OpenVPN client launchd for OS X and MacPorts

openvpn2.conf

# logfilename          [owner:group]    mode count size when  flags [/pid_file] [sig_num]
/opt/local/var/log/openvpn2/*.log                644  3     1000    *   J
/opt/local/var/log/openvpn2/*/*.log                644  3     1000    *   J

org.macports.opevpn2.wr-vpc-us-east.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd";>
<plist version="1.0">
<dict>
  <key>Disabled</key>
  <true/>
  <key>Label</key>
  <string>org.macports.openvpn2.wr-vpc-us-east</string>
  <key>ProgramArguments</key>
  <array>
    <string>/opt/local/sbin/openvpn2</string>
	<string>--config</string>
	<string>/opt/local/etc/openvpn2/wr-vpc-us-east/client.conf</string>
	<string>--log-append</string>
	<string>/opt/local/var/log/openvpn2/wr-vpc-us-east.log</string>	
  </array>
  <key>RunAtLoad</key>
  <true/>
  <key>WorkingDirectory</key>
  <string>/opt/local/etc/openvpn2/wr-vpc-us-east/</string>
  <key>KeepAlive</key>
  <!-- NetworkState key is no longer implemented in OS X 10.10 Yosemite.
  	<dict>
  		<key>NetworkState</key>
  		<true/>
  	</dict> -->
  <true/>
</dict>
</plist>

• openvpn2.conf goes in /etc/newsyslog.d/
• plist goes in /Library/LaunchDaemons.
  • change following the Label to match file name for each vpn client plist or launchd will be confused.

Also if you want the logs to appear in Console.app, create /var/log/openvpn2 and symlink log files there or alternatively put the logs in /var/log/openvpn2.

# start and autoload on reboot
sudo launchctl load -w /Library/LaunchDaemons/org.macports.openvpn2.wr-vpc-us-east.plist

# stop and disable
sudo launchctl unload -w /Library/LaunchDaemons/org.macports.openvpn2.wr-vpc-us-east.plist