Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

openvpn: update to 2.6.9 #23391

Merged
merged 1 commit into from
Feb 23, 2024
Merged

openvpn: update to 2.6.9 #23391

merged 1 commit into from
Feb 23, 2024

Conversation

AuthorReflex
Copy link
Contributor

@AuthorReflex AuthorReflex commented Feb 12, 2024

Maintainer: @neheb @AuthorReflex
Compile tested: ramips/mt7621, ramips/mt7620, ramips/mt76x8
Run tested: Xiaomi Mi Router 3 Pro, Xiaomi Mi Router R3, Asus RT-AC1200

Description:

  • license change is now complete, and all code has been re-licensed under the new license (still GPLv2, but with new linking exception for Apache2 licensed code). Code that could not be re-licensed has been removed or rewritten.

  • add support for building with mbedTLS 3.x.x

  • new option "--force-tls-key-material-export" to only accept clients that can do TLS keying material export to generate session keys (mostly an internal option to better deal with TLS 1.0 PRF failures).

  • Windows: bump vcpkg-ports/pkcs11-helper to 1.30

  • Log incoming SSL alerts in easier to understand form and move logging from "--verb 8" to "--verb 3".

  • protocol_dump(): add support for printing "--tls-crypt" packets

and other fixes

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst

@AuthorReflex
Copy link
Contributor Author

AuthorReflex commented Feb 16, 2024

hmm... looks like build environment is broken...

@AuthorReflex AuthorReflex force-pushed the ovpn-2.6.9 branch 9 times, most recently from 69444a9 to b186208 Compare February 19, 2024 16:10
@egc112
Copy link
Contributor

egc112 commented Feb 19, 2024

I just compiled for my DL-WRX36 and OpenVPN with a client to Mullvad works without a problem, thanks

root@DL-WRX36:~# openvpn --version
OpenVPN 2.6.9 aarch64-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
Originally developed by James Yonan
Copyright (C) 2002-2023 OpenVPN Inc <[email protected]>
root@DL-WRX36:~#

Do you want me to test anything else?

@AuthorReflex AuthorReflex force-pushed the ovpn-2.6.9 branch 7 times, most recently from 67ea457 to 59a22a5 Compare February 22, 2024 03:10
@AuthorReflex
Copy link
Contributor Author

I just compiled for my DL-WRX36 and OpenVPN with a client to Mullvad works without a problem, thanks

root@DL-WRX36:~# openvpn --version
OpenVPN 2.6.9 aarch64-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
Originally developed by James Yonan
Copyright (C) 2002-2023 OpenVPN Inc <[email protected]>
root@DL-WRX36:~#

Do you want me to test anything else?

I think no. Before the VMs were broken, problems were only on the PPС architecture due to a broken kernel.

- license change is now complete, and all code has been re-licensed
  under the new license (still GPLv2, but with new linking exception
  for Apache2 licensed code).
  Code that could not be re-licensed has been removed or rewritten.

- add support for building with mbedTLS 3.x.x

- new option "--force-tls-key-material-export" to only accept clients
  that can do TLS keying material export to generate session keys
  (mostly an internal option to better deal with TLS 1.0 PRF failures).

- Windows: bump vcpkg-ports/pkcs11-helper to 1.30

- Log incoming SSL alerts in easier to understand form and move logging
  from "--verb 8" to "--verb 3".

- protocol_dump(): add support for printing "--tls-crypt" packets

and other fixes

For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst

Signed-off-by: Ivan Pavlov <[email protected]>
@neheb neheb merged commit 3e34186 into openwrt:master Feb 23, 2024
6 of 12 checks passed
@AuthorReflex AuthorReflex deleted the ovpn-2.6.9 branch August 15, 2024 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants