Re: openvpn 2.6 -> 2.7

On 02/05/2026 10:52, Andrea Venturoli wrote:
> Hello.
> 
> Foreword: I'm not complaining at all! This is just a asking for some 
> comments.
> 
> I'm been using OpenVPN 2.6 heavily for a long time.
> I see in main it was upgraded to 2.7, while in 2026Q2 there's still 
> 2.6.19, which is vulnerable (2.6.20 is out).
> 
> Unfortunately 2.7 breaks many of my configs and while I can easily 
> upgrade some of them, for many others it will be hard and long to have 
> the other side fixed.
> 
> Reading that 2.6 will be supported until half 2028, I'm evaluating 
> staying with 2.6 a bit longer (while trying to avoid running vulnerable 
> versions).
> 
> I'm wondering whether an openvpn26 (or openvpn-legacy or whatever) port 
> would make sense.
> I can probably easily downgrade 2.7 -> 2.6 and keep it updated in my 
> local port tree, but maybe there are other people interested?
> 
> Any other comment?

I didn't checked 2.7 changes for incompatibilities yet (still running 
2.6), but I think creating security/openvpn26 is a good idea. Not sure 
about the plugins connected to security/openvpn (whether they should 
have a flavors)

Just my €0.02

Miroslav Lachman