Commit Graph

41 Commits

Author SHA1 Message Date
Davide
8ab7b0d143
OpenVPN: Resolve issues with long negotiations (#1094)
Clean up the naive abuse of async/await in OpenVPNSession. Encapsulate
the instances of ControlChannel/DataChannel inside the Negotiator actor,
so that actor-isolation for them becomes automatically unnecessary.
Synchronous methods inside the actor are the way to go.

After that, handle control packets in orderly fashion, because this is
not being done and may spoil negotiation very easily. Probably also
happening in TunnelKit.

Ultimately, skip some unnecessary XOR processing in UDP when no XOR
method is actually set.
2025-01-22 22:33:29 +01:00
Davide
1414080ea9
Do not require purchase for empty on-demand rules (#1089)
Major issue with migrated profiles with the "Excluding" policy. Existing
users are being opted into an unnecessary purchase.
2025-01-20 14:49:47 +01:00
Davide
8514bf24f2
OpenVPN: Default gateway not set properly in some cases (#1087)
Regression from TunnelKit, the parser was not handling multiple
redirect-gateway directives correctly.
2025-01-20 11:32:26 +01:00
Davide
7ecd37e6ba
Fix purchased features on Apple TV (#1083)
Refactor #1074 to show the appropriate list of eligible features in the
"Purchased" screen. The "X" signs are highly misleading.
2025-01-19 23:09:55 +01:00
Davide
66da9d165d
Omit broken links from TV paywall
Fixes #1068
2025-01-19 22:48:38 +01:00
Davide
b5b471a995
Depend on online package in framework manifest 2025-01-19 22:14:37 +01:00
Davide
55156598ef
Update some TODOs 2025-01-19 22:05:22 +01:00
Davide
37e15016e4
Drop erroneous imports from OpenVPN/OpenSSL 2025-01-19 12:10:49 +01:00
Davide
c73b84c1fa
Redact resolved endpoints from logs 2025-01-19 12:09:36 +01:00
Davide
524243ebaa
Fix error alert when importing files from external apps (#1078)
URL.startAccessingSecurityScopedResource() fails in that case, but
permission is not required at all.

Could reproduce by importing .ovpn file from a Telegram chat.
2025-01-19 11:59:20 +01:00
Davide
54c66f48b5
Fix unused SecureRandom() value 2025-01-19 09:47:21 +01:00
Davide
b4d77a6443
Update 2025-01-19 00:45:59 +01:00
Davide
bd9f8d63a5
Improve debug logs and move methods to library (#1076)
- Move availableLogs() / purgeLogs() to library
- Append and rotate logs by size (500k)
- Add marker between app/tunnel launches
- Purge logs on each save (3 days)
- Unify debug log content view across platforms
    - macOS: Table + inspect full line
    - iOS/tvOS: Use List
    - Scroll to bottom onLoad()
2025-01-19 00:42:58 +01:00
Davide
a6e44872e9
Select country by typing on macOS
Fixes #1062
2025-01-19 00:18:12 +01:00
Davide
8972d9773e
Resolve several issues in bump script/lane (#1075)
- Simplify build/version updates by moving MARKETING_VERSION and
CURRENT_PROJECT_VERSION to Config.xcconfig
- Provide Ruby (for fastlane) and Bash (for CI) versions of
xconfig-get/set
- Copy release notes atomically inside the lane to guarantee they are
included in the version commit
- Add -nt to skip the build tag
2025-01-18 18:13:54 +01:00
Davide
8092c4fb1d
Assume .appleTV to be enough on tvOS (#1074)
Eligibility is ensured on iOS/macOS "remote" apps and profiles are not editable on TV. The day they can be edited, this will need a rework, but today it should be fine.

Regression due to BuildProducts not being credited on Apple TV.
2025-01-18 15:46:11 +01:00
Davide
72d23cbd06
Do not fall back to AES-128-CBC when PUSH_REPLY has no cipher (#1073)
https://github.com/passepartoutvpn/passepartoutkit-source/pull/461
2025-01-18 13:57:10 +01:00
Davide
db7e6ae73f
Fix submodule 2025-01-18 11:04:16 +01:00
Davide
2fdab4db77
Fix template 2025-01-15 22:41:04 +01:00
Davide
4cae181bc8
Verify tunnel profile every hour
10 minutes is too pedantic in logs.
2025-01-15 20:50:41 +01:00
Davide
c387b8ddfd
Fix metadata as per App Review (#1061)
- Add links to EULA and privacy policy in the app description
- Update copyright in metadata
2025-01-15 20:48:47 +01:00
Davide
4e43c14cc6
Update copyright 2025-01-15 20:22:52 +01:00
Davide
e41ac446c6
Rename submodule to PassepartoutKit-Source 2025-01-15 15:22:18 +01:00
Davide
e87128e5b4
Retain WireGuardAdapterDelegate (#1064)
The delegate was lost due to not being retained anywhere, and the
WireGuard adapter was therefore not finalizing the connection (i.e. set
tunnel settings).

Regression in #1057
2025-01-15 10:45:17 +01:00
Davide
849234889b
Update submodule 2025-01-15 09:41:43 +01:00
Davide
7b8dbfe84a
Minimize dependencies of VPN implementations (#1057)
### OpenVPN

- Make CPassepartoutCryptoOpenSSL agnostic of PassepartoutKit
- Move Allocation/ZeroingData from PassepartoutKit to package for
internal use
  - Rename ZeroingData.count to .length for consistency with NSData
  - Duplicate some Data manipulation code in CryptoOpenSSL
- Retain a simplified version of ZeroingData in PassepartoutKit
(AutoerasingData)

### WireGuard

- Make WireGuardKit imports `internal`
2025-01-15 09:39:58 +01:00
Davide
53ee7ba457
Bump version 2025-01-13 23:14:56 +01:00
Davide
07b46da553
Fix regression in profile disconnection 2025-01-13 23:14:19 +01:00
Davide
4a236787bc
Add EULA and privacy policy in paywall (#1056)
Follow-up from App Review.
2025-01-13 18:21:33 +01:00
Davide
a0092b3fad
Pull out VPN implementations from App library
And fix tests.
2025-01-13 18:11:45 +01:00
Davide
079f0ed7f4
Update Kit and binary framework 2025-01-13 17:46:23 +01:00
Davide
e90aaebf5e
Fix framework with preserved symlinks
Was failing validation.
2025-01-13 16:22:18 +01:00
Davide
b3ebcfb6c8
Fix imports in NetworkSettingsBuilder
Also drop OpenVPN prefix, reserved for public entities.
2025-01-13 16:21:13 +01:00
Davide
faf9758a5c
Update Kit 2025-01-13 15:25:47 +01:00
Davide
3510f2b153
Update Kit
- Move NetworkSettingsBuilder to OpenVPN/OpenSSL
- Fix flaky tests
2025-01-13 15:14:27 +01:00
Davide
c605b89c2d
Fix Kit tests 2025-01-13 14:33:09 +01:00
Davide
834c7478c6
Drop unused token 2025-01-13 14:31:26 +01:00
Davide
4e028d83af
Fix some issues with monorepo refactoring
- Update app library location in scripts env
- Move Demo to subfolder to only have one .xcodeproj at root
- Fix submdoule pointer
2025-01-13 14:14:48 +01:00
Davide
7841a2c4e4
Try the app locally
Fixes #793
2025-01-13 12:32:47 +01:00
Davide
a37075279d
[ci skip] Fix headers 2025-01-13 12:28:54 +01:00
Davide
1942b82ebb
Rework App+Kit as monorepository (#1055)
Simplify development and maintenance immensely by making this a
monorepository:

- Convert PassepartoutKit and VPN bindings to local packages
  - OpenVPN/OpenSSL
  - WireGuard/Go
- Make PassepartoutKit available via
  - Source submodule for production (private)
- [Binary XCFramework for
development](https://github.com/passepartoutvpn/passepartoutkit)
 - Add PassepartoutKit Demo in root
   - Deploy package later
2025-01-13 12:26:53 +01:00