OpenVPN 2.4.6 released

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============2324884502605990026==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="525ol91Ktyh1Rno4op1a0kCmOuVuItmQg"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--525ol91Ktyh1Rno4op1a0kCmOuVuItmQg
Content-Type: multipart/mixed; boundary="adSsRDpub1OPodMo7oWvYJpdg5dDqz5t0";
 protected-headers="v1"
From: =?UTF-8?Q?Samuli_Sepp=c3=a4nen?= <[email protected]>
To: "[email protected]"
 <[email protected]>,
 "[email protected]" <[email protected]>,
 [email protected]
Message-ID: <[email protected]>
Subject: OpenVPN 2.4.6 released

--adSsRDpub1OPodMo7oWvYJpdg5dDqz5t0
Content-Type: multipart/mixed;
 boundary="------------A6B16DBEB22E269E4E814A99"
Content-Language: en-US

This is a multi-part message in MIME format.
--------------A6B16DBEB22E269E4E814A99
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

The OpenVPN community project team is proud to release OpenVPN 2.4.6. It
can be downloaded from here:

<http://openvpn.net/index.php/open-source/downloads.html>

This is primarily a maintenance release with minor bugfixes and
improvements, and one security relevant fix for the Windows Interactive
Service. Windows installer includes updated OpenVPN GUI and OpenSSL. The
bundled tap-windows6 driver includes one security fix.

Please note that LibreSSL is not a supported crypto backend. We accept
patches and we do test on OpenBSD 6.0 which comes with LibreSSL, but if
newer versions of LibreSSL break API compatibility we do not take
responsibility to fix that.

Also note that  Windows installers have been built with NSIS version
that has been patched against several NSIS installer code execution and
privilege escalation problems:

<https://community.openvpn.net/openvpn/wiki/NSISBug1125>

Based on our testing, though, older Windows versions such as Windows 7
might not benefit from these fixes. We thus strongly encourage you to
always move NSIS installers to a non-user-writeable location before
running them. Our long-term plan is to migrate to using MSI installers
instead.

A summary of all included changes is available here:

<https://github.com/OpenVPN/openvpn/blob/release/2.4/Changes.rst>

A full list of changes is available here:

<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24>

Compared to OpenVPN 2.3 this is a major update with a large number of
new features, improvements and fixes. Some of the major features are
AEAD (GCM) cipher and Elliptic Curve DH key exchange support, improved
IPv4/IPv6 dual stack support and more seamless connection migration when
client's IP address changes (Peer-ID). Also, the new --tls-crypt feature
can be used to increase users' connection privacy.

OpenVPN GUI bundled with the Windows installer has a large number of new
features compared to the one bundled with OpenVPN 2.3. One of major
features is the ability to run OpenVPN GUI without administrator privileg=
es.

For full details, look here:

<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24>

The new OpenVPN GUI features are documented here:

<https://github.com/OpenVPN/openvpn-gui>

Please note that OpenVPN 2.4 installers will not work on Windows XP.

For generic help use these support channels:

Official documentation:
<http://openvpn.net/index.php/open-source/documentation/howto.html>
Wiki: <https://community.openvpn.net>
Forums: <https://forums.openvpn.net>
User mailing list: <http://sourceforge.net/mail/?group_id=3D48978>
User IRC channel: #openvpn at irc.freenode.net

Please report bugs and ask development questions here:

Bug tracker and wiki: <https://community.openvpn.net>
Developer mailing list: <http://sourceforge.net/mail/?group_id=3D48978>
Developer IRC channel: #openvpn-devel at irc.freenode.net (requires
Freenode registration)

--=20
Samuli Sepp=C3=A4nen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock



--------------A6B16DBEB22E269E4E814A99
Content-Type: text/plain; charset=UTF-8;
 name="openvpn-2.4.6-changelog"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="openvpn-2.4.6-changelog"

RGF2aWQgU29tbWVyc2V0aCAoMSk6CiAgICAgIG1hbmFnZW1lbnQ6IFdhcm4gaWYgVENQIHBv
cnQgaXMgdXNlZCB3aXRob3V0IHBhc3N3b3JkCgpHZXJ0IERvZXJpbmcgKDMpOgogICAgICBD
b3JyZWN0IHZlcnNpb24gaW4gQ2hhbmdlTG9nIC0gc2hvdWxkIGJlIDIuNC41LCB3YXMgbWlz
dHlwZWQgYXMgMi40LjQKICAgICAgRml4IHBvdGVudGlhbCBkb3VibGUtZnJlZSgpIGluIElu
dGVyYWN0aXZlIFNlcnZpY2UgKENWRS0yMDE4LTkzMzYpCiAgICAgIHByZXBhcmluZyByZWxl
YXNlIHYyLjQuNiAoQ2hhbmdlTG9nLCB2ZXJzaW9uLm00LCBDaGFuZ2VzLnJzdCkKCkdlcnQg
dmFuIERpamsgKDEpOgogICAgICBtYW5wYWdlOiBpbXByb3ZlIGRlc2NyaXB0aW9uIG9mIC0t
c3RhdHVzIGFuZCAtLXN0YXR1cy12ZXJzaW9uCgpKb29zdCBSaWpuZXZlbGQgKDEpOgogICAg
ICBNYWtlIHJldHVybiBjb2RlIGV4dGVybmFsIHRscyBrZXkgbWF0Y2ggZG9jcwoKU2VsdmEg
TmFpciAoMyk6CiAgICAgIERlbGV0ZSB0aGUgSVB2NiByb3V0ZSB0byB0aGUgImNvbm5lY3Rl
ZCIgbmV0d29yayBvbiB0dW4gY2xvc2UKICAgICAgTWFuYWdlbWVudDogd2FybiBhYm91dCBw
YXNzd29yZCBvbmx5IHdoZW4gdGhlIG9wdGlvbiBpcyBpbiB1c2UKICAgICAgQXZvaWQgb3Zl
cmZsb3cgaW4gd2FrZXVwIHRpbWUgY29tcHV0YXRpb24KClNpbW9uIE1hdHRlciAoMSk6CiAg
ICAgIEFkZCBtaXNzaW5nICNpZmRlZiBTU0xfT1BfTk9fVExTdjFfMS8yCgpTdGVmZmFuIEth
cmdlciAoMSk6CiAgICAgIENoZWNrIGZvciBtb3JlIGRhdGEgaW4gY29udHJvbCBjaGFubmVs
Cgo=
--------------A6B16DBEB22E269E4E814A99--

--adSsRDpub1OPodMo7oWvYJpdg5dDqz5t0--

--525ol91Ktyh1Rno4op1a0kCmOuVuItmQg
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEbQT48bAXMRH0mXleKVhNn0CGRXgFAlrfKwcACgkQKVhNn0CG
RXhY+Af/dOi+JfnQxCqYIy4OGXZx43oFsQpnUEWo5aeDTwy80Wb8NlrVUhqhyH4N
SXEmevA7Lp3CEHmjT08mumv2gG8Ydd4wCZgBn0kOdAlfWzbGyv150S0m2f8LOi9N
fu2M4lj108zoHsq0T8Q1Z7p2kuutXSAyZV9BH2IFYpv79EJceAEZDaiGSMggykUO
8j+nk6bkdTPk7jF0jrHuJoh2rusqNhPusJAWy2SqZf0wrgq8sZDqgJSRkwFCLSma
DNqdnPHrPEVmsUek9Xq3xFsNUHQ/1hQD2MvbgvOhNiyFqxgQK4SLudZAPw+KuBZF
fpPNXngMimycP89BxJoASBSZpYn8MQ==
=waH9
-----END PGP SIGNATURE-----

--525ol91Ktyh1Rno4op1a0kCmOuVuItmQg--


--===============2324884502605990026==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
--===============2324884502605990026==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Openvpn-announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-announce

--===============2324884502605990026==--