Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-03-28 | [refactor] move autostart code into core | Ruben Pollan | |
All the logic to autostart bitmask should not be vpn dependent. | |||
2018-03-28 | [refactor] move platform constants into leap.bitmask | Ruben Pollan | |
The IS_${platform} constants are used in more places than the vpn module. Let's define them in leap.bitmask. | |||
2018-03-22 | [pkg] minor adjustments for riseupvpn osx bundle | Kali Kaneko | |
- duplicate the scripts folder for riseupvpn - fix renaming of helper - set openvpn path for riseupvpn | |||
2018-03-05 | [style] pep8 | Kali Kaneko | |
2018-03-02 | [bug] do not use tcp4 version for snaps | Kali Kaneko | |
2018-03-02 | [feat] increase verbosity on vpn checks to ease debugging | Kali Kaneko | |
2018-03-02 | [bug] fix openvpn path in snap check | Kali Kaneko | |
2018-03-02 | [bug] fix bitmask-root detection in snap | Kali Kaneko | |
2018-03-02 | [refactor] openvpn path and cmd for snap | Kali Kaneko | |
2018-03-02 | [pkg] add snap openvpn to bitmask-root | Kali Kaneko | |
2018-03-02 | [bug] fix launching of vpn for snaps | Kali Kaneko | |
2018-03-02 | [bug] debug launching | Kali Kaneko | |
2018-03-01 | [style] pep8 | Kali Kaneko | |
2018-02-19 | [pkg] osx packaging changes for riseupvpn | Kali Kaneko | |
2018-02-15 | [bug] privcheck takes one argument | Kali Kaneko | |
2018-02-15 | [style] pep8 | Kali Kaneko | |
2018-02-15 | [bug] do not attempt to stop a non running looping call | Kali Kaneko | |
2018-02-15 | [bug] fix logger instance | Kali Kaneko | |
2018-01-26 | [style] some wording fixes | Kali Kaneko | |
2018-01-26 | [refactor] yet another readability pass | Ruben Pollan | |
2018-01-26 | [refactor] clean up the helpers check to make it more readable | Ruben Pollan | |
2018-01-26 | [bug] don't check for updates on polkit just for its existence | Ruben Pollan | |
We don't update the polkit file normally, for now let's check if it's installed. It should be more clever, detecting wich file is needed, depending on wich bitmask-root will be executed. But for now it's just a dummy check. | |||
2018-01-25 | [tests] workaround for functional tests in docker | Kali Kaneko | |
polkit doesn't work inside docker. | |||
2018-01-25 | [bug] do not fail if the provider does not allow anonymous vpn | Kali Kaneko | |
Since bonafide was not catching the error 401, an attempt to bootstrap a provider that does not support anonvpn with the new setup was resulting in a json that was containing only an error message. this was producing an error when trying to access the configuration for that provider's EIP section. we now avoid writing a json config file if an error 401 is found, and also catch the exception for a ValueError when the EIP section is not found in the provider's configuration. | |||
2018-01-25 | [bug] several fixes after review | Kali Kaneko | |
2018-01-25 | [feat] report missing polkit properly from main UI | Kali Kaneko | |
also refactor and move polkit_agent so that it does not depend on having bitmask on the path. | |||
2018-01-25 | [bug] check if attribute exists | Kali Kaneko | |
2018-01-25 | [feat] autostart application when user logs in | Kali Kaneko | |
2018-01-25 | [feat] implement autostart for vpn | Kali Kaneko | |
2018-01-25 | [feat] implement vpn status watchdog | Kali Kaneko | |
2018-01-25 | [feat] hardcode tcp4 in vpn connections | Kali Kaneko | |
for now, we'll be hardcoding tcp as a more reliable alternative, no matter what the provider announces. explicitely specifying ipv4 should fix the case in which vpn fails to start because ipv6 is disabled. -Resolves: #9181, #9129 | |||
2018-01-25 | [feat] support anonymous vpn | Kali Kaneko | |
honor the anonymous certificate for the providers that offer it. this still needs a change in bonafide, in which if provider supports anonymous access we still have to download eip-service.json for testing, I assume this has been already manually downloaded. | |||
2018-01-25 | [feat] get cert automatically on vpn start | Kali Kaneko | |
2018-01-16 | [bug] fix the systemctl run | Ruben Pollan | |
2018-01-12 | [feat] bump bitmask-root version | Ruben Pollan | |
2018-01-12 | Add Qubes DNS support, fixes | Christopher Laprise | |
2018-01-12 | Add anti-leak rules for qubes-firewall | Christopher Laprise | |
2018-01-09 | [bug] fix issues with dns resolution with systemd-resolved | Ruben Pollan | |
In ubuntu 17.10 some changes with systemd-resolved broke our firewall, blocking all DNS queries. The masquerade rules in the firewall, that are used to rewrite the source IP address of the DNS queries, were wrongly modifying the queries to systemd-resolved. Let's apply masquerade only to the packets addressed to the nameserver. - Resolves: #9137 | |||
2018-01-08 | [feat] try other gateways if the main one fails | Ruben Pollan | |
Removing '--persist-ip' param on openvpn it will try to connect to a different gateway if the first one fails. This means, that in case of network disconnection for some minutes bitmask will keep rotating between the different gateways and one the network comes back it will not connect anymore to the first one, but to the one that was trying at this moment. - Resolves: #9188 | |||
2017-12-21 | [doc] add note about expected paths to bitmask-root itself | Kali Kaneko | |
I should remember this change when we merge elijah's fix again. Hopefully that happens soon enough. | |||
2017-12-21 | [bug] temporarily revert dnsmasq firewall fix | Kali Kaneko | |
It has been reported that, after this fix, dns leaks happen under some circumstances not yet clear. Preparing for a release, we have decided to revert this change until the problem can be properly triaged. This means a broken vpn aartful support for the time being, but a non-leaking master. https://0xacab.org/leap/bitmask-dev/issues/9137 - Related: #9137 | |||
2017-12-20 | [bug] add lock in command dispatcher | Kali Kaneko | |
2017-12-08 | [docs] add comment about python interpreter | Kali Kaneko | |
2017-12-07 | [feat] update bitmask-root if needed | Ruben Pollan | |
Chech the hash of the installed bitmask root and sign as not installed if doesn't match the one we have in the bundle. Also for running bitmask-root, if there is more than one (in /usr/local/sbin and /usr/sbin) run the one with higher version number. - Resolves: #9020 | |||
2017-12-05 | [bug] change bitmask-root to work with dnsmasq | elijah | |
2017-11-30 | [refactor] use /var/run for osx helper socket | Kali Kaneko | |
2017-11-02 | [style] fix formatting | Kali Kaneko | |
2017-11-02 | [feature] support deepin polkit agent | Kali Kaneko | |
-Resolves: #9119 | |||
2017-11-01 | [docs] document systray in changelog | Kali Kaneko | |
- Resolves: #9094 | |||
2017-11-01 | [refactor] refactor status object | Kali Kaneko | |