Am 19.02.19 um 14:59 schrieb Hilko Bengen: Dear Hilko,
thanks. I will include this patch on top of 2.4.7 which is due to be released today. I'm a bit confused about https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907452 which suggests there are still other issues. Has this been obsoleted by your patch as well? Thanks, Bernhard > I'm Robert's colleague and the author of the simpler, hopefully less > invasive patch submitted upstream. Besides the tests that I had done > myself that I mentioned in the commit message, I asked two colleagues > who also use YubiKey NEO as PKCS#11 token and who run Debian/buster to > try the following: > > - Make sure that libpkcs11-helper1=1.25.1-1 is installed. (We had been > experimenting with a custom-built pkcs11-helper without threads > support before.) > - Install an openvpn build provided by me (see below). > - run "openvpn $CONFIG" > > Both reported that everything works fine whereas previously, OpenVPN > would hang right after logging "/sbin/ip link set dev $TUN up mtu $MTU". > > The custom openvpn build was created in a sid chroot using sbuild. The > relevant patch is attached. > > Cheers, > -Hilko >