tunnelkit/CHANGELOG.md

# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## Unreleased

### Changed

- Do not redirect all traffic to VPN unless `--redirect-gateway` specified. [#90](https://github.com/keeshux/tunnelkit/issues/90)

### Fixed

- SoftEther sends an incomplete PUSH_REPLY. [#86](https://github.com/keeshux/tunnelkit/issues/86)
- Authentication/Decrypt errors with TLS wrapping. [#88](https://github.com/keeshux/tunnelkit/issues/88), [#61](https://github.com/keeshux/tunnelkit/issues/61)
- Broken DNS when no servers provided. [#84](https://github.com/keeshux/tunnelkit/issues/84)

## 1.6.2 (2019-04-17)

### Added

- Basic support for proxy settings (no PAC). [#74](https://github.com/keeshux/tunnelkit/issues/74)

### Changed

- Make `hostname` optional and pick `resolvedAddresses` if nil.

### Fixed

- Negotiation times out with SoftEther. [#67](https://github.com/keeshux/tunnelkit/issues/67)
- Unable to handle continuated PUSH_REPLY. [#71](https://github.com/keeshux/tunnelkit/issues/71)
- TCP requiring multiple PUSH_REQUEST. [#73](https://github.com/keeshux/tunnelkit/issues/73)
- DNS inconsistencies. [#85](https://github.com/keeshux/tunnelkit/pull/85)

## 1.6.1 (2019-04-07)

### Fixed

- Cipher/digest erroneously required by AppExtension.

## 1.6.0 (2019-04-06)

### Added

- Handle `dhcp-option DOMAIN`. [#77](https://github.com/keeshux/tunnelkit/issues/77)

### Changed

- Refactor configuration parser for reuse.

### Fixed

- Unrecognized PKCS#8 encrypted private keys. [#80](https://github.com/keeshux/tunnelkit/issues/80)
- Handle PEM with preamble. [#78](https://github.com/keeshux/tunnelkit/issues/78)

## 1.5.2 (2019-04-01)

### Added

- Optional data count report via `TunnelKitProvider.Configuration.dataCount(in:)`.

### Changed

- Upgraded to Swift 5.

### Fixed

- `checksEKU` not propagated to TunnelKitProvider.

## 1.5.1 (2019-03-25)

### Added

- Scramble endpoints via `--remote-random`. [#76](https://github.com/keeshux/tunnelkit/issues/76)
- Support for encrypted certificate private keys. [#72](https://github.com/keeshux/tunnelkit/issues/72)

### Fixed

- Send explicit exit notification if UDP. [#29](https://github.com/keeshux/tunnelkit/issues/29)
- Broken reconnection on network change (mitigated). [#75](https://github.com/keeshux/tunnelkit/issues/75)

## 1.5.0 (2019-03-20)

### Added

- Support for legacy `--comp-lzo` compression. [#69](https://github.com/keeshux/tunnelkit/pull/69)
- Support for newer `--compress lzo` option. [#70](https://github.com/keeshux/tunnelkit/pull/70)

## 1.4.3 (2019-03-18)

### Fixed

- Several reconnection issues.
- Missing EKU flag evaluation.

## 1.4.2 (2019-03-05)

### Added

- Shut down if server pushes a compressed data packet.

### Fixed

- Custom DNS servers were not applied.
- Reject `<connection>` blocks as unsupported.

## 1.4.1 (2019-02-25)

### Added

- Override DNS servers client side. [#56](https://github.com/keeshux/tunnelkit/pull/56)
- Shut down if server pushes a compression directive. [#65](https://github.com/keeshux/tunnelkit/pull/65)

### Changed

- Enable or disable EKU according to `remote-cert-tls server` in .ovpn file. [#64](https://github.com/keeshux/tunnelkit/pull/64)

### Fixed

- Compiling errors in demo target.
- Linking errors with OpenSSL.
- A few potential vulnerabilities.

## 1.4.0 (2018-11-12)

### Added

- Parser for .ovpn configuration files. [#47](https://github.com/keeshux/tunnelkit/pull/47)

### Changed

- Due to [#47](https://github.com/keeshux/tunnelkit/pull/47), `SocketType` and `EndpointProtocol` were moved to Core subspec.

## 1.3.1 (2018-11-07)

### Fixed

- IPv4/UInt32 conversions are not endianness-agnostic. [#46](https://github.com/keeshux/tunnelkit/pull/46)

## 1.3.0 (2018-10-28)

### Changed

- Refactored tunnel configuration API for increased code reuse. [#44](https://github.com/keeshux/tunnelkit/pull/44)

### Deprecated

- Use high-level accessories instead of `debugLogKey` and `lastErrorKey`. [#45](https://github.com/keeshux/tunnelkit/pull/45)

### Fixed

- IPv4/UInt32 calculations were wrong.

## 1.2.2 (2018-10-25)

### Changed

- Debug log is saved to group container rather than `UserDefaults`. [#43](https://github.com/keeshux/tunnelkit/pull/43)

### Fixed

- Handle server-initiated renegotiation. [#41](https://github.com/keeshux/tunnelkit/pull/41)
- Potentially private data (e.g. Internet addresses) is now masked in debug log. [#42](https://github.com/keeshux/tunnelkit/pull/42)

## 1.2.1 (2018-10-24)

### Added

- Configuration key `lastErrorKey` for reporting errors to host app. [#40](https://github.com/keeshux/tunnelkit/pull/40)
- Server extended key usage validation (EKU). [#27](https://github.com/keeshux/tunnelkit/issues/27)

### Fixed

- CA file was not closed after MD5 calculation when using PIA patches.
- Mitigated an issue with MTU in TCP mode during negotiation. [#39](https://github.com/keeshux/tunnelkit/issues/39)

## 1.2.0 (2018-10-20)

### Added

- Support for `--tls-auth` wrapping. [#34](https://github.com/keeshux/tunnelkit/pull/34)
- Support for `--tls-crypt` wrapping. [#35](https://github.com/keeshux/tunnelkit/pull/35)
- Parser for static OpenVPN keys from file. [#36](https://github.com/keeshux/tunnelkit/pull/36)

### Fixed

- Handling of mixed DATA_V1/DATA_V2 packets. [#30](https://github.com/keeshux/tunnelkit/issues/30)

## 1.1.2 (2018-10-18)

### Added

- Restored support for PIA patches. [#32](https://github.com/keeshux/tunnelkit/pull/32)

## 1.1.1 (2018-10-10)

### Fixed

- Make CA non-optional. [#28](https://github.com/keeshux/tunnelkit/pull/28)

## 1.1.0 (2018-09-26)

### Added

- Client certificate verification. [#3](https://github.com/keeshux/tunnelkit/pull/3)
- Support for both `--comp-lzo` and `--compress` compression framing. [#2](https://github.com/keeshux/tunnelkit/pull/2), [#5](https://github.com/keeshux/tunnelkit/pull/5), [#10](https://github.com/keeshux/tunnelkit/pull/10)
- Routes setup from PUSH_REPLY. [#7](https://github.com/keeshux/tunnelkit/pull/7)
- Support for IPv6. [#8](https://github.com/keeshux/tunnelkit/pull/8)
- Support for server-side NCP. [#11](https://github.com/keeshux/tunnelkit/pull/11)
- Property to mark ciphers not requiring digest auth (e.g. GCM). [#13](https://github.com/keeshux/tunnelkit/pull/13)
- `Codable` implementations for native Swift serialization. [#15](https://github.com/keeshux/tunnelkit/pull/15)
- More cipher and digest algorithms. [#16](https://github.com/keeshux/tunnelkit/pull/16)
- Negotiated compression framing from PUSH_REPLY. [#19](https://github.com/keeshux/tunnelkit/pull/19)
- Customizable keep-alive. [#20](https://github.com/keeshux/tunnelkit/pull/20)
- Negotiated keep-alive from PUSH_REPLY. [#22](https://github.com/keeshux/tunnelkit/pull/22)
- Peer-info metadata.

### Changed

- Raised iOS target to 11 (drops 32-bit support).
- Upgraded OpenSSL from 1.1.0h to 1.1.0i.
- Minor adjustments for Xcode 10 / Swift 4.2.
- Deep refactoring of control channel for future extensibility.
- App group moved out of tunnel configuration, to make it more platform-agnostic and coherent to serialize.
- Keep-alive is disabled by default.
- Several internal renamings.

### Fixed

- Sensitive data logged in PUSH_REPLY. [#12](https://github.com/keeshux/tunnelkit/pull/12)
- Bad interpretation of 0 seconds between renegotiations. [#18](https://github.com/keeshux/tunnelkit/pull/18)
- Incorrect behavior on data-related failures. [#21](https://github.com/keeshux/tunnelkit/pull/21)

## 1.0.0 (2018-08-23)

### Added

- Initial fork from https://github.com/pia-foss/tunnel-apple

### Removed

- Non-standard PIA patches.
Fix cropped heading in CHANGELOG 2018-10-07 08:44:59 +00:00			`# Changelog`

			`All notable changes to this project will be documented in this file.`
Add proper changelog 2018-09-23 10:30:29 +00:00
			`The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),`
Update README and CHANGELOG 2018-09-20 22:11:01 +00:00			`and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).`
Add proper changelog 2018-09-23 10:30:29 +00:00
Add "dev-type tun" to local options Plus other hardcoded options like key-method and tls-client. Seems that older OpenVPN servers didn't send routing info in PUSH_REPLY if dev-type is not specified explicitly. Fixes #86 2019-04-18 11:08:09 +00:00			`## Unreleased`

Update CHANGELOG Fixes #90 2019-04-25 12:55:28 +00:00			`### Changed`

			- Do not redirect all traffic to VPN unless `--redirect-gateway` specified. [#90](https://github.com/keeshux/tunnelkit/issues/90)

Add "dev-type tun" to local options Plus other hardcoded options like key-method and tls-client. Seems that older OpenVPN servers didn't send routing info in PUSH_REPLY if dev-type is not specified explicitly. Fixes #86 2019-04-18 11:08:09 +00:00			`### Fixed`

			`- SoftEther sends an incomplete PUSH_REPLY. [#86](https://github.com/keeshux/tunnelkit/issues/86)`
Set tls-auth/crypt timestamp once Packets rejected due to replay protection. Fixes #88 Fixes #61 2019-04-23 14:44:00 +00:00			`- Authentication/Decrypt errors with TLS wrapping. [#88](https://github.com/keeshux/tunnelkit/issues/88), [#61](https://github.com/keeshux/tunnelkit/issues/61)`
Fall back to configurable preset DNS servers Default to CloudFlare 1.1.1.1 Hard time making it work with system DNS servers. Retry later. 2019-04-25 14:32:22 +00:00			`- Broken DNS when no servers provided. [#84](https://github.com/keeshux/tunnelkit/issues/84)`
Add "dev-type tun" to local options Plus other hardcoded options like key-method and tls-client. Seems that older OpenVPN servers didn't send routing info in PUSH_REPLY if dev-type is not specified explicitly. Fixes #86 2019-04-18 11:08:09 +00:00
Update CHANGELOG 2019-04-17 07:25:36 +00:00			`## 1.6.2 (2019-04-17)`
Make hostname optional in ConnectionStrategy Assume preferring resolved addresses. 2019-04-09 17:40:17 +00:00
Apply proxy settings if present Fixes #74 2019-04-12 06:14:18 +00:00			`### Added`

			`- Basic support for proxy settings (no PAC). [#74](https://github.com/keeshux/tunnelkit/issues/74)`

Make hostname optional in ConnectionStrategy Assume preferring resolved addresses. 2019-04-09 17:40:17 +00:00			`### Changed`

			- Make `hostname` optional and pick `resolvedAddresses` if nil.

Fix malformed key generation message Make nullTerminated argument explicit, easier to debug. Fixes #67 2019-04-13 21:31:26 +00:00			`### Fixed`

			`- Negotiation times out with SoftEther. [#67](https://github.com/keeshux/tunnelkit/issues/67)`
Update CHANGELOG 2019-04-16 22:26:56 +00:00			`- Unable to handle continuated PUSH_REPLY. [#71](https://github.com/keeshux/tunnelkit/issues/71)`
			`- TCP requiring multiple PUSH_REQUEST. [#73](https://github.com/keeshux/tunnelkit/issues/73)`
Update CHANGELOG 2019-04-17 07:25:36 +00:00			`- DNS inconsistencies. [#85](https://github.com/keeshux/tunnelkit/pull/85)`
Fix malformed key generation message Make nullTerminated argument explicit, easier to debug. Fixes #67 2019-04-13 21:31:26 +00:00
Update CHANGELOG 2019-04-08 21:28:13 +00:00			`## 1.6.1 (2019-04-07)`

			`### Fixed`

			`- Cipher/digest erroneously required by AppExtension.`

Set release date 2019-04-06 14:57:56 +00:00			`## 1.6.0 (2019-04-06)`

			`### Added`

			- Handle `dhcp-option DOMAIN`. [#77](https://github.com/keeshux/tunnelkit/issues/77)
Add and test PKCS#8 decryption Fixes #80 2019-04-01 22:33:20 +00:00
Update CHANGELOG 2019-04-03 10:20:34 +00:00			`### Changed`

Set release date 2019-04-06 14:57:56 +00:00			`- Refactor configuration parser for reuse.`
Update CHANGELOG 2019-04-03 10:20:34 +00:00
Add and test PKCS#8 decryption Fixes #80 2019-04-01 22:33:20 +00:00			`### Fixed`

			`- Unrecognized PKCS#8 encrypted private keys. [#80](https://github.com/keeshux/tunnelkit/issues/80)`
Update CHANGELOG 2019-04-01 23:04:46 +00:00			`- Handle PEM with preamble. [#78](https://github.com/keeshux/tunnelkit/issues/78)`
Add and test PKCS#8 decryption Fixes #80 2019-04-01 22:33:20 +00:00
Set release date 2019-04-01 08:01:38 +00:00			`## 1.5.2 (2019-04-01)`
Fix checksEKU not propagated to TunnelKitProvider 2019-03-25 23:36:36 +00:00
Track data count in shared UserDefaults Default disabled (dataCountInterval = 0). 2019-03-27 23:04:35 +00:00			`### Added`

			- Optional data count report via `TunnelKitProvider.Configuration.dataCount(in:)`.

Set Swift 5 in docs 2019-03-30 22:21:11 +00:00			`### Changed`

			`- Upgraded to Swift 5.`

Fix checksEKU not propagated to TunnelKitProvider 2019-03-25 23:36:36 +00:00			`### Fixed`

			- `checksEKU` not propagated to TunnelKitProvider.

Set release date 2019-03-25 20:20:04 +00:00			`## 1.5.1 (2019-03-25)`
Send explicit exit notification if UDP Implement --explicit-exit-notify by default. Fixes #29 2019-03-20 16:40:13 +00:00
Update CHANGELOG 2019-03-25 14:53:26 +00:00			`### Added`

			- Scramble endpoints via `--remote-random`. [#76](https://github.com/keeshux/tunnelkit/issues/76)
Update CHANGELOG and README Fixes #72 2019-03-25 19:30:01 +00:00			`- Support for encrypted certificate private keys. [#72](https://github.com/keeshux/tunnelkit/issues/72)`
Update CHANGELOG 2019-03-25 14:53:26 +00:00
Send explicit exit notification if UDP Implement --explicit-exit-notify by default. Fixes #29 2019-03-20 16:40:13 +00:00			`### Fixed`

			`- Send explicit exit notification if UDP. [#29](https://github.com/keeshux/tunnelkit/issues/29)`
Update CHANGELOG 2019-03-25 14:53:26 +00:00			`- Broken reconnection on network change (mitigated). [#75](https://github.com/keeshux/tunnelkit/issues/75)`
Send explicit exit notification if UDP Implement --explicit-exit-notify by default. Fixes #29 2019-03-20 16:40:13 +00:00
Set release date 2019-03-20 15:47:09 +00:00			`## 1.5.0 (2019-03-20)`
Update CHANGELOG 2019-03-19 15:19:01 +00:00
			`### Added`

			- Support for legacy `--comp-lzo` compression. [#69](https://github.com/keeshux/tunnelkit/pull/69)
Update CHANGELOG 2019-03-19 22:55:24 +00:00			- Support for newer `--compress lzo` option. [#70](https://github.com/keeshux/tunnelkit/pull/70)
Update CHANGELOG 2019-03-19 15:19:01 +00:00
Set release date 2019-03-18 17:45:56 +00:00			`## 1.4.3 (2019-03-18)`
Bump version and update CHANGELOG 2019-03-08 12:21:47 +00:00
			`### Fixed`

			`- Several reconnection issues.`
Fix not propagated checksEKU flag 2019-03-18 16:27:48 +00:00			`- Missing EKU flag evaluation.`
Bump version and update CHANGELOG 2019-03-08 12:21:47 +00:00
Update CHANGELOG 2019-03-05 09:43:20 +00:00			`## 1.4.2 (2019-03-05)`
Shut down on compressed data packet Re-inforce #65 at the data path level. Should now cover all compression scenarios. 2019-02-28 16:10:50 +00:00
			`### Added`

			`- Shut down if server pushes a compressed data packet.`

Update CHANGELOG 2019-03-05 09:43:20 +00:00			`### Fixed`

			`- Custom DNS servers were not applied.`
			- Reject `<connection>` blocks as unsupported.

Set release date 2019-02-25 22:46:46 +00:00			`## 1.4.1 (2019-02-25)`
Upgrade demo code to TunnelKit 1.4.0 Fixes #52 2018-12-04 19:24:26 +00:00
Update CHANGELOG 2019-01-05 21:54:21 +00:00			`### Added`

			`- Override DNS servers client side. [#56](https://github.com/keeshux/tunnelkit/pull/56)`
Add PR link to CHANGELOG 2019-02-25 22:18:42 +00:00			`- Shut down if server pushes a compression directive. [#65](https://github.com/keeshux/tunnelkit/pull/65)`
Update CHANGELOG 2019-01-05 21:54:21 +00:00
Update CHANGELOG 2019-02-23 11:07:24 +00:00			`### Changed`

			- Enable or disable EKU according to `remote-cert-tls server` in .ovpn file. [#64](https://github.com/keeshux/tunnelkit/pull/64)

Upgrade demo code to TunnelKit 1.4.0 Fixes #52 2018-12-04 19:24:26 +00:00			`### Fixed`

			`- Compiling errors in demo target.`
Fix OpenSSL version in pod and podspec And bump spec to 1.4.1 2019-02-23 21:31:15 +00:00			`- Linking errors with OpenSSL.`
Update CHANGELOG 2019-02-25 22:35:38 +00:00			`- A few potential vulnerabilities.`
Upgrade demo code to TunnelKit 1.4.0 Fixes #52 2018-12-04 19:24:26 +00:00
Update CHANGELOG 2018-11-17 17:01:14 +00:00			`## 1.4.0 (2018-11-12)`
Update CHANGELOG 2018-11-10 10:15:24 +00:00
			`### Added`

			`- Parser for .ovpn configuration files. [#47](https://github.com/keeshux/tunnelkit/pull/47)`

			`### Changed`

Update CHANGELOG 2018-11-17 17:01:14 +00:00			- Due to [#47](https://github.com/keeshux/tunnelkit/pull/47), `SocketType` and `EndpointProtocol` were moved to Core subspec.
Update CHANGELOG 2018-11-10 10:15:24 +00:00
Set release date 2018-11-07 23:00:06 +00:00			`## 1.3.1 (2018-11-07)`
Update CHANGELOG 2018-11-05 19:26:39 +00:00
			`### Fixed`

			`- IPv4/UInt32 conversions are not endianness-agnostic. [#46](https://github.com/keeshux/tunnelkit/pull/46)`

Set release date 2018-10-27 22:32:01 +00:00			`## 1.3.0 (2018-10-28)`
Update CHANGELOG 2018-10-25 20:39:48 +00:00
			`### Changed`

			`- Refactored tunnel configuration API for increased code reuse. [#44](https://github.com/keeshux/tunnelkit/pull/44)`

			`### Deprecated`

			- Use high-level accessories instead of `debugLogKey` and `lastErrorKey`. [#45](https://github.com/keeshux/tunnelkit/pull/45)

Fix IPv4/UInt32 calculations 2018-10-26 16:55:34 +00:00			`### Fixed`

			`- IPv4/UInt32 calculations were wrong.`

Set release date 2018-10-25 05:30:53 +00:00			`## 1.2.2 (2018-10-25)`
Bump version and update CHANGELOG 2018-10-21 22:46:08 +00:00
Bump version and fix latest CHANGELOG 2018-10-24 17:53:38 +00:00			`### Changed`
Bump version and update CHANGELOG 2018-10-21 22:46:08 +00:00
Bump version and fix latest CHANGELOG 2018-10-24 17:53:38 +00:00			- Debug log is saved to group container rather than `UserDefaults`. [#43](https://github.com/keeshux/tunnelkit/pull/43)
Bump version and update CHANGELOG 2018-10-21 22:46:08 +00:00
Bump version and fix latest CHANGELOG 2018-10-24 17:53:38 +00:00			`### Fixed`
Update CHANGELOG 2018-10-24 16:56:11 +00:00
Bump version and fix latest CHANGELOG 2018-10-24 17:53:38 +00:00			`- Handle server-initiated renegotiation. [#41](https://github.com/keeshux/tunnelkit/pull/41)`
Update CHANGELOG 2018-10-24 16:56:11 +00:00			`- Potentially private data (e.g. Internet addresses) is now masked in debug log. [#42](https://github.com/keeshux/tunnelkit/pull/42)`

Bump version and fix latest CHANGELOG 2018-10-24 17:53:38 +00:00			`## 1.2.1 (2018-10-24)`

			`### Added`

			- Configuration key `lastErrorKey` for reporting errors to host app. [#40](https://github.com/keeshux/tunnelkit/pull/40)
			`- Server extended key usage validation (EKU). [#27](https://github.com/keeshux/tunnelkit/issues/27)`

Bump version and update CHANGELOG 2018-10-21 22:46:08 +00:00			`### Fixed`

			`- CA file was not closed after MD5 calculation when using PIA patches.`
			`- Mitigated an issue with MTU in TCP mode during negotiation. [#39](https://github.com/keeshux/tunnelkit/issues/39)`

Set release date 2018-10-20 09:15:36 +00:00			`## 1.2.0 (2018-10-20)`
Update CHANGELOG 2018-10-19 13:56:15 +00:00
Update/fix CHANGELOG 2018-10-19 15:39:37 +00:00			`### Added`
Update CHANGELOG 2018-10-19 13:56:15 +00:00
Update README and CHANGELOG 2018-09-11 15:45:22 +00:00			- Support for `--tls-auth` wrapping. [#34](https://github.com/keeshux/tunnelkit/pull/34)
Update README and CHANGELOG 2018-09-20 22:11:01 +00:00			- Support for `--tls-crypt` wrapping. [#35](https://github.com/keeshux/tunnelkit/pull/35)
Update/fix CHANGELOG 2018-10-19 15:39:37 +00:00			`- Parser for static OpenVPN keys from file. [#36](https://github.com/keeshux/tunnelkit/pull/36)`

			`### Fixed`

			`- Handling of mixed DATA_V1/DATA_V2 packets. [#30](https://github.com/keeshux/tunnelkit/issues/30)`
Update CHANGELOG 2018-10-19 13:56:15 +00:00
Set release date 2018-10-18 14:35:20 +00:00			`## 1.1.2 (2018-10-18)`
Update CHANGELOG 2018-10-18 14:25:42 +00:00
			`### Added`

Set release date 2018-10-18 14:35:20 +00:00			`- Restored support for PIA patches. [#32](https://github.com/keeshux/tunnelkit/pull/32)`
Update CHANGELOG 2018-10-18 14:25:42 +00:00
Update CHANGELOG 2018-10-10 20:23:20 +00:00			`## 1.1.1 (2018-10-10)`

			`### Fixed`

			`- Make CA non-optional. [#28](https://github.com/keeshux/tunnelkit/pull/28)`

Set 1.1.0 release date 2018-09-23 13:15:06 +00:00			`## 1.1.0 (2018-09-26)`
Add proper changelog 2018-09-23 10:30:29 +00:00
			`### Added`

			`- Client certificate verification. [#3](https://github.com/keeshux/tunnelkit/pull/3)`
			- Support for both `--comp-lzo` and `--compress` compression framing. [#2](https://github.com/keeshux/tunnelkit/pull/2), [#5](https://github.com/keeshux/tunnelkit/pull/5), [#10](https://github.com/keeshux/tunnelkit/pull/10)
			`- Routes setup from PUSH_REPLY. [#7](https://github.com/keeshux/tunnelkit/pull/7)`
			`- Support for IPv6. [#8](https://github.com/keeshux/tunnelkit/pull/8)`
			`- Support for server-side NCP. [#11](https://github.com/keeshux/tunnelkit/pull/11)`
			`- Property to mark ciphers not requiring digest auth (e.g. GCM). [#13](https://github.com/keeshux/tunnelkit/pull/13)`
			- `Codable` implementations for native Swift serialization. [#15](https://github.com/keeshux/tunnelkit/pull/15)
			`- More cipher and digest algorithms. [#16](https://github.com/keeshux/tunnelkit/pull/16)`
			`- Negotiated compression framing from PUSH_REPLY. [#19](https://github.com/keeshux/tunnelkit/pull/19)`
			`- Customizable keep-alive. [#20](https://github.com/keeshux/tunnelkit/pull/20)`
			`- Negotiated keep-alive from PUSH_REPLY. [#22](https://github.com/keeshux/tunnelkit/pull/22)`
			`- Peer-info metadata.`

			`### Changed`

Upgrade OpenSSL-Apple to raise iOS target to 11 2018-09-26 08:41:59 +00:00			`- Raised iOS target to 11 (drops 32-bit support).`
			`- Upgraded OpenSSL from 1.1.0h to 1.1.0i.`
			`- Minor adjustments for Xcode 10 / Swift 4.2.`
Add proper changelog 2018-09-23 10:30:29 +00:00			`- Deep refactoring of control channel for future extensibility.`
			`- App group moved out of tunnel configuration, to make it more platform-agnostic and coherent to serialize.`
Mention keep-alive behavior in CHANGELOG 2018-09-24 17:06:41 +00:00			`- Keep-alive is disabled by default.`
Add proper changelog 2018-09-23 10:30:29 +00:00			`- Several internal renamings.`

			`### Fixed`

			`- Sensitive data logged in PUSH_REPLY. [#12](https://github.com/keeshux/tunnelkit/pull/12)`
			`- Bad interpretation of 0 seconds between renegotiations. [#18](https://github.com/keeshux/tunnelkit/pull/18)`
			`- Incorrect behavior on data-related failures. [#21](https://github.com/keeshux/tunnelkit/pull/21)`

			`## 1.0.0 (2018-08-23)`

			`### Added`

			`- Initial fork from https://github.com/pia-foss/tunnel-apple`

			`### Removed`

			`- Non-standard PIA patches.`