Page MenuHomeVyOS Platform

openvpn: enabling reject-unconfigured-clients without defining any clients breaks server startup
Closed, ResolvedPublicBUG

Description

Configuring an OpenVPN server with reject-unconfigured-clients but no server client entries commits successfully, but openvpn@vtunN then crash-loops with Options error: --ccd-exclusive must be used with --client-config-dir.
In server.conf.j2, ccd-exclusive is emitted for reject-unconfigured-clients while client-config-dir is only emitted when a server client exists.

run generate pki ca install ovpn-ca
run generate pki certificate sign ovpn-ca install ovpn-srv

set interfaces openvpn vtun1 mode server
set interfaces openvpn vtun1 server subnet 10.20.30.0/24
set interfaces openvpn vtun1 tls ca-certificate ovpn-ca
set interfaces openvpn vtun1 tls certificate ovpn-srv
set interfaces openvpn vtun1 server reject-unconfigured-clients
commit

Details

Version
1.5, 1.4
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)