Ubuntu
openvpn package

  1. Bug #1454725
  2. Comment #7

Comment 7 for bug 1454725

Revision history for this message
Simon Déziel (sdeziel) wrote : Re: openvpn does not use OPTARGS from /etc/default/openvpn

I just check on 14.04 and 16.04 and the init script automatically adds "--script-security 2" unless the VPN config contains a script-security directive.

Problem is that since the switch to systemd, the init script is no longer used and the daemon is used like this:

  $ systemctl cat openvpn@.service | grep ^ExecStart
ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/openvpn/%i.status 10 --cd /etc/openvpn --config /etc/openvpn/%i.conf --writepid /run/openvpn/%i.pid

This probably breaks setups relying on "--script-security 2" like yours. Could you try adding "script-security 2" to /etc/openvpn/infra.conf and see if it helps?