Release Notes for VPN Server

Compatibility and Installation

1. VPNCenter 1.4.9-2971 requires DSM 7.2 and above.

Fixed Issues

1. Fixed a security vulnerability regarding OpenSSL (CVE-2022-0778).
2. Minor bug fixes.

Fixed Issues

1. Fixed an issue where after updating to DSM 7.1, VPN-related firewall rules were not automatically enabled when the NAS is restarted, resulting in connection failure.

Compatibility and Installation

1. This version is only compatible with DSM 7.1 Beta or above.

Fixed Issues

1. Fixed an issue where OpenVPN might still occupy Port 443 after being disabled.
2. Fixed an issue where the account field required the domain name to verify domain users.
3. Fixed multiple security vulnerabilities (CVE-2020-28194, CVE-2020-15078, and CVE-2021-3712).
4. Minor bug fixes.

Fixed Issues

1. Fixed an issue where using the root certificate as an intermediate certificate would cause a connection failure on OpenVPN.
2. Fixed an issue where certificate parsing might fail if the root certificate contained special characters.

What's New

1. Added support for the verification of server CN and TLS auth keys to enhance the security of OpenVPN connections.

Fixed Issues

1. Fixed an issue where the exported OpenVPN configuration file might contain the wrong certificate chain when using Let's Encrypt, preventing the client from connecting.
2. Fixed an issue where using Synology Directory Server on DSM 7.0 will cause domain users to fail to sign in to L2TP VPN.
3. Fixed an issue where users would be unable to connect with OpenVPN if a root certificate was used as an intermediate certificate.
4. Fixed an issue where certificate parsing might fail if the root certificate contained special characters.
5. Fixed a security vulnerability regarding OpenVPN (CVE-2020-15078).
6. Minor bug fixes.

Important Note

1.The current DST Root CA X3 root certificate used by Let's Encrypt will expire at the end of September. To ensure continued connectivity, please update the package and re-export the configuration file to your OpenVPN client as soon as possible.

Fixed Issues

1.Fixed an issue where the exported OpenVPN configuration file might contain the wrong certificate chain when using Let's Encrypt, preventing the client from connecting.

Important Note

1.The current DST Root CA X3 root certificate used by Let's Encrypt will expire at the end of September. To ensure continued connectivity, please update the package and re-export the configuration file to your OpenVPN client as soon as possible.

Fixed Issues

1.Fixed an issue where the exported OpenVPN configuration file might contain the wrong certificate chain when using Let's Encrypt, preventing the client from connecting.

Compatibility and Installation

1. Updated to be compatible with DSM 7.0.

What's New

1. Added a field for modifying the mssfix parameter of OpenVPN.

Important Note

This update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on regions.

Fixed Issues

1. Fixed the issue where L2TP VPN service might not function properly when Synology NAS is in a high-availability cluster.
2. Fixed the issue where the status of domain users might not be displayed correctly at VPN Server > Privilege.
3. Minor bug fixes.

Fixed Issues

1. Minor bug fixes.

Updated to be compatible with SA3200D.

Fixed issues

1. Fixed an issue where the network interface used for access to an L2TP server might be disconnected when VPN Server package is stopped.

2. Fixed an issue where OpenVPN might not work properly.

3. Fixed an issue where AES-256-CBC and SHA512 might not be set as default in OpenVPN.

4. Fixed an issue where L2TP might not work properly.

1. Thai user interface is now available.

2. You will now receive a warning message when enabling the PPTP service.

3. Fixed an issue where OpenVPN might not work properly when the "Allow clients to access server's LAN" option is enabled and the DSM, meanwhile, is in a high-availability cluster.

1. Fixed an issue where OpenVPN might fail to allocate IP addresses.

1. Fixed an issue where it might take longer than usual to install the package.

2. Fixed an issue where the L2TP service might not be accessible from a Mac client when being accessed by an Android client.

1. Removed MDC2 and RSA-MDC2 from the authentication options for OpenVPN.

2. Minor bug fixes.

1. Fixed an issue where OpenVPN might not work properly when a third-party certificate is employed without being imported to the browser.
2. Minor bug fixes

1. Fixed an issue where OpenVPN might not work properly after certification update or change.
2. Fixed an issue where PPTP and L2TP services might not work properly.

1. Fixed an issue where domain users might fail to connect to the PPTP server.
2. Fixed an issue where VPN Server might fail to be enabled.

What's new

1. You can now check the occupation of ports for PPTP/L2TP.
2. You can now change the cipher for OpenVPN.

Bug fixes

1. Fixed an issue where OpenVPN might still occupy the port 443 when disabled.

1. Authentication config file will change automatically according to the encryption type of LDAP user.
2. Fixed an issue where L2TP could not establish connection in kernel 4.4.

1. Supports port 443 for OpenVPN connections.
2. Minor bug fixes.

1. Fixed an issue where PPTP services might fail on certain Synology NAS models after upgrading to DSM 6.0.1.

1. Fixed an issue where PPTP and L2TP connections might fail in certain situations.
2. Fixed an issue where warning messages of IP conflicts might not appear in certain situations.
3. Minor bug fixes.

1. Fixed an L2TP/IPSec connection compatibility issue with Android 6.0 devices.
2. Fixed an issue where established PPTP link will disconnect because the assigned IP address has changed after update.
3. Fixed an issue where PPTP and L2TP connections become unstable and lose speed after update.
4. Fixed an issue where changing the openVPN certificate might fail.
5. Fixed an issue where VPN Server might not be accessed after DDNS daily update.

1. Upgraded to be compatible with DSM 6.0.

1. Fixed an issue where VPN Server failed to sync with the certificate update in DSM.

1. Fixed a connection issue with port 443.

1. Enhanced security with AppArmor (on selected models with DSM 5.1 or above).
2. Upgraded PPTPD to 1.4.0.
3. Minor bug fixes.

1. Enhanced security with AppArmor (on selected models with DSM 5.1 or above).
2. Upgraded PPTPD to 1.4.0.
3. Minor bug fixes.

1. Upgraded to 2.3.6 to address a security vulnerability that allows remote authenticated users to initiate a denial of service (server crash) via a small control channel packet. (CVE-2014-8104).

1. Logs will now be forwarded to Syslog Center.

1. IPv6 is now supported for OpenVPN.
2. Certified by Synology Trust Level.

Add DS415+ support

Improvements

1. Upgraded OpenVPN to version 2.3.

Fixed Issues

1. Fixed an issue where OpenVPN server service could not start if QuickConnect was enabled.

Read First

1. It is required to first update DSM to the latest version then renew the SSL certificate.
2. For detail instructions, please visit https://www.synology.com/support/security

Fixed Issues

1. A vulnerability to allow remote attackers to obtain sensitive information from process memory. (CVE-2014-0160) After the package update is completed, you must update the SSL certificate exporting from DSM on your OpenVPN PC clients.

Read First

1. It is required to first update DSM to the latest version then renew the SSL certificate.
2. For detail instructions, please visit https://www.synology.com/support/security

Fixed Issues

1. A vulnerability to allow remote attackers to obtain sensitive information from process memory. (CVE-2014-0160) After the package update is completed, you must update the SSL certificate exporting from DSM on your OpenVPN PC clients.

1. Updated to be compatible with DSM 5.0.

1. Fixed a security issue to prevent unauthorized access. (VU#534284)

1. Now supports Domain/LDAP users.
2. Now supports L2TP over IPSec connection.

1. Upgraded to be compatible with DSM 4.2.