diff options
| -rw-r--r-- | ChangeLog | 57 | ||||
| -rw-r--r-- | Changes.rst | 68 | ||||
| -rw-r--r-- | version.m4 | 4 |
3 files changed, 127 insertions, 2 deletions
@@ -1,6 +1,63 @@ OpenVPN Change Log Copyright (C) 2002-2021 OpenVPN Inc <sales@openvpn.net> +2021.12.14 -- Version 2.5.5 + +Adrian (1): + Fix error in example firewall.sh script + +Antonio Quartulli (1): + configure: remove useless -Wno-* from default CFLAGS + +Arne Schwabe (2): + Add argv_insert_head__empty_argv__head_only to argv tests + Move deprecation of SWEET32/64bit block size ciphers to 2.7 + +Gert Doering (3): + Include --push-remove in the output of --help. + Move '--push-peer-info' documentation from 'server' to 'client options' + add test case(s) to notice 'openvpn --show-cipher' crashing + +Ilya Shipitsin (1): + BUILD: enable CFG and Spectre mitigation for MSVC + +Lev Stipakov (12): + Fix loading PKCS12 files on Windows + msvc: fix product version display + msvc: add missing header to project file + config-msvc.h: fix OpenSSL-related defines + contrib/vcpkg-ports: remove openssl port + GitHub Actions: use latest working lukka/run-vcpkg + Use network address for emulated DHCP server as a default + Load OpenSSL config on Windows from trusted location + ring_buffer.h: fix GCC warning about unused function + ssh_openssl.h: remove unused declaration + vcpkg/pkcs11-helper: compatibility with latest vcpkg + config-msvc.h: indicate key material export support + +Max Fillinger (2): + Don't use BF-CBC in unit tests if we don't have it + Define have_blowfish variable in ncp unit tests + +Richard T Bonhomme (1): + doc link-options.rst: Use free open-source dynamic-DNS provider URL + +Selva Nair (3): + Fix some more wrong defines in config-msvc.h + Ensure the current common_name is in the environment for scripts + Require EC key support in Windows builds + +Sergio E. Nemirowski (1): + resolvconf fails with -p + +Todd Zullinger (2): + Update IRC information in CONTRIBUTING.rst + doc/man (vpn-network-options): fix foreign_option_{n} typo + +Ville Skyttä (1): + README.down-root: Fix plugin module name + + 2021.10.04 -- Version 2.5.4 Antonio Quartulli (3): diff --git a/Changes.rst b/Changes.rst index ba5ee1a..b6f98d5 100644 --- a/Changes.rst +++ b/Changes.rst @@ -1,3 +1,71 @@ +Overview of changes in 2.5.5 +============================ + +User-visible Changes +-------------------- +- SWEET32/64bit cipher deprecation change was postponed to 2.7 + +- Windows: use network address for emulated DHCP server as default + this enables use of a /30 subnet, which is needed when connecting + to OpenVPN Cloud. + +- require EC support in windows builds + (this means it's no longer possible to build a Windows OpenVPN binary + with an OpenSSL lib without EC support) + +New features +------------ +- Windows build: use CFG and Spectre mitigations on MSVC builds + +- bring back OpenSSL config loading to Windows builds. + OpenSSL config is loaded from %installdir%\SSL\openssl.cfg + (typically: c:\program files\openvpn\SSL\openssl.cfg) if it exists. + + This is important for some hardware tokens which need special + OpenSSL config for correct operation. Trac #1296 + +Bugfixes +-------- +- Windows build: enable EKM + +- Windows build: improve various vcpkg related build issues + +- Windows build: fix regression related to non-writeable status files + (Trac #1430) + +- Windows build: fix regression that broke OpenSSL EC support + +- Windows build: fix "product version" display (2.5..4 -> 2.5.4) + +- Windows build: fix regression preventing use of PKCS12 files + +- improve "make check" to notice if "openvpn --show-cipher" crashes + +- improve argv unit tests + +- ensure unit tests work with mbedTLS builds without BF-CBC ciphers + +- include "--push-remove" in the output of "openvpn --help" + +- fix error in iptables syntax in example firewall.sh script + +- fix "resolvconf -p" invocation in example "up" script + +- fix "common_name" environment for script calls when + "--username-as-common-name" is in effect (Trac #1434) + +Documentation +------------- +- move "push-peer-info" documentation from "server options" to "client" + (where it belongs) + +- correct "foreign_option_{n}" typo in manpage + +- update IRC information in CONTRIBUTING.rst (libera.chat) + +- README.down-root: fix plugin module name + + Overview of changes in 2.5.4 ============================ Bugfixes @@ -3,12 +3,12 @@ define([PRODUCT_NAME], [OpenVPN]) define([PRODUCT_TARNAME], [openvpn]) define([PRODUCT_VERSION_MAJOR], [2]) define([PRODUCT_VERSION_MINOR], [5]) -define([PRODUCT_VERSION_PATCH], [.4]) +define([PRODUCT_VERSION_PATCH], [.5]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]]) define([PRODUCT_BUGREPORT], [openvpn-users@lists.sourceforge.net]) -define([PRODUCT_VERSION_RESOURCE], [2,5,4,0]) +define([PRODUCT_VERSION_RESOURCE], [2,5,5,0]) dnl define the TAP version define([PRODUCT_TAP_WIN_COMPONENT_ID], [tap0901]) define([PRODUCT_TAP_WIN_MIN_MAJOR], [9]) |