OpenVPN 2.4.5 released

Announcements from OpenVPN involving bugs, updates, and new features.
Post Reply
samuli
OpenVPN Inc.
Posts: 113
Joined: Fri Aug 13, 2010 9:05 pm

OpenVPN 2.4.5 released

Post by samuli » Thu Mar 01, 2018 2:58 pm

The OpenVPN community project team is proud to release OpenVPN 2.4.5. It can be downloaded from here.

This release includes a large number of fixes and enhancements. One of the biggest changes is that 2.4.5 Windows installers bundle OpenSSL 1.1.0 instead of OpenSSL 1.0.2 by default. The Windows installer also comes with OpenVPN GUI (11.10.0.0) that has a large number of fixes and improvements. Some easy-rsa 2 fixes are also included.

Please note that LibreSSL is not a supported crypto backend. We accept patches and we do test on OpenBSD 6.0 which comes with LibreSSL, but if newer versions of LibreSSL break API compatibility we do not take responsibility to fix that.

Also note that Windows installers have been built with NSIS version that has been patched against several NSIS installer code execution and privilege escalation problems. Based on our testing, though, older Windows versions such as Windows 7 might not benefit from these fixes. We thus strongly encourage you to always move NSIS installers to a non-user-writeable location before running them. Our long-term plan is to migrate to using MSI installers instead.

A summary of all changes is available in Changes.rst, and a full list of changes is available here. Note that the ChangeLog in the repository mistakenly calls this release 2.4.4.

Compared to OpenVPN 2.3 this is a major update with a large number of new features, improvements and fixes. Some of the major features are AEAD (GCM) cipher and Elliptic Curve DH key exchange support, improved IPv4/IPv6 dual stack support and more seamless connection migration when client's IP address changes (Peer-ID). Also, the new --tls-crypt feature can be used to increase users' connection privacy.

OpenVPN GUI bundled with the Windows installer has a large number of new features compared to the one bundled with OpenVPN 2.3. One of major features is the ability to run OpenVPN GUI without administrator privileges. For full details, see the changelog. The new OpenVPN GUI features are documented here.

Please note that OpenVPN 2.4 installers will not work on Windows XP.

For generic help use these support channels:
Please report bugs and ask development questions here:
--
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

Post Reply