openvpn.tcz ( core 4 ) requires bash to run key generating scripts.

[gerald_clark]

Bash is required to run key gen scripts, but this is not mentioned in the info file or deps file.

[maro]

Whilst it is true that most (but not all) of the (wrapper) scripts in '/usr/local/share/openvpn/easy-rsa/2.0' have a shebang of '#!/bin/bash' I noticed that all of the (similar) scripts in '/usr/local/share/openvpn/easy-rsa/1.0' use just '#!/bin/sh'. I furthermore did a syntax test (e.g. via 'sh -n ...') and a quick "visual" inspection and could not identify any "bash-isms" that would require the 'bash.tcz' extension. So, I'd rather like to suggest to change the shebang line of the "offenders" to use #!/bin/sh' instead.

OTOH it might be prudent to put some note into the info file of how to use these scripts. I for one (without reading any openvpn documentation) could not make much sense out of them (apart from realising that one either has to set the 'EASY_RSA' environment variable to the appropriate directory or would have to 'cd' into it).

[gerald_clark]

I'm in favor of changing the scripts.
I did:
echo "/bin/sh $*" > /bin/bash ; chmod +x /bin/bash

Everything ran ok.

Openssl is also needed.

[gutmensch]

will change scripts and update to 2.2.2 ;-)

[curaga]

Please ping upstream too.

[gutmensch]

Would have done, but obviously they already found out that was a little over the top... 2.2.2 doesn't contain bash in any script (neither in easy-rsa 1.0 nor in 2.0) anymore

[gutmensch]

Updated and uploaded, please check. As for a easy-rsa I'll leave it up and pointed to a better documentation at openvpn.net.

I don't feel like I can generally cover all the related VPN topics in a small info file... one signs with CA, another one self-signs, special tunnel security, compression and so on.

[Uncle Warthog]

Does this version of the tcz include any of the plugins?  I'm most interested in the down-root plugin but the auth-pam plugin can come in handy too.

[gerald_clark]

Look in the files tab, and see what is included.

[gutmensch]

I didn't even know of OpenVPN plugins before this post but since there are only 3 "official" community plugins, I'll have a look to include them.

[Uncle Warthog]

I didn't even know of OpenVPN plugins before this post but since there are only 3 "official" community plugins, I'll have a look to include them.

Thanks.  I've found the down-root plugin to be very handy for clients as it lets you run the openvpn client with reduced rights (still needs to be started as user or root but switches to nobody while running) and still run a shutdown script later.