[
{ type: install
  message: <<EOM
Edit /etc/rc.conf[.local] to start OpenVPN automatically at system
startup. See %%PREFIX%%/etc/rc.d/openvpn for details.

Connect to VPN server as a client with this command to include the
%%PREFIX%%/libexec/openvpn/dns-updown script in the initialization:
openvpn-client <spec>.ovpn

For compatibility notes when interoperating with older OpenVPN
versions, please see online documentation at
<https://github.com/OpenVPN/openvpn/blob/release/2.7/Changes.rst>

Note that OpenVPN does not officially support LibreSSL.

Note that OpenVPN configures a separate user and group "openvpn",
which should be used instead of the NFS user "nobody"
when an unprivileged user account is desired.

You may want to add user openvpn and group openvpn when creating your
configuration files, the example configuration shows this only as comments.
EOM
}
{ type: upgrade
  message: <<EOM
Note that OpenVPN now configures a separate user and group "openvpn",
which should be used instead of the NFS user "nobody"
when an unprivileged user account is desired.

It is advisable to review existing configuration files and
to consider adding/changing user openvpn and group openvpn.

For compatibility notes when interoperating with older OpenVPN
versions, please see online documentation at
<https://github.com/OpenVPN/openvpn/blob/release/2.7/Changes.rst>

Note that the 2.7 version of the port replaced the
libexec/openvpn-client.down and .up scripts with a shared
%%PREFIX%%/libexec/openvpn/dns-updown script
(the sbin/openvpn-client script has been updated accordingly).

EOM
}
]