New version of OpenVPN Access Server has been released.
Today a new version of OpenVPN Access Server has been released. The OpenVPN Access Server (OpenVPN-AS) is a set of installation and configuration tools that simplify the rapid deployment of a remote access VPN server. It is based on the popular open-source software OpenVPN, allowing you to work with a configured VPN server using cross-platform client software. The features provided by the server are a carefully selected set of all possible OpenVPN configurations. Thus, OpenVPN-AS simplifies the setup and subsequent management of the system. Read on to find out what's new in version 1.7.1.
Added support for OpenVPN clients compiled without LZO support (it is necessary that OpenVPN clients be built with the ./configure --enable-lzo-stub option).
The variable vpn.routing.allow_mcast has been added, allowing you to apply Iptables rules that allow UDP Multicast and IGMP packets to be exchanged between the server and the client.
64-bit certificate serial numbers are supported.
Fixed a bug observed during authentication, in which the response to authentication, which contained more than a certain number of characters, caused the server to fail, and the user name was considered empty.
Fixed a bug where clients grouped into a group could not access the gateway due to the fact that connecting to the gateway did not create a route that needed to send a response to clients.
An issue with a Mac OS X DHCP client that overwrites DNS settings issued by the VPN server has been resolved.
A serious work has been done on the management session interface. This should eliminate the problem of long sessions, in which the session was broken off after about 6 hours from the beginning of the connection.
Critical fix for UCARP - reliably handles the event in which the virtual IP address of the UPARP has not been removed properly since the previous connection.
Fixed some stability issues in the client web interface when the Access Server starts up in External PKI mode.
The Mac OS X client can now provide its MAC address to the VPN server to authenticate the host.
Added error messages for disabled users, revoked certificates, AS license key expiration.
The tray now provides more information about the connection status.
If access to the Access Server is configured by name ( hostname ), and the client tries to access it by its IP address from a browser, then it is redirected to a page with an IP address and vice versa.
When switching between servers, the question window is canceled.
When switching to a server accessible by IP address, and provided that another server is already connected, the connection status page for the connected server is not displayed.
OpenVPN-AS web interface
References:
A complete list of changes can be found here . Distribution for CentOS, Ubuntu / Debian, Redhat, Fedora is available here . Distribution for virtual platforms is here . A detailed description of the installation of OpenVPN-AS can be found here .