make t_server_null 'server alive?' check more robust
socket: Change return types of link_socket_write* to ssize_t
configure: Review use of standard AC macros
configure: Handle libnl-genl and libcap-ng consistent with other libs
Avoid SIGUSR1 to SIGHUP remapping when the configuration is read from stdin
Route: remove incorrect routes on exit
Route: remove incorrect routes on exit
Fix check_addr_clash argument order
Fix check_addr_clash argument order
Make read/write_tun_header static
GHA: Enable t_server_null tests
dco: mark peer as deleted from kernel after receiving CMD_DEL_PEER notification
Remove check for anonymous unions from configure and cmake config
tun: removed unnecessary route installations
GHA: Update dependency Mbed-TLS/mbedtls to v3.6.1
Do not stop reading from file/uri when OPENSSL_STORE_load() returns error
generate_auth_token: simplify code
Various fixes for -Wconversion errors
Fix more of uninitialized struct user_pass local vars
Fix more of uninitialized struct user_pass local vars
Ensures all params are ready before invoking dco_set_peer()
tun: use is_tun_p2p more consistently
tests/unit_tests/openvpn/test_auth_token.c: handle strdup errors
sample/sample-plugins/defer/multi-auth.c: handle strdup errors
src/openvpn/init.c: handle strdup failures
Add test for static-challenge concatenation option
Static-challenge concatenation option
Initialize before use struct user_pass in ui_reader()
Add a test for loading certificate and key using file: URI
Add a test for loading certificate and key to ssl context
Interpret --key and --cert option argument as URI
Protect cached username, password and token on client
Protect cached username, password and token on client
proxy.c: Clear sensitive data after use
proxy.c: Clear sensitive data after use
configure: Try to use pkg-config to detect mbedTLS
GHA: Configure Renovate
configure: Allow to detect git checkout if .git is not a directory
Implement support for AEAD tag at the end
Use a more robust way to get dco-win version
Use a more robust way to get dco-win version
test_pkcs11.c: set file offset to 0 after ftruncate
console_systemd: rename query_user_exec to query_user_systemd
add and send IV_PROTO_DNS_OPTION_V2 flag
Add Ubuntu 24.04 runner to Github Actions
Fix missing spaces in various messages
Fix missing spaces in various messages
Preparing release 2.5.11
preparing release 2.6.12
configure: Switch to C11 by default
Allow trailing \r and \n in control channel message
Allow trailing \r and \n in control channel message
Allow trailing \r and \n in control channel message
t_server_null: multiple improvements and fixes
mbedtls: Warn if --tls-version-min is too low
configure: Try to detect LZO with pkg-config
configure: Try to detect LZO with pkg-config
Http-proxy: fix bug preventing proxy credentials caching
Http-proxy: fix bug preventing proxy credentials caching
configure: Add -Wstrict-prototypes and -Wold-style-definition
t_server_null.sh: Fix failure case
preparing release 2.6.11
interactive.c: Improve access control for gui<->service pipe
interactive.c: Improve access control for gui<->service pipe
Properly handle null bytes and invalid characters in control messages
Properly handle null bytes and invalid characters in control messages
Properly handle null bytes and invalid characters in control messages
Implement server_poll_timeout for socks
Implement server_poll_timeout for socks
Add t_server_null test suite
Remove "experimental" denotation for --fast-io
Remove "experimental" denotation for --fast-io
Fix MBEDTLS_DEPRECATED_REMOVED build errors
mbedtls: Remove support for old TLS versions
Implement Windows CA template match for Crypto-API selector
Implement Windows CA template match for Crypto-API selector
Windows: enforce 'block-local' with WFP filters
test_user_pass: Fix building with --enable-systemd
LZO: do not use lzoutils.h macros
LZO: do not use lzoutils.h macros
Allow to set ifmode for existing DCO interfaces in FreeBSD
Allow to set ifmode for existing DCO interfaces in FreeBSD
Allow the TLS session to send out TLS alerts
Only schedule_exit() once
Only schedule_exit() once
Remove custom TLS 1.0 PRF implementation only used by LibreSSL/wolfSSL
Remove OpenSSL 1.0.2 support
Workaround issue in LibreSSL crashing when enumerating digests/ciphers
Workaround issue in LibreSSL crashing when enumerating digests/ciphers
Support OpenBSD with cmake
configure: update old copy of pkg.m4
Only run coverity scan in OpenVPN/OpenVPN repository
Only run coverity scan in OpenVPN/OpenVPN repository
Repeat the unknown command in errors from management interface
Remove openvpn_snprintf and similar functions
Fix 'binary or' vs 'boolean or' related to server_bridge_proxy_dhcp
Replace macos11 with macos14 in github runners
Replace macos11 with macos14 in github runners
Use topology default of "subnet" only for server mode
Add missing EVP_KDF_CTX_free in ssl_tls1_PRF