aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2017-05-11Prepare v2.3.15 releasev2.3.15David Sommerseth
2017-05-11Don't assert out on receiving too-large control packets (CVE-2017-7478)Steffan Karger
2017-05-11Drop packets instead of assert out if packet id rolls over (CVE-2017-7479)Steffan Karger
2017-05-11Introduce and use secure_memzero() to erase secretsSteffan Karger
2017-05-11Document that OpenVPN 2.3 does not check the CRL signatureSteffan Karger
2017-05-09cleanup: merge packet_id_alloc_outgoing() into packet_id_write()Steffan Karger
2017-05-09Add missing includes in error.hSteffan Karger
2017-04-11Make --cipher/--auth none more explicit on the risksDavid Sommerseth
2017-03-20Document --proto udp6, tcp6, etc.Gert Doering
2017-01-23git: Merge .gitignore files into a single fileDavid Sommerseth
2017-01-04Fix implicit declarations when HAVE_OPENSSL_ENGINE is unsetJulien Muchembled
2016-12-23docs: Further improve --reneg-bytes and SWEET32 informationDavid Sommerseth
2016-12-21Update copyrightsDavid Sommerseth
2016-12-21dev-tools: Added script for updating copyright years in filesDavid Sommerseth
2016-12-06Preparing release of v2.3.14v2.3.14Gert Doering
2016-12-06Correctly state the default dhcp server address in man pageSelva Nair
2016-11-30Map restart signals from event loop to SIGTERM during exit-notification waitSelva Nair
2016-11-30When parsing '--setenv opt xx ..' make sure a third parameter is presentSelva Nair
2016-11-28update year in copyright messageChristian Hesse
2016-11-28Clean up format_hex_ex()Steffan Karger
2016-11-23Document the --auth-token optionDavid Sommerseth
2016-11-13Support --block-outside-dns on multiple tunnelsSelva Nair
2016-11-11Repair topology subnet on OpenBSDGert Doering
2016-11-09Repair topology subnet on FreeBSD 11Gert Doering
2016-11-04Drop recursively routed packetsLev Stipakov
2016-11-02Preparing release of v2.3.13v2.3.13David Sommerseth
2016-11-01man: Improve the --keepalive sectionDavid Sommerseth
2016-10-28Add a revoked cert to the sample keysSteffan Karger
2016-10-28Limit --reneg-bytes to 64MB when using small block ciphersSteffan Karger
2016-10-10Fix compilation in pedantic modeLev Stipakov
2016-10-10Exclude peer-id from pulled options digestLev Stipakov
2016-10-09Fix --multihome for IPv6 on 64bit BSD systems.Gert Doering
2016-10-04add POSTINIT_CMD_suf to t_client.sh and sample configGert Doering
2016-10-04t_client.sh: Add prepare/cleanup possibilties for each test caseDavid Sommerseth
2016-10-04Update cipher-related man page textSteffan Karger
2016-10-04make t_client robust against sudoers misconfigurationGert Doering
2016-10-04Automatically cache expected IPs for t_client.sh on the first runSamuli Seppänen
2016-09-20Fix t_client runs on OpenSolarisGert Doering
2016-09-18Incorporate the Debian typo fixes where appropriate and make show_opt default...Arne Schwabe
2016-09-17t_client.sh: Improve detection if the OpenVPN process did start during testsDavid Sommerseth
2016-09-17t_client.sh: Add support for Kerberos/ksuDavid Sommerseth
2016-09-17skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-cryptoIlya Shipitsin
2016-09-17t_client.sh: Make OpenVPN write PID file to avoid various sudo issuesDavid Sommerseth
2016-09-16cleanup: remove code duplication in msg_test()Steffan Karger
2016-09-16Make gnu89 support explicitSteffan Karger
2016-09-16Do not abort t_client run if OpenVPN instance does not start.Gert Doering
2016-08-25Use AES ciphers in our sample configuration files and add a few modern 2.4 ex...Arne Schwabe
2016-08-25Fix unittests for out-of-source buildsSteffan Karger
2016-08-23Preparing release of v2.3.12v2.3.12David Sommerseth
2016-08-23Revert "Drop recursively routed packets"David Sommerseth