Note: configure now enables DCO build by default on FreeBSD and Linux.

'-cryptoapicert ISSUER:' where is matched as a substring of the issuer (CA) name in the certificate. Certificate selection string can now specify a partial issuer name string as

CryptoAPI (Windows): support issuer name as a selector.

This ensure that only the previously authenticated peer can do trigger renegotiation and complete renegotiations.

Dynamic TLS Crypt: When both peers are OpenVPN 2.6.1+, OpenVPN will dynamically create a tls-crypt key that is used for renegotiation.

This is mostly a bugfix release with some improvements. The OpenVPN community project team is proud to release OpenVPN 2.6.1. Update included openvpn-gui to 11.39.0.0.Attempting to use the old ovpn-dco with 2.6.2+ will lead to disabling DCO at runtime. The kernel module was renamed to 'ovpn-dco-v2.ko' in order to highlight this change and ensure that users and userspace software could easily understand which version is loaded. This is an INCOMPATIBLE change and therefore an ovpn-dco kernel module older than v0323 (commit ID 726fdfe0fa21) will not work anymore and must be upgraded. New control packets flow for data channel offloading on Linux: 2.6.2+ changes the way OpenVPN control packets are handled on Linux when DCO is active, fixing the lockups observed with 2.6.0/2.6.1 under high client connect/disconnect activity.implement byte counter statistics for DCO Windows (client only).implement byte counter statistics for DCO Linux (p2mp server and client).The OpenVPN community project team is proud to release OpenVPN 2.6.2.

Daemon tools xp