Package: openvpn
Version: 2.4.0-6+deb9u2
Severity: important

Dear Maintainer,
when using openvpn with a VPN which overrides the default route it does not 
reconnect after suspend to RAM.
After the computer wakes up again the host route for the vpn server is missing 
and openvpn cannot reconnect
to the vpn.
Workaround: use /etc/init.d./openvpn restart as root after resume.
Tagging this important as in "major consequences without making the package 
completely unusable" as a non-root
user would have to reboot the machine to restore connectivity as workaround.
The problem happens in stable and testing versions and only with systemd. At 
least I replaced systemd on
the debian testing with openrc and since then the reconnect works without any 
problems. Both systems use
network-manager to connect to the network but not to manage the openvpn, which 
just uses a openvpn config in /etc/openvpn.
As network-manager does not interfere on the openrc system it seems not to be 
the problem here. I do not know what
systemd does with the routes or if some dependency of systemd is the problem. I 
only can tell that it did not happen
in debian versions with sysvinit and does not happen on the testing system 
since I switched (for different reasons) to

with kind regards,

-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE= 
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openvpn depends on:
ii  debconf [debconf-2.0]  1.5.61
ii  init-system-helpers    1.48
ii  iproute2               4.9.0-1+deb9u1
ii  libc6                  2.24-11+deb9u1
ii  liblz4-1               0.0~r131-2+b1
ii  liblzo2-2              2.08-1.2+b2
ii  libpam0g               1.1.8-3.6
ii  libpkcs11-helper1      1.21-1
ii  libssl1.0.2            1.0.2l-2+deb9u2
ii  libsystemd0            232-25+deb9u1
ii  lsb-base               9.20161125

Versions of packages openvpn recommends:
ii  easy-rsa  2.2.2-2

Versions of packages openvpn suggests:
ii  openssl     1.1.0f-3+deb9u1
pn  resolvconf  <none>

-- debconf information:
  openvpn/create_tun: false

Reply via email to