f17bb110c2
Adjust log of DNS settings according to gateway
2022-10-13 18:34:31 +02:00
8df7e90c95
Update CHANGELOG
2022-10-12 22:39:21 +02:00
3a54295ed9
Update resolved packages (OpenSSL)
2022-10-12 22:36:09 +02:00
192f4643c2
Fix mock VPN implementation ( #285 )
2022-10-12 22:35:02 +02:00
080ee35e61
Replace continuations with natively async methods ( #284 )
2022-10-12 22:28:33 +02:00
a3822678cf
Support --route-nopull ( #280 )
...
* Parse --route-no-pull
When provided, pull everything except:
- Routes
- DNS
- Proxy
Implement with higher granularity compared to OpenVPN.
* Apply no-pull mask in tunnel settings
Pull server settings by default to match standard OpenVPN
behavior. Library was prioritizing client over server.
* Add link in CHANGELOG
2022-10-08 08:54:55 +02:00
9f5de0fc55
Fix misplaced tab
2022-09-30 21:43:33 +02:00
a3c991a25f
Update a few things about license
...
- Copyright in LICENSE
- Note about custom licenses in README
2022-09-30 21:28:27 +02:00
a5ad04a0a6
Upgrade OpenSSL to 1.1.1q
2022-09-30 21:28:27 +02:00
5c84c15416
Use localOptions to clarify context
...
localOptions = cfg.configuration
2022-09-25 17:23:13 +02:00
6018c30cc4
Add fallback for compression algorithm
2022-09-23 23:01:57 +02:00
ca378c4999
[ci skip] Set release date
2022-09-23 19:51:37 +00:00
64b3fa47af
Add some missing documentation
2022-09-23 21:45:04 +02:00
000fde0aa2
Update CHANGELOG
2022-09-23 16:16:48 +02:00
6dc1140d5b
Revert "Work around segfault in Xcode 13.3 "Release""
...
This reverts commit 02e702d97b
2022-09-23 16:11:37 +02:00
0db3f52931
Add methods to remove WireGuard default gateways
2022-09-14 22:07:46 +02:00
e2aaffc06f
Reconnect with current manager and configuration
2022-08-05 07:38:53 +02:00
36ed23ccc4
Bump to OpenSSL 1.1.1o
2022-06-17 10:06:03 +02:00
83a2842214
Customize app extension log path
...
Store path into App Group. Do not read it from UserDefaults in
app extension because value is immediately available in provider
configuration.
2022-06-17 09:19:54 +02:00
4eb9a92c2e
Hide setters of shared provider defaults
...
Tunnel values were overwritable by app.
Instead:
- Write from app extension with "private" setter (_appexSet*)
- Read from app with public getter
2022-06-17 09:18:28 +02:00
178dda56ac
Simplify .configureLogging() in app extensions
2022-06-17 09:16:41 +02:00
61227fcb35
Bump CI to macOS 12
2022-05-17 18:06:51 +02:00
6e0471a55b
Report vpnIsEnabled = false on install error
2022-04-27 15:44:40 +02:00
e075ba6a76
Make DNS servers optional in DoT like in DoH
...
Domain name can actually by an IP address and not require a DNS
server to resolve.
2022-04-25 21:46:16 +02:00
469523cac5
Fix badges/requirements as per package targets
2022-04-16 10:40:18 +02:00
f0a5557cfb
Fix previous commit further (my bad)
2022-04-13 22:55:43 +02:00
07e94b2d5c
Fix target name in import
2022-04-13 22:40:05 +02:00
02e702d97b
Work around segfault in Xcode 13.3 "Release"
...
Surely some Xcode bug. Doesn't like NSCAssert in inline function.
2022-04-12 21:18:03 +02:00
7b72114893
Fix missing async in Demo
2022-04-12 20:49:21 +02:00
6e7eab421e
Bump 3rd party copyrights
2022-04-12 18:03:31 +02:00
f33a854943
Fix broken == on OpenVPN.Configuration
...
StaticKey was not comparing data by value.
2022-04-07 00:16:34 +02:00
02d04185d3
Drop redundant Hashable implementation
2022-04-06 23:47:12 +02:00
e12e0b3051
Make VPN public methods async
...
- With Swift Concurrency
- Raise targets to iOS 13 / macOS 10.15
2022-04-06 11:18:06 +02:00
990a0b85a6
Use WireGuardKit fork with platform fixes
...
- iPhone Simulator
- Catalyst
2022-04-06 09:31:33 +02:00
46918a767a
Adjust current SSID to also support Catalyst
2022-04-06 09:31:33 +02:00
521c1fd79d
Mention golang requirement for WireGuard
2022-04-06 09:31:33 +02:00
6b54fd6124
Move Fallback into Configuration
2022-04-06 09:31:32 +02:00
f046bcd629
Add options to explicitly enable/disable DNS/proxy
...
DNS/proxy settings, when missing from configuration, fall back to
whatever the server pushes.
With isDNSEnabled/isProxyEnabled it's now possible to override this
behavior.
2022-03-26 17:22:45 +01:00
4bfa0b4e74
Make sure MTU is positive
2022-03-26 17:08:45 +01:00
bbdc21fd61
Fix a few things in demo
...
- OpenVPN: Set default gateway
- WireGuard: "Connect" button not updated
2022-03-25 18:05:36 +01:00
3bdff1ee8b
Customize WireGuard debug log format
2022-03-25 18:02:39 +01:00
f1bdc8490c
Use "struct" in data models to leverage Equatable
...
This way Configuration objects can be compared for changes.
2022-03-25 18:02:21 +01:00
f4508911aa
Refine Keychain class
...
- Require context (kSecAttrService)
- Support userDefined parameter (kSecAttrGeneric)
2022-03-21 17:28:44 +01:00
155d01005c
Make Endpoint RawRepresentable
...
Can be convenient.
2022-03-18 18:40:58 +01:00
69a00834cb
Fix missing WireGuard dependency on SwiftyBeaver
2022-03-13 22:40:49 +01:00
007c64f2b4
Add DataUnit entity
2022-03-13 22:35:57 +01:00
a7a7424257
Use WireGuardKit entities directly
...
No need to duplicate a well-written API.
- Offer convenience accessors in Configuration[Builder]
- Make Configuration init non-optional
Sanity checks are done in Builder with throws and decoded object
is always deemed valid.
2022-03-12 15:09:41 +01:00
ff235e2b96
Log OpenVPN tunnel via SwiftyBeaver file
...
This way debug log is updated without manual flush.
Useful for immediate access.
2022-03-12 10:35:39 +01:00
3807b4754b
Review some Core/OpenVPN entities
...
- Drop redundant Equatable (automatic in structs)
- Make IPv4/6 routes Hashable
- Expose StaticKey as hex String
- Mask PAC URL
2022-03-12 10:35:39 +01:00
3741a17c20
Rewrite Manager package to make it stateless
...
In order to avoid chaos from multiple profiles, retain the
profile to be installed and remove all the other ones. Also,
make sure to do the removal AFTER install, as doing it
before would trigger the VPN permission alert again.
XXX: there is some weird behavior from NetworkExtension
occasionally sending notifications with a bogus NEVPNManager
object having a nil .localizedDescription and other properties set
to nonsensical values. Discard the notification when such an object
is identified.
Encapsulate extra NetworkExtension settings:
- passwordReference
- onDemandRules
- disconnectsOnSleep
Also:
- Only set on-demand if any rules are set
- Assume VPN is enabled even with on-demand disabled
- Use DataCount instead of raw Int pair
Attach useful information to VPN notifications:
- VPN isEnabled
- VPN status
- VPN command error
- Tunnel bundle identifier (if available)
Expose specific OpenVPN/WireGuard shared data via extensions in
UserDefaults/FileManager.
Finally, drop incomplete IKE support. No fit.
2022-03-12 10:35:39 +01:00
Davide De Rosa