- Support for FreeBSD (#180)
- Support for port-share (#182/#185)
- Support for pre-shared keys (#186)
- Support LDAP anonymous binds (#189)
- Fix
.ovpn
files generation (#190) - Support for external CAs (#192)
- Small Typo fix (#192)
- Fix support for Amazon Linux (#194)
- Client
pull
option (#195) - Allow
remote_host
to be an array of servers (#195) - More robust Shared CA handling (#191, #196)
- Support for Ubuntu 15.04 (#168)
- Support for specifying TLS-Cipher (#169)
- Support for specifying custom certificate expiry (#169)
- Support for README in download configs (#169)
- Support for Tunnelblick configurations (#169)
- Fix certificate revocation in Ubuntu Precise (#169)
- Use concat for ovpn generation (#176)
This will be the last version of version 2.x with new features.
- Support to send ipv6 routes (#153, #154)
- Support for
nobind
param for server in client mode (#156) - Fixing autostart_all behaviour (#163)
- Add systemd support for Debian >= 8.0 (#161)
- Support for Archlinux (#162)
- Support to enable/disable service management(#158)
- Fix installation for older Redhat based systems (#165)
- Add ability to specify custom options for clients (#167)
- Support for systems without
lsb-release
package (#134) - Support for Amazon EC2 OS (#134)
- Move default log path for status log to
/var/log/openvpn
(#139) - Support for
format
parameter (#138) - Ability to configure autostart management on debian (#144)
- Fix ordering in
/etc/default/openvpn
with puppet future parser (#142 - Support for TLS auth when server acts as client (#147)
- Support for customer server options (#147)
- Allow disabling
ns-cert-type server
for server-clients (#147) - Fix pam plugin path on RedHat/CentOS (#148)
- Fix server in client mode (#137)
- Support for removing a client specific conf file (#115)
- Support for
rcvbuf
andsndbuf
(#116) - Fix RedHat and CentOS package selection (#97)
- Support for TLS and x509-name verification (#118)
- Fix unset client cipher producing invalid configs (#129)
- Support to share a CA between multiple server instances (#112)
- Support for systemd (#127)
- Support for setting
up
and/ordown
scripts for clients (#89) - Fixing the permissions of the created directories and files (#90, #92, #94, #102)
- Refactor templates to use instance variables instead of
scope.lookupvar
(#100) - Add client mode server (#100)
- Move CA management into its own defined type (#100)
- Fix LDAP-Support on Debian Wheezy (#103)
- Support for status-version (#108)
- Change layout of downloadable client config to prevent overriding other client configurations when extracting the tarball (#104)
- Add
ns-cert-type server
for server-clients (#109)
- Do not include deprecated
concat::setup
anymore (#71) - Only warn about pam deprecation if it's used (#72)
- Ability to specify a
down
script (#75) - Support for
client-cert-not-required
in server config (#76) - Support for
auth-retry
in client config (#76) - Support for
setenv
in client config (#79) - Support for
setenv_safe
in client config (#79) - Support for
cipher
in client config (#80) - Support for
push route
in client specific config (#80)
- Fix Ubuntu Trusty support (#64)
- Basic support to hand out IPv6 addresses (#66)
- Ability to specify the common name of a server (#65)
- Options for KEY_EXPIRE, CA_EXPIRE, KEY_NAME, KEY_OU, KEY_CN easy-rsa vars. (#58, #70)
- Options for cipher, verb, persist-key, persist-tun server directives. (#58, #70)
- A lot of stuff I don't know anymore 😞