* Bernhard Schmidt: > thanks. I will include this patch on top of 2.4.7 which is due to be > released today.
Awesome, thank you. I think you are going to make things easier for a quite a few people. :-) > I'm a bit confused about > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907452 which suggests > there are still other issues. Has this been obsoleted by your patch as well? Yes. The symptoms described by Cédric in #907452 match exactly what I had seen during my debugging efforts. There seem to be two ways to avoid the pthread_atfork(3) related lockups in OpenVPN: (a) build pkcs11-helper without thread support or (b) disable the feature by not setting the horribly misnamed "safe fork mode". I did not see any lockups with the version of pkcs11-helper shipped with strech with my OpenVPN patch. Cheers, -Hilko
