Browse code
Updated version & changelog.
Updated build-pkcs11-helper.sh to build
from OpenSSL 0.9.8h.
Added pkcs11-related fixes to easy-rsa/2.0/vars.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@2994 e7ae566f-a301-0410-adde-c780ea21d3b5
james authored on 2008/06/12 06:38:07Showing 4 changed files
| ... | ... |
@@ -1,8 +1,76 @@ |
| 1 | 1 |
OpenVPN |
| 2 |
-Copyright (C) 2002-2005 OpenVPN Solutions LLC <info@openvpn.net> |
|
| 2 |
+Copyright (C) 2002-2008 OpenVPN Solutions LLC <info@openvpn.net> |
|
| 3 | 3 |
|
| 4 | 4 |
$Id$ |
| 5 | 5 |
|
| 6 |
+2008.06.11 -- Version 2.1_rc8 |
|
| 7 |
+ |
|
| 8 |
+* Added client authentication and packet filtering capability |
|
| 9 |
+ to management interface. In addition, allow OpenVPN plugins |
|
| 10 |
+ to take advantage of deferred authentication and packet |
|
| 11 |
+ filtering capability. |
|
| 12 |
+ |
|
| 13 |
+* Added support for client-side connection profiles. |
|
| 14 |
+ |
|
| 15 |
+* Fixed unbounded memory growth bug in environmental variable |
|
| 16 |
+ code that could have caused long-running OpenVPN sessions |
|
| 17 |
+ with many TLS renegotiations to incrementally |
|
| 18 |
+ increase memory usage over time. |
|
| 19 |
+ |
|
| 20 |
+* Windows release now packages openssl-0.9.8h. |
|
| 21 |
+ |
|
| 22 |
+* Build system changes -- allow building on Windows using |
|
| 23 |
+ autoconf/automake scripts (Alon Bar-Lev). |
|
| 24 |
+ |
|
| 25 |
+* Changes to Windows build system to make it easier to do |
|
| 26 |
+ partial builds, with a reduced set of prerequisites, |
|
| 27 |
+ where only a subset of OpenVPN installer |
|
| 28 |
+ components are built. See ./domake-win comments. |
|
| 29 |
+ |
|
| 30 |
+* Cleanup IP address for persistence interfaces for tap and also |
|
| 31 |
+ using ifconfig, gentoo#209055 (Alon Bar-Lev). |
|
| 32 |
+ |
|
| 33 |
+* Fall back to old version of extract_x509_field for OpenSSL 0.9.6. |
|
| 34 |
+ |
|
| 35 |
+* Clarified tcp-queue-limit man page entry (Matti Linnanvuori). |
|
| 36 |
+ |
|
| 37 |
+* Added new OpenVPN icon and installer graphic. |
|
| 38 |
+ |
|
| 39 |
+* Minor pkitool changes. |
|
| 40 |
+ |
|
| 41 |
+* Added --pkcs11-id-management option, which will cause OpenVPN to |
|
| 42 |
+ query the management interface via the new NEED-STR asynchronous |
|
| 43 |
+ notification query to get additional PKCS#11 options (Alon Bar-Lev). |
|
| 44 |
+ |
|
| 45 |
+* Added NEED-STR management interface asynchronous query and |
|
| 46 |
+ "needstr" management interface command to respond to the query |
|
| 47 |
+ (Alon Bar-Lev). |
|
| 48 |
+ |
|
| 49 |
+* Added Dragonfly BSD support (Francis-Gudin). |
|
| 50 |
+ |
|
| 51 |
+* Quote device names before passing to up/down script (Josh Cepek). |
|
| 52 |
+ |
|
| 53 |
+* Bracketed struct openvpn_pktinfo with #pragma pack(1) to |
|
| 54 |
+ prevent structure padding from causing an incorrect length |
|
| 55 |
+ to be returned by sizeof (struct openvpn_pktinfo) on 64-bit |
|
| 56 |
+ platforms. |
|
| 57 |
+ |
|
| 58 |
+* On systems that support res_init, always call it |
|
| 59 |
+ before calling gethostbyname to ensure that |
|
| 60 |
+ resolver configuration state is current. |
|
| 61 |
+ |
|
| 62 |
+* Added NTLMv2 proxy support (Miroslav Zajic). |
|
| 63 |
+ |
|
| 64 |
+* Fixed an issue in extract_x509_field_ssl where the extraction |
|
| 65 |
+ would fail on the first field of the subject name, such as |
|
| 66 |
+ the common name in: /CN=foo/emailAddress=foo@bar.com |
|
| 67 |
+ |
|
| 68 |
+* Made "Linux ip addr del failed" error nonfatal. |
|
| 69 |
+ |
|
| 70 |
+* Amplified --client-cert-not-required warning. |
|
| 71 |
+ |
|
| 72 |
+* Added #pragma pack to proto.h. |
|
| 73 |
+ |
|
| 6 | 74 |
2008.01.29 -- Version 2.1_rc7 |
| 7 | 75 |
|
| 8 | 76 |
* Added a few extra files that exist in the svn repo but were |
| ... | ... |
@@ -41,6 +41,10 @@ export KEY_DIR="$EASY_RSA/keys" |
| 41 | 41 |
# Issue rm -rf warning |
| 42 | 42 |
echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR |
| 43 | 43 |
|
| 44 |
+# PKCS11 fixes |
|
| 45 |
+export PKCS11_MODULE_PATH="dummy" |
|
| 46 |
+export PKCS11_PIN="dummy" |
|
| 47 |
+ |
|
| 44 | 48 |
# Increase this to 2048 if you |
| 45 | 49 |
# are paranoid. This will slow |
| 46 | 50 |
# down TLS negotiation performance |
| ... | ... |
@@ -1,5 +1,5 @@ |
| 1 | 1 |
F=pkcs11-helper-1.05 |
| 2 |
-OPENSSL_DIR=`pwd`/openssl-0.9.7m |
|
| 2 |
+OPENSSL_DIR=`pwd`/openssl-0.9.8h |
|
| 3 | 3 |
|
| 4 | 4 |
PKCS11_HELPER_DIR=`pwd`/pkcs11-helper |
| 5 | 5 |
rm -rf $PKCS11_HELPER_DIR |
| ... | ... |
@@ -12,7 +12,6 @@ tar xfj $tbz |
| 12 | 12 |
cd $F |
| 13 | 13 |
./configure \ |
| 14 | 14 |
MAN2HTML=true \ |
| 15 |
- ac_cv_type_size_t=no \ |
|
| 16 | 15 |
--disable-crypto-engine-gnutls \ |
| 17 | 16 |
--disable-crypto-engine-nss \ |
| 18 | 17 |
PKG_CONFIG=true \ |
| ... | ... |
@@ -21,3 +20,5 @@ cd $F |
| 21 | 21 |
|
| 22 | 22 |
make |
| 23 | 23 |
make install DESTDIR="${PKCS11_HELPER_DIR}"
|
| 24 |
+ |
|
| 25 |
+# ./configure doesn't need this any more: ac_cv_type_size_t=no |