{"updates": [{"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updates to the latest upstream OpenVPN 2.4.3, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521.  This update also re-enables automatic restart of OpenVPN on the next updates. For this update, the restart needs to be done manually.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-06-21 14:17:07", "date_modified": null, "date_approved": null, "date_testing": "2017-06-22 13:54:28", "date_stable": "2017-06-25 16:18:07", "alias": "FEDORA-EPEL-2017-79e30f9d33", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-06-25 16:18:07", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2017-79e30f9d33", "title": "openvpn-2.4.3-1.el7", "version_hash": "882031c7d35474237d5b89cc3338aaa6cafb96a0", "release": {"name": "EPEL-7", "long_name": "Fedora EPEL 7", "version": "7", "id_prefix": "FEDORA-EPEL", "branch": "epel7", "dist_tag": "epel7", "stable_tag": "epel7", "testing_tag": "epel7-testing", "candidate_tag": "epel7-testing-candidate", "pending_signing_tag": "epel7-signing-pending", "pending_testing_tag": "epel7-testing-pending", "pending_stable_tag": "epel7-pending", "override_tag": "epel7-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-06-21 14:17:08", "update_id": 90592, "user_id": 91, "id": 625312, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-06-22 14:19:05", "update_id": 90592, "user_id": 91, "id": 625678, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "bug_feedback": [{"karma": 0, "comment_id": 626271, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 626271, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "bug_feedback": [{"karma": 0, "comment_id": 626917, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-06-25 03:20:09", "update_id": 90592, "user_id": 91, "id": 626918, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "bug_feedback": [{"karma": 0, "comment_id": 626981, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-06-25 17:20:41", "update_id": 90592, "user_id": 91, "id": 627098, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "bug_feedback": [{"karma": 0, "comment_id": 627401, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "bug_feedback": [{"karma": 0, "comment_id": 627402, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}], "builds": [{"nvr": "openvpn-2.4.3-1.el7", "signed": true, "release_id": 8, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 626271, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 625671, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 626271, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-EPEL-2017-79e30f9d33", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updates to the latest upstream OpenVPN 2.4.3, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521.\n\n----\n\nThis update brings in the latest OpenVPN v2.4.2 release. This release contains fixes for two authenticated remote DoS vulnerabilities (CVE-2017-7478 and CVE-2017-7479).  For more information see the upstream [security announcement](http://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits).\n\nIn addition the plug-in location which got removed by an accident during the clean-up is also back again.\n", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-06-21 14:15:40", "date_modified": null, "date_approved": null, "date_testing": "2017-06-23 01:59:17", "date_stable": "2017-06-27 15:00:54", "alias": "FEDORA-EPEL-2017-9ec615ff74", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-06-27 15:00:54", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74", "title": "openvpn-2.4.3-1.el6", "version_hash": "f71107bd971b201cb369788de8d16c2cf622d701", "release": {"name": "EL-6", "long_name": "Fedora EPEL 6", "version": "6", "id_prefix": "FEDORA-EPEL", "branch": "el6", "dist_tag": "dist-6E-epel", "stable_tag": "dist-6E-epel", "testing_tag": "dist-6E-epel-testing", "candidate_tag": "dist-6E-epel-testing-candidate", "pending_signing_tag": "", "pending_testing_tag": "", "pending_stable_tag": "", "override_tag": "dist-6E-epel-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-06-21 14:15:40", "update_id": 90591, "user_id": 91, "id": 625309, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [openvpn-2.4.2-1.el6](https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-6ee18d1c7b), and has inherited its bugs and notes.", "timestamp": "2017-06-21 14:15:44", "update_id": 90591, "user_id": 91, "id": 625311, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-06-23 02:15:56", "update_id": 90591, "user_id": 91, "id": 625857, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "bug_feedback": [{"karma": 1, "comment_id": 627954, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 627954, "bug_id": 1444535, "bug": {"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "bug_feedback": [{"karma": 1, "comment_id": 627955, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 627955, "bug_id": 1444535, "bug": {"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "bug_feedback": [{"karma": 1, "comment_id": 627956, "bug_id": 1463644, "bug": {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 627956, "bug_id": 1444535, "bug": {"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-06-27 11:08:02", "update_id": 90591, "user_id": 91, "id": 627957, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-06-27 16:16:25", "update_id": 90591, "user_id": 91, "id": 628046, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.3-1.el6", "signed": false, "release_id": 10, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 608228, "bug_id": 1444535, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working on CentOS 6 as planned.", "timestamp": "2017-05-15 13:34:31", "update_id": 87505, "user_id": 3624, "id": 608228, "testcase_feedback": [], "user": {"name": "randomvariable", "email": "naadir@randomvariable.co.uk", "id": 3624, "avatar": "https://seccdn.libravatar.org/avatar/0c686c02c22aca3cdfed6e39df04a961ed9db0535aa7180c2b9a25ad704635a1?s=24&d=retro", "openid": "randomvariable.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 1, "comment_id": 608229, "bug_id": 1444535, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-05-15 13:36:31", "update_id": 87505, "user_id": 207, "id": 608229, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 608916, "bug_id": 1444535, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:33:39", "update_id": 87505, "user_id": 446, "id": 608916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1444535, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1444535, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1444535, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1463644, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [epel-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 626271, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463644, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463644, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 625671, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 626271, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-EPEL-2017-9ec615ff74", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updates to the latest upstream OpenVPN 2.4.3, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521.  This update also re-enables automatic restart of OpenVPN on the next updates. For this update, the restart needs to be done manually.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-06-21 14:13:36", "date_modified": null, "date_approved": null, "date_testing": "2017-06-23 02:00:03", "date_stable": "2017-06-24 03:05:15", "alias": "FEDORA-2017-f8a114cd09", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-06-24 03:05:15", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-f8a114cd09", "title": "openvpn-2.4.3-1.fc26", "version_hash": "ce9f3ac79214382225f74c0ddb17f48891e7917a", "release": {"name": "F26", "long_name": "Fedora 26", "version": "26", "id_prefix": "FEDORA", "branch": "f26", "dist_tag": "f26", "stable_tag": "f26-updates", "testing_tag": "f26-updates-testing", "candidate_tag": "f26-updates-candidate", "pending_signing_tag": "f26-signing-pending", "pending_testing_tag": "f26-updates-testing-pending", "pending_stable_tag": "f26-updates-pending", "override_tag": "f26-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-06-21 14:13:36", "update_id": 90590, "user_id": 91, "id": 625308, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-06-23 06:27:16", "update_id": 90590, "user_id": 91, "id": 625961, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-06-23 13:59:15", "update_id": 90590, "user_id": 739, "id": 626158, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2017-06-24 00:13:30", "update_id": 90590, "user_id": 206, "id": 626461, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-06-24 00:13:33", "update_id": 90590, "user_id": 91, "id": 626462, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-06-24 03:09:07", "update_id": 90590, "user_id": 91, "id": 626566, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.3-1.fc26", "signed": true, "release_id": 16, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1463643, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 625671, "bug_id": 1463643, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463643, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 625671, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 626271, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2017-f8a114cd09", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updates to the latest upstream OpenVPN 2.4.3, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521.  This update also re-enables automatic restart of OpenVPN on the next updates. For this update, the restart needs to be done manually.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-06-21 14:12:24", "date_modified": null, "date_approved": null, "date_testing": "2017-06-23 01:59:41", "date_stable": "2017-06-23 14:18:21", "alias": "FEDORA-2017-0639fb1490", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-06-23 14:18:21", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-0639fb1490", "title": "openvpn-2.4.3-1.fc25", "version_hash": "12aa3d3d1eddf44333043dfa7b446590cd624626", "release": {"name": "F25", "long_name": "Fedora 25", "version": "25", "id_prefix": "FEDORA", "branch": "f25", "dist_tag": "f25", "stable_tag": "f25-updates", "testing_tag": "f25-updates-testing", "candidate_tag": "f25-updates-candidate", "pending_signing_tag": "f25-signing-pending", "pending_testing_tag": "f25-updates-testing-pending", "pending_stable_tag": "f25-updates-pending", "override_tag": "f25-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-06-21 14:12:24", "update_id": 90589, "user_id": 91, "id": 625307, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "bug_feedback": [{"karma": 0, "comment_id": 625671, "bug_id": 1463643, "bug": {"bug_id": 1463643, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [fedora-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 625671, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-06-23 03:29:25", "update_id": 90589, "user_id": 91, "id": 625899, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works for me in a VM", "timestamp": "2017-06-23 14:01:38", "update_id": 90589, "user_id": 739, "id": 626182, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-06-23 14:01:40", "update_id": 90589, "user_id": 91, "id": 626183, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-06-23 20:54:04", "update_id": 90589, "user_id": 91, "id": 626341, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.3-1.fc25", "signed": true, "release_id": 15, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1463643, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 625671, "bug_id": 1463643, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463643, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 625671, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 626271, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2017-0639fb1490", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updates to the latest upstream OpenVPN 2.3.17, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-06-21 14:11:00", "date_modified": null, "date_approved": null, "date_testing": "2017-06-23 01:59:32", "date_stable": "2017-06-30 14:16:35", "alias": "FEDORA-2017-5596f2f94d", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-06-30 14:16:35", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-5596f2f94d", "title": "openvpn-2.3.17-1.fc24", "version_hash": "071ed728d4b844376749cbb6cc01c73f3dd18ac2", "release": {"name": "F24", "long_name": "Fedora 24", "version": "24", "id_prefix": "FEDORA", "branch": "f24", "dist_tag": "f24", "stable_tag": "f24-updates", "testing_tag": "f24-updates-testing", "candidate_tag": "f24-updates-candidate", "pending_signing_tag": "f24-signing-pending", "pending_testing_tag": "f24-updates-testing-pending", "pending_stable_tag": "f24-updates-pending", "override_tag": "f24-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-06-21 14:11:00", "update_id": 90588, "user_id": 91, "id": 625306, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "bug_feedback": [{"karma": 1, "comment_id": 625760, "bug_id": 1463643, "bug": {"bug_id": 1463643, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [fedora-all]", "security": true, "parent": false}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463647, "bug": {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-06-23 03:26:36", "update_id": 90588, "user_id": 91, "id": 625868, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works fine for me in a VM", "timestamp": "2017-06-23 14:06:31", "update_id": 90588, "user_id": 739, "id": 626200, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2017-06-30 06:00:33", "update_id": 90588, "user_id": 91, "id": 629207, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by dsommers. ", "timestamp": "2017-06-30 09:13:39", "update_id": 90588, "user_id": 91, "id": 629332, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-06-30 20:50:28", "update_id": 90588, "user_id": 91, "id": 629556, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.3.17-1.fc24", "signed": true, "release_id": 14, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1463643, "title": "CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 625671, "bug_id": 1463643, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463643, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1463647, "title": "openvpn-2.4.3 is available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 625671, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "server and client work well for me", "timestamp": "2017-06-22 13:54:37", "update_id": 90589, "user_id": 2619, "id": 625671, "testcase_feedback": [], "user": {"name": "sjenning", "email": "sethdjennings@gmail.com", "id": 2619, "avatar": "https://seccdn.libravatar.org/avatar/206836f19760600eddc7a5d57eff27911af45cd6700988f4fcb5502927e3c1c2?s=24&d=retro", "openid": "sjenning.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 625760, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "client works for me\n\nkarma: +1", "timestamp": "2017-06-22 19:46:59", "update_id": 90588, "user_id": 207, "id": 625760, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 626271, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-23 17:15:45", "update_id": 90592, "user_id": 1716, "id": 626271, "testcase_feedback": [], "user": {"name": "dwille", "email": "dwille@gmail.com", "id": 1716, "avatar": "https://seccdn.libravatar.org/avatar/44365488c190217ddaee5acc25b0e94b6cadfc6b4cd4940ff456405c6673220b?s=24&d=retro", "openid": "dwille.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 626917, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested as VPN server", "timestamp": "2017-06-25 03:20:07", "update_id": 90592, "user_id": 2967, "id": 626917, "testcase_feedback": [], "user": {"name": "greenfeld", "email": "samuel@greenfeld.org", "id": 2967, "avatar": "https://seccdn.libravatar.org/avatar/18bb85be37b1762a9e4ac2ab580d9ab88662d289a54249a65400612e1d6c583e?s=24&d=retro", "openid": "greenfeld.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}]}}}, {"karma": 0, "comment_id": 626981, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "Is there a specific reason you enabled auto restart (again)? Will it restart all server profiles from /etc/openvpn-server that are enabled with systemctl? \n\nIt may be a bit tricky for us, as we generally install updates, but then choose a later time to restart the OpenVPN server processes... Is it possible to disable this behavior?\n\nIn any case, thanks for the heads up, will consider this on the next update.", "timestamp": "2017-06-25 09:43:17", "update_id": 90592, "user_id": 423, "id": 626981, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 627401, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Fun fact: I got complaints that updates didn't restart the openvpn services.\n\nYes, it should restart all profiles on the server.  It is not something we can change now; the cat is already out of the bag.  So the next update will restart the service anyhow, also if we add some \"tunable feature\" in the next update - it will be restarted regardless.\n\nBut I can look at adding a \"don't restart\" feature.  For example something like checking if a file named /etc/openvpn/server/.update-no-restart  exists or not.  I'm not saying that's how it will be, but that is one plausible solution.\n\nSo to the longer answer why this was changed.  When I cleaned up the .spec file, a lot of moving parts had to be changed at the same time (otherwise we wouldn't  be finished with the clean up until after the next 5-6 updates).  A lot of the changes involved moving over to standardized RPM macros for doing a lot of things.  So I chose to ensure we don't break running services needlessly on automated updates until the dust had settled a bit.  And now it felt like the right time to do what most users expects.\n", "timestamp": "2017-06-26 11:12:21", "update_id": 90592, "user_id": 446, "id": 627401, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627402, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "> But I can look at adding a \"don't restart\" feature.\n\nThat would be cool, but maybe you don't need to invest time in this if I'm to only one who wants this, something can be said for both approaches. I think also Debian always restarts daemons on update, but not completely sure...\n\n> And now it felt like the right time to do what most users expects.\n\nFair enough. I guess installing updates outside maintenance windows without rebooting/restarting can be unstable/dangerous anyway. So we'll live :-) \n\nThanks for the explanation! ", "timestamp": "2017-06-26 11:35:48", "update_id": 90592, "user_id": 423, "id": 627402, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1463647, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1463647, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2017-5596f2f94d", "karma": 1, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Security fix for two remote DoS issues (CVE-2017-7478, CVE-2017-7479)\n", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-05-16 10:27:01", "date_modified": "2017-05-19 16:48:26", "date_approved": null, "date_testing": "2017-05-20 12:33:39", "date_stable": "2017-05-23 19:28:29", "alias": "FEDORA-2017-f426acf49d", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-05-23 19:28:29", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-f426acf49d", "title": "openvpn-2.3.16-1.fc24", "version_hash": "8cfc315abfd3c2219b07cc0e7e88f212c9f73da7", "release": {"name": "F24", "long_name": "Fedora 24", "version": "24", "id_prefix": "FEDORA", "branch": "f24", "dist_tag": "f24", "stable_tag": "f24-updates", "testing_tag": "f24-updates-testing", "candidate_tag": "f24-updates-candidate", "pending_signing_tag": "f24-signing-pending", "pending_testing_tag": "f24-updates-testing-pending", "pending_stable_tag": "f24-updates-pending", "override_tag": "f24-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-05-16 10:27:01", "update_id": 87820, "user_id": 91, "id": 608912, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-05-17 01:06:54", "update_id": 87820, "user_id": 91, "id": 609131, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works fine for me in a VM", "timestamp": "2017-05-18 06:34:02", "update_id": 87820, "user_id": 739, "id": 609749, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been unpushed.", "timestamp": "2017-05-18 09:05:54", "update_id": 87820, "user_id": 446, "id": 609783, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Sorry, we have discovered some issues with the source tarball, so this needs to be rebuilt once upstream have fixed these issues.", "timestamp": "2017-05-18 09:06:36", "update_id": 87820, "user_id": 446, "id": 609784, "bug_feedback": [{"karma": 0, "comment_id": 609784, "bug_id": 1450993, "bug": {"bug_id": 1450993, "title": "CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets", "security": true, "parent": true}}, {"karma": 0, "comment_id": 609784, "bug_id": 1450997, "bug": {"bug_id": 1450997, "title": "CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "security": true, "parent": true}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.\n\nNew build(s):\n\n- openvpn-2.3.16-1.fc24\n\nRemoved build(s):\n\n- openvpn-2.3.15-1.fc24\n\nKarma has been reset.", "timestamp": "2017-05-19 16:48:17", "update_id": 87820, "user_id": 91, "id": 610391, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-05-19 16:48:24", "update_id": 87820, "user_id": 91, "id": 610392, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-05-20 14:31:47", "update_id": 87820, "user_id": 91, "id": 610853, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2017-05-22 01:25:47", "update_id": 87820, "user_id": 124, "id": 611211, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/f4394b8fb4c9a99c4b534dc724912fe75a5b87fe15048985ece8388c2441d0ca?s=24&d=retro", "openid": "filiperosset.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "fedora-br"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2017-05-22 20:18:46", "update_id": 87820, "user_id": 2998, "id": 611719, "bug_feedback": [{"karma": 0, "comment_id": 611719, "bug_id": 1450993, "bug": {"bug_id": 1450993, "title": "CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets", "security": true, "parent": true}}, {"karma": 0, "comment_id": 611719, "bug_id": 1450997, "bug": {"bug_id": 1450997, "title": "CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "security": true, "parent": true}}], "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-05-22 20:18:48", "update_id": 87820, "user_id": 91, "id": 611720, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-05-24 04:56:19", "update_id": 87820, "user_id": 91, "id": 612308, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.3.16-1.fc24", "signed": true, "release_id": 14, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1450993, "title": "CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 609784, "bug_id": 1450993, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, we have discovered some issues with the source tarball, so this needs to be rebuilt once upstream have fixed these issues.", "timestamp": "2017-05-18 09:06:36", "update_id": 87820, "user_id": 446, "id": 609784, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 611719, "bug_id": 1450993, "comment": {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2017-05-22 20:18:46", "update_id": 87820, "user_id": 2998, "id": 611719, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1450997, "title": "CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 609784, "bug_id": 1450997, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, we have discovered some issues with the source tarball, so this needs to be rebuilt once upstream have fixed these issues.", "timestamp": "2017-05-18 09:06:36", "update_id": 87820, "user_id": 446, "id": 609784, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 611719, "bug_id": 1450997, "comment": {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2017-05-22 20:18:46", "update_id": 87820, "user_id": 2998, "id": 611719, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}]}], "updateid": "FEDORA-2017-f426acf49d", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "This update brings in the latest OpenVPN v2.4.2 release. This release contains fixes for two authenticated remote DoS vulnerabilities (CVE-2017-7478 and CVE-2017-7479).  For more information see the upstream [security announcement](http://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits).\n\nThis build also switches back to OpenSSL 1.0, using compat-openssl10 and compat-openssl10-pkcs11-helper. This is temporarily until full OpenSSL 1.1 support have arrived OpenVPN.  This should also resolve a lot of issues with features missing or not working properly with mbed TLS.", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-05-11 20:23:55", "date_modified": null, "date_approved": null, "date_testing": "2017-05-12 19:32:35", "date_stable": "2017-05-14 20:16:27", "alias": "FEDORA-2017-89d98779ec", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-05-14 20:16:27", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-89d98779ec", "title": "openvpn-2.4.2-1.fc26", "version_hash": "bddedc80b982271e31d9575f684bf50e845fd805", "release": {"name": "F26", "long_name": "Fedora 26", "version": "26", "id_prefix": "FEDORA", "branch": "f26", "dist_tag": "f26", "stable_tag": "f26-updates", "testing_tag": "f26-updates-testing", "candidate_tag": "f26-updates-candidate", "pending_signing_tag": "f26-signing-pending", "pending_testing_tag": "f26-updates-testing-pending", "pending_stable_tag": "f26-updates-pending", "override_tag": "f26-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-05-11 20:23:55", "update_id": 87537, "user_id": 91, "id": 606270, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "It works, MD5 bug fixed", "timestamp": "2017-05-12 14:26:16", "update_id": 87537, "user_id": 208, "id": 606821, "bug_feedback": [{"karma": 0, "comment_id": 606821, "bug_id": 1443942, "bug": {"bug_id": 1443942, "title": "enable the x509-username-field option", "security": false, "parent": false}}, {"karma": 0, "comment_id": 606821, "bug_id": 1440468, "bug": {"bug_id": 1440468, "title": "OpenVPN 2.4 in F26 lacks --pkcs12 support when built against mbed TLS", "security": false, "parent": false}}, {"karma": 0, "comment_id": 606821, "bug_id": 1432125, "bug": {"bug_id": 1432125, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false}}, {"karma": 1, "comment_id": 606821, "bug_id": 1443749, "bug": {"bug_id": 1443749, "title": "No MD5 support available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "renault", "email": "cacouret.renault@gmail.com", "id": 208, "avatar": "https://seccdn.libravatar.org/avatar/aa62a9ab252e71079b0a269b65512d76baf98b7c2c24f15cfd25e6b8f0839c1a?s=24&d=retro", "openid": "renault.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "l10n-commits"}, {"name": "gitmuffin"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-05-13 01:15:02", "update_id": 87537, "user_id": 91, "id": 607206, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2017-05-13 09:39:20", "update_id": 87537, "user_id": 206, "id": 607335, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me in a VM", "timestamp": "2017-05-13 13:59:46", "update_id": 87537, "user_id": 739, "id": 607412, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-05-13 13:59:47", "update_id": 87537, "user_id": 91, "id": 607413, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Work for me\n", "timestamp": "2017-05-14 05:30:45", "update_id": 87537, "user_id": 207, "id": 607506, "bug_feedback": [{"karma": 0, "comment_id": 607506, "bug_id": 1443942, "bug": {"bug_id": 1443942, "title": "enable the x509-username-field option", "security": false, "parent": false}}, {"karma": 0, "comment_id": 607506, "bug_id": 1440468, "bug": {"bug_id": 1440468, "title": "OpenVPN 2.4 in F26 lacks --pkcs12 support when built against mbed TLS", "security": false, "parent": false}}, {"karma": 0, "comment_id": 607506, "bug_id": 1432125, "bug": {"bug_id": 1432125, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 607506, "bug_id": 1443749, "bug": {"bug_id": 1443749, "title": "No MD5 support available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-05-14 20:22:51", "update_id": 87537, "user_id": 91, "id": 607713, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:32:22", "update_id": 87537, "user_id": 446, "id": 608913, "bug_feedback": [{"karma": 0, "comment_id": 608913, "bug_id": 1443942, "bug": {"bug_id": 1443942, "title": "enable the x509-username-field option", "security": false, "parent": false}}, {"karma": 0, "comment_id": 608913, "bug_id": 1440468, "bug": {"bug_id": 1440468, "title": "OpenVPN 2.4 in F26 lacks --pkcs12 support when built against mbed TLS", "security": false, "parent": false}}, {"karma": 0, "comment_id": 608913, "bug_id": 1432125, "bug": {"bug_id": 1432125, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 608913, "bug_id": 1443749, "bug": {"bug_id": 1443749, "title": "No MD5 support available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}], "builds": [{"nvr": "openvpn-2.4.2-1.fc26", "signed": true, "release_id": 16, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1432125, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 606821, "bug_id": 1432125, "comment": {"karma": 1, "karma_critpath": 0, "text": "It works, MD5 bug fixed", "timestamp": "2017-05-12 14:26:16", "update_id": 87537, "user_id": 208, "id": 606821, "testcase_feedback": [], "user": {"name": "renault", "email": "cacouret.renault@gmail.com", "id": 208, "avatar": "https://seccdn.libravatar.org/avatar/aa62a9ab252e71079b0a269b65512d76baf98b7c2c24f15cfd25e6b8f0839c1a?s=24&d=retro", "openid": "renault.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "l10n-commits"}, {"name": "gitmuffin"}]}}}, {"karma": 0, "comment_id": 607506, "bug_id": 1432125, "comment": {"karma": 0, "karma_critpath": 0, "text": "Work for me\n", "timestamp": "2017-05-14 05:30:45", "update_id": 87537, "user_id": 207, "id": 607506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 608913, "bug_id": 1432125, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:32:22", "update_id": 87537, "user_id": 446, "id": 608913, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1440468, "title": "OpenVPN 2.4 in F26 lacks --pkcs12 support when built against mbed TLS", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 606821, "bug_id": 1440468, "comment": {"karma": 1, "karma_critpath": 0, "text": "It works, MD5 bug fixed", "timestamp": "2017-05-12 14:26:16", "update_id": 87537, "user_id": 208, "id": 606821, "testcase_feedback": [], "user": {"name": "renault", "email": "cacouret.renault@gmail.com", "id": 208, "avatar": "https://seccdn.libravatar.org/avatar/aa62a9ab252e71079b0a269b65512d76baf98b7c2c24f15cfd25e6b8f0839c1a?s=24&d=retro", "openid": "renault.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "l10n-commits"}, {"name": "gitmuffin"}]}}}, {"karma": 0, "comment_id": 607506, "bug_id": 1440468, "comment": {"karma": 0, "karma_critpath": 0, "text": "Work for me\n", "timestamp": "2017-05-14 05:30:45", "update_id": 87537, "user_id": 207, "id": 607506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 608913, "bug_id": 1440468, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:32:22", "update_id": 87537, "user_id": 446, "id": 608913, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1443749, "title": "No MD5 support available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 606821, "bug_id": 1443749, "comment": {"karma": 1, "karma_critpath": 0, "text": "It works, MD5 bug fixed", "timestamp": "2017-05-12 14:26:16", "update_id": 87537, "user_id": 208, "id": 606821, "testcase_feedback": [], "user": {"name": "renault", "email": "cacouret.renault@gmail.com", "id": 208, "avatar": "https://seccdn.libravatar.org/avatar/aa62a9ab252e71079b0a269b65512d76baf98b7c2c24f15cfd25e6b8f0839c1a?s=24&d=retro", "openid": "renault.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "l10n-commits"}, {"name": "gitmuffin"}]}}}, {"karma": 0, "comment_id": 607506, "bug_id": 1443749, "comment": {"karma": 0, "karma_critpath": 0, "text": "Work for me\n", "timestamp": "2017-05-14 05:30:45", "update_id": 87537, "user_id": 207, "id": 607506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 608913, "bug_id": 1443749, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:32:22", "update_id": 87537, "user_id": 446, "id": 608913, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1443942, "title": "enable the x509-username-field option", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 606821, "bug_id": 1443942, "comment": {"karma": 1, "karma_critpath": 0, "text": "It works, MD5 bug fixed", "timestamp": "2017-05-12 14:26:16", "update_id": 87537, "user_id": 208, "id": 606821, "testcase_feedback": [], "user": {"name": "renault", "email": "cacouret.renault@gmail.com", "id": 208, "avatar": "https://seccdn.libravatar.org/avatar/aa62a9ab252e71079b0a269b65512d76baf98b7c2c24f15cfd25e6b8f0839c1a?s=24&d=retro", "openid": "renault.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "l10n-commits"}, {"name": "gitmuffin"}]}}}, {"karma": 0, "comment_id": 607506, "bug_id": 1443942, "comment": {"karma": 0, "karma_critpath": 0, "text": "Work for me\n", "timestamp": "2017-05-14 05:30:45", "update_id": 87537, "user_id": 207, "id": 607506, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 608913, "bug_id": 1443942, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:32:22", "update_id": 87537, "user_id": 446, "id": 608913, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}], "updateid": "FEDORA-2017-89d98779ec", "karma": 3, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": false, "require_testcases": true, "display_name": "", "notes": "This update brings in the latest OpenVPN v2.4.2 release. This release contains fixes for two authenticated remote DoS vulnerabilities (CVE-2017-7478 and CVE-2017-7479).\n\nFor more information see the upstream [security announcement](http://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits).\n", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-05-11 14:44:24", "date_modified": null, "date_approved": null, "date_testing": "2017-05-12 12:09:29", "date_stable": "2017-05-14 20:16:02", "alias": "FEDORA-2017-0d0f18140a", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-05-14 20:16:02", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-0d0f18140a", "title": "openvpn-2.4.2-1.fc25", "version_hash": "8c65851bc383e44a06e0f5d304a0216ee7b3693c", "release": {"name": "F25", "long_name": "Fedora 25", "version": "25", "id_prefix": "FEDORA", "branch": "f25", "dist_tag": "f25", "stable_tag": "f25-updates", "testing_tag": "f25-updates-testing", "candidate_tag": "f25-updates-candidate", "pending_signing_tag": "f25-signing-pending", "pending_testing_tag": "f25-updates-testing-pending", "pending_stable_tag": "f25-updates-pending", "override_tag": "f25-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-05-11 14:44:24", "update_id": 87506, "user_id": 91, "id": 606186, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-05-12 13:42:30", "update_id": 87506, "user_id": 91, "id": 606718, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works", "timestamp": "2017-05-12 13:50:42", "update_id": 87506, "user_id": 491, "id": 606743, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "pwalter", "email": "walter.pete@yandex.com", "id": 491, "avatar": "https://seccdn.libravatar.org/avatar/20f7756718e08ef810fe23344dfdcafe17dfb277e2c27d5cbf81e35b66247795?s=24&d=retro", "openid": "pwalter.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-05-13 13:41:56", "update_id": 87506, "user_id": 739, "id": 607376, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-05-13 13:41:58", "update_id": 87506, "user_id": 91, "id": 607377, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me", "timestamp": "2017-05-13 13:52:46", "update_id": 87506, "user_id": 202, "id": 607393, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dandim", "email": "dan.dim@seznam.cz", "id": 202, "avatar": "https://seccdn.libravatar.org/avatar/f0f96b1ac727426da54b2b24ac6b98a5f075783c24214b710f8893cd9b1ae00e?s=24&d=retro", "openid": "dandim.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-05-15 04:42:22", "update_id": 87506, "user_id": 91, "id": 607930, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:33:30", "update_id": 87506, "user_id": 446, "id": 608914, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}], "builds": [{"nvr": "openvpn-2.4.2-1.fc25", "signed": true, "release_id": 15, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2017-0d0f18140a", "karma": 3, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": false, "require_testcases": true, "display_name": "", "notes": "This update brings in the latest OpenVPN v2.4.2 release. This release contains fixes for two authenticated remote DoS vulnerabilities (CVE-2017-7478 and CVE-2017-7479).  For more information see the upstream [security announcement](http://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits).\n\nIn addition the plug-in location which got removed by an accident during the clean-up is also back again.\n", "type": "security", "status": "obsolete", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-05-11 14:42:50", "date_modified": null, "date_approved": null, "date_testing": "2017-05-12 19:26:31", "date_stable": null, "alias": "FEDORA-EPEL-2017-6ee18d1c7b", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-05-12 19:26:31", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2017-6ee18d1c7b", "title": "openvpn-2.4.2-1.el6", "version_hash": "3af42b45309a5c00e5e77ff11dcf9af8acf66cfe", "release": {"name": "EL-6", "long_name": "Fedora EPEL 6", "version": "6", "id_prefix": "FEDORA-EPEL", "branch": "el6", "dist_tag": "dist-6E-epel", "stable_tag": "dist-6E-epel", "testing_tag": "dist-6E-epel-testing", "candidate_tag": "dist-6E-epel-testing-candidate", "pending_signing_tag": "", "pending_testing_tag": "", "pending_stable_tag": "", "override_tag": "dist-6E-epel-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-05-11 14:42:50", "update_id": 87505, "user_id": 91, "id": 606185, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-05-12 19:53:26", "update_id": 87505, "user_id": 91, "id": 606955, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Working on CentOS 6 as planned.", "timestamp": "2017-05-15 13:34:31", "update_id": 87505, "user_id": 3624, "id": 608228, "bug_feedback": [{"karma": 1, "comment_id": 608228, "bug_id": 1444535, "bug": {"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "randomvariable", "email": "naadir@randomvariable.co.uk", "id": 3624, "avatar": "https://seccdn.libravatar.org/avatar/0c686c02c22aca3cdfed6e39df04a961ed9db0535aa7180c2b9a25ad704635a1?s=24&d=retro", "openid": "randomvariable.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-05-15 13:36:31", "update_id": 87505, "user_id": 207, "id": 608229, "bug_feedback": [{"karma": 1, "comment_id": 608229, "bug_id": 1444535, "bug": {"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:33:39", "update_id": 87505, "user_id": 446, "id": 608916, "bug_feedback": [{"karma": 0, "comment_id": 608916, "bug_id": 1444535, "bug": {"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2017-05-27 00:00:57", "update_id": 87505, "user_id": 91, "id": 613645, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [openvpn-2.4.3-1.el6](https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74).", "timestamp": "2017-06-21 14:15:43", "update_id": 87505, "user_id": 91, "id": 625310, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.2-1.el6", "signed": false, "release_id": 10, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1444535, "title": "Plugin symlinks missing in openvpn-2.4.1-3.el6", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 608228, "bug_id": 1444535, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working on CentOS 6 as planned.", "timestamp": "2017-05-15 13:34:31", "update_id": 87505, "user_id": 3624, "id": 608228, "testcase_feedback": [], "user": {"name": "randomvariable", "email": "naadir@randomvariable.co.uk", "id": 3624, "avatar": "https://seccdn.libravatar.org/avatar/0c686c02c22aca3cdfed6e39df04a961ed9db0535aa7180c2b9a25ad704635a1?s=24&d=retro", "openid": "randomvariable.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 1, "comment_id": 608229, "bug_id": 1444535, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-05-15 13:36:31", "update_id": 87505, "user_id": 207, "id": 608229, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 608916, "bug_id": 1444535, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:33:39", "update_id": 87505, "user_id": 446, "id": 608916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 627954, "bug_id": 1444535, "comment": {"karma": 0, "karma_critpath": 0, "text": "\n\nkarma: +1", "timestamp": "2017-06-27 10:58:05", "update_id": 90591, "user_id": 207, "id": 627954, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 627955, "bug_id": 1444535, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:05:29", "update_id": 90591, "user_id": 3703, "id": 627955, "testcase_feedback": [], "user": {"name": "markec", "email": "marko.bevc@gmail.com", "id": 3703, "avatar": "https://seccdn.libravatar.org/avatar/2a3640b3b2df97a062aff29758dd6a2ce98adba2cdd4da3fceb85df19b25200c?s=24&d=retro", "openid": "markec.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 627956, "bug_id": 1444535, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-06-27 11:08:01", "update_id": 90591, "user_id": 3704, "id": 627956, "testcase_feedback": [], "user": {"name": "defer", "email": "david@scalefactory.com", "id": 3704, "avatar": "https://seccdn.libravatar.org/avatar/9aef900eeaaf586e9362f4097159ab6e6b330a003e2884f2964dde62d2337e4c?s=24&d=retro", "openid": "defer.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-EPEL-2017-6ee18d1c7b", "karma": 1, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": false, "require_testcases": true, "display_name": "", "notes": "This update brings in the latest OpenVPN v2.4.2 release.  This release contains fixes for two authenticated remote DoS vulnerabilities (CVE-2017-7478 and CVE-2017-7479).\n\nFor more information see the upstream [security announcement](http://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits).\n\nAlso added a few fixes, related to package and own some run/shared state directories.", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-05-11 14:39:31", "date_modified": "2017-05-11 21:30:19", "date_approved": null, "date_testing": "2017-05-12 19:27:35", "date_stable": "2017-05-16 12:18:26", "alias": "FEDORA-EPEL-2017-c9f915d837", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-05-16 12:18:26", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2017-c9f915d837", "title": "openvpn-2.4.2-2.el7", "version_hash": "1f68e629b0e6e9204fcef0de0dced591a10c164e", "release": {"name": "EPEL-7", "long_name": "Fedora EPEL 7", "version": "7", "id_prefix": "FEDORA-EPEL", "branch": "epel7", "dist_tag": "epel7", "stable_tag": "epel7", "testing_tag": "epel7-testing", "candidate_tag": "epel7-testing-candidate", "pending_signing_tag": "epel7-signing-pending", "pending_testing_tag": "epel7-testing-pending", "pending_stable_tag": "epel7-pending", "override_tag": "epel7-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-05-11 14:39:31", "update_id": 87504, "user_id": 91, "id": 606183, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.\n\nNew build(s):\n\n- openvpn-2.4.2-2.el7\n\nRemoved build(s):\n\n- openvpn-2.4.2-1.el7\n\nKarma has been reset.", "timestamp": "2017-05-11 21:30:18", "update_id": 87504, "user_id": 91, "id": 606277, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-05-12 19:58:16", "update_id": 87504, "user_id": 91, "id": 606992, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-05-14 10:07:50", "update_id": 87504, "user_id": 423, "id": 607560, "bug_feedback": [{"karma": 0, "comment_id": 607560, "bug_id": 922786, "bug": {"bug_id": 922786, "title": "New directory for openvpn variable data /var/lib/openvpn/ request", "security": false, "parent": false}}, {"karma": 1, "comment_id": 607560, "bug_id": 1444601, "bug": {"bug_id": 1444601, "title": "OpenVPN fails to launch due to missing /var/run directory", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Update passes tests within local Puppet runs.\nNew directory locations confirmed.", "timestamp": "2017-05-15 14:39:12", "update_id": 87504, "user_id": 3624, "id": 608290, "bug_feedback": [{"karma": 1, "comment_id": 608290, "bug_id": 922786, "bug": {"bug_id": 922786, "title": "New directory for openvpn variable data /var/lib/openvpn/ request", "security": false, "parent": false}}, {"karma": 1, "comment_id": 608290, "bug_id": 1444601, "bug": {"bug_id": 1444601, "title": "OpenVPN fails to launch due to missing /var/run directory", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "randomvariable", "email": "naadir@randomvariable.co.uk", "id": 3624, "avatar": "https://seccdn.libravatar.org/avatar/0c686c02c22aca3cdfed6e39df04a961ed9db0535aa7180c2b9a25ad704635a1?s=24&d=retro", "openid": "randomvariable.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-05-15 14:39:13", "update_id": 87504, "user_id": 91, "id": 608291, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:33:30", "update_id": 87504, "user_id": 446, "id": 608915, "bug_feedback": [{"karma": 0, "comment_id": 608915, "bug_id": 922786, "bug": {"bug_id": 922786, "title": "New directory for openvpn variable data /var/lib/openvpn/ request", "security": false, "parent": false}}, {"karma": 0, "comment_id": 608915, "bug_id": 1444601, "bug": {"bug_id": 1444601, "title": "OpenVPN fails to launch due to missing /var/run directory", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-05-16 13:55:41", "update_id": 87504, "user_id": 91, "id": 608983, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.2-2.el7", "signed": true, "release_id": 8, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 922786, "title": "New directory for openvpn variable data /var/lib/openvpn/ request", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 607560, "bug_id": 922786, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-05-14 10:07:50", "update_id": 87504, "user_id": 423, "id": 607560, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 608290, "bug_id": 922786, "comment": {"karma": 1, "karma_critpath": 0, "text": "Update passes tests within local Puppet runs.\nNew directory locations confirmed.", "timestamp": "2017-05-15 14:39:12", "update_id": 87504, "user_id": 3624, "id": 608290, "testcase_feedback": [], "user": {"name": "randomvariable", "email": "naadir@randomvariable.co.uk", "id": 3624, "avatar": "https://seccdn.libravatar.org/avatar/0c686c02c22aca3cdfed6e39df04a961ed9db0535aa7180c2b9a25ad704635a1?s=24&d=retro", "openid": "randomvariable.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 608915, "bug_id": 922786, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:33:30", "update_id": 87504, "user_id": 446, "id": 608915, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1444601, "title": "OpenVPN fails to launch due to missing /var/run directory", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 607560, "bug_id": 1444601, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2017-05-14 10:07:50", "update_id": 87504, "user_id": 423, "id": 607560, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 608290, "bug_id": 1444601, "comment": {"karma": 1, "karma_critpath": 0, "text": "Update passes tests within local Puppet runs.\nNew directory locations confirmed.", "timestamp": "2017-05-15 14:39:12", "update_id": 87504, "user_id": 3624, "id": 608290, "testcase_feedback": [], "user": {"name": "randomvariable", "email": "naadir@randomvariable.co.uk", "id": 3624, "avatar": "https://seccdn.libravatar.org/avatar/0c686c02c22aca3cdfed6e39df04a961ed9db0535aa7180c2b9a25ad704635a1?s=24&d=retro", "openid": "randomvariable.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 608915, "bug_id": 1444601, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update was prepared before the proper CVE bugzillas were created, but here is the reference to them.\n\nrhbz#1450993 -  CVE-2017-7478 openvpn: Unauthenticated DoS via large control packets\n\nrhbz#1450997 -  CVE-2017-7479 openvpn: DoS due to exhaustion of packet-ID counter", "timestamp": "2017-05-16 10:33:30", "update_id": 87504, "user_id": 446, "id": 608915, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}], "updateid": "FEDORA-EPEL-2017-c9f915d837", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -2, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Mainly a package maintenance update but does also fix a particular systemd unit file issue with the old and deprecated openvpn@.service unit file.", "type": "enhancement", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-03-28 22:15:33", "date_modified": null, "date_approved": null, "date_testing": "2017-03-29 18:03:40", "date_stable": "2017-03-30 19:37:39", "alias": "FEDORA-2017-0ffb8246fa", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-03-30 19:37:39", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-0ffb8246fa", "title": "openvpn-2.4.1-2.fc25", "version_hash": "6172bf011a61328efa5b3a6f90c698cc48532192", "release": {"name": "F25", "long_name": "Fedora 25", "version": "25", "id_prefix": "FEDORA", "branch": "f25", "dist_tag": "f25", "stable_tag": "f25-updates", "testing_tag": "f25-updates-testing", "candidate_tag": "f25-updates-candidate", "pending_signing_tag": "f25-signing-pending", "pending_testing_tag": "f25-updates-testing-pending", "pending_stable_tag": "f25-updates-pending", "override_tag": "f25-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-28 22:15:34", "update_id": 83696, "user_id": 91, "id": 583703, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-29 19:20:48", "update_id": 83696, "user_id": 91, "id": 584276, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "bug_feedback": [{"karma": 1, "comment_id": 584369, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "bug_feedback": [{"karma": 0, "comment_id": 584576, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 584576, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me still, no regressions noted", "timestamp": "2017-03-30 08:01:32", "update_id": 83696, "user_id": 739, "id": 584592, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-03-30 08:01:33", "update_id": 83696, "user_id": 91, "id": 584593, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "bug_feedback": [{"karma": 1, "comment_id": 584613, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 584613, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "bug_feedback": [{"karma": 0, "comment_id": 584647, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-03-31 02:23:44", "update_id": 83696, "user_id": 91, "id": 585031, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "bug_feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 585201, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "bug_feedback": [{"karma": 0, "comment_id": 585242, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}], "builds": [{"nvr": "openvpn-2.4.1-2.fc25", "signed": true, "release_id": 15, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 585267, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Yes! I have received some positive reports on these exact changes in F25 and F26, so I will update this update with a new build during today.  Bugzilla rhbz#1435831is the one covering this issue.\n", "timestamp": "2017-03-31 13:03:48", "update_id": 83348, "user_id": 446, "id": 585267, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 581252, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me, client and server side, over UDP and TCP.  Not sure about the backwards compatibility issues from the previous 2.4 build re: .ovpn files - I'm only using via the NetworkManager plugin.", "timestamp": "2017-03-24 07:33:53", "update_id": 83251, "user_id": 840, "id": 581252, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 581358, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}}, {"karma": -1, "comment_id": 581562, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "openvpn@.service can't start, see https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-03-24 19:03:56", "update_id": 83251, "user_id": 688, "id": 581562, "testcase_feedback": [], "user": {"name": "nucleo", "email": "alekcejk@googlemail.com", "id": 688, "avatar": "https://seccdn.libravatar.org/avatar/90ceb8e362e23d9ecaafa87854177f9dedb363f0ad40357579516288beea7c0b?s=24&d=retro", "openid": "nucleo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 581923, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "I tested this on my managed VPN service running on CentOS 7 (update from 2.3.x to 2.4.1), it works like a charm I must say! Great the old (systemd) service file is still there. Will report back here if there are any issues...", "timestamp": "2017-03-25 15:30:45", "update_id": 83348, "user_id": 423, "id": 581923, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 582836, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "This does *not* work for me: There's a semantic change in `--proto udp` meaning IPv4 *and* IPv6 now. As our company's server can be reached via IPv6, but doesn't offer OpenVPN via IPv6, no connection can be established - and OpenVPN doesn't fall back to IPv4.\n\nNow, I could use `--proto udp4` instead, alas NetworkManager doesn't offer that as far as I can see.", "timestamp": "2017-03-27 17:40:22", "update_id": 83251, "user_id": 101, "id": 582836, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 582916, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@thm, that is hardly an OpenVPN package issue.  That is an issue which needs to be solved by NetworkManager-openvpn plug-in, which is outside maintained by the NetworkManager team.\n\nYou can also \"workaround\" this by either adding just the IPv4 addresses to the appropriate hostname in /etc/hosts ... or by using an IPv4 address instead of a hostname in NetworkManager.", "timestamp": "2017-03-27 19:25:34", "update_id": 83251, "user_id": 446, "id": 582916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 582922, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers Sorry, but I tend to disagree. This is a change in behavior. The Updates Policy mandates that packages must \"avoid changing the user experience if at all possible\". Changing the meaning of an option (`--proto` in that case) is such a change.", "timestamp": "2017-03-27 19:52:43", "update_id": 83251, "user_id": 101, "id": 582922, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584351, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, there is a potential issue with this update where OpenVPN will not start after a reboot if using the old and deprecated openvpn@.service units.  The new ones (openvpn-client@.service and openvpn-server@.service) should work fine.\n\nI will backport several of the packaging enhancements from rawhide and F25 which should resolve this issue - and a few other ones as well.  Hopefully I will manage that this week.", "timestamp": "2017-03-29 22:30:13", "update_id": 83348, "user_id": 446, "id": 584351, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584370, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, it seems `/var/run/openvpn` does not exist anymore after reboot, only `/var/run/openvpn-{client,server}`.  That's the issue you are talking about? I'm looking to move to the server one soon though!", "timestamp": "2017-03-29 23:07:19", "update_id": 83348, "user_id": 423, "id": 584370, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 584576, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584613, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 593480, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "I've run openvpn-2.4.1-2.el6  on a SL6.7 since March 23 and 2.4.1-3.el6 since April 10.  Both configured with server and client configurations.  Everything works as expected in those configurations.  The 2.4 release have otherwise been pushed out for el7, where the main difference is that el7 is systemd based and el6 still uses init.d scripts.  So considering this to be reasonably safe.", "timestamp": "2017-04-14 12:54:35", "update_id": 83301, "user_id": 446, "id": 593480, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627472, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hi Guys,\n/var/run/openvpn/ is missing in rpm-File:\nrpm -ql openvpn\n/etc/openvpn\n/etc/openvpn/client\n/etc/openvpn/server\n/usr/lib/systemd/system/openvpn-client@.service\n/usr/lib/systemd/system/openvpn-server@.service\n/usr/lib/systemd/system/openvpn@.service\n/usr/lib/tmpfiles.d/openvpn.conf\n/usr/lib64/openvpn\n/usr/lib64/openvpn/plugins\n/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so\n/usr/lib64/openvpn/plugins/openvpn-plugin-down-root.so\n/usr/sbin/openvpn\n/usr/share/doc/openvpn-2.4.1\n/usr/share/doc/openvpn-2.4.1/AUTHORS\n/usr/share/doc/openvpn-2.4.1/COPYING\n/usr/share/doc/openvpn-2.4.1/COPYRIGHT.GPL\n/usr/share/doc/openvpn-2.4.1/Changes.rst\n/usr/share/doc/openvpn-2.4.1/README\n/usr/share/doc/openvpn-2.4.1/README.auth-pam\n/usr/share/doc/openvpn-2.4.1/README.down-root\n/usr/share/doc/openvpn-2.4.1/README.systemd\n/usr/share/doc/openvpn-2.4.1/contrib\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check/OCSP_check.sh\n/usr/share/doc/openvpn-2.4.1/contrib/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.down\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.up\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.down\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.up\n/usr/share/doc/openvpn-2.4.1/management-notes.txt\n/usr/share/doc/openvpn-2.4.1/sample\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/README\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/firewall.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/home.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-client\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-server\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/office.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-shutdown.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-startup.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-client-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-server-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/auth-pam.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-start\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-stop\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/ucn.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/verify-cn\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows/sample.ovpn\n/usr/share/man/man8/openvpn.8.gz\n\n\nSo openvpn is unable to create its pidfile. Altough openvpn-client still can start.\nThere is also a report on this here: https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-06-26 15:58:47", "update_id": 83301, "user_id": 207, "id": 627472, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627490, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please test a far newer OpenVPN release.  This release is obsolete.  OpenVPN 2.4.3 was put submitted 5 days ago.\n\n    $ rpm -ql openvpn | grep run\n    /var/run/openvpn\n    $ rpm -q openvpn\n    openvpn-2.4.3-1.el6.x86_64\n\nThis should not be an issue at all.  You can find it here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74\n\nBtw. the bz you reference is also an invalid reference.  That is related to Fedora 26, which relies on systemd and its tmpfiles service.  That does not exist on EL6.\n", "timestamp": "2017-06-26 16:30:55", "update_id": 83301, "user_id": 446, "id": 627490, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627491, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, a little clarification.  That bz *comment* you reference, is related to a Fedora release with systemd.", "timestamp": "2017-06-26 16:33:35", "update_id": 83301, "user_id": 446, "id": 627491, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627926, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers: as you told here https://bodhi.fedoraproject.org/updates/openvpn-2.4.1-2.el7#comment-588424 this is a feature on EL7. This package here only affects EL6", "timestamp": "2017-06-27 09:09:54", "update_id": 83301, "user_id": 207, "id": 627926, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627950, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "That is right. The tmpfiles.d stuff is related to systemd, which is EL7 and any Fedora releases after 17 or so.\nAnd /var/run/openvpn is packaged properly in openvpn-2.4.2 and openvpn-2.4.3, so this is no longer an issue.\nThe openvpn-2.4.1 package this update is about, is obsolete and outdated.", "timestamp": "2017-06-27 10:46:59", "update_id": 83301, "user_id": 446, "id": 627950, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584576, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584613, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2017-0ffb8246fa", "karma": 4, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -2, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Mainly a package maintenance update but does also fix a particular systemd unit file issue with the old and deprecated openvpn@.service unit file.\n\n", "type": "bugfix", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-03-28 22:15:30", "date_modified": "2017-03-30 09:39:13", "date_approved": null, "date_testing": "2017-03-30 16:43:54", "date_stable": "2017-04-03 16:06:49", "alias": "FEDORA-2017-c07a04251a", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-04-03 16:06:49", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-c07a04251a", "title": "openvpn-2.4.1-3.fc26", "version_hash": "edd7d2ac71a3c694305f85f7ac5c61d6bca8ea99", "release": {"name": "F26", "long_name": "Fedora 26", "version": "26", "id_prefix": "FEDORA", "branch": "f26", "dist_tag": "f26", "stable_tag": "f26-updates", "testing_tag": "f26-updates-testing", "candidate_tag": "f26-updates-candidate", "pending_signing_tag": "f26-signing-pending", "pending_testing_tag": "f26-updates-testing-pending", "pending_stable_tag": "f26-updates-pending", "override_tag": "f26-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-28 22:15:30", "update_id": 83695, "user_id": 91, "id": 583702, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-29 17:50:52", "update_id": 83695, "user_id": 91, "id": 584196, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works for me in a VM", "timestamp": "2017-03-30 09:32:11", "update_id": 83695, "user_id": 739, "id": 584637, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been unpushed.", "timestamp": "2017-03-30 09:36:04", "update_id": 83695, "user_id": 446, "id": 584639, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "bug_feedback": [{"karma": 0, "comment_id": 584640, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.\n\nNew build(s):\n\n- openvpn-2.4.1-3.fc26\n\nRemoved build(s):\n\n- openvpn-2.4.1-2.fc26", "timestamp": "2017-03-30 09:38:28", "update_id": 83695, "user_id": 91, "id": 584642, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-30 09:38:33", "update_id": 83695, "user_id": 91, "id": 584643, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.", "timestamp": "2017-03-30 09:39:12", "update_id": 83695, "user_id": 91, "id": 584644, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-30 18:54:45", "update_id": 83695, "user_id": 91, "id": 584835, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2017-03-31 10:55:01", "update_id": 83695, "user_id": 206, "id": 585236, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2017-04-02 18:00:22", "update_id": 83695, "user_id": 91, "id": 586610, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "working fine", "timestamp": "2017-04-03 12:50:14", "update_id": 83695, "user_id": 262, "id": 586993, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "pnemade", "email": "pnemade@redhat.com", "id": 262, "avatar": "https://seccdn.libravatar.org/avatar/c383fc71de1d229226557da629fa64c03ff81abf117d5c2980ed7b86d56fbc3d?s=24&d=retro", "openid": "pnemade.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "giti18n"}, {"name": "gitinscript2"}, {"name": "gitwordxtr"}, {"name": "gityum-langpacks"}, {"name": "svnsystem-config-language"}, {"name": "ipausers"}, {"name": "gitutrrs-web"}, {"name": "svnlohit"}, {"name": "fedora-contributor"}, {"name": "svniok"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "gitiok2"}, {"name": "gitfontpackages"}, {"name": "gitredhatlsb"}, {"name": "cla_redhat"}, {"name": "cvslohit-fonts"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by dsommers. ", "timestamp": "2017-04-03 14:33:10", "update_id": 83695, "user_id": 91, "id": 587040, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-04-03 16:10:17", "update_id": 83695, "user_id": 91, "id": 587071, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.1-3.fc26", "signed": true, "release_id": 16, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 585267, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Yes! I have received some positive reports on these exact changes in F25 and F26, so I will update this update with a new build during today.  Bugzilla rhbz#1435831is the one covering this issue.\n", "timestamp": "2017-03-31 13:03:48", "update_id": 83348, "user_id": 446, "id": 585267, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 581252, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me, client and server side, over UDP and TCP.  Not sure about the backwards compatibility issues from the previous 2.4 build re: .ovpn files - I'm only using via the NetworkManager plugin.", "timestamp": "2017-03-24 07:33:53", "update_id": 83251, "user_id": 840, "id": 581252, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 581358, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}}, {"karma": -1, "comment_id": 581562, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "openvpn@.service can't start, see https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-03-24 19:03:56", "update_id": 83251, "user_id": 688, "id": 581562, "testcase_feedback": [], "user": {"name": "nucleo", "email": "alekcejk@googlemail.com", "id": 688, "avatar": "https://seccdn.libravatar.org/avatar/90ceb8e362e23d9ecaafa87854177f9dedb363f0ad40357579516288beea7c0b?s=24&d=retro", "openid": "nucleo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 581923, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "I tested this on my managed VPN service running on CentOS 7 (update from 2.3.x to 2.4.1), it works like a charm I must say! Great the old (systemd) service file is still there. Will report back here if there are any issues...", "timestamp": "2017-03-25 15:30:45", "update_id": 83348, "user_id": 423, "id": 581923, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 582836, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "This does *not* work for me: There's a semantic change in `--proto udp` meaning IPv4 *and* IPv6 now. As our company's server can be reached via IPv6, but doesn't offer OpenVPN via IPv6, no connection can be established - and OpenVPN doesn't fall back to IPv4.\n\nNow, I could use `--proto udp4` instead, alas NetworkManager doesn't offer that as far as I can see.", "timestamp": "2017-03-27 17:40:22", "update_id": 83251, "user_id": 101, "id": 582836, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 582916, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@thm, that is hardly an OpenVPN package issue.  That is an issue which needs to be solved by NetworkManager-openvpn plug-in, which is outside maintained by the NetworkManager team.\n\nYou can also \"workaround\" this by either adding just the IPv4 addresses to the appropriate hostname in /etc/hosts ... or by using an IPv4 address instead of a hostname in NetworkManager.", "timestamp": "2017-03-27 19:25:34", "update_id": 83251, "user_id": 446, "id": 582916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 582922, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers Sorry, but I tend to disagree. This is a change in behavior. The Updates Policy mandates that packages must \"avoid changing the user experience if at all possible\". Changing the meaning of an option (`--proto` in that case) is such a change.", "timestamp": "2017-03-27 19:52:43", "update_id": 83251, "user_id": 101, "id": 582922, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584351, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, there is a potential issue with this update where OpenVPN will not start after a reboot if using the old and deprecated openvpn@.service units.  The new ones (openvpn-client@.service and openvpn-server@.service) should work fine.\n\nI will backport several of the packaging enhancements from rawhide and F25 which should resolve this issue - and a few other ones as well.  Hopefully I will manage that this week.", "timestamp": "2017-03-29 22:30:13", "update_id": 83348, "user_id": 446, "id": 584351, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584370, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, it seems `/var/run/openvpn` does not exist anymore after reboot, only `/var/run/openvpn-{client,server}`.  That's the issue you are talking about? I'm looking to move to the server one soon though!", "timestamp": "2017-03-29 23:07:19", "update_id": 83348, "user_id": 423, "id": 584370, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 584576, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584613, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 593480, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "I've run openvpn-2.4.1-2.el6  on a SL6.7 since March 23 and 2.4.1-3.el6 since April 10.  Both configured with server and client configurations.  Everything works as expected in those configurations.  The 2.4 release have otherwise been pushed out for el7, where the main difference is that el7 is systemd based and el6 still uses init.d scripts.  So considering this to be reasonably safe.", "timestamp": "2017-04-14 12:54:35", "update_id": 83301, "user_id": 446, "id": 593480, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627472, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hi Guys,\n/var/run/openvpn/ is missing in rpm-File:\nrpm -ql openvpn\n/etc/openvpn\n/etc/openvpn/client\n/etc/openvpn/server\n/usr/lib/systemd/system/openvpn-client@.service\n/usr/lib/systemd/system/openvpn-server@.service\n/usr/lib/systemd/system/openvpn@.service\n/usr/lib/tmpfiles.d/openvpn.conf\n/usr/lib64/openvpn\n/usr/lib64/openvpn/plugins\n/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so\n/usr/lib64/openvpn/plugins/openvpn-plugin-down-root.so\n/usr/sbin/openvpn\n/usr/share/doc/openvpn-2.4.1\n/usr/share/doc/openvpn-2.4.1/AUTHORS\n/usr/share/doc/openvpn-2.4.1/COPYING\n/usr/share/doc/openvpn-2.4.1/COPYRIGHT.GPL\n/usr/share/doc/openvpn-2.4.1/Changes.rst\n/usr/share/doc/openvpn-2.4.1/README\n/usr/share/doc/openvpn-2.4.1/README.auth-pam\n/usr/share/doc/openvpn-2.4.1/README.down-root\n/usr/share/doc/openvpn-2.4.1/README.systemd\n/usr/share/doc/openvpn-2.4.1/contrib\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check/OCSP_check.sh\n/usr/share/doc/openvpn-2.4.1/contrib/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.down\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.up\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.down\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.up\n/usr/share/doc/openvpn-2.4.1/management-notes.txt\n/usr/share/doc/openvpn-2.4.1/sample\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/README\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/firewall.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/home.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-client\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-server\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/office.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-shutdown.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-startup.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-client-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-server-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/auth-pam.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-start\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-stop\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/ucn.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/verify-cn\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows/sample.ovpn\n/usr/share/man/man8/openvpn.8.gz\n\n\nSo openvpn is unable to create its pidfile. Altough openvpn-client still can start.\nThere is also a report on this here: https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-06-26 15:58:47", "update_id": 83301, "user_id": 207, "id": 627472, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627490, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please test a far newer OpenVPN release.  This release is obsolete.  OpenVPN 2.4.3 was put submitted 5 days ago.\n\n    $ rpm -ql openvpn | grep run\n    /var/run/openvpn\n    $ rpm -q openvpn\n    openvpn-2.4.3-1.el6.x86_64\n\nThis should not be an issue at all.  You can find it here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74\n\nBtw. the bz you reference is also an invalid reference.  That is related to Fedora 26, which relies on systemd and its tmpfiles service.  That does not exist on EL6.\n", "timestamp": "2017-06-26 16:30:55", "update_id": 83301, "user_id": 446, "id": 627490, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627491, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, a little clarification.  That bz *comment* you reference, is related to a Fedora release with systemd.", "timestamp": "2017-06-26 16:33:35", "update_id": 83301, "user_id": 446, "id": 627491, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627926, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers: as you told here https://bodhi.fedoraproject.org/updates/openvpn-2.4.1-2.el7#comment-588424 this is a feature on EL7. This package here only affects EL6", "timestamp": "2017-06-27 09:09:54", "update_id": 83301, "user_id": 207, "id": 627926, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627950, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "That is right. The tmpfiles.d stuff is related to systemd, which is EL7 and any Fedora releases after 17 or so.\nAnd /var/run/openvpn is packaged properly in openvpn-2.4.2 and openvpn-2.4.3, so this is no longer an issue.\nThe openvpn-2.4.1 package this update is about, is obsolete and outdated.", "timestamp": "2017-06-27 10:46:59", "update_id": 83301, "user_id": 446, "id": 627950, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584576, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584613, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-2017-c07a04251a", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updating to upstream OpenVPN v2.4.1. This update re-introduces a **DEPRECATED** feature to, **--tls-remote** to enable v2.3 installations to upgrade. Users are **STRONGLY** encouraged to update their configurations to use the newer option, **--verify-x509-name**.\n\nThis also adds two new unit files (openvpn-server@.service and openvpn-client@.service) which will replace the deprecated openvpn@.service. See the packaged **README.systemd** for more information  The deprecated openvpn@.service unit file have also been updated to make use of OpenVPN v2.4's improved systemd integration, removing the need for PID files.\n\n", "type": "enhancement", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-03-24 00:01:56", "date_modified": "2017-04-03 14:14:04", "date_approved": null, "date_testing": "2017-04-03 22:56:27", "date_stable": "2017-04-08 21:42:58", "alias": "FEDORA-EPEL-2017-5c642f8063", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-04-08 21:42:58", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2017-5c642f8063", "title": "openvpn-2.4.1-2.el7", "version_hash": "bf41b6a4d4090a1c6bf3bf999645d56a0e67ef95", "release": {"name": "EPEL-7", "long_name": "Fedora EPEL 7", "version": "7", "id_prefix": "FEDORA-EPEL", "branch": "epel7", "dist_tag": "epel7", "stable_tag": "epel7", "testing_tag": "epel7-testing", "candidate_tag": "epel7-testing-candidate", "pending_signing_tag": "epel7-signing-pending", "pending_testing_tag": "epel7-testing-pending", "pending_stable_tag": "epel7-pending", "override_tag": "epel7-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-24 00:01:57", "update_id": 83348, "user_id": 91, "id": 581194, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-24 19:18:04", "update_id": 83348, "user_id": 91, "id": 581580, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "I tested this on my managed VPN service running on CentOS 7 (update from 2.3.x to 2.4.1), it works like a charm I must say! Great the old (systemd) service file is still there. Will report back here if there are any issues...", "timestamp": "2017-03-25 15:30:45", "update_id": 83348, "user_id": 423, "id": 581923, "bug_feedback": [{"karma": 1, "comment_id": 581923, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@fkooman, there is a potential issue with this update where OpenVPN will not start after a reboot if using the old and deprecated openvpn@.service units.  The new ones (openvpn-client@.service and openvpn-server@.service) should work fine.\n\nI will backport several of the packaging enhancements from rawhide and F25 which should resolve this issue - and a few other ones as well.  Hopefully I will manage that this week.", "timestamp": "2017-03-29 22:30:13", "update_id": 83348, "user_id": 446, "id": 584351, "bug_feedback": [{"karma": 0, "comment_id": 584351, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@dsommers, it seems `/var/run/openvpn` does not exist anymore after reboot, only `/var/run/openvpn-{client,server}`.  That's the issue you are talking about? I'm looking to move to the server one soon though!", "timestamp": "2017-03-29 23:07:19", "update_id": 83348, "user_id": 423, "id": 584370, "bug_feedback": [{"karma": 0, "comment_id": 584370, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Yes! I have received some positive reports on these exact changes in F25 and F26, so I will update this update with a new build during today.  Bugzilla rhbz#1435831is the one covering this issue.\n", "timestamp": "2017-03-31 13:03:48", "update_id": 83348, "user_id": 446, "id": 585267, "bug_feedback": [{"karma": 0, "comment_id": 585267, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been unpushed.", "timestamp": "2017-04-03 13:24:29", "update_id": 83348, "user_id": 446, "id": 587017, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.\n\nNew build(s):\n\n- openvpn-2.4.1-2.el7\n\nRemoved build(s):\n\n- openvpn-2.4.1-1.el7", "timestamp": "2017-04-03 13:25:00", "update_id": 83348, "user_id": 91, "id": 587018, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-04-03 13:25:03", "update_id": 83348, "user_id": 91, "id": 587019, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "bug_feedback": [{"karma": 0, "comment_id": 587023, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 587023, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.", "timestamp": "2017-04-03 14:14:03", "update_id": 83348, "user_id": 91, "id": 587030, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-04-03 23:20:38", "update_id": 83348, "user_id": 91, "id": 587211, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "bug_feedback": [{"karma": 0, "comment_id": 588340, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588340, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "bug_feedback": [{"karma": 0, "comment_id": 588424, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588424, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "bug_feedback": [{"karma": 0, "comment_id": 588425, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588425, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "bug_feedback": [{"karma": 0, "comment_id": 588951, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588951, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "bug_feedback": [{"karma": 0, "comment_id": 589410, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 589410, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "bug_feedback": [{"karma": 0, "comment_id": 589443, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 589443, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "bug_feedback": [{"karma": 1, "comment_id": 590014, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 590014, "bug_id": 850257, "bug": {"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435831, "bug": {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-04-08 03:30:52", "update_id": 83348, "user_id": 91, "id": 590015, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-04-08 23:20:41", "update_id": 83348, "user_id": 91, "id": 590238, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.1-2.el7", "signed": true, "release_id": 8, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 850257, "title": "Introduce new systemd-rpm macros in openvpn spec file", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 587023, "bug_id": 850257, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 850257, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 850257, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 850257, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 850257, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 850257, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 850257, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 850257, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 585267, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Yes! I have received some positive reports on these exact changes in F25 and F26, so I will update this update with a new build during today.  Bugzilla rhbz#1435831is the one covering this issue.\n", "timestamp": "2017-03-31 13:03:48", "update_id": 83348, "user_id": 446, "id": 585267, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 581252, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me, client and server side, over UDP and TCP.  Not sure about the backwards compatibility issues from the previous 2.4 build re: .ovpn files - I'm only using via the NetworkManager plugin.", "timestamp": "2017-03-24 07:33:53", "update_id": 83251, "user_id": 840, "id": 581252, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 581358, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}}, {"karma": -1, "comment_id": 581562, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "openvpn@.service can't start, see https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-03-24 19:03:56", "update_id": 83251, "user_id": 688, "id": 581562, "testcase_feedback": [], "user": {"name": "nucleo", "email": "alekcejk@googlemail.com", "id": 688, "avatar": "https://seccdn.libravatar.org/avatar/90ceb8e362e23d9ecaafa87854177f9dedb363f0ad40357579516288beea7c0b?s=24&d=retro", "openid": "nucleo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 581923, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "I tested this on my managed VPN service running on CentOS 7 (update from 2.3.x to 2.4.1), it works like a charm I must say! Great the old (systemd) service file is still there. Will report back here if there are any issues...", "timestamp": "2017-03-25 15:30:45", "update_id": 83348, "user_id": 423, "id": 581923, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 582836, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "This does *not* work for me: There's a semantic change in `--proto udp` meaning IPv4 *and* IPv6 now. As our company's server can be reached via IPv6, but doesn't offer OpenVPN via IPv6, no connection can be established - and OpenVPN doesn't fall back to IPv4.\n\nNow, I could use `--proto udp4` instead, alas NetworkManager doesn't offer that as far as I can see.", "timestamp": "2017-03-27 17:40:22", "update_id": 83251, "user_id": 101, "id": 582836, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 582916, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@thm, that is hardly an OpenVPN package issue.  That is an issue which needs to be solved by NetworkManager-openvpn plug-in, which is outside maintained by the NetworkManager team.\n\nYou can also \"workaround\" this by either adding just the IPv4 addresses to the appropriate hostname in /etc/hosts ... or by using an IPv4 address instead of a hostname in NetworkManager.", "timestamp": "2017-03-27 19:25:34", "update_id": 83251, "user_id": 446, "id": 582916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 582922, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers Sorry, but I tend to disagree. This is a change in behavior. The Updates Policy mandates that packages must \"avoid changing the user experience if at all possible\". Changing the meaning of an option (`--proto` in that case) is such a change.", "timestamp": "2017-03-27 19:52:43", "update_id": 83251, "user_id": 101, "id": 582922, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584351, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, there is a potential issue with this update where OpenVPN will not start after a reboot if using the old and deprecated openvpn@.service units.  The new ones (openvpn-client@.service and openvpn-server@.service) should work fine.\n\nI will backport several of the packaging enhancements from rawhide and F25 which should resolve this issue - and a few other ones as well.  Hopefully I will manage that this week.", "timestamp": "2017-03-29 22:30:13", "update_id": 83348, "user_id": 446, "id": 584351, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584370, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, it seems `/var/run/openvpn` does not exist anymore after reboot, only `/var/run/openvpn-{client,server}`.  That's the issue you are talking about? I'm looking to move to the server one soon though!", "timestamp": "2017-03-29 23:07:19", "update_id": 83348, "user_id": 423, "id": 584370, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 584576, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584613, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 593480, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "I've run openvpn-2.4.1-2.el6  on a SL6.7 since March 23 and 2.4.1-3.el6 since April 10.  Both configured with server and client configurations.  Everything works as expected in those configurations.  The 2.4 release have otherwise been pushed out for el7, where the main difference is that el7 is systemd based and el6 still uses init.d scripts.  So considering this to be reasonably safe.", "timestamp": "2017-04-14 12:54:35", "update_id": 83301, "user_id": 446, "id": 593480, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627472, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hi Guys,\n/var/run/openvpn/ is missing in rpm-File:\nrpm -ql openvpn\n/etc/openvpn\n/etc/openvpn/client\n/etc/openvpn/server\n/usr/lib/systemd/system/openvpn-client@.service\n/usr/lib/systemd/system/openvpn-server@.service\n/usr/lib/systemd/system/openvpn@.service\n/usr/lib/tmpfiles.d/openvpn.conf\n/usr/lib64/openvpn\n/usr/lib64/openvpn/plugins\n/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so\n/usr/lib64/openvpn/plugins/openvpn-plugin-down-root.so\n/usr/sbin/openvpn\n/usr/share/doc/openvpn-2.4.1\n/usr/share/doc/openvpn-2.4.1/AUTHORS\n/usr/share/doc/openvpn-2.4.1/COPYING\n/usr/share/doc/openvpn-2.4.1/COPYRIGHT.GPL\n/usr/share/doc/openvpn-2.4.1/Changes.rst\n/usr/share/doc/openvpn-2.4.1/README\n/usr/share/doc/openvpn-2.4.1/README.auth-pam\n/usr/share/doc/openvpn-2.4.1/README.down-root\n/usr/share/doc/openvpn-2.4.1/README.systemd\n/usr/share/doc/openvpn-2.4.1/contrib\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check/OCSP_check.sh\n/usr/share/doc/openvpn-2.4.1/contrib/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.down\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.up\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.down\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.up\n/usr/share/doc/openvpn-2.4.1/management-notes.txt\n/usr/share/doc/openvpn-2.4.1/sample\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/README\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/firewall.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/home.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-client\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-server\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/office.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-shutdown.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-startup.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-client-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-server-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/auth-pam.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-start\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-stop\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/ucn.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/verify-cn\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows/sample.ovpn\n/usr/share/man/man8/openvpn.8.gz\n\n\nSo openvpn is unable to create its pidfile. Altough openvpn-client still can start.\nThere is also a report on this here: https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-06-26 15:58:47", "update_id": 83301, "user_id": 207, "id": 627472, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627490, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please test a far newer OpenVPN release.  This release is obsolete.  OpenVPN 2.4.3 was put submitted 5 days ago.\n\n    $ rpm -ql openvpn | grep run\n    /var/run/openvpn\n    $ rpm -q openvpn\n    openvpn-2.4.3-1.el6.x86_64\n\nThis should not be an issue at all.  You can find it here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74\n\nBtw. the bz you reference is also an invalid reference.  That is related to Fedora 26, which relies on systemd and its tmpfiles service.  That does not exist on EL6.\n", "timestamp": "2017-06-26 16:30:55", "update_id": 83301, "user_id": 446, "id": 627490, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627491, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, a little clarification.  That bz *comment* you reference, is related to a Fedora release with systemd.", "timestamp": "2017-06-26 16:33:35", "update_id": 83301, "user_id": 446, "id": 627491, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627926, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers: as you told here https://bodhi.fedoraproject.org/updates/openvpn-2.4.1-2.el7#comment-588424 this is a feature on EL7. This package here only affects EL6", "timestamp": "2017-06-27 09:09:54", "update_id": 83301, "user_id": 207, "id": 627926, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627950, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "That is right. The tmpfiles.d stuff is related to systemd, which is EL7 and any Fedora releases after 17 or so.\nAnd /var/run/openvpn is packaged properly in openvpn-2.4.2 and openvpn-2.4.3, so this is no longer an issue.\nThe openvpn-2.4.1 package this update is about, is obsolete and outdated.", "timestamp": "2017-06-27 10:46:59", "update_id": 83301, "user_id": 446, "id": 627950, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}, {"bug_id": 1435831, "title": "openvpn@.service uses --daemon and --writepid", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584576, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584613, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435831, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435831, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}]}], "updateid": "FEDORA-EPEL-2017-5c642f8063", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updating to upstream OpenVPN v2.4.1.  This update re-introduces a **DEPRECATED** feature to, **--tls-remote** to enable v2.3 installations to upgrade. Users are **STRONGLY** encouraged to update their configurations to use the newer option, **--verify-x509-name**.  In addition the general packaging have been cleaned up.\n\n\n", "type": "enhancement", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-03-23 16:12:20", "date_modified": "2017-03-29 22:23:17", "date_approved": null, "date_testing": "2017-03-31 03:24:45", "date_stable": "2017-04-15 01:51:57", "alias": "FEDORA-EPEL-2017-3da5d4f25f", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-04-15 01:51:57", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2017-3da5d4f25f", "title": "openvpn-2.4.1-3.el6", "version_hash": "4ac16c9eb00cd6b95d2069f18d10d3ae268dfadf", "release": {"name": "EL-6", "long_name": "Fedora EPEL 6", "version": "6", "id_prefix": "FEDORA-EPEL", "branch": "el6", "dist_tag": "dist-6E-epel", "stable_tag": "dist-6E-epel", "testing_tag": "dist-6E-epel-testing", "candidate_tag": "dist-6E-epel-testing-candidate", "pending_signing_tag": "", "pending_testing_tag": "", "pending_stable_tag": "", "override_tag": "dist-6E-epel-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-23 16:12:20", "update_id": 83301, "user_id": 91, "id": 580876, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.\n\nNew build(s):\n\n- openvpn-2.4.1-2.el6\n\nRemoved build(s):\n\n- openvpn-2.4.1-1.el6", "timestamp": "2017-03-23 23:00:28", "update_id": 83301, "user_id": 91, "id": 581111, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-24 19:16:35", "update_id": 83301, "user_id": 91, "id": 581566, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.\n\nNew build(s):\n\n- openvpn-2.4.1-3.el6\n\nRemoved build(s):\n\n- openvpn-2.4.1-2.el6", "timestamp": "2017-03-29 22:22:21", "update_id": 83301, "user_id": 91, "id": 584348, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-29 22:22:28", "update_id": 83301, "user_id": 91, "id": 584349, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.", "timestamp": "2017-03-29 22:23:16", "update_id": 83301, "user_id": 91, "id": 584350, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-31 03:47:50", "update_id": 83301, "user_id": 91, "id": 585116, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2017-04-14 06:00:18", "update_id": 83301, "user_id": 91, "id": 593350, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "I've run openvpn-2.4.1-2.el6  on a SL6.7 since March 23 and 2.4.1-3.el6 since April 10.  Both configured with server and client configurations.  Everything works as expected in those configurations.  The 2.4 release have otherwise been pushed out for el7, where the main difference is that el7 is systemd based and el6 still uses init.d scripts.  So considering this to be reasonably safe.", "timestamp": "2017-04-14 12:54:35", "update_id": 83301, "user_id": 446, "id": 593480, "bug_feedback": [{"karma": 0, "comment_id": 593480, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by dsommers. ", "timestamp": "2017-04-14 12:55:28", "update_id": 83301, "user_id": 91, "id": 593481, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-04-15 02:46:14", "update_id": 83301, "user_id": 91, "id": 593816, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Hi Guys,\n/var/run/openvpn/ is missing in rpm-File:\nrpm -ql openvpn\n/etc/openvpn\n/etc/openvpn/client\n/etc/openvpn/server\n/usr/lib/systemd/system/openvpn-client@.service\n/usr/lib/systemd/system/openvpn-server@.service\n/usr/lib/systemd/system/openvpn@.service\n/usr/lib/tmpfiles.d/openvpn.conf\n/usr/lib64/openvpn\n/usr/lib64/openvpn/plugins\n/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so\n/usr/lib64/openvpn/plugins/openvpn-plugin-down-root.so\n/usr/sbin/openvpn\n/usr/share/doc/openvpn-2.4.1\n/usr/share/doc/openvpn-2.4.1/AUTHORS\n/usr/share/doc/openvpn-2.4.1/COPYING\n/usr/share/doc/openvpn-2.4.1/COPYRIGHT.GPL\n/usr/share/doc/openvpn-2.4.1/Changes.rst\n/usr/share/doc/openvpn-2.4.1/README\n/usr/share/doc/openvpn-2.4.1/README.auth-pam\n/usr/share/doc/openvpn-2.4.1/README.down-root\n/usr/share/doc/openvpn-2.4.1/README.systemd\n/usr/share/doc/openvpn-2.4.1/contrib\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check/OCSP_check.sh\n/usr/share/doc/openvpn-2.4.1/contrib/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.down\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.up\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.down\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.up\n/usr/share/doc/openvpn-2.4.1/management-notes.txt\n/usr/share/doc/openvpn-2.4.1/sample\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/README\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/firewall.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/home.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-client\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-server\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/office.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-shutdown.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-startup.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-client-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-server-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/auth-pam.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-start\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-stop\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/ucn.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/verify-cn\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows/sample.ovpn\n/usr/share/man/man8/openvpn.8.gz\n\n\nSo openvpn is unable to create its pidfile. Altough openvpn-client still can start.\nThere is also a report on this here: https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-06-26 15:58:47", "update_id": 83301, "user_id": 207, "id": 627472, "bug_feedback": [{"karma": 0, "comment_id": 627472, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Please test a far newer OpenVPN release.  This release is obsolete.  OpenVPN 2.4.3 was put submitted 5 days ago.\n\n    $ rpm -ql openvpn | grep run\n    /var/run/openvpn\n    $ rpm -q openvpn\n    openvpn-2.4.3-1.el6.x86_64\n\nThis should not be an issue at all.  You can find it here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74\n\nBtw. the bz you reference is also an invalid reference.  That is related to Fedora 26, which relies on systemd and its tmpfiles service.  That does not exist on EL6.\n", "timestamp": "2017-06-26 16:30:55", "update_id": 83301, "user_id": 446, "id": 627490, "bug_feedback": [{"karma": 0, "comment_id": 627490, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Sorry, a little clarification.  That bz *comment* you reference, is related to a Fedora release with systemd.", "timestamp": "2017-06-26 16:33:35", "update_id": 83301, "user_id": 446, "id": 627491, "bug_feedback": [{"karma": 0, "comment_id": 627491, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@dsommers: as you told here https://bodhi.fedoraproject.org/updates/openvpn-2.4.1-2.el7#comment-588424 this is a feature on EL7. This package here only affects EL6", "timestamp": "2017-06-27 09:09:54", "update_id": 83301, "user_id": 207, "id": 627926, "bug_feedback": [{"karma": 0, "comment_id": 627926, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "That is right. The tmpfiles.d stuff is related to systemd, which is EL7 and any Fedora releases after 17 or so.\nAnd /var/run/openvpn is packaged properly in openvpn-2.4.2 and openvpn-2.4.3, so this is no longer an issue.\nThe openvpn-2.4.1 package this update is about, is obsolete and outdated.", "timestamp": "2017-06-27 10:46:59", "update_id": 83301, "user_id": 446, "id": 627950, "bug_feedback": [{"karma": 0, "comment_id": 627950, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}], "builds": [{"nvr": "openvpn-2.4.1-3.el6", "signed": false, "release_id": 10, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 585267, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Yes! I have received some positive reports on these exact changes in F25 and F26, so I will update this update with a new build during today.  Bugzilla rhbz#1435831is the one covering this issue.\n", "timestamp": "2017-03-31 13:03:48", "update_id": 83348, "user_id": 446, "id": 585267, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 581252, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me, client and server side, over UDP and TCP.  Not sure about the backwards compatibility issues from the previous 2.4 build re: .ovpn files - I'm only using via the NetworkManager plugin.", "timestamp": "2017-03-24 07:33:53", "update_id": 83251, "user_id": 840, "id": 581252, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 581358, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}}, {"karma": -1, "comment_id": 581562, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "openvpn@.service can't start, see https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-03-24 19:03:56", "update_id": 83251, "user_id": 688, "id": 581562, "testcase_feedback": [], "user": {"name": "nucleo", "email": "alekcejk@googlemail.com", "id": 688, "avatar": "https://seccdn.libravatar.org/avatar/90ceb8e362e23d9ecaafa87854177f9dedb363f0ad40357579516288beea7c0b?s=24&d=retro", "openid": "nucleo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 581923, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "I tested this on my managed VPN service running on CentOS 7 (update from 2.3.x to 2.4.1), it works like a charm I must say! Great the old (systemd) service file is still there. Will report back here if there are any issues...", "timestamp": "2017-03-25 15:30:45", "update_id": 83348, "user_id": 423, "id": 581923, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 582836, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "This does *not* work for me: There's a semantic change in `--proto udp` meaning IPv4 *and* IPv6 now. As our company's server can be reached via IPv6, but doesn't offer OpenVPN via IPv6, no connection can be established - and OpenVPN doesn't fall back to IPv4.\n\nNow, I could use `--proto udp4` instead, alas NetworkManager doesn't offer that as far as I can see.", "timestamp": "2017-03-27 17:40:22", "update_id": 83251, "user_id": 101, "id": 582836, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 582916, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@thm, that is hardly an OpenVPN package issue.  That is an issue which needs to be solved by NetworkManager-openvpn plug-in, which is outside maintained by the NetworkManager team.\n\nYou can also \"workaround\" this by either adding just the IPv4 addresses to the appropriate hostname in /etc/hosts ... or by using an IPv4 address instead of a hostname in NetworkManager.", "timestamp": "2017-03-27 19:25:34", "update_id": 83251, "user_id": 446, "id": 582916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 582922, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers Sorry, but I tend to disagree. This is a change in behavior. The Updates Policy mandates that packages must \"avoid changing the user experience if at all possible\". Changing the meaning of an option (`--proto` in that case) is such a change.", "timestamp": "2017-03-27 19:52:43", "update_id": 83251, "user_id": 101, "id": 582922, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584351, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, there is a potential issue with this update where OpenVPN will not start after a reboot if using the old and deprecated openvpn@.service units.  The new ones (openvpn-client@.service and openvpn-server@.service) should work fine.\n\nI will backport several of the packaging enhancements from rawhide and F25 which should resolve this issue - and a few other ones as well.  Hopefully I will manage that this week.", "timestamp": "2017-03-29 22:30:13", "update_id": 83348, "user_id": 446, "id": 584351, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584370, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, it seems `/var/run/openvpn` does not exist anymore after reboot, only `/var/run/openvpn-{client,server}`.  That's the issue you are talking about? I'm looking to move to the server one soon though!", "timestamp": "2017-03-29 23:07:19", "update_id": 83348, "user_id": 423, "id": 584370, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 584576, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584613, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 593480, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "I've run openvpn-2.4.1-2.el6  on a SL6.7 since March 23 and 2.4.1-3.el6 since April 10.  Both configured with server and client configurations.  Everything works as expected in those configurations.  The 2.4 release have otherwise been pushed out for el7, where the main difference is that el7 is systemd based and el6 still uses init.d scripts.  So considering this to be reasonably safe.", "timestamp": "2017-04-14 12:54:35", "update_id": 83301, "user_id": 446, "id": 593480, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627472, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hi Guys,\n/var/run/openvpn/ is missing in rpm-File:\nrpm -ql openvpn\n/etc/openvpn\n/etc/openvpn/client\n/etc/openvpn/server\n/usr/lib/systemd/system/openvpn-client@.service\n/usr/lib/systemd/system/openvpn-server@.service\n/usr/lib/systemd/system/openvpn@.service\n/usr/lib/tmpfiles.d/openvpn.conf\n/usr/lib64/openvpn\n/usr/lib64/openvpn/plugins\n/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so\n/usr/lib64/openvpn/plugins/openvpn-plugin-down-root.so\n/usr/sbin/openvpn\n/usr/share/doc/openvpn-2.4.1\n/usr/share/doc/openvpn-2.4.1/AUTHORS\n/usr/share/doc/openvpn-2.4.1/COPYING\n/usr/share/doc/openvpn-2.4.1/COPYRIGHT.GPL\n/usr/share/doc/openvpn-2.4.1/Changes.rst\n/usr/share/doc/openvpn-2.4.1/README\n/usr/share/doc/openvpn-2.4.1/README.auth-pam\n/usr/share/doc/openvpn-2.4.1/README.down-root\n/usr/share/doc/openvpn-2.4.1/README.systemd\n/usr/share/doc/openvpn-2.4.1/contrib\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check/OCSP_check.sh\n/usr/share/doc/openvpn-2.4.1/contrib/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.down\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.up\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.down\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.up\n/usr/share/doc/openvpn-2.4.1/management-notes.txt\n/usr/share/doc/openvpn-2.4.1/sample\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/README\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/firewall.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/home.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-client\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-server\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/office.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-shutdown.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-startup.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-client-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-server-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/auth-pam.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-start\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-stop\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/ucn.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/verify-cn\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows/sample.ovpn\n/usr/share/man/man8/openvpn.8.gz\n\n\nSo openvpn is unable to create its pidfile. Altough openvpn-client still can start.\nThere is also a report on this here: https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-06-26 15:58:47", "update_id": 83301, "user_id": 207, "id": 627472, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627490, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please test a far newer OpenVPN release.  This release is obsolete.  OpenVPN 2.4.3 was put submitted 5 days ago.\n\n    $ rpm -ql openvpn | grep run\n    /var/run/openvpn\n    $ rpm -q openvpn\n    openvpn-2.4.3-1.el6.x86_64\n\nThis should not be an issue at all.  You can find it here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74\n\nBtw. the bz you reference is also an invalid reference.  That is related to Fedora 26, which relies on systemd and its tmpfiles service.  That does not exist on EL6.\n", "timestamp": "2017-06-26 16:30:55", "update_id": 83301, "user_id": 446, "id": 627490, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627491, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, a little clarification.  That bz *comment* you reference, is related to a Fedora release with systemd.", "timestamp": "2017-06-26 16:33:35", "update_id": 83301, "user_id": 446, "id": 627491, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627926, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers: as you told here https://bodhi.fedoraproject.org/updates/openvpn-2.4.1-2.el7#comment-588424 this is a feature on EL7. This package here only affects EL6", "timestamp": "2017-06-27 09:09:54", "update_id": 83301, "user_id": 207, "id": 627926, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627950, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "That is right. The tmpfiles.d stuff is related to systemd, which is EL7 and any Fedora releases after 17 or so.\nAnd /var/run/openvpn is packaged properly in openvpn-2.4.2 and openvpn-2.4.3, so this is no longer an issue.\nThe openvpn-2.4.1 package this update is about, is obsolete and outdated.", "timestamp": "2017-06-27 10:46:59", "update_id": 83301, "user_id": 446, "id": 627950, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}], "updateid": "FEDORA-EPEL-2017-3da5d4f25f", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updates to upstream OpenVPN v2.4.1.  This package modifies the default mbed TLS default certificate profile to allow weaker RSA keys and hashing algorithms, which should re-enable many configurations failing with v2.4.0.  Also adds newer upstream versions of systemd unit files (openvpn-client@.service, openvpn-server@.service).\n", "type": "enhancement", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-03-23 02:04:26", "date_modified": "2017-03-23 16:14:27", "date_approved": null, "date_testing": "2017-03-23 12:08:44", "date_stable": "2017-04-01 16:46:19", "alias": "FEDORA-2017-f41671c546", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-04-01 16:46:19", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-f41671c546", "title": "openvpn-2.4.1-1.fc26", "version_hash": "90339426cdf744b732df205331cf6235a34e3bd1", "release": {"name": "F26", "long_name": "Fedora 26", "version": "26", "id_prefix": "FEDORA", "branch": "f26", "dist_tag": "f26", "stable_tag": "f26-updates", "testing_tag": "f26-updates-testing", "candidate_tag": "f26-updates-candidate", "pending_signing_tag": "f26-signing-pending", "pending_testing_tag": "f26-updates-testing-pending", "pending_stable_tag": "f26-updates-pending", "override_tag": "f26-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-23 02:04:26", "update_id": 83252, "user_id": 91, "id": 580627, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-23 14:26:18", "update_id": 83252, "user_id": 91, "id": 580792, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "dsommers edited this update.", "timestamp": "2017-03-23 16:14:26", "update_id": 83252, "user_id": 91, "id": 580878, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2017-03-24 10:58:03", "update_id": 83252, "user_id": 206, "id": 581296, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "bug_feedback": [{"karma": 0, "comment_id": 581358, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 581358, "bug_id": 1425859, "bug": {"bug_id": 1425859, "title": "Can't connect to VPN after upgrade", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-03-24 14:34:48", "update_id": 83252, "user_id": 91, "id": 581359, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-04-01 17:39:47", "update_id": 83252, "user_id": 91, "id": 586235, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.4.1-1.fc26", "signed": true, "release_id": 16, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1425859, "title": "Can't connect to VPN after upgrade", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 581358, "bug_id": 1425859, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 585267, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Yes! I have received some positive reports on these exact changes in F25 and F26, so I will update this update with a new build during today.  Bugzilla rhbz#1435831is the one covering this issue.\n", "timestamp": "2017-03-31 13:03:48", "update_id": 83348, "user_id": 446, "id": 585267, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 581252, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me, client and server side, over UDP and TCP.  Not sure about the backwards compatibility issues from the previous 2.4 build re: .ovpn files - I'm only using via the NetworkManager plugin.", "timestamp": "2017-03-24 07:33:53", "update_id": 83251, "user_id": 840, "id": 581252, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 581358, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}}, {"karma": -1, "comment_id": 581562, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "openvpn@.service can't start, see https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-03-24 19:03:56", "update_id": 83251, "user_id": 688, "id": 581562, "testcase_feedback": [], "user": {"name": "nucleo", "email": "alekcejk@googlemail.com", "id": 688, "avatar": "https://seccdn.libravatar.org/avatar/90ceb8e362e23d9ecaafa87854177f9dedb363f0ad40357579516288beea7c0b?s=24&d=retro", "openid": "nucleo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 581923, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "I tested this on my managed VPN service running on CentOS 7 (update from 2.3.x to 2.4.1), it works like a charm I must say! Great the old (systemd) service file is still there. Will report back here if there are any issues...", "timestamp": "2017-03-25 15:30:45", "update_id": 83348, "user_id": 423, "id": 581923, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 582836, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "This does *not* work for me: There's a semantic change in `--proto udp` meaning IPv4 *and* IPv6 now. As our company's server can be reached via IPv6, but doesn't offer OpenVPN via IPv6, no connection can be established - and OpenVPN doesn't fall back to IPv4.\n\nNow, I could use `--proto udp4` instead, alas NetworkManager doesn't offer that as far as I can see.", "timestamp": "2017-03-27 17:40:22", "update_id": 83251, "user_id": 101, "id": 582836, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 582916, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@thm, that is hardly an OpenVPN package issue.  That is an issue which needs to be solved by NetworkManager-openvpn plug-in, which is outside maintained by the NetworkManager team.\n\nYou can also \"workaround\" this by either adding just the IPv4 addresses to the appropriate hostname in /etc/hosts ... or by using an IPv4 address instead of a hostname in NetworkManager.", "timestamp": "2017-03-27 19:25:34", "update_id": 83251, "user_id": 446, "id": 582916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 582922, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers Sorry, but I tend to disagree. This is a change in behavior. The Updates Policy mandates that packages must \"avoid changing the user experience if at all possible\". Changing the meaning of an option (`--proto` in that case) is such a change.", "timestamp": "2017-03-27 19:52:43", "update_id": 83251, "user_id": 101, "id": 582922, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584351, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, there is a potential issue with this update where OpenVPN will not start after a reboot if using the old and deprecated openvpn@.service units.  The new ones (openvpn-client@.service and openvpn-server@.service) should work fine.\n\nI will backport several of the packaging enhancements from rawhide and F25 which should resolve this issue - and a few other ones as well.  Hopefully I will manage that this week.", "timestamp": "2017-03-29 22:30:13", "update_id": 83348, "user_id": 446, "id": 584351, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584370, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, it seems `/var/run/openvpn` does not exist anymore after reboot, only `/var/run/openvpn-{client,server}`.  That's the issue you are talking about? I'm looking to move to the server one soon though!", "timestamp": "2017-03-29 23:07:19", "update_id": 83348, "user_id": 423, "id": 584370, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 584576, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584613, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 593480, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "I've run openvpn-2.4.1-2.el6  on a SL6.7 since March 23 and 2.4.1-3.el6 since April 10.  Both configured with server and client configurations.  Everything works as expected in those configurations.  The 2.4 release have otherwise been pushed out for el7, where the main difference is that el7 is systemd based and el6 still uses init.d scripts.  So considering this to be reasonably safe.", "timestamp": "2017-04-14 12:54:35", "update_id": 83301, "user_id": 446, "id": 593480, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627472, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hi Guys,\n/var/run/openvpn/ is missing in rpm-File:\nrpm -ql openvpn\n/etc/openvpn\n/etc/openvpn/client\n/etc/openvpn/server\n/usr/lib/systemd/system/openvpn-client@.service\n/usr/lib/systemd/system/openvpn-server@.service\n/usr/lib/systemd/system/openvpn@.service\n/usr/lib/tmpfiles.d/openvpn.conf\n/usr/lib64/openvpn\n/usr/lib64/openvpn/plugins\n/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so\n/usr/lib64/openvpn/plugins/openvpn-plugin-down-root.so\n/usr/sbin/openvpn\n/usr/share/doc/openvpn-2.4.1\n/usr/share/doc/openvpn-2.4.1/AUTHORS\n/usr/share/doc/openvpn-2.4.1/COPYING\n/usr/share/doc/openvpn-2.4.1/COPYRIGHT.GPL\n/usr/share/doc/openvpn-2.4.1/Changes.rst\n/usr/share/doc/openvpn-2.4.1/README\n/usr/share/doc/openvpn-2.4.1/README.auth-pam\n/usr/share/doc/openvpn-2.4.1/README.down-root\n/usr/share/doc/openvpn-2.4.1/README.systemd\n/usr/share/doc/openvpn-2.4.1/contrib\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check/OCSP_check.sh\n/usr/share/doc/openvpn-2.4.1/contrib/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.down\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.up\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.down\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.up\n/usr/share/doc/openvpn-2.4.1/management-notes.txt\n/usr/share/doc/openvpn-2.4.1/sample\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/README\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/firewall.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/home.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-client\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-server\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/office.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-shutdown.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-startup.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-client-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-server-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/auth-pam.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-start\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-stop\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/ucn.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/verify-cn\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows/sample.ovpn\n/usr/share/man/man8/openvpn.8.gz\n\n\nSo openvpn is unable to create its pidfile. Altough openvpn-client still can start.\nThere is also a report on this here: https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-06-26 15:58:47", "update_id": 83301, "user_id": 207, "id": 627472, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627490, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please test a far newer OpenVPN release.  This release is obsolete.  OpenVPN 2.4.3 was put submitted 5 days ago.\n\n    $ rpm -ql openvpn | grep run\n    /var/run/openvpn\n    $ rpm -q openvpn\n    openvpn-2.4.3-1.el6.x86_64\n\nThis should not be an issue at all.  You can find it here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74\n\nBtw. the bz you reference is also an invalid reference.  That is related to Fedora 26, which relies on systemd and its tmpfiles service.  That does not exist on EL6.\n", "timestamp": "2017-06-26 16:30:55", "update_id": 83301, "user_id": 446, "id": 627490, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627491, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, a little clarification.  That bz *comment* you reference, is related to a Fedora release with systemd.", "timestamp": "2017-06-26 16:33:35", "update_id": 83301, "user_id": 446, "id": 627491, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627926, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers: as you told here https://bodhi.fedoraproject.org/updates/openvpn-2.4.1-2.el7#comment-588424 this is a feature on EL7. This package here only affects EL6", "timestamp": "2017-06-27 09:09:54", "update_id": 83301, "user_id": 207, "id": 627926, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627950, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "That is right. The tmpfiles.d stuff is related to systemd, which is EL7 and any Fedora releases after 17 or so.\nAnd /var/run/openvpn is packaged properly in openvpn-2.4.2 and openvpn-2.4.3, so this is no longer an issue.\nThe openvpn-2.4.1 package this update is about, is obsolete and outdated.", "timestamp": "2017-06-27 10:46:59", "update_id": 83301, "user_id": 446, "id": 627950, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}], "updateid": "FEDORA-2017-f41671c546", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Updates to upstream OpenVPN v2.4.1.  Also adds newer upstream versions of systemd unit files (openvpn-client@.service, openvpn-server@.service).", "type": "enhancement", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-03-23 02:01:16", "date_modified": null, "date_approved": null, "date_testing": "2017-03-23 18:24:25", "date_stable": "2017-03-24 12:41:43", "alias": "FEDORA-2017-51ae70f9a0", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-03-24 12:41:43", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-51ae70f9a0", "title": "openvpn-2.4.1-1.fc25", "version_hash": "4e09791a52d522d3ac2104bc56d1e403d1b89425", "release": {"name": "F25", "long_name": "Fedora 25", "version": "25", "id_prefix": "FEDORA", "branch": "f25", "dist_tag": "f25", "stable_tag": "f25-updates", "testing_tag": "f25-updates-testing", "candidate_tag": "f25-updates-candidate", "pending_signing_tag": "f25-signing-pending", "pending_testing_tag": "f25-updates-testing-pending", "pending_stable_tag": "f25-updates-pending", "override_tag": "f25-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dsommers. ", "timestamp": "2017-03-23 02:01:16", "update_id": 83251, "user_id": 91, "id": 580626, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-03-23 19:24:43", "update_id": 83251, "user_id": 91, "id": 581056, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me, client and server side, over UDP and TCP.  Not sure about the backwards compatibility issues from the previous 2.4 build re: .ovpn files - I'm only using via the NetworkManager plugin.", "timestamp": "2017-03-24 07:33:53", "update_id": 83251, "user_id": 840, "id": 581252, "bug_feedback": [{"karma": 0, "comment_id": 581252, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-03-24 12:17:05", "update_id": 83251, "user_id": 739, "id": 581309, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2017-03-24 12:17:07", "update_id": 83251, "user_id": 91, "id": 581310, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2017-03-24 18:57:13", "update_id": 83251, "user_id": 91, "id": 581560, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "openvpn@.service can't start, see https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-03-24 19:03:56", "update_id": 83251, "user_id": 688, "id": 581562, "bug_feedback": [{"karma": -1, "comment_id": 581562, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "nucleo", "email": "alekcejk@googlemail.com", "id": 688, "avatar": "https://seccdn.libravatar.org/avatar/90ceb8e362e23d9ecaafa87854177f9dedb363f0ad40357579516288beea7c0b?s=24&d=retro", "openid": "nucleo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "This does *not* work for me: There's a semantic change in `--proto udp` meaning IPv4 *and* IPv6 now. As our company's server can be reached via IPv6, but doesn't offer OpenVPN via IPv6, no connection can be established - and OpenVPN doesn't fall back to IPv4.\n\nNow, I could use `--proto udp4` instead, alas NetworkManager doesn't offer that as far as I can see.", "timestamp": "2017-03-27 17:40:22", "update_id": 83251, "user_id": 101, "id": 582836, "bug_feedback": [{"karma": 0, "comment_id": 582836, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@thm, that is hardly an OpenVPN package issue.  That is an issue which needs to be solved by NetworkManager-openvpn plug-in, which is outside maintained by the NetworkManager team.\n\nYou can also \"workaround\" this by either adding just the IPv4 addresses to the appropriate hostname in /etc/hosts ... or by using an IPv4 address instead of a hostname in NetworkManager.", "timestamp": "2017-03-27 19:25:34", "update_id": 83251, "user_id": 446, "id": 582916, "bug_feedback": [{"karma": 0, "comment_id": 582916, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@dsommers Sorry, but I tend to disagree. This is a change in behavior. The Updates Policy mandates that packages must \"avoid changing the user experience if at all possible\". Changing the meaning of an option (`--proto` in that case) is such a change.", "timestamp": "2017-03-27 19:52:43", "update_id": 83251, "user_id": 101, "id": 582922, "bug_feedback": [{"karma": 0, "comment_id": 582922, "bug_id": 1435036, "bug": {"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}], "builds": [{"nvr": "openvpn-2.4.1-1.fc25", "signed": true, "release_id": 15, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1435036, "title": "openvpn-2.4.1 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 585201, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not sure if this is the correct place to add this feedback, but the Update from 2.3 to 2.4 broke OpenVPN completely for me. I rely on a config with a static `tls-auth` file and OpenVPN 2.4 just refuses to read the key from that file with:\n\n```\nMar 31 10:44:11 kandalingo nm-openvpn[15831]: Insufficient key material or header text not found in file '/home/bascht/.cert/customer-abc/tls-auth.txt' (0/128/256 bytes found/min/max)\n```\n\nManually downgrading OpenVPN to 2.3.14-1.fc25 fixes the problem. \n\nI'm posting this here, as it might help someone else later. ;-)", "timestamp": "2017-03-31 09:49:00", "update_id": 83696, "user_id": 207, "id": 585201, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 585242, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@anonymous, This sounds like an invalid tls-auth key file.  Earlier versions could somehow try to make some sense out of it.  But most commonly that would result in a weaker security compared to using a proper key file.  The reason I believe this is due to the last part of the line \"(0/128/256 bytes found/min/max)\".  It means it didn't find any keying material at all, and it expects at least 128 bits.\n\nUsers experiencing these issues must update their keys ASAP, regardless of OpenVPN version.  The recommended way is to let OpenVPN generate the key:  `$\u00a0openvpn --secret tls-auth.key --genkey`", "timestamp": "2017-03-31 11:17:20", "update_id": 83696, "user_id": 446, "id": 585242, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 585267, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Yes! I have received some positive reports on these exact changes in F25 and F26, so I will update this update with a new build during today.  Bugzilla rhbz#1435831is the one covering this issue.\n", "timestamp": "2017-03-31 13:03:48", "update_id": 83348, "user_id": 446, "id": 585267, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 581252, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me, client and server side, over UDP and TCP.  Not sure about the backwards compatibility issues from the previous 2.4 build re: .ovpn files - I'm only using via the NetworkManager plugin.", "timestamp": "2017-03-24 07:33:53", "update_id": 83251, "user_id": 840, "id": 581252, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 581358, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the regression with my VPN.", "timestamp": "2017-03-24 14:34:46", "update_id": 83252, "user_id": 983, "id": 581358, "testcase_feedback": [], "user": {"name": "hadess", "email": "bnocera@redhat.com", "id": 983, "avatar": "https://seccdn.libravatar.org/avatar/a2ca62422c0d280286261094e5bb98c14b69ef28df72212f79f351d43f5b860c?s=24&d=retro", "openid": "hadess.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitspin-kickstarts"}, {"name": "cla_redhat"}, {"name": "trust admins"}]}}}, {"karma": -1, "comment_id": 581562, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "openvpn@.service can't start, see https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-03-24 19:03:56", "update_id": 83251, "user_id": 688, "id": 581562, "testcase_feedback": [], "user": {"name": "nucleo", "email": "alekcejk@googlemail.com", "id": 688, "avatar": "https://seccdn.libravatar.org/avatar/90ceb8e362e23d9ecaafa87854177f9dedb363f0ad40357579516288beea7c0b?s=24&d=retro", "openid": "nucleo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 581923, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "I tested this on my managed VPN service running on CentOS 7 (update from 2.3.x to 2.4.1), it works like a charm I must say! Great the old (systemd) service file is still there. Will report back here if there are any issues...", "timestamp": "2017-03-25 15:30:45", "update_id": 83348, "user_id": 423, "id": 581923, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 582836, "bug_id": 1435036, "comment": {"karma": -1, "karma_critpath": 0, "text": "This does *not* work for me: There's a semantic change in `--proto udp` meaning IPv4 *and* IPv6 now. As our company's server can be reached via IPv6, but doesn't offer OpenVPN via IPv6, no connection can be established - and OpenVPN doesn't fall back to IPv4.\n\nNow, I could use `--proto udp4` instead, alas NetworkManager doesn't offer that as far as I can see.", "timestamp": "2017-03-27 17:40:22", "update_id": 83251, "user_id": 101, "id": 582836, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 582916, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@thm, that is hardly an OpenVPN package issue.  That is an issue which needs to be solved by NetworkManager-openvpn plug-in, which is outside maintained by the NetworkManager team.\n\nYou can also \"workaround\" this by either adding just the IPv4 addresses to the appropriate hostname in /etc/hosts ... or by using an IPv4 address instead of a hostname in NetworkManager.", "timestamp": "2017-03-27 19:25:34", "update_id": 83251, "user_id": 446, "id": 582916, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 582922, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers Sorry, but I tend to disagree. This is a change in behavior. The Updates Policy mandates that packages must \"avoid changing the user experience if at all possible\". Changing the meaning of an option (`--proto` in that case) is such a change.", "timestamp": "2017-03-27 19:52:43", "update_id": 83251, "user_id": 101, "id": 582922, "testcase_feedback": [], "user": {"name": "thm", "email": "thomas.moschny@gmx.de", "id": 101, "avatar": "https://seccdn.libravatar.org/avatar/a7a331584512054821ac98c7cb74f8608b86828f65d6cf5eca69c1e61daedeea?s=24&d=retro", "openid": "thm.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584351, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, there is a potential issue with this update where OpenVPN will not start after a reboot if using the old and deprecated openvpn@.service units.  The new ones (openvpn-client@.service and openvpn-server@.service) should work fine.\n\nI will backport several of the packaging enhancements from rawhide and F25 which should resolve this issue - and a few other ones as well.  Hopefully I will manage that this week.", "timestamp": "2017-03-29 22:30:13", "update_id": 83348, "user_id": 446, "id": 584351, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 1, "comment_id": 584369, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Problem solved, but I think both #1435831 and the new config should have been dealt with differently. An announcement on devel was certainly warranted and for the rest of our users it would have been even better if there was an announcement somewhere visible, like fedora magazine. When the old configurations start failing, I don't expect there will be many people searching for README.systemd (which is very useful with the examples and all) in /usr/share/doc.", "timestamp": "2017-03-29 23:02:37", "update_id": 83696, "user_id": 367, "id": 584369, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 584370, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, it seems `/var/run/openvpn` does not exist anymore after reboot, only `/var/run/openvpn-{client,server}`.  That's the issue you are talking about? I'm looking to move to the server one soon though!", "timestamp": "2017-03-29 23:07:19", "update_id": 83348, "user_id": 423, "id": 584370, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 584576, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, after creating the `/etc/openvpn/server` directory and moving config files there.\n\nOn the client side, NetworkManager-controlled, no change was needed.", "timestamp": "2017-03-30 07:21:51", "update_id": 83696, "user_id": 840, "id": 584576, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 584613, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine on x86_64.", "timestamp": "2017-03-30 09:11:50", "update_id": 83696, "user_id": 1177, "id": 584613, "testcase_feedback": [], "user": {"name": "jayjayjazz", "email": "jayjayjazz@gmail.com", "id": 1177, "avatar": "https://seccdn.libravatar.org/avatar/b7f3994e0ba48616a78257e2477c106613cb1d0802ef48790f7b51d4d7943211?s=24&d=retro", "openid": "jayjayjazz.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 584640, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry!  The wrong build was added to this one.  It should be openvpn-2.4.1-3.fc26.  Fixing now.", "timestamp": "2017-03-30 09:36:45", "update_id": 83695, "user_id": 446, "id": 584640, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 584647, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk, I will have a new 2.4.1-3 update soon which takes care of the /etc/openvpn/{client,server} directories and fixes a lot of the rpmlint issues as well.\n\n@alexpl, I completely agree that the process around v2.4 have been incredibly ugly.  I appreciate the work of former package maintainers, they've done a great job over a long period of time.  Unfortunately, the state of the package had drifted away from upstream expectations and there was a lot of legacy cruft which in several areas was just wrong.  So despite the v2.4 upgrade not really being this dramatic, it turned out way more ugly than I wanted.  And in all this, I didn't consider the state of openvpn@.service carefully enough.  The initial plan was that users of openvpn@.service wouldn't notice this at all in F25 and F26, but there were some entanglements I didn't consider carefully enough.  Depending on how F25/F26 goes with all this fixed, I will consider if openvpn@.service deprecation will be postponed from F27 to F28.  And I will certainly send mails to Fedora ML once the dust settles.  Silly of me not doing that in the beginning.\n\nAgain, I'm truly sorry about this mess.  But I'm the type of person who seldom looks back and rather tries to fix issues ASAP and move forward. ", "timestamp": "2017-03-30 09:55:29", "update_id": 83696, "user_id": 446, "id": 584647, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 587023, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@fkooman, Those issues we've discussed should be covered by this new openvpn-2.4.1-2.el7 build.  This build should not break openvpn@.service units upon boot any more.", "timestamp": "2017-04-03 13:31:28", "update_id": 83348, "user_id": 446, "id": 587023, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588340, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers, I updated to -2 and everything seems fine, not sure how you fixed things, but my fix consisted of adding an extra entry to the tmpfiles file, that worked too :)", "timestamp": "2017-04-05 15:42:34", "update_id": 83348, "user_id": 423, "id": 588340, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 588424, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "The second part of my answer in comment #9 in rhbz#1435831 actually answers that.  The TL;DR answer is that OpenVPN v2.4 can talk directly to systemd and does not need to use PID files and a directory where to save them.  This is solved by using Type=notify, which OpenVPN detects and uses sd_notify() under the hood.\n\nIn addition, if not using that approach but using Type=simple instead of Type=fork which the previous unit file used,  the need to use both --daemon and PID files also goes away.  So the approach used in the old unit file actually never was a good solution at all, making it unnecessary complicated by needing a tmpfiles.d config  in addition.\n\nHowever, using Type=notify have the advantage of ignoring --daemon in OpenVPN configuration files automatically.  Which is not needed.  The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.", "timestamp": "2017-04-05 19:22:32", "update_id": 83348, "user_id": 446, "id": 588424, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588425, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "> The old approach or using the simpler Type=simple approach could havoc if the config file itself contains --daemon.\n\nJust noticed this is slightly too much simplified and wrong.\n\nThe old approach **had** to use --daemon, as Type=fork tells systemd \"*this process forks a child process*\".  Otherwise it would fail.  And then it was required to use a PID file so systemd actually could manage the process somewhat.\n\nUsing just Type=simple (which is the default, if Type= is not provided) will fail if the OpenVPN configuration uses --daemon, as then the OpenVPN processes forks of a child process, daemonizes  it and the parent process quits.  Systemd would then be confused by this, as it doesn't expect the (parent) process to quit just like that.\n\nSo with Type=notify, OpenVPN actually detects that it is systemd who started the process, and then provides a \"status string\", including its PID value via sd_notify() inside the OpenVPN process directly.  And when this is done, OpenVPN just ignores forking daemonizing if  --daemon is provided, as that is not needed with this approach.  So if a configuration file carries --daemon, it doesn't break anything by confusing systemd by the forking and daemonizing steps.", "timestamp": "2017-04-05 19:33:16", "update_id": 83348, "user_id": 446, "id": 588425, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 588951, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Works perfectly fine. No regressions noted.", "timestamp": "2017-04-06 14:08:14", "update_id": 83348, "user_id": 207, "id": 588951, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 589410, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me.", "timestamp": "2017-04-07 07:45:18", "update_id": 83348, "user_id": 417, "id": 589410, "testcase_feedback": [], "user": {"name": "kuosmanen", "email": "marttikuosmanen@yahoo.co.uk", "id": 417, "avatar": "https://seccdn.libravatar.org/avatar/f3714c2a7011e3502adfb9a26f903fa82c2f4430fece97c57f8053b97ea59fd6?s=24&d=retro", "openid": "kuosmanen.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 589443, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers thanks for the extensive explanation! :)", "timestamp": "2017-04-07 08:19:13", "update_id": 83348, "user_id": 423, "id": 589443, "testcase_feedback": [], "user": {"name": "fkooman", "email": "fkooman@tuxed.net", "id": 423, "avatar": "https://seccdn.libravatar.org/avatar/8af1ab16d532458205b5334907cdfc0ce6483ddf6f514514133cb07cee400ed9?s=24&d=retro", "openid": "fkooman.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 590014, "bug_id": 1435036, "comment": {"karma": 1, "karma_critpath": 0, "text": "Working fine for me as well.", "timestamp": "2017-04-08 03:30:51", "update_id": 83348, "user_id": 3562, "id": 590014, "testcase_feedback": [], "user": {"name": "flipneus", "email": "flipneus@gmail.com", "id": 3562, "avatar": "https://seccdn.libravatar.org/avatar/783f9bcc92141f2bdbdd986f2ea4a25b2b6d31607908a01fbc7331ec5e00b538?s=24&d=retro", "openid": "flipneus.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 593480, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "I've run openvpn-2.4.1-2.el6  on a SL6.7 since March 23 and 2.4.1-3.el6 since April 10.  Both configured with server and client configurations.  Everything works as expected in those configurations.  The 2.4 release have otherwise been pushed out for el7, where the main difference is that el7 is systemd based and el6 still uses init.d scripts.  So considering this to be reasonably safe.", "timestamp": "2017-04-14 12:54:35", "update_id": 83301, "user_id": 446, "id": 593480, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627472, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hi Guys,\n/var/run/openvpn/ is missing in rpm-File:\nrpm -ql openvpn\n/etc/openvpn\n/etc/openvpn/client\n/etc/openvpn/server\n/usr/lib/systemd/system/openvpn-client@.service\n/usr/lib/systemd/system/openvpn-server@.service\n/usr/lib/systemd/system/openvpn@.service\n/usr/lib/tmpfiles.d/openvpn.conf\n/usr/lib64/openvpn\n/usr/lib64/openvpn/plugins\n/usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so\n/usr/lib64/openvpn/plugins/openvpn-plugin-down-root.so\n/usr/sbin/openvpn\n/usr/share/doc/openvpn-2.4.1\n/usr/share/doc/openvpn-2.4.1/AUTHORS\n/usr/share/doc/openvpn-2.4.1/COPYING\n/usr/share/doc/openvpn-2.4.1/COPYRIGHT.GPL\n/usr/share/doc/openvpn-2.4.1/Changes.rst\n/usr/share/doc/openvpn-2.4.1/README\n/usr/share/doc/openvpn-2.4.1/README.auth-pam\n/usr/share/doc/openvpn-2.4.1/README.down-root\n/usr/share/doc/openvpn-2.4.1/README.systemd\n/usr/share/doc/openvpn-2.4.1/contrib\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check\n/usr/share/doc/openvpn-2.4.1/contrib/OCSP_check/OCSP_check.sh\n/usr/share/doc/openvpn-2.4.1/contrib/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/README\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.down\n/usr/share/doc/openvpn-2.4.1/contrib/openvpn-fwmarkroute-1.00/fwmarkroute.up\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.down\n/usr/share/doc/openvpn-2.4.1/contrib/pull-resolv-conf/client.up\n/usr/share/doc/openvpn-2.4.1/management-notes.txt\n/usr/share/doc/openvpn-2.4.1/sample\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/README\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/firewall.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/home.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-client\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/loopback-server\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/office.up\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-shutdown.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/openvpn-startup.sh\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-client.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/roadwarrior-server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/server.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/static-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-home.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/tls-office.conf\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-client-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-config-files/xinetd-server-config\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/auth-pam.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-start\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/bridge-stop\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/ucn.pl\n/usr/share/doc/openvpn-2.4.1/sample/sample-scripts/verify-cn\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows\n/usr/share/doc/openvpn-2.4.1/sample/sample-windows/sample.ovpn\n/usr/share/man/man8/openvpn.8.gz\n\n\nSo openvpn is unable to create its pidfile. Altough openvpn-client still can start.\nThere is also a report on this here: https://bugzilla.redhat.com/show_bug.cgi?id=1435036#c15", "timestamp": "2017-06-26 15:58:47", "update_id": 83301, "user_id": 207, "id": 627472, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627490, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please test a far newer OpenVPN release.  This release is obsolete.  OpenVPN 2.4.3 was put submitted 5 days ago.\n\n    $ rpm -ql openvpn | grep run\n    /var/run/openvpn\n    $ rpm -q openvpn\n    openvpn-2.4.3-1.el6.x86_64\n\nThis should not be an issue at all.  You can find it here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-9ec615ff74\n\nBtw. the bz you reference is also an invalid reference.  That is related to Fedora 26, which relies on systemd and its tmpfiles service.  That does not exist on EL6.\n", "timestamp": "2017-06-26 16:30:55", "update_id": 83301, "user_id": 446, "id": 627490, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627491, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "Sorry, a little clarification.  That bz *comment* you reference, is related to a Fedora release with systemd.", "timestamp": "2017-06-26 16:33:35", "update_id": 83301, "user_id": 446, "id": 627491, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}, {"karma": 0, "comment_id": 627926, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dsommers: as you told here https://bodhi.fedoraproject.org/updates/openvpn-2.4.1-2.el7#comment-588424 this is a feature on EL7. This package here only affects EL6", "timestamp": "2017-06-27 09:09:54", "update_id": 83301, "user_id": 207, "id": 627926, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 627950, "bug_id": 1435036, "comment": {"karma": 0, "karma_critpath": 0, "text": "That is right. The tmpfiles.d stuff is related to systemd, which is EL7 and any Fedora releases after 17 or so.\nAnd /var/run/openvpn is packaged properly in openvpn-2.4.2 and openvpn-2.4.3, so this is no longer an issue.\nThe openvpn-2.4.1 package this update is about, is obsolete and outdated.", "timestamp": "2017-06-27 10:46:59", "update_id": 83301, "user_id": 446, "id": 627950, "testcase_feedback": [], "user": {"name": "dsommers", "email": "dazo@eurephia.org", "id": 446, "avatar": "https://seccdn.libravatar.org/avatar/3261354ae2f56e3e735b0a15b987268d73f39e052ffd2fa431f74918d9d307dd?s=24&d=retro", "openid": "dsommers.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cla_redhat"}]}}}]}], "updateid": "FEDORA-2017-51ae70f9a0", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Update to 2.4.0\n", "type": "bugfix", "status": "unpushed", "request": null, "severity": "low", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-02-09 14:44:26", "date_modified": "2017-02-10 18:19:05", "date_approved": null, "date_testing": "2017-02-09 20:54:02", "date_stable": null, "alias": "FEDORA-2017-d1000d05d1", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-02-09 20:54:02", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-d1000d05d1", "title": "openvpn-2.4.0-1.fc24", "version_hash": "85b3bcaa5b3a976660b0f6123769cc80c4b069c4", "release": {"name": "F24", "long_name": "Fedora 24", "version": "24", "id_prefix": "FEDORA", "branch": "f24", "dist_tag": "f24", "stable_tag": "f24-updates", "testing_tag": "f24-updates-testing", "candidate_tag": "f24-updates-candidate", "pending_signing_tag": "f24-signing-pending", "pending_testing_tag": "f24-updates-testing-pending", "pending_stable_tag": "f24-updates-pending", "override_tag": "f24-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "limb", "email": "gwync@protonmail.com", "id": 134, "avatar": "https://seccdn.libravatar.org/avatar/620da77fd218195ab689baa12f7235abc3b46837d32e695752381cc8df44c568?s=24&d=retro", "openid": "limb.id.stg.fedoraproject.org", "groups": [{"name": "releng-team"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-devel"}, {"name": "packaging-committee"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin-releng"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "sysadmin-cvs"}, {"name": "cvsadmin"}, {"name": "sysadmin"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by limb. ", "timestamp": "2017-02-09 14:44:26", "update_id": 79462, "user_id": 91, "id": 559917, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-02-09 21:53:11", "update_id": 79462, "user_id": 91, "id": 560131, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "limb edited this update.", "timestamp": "2017-02-10 18:19:05", "update_id": 79462, "user_id": 91, "id": 560627, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "WFM, F24 server", "timestamp": "2017-02-11 23:23:03", "update_id": 79462, "user_id": 840, "id": 560942, "bug_feedback": [{"karma": 0, "comment_id": 560942, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 560942, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "2.4 removes the --tls-remote option, which breaks existing configurations for users on F24. Even worse, NetworkManager-openvpn plugin on Fedora 24 does not support the --verify-x509-name. I voting -1 for pushing such an update to old-stable f24 release.", "timestamp": "2017-02-12 21:35:25", "update_id": 79462, "user_id": 1747, "id": 561134, "bug_feedback": [{"karma": 0, "comment_id": 561134, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561134, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "thaller", "email": "thaller@redhat.com", "id": 1747, "avatar": "https://seccdn.libravatar.org/avatar/b7a1c8cf97ea0eb42faecbdcccf9cedcd66271a22b599741bd43563f1390f8e6?s=24&d=retro", "openid": "thaller.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "network-manager-maint"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "-1, as thaller notes", "timestamp": "2017-02-12 21:46:59", "update_id": 79462, "user_id": 231, "id": 561135, "bug_feedback": [{"karma": 0, "comment_id": 561135, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561135, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been unpushed.", "timestamp": "2017-02-13 13:54:03", "update_id": 79462, "user_id": 134, "id": 561316, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "limb", "email": "gwync@protonmail.com", "id": 134, "avatar": "https://seccdn.libravatar.org/avatar/620da77fd218195ab689baa12f7235abc3b46837d32e695752381cc8df44c568?s=24&d=retro", "openid": "limb.id.stg.fedoraproject.org", "groups": [{"name": "releng-team"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-devel"}, {"name": "packaging-committee"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin-releng"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "sysadmin-cvs"}, {"name": "cvsadmin"}, {"name": "sysadmin"}]}}], "builds": [{"nvr": "openvpn-2.4.0-1.fc24", "signed": true, "release_id": 14, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 560615, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "This breaks my VPN connection. See rhbz#1421241. Please don't push (and also disable karma autopush)! Thanks.", "timestamp": "2017-02-10 17:23:24", "update_id": 79461, "user_id": 411, "id": 560615, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560941, "bug_id": 1391544, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F25 client", "timestamp": "2017-02-11 23:22:03", "update_id": 79461, "user_id": 840, "id": 560941, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560942, "bug_id": 1391544, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F24 server", "timestamp": "2017-02-11 23:23:03", "update_id": 79462, "user_id": 840, "id": 560942, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561134, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "2.4 removes the --tls-remote option, which breaks existing configurations for users on F24. Even worse, NetworkManager-openvpn plugin on Fedora 24 does not support the --verify-x509-name. I voting -1 for pushing such an update to old-stable f24 release.", "timestamp": "2017-02-12 21:35:25", "update_id": 79462, "user_id": 1747, "id": 561134, "testcase_feedback": [], "user": {"name": "thaller", "email": "thaller@redhat.com", "id": 1747, "avatar": "https://seccdn.libravatar.org/avatar/b7a1c8cf97ea0eb42faecbdcccf9cedcd66271a22b599741bd43563f1390f8e6?s=24&d=retro", "openid": "thaller.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "network-manager-maint"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561135, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "-1, as thaller notes", "timestamp": "2017-02-12 21:46:59", "update_id": 79462, "user_id": 231, "id": 561135, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561136, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "Removes the --tls-remote option.\nThis is not something that's tolerable for stable updates.", "timestamp": "2017-02-12 21:50:43", "update_id": 79461, "user_id": 231, "id": 561136, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561137, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "Also have the issue @kparal reported", "timestamp": "2017-02-12 22:18:40", "update_id": 79461, "user_id": 763, "id": 561137, "testcase_feedback": [], "user": {"name": "lupinix", "email": "lupinix.fedora@gmail.com", "id": 763, "avatar": "https://seccdn.libravatar.org/avatar/cc585f3cc94963db2fbb249c2b874edfa90d3236a6a00015ef926ae0e6867e2b?s=24&d=retro", "openid": "lupinix.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "kde-sig"}, {"name": "astro-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}, {"name": "scitech"}, {"name": "python-packagers-sig"}]}}}, {"karma": 0, "comment_id": 561438, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "Just a (re)statement that this works for me, including the server name feature with the latest [nm-openvpn](https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5adce09c2) build from updates-testing.\n\nCan we get this (re) pushed please?", "timestamp": "2017-02-13 20:04:44", "update_id": 79461, "user_id": 840, "id": 561438, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561696, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: It might work for you, but it doesn't for others. See rhbz#1421241 to follow the progress on this.", "timestamp": "2017-02-14 07:02:51", "update_id": 79461, "user_id": 411, "id": 561696, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561707, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "@kparal based on that thread (and specifically [this comment](https://bugzilla.redhat.com/show_bug.cgi?id=1421241#c11)) replacing tls-remote=<...> with verify-x509-name:<...> in the .ovpn file should work for you too.", "timestamp": "2017-02-14 08:18:22", "update_id": 79461, "user_id": 840, "id": 561707, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561785, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: Yes, but not all users are able to edit their openvpn config files, even if they were informed about this issue (and most will not be). This is not something acceptable during a stable release cycle. Either we need to provide an automatic way of translating the arguments, or we need to wait with latest openvpn for Fedora 26.", "timestamp": "2017-02-14 12:33:39", "update_id": 79461, "user_id": 411, "id": 561785, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 563346, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "Negative karma due to https://bugzilla.redhat.com/show_bug.cgi?id=1421241\n\n", "timestamp": "2017-02-18 16:43:03", "update_id": 79461, "user_id": 1265, "id": 563346, "testcase_feedback": [], "user": {"name": "eparis", "email": "eparis@redhat.com", "id": 1265, "avatar": "https://seccdn.libravatar.org/avatar/832167af25dc474a82af9438fe683cee93f8182d41541a0aa3ef4b4649e4a75a?s=24&d=retro", "openid": "eparis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}]}, {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 560615, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "This breaks my VPN connection. See rhbz#1421241. Please don't push (and also disable karma autopush)! Thanks.", "timestamp": "2017-02-10 17:23:24", "update_id": 79461, "user_id": 411, "id": 560615, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560941, "bug_id": 1408889, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F25 client", "timestamp": "2017-02-11 23:22:03", "update_id": 79461, "user_id": 840, "id": 560941, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560942, "bug_id": 1408889, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F24 server", "timestamp": "2017-02-11 23:23:03", "update_id": 79462, "user_id": 840, "id": 560942, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561134, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "2.4 removes the --tls-remote option, which breaks existing configurations for users on F24. Even worse, NetworkManager-openvpn plugin on Fedora 24 does not support the --verify-x509-name. I voting -1 for pushing such an update to old-stable f24 release.", "timestamp": "2017-02-12 21:35:25", "update_id": 79462, "user_id": 1747, "id": 561134, "testcase_feedback": [], "user": {"name": "thaller", "email": "thaller@redhat.com", "id": 1747, "avatar": "https://seccdn.libravatar.org/avatar/b7a1c8cf97ea0eb42faecbdcccf9cedcd66271a22b599741bd43563f1390f8e6?s=24&d=retro", "openid": "thaller.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "network-manager-maint"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561135, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "-1, as thaller notes", "timestamp": "2017-02-12 21:46:59", "update_id": 79462, "user_id": 231, "id": 561135, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561136, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "Removes the --tls-remote option.\nThis is not something that's tolerable for stable updates.", "timestamp": "2017-02-12 21:50:43", "update_id": 79461, "user_id": 231, "id": 561136, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561137, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "Also have the issue @kparal reported", "timestamp": "2017-02-12 22:18:40", "update_id": 79461, "user_id": 763, "id": 561137, "testcase_feedback": [], "user": {"name": "lupinix", "email": "lupinix.fedora@gmail.com", "id": 763, "avatar": "https://seccdn.libravatar.org/avatar/cc585f3cc94963db2fbb249c2b874edfa90d3236a6a00015ef926ae0e6867e2b?s=24&d=retro", "openid": "lupinix.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "kde-sig"}, {"name": "astro-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}, {"name": "scitech"}, {"name": "python-packagers-sig"}]}}}, {"karma": 0, "comment_id": 561438, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "Just a (re)statement that this works for me, including the server name feature with the latest [nm-openvpn](https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5adce09c2) build from updates-testing.\n\nCan we get this (re) pushed please?", "timestamp": "2017-02-13 20:04:44", "update_id": 79461, "user_id": 840, "id": 561438, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561696, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: It might work for you, but it doesn't for others. See rhbz#1421241 to follow the progress on this.", "timestamp": "2017-02-14 07:02:51", "update_id": 79461, "user_id": 411, "id": 561696, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561707, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "@kparal based on that thread (and specifically [this comment](https://bugzilla.redhat.com/show_bug.cgi?id=1421241#c11)) replacing tls-remote=<...> with verify-x509-name:<...> in the .ovpn file should work for you too.", "timestamp": "2017-02-14 08:18:22", "update_id": 79461, "user_id": 840, "id": 561707, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561785, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: Yes, but not all users are able to edit their openvpn config files, even if they were informed about this issue (and most will not be). This is not something acceptable during a stable release cycle. Either we need to provide an automatic way of translating the arguments, or we need to wait with latest openvpn for Fedora 26.", "timestamp": "2017-02-14 12:33:39", "update_id": 79461, "user_id": 411, "id": 561785, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 563346, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "Negative karma due to https://bugzilla.redhat.com/show_bug.cgi?id=1421241\n\n", "timestamp": "2017-02-18 16:43:03", "update_id": 79461, "user_id": 1265, "id": 563346, "testcase_feedback": [], "user": {"name": "eparis", "email": "eparis@redhat.com", "id": 1265, "avatar": "https://seccdn.libravatar.org/avatar/832167af25dc474a82af9438fe683cee93f8182d41541a0aa3ef4b4649e4a75a?s=24&d=retro", "openid": "eparis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}]}], "updateid": "FEDORA-2017-d1000d05d1", "karma": -1, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Update to 2.4.0\n", "type": "bugfix", "status": "unpushed", "request": null, "severity": "low", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2017-02-09 14:44:22", "date_modified": "2017-02-10 18:18:23", "date_approved": null, "date_testing": "2017-02-09 20:54:42", "date_stable": null, "alias": "FEDORA-2017-669dbe8a47", "test_gating_status": null, "from_tag": null, "date_pushed": "2017-02-09 20:54:42", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2017-669dbe8a47", "title": "openvpn-2.4.0-1.fc25", "version_hash": "71fe6bc89bf0eeb0f55c9376e96140b336f7e4c4", "release": {"name": "F25", "long_name": "Fedora 25", "version": "25", "id_prefix": "FEDORA", "branch": "f25", "dist_tag": "f25", "stable_tag": "f25-updates", "testing_tag": "f25-updates-testing", "candidate_tag": "f25-updates-candidate", "pending_signing_tag": "f25-signing-pending", "pending_testing_tag": "f25-updates-testing-pending", "pending_stable_tag": "f25-updates-pending", "override_tag": "f25-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "limb", "email": "gwync@protonmail.com", "id": 134, "avatar": "https://seccdn.libravatar.org/avatar/620da77fd218195ab689baa12f7235abc3b46837d32e695752381cc8df44c568?s=24&d=retro", "openid": "limb.id.stg.fedoraproject.org", "groups": [{"name": "releng-team"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-devel"}, {"name": "packaging-committee"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin-releng"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "sysadmin-cvs"}, {"name": "cvsadmin"}, {"name": "sysadmin"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by limb. ", "timestamp": "2017-02-09 14:44:22", "update_id": 79461, "user_id": 91, "id": 559916, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2017-02-09 22:22:59", "update_id": 79461, "user_id": 91, "id": 560195, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2017-02-10 08:31:10", "update_id": 79461, "user_id": 739, "id": 560353, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works", "timestamp": "2017-02-10 09:32:28", "update_id": 79461, "user_id": 491, "id": 560406, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "pwalter", "email": "walter.pete@yandex.com", "id": 491, "avatar": "https://seccdn.libravatar.org/avatar/20f7756718e08ef810fe23344dfdcafe17dfb277e2c27d5cbf81e35b66247795?s=24&d=retro", "openid": "pwalter.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "This breaks my VPN connection. See rhbz#1421241. Please don't push (and also disable karma autopush)! Thanks.", "timestamp": "2017-02-10 17:23:24", "update_id": 79461, "user_id": 411, "id": 560615, "bug_feedback": [{"karma": 0, "comment_id": 560615, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 560615, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "limb edited this update.", "timestamp": "2017-02-10 18:18:20", "update_id": 79461, "user_id": 91, "id": 560626, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "WFM, F25 client", "timestamp": "2017-02-11 23:22:03", "update_id": 79461, "user_id": 840, "id": 560941, "bug_feedback": [{"karma": 0, "comment_id": 560941, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 560941, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "Removes the --tls-remote option.\nThis is not something that's tolerable for stable updates.", "timestamp": "2017-02-12 21:50:43", "update_id": 79461, "user_id": 231, "id": 561136, "bug_feedback": [{"karma": 0, "comment_id": 561136, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561136, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "Also have the issue @kparal reported", "timestamp": "2017-02-12 22:18:40", "update_id": 79461, "user_id": 763, "id": 561137, "bug_feedback": [{"karma": 0, "comment_id": 561137, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561137, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "lupinix", "email": "lupinix.fedora@gmail.com", "id": 763, "avatar": "https://seccdn.libravatar.org/avatar/cc585f3cc94963db2fbb249c2b874edfa90d3236a6a00015ef926ae0e6867e2b?s=24&d=retro", "openid": "lupinix.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "kde-sig"}, {"name": "astro-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}, {"name": "scitech"}, {"name": "python-packagers-sig"}]}}, {"karma": 1, "karma_critpath": 0, "text": "seems to work for me.", "timestamp": "2017-02-12 22:51:58", "update_id": 79461, "user_id": 306, "id": 561145, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "nonamedotc", "email": "nonamedotc@gmail.com", "id": 306, "avatar": "https://seccdn.libravatar.org/avatar/fee656bbc323d178f79b7b626b77a4e5e1e82a602ee4d3f09afc79394bad2d5d?s=24&d=retro", "openid": "nonamedotc.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "triagers"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works great!  LGTM!  =)", "timestamp": "2017-02-13 00:02:26", "update_id": 79461, "user_id": 206, "id": 561223, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "besser82", "email": "besser82.fpo@gmail.com", "id": 206, "avatar": "https://seccdn.libravatar.org/avatar/28bacfa3be75032390ac2c7a34599aeb825c3b62b2c55ef64821d2fc023b56cb?s=24&d=retro", "openid": "besser82.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "designteam"}, {"name": "shogun-ca"}, {"name": "alt-gtk-de-sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works fine", "timestamp": "2017-02-13 09:08:43", "update_id": 79461, "user_id": 208, "id": 561275, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "renault", "email": "cacouret.renault@gmail.com", "id": 208, "avatar": "https://seccdn.libravatar.org/avatar/aa62a9ab252e71079b0a269b65512d76baf98b7c2c24f15cfd25e6b8f0839c1a?s=24&d=retro", "openid": "renault.id.stg.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "l10n-commits"}, {"name": "gitmuffin"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been unpushed.", "timestamp": "2017-02-13 13:52:04", "update_id": 79461, "user_id": 134, "id": 561315, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "limb", "email": "gwync@protonmail.com", "id": 134, "avatar": "https://seccdn.libravatar.org/avatar/620da77fd218195ab689baa12f7235abc3b46837d32e695752381cc8df44c568?s=24&d=retro", "openid": "limb.id.stg.fedoraproject.org", "groups": [{"name": "releng-team"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-devel"}, {"name": "packaging-committee"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin-releng"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "sysadmin-cvs"}, {"name": "cvsadmin"}, {"name": "sysadmin"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Just a (re)statement that this works for me, including the server name feature with the latest [nm-openvpn](https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5adce09c2) build from updates-testing.\n\nCan we get this (re) pushed please?", "timestamp": "2017-02-13 20:04:44", "update_id": 79461, "user_id": 840, "id": 561438, "bug_feedback": [{"karma": 0, "comment_id": 561438, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561438, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: It might work for you, but it doesn't for others. See rhbz#1421241 to follow the progress on this.", "timestamp": "2017-02-14 07:02:51", "update_id": 79461, "user_id": 411, "id": 561696, "bug_feedback": [{"karma": 0, "comment_id": 561696, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561696, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@kparal based on that thread (and specifically [this comment](https://bugzilla.redhat.com/show_bug.cgi?id=1421241#c11)) replacing tls-remote=<...> with verify-x509-name:<...> in the .ovpn file should work for you too.", "timestamp": "2017-02-14 08:18:22", "update_id": 79461, "user_id": 840, "id": 561707, "bug_feedback": [{"karma": 0, "comment_id": 561707, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561707, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: Yes, but not all users are able to edit their openvpn config files, even if they were informed about this issue (and most will not be). This is not something acceptable during a stable release cycle. Either we need to provide an automatic way of translating the arguments, or we need to wait with latest openvpn for Fedora 26.", "timestamp": "2017-02-14 12:33:39", "update_id": 79461, "user_id": 411, "id": 561785, "bug_feedback": [{"karma": 0, "comment_id": 561785, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 561785, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}, {"karma": -1, "karma_critpath": 0, "text": "Negative karma due to https://bugzilla.redhat.com/show_bug.cgi?id=1421241\n\n", "timestamp": "2017-02-18 16:43:03", "update_id": 79461, "user_id": 1265, "id": 563346, "bug_feedback": [{"karma": 0, "comment_id": 563346, "bug_id": 1408889, "bug": {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 563346, "bug_id": 1391544, "bug": {"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "eparis", "email": "eparis@redhat.com", "id": 1265, "avatar": "https://seccdn.libravatar.org/avatar/832167af25dc474a82af9438fe683cee93f8182d41541a0aa3ef4b4649e4a75a?s=24&d=retro", "openid": "eparis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}], "builds": [{"nvr": "openvpn-2.4.0-1.fc25", "signed": true, "release_id": 15, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1391544, "title": "Openvpn is FTBFS due to updated openssl 1.1", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 560615, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "This breaks my VPN connection. See rhbz#1421241. Please don't push (and also disable karma autopush)! Thanks.", "timestamp": "2017-02-10 17:23:24", "update_id": 79461, "user_id": 411, "id": 560615, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560941, "bug_id": 1391544, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F25 client", "timestamp": "2017-02-11 23:22:03", "update_id": 79461, "user_id": 840, "id": 560941, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560942, "bug_id": 1391544, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F24 server", "timestamp": "2017-02-11 23:23:03", "update_id": 79462, "user_id": 840, "id": 560942, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561134, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "2.4 removes the --tls-remote option, which breaks existing configurations for users on F24. Even worse, NetworkManager-openvpn plugin on Fedora 24 does not support the --verify-x509-name. I voting -1 for pushing such an update to old-stable f24 release.", "timestamp": "2017-02-12 21:35:25", "update_id": 79462, "user_id": 1747, "id": 561134, "testcase_feedback": [], "user": {"name": "thaller", "email": "thaller@redhat.com", "id": 1747, "avatar": "https://seccdn.libravatar.org/avatar/b7a1c8cf97ea0eb42faecbdcccf9cedcd66271a22b599741bd43563f1390f8e6?s=24&d=retro", "openid": "thaller.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "network-manager-maint"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561135, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "-1, as thaller notes", "timestamp": "2017-02-12 21:46:59", "update_id": 79462, "user_id": 231, "id": 561135, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561136, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "Removes the --tls-remote option.\nThis is not something that's tolerable for stable updates.", "timestamp": "2017-02-12 21:50:43", "update_id": 79461, "user_id": 231, "id": 561136, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561137, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "Also have the issue @kparal reported", "timestamp": "2017-02-12 22:18:40", "update_id": 79461, "user_id": 763, "id": 561137, "testcase_feedback": [], "user": {"name": "lupinix", "email": "lupinix.fedora@gmail.com", "id": 763, "avatar": "https://seccdn.libravatar.org/avatar/cc585f3cc94963db2fbb249c2b874edfa90d3236a6a00015ef926ae0e6867e2b?s=24&d=retro", "openid": "lupinix.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "kde-sig"}, {"name": "astro-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}, {"name": "scitech"}, {"name": "python-packagers-sig"}]}}}, {"karma": 0, "comment_id": 561438, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "Just a (re)statement that this works for me, including the server name feature with the latest [nm-openvpn](https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5adce09c2) build from updates-testing.\n\nCan we get this (re) pushed please?", "timestamp": "2017-02-13 20:04:44", "update_id": 79461, "user_id": 840, "id": 561438, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561696, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: It might work for you, but it doesn't for others. See rhbz#1421241 to follow the progress on this.", "timestamp": "2017-02-14 07:02:51", "update_id": 79461, "user_id": 411, "id": 561696, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561707, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "@kparal based on that thread (and specifically [this comment](https://bugzilla.redhat.com/show_bug.cgi?id=1421241#c11)) replacing tls-remote=<...> with verify-x509-name:<...> in the .ovpn file should work for you too.", "timestamp": "2017-02-14 08:18:22", "update_id": 79461, "user_id": 840, "id": 561707, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561785, "bug_id": 1391544, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: Yes, but not all users are able to edit their openvpn config files, even if they were informed about this issue (and most will not be). This is not something acceptable during a stable release cycle. Either we need to provide an automatic way of translating the arguments, or we need to wait with latest openvpn for Fedora 26.", "timestamp": "2017-02-14 12:33:39", "update_id": 79461, "user_id": 411, "id": 561785, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 563346, "bug_id": 1391544, "comment": {"karma": -1, "karma_critpath": 0, "text": "Negative karma due to https://bugzilla.redhat.com/show_bug.cgi?id=1421241\n\n", "timestamp": "2017-02-18 16:43:03", "update_id": 79461, "user_id": 1265, "id": 563346, "testcase_feedback": [], "user": {"name": "eparis", "email": "eparis@redhat.com", "id": 1265, "avatar": "https://seccdn.libravatar.org/avatar/832167af25dc474a82af9438fe683cee93f8182d41541a0aa3ef4b4649e4a75a?s=24&d=retro", "openid": "eparis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}]}, {"bug_id": 1408889, "title": "openvpn-2.4.0 is available", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 560615, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "This breaks my VPN connection. See rhbz#1421241. Please don't push (and also disable karma autopush)! Thanks.", "timestamp": "2017-02-10 17:23:24", "update_id": 79461, "user_id": 411, "id": 560615, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560941, "bug_id": 1408889, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F25 client", "timestamp": "2017-02-11 23:22:03", "update_id": 79461, "user_id": 840, "id": 560941, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 560942, "bug_id": 1408889, "comment": {"karma": 1, "karma_critpath": 0, "text": "WFM, F24 server", "timestamp": "2017-02-11 23:23:03", "update_id": 79462, "user_id": 840, "id": 560942, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561134, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "2.4 removes the --tls-remote option, which breaks existing configurations for users on F24. Even worse, NetworkManager-openvpn plugin on Fedora 24 does not support the --verify-x509-name. I voting -1 for pushing such an update to old-stable f24 release.", "timestamp": "2017-02-12 21:35:25", "update_id": 79462, "user_id": 1747, "id": 561134, "testcase_feedback": [], "user": {"name": "thaller", "email": "thaller@redhat.com", "id": 1747, "avatar": "https://seccdn.libravatar.org/avatar/b7a1c8cf97ea0eb42faecbdcccf9cedcd66271a22b599741bd43563f1390f8e6?s=24&d=retro", "openid": "thaller.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "summer-coding"}, {"name": "network-manager-maint"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561135, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "-1, as thaller notes", "timestamp": "2017-02-12 21:46:59", "update_id": 79462, "user_id": 231, "id": 561135, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561136, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "Removes the --tls-remote option.\nThis is not something that's tolerable for stable updates.", "timestamp": "2017-02-12 21:50:43", "update_id": 79461, "user_id": 231, "id": 561136, "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561137, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "Also have the issue @kparal reported", "timestamp": "2017-02-12 22:18:40", "update_id": 79461, "user_id": 763, "id": 561137, "testcase_feedback": [], "user": {"name": "lupinix", "email": "lupinix.fedora@gmail.com", "id": 763, "avatar": "https://seccdn.libravatar.org/avatar/cc585f3cc94963db2fbb249c2b874edfa90d3236a6a00015ef926ae0e6867e2b?s=24&d=retro", "openid": "lupinix.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "kde-sig"}, {"name": "astro-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}, {"name": "scitech"}, {"name": "python-packagers-sig"}]}}}, {"karma": 0, "comment_id": 561438, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "Just a (re)statement that this works for me, including the server name feature with the latest [nm-openvpn](https://bodhi.fedoraproject.org/updates/FEDORA-2017-b5adce09c2) build from updates-testing.\n\nCan we get this (re) pushed please?", "timestamp": "2017-02-13 20:04:44", "update_id": 79461, "user_id": 840, "id": 561438, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561696, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: It might work for you, but it doesn't for others. See rhbz#1421241 to follow the progress on this.", "timestamp": "2017-02-14 07:02:51", "update_id": 79461, "user_id": 411, "id": 561696, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561707, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "@kparal based on that thread (and specifically [this comment](https://bugzilla.redhat.com/show_bug.cgi?id=1421241#c11)) replacing tls-remote=<...> with verify-x509-name:<...> in the .ovpn file should work for you too.", "timestamp": "2017-02-14 08:18:22", "update_id": 79461, "user_id": 840, "id": 561707, "testcase_feedback": [], "user": {"name": "dimitrisk", "email": "dimitris.on.linux@gmail.com", "id": 840, "avatar": "https://seccdn.libravatar.org/avatar/7f22b06f9390803dc7aced957318958e36b27879e87a0f174d7274678aa68de3?s=24&d=retro", "openid": "dimitrisk.id.stg.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 561785, "bug_id": 1408889, "comment": {"karma": 0, "karma_critpath": 0, "text": "@dimitrisk: Yes, but not all users are able to edit their openvpn config files, even if they were informed about this issue (and most will not be). This is not something acceptable during a stable release cycle. Either we need to provide an automatic way of translating the arguments, or we need to wait with latest openvpn for Fedora 26.", "timestamp": "2017-02-14 12:33:39", "update_id": 79461, "user_id": 411, "id": 561785, "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.stg.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 563346, "bug_id": 1408889, "comment": {"karma": -1, "karma_critpath": 0, "text": "Negative karma due to https://bugzilla.redhat.com/show_bug.cgi?id=1421241\n\n", "timestamp": "2017-02-18 16:43:03", "update_id": 79461, "user_id": 1265, "id": 563346, "testcase_feedback": [], "user": {"name": "eparis", "email": "eparis@redhat.com", "id": 1265, "avatar": "https://seccdn.libravatar.org/avatar/832167af25dc474a82af9438fe683cee93f8182d41541a0aa3ef4b4649e4a75a?s=24&d=retro", "openid": "eparis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}]}], "updateid": "FEDORA-2017-669dbe8a47", "karma": 2, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "2.3.14\nhttps://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23\n", "type": "bugfix", "status": "stable", "request": null, "severity": "low", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2016-12-07 14:27:54", "date_modified": "2016-12-08 15:12:18", "date_approved": null, "date_testing": "2016-12-08 05:18:40", "date_stable": "2016-12-23 15:23:20", "alias": "FEDORA-EPEL-2016-46be5b07b8", "test_gating_status": null, "from_tag": null, "date_pushed": "2016-12-23 15:23:20", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2016-46be5b07b8", "title": "openvpn-2.3.14-1.el7", "version_hash": "725906d46d12abba6c9279d413ad19990f739b5e", "release": {"name": "EPEL-7", "long_name": "Fedora EPEL 7", "version": "7", "id_prefix": "FEDORA-EPEL", "branch": "epel7", "dist_tag": "epel7", "stable_tag": "epel7", "testing_tag": "epel7-testing", "candidate_tag": "epel7-testing-candidate", "pending_signing_tag": "epel7-signing-pending", "pending_testing_tag": "epel7-testing-pending", "pending_stable_tag": "epel7-pending", "override_tag": "epel7-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "limb", "email": "gwync@protonmail.com", "id": 134, "avatar": "https://seccdn.libravatar.org/avatar/620da77fd218195ab689baa12f7235abc3b46837d32e695752381cc8df44c568?s=24&d=retro", "openid": "limb.id.stg.fedoraproject.org", "groups": [{"name": "releng-team"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-devel"}, {"name": "packaging-committee"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin-releng"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "sysadmin-cvs"}, {"name": "cvsadmin"}, {"name": "sysadmin"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by limb. ", "timestamp": "2016-12-07 14:27:54", "update_id": 74864, "user_id": 91, "id": 532497, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2016-12-08 05:48:52", "update_id": 74864, "user_id": 91, "id": 532764, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "limb edited this update.", "timestamp": "2016-12-08 15:12:18", "update_id": 74864, "user_id": 91, "id": 532912, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2016-12-22 06:00:21", "update_id": 74864, "user_id": 91, "id": 540245, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by limb. ", "timestamp": "2016-12-22 13:56:12", "update_id": 74864, "user_id": 91, "id": 540382, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2016-12-23 16:21:38", "update_id": 74864, "user_id": 91, "id": 540823, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.3.14-1.el7", "signed": true, "release_id": 8, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1402620, "title": "openvpn-2.3.14 is available", "security": false, "parent": false, "feedback": []}], "updateid": "FEDORA-EPEL-2016-46be5b07b8", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "2.3.14\nhttps://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23\n", "type": "bugfix", "status": "stable", "request": null, "severity": "low", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2016-12-07 14:27:50", "date_modified": "2016-12-08 15:12:38", "date_approved": null, "date_testing": "2016-12-08 03:55:37", "date_stable": "2016-12-09 19:11:38", "alias": "FEDORA-2016-a9da5f0ba1", "test_gating_status": null, "from_tag": null, "date_pushed": "2016-12-09 19:11:38", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2016-a9da5f0ba1", "title": "openvpn-2.3.14-1.fc25", "version_hash": "4ff6877e091fcc7aa39f62f7fc300ee7f6d41b57", "release": {"name": "F25", "long_name": "Fedora 25", "version": "25", "id_prefix": "FEDORA", "branch": "f25", "dist_tag": "f25", "stable_tag": "f25-updates", "testing_tag": "f25-updates-testing", "candidate_tag": "f25-updates-candidate", "pending_signing_tag": "f25-signing-pending", "pending_testing_tag": "f25-updates-testing-pending", "pending_stable_tag": "f25-updates-pending", "override_tag": "f25-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "limb", "email": "gwync@protonmail.com", "id": 134, "avatar": "https://seccdn.libravatar.org/avatar/620da77fd218195ab689baa12f7235abc3b46837d32e695752381cc8df44c568?s=24&d=retro", "openid": "limb.id.stg.fedoraproject.org", "groups": [{"name": "releng-team"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-devel"}, {"name": "packaging-committee"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "sysadmin-releng"}, {"name": "fedora-contributor"}, {"name": "ipausers"}, {"name": "sysadmin-cvs"}, {"name": "cvsadmin"}, {"name": "sysadmin"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by limb. ", "timestamp": "2016-12-07 14:27:50", "update_id": 74863, "user_id": 91, "id": 532496, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2016-12-08 04:56:48", "update_id": 74863, "user_id": 91, "id": 532748, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2016-12-08 07:23:09", "update_id": 74863, "user_id": 739, "id": 532798, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "cserpentis", "email": "cserpentis@gmail.com", "id": 739, "avatar": "https://seccdn.libravatar.org/avatar/a3febfef42f58ed535f3c3a3cf9743653cd774dbb6e4554e2ce7c847d9802b6c?s=24&d=retro", "openid": "cserpentis.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "limb edited this update.", "timestamp": "2016-12-08 15:12:38", "update_id": 74863, "user_id": 91, "id": 532913, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2016-12-08 20:27:21", "update_id": 74863, "user_id": 124, "id": 533109, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/f4394b8fb4c9a99c4b534dc724912fe75a5b87fe15048985ece8388c2441d0ca?s=24&d=retro", "openid": "filiperosset.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "fedora-br"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2016-12-09 07:14:41", "update_id": 74863, "user_id": 91, "id": 533381, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works", "timestamp": "2016-12-09 07:14:43", "update_id": 74863, "user_id": 491, "id": 533382, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "pwalter", "email": "walter.pete@yandex.com", "id": 491, "avatar": "https://seccdn.libravatar.org/avatar/20f7756718e08ef810fe23344dfdcafe17dfb277e2c27d5cbf81e35b66247795?s=24&d=retro", "openid": "pwalter.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2016-12-09 22:30:33", "update_id": 74863, "user_id": 91, "id": 533640, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "openvpn-2.3.14-1.fc25", "signed": true, "release_id": 15, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1402620, "title": "openvpn-2.3.14 is available", "security": false, "parent": false, "feedback": []}], "updateid": "FEDORA-2016-a9da5f0ba1", "karma": 3, "content_type": "rpm", "test_cases": []}], "page": 8, "pages": 12, "rows_per_page": 20, "total": 225, "chrome": true, "display_user": true, "display_request": true, "package": "openvpn"}