Hi, I am surprised not to find more followups on this (maybe people running systemd are now OK with version 2.3.7-2?).
As I wrote earlier in the thread, applying debian packaging files from 2.3.7-1 on top of vanilla 2.3.8 works fine for me (provided that I add --askpass in DAEMONARGS inside /etc/init.d/openvpn). But using 2.3.7-2 does NOT work for me (with sysvinit). After doing some diffs and digging in openvpn's git repo, I think some password fixes from 2.3.8 have not been included in 2.3.7-2, notably commits (the first one being the most important): 315f6fbc7f657a7f1127628bd714f468709d5185 (fix regression: query password before becoming daemon) 079e5b9c13bf81d7afc6f932b5417d2f08f8e64b (Produce a meaningful error message if --daemon gets in the way of asking for passwords.) b6ec7fbe96f4e200b8962ef6bb572bbb2228133e (Document --daemon changes and consequences (--askpass, --auth-nocache)) Could you have a look at this, please? Thanks, -- Damien Wyart