Trying to make OpenVPN easy to use is admirable. If you're interested in a public-key (RSA) config then it's currently just a disaster to setup, even with the

Trying to make OpenVPN easy to use is admirable. If you're interested in a public-key (RSA) config then it's currently just a disaster to setup, even with the "easy RSA" helper scripts. In my experience the --up and --down hooks and routing are also terrible. I invested hours trying to get it working with a persistent TUN device (so daemons could bind to the endpoint IP before the VPN was up), but OpenVPN is just too bloated and tries to do too much for you, getting in the way. I recommend people give tinc a try instead. Specifically version v1.1-pre*. It's an absolute doddle to setup, uses Ed25519 key pairs, and plays much more nicely with traditional network configuration. https://www.tinc-vpn.org/ https://www.tinc-vpn.org/