remove persist-tun causing problem

diff --git a/vpn-mk-client-cert b/vpn-mk-client-cert
index 59ddda55cc5cc5959d2d68273d85f7ae5d81e415..ec68484274dfe85bef00136fc6bbada7220180c4 100755 (executable)
--- a/vpn-mk-client-cert
+++ b/vpn-mk-client-cert
@@ -146,7 +146,10 @@ remote $host $port
 resolv-retry infinite
 nobind
 persist-key
-persist-tun
+# persist-tun was here, but if the vpn goes down this makes
+# the whole thing get stuck if the vpn is our default route
+# unless we set a special route out just for the vpn.
+# todo: investigate.
 ca ca-$name.crt
 cert $name.crt
 key $name.key