Introduction

This page lists current status of patches for OpenVPN. The entries are generated using parseOvpn.py attached to this page.

Patches under review

Date	Patch	Author	ACKED
2013-04-20	​ [PATCH] Fix client-nat only working is also mss-fixis specified.	Arne Schwabe <arne@…>
2013-06-03	​ Adding support for AEAD cipher modes (AES-GCM,et al.)	Kenny Root <kenny@…>
2013-07-16	​ [PATCH] Support for username-only auth file.	Michal Ludvig <mludvig@…>	feature-ack from Munich
2013-08-22	​ [PATCH] Add timeout option for socks proxies	Nathan Ferch <nf+github@…>
2013-10-03	​ Re: [PATCH] Allow inliof --auth-user-pass	Davide Brini <dave_br@…>
2013-11-20	​ [PATCH] down-root plugin: Replaced system() calls with execve()	David Sommerseth <dazo@…>	Alternative patch
2013-12-04	​ uninitialized handle fix (serious issue on Win 8.1)	Илья Шипицин <chipitsine@…>
2014-01-22	​ [PATCH] Update expiry date in management event loop	Thomas Veerman <thomas.veerman@…>
2014-02-26	​ [openvpn] add option to use user defined routing table (#13)	hecke <notifications@…>
2014-03-11	​ Re: [PATCH] Flood unicast packet with unknowndestination to all clients	Vladimir Kamarzin <vvk@…>
2014-03-26	​ session-id implementation	Lev Stipakov <lstipakov@…>
2014-04-16	​ [PATCH] Improve error reporting on file access to--client-config-dir and --ccd-exclusive	davids@…
2014-04-16	​ Fixes for HTTP proxy authentication with NTLM	Holger Kummert <Holger.Kummert@…>
2014-04-17	​ [PATCH] Channel Binding Key based on Keying Material Exporters [RFC 5705]	"Daniel Kubec" <niel@…>
2014-05-09	​ [PATCH] Export --redirect-gateway parameters	Paul Stewart <pstew@…>
2014-05-26	​ [PATCH] Add support for Keying Material Exporter[RFC 5705]	Daniel Kubec <niel@…>
2014-05-28	​ [PATCH] Add namespace option when using iproute2	Jared Casper <jaredcasper@…>
2014-06-10	​ [PATCH 1/4] Recognize AIX, define TARGET_AIX	Gert Doering <gert@…>
2014-07-03	​ [PATCH] Add configure check for the path tosystemd-ask-password	Mike Gilbert <floppym@…>

Rejected Patches

Date	Patch	Author	NACKED
2014-03-04	​ [PATCH] Extract MAC addresses from ARP packets	"Vladimir V. Kamarzin" <vvk@…>	See discussion on mailing list
2013-08-08	​ [PATCH 2/2] When using UDP over SOCKS5, send the actual remote hostname (FQDN) to the proxy server in the first packet.	Jesse Glick <jglick@…>	See discussion on mailing list
2013-09-15	​ [PATCH] Fix file access checks when using --chroot	Josh Cepek <josh.cepek@…>	See discussion on mailing list
2013-10-21	​ [PATCH] Properly quote command and arguments passed to system() in down-root	​ crass via GitHub	Patch replacing system() with execve() sent to ML
2013-10-14	​ [PATCH] Floating: Add support for floating in TLSmode	André Valentin <avalentin@…>	instead new packet format with session id
2013-12-10	​ [openvpn] Custom control messages & trigger (#10)	andreax79 <notifications@…>	Patch needs work. Problem trying to solve not really understood
2013-12-17	​ [PATCH] Implement an easy parsable log output thatallows access to flags of the log message	Arne Schwabe <arne@…>
2013-12-18	​ [PATCH 1/2] Introduce an option to resolve dns names in advance for —remote, —local and http-proxy	Arne Schwabe <arne@…>
2013-12-18	​ [PATCH 2/2] Fix for server selecting address family	Arne Schwabe <arne@…>
2014-01-03	​ [PATCH] Don’t show the connection profile store in options->ce if there is a connection_list defined.	Arne Schwabe <arne@…>

Applied Patches

Date	Patch	Author	ACKED
2014-02-08	​ [PATCH] Fix is_ipv6 in case of tap interface.	Dmitrij Tejblum <dt@…>	ACK by cron2
2014-02-26	​ [PATCH] Add ECDH support for OpenSSL builds ofOpenVPN	Steffan Karger <steffan@…>	ACK from plaisthos
2014-03-28	​ [PATCH] Fix man page and OSCP script:tls_serial_{n} is decimal	Arne Schwabe <arne@…>	Agreed on IRC, ACK by cron2
2014-01-19	​ [PATCH] Repair --multihome on FreeBSD for IPv4sockets.	Gert Doering <gert@…>	lazy-ack
2014-02-01	​ [PATCH] MSVC 2013 C library now defines strtoull()function, so use the native implementation when available.	James Yonan <james@…>	ACK by cron2
2014-04-13	​ [PATCH] Add SSL library version reporting.	Gert Doering <gert@…>	ACK by syzzer
2013-11-25	​ [Patch v2 9/9] Move the initialization of theenvironment to the top so c2.es is initialized	Arne Schwabe <arne@…>
2014-02-27	​ [PATCH] PolarSSL 1.3	<steffan.karger@…>
2014-03-01	​ [PATCH] Clean up --show-tls output for OpenSSLbuilds	Steffan Karger <steffan@…>
2014-03-09	​ [openvpn] Fix SOCKSv5 method selection (#14)	Yawning Angel <notifications@…>
2014-01-15	​ [PATCH] Adjusted autotools files to build morecleanly on newer autoconf/automake versions	davids@…	ACK from syzzer
2014-03-16	​ [PATCH] Set SSL_OP_NO_TICKET flag in SSL contextfor OpenSSL builds, to disable TLS stateless session resumption.	James Yonan <james@…>	ACK from syzzer
2014-03-17	​ [PATCH] Fix warning for max-routes: do not quitwhen parsing an old configuration. Format the message to bemore like the other deprecated options	Arne Schwabe <arne@…>	ACK from cron2
2014-03-17	​ [PATCH] Introduce safety check for http proxyoptions	Arne Schwabe <arne@…>	ACK from cron2
2013-11-25	​ [PATCH] Fix file checks when --chroot is being used (v2)	David Sommerseth <dazo@…>	ACK from syzzer
2013-11-19	​ [PATCH] Support non-ASCII characters in Windows tmppath	Heiko Hund <heiko.hund@…>	ACK from cron2
2013-09-19	​ --management-external-key for polarssl	Steffan Karger <steffan.karger@…>	ACK from plaisthos
2013-09-15	​ [PATCH] Document authfile for socks server	Davide Brini <dave_br@…>	ack by d12fk
2013-08-22	​ tls_ctx_load_ca: Improve certificate error messages	Klee Dienes <klee@…>	ack from syzzer
2013-05-31	​ [PATCH] Add reporting of UI version to basicpush-peer-info set.	Arne Schwabe <arne@…>	ack from James and cron2
2013-09-08	​ [PATCH] Implement custom HTTP header for http-proxy	Arne Schwabe <arne@…>	ACK from cron2
2013-10-15	​ [PATCH] Support non-ASCII TAP adapter names onWindows	Heiko Hund <heiko.hund@…>	ACK from cron2
2013-06-23	​ [PATCH] TLS versioning	James Yonan <james@…>	ACK
2013-06-21	​ [Patch v7] Add support of utun devices under Mac OSX	Arne Schwabe <arne@…>	ACK
2013-06-07	​ [PATCH] plugin: Extend the plug-in v3 API toidentify the SSL implementation used	David Sommerseth <dazo@…>	ACK
2013-06-20	​ [PATCH] Always load intermediate certificates froma PKCS#12 file	Heikki Hannikainen <hessu@…>	ACK from jamesyonan, plaisthos and syzzer
2013-06-23	​setenv opt	James Yonan <james@…>	ACK from cron2 and plaisthos
2013-07-28	​ [PATCH] MSVC fixes	James Yonan <james@…>	ACK on list
2013-08-08	​ [PATCH 1/2] Allow use of NetBeans without savingnbproject/ directory.	Jesse Glick <jglick@…>	ACK from mattock
2013-08-16	​ [Patch v2 1/2] Add support to ignore specificoptions.	Arne Schwabe <arne@…>
2013-08-16	​ [Patch v2 2/2] Add a note what setenv opt does forOpenVPN < 2.3.3	Arne Schwabe <arne@…>
2013-08-22	​ [PATCH] Correct error text when no Windows TAPdevice is present	Josh Cepek <josh.cepek@…>	ACK on list