Skip to content

Omnitun 0.3.7 (b36bd36)

Choose a tag to compare

View all tags
@GarageDeveloper GarageDeveloper released this 29 Oct 11:59
· 19 commits to main since this release
v0.3.7
b36bd36
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

New

  • Shell completions for omnitunctl (bash and zsh), with the names of your VPNs: omnitunctl connect <TAB>. The package installs them; zsh needs compinit in .zshrc, bash needs bash-completion 2 (Homebrew). From source or on Linux, omnitunctl completions bash|zsh prints them. Thanks to Nicolas Rodriguez.

Fixed

  • The app and omnitunctl no longer overwrite each other's changes to the profiles file when both change it at the same time.
  • Settings written by a newer version are kept when an older one saves a profile.
  • A profiles file that is a symbolic link (dotfiles) stays a link when saved.
  • Requests made while connecting (client certificate signatures, certificates to trust) can no longer be cut in the middle.
  • Imports: an OpenVPN static key after a comment that names its end is read correctly; a Cisco IPSec group name from System Settings becomes the right local identity; out-of-range ports and unknown IKE versions fall back to the defaults with a note; invisible names are replaced.
  • Export: a Fortinet SSL VPN profile whose CA is a file now carries the CA itself.
  • Typos are refused before connecting: a certificate fingerprint that is not a SHA-256, an IKE version other than 1 or 2. Pinning a certificate already pinned under another spelling no longer adds it twice.
  • Diagnostic report: file paths, realms and certificate names are left out, and making the report never changes the profiles file.
  • Installer: an installation that cannot create the engines' account or start the service now says it failed, instead of reporting success.
  • Linux: the systemd unit is locked down further (system calls, address families, kernel protections, fewer capabilities), and the README's steps to install from source now create the account the engines run as.

Notes

  • An OpenVPN profile keeps its client key and its tls-auth or tls-crypt key in profiles.toml (readable by you only), as in the .ovpn file it came from: do not sync or share that file.
  • Building from source needs Rust 1.95 or later.

Signed with a Developer ID and notarized by Apple. macOS 14 or later.

Assets 4
Loading