packages/net/openvpn, branch master

openvpn: update to 2.7.5

2026-07-06T16:32:58Z

Maintainer: Alexandru Ardelean ardeleanalex@gmail.com @commodo Changelog: https://github.com/OpenVPN/openvpn/blob/v2.7.5/Changes.rst Version: Main Compile tested: X86 , the sole patch applies cleanly Run tested: X86 Signed-off-by: Erik Conijn

openvpn: add missing host routes

2026-05-22T04:11:38Z

Maintainer: Alexandru Ardelean ping @feckert First of all big thanks to all involved devs, porting this to proto is not a minor task and besides some small quirks it is working well. (Not all that happy with the use of a default route instead of /1 routes, because you loose internet if the tunnel goes down but that is just me nitpicking) However I had problems with default routing as the host routes to the server endpoint were missing. I tracked it down to code in the `openvpn-hotplug` script and made some changes and in my testing it appears to work now. As a bonus I also added code for a future implementation of the `nohostroute` option. Problem: The host routes were created by just using route setup this however does not work. Solution: using `proto_add_host_dependency` seems the better solution. Furthermore the correct guard for IPv6 seems to be `net_gateway_ipv6` instead of `route_ipv6_gateway` however even the correct guard is only working if ipv6 source routing is disabled on wan6, so perhaps we should consider removing the guard entirely. For now I left it in place with a warning. I have tested it on X86 running master build from 5 days ago, both for IPv4 and IPv6 Please have a look and consider implementing. Thanks Signed-off-by: Erik Conijn

openvpn: use mbedtls by default

2026-05-19T07:04:17Z

When luci-proto-openvpn is selected in `make menuconfig`, openvpn-openssl is picked up automatically. As mbedTLS is the default TLS package, set DEFAULT_VARIANT on openvpn-mbedtls so that it is used by default. Signed-off-by: Qingfang Deng

openvpn: add kmod-ovpn-backports dependency

2026-05-16T08:04:52Z

With openwrt/openwrt@f7d6e73 and openwrt/packages@974c2be, kmod-ovpn-backports can now be built and run correctly. add this dependency enables DCO. Link: openwrt/packages@01fafd69e Test on: Mediatek Filogic GL-MT3000 (with kmod-crypto-hw-safexcel) Signed-off-by: Andy Chiang

treewide: cleanup URLs

2026-05-08T20:28:27Z

This commit converts plain HTTP URLs to HTTPS, and updates old or outdated URLs. Signed-off-by: Yanase Yuki

openvpn: disable wolfssl support

2026-05-05T06:02:59Z

WolfSSL support for OpenVPN is currently broken: https://github.com/wolfSSL/wolfssl/pull/10309 Until a fix is available, disable WolfSSL as variant. Support can be re-enabled when WolfSSL is updated. Signed-off-by: Sander van Deijck

openvpn: update to 2.7.4

2026-05-05T06:02:59Z

Update the OpenVPN package to 2.7.4 For changes, see: https://github.com/OpenVPN/openvpn/blob/v2.7.4/Changes.rst Signed-off-by: Sander van Deijck

openvpn: handler: refine netifd routing and config

2026-04-17T06:48:33Z

Introduce a new `ipv6` proto option for OpenVPN netifd integration and export it to the hotplug environment. IPv6 remains enabled by default, but can now be explicitly disabled per instance. Update the hotplug helper to apply IPv6 addresses and routes only when IPv6 is enabled, allowing cleaner IPv4-only tunnel deployments. Also improve route handling by: - ignoring invalid default gateway values (0.0.0.0 / ::) - replacing fixed `seq` loops with shell-safe while loops - keeping trusted peer host routes conditional on valid gateways Signed-off-by: Chen Minqiang

treewide: set me where PKG_MAINTAINER empty

2026-04-16T18:48:36Z

Seems a lot of packages are just getting abandoned by people. Will pick these up and see them through. Signed-off-by: Alexandru Ardelean

openvpn: make the packages dependency clearer

2026-04-15T09:08:30Z

No functional changes, so the PKG_RELEASE version number has not been incremented. Signed-off-by: Florian Eckert