OpenVPN 2.6.1 released

[novaflash]

The OpenVPN community project team is proud to release OpenVPN 2.6.1. This is mostly a bugfix release with some improvements.

• For details see ​Changes.rst

Feature changes:

• Dynamic TLS Crypt: When both peers are OpenVPN 2.6.1+, OpenVPN will dynamically create a tls-crypt key that is used for renegotiation. This ensure that only the previously authenticated peer can do trigger renegotiation and complete renegotiations.
• CryptoAPI (Windows): support issuer name as a selector. Certificate selection string can now specify a partial issuer name string as "--cryptoapicert ISSUER:<string>" where <string> is matched as a substring of the issuer (CA) name in the certificate.
• Note: configure now enables DCO build by default on FreeBSD and Linux. On Linux this brings in a new default dependency for libnl-genl (for Linux distributions that are too old to have a suitable version of the library, use "configure --disable-dco")

Windows MSI changes since 2.6.0:

• Update included ovpn-dco-win driver to 0.9.2

Downloads

• Windows installers
  Red Hat/Fedora dnf/yum repositories (provided by Fedora Copr)
• Source archive file

Useful resources

• Documentation
• Community wiki
• Report issues
• User mailing list
• Easy RSA 3 HOWTO
• User IRC channel: #openvpn at irc.libera.chat

[fixed77]

> Note: configure now enables DCO build by default on FreeBSD and Linux. On Linux this brings in a new default dependency for libnl-genl (for Linux distributions that are too old to have a suitable version of the library, use "configure --disable-dco")

OpenVPN 2.6.1 in Ubuntu repo (https://build.openvpn.net/) build without DCO.

openvpn --version shown enable_dco=no build option.

[flichtenheld]

> Note: configure now enables DCO build by default on FreeBSD and Linux. On Linux this brings in a new default dependency for libnl-genl (for Linux distributions that are too old to have a suitable version of the library, use "configure --disable-dco")

OpenVPN 2.6.1 in Ubuntu repo (https://build.openvpn.net/) build without DCO.

openvpn --version shown enable_dco=no build option.

This known problem is tracked in https://github.com/OpenVPN/openvpn-build/issues/333. I just updated that ticket to provide a status update.

Summary: It is fixed for most relevant versions, but specifically not the Ubuntu focal package.