On Tue, 21 Jun 2022 01:52:48 -0400, Nathan Stratton Treadway
<natha...@ontko.com> wrote:

>On Mon, Jun 20, 2022 at 08:51:47 +0200, Bo Berglund wrote:
>
>> Originally I used OpenVPN since around 2014 on RaspberryPi to access my home
>> LAN. I did not have an Ubuntu server back then.
>> Then in 2016 I built the Ubuntu server to handle a lot of other things too, 
>> like
>> subversion and such, and I also installed OpenVPN there.
>> But I no longer remember *how* I installed it, it might have been done using
>> some apt repository fiddling so I am now on the wrong branch....
>
>The top entry in the /usr/share/doc/openvpn/changelog.Debian.gz should
>give you at least a little information about the specific build of
>the currently-installed version of the package...

This is what I have in the file:

openvpn (2.4.7-xenial0) stable; urgency=medium

  * preparing release v2.4.7 (ChangeLog, version.m4, Changes.rst) (Gert Doering,
2b8aec62)
... lots of more lines ...


>
>> What would be the proper way to do the manual upgrade?
>> 
>> Is there a way to find out from where the openvpn I do have is coming and 
>> what
>> is blocking it from being upgraded via apt in that case?
>> 
>[...]
>> apt policy openvpn
>> openvpn:
>>   Installed: 2.4.7-xenial0
>>   Candidate: 2.4.7-xenial0
>>   Version table:
>>  *** 2.4.7-xenial0 100
>>         100 /var/lib/dpkg/status
>>      2.4.7-1ubuntu2.20.04.4 500
>>         500 http://se.archive.ubuntu.com/ubuntu focal-updates/main amd64 
>> Packages
>>         500 http://security.ubuntu.com/ubuntu focal-security/main amd64 
>> Packages
>>         500 http://archive.ubuntu.com/ubuntu focal-security/main amd64 
>> Packages
>>         500 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 
>> Packages
>
>This "apt policy" shows that you have the standard Ubuntu repos in your
>apt.sources list, and thus the standard package is available to install.
>
>(It doesn't get installed by default because the dpkg version sort
>algorithm treats "2.4.7-xenial0" as newer than the version
>"2.4.7-1ubuntu2.20.04.4" and doesn't want to downgrade the package.)
>
>But I think you would be able to manually force installation of the
>stock Focal package using the command "apt install openvpn/focal" to
>force selection of the version of the package from the specified distro. 
>(Or alternatively "apt install openvpn=2.4.7-1ubuntu2.20.04.4" to give
>an explicit version string.)

I will try that the next time I am back home where the server lives.
Too dangerous to try remotely since the VPN is in use on a lot of places.


>> Can I just uninstall openvpn and then install via apt to get the latest?
>> Or will that throw out any custom config I have done too?
>
>("remove" -- as opposed to "purge" -- will leave all custom config
>files, so they should be there waiting when you install the package
>again. But I'd say you might as well try the "install .../focal" approach
>first and see if you can do it all in one step.)

OK, that is good to know!

>> Currently over the summer I am not at my home LAN but I connect there via
>> OpenVPN on my router, so presumably I would have to wait until I am back 
>> home so
>> I have direct access to the server, right?
>> (Since I would lose connection once the server OpenVPN goes down).
>
>Yeah -- in that case it's probably best to wait...
>
>(If the package upgrade works as expected, OpenVPN would automatically
>start back up afterwards, so you'd presumably just see a slight pause in
>your ssh session and then resume normal operation... but if anything
>goes wrong with the upgrade, you'd be in trouble....)
>
>
>                                                       Nathan

The OpenVPN server needs a reboot now and then (Ubuntu alerts of that on SSH
login) and I have done so a number of times without ill effects.
So yes, OpenVPN clients reconnect when the server is back up after a minute or
two.


-- 
Bo Berglund
Developer in Sweden



_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to