Hi,
The OpenVPN 3 Linux v15 (beta) is now available. This is primarily a bugfix release as a few issues appeared soon after the last release. * Bugfix: 2FA authentication with dynamic challenge protocol Servers (most commonly OpenVPN Access Server) deployed with 2FA based authentication would fail when the dynamic challenge protocol was utilized. The result would be a client disconnecting with a time-out error and in some cases the openvpn3 sessions-list' would enlist "ghost" sessions not responding. This command would also wait for a long time before reporting the complete list of sessions when such ghost sessions are present. This is fixed. Reported: <https://github.com/OpenVPN/openvpn3-linux/issues/55> * Bugfix: Fix misbehaviours with --tls-crypt-v2 This feature has been a known issue for a long time, but newer OpenVPN Access Servers now pushes tls-crypt-v2 profiles resulting in connections failing with NETWORK_EOF_ERROR errors in the log. This is finally fixed. Reported: <https://github.com/OpenVPN/openvpn3-linux/issues/55> * Feature: Added openvpn3-admin variables command This "openvpn3-admin variables" command will provide runtime information used by openvpn3-linux. First variable accessible is the value reported in the IV_HWADDR field sent to the VPN server. This can be seen using: # openvpn3-admin variables --machine-id Supported Linux distributions: - Debian 9 (amd64) - Debian 10 (amd64, arm64) - CentOS 7 (x86_64) - CentOS 8 (x86_64, aarch64) - Fedora 33, 34 and Rawhide (x86_64, aarch64, s390x) - Red Hat Enterprise Linux 7 (x86_64) - Red Hat Enterprise Linux 8 (x86_64, aarch64) - Ubuntu 16.04 (amd64) - Ubuntu 18.04, 20.04, 20.10 and 21.04 (amd64, arm64) The arm64 support on selected Debian and Ubuntu releases are currently considered a tech-preview. The Data Channel Offload (DCO) tech-preview feature is supported in these distributions: - CentOS 8 - Fedora 33, 34 and Rawhide - Ubuntu 20.04, 20.10 and 21.04 - Red Hat Enterprise Linux 8 Remember to update the kmod-ovpn-dco package to the latest available version. Instructions how to install OpenVPN 3 Linux can be found here: <https://community.openvpn.net/openvpn/wiki/OpenVPN3Linux> -- kind regards, David Sommerseth OpenVPN Inc ---- Source tarballs --------------------------------------------------- * OpenVPN 3 Linux v15 beta <https://swupdate.openvpn.net/community/releases/openvpn3-linux-15_beta.tar.xz> <https://swupdate.openvpn.net/community/releases/openvpn3-linux-15_beta.tar.xz.asc> ---- SHA256 Checksums --------------------------------------------------86a29c6cc8bc4dfa15aa913f696e048989ebf682bbc184ae050f61256f87e37f openvpn3-linux-15_beta.tar.xz be0fedded031a135ae2fe82edcac742b5352d17d16648643328b247476953c0f openvpn3-linux-15_beta.tar.xz.asc
---- git references ----------------------------------------------------
git repositories:
<https://gitlab.com/openvpn/openvpn3-linux>
<https://github.com/OpenVPN/openvpn3-linux>
git tag: v15_beta
git commit: 6c9bbc9e10d7c499339c1ac774d1614e8df88573
---- Changes from v14 to v15 -------------------------------------------
David Sommerseth (5):
docs: Update README.md with new DCO and SELinux info
common: Extend MachineID to provide source information
ovpn3cli/admin: Add a new 'variables' admin command
Revert "client/core: Improve fatal exception handling in event()"
core-ext: Add support for inline --tls-crypt-v2
------------------------------------------------------------------------
_______________________________________________
Openvpn-devel mailing list
openvpn-de...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
OpenPGP_signature
Description: OpenPGP digital signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
