This is a new stable release with some major new features. The OpenVPN community project team is proud to release OpenVPN 2.6.0. Update included ovpn-dco-win driver to 0.9.2.On Linux this brings in a new default dependency for libnl-genl (for Linux distributions that are too old to have a suitable version of the library, use "configure -disable-dco") Note: configure now enables DCO build by default on FreeBSD and Linux. "-cryptoapicert ISSUER:" where is matched as a substring of the issuer (CA) name in the certificate. Certificate selection string can now specify a partial issuer name string as CryptoAPI (Windows): support issuer name as a selector.This ensure that only the previously authenticated peer can do trigger renegotiation and complete renegotiations. Dynamic TLS Crypt: When both peers are OpenVPN 2.6.1+, OpenVPN will dynamically create a tls-crypt key that is used for renegotiation.This is mostly a bugfix release with some improvements. The OpenVPN community project team is proud to release OpenVPN 2.6.1. Update included openvpn-gui to 11.39.0.0.Attempting to use the old ovpn-dco with 2.6.2+ will lead to disabling DCO at runtime. The kernel module was renamed to "ovpn-dco-v2.ko" in order to highlight this change and ensure that users and userspace software could easily understand which version is loaded. This is an INCOMPATIBLE change and therefore an ovpn-dco kernel module older than v0323 (commit ID 726fdfe0fa21) will not work anymore and must be upgraded. New control packets flow for data channel offloading on Linux: 2.6.2+ changes the way OpenVPN control packets are handled on Linux when DCO is active, fixing the lockups observed with 2.6.0/2.6.1 under high client connect/disconnect activity.
0 Comments
Leave a Reply. |