Hi,
On Thu, May 25, 2023 at 05:39:10PM +0200, Arne Schwabe wrote:
> Am 09.05.2023 um 17:46 schrieb Gianmarco De Gregori:
> > -bool persist_key; /* Don't re-read key files on SIGUSR1 or
> > PING_RESTART */
>
> The downside of always enabling this option is that you can no longer
>
Am 09.05.2023 um 17:46 schrieb Gianmarco De Gregori:
-bool persist_key; /* Don't re-read key files on SIGUSR1 or
PING_RESTART */
The downside of always enabling this option is that you can no longer
replace the certificate and key without restarting the server completley.
On Tue, May 09, 2023 at 05:46:58PM +0200, Gianmarco De Gregori wrote:
> This commit changes the default behavior of
> the OpenVPN configuration to enable the
> persist-key option by default.
>
> This means that all the key file content will be kept
> in memory throughout the lifetime of the VPN
This commit changes the default behavior of
the OpenVPN configuration to enable the
persist-key option by default.
This means that all the key file content will be kept
in memory throughout the lifetime of the VPN connection.
Fixes: Trac #1405
Signed-off-by: Gianmarco De Gregori
---