Skip to content

S3 Explorer v0.3.4

Choose a tag to compare

View all tags
@cbarange cbarange released this 05 May 10:56
v0.3.4
67114a1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

S3 Explorer — manage S3-compatible object storage from your desktop

Cross-platform Tauri + Vue 3 client supporting AWS S3, MinIO, Backblaze B2, Cloudflare R2, and 17+ other S3-compatible providers.

What's new in v0.3.4

Hotfix release for v0.3.3.

v0.3.3 introduced corporate network compatibility (platform TLS verifier + DoH cascade) but shipped with a critical bug: the app panicked silently on every launch because rustls 0.23+ requires a crypto provider to be installed at startup before any TLS code runs, and our migration replaced the previous implicit setup with an explicit one that didn't include this step.

v0.3.4 contains exactly that one fix — rustls::crypto::aws_lc_rs::default_provider().install_default() is now called once at the top of the app entry point, before any module that touches TLS (telemetry, license validation, DoH resolver). Everything else from v0.3.3 is unchanged: corporate SSL inspection proxies still work, DNS sinkhole bypass via DoH still works.

If you tried to install v0.3.3 and saw the app fail to launch (no window, no error message — just a process that exits within seconds), this release fixes it. Please redownload from the table below. Existing v0.3.2 users will receive v0.3.4 automatically via the in-app updater.

Carry-over from v0.3.3 — corporate network compatibility

Two complementary fixes that automatically activate only when needed (zero impact on home / café / regular Internet):

  • TLS validation now uses the OS trust store instead of a fixed Mozilla CA bundle baked into the binary. License activation works behind enterprise SSL inspection proxies (Zscaler, Cisco Umbrella, Palo Alto, Symantec, Netskope, etc.) that intercept HTTPS with an IT-installed enterprise CA.
  • DNS-over-HTTPS (DoH) fallback for license validation. When the system DNS resolver fails to resolve api.lemonsqueezy.com (corporate DNS sinkholing), the app falls back to Cloudflare's DoH endpoint, then Google's. The system resolver is always tried first.

The two work together: networks that combine DNS sinkholing AND SSL inspection (common in larger enterprises) now activate licenses where they couldn't before.

Coverage matrix

Network configuration Result
Open Internet ✅ works
DNS sinkhole only ✅ works (DoH fallback)
SSL inspection proxy only ✅ works (platform verifier)
DNS sinkhole + SSL inspection ✅ works (both fixes combined)
Whitelist-by-destination only (paranoid IT) ❌ still requires IT whitelist

Downloads

Platform Download
macOS (Universal — Intel + Apple Silicon) .dmg
Windows x64 .exe · .msi
Windows ARM64 (Snapdragon, Surface Pro X) .exe · .msi
Linux x64 .AppImage · .deb · .rpm
Linux ARM64 (Raspberry Pi, ARM servers) .AppImage · .deb · .rpm

Installation Notes

macOS

  • Download the .dmg, open it, and drag S3 Explorer to Applications
  • On first launch, the app is signed with Apple Developer ID — should open without warning

Windows

  • Recommended: .exe setup (NSIS installer, supports auto-update)
  • Enterprise / managed deployment: .msi (Group Policy / SCCM compatible)

Linux

  • Debian / Ubuntu / derivatives: sudo dpkg -i S3.Explorer_*.deb
  • Fedora / RHEL / openSUSE: sudo rpm -i S3.Explorer-*.rpm
  • Other distros: .AppImage is portable — chmod +x and run

Full source-level changelog

View full commit history on GitHub

Assets 24
Loading