@@ -1,6 +1,34 @@

 OpenVPN Change Log

 Copyright (C) 2002-2016 OpenVPN Technologies, Inc. <sales@openvpn.net>

+2016.12.01 -- Version 2.4_rc1

+Antonio Quartulli (1):

+      reload CRL only if file was modified

+

+Christian Hesse (3):

+      update year in copyright message

+      Use systemd service manager notification

+      Refuse to daemonize when running from systemd

+

+Gert Doering (1):

+      Fix windows path in Changes.rst

+

+Samuli Seppänen (1):

+      Mention that OpenVPN 2.4 requires Windows Vista or higher

+

+Selva Nair (4):

+      Map restart signals from event loop to SIGTERM during exit-notification wait

+      When parsing '--setenv opt xx ..' make sure a third parameter is present

+      Force 'def1' method when --redirect-gateway is done through service

+      Do not restart dns client service as a part of --register-dns processing

+

+Steffan Karger (4):

+      tls_process: don't set variable that's never read

+      Unconditionally enable TLS_AGGREGATE_ACK

+      Clean up format_hex_ex()

+      Introduce and use secure_memzero() to erase secrets

+

+

 2016.11.24 -- Version 2.4_beta2

 Arne Schwabe (5):

       Document that tls-crypt also supports inline

@@ -259,6 +259,12 @@ User-visible Changes

   changed, instead of for each new connection.  This reduces the connection

   setup time, in particular when using large CRLs.

+- OpenVPN now ships with more up-to-date systemd unit files which takes advantage

+  of the improved service management as well as some hardening steps.  The

+  configuration files are picked up from /etc/openvpn/server and

+  /etc/openvpn/client (depending on unit file).  This also avoids these new

+  unit files and how they work to collide with older pre-existing unit files.

+

 Maintainer-visible changes

 --------------------------

@@ -267,3 +273,7 @@ Maintainer-visible changes

   OPENSSL_SSL_{CFLAGS,LIBS} have been merged into OPENSSL_{CFLAGS,LIBS}.  This

   is particularly relevant for maintainers who build their own OpenSSL library,

   e.g. when cross-compiling.

+

+- Linux distributions using systemd is highly encouraged to ship these new unit

+  files instead of older ones, to provide a unified behaviour across systemd

+  based Linux distributions.

@@ -3,7 +3,7 @@ define([PRODUCT_NAME], [OpenVPN])

 define([PRODUCT_TARNAME], [openvpn])

 define([PRODUCT_VERSION_MAJOR], [2])

 define([PRODUCT_VERSION_MINOR], [4])

-define([PRODUCT_VERSION_PATCH], [_beta2])

+define([PRODUCT_VERSION_PATCH], [_rc1])

 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR])

 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]])

 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]])