control-client

#!/bin/bash

set -e
set -u

CLIENTNUM=$2
PIDFILE=/var/vcap/sys/run/openvpn/openvpn-client$CLIENTNUM.pid
LOGDIR=/var/vcap/sys/log/openvpn
RUNDIR=/var/vcap/sys/run/openvpn

mkdir -p "$LOGDIR"
chown vcap:vcap "$LOGDIR"

exec >> $LOGDIR/client$CLIENTNUM-control.log
exec 2>&1

mkdir -p $( dirname "$PIDFILE" )
chown vcap:vcap $( dirname "$PIDFILE" )

mkdir -p "$RUNDIR"
chown vcap:vcap "$RUNDIR"

export LD_LIBRARY_PATH="/var/vcap/packages/openvpn/external/openssl/lib:${LD_LIBRARY_PATH:-}"

case $1 in

  start)
    /var/vcap/jobs/openvpn/bin/write-clients
    
    chmod 600 /var/vcap/jobs/openvpn/etc/{*.conf,*.key,dh.pem}
    chmod 644 /var/vcap/jobs/openvpn/etc/crl.pem
    
    if [ ! -e /dev/net/tun ] ; then
      mkdir -p /dev/net
      mknod /dev/net/tun c 10 200
    fi
    
    /sbin/start-stop-daemon \
      --background \
      --pidfile "$PIDFILE" \
      --exec /bin/bash \
      --start \
      -- -c "/var/vcap/packages/openvpn/sbin/openvpn \
        --config /var/vcap/jobs/openvpn/etc/client$CLIENTNUM.conf \
        --writepid $PIDFILE \
        --dev tun$CLIENTNUM \
        >> \"$LOGDIR/client$CLIENTNUM-stdout.log\" \
        2>> \"$LOGDIR/client$CLIENTNUM-stderr.log\" \
      "

    ;;

  stop)
    /sbin/start-stop-daemon \
      --pidfile "$PIDFILE" \
      --signal TERM \
      --oknodo \
      --stop \
      --retry 15

    ;;

  *)
    echo "Usage: control {start|stop}" >&2

    exit 1

    ;;

esac