![]() Installer version I602 fixes loading of pkcs11 files on Windows. The latter includes several improvements, the most important of which is the ability to import profiles from URLs where available. Windows installers include updated OpenSSL and new OpenVPN GUI. Windows executable and libraries are now built natively on Windows using MSVC, not cross-compiled on Linux as with earlier 2.5 releases. One of the fixes is to password prompting on windows console when stderr redirection is in use - this breaks 2.5.x on Win11/ARM, and might also break on Win11/amd64. This release include a number of fixes and small improvements. The OpenVPN community project team is proud to release OpenVPN 2.5.4. Updated easy-rsa3 bundled with the installer on Windows.Included openvpn-gui updated to 11.37.0.0.Improved protocol negotiation, leading to faster connection setup.Added Pre-Logon Access Provider support to OpenVPN GUI for Windows.Added -peer-fingerprint mode for a more simplistic certificate setup and verification.Reworked TLS handshake, making OpenVPN immune to replay-packet state exhaustion attacks.Outdated cryptographic algorithms disabled by default, but there are options to override if necessary.Improved handling of tunnel MTU, including support for pushable MTU.Data Channel Offload (DCO) kernel acceleration support for Windows, Linux, and FreeBSD.New features and improvements in 2.6.0 compared to 2.5.8: ![]() The Changes document also contains a section with workarounds for common problems encountered when using OpenVPN with OpenSSL 3. This is a new stable release with some major new features. The OpenVPN community project team is proud to release OpenVPN 2.6.0. ![]() Update included ovpn-dco-win driver to 0.9.2.On Linux this brings in a new default dependency for libnl-genl (for Linux distributions that are too old to have a suitable version of the library, use "configure -disable-dco") Note: configure now enables DCO build by default on FreeBSD and Linux. "-cryptoapicert ISSUER:" where is matched as a substring of the issuer (CA) name in the certificate. Certificate selection string can now specify a partial issuer name string as CryptoAPI (Windows): support issuer name as a selector.This ensure that only the previously authenticated peer can do trigger renegotiation and complete renegotiations. Dynamic TLS Crypt: When both peers are OpenVPN 2.6.1+, OpenVPN will dynamically create a tls-crypt key that is used for renegotiation.This is mostly a bugfix release with some improvements. The OpenVPN community project team is proud to release OpenVPN 2.6.1. Update included openvpn-gui to 11.39.0.0.Attempting to use the old ovpn-dco with 2.6.2+ will lead to disabling DCO at runtime. The kernel module was renamed to "ovpn-dco-v2.ko" in order to highlight this change and ensure that users and userspace software could easily understand which version is loaded. This is an INCOMPATIBLE change and therefore an ovpn-dco kernel module older than v0323 (commit ID 726fdfe0fa21) will not work anymore and must be upgraded. New control packets flow for data channel offloading on Linux: 2.6.2+ changes the way OpenVPN control packets are handled on Linux when DCO is active, fixing the lockups observed with 2.6.0/2.6.1 under high client connect/disconnect activity.implement byte counter statistics for DCO Windows (client only).implement byte counter statistics for DCO Linux (p2mp server and client).The OpenVPN community project team is proud to release OpenVPN 2.6.2. Use openssl.exe directly if you need to edit a private key. This was a niche feature which caused a direct dependency of GUI on OpenSSL. This update removes the ability to change the password of a private key from the GUI.Update included openvpn-gui to 11.41.0.0.MSIs are now built against OpenSSL 3.1.0.repair querying install path info for easyrsa-start.bat on some Windows language versions, see GH openvpn-build#352.ensure interactive service stays enabled after silent reinstall, see GH openvpn-build#348, openvpn-build#349 and openvpn-build#351.Windows: support setting DNS domain in configurations without GUI and DHCP (typically wintun or windco drivers), see GH openvpn#306. ![]() The OpenVPN community project team is proud to release OpenVPN 2.6.3.
0 Comments
Leave a Reply. |