CVS commit: pkgsrc/net

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sun Feb 15 12:50:42 UTC 2026

Modified Files:
        pkgsrc/net/openvpn: Makefile Makefile.common PLIST distinfo
        pkgsrc/net/openvpn-acct-wtmpx: distinfo
        pkgsrc/net/openvpn-nagios: distinfo

Log Message:
openvpn: updated to 2.7.0

Highlights of 2.7

Multi-socket support for servers -- Handle multiple addresses/ports/protocols within one server
Improved Client support for DNS options
Client implementations for Linux/BSD/macOS, included with the default install
New client implementation for Windows, adding support for features like split DNS and DNSSEC
Architectural improvements on Windows
The block-local flag is now enforced with WFP filters
Windows network adapters are now generated on demand
Windows automatic service now runs as an unpriviledged user
Support for server mode in win-dco driver
Note: Support for the wintun driver has been removed. win-dco is now the default, tap-windows6 is the fallback solution for use-cases not covered by win-dco.
Improved data channel
Enforcement of AES-GCM usage limit
Epoch data keys and packet format
Support for new upstream DCO Linux kernel module
This release supports the new ovpn DCO Linux kernel module which will be available in future upstream Linux kernel releases. Backports of the new module to current kernels are available via the 
ovpn-backports project.
Client-side support for new PUSH_UPDATE control-channel message
This allows servers to send updates to options like routing and DNS config without triggering a reconnect.
PUSH_UPDATE server support (minimal)
New management interface commands push-update-broad and push-update-cid to send PUSH_UPDATE option updates.
TLS 1.3 support with bleeding-edge mbedTLS versions
Support for mbedTLS version 4
Two new environment variables have been introduced to communicate desired default gateway redirection to plugins like Network Manager.
Support for Epoch data channel on Windows, using the win-dco driver (2.8.0+)
"Recursive Routing" check is now more granular, and will only drop packets-in-tunnel if destination IP, protocol and port matches with those needed to reach the VPN server.
COPYING: license details only relevant to our Windows installers have been updated and moved to the openvpn-build repo


To generate a diff of this commit:
cvs rdiff -u -r1.113 -r1.114 pkgsrc/net/openvpn/Makefile
cvs rdiff -u -r1.44 -r1.45 pkgsrc/net/openvpn/Makefile.common
cvs rdiff -u -r1.27 -r1.28 pkgsrc/net/openvpn/PLIST
cvs rdiff -u -r1.75 -r1.76 pkgsrc/net/openvpn/distinfo
cvs rdiff -u -r1.50 -r1.51 pkgsrc/net/openvpn-acct-wtmpx/distinfo
cvs rdiff -u -r1.47 -r1.48 pkgsrc/net/openvpn-nagios/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/openvpn/Makefile
diff -u pkgsrc/net/openvpn/Makefile:1.113 pkgsrc/net/openvpn/Makefile:1.114
--- pkgsrc/net/openvpn/Makefile:1.113   Fri Feb  6 10:05:36 2026
+++ pkgsrc/net/openvpn/Makefile Sun Feb 15 12:50:42 2026
@@ -1,8 +1,6 @@
-# $NetBSD: Makefile,v 1.113 2026/02/06 10:05:36 wiz Exp $
+# $NetBSD: Makefile,v 1.114 2026/02/15 12:50:42 adam Exp $
 
 DISTNAME=      ${OPENVPN_DISTNAME}
-#PKGREVISION=  0
-PKGREVISION=   2
 CATEGORIES=    net
 MASTER_SITES=  ${OPENVPN_MASTER_SITES}
 

Index: pkgsrc/net/openvpn/Makefile.common
diff -u pkgsrc/net/openvpn/Makefile.common:1.44 pkgsrc/net/openvpn/Makefile.common:1.45
--- pkgsrc/net/openvpn/Makefile.common:1.44     Sat Nov 29 16:52:21 2025
+++ pkgsrc/net/openvpn/Makefile.common  Sun Feb 15 12:50:42 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.44 2025/11/29 16:52:21 adam Exp $
+# $NetBSD: Makefile.common,v 1.45 2026/02/15 12:50:42 adam Exp $
 # used by net/openvpn/Makefile
 # used by net/openvpn-acct-wtmpx/Makefile
 # used by net/openvpn-nagios/Makefile
 
-OPENVPN_DISTNAME=              openvpn-2.6.17
+OPENVPN_DISTNAME=              openvpn-2.7.0
 OPENVPN_DISTFILE=              ${OPENVPN_DISTNAME}.tar.gz
 OPENVPN_MASTER_SITES=          https://swupdate.openvpn.org/community/releases/
 SITES.${OPENVPN_DISTFILE}=     ${OPENVPN_MASTER_SITES}

Index: pkgsrc/net/openvpn/PLIST
diff -u pkgsrc/net/openvpn/PLIST:1.27 pkgsrc/net/openvpn/PLIST:1.28
--- pkgsrc/net/openvpn/PLIST:1.27       Wed Sep 24 17:06:43 2025
+++ pkgsrc/net/openvpn/PLIST    Sun Feb 15 12:50:42 2026
@@ -1,8 +1,9 @@
-@comment $NetBSD: PLIST,v 1.27 2025/09/24 17:06:43 gdt Exp $
+@comment $NetBSD: PLIST,v 1.28 2026/02/15 12:50:42 adam Exp $
 include/openvpn-msg.h
 include/openvpn-plugin.h
 ${PLIST.pam}lib/openvpn/plugins/openvpn-plugin-auth-pam.la
 lib/openvpn/plugins/openvpn-plugin-down-root.la
+libexec/openvpn/dns-updown
 man/man5/openvpn-examples.5
 man/man8/openvpn.8
 sbin/openvpn
@@ -32,6 +33,7 @@ share/examples/openvpn/keys/client-pass.
 share/examples/openvpn/keys/client.crt
 share/examples/openvpn/keys/client.key
 share/examples/openvpn/keys/client.p12
+share/examples/openvpn/keys/ffdhe2048.pem
 share/examples/openvpn/keys/gen-sample-keys.sh
 share/examples/openvpn/keys/openssl.cnf
 share/examples/openvpn/keys/server-ec.crt

Index: pkgsrc/net/openvpn/distinfo
diff -u pkgsrc/net/openvpn/distinfo:1.75 pkgsrc/net/openvpn/distinfo:1.76
--- pkgsrc/net/openvpn/distinfo:1.75    Sat Nov 29 16:52:21 2025
+++ pkgsrc/net/openvpn/distinfo Sun Feb 15 12:50:42 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.75 2025/11/29 16:52:21 adam Exp $
+$NetBSD: distinfo,v 1.76 2026/02/15 12:50:42 adam Exp $
 
-BLAKE2s (openvpn-2.6.17.tar.gz) = fecafaaaf57ca4740d2cdfaf493a2c6985b677bdfa069412f0d808957021bca0
-SHA512 (openvpn-2.6.17.tar.gz) = c76e9dd6305b04143e382870a110b5781e8ef934e10d01c13a3b49eecacbe37fd19ca178056fd50848c2c6b07dd8ec27123bb8b3d1c0bab8e1dc85b563a579e0
-Size (openvpn-2.6.17.tar.gz) = 1934219 bytes
+BLAKE2s (openvpn-2.7.0.tar.gz) = c17145b1979e5b1b69da4d9d6eee67298b90acd13567ba9e735c6662f31a9c7a
+SHA512 (openvpn-2.7.0.tar.gz) = 44ad35a1f3520487892ec87acbceaf1b6c99816d797837337ea9d6cd7e407ce7405381baac0db10da8fe7fbb41a6fe8bf95d4255ce51446975a5fd44e6c7a9f7
+Size (openvpn-2.7.0.tar.gz) = 2083303 bytes
 SHA1 (patch-src_compat_compat-basename.c) = c5cd48db40279a956ada044a81e6dfab015d70b6

Index: pkgsrc/net/openvpn-acct-wtmpx/distinfo
diff -u pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.50 pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.51
--- pkgsrc/net/openvpn-acct-wtmpx/distinfo:1.50 Sat Nov 29 16:52:21 2025
+++ pkgsrc/net/openvpn-acct-wtmpx/distinfo      Sun Feb 15 12:50:42 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.50 2025/11/29 16:52:21 adam Exp $
+$NetBSD: distinfo,v 1.51 2026/02/15 12:50:42 adam Exp $
 
-BLAKE2s (openvpn-2.6.17.tar.gz) = fecafaaaf57ca4740d2cdfaf493a2c6985b677bdfa069412f0d808957021bca0
-SHA512 (openvpn-2.6.17.tar.gz) = c76e9dd6305b04143e382870a110b5781e8ef934e10d01c13a3b49eecacbe37fd19ca178056fd50848c2c6b07dd8ec27123bb8b3d1c0bab8e1dc85b563a579e0
-Size (openvpn-2.6.17.tar.gz) = 1934219 bytes
+BLAKE2s (openvpn-2.7.0.tar.gz) = c17145b1979e5b1b69da4d9d6eee67298b90acd13567ba9e735c6662f31a9c7a
+SHA512 (openvpn-2.7.0.tar.gz) = 44ad35a1f3520487892ec87acbceaf1b6c99816d797837337ea9d6cd7e407ce7405381baac0db10da8fe7fbb41a6fe8bf95d4255ce51446975a5fd44e6c7a9f7
+Size (openvpn-2.7.0.tar.gz) = 2083303 bytes
 BLAKE2s (openvpn-acct-wtmpx-20130210.tgz) = 2bb02a4e6adb7ce1d189271a6fbb6cbffd6a37d7b5e75cccebfc8dfac6dbaddd
 SHA512 (openvpn-acct-wtmpx-20130210.tgz) = 7b8fd4929e65d8d84158f62e5a17ff3adb3b4a6cff63b29038acfb368750719f2f593786ed9b02402824c19d872b188d2a46740a5c5f853e8873a71481b13aaf
 Size (openvpn-acct-wtmpx-20130210.tgz) = 2778 bytes

Index: pkgsrc/net/openvpn-nagios/distinfo
diff -u pkgsrc/net/openvpn-nagios/distinfo:1.47 pkgsrc/net/openvpn-nagios/distinfo:1.48
--- pkgsrc/net/openvpn-nagios/distinfo:1.47     Sat Nov 29 16:52:21 2025
+++ pkgsrc/net/openvpn-nagios/distinfo  Sun Feb 15 12:50:42 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.47 2025/11/29 16:52:21 adam Exp $
+$NetBSD: distinfo,v 1.48 2026/02/15 12:50:42 adam Exp $
 
-BLAKE2s (openvpn-2.6.17.tar.gz) = fecafaaaf57ca4740d2cdfaf493a2c6985b677bdfa069412f0d808957021bca0
-SHA512 (openvpn-2.6.17.tar.gz) = c76e9dd6305b04143e382870a110b5781e8ef934e10d01c13a3b49eecacbe37fd19ca178056fd50848c2c6b07dd8ec27123bb8b3d1c0bab8e1dc85b563a579e0
-Size (openvpn-2.6.17.tar.gz) = 1934219 bytes
+BLAKE2s (openvpn-2.7.0.tar.gz) = c17145b1979e5b1b69da4d9d6eee67298b90acd13567ba9e735c6662f31a9c7a
+SHA512 (openvpn-2.7.0.tar.gz) = 44ad35a1f3520487892ec87acbceaf1b6c99816d797837337ea9d6cd7e407ce7405381baac0db10da8fe7fbb41a6fe8bf95d4255ce51446975a5fd44e6c7a9f7
+Size (openvpn-2.7.0.tar.gz) = 2083303 bytes
 BLAKE2s (openvpn-nagios-20130210.tgz) = 713b55e865350c44a314aa3b48694695f4d82b50883d1fae919f01e9545c7c34
 SHA512 (openvpn-nagios-20130210.tgz) = 80e565f32379c39eb6c7f3b4744af221ae882ff07dce9dae5bd7feb73b0edcfc7c7ac7f70d23fdcd4f492b66f095f09833deb122449840b36ea606ce91900358
 Size (openvpn-nagios-20130210.tgz) = 3034 bytes