Re: Two questions about key generation for clients

On Thu, 25 Jan 2024 10:44:26 +0000, André via Openvpn-users
<[email protected]> wrote:

>Hi,
>
>My unit files are in /usr/lib/systemd/system/
>
>sudo systemctl list-unit-files|grep openvpn
>[email protected]  disabled        disabled
>[email protected] 
>.


OK, this is what I see:

$ sudo systemctl list-unit-files|grep openvpn
[email protected]    disabled        enabled
[email protected]    indirect        enabled
openvpn.service            enabled         enabled
[email protected]           indirect        enabled

But when I do this I get a somewhat different output (newsreader is wrapping the
lines...):

$ sudo systemctl |grep openvpn
  [email protected]       loaded active running   OpenVPN service
for server
  [email protected]  loaded active running   OpenVPN service
for serverlocal
  openvpn.service                     loaded active exited    OpenVPN service
? [email protected]              loaded failed failed    OpenVPN connection
to server
  system-openvpn.slice                loaded active active  system-openvpn.slice
  system-openvpn\x2dserver.slice      loaded active active
system-openvpn\x2dserver.slice

I have two services running, defined in /etc/openvpn/server:
server.conf and serverlocal.conf

The server.conf is a full VPN which accesses both the local LAN and the Internet
via the server's gateway. Used for geolocation problems.

The serverlocal.conf is basically the same except it does *not* forward traffic
to the Internet through the server's gateway - hence the name serverlocal. 
Only used to access the LAN for maintenance when I am traveling.

>sudo systemctl edit --full [email protected]
>After edit and saving, a copy is created in /etc/systemd/system/ that will override the default in /usr/lib/systemd/system/
>

So I did this too as follows to modify the conf:

$ sudo systemctl edit --full [email protected]

Now luckily I got to the nano editor as I hoped with a strange file opened:

/etc/systemd/system/.#[email protected]

So I edited the file (removed the --suppress-timestamps item) and saved it under
its name as shown.
But when I got back to the command line I was greeted with this:

Failed to reload daemon: Connection timed out

What does this mean and what should I do to get this right?



-- 
Bo Berglund
Developer in Sweden