Securepoint SSL VPN Client / News: Recent posts

Security: Update to OpenSSL 3.0.13 and OpenVPN 2.6.10
Security: Update of TAP-driver to 9.27.0 (CVE-2024-1305)

Please Note: Windows 7 will no longer recive TAP-Driver updates as the support from microsoft and openvpn has ended

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.... read more

Security: Update to OpenSSL 3.2.0 and OpenVPN 2.6.8
Bugfix: Reinstalling the client would delete all connections

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.

Two values are possible:

CWINVERSION=7
CWINVERSION=10... read more

Security Bugfix: Bug fixed that could lead to extended privileges (local privilege escalation) when installing or repairing the ssl vpn client
Bugfix: The option "use interact" was not saved correctly

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.... read more

Feature: Inline-Certificates are now supported in the Client
Bugfix: Usage of script-security for values 0 and 1 will not throw an error
Bugfix: If the start parameter "-noSave" is appended to the filename, (re-)enabling "Start on windows startup" will now add it to the startup-arguments
Security: OpenVPN 2.5.8 with OpenSSL 1.1.1t

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.... read more

Feature: On startup the client will now check for a newer version and offer a direct download link
Feature: The msi-installer will now install windows 10 drivers by default

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.... read more

Security: OpenSSL update (CVE-2022-0778)
Security: OpenVPN update (CVE-2022-0547)
Bugfix: Fixing import of utm roadwarrior configurations
Bugfix: Fixing import of ovpn-files with special characters
Bugfix: Fixing import of ovpn-files with tls-crypt keyword

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.... read more

Feature: The default target of the msi-file is now Windows 10 instead of Windows 7.

Maintenance: New code signing certificate

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.

Two values are possible:... read more

Security: OpenSSL config autoloading on Windows is disabled (CVE-2021-3606).
Security: OpenVPN 2.5.3 with custon security patch(no script-security > 1).

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.... read more

Maintenance: Add new TAP driver for Windows 10.

Hint
Please read the important security changes in 2.0.33 release.

Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.

Two values are possible:

CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 7 will be installed!... read more

Bugfix: Trailing protocol specification on a remote entry handled now correctly. On multiple remote entries the last entry sets the protocol. Please keep this in mind on mixed protocols.

Security: Install only per maschine is now possible.
Security: Update to OpenVPN 2.5.2 with custon security patch(no script-security > 1).

Security: The client now calculate a checksum of the configuration content. Thus it is not possible to make unauthorized modifications.
To calc and set the checksum administrator permissions are required. Additionally the configuation will be started from a secure directory.... read more

Security: Deny the execution of custom configuration scripts, which needed a script-security higher than 1. If you need this feature, please use the 2.0.31 client.

Maintenance: OpenVPN was updated to version 2.5.1
Maintenance: OpenSSL was updated to version 1.1.1k

Maintenance: TAP driver certificate was updated.

Bugfix: Removing a connection doesn't execute any other connection's script anymore.
Bugfix: On an empty user name, the error script is only executed once.
Bugfix: Fix credentials handling when opening an OTP connection.
Bugfix: Fix show stored credentials icon.

Maintenance: OpenVPN was updated to version 2.4.9.
Maintenance: TAP driver certificate was updated.

Bugfix: It's not possible anymore to delete a connection in non-managed mode.
Bugfix: Next and back buttons now work correctly in new connection wizard.
Bugfix: Fix TAP device installation loop error on connect.

Feature: New setting: Send to tray after a successful connect.
Feature: New command line argument(-disconnect) to disconnect a single client connection.

Feature: Close icon replaced with send to tray icon.

Bugfix: Driver signing is now valid on Windows 10 1903.

Maintenance: OpenVPN was updated to version 2.4.8.
Maintenance: TAP driver was updated to version 9.24.2.

Maintenance: Added new signed Tap-Installer for Windows 10.
Maintenance: New code signing certificate(sha256) for executable files.

Bugfix: Installer: English: Installation error, see issue (https://sourceforge.net/p/securepoint/discussion/1029766/thread/0c9010b789/) for more informations.

Maintenance: Added newest OpenVPN 2.4.6.
Maintenance: Added new signed Tap-Installer(This may require an user confirmation on Windows 7 installations)

Feature: New connection-option added: "block-outside-dns".
Feature: Paths in the portable client are now saved relative to the folder location.
Feature: The portable client now has a placeholder ($appDir) for the application path when using scripts.

Bugfix: Scripts can now contain spaces in their path. Example: cmd /C "C:/Foo bar baz/foobar.bat"
Bugfix: The portable client now correctly recognizes the C++-Redistributable.
Bugfix: The TAP-driver-name was corrected in the setup.
Bugfix: Updates are now correctly detected and displayed.... read more

Bugfix: Fixed empty and invalid configuration name.
Bugfix: Fixed values being cached in the import-menu.
Bugfix: When using "Startup on windows startup" option, language is now set correctly.
Maintenance: Added newest OpenVPN 2.4.3.

Bugfix: Added umlaut compatability for Windows-Usernames.
Bugfix: Fixed client crashing when the taskbar was located at the top of the screen.
Bugfix: Status now shows correctly in the tray.
Bugfix: Fixed values being cached in the export-menu.
Bugfix: Fixed option "Popup on startup" preventing the DH-key-note.
Bugfix: When using "Startup on windows startup", language is now set correctly.
Bugfix: When the option is selected, Windows will now be prevented from shutting down.

Changes:
- Small DH key hint
- New tap driver certificate (Windows 10 - 1607 Anniversary Update)

• Source now scaned by Coverity Source Scan
• Added warning when connecting to a server using a dh key less than 1024 bit in length
• Added new cli parameter "-noSave". Disables checkboxes to save credentials.
• Added check for Visual C++ 2013 Redistributable in Setup
• Added latest OpenVPN 2.3.11
• Added latest OpenSSL 1.0.1t
• Fixed refresh of the connection list on import
• Added message when crypted config is imported without giving a password
• Fixed umlaut-handling in user credentials

Changes:

• Minor fixes
• OpenVPN(2.3.10)
• OpenSSL(1.0.1s)
• TAP-Driver(9.21.2)