Skip to content

TunnelYard v1.1.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Aug 22:23
· 14 commits to master since this release
v1.1.7
18a1606

Installing updates on Windows

  • Launch the downloaded installer through ShellExecute so Windows raises
    the UAC prompt. The per-machine installer requires administrator
    rights, which CreateProcess refuses outright — updating from inside
    the application failed with spawn ... EACCES.
  • Report a declined elevation prompt instead of quitting the running
    application. The spawn failure arrived asynchronously and escaped the
    surrounding error handling, crashing the main process.
  • Attach the same error handling to the macOS update helper.

Upgrading to this version from 1.1.6 or earlier still needs the
installer to be run manually, because the fix lives in the update path.

Application icon and form focus

  • Replace the placeholder application mark with the shield icon used in
    the interface. Windows takes its taskbar and toast-notification icons
    from the installed executable, so both now match the window.
  • Give desktop notifications an explicit icon instead of the shell default.
  • Restore a visible focus indicator on profile fields, buttons and toggles;
    the previous ring was too faint to see over the dark surface.
  • public/icon.svg is now the single source for the mark, rasterized by
    npm run build:icons.

Earlier in 1.1.x

  • Apply and verify the MTU negotiated for each session before installing tunnel IP/routes.
  • Validate adapter, IP, routes and effective MTU before showing connected; optionally check an internal TCP service configured in the profile editor.
  • Recheck isolated service-probe failures without reauthenticating; show verification in progress and disconnect after three consecutive failures. Topology loss remains immediate.
  • Detect tunnel loss and stale supervisor status; stop retrying rejected cookies or sessions where the gateway forbids reconnect-after-drop.
  • Apply Fortinet split-DNS with scoped Windows NRPT policies and remove owned settings on disconnect.
  • Retain secure CA/fingerprint verification and distinguish an unknown-CA warning from a verified certificate pin.
  • Install application updates from official releases only.

Packages

  • .deb — Debian / Ubuntu / Mint
  • .rpm — Fedora / RHEL / Rocky / Alma / openSUSE
  • .dmg / .zip — macOS, Intel and Apple Silicon (requires openfortivpn via Homebrew)
  • .exe — Windows x64 (setup installs OpenConnect 9.21 on first use)

All platforms import openfortivpn .conf profiles. See the README for
Windows option compatibility and signing / notarization notes.

New platforms: validation limits

Windows and macOS support is new. Automated checks cover profile
translation, local TLS/authentication and network cleanup logic.
Windows MTU, service reachability and split-DNS were also checked on a
real FortiGate session; other gateways and macOS still require native validation.
Windows currently supports IPv4 SSL VPN. SAML and all MFA variants
are not verified. The packages may trigger SmartScreen/Gatekeeper
warnings when signing credentials are not configured.

Install / upgrade (Debian & Ubuntu)

After installing once, updates come with sudo apt upgrade:

sudo apt install ./tunnel-yard_*_amd64.deb
# postinst installs the archive key and APT source automatically
sudo apt update && sudo apt upgrade

Or add the repo manually:

curl -fsSL https://lucascavalheri.github.io/tunnel-yard/apt/tunnel-yard-archive-keyring.asc \
  | sudo tee /usr/share/keyrings/tunnel-yard-archive-keyring.asc >/dev/null
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/tunnel-yard-archive-keyring.asc] https://lucascavalheri.github.io/tunnel-yard/apt ./' \
  | sudo tee /etc/apt/sources.list.d/tunnel-yard.list
sudo apt update && sudo apt install tunnel-yard

Fedora / RPM

sudo dnf install ./tunnel-yard-*.x86_64.rpm
Assets 9
Loading