summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-01-25[feat] implement autostart for vpnKali Kaneko
2018-01-25[feat] implement vpn status watchdogKali Kaneko
2018-01-25[feat] hardcode tcp4 in vpn connectionsKali Kaneko
for now, we'll be hardcoding tcp as a more reliable alternative, no matter what the provider announces. explicitely specifying ipv4 should fix the case in which vpn fails to start because ipv6 is disabled. -Resolves: #9181, #9129
2018-01-25[feat] support anonymous vpnKali Kaneko
honor the anonymous certificate for the providers that offer it. this still needs a change in bonafide, in which if provider supports anonymous access we still have to download eip-service.json for testing, I assume this has been already manually downloaded.
2018-01-25[feat] get cert automatically on vpn startKali Kaneko
2018-01-16[bug] fix the systemctl runRuben Pollan
2018-01-12[bug] Accept any character for message-idRuben Pollan
- Resolves: #9202
2018-01-12[doc] add changelog entry for the qubes firewall fix.Ruben Pollan
2018-01-12[feat] bump bitmask-root versionRuben Pollan
2018-01-12Add Qubes DNS support, fixesChristopher Laprise
2018-01-12Add anti-leak rules for qubes-firewallChristopher Laprise
2018-01-09[bug] fix issues with dns resolution with systemd-resolvedRuben Pollan
In ubuntu 17.10 some changes with systemd-resolved broke our firewall, blocking all DNS queries. The masquerade rules in the firewall, that are used to rewrite the source IP address of the DNS queries, were wrongly modifying the queries to systemd-resolved. Let's apply masquerade only to the packets addressed to the nameserver. - Resolves: #9137
2018-01-09[bug] do not depend on function if not in scopeKali Kaneko
2018-01-09[pkg] add webengine to depsKali Kaneko
2018-01-09[bug] add missing libs to pyinstaller for qtwebengineKali Kaneko
- Resolves: #9191
2018-01-09[pkg] rename docker targetKali Kaneko
it was a bit confusing before.
2018-01-09[pkg] use bitmask-bundler image for bundlesKali Kaneko
2018-01-08[test] enlarge the functional test timeoutRuben Pollan
2018-01-08[feat] try other gateways if the main one failsRuben Pollan
Removing '--persist-ip' param on openvpn it will try to connect to a different gateway if the first one fails. This means, that in case of network disconnection for some minutes bitmask will keep rotating between the different gateways and one the network comes back it will not connect anymore to the first one, but to the one that was trying at this moment. - Resolves: #9188
2018-01-08[docs] documentation about vpn autostartKali Kaneko
2018-01-08[pkg] create a new image for bundlesKali Kaneko
2018-01-08[ci] build packages for master and tags onlyKali Kaneko
2018-01-06[bug] send the user id in msg_status commandRuben Pollan
2018-01-06[test] Dont allow failure for e2e tests anymoreVarac
After e2e tests seem reliable now we should not allow them to fail anymore.
2018-01-06[bug] Don't use system packages when bundling headless buildSimon Fondrie-Teitler
This makes builds not error when the virtualenv version of a package doesn't match the system one. It also helps ensure builds on different machines bundle the same version of packages.
2018-01-06[test] Use ci.leap.se for e2e testsVarac
2018-01-06[pkg] add qtwebengine to DockerfileKali Kaneko
2018-01-06[style] pep8Kali Kaneko
2018-01-06[refactor] webengine entrypointKali Kaneko
this commit deprecates qtwebkit usage.
2018-01-06[refactor] factor out common functionsKali Kaneko
used from both entrypoints for linux and mac apps.
2018-01-02[docs] add ci changes to changelogKali Kaneko
2018-01-02[CI] Speed up CI testingVarac
- Move all tests into a single test stage - Move docker and package builds in a single build stage - Remove dependencies between stages
2018-01-02[docs] add parameters for gitlab-runnerKali Kaneko
2017-12-28[CI] Allow manual docker image build through web-ifVarac
2017-12-28[CI] Tag images according to git branch nameVarac
2017-12-26[test] Split monolithic e2e test into seperate testsVarac
2017-12-22[pkg] Include required files in headless buildSimon Fondrie-Teitler
Also pull in cython and restructure the package.
2017-12-22[bug] sync start and shutdown of systray and browserKali Kaneko
some juggling to make systray (qt5 for now) and browser (pywebview, native) start and stop coordinatedly. I will explore a more lightweight systray for coming releases.
2017-12-22[refactor] Use sender interface in outgoing serviceRuben Pollan
2017-12-22[bug] fetch the incoming service only if is onRuben Pollan
If you try to fetch the incoming service while it's still starting it throws a KeyError. - Resolves: #9174
2017-12-22[docs] add command to run tests with gitlab-runnerKali Kaneko
2017-12-21[doc] add note about expected paths to bitmask-root itselfKali Kaneko
I should remember this change when we merge elijah's fix again. Hopefully that happens soon enough.
2017-12-21[bug] temporarily revert dnsmasq firewall fixKali Kaneko
It has been reported that, after this fix, dns leaks happen under some circumstances not yet clear. Preparing for a release, we have decided to revert this change until the problem can be properly triaged. This means a broken vpn aartful support for the time being, but a non-leaking master. https://0xacab.org/leap/bitmask-dev/issues/9137 - Related: #9137
2017-12-20[bug] copy missing provider pinning in osxkali
2017-12-20[feat] remove status files on shutdownKali Kaneko
2017-12-20[bug] add lock in command dispatcherKali Kaneko
2017-12-20[pkg] copy uninstaller to the bundleKali Kaneko
2017-12-20[pkg] import changes for qt5 to workkali
2017-12-20[pkg] add pyqt5.qtwidgets to osx importskali
not that I really want to keep qt5 for a long time, but this seems the short way to a working systray for the next release.
2017-12-20[pkg] add osx bundle script inside venvadmin