summaryrefslogtreecommitdiff
path: root/ChangeLog
diff options
context:
space:
mode:
authorAlberto Gonzalez Iniesta <agi@inittab.org>2015-06-30 08:22:29 +0200
committerAlberto Gonzalez Iniesta <agi@inittab.org>2015-06-30 08:22:29 +0200
commit6149d88c5a2c58a9cc943ca02c36e8ee4e5d1751 (patch)
tree0fdc36dba5e216faf7ade9d7b327090b4a20bd2b /ChangeLog
parent63862ed15e1abb4b29c5a43b469321c928613c62 (diff)
Imported Upstream version 2.3.7upstream/2.3.7
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog102
1 files changed, 101 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 08c4cc0..0f091bb 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,105 @@
OpenVPN Change Log
-Copyright (C) 2002-2014 OpenVPN Technologies, Inc. <sales@openvpn.net>
+Copyright (C) 2002-2015 OpenVPN Technologies, Inc. <sales@openvpn.net>
+
+2015.06.02 -- Version 2.3.7
+Alexander Pyhalov (1):
+ Default gateway can't be determined on illumos/Solaris platforms
+
+Arne Schwabe (1):
+ Warn that tls-auth with free form files is going to be removed from OpenVPN 2.4
+
+David Sommerseth (6):
+ autotools: Fix wrong ./configure help screen default values
+ down-root plugin: Replaced system() calls with execve()
+ down-root: Improve error messages
+ plugin, down-root: Fix compiler warnings
+ sockets: Remove the limitation of --tcp-nodelay to be server-only
+ plugins, down-root: Code style clean-up
+
+David Woodhouse (2):
+ pkcs11: Load p11-kit-proxy.so module by default
+ Make 'provider' option to --show-pkcs11-ids optional where p11-kit is present
+
+Felix Janda (1):
+ Use OPENVPN_ETH_P_* so that <netinet/if_ether.h> is unecessary
+
+Gert Doering (17):
+ New approach to handle peer-id related changes to link-mtu (2.3 version)
+ Fix incorrect use of get_ipv6_addr() for iroute options.
+ Print helpful error message on --mktun/--rmtun if not available.
+ explain effect of --topology subnet on --ifconfig
+ Add note about file permissions and --crl-verify to manpage.
+ repair --dev null breakage caused by db950be85d37
+ assume res_init() is always there.
+ Correct note about DNS randomization in openvpn.8
+ Disallow usage of --server-poll-timeout in --secret key mode.
+ slightly enhance documentation about --cipher
+ Enforce "serial-tests" behaviour for tests/Makefile
+ Revert "Enforce "serial-tests" behaviour for tests/Makefile"
+ On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo().
+ Use configure.ac hack to apply serial_test AM option only if supported.
+ Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo().
+ Move res_init() call to inner openvpn_getaddrinfo() loop
+ Fix FreeBSD ifconfig for topology subnet tunnels.
+
+Guy Yur (1):
+ Fix --redirect-private in --dev tap mode.
+
+Jan Just Keijser (1):
+ include ifconfig_ environment variables in --up-restart env set
+
+Jonathan K. Bullard (1):
+ Fix null pointer dereference in options.c
+
+Lev Stipakov (1):
+ Fix mssfix default value in connection_list context
+
+Matthias Andree (1):
+ Manual page update for Re-enabled TLS version negotiation.
+
+Mike Gilbert (1):
+ Include systemd units in the source tarball (make dist)
+
+Robert Fischer (1):
+ Updated manpage for --rport and --lport
+
+Samuli Seppänen (2):
+ Properly escape dashes on the man-page
+ Improve documentation in --script-security section of the man-page
+
+Steffan Karger (14):
+ Really fix '--cipher none' regression
+ Update doxygen (a bit)
+ Set tls-version-max to 1.1 if cryptoapicert is used
+ Account for peer-id in frame size calculation
+ Disable SSL compression
+ Fix frame size calculation for non-CBC modes.
+ Allow for CN/username of 64 characters (fixes off-by-one)
+ Remove unneeded parameter 'first_time' from possibly_become_daemon()
+ Re-enable TLS version negotiation by default
+ Remove size limit for files inlined in config
+ Improve --tls-cipher and --show-tls man page description
+ Re-read auth-user-pass file on (re)connect if required
+ Clarify --capath option in manpage
+ Call daemon() before initializing crypto library
+
+
+2014.11.28 -- Version 2.3.6
+David Sommerseth (1):
+ systemd: Reworked the systemd unit file to handle server and client configs better
+
+Gert Doering (1):
+ Add client-only support for peer-id.
+
+Samuli Seppänen (1):
+ Fix to --shaper documentation on the man-page
+
+Steffan Karger (4):
+ Fix assertion error when using --cipher none
+ Add --tls-version-max
+ Modernize sample keys and sample configs
+ Drop too-short control channel packets instead of asserting out.
+
2014.10.24 -- Version 2.3.5
Andris Kalnozols (2):