The release of OpenVPN 2.5.5 has been prepared, a package for creating virtual private networks that allows for encrypted connections between two client machines or enables the operation of a centralized VPN server for multiple clients simultaneously. The OpenVPN code is distributed under the GPLv2 license, and ready binary packages are formed for Debian, Ubuntu, CentOS, RHEL, and Windows.
In the new version
- The transition to the deprecated category of 64-bit ciphers susceptible to SWEET32 attacks has been postponed until version 2.7.
- The Windows version now defaults to using the network address for the emulated DHCP server, allowing for the use of a /30 subnet needed for connecting to OpenVPN Cloud.
- The Windows builds now include mandatory support for elliptic curve-based algorithms (the ability to build with OpenSSL without elliptic curve support has been discontinued).
- When building with the MSVC compiler, command execution flow protection (CFI, Control-Flow Integrity) has been enabled, along with protection against Spectre class attacks.
- For Windows builds, the loading of the OpenSSL configuration file (%installdir%SSLopenssl.cfg) has been restored, which is necessary for the operation of certain hardware tokens that require special settings for OpenSSL.
Source: opennet.ru
