Skip to content

S3 Explorer v0.3.3

Choose a tag to compare

View all tags
@cbarange cbarange released this 05 May 10:13
· 1 commit to main since this release
v0.3.3
67114a1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

⚠️ This release is broken — DO NOT install

v0.3.3 panics silently on launch on every machine due to a missing rustls
crypto provider initialization. The bug was introduced by the TLS migration
and slipped through testing because the crash leaves no stderr / crash log.

Use v0.3.4
instead — it ships the same corporate-network compatibility features
(platform TLS verifier + DoH cascade) plus the panic fix.

S3 Explorer — manage S3-compatible object storage from your desktop

Cross-platform Tauri + Vue 3 client supporting AWS S3, MinIO, Backblaze B2, Cloudflare R2, and 17+ other S3-compatible providers.

What's new in v0.3.3

This release is focused on a single goal: make the app work in restrictive corporate networks.

🛡️ Corporate network compatibility

Two complementary fixes that automatically activate only when needed (zero impact on home / café / regular Internet):

  • TLS validation now uses the OS trust store instead of a fixed Mozilla CA bundle baked into the binary. This means license activation works behind enterprise SSL inspection proxies (Zscaler, Cisco Umbrella, Palo Alto, Symantec, Netskope, etc.), where IT installs a custom CA on managed machines to inspect HTTPS traffic. Previously, our app rejected those certificates as "not from a trusted root" and showed a generic "Network error" with no path forward; now it accepts them just like Chrome, Firefox and Outlook do.
  • DNS-over-HTTPS (DoH) fallback for license validation. When the system DNS resolver fails to resolve api.lemonsqueezy.com (most commonly because of corporate DNS sinkholing of payment / e-commerce categories), the app automatically falls back to Cloudflare's DoH endpoint (https://1.1.1.1/dns-query), then Google's (https://dns.google/dns-query). The system resolver is always tried first and used when it works — so paying users on open networks see no behavioural change.

The two fixes work together: if the corporate network has both DNS sinkholing AND SSL inspection (a common combination in larger enterprises), the app will now activate licenses where it previously couldn't.

Coverage matrix

Network configuration Before v0.3.3 After v0.3.3
Open Internet ✅ works ✅ works
DNS sinkhole only ❌ network error ✅ works (DoH fallback)
SSL inspection proxy only ❌ TLS error ✅ works (platform verifier)
DNS sinkhole + SSL inspection ❌ both layers fail ✅ works (both fixes combined)
Whitelist-by-destination only (paranoid IT) ❌ blocked ❌ still requires IT whitelist

Security note

The previous behavior pinned TLS to the Mozilla CA bundle as a defense against a narrow attack scenario (a local cracker installing a fake certificate authority in their own OS to impersonate our license server). This release accepts that trade-off because the practical security impact is minimal: a determined attacker can already reverse-engineer the binary to obtain the obfuscated identifiers needed to forge a server response. All other defenses are unchanged — HMAC machine-binding, constant obfuscation, the four dispersed validation checkpoints, anti-debug watchdog, AES-256-GCM credential encryption.

The DoH fallback queries Cloudflare and Google DNS over HTTPS only when the system resolver fails, never on the happy path — there is zero impact on users with normal connectivity.

Downloads

Platform Download
macOS (Universal — Intel + Apple Silicon) .dmg
Windows x64 .exe · .msi
Windows ARM64 (Snapdragon, Surface Pro X) .exe · .msi
Linux x64 .AppImage · .deb · .rpm
Linux ARM64 (Raspberry Pi, ARM servers) .AppImage · .deb · .rpm

Installation Notes

macOS

  • Download the .dmg, open it, and drag S3 Explorer to Applications
  • On first launch, the app is signed with Apple Developer ID — should open without warning

Windows

  • Recommended: .exe setup (NSIS installer, supports auto-update)
  • Enterprise / managed deployment: .msi (Group Policy / SCCM compatible)

Linux

  • Debian / Ubuntu / derivatives: sudo dpkg -i S3.Explorer_*.deb
  • Fedora / RHEL / openSUSE: sudo rpm -i S3.Explorer-*.rpm
  • Other distros: .AppImage is portable — chmod +x and run

Full source-level changelog

View full commit history on GitHub

Assets 24
Loading