Index: openvpn-2.1.3/socket.c
===================================================================
--- openvpn-2.1.3.orig/socket.c	2010-09-29 13:08:23.485458021 +0200
+++ openvpn-2.1.3/socket.c	2010-09-29 13:08:31.548460785 +0200
@@ -1328,6 +1328,10 @@
       resolve_bind_local (sock);
       resolve_remote (sock, 1, NULL, NULL);
     }
+
+  /* set socket file descriptor to not pass across execs, so that
+     scripts don't have access to it */
+  set_cloexec (sock->sd);
 }
 
 /* finalize socket initialization */
@@ -1533,10 +1537,6 @@
   /* set socket to non-blocking mode */
   set_nonblock (sock->sd);
 
-  /* set socket file descriptor to not pass across execs, so that
-     scripts don't have access to it */
-  set_cloexec (sock->sd);
-
 #ifdef ENABLE_SOCKS
   if (socket_defined (sock->ctrl_sd))
     set_cloexec (sock->ctrl_sd);
