run/openvpn.$NAME.pid \          $DAEMONARG $STATUSARG --cd $CONFIG_DIR \ - --config $CONFIG_DIR/$NAME.conf < /dev/null || STATUS=1 + --config $CONFIG_DIR/$NAME.conf $script_security < /dev/null || STATUS=1      [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /var/run/openvpn.$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid =================================
2013-02-13 21:17:56 Stéphane Graber openvpn (Ubuntu Quantal): status New In Progress
2013-02-13 21:23:19 Marc Gariépy description == Rationale == The openvpn init script calculates script_security based on what's set in /etc/default/openvpn, however that variable isn't currently being passed to openvpn itself. This was likely caused by a mismerge with Debian. == Test case == 1) Set script_security in /etc/default/openvpn 2) Restart openvpn 3) Ensure that --script-security is passed to the daemon == Regression potential == Can't think of any, unless someone had an invalid script_security value which was currently being ignored and may then break their VPN. However this is technically a bad config and wouldn't really qualify as a bug. --- original bug report --- On ubuntu 12.04, the option ""--script-security 2"" is never added to the command line of openvpn daemon here is the diff that need to be applied to the /etc/init.d/openvpn to start the daemon correctly. If you need more information, please let me know. ================================= --- /tmp/openvpn 2013-02-13 13:40:53.885828899 -0500 +++ /etc/init.d/openvpn 2013-02-13 13:13:52.598704452 -0500 @@ -89,7 +89,7 @@          --pidfile /var/run/openvpn.$NAME.pid \          --exec $DAEMON -- $OPTARGS --writepid /var/run/openvpn.$NAME.pid \          $DAEMONARG $STATUSARG --cd $CONFIG_DIR \ - --config $CONFIG_DIR/$NAME.conf < /dev/null || STATUS=1 + --config $CONFIG_DIR/$NAME.conf $script_security < /dev/null || STATUS=1      [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /var/run/openvpn.$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid ================================= == Rationale == The openvpn init script calculates script_security based on what's set in /etc/openvpn/{$NAME}.conf, however that variable isn't currently being passed to openvpn itself. This was likely caused by a mismerge with Debian. == Test case == 1) Don't set script_security in /etc/openvpn/{$NAME}.conf 2) set a line "up ./server.up " 3) Restart openvpn 4) Ensure that --script-security is passed to the daemon == Regression potential == Can't think of any, unless someone had an invalid script_security value which was currently being ignored and may then break their VPN. However this is technically a bad config and wouldn't really qualify as a bug. --- original bug report --- On ubuntu 12.04, the option ""--script-security 2"" is never added to the command line of openvpn daemon here is the diff that need to be applied to the /etc/init.d/openvpn to start the daemon correctly. If you need more information, please let me know. ================================= --- /tmp/openvpn 2013-02-13 13:40:53.885828899 -0500 +++ /etc/init.d/openvpn 2013-02-13 13:13:52.598704452 -0500 @@ -89,7 +89,7 @@          --pidfile /var/run/openvpn.$NAME.pid \          --exec $DAEMON -- $OPTARGS --writepid /var/run/openvpn.$NAME.pid \          $DAEMONARG $STATUSARG --cd $CONFIG_DIR \ - --config $CONFIG_DIR/$NAME.conf < /dev/null || STATUS=1 + --config $CONFIG_DIR/$NAME.conf $script_security < /dev/null || STATUS=1      [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /var/run/openvpn.$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid =================================
2013-02-13 21:23:44 Marc Gariépy description == Rationale == The openvpn init script calculates script_security based on what's set in /etc/openvpn/{$NAME}.conf, however that variable isn't currently being passed to openvpn itself. This was likely caused by a mismerge with Debian. == Test case == 1) Don't set script_security in /etc/openvpn/{$NAME}.conf 2) set a line "up ./server.up " 3) Restart openvpn 4) Ensure that --script-security is passed to the daemon == Regression potential == Can't think of any, unless someone had an invalid script_security value which was currently being ignored and may then break their VPN. However this is technically a bad config and wouldn't really qualify as a bug. --- original bug report --- On ubuntu 12.04, the option ""--script-security 2"" is never added to the command line of openvpn daemon here is the diff that need to be applied to the /etc/init.d/openvpn to start the daemon correctly. If you need more information, please let me know. ================================= --- /tmp/openvpn 2013-02-13 13:40:53.885828899 -0500 +++ /etc/init.d/openvpn 2013-02-13 13:13:52.598704452 -0500 @@ -89,7 +89,7 @@          --pidfile /var/run/openvpn.$NAME.pid \          --exec $DAEMON -- $OPTARGS --writepid /var/run/openvpn.$NAME.pid \          $DAEMONARG $STATUSARG --cd $CONFIG_DIR \ - --config $CONFIG_DIR/$NAME.conf < /dev/null || STATUS=1 + --config $CONFIG_DIR/$NAME.conf $script_security < /dev/null || STATUS=1      [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /var/run/openvpn.$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid ================================= == Rationale == The openvpn init script calculates script_security based on what's set in /etc/openvpn/{$NAME}.conf, however that variable isn't currently being passed to openvpn itself. This was likely caused by a mismerge with Debian. == Test case == 1) Don't set script_security in /etc/openvpn/{$NAME}.conf 2) set a line "up ./server.up" in /etc/openvpn/{$NAME}.conf 3) Restart openvpn 4) Ensure that --script-security is passed to the daemon == Regression potential == Can't think of any, unless someone had an invalid script_security value which was currently being ignored and may then break their VPN. However this is technically a bad config and wouldn't really qualify as a bug. --- original bug report --- On ubuntu 12.04, the option ""--script-security 2"" is never added to the command line of openvpn daemon here is the diff that need to be applied to the /etc/init.d/openvpn to start the daemon correctly. If you need more information, please let me know. ================================= --- /tmp/openvpn 2013-02-13 13:40:53.885828899 -0500 +++ /etc/init.d/openvpn 2013-02-13 13:13:52.598704452 -0500 @@ -89,7 +89,7 @@          --pidfile /var/run/openvpn.$NAME.pid \          --exec $DAEMON -- $OPTARGS --writepid /var/run/openvpn.$NAME.pid \          $DAEMONARG $STATUSARG --cd $CONFIG_DIR \ - --config $CONFIG_DIR/$NAME.conf < /dev/null || STATUS=1 + --config $CONFIG_DIR/$NAME.conf $script_security < /dev/null || STATUS=1      [ "$OMIT_SENDSIGS" -ne 1 ] || ln -s /var/run/openvpn.$NAME.pid /run/sendsigs.omit.d/openvpn.$NAME.pid =================================
2013-02-13 22:00:27 Launchpad Janitor openvpn (Ubuntu): status Fix Committed Fix Released
2013-02-21 18:45:25 Launchpad Janitor branch linked lp:~ubuntu-branches/ubuntu/raring/openvpn/raring-proposed
2013-02-27 02:19:01 Colin Watson openvpn (Ubuntu Precise): status In Progress Fix Committed
2013-02-27 02:19:03 Colin Watson bug added subscriber Ubuntu Stable Release Updates Team
2013-02-27 02:19:07 Colin Watson bug added subscriber SRU Verification
2013-02-27 02:19:09 Colin Watson tags verification-needed
2013-02-27 02:19:39 Colin Watson openvpn (Ubuntu Quantal): status In Progress Fix Committed
2013-02-27 02:51:28 Launchpad Janitor branch linked lp:ubuntu/precise-proposed/openvpn
2013-02-27 02:51:40 Launchpad Janitor branch linked lp:ubuntu/quantal-proposed/openvpn
2013-03-27 18:46:00 Marc Gariépy tags verification-needed verification-done
2013-03-28 16:31:24 Brian Murray tags verification-done verification-done-precise verification-needed
2013-03-28 16:33:12 Launchpad Janitor openvpn (Ubuntu Precise): status Fix Committed Fix Released
2013-05-27 13:47:09 Simon Déziel tags verification-done-precise verification-needed verification-done verification-done-precise verification-done-quantal
2013-05-28 21:23:06 Brian Murray removed subscriber Ubuntu Stable Release Updates Team
2013-05-28 21:23:14 Launchpad Janitor openvpn (Ubuntu Quantal): status Fix Committed Fix Released