From e739d7f445abc36277f60b2fb048809cdbeb7df1 Mon Sep 17 00:00:00 2001 From: David Sommerseth Date: Fri, 2 Dec 2016 00:09:00 +0100 Subject: [PATCH] Preparing OpenVPN v2.4_rc1 release Signed-off-by: David Sommerseth --- ChangeLog | 28 ++++++++++++++++++++++++++++ Changes.rst | 10 ++++++++++ version.m4 | 2 +- 3 files changed, 39 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index abb9d385feb..59e679d4476 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,34 @@ OpenVPN Change Log Copyright (C) 2002-2016 OpenVPN Technologies, Inc. +2016.12.01 -- Version 2.4_rc1 +Antonio Quartulli (1): + reload CRL only if file was modified + +Christian Hesse (3): + update year in copyright message + Use systemd service manager notification + Refuse to daemonize when running from systemd + +Gert Doering (1): + Fix windows path in Changes.rst + +Samuli Seppänen (1): + Mention that OpenVPN 2.4 requires Windows Vista or higher + +Selva Nair (4): + Map restart signals from event loop to SIGTERM during exit-notification wait + When parsing '--setenv opt xx ..' make sure a third parameter is present + Force 'def1' method when --redirect-gateway is done through service + Do not restart dns client service as a part of --register-dns processing + +Steffan Karger (4): + tls_process: don't set variable that's never read + Unconditionally enable TLS_AGGREGATE_ACK + Clean up format_hex_ex() + Introduce and use secure_memzero() to erase secrets + + 2016.11.24 -- Version 2.4_beta2 Arne Schwabe (5): Document that tls-crypt also supports inline diff --git a/Changes.rst b/Changes.rst index 0594731d514..843f2bd5f08 100644 --- a/Changes.rst +++ b/Changes.rst @@ -259,6 +259,12 @@ User-visible Changes changed, instead of for each new connection. This reduces the connection setup time, in particular when using large CRLs. +- OpenVPN now ships with more up-to-date systemd unit files which takes advantage + of the improved service management as well as some hardening steps. The + configuration files are picked up from /etc/openvpn/server and + /etc/openvpn/client (depending on unit file). This also avoids these new + unit files and how they work to collide with older pre-existing unit files. + Maintainer-visible changes -------------------------- @@ -267,3 +273,7 @@ Maintainer-visible changes OPENSSL_SSL_{CFLAGS,LIBS} have been merged into OPENSSL_{CFLAGS,LIBS}. This is particularly relevant for maintainers who build their own OpenSSL library, e.g. when cross-compiling. + +- Linux distributions using systemd is highly encouraged to ship these new unit + files instead of older ones, to provide a unified behaviour across systemd + based Linux distributions. diff --git a/version.m4 b/version.m4 index b5fb2341e16..60313a3611c 100644 --- a/version.m4 +++ b/version.m4 @@ -3,7 +3,7 @@ define([PRODUCT_NAME], [OpenVPN]) define([PRODUCT_TARNAME], [openvpn]) define([PRODUCT_VERSION_MAJOR], [2]) define([PRODUCT_VERSION_MINOR], [4]) -define([PRODUCT_VERSION_PATCH], [_beta2]) +define([PRODUCT_VERSION_PATCH], [_rc1]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]]) m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]])