![]() On Linux this brings in a new default dependency for libnl-genl (for Linux distributions that are too old to have a suitable version of the library, use "configure -disable-dco") Note: configure now enables DCO build by default on FreeBSD and Linux. "-cryptoapicert ISSUER:" where is matched as a substring of the issuer (CA) name in the certificate. ![]() Certificate selection string can now specify a partial issuer name string as CryptoAPI (Windows): support issuer name as a selector.This ensure that only the previously authenticated peer can do trigger renegotiation and complete renegotiations. Dynamic TLS Crypt: When both peers are OpenVPN 2.6.1+, OpenVPN will dynamically create a tls-crypt key that is used for renegotiation.This is mostly a bugfix release with some improvements. The OpenVPN community project team is proud to release OpenVPN 2.6.1. Update included openvpn-gui to 11.39.0.0.Attempting to use the old ovpn-dco with 2.6.2+ will lead to disabling DCO at runtime. ![]() The kernel module was renamed to "ovpn-dco-v2.ko" in order to highlight this change and ensure that users and userspace software could easily understand which version is loaded. This is an INCOMPATIBLE change and therefore an ovpn-dco kernel module older than v0323 (commit ID 726fdfe0fa21) will not work anymore and must be upgraded.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |