Skip to content

Omnitun 0.3.5 (2aa1e91)

Choose a tag to compare

View all tags
@GarageDeveloper GarageDeveloper released this 28 Oct 13:27
· 26 commits to main since this release
v0.3.5
2aa1e91
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • FortiGate connections no longer stay "connecting" forever. A gateway that accepts the connection and then goes silent now ends the attempt with a timeout (10 s to connect, 120 s for TLS and for each portal answer, enough to approve a push or a Keychain signature).
  • A one-time code is never sent twice to a FortiGate. A login form is sent again only when the gateway closed the connection without answering.
  • WireGuard tunnels survive a server restart. Network errors (ICMP unreachable) no longer tear the tunnel down: WireGuard recovers by itself, as with wg-quick.
  • IPsec tunnels ride out Wi-Fi roaming and full interface queues instead of dropping, and accept gateway messages with long certificate chains (up to 64 KiB).
  • IKEv2: a gateway refusing a key renewal is no longer flooded with new attempts; the client retries a minute later, and the connection ends cleanly when the keys expire.
  • IKEv1: the gateway deleting its previous session after a re-authentication no longer disconnects you.
  • L2TP: a malformed packet no longer disconnects you, and retransmissions during setup happen even when the server is chatty.
  • OpenVPN: a connection could stop carrying traffic after a key renewal following an earlier one with key 7; a server ending a TLS session could freeze the connection; a forged first packet could make the connection attempt fail.

Signed with a Developer ID and notarized by Apple. macOS 14 or later.

Assets 4
Loading