The problem is from file network-manager-openvpn.postinst in network-manager-openvpn.
When directory /var/lib/openvpn/chroot created, nm-openvpn will use it and tell openvpn to chroot into this directory. But no random or urandom node in this directory. Openvpn will fail to connect with static key. This bug is causing all debian based distro to fail on static key openvpn connection. I checked other distributions like fedora, gentoo and archlinux, none of them create /var/lib/openvpn directory so no chroot is performed when connecting with static key. And the connection works well. I think debian should drop the directory creation from network-manager-openvpn.postinst. Thanks, Lin
