packages/net/openvpn, branch master

treewide: cleanup URLs

2026-05-08T20:28:27Z

This commit converts plain HTTP URLs to HTTPS, and updates old or outdated URLs. Signed-off-by: Yanase Yuki

openvpn: disable wolfssl support

2026-05-05T06:02:59Z

WolfSSL support for OpenVPN is currently broken: https://github.com/wolfSSL/wolfssl/pull/10309 Until a fix is available, disable WolfSSL as variant. Support can be re-enabled when WolfSSL is updated. Signed-off-by: Sander van Deijck

openvpn: update to 2.7.4

2026-05-05T06:02:59Z

Update the OpenVPN package to 2.7.4 For changes, see: https://github.com/OpenVPN/openvpn/blob/v2.7.4/Changes.rst Signed-off-by: Sander van Deijck

openvpn: handler: refine netifd routing and config

2026-04-17T06:48:33Z

Introduce a new `ipv6` proto option for OpenVPN netifd integration and export it to the hotplug environment. IPv6 remains enabled by default, but can now be explicitly disabled per instance. Update the hotplug helper to apply IPv6 addresses and routes only when IPv6 is enabled, allowing cleaner IPv4-only tunnel deployments. Also improve route handling by: - ignoring invalid default gateway values (0.0.0.0 / ::) - replacing fixed `seq` loops with shell-safe while loops - keeping trusted peer host routes conditional on valid gateways Signed-off-by: Chen Minqiang

treewide: set me where PKG_MAINTAINER empty

2026-04-16T18:48:36Z

Seems a lot of packages are just getting abandoned by people. Will pick these up and see them through. Signed-off-by: Alexandru Ardelean

openvpn: make the packages dependency clearer

2026-04-15T09:08:30Z

No functional changes, so the PKG_RELEASE version number has not been incremented. Signed-off-by: Florian Eckert

openvpn: update to 2.7.1

2026-04-13T16:24:25Z

The new DCO module depends on OpenVPN 2.7.1. For details refer to https://github.com/OpenVPN/openvpn/blob/v2.7.1/Changes.rst Removed upstreamed wolfSSL patches: - 101-Fix-EVP_PKEY_CTX_-compilation-with-wolfSSL.patch - 102-Disable-external-ec-key-support-when-building-with-wolfSSL.patch Reworked 100-mbedtls-disable-runtime-version-check.patch to use MBEDTLS_VERSION_STRING instead of a mutable buffer. Signed-off-by: Qingfang Deng

openvpn: fix quoting and deprecated option filtering

2026-03-27T13:56:22Z

This patch fixes two issues in the netifd protocol script: 1. Fix logic error in deprecated option filtering: Previously, ${f%%:*} was called before checking for the deprecated flag (:d). This stripped the suffix and made the check [ "${f#*:}" = "d" ] always fail. The cleaning of $f is now deferred until after this check. 2. Improve parameter quoting for specific options: - Adds single quotes to --push and --push-remove parameters to handle spaces (e.g., "route 10.0.0.0 255.255.255.0"). - Unifies quoting for 'file' type options to improve shell safety. - Refactors the build logic using a case statement for better extensibility. Signed-off-by: Chen Minqiang

openvpn: increment PKG_RELEASE by one

2026-03-21T13:47:47Z

Increment PKG_RELEASE by one. Signed-off-by: Chen Minqiang

openvpn: handle netifd setup in hotplug script

2026-03-21T13:47:47Z

- Process 'up'/'down' events to manage interface status. - Add IPv4/IPv6 addresses and routes via netifd-proto. - Parse DNS/search domains from foreign options. - Convert netmasks and CIDR strings with new helpers. - Apply MTU settings from OpenVPN environment. Signed-off-by: Chen Minqiang