| 4 | |
| 5 | == OpenVPN 2.4_beta1 == |
| 6 | |
| 7 | Changes since 2.4_alpha2: |
| 8 | |
| 9 | {{{ |
| 10 | Arne Schwabe (1): |
| 11 | Make Changes.rst nicer for 2.4 release |
| 12 | |
| 13 | David Sommerseth (16): |
| 14 | cleanup: Remove NOP code sections in ssl.c:tls_process() |
| 15 | Remove last rest of INSTALL-win32.txt references |
| 16 | auth-gen-token: Add --auth-gen-token option |
| 17 | auth-gen-token: Generate an auth-token per client |
| 18 | auth-gen-token: Push generated auth-tokens to the client |
| 19 | auth-gen-token: Authenticate generated auth-tokens when client re-authenticates |
| 20 | Fix builds with --disable-crypto |
| 21 | man: Improve the --keepalive section |
| 22 | console: Fix compiler warning |
| 23 | systemd: Improve the systemd unit files |
| 24 | tun: Fix compiler warnings |
| 25 | file checks: Merge warn_if_group_others_accessible() into check_file_access() |
| 26 | tun: Fix weird commit error causing a double assignment |
| 27 | options: Remove --tls-remote |
| 28 | Remove unused variable in argv_printf_arglist() |
| 29 | Preparing for release v2.4_beta1 (ChangeLog, version.m4) |
| 30 | |
| 31 | Gert Doering (10): |
| 32 | openvpn version line: remove [IPv6], add [AEAD] if available |
| 33 | clean up *sig_info handling in link_socket_init_phase2() |
| 34 | check c->c2.link_socket before calling do_init_route_ipv6_list() |
| 35 | Check previously-unchecked buf_alloc_write() call in crypto self-test. |
| 36 | Fix potential division by zero in shaper_reset() |
| 37 | Repair topology subnet on FreeBSD 11 |
| 38 | Repair topology subnet on OpenBSD |
| 39 | Add in_port_t check to configure.ac |
| 40 | Fix compilation on MinGW with -std=c99 |
| 41 | Replace WIN32 by _WIN32 |
| 42 | |
| 43 | Heiko Hund (4): |
| 44 | put argv_* functions into own file, add unit tests |
| 45 | Remove unused and unecessary argv interfaces |
| 46 | remove unused system_str from struct argv |
| 47 | Factor out %sc handling from argv_printf() |
| 48 | |
| 49 | Lev Stipakov (1): |
| 50 | Drop recursively routed packets |
| 51 | |
| 52 | Samuli Seppänen (6): |
| 53 | Remove INSTALL-win32.txt that is now hosted in openvpn-build |
| 54 | Fix update_t_client_ips.sh for out of tree builds |
| 55 | Make sure that all relevant files under test go to release tarballs |
| 56 | Allow passing extra arguments to fping/fping6 in t_client.rc |
| 57 | Prevent generation of duplicate EXPECT_IFCONFIG entries |
| 58 | Fix a logic problem in handling of --up scripts in t_client.sh |
| 59 | |
| 60 | Selva Nair (2): |
| 61 | Support --block-outside-dns on multiple tunnels |
| 62 | Unbreak windows build |
| 63 | |
| 64 | Steffan Karger (18): |
| 65 | Remove verbose msg() from send_push_reply() |
| 66 | Limit --reneg-bytes to 64MB when using small block ciphers |
| 67 | Add a revoked cert to the sample keys |
| 68 | Fix --tls-version-max in mbed TLS builds |
| 69 | Don't deference type-punned pointers |
| 70 | Fix builds on compilers without anonymous union support |
| 71 | Refactor static/tls-auth key loading |
| 72 | Add missing includes in error.h |
| 73 | Make argv unit tests obey {MBEDTLS, OPENSSL}_{LIBS, CFLAGS} |
| 74 | Move private file access checks to options_postprocess_filechecks() |
| 75 | Deprecate key-method 1 |
| 76 | Refactor CRL handling |
| 77 | Remove unneeded check for extra_certs_file_inline |
| 78 | Fix missing return value checks in multi_process_float() |
| 79 | Restore pre-NCP cipher options on SIGUSR1 |
| 80 | Remove unused variables from do_init_crypto_static() |
| 81 | Add control channel encryption (--tls-crypt) |
| 82 | Add --tls-crypt unit tests |
| 83 | }}} |