Skip to content

Colitu VPN for Android 2.3.0

Choose a tag to compare

View all tags
@cyberlexs cyberlexs released this 30 Sep 03:29
· 12 commits to main since this release
v2.3.0
c40be42

Download

Official download (with in-app updates): https://colitu.com/download

File Link SHA-256
Universal (all phones and TVs) Colitu-2.3.0.apk 386af91c71418850fc55450a51ffa7acc3b3d295a6a487328517233695755fce
arm64-v8a (most phones) Colitu-2.3.0-arm64-v8a.apk 874b46da8818a66b52c80da4740fcc508910d5bf5ec2dd3c7647b9675b351390
armeabi-v7a (older phones) Colitu-2.3.0-armeabi-v7a.apk 98807fb1ad3e218a1371d58caf457848f29dd7e82734957ffc97f6bc359a01db

The same APKs (plus an x86_64 build) are attached below. Signing certificate SHA-256: 900e364616e5fce83766310f74bd06e4743a6936460a9e108edd096dfb5e82fc — an update with any other certificate will not install over Colitu.

What's new in 2.3.0

Fixed

  • Connecting failed with "the VPN engine could not start" on some servers, accounts and TVs: the panel's 64-bit config revision was read as a negative number and the profile was rejected. Every profile is accepted now.
  • Cancelling while connecting could leave the tunnel running; cancel now always stops it.
  • A short server outage during a session refresh could sign you out and turn the VPN off. Only a rejected session ends it now.
  • A server switch that did not reach the panel no longer connects you to the previous server; the app shows the server you are really on.

Security and privacy

  • The legacy configuration screens, the custom URL scheme, the Tasker plug-in and the boot receiver are gone: other apps and web pages can no longer add servers, read the profile, or start and stop the tunnel.
  • The app's internal broadcasts are no longer exported.
  • Xray's local SOCKS inbound uses a random port and a per-connection account instead of an open 127.0.0.1:10808; Xray's access log is off.
  • While connected, the app's own API calls go through the tunnel; colitu.com is certificate-pinned.
  • Quick-settings tile, widget, shortcuts and Always-on only start a valid Colitu profile; otherwise they open the app.
  • Support diagnostics are opt-in and contain only Colitu log lines with IP addresses masked.
  • The colitu.com build checks an ECDSA signature on latest.json before offering an update. Google Play and F-Droid builds contain no self-updater.

Changes

  • New home screen, the same as on iPhone.
  • No in-app purchases: the Plan page shows your plan and opens your account on app.colitu.com.
  • R8 enabled; the APKs are about 30% smaller.

Русский: исправлена ошибка «VPN-движок не смог запуститься», другие приложения больше не могут управлять VPN или использовать его, новый главный экран, тариф оформляется в кабинете app.colitu.com. Скачать: https://colitu.com/download

Türkçe: "VPN motoru başlatılamadı" hatası giderildi, diğer uygulamalar artık VPN'i kullanamaz veya yönetemez, yeni ana ekran, paketler app.colitu.com hesabından yönetilir. İndir: https://colitu.com/download

Assets 6
Loading