Prepare release of 2.7_rc2-I009

Signed-off-by: Yuriy Darnobyt <[email protected]>

Author: Yuriy Darnobyt

debian-sbuild/openvpn/changelog-2.7~rc2

@@ -0,0 +1,51 @@
+openvpn (2.7~rc2-debian0) stable; urgency=medium
+
+  * OpenVPN Release 2.7_rc2 (Gert Doering, d6ee27b4)
+  * Fix memcmp check for the hmac verification in the 3way handshake being inverted (Arne Schwabe, 18c483dd)
+  * socket: reject mismatched address family in get_addr_generic (Mikhail Khachaiants, f1b851da)
+  * ssl_pkt: Avoid conversion warnings (Frank Lichtenheld, 5ab76ad9)
+  * ssl: Clean up type handling in parse_early_negotiation_tlvs() (Frank Lichtenheld, abe32bce)
+  * ssl: Clean up type handling in export_user_keying_material() (Frank Lichtenheld, fc00a3c9)
+  * ssl: Clean up type handling in write_string() (Frank Lichtenheld, 2a4b12f5)
+  * ssl: Change update argument of compute_earliest_wakeup to time_t (Frank Lichtenheld, 0e2fc09d)
+  * ssl: Fix conversion warning in tls_prepend_opcode_v1 (Frank Lichtenheld, d926257b)
+  * tls_crypt: Avoid some conversion warnings (Frank Lichtenheld, 8cd99b91)
+  * forward: Change context_reschedule_sec sec argument to time_t (Frank Lichtenheld, 7835c371)
+  * interval: Fix conversion warning (Frank Lichtenheld, eb0666c8)
+  * otime: Fix various conversion warnings (Frank Lichtenheld, f265486b)
+  * tapctl: refactor 'create' command (Lev Stipakov, 8487dbf1)
+  * tapctl: make output of 'list' and 'create' commands more verbose (Lev Stipakov, c8f0e726)
+  * recursive routing: fixes and clean-ups (Lev Stipakov, db241ceb)
+  * tapctl: factor out command handlers (Lev Stipakov, ef4937f8)
+  * iservice: use saved iface index to restore metric (Heiko Hund, a1d4a794)
+  * options: remove --opt-verify functionality (Antonio Quartulli, c716b3b8)
+  * ssl: change return type of calc_control_channel_frame_overhead to size_t (Frank Lichtenheld, 8b0554d9)
+  * pkcs11: Avoid some conversion warnings (Frank Lichtenheld, de82ad64)
+  * Fix construction of invalid pointer in tls_pre_decrypt (Arne Schwabe, 5cdf3f97)
+  * openssl_compat: Avoid conversion warning for SSL_get_negotiated_group (Frank Lichtenheld, 4fa8539a)
+  * ssl: Change tls_send_payload size argument to size_t (Frank Lichtenheld, 0da6116c)
+  * tapctl: use better wording for adapters (Lev Stipakov, 2fe6fd1d)
+  * Do not underestimate number of encrypted/decrypted AEAD blocks (Arne Schwabe, 5e6d478f)
+  * iservice: make sure directories have trailing backslash (Heiko Hund, 985f4eae)
+  * iservice: validate config path case-insensitive (Heiko Hund, 39581501)
+  * win: remove checks for PATHCCH_ENSURE_TRAILING_SLASH (Heiko Hund, 763160a1)
+  * iservice: validate config path better (Heiko Hund, bbca8141)
+  * msvc: fix struct initialization for v19 compilers (Heiko Hund, 5888adc6)
+  * Enable -Wtype-limits by default (via -Wextra) (Frank Lichtenheld, 5d50583b)
+  * dco_freebsd.c: fix integer warnings (Gert Doering, 7e0b68ae)
+  * FreeBSD DCO: repair --inactive (Gert Doering, 7fe5cc03)
+  * dco_freebsd: implement dco_get_peer_stats() (Gert Doering, ce99cd6c)
+  * pkcs11_openssl: Silence a conversion warning (Frank Lichtenheld, 4e9a10ad)
+  * dco_freebsd.c: add D_DCO_DEBUG messages for counters and notifications (Gert Doering, 6711ffa9)
+  * FreeBSD DCO: repair incoming 'delete peer' notifications in p2p client mode (Gert Doering, c4fe7813)
+  * init: make some functions static (Antonio Quartulli, 8545a3db)
+  * PUSH_UPDATE server: update reporting_addr after ifconfig update (Marco Baffo, 38e9dd63)
+  * unit_tests: prefer proper cmocka assert helpers (Antonio Quartulli, c5e99509)
+  * Use correct undo_list when clearing DNS addresses (Selva Nair, 59fed2ad)
+  * test_networking: use appropriate assert helpers (Antonio Quartulli, 21b94373)
+  * openvpnserv: Disallow stdin as config unless user is authorized (Selva Nair, a3d8c402)
+  * iservice: fix DNS address list generation (Heiko Hund, 235aa885)
+  * manage: Correctly handle port 65535 in man_kill (Frank Lichtenheld, 40b29347)
+  * OpenVPN Release 2.7_rc1 (Gert Doering, 4281449b)
+
+ -- Yuriy Darnobyt <[email protected]>  Mon, 17 Nov 2025 11:42:02 +0100

release/vars.example

@@ -23,13 +23,13 @@ GIT_AUTHOR="Yuriy Darnobyt <[email protected]>"
 MSI_BUILD_ONLY="NO"
 
 # Version numbers
-OPENVPN_PREVIOUS_VERSION="${OPENVPN_PREVIOUS_VERSION:-2.7_beta3}"
-OPENVPN_CURRENT_VERSION="${OPENVPN_CURRENT_VERSION:-2.7_rc1}"
+OPENVPN_PREVIOUS_VERSION="${OPENVPN_PREVIOUS_VERSION:-2.7_rc1}"
+OPENVPN_CURRENT_VERSION="${OPENVPN_CURRENT_VERSION:-2.7_rc2}"
 OPENVPN_CURRENT_TAG="${OPENVPN_CURRENT_TAG:-refs/tags/v$OPENVPN_CURRENT_VERSION}"
 OPENVPN_PREVIOUS_TAG="refs/tags/v$OPENVPN_PREVIOUS_VERSION"
 
 OPENVPN_GUI_CURRENT_MAJ_VERSION=11
-OPENVPN_GUI_CURRENT_MIN_VERSION=57
+OPENVPN_GUI_CURRENT_MIN_VERSION=58
 OPENVPN_GUI_CURRENT_FULL_VERSION="$OPENVPN_GUI_CURRENT_MAJ_VERSION.$OPENVPN_GUI_CURRENT_MIN_VERSION.0.0"
 OPENVPN_GUI_BRANCH="master"
 
@@ -38,7 +38,7 @@ OPENVPN_DCO_CURRENT_VERSION="${OPENVPN_DCO_CURRENT_VERSION:-6.17.0.2025102200}"
 OPENVPN_DCO_CURRENT_TAG="${OPENVPN_DCO_CURRENT_TAG:-refs/tags/ovpn-net-next/main-6.17.0-2025102200}"
 OPENVPN_DCO_PREVIOUS_TAG="${OPENVPN_DCO_PREVIOUS_TAG:-refs/tags/ovpn-net-next/main-6.17.0-2025100701}"
 
-INSTALLER_BUILD=8
+INSTALLER_BUILD=9
 INSTALLER_VERSION="I"$(printf "%03d\n" $INSTALLER_BUILD)
 # Debian packaging scripts do not allow underscores (e.g "2.4_alpha2")
 DEBIAN_UPSTREAM_VERSION=`echo $OPENVPN_CURRENT_VERSION|sed s/"_"/"~"/g`

src/openvpn

@@ -36,15 +36,15 @@ define([PRODUCT_NAME],      [OpenVPN])
 define([PRODUCT_PUBLISHER], [OpenVPN, Inc.])
 
 dnl The package version as displayed by UI and used in filenames (no spaces, please).
-define([PACKAGE_VERSION], [2.7_rc1-I008])
+define([PACKAGE_VERSION], [2.7_rc2-I009])
 
 dnl The MSI product version in the form of n[.n[.n]] (numbers only).
 dnl The third field is 100*openvpn bugfix release + MSI build number.
 dnl So for the 2nd MSI build for OpenVPN 2.6.3 use 2.6.302
-define([PRODUCT_VERSION], [2.7.008])
+define([PRODUCT_VERSION], [2.7.009])
 
 dnl The MSI product code MUST change on each product release.
-define([PRODUCT_CODE], [{16CF1031-6DBC-4C34-A792-68C397F43920}])
+define([PRODUCT_CODE], [{3C5DB25B-612E-4EA9-A71F-0E01717D8A83}])
 
 dnl The MSI upgrade codes MUST persist for all versions of the same product line.
 dnl Please use own upgrade codes when deploying a non-official OpenVPN release.