ordex arranged through STF to get a security audit of OpenVPN 2.7 (currently in release candidate phase).
+
Recently this has kicked off and 2.7 is being put through the meat grinder now by SRLabs.
+
- **Updated: Release 2.7**
Currently we're working on 2.7rc2.
There are some security reports coming in and being triaged at the moment.
@@ 38,9 42,6 @@
For server-side support, company did QA on it with openvpn2 but found some missing features that are being added now.
Client-side support made it into alpha3.
-
- **2.7 security audit**
-
ordex mentioned that OTF offers the possibility to get a 3rd-party security audit for supported projects. So we will apply for that around or after the 2.7 release to review the latest code.
-
- **Tunnelcrack progress (see TunnelCrack community wiki article)**
Status update on TunnelCrack mitigations:
The tunnelcrack mitigation for Windows has gone in master, which will go to 2.7 release. There is the possibility for it to go to 2.6.x if we can find testers for this.
