Commit Graph

566 Commits

Author SHA1 Message Date
Davide De Rosa 197679057d Return NSData from parsePayloadWithBlock
More friendly to (de)compression stage.
2019-03-19 15:12:56 +01:00
Davide De Rosa 5cc32b1060 Wrap minilzo into dynamic Obj-C plugin
Handle library errors to some extent.
2019-03-19 15:12:46 +01:00
Davide De Rosa 3621b5dab2 Bump minor version 2019-03-18 22:51:20 +01:00
Davide De Rosa a15fae2993 Set release date 2019-03-18 18:45:56 +01:00
Davide De Rosa 08b04c8e02 Fix not propagated checksEKU flag 2019-03-18 17:27:48 +01:00
Davide De Rosa 7d69e09c53 Update copyright 2019-03-09 11:44:18 +01:00
Davide De Rosa 05791b17eb Mention unsupported split tunnelling 2019-03-08 14:36:33 +01:00
Davide De Rosa 147cbb8376 Bump version and update CHANGELOG 2019-03-08 13:37:09 +01:00
Davide De Rosa ec1a0bca3a Merge branch 'floating-reconnection-issues' 2019-03-08 13:37:05 +01:00
Davide De Rosa 6b29c9e06c Double check reasserting during reconnection
A forced shutdown might happen during the recovery interval (1s).
2019-03-08 13:19:52 +01:00
Davide De Rosa 70ed2a4d83 Reset reasserting flag on plain shutdown 2019-03-08 13:16:03 +01:00
Davide De Rosa e3b8a6b16b Shut down on link error
Because it doesn't seem to recover until the tunnel dies.
2019-03-08 13:08:54 +01:00
Davide De Rosa 56ffe1e397 Update bundle and set CocoaPods to 1.6 2019-03-05 10:46:06 +01:00
Davide De Rosa fc26b4f1c5 Update CHANGELOG 2019-03-05 10:43:20 +01:00
Davide De Rosa e849e6c0da Reject <connection> blocks in .ovpn
- Use enumerateComponents for boolean test.
- Fix a test compile error on the way.
2019-03-04 17:39:37 +01:00
Davide De Rosa 58288f5df7 Tweak README part about compression 2019-03-04 09:10:56 +01:00
Davide De Rosa 1c1547fc8f Fix DNS servers not serialized to AppExtension 2019-03-03 10:51:36 +01:00
Davide De Rosa fc22385421 Mention unsupported <connection> blocks 2019-03-03 09:41:17 +01:00
Davide De Rosa c05a4798ce Bump version 2019-02-28 17:20:13 +01:00
Davide De Rosa 86420ba8ea Shut down on compressed data packet
Re-inforce #65 at the data path level. Should now cover all
compression scenarios.
2019-02-28 17:16:14 +01:00
Davide De Rosa 9544e59fcf Fix missing try in test 2019-02-27 20:08:59 +01:00
Davide De Rosa f67b33bf56 Set release date 2019-02-25 23:46:46 +01:00
Davide De Rosa 3ddf1a41e8 Merge branch 'fix-some-low-level-vulns' 2019-02-25 23:45:47 +01:00
Davide De Rosa 068d05b82f Update CHANGELOG 2019-02-25 23:35:38 +01:00
Davide De Rosa 0f2a5e1e14 Check NULL when verifying EKU 2019-02-25 23:33:31 +01:00
Davide De Rosa 8fe43269ab Catch errors on CA MD5 calculation (PIA only) 2019-02-25 23:33:26 +01:00
Davide De Rosa d1b5c94be9 Fix potential overflow in AEAD IV length 2019-02-25 23:23:43 +01:00
Davide De Rosa 0750d860ba
Merge pull request #65 from keeshux/catch-compression-mismatch
Catch compression mismatch
2019-02-25 23:19:57 +01:00
Davide De Rosa 78ac025e97 Add PR link to CHANGELOG 2019-02-25 23:18:42 +01:00
Davide De Rosa 06a872c448 Add ProviderError.serverCompression mapping 2019-02-25 23:09:06 +01:00
Davide De Rosa 3aadaf0186 Shut down when server pushes compression enabled 2019-02-25 23:01:21 +01:00
Davide De Rosa 367e8b7e08 Track whether server pushed a compression option 2019-02-25 23:01:21 +01:00
Davide De Rosa 8c1b95eaa7 Group PushReply regexes 2019-02-25 23:01:21 +01:00
Davide De Rosa 842959612e XXX: Work around missing OpenSSL from ld flags
Comes from a regression in CocoaPods 1.6+ and I don't know how to
fix it properly. Neither do I want to waste too much time on it.
2019-02-25 22:55:07 +01:00
Davide De Rosa 3ee257b281
Merge pull request #64 from keeshux/make-eku-optional
Make EKU optional
2019-02-25 22:53:09 +01:00
Davide De Rosa e4dc6ea2ea Bump version 2019-02-25 11:16:27 +01:00
Davide De Rosa d4b70cd3bd Update CHANGELOG 2019-02-25 11:16:26 +01:00
Davide De Rosa d6076b045a Make checksEKU optional to fall back on decoding 2019-02-25 11:16:26 +01:00
Davide De Rosa 010da904fa Parse EKU choice in .ovpn from remote-cert-tls
Fix unhandled extra spaces in dhcp-option DNS regex.
2019-02-25 11:16:26 +01:00
Davide De Rosa 265aca0829 Make EKU verification optional in TLSBox 2019-02-25 11:16:26 +01:00
Davide De Rosa 0e891a1029 Fix OpenSSL version in pod and podspec
And bump spec to 1.4.1
2019-02-23 23:19:06 +01:00
Davide De Rosa 2373dc88f5
Merge pull request #56 from keeshux/override-dns-servers
Override DNS servers
2019-02-23 11:35:03 +01:00
Davide De Rosa e12240f33a Update CHANGELOG 2019-01-05 22:54:21 +01:00
Davide De Rosa c244b29a8f Parse DNS servers from configuration 2019-01-05 22:29:16 +01:00
Davide De Rosa 13c41d80e7 Allow overriding DNS servers
Fall back to those in PUSH_REPLY.
2019-01-05 22:25:58 +01:00
Davide De Rosa 650f0d5456 Suggest disabling Bitcode in README
Fix mentioned in #51
2018-12-14 14:31:53 +01:00
Davide De Rosa 7179d6471c Upgrade demo code to TunnelKit 1.4.0
Fixes #52
2018-12-04 20:26:17 +01:00
Davide De Rosa 62c9b98092 Update CHANGELOG 2018-11-17 18:02:32 +01:00
Davide De Rosa acb9c8c9f5 Update log sharing method in README 2018-11-12 23:38:02 +01:00
Davide De Rosa b36e7b80e6
Merge pull request #47 from keeshux/support-ovpn-files
Support .ovpn files
2018-11-12 10:43:55 +01:00