Skip to content

Colitu VPN for Linux v1.4.4

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Oct 07:34
· 3 commits to main since this release
v1.4.4
238df77

Colitu VPN for Linux 1.4.4

  • API certificate pinning: the Colitu API, mirrors, endpoint list and updater accept only certificates whose validated chain ends at the ISRG or Google Trust Services roots (checks end 2027-12-31).
  • Update manifest freshness: latest.json keeps the old signature for older versions and adds signature_v2 over issued_at/expires_at; 1.4.4+ refuse a manifest older than 30 days or past its expiry.
  • Security review fixes: the local proxy never listens on the LAN; Shadowsocks link parsing has a time limit; import accepts share links only; notice links are encoded; DNS of apps in "only selected apps" mode goes to the tunnel's resolver.
  • Adaptive Connect: 90 s mid-session penalty for a transport proven on the current network, misses keep counting inside the switch gap, dead warm spares replaced after at most 2 minutes of light traffic. Adaptive Connect 3.0 parts are in the code but switched off.

Download: https://colitu.com/download/linux · Release notes: https://docs.colitu.com/changelog/linux

Colitu VPN for Linux. Install on Debian/Ubuntu/Mint with the .deb, on Fedora/RHEL with the .rpm, or unpack the .tar.gz on any distribution.
Guide: https://colitu.com/download/linux · Checksums: SHA256SUMS.

Assets 9
Loading