security/openvpn port needs to be upgraded to version 2.7.0 https://github.com/OpenVPN/openvpn/releases/tag/v2.7.0
Created attachment 268004 [details] 0001-security-openvpn-update-to-v2.7.0.patch (In reply to Alexander from comment #0) It was released yesterday, still too hot to be in common use, but if you really want fresh stuff, please try the attached patch.
There are some things to be sorted out first. In the interim, use Marek's patch locally.
Created attachment 268051 [details] 0001-security-openvpn-Update-2.6.19-2.7.0.patch Patch which addresses the issue reported in bug 293176. FreeBSD version 15.0 and later have native inotify(2) support.
Created attachment 269277 [details] 0001-security-openvpn-Update-2.6.19-2.7.1.patch OpenVPN 2.7.1 was released yesterday. It has at least a couple of FreeBSD-related fixes: - Make --enable-async-push work on FreeBSD 15 (bug 293138) - Make DCO work on FreeBSD systems that have no IPv4 support in kernel (FreeBSD bug 286263) Port builds and runs fine on FreeBSD 15.0-STABLE (has been runtime-tested since yesterday on our servers).
Comment on attachment 269277 [details] 0001-security-openvpn-Update-2.6.19-2.7.1.patch Thanks, however the removed libexec/openvpn-client.{down,up} scripts are still referenced in files/openvpn-client.in. Could we update this file (use openvpn-devel/ port as reference)?
As discussed on IRC, this patch is incomplete wrt "openvpn-client" - it still installs the old script which relies on openvpn-client.up, openvpn-client.down, which no longer exist. Please amend the patch to adjust openvpn/files/openvpn-client.in to the version from openvpn-devel :-)
Created attachment 269289 [details] 0001-security-openvpn-Update-2.6.19-2.7.1.patch (In reply to Gert Doering from comment #6) Thanks for the very productive discussion and the extended support that you guys provide on IRC. Here's the requested, updated patch. BTW, the services are still running, under moderated load - so runtime testing makes progress - so far so good.
Created attachment 269290 [details] improved patch to update UPDATING, openvpn-client script and message Marek, Gert, how about this patch instead, can you also eyeball this before we put it live?
(In reply to Matthias Andree from comment #8) This patch looks excellent, many thanks for the improvements !
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=51f1036a07509a1e3eb50cf6e7904a88f55bb451 commit 51f1036a07509a1e3eb50cf6e7904a88f55bb451 Author: Matthias Andree <mandree@FreeBSD.org> AuthorDate: 2026-04-01 09:36:40 +0000 Commit: Daniel Engberg <diizzy@FreeBSD.org> CommitDate: 2026-04-05 20:00:05 +0000 security/openvpn: Update to 2.7.1 This changes installed scripts, openvpn-client.up and .down scripts are no longer installed into libexec/, but instead a dns-updown script is placed into libexec/openvpn/ (all under $PREFIX). Based on a patch provided by Marek Zarychta. Changelog: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.1 PR: 293138, 286263 UPDATING | 9 +++++++++ security/openvpn/Makefile | 4 +--- security/openvpn/distinfo | 6 +++--- security/openvpn/files/openvpn-client.in | 5 ++--- security/openvpn/files/patch-inotify (gone) | 11 ----------- security/openvpn/files/pkg-message.in | 17 ++++++++++++++--- security/openvpn/pkg-plist | 3 +-- 7 files changed, 30 insertions(+), 25 deletions(-)
I think we have missed the opportunity to have this in 2026Q2, let's see how this works out.
A commit in branch 2026Q2 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=1af78340d07c0fb3936ecb44e424faf9181dfc74 commit 1af78340d07c0fb3936ecb44e424faf9181dfc74 Author: Matthias Andree <mandree@FreeBSD.org> AuthorDate: 2026-04-01 09:36:40 +0000 Commit: Vladimir Druzenko <vvd@FreeBSD.org> CommitDate: 2026-07-01 20:16:46 +0000 security/openvpn: Update to 2.7.1 This changes installed scripts, openvpn-client.up and .down scripts are no longer installed into libexec/, but instead a dns-updown script is placed into libexec/openvpn/ (all under $PREFIX). Based on a patch provided by Marek Zarychta. Changelog: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.1 PR: 293138, 286263 (cherry picked from commit 51f1036a07509a1e3eb50cf6e7904a88f55bb451) UPDATING | 9 +++++++++ security/openvpn/Makefile | 4 +--- security/openvpn/distinfo | 6 +++--- security/openvpn/files/openvpn-client.in | 5 ++--- security/openvpn/files/pkg-message.in | 17 ++++++++++++++--- security/openvpn/pkg-plist | 3 +-- 6 files changed, 30 insertions(+), 14 deletions(-)