https://www.turnkeylinux.org/updates/openvpn/Recent content from TurnKey GNU/Linuxen-UShttps://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-190/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-190/Mon, 31 Aug 2026 00:00:00 +0800 Changes: Install OpenVPN from Debian repos - v2.6.14. Fix (and updated deprecated) missing Cipher/Auth in server.conf - closes #2064. Update/modernize other default OpenVPN config, including increased key size. A future release will likely move to eliptic curve algorithm; e.g. ecp384r1. Move masquerade firewall config to systemd service rather than Webmin. Allows separation of default/shared TurnKey firewall rules (disabled by default as per all other apps) and OpenVPN specific conf. Include …https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-181/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-181/Tue, 03 Dec 2024 22:57:37 +0000 Changes: v18.1 rebuild - includes latest Debian & TurnKey packages. Update/fix TLS config - closes #1996. [Stefan Davis ] Configuration console (confconsole) - v2.1.6+2+ge808780: Fix password quoting in mail relay plugin - support SASL passwords including spaces - closes #1994. Bugfix broken DNS-01 Let's Encrypt challenge - closes #1876 & #1895. Fixed in v2.1.5 - already included in some appliances. Let's Encrypt/Dehydrated - bugfix cron failure - closes #1962. General dehydrated-wrapper code …https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-180/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-180/Fri, 22 Mar 2024 01:20:31 +0000 Changes: Helper scripts updated to match upstream changes from easy-rsa. [Anton Pyrogovskyi ] Helper script renamed: 'openvpn-revoke' -> 'openvpn-removeclient' - to make it's intention clearer (and consistent with Wireguard appliance) closes #1347. [Anton Pyrogovskyi ] Landing page notes updated to match changes. [Anton Pyrogovskyi ] lighttpd config updated to match upstream changes. [Anton Pyrogovskyi ] Shell scripts linted. [Anton Pyrogovskyi ] Ensure hashfile includes URL to public key - …https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-171/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-171/Fri, 22 Mar 2024 01:13:57 +0000 Changes: Updated all Debian packages to latest. [ autopatched by buildtasks ] Patched bugfix release. Closes #1734. [ autopatched by buildtasks ] Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-170-0/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-170-0/Fri, 22 Mar 2024 01:10:20 +0000 Changes: Updated all relevant Debian packages to Bullseye/11 versions Close #1522 (set timezone in inithook) Close #1328 (initfence not working on aws) Note: Please refer to turnkey-core's 17.0 changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-161/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-161/Mon, 03 May 2021 04:48:35 +0000 Changes: Rebuilt against latest Debian Buster Note: Please refer to turnkey-core's 16.1 changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-160/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-160/Tue, 20 Oct 2020 22:31:07 +0000 Changes: Latest Debian Buster package version of OpenVPN and other components. Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-151/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-151/Tue, 12 Feb 2019 05:27:52 +0000 Changes: extend default_crl_days to 1095 (i.e. CRL expiry = 3 years) - closes #1291 Update openvpn-addclient script to current standards, include 'remote-cert-tls server' & 'auth-nocache' - closes #1264. [ https://github.com/AlejandroBOFH ] Refacter openvpn-addclient script to accept '--no-authcache' as an optional argument so 'auth-nocache' is optional rather than being forced. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-150/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-150/Thu, 18 Oct 2018 21:22:14 +0000 Changes: Latest Debian Stretch package version of OpenVPN and other components. Workaround EasyRSA bug by providing symlink - see further discussion: https://github.com/turnkeylinux-apps/openvpn/pull/22#discussion_r221468138 closes #1200. Stefan Davis & Anton Pyrogovskyi ] Create /dev/net/tun device when running within a container - via addition of openvpn-tun.service - closes #1011. [ Anton Pyrogovskyi & Jeremy Davis ] Note: Please refer to turnkey-core's changelog for changes common to all …https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-142/https://www.turnkeylinux.org/updates/new-turnkey-openvpn-version-142/Mon, 30 Jul 2018 05:28:19 +0000 Changes: Support encrypted private key (optional). Thanks to @JelteF (Jelte Fennema on GitHub) for initial PR. Fix addclient private subnet problem [#772]. Thanks to @swamilad (on GitHub) for reporting issue & posting workaround. Fix OpenVPN trademark compliance (updated readme & logo) [#774]. Fix /etc/cron.hourly/openvpn-profiles-delexpired cronjob [#800]. Thanks to @ainkinen (Antti-Jussi Inkinen on GitHub) for reporting issue & providing PR. Installed security updates. Note: Please refer to …https://www.turnkeylinux.org/updates/openvpn/new-turnkey-openvpn-version-141/https://www.turnkeylinux.org/updates/openvpn/new-turnkey-openvpn-version-141/Thu, 14 Apr 2016 09:21:11 +0000 Changes: Fix LigHTTPd bug in 15regen-sllcert (#512). Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/openvpn/new-turnkey-openvpn-version-140/https://www.turnkeylinux.org/updates/openvpn/new-turnkey-openvpn-version-140/Tue, 15 Sep 2015 13:59:56 +0000 Changes: Latest Debian Jessie package version of OpenVPN and other components. Easy-RSA installed from Debian repos: Now packaged separately to openVPN Hardened default lighttpd SSL settings Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. Links Release meta-files (signature, manifest)https://www.turnkeylinux.org/updates/openvpn/new-turnkey-openvpn-version-130/https://www.turnkeylinux.org/updates/openvpn/new-turnkey-openvpn-version-130/Mon, 28 Oct 2013 19:17:11 +0000 Changes: Initial public release of TurnKey OpenVPN. OpenVPN related: Inithook supporting server, gateway, client profiles (convenience). Custom openvpn-addclient script generating client profile (convenience). Expiring obfuscated profile download urls with QR code (convenience, security). Supports SSL/TLS certificates for auth and key exchange (security). Configured to drop privilages (security). Configured to run in chroot jail dedicated to CRL (security). Configured to use TLS-Auth HMAC …