Page MenuHomeSolus

Update openvpn to 2.4.5
ClosedPublic

Authored by der_eismann on Mar 1 2018, 8:01 PM.
Tags
None
Referenced Files
F11065371: D2416.diff
Fri, Aug 11, 4:31 PM
F11019608: D2416.diff
Sun, Aug 6, 9:31 PM
F10977946: D2416.diff
Sat, Jul 22, 6:00 PM
F10969519: D2416.id6051.diff
Thu, Jul 20, 10:38 PM
F10969090: D2416.id5817.diff
Thu, Jul 20, 8:52 PM
F10945850: D2416.id6051.diff
Sat, Jul 15, 6:13 AM
F10943406: D2416.id5817.diff
Fri, Jul 14, 6:17 PM
F10919818: D2416.diff
Jul 9 2023, 4:23 AM
Subscribers

Details

Summary

New features

  • Use P_DATA_V2 for server->client packets too (better packet alignment)
  • improve management interface documentation
  • rework registry key handling for OpenVPN service, notably making most registry values optional, falling back to reasonable defaults
  • accept IPv6 address for pushed "dhcp-option DNS ..." (make OpenVPN 2 option compatible with OpenVPN 3 iOS and Android clients)

Bug fixes

  • Fix --tls-version-min and --tls-version-max for OpenSSL 1.1+
  • reload HTTP proxy credentials when moving to the next connection profile
  • Remove non-useful warning on pushed tun-ipv6 option.
  • fix building with MSVC due to incompatible C constructs
  • autoconf: Fix engine checks for openssl 1.1
  • lz4: Rebase compat-lz4 against upstream v1.7.5
  • lz4: Fix broken builds when pkg-config is not present but system library is
  • Fix --bind ipv6only
  • Allow learning iroutes with network made up of all 0s
Test Plan

Test SSL/TLS negotiations:

  • sudo openvpn --config sample/sample-config-files/loopback-client (in terminal #1)
  • sudo openvpn --config sample/sample-config-files/loopback-server (simultaneously in terminal #2)

Diff Detail

Repository
R2261 openvpn
Branch
master
Lint
No Lint Coverage
Unit
No Test Coverage

Event Timeline

der_eismann edited the test plan for this revision. (Show Details)
This revision is now accepted and ready to land.Mar 11 2018, 3:01 PM
This revision was automatically updated to reflect the committed changes.