openvpn (2.6.0~git20221201-1) unstable; urgency=medium

    OpenVPN 2.6 has changed several defaults that might lead to connection
    problems, especially when the remote side runs an old OpenVPN version
    or cipher negotiations (NCP) are not in effect. This especially affects
    connecting to OpenVPN 2.3.x or earlier, and several limitations around
    old cryptographic algorithms and keys, mostly caused by the switch to
    OpenSSL 3.0

    These include but are not limited to

    - weak SHA1 or MD5 signature on certificates
    - 1024 bit RSA certificates, 1024 bit DH parameters, other weak keys
    - Use of a legacy or deprecated cipher (e.g. 64bit block ciphers)
    - remote OpenVPN version not supporting TLS 1.2 or later

    Please read the release notes installed as
    /usr/share/doc/openvpn/changelog.gz.

    With an optional kernel module (available as package openvpn-dco-dkms)
    the data plane encryption/decryption is performed in kernel space,
    reducing page copy overhead and increasing the throughput significantly.
    DCO (Data Channel Offload) should work with most configurations. In
    case of issues, please try running OpenVPN with --disable-dco first.

 -- Bernhard Schmidt <berni@debian.org>  Mon, 23 May 2022 11:04:30 +0200

openvpn (2.4.9-3) unstable; urgency=medium

    To ensure the functionality of OpenVPN connections during an update,
    OpenVPN is not restarted after the update since this version.

    Please restart OpenVPN or reboot the computer manually after the update.

 -- Jörg Frings-Fürst <debian@jff.email>  Sat, 02 May 2020 18:14:36 +0200
