| 13 | |
| 14 | = Changes in the 2.3 branch = |
| 15 | |
| 16 | {{{ |
| 17 | Andris Kalnozols (2): |
| 18 | Fix some typos in the man page. |
| 19 | Do not upcase x509-username-field for mixed-case arguments. |
| 20 | |
| 21 | Arne Schwabe (1): |
| 22 | Fix server routes not working in topology subnet with --server [v3] |
| 23 | |
| 24 | David Sommerseth (4): |
| 25 | Improve error reporting on file access to --client-config-dir and --ccd-exclusive |
| 26 | Don't let openvpn_popen() keep zombies around |
| 27 | Add systemd unit file for OpenVPN |
| 28 | systemd: Use systemd functions to consider systemd availability |
| 29 | |
| 30 | Gert Doering (3): |
| 31 | Drop incoming fe80:: packets silently now. |
| 32 | Fix t_lpback.sh platform-dependent failures |
| 33 | Call init script helpers with explicit path (./) |
| 34 | |
| 35 | Heiko Hund (1): |
| 36 | refine assertion to allow other modes than CBC |
| 37 | |
| 38 | Hubert Kario (2): |
| 39 | ocsp_check - signature verification and cert staus results are separate |
| 40 | ocsp_check - double check if ocsp didn't report any errors in execution |
| 41 | |
| 42 | James Bekkema (1): |
| 43 | Fix socket-flag/TCP_NODELAY on Mac OS X |
| 44 | |
| 45 | James Yonan (6): |
| 46 | Fixed several instances of declarations after statements. |
| 47 | In socket.c, fixed issue where uninitialized value (err) is being passed to to gai_strerror. |
| 48 | Explicitly cast the third parameter of setsockopt to const void * to avoid warning. |
| 49 | MSVC 2008 doesn't support dimensioning an array with a const var nor using %z as a printf format specifier. |
| 50 | Define PATH_SEPARATOR for MSVC builds. |
| 51 | Fixed some compile issues with show_library_versions() |
| 52 | |
| 53 | Jann Horn (1): |
| 54 | Remove quadratic complexity from openvpn_base64_decode() |
| 55 | |
| 56 | Mike Gilbert (1): |
| 57 | Add configure check for the path to systemd-ask-password |
| 58 | |
| 59 | Philipp Hagemeister (2): |
| 60 | Add topology in sample server configuration file |
| 61 | Implement on-link route adding for iproute2 |
| 62 | |
| 63 | Samuel Thibault (1): |
| 64 | Ensure that client-connect files are always deleted |
| 65 | |
| 66 | Steffan Karger (10): |
| 67 | Remove function without effect (cipher_ok() always returned true). |
| 68 | Remove unneeded wrapper functions in crypto_openssl.c |
| 69 | Fix bug that incorrectly refuses oid representation eku's in polar builds |
| 70 | Update README.polarssl |
| 71 | Rename ALLOW_NON_CBC_CIPHERS to ENABLE_OFB_CFB_MODE, and add to configure. |
| 72 | Add proper check for crypto modes (CBC or OFB/CFB) |
| 73 | Improve --show-ciphers to show if a cipher can be used in static key mode |
| 74 | Extend t_lpback tests to test all ciphers reported by --show-ciphers |
| 75 | Don't exit daemon if opening or parsing the CRL fails. |
| 76 | Fix typo in cipher_kt_mode_{cbc, ofb_cfb}() doxygen. |
| 77 | }}} |