openvpn: we should not use soft restart
Openvpn has this idea of a soft-restart. It can restart itself without entirely shutting down if a bunch of specific flags are used (--persist-X and --ping-restart, etc).
We should NOT use this for many reasons, but mostly because it is unreliable and buggy for all kinds of situations.
Instead of soft restart, we need a hard restart:
(1) add "--remap-usr1 SIGTERM" to FIXED_FLAGS in bitmask-root
(2) We should listen for "SIGTERM[soft,ping-restart]" on the console and then run bitmask-root openvpn start
when detected (maybe after a brief delay?). Note that it is SIGTERM and not SIGUSR1 because of --remap-usr1
With the current code, a ping-restart just causes an attempted soft restart, but since it is running as nobody it can't and exits unexpectedly.
There may be an alternate method of getting a termination notice from the console? We should probably attempt start again regardless of why openvpn terminated, so long as the user has not yet hit a 'cancel' or 'turn off' button.
(from redmine: created on 2014-05-12, closed on 2014-05-19, relates #5671 (closed), relates #5588 (closed))