diff --git a/roles/openvpn/base/tasks/main.yml b/roles/openvpn/base/tasks/main.yml
index 82452df7c2..7079e6119a 100644
--- a/roles/openvpn/base/tasks/main.yml
+++ b/roles/openvpn/base/tasks/main.yml
@@ -11,7 +11,7 @@
 - name: Install certificate and key
   file: src={{ item.file }}
         dest={{ item.dest }}
-        owner=root group=root mode={{ mode }}
+        owner=root group=root mode={{ item.mode }}
   with_items:
   - { file: "{{ puppet_private }}/vpn/openvpn/keys/ca.crt",
       dest: /etc/openvpn/ca.crt,
diff --git a/roles/openvpn/client/tasks/main.yml b/roles/openvpn/client/tasks/main.yml
index 0a31ce9fab..3faa3b8dd0 100644
--- a/roles/openvpn/client/tasks/main.yml
+++ b/roles/openvpn/client/tasks/main.yml
@@ -11,7 +11,7 @@
 - name: Install configuration files
   file: src={{ item.file }}
         dest={{ item.dest }}
-        owner=root group=root mode={{ mode }}
+        owner=root group=root mode={{ item.mode }}
   with_items:
   - { file: client.conf,
       dest: /etc/openvpn/openvpn.conf,
diff --git a/roles/openvpn/server/tasks/main.yml b/roles/openvpn/server/tasks/main.yml
index 1295218664..6cebde4152 100644
--- a/roles/openvpn/server/tasks/main.yml
+++ b/roles/openvpn/server/tasks/main.yml
@@ -19,7 +19,7 @@
 - name: Install configuration files
   file: src={{ item.file }}
         dest={{ item.dest }}
-        owner=root group=root mode={{ mode }}
+        owner=root group=root mode={{ item.mode }}
   with_items:
   - { file: server.conf,
       dest: /etc/openvpn/openvpn.conf,