02-26-2021 , 12:59 AM
https://openvpn.net/community-downloads/ OpenVPN - Released 24 February, 2021
The OpenVPN community project team is proud to release OpenVPN 2.5.1. It includes several bug fixes and improvements as well as updated OpenSSL and OpenVPN GUI for Windows. Source tarball (gzip)https://swupdate.openvpn.org/community/r...5.1.tar.gz
GnuPG Signature
Source tarball (xz) https://swupdate.openvpn.org/community/r...5.1.tar.xz
GnuPG Signature
Source zip https://swupdate.openvpn.org/community/r...-2.5.1.zip
GnuPG Signature
Windows 32-bit MSI installer https://swupdate.openvpn.org/community/r...01-x86.msi
GnuPG Signature
Windows 64-bit MSI installer https://swupdate.openvpn.org/community/r...-amd64.msi
GnuPG Signature
Overview of changes since OpenVPN 2.4
Faster connections
Connections setup is now much faster
Crypto specific changes
ChaCha20-Poly1305 cipher in the OpenVPN data channel (Requires OpenSSL 1.1.0 or newer)
Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
Client-specific tls-crypt keys (–tls-crypt-v2)
Improved Data channel cipher negotiation
Removal of BF-CBC support in default configuration (see below for possible incompatibilities)
Server-side improvements
HMAC based auth-token support for seamless reconnects to standalone servers or a group of servers.
Asynchronous (deferred) authentication support for auth-pam plugin
Asynchronous (deferred) support for client-connect scripts and plugins
Network-related changes
Support IPv4 configs with /31 netmasks now
802.1q VLAN support on TAP servers
IPv6-only tunnels
New option –block-ipv6 to reject all IPv6 packets (ICMPv6)
Linux-specific features
VRF support
Netlink integration (OpenVPN no longer needs to execute ifconfig/route or ip commands)
Windows-specific features
Wintun driver support, a faster alternative to tap-windows6
Setting tun/tap interface MTU
Setting DHCP search domain
Allow unicode search string in –cryptoapicert option
EasyRSA3, a modern take on OpenVPN CA management
MSI installer Digital Signature ( Open VPN Inc.)
The OpenVPN community project team is proud to release OpenVPN 2.5.1. It includes several bug fixes and improvements as well as updated OpenSSL and OpenVPN GUI for Windows. Source tarball (gzip)https://swupdate.openvpn.org/community/r...5.1.tar.gz
GnuPG Signature
Source tarball (xz) https://swupdate.openvpn.org/community/r...5.1.tar.xz
GnuPG Signature
Source zip https://swupdate.openvpn.org/community/r...-2.5.1.zip
GnuPG Signature
Windows 32-bit MSI installer https://swupdate.openvpn.org/community/r...01-x86.msi
GnuPG Signature
Windows 64-bit MSI installer https://swupdate.openvpn.org/community/r...-amd64.msi
GnuPG Signature
Overview of changes since OpenVPN 2.4
Faster connections
Connections setup is now much faster
Crypto specific changes
ChaCha20-Poly1305 cipher in the OpenVPN data channel (Requires OpenSSL 1.1.0 or newer)
Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
Client-specific tls-crypt keys (–tls-crypt-v2)
Improved Data channel cipher negotiation
Removal of BF-CBC support in default configuration (see below for possible incompatibilities)
Server-side improvements
HMAC based auth-token support for seamless reconnects to standalone servers or a group of servers.
Asynchronous (deferred) authentication support for auth-pam plugin
Asynchronous (deferred) support for client-connect scripts and plugins
Network-related changes
Support IPv4 configs with /31 netmasks now
802.1q VLAN support on TAP servers
IPv6-only tunnels
New option –block-ipv6 to reject all IPv6 packets (ICMPv6)
Linux-specific features
VRF support
Netlink integration (OpenVPN no longer needs to execute ifconfig/route or ip commands)
Windows-specific features
Wintun driver support, a faster alternative to tap-windows6
Setting tun/tap interface MTU
Setting DHCP search domain
Allow unicode search string in –cryptoapicert option
EasyRSA3, a modern take on OpenVPN CA management
MSI installer Digital Signature ( Open VPN Inc.)