Skip to content

v15.2.3 - Critical install hotfixes (dnscrypt path, fail-soft privacy stack)

Choose a tag to compare

View all tags
@ryderlacin-pixel ryderlacin-pixel released this 08 Jun 18:05
· 11 commits to main since this release
v15.2.3
0bad8bb

v15.2.3 — Critical install hotfixes

Status: Production — install reliability patch.

Fixes

1. dnscrypt-guard path bug (install fatal at STEP 18f)

Generated dnscrypt-guard.ps1 used single-quoted paths:

$DNSCRYPT_CONF = '$DNSCRYPT_DIR\dnscrypt-proxy.toml'  # broken — literal $DNSCRYPT_DIR

When run from C:\Windows\system32, install failed with:

Could not find a part of the path 'C:\Windows\system32\$DNSCRYPT_DIR\dnscrypt-proxy.toml'

Fix: Join-Path $DNSCRYPT_DIR 'dnscrypt-proxy.toml' in v14 and v15 guard generators.

2. Privacy stack must not abort full install

Guard script errors during STEP 18c–18f could bubble up as Install fatal and trigger fail-open.

Fix:

  • Invoke-GuardScriptSafe — runs guards with try/catch, logs WARN only
  • Ensure-DnscryptTomlFile — always creates C:\WireGuard\dnscrypt-proxy\ before writing toml
  • v14/v15 stack functions and MainSteps 18b–18f wrapped in fail-soft try/catch

3. Install from wrong working directory

Fix: install.ps1 now runs Set-Location -LiteralPath $PSScriptRoot so relative repo paths resolve correctly.

Includes prior patches

  • v15.2.2 — Invoke-SafeRegistrySet splat fix (STEP 4 IPv6)
  • v15.2.1 — -DryRun completeness (Invoke-SafeNetsh / registry guard)

Install

Set-ExecutionPolicy Bypass -Scope Process -Force
cd "C:\path\to\Windows-WireGuard-KillSwitch"
.\install.ps1 -NoPause

Partial failed install: .\emergency-reset.bat then re-run.

Tests

scripts/test-suite.ps1: 198+ assertions PASS

Assets 2
Loading