Software-update: OpenVPN 2.6.6
OpenVPN is een robuuste en gemakkelijk in te stellen opensource-vpn-daemon waarmee verschillende private netwerken aan elkaar geknoopt kunnen worden via een versleutelde tunnel over het internet. Voor de beveiliging wordt gebruikgemaakt van de OpenSSL-library, waarmee alle encryptie, authenticatie en certificatie kunnen worden afgehandeld. De ontwikkelaars hebben versie 2.6.6 uitgebracht en de changelog voor die uitgave kan hieronder worden gevonden.
User visible changesOCC exit messages are now logged more visibly (Github #391)OpenSSL error messages are now logged with more details (for example, when loading a provider fails, which .so was tried, and why did it fail) (Github #361)print a more user-friendly message when tls-crypt-v2 client auth failspackaging now includes all documentation in the tarball
OCC exit messages are now logged more visibly (Github #391)OpenSSL error messages are now logged with more details (for example, when loading a provider fails, which .so was tried, and why did it fail) (Github #361)print a more user-friendly message when tls-crypt-v2 client auth failspackaging now includes all documentation in the tarballNew featuresset WINS server via interactive service - this adds support for "dhcp-option WINS 192.0.2.1" for DCO + wintun interfaces where no DHCP server is used (Github #373).
set WINS server via interactive service - this adds support for "dhcp-option WINS 192.0.2.1" for DCO + wintun interfaces where no DHCP server is used (Github #373).Windows MSI changes since 2.6.5:
Windows MSI changes since 2.6.5:Included openvpn-gui updated to 11.44.0.0MSIs now use OpenSSL 3.1.2
Included openvpn-gui updated to 11.44.0.0MSIs now use OpenSSL 3.1.2Bug fixes / Code cleanuproute.c was sometimes ignoring return values of add_route3() (found by coverity)ntlm: clarify use of buffer in case of truncated NTLM challenge, no actual code change (reported by Trial of Bits, TOB-OVPN-14)pkcs11_openssl.c: disable unused code (found by coverity)options.c: do not hide variable from parent scope (found by coverity)configure: fix typo in LIBCAPNG_CFALGS (Github #371)ignore IPv6 route deletion request on Android, reduce IPv4 route-related message verbosity on Androidmanage.c: document missing KID parameter of "client-pending-auth" (new addition in da083c3b (2.6.2)) in manage interface help textvpn-network-options.rst: fix typo of "dhcp-option" (Github #313)tun.c/windows: quote WMIC call to set DHCP/DNS domain with hyphen (Github #363)fix CR_RESPONSE management message using wrong key_idwork around false positive compiler warnings with MinGW 12work around false positive compiler warnings with GCC 12.2.0fix more compiler warnings on FreeBSDtest_tls_crypt: improve cmocka testing portabilitydco-linux: fix counter print format (signed/unsigned)packaging: include everything that is needed for a MSVC build in tarballs (Github #344)
route.c was sometimes ignoring return values of add_route3() (found by coverity)ntlm: clarify use of buffer in case of truncated NTLM challenge, no actual code change (reported by Trial of Bits, TOB-OVPN-14)pkcs11_openssl.c: disable unused code (found by coverity)options.c: do not hide variable from parent scope (found by coverity)configure: fix typo in LIBCAPNG_CFALGS (Github #371)ignore IPv6 route deletion request on Android, reduce IPv4 route-related message verbosity on Androidmanage.c: document missing KID parameter of "client-pending-auth" (new addition in da083c3b (2.6.2)) in manage interface help textvpn-network-options.rst: fix typo of "dhcp-option" (Github #313)tun.c/windows: quote WMIC call to set DHCP/DNS domain with hyphen (Github #363)fix CR_RESPONSE management message using wrong key_idwork around false positive compiler warnings with MinGW 12work around false positive compiler warnings with GCC 12.2.0fix more compiler warnings on FreeBSDtest_tls_crypt: improve cmocka testing portabilitydco-linux: fix counter print format (signed/unsigned)packaging: include everything that is needed for a MSVC build in tarballs (Github #344)
Source:
Tweakers.net