OpenVPN v2.6.2 release

2023.03.24 -- Version 2.6.2

Antonio Quartulli (6):
      dco: don't use NetLink to exchange control packets
      dco: print version to log if available
      dco-linux: remove M_ERRNO flag when printing netlink error message
      multi: don't call DCO APIs if DCO is disabled
      dco-freebsd: use m->instances[] instead of m->hash
      dco-linux: implement dco_get_peer_stats{, multi} API

Arne Schwabe (12):
      Set netlink socket to be non-blocking
      Ensure n = 2 is set in key2 struct in tls_crypt_v2_unwrap_client_key
      Fix memory leaks in open_tun_dco()
      Fix memory leaks in HMAC initial packet generation
      Use key_state instead of multi for tls_send_payload parameter
      Make sending plain text control message session aware
      Only update frame calculation if we have a valid link sockets
      Improve description of compat-mode
      Simplify --compress parsing in options.c
      Refuse connection if server pushes an option contradicting allow-compress
      Add 'allow-compression stub-only' internally for DCO
      Parse compression options and bail out when compression is disabled

Frank Lichtenheld (1):
      tests/unit_tests: Fix 'make distcheck' with subdir-objects enabled

Gert Doering (1):
      preparing release 2.6.2

Heiko Hund (1):
      dns option: allow up to eight addresses per server

Kristof Provost (1):
      dco: print FreeBSD version

Lev Stipakov (4):
      Support --inactive option for DCO
      Fix '--inactive <time> 0' behavior for DCO
      Print DCO client stats on SIGUSR2
      Don't overwrite socket flags when using DCO on Windows

Michael Baentsch (1):
      using OpenSSL3 API for EVP PKEY type name reporting

Selva Nair (8):
      Bugfix: Convert ECDSA signature form pkcs11-helper to DER encoded form
      Import some sample certificates into Windows store for testing
      Add tests for finding certificates in Windows cert store
      Refactor SSL_CTX_use_CryptoAPI_certificate()
      Add a test for signing with certificates in Windows store
      Unit tests: add test for SSL_CTX_use_Cryptoapi_certificate()
      Improve error message on short read from socks proxy
      Make error in setting metric for IPv6 interface non-fatal
-----BEGIN PGP SIGNATURE-----
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=7XBC
-----END PGP SIGNATURE-----