Hi, I've gathered more informations on this issue:
when systemd is enabled, the PIN is prompted by the /bin/systemd-ask-password program: https://github.com/OpenVPN/openvpn/blob/v2.3.4/src/openvpn/console.c#L158 this program is fork/exec'd by openvpn: https://github.com/OpenVPN/openvpn/blob/v2.3.4/src/openvpn/misc.c#L347 Then the openvpn process is locked in a pkcs11-helper pthread_atfork() callback. Openvpn should not fork() while in the pkcs11-helper PIN prompt hook, because ForkMode has been set to TRUE at library initialization. > If ref pkcs11h_setForkMode() is true, you cannot fork while in hook. https://github.com/OpenSC/pkcs11-helper/blob/pkcs11-helper-1.11/include/pkcs11-helper-1.0/pkcs11h-core.h#L403 -- Camille -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org