OpenVPN v2.4.2 release

2017.05.11 -- Version 2.4.2
David Sommerseth (5):
      auth-token: Ensure tokens are always wiped on de-auth
      docs: Fixed man-page warnings discoverd by rpmlint
      Make --cipher/--auth none more explicit on the risks
      plugin: Fix documentation typo for type_mask
      plugin: Export secure_memzero() to plug-ins

Hristo Venev (1):
      Fix extract_x509_field_ssl for external objects, v2

Selva Nair (1):
      In auth-pam plugin clear the password after use

Steffan Karger (10):
      cleanup: merge packet_id_alloc_outgoing() into packet_id_write()
      Don't run packet_id unit tests for --disable-crypto builds
      Fix Changes.rst layout
      Fix memory leak in x509_verify_cert_ku()
      mbedtls: correctly check return value in pkcs11_certificate_dn()
      Restore pre-NCP frame parameters for new sessions
      Always clear username/password from memory on error
      Document tls-crypt security considerations in man page
      Don't assert out on receiving too-large control packets (CVE-2017-7478)
      Drop packets instead of assert out if packet id rolls over (CVE-2017-7479)

ValdikSS (1):
      Set a low interface metric for tap adapter when block-outside-dns is in use
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=ffBc
-----END PGP SIGNATURE-----