fix: wireguard.address must be the router's own address in its network, not the network or broadcast address, from which the peers' addresses are told apart.

2026-10-26 02:59:56 +01:00
1 parent 4491377d9b
commit 7d8892b8c4
@@ -1,3 +1,13 @@
+vpn-router (0.25.2-1) unstable; urgency=medium
+
+  fix: wireguard.address must be the router's own address in its network, not the network or broadcast address, from which the peers' addresses are told apart.
+
+  * A wireguard.address that is the network or the broadcast address of a
+    network larger than /31, such as 192.168.232.0/24, is refused with the
+    first address of the network as the example.
+
+ -- Slawomir Koszewski <slawek@koszewscy.waw.pl>  Tue, 03 Nov 2026 02:30:00 +0100
+
 vpn-router (0.25.1-1) unstable; urgency=medium

  fix: /remote-access gives the router's WireGuard public key, endpoint and allowed IPs, which a peer's configuration needs.