Implement support for AEAD tag at the end
Use a more robust way to get dco-win version
Use a more robust way to get dco-win version
test_pkcs11.c: set file offset to 0 after ftruncate
console_systemd: rename query_user_exec to query_user_systemd
add and send IV_PROTO_DNS_OPTION_V2 flag
Add Ubuntu 24.04 runner to Github Actions
Fix missing spaces in various messages
Fix missing spaces in various messages
Preparing release 2.5.11
preparing release 2.6.12
configure: Switch to C11 by default
Allow trailing \r and \n in control channel message
Allow trailing \r and \n in control channel message
Allow trailing \r and \n in control channel message
t_server_null: multiple improvements and fixes
mbedtls: Warn if --tls-version-min is too low
configure: Try to detect LZO with pkg-config
configure: Try to detect LZO with pkg-config
Http-proxy: fix bug preventing proxy credentials caching
Http-proxy: fix bug preventing proxy credentials caching
configure: Add -Wstrict-prototypes and -Wold-style-definition
t_server_null.sh: Fix failure case
preparing release 2.6.11
interactive.c: Improve access control for gui<->service pipe
interactive.c: Improve access control for gui<->service pipe
Properly handle null bytes and invalid characters in control messages
Properly handle null bytes and invalid characters in control messages
Properly handle null bytes and invalid characters in control messages
Implement server_poll_timeout for socks
Implement server_poll_timeout for socks
Add t_server_null test suite
Remove "experimental" denotation for --fast-io
Remove "experimental" denotation for --fast-io
Fix MBEDTLS_DEPRECATED_REMOVED build errors
mbedtls: Remove support for old TLS versions
Implement Windows CA template match for Crypto-API selector
Implement Windows CA template match for Crypto-API selector
Windows: enforce 'block-local' with WFP filters
test_user_pass: Fix building with --enable-systemd
LZO: do not use lzoutils.h macros
LZO: do not use lzoutils.h macros
Allow to set ifmode for existing DCO interfaces in FreeBSD
Allow to set ifmode for existing DCO interfaces in FreeBSD
Allow the TLS session to send out TLS alerts
Only schedule_exit() once
Only schedule_exit() once
Remove custom TLS 1.0 PRF implementation only used by LibreSSL/wolfSSL
Remove OpenSSL 1.0.2 support
Workaround issue in LibreSSL crashing when enumerating digests/ciphers
Workaround issue in LibreSSL crashing when enumerating digests/ciphers
Support OpenBSD with cmake
configure: update old copy of pkg.m4
Only run coverity scan in OpenVPN/OpenVPN repository
Only run coverity scan in OpenVPN/OpenVPN repository
Repeat the unknown command in errors from management interface
Remove openvpn_snprintf and similar functions
Fix 'binary or' vs 'boolean or' related to server_bridge_proxy_dhcp
Replace macos11 with macos14 in github runners
Replace macos11 with macos14 in github runners
Use topology default of "subnet" only for server mode
Add missing EVP_KDF_CTX_free in ssl_tls1_PRF
Change default of "topology" to "subnet"
forked-test-driver: Show test output always
tests: fork default automake test-driver
Remove/combine redundant call of EVP_CipherInit before EVP_CipherInit_Ex
Match ifdef for get_sigtype function with if ifdef of caller
crypto_backend: fix type of enc parameter
misc.c: remove unused code
misc.c: remove unused code
script-options.rst: Update ifconfig_* variables
script-options.rst: Update ifconfig_* variables
Add bracket in fingerprint message and do not warn about missing verification
Add bracket in fingerprint message and do not warn about missing verification
Fix snprintf/swnprintf related compiler warnings
phase2_tcp_server: fix Coverity issue 'Dereference after null check'
phase2_tcp_server: fix Coverity issue 'Dereference after null check'
Use snprintf instead of sprintf for get_ssl_library_version
Use snprintf instead of sprintf for get_ssl_library_version
documentation: make section levels consistent
documentation: make section levels consistent
samples: Update sample configurations
samples: Update sample configurations
Preparing release 2.5.10
interactive.c: Fix potential stack overflow issue
preparing release 2.6.10
Disable DCO if proxy is set via management
Disable DCO if proxy is set via management
interactive.c: Fix potential stack overflow issue
interactive.c: Fix potential stack overflow issue
interactive.c: disable remote access to the service pipe
interactive.c: disable remote access to the service pipe
interactive.c: disable remote access to the service pipe
GHA: general update March 2024
GHA: general update March 2024
win32: Enforce loading of plugins from a trusted directory
win32: Enforce loading of plugins from a trusted directory
win32: Enforce loading of plugins from a trusted directory
Update Copyright statements to 2024
Update Copyright statements to 2024