Signed-off-by: Gert Doering <gert@greenie.muc.de>
Gert Doering authored on 2015/06/03 02:47:34... | ... |
@@ -1,5 +1,88 @@ |
1 | 1 |
OpenVPN Change Log |
2 |
-Copyright (C) 2002-2014 OpenVPN Technologies, Inc. <sales@openvpn.net> |
|
2 |
+Copyright (C) 2002-2015 OpenVPN Technologies, Inc. <sales@openvpn.net> |
|
3 |
+ |
|
4 |
+2015.06.02 -- Version 2.3.7 |
|
5 |
+Alexander Pyhalov (1): |
|
6 |
+ Default gateway can't be determined on illumos/Solaris platforms |
|
7 |
+ |
|
8 |
+Arne Schwabe (1): |
|
9 |
+ Warn that tls-auth with free form files is going to be removed from OpenVPN 2.4 |
|
10 |
+ |
|
11 |
+David Sommerseth (6): |
|
12 |
+ autotools: Fix wrong ./configure help screen default values |
|
13 |
+ down-root plugin: Replaced system() calls with execve() |
|
14 |
+ down-root: Improve error messages |
|
15 |
+ plugin, down-root: Fix compiler warnings |
|
16 |
+ sockets: Remove the limitation of --tcp-nodelay to be server-only |
|
17 |
+ plugins, down-root: Code style clean-up |
|
18 |
+ |
|
19 |
+David Woodhouse (2): |
|
20 |
+ pkcs11: Load p11-kit-proxy.so module by default |
|
21 |
+ Make 'provider' option to --show-pkcs11-ids optional where p11-kit is present |
|
22 |
+ |
|
23 |
+Felix Janda (1): |
|
24 |
+ Use OPENVPN_ETH_P_* so that <netinet/if_ether.h> is unecessary |
|
25 |
+ |
|
26 |
+Gert Doering (17): |
|
27 |
+ New approach to handle peer-id related changes to link-mtu (2.3 version) |
|
28 |
+ Fix incorrect use of get_ipv6_addr() for iroute options. |
|
29 |
+ Print helpful error message on --mktun/--rmtun if not available. |
|
30 |
+ explain effect of --topology subnet on --ifconfig |
|
31 |
+ Add note about file permissions and --crl-verify to manpage. |
|
32 |
+ repair --dev null breakage caused by db950be85d37 |
|
33 |
+ assume res_init() is always there. |
|
34 |
+ Correct note about DNS randomization in openvpn.8 |
|
35 |
+ Disallow usage of --server-poll-timeout in --secret key mode. |
|
36 |
+ slightly enhance documentation about --cipher |
|
37 |
+ Enforce "serial-tests" behaviour for tests/Makefile |
|
38 |
+ Revert "Enforce "serial-tests" behaviour for tests/Makefile" |
|
39 |
+ On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo(). |
|
40 |
+ Use configure.ac hack to apply serial_test AM option only if supported. |
|
41 |
+ Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo(). |
|
42 |
+ Move res_init() call to inner openvpn_getaddrinfo() loop |
|
43 |
+ Fix FreeBSD ifconfig for topology subnet tunnels. |
|
44 |
+ |
|
45 |
+Guy Yur (1): |
|
46 |
+ Fix --redirect-private in --dev tap mode. |
|
47 |
+ |
|
48 |
+Jan Just Keijser (1): |
|
49 |
+ include ifconfig_ environment variables in --up-restart env set |
|
50 |
+ |
|
51 |
+Jonathan K. Bullard (1): |
|
52 |
+ Fix null pointer dereference in options.c |
|
53 |
+ |
|
54 |
+Lev Stipakov (1): |
|
55 |
+ Fix mssfix default value in connection_list context |
|
56 |
+ |
|
57 |
+Matthias Andree (1): |
|
58 |
+ Manual page update for Re-enabled TLS version negotiation. |
|
59 |
+ |
|
60 |
+Mike Gilbert (1): |
|
61 |
+ Include systemd units in the source tarball (make dist) |
|
62 |
+ |
|
63 |
+Robert Fischer (1): |
|
64 |
+ Updated manpage for --rport and --lport |
|
65 |
+ |
|
66 |
+Samuli Seppänen (2): |
|
67 |
+ Properly escape dashes on the man-page |
|
68 |
+ Improve documentation in --script-security section of the man-page |
|
69 |
+ |
|
70 |
+Steffan Karger (14): |
|
71 |
+ Really fix '--cipher none' regression |
|
72 |
+ Update doxygen (a bit) |
|
73 |
+ Set tls-version-max to 1.1 if cryptoapicert is used |
|
74 |
+ Account for peer-id in frame size calculation |
|
75 |
+ Disable SSL compression |
|
76 |
+ Fix frame size calculation for non-CBC modes. |
|
77 |
+ Allow for CN/username of 64 characters (fixes off-by-one) |
|
78 |
+ Remove unneeded parameter 'first_time' from possibly_become_daemon() |
|
79 |
+ Re-enable TLS version negotiation by default |
|
80 |
+ Remove size limit for files inlined in config |
|
81 |
+ Improve --tls-cipher and --show-tls man page description |
|
82 |
+ Re-read auth-user-pass file on (re)connect if required |
|
83 |
+ Clarify --capath option in manpage |
|
84 |
+ Call daemon() before initializing crypto library |
|
85 |
+ |
|
3 | 86 |
|
4 | 87 |
2014.11.28 -- Version 2.3.6 |
5 | 88 |
David Sommerseth (1): |
... | ... |
@@ -1,9 +1,9 @@ |
1 | 1 |
dnl define the OpenVPN version |
2 | 2 |
define([PRODUCT_NAME], [OpenVPN]) |
3 | 3 |
define([PRODUCT_TARNAME], [openvpn]) |
4 |
-define([PRODUCT_VERSION], [2.3.6]) |
|
4 |
+define([PRODUCT_VERSION], [2.3.7]) |
|
5 | 5 |
define([PRODUCT_BUGREPORT], [openvpn-users@lists.sourceforge.net]) |
6 |
-define([PRODUCT_VERSION_RESOURCE], [2,3,6,0]) |
|
6 |
+define([PRODUCT_VERSION_RESOURCE], [2,3,7,0]) |
|
7 | 7 |
dnl define the TAP version |
8 | 8 |
define([PRODUCT_TAP_WIN_COMPONENT_ID], [tap0901]) |
9 | 9 |
define([PRODUCT_TAP_WIN_MIN_MAJOR], [9]) |