4.11.0 (2025-08-16)

Feature

• install: rely on journal to read openvpn logs on debian-based distros (5b689e80)
• install: increase minimum TLS version to limit ciphersuites reducing attack surface (f2859d75)
• install: update EasyRSA to version 3.2.3 (5c03fb27)
• scripts: reject revoked or malicious clients before TLS auth with tls-crypt-v2 metadata (2.5+) (4a16457d)
• install: generate client-specific tls-crypt keys for better security (2.5+) (aa92a028)

Bug Fixes

• install: remove existing temporary setup vars file in case it's owned by another user (547a49af)
• install: correct tls-crypt-v2 server key location (dc43416b)