Software update: OpenVPN 2.6.4

OpenVPN is a robust and easy-to-setup open source VPN daemon that can connect several private networks together via an encrypted tunnel across the Internet. The OpenSSL library is used for security, which can handle all encryption, authentication and certification. The developers have released version 2.6.4 and the changelog for that release can be found below.

User visible changes

• License amendment: all NEW commits fall under a modified license that explicitly permits linking with Apache2 libraries (mbedTLS, OpenSSL) – see COPYING for details. Existing code will fall under the new license as soon as all contributors have agreed to the change – work ongoing.

New features

• DCO: support kernel-triggered key rotation (avoid IV reuse after 2^32 packets). This is the userland side, accepting a message from kernel, and initiating a TLS renegotiation. As of release, only implemented in FreeBSD kernel.

Bug fixes

• fix pkcs#11 usage with OpenSSL 3.x and PSS signing (Github #323)
• fix compile error on TARGET_ANDROID
• fix typo in help text
• man page updates (–topology)
• encoding of non-ASCII windows error messages in log + management fixed (use UTF8 “as for everything else”, not ANSI codepages) (Github #319)