"-cryptoapicert ISSUER:" where is matched as a substring of the issuer (CA) name in the certificate. Certificate selection string can now specify a partial issuer name string as CryptoAPI (Windows): support issuer name as a selector.
This ensure that only the previously authenticated peer can do trigger renegotiation and complete renegotiations. Dynamic TLS Crypt: When both peers are OpenVPN 2.6.1+, OpenVPN will dynamically create a tls-crypt key that is used for renegotiation.This is mostly a bugfix release with some improvements. The OpenVPN community project team is proud to release OpenVPN 2.6.1. Update included openvpn-gui to 11.39.0.0.Attempting to use the old ovpn-dco with 2.6.2+ will lead to disabling DCO at runtime. The kernel module was renamed to "ovpn-dco-v2.ko" in order to highlight this change and ensure that users and userspace software could easily understand which version is loaded. This is an INCOMPATIBLE change and therefore an ovpn-dco kernel module older than v0323 (commit ID 726fdfe0fa21) will not work anymore and must be upgraded. New control packets flow for data channel offloading on Linux: 2.6.2+ changes the way OpenVPN control packets are handled on Linux when DCO is active, fixing the lockups observed with 2.6.0/2.6.1 under high client connect/disconnect activity.implement byte counter statistics for DCO Windows (client only).
0 kommentar(er)
