openvpn-server (3.2.5) trixie; urgency=high

  * Properly fix integrated-mode server-cert file naming. 3.2.4 only renamed
    the .p12, but make_server_bundle also copies the server .key/.csr/.crt into
    the target dir, so integrated installs still left tripled
    <nick>-<nick>-server-server.{key,csr,crt} files in /etc/openvpn. The shared
    naming ($OVPN_ORGNICK-<cn>-server.*) is relied on by CA-only mode and by
    build-server-cert, so rather than change it, integrated init now mirrors
    the CA-only branch: generate into the throwaway temp dir and install only
    the pkcs12 as /etc/openvpn/<nick>-server.p12. No stray key/csr/crt are
    left in /etc/openvpn.

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 01 Jul 2026 16:59:25 +1000

openvpn-server (3.2.4) trixie; urgency=high

  * Fix "ovs init" producing an unusable server in integrated (non-CA-only)
    mode: the server PKCS#12 was written as <nick>-<nick>-server-server.p12
    (make_server_bundle prepends the org nick to the common name, which init
    already passes as "<nick>-server"), but the generated server.conf
    references /etc/openvpn/<nick>-server.p12 — so openvpn failed to start
    with "--pkcs12 fails ... No such file or directory". Rename the bundle to
    the expected path after generation. (CA-only mode was unaffected; it
    renames during scp to each server.)

 -- Sol1 Packages <packages@sol1.com.au>  Mon, 29 Jun 2026 14:35:04 +1000

openvpn-server (3.2.3) trixie; urgency=medium

  * Fix the auth-user-pass (username/password) client option, which never
    took effect due to missing "$" in several shell tests. "ovs init" now
    actually writes AUTHUSERPASS=yes to config.sh when selected, and the
    client builders (build-generic-client, build-generic-client-ha,
    build-windows-client) now honour it and append "auth-user-pass" +
    "reneg-sec 0" to the generated .ovpn (build-generic-client-args was
    already correct). Also fixed the same missing-"$" bug in init's CAONLY
    config.sh write-site.

 -- Sol1 Packages <packages@sol1.com.au>  Thu, 25 Jun 2026 14:54:56 +1000

openvpn-server (3.2.2) trixie; urgency=high

  * Fix "ovs init" failing with "cp: cannot stat
    '/etc/openvpn-server/<nick>-ca.crl'" when re-initialising an existing
    install. The initial-CRL generation was guarded by a check on the
    *destination* (/etc/openvpn/<nick>-ca.crl), which survives an init reset,
    while the *source* (/etc/openvpn-server/<nick>-ca.crl) it writes/copies is
    wiped by the reset — so on re-init the CRL was never regenerated but the
    copy still ran. Always (re)generate the CRL for the freshly-created CA.

 -- Sol1 Packages <packages@sol1.com.au>  Thu, 25 Jun 2026 14:45:34 +1000

openvpn-server (3.2.1) trixie; urgency=high

  * Fix "ovs init" failure when generating the server certificate on
    OpenSSL 3 (Debian 13 / trixie). Dropped "-extensions server" from the
    server CSR "openssl req" step: OpenSSL 3 hard-errors on
    authorityKeyIdentifier in a certificate request (no issuer present),
    whereas OpenSSL 1.x silently ignored it. The "[ server ]" extensions are
    still applied at signing time via "openssl ca -extensions server", so the
    issued certificate is unchanged (serverAuth + subject/authority key IDs
    intact). Verified on OpenSSL 3.5.

 -- Sol1 Packages <packages@sol1.com.au>  Thu, 25 Jun 2026 14:32:33 +1000

openvpn-server (3.2.0) trixie; urgency=medium

  * Build and publish for Debian 13 (trixie).
  * Verified against trixie's openvpn 2.6 and openssl 3 — no config changes
    required (server/client templates already use AES-256-GCM, remote-cert-tls
    and "dh none"; openssl.cnf is OpenSSL 3 tolerant).
  * CI: adopt the rustguac/lightningstream packaging pattern — tag-triggered
    build in a debian:trixie image, then publish to packages.sol1.net via the
    "packages" shell runner (reprepro includedeb).
  * Sync debian/control Version with the changelog (was 3.0.0).

 -- Sol1 Packages <packages@sol1.com.au>  Thu, 25 Jun 2026 13:59:48 +1000

openvpn-server (3.1.0) unstable; urgency=medium

  * fix various bugs
  * add build-generic-client-args for ansible use 

 --  <packages@sol1.com.au>  Tue, 25 Jun 2024 09:14:46 +1000

openvpn-server (3.0.0) Debian 10 Buster; urgency=low

  * massive changes to support multi-server layout!
  * Run ovs init and ovs build-server-cert!
 
 -- Sol1 Packages <packages@sol1.com.au>  Fri, 14 Apr 2023 16:30:00 +1000


openvpn-server (2.3.0) Debian 10 Buster; urgency=low

  * Lots more changes to deal with server certs.
  * Run ovs init and ovs build-server-cert!
 
 -- Sol1 Packages <packages@sol1.com.au>  Mon, 24 Oct 2022 16:30:00 +1000


openvpn-server (2.2.0) Debian 10 Buster; urgency=low

  * Add new feature for building seperate server certs
  * check if ca mounted first
 
 -- Sol1 Packages <packages@sol1.com.au>  Sun, 21 Feb 2021 11:30:00 +1000


openvpn-server (2.0.1) Debian 10 Buster; urgency=low

  * Modify ask_key_questions function to add some validation to the certificate common name question
 
 -- Sol1 Packages <packages@sol1.com.au>  Sun, 21 Feb 2021 11:30:00 +1000

openvpn-server (2.0.0) Debian 10 Buster; urgency=low

  * Major rewrite of package post setup initialization
  * Removed CA store initialization from DPKG postinst and created 'ovs init' command for intializing the CA store
 
 -- Sol1 Packages <packages@sol1.com.au>  Tue, 01 Dec 2020 11:30:00 +1000

openvpn-server (1.0.0) lucid precise xeniel; urgency=low

  * Make file out path more consistent and use global variable
  * Fix get_current_certificates after it reverted to old code 
  * Fix call to allocation_ip function
  * Add ccd-exclusive as default option
  * Create shorewall vars even if shorewall isn't installed
 
 -- Sol1 Packages <packages@sol1.com.au>  Wed, 01 June 2018 11:30:00 +1000

openvpn-server (0.9.4) lucid precise xeniel; urgency=low

  * Fixes bug in client certificate with purpose of SSL Server
 
 -- Sol1 Packages <packages@sol1.com.au>  Wed, 30 May 2018 11:30:00 +1000

openvpn-server (0.9.3) lucid precise xeniel; urgency=low

  * Fixes for openssl config
  * Fixes for openvpn client template files
 
 -- Sol1 Packages <packages@sol1.com.au>  Fri, 28 May 2018 11:30:00 +1000

openvpn-server (0.9.2) lucid precise xeniel; urgency=low

  * Fix error on install with systemd not seeing reload untill restart has been return
  * Fix bug in echo that caused error on exit with builds
  * Remove shorewall restart, not much point restarting shorewall if there are no rules added for the vars
  * Fix nsCertType on server segment
  * Fix bug in apt purge
 
 -- Sol1 Packages <packages@sol1.com.au>  Fri, 25 May 2018 16:39:00 +1000

openvpn-server (0.9.1) lucid precise xeniel; urgency=low

  * Fix deprecated nsCertType server in openssl config
  
 -- Sol1 Packages <packages@sol1.com.au>  Fri, 25 May 2018 11:54:00 +1000

openvpn-server (0.9.0) lucid precise xeniel; urgency=low

  * Upgrade dhparam strength to 4096
  * Set cipher AES-256-CBC in server conf and client conf template
  * Add paramaters to build client certs instead of interactively
  * Add 'at' to package prerequsites
  * Add common name to email subject
  * Add ccd dir creation to post install script
  
 -- Sol1 Packages <packages@sol1.com.au>  Fri, 22 May 2018 16:11:00 +1000

openvpn-server (0.8.7) hardy lucid precise; urgency=low

  * Fixes for ovs status html generation
  * Fix minor bug in debian build script

 -- Sol1 Packages <packages@sol1.com.au>  Fri, 27 Jun 2016 11:45:00 +1000

openvpn-server (0.8.6) hardy lucid precise; urgency=low

  * Update status function to favor status-version 2 setting
  * Minor bug fix from previous version

 -- Sol1 Packages <packages@sol1.com.au>  Fri, 21 Mar 2016 17:45:00 +1000

openvpn-server (0.8.5) hardy lucid precise; urgency=low

  * Update sol1-deploy.nsi to allow for different download url's
  * Update sol1-deploy.nsi to extract config files before exiting if url borked
  * Change output names for built vpn files
  * Fix intermitant bug in make-static-ip
  * Make variable names more consistant
  * Remove '_' from .deb file names to prevent errors

 -- Sol1 Packages <packages@sol1.com.au>  Fri, 21 Mar 2016 13:45:00 +1000

openvpn-server (0.8.4) hardy lucid precise; urgency=low

  * Fix bug in ovs make-static-ip

 -- Sol1 Packages <packages@sol1.com.au>  Fri, 13 Jan 2016 17:45:00 +1000

openvpn-server (0.8.3) hardy lucid precise; urgency=low

  * Fix bug in ovs status

 -- Sol1 Packages <packages@sol1.com.au>  Fri, 13 Jan 2016 11:45:00 +1000

openvpn-server (0.8.2) hardy lucid precise; urgency=low

  * Add dependcy for bash-completion and initalize bash completion ovs script

 -- Sol1 Packages <packages@sol1.com.au>  Fri, 08 Jan 2016 17:15:00 +1000

openvpn-server (0.8.1) hardy lucid precise; urgency=low

  * Refactor makestaticip.sh and rename to make-static-ip
  * Rewrite and extend ovs status
  * New ovs commands list-cert and clean-ccd
  * ovs bash completion
  * Expand default vpn ip range to /22

 -- Sol1 Packages <packages@sol1.com.au>  Fri, 08 Jan 2016 14:05:00 +1000

openvpn-server (0.7.1) hardy lucid precise; urgency=low

  * Added build-generic-client for ios devices & android devices, this also
    replaces build-ddwrt-client
  * Added option to email .ovpn file created by build-generic-client
  * Made ovs return ovs help by default

 -- Sol1 Packages <packages@sol1.com.au>  Thu, 06 Jun 2013 14:55:00 +1000

openvpn-server (0.6.3) hardy lucid precise; urgency=low

  * Fixed ucf bug

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 28 May 2012 16:40:52 +1000

openvpn-server (0.6.2) hardy lucid precise; urgency=low

  * build for precise

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 28 May 2012 16:40:52 +1000

openvpn-server (0.6.1) hardy lucid precise; urgency=low

  * omg broke reprepo again

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 28 Feb 2012 16:40:52 +1000

openvpn-server (0.6.0) hardy lucid; urgency=low

  * add /etc/openvpn/ccd as client-config-dir duh. Thanks Paul!

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 28 Feb 2012 16:10:52 +1000

openvpn-server (0.5.9) hardy lucid; urgency=low

  * Borked reprepo... noob

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 14 Dec 2011 19:10:52 +1000

openvpn-server (0.5.8) hardy lucid; urgency=low

  * Fixed 64bit elevation on Windows installer

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 14 Dec 2011 18:10:52 +1000

openvpn-server (0.5.7) hardy lucid; urgency=low

  * Fixed shorewall params generation when ccd has extra stuff

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 09 Sep 2011 18:10:52 +1000

openvpn-server (0.5.6) hardy lucid; urgency=low

  * Added ddwrt support - build-ddrt-client will make a zipfile with
  * expanded certificates suitable for ddwrt or other routers (and phones!)

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 08 Sep 2011 18:10:52 +1000

openvpn-server (0.5.5) hardy lucid; urgency=low

  * Added changes to support 64bit windows and various improvements to NSIS
  * Big thanks to Paul Formosa for his excellent work

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 02 Sep 2011 16:10:52 +1000

openvpn-server (0.5.3) dapper hardy; urgency=low

  * Fixed bug in build client for cached builds

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 20 Nov 2008 15:10:52 +1000


openvpn-server (0.5.2) dapper hardy; urgency=low

  * Add interface total stats to status, fixed output of build-windows-client

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 13 Nov 2008 15:10:52 +1000

openvpn-server (0.5.1) dapper hardy; urgency=low

  * added a status command for ovs - 'ovs status' show info, this time with
    the file included in the package...

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 13 Nov 2008 13:10:52 +1000



openvpn-server (0.5.0) dapper hardy; urgency=low

  * Changed crypt-ca to need to be mounted manually, and stay mounted or
    timeout with at job.
  * added a status command for ovs - 'ovs status' show info
  * Big thanks to Matt Smith @ UCW for assistance, testing and patches
  * Added option to store builds in ca-store or not (CACHE_BUILDS in
    /etc/openvpn-server/config.sh)

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 13 Nov 2008 13:00:52 +1000


openvpn-server (0.4.7) dapper hardy; urgency=low

  * Fixed small bug in make-crypt-ca

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 4 Nov 2008 13:40:52 +1000


openvpn-server (0.4.6) dapper hardy; urgency=low

  * Removed old NSIS cruft and streamlined package

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 4 Nov 2008 13:04:52 +1000


openvpn-server (0.4.5) dapper hardy; urgency=low

  * Fixed case where cryptsetup password wrong broke it

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 4 Nov 2008 12:04:52 +1000


openvpn-server (0.4.4) dapper hardy; urgency=low

  * Fixed upgrade process

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 4 Nov 2008 11:34:52 +1000


openvpn-server (0.4.3) dapper hardy; urgency=low

  * Added encrypted certificate store feature

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 4 Nov 2008 11:14:52 +1000


openvpn-server (0.4.2) dapper hardy; urgency=low

  * Fixed makestaticip.sh again

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 8 Oct 2008 17:14:52 +1000

openvpn-server (0.4.0) dapper hardy; urgency=low

  * Change windows client to be a download and deploy script
  * Change revoke-cert to work
  * Add firewall function to windows-client

 -- Sol1 Packages <packages@sol1.com.au>  Wed, 8 Oct 2008 15:14:52 +1000

openvpn-server (0.3.3) dapper hardy; urgency=low

  * Give index.txt a full path in revoke-cert.

 -- Sol1 Packages <packages@sol1.com.au>  Tue, 15 Jul 2008 18:00:52 +1000

openvpn-server (0.3.2) dapper; urgency=low

  * Give index.txt a full path in revoke-cert.

 -- Matthew Palmer <mpalmer@debian.org>  Wed,  1 Aug 2007 08:51:52 +1000

openvpn-server (0.3.1) dapper; urgency=low

  * Bugfixes for the ovs command and the help sub-command.

 -- Matthew Palmer <matt@solutionsfirst.com.au>  Mon,  9 Jul 2007 13:03:45 +1000

openvpn-server (0.3.0) breezy dapper; urgency=low

  * Switch to using a single top-level command (ovs) instead of a bunch of
    stand-alone scripts (which pollute the namespace and make no sense by
    themselves).  Temporary compatibility with existing practice has been
    maintained through symlinks.
  * Add a revoke-cert subcommand.
  * Stop using /usr/games/random (use $RANDOM instead), which removes a
    slightly confusing dependency on bsdgames.  Using $RANDOM does, however,
    require bash.

 -- Matthew Palmer <matt@solutionsfirst.com.au>  Mon,  2 Jul 2007 10:29:56 +1000

openvpn-server (0.2.2) hoary breezy; urgency=low

  * Set 'nobind' on the client, to avoid problems with multi-VPN hosts and
    relay systems.

 -- Matthew Palmer <matt@solutionsfirst.com.au>  Sun, 17 Sep 2006 09:57:35 +1000

openvpn-server (0.2.1) hoary breezy; urgency=low

  * Declare dependency on ucf (how did I miss that one?).

 -- Matthew Palmer <matt@solutionsfirst.com.au>  Thu, 27 Apr 2006 09:31:01 +1000

openvpn-server (0.2.0) unstable; urgency=low

  * Add a "build-zip-client" version for generic configs.

 -- Matthew Palmer <matt@solutionsfirst.com.au>  Mon, 27 Feb 2006 10:21:03 +1100

openvpn-server (0.1.1) unstable; urgency=low

  * Add a 'pull' command to the client config to collect and apply route
    data and such from the server.
  * Add a versioned dependency on nsis to ensure we don't hit a vicious
    bug (Contrib/UIs/modern.exe missing).

 -- Matthew Palmer <matt@solutionsfirst.com.au>  Wed,  1 Feb 2006 18:11:04 +1100

openvpn-server (0.1.0) unstable; urgency=low

  * Initial release.
  
 -- Matthew Palmer <matt@solutionsfirst.com.au>  Mon, 8 Aug 2005 10:49:00 +1000
