Docker-openvpn: OpenVPN 2.5

[jkroepke]

Hi,

first beta versions of 2.5 are out. Could u provide such images please?

[Neustradamus]

@kylemanna: The final is out!

OpenVPN 2.5.0 (2020-10-27):

• https://openvpn.net/
• https://github.com/OpenVPN/openvpn/releases

Announcement:

• https://sourceforge.net/p/openvpn/mailman/message/37138737/

OpenVPN 2.5 is a new major release with many new features:

• Client-specific tls-crypt keys (–tls-crypt-v2)
• Added support for using the ChaCha20-Poly1305 cipher in the OpenVPN data channel
• Improved Data channel cipher negotiation
• Removal of BF-CBC support in default configuration
• Asynchronous (deferred) authentication support for auth-pam plugin
• Deferred client-connect
• Faster connection setup
• Netlink support
• Wintun support
• IPv6-only operation
• Improved Windows 10 detection
• Linux VRF support
• TLS 1.3 support
• Support setting DHCP search domain
• Handle setting of tun/tap interface MTU on Windows
• HMAC based auth-token support
• VLAN support
• Support building of .msi installers for Windows
• Allow unicode search string in –cryptoapicert option (Windows)
• Support IPv4 configs with /31 netmasks now
• New option –block-ipv6 to reject all IPv6 packets (ICMPv6)
• MSI installer (Windows)
• The MSI installer now bundles EasyRSA 3, a modern take on OpenVPN CA management

Overview of changes in OpenVPN v2.5:

• https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn25

Overview of changes in OpenVPN v2.4:

• https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24

[kylemanna]

Waiting and watching for it to land in Alpine:

https://pkgs.alpinelinux.org/packages?name=openvpn&branch=edge

[erhan-]

Looks like it is ready
https://pkgs.alpinelinux.org/package/edge/main/x86_64/openvpn

[kylemanna]

Can those interested test out the edge Docker tag / git branch?

~/t/r/docker-openvpn ❯❯❯ docker pull kylemanna/openvpn:edge ; docker run --rm -it kylemanna/openvpn:edge openvpn --version
7597eaba0060: Already exists 
863e5229deb4: Pull complete 
381227b57d63: Pull complete 
2b80629331c3: Pull complete 
dceb0e632215: Pull complete 
Digest: sha256:24ea4611c1fd2a7e84750c7c92cae7ddee100d02bd4f609c6621974b5745a1f8
Status: Downloaded newer image for kylemanna/openvpn:edge
docker.io/kylemanna/openvpn:edge
OpenVPN 2.5.0 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Dec  5 2020
library versions: OpenSSL 1.1.1g  21 Apr 2020, LZO 2.10
Originally developed by James Yonan
Copyright (C) 2002-2018 OpenVPN Inc <[email protected]>
Compile time defines: enable_async_push='no' enable_comp_stub='no' enable_crypto='yes' enable_crypto_ofb_cfb='yes' enable_debug='yes' enable_def_auth='yes' enable_dlopen='unknown' enable_dlopen_self='unknown' enable_dlopen_self_static='unknown' enable_fast_install='yes' enable_fragment='yes' enable_iproute2='yes' enable_libtool_lock='yes' enable_lz4='yes' enable_lzo='yes' enable_management='yes' enable_multihome='yes' enable_pam_dlopen='no' enable_pedantic='no' enable_pf='yes' enable_pkcs11='no' enable_plugin_auth_pam='yes' enable_plugin_down_root='yes' enable_plugins='yes' enable_port_share='yes' enable_selinux='no' enable_shared='yes' enable_shared_with_static_runtimes='no' enable_small='no' enable_static='yes' enable_strict='no' enable_strict_options='no' enable_systemd='no' enable_werror='no' enable_win32_dll='yes' enable_x509_alt_username='no' with_aix_soname='aix' with_crypto_library='openssl' with_gnu_ld='yes' with_mem_check='no' with_sysroot='no'

[erhan-]

I do not have any problems beside the Issues that were present before.

[juriansluiman]

Can those interested test out the edge Docker tag / git branch?

I have now deployed the edge container to my server, several clients (Linux desktop / Android phones) work fine as before. I am not using any advance configurations though.

[erhan-]

I am still using it since the last time I wrote and never had problems.