Re: Two questions about key generation for clients

On 21/01/2024 17:34, tincantech via Openvpn-users wrote:
<snip>
> 
>> Can I edit this file and remove the item --suppress-timestamps to possibly
>> enable the timestamps? And remove the machine-readable-output item in the actual
>> service conf file?
>> Will that result in human-readable timestamps?
> 
> The recommended method is to copy the file to /etc/systemd/system.

Actually, the preferred way is to use

     # systemctl edit openvpn-server@CONFIG_NAME

You now get an new file where you just add the "ini sections" and 
settings you want to modify.  In this case, you would add the 
"[Service]" section and add the modified ExecStart= line to your liking.

These changes are saved separately and will always be merged into 
service setup, even when the unit file from the upstream OpenVPN package 
gets updated.

If you do the "copy to /etc/systemd/system" trick, that will completely 
override the unit file shipped with the OpenVPN package.

-- 
kind regards,

David Sommerseth
OpenVPN Inc