Skip to main content

Release notes for OpenVPN Connect on macOS

3.4.9 (4830)


Release date: Feb 15, 2024

  • Fixed an issue where users could not establish a VPN connection when connecting through a hotspot from an iOS device.


Release date: Jan 18, 2024

  • Fixed ELECTRON_RUN_AS_NODE vulnerability (CVE-2023-7245). Reported by Mykola Grymalyuk (RIPEDA Consulting).

  • Fixed an issue with an environment variable in GUI.


Release date: Dec 21, 2023

  • Fixed security issue CVE-2023-7224 regarding local code injection. This issue was reported by LOURCODE and Fatih ERDOĞAN.


Release date: Dec 7, 2023

  • Enabled a watchdog function to ensure DNS settings are kept intact.


Release date: Nov 6, 2023

  • Dropped support of OSX El Capitan and OSX Sierra.

  • Fixed security issue CVE-2023-4863 by updating relevant libraries.

  • Fixed regression where DNS zones were not applied correctly.

  • Updated handling of browser-based authentication — embedded browser and OPEN_URL no longer supported.


Release date: Aug 31, 2023

  • Fixed regression of wrong IV_HWADDR value in version 3.4.3.

  • Fixed issue where "pull" directive was incorrectly marked as incompatible option.

  • Added support for "all" OS type (Windows and macOS) of environment variables for Access Server.


Release date: Aug 3, 2023

  • Added support for environment variables for Access Server.

  • Added "Security Level" setting.

  • Updated OpenVPN 3 library to version 3.8.1.

  • Updated OpenSSL library to version 3.0.8.

  • Removed onboarding screens.

  • Fixed a bug when importing profile from a server with Let’s Encrypt certificate.

  • Fixed the issue with numeric pad enter button not working.

  • Fixed the issue with log screen scrolling in opposite direction.

  • Various bug fixes and user experience improvements.


Release date: Feb 9, 2023

  • Updated information exchange for CloudConnexa users.


Release date: Dec 2, 2022

  • Enabled a watchdog function to ensure DNS settings are kept intact.


Release date: Oct 26, 2022

  • Dropped support of OSX Yosemite.

  • Fixed security issue CVE-2022-3761 with checking web certificates during import process. Thanks to Mr. Ka Lok Wu of the Chinese University of Hong Kong for reporting this.

  • Fixed a bug when importing profile from a server with Let’s Encrypt certificate.

  • Added support for Apple Silicon chipset.

  • Added setting hide or show the icon in the Dock.

  • Added confirmation dialog during connection with external web authentication.

  • Fixed reporting of OpenVPN3 version as IV_VER variable.

  • Fixed issue with multiple notifications on macOS Ventura.


Release date: May 26, 2022

Please note that 3.3.6 app version is the last version that still supports OS X Yosemite.

  • Fixed profile bundling on macOS 12.3.


Release date: Mar 29, 2022

  • OpenSSL updated to 1.1.1n (fix for CVE-2022-0778).

  • Fixed installation issue on macOS 12.3.

  • Minor change for Web Authentication in a system browser.

  • Known issue: bundled profiles do not work on macOS 12.3 - this is fixed in 3.3.6 release.


Release date: Mar 14, 2022

  • Added import using Web Authentication in system browser.

  • Added reporting of UUID device identifier as UV_UUID parameter.


Release date: Dec 16, 2021

  • Resolved a bug when importing CloudConnexa profiles.


Release date: Nov 22, 2021

  • Changed Web Auth flow to use external browser for authentication.


Release date: Sep 20, 2021

  • Fixed issue with application launch on macOS Monterey.


Release date: Aug 10, 2021

  • Dropped support of OSX Mavericks.

  • Added command line interface. Refer to Command-line Functionality (Windows) or Command-line Functionality (macOS).

  • Added support for PKCS11 hardware tokens. Refer to Connect and Authorize Hardware Tokens.

  • Updated OpenVPN 3 library to 3.6.3 version.

  • Added captive portal detection.

  • Added new functionality for software updates.

  • Replaced reconnect on reboot setting with launch options.

  • Added an Advanced Settings section.

  • Added colorful tray icons to show connection status.

  • Removed the “force AES-CBC cipher” legacy compatibility option.

  • Various bug fixes and UX improvements.


Release date: Mar 16, 2021

Please note that 3.2.7 app version is the last version that still supports OS X Mavericks.

  • Fixed log file symlink creation process during install (CVE-2020-15075).


Release date: Feb 25, 2021

  • Added support for deep linking and web authentication using system web browser.


Release date: Nov 5, 2020

  • Bugfix for upgrade scenarios where a connection with a saved password might not work.


Release date: Oct 22, 2020

  • Fixed a bug when using 'Import from URL' with an OpenVPN Access Server.

  • Updated digital signatures.


Release date: Oct 15, 2020

  • This version adds support for OS X Big Sur.

  • Minor changes to the Web Auth flow.

  • Added reporting UV_APP_VER values to the VPN server.

  • Fixed issues with the display of the application version.

  • Minor fixes for OSX Big Sur.


Release date: Aug 26, 2020

  • Added reporting UV_ASCLI_VER and UV_PLAT_REL values to the VPN server.

  • Fixed not prompting user for certificate approval under certain conditions.


Release date: Jul 7, 2020

  • Fixed incorrect hardware address reporting.


Release date: Jun 26, 2020

This is now a stable release and no longer considered beta software.

  • As part of the transition from Mbed TLS to OpenSSL the list of negotiable TLS cipher suites no longer includes weak cipher suites that lack forward secrecy support (DH/ECDH).

  • Switchover from Mbed TLS library to OpenSSL library.

  • Support of TLS 1.3 version.

  • Support signing with RSA-PSS signatures during TLS handshake.

  • Update of OpenVPN3 library to OpenVPN core 3.5.6 version.

  • Improved stability and performance.


Release date: Mar 27, 2020

  • Updated MbedTLS to 2.7.13 to resolve a security issue (CVE-2019-18222).


Release date: Oct 29, 2019

  • New profile import flow with WebAuth support.

  • Added EULA license during installation.

  • Added .ovpn file association.

  • Added possibility to connect without external certificate when the client certificate is not required.

  • Fixed app crash when UI stucks with blank screen.

  • Fixed multiple re-connections in sleep mode.

  • Fixed connection with DUO authentication service.

  • Fixed connection via server-locked profile with 2FA.

  • Fixed issue with DNS configurations after disconnect.

  • Fixed proxy basic authentication.

  • Fixed issue with long client-side scripts.


Release date: Jul 12, 2019

  • Fixed a problem where the program would not respond properly during network unavailability.

  • Fixed profile import with server certificate expired or self-signed — added ability to accept or reject such certificate despite this problem.

  • Fixed password clearing during profile edit.

  • Fixed parsing of ca.crt as a separate file.

  • Fixed auth fail when username is not locked.

  • Showing proper core version in the connection logs.

  • Added descriptive error message for connection attempt via TAP-based profiles.


Release date: Jan 11, 2019

  • Fixed behavior of connection timeout with network unavailable.

  • Fixed connection logic via server-locked profile for users without auto-login privilege.

  • Fixed profiles sorting in tray by last connected.

  • Fixed static-challenge response logic.

  • Added confirmation on dialogs by enter key.

  • Added custom error message for users who trying to import auto-login profile without privilege.

  • Changed tray icon in order to show VPN connection status.

  • Changed order of settings in tray to be more logical.

  • Updated installer texts so the product name is mentioned properly.


Release date: Dec 10, 2018

  • This version drops support for macOS 10.8 Mountain Lion.

  • Dropped support of MD5 algorithm.

  • New unified UI with 2 color scheme options.

  • Disabled tunnel compression by default (could be enabled back in the app settings).

  • Ability to add proxies for connection from within the app.

  • Ability to manage external certificates directly from within the app.

  • Separate screen with extended statistics of connection session.

  • Log File with options to pause/resume, clear and save logs for sharing.

  • Plenty of other settings like reconnect on reboot, seamless tunnel, IP/TLS versions etc.


Release date: Oct 22, 2020

  • Added support for tls-crypt (v1 and v2).

  • Updated digital signatures.


Release date: Apr 10, 2020

  • Added multi-factor support for the dynamic challenge/response model.

  • Added support for dark/light mode in macOS

  • Updated MbedTLS to 2.7.13 to resolve a security issue (CVE-2019-18222).

  • Improved round-robin DNS server exclusion route handling.

  • Resolved some various other minor stability issues.


Release date: Mar 21, 2019

  • Resolved a problem where reconnect would fail on a round-robin DNS hostname as server address in combination with full-tunnel redirection.


Release date: Dec 11, 2018

  • Added DHCP option PROXY_AUTO_CONFIG_URL capability for proxy auto configuration in the operating system. It is now possible to do for example: push "dhcp-option PROXY_AUTO_CONFIG_URL (url to proxy PAC settings file)"

  • Split-DNS behavior on macOS was markedly different from our other OpenVPN Connect software programs, and this has now been corrected.


Release date: Apr 18, 2018

  • Fixed and improved platform and client version reporting to the server.


Release date: Mar 22, 2018

  • mbedTLS: fix incompatibility with PKI created by OpenSSL 1.1.

  • mbedTLS: add support for ECDSA.

  • mbedTLS: updated to fix CVE-2018-0487 vulnerability.

  • Issue OpenVPN client showing 'no VPN servers' when a connection profile with an excessively long server host name was loaded is now fixed.

  • TLS key refresh (TLS soft reset) connection interruption when using --opt-verify is now fixed.


Release date: Mar 2, 2018

  • Failure to launch OpenVPN Connect Client on macOS version 10.11.6 has now been fixed.


Release date: Mar 14, 2018

  • The .dmg installer file is now properly signed and can still bundle profiles at the same time.