Skip to content

Releases: LazyGatto/mikrotik-psk-knock

mkpk v0.4.2

Choose a tag to compare

@LazyGatto LazyGatto released this 30 Jul 21:41

macOS-client–focused release. The Go CLI / provisioner is functionally unchanged from v0.4.1 (rebuilt under this tag).

Highlights

  • macOS client is now Developer ID signed + notarized — a downloaded DMG/app no longer trips Gatekeeper quarantine (no xattr -cr needed).
  • External-IP re-check — the client re-resolves your public (egress) IP on network changes (Wi-Fi ↔ cellular / reconnect), periodically while a port is open, and via a manual refresh button. If a service is open for an address that no longer matches, it flags it (menu-bar attention + in-app warning + a notification) so you know to re-knock. Closes the silent "port is open, but for my old IP" trap after a reconnect.

Fixed

  • macOS client .app is now codesignable (brand icons flattened into Contents/Resources, loaded via Bundle.main).

Notes

  • iCloud Keychain sync of invites stays off pending a Developer ID provisioning profile; the Settings toggle falls back to the local file store.

Assets

  • CLImkpk and mkpk-provision for linux / darwin / windows × amd64 / arm64 (.zip; the binary keeps its executable bit).
  • macOS clientmkpk-client_v0.4.2_darwin_arm64.dmg (signed + notarized, drag-to-Applications).

See the CHANGELOG for details.

mkpk v0.4.1

Choose a tag to compare

@LazyGatto LazyGatto released this 29 Jul 19:33

v0.4.1 — fix

  • RouterOS poller no longer rewrites the token rule content every second (only on bucket roll) — it was flooding the device log. Existing routers need a redeploy (uninstall → install).

Highlights since v0.3.0 (v0.4.0)

  • Per-service allowed-timeout end-to-end (config → router TTL → invite countdown); clock-health warnings.
  • mkpk-provision test — end-to-end knock test over SSH (verifies counters/log/port); web "Test" button + streaming; deploy progress streaming; backend-liveness banner.
  • Native macOS menu-bar client (import invites, knock/check, keep-open) + Wails provisioning desktop.
  • CLI: --json for knock, non-silent result lines, -h hints.

Assets: mkpk / mkpk-provision CLIs (linux/darwin/windows × amd64/arm64) + macOS apps as DMGs.
macOS apps are ad-hoc signed (arm64) — clear Gatekeeper quarantine with xattr -cr <app>.app (Developer-ID notarization pending). Full history in CHANGELOG.md.