Shprot v1.5

What's New

• Clear failure reasons. If the tunnel can't be opened, Shprot now tells you why: authentication failure, unknown server identity, connection refused, unreachable server, local port already in use, etc. The reason is shown in a notification (once per new reason, not on every retry) and in the tray icon tooltip.
• OpenSSH client check. Shprot warns if ssh or ssh-keygen is missing and explains how to install it. DEB and RPM packages now depend on the OpenSSH client.
• Network exposure warning. Saving a proxy address reachable from other computers (e.g. 0.0.0.0) now asks for confirmation, since the proxies have no authentication.

Improvements

• Server-friendly reconnection. The delay between reconnection attempts grows with each failure, and after authentication failures attempts are made rarely (from 1 up to 30 minutes apart), so a misconfigured key won't get your IP address banned by tools like fail2ban.
• More resilient SSH connection with keep-alive checks, a connection timeout, and a proper restart when the local proxy port can't be opened.
• HTTP proxy: all request methods are supported, requests are forwarded correctly (without Proxy-* headers), IPv6 addresses work, clients get proper error responses instead of hanging, and large downloads no longer consume memory without limit.

Security

• The settings file and temporary key files are readable by their owner only.
• On Linux, a running Shprot instance can be controlled only by its owner (and by root during uninstallation).

Packages

• Linux packages are about 25% smaller and no longer depend on OpenGL libraries.
• Each release now includes a SHA256SUMS file to verify downloads.

Fixes

• Windows: the tunnel process is now reliably stopped.
• Debug messages are no longer written to log files.
• A misbehaving local connection can no longer freeze the application for several seconds.

Full Changelog: v1.4...v1.5