Commit Graph

940 Commits

Author SHA1 Message Date
Davide De Rosa 90c118a3d0 Warn about discarded received packets 2019-12-12 09:32:34 +01:00
Davide De Rosa a65682a89a Update CHANGELOG 2019-12-11 16:44:04 +01:00
Davide De Rosa 66ae7973ae Discard data with missing key, do not shut down
Probably more resilient to DoS.
2019-12-07 09:43:47 +01:00
Davide De Rosa 8c4b0db301 Debug "reasserting" updates 2019-12-07 09:43:47 +01:00
Davide De Rosa aabdf8382b Bump version 2019-12-07 09:43:36 +01:00
Davide De Rosa 3d40067a93 Reorder credits alphabetically 2019-12-02 10:43:14 +01:00
Davide De Rosa 8b17a13ac2 Merge branch 'require-ca-cipher' 2019-11-20 19:51:30 +01:00
Davide De Rosa 13027b8932 Only require --ca and --cipher from clients
Not in a PUSH_REPLY, for example.
2019-11-20 19:48:40 +01:00
Davide De Rosa b1c11e3e56 Make --ca and --cipher non-optional in .ovpn
Dodge those annoying scenarios where server cipher is not set
and defaults to BF-CBC, whereas default TunnelKit cipher
is AES-128-CBC. And data channel stalls.
2019-11-20 01:07:39 +01:00
Davide De Rosa 5f05d888f8 Bump version 2019-11-11 19:28:42 +01:00
Davide De Rosa e233022960 Mention ignored client-side routes 2019-11-11 19:28:13 +01:00
Davide De Rosa 4164f19724 Mention unsupported literals in README
Fixes #129
2019-11-11 19:26:21 +01:00
Davide De Rosa 7908ec4d9e Fix App IDs in Demo 2019-11-07 20:42:47 +01:00
Davide De Rosa 907c8ec00c Set release date
Fixes #123
2019-11-03 03:46:04 +01:00
Davide De Rosa 4ced1c499d Use modern structure for notifications 2019-11-02 11:32:16 +01:00
Davide De Rosa 9c92d1d567 Upgrade OpenSSL to 1.1.1d 2019-11-02 00:21:51 +01:00
Davide De Rosa eabcf39f35 Upgrade OpenSSL to 1.1.0l 2019-10-28 11:11:49 +01:00
Davide De Rosa 714b5e56d4 Fix search domains unit test 2019-10-25 19:22:53 +02:00
Davide De Rosa 0ab913fb24 Merge branch 'multiple-search-domains' 2019-10-25 19:11:37 +02:00
Davide De Rosa 4d930d3562 Update CHANGELOG
Fixes #127
2019-10-25 19:08:44 +02:00
Davide De Rosa 3a38b0da15 Log effective search domains 2019-10-25 19:08:44 +02:00
Davide De Rosa 4e77f5b6b3 Parse multiple "dhcp-option DOMAIN" lines 2019-10-25 17:21:44 +02:00
Davide De Rosa 645f65ccd0 Adjust Configuration.searchDomain to searchDomains
XXX: "breaks" search domains in existing VPN profiles. Reinstall
to fix.
2019-10-25 17:17:48 +02:00
Davide De Rosa 495944297c
Merge pull request #126 from ThinkChaos/fix_pac_logging
Fix logging for Proxy Auto-Configuration (PAC)
2019-10-23 13:07:03 +02:00
Davide De Rosa e5a7a09b7f Parse PAC from provider configuration
Not propagated to AppExtension.
2019-10-23 13:02:29 +02:00
Davide De Rosa dcac7cb2d4 Fix hidden IPv4Settings fields 2019-10-23 10:55:37 +02:00
Davide De Rosa 7608ae2e3c Expose server configuration via provider message 2019-10-23 10:27:51 +02:00
ThinkChaos 907bbe20ae Fix logging for Proxy Auto-Configuration (PAC) 2019-10-23 01:08:39 +02:00
Davide De Rosa 74ec321946 Update CHANGELOG 2019-10-22 22:01:04 +02:00
Davide De Rosa 7d0cba8df8
Merge pull request #125 from ThinkChaos/proxy_auto_conf
Add Proxy Auto-Configuration (PAC) support
2019-10-22 21:55:29 +02:00
ThinkChaos 26d7b9fe0f Address review comments 2019-10-22 21:03:25 +02:00
Davide De Rosa 4d61734ae6 Bump version (minor) 2019-10-22 14:01:08 +02:00
Davide De Rosa 98b9d71eb3 Assume VPN gateway when route gw is "vpn_gateway" 2019-10-22 13:53:36 +02:00
Davide De Rosa 920a84f952 Update CHANGELOG 2019-10-22 11:02:51 +02:00
Davide De Rosa eb09493882
Merge pull request #122 from rob-patchett/ping-timeout
Allow keep-alive timeout to be configured by the server or client
2019-10-22 10:51:27 +02:00
Robert Patchett 87cb448d12 Fix comment typo 2019-10-22 10:43:57 +02:00
ThinkChaos c6cb5a646a Add Proxy Auto-Configuration (PAC) support 2019-10-21 21:47:45 +02:00
Davide De Rosa 5866c373eb
Merge pull request #124 from rob-patchett/premature_connect_status
Conclude connection success only once the system starts using the tunnel
2019-10-17 17:16:48 +02:00
Robert Patchett bdf34f8882 Set tunnel provider's reasserting to false after the system starts using the tunnel 2019-10-17 14:23:16 +02:00
Robert Patchett 55f7e64f19 Allow keep alive timeout to be configured by the server or client 2019-09-30 11:54:29 -07:00
Davide De Rosa 9619d21d15 Add missing changelog for 2.0.5 2019-09-30 10:28:57 +02:00
Davide De Rosa 53c816b1d3 Bump version 2019-09-26 12:34:56 +02:00
Davide De Rosa 3de653433f Update OpenSSL 2019-09-26 12:17:33 +02:00
Davide De Rosa 1830695af7 Bump version 2019-09-24 22:11:12 +02:00
Davide De Rosa d22f40f7e9 Fix potential OOB in memcmp() 2019-09-17 23:41:35 +02:00
Davide De Rosa d815f5222f Change var to let
Xcode no more signals wrong side-effect in withUnsafeBytes.
2019-09-17 16:09:09 +02:00
Davide De Rosa d529744e81 Update CocoaPods
Issues with Xcode 10.
2019-09-06 23:44:01 +02:00
Davide De Rosa 93ac2442b3 Set release date 2019-09-06 23:19:52 +02:00
Davide De Rosa 6a6d1e7e0d Fix bundler 2019-09-06 23:19:52 +02:00
Davide De Rosa e0ab2a1ddb Disconnect if HARD_RESET received while SOFT_RESET
Bad condition for .staleSession

Fixes #120

See 0f2234f1d1
2019-09-03 00:27:54 +02:00