Skip to content

Zync v2.37.0

Choose a tag to compare

View all tags
@gajendraxdev gajendraxdev released this 22 Oct 11:49
· 121 commits to main since this release
v2.37.0
ba13998

Release Notes - Zync v2.37.0

Release date: 2026-10-22

What's New

Zync v2.37.0 adds OpenSSH user-certificate authentication, encrypted certificate attachments for Vault SSH keys, and per-host network-interface selection. Adding or editing a host is clearer, with safer connection tests, file imports and certificate updates.

Compare: v2.36.0...v2.37.0

Added

OpenSSH user certificates

  • CA-based SSH login: Select an OpenSSH user certificate alongside your private key, including keys stored in Vault. Zync checks the key pairing, certificate signature and validity period before authenticating; the server still decides which CAs and users it trusts. Existing server host-key verification is unchanged. (91a0a73)
  • SSH config import: Import CertificateFile together with IdentityFile. If a host declares multiple certificate files, Zync keeps the first and shows a warning instead of silently replacing it. Multiple certificate candidates per host are not supported. (91a0a73, 1a4b2cd)
  • Certificate file handling: Preserve quoted paths during SSH config import/export, report picker failures without clearing the current path, and keep certificate paths out of password authentication. (38628ac, 051f162)

Certificates stored with Vault SSH keys

  • Encrypted key/certificate pairing: Paste or import an optional matching SSH user certificate when adding or rotating a Vault SSH key. The certificate stays with the encrypted credential and follows its existing sync and revision history. Key-only credentials continue working as before. (bcfe6f4, 387ddc7)
  • Certificate-only updates: Attach, replace or remove a certificate from credential details without re-entering the stored private key or passphrase. Reconnect to use the updated certificate. (bcfe6f4, 387ddc7)
  • File override: A certificate file selected for an individual host takes precedence over its Vault attachment. File-based certificates are reread on reconnect; Vault attachments are saved snapshots and must be explicitly replaced after renewal. A configured certificate failure does not silently fall back to bare-key login. (bcfe6f4)
  • Safe imports and updates: Wait for pending key/certificate imports before saving, preserve draft text on cancellation or failure, and ignore late reads after newer edits or closing the editor. Certificate updates reject stale edits after rotation or sync restores, preserving the current key, passphrase and credential identity. (bcfe6f4, 387ddc7, 354db7d)

Network interface per SSH connection

In a host's Advanced settings, choose System default, a specific network adapter, or Ask every time on Windows, Linux and macOS. Adapter descriptions and addresses help distinguish Wi-Fi, Ethernet and virtual interfaces. This addresses the per-host network-selection request in Issue #133. (91a0a73, 38628ac)

The preference stays on this device. Automatic transport recovery retains the selected adapter; a missing adapter or denied binding permission produces an error instead of silently using the default. OS routing and VPN policy still apply, DNS uses system settings, and interface selection does not start a VPN or provide a VPN kill switch. For jump-host connections, selection applies to the first local TCP hop. (91a0a73, 051f162)

Available adapters appear first. The picker displays up to 256 interfaces without failing on larger inventories; reconnecting through a saved adapter is not limited to those displayed entries. (91a0a73, 051f162)

Changed

  • Clearer host setup: Keep the initial new-host/import chooser, simplify password, SSH-key and saved-credential choices, and group optional appearance and advanced settings. Test connection results include clearer error details, while certificates expand only when needed. (38628ac)
  • Vault credential editing: Import private-key and certificate contents directly from files. Keep the private key and optional certificate together, with the private-key passphrase below them. The host editor identifies Vault-provided certificates and explains when a selected file overrides them. (387ddc7)

Fixed

  • Connection tests: Ignore results from a test started before the host's inputs changed or its editor was closed, so an old success or failure cannot appear for the current host settings. (38628ac)
  • Folder-size cancellation: Keep cancelled or failed Properties inspections stopped across listing refreshes until Retry, a different target, or reopening Properties. (a676f06)

Thank You

Thank you to everyone who shared workflows, reported problems and tested these improvements.

Issue tracking

Community feedback

  • u/vortige-sven on Reddit: Reported the missing CertificateFile support and shared a CA-based SSH setup using TrustedUserCAKeys, helping shape user-certificate authentication in this release.

Quick Check After Upgrade

  1. Confirm Settings → About shows v2.37.0 and test an existing host before changing its settings.
  2. For a CA-enabled SSH server, select the matching private key and user certificate, then test the connection. Certificates apply to key authentication, not password login.
  3. Try storing a matching key/certificate pair in Vault, assign it to a host, and reconnect after replacing its certificate from credential details.
  4. Under Advanced, select a connected network adapter or Ask every time. Reconnect to apply a changed preference. Binding may require OS permission; Zync reports failures rather than requesting elevation.
  5. Open one folder's Properties, cancel its size calculation, and refresh the listing. The scan should stay stopped until you explicitly retry or reopen Properties.

Feedback and Upgrade

Report problems through Settings → Feedback or GitHub issues. Include your OS, v2.37.0 and reproduction steps; remove private keys, passphrases, certificate contents and private network details from logs or screenshots.

Use Zync's updater or download your platform's installer from Releases - v2.37.0.

# Debian / Ubuntu
sudo apt update && sudo apt install zync

# Arch
sudo pacman -Syu zync

Full Changelog

See CHANGELOG.md for the technical change history.

Assets 16
Loading