Tuesday, November 8, 2016

UPDATE (16/11/2016) we released version 3.7 which includes both OpenVPN (LibreSSL) and OpenVPN (OpenSSL). OpenSSL version is recommended if you face problems with speed over 70-80Mbps. 

Our VPN client software for Windows has reached version 3.6 and it includes some innovative features along with common improvements and fixes. 

Most important changes from the Change Log: 

- Switched from OpenSSL to LibreSSL for security reasons
- Added support for ports TCP-80 and UDP-53 with OpenVPN 128-bit (better obfuscation and firewall by-passing)
- Added support for AES GCM cipher instead of AES CBC with OpenVPN connection types
- Added a notification when empty characters are used at the beginning/end of credentials (common problem when credentials are copied & pasted, resulting in authentication failures)
- Added country flags
- Several bug fixes and improvements

Starting with this version, both control channel and data channel encryption ciphers received a significant improvement: 

- for control channel, by default it will use the parameters ECDHE-ECDSA-CHACHA20-POLY1305 (for OpenVPN ECC) and ECDHE-RSA-CHACHA20-POLY130 (for other OpenVPN connection types)
- the data channel, by default it will use AES-GCM cipher instead of AES-CBC

Note that for the above changes, it must match the configuration on server-side and it is not yet enabled on all servers. The following are already using the new parameters: Romania, Finland, Luxembourg, Germany and Hong Kong (1). 

Important notes:

- Scheduled maintenance: A mass roll-out to update OpenVPN on servers is scheduled on November 12, between 08:00-11:00 AM UTC and 20:00-22:00 PM UTC. During this window, there will be short interruptions (~1 minute) with all OpenVPN connections on other locations than those listed above. 
- Auto-update not working: Auto update from version 3.5 doesn't work and you need to update the software manually. If you use the installable version, just download the installer and it will overwrite current version. The portable version can be simply unzipped anywhere and started from that folder. 
- No support for Windows XP: if you're on Windows XP, don't update. We are no longer supporting it and you should switch to a newer Windows release. We recommend Windows 8.1 over 10 for privacy reasons. 

Download links: installer / portable zip (Checksums)

MacOS update is also ready to be released in the coming days. 

Update (12/11/2016): VPN gateways in Europe except those in Netherlands have been updated this morning, by end of day we will update all others.