Releases: Securepoint/openvpn-client
Securepoint OpenVPN 2.0.41
Security: Update to OpenSSL 3.2.0 and OpenVPN 2.6.8
Bugfix: Reinstalling the client would delete all connections
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 10 will be installed!
Example(en, Windows 7, executed in an administrative shell):
msiexec /qn /i openvpn-client-installer-2.0.41.msi TRANSFORMS=":en-us.mst" CWINVERSION=7
For further examples please see the msi-installer-examples-2.0.41 file.
Securepoint OpenVPN 2.0.40
Security Bugfix: Bug fixed that could lead to extended privileges (local privilege escalation) when installing or repairing the ssl vpn client
Bugfix: The option "use interact" was not saved correctly
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 10 will be installed!
Example(en, Windows 7, executed in an administrative shell):
msiexec /qn /i openvpn-client-installer-2.0.40.msi TRANSFORMS=":en-us.mst" CWINVERSION=7
For further examples please see the msi-installer-examples-2.0.40 file.
Securepoint OpenVPN 2.0.39
Feature: Inline-Certificates are now supported in the Client
Bugfix: Usage of script-security for values 0 and 1 will not throw an error
Bugfix: If the start parameter "-noSave" is appended to the filename, (re-)enabling "Start on windows startup" will now add it to the startup-arguments
Security: OpenVPN 2.5.8 with OpenSSL 1.1.1t
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 10 will be installed!
Example(en, Windows 7, executed in an administrative shell):
msiexec /qn /i openvpn-client-installer-2.0.39.msi TRANSFORMS=":en-us.mst" CWINVERSION=7
For further examples please see the msi-installer-examples-2.0.39 file.
Securepoint OpenVPN 2.0.38
Feature: On startup the client will now check for a newer version and offer a direct download link
Feature: The msi-installer will now install windows 10 drivers by default
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 10 will be installed!
Example(en, Windows 7, executed in an administrative shell):
msiexec /qn /i openvpn-client-installer-2.0.38.msi TRANSFORMS=":en-us.mst" CWINVERSION=7
For further examples please see the msi-installer-examples-2.0.38 file.
Securepoint OpenVPN 2.0.36
Feature: The default target of the msi-file is now Windows 10 instead of Windows 7.
Maintenance: New code signing certificate
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 10 will be installed!
Example(en, Windows 10):
msiexec /qn /i openvpn-client-installer-2.0.36.msi TRANSFORMS=":en-us.mst" CWINVERSION=10
For further examples please see the msi-installer-examples-2.0.36 file.
Securepoint OpenVPN 2.0.37
Security: OpenSSL update (CVE-2022-0778)
Security: OpenVPN update (CVE-2022-0547)
Bugfix: Fixing import of utm roadwarrior configurations
Bugfix: Fixing import of ovpn-files with special characters
Bugfix: Fixing import of ovpn-files with tls-crypt keyword
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 10 will be installed!
Example(en, Windows 10):
msiexec /qn /i openvpn-client-installer-2.0.37.msi TRANSFORMS=":en-us.mst" CWINVERSION=10
For further examples please see the msi-installer-examples-2.0.37 file.
Securepoint OpenVPN 2.0.35
Security: OpenSSL config autoloading on Windows is disabled (CVE-2021-3606).
Security: OpenVPN 2.5.3 with custon security patch(no script-security > 1).
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 7 will be installed!
Example(en, Windows 10):
msiexec /qn /i openvpn-client-installer-2.0.35.msi TRANSFORMS=":en-us.mst" CWINVERSION=10
For further examples please see the msi-installer-examples-2.0.35 file.
Securepoint OpenVPN 2.0.34
Maintenance: Add new TAP driver for Windows 10.
Hint
Please read the important security changes in 2.0.33 release.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
CWINVERSION=7
CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 7 will be installed!
Example(en, Windows 10):
msiexec /qn /i openvpn-client-installer-2.0.34.msi TRANSFORMS=":en-us.mst" CWINVERSION=10
For further examples please see the msi-installer-examples-2.0.34 file.
Securepoint OpenVPN 2.0.33
Bugfix: Trailing protocol specification on a remote entry handled now correctly. On multiple remote entries the last entry sets the protocol. Please keep this in mind on mixed protocols.
Security: Install only per maschine is now possible.
Security: Update to OpenVPN 2.5.2 with custon security patch(no script-security > 1).
Security: The client now calculate a checksum of the configuration content. Thus it is not possible to make unauthorized modifications.
To calc and set the checksum administrator permissions are required. Additionally the configuation will be started from a secure directory.
Important
OpenVPN will be executed with the configuration of the secured directory. If the default installation directory is changed to a non-privileged directory it is possible that this security features has no effect!
Hint
This new security feature affects only the installed client not the portable version.
Please note!
With the latest Windows version 21H1(update started in may 2021) it is possible that the tap driver of the 2.0.33 will be rejected, because Microsoft has been ended the support for root certificates with kernel-mode signing in the Microsoft Trusted Root program.
Thus drivers with cross-signed certificates has lost their trust status.
We are currently working on this issue and releasing the new version 2.0.34 as soon as possible.
Important msi installer note!
If you do the install by using the msi installer it is all-important to specify the property CWINVERSION as msiexec argument which specify the windows version.
Two values are possible:
- CWINVERSION=7
- CWINVERSION=10
This property controls the installation of the tap driver. If no property is specified the tap driver for Windows 7 will be installed!
Example(en, Windows 10):
msiexec /qn /i openvpn-client-installer-2.0.33.msi TRANSFORMS=":en-us.mst" CWINVERSION=10
For further examples please see the msi-installer-examples-2.0.33 file.
Securepoint OpenVPN 2.0.32
Security: Deny the execution of custom configuration scripts, which needed a script-security higher than 1. If you need this feature, please use the 2.0.31 client.