Preparing release 2.5.5

version.m4, ChangeLog, Changes.rst

Signed-off-by: Gert Doering <[email protected]>

ChangeLog

@@ -1,6 +1,63 @@
 OpenVPN Change Log
 Copyright (C) 2002-2021 OpenVPN Inc <[email protected]>
 
+2021.12.14 -- Version 2.5.5
+
+Adrian (1):
+      Fix error in example firewall.sh script
+
+Antonio Quartulli (1):
+      configure: remove useless -Wno-* from default CFLAGS
+
+Arne Schwabe (2):
+      Add argv_insert_head__empty_argv__head_only to argv tests
+      Move deprecation of SWEET32/64bit block size ciphers to 2.7
+
+Gert Doering (3):
+      Include --push-remove in the output of --help.
+      Move '--push-peer-info' documentation from 'server' to 'client options'
+      add test case(s) to notice 'openvpn --show-cipher' crashing
+
+Ilya Shipitsin (1):
+      BUILD: enable CFG and Spectre mitigation for MSVC
+
+Lev Stipakov (12):
+      Fix loading PKCS12 files on Windows
+      msvc: fix product version display
+      msvc: add missing header to project file
+      config-msvc.h: fix OpenSSL-related defines
+      contrib/vcpkg-ports: remove openssl port
+      GitHub Actions: use latest working lukka/run-vcpkg
+      Use network address for emulated DHCP server as a default
+      Load OpenSSL config on Windows from trusted location
+      ring_buffer.h: fix GCC warning about unused function
+      ssh_openssl.h: remove unused declaration
+      vcpkg/pkcs11-helper: compatibility with latest vcpkg
+      config-msvc.h: indicate key material export support
+
+Max Fillinger (2):
+      Don't use BF-CBC in unit tests if we don't have it
+      Define have_blowfish variable in ncp unit tests
+
+Richard T Bonhomme (1):
+      doc link-options.rst: Use free open-source dynamic-DNS provider URL
+
+Selva Nair (3):
+      Fix some more wrong defines in config-msvc.h
+      Ensure the current common_name is in the environment for scripts
+      Require EC key support in Windows builds
+
+Sergio E. Nemirowski (1):
+      resolvconf fails with -p
+
+Todd Zullinger (2):
+      Update IRC information in CONTRIBUTING.rst
+      doc/man (vpn-network-options): fix foreign_option_{n} typo
+
+Ville Skytt� (1):
+      README.down-root: Fix plugin module name
+
+
 2021.10.04 -- Version 2.5.4
 
 Antonio Quartulli (3):

Changes.rst

@@ -1,3 +1,71 @@
+Overview of changes in 2.5.5
+============================
+
+User-visible Changes
+--------------------
+- SWEET32/64bit cipher deprecation change was postponed to 2.7
+
+- Windows: use network address for emulated DHCP server as default
+  this enables use of a /30 subnet, which is needed when connecting
+  to OpenVPN Cloud.
+
+- require EC support in windows builds
+  (this means it's no longer possible to build a Windows OpenVPN binary
+  with an OpenSSL lib without EC support)
+
+New features
+------------
+- Windows build: use CFG and Spectre mitigations on MSVC builds
+
+- bring back OpenSSL config loading to Windows builds.
+  OpenSSL config is loaded from %installdir%\SSL\openssl.cfg
+  (typically: c:\program files\openvpn\SSL\openssl.cfg) if it exists.
+
+  This is important for some hardware tokens which need special
+  OpenSSL config for correct operation.  Trac #1296
+
+Bugfixes
+--------
+- Windows build: enable EKM
+
+- Windows build: improve various vcpkg related build issues
+
+- Windows build: fix regression related to non-writeable status files
+  (Trac #1430)
+
+- Windows build: fix regression that broke OpenSSL EC support
+
+- Windows build: fix "product version" display (2.5..4 -> 2.5.4)
+
+- Windows build: fix regression preventing use of PKCS12 files
+
+- improve "make check" to notice if "openvpn --show-cipher" crashes
+
+- improve argv unit tests
+
+- ensure unit tests work with mbedTLS builds without BF-CBC ciphers
+
+- include "--push-remove" in the output of "openvpn --help"
+
+- fix error in iptables syntax in example firewall.sh script
+
+- fix "resolvconf -p" invocation in example "up" script
+
+- fix "common_name" environment for script calls when
+  "--username-as-common-name" is in effect (Trac #1434)
+
+Documentation
+-------------
+- move "push-peer-info" documentation from "server options" to "client"
+  (where it belongs)
+
+- correct "foreign_option_{n}" typo in manpage
+
+- update IRC information in CONTRIBUTING.rst (libera.chat)
+
+- README.down-root: fix plugin module name
+
+
 Overview of changes in 2.5.4
 ============================
 Bugfixes

version.m4

@@ -3,12 +3,12 @@ define([PRODUCT_NAME], [OpenVPN])
 define([PRODUCT_TARNAME], [openvpn])
 define([PRODUCT_VERSION_MAJOR], [2])
 define([PRODUCT_VERSION_MINOR], [5])
-define([PRODUCT_VERSION_PATCH], [.4])
+define([PRODUCT_VERSION_PATCH], [.5])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]])
 define([PRODUCT_BUGREPORT], [[email protected]])
-define([PRODUCT_VERSION_RESOURCE], [2,5,4,0])
+define([PRODUCT_VERSION_RESOURCE], [2,5,5,0])
 dnl define the TAP version
 define([PRODUCT_TAP_WIN_COMPONENT_ID], [tap0901])
 define([PRODUCT_TAP_WIN_MIN_MAJOR], [9])