Releases: LazyGatto/mikrotik-psk-knock
Releases · LazyGatto/mikrotik-psk-knock
Release list
mkpk v0.4.2
macOS-client–focused release. The Go CLI / provisioner is functionally unchanged from v0.4.1 (rebuilt under this tag).
Highlights
- macOS client is now Developer ID signed + notarized — a downloaded DMG/app no longer trips Gatekeeper quarantine (no
xattr -crneeded). - External-IP re-check — the client re-resolves your public (egress) IP on network changes (Wi-Fi ↔ cellular / reconnect), periodically while a port is open, and via a manual refresh button. If a service is open for an address that no longer matches, it flags it (menu-bar attention + in-app warning + a notification) so you know to re-knock. Closes the silent "port is open, but for my old IP" trap after a reconnect.
Fixed
- macOS client
.appis now codesignable (brand icons flattened intoContents/Resources, loaded viaBundle.main).
Notes
- iCloud Keychain sync of invites stays off pending a Developer ID provisioning profile; the Settings toggle falls back to the local file store.
Assets
- CLI —
mkpkandmkpk-provisionfor linux / darwin / windows × amd64 / arm64 (.zip; the binary keeps its executable bit). - macOS client —
mkpk-client_v0.4.2_darwin_arm64.dmg(signed + notarized, drag-to-Applications).
See the CHANGELOG for details.
mkpk v0.4.1
v0.4.1 — fix
- RouterOS poller no longer rewrites the token rule content every second (only on bucket roll) — it was flooding the device log. Existing routers need a redeploy (uninstall → install).
Highlights since v0.3.0 (v0.4.0)
- Per-service allowed-timeout end-to-end (config → router TTL → invite countdown); clock-health warnings.
mkpk-provision test— end-to-end knock test over SSH (verifies counters/log/port); web "Test" button + streaming; deploy progress streaming; backend-liveness banner.- Native macOS menu-bar client (import invites, knock/check, keep-open) + Wails provisioning desktop.
- CLI:
--jsonfor knock, non-silent result lines,-hhints.
Assets: mkpk / mkpk-provision CLIs (linux/darwin/windows × amd64/arm64) + macOS apps as DMGs.
macOS apps are ad-hoc signed (arm64) — clear Gatekeeper quarantine with xattr -cr <app>.app (Developer-ID notarization pending). Full history in CHANGELOG.md.