Component: ovpn
103 changelog entries across 45 version(s)
Activity over time (changelog entries per month)
- fixed OVPN server handling on reboot (introduced in v7.20);
- improved system stability when using cipher=blowfish128;
- fixed OVPN server handling on reboot (introduced in v7.20);
- improved system stability when using cipher=blowfish128;
- added support for sha384 hmac;
- improved tunnel setup speeds in configurations with large ammount of active OVPN clients;
- properly match GCM hardware acceleration capabilities (introduced in v7.17);
- disable hardware accelerator for GCM on MMIPS CPUs (introduced in v7.18);
- added requirement for server name when exporting configuration;
- disable hardware accelerator for GCM on Alpine CPUs (introduced in v7.17);
- added requirement for server name when exporting configuration;
- added VRF support to OVPN server (server menu now supports multiple entries and previous server configuration is automatically imported);
- improved system stability;
- improved system stability;
- fixed import ovpn config when remote port is missing;
- fixed minor typo in error message;
- added support for pushing routes;
- improved "push-routes" option handling when large amount of routes is specified;
- improved key-renegotiation process;
- improved OVPN configuration file import process;
- improved system stability when using HW encryption on ARM64 devices (introduced in v7.13);
- limit the maximum length for "push-routes" up to 1400 characters;
- improved system stability when using HW encryption on ARM64 devices (introduced in v7.13);
- improved memory allocation during key-renegotiation;
- removed "ping-timer-rem" option from client config file;
- added "tls-auth" option support for imported .ovpn profiles;
- improved system stability;
- do not try to use the "bridge" setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10);
- fixed OVPN server peer-id negotiation;
- fixed session-timeout when using UDP mode;
- improved key renegotiation process;
- include "connect-retry 1" and "reneg-sec" parameters into the OVPN configuration export file;
- properly close OVPN session on the server when client gets disconnected;
- fixed OVPN server peer-id negotiation;
- added initial support for V2 data transfer protocol;
- improved system stability;
- added support for OVPN server configuration export and client configuration import from .ovpn file;
- improved system stability for Tile devices;
- added AES-GCM and multicore encryption support;
- improved server stability;
- improved TLS-related error logging;
- added "CBC" postfix to AES cipher names;
- added "route-nopull" option for client side;
- added hardware acceleration support for IPQ-6010;
- added support for IPv6 tunneling;
- fixed "Called-Station-Id" usage in RADIUS requests;
- added IPv6 support;
- added VRF support for client;
- fixed encryption key renewal process which caused periodic session disconnects;
- improved system stability when hardware acceleration is used on ARM64 devices;
- moved disconnected user logging message from "debug" to "info" topic;
- added "AUTH_FAILED" control message sending;
- fixed "called-station-id" RADIUS attribute value for OVPN server;
- use selected cipher by default when the server does not provide "cipher" option;
- adjusted SHA2 authentication algorithm naming to allow legacy OpenVPN implementations to connect;
- fixed hardware offloading support on CHR;
- fixed memory leak on TILE architecture;
- fixed packet processing on MT7621A;
- fixed server instance not responding to incoming connections after reboot on CHR;
- improved Windows client disconnect procedure in UDP mode;
- improved server stability under continous overload;
- improved service stability when outbound packets are blocked by firewall in UDP mode;
- improved service stability when processing frequent disconnects in UDP mode;
- improved stability when forwarding traffic on TILE;
- moved authentication failure messages to "info" logging level;
- reply with the same IP address that the connection was established to;
- fixed memory leak on TILE architecture;
- fixed packet processing on MT7621A;
- improved Windows client disconnect procedure in UDP mode;
- improved service stability when processing frequent disconnects in UDP mode;
- improved stability when forwarding traffic on TILE;
- added SHA2 authentication algorithm support;
- added hardware acceleration support for IPQ4018/IPQ4019 and AL* series chipsets;
- added option to send disconnect message in UDP mode;
- fixed large option message parsing;
- improved UDP session handling;
- improved memory allocation on Tile in "ethernet" mode;
- improved system stability in high load scenarios;
- fixed route cache entry leak when establishing a new session;
- fixed route cache entry leak when establishing a new session;
- added "use-peer-dns" parameter for OVPN client;
- added "verify-server-certificate" parameter for OVPN client (CVE-2018-10066);
- added "verify-server-certificate" parameter for OVPN client (CVE-2018-10066);
- fixed resource leak on systems with high CPU usage;
- fixed resource leak on systems with high CPU usage;
- added support for "push-continuation";
- added support for topology subnet for IP mode;
- fixed duplicate default gateway presence when receiving extra routes;
- improved performance when receiving too many options;
- fixed address acquisition when ovpn-in interface becomes slave;
- add special exception route for tunnel itself when using add-default-route;
- enable perfect forwarding secrecy support by default;
- fixed compatibility with OpenVPN 2.3.11;
- enable perfect forwarding secrecy support by default;
- allow to add VLANs to ovpn server bindings;
- added support for null crypto;
- fixed ethernet mode;
- fixed TLS renegotiation;
- make bridge mode work with big packets (do not leave extraneous padding);
- fixed require-client-certifcate;
- make it work again;
- allow to specify server via dns name;
- fixed memory leak on disconnects;