From 2da6add81afb25c139de43264815ee6c8018e88c Mon Sep 17 00:00:00 2001
From: Ian Kelling <iank@fsf.org>
Date: Fri, 20 Nov 2020 17:25:56 -0500
Subject: [PATCH] remove persist-tun causing problem

---
 vpn-mk-client-cert | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/vpn-mk-client-cert b/vpn-mk-client-cert
index 59ddda5..ec68484 100755
--- a/vpn-mk-client-cert
+++ b/vpn-mk-client-cert
@@ -146,7 +146,10 @@ remote $host $port
 resolv-retry infinite
 nobind
 persist-key
-persist-tun
+# persist-tun was here, but if the vpn goes down this makes
+# the whole thing get stuck if the vpn is our default route
+# unless we set a special route out just for the vpn.
+# todo: investigate.
 ca ca-$name.crt
 cert $name.crt
 key $name.key
-- 
2.30.2