2020.04.16 -- Version 2.4.9
Antonio Quartulli (1):
      socks: use the right function when printing struct openvpn_sockaddr

Arne Schwabe (3):
      Fetch OpenSSL versions via source/old links
      Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
      Fix OpenSSL 1.1.1 not using auto elliptic curve selection

Lev Stipakov (4):
      Fix broken fragmentation logic when using NCP
      Fix building with --enable-async-push in FreeBSD
      Fix broken async push with NCP is used
      Fix illegal client float (CVE-2020-11810)

Maxim Plotnikov (1):
      OpenSSL: Fix --crl-verify not loading multiple CRLs in one file

Santtu Lakkala (1):
      Fix OpenSSL private key passphrase notices

Selva Nair (7):
      Swap the order of checks for validating interactive service user
      Move querying username/password from management interface to a function
      When auth-user-pass file has no password query the management interface (if available).
      Fix possibly uninitialized return value in GetOpenvpnSettings()
      Fix possible access of uninitialized pipe handles
      Skip expired certificates in Windows certificate store
      Allow unicode search string in --cryptoapicert option

Tom van Leeuwen (1):
      mbedTLS: Make sure TLS session survives move

WGH (1):
      docs: Add reference to X509_LOOKUP_hash_dir(3)