[Bug 218569] Re: OpenVPN compiled without pkcs11 support

[Thierry Carrez]

This has been fixed in Debian 2.1~rc8-1 release, might be a good idea to
sync ?

Debian changelog:
 openvpn  (2.1~rc8-1) unstable; urgency=low

   * New upstream version
   * Added Build-dep on libpkcs11-helper1 to re-enable PKCS#11
     support. Sorry for the delay Florian :) (Closes: #475353)

 -- Alberto Gonzalez Iniesta <agi at inittab.org>  Wed, 23 Jul 2008 10:38:13 +0200
openvpn (2.1~rc7-6) unstable; urgency=low

   * debian/control: Add Recommends on net-tools. (Closes: #469522)
   * init.d script: clean up. (Closes: #486678)
   * init.d script: Added soft-restart option to send SIGUSR1 to running
     VPNs. (Closes: #414252)
   * Added bash_completion for init.d script. (Closes: #394289)
   * Removed obsolete templates and its associated code. (Closes: #459531)
   * Removed stop before upgrade question, always restar after the upgrade
     not in between. (Closes: #371148)
   * New patch to correct spelling error in socket.c. (Closes: #487957)
   * Added OPTARGS to init.d script and /etc/default/openvpn so that
     Stanislav Maslovski does not have to edit this on every upgrade :)
     (Closes: #488675)

 -- Alberto Gonzalez Iniesta <agi at inittab.org>  Tue, 24 Jun 2008
15:46:15 +0200

Upstream rc8 changelog:

2008.06.11 -- Version 2.1_rc8

* Added client authentication and packet filtering capability
  to management interface.  In addition, allow OpenVPN plugins
  to take advantage of deferred authentication and packet
  filtering capability.

* Added support for client-side connection profiles.

* Fixed unbounded memory growth bug in environmental variable
  code that could have caused long-running OpenVPN sessions
  with many TLS renegotiations to incrementally
  increase memory usage over time.

* Windows release now packages openssl-0.9.8h.

* Build system changes -- allow building on Windows using
  autoconf/automake scripts (Alon Bar-Lev).

* Changes to Windows build system to make it easier to do
  partial builds, with a reduced set of prerequisites,
  where only a subset of OpenVPN installer
  components are built.  See ./domake-win comments.

* Cleanup IP address for persistence interfaces for tap and also
  using ifconfig, gentoo#209055 (Alon Bar-Lev).

* Fall back to old version of extract_x509_field for OpenSSL 0.9.6.

* Clarified tcp-queue-limit man page entry (Matti Linnanvuori).

* Added new OpenVPN icon and installer graphic.

* Minor pkitool changes.

* Added --pkcs11-id-management option, which will cause OpenVPN to
  query the management interface via the new NEED-STR asynchronous
  notification query to get additional PKCS#11 options (Alon Bar-Lev).

* Added NEED-STR management interface asynchronous query and
  "needstr" management interface command to respond to the query
  (Alon Bar-Lev).

* Added Dragonfly BSD support (Francis-Gudin).

* Quote device names before passing to up/down script (Josh Cepek).

* Bracketed struct openvpn_pktinfo with #pragma pack(1) to
  prevent structure padding from causing an incorrect length
  to be returned by sizeof (struct openvpn_pktinfo) on 64-bit
  platforms.

* On systems that support res_init, always call it
  before calling gethostbyname to ensure that
  resolver configuration state is current.

* Added NTLMv2 proxy support (Miroslav Zajic).

* Fixed an issue in extract_x509_field_ssl where the extraction
  would fail on the first field of the subject name, such as
  the common name in:  /CN=foo/emailAddress=foo at bar.com

* Made "Linux ip addr del failed" error nonfatal.

* Amplified --client-cert-not-required warning.

* Added #pragma pack to proto.h.

-- 
OpenVPN compiled without pkcs11 support
https://bugs.launchpad.net/bugs/218569
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openvpn in ubuntu.