Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-20 Thread Christian Hesse
Samuli Seppänen on Mon, 2020/04/20 09:13: > On a related note: I think we should consider stopping the distribution > of the security list's public key from our webservers and just instruct > people to fetch the key from the keyservers and refresh it if they have > trouble. Key server operation

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-20 Thread Samuli Seppänen
Hi, Il 19/04/20 13:03, Gert Doering ha scritto: > Hi, > > On Sat, Apr 18, 2020 at 02:30:46PM +0200, Simon Matter wrote: >> A long time ago I was asking them to also show MD5/SHAXXX checksums so I >> can easily verify the downloads. My request was turned down for reasons I >> still don't

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-19 Thread Gert Doering
Hi, On Sat, Apr 18, 2020 at 02:30:46PM +0200, Simon Matter wrote: > A long time ago I was asking them to also show MD5/SHAXXX checksums so I > can easily verify the downloads. My request was turned down for reasons I > still don't understand. At least it could give us some peace of mind when >

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-18 Thread Jonathan K. Bullard
Hi, On Fri, Apr 17, 2020 at 9:22 PM Antonio Quartulli wrote: > > Hi, > > On 18/04/2020 00:41, Jonathan K. Bullard wrote: > > Hi, > > > > On Fri, Apr 17, 2020 at 5:35 PM Gert Doering wrote: > >> > >> ... the new subkeys are just a few weeks old, so we need to publish > >> a new key bundle with

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-18 Thread Simon Matter via Openvpn-devel
> Hi, > > On Fri, Apr 17, 2020 at 5:35 PM Gert Doering wrote: >> >> ... the new subkeys are just a few weeks old, so we need to publish >> a new key bundle with the new subkeys. > > So until a new security-keys-2020.asc (or whatever you will call it) > is published on the OpenVPN website, I can't

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-17 Thread Antonio Quartulli
Hi, On 18/04/2020 00:41, Jonathan K. Bullard wrote: > Hi, > > On Fri, Apr 17, 2020 at 5:35 PM Gert Doering wrote: >> >> ... the new subkeys are just a few weeks old, so we need to publish >> a new key bundle with the new subkeys. > > So until a new security-keys-2020.asc (or whatever you will

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-17 Thread Jonathan K. Bullard
Hi, On Fri, Apr 17, 2020 at 5:35 PM Gert Doering wrote: > > ... the new subkeys are just a few weeks old, so we need to publish > a new key bundle with the new subkeys. So until a new security-keys-2020.asc (or whatever you will call it) is published on the OpenVPN website, I can't verify the

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-17 Thread Christian Hesse
"Jonathan K. Bullard" on Fri, 2020/04/17 17:16: > IHi, > > On Fri, Apr 17, 2020 at 8:47 AM Samuli Seppänen wrote: > > > > The OpenVPN community project team is proud to release OpenVPN 2.4.9. It > > can be downloaded from here: > > > > > > I'm

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-17 Thread Gert Doering
Hi, On Fri, Apr 17, 2020 at 05:16:56PM -0400, Jonathan K. Bullard wrote: > On Fri, Apr 17, 2020 at 8:47 AM Samuli Seppänen wrote: > > > > The OpenVPN community project team is proud to release OpenVPN 2.4.9. It > > can be downloaded from here: > > > > >

Re: [Openvpn-devel] OpenVPN 2.4.9 released

2020-04-17 Thread Jonathan K. Bullard
IHi, On Fri, Apr 17, 2020 at 8:47 AM Samuli Seppänen wrote: > > The OpenVPN community project team is proud to release OpenVPN 2.4.9. It > can be downloaded from here: > > I'm having trouble verifying 2.4.9.tar.gz with GPG. I'm pretty clueless about

[Openvpn-devel] OpenVPN 2.4.9 released

2020-04-17 Thread Samuli Seppänen
The OpenVPN community project team is proud to release OpenVPN 2.4.9. It can be downloaded from here: This is primarily a maintenance release with bugfixes and improvements. This release also fixes a security issue (CVE-2020-11810, trac #1272) which