Preparing OpenVPN v2.4_rc1 release

Signed-off-by: David Sommerseth <davids@openvpn.net>

ChangeLog

@@ -1,6 +1,34 @@
 OpenVPN Change Log
 Copyright (C) 2002-2016 OpenVPN Technologies, Inc. <sales@openvpn.net>
 
+2016.12.01 -- Version 2.4_rc1
+Antonio Quartulli (1):
+      reload CRL only if file was modified
+
+Christian Hesse (3):
+      update year in copyright message
+      Use systemd service manager notification
+      Refuse to daemonize when running from systemd
+
+Gert Doering (1):
+      Fix windows path in Changes.rst
+
+Samuli Seppänen (1):
+      Mention that OpenVPN 2.4 requires Windows Vista or higher
+
+Selva Nair (4):
+      Map restart signals from event loop to SIGTERM during exit-notification wait
+      When parsing '--setenv opt xx ..' make sure a third parameter is present
+      Force 'def1' method when --redirect-gateway is done through service
+      Do not restart dns client service as a part of --register-dns processing
+
+Steffan Karger (4):
+      tls_process: don't set variable that's never read
+      Unconditionally enable TLS_AGGREGATE_ACK
+      Clean up format_hex_ex()
+      Introduce and use secure_memzero() to erase secrets
+
+
 2016.11.24 -- Version 2.4_beta2
 Arne Schwabe (5):
       Document that tls-crypt also supports inline

Changes.rst

@@ -259,6 +259,12 @@ User-visible Changes
   changed, instead of for each new connection.  This reduces the connection
   setup time, in particular when using large CRLs.
 
+- OpenVPN now ships with more up-to-date systemd unit files which takes advantage
+  of the improved service management as well as some hardening steps.  The
+  configuration files are picked up from /etc/openvpn/server and
+  /etc/openvpn/client (depending on unit file).  This also avoids these new
+  unit files and how they work to collide with older pre-existing unit files.
+
 
 Maintainer-visible changes
 --------------------------
@@ -267,3 +273,7 @@ Maintainer-visible changes
   OPENSSL_SSL_{CFLAGS,LIBS} have been merged into OPENSSL_{CFLAGS,LIBS}.  This
   is particularly relevant for maintainers who build their own OpenSSL library,
   e.g. when cross-compiling.
+
+- Linux distributions using systemd is highly encouraged to ship these new unit
+  files instead of older ones, to provide a unified behaviour across systemd
+  based Linux distributions.

version.m4

@@ -3,7 +3,7 @@ define([PRODUCT_NAME], [OpenVPN])
 define([PRODUCT_TARNAME], [openvpn])
 define([PRODUCT_VERSION_MAJOR], [2])
 define([PRODUCT_VERSION_MINOR], [4])
-define([PRODUCT_VERSION_PATCH], [_beta2])
+define([PRODUCT_VERSION_PATCH], [_rc1])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MAJOR])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_MINOR], [[.]])
 m4_append([PRODUCT_VERSION], [PRODUCT_VERSION_PATCH], [[]])