openvpn: upgrade 2.5.8 -> 2.6.0

New features and improvements in 2.6.0 compared to 2.5.8:
 - Data Channel Offload (DCO) kernel acceleration support for Windows,
   Linux, and FreeBSD.
 - OpenSSL 3 support.
 - Improved handling of tunnel MTU, including support for pushable MTU.
 - Outdated cryptographic algorithms disabled by default, but there are
   options to override if necessary.
 - Reworked TLS handshake, making OpenVPN immune to replay-packet state
   exhaustion attacks.
 - Added --peer-fingerprint mode for a more simplistic certificate setup
   and verification.
 - Added Pre-Logon Access Provider support to OpenVPN GUI for Windows.
 - Improved protocol negotiation, leading to faster connection setup.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Petr Gotthard 2023-02-23 18:25:27 +00:00 committed by Khem Raj
parent 747684d460
commit 2c1b55a059

View File

@ -2,8 +2,8 @@ SUMMARY = "A full-featured SSL VPN solution via tun device."
HOMEPAGE = "https://openvpn.net/"
SECTION = "net"
LICENSE = "GPL-2.0-only"
LIC_FILES_CHKSUM = "file://COPYING;md5=b76abd82c14ee01cc34c4ff5e3627b89"
DEPENDS = "lzo openssl iproute2 ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
LIC_FILES_CHKSUM = "file://COPYING;md5=3170e982baae61dbb8de963317d1ac94"
DEPENDS = "lzo lz4 openssl iproute2 libcap-ng ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
inherit autotools systemd update-rc.d pkgconfig
@ -14,7 +14,7 @@ SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \
UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads"
SRC_URI[sha256sum] = "a6f315b7231d44527e65901ff646f87d7f07862c87f33531daa109fb48c53db2"
SRC_URI[sha256sum] = "ebec933263c9850ef6f7ce125e2f22214be60b1cbb8ccff18892643fe083ae8f"
# CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn.
CVE_CHECK_IGNORE += "CVE-2020-7224 CVE-2020-27569"