Re: [Openvpn-users] Can a configuration item be cleared in the server.conf file

[Gert D. <ge...@gr...>]

Hi,

On Mon, Feb 05, 2024 at 03:12:01PM +0100, Bo Berglund wrote:
> >> $ openvpn --version
> >> OpenVPN 2.4.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11]
> >Ah, yes.  So that's a bit of an antique :-)
> 
> $ apt policy openvpn
> openvpn:
>   Installed: 2.4.12-0ubuntu0.20.04.1
>   Candidate: 2.4.12-0ubuntu0.20.04.1
> 
> Cannot get anything newer...

Yeah, that's Ubuntu/Debian policy.  Never ugprade to a newer train of
software than "what was there when shipping" - we missed 20.04 deadline
by a wide margin (2.5.0 was released in October 2020), so they took 2.4.x
and at least upgraded that to "the latest version".

22.04 has 2.6.x

[..]
> >Date:   Sat Jun 20 19:23:03 2020 +0200
> >
> >    Change timestamps in file-based logging to ISO 8601 time format.
> >
> 
> Thanks for the clarification!
> That is exactly what I need...
> 
> Can I upgrade the apt installed openvpn to 2.5 even though it is not offered by
> the apt system?

I know that some of my co-maintainers do build OpenVPN packages for
debian/ubuntu distros, but this is not my speciality, so I can't give
specific advice.  It can, but no idea on the "how".

> NOTE
> ----
> On the *other* Ubuntu server running openvpn, which is Ubuntu Server 22.04.3 LTS
> (was upgraded back in October) the version is:
> 
> $ apt policy openvpn
> openvpn:
>   Installed: 2.5.9-0ubuntu0.22.04.2
>   Candidate: 2.5.9-0ubuntu0.22.04.2
> 
> 
> it shows this using the command suggested earlier:
> 
> $ openvpn --show-gateway
> 2024-02-05 07:41:09 ROUTE_GATEWAY 10.0.0.1/255.255.255.0 IFACE=eth0
> HWADDR=00:50:56:9e:c6:86

So, ISO timestamp :-)

> But the logs do not show any timestamp at all...
> A typical line:
> HasanA_AGI/83.**.**.105:59902 [Hasan****] Inactivity timeout (--ping-restart),
> restarting
> 
> So here the server logs are totally without timestamps and there is nothing in
> the /lib/systemd/system/openvpn-server@.service file about logging either.
> 
> EXITING....
> I think I will drop this altogether, the servers are doing their thing anyway...

Not sure why this is so.  I bet it's still systemd.

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             ge...@gr...