I haven't seen TomK in a while, so I'm bringing this to the list: The
auth-user-pass option of openvpn allows you to specify a plaintext file
containing a username and a password. However, this feature is disabled
by default. This means that everyone who wants to use it will have to
rebuild openvpn.


I want to enable the --enable-password-save option in our openvpn
package. IMO, our users are smart enough to know the security
implications of saving a password in a plaintext file. Enabling this
option is completely safe if you don't use this feature.


What do you think?