Clarify operator precedence in a & b ? c : d
openvpnserv: Remove redundant bit-wise operation
test_buffer: Add test for buf_null_terminate
management: add base64 multi-line input for passwords
management: add base64 multi-line input for passwords
push: Make prepare_push_reply return void
test_packet_id: Add a check after malloc to ensure value is valid
win: Fix nrpt_dnssec flag handling
win: Fix nrpt_dnssec flag handling
crypto_backend: Remove md_full
mtcp: Remove noop statement in multi_tcp_process_outgoing_link_ready
Remove various unused structs
openvpnmsica: Fix setting of iTicks in schedule_adapter_delete
openvpnmsica: Fix setting of iTicks in schedule_adapter_delete
openvpnmsica: Fix setting of iTicks in schedule_adapter_delete
Do not access internals of ASN1_INTEGER to print hex of serial
Do not access internals of ASN1_INTEGER to print hex of serial
doc: Remove some explanations for pre-2.3 configurations
doc: Remove some explanations for pre-2.3 configurations
OpenSSL 4.0: Make X509 objects const
OpenSSL 4.0: Make X509 objects const
Add unit test for printing various details of certificates
Add unit test for printing various details of certificates
Rename key* to privkey* in cert_data.h
Rename key* to privkey* in cert_data.h
Use ASN1_BIT_STRING_get_bit to check for netscape certificate usage
Use ASN1_BIT_STRING_get_bit to check for netscape certificate usage
Update --learn-address man page with ipv6 information
Update --learn-address man page with ipv6 information
OpenVPN Release 2.7.1
ssl_ncp: Fix type of "found" parameter of check_pull_client_ncp
buffer: Avoid sign-compare warnings
wfp_block: Avoid sign-compare warning with Fwpm* return types
Add an optional username-only flag for auth-user-pass
Add an optional username-only flag for auth-user-pass
socket: restore per-connection lport override over global default
socket: restore per-connection lport override over global default
tests: skip test execution when cross-compiling
tests: skip test execution when cross-compiling
Change type of option flag from unsigned int to uint64_t
auth_token: Clean up type handling in verify_auth_token and its UT
Increase default size of internal hash maps to 4 * --max-clients
Increase default size of internal hash maps to 4 * --max-clients
Use const specifices in extract_x509_field_ssl
Use const specifices in extract_x509_field_ssl
Do not support tls_ctx_set_cert_profile on AWS-LC
Do not support tls_ctx_set_cert_profile on AWS-LC
ssl_verify_openssl: use official ASN1_STRING_ API
ssl_verify_openssl: use official ASN1_STRING_ API
ssl_verify_openssl: Clean up extract_x509_extension
Use openssl_err_t typedef to deal with difference between TLS libraries
Use openssl_err_t typedef to deal with difference between TLS libraries
GHA: Cache built crypto libraries
GHA: Cache built crypto libraries
ssl_mbedtls: Avoid conversion and sign-compare warnings
Remove unnecessary OpenSSL init and cleanup commands in unit tests
Remove unnecessary OpenSSL init and cleanup commands in unit tests
crypto: Change cipher_kt_*_size to return unsigned instead of int
doc: fix typo with --ingore-unknown-option
doc: improve Windows-specific options section
doc: fix typo with --ingore-unknown-option
doc: improve Windows-specific options section
systemd: Change LimitNPROC to TasksMax and increase limit
systemd: Change LimitNPROC to TasksMax and increase limit
Show version and double check we use the right TLS library in Github Actions
GHA: Install aws-lc under /opt/aws-lc
Show version and double check we use the right TLS library in Github Actions
GHA: Install aws-lc under /opt/aws-lc
AWS-LC: Add missing return and cast in ssl_tls1_PRF
AWS-LC: Add missing return and cast in ssl_tls1_PRF
Add siphash reference implementation
error: Use SOCKET_UNDEFINED instead of -1 to avoid sign error on Windows
tls_crypt: Avoid a sign-compare warning
socket: Avoid sign-compare issue by comparing before assignment
DNS/DHCP: Make _len attributes consistently unsigned
Win32: Make interface index DWORD consistently
tun: Avoid sign-compare issues in tun_read_queue
ssl_verify_openssl: Clean up extract_x509_extension
openvpnmscia: Improve check of vsnprintf return value
doc: fix client-nat syntax and examples
doc: fix client-nat syntax and examples
doc: fix client-nat syntax and examples
Fix various sign-compare warnings due to write return value
Use USER_PASS_LEN for private key password buffer size
Use USER_PASS_LEN for private key password buffer size
route: Fix type of rgi_needed variables
openvpnserv: Improve sanity check for addr_len in HandleWINSConfigMessage
management: stop bytecount on client disconnection
push: Improve check of vsnprintf return value
cryptoapi: Change signature of parse_hexstring to match code
win32-util: Handle return value from WideCharToMultiByte better
vcpkg-ports: Review pkcs11-helper port
vcpkg-ports: Review pkcs11-helper port
argv: Fix one type to avoid sign-compare warning
ssl_openssl: Use correct return type for RSA_size
ssl_ncp: Fix length check in mutate_ncp_cipher_list
Enable -Wsign-compare
buffer: Add checked_snprintf function and use it in the code
buffer: Add checked_snprintf function and use it in the code
buffer: Add BLENZ macro that returns size_t and use it where required