X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=vpn-mk-client-cert;h=ec68484274dfe85bef00136fc6bbada7220180c4;hb=e6ee9ad43e4e1605f27d73555045f1e82ea5bc1c;hp=59ddda55cc5cc5959d2d68273d85f7ae5d81e415;hpb=aa9be22d2798d15580907238cfdbf8f3ffd7364d;p=vpn-setup

diff --git a/vpn-mk-client-cert b/vpn-mk-client-cert
index 59ddda5..ec68484 100755
--- a/vpn-mk-client-cert
+++ b/vpn-mk-client-cert
@@ -146,7 +146,10 @@ remote $host $port
 resolv-retry infinite
 nobind
 persist-key
-persist-tun
+# persist-tun was here, but if the vpn goes down this makes
+# the whole thing get stuck if the vpn is our default route
+# unless we set a special route out just for the vpn.
+# todo: investigate.
 ca ca-$name.crt
 cert $name.crt
 key $name.key