]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Document that --push-remove is generally more suitable than --push-reset
authorGert Doering <gert@greenie.muc.de>
Tue, 8 Sep 2020 11:15:11 +0000 (13:15 +0200)
committerGert Doering <gert@greenie.muc.de>
Wed, 9 Sep 2020 06:38:28 +0000 (08:38 +0200)
commitcdeef20bc6ea4c15824427055f2ffeff53651dee
treed78fa063f60593f7e0ec752ea553fcdbc9890cc9
parent567e277f1cbaa8059319a8feea4c08edf77b6a5a
Document that --push-remove is generally more suitable than --push-reset

It's a long-standing and well-known problem that --push-reset removes
"critical" options from the push list (like "topology subnet") which
will then lead to non-working client configs.  This can not be
reasonably fixed, because the list of "critical" options depends on
overall server config.

So just document the fact, and point people towards --push-remove as
a more selective tool.

Trac: #29

Signed-off-by: Gert Doering <gert@greenie.muc.de>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: David Sommerseth <davids@openvpn.net>
Message-Id: <20200908111511.9271-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg20899.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 5fd66510dfdef628fa95f156c5f9d80af9ae1531)
doc/man-sections/server-options.rst