Kevin Fenzi
fc484f796c
drop some old openvpn stuff
2017-11-25 21:44:59 +00:00
Patrick Uiterwijk
65a6ad06f2
This service does not exist on newly installed boxes
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-11-21 23:07:56 +00:00
Patrick Uiterwijk
936e8b261a
yum accepted pkg=, package calls it name=
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2017-10-09 00:38:26 +02:00
Patrick Uiterwijk
adcbf72f03
Packageize this, packageize that, packageize the world
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-08 22:25:52 +00:00
Kevin Fenzi
881735b5eb
another corner case since f24 has systemd and el6 does not
2017-05-14 23:45:27 +00:00
Kevin Fenzi
5055c83e85
and try and handle f24 here too
2017-05-14 23:39:39 +00:00
Kevin Fenzi
636d7623ad
try and use correct logic
2017-05-14 23:36:21 +00:00
Kevin Fenzi
52318bbc49
try and handle cases for f24 not being updated to the new setup either
2017-05-14 23:26:45 +00:00
Kevin Fenzi
50c070a79b
fix version here too
2017-05-14 21:56:00 +00:00
Kevin Fenzi
714506a905
handle poor old rhel6
2017-05-14 21:51:47 +00:00
Patrick Uiterwijk
4cc1b78ff3
Check the certificate key usage
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-14 20:57:39 +00:00
Kevin Fenzi
6005665db7
also need cert and key under client
2017-05-14 20:55:45 +00:00
Kevin Fenzi
179cc4dd54
switch openvpn to use seperate service units and directories for client and server, hopefully in a mostly transparent way that will not cause much outage
2017-05-14 19:01:17 +00:00
Kevin Fenzi
8a6e51a9a6
change state=running to start=started as the old one is going away in ansible 2.7
2017-04-13 01:37:21 +00:00
Kevin Fenzi
215c38198e
Disable openvpn client handler for now
2016-08-31 18:57:02 +00:00
Kevin Fenzi
12ed1dd6f7
Update out vpn configs for better encryption.
2016-08-31 18:50:14 +00:00
Kevin Fenzi
1c6e9a11f4
Another pile of trailing whitespace fixes
2016-08-08 19:42:36 +00:00
Tim Flink
bf03de72d0
fixing logic for openvpn package install w/dnf
2015-11-26 01:27:59 +00:00
Pierre-Yves Chibon
1c183896c8
Install the openvpn client package with dnf on F22+
2015-11-17 15:29:29 +01:00
Patrick Uiterwijk
fe6f551049
Move fix-routes.sh to openvpn base and run it on restart
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-11-04 23:09:43 +00:00
Patrick Uiterwijk
b2b07e8bcd
Running the script doesnt work yet. But we still want the script.
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-23 03:11:02 +00:00
Patrick Uiterwijk
50511a65e7
Make fix-routes not terminate with status 2 if it fixed it
...
This will make openvpn think something went wrong and terminate the connection.
I did this to make it easily visible when running with ansible, but in this case
it messes things up.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-23 02:41:01 +00:00
Patrick Uiterwijk
d5bdc65887
Add script to OpenVPN for VPN route fixing
...
This will make sure that always after a start/restart the
VPN routes are created
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-23 02:15:43 +00:00
Patrick Uiterwijk
b1db3bafd8
Disable persist-tun for openvpn
...
This should solve the issue where RHEL7 machines that get a network
hiccup need an OpenVPN restart to restore their routes.
The code is broken in the current upstream OpenVPN release, such that
it does tear down some of the routes during a ping-restart (when the
connection is dropped due to network hiccups), but the reconnection
code does not restore the routes.
I am working on an upstream patch to fix this, but in the meantime
disabling persist-tun will make sure that OpenVPN does the entire
initialization upon reconnection, which makes sure that all routes
are created.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2015-10-21 18:26:32 +00:00
Kevin Fenzi
2873cdd427
Move all puppet_private stuff to ansible private so we can stop using puppet private.
2015-09-25 18:16:23 +00:00
Kevin Fenzi
275f4b5203
Change all instances of ansible_distribution_major_version to filter to int for comparisons.
2015-05-27 22:27:39 +00:00
Kevin Fenzi
05e35e953d
This is now fixed in a systemd update in rhel7.1 so drop the workaround
2015-04-22 14:40:57 +00:00
Kevin Fenzi
fb1c3a6eeb
Work around rhel 7.1 systemd template bug: https://bugzilla.redhat.com/show_bug.cgi?id=1206007
2015-03-26 13:41:48 +00:00
Kevin Fenzi
10b316d114
Does this need quotes?
2014-12-15 19:40:37 +00:00
Kevin Fenzi
1cd3cb534b
Try this one.
2014-12-15 19:39:30 +00:00
Kevin Fenzi
aabdcd15d6
Split this out to see if we can debug it some.
2014-12-15 19:37:22 +00:00
Praveen Kumar
4b1e5162d7
Update state from installed/removed to present/absent for yum module as per latest documents -> http://docs.ansible.com/yum_module.html
2014-11-05 15:32:11 +00:00
Tim Flink
4cad62833a
fixing typo in restart notification
2014-09-24 17:35:59 +00:00
Tim Flink
d6195c2c33
changing openvpn restart notifications to work on sysvinit and systemd style machines
2014-09-24 17:32:41 +00:00
Tim Flink
b11b5959fb
newer fedora openvpn behaves more like rhel7 than rhel6
2014-09-24 13:33:31 +00:00
Ralph Bean
360c80e639
Yes. It was a typo.
2014-09-10 19:42:47 +00:00
Kevin Fenzi
b77b40ff2c
Try copy here too.
2014-08-12 03:49:58 +00:00
Pierre-Yves Chibon
6142a27e19
Move back from copy to file for testing
2014-08-01 17:08:49 +02:00
Pierre-Yves Chibon
d26ae5df9f
Use copy instead of file
2014-08-01 17:04:34 +02:00
Pierre-Yves Chibon
840abdfbd9
Fix mode for the .crt
2014-08-01 17:02:40 +02:00
Pierre-Yves Chibon
ecd9d72382
Try adjusting the notify handler
2014-08-01 16:52:39 +02:00
Pierre-Yves Chibon
1ed10e24fc
Let's just invert dest and source
2014-08-01 16:51:34 +02:00
Pierre-Yves Chibon
b818538962
Y'all get quotes
2014-08-01 16:48:16 +02:00
Pierre-Yves Chibon
27913def24
More quotes for the handler names
2014-08-01 16:45:57 +02:00
Pierre-Yves Chibon
8de71b59e3
Tag all the openvpn tasks as 'openvpn'
2014-08-01 16:41:55 +02:00
Pierre-Yves Chibon
8a89bd9fff
Fix accessing the mode
2014-08-01 16:34:21 +02:00
Pierre-Yves Chibon
8185a415d2
And we put directly the destination, no location set
2014-08-01 16:30:08 +02:00
Pierre-Yves Chibon
cf1f8dba40
What about quotes
2014-08-01 16:26:15 +02:00
Pierre-Yves Chibon
b34999e1f4
Add the logic to enable the openvpn server on EL6, EL7 and Fedora in the client and the server
2014-08-01 12:39:43 +02:00
Pierre-Yves Chibon
7f30c0fc7a
Adjust the openvpn handler automatically to the distribution used
2014-08-01 12:35:11 +02:00
