v4.1.4

Downloads

Most People Will Want

• Nostr VPN for macOS (Apple Silicon): nostr-vpn-v4.1.4-macos-arm64.dmg
• Nostr VPN for Debian/Ubuntu (.deb): nostr-vpn-v4.1.4-linux-x64.deb
• Nostr VPN for Windows: nostr-vpn-v4.1.4-windows-x64-setup.exe
• Nostr VPN for Android: nostr-vpn-v4.1.4-android-arm64.apk

StartOS Servers

Server One and Server Pure use x86_64; use aarch64 only for an ARM64 StartOS host.

• Nostr VPN for StartOS (x86_64): nostr-vpn-v4.1.4-startos-x86_64.s9pk
• Nostr VPN for StartOS (aarch64): nostr-vpn-v4.1.4-startos-aarch64.s9pk

Command Line

• macOS Apple Silicon CLI: nvpn-aarch64-apple-darwin.tar.gz
• Linux x64 CLI: nvpn-x86_64-unknown-linux-musl.tar.gz
• Linux ARM64 CLI: nvpn-aarch64-unknown-linux-musl.tar.gz
• Windows x64 CLI: nvpn-v4.1.4-x86_64-pc-windows-msvc.zip

Other Files

• Android arm64 AAB: nostr-vpn-v4.1.4-android-arm64.aab
• macOS Apple Silicon updater archive: nostr-vpn-v4.1.4-macos-arm64.app.tar.gz
• nvpn-arm-unknown-linux-musleabihf.tar.gz: nvpn-arm-unknown-linux-musleabihf.tar.gz
• nvpn-v4.1.4-arm-unknown-linux-musleabihf.tar.gz: nvpn-v4.1.4-arm-unknown-linux-musleabihf.tar.gz

Changes

Changed

• Reuse one verified iOS device build across physical idle, WireGuard exit,
  and phone-to-phone join lanes instead of rebuilding it for every lane.
• Record the release gate against a 30-minute warm-run wall-clock target while
  keeping contention-sensitive performance and physical-device checks serial.
• Preserve reusable Docker build metadata for the shared node and Linux GUI
  images, and route final Windows packaging through the configured SSH jump.
• Exercise every exit-DNS settings option through saved configuration and the
  native mobile packet path, and require a physical Android device for the
  Android/iOS WireGuard exit gate instead of silently accepting an emulator.

Fixed

• Restore manual out-of-band network joining on Android, iOS, macOS, Windows,
  Linux, web, and CLI: the joining device can enter the admin Device ID and
  Network ID, while the admin can share those values and add the joiner's
  Device ID.
• Cover both the signed join-request flow and the explicit manual flow on both
  sides in the cross-platform release gate.
• Deliver a mobile QR approval from the durable outbox through the running
  tunnel instead of leaving it queued forever, and restart Android/iOS tunnels
  after approval and roster changes.
• Retry idempotent join-roster delivery while a newly started mobile route is
  forming, while treating only the joiner's durable application receipt as
  success, so manual joins complete in seconds in either phone direction.
• Use one roster-application path on desktop and mobile, and gate both
  desktop-admin/mobile-joiner and mobile-admin/desktop-joiner receipt flows.
• Carry an admin-signed roster into sandboxed mobile tunnel launches so manual
  admin-side additions propagate on both Android and iOS.
• Gate physical QR approval in both directions between iOS and Android, using
  the real action, tunnel restart, signed-roster delivery, receipt, and config
  handoff paths; exercise both mobile admin/joiner combinations for manual
  out-of-band joining in the same physical gate.
• Always await and verify physical iOS packet-tunnel cleanup, including failed
  probes, and refuse an in-place development build replacement while the
  installed app cannot confirm that its tunnel is off.
• Stop Android's VPN service on every explicit disconnect action, even when a
  backgrounded activity has stale UI state after a long-running tunnel test.

Release Build

• Built from commit 69164386730e35bbe0a3e59e23130ab21ad2b81e for release v4.1.4.
• Built signed and notarized Apple Silicon macOS DMG and updater archive.
• Built Linux x64 desktop Debian package.
• Built Windows x64 installer.
• Built signed Android arm64 APK/AAB.
• Built signed StartOS packages for x86_64 and aarch64.