list-openvpn-nl

list-openvpn-nl@lists.fox-it.com

37 discussions

RHEL8 repository fixed
by Max Fillinger 27 Nov '24

27 Nov '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! A user has reported that the RHEL8 repository was not working. We have now fixed it. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmdHGnAACgkQ5IsYow7q aagmwAwAkteqSA60c6Gej7h2G/Q4NNXOMawF57x0v293s9Q7rz1GF3Q9EtYdXu8G hpUK6zZAcOL6lAahs1q/SA5IcF1HbCS7/AG/vj+6cxESUi6YrkRZbPLmtvzPmQfS gAILl3OfXMiXSRztXrghCT1x+fA435q8P7ZDJvb1fk6MQlnf602xshjnFWguuPR8 cigefJW/VLE9m4ePfDCRIaHHePV2Mo1hncWBIUGOQWz1od4b+dCfQsdws6azQiCL sVUJyL408YTFrZhnQJ0VuDDRWCiG6zYpzxzPET/pkrFQS0ZMNmA4nNf4k+us3wcg UFbQB6I+TkpP4jjj2EigGWoxd2gIc70O9k2f0l1HlWM6WJTbVLCmtYkCDcJw+MUT Pke9S/qc3Jhe/Zyw5wKuRunmqXaMwBD7TYnaMSIF5Y+YA2xcVFtsEj/x/eiCozOF D6EzeLALsosKGHDaaY8ieRy28VNaQX2WdFpScyL9Kny3zbqVoyUrYFWw5I3EBuQu s/jgNQlX =DH/S -----END PGP SIGNATURE-----

1 0

RHEL7 package for OpenVPN-NL 2.5.11-nl1 released
by Max Fillinger 23 Oct '24

23 Oct '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! We have released a package of OpenVPN-NL 2.5.11-nl1 for Redhat Enterprise Linux 7. A user has reported a bug in 2.5.6-nl1 and 2.5.10-nl1 on RHEL7. It tries to run /usr/bin/ip to configure the tun interface, but on Redhat, the ip binary is only in the /usr/sbin/ directory. This can be worked around by adding "iproute /usr/sbin/ip" to the configuration. Since 2.5.6-nl1 and 2.5.10-nl1 are not working correctly on RHEL7, we decided to make one last release for RHEL7. The cause of this bug is that our old RHEL7 build machine had a symlink from /usr/bin/ip to /usr/sbin/ip, so the OpenVPN build process selected /usr/bin/ip as the binary to use. We compiled the 2.5.11-nl1 source code on a fresh RHEL7 VM and it now uses the correct binary. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmcY6mwACgkQ5IsYow7q aag0dgv/dvzX96U/KwT3i42Y9IL09BUjCoG3lbRniqG/e1srUwjSFinSc/K2OrxZ 8NqfoN1Gmv6E3hPJQdN+rAOxkCbxO3q/UZ7+XUWSt6/d+olnSuCGtQP0r/efBL5D s3PcKLKeQCWf662MtNOCloeOQh4W9MMMwh/1Atiys5F2DTNPFe9ahfBgxuRrlNCe 3RDAuH8a5nGXa6snOaJQwFg7WGlbgnNpmkTXIYWDXvmjRIhY/Xr0bgWrS5QffbC0 quPvimUbFVlvKkCtQ9iOZPgsLTqZGN/v1HL3lUQF4AnBTe3Y1swDMcLruR/nuhaQ 3E2VmEqqAD41aOPKhGD4KKGI5m8mZuGcs8Et6yabEVKjs27ggFBfbB54ZbcCME/p GkJV9L0tO3ppP5jbHVxk/ufJDZL+UERkJB26c5rLMbXET6IOt5JsOkffOttXvnpt bqmcJ2KBTQUSHj2kI7lLFxHWrQyC6T1dsg7E0GDWB47lddUM2VFtobPjEPAH1MLC /NBaEmUK =Ikyb -----END PGP SIGNATURE-----

1 0

OpenVPN-NL 2.5.11-nl1 released for Linux
by Max Fillinger 09 Oct '24

09 Oct '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! We have released the Linux packages for OpenVPN-NL 2.5.11-nl1. The Windows release will follow later because the signing key has expired and we need to replace it. This version fixes CVE 2024-5594, a minor vulnerability where a malicious peer can corrupt log messages (after successful authentication). Since newer versions of mbed TLS can now be licensed under the GPLv2, we upgraded to version 2.28.8 in this release. We have added packages for Ubuntu 24.04 (Noble Numbat) and Redhat Enterprise Linux 9. We removed packages for Redhat Enterprise Linux 7 as its Maintenance Support 2 phase has ended. This will be the last release for Suse Linux Enterprise Server 12, because its General Support ends on October 31 2024. Installation instructions and direct download links for the packages can be found on https://openvpn.fox-it.com/software.html. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmcGyMsACgkQ5IsYow7q aajjhgwAjRNoQHfrFE3vkwwNpKovzs03a/84IxB6BxzWGavc053ETKtZ36XWddAC tPGhEPI3W1ngs8cgwDZGqtJPUV/sbyZf71h1/azkw6zCl5tZ/PPeywvYeagGxAzD GhGb9zYTpRHt222XRnrk1brFXQPW43vPHBbb5X01jVd0ckHrOrVvZso2+kzVZ/US 6YXo/J+LaWoJlcOfsFA2rzQRRYLym3I5gGyrLm6D5rEL3eNWqTY7u+B02CpN8QHH PujIFHw90JDRVhRjmZkTDFSPogWojw3ZF0o0dlKqrFK7da6vTO/Gq64EVTk8G4tY d4yykQhVeQgLkC/IVFPfiwWP4guzKWWzPy0oxSgyC4YEaXP8oPmv2BCC+i38KcMr cJbj3cmBtvFcNKqNkmbBOFoc63rdF1nXlX4CeZ626QFOtdpEPYHaguB6OjR2XqNB q8o7TW0V6r074B9yzusz4ubiD3fICy3EpcMIDJ0JnwBcixPqxR/D5FTVmEziUeyS /CdDZ8Yd =Kh2S -----END PGP SIGNATURE-----

1 0

OpenVPN-NL 2.5.10-nl1 released for Linux
by Max Fillinger 15 May '24

15 May '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! The Linux versions for OpenVPN-NL 2.5.10-nl1 have now been released. Unlike the Windows version, which fixed several security bugs, updating the Linux version is not urgent. We have added packages for Debian Bookworm and removed Debian Buster because it is end-of-life. This will be the last release for Redhat Enterprise Linux 7 as its Maintenance Support 2 phase will end on June 30th. Installation instructions and direct download links for the packages can be found on https://openvpn.fox-it.com/software.html. We are planning to add packages for Ubuntu 24.04 (Noble Numbat) and Redhat Enterprise Linux 9. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmZDbCoACgkQ5IsYow7q aajlSAv+Jd40B97YMutw042xpcrELaV4OBhkuBYP+Ct/7oA3Dugvr+cI0twJC/Os rA1xw/VHmN/Ywe4mYiluvXdVkbnzw0hJsDzkogXaMWv+e97eVMpIWy//lCAFhzRX 9Jw4w0Z+4qFUol4Yi2xO0xF87qN0YFiY6h1mRe9xikfvB87agd2p+v/Nt3QlGDc2 LCl9MRXtntWVA7KkdakvZY1ClKxdQ7oEzkihDb8/+3+xywFtW+OVcNVKA/KoJ8sb /+nKKL46cFrXdUrOS8fyqSmTTaeD28emFGBPJOEfmyGkOgBnRlXIztgZEf7jPpe7 +VnXN5Vjo5JlnqDD/QO5WecxLNnRmymrekqm2DSU0yy2a0CMwnDyWoi6jigdgzYl iKtlzXrOoSX//SEBdhprMmb6KvIOK0jF0HIk7lX8x6JpT+Gq04e3g+22UA9q1ehf fBucaxI7ztiWUcODhD47vP5rKyLKfQIhZMXmI02leCnleddEDgDPbJr9lO9m29li pMVNpPQV =gmg5 -----END PGP SIGNATURE-----

1 0

OpenVPN-NL 2.5.10-nl1 released for Windows, includes vulnerability fixes
by Max Fillinger 15 Apr '24

15 Apr '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! OpenVPN-NL 2.5.10-nl1 has been released for Windows and can be downloaded at https://openvpn.fox-it.com/repos/windows/openvpn-nl.msi. This release fixes CVE-2024-27459, CVE-2024-24974, CVE-2024-27903 and CVE-2024-1305. We recommend to update Windows installations of OpenVPN-NL as soon as possible. Linux packages for 2.5.10-nl1 will follow shortly. The Linux version is not affected by the CVEs, so on Linux the update is not urgent. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmYdS38ACgkQ5IsYow7q aaj9Lwv7BceXxA0Yx0BfX/s6M3fGWD7qvtNt4WFMsotm9ac33+Goa78GHTLqNWci CdJ1FbrZKJrTfYGSSCoUzwLMacPXyqFK7kmwT6O5C7IQw5I0Qrdrs5J+RWeDlPaL dTS6MDC+vRWkHosr2rgECETYV1ify2L4Ztt2B5T3+lRujPV4vgPPUZe49Z4x24i2 s++U0qvTYaBAZkgy3F3gLTLmfzZV7dcvtHMwhv6ytiBQaZhbsUUFRTtYKnEdUYT+ Lvo5z+J0FezxG5SnS+JWa2D7Dm7ZZJr+2z9DROFWt438W3nB08oDv2sJLk8QrkUG URs59IYAK6b03zonCcyrAXidLtXOatnCusw8wbrNLRMs3sJIifheXd+MKK47FP+g yX4PTFyAlkemkopPoncJ7dwZ6+te9Y33kO9A7u7T4nrka6FrZu1EelaC3HmQZ4xk 0EYziZq0jNJQlLEKDBRZcFyjl8g11oYsUboEYkRZpfOHyBdgp5PzAKcI/bP6RnCF Wx19W1Yd =WgKS -----END PGP SIGNATURE-----

1 0

Vulnerabilities in Windows version
by Max Fillinger 20 Mar '24

20 Mar '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! There are several vulnerabilities in the Windows version of OpenVPN and OpenVPN-NL. The vulnerabilities are as follows (descriptions copied from (https://openvpn.net/community-downloads/): * CVE-2024-27459: Windows: fix a possible stack overflow in the interactive service component which might lead to a local privilege escalation. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> * CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> * CVE-2024-27903: Windows: disallow loading of plugins from untrusted installation paths, which could be used to attack openvpn.exe via a malicious plugin. Plugins can now only be loaded from the OpenVPN install directory, the Windows system directory, and possibly from a directory specified by HKLM\SOFTWARE\OpenVPN\plugin_dir. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> * CVE-2024-1305: Windows TAP driver: Fix potential integer overflow in TapSharedSendPacket. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> We are in the process of preparing an OpenVPN-NL release to fix these vulnerabilities. Note that the local privilege escalations mentioned above require unprivileged users to edit OpenVPN plugin files. Please ensure that if you run OpenVPN-NL with plugins, non-admin users cannot edit those plugin files. I will let you now when we have the new release ready. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmX7OXUACgkQ5IsYow7q aahM4gv/T8sZ1gl3UErBMR/vuYiflbLkzObR4sGwC/Z3lpnUwDrmv2zyVBoWY9+o F+ug22LYMPaMuJPzm9chu139vRcCaPRo7/aRLk+kp6jeQ/LeENSwsvo4rB6DjKKJ phTS7jxftDI0aiJCH0UJVSA+b97YsM+BTEas25PpHdK+u45HlDgmr418F9Tvy8Pk Prek492Dds6uDuDzpCxikcntFS9THeprwQ396cXq7UJN3JZzgyYOFrBB8xkmKWCa 6Kc/CNmO4N2r546GDG+6lc1DXjgKbNhPhb4SiFzLj10o4KqmQBwSmceC1CqrTFqI yzTEoA+p4YYUGxLp0nWND8ZRR417US5qSfQ/fjsOPYKIlwIiH/8csieZ2Do5zbjo 3FHMXOuQkQUuZSKeEfdxhwkKRLveS0ctfATIbFStNc/TjOJWqC3em1iBGzfBst/U rNY2qd/afSV1xGNXWt1eFZLFUPpjHtIf1C7yTJzt9EdLcCHTYRO9CV8CX634oBkm zBUanAKt =2usT -----END PGP SIGNATURE-----

1 0

Vulnerabilities announced at Usenix Security conference
by Max Fillinger 09 Aug '23

09 Aug '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! Vulnerabilities affecting multiple VPN softwares, including OpenVPN and OpenVPN-NL are going to be presented at the Usenix Security conference today. If the local network is operated by a malicious party, the VPN user's routing table can be manipulated so that data that should go through the VPN is sent as plaintext. The OpenVPN developers are currently considering ways to mitigate these vulnerabilities. For now, users can mitigate them as follows: * Specify the VPN server by an IP-address, not by a hostname. If that is not possible, authenticate DNS traffic in some way (e.g., DNSSEC, DNS over HTTPS) *before* setting up the VPN tunnel. * Do not connect to untrusted networks. VPNs do not offer perfect protection against malicious local network operators. * If you have to use an untrusted network, add the block-local flag to redirect-gateway in the client configuration. (Note that this disables all traffic to the local network, so it cannot be added to every configuration.) You can find an explanation of these attacks, including a link to the paper on https://tunnelcrack.mathyvanhoef.com. I include a brief summary below. Typically, routing when running a VPN looks as follows: * All traffic not matching any other rules is sent through the VPN * Traffic to an address in the local network is *not* sent through the VPN. This way, machines in the local network can still be accessed. * Traffic to the VPN server is sent out to the router. # LocalNet Attack In the LocalNet Attack, a malicious DHCP server claims that a public IP address is in the local network. For example, if the attacker wanted to leak traffic to wikipedia.org (91.198.174.192) it would claim that the local network is 91.198.174.0/24. Of course, traffic to websites will usually be encrypted, but it will still leak whether the website is visited or not. This can be prevented by adding the block-local flag to redirect-options (see manual), but it will also block access to any machines in the local network when using the VPN. # ServerIP Attack The ServerIP Attack affects clients that have the VPN server specified by a hostname rather than an IP address. The attacker spoofs the DNS response to make the client use an IP under their control as VPN server. Let's say this IP address is 1.2.3.4. This server proxies the VPN traffic to the actual VPN server so that the user does not notice anything is wrong. Now, the attacker can spoof the DNS responses for other hosts to send traffic to the same server at 1.2.3.4. Because this is the same address as the VPN server, this traffic bypasses the VPN and goes directly to the router. This attack can be prevented by using a hard-coded IP address for the VPN server, or by authenticating DNS in some way (e.g., DNSSEC or DNS over HTTPS) *before* setting up the tunnel. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmTTWuIACgkQ5IsYow7q aag9iAwAibWTVheFr+2b3IZk5i1TLymzo0yUSsB71MoCwmOBryPEofOxfFUHvI5/ 2W9Gfufjpeq1UGUZAeAi82vk1NABkoem4W687/StoVH4/MGv4zJNNOAwL2Qe7LdF AQh72tZRarVQj2dGWTds93Imu6Zj1eOzAKIsVbRbuzIsVjRGBBkDMF8E77CL6Rft Iz8Yt8stWMBixiGoiCCipCwHyB9hD2f+wlXByy+3Rg699239sRoQFBtsGwAl24AL F7paRni0cDGIjE/gq7TiFpmFKfnoEjEFmyxeZBYzab7uQER3T1pmxa2b7dNCCz5H gK1zOWaelBUq/A25o9xldLCiO0lKB/uk1mvdYPwulKL7tMvklGPJme7DEc43oTFu jK4ANV3pjKKFJmg2Opo3xJlFX1fyhDWXsKXqda6iWXVLK1tbkmXMqQmDZ7NSO2x4 4jn5QJboZ+Aa8cyYrOyZTlfx0UePAgv3Hj+zDukOWmb8N+XTlMFTWYWOiMdlGG81 ikOTofUE =0k2M -----END PGP SIGNATURE-----

1 0

Metadata changed in RPM packages
by Max Fillinger 13 Jul '23

13 Jul '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! We have changed the metadata of OpenVPN-NL packages for RedHat and SUSE operating systems, for reasons of Fox-IT's security. We send this e-mail so that you are not alarmed if you notice that the packages have changed. The binaries inside the packages are the same as before, and there is no action required on your part. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmSv+PcACgkQ5IsYow7q aah1Ywv/VMpD91ugM+6w2QBBicJVeqscvDDvK6pIuezPLUrtRD6FUl9fx5MPOCoA wJwhbdaPuSBVvA+buMRQmYmnEZ2WNBFttU8zZPbQdWkBaPMYKFL16fQJwwFL3Cgb JGY2QZpSF6gts6xlDSlO21f12pznaH7TRzn6ApyYRVcIoeD6gXl9q7OKbL/Nn/fI mJMvD/Lt5PDhj5RO48ZkFiMEFVN9Kb62Mtop4aw/m0EJurNVgBUrLVBZXxmIaDbB CGbA83L8HcvZ37jMrMyL+2LMRthfpfm0v9rh8xmcPH6kXE4cbYCSifKv01WB/0JQ DXYqW8+t6++4MVod3YTw/+qyZO7mNze0RU4leDpH1QcPtNjksXSv2raFzT25+M+b JPZL8CFsecAIxROLC1oddn/zazqBjmrDE2O1DFwE+6T+FfnTSdz/AOIFn1KmzU6g yvMgI6fDyQPNqGvAkbQDnXrUUbe5zG3LlaWq35hBEAFHgBo9jYTMTy7VnOetzJk0 hSbvrAsI =29Ma -----END PGP SIGNATURE-----

1 0

OpenVPN-NL 2.5.6-nl1 released
by Max Fillinger 03 Apr '23

03 Apr '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! I am happy to finally announce the release of OpenVPN-NL 2.5.6-nl1! Packages for Linux and Windows can be downloaded at https://openvpn.fox-it.com. Please note that the deployment advisory has been updated: https://www.aivd.nl/onderwerpen/informatiebeveiliging/documenten/publicatie… As previously announced, the signing key for new Linux releases has been updated. To install the new version with your distribution's package manager, you need to replace the key. The new key can be downloaded at https://openvpn.fox-it.com/repos/fox-crypto-gpg.asc. Its fingerprint is A518F75374D3AF82AE11810A13DF39ED913F5D8F. It has been signed with the previous key. The Windows version is now installed with an MSI installer. Please uninstall the old version before running the new installer. The keys for this mailing list at https://openvpn.fox-it.com/repos/fox-crypto-mailinglist.asc have also been updated. I have extended the validity period of my public key. The keys of colleagues who have moved on to different projects at Fox-IT have been removed. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmQrA9kACgkQ5IsYow7q aajk8Qv8DCNrOWp18DGIwT4y9c6F4pT2Pa/x/+1IyUqqekAfhX2HU9zjDYPYt9uw gEjBHdA1coaANRhQ1G1HGqzsQ1/F6Xl7AbWSLt3IiquED6FCEIUELQUipBYn0wN0 JbbNDvRwEg/cfOZOP8tjYsXgWAAQNKFyE2Y0tK11/ry6oDVDE1reCQ39jHCyRru2 xwv6sLOwzTkQr4LN7jSe0rJySjtnpTfmkR/WfbgD6L+daUWSrH5U/vEjWHQPCRxg khn4fiFU57LmTbTpXFfoSGVjMMUQblNO0OJ7TxQFFFcHmwDkOw9wXj/DEglOKbXb LRVrwb8B/wl9RzBAUnqqGBWwga+Rnv36whzamYCw9e+zKJCst/dwH4sMf26Mm98i hbOQF0SVVcnQWTWVcX/Mn6ru5aaTJLF3leZP+2Zy8tgLCc7JTmY2XfMAGnWldQrZ SwymowGCUO5xS2iauF2Yc9i/Cq77e/RyCVjpyncspa7JK7dqyfFaHcoSbJUZXdPb u3Kn4A25 =7xea -----END PGP SIGNATURE-----

1 0

New signing key for Linux packages
by Max Fillinger 03 Mar '23

03 Mar '23

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! Starting with the upcoming 2.5 release of OpenVPN-NL, we will use a 4096-bit RSA key to sign Linux packages. If you want to install the upcoming packages using your package manager, you will need to add the new key. The new key can be downloaded at: https://openvpn.fox-it.com/repos/fox-crypto-gpg.asc The fingerprint is: A518 F753 74D3 AF82 AE11 810A 13DF 39ED 913F 5D8F The new key has also been signed with the old key. The old key and the signatures on the old releases are still trusted, but 2048 bits are not future-proof enough going forward, hence the upgrade. The signing key for Windows releases already is 4096-bit. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQHXBAEBCgBBFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmQB6zQjHG1heGltaWxp YW4uZmlsbGluZ2VyQGZveGNyeXB0by5jb20ACgkQ5IsYow7qaagHNwv8D33bcIm8 B4GR3avdIe8CadHJaSCk6KUxSbEWWholvE8456RJv60JKKaeZ+sp08BlvNfJSlVh 78SkmnNRXhNgrSa9PYLCDpALq4j9+fRitYIr8skWCq/w1j1yOanIfLIiKWAqJdFB s2Ly6Pz2kAfl20MsJcggwsUj2sEvX4NZJx/edny6v6d9GORh9Lm5zmJ4R73Owl4b cgykZv7lkhpl7m/1blwXPoqkdx2ZY8ckLFHz8j+lc71bO56efxKvUv8Nanq5HpB9 QwEh2g0Q0zd1iRK9eJ6goLHghfJmvZZp1+mu7qg+M/EtmfZoYsdv3huq7GGfRqCe 9towi4k8MjLsC3lqObD+NjWRah1gJN6baZMbt1BgB6dsfUYIRyocDueRTbGImZNo d9Pp700PTNg9LRfvDDM8nJtom5B2n7FGBaZXE0CKO0z/q163P0GcJgl17PQYY3VG km3afY3SJNae/Pqeep6Q6ieNQBefMIJqwoK/owTDGngTtbdN0/4+0V5p =TRiv -----END PGP SIGNATURE-----

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

list-openvpn-nl