Run openvpn-openssl with verb 9

bgolwala

I have install the openvpnas access server. I want to run the server with --verb 11
but openvpn-openssl run from pyovpn.sagent.iptworker so how we can ask pyovpn.sagent use --verb 11 in command line?
Can we add something in /usr/local/openvpn_as/etc/as.conf or we need to pass some parameter to /usr/local/openvpn_as/scripts/openvpnas ?

Following example of status of openvpn access server
service openvpnas status
● openvpnas.service - OpenVPN Access Server Service
Loaded: loaded (/lib/systemd/system/openvpnas.service; enabled; vendor preset: enabled)
Active: active (running) since Wed 2021-12-08 07:26:24 UTC; 52min ago
Process: 12369 ExecStop=/bin/rm -f /usr/local/openvpn_as/etc/sock/sagent /usr/local/openvpn_as/etc/sock/sagent.localroot /usr/local/openvpn_as/etc/sock/sagent.api (code=exited, status=0/
Process: 12381 ExecStart=/usr/local/openvpn_as/scripts/openvpnas --logfile=/var/log/openvpnas.log --pidfile=/run/openvpnas.pid (code=exited, status=0/SUCCESS)
Main PID: 12415 (python2)
Tasks: 12 (limit: 2312)
CGroup: /system.slice/openvpnas.service
├─12415 python2 -c from pyovpn.sagent.sagent_entry import openvpnas ; openvpnas() --logfile=/var/log/openvpnas.log --pidfile=/run/openvpnas.pid
├─12434 /usr/bin/python2 -c from pyovpn.log.logworker import start ; start()
├─12435 /usr/bin/python2 -c from pyovpn.cserv.wserv_entry import start ; start() -no -u openvpn_as -g openvpn_as --pidfile /usr/local/openvpn_as/etc/tmp/wserv.pid -r epoll
├─12458 /usr/bin/python2 -c from pyovpn.sagent.iptworker import start6 ; start6()
├─12461 /usr/bin/python2 -c from pyovpn.sagent.iptworker import start ; start()
├─12467 openvpn-openssl --errors-to-stderr --config stdin
├─12475 openvpn-openssl --errors-to-stderr --config stdin
├─12485 openvpn-openssl --errors-to-stderr --config stdin
├─12492 openvpn-openssl --errors-to-stderr --config stdin
├─12497 openvpn-openssl --errors-to-stderr --config stdin
├─12508 openvpn-openssl --errors-to-stderr --config stdin
└─12519 iptables-restore -n

chilinux

You might be able to do it from the admin web panel under:
Configuration -> Advanced VPN -> Server Config Directives

openvpn_inc

bgolwala wrote I have install the openvpnas access server. I want to run the server with --verb 11
but openvpn-openssl run from pyovpn.sagent.iptworker so how we can ask pyovpn.sagent use --verb 11 in command line?

chilinux wrote You might be able to do it from the admin web panel under:
Configuration -> Advanced VPN -> Server Config Directives

Well, as chilinux did, I thought that might work. But I am told it probably will not.

I think --verb 11 makes sense if you're using the spinaltap kernel driver, rather than ordinary tap, which only goes to 10. Or maybe binary solo. For ordinary use, no, that would be insane.

Why do you want to do this? If you are having a problem, even if you're only a free usage level non-customer, you can open a ticket and have us look at your logs. Please see the URL in my signature.

hth, regards, rob0