On Sat, May 25, 2013 at 12:33:15PM +0200, Mattieu Baptiste wrote: > Does someone managed to make OpenVPN work with 'route exec' ? > For me, it freeze just before establishing routes and creating the tun > interface.
I create the tun device and configure it manually, then I tell openvpn to use it as is. In that configuration 'route -T1 exec openvpn' works. Also, this approach makes it possible to chroot openvpn to /var/empty. Some of the option flags I use are: dev tun1 persist-tun persist-key user _openvpn group _openvpn chroot /var/empty mlock
