aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2017-09-25Preparing OpenVPN 2.3.18 releasev2.3.18David Sommerseth
2017-09-22Fix bounds check in read_key()Steffan Karger
2017-09-07OpenSSL: Always set SSL_OP_CIPHER_SERVER_PREFERENCE flagSzilárd Pfeiffer
2017-08-15Deprecate --ns-cert-typeSteffan Karger
2017-06-27crypto: correct typ0 in error messageAntonio Quartulli
2017-06-20Preparing for release v2.3.17 (ChangeLog, version.m4, Changes.rst)v2.3.17Gert Doering
2017-06-19Fix remotely-triggerable ASSERT() on malformed IPv6 packet.Gert Doering
2017-06-19Prevent two kinds of stack buffer OOB reads and a crash for invalid input dataGuido Vranken
2017-06-19Fix potential double-free in --x509-alt-username (CVE-2017-7521)Steffan Karger
2017-06-19Restrict --x509-alt-username extension typesSteffan Karger
2017-06-19Fix remote-triggerable memory leaks (CVE-2017-7521)Steffan Karger
2017-06-19auth-token with auth-nocache fix broke --disable-crypto buildsDavid Sommerseth
2017-06-19backport: Ignore auth-nocache for auth-user-pass if auth-token is pushedDavid Sommerseth
2017-06-18Fix potential 1-byte overread in TCP option parsing.Gert Doering
2017-06-16Fix a null-pointer dereference in establish_http_proxy_passthru()Guido Vranken
2017-06-13openssl: fix overflow check for long --tls-cipher optionSteffan Karger
2017-06-12Ensure option array p[] is always NULL-terminatedGuido Vranken
2017-06-11Missing include for socket-flags TCP_NODELAY on OpenBSDJérémie Courrèges-Anglas
2017-06-11Fix an unaligned access on OpenBSD/sparc64Jérémie Courrèges-Anglas
2017-06-10Fix memory leak in add_option() for option 'connection'Guido Vranken
2017-06-09Fix 2 memory leaks in proxy authentication routineGuido Vranken
2017-06-08refactor my_struprGuido Vranken
2017-05-18Preparing for release v2.3.16 (ChangeLog, version.m4)v2.3.16Gert Doering
2017-05-18Fix gateway detection with OpenBSD routing domainsSteven McDonald
2017-05-18fix redirect-gateway behaviour when an IPv4 default route does not existAntonio Quartulli
2017-05-18Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c)Guido Vranken
2017-05-18Check for errors in the return value of GetModuleFileNameW()Selva Nair
2017-05-11Prepare v2.3.15 releasev2.3.15David Sommerseth
2017-05-11Don't assert out on receiving too-large control packets (CVE-2017-7478)Steffan Karger
2017-05-11Drop packets instead of assert out if packet id rolls over (CVE-2017-7479)Steffan Karger
2017-05-11Introduce and use secure_memzero() to erase secretsSteffan Karger
2017-05-11Document that OpenVPN 2.3 does not check the CRL signatureSteffan Karger
2017-05-09cleanup: merge packet_id_alloc_outgoing() into packet_id_write()Steffan Karger
2017-05-09Add missing includes in error.hSteffan Karger
2017-04-11Make --cipher/--auth none more explicit on the risksDavid Sommerseth
2017-03-20Document --proto udp6, tcp6, etc.Gert Doering
2017-01-23git: Merge .gitignore files into a single fileDavid Sommerseth
2017-01-04Fix implicit declarations when HAVE_OPENSSL_ENGINE is unsetJulien Muchembled
2016-12-23docs: Further improve --reneg-bytes and SWEET32 informationDavid Sommerseth
2016-12-21Update copyrightsDavid Sommerseth
2016-12-21dev-tools: Added script for updating copyright years in filesDavid Sommerseth
2016-12-06Preparing release of v2.3.14v2.3.14Gert Doering
2016-12-06Correctly state the default dhcp server address in man pageSelva Nair
2016-11-30Map restart signals from event loop to SIGTERM during exit-notification waitSelva Nair
2016-11-30When parsing '--setenv opt xx ..' make sure a third parameter is presentSelva Nair
2016-11-28update year in copyright messageChristian Hesse
2016-11-28Clean up format_hex_ex()Steffan Karger
2016-11-23Document the --auth-token optionDavid Sommerseth
2016-11-13Support --block-outside-dns on multiple tunnelsSelva Nair
2016-11-11Repair topology subnet on OpenBSDGert Doering