Skip to content

SupiVPN v0.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 07:55
Immutable release. Only release title and notes can be modified.
v0.4.0
3e86e74
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SupiVPN v0.4.0

The first public, open-source release of SupiVPN.

Changes

  • SupiVPN is now available under AGPL-3.0-only. Copyright ownership remains
    with Stanislav Kazachkov; third-party components retain their own licenses.
  • Public source, contributor guides and historical release notes are available
    in the SupiVPN repository.
  • Native Linux ARM64 and AMD64 release bundles are built and tested on GitHub
    runners. Every release tag gets its own parallel tests, security checks,
    fuzzing and builds.
  • Release downloads include Corresponding Source with vendored Go dependencies.
    A dedicated release-signing subkey signs the checksum manifest covering both
    binary bundles, source and release notes. Publication verifies the signature
    and exact tested artifacts before making the release available.
  • The README now displays release, CI, Go version, license and platform badges.

Included capabilities

  • OpenVPN Community 2.7.8 integration with tls-crypt-v2, browser-based SAML
    authentication and client profile downloads.
  • Active-active nodes, group-specific IP pools, concurrent connection limits
    and configurable session lifetimes bounded by the identity provider.
  • Separate public, agent and recovery components; PostgreSQL-backed shared
    state, replay protection and bounded EC2 fencing and recovery.
  • Structured JSON logs with configurable destinations and rotation, plus
    stable flow correlation IDs across authentication and tunnel lifecycle events.

Compatibility

This release carries forward the v0.3.0 runtime and unchanged database migrations.
Database schema 9, bundle format 3 and JSON log schema 1 remain unchanged.
VM components support database schemas 7, 8 and 9; isolated Lambda components
require schema 9. No new runtime configuration or database migration is required
when upgrading from v0.3.0.

Distribution and licensing have changed: use the public GitHub Release assets
and verify the signed checksums with the pinned SupiVPN release key before
installing. Review AGPL-3.0-only and the Corresponding Source requirements for
your use and redistribution.

Known limitations

VPN server-name verification with OpenVPN Connect, overlapping wrapping-key
rotation, individual profile revocation and an independent audit of the custom
SAML/XMLDSig implementation remain open. PostgreSQL certificate verification
must be enabled explicitly with verify-full; the default require encrypts
traffic without verifying server identity.

See the security model
and release verification
before deployment.

Packages

Commit: 3e86e744681d0526939709e913adfc85f39720c1. License: AGPL-3.0-only.

Verified native ARM64 and AMD64 builds from Checks for this signed tag. Both bundles use format 3.

Database schema: 9; compatible VM schemas: 7, 8, 9.
Isolated Lambda required schema: 9.

Corresponding Source accompanies the binaries. Verify SHA256SUMS.asc with the pinned SupiVPN release key, then verify the downloaded files against SHA256SUMS before use.

Assets 9
Loading