[arch-dev-public] Preparing OpenVPN 2.4.x - possible incompatible changes

[Christian Hesse]

Sébastien Luttringer <seblu at seblu.net> on Sun, 2016/11/27 03:55:
> On Sat, 2016-11-26 at 13:38 +0100, Christian Hesse wrote:
> > 
> > Any opinion about this change? Who can post news about this on the
> > website?  
>
> The switch from Type=forking to simple will break units which rely on proper
> ordering of subnets added by that tunnel. That look as a regression to me.

Can you give more detail on that?

For me route-up scripts broke... With Type=simple it is no longer allow to
send dnsmasq a SIGHUP to flush its cache.

So probably we will go with upstream and slit the units, but apply an
additional patch to unbreak things.

> I'm using openvpn on my hosts, few of them are only reachable via its
> tunnel. There is other users doing so. I suggest to maximize our chance to
> warn them by using both News and post upgrade message.

That's true...
We will definitely have a post-upgrade message, actually I tend to add a news
post as well.

> > Stumbled about another fact... We define PLUGIN_LIBDIR, that allows to use
> > relative paths from that directory in configuration to call the plugins.
> > This path is '/usr/lib/openvpn' - plugins are installed to
> > '/usr/lib/openvpn/plugins', though. Any reason for that?  
>
> Never understand that neither. As configuration need to be changed, that's a
> good time for changing this path.

This will change now.
-- 
main(a){char*c=/*    Schoene Gruesse                         */"B?IJj;MEH"
"CX:;",b;for(a/*    Best regards             my address:    */=0;b=c[a++];)
putchar(b-1/(/*    Chris            cc -ox -xc - && ./x    */b/42*2-3)*42);}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-dev-public/attachments/20161127/b6fc2df8/attachment.asc>