Changes between Version 2 and Version 3 of Topics-2014-10-23


Ignore:
Timestamp:
10/21/14 07:08:56 (9 years ago)
Author:
Samuli Seppänen
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Topics-2014-10-23

    v2 v3  
    11= Topics =
    22
     3 * OpenVPN 2.3.5 release
     4  * Recent [http://thread.gmane.org/gmane.network.openvpn.devel/9143 tap-windows6 -related fixes] in OpenVPN require a new release 
     5  * There are other queued changes in the 2.3 branch (see below)
     6  * Anything missing?
     7  * Release date?
    38 * [http://thread.gmane.org/gmane.network.openvpn.devel/8403 Session-ID patch]
    49 * [wiki:MunichHackathon2014 Munich Hackathon]
     
    611 * Suggested new option for TLSv1.2 adoption: `--tls-version-max` (similar to `--tls-version-min`)
    712   * As suggested by syzzer on #openvpn-devel
     13
     14= Changes in the 2.3 branch =
     15
     16{{{
     17Andris Kalnozols (2):
     18      Fix some typos in the man page.
     19      Do not upcase x509-username-field for mixed-case arguments.
     20
     21Arne Schwabe (1):
     22      Fix server routes not working in topology subnet with --server [v3]
     23
     24David Sommerseth (4):
     25      Improve error reporting on file access to --client-config-dir and --ccd-exclusive
     26      Don't let openvpn_popen() keep zombies around
     27      Add systemd unit file for OpenVPN
     28      systemd: Use systemd functions to consider systemd availability
     29
     30Gert Doering (3):
     31      Drop incoming fe80:: packets silently now.
     32      Fix t_lpback.sh platform-dependent failures
     33      Call init script helpers with explicit path (./)
     34
     35Heiko Hund (1):
     36      refine assertion to allow other modes than CBC
     37
     38Hubert Kario (2):
     39      ocsp_check - signature verification and cert staus results are separate
     40      ocsp_check - double check if ocsp didn't report any errors in execution
     41
     42James Bekkema (1):
     43      Fix socket-flag/TCP_NODELAY on Mac OS X
     44
     45James Yonan (6):
     46      Fixed several instances of declarations after statements.
     47      In socket.c, fixed issue where uninitialized value (err) is being passed to to gai_strerror.
     48      Explicitly cast the third parameter of setsockopt to const void * to avoid warning.
     49      MSVC 2008 doesn't support dimensioning an array with a const var nor using %z as a printf format specifier.
     50      Define PATH_SEPARATOR for MSVC builds.
     51      Fixed some compile issues with show_library_versions()
     52
     53Jann Horn (1):
     54      Remove quadratic complexity from openvpn_base64_decode()
     55
     56Mike Gilbert (1):
     57      Add configure check for the path to systemd-ask-password
     58
     59Philipp Hagemeister (2):
     60      Add topology in sample server configuration file
     61      Implement on-link route adding for iproute2
     62
     63Samuel Thibault (1):
     64      Ensure that client-connect files are always deleted
     65
     66Steffan Karger (10):
     67      Remove function without effect (cipher_ok() always returned true).
     68      Remove unneeded wrapper functions in crypto_openssl.c
     69      Fix bug that incorrectly refuses oid representation eku's in polar builds
     70      Update README.polarssl
     71      Rename ALLOW_NON_CBC_CIPHERS to ENABLE_OFB_CFB_MODE, and add to configure.
     72      Add proper check for crypto modes (CBC or OFB/CFB)
     73      Improve --show-ciphers to show if a cipher can be used in static key mode
     74      Extend t_lpback tests to test all ciphers reported by --show-ciphers
     75      Don't exit daemon if opening or parsing the CRL fails.
     76      Fix typo in cipher_kt_mode_{cbc, ofb_cfb}() doxygen.
     77}}}