v1.2.6-beta2

Changes

postinstall scriptlet syntax error 1.x @qrkourier (#1029)

What's Changed

• fix postinstall scriptlet syntax by @qrkourier in #1028
• use persisted config path on darwin by @scareything in #1031
• Rc add zfw calls main by @scareything in #1032
• improve vcpkg cache hits by @scareything in #1033
• link with distro libraries by @scareything in #1018

Full Changelog: v1.2.5...v1.2.6-beta2

v1.2.5

What's Changed

• update [email protected] by @scareything in #1025

Backwards Compatibility Note

Prior to version 1.2.0 of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with ziti-edge-tunnel 1.2.0 the enabled field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.5 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.2.4...v1.2.5

v1.2.4

What's Changed

• fix rebind loop by @scareything in #1023

Backwards Compatibility Note

Prior to version 1.2.0 of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with ziti-edge-tunnel 1.2.0 the enabled field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.4 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.2.3...v1.2.4

v1.2.3

What's Changed

• expose loading identity in disabled state by @ekoby in #1021
• update [email protected]: fix service bind (backward compat) by @ekoby in #1022

Backwards Compatibility Note

Prior to version 1.2.0 of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with this version of ziti-edge-tunnel, the enabled field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.3 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.2.2...v1.2.3

v1.2.2

What's Changed

• CI caching improvements by @scareything in #1016
• update [email protected] by @scareything in #1017

Full Changelog: v1.2.1...v1.2.2

v1.2.1

What's Changed

• update [email protected] by @scareything in #1014
• use ziti-builder:v1 to generate GH release builds by @scareything in #1015
  This changes makes the ziti-edge-tunnel binaries for Linux compatible with distros that have glibc 2.27 or later (e.g. Ubuntu 18, Debian 10, Rocky 8).

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• HA alpha by @ekoby in #852
• ztx.identity might not be set at the time of MFA event by @ekoby in #858
• use openssl tlsuv engine by @scareything in #879
• macOS: attempt to cleanup exclusion routes on exit by @ekoby in #899
• fix crash during initial load -- ztx.identity may not be available yet by @ekoby in #900
• allow loading/starting ziti identity with provided config instead of file by @ekoby in #908
• notify any connected clients when shutting down by @dovholuknf in #916
• Ext auth support by @ekoby in #913
• Add command to update upstream DNS by @ekoby in #924
• implement tunnel enroll command by @ekoby in #925
• improve dump command by @ekoby in #928
• avoid lwip timer churn by @ekoby in #932
• remember enabled/disabled state by @dovholuknf in #936
• support both IPv4/6 DNS upstreams by @ekoby in #945
• add command to force identity refresh by @ekoby in #946
• allow to set and query multiple upstream nameservers by @ekoby in #953
• update lwip to 2.2.0 by @scareything in #967
• only add nrpt entry when the service has dial permission by @dovholuknf in #970
• remove dns client's active requests from ziti_dns.requests when closing client by @scareything in #977
• update to wintun 14.1 by @dovholuknf in #980
• set tcp error callback sooner so tcp errors that happen while waiting for ziti_dial can be handled by @scareything in #985
• let ziti sdk hold UDP payloads that arrive before ziti_dial completes by @scareything in #986
• add ip_dump IPC command by @scareything in #988
• use RelWithDebInfo build type by @scareything in #958
• Keychain support by @ekoby in #990
• update [email protected] by @scareything in #1012

Backwards Compatibility Note

Prior to this version of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with this version of ziti-edge-tunnel, the enabled` field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.0 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.1.5...v1.2.0

v2.0.0-alpha27

What's Changed

• Bump softprops/action-gh-release from 1 to 2 by @dependabot in #909
• Bump lewagon/wait-on-check-action from 1.3.1 to 1.3.4 by @dependabot in #830
• fix cpack builds by @scareything in #998
• add an identity hint to postinstall output by @qrkourier in #999
• update [email protected] by @ekoby in #1003

Full Changelog: v2.0.0-alpha26...v2.0.0-alpha27

v2.0.0-alpha26

What's Changed

• HA alpha by @ekoby in #852
• ztx.identity might not be set at the time of MFA event by @ekoby in #858
• avoid segv when hosting service and requested source IP is not allowed by @scareything in #867
• fix ipv6 address conversion by @scareything in #869
• set output function for ipv6 packets by @scareything in #870
• use openssl tlsuv engine by @scareything in #879
• eol xenial, bionic, and redhat7; adopt focal builder and node 20 actions by @scareything in #893
• prevent dependency on libwinpthread-1.dll when building with mingw by @scareything in #896
• macOS: attempt to cleanup exclusion routes on exit by @ekoby in #899
• fix crash during initial load -- ztx.identity may not be available yet by @ekoby in #900
• allow loading/starting ziti identity with provided config instead of file by @ekoby in #908
• Subcommand refactor by @ekoby in #911
• add tlsuv version to version output by @ekoby in #912
• notify any connected clients when shutting down by @dovholuknf in #916
• Ext auth support by @ekoby in #913
• Add command to update upstream DNS by @ekoby in #924
• implement tunnel enroll command by @ekoby in #925
• improve dump command by @ekoby in #928
• avoid lwip timer churn by @ekoby in #932
• remember enabled/disabled state by @dovholuknf in #936
• use ziti_set_enabled which properly closes/stops an identity by @dovholuknf in #937
• update model to new types by @ekoby in #940
• support both IPv4/6 DNS upstreams by @ekoby in #945
• add command to force identity refresh by @ekoby in #946
• allow to set and query multiple upstream nameservers by @ekoby in #953
• update lwip to 2.2.0 by @scareything in #967
• only add nrpt entry when the service has dial permission by @dovholuknf in #970
• remove dns client's active requests from ziti_dns.requests when closing client by @scareything in #977
• quiet ipc logging by @dovholuknf in #978
• update to wintun 14.1 by @dovholuknf in #980
• set tcp error callback sooner so tcp errors that happen while waiting for ziti_dial can be handled by @scareything in #985
• let ziti sdk hold UDP payloads that arrive before ziti_dial completes by @scareything in #986
• add ip_dump IPC command by @scareything in #988
• use RelWithDebInfo build type by @scareything in #958
• Keychain support by @ekoby in #990

Full Changelog: v1.1.5...v2.0.0-alpha26

v1.1.5

Changes

clear up hosting io_ctx if ziti_accept fails @ekoby (#992)

support "*" in host.v1/host.v2 allowedAddresses @scareything (#991)

remove static linux builds from release @scareything (#982)

backs out the workflow changes from #949 until we can figure out how to build generally usable static binaries, or perhaps make a musl c preset.

use the provided len when copying memory and fix a warning @dovholuknf (#989)