v1.12.0

1.12.0 (2025-10-30)

Feature

• install: rely on journal to read openvpn logs on debian-based distros (5b689e8)
• install: increase minimum TLS version to limit ciphersuites reducing attack surface (f2859d7)
• install: update EasyRSA to version 3.2.3 (5c03fb2)
• scripts: reject revoked or malicious clients before TLS auth with tls-crypt-v2 metadata (2.5+) (4a16457)
• install: generate client-specific tls-crypt keys for better security (2.5+) (aa92a02)

Bug Fixes

• install: consider /lib and /usr/lib both as valid module paths (03a3c48)
• install: remove existing temporary setup vars file in case it's owned by another user (547a49a)
• install: correct tls-crypt-v2 server key location (dc43416)
• install: fix Debian 13 (trixie) support and other minor improvements (4b55f32)