Commit graph

14 commits

Author SHA1 Message Date
Stephen Smoogen
32552ec77e fix some entries pointing to bastion02 to bastion-iad 2020-06-11 14:10:04 -04:00
Kevin Fenzi
bcc42fad9c Add back a client.conf for rhel6 hosts (fas servers) 2018-09-29 18:28:39 +00:00
Patrick Uiterwijk
8ad630412f Make OpenVPN use tun1 for os-node's
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-09-18 05:49:15 +02:00
Patrick Uiterwijk
543acabdb1 Try to ensure that haproxy and varnish get started after VPN comes up on proxies
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-01-02 02:11:43 +00:00
Patrick Uiterwijk
4cc1b78ff3 Check the certificate key usage
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-14 20:57:39 +00:00
Kevin Fenzi
12ed1dd6f7 Update out vpn configs for better encryption. 2016-08-31 18:50:14 +00:00
Patrick Uiterwijk
fe6f551049 Move fix-routes.sh to openvpn base and run it on restart
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-11-04 23:09:43 +00:00
Patrick Uiterwijk
b2b07e8bcd Running the script doesnt work yet. But we still want the script.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-10-23 03:11:02 +00:00
Patrick Uiterwijk
50511a65e7 Make fix-routes not terminate with status 2 if it fixed it
This will make openvpn think something went wrong and terminate the connection.
I did this to make it easily visible when running with ansible, but in this case
it messes things up.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-10-23 02:41:01 +00:00
Patrick Uiterwijk
d5bdc65887 Add script to OpenVPN for VPN route fixing
This will make sure that always after a start/restart the
VPN routes are created

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-10-23 02:15:43 +00:00
Patrick Uiterwijk
b1db3bafd8 Disable persist-tun for openvpn
This should solve the issue where RHEL7 machines that get a network
hiccup need an OpenVPN restart to restore their routes.

The code is broken in the current upstream OpenVPN release, such that
it does tear down some of the routes during a ping-restart (when the
connection is dropped due to network hiccups), but the reconnection
code does not restore the routes.
I am working on an upstream patch to fix this, but in the meantime
disabling persist-tun will make sure that OpenVPN does the entire
initialization upon reconnection, which makes sure that all routes
are created.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-10-21 18:26:32 +00:00
Pierre-Yves Chibon
92dab2a497 Clean openvpn server files that were doing nothing in the client 2014-08-01 12:31:37 +02:00
Pierre-Yves Chibon
6878e49796 Fix the files list in the openvpn/client role 2014-08-01 12:22:10 +02:00
Pierre-Yves Chibon
e5ff3b586e Start the port to ansible of openvpn 2014-07-31 22:37:58 +02:00