summaryrefslogtreecommitdiff
path: root/src/leap
AgeCommit message (Collapse)Author
2019-07-10[bug] missing bytes conversionHEADmasterKali Kaneko
2019-07-10[bug] port regex to py3Kali Kaneko
2019-07-09[bug] use python3 for bitmask-rootKali Kaneko
2019-05-23[bug] bitmask-vpn needs tun-ipv6 flagKali Kaneko
2019-01-30[bug] allow tls 1.0 as a workaround for buster/sidKali Kaneko
in systems with newer openssl, tls 1.0 has been disabled. however, this breaks the ability of a client in a newer system to connect with the openvpn servers on providers that are still on stretch. platform needs to be upgraded. -Related: https://0xacab.org/leap/bitmask-vpn/issues/105
2019-01-30[docs] add a small usage hintKali Kaneko
-Resolves: #9378
2019-01-30[style] lintingKali Kaneko
2018-09-06[bug] get openvpn from snap, disable ipv6 workaroundKali Kaneko
when using snap, at least in qubes there's an error if we pick openvpn from the system. if we're executing from a snap, we should pick the snap's openpvn. also disabling for now the ipv6 workaround, since it fails when attempting to setup the i6 addr on the interface. --pull-filter should work here, see https://community.openvpn.net/openvpn/ticket/849
2018-09-06[bug] disable temporarily ipv6 as part of the firewallKali Kaneko
Since we're blocking ipv6, it's nice to avoid resolving dual-stack sites to ipv6, because many tools don't work otherwise. - Resolves: #9027
2018-09-06[bug] search for any openvpn process, the binary name might not matchRuben Pollan
2018-07-23[bug] return allways a valid state from openvpnRuben Pollan
Even if we don't recognize the state that openvpn is providing. Add TCP_CONNECT state as well.
2018-06-13[bug] fix constants import errorkali
2018-06-12[feat] add support for tcp management in bitmask-rootRuben Pollan
2018-05-02[bug] fix syntaxKali Kaneko
2018-04-26[bug] workaround for segfault caused by qtwebview bugKali Kaneko
2018-04-11[feat] add fw_reload to bitmaskctlRuben Pollan
Some systems remove firewall rules, is usefull to be able to script the reload of those rules in hooks or other custom systems. - Resolves: #9289
2018-04-11[bug] fix importKali Kaneko
2018-04-11[style] pep8Kali Kaneko
2018-04-11several fixes for riseupvpn snapKali Kaneko
- move snap folder to root folder, to allow automated builds - install only polkit file outside of snap - change path of bitmask-root accordingly in bitmask - fix check for polkit file inside snap - change and document the algorithm for picking bitmask-root in linux - add LD_LIBRARY_PATH as an environment entry for bitmask-systray
2018-04-06[pkg] ship new app resourcesKali Kaneko
2018-03-28[feat] add autostart for OSXRuben Pollan
http://blog.gordn.org/2015/03/implementing-run-on-login-for-your-node.html
2018-03-28[feat] make autostart app name and exec path configurableRuben Pollan
Use sys.argv[0] as exec path instead of hardcode 'bitmask', and let anonvpn be called RiseupVPN. - Resolves: bitmask-systray#19
2018-03-28[refactor] remove unused importsRuben Pollan
2018-03-28[refactor] move autostart code into coreRuben Pollan
All the logic to autostart bitmask should not be vpn dependent.
2018-03-28[refactor] move platform constants into leap.bitmaskRuben Pollan
The IS_${platform} constants are used in more places than the vpn module. Let's define them in leap.bitmask.
2018-03-22[pkg] minor adjustments for riseupvpn osx bundleKali Kaneko
- duplicate the scripts folder for riseupvpn - fix renaming of helper - set openvpn path for riseupvpn
2018-03-05[style] pep8Kali Kaneko
2018-03-02[bug] do not use tcp4 version for snapsKali Kaneko
2018-03-02[feat] increase verbosity on vpn checks to ease debuggingKali Kaneko
2018-03-02[bug] fix openvpn path in snap checkKali Kaneko
2018-03-02[bug] fix bitmask-root detection in snapKali Kaneko
2018-03-02[refactor] openvpn path and cmd for snapKali Kaneko
2018-03-02[pkg] add snap openvpn to bitmask-rootKali Kaneko
2018-03-02[bug] fix launching of vpn for snapsKali Kaneko
2018-03-02[bug] snap pwd is read-onlyKali Kaneko
2018-03-02[bug] debug launchingKali Kaneko
2018-03-02[pkg] set systray path on snapsKali Kaneko
2018-03-01[style] pep8Kali Kaneko
2018-03-01[bug] catch errors while cleaning upKali Kaneko
2018-02-23[feat] put the socket in the snap folder if definedRuben Pollan
On snap is better if we don't put stuff in /tmp but in $SNAP
2018-02-19[pkg] osx packaging changes for riseupvpnKali Kaneko
2018-02-15[bug] privcheck takes one argumentKali Kaneko
2018-02-15[pkg] add --no-pie to CFLAGS for wrapperKali Kaneko
-Resolves: #9232
2018-02-15[pkg] packaging fixes for anonvpn bundleKali Kaneko
2018-02-15[refactor] refactor function to skip start from cliKali Kaneko
2018-02-15[bug] remove stale pidfileKali Kaneko
- Resolves: #9229
2018-02-15[style] pep8Kali Kaneko
2018-02-15[bug] bitmaskctl status should not start bitmaskdKali Kaneko
-Resolves: #9244
2018-02-15[bug] do not attempt to stop a non running looping callKali Kaneko
2018-02-15[feat] implement fallback to webkit for bundlesKali Kaneko
in the end, depending on webengine didn't seem to be such a great idea: it makes bundles more complex, heavy and brittle. I tried compiling qt5 and the maintained qtwebkit fork, but that had also its own set of problems (lastly, pyinstaller didn't work properly; pyqt also adds a lot of garbage even if you disabled lots of modules you don't need). so, this is a fallback to a stretch-based build. it fixes the libGL library by adding the right version into the bundle. in this commit I also add a dockerfile for an image that can build bundles by installing pip dependencies directly in the system. this has the advantage that the build process is very fast, but the downside that a new image needs to be pushed to the registry each time that new dependencies are added; we'll also miss any bug due to introducing new dependncies (but hopefully it will be catched by other steps in the CI). The good side of it is that it reduces the need for some hacks in the build process when bundling from a virtualenv.