Karsten Hopp
60c2d50072
openvpn: dnf -> package, with_item changes
2019-06-11 15:00:23 +00:00
Kevin Fenzi
bcc42fad9c
Add back a client.conf for rhel6 hosts (fas servers)
2018-09-29 18:28:39 +00:00
Kevin Fenzi
514d2b75ef
also masters get messed up by this
2018-09-27 23:10:46 +00:00
Patrick Uiterwijk
325155810b
Actually use the ansible hostname
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2018-09-18 05:51:46 +02:00
Patrick Uiterwijk
8ad630412f
Make OpenVPN use tun1 for os-node's
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2018-09-18 05:49:15 +02:00
Patrick Uiterwijk
64f17dd5f7
Also fix paths for el6
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2018-08-17 04:55:48 +00:00
Patrick Uiterwijk
78ae75ac8a
Fix client cert paths
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2018-08-17 04:39:50 +00:00
Patrick Uiterwijk
2948514084
Use the variable, not the string
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2018-01-02 02:14:00 +00:00
Patrick Uiterwijk
543acabdb1
Try to ensure that haproxy and varnish get started after VPN comes up on proxies
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2018-01-02 02:11:43 +00:00
Kevin Fenzi
fc484f796c
drop some old openvpn stuff
2017-11-25 21:44:59 +00:00
Patrick Uiterwijk
65a6ad06f2
This service does not exist on newly installed boxes
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-11-21 23:07:56 +00:00
Patrick Uiterwijk
936e8b261a
yum accepted pkg=, package calls it name=
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2017-10-09 00:38:26 +02:00
Patrick Uiterwijk
adcbf72f03
Packageize this, packageize that, packageize the world
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-08 22:25:52 +00:00
Kevin Fenzi
881735b5eb
another corner case since f24 has systemd and el6 does not
2017-05-14 23:45:27 +00:00
Kevin Fenzi
5055c83e85
and try and handle f24 here too
2017-05-14 23:39:39 +00:00
Kevin Fenzi
636d7623ad
try and use correct logic
2017-05-14 23:36:21 +00:00
Kevin Fenzi
52318bbc49
try and handle cases for f24 not being updated to the new setup either
2017-05-14 23:26:45 +00:00
Kevin Fenzi
50c070a79b
fix version here too
2017-05-14 21:56:00 +00:00
Kevin Fenzi
714506a905
handle poor old rhel6
2017-05-14 21:51:47 +00:00
Patrick Uiterwijk
4cc1b78ff3
Check the certificate key usage
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-14 20:57:39 +00:00
Kevin Fenzi
6005665db7
also need cert and key under client
2017-05-14 20:55:45 +00:00
Kevin Fenzi
179cc4dd54
switch openvpn to use seperate service units and directories for client and server, hopefully in a mostly transparent way that will not cause much outage
2017-05-14 19:01:17 +00:00
Kevin Fenzi
8a6e51a9a6
change state=running to start=started as the old one is going away in ansible 2.7
2017-04-13 01:37:21 +00:00
Kevin Fenzi
215c38198e
Disable openvpn client handler for now
2016-08-31 18:57:02 +00:00
Kevin Fenzi
12ed1dd6f7
Update out vpn configs for better encryption.
2016-08-31 18:50:14 +00:00
Kevin Fenzi
1c6e9a11f4
Another pile of trailing whitespace fixes
2016-08-08 19:42:36 +00:00
Tim Flink
bf03de72d0
fixing logic for openvpn package install w/dnf
2015-11-26 01:27:59 +00:00
Pierre-Yves Chibon
1c183896c8
Install the openvpn client package with dnf on F22+
2015-11-17 15:29:29 +01:00
Patrick Uiterwijk
fe6f551049
Move fix-routes.sh to openvpn base and run it on restart
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-11-04 23:09:43 +00:00
Patrick Uiterwijk
b2b07e8bcd
Running the script doesnt work yet. But we still want the script.
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-23 03:11:02 +00:00
Patrick Uiterwijk
50511a65e7
Make fix-routes not terminate with status 2 if it fixed it
...
This will make openvpn think something went wrong and terminate the connection.
I did this to make it easily visible when running with ansible, but in this case
it messes things up.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-23 02:41:01 +00:00
Patrick Uiterwijk
d5bdc65887
Add script to OpenVPN for VPN route fixing
...
This will make sure that always after a start/restart the
VPN routes are created
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-23 02:15:43 +00:00
Patrick Uiterwijk
b1db3bafd8
Disable persist-tun for openvpn
...
This should solve the issue where RHEL7 machines that get a network
hiccup need an OpenVPN restart to restore their routes.
The code is broken in the current upstream OpenVPN release, such that
it does tear down some of the routes during a ping-restart (when the
connection is dropped due to network hiccups), but the reconnection
code does not restore the routes.
I am working on an upstream patch to fix this, but in the meantime
disabling persist-tun will make sure that OpenVPN does the entire
initialization upon reconnection, which makes sure that all routes
are created.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-21 18:26:32 +00:00
Kevin Fenzi
2873cdd427
Move all puppet_private stuff to ansible private so we can stop using puppet private.
2015-09-25 18:16:23 +00:00
Kevin Fenzi
275f4b5203
Change all instances of ansible_distribution_major_version to filter to int for comparisons.
2015-05-27 22:27:39 +00:00
Kevin Fenzi
05e35e953d
This is now fixed in a systemd update in rhel7.1 so drop the workaround
2015-04-22 14:40:57 +00:00
Kevin Fenzi
fb1c3a6eeb
Work around rhel 7.1 systemd template bug: https://bugzilla.redhat.com/show_bug.cgi?id=1206007
2015-03-26 13:41:48 +00:00
Kevin Fenzi
10b316d114
Does this need quotes?
2014-12-15 19:40:37 +00:00
Kevin Fenzi
1cd3cb534b
Try this one.
2014-12-15 19:39:30 +00:00
Kevin Fenzi
aabdcd15d6
Split this out to see if we can debug it some.
2014-12-15 19:37:22 +00:00
Praveen Kumar
4b1e5162d7
Update state from installed/removed to present/absent for yum module as per latest documents -> http://docs.ansible.com/yum_module.html
2014-11-05 15:32:11 +00:00
Tim Flink
4cad62833a
fixing typo in restart notification
2014-09-24 17:35:59 +00:00
Tim Flink
d6195c2c33
changing openvpn restart notifications to work on sysvinit and systemd style machines
2014-09-24 17:32:41 +00:00
Tim Flink
b11b5959fb
newer fedora openvpn behaves more like rhel7 than rhel6
2014-09-24 13:33:31 +00:00
Ralph Bean
360c80e639
Yes. It was a typo.
2014-09-10 19:42:47 +00:00
Kevin Fenzi
b77b40ff2c
Try copy here too.
2014-08-12 03:49:58 +00:00
Pierre-Yves Chibon
6142a27e19
Move back from copy to file for testing
2014-08-01 17:08:49 +02:00
Pierre-Yves Chibon
d26ae5df9f
Use copy instead of file
2014-08-01 17:04:34 +02:00
Pierre-Yves Chibon
840abdfbd9
Fix mode for the .crt
2014-08-01 17:02:40 +02:00
Pierre-Yves Chibon
ecd9d72382
Try adjusting the notify handler
2014-08-01 16:52:39 +02:00
