OpenVPN 2.5.8 has been released, a package for creating virtual private networks that allows you to organize an encrypted connection between two client machines or provide a centralized VPN server for multiple clients to work simultaneously. The OpenVPN code is distributed under the GPLv2 license, ready-made binary packages are formed for Debian, Ubuntu, CentOS, RHEL and Windows.
The new version allows the default configuration to work with TLS libraries that do not have BF-CBC support (Blowfish in CBC mode). For example, Blowfish is not supported in the OpenSSL 3.0 library, which is initially supported from the OpenVPN 2.6 branch. Previously, having BF-CBC in the list of default supported ciphers resulted in an error even if no BF-CBC was used when negotiating the connection. In addition to fixing bugs, the new version also notes the expansion of the test suite and the addition of the git branch name and commit ID to the line with the version of OpenVPN in builds for Windows.
Source: opennet.ru