Blame
| 6f02e7 | Samuli Seppänen | 2025-01-29 06:40:08 | 1 | # Topics |
| 2 | ||||
| 3 | - OpenVPN 2.3.5 release |
|||
| 4 | - Recent [tap-windows6 -related fixes](http://thread.gmane.org/gmane.network.openvpn.devel/9143) in OpenVPN require a new release |
|||
| 5 | - There are other queued changes in the 2.3 branch (see below) |
|||
| 6 | - Anything missing? |
|||
| 7 | - Release date? |
|||
| 8 | - [Session-ID patch](http://thread.gmane.org/gmane.network.openvpn.devel/8403) |
|||
| 9 | - [Munich Hackathon](wiki:MunichHackathon2014) |
|||
| 10 | - Goals, plans, etc. |
|||
| 11 | - Suggested new option for TLSv1.2 adoption: `--tls-version-max` (similar to `--tls-version-min`) |
|||
| 12 | - As suggested by syzzer on #openvpn-devel |
|||
| 13 | ||||
| 14 | # Changes in the 2.3 branch |
|||
| 15 | ||||
| 16 | ```plaintext |
|||
| 17 | Andris Kalnozols (2): |
|||
| 18 | Fix some typos in the man page. |
|||
| 19 | Do not upcase x509-username-field for mixed-case arguments. |
|||
| 20 | ||||
| 21 | Arne Schwabe (1): |
|||
| 22 | Fix server routes not working in topology subnet with --server [v3] |
|||
| 23 | ||||
| 24 | David Sommerseth (4): |
|||
| 25 | Improve error reporting on file access to --client-config-dir and --ccd-exclusive |
|||
| 26 | Don't let openvpn_popen() keep zombies around |
|||
| 27 | Add systemd unit file for OpenVPN |
|||
| 28 | systemd: Use systemd functions to consider systemd availability |
|||
| 29 | ||||
| 30 | Gert Doering (3): |
|||
| 31 | Drop incoming fe80:: packets silently now. |
|||
| 32 | Fix t_lpback.sh platform-dependent failures |
|||
| 33 | Call init script helpers with explicit path (./) |
|||
| 34 | ||||
| 35 | Heiko Hund (1): |
|||
| 36 | refine assertion to allow other modes than CBC |
|||
| 37 | ||||
| 38 | Hubert Kario (2): |
|||
| 39 | ocsp_check - signature verification and cert staus results are separate |
|||
| 40 | ocsp_check - double check if ocsp didn't report any errors in execution |
|||
| 41 | ||||
| 42 | James Bekkema (1): |
|||
| 43 | Fix socket-flag/TCP_NODELAY on Mac OS X |
|||
| 44 | ||||
| 45 | James Yonan (6): |
|||
| 46 | Fixed several instances of declarations after statements. |
|||
| 47 | In socket.c, fixed issue where uninitialized value (err) is being passed to to gai_strerror. |
|||
| 48 | Explicitly cast the third parameter of setsockopt to const void * to avoid warning. |
|||
| 49 | MSVC 2008 doesn't support dimensioning an array with a const var nor using %z as a printf format specifier. |
|||
| 50 | Define PATH_SEPARATOR for MSVC builds. |
|||
| 51 | Fixed some compile issues with show_library_versions() |
|||
| 52 | ||||
| 53 | Jann Horn (1): |
|||
| 54 | Remove quadratic complexity from openvpn_base64_decode() |
|||
| 55 | ||||
| 56 | Mike Gilbert (1): |
|||
| 57 | Add configure check for the path to systemd-ask-password |
|||
| 58 | ||||
| 59 | Philipp Hagemeister (2): |
|||
| 60 | Add topology in sample server configuration file |
|||
| 61 | Implement on-link route adding for iproute2 |
|||
| 62 | ||||
| 63 | Samuel Thibault (1): |
|||
| 64 | Ensure that client-connect files are always deleted |
|||
| 65 | ||||
| 66 | Steffan Karger (10): |
|||
| 67 | Remove function without effect (cipher_ok() always returned true). |
|||
| 68 | Remove unneeded wrapper functions in crypto_openssl.c |
|||
| 69 | Fix bug that incorrectly refuses oid representation eku's in polar builds |
|||
| 70 | Update README.polarssl |
|||
| 71 | Rename ALLOW_NON_CBC_CIPHERS to ENABLE_OFB_CFB_MODE, and add to configure. |
|||
| 72 | Add proper check for crypto modes (CBC or OFB/CFB) |
|||
| 73 | Improve --show-ciphers to show if a cipher can be used in static key mode |
|||
| 74 | Extend t_lpback tests to test all ciphers reported by --show-ciphers |
|||
| 75 | Don't exit daemon if opening or parsing the CRL fails. |
|||
| 76 | Fix typo in cipher_kt_mode_{cbc, ofb_cfb}() doxygen. |
|||
| 77 | ``` |