openvpn: upgrade 2.6.1 -> 2.6.2

Changelog:
==========
 dco: don't use NetLink to exchange control packets
 dco: print version to log if available
 dco-linux: remove M_ERRNO flag when printing netlink error message
 multi: don't call DCO APIs if DCO is disabled
 dco-freebsd: use m->instances[] instead of m->hash
 dco-linux: implement dco_get_peer_stats{, multi} API
 Set netlink socket to be non-blocking
 Ensure n = 2 is set in key2 struct in tls_crypt_v2_unwrap_client_key
 Fix memory leaks in open_tun_dco()
 Fix memory leaks in HMAC initial packet generation
 Use key_state instead of multi for tls_send_payload parameter
 Make sending plain text control message session aware
 Only update frame calculation if we have a valid link sockets
 Improve description of compat-mode
 Simplify --compress parsing in options.c
 Refuse connection if server pushes an option contradicting allow-compress
 Add 'allow-compression stub-only' internally for DCO
 Parse compression options and bail out when compression is disabled
 tests/unit_tests: Fix 'make distcheck' with subdir-objects enabled
 preparing release 2.6.2
 dns option: allow up to eight addresses per server
 dco: print FreeBSD version
 Support --inactive option for DCO
 Fix '--inactive <time> 0' behavior for DCO
 Print DCO client stats on SIGUSR2
 Don't overwrite socket flags when using DCO on Windows
 using OpenSSL3 API for EVP PKEY type name reporting
 Bugfix: Convert ECDSA signature form pkcs11-helper to DER encoded form
 Import some sample certificates into Windows store for testing
 Add tests for finding certificates in Windows cert store
 Refactor SSL_CTX_use_CryptoAPI_certificate()
 Add a test for signing with certificates in Windows store
 Unit tests: add test for SSL_CTX_use_Cryptoapi_certificate()
 Improve error message on short read from socks proxy
 Make error in setting metric for IPv6 interface non-fatal

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Wang Mingyu
2023-04-03 17:02:03 +08:00
committed by Khem Raj
parent e2ac0e39f9
commit fc221b3211
@@ -14,7 +14,7 @@ SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \
UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads"
SRC_URI[sha256sum] = "8cbc4fd8ce27b85107b449833c3b30fb05f1ca3c81b46a0ba8658036944266bc"
SRC_URI[sha256sum] = "42d561a9af150b21bc914e3b7aa09f88013d2ffa6d5ce75a025a3b34caa948d4"
# CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn.
CVE_CHECK_IGNORE += "CVE-2020-7224 CVE-2020-27569"