May 24, 2009
View 775a6ac

Added new 'autolocal' redirect-gateway flag. When enabled, the OpenVPN client will examine the routing table and determine whether (a) the OpenVPN server is reachable via a locally connected interface, or (b) traffic to the server must be forwarded through the default router. Only add a special bypass route for the OpenVPN server if (b) is true. If (a) is true, behave as if the 'local' flag is specified, and do not add a bypass route.

james authored on 2009/05/24 18:13:58
May 23, 2009
View b723833

Added "redirect-private" option which allows private subnets to be pushed to the client in such a way that they don't accidently obscure critical local addresses such as the DHCP server address and DNS server addresses.

james authored on 2009/05/23 19:30:10
April 13, 2009
View b16cd4d

Added errors-to-stderr option. When enabled, fatal errors that result in the termination of the daemon will be written to stderr.

james authored on 2009/04/13 12:30:30
April 11, 2009
View 86f5c7c

Allow "management-client" directive to be used with unix domain sockets.

james authored on 2009/04/11 06:33:14
April 10, 2009
View f202f14

Added the ability to read the configuration file from stdin, when "stdin" is given as the config file name.

james authored on 2009/04/10 06:11:14
December 27, 2008
View 60d9e13

Added daemon_start_time and daemon_pid environmental variables.

james authored on 2008/12/27 01:29:28
November 21, 2008
View 148329c

Added optional "nogw" (no gateway) flag to --server-bridge to inhibit the pushing of the route-gateway parameter to clients.

james authored on 2008/11/21 06:02:10
November 18, 2008
View ae3b374

Added --tcp-nodelay option: Macro that sets TCP_NODELAY socket flag on the server as well as pushes it to connecting clients.

james authored on 2008/11/18 14:15:22
View efab6df

Minor options check fix: --no-name-remapping is a server-only option and should therefore generate an error when used on the client.

james authored on 2008/11/18 12:24:32
View 09cc9c8

Added server-side --opt-verify option: clients that connect with options that are incompatible with those of the server will be disconnected.

james authored on 2008/11/18 12:22:52
View 03bfb22

Added --prng option to control PRNG (pseudo-random number generator) parameters. In previous OpenVPN versions, the PRNG was hardcoded to use the SHA1 hash. Now any OpenSSL hash may be used. This is part of an effort to remove hardcoded references to a specific cipher or cryptographic hash algorithm.

james authored on 2008/11/18 10:25:05
November 17, 2008
View a828135

* Added additional method parameter to --script-security to preserve backward compatibility with system() call semantics used in OpenVPN 2.1_rc8 and earlier. To preserve backward compatibility use:

james authored on 2008/11/17 13:28:07
November 6, 2008
View bd0a585

Minor fix to previous commit (r3476).

james authored on 2008/11/06 02:28:09
November 5, 2008
View 373faab

Added config file option "setenv FORWARD_COMPATIBLE 1" to relax config file syntax checking to allow directives for future OpenVPN versions to be ignored.

james authored on 2008/11/05 06:42:56
November 3, 2008
View 223b2c5

Fixed some ifconfig-pool issues that precluded it from being combined with --server directive.

james authored on 2008/11/03 22:07:33