September 27, 2009
View 3eee126

Eliminated the limitation on the number of options that can be pushed to clients, including routes. Previously, all pushed options needed to fit within a 1024 byte options string.

james authored on 2009/09/27 11:12:15
September 18, 2009
View 673f583

The maximum number of "route" directives (specified in the config file or pulled from a server) can now be configured via the new "max-routes" directive.

james authored on 2009/09/18 08:43:37
September 5, 2009
View 9938544

Added "setcon" directive for interoperability with SELinux (Sebastien Raveau).

james authored on 2009/09/05 08:50:35
June 2, 2009
View e7a65df

Fixed compile error on ./configure --enable-small

james authored on 2009/06/02 05:12:15
May 31, 2009
View d7fa38f

Update copyright to 2009.

james authored on 2009/05/31 06:38:49
December 25, 2008
View 1f4309a

Fixed issue where SIGUSR1 restarts would fail if private key was specified as an inline file.

james authored on 2008/12/25 11:33:34
November 18, 2008
View 03bfb22

Added --prng option to control PRNG (pseudo-random number generator) parameters. In previous OpenVPN versions, the PRNG was hardcoded to use the SHA1 hash. Now any OpenSSL hash may be used. This is part of an effort to remove hardcoded references to a specific cipher or cryptographic hash algorithm.

james authored on 2008/11/18 10:25:05
November 17, 2008
View a828135

* Added additional method parameter to --script-security to preserve backward compatibility with system() call semantics used in OpenVPN 2.1_rc8 and earlier. To preserve backward compatibility use:

james authored on 2008/11/17 13:28:07
October 29, 2008
View 24ce3b2

Added server-side --auth-user-pass-optional directive, to allow connections by clients that do not specify a username/password, when a user-defined authentication script/module is in place (via --auth-user-pass-verify, --management-client-auth, or a plugin module).

james authored on 2008/10/29 05:01:05
October 15, 2008
View 51f7b84

Added additional warning messages about --script-security 2 or higher being required to execute user-defined scripts or executables.

james authored on 2008/10/15 17:20:21
October 6, 2008
View 367ed08

Copyright notice changed to reflect change in name of Telethra to OpenVPN Technologies.

james authored on 2008/10/06 16:33:45
September 30, 2008
View bb564a5

Management interface can now listen on a unix domain socket, for example:

james authored on 2008/09/30 15:11:38
September 6, 2008
View b8fb090

2.1_rc8 and earlier did implicit shell expansion on script arguments since all scripts were called by system(). The security hardening changes made to 2.1_rc9 no longer use system(), but rather use the safer execve or CreateProcess system calls. The security hardening also introduced a backward incompatibility with 2.1_rc8 and earlier in that script parameters were no longer shell-expanded, so for example:

james authored on 2008/09/06 18:42:17
August 11, 2008
View 6383b36

Fixed build issue with ./configure --disable-socks --disable-http.

james authored on 2008/08/11 04:29:00
August 5, 2008
View f77c60d

Added additional warnings to flag common gotchas:

james authored on 2008/08/05 13:44:31