New version of OpenVPN Access Server released

Today a new version of OpenVPN Access Server has been released. OpenVPN Access Server (OpenVPN-AS) is a set of installation and configuration tools that simplify the rapid deployment of a remote access VPN server. It is based on the popular open-source software OpenVPN, allowing you to work with a configured VPN server using cross-platform client software. Features provided by the server are a carefully selected set of all possible OpenVPN configurations. Thus, OpenVPN-AS simplifies the configuration and subsequent management of the system. Read on to find out what's new in version 1.7.1.

• Added support for OpenVPN clients compiled without LZO support (it is necessary that OpenVPN clients be compiled with the ./configure --enable-lzo-stub option).
• The vpn.routing.allow_mcast variable has been added, allowing you to apply Iptables rules that allow the exchange of UDP Multicast and IGMP packets between the server and client.
• Supported 64-bit certificate serial numbers
• A bug was observed during authentication, in which an authentication response containing more than a certain number of characters caused the server to crash and the username was considered empty.
• Fixed a bug where clients united in a group could not gain access to the gateway due to the fact that when connecting to the gateway, a route was not created along which it was necessary to send a response to clients.
• Fixed issue with Mac OS X DHCP client that was rewriting the DNS settings issued by the VPN server.
• Serious work has been done on the management session interface. This should fix the problem of long sessions, in which the session was broken after about 6 hours from the start of the connection.
• A critical fix for UCARP is that it reliably processes an event in which the UPARP virtual IP address has not been deleted properly since the previous connection.
• Fixed some stability issues in the web-based client interface when Access Server starts in External PKI mode.
• The Mac OS X client can now provide the VPN server with its MAC address for host authentication.
• Added error messages for disabled users, revoked certificates, AS license key expiration.
• The tray now provides more information about the status of the connection.
• If access to the Access Server is configured by name ( hostname ), and the client tries to access it by IP address from the browser, then a redirect to the page with the IP address and vice versa is carried out.
• When switching between servers, the window with the question is canceled.
• When switching to a server accessible by IP address, and provided that another server is already connected, the connection status page for the connected server is not displayed.

OpenVPN-AS Web Interface

References:

A complete list of changes can be found here .
The distribution for CentOS, Ubuntu / Debian, Redhat, Fedora is available here .
The distribution kit for virtual platforms is located here .
A detailed description of the OpenVPN-AS installation can be found here .