If you find a bug in this release, please file a bug report to our Trac bug tracker. The last OpenVPN version that supports Windows XP is 2.3.18, which is downloadable as 32-bit and 64-bit versions. Please note that OpenVPN 2.4 installers will not work on Windows XP. We thus strongly encourage you to always move NSIS installers to a non-user-writeable location before running them. Based on our testing, though, older Windows versions such as Windows 7 might not benefit from these fixes. We accept patches and we do test on OpenBSD 6.0 which comes with LibreSSL, but if newer versions of LibreSSL break API compatibility we do not take responsibility to fix that.Īlso note that Windows installers have been built with NSIS version that has been patched against several NSIS installer code execution and privilege escalation problems. Please note that LibreSSL is not a supported crypto backend. Windows 10/Server 2016/Server 2019 installer (NSIS)Ī summary of the changes is available in Changes.rst, and a full list of changes is available here. Updated OpenSSL and OpenVPN GUI are included in Windows installers.

The I602 Windows installers fix a possible security issue with OpenSSL config autoloading on Windows (CVE-2021-3606).

This release also includes other bug fixes and improvements. It fixes two related security vulnerabilities (CVE-2020-15078) which under very specific circumstances allow tricking a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. The OpenVPN community project team is proud to release OpenVPN 2.4.11.

Installer I604 fixes some small Windows issues. Installer version I603 fixes a bug in the version number as seen by Windows (was 2.5.4, not 2.5.4). Installer version I602 fixes loading of pkcs11 files on Windows. The latter includes several improvements, the most important of which is the ability to import profiles from URLs where available.

Windows installers include updated OpenSSL and new OpenVPN GUI. Windows executable and libraries are now built natively on Windows using MSVC, not cross-compiled on Linux as with earlier 2.5 releases. One of the fixes is to password prompting on windows console when stderr redirection is in use - this breaks 2.5.x on Win11/ARM, and might also break on Win11/amd64. This release include a number of fixes and small improvements. The OpenVPN community project team is proud to release OpenVPN 2.5.4.

Sourcetree app