The OpenVPN community project team is proud to release OpenVPN
2.5-beta3. Source code and Windows installers can be downloaded from


Debian and Ubuntu packages are available in the official apt repositories:


On RedHat derivatives we recommend using the Fedora Copr repository:


This release includes fixes to MSI packaging and client NCP OCP fallback

OpenVPN 2.5 is a new major release with many new features:

    - Client-specific tls-crypt keys (--tls-crypt-v2)
    - Added support for using the ChaCha20-Poly1305 cipher in the
OpenVPN data channel
    - Improved Data channel cipher negotiation
    - Removal of BF-CBC support in default configuration
    - Asynchronous (deferred) authentication support for auth-pam plugin
    - Deferred client-connect
    - Faster connection setup
    - Netlink support
    - Wintun support
    - IPv6-only operation
    - Improved Windows 10 detection
    - Linux VRF support
    - TLS 1.3 support
    - Support setting DHCP search domain
    - Handle setting of tun/tap interface MTU on Windows
    - HMAC based auth-token support
    - VLAN support
    - Support building of .msi installers for Windows
    - Allow unicode search string in --cryptoapicert option (Windows)
    - Support IPv4 configs with /31 netmasks now
    - New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
    - IPv4-only VPN

More details on these new features as well as a list of deprecated
features and user-visible changes are available in Changes.rst:


For generic help use these support channels:

Official documentation:
Wiki: <>
Forums: <>
User mailing list: <>
User IRC channel: #openvpn at

Please report bugs and ask development questions here:

Bug tracker and wiki: <>
Developer mailing list: <>
Developer IRC channel: #openvpn-devel at (requires
Freenode registration)

Attachment: signature.asc
Description: OpenPGP digital signature

Openvpn-announce mailing list

Reply via email to