Davide De Rosa
17cb2601be
Fix unused result warning
2020-05-23 17:05:46 +02:00
Davide De Rosa
ed82300af9
Bump version
2020-05-22 18:35:17 +02:00
Davide De Rosa
e1e386c61a
Update CHANGELOG
2020-05-20 00:50:55 +02:00
Davide De Rosa
f1f6b1083a
Bump version
2020-05-19 19:32:11 +02:00
Davide De Rosa
9095ea250e
Address concerns from Guido Vranken fuzzers ( #141 )
...
* 002: Assert return value of snprintf/getnameinfo
* 003: Address OOB reads on decrypted data
* 004: Handle boundary prefixes in .partitioned()
* 005: Fix OOB read in matchesDestination()
* 006: Fix parsing in netname6()
* 007: Fix incorrect use of sizeof()
* 008: Add safety checks in MSSFix()
* 009: Fix bad usage of minilzo calls
* Add checks after RoutingTableEntryAddress4/6
2020-05-16 15:10:07 +02:00
Davide De Rosa
1749eb3ff1
Update podspec email
2020-05-13 13:53:40 +02:00
Davide De Rosa
78da6f16d9
Add GitHub Sponsors
2020-05-13 08:31:59 +02:00
Davide De Rosa
2619036961
Set release date
2020-05-12 15:13:10 +02:00
Davide De Rosa
6c05d2b544
Bump version
2020-05-12 15:10:44 +02:00
Davide De Rosa
6993372e18
Merge branch 'revert-ip-header-parsing'
2020-05-12 15:10:40 +02:00
Davide De Rosa
01554713b8
Move IP header logic to separate struct
2020-05-12 13:07:09 +02:00
Davide De Rosa
f1a28a8d32
Revert to more efficient ternary op in IP header
...
See #169 and 753927f36b
2020-05-12 12:59:33 +02:00
Davide De Rosa
05a55bec4f
Add copyright to README
2020-05-11 09:53:09 +02:00
Davide De Rosa
fe697c2c56
Update CHANGELOG
...
And fix year of recent releases (was 2019).
2020-05-10 11:33:37 +02:00
Davide De Rosa
5285ba7aa8
Set reasserting to false if canRebindLink()
...
Code is currently disabled (canRebindLink() is hardcoded to false),
still it's good to stay consistent with semantics of
reasserting = false, i.e. "connection has become active again".
2020-05-09 15:01:11 +02:00
Davide De Rosa
0d4fc503ec
Update CHANGELOG
2020-05-09 12:12:27 +02:00
Davide De Rosa
9b82d7f9ec
Evaluate reconnection without touching reasserting
...
Use a different variable to signal an upcoming reconnection. Make
sure that reasserting is never set to false with the meaning of
"do not reconnect", because doing so would trigger a transient
"connected" state in the VPN.
Reverts use of cancelTunnelWithError() in sessionDidStop.
2020-05-09 12:09:03 +02:00
Davide De Rosa
93c24a96cf
Refactor with an error parameter in sessionDidStop
...
Both versions prevent clients from compiling, but this version
impacts less on existing codebase.
2020-05-09 12:09:03 +02:00
Robert Patchett
1cd00f9459
Call cancelTunnelWithError(_:) if a connection fails and won't be retried
2020-05-09 12:09:03 +02:00
Davide De Rosa
12ba6f34b7
Embed TunnelKit in test host target
...
Fix "Reason: image not found" dyld error.
2020-05-09 09:50:27 +02:00
Davide De Rosa
77e6c4d305
Add development team to test targets
2020-05-09 09:33:44 +02:00
Jose Blaya
c22bfb3edd
Set MTU value in Tunnel settings
2020-05-09 01:09:20 +02:00
Jaroslav_
1ceeb8ddbb
SAN host check ( #168 )
...
* Check if host is present in certificates SAN list
* Save .tlsServerHost error as .tlsServerVerification into last error
Co-authored-by: Davide De Rosa <keeshux@gmail.com>
2020-05-09 00:02:16 +02:00
Davide De Rosa
56eda2720e
Fix CHANGELOG format
2020-05-08 23:50:03 +02:00
Davide De Rosa
60213bafb8
Fix and improve #169
...
- Use constants
- Check packet length for OOB read
- Replace assertion with logging
2020-05-08 21:01:36 +02:00
Davide De Rosa
aa580240b8
Merge pull request #169 from roop/mojave-ipv4-and-ipv6
...
Fix how NETunnelInterface handles IP protocol number
2020-05-08 20:19:16 +02:00
Roopesh Chander
753927f36b
Fix how NETunnelInterface handles IP protocol number
...
The IP protocol number passed to NEPacketTunnelFlow is determined per
packet based on the IP header, instead of determining it based on
whether IPv6 settings are available or not.
2020-05-06 09:37:24 +05:30
Davide De Rosa
09f4f28fc9
Prepend license with copyright notice
2020-05-05 14:09:19 +02:00
Davide De Rosa
7719e8d72c
Bump version
2020-05-03 12:03:08 +02:00
Davide De Rosa
15e215dc4d
Replace Patreon with PayPal
2020-04-30 13:49:35 +02:00
Davide De Rosa
60e6bcdba8
Update OpenSSL to 1.1.1g
...
Fixes #166
2020-04-21 22:03:08 +02:00
Davide De Rosa
6ebc1b4623
Bump version
2020-04-21 22:01:22 +02:00
Davide De Rosa
7ba022527c
Update CHANGELOG and README
2020-04-19 02:33:44 +02:00
Davide De Rosa
b4c0c8ca1b
Bump OpenSSL in podspec
2020-04-19 02:24:47 +02:00
Davide De Rosa
735c1fd7fd
Update CHANGELOG
2020-04-18 17:11:39 +02:00
Davide De Rosa
106eeb4715
Update pods
...
Fixes #164 , #165
2020-04-18 17:07:49 +02:00
Davide De Rosa
0fa5c22619
Update bundle
2020-04-18 17:02:24 +02:00
Davide De Rosa
d24fe30c7e
Update CHANGELOG
2020-04-15 11:22:54 +02:00
Davide De Rosa
d74a7bf637
Merge pull request #162 from johankool/feature/mojave
...
Mitigate IP traffic breaking on Mojave
2020-04-15 11:21:18 +02:00
Davide De Rosa
a35636b1b1
Merge pull request #163 from passepartoutvpn/enforce-ipv4-ipv6-resolution
...
Enforce IPv4/6 endpoints
2020-04-15 11:13:31 +02:00
Davide De Rosa
e8f3d74894
Update CHANGELOG
...
Fixes #153
2020-04-14 22:57:23 +02:00
Davide De Rosa
4bdf6b7006
Redefine endpoint strategy according to IPv4/6
2020-04-14 22:57:23 +02:00
Davide De Rosa
40eb98fd72
Return IP version-aware records from DNSResolver
...
FIXME: compilation errors in ConnectionStrategy and related.
2020-04-14 22:57:08 +02:00
Davide De Rosa
6f235e9ea2
Handle IPv4/IPv6 variants in SocketType
2020-04-14 21:54:21 +02:00
Davide De Rosa
c7595ed295
Rewrite IPv4-to-String conversion
...
Flaky Swift pointer API.
2020-04-14 21:54:19 +02:00
Davide De Rosa
af9f7f8165
Update CHANGELOG
2020-04-13 17:53:10 +02:00
Davide De Rosa
abe5922269
Merge pull request #161 from johankool/feature/connecting
...
Continue instead of early return on unknown key id
2020-04-13 12:20:46 +02:00
Johan Kool
78e332d48b
Force IPv4 on Mojave otherwise it breaks
2020-04-10 13:37:15 +02:00
Johan Kool
ffe7fc0a0a
Continue instead of early return on unknown key id
2020-04-10 13:35:12 +02:00
Davide De Rosa
e606a261f4
Merge branch 'xcode-warnings'
2020-04-05 17:30:40 +02:00