OpenVPN 2.3.6 cannot grab smartos gateway information, OpenVPN devs think the issue is fixed in 2.3.11

[baetheus]

I submitted an issue with openvpn about openvpn 2.3.6 not being able to find the current default gateway on smartos. Following is the original ticket that should be available here: https://community.openvpn.net/openvpn/ticket/696

GuestOS: SmartOS minimal-64 15.2.0 and SmartOS minimal-64 16.1.0
HostOS: SmartOS Live Image v0.147+ build: 20160527T033529Z

Openvpn build:
    [root@transmission ~]# openvpn --version
    OpenVPN 2.3.6 x86_64-sun-solaris2.11 [SSL (OpenSSL)] [LZO] [IPv6] built on Aug 30 2015
    library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.09
    Originally developed by James Yonan
    Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@…>
    Compile time defines: enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=no enable_def_auth=yes enable_dependency_tracking=no enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=needless enable_fragment=yes enable_http_proxy=yes enable_iproute2=no enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_password_save=yes enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_win32_dll=yes enable_x509_alt_username=no with_crypto_library=openssl with_gnu_ld=no with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_sysroot=no

Routing table: ​https://gist.github.com/anonymous/4259fd6dbf2b492b8a5805c1d3ba4f41
Openvpn config: ​https://gist.github.com/anonymous/543c6fc8b3aff6c4a98603058ede6ecd
Logs: ​https://gist.github.com/anonymous/00c3a70f3850e63c80371adadc50d9bb
The vpn provider is, as can be seen in the config and logs, Private Internet Access.

Steps to reproduce on a fresh install:
Install openvpn: # pkgin in openvpn
Copy config, certs, and auth to /opt/local/etc/openvpn/
Enable openvpn service: # svcadm enable -r openvpn
Reboot
Optional: access logs with: # tail -F $(svcs -L openvpn)

Temporary solution:
Manually add routes
route add default <tun1 internal address> 128.0.0.0
route add <vpn public address> <internal gateway> 255.255.255.255
route add 128.0.0.0 <tun1 internal address> 128.0.0.0
Check that traffic is forwarding properly
    [root@test ~]# curl portquiz.net:666
    Port 666 test successful!
    Your IP: <vpn public address>

The actual issue is that openvpn cannot detect the current default gateway, and thus fails before setting up all the routes for vpn tunneling.

The proffered advice was to run openvpn 2.3.11, as there is a commit that suggests the issue has already been resolved. In building openvpn 2.3.11 I ran into some issues with tap headers not being found, which is not surprising to me. I'm hoping I can either get some guidance on properly building openvpn 2.3.11 against smartos minimal-64 16.1.0 or perhaps a package upgrade in pkgsrc.

Thanks!

[jperkin]

I updated this in pkgsrc trunk and backported to 2016Q2 in 4618929, it will be available in that release shortly.