Skip to content

OwnTransit 1.0.5 — relay availability fixes

Latest
Latest

Choose a tag to compare

View all tags
@sentrybottale sentrybottale released this 07 Oct 20:49
Immutable release. Only release title and notes can be modified.
v1.0.5
be3b131
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OwnTransit 1.0.5 contains two Relay availability fixes.

  • Give each original public TCP peer its own bounded pre-authentication quota through managed Nginx, Caddy and Apache routes. Reject spoofed or ambiguous private-hop metadata and prevent Apache hop-header nomination from removing the quota field.
  • Separate short-lived, evictable pending advertisements/offers from exact locally approved receiver capacity. Preserve signed expiry, token recovery, approved restart restoration, removal and explicit reapproval.
  • Update recognized existing Relay routes with protected backups and interrupted-update rollback. Preserve inherited Nginx carrier headers.

Upgrade the Relay with the 1.0.5 installer, then choose Start or update this relay for its existing URL. Updating only the container does not reconcile an old route. Nginx RealIP and Apache mod_headers support are required; unsafe custom routing fails validation without replacing the previous selection.

Existing Client/Target pairings remain compatible. This release changes no authenticated wire profile, endpoint trust, SSH keys/accounts/configuration or fixed tcp4 127.0.0.1:22 target. It uses the existing distribution signer and immutable nine-asset release lane. A malicious Relay can still deny service, and sustained public pressure can still disrupt pending setup.

The conditional raw-command finding in the separately shipped historical 0.1.0 administrator-led profile is not changed; those commands are absent from the current Client/Relay/Target distribution.

Validation: both native race/vet profiles, vulnerability analysis, root lifecycle/worker confinement, provider, installer, signature-helper, source/history and CodeQL checks passed on Linux amd64/arm64 and Apple silicon. The exact signed Linux roles executed natively on both architectures. The signed Mac client matches the exact bytes executed by Apple-silicon CI. All nine assets were downloaded from the draft, signature/inventory verified and compared byte-for-byte before publication.

Source: be3b13171afda4ee5a65c27184e8d7609be0c2a9 (merged release PR). No live operator tunnel deployment, extended soak or independent security certification is claimed.

Assets 12
Loading