ancwrd1/snx-rs v4.0.0

Version 4.0.0

on GitHub

Important note for downstream package maintainers: this release replaces GTK 3 dependency with GTK 4.

• Added automatic detection of IPSec transport.
• GUI frontend: refactored into GTK 4.
• GUI frontend: use ksni crate to show tray icon.
• Removed no-cert-check option which was used to disable hostname verification. Use ignore-server-cert instead.
• Removed server-prompt option. Server prompts are always enabled.
• Removed obsolete ipsec-cert-check, ike-transport, esp-transport and ike-port options.
• Added port-knock option to try port knocking workaround for NAT-T port 4500 availability detection.
• Changed the internal communication between the frontend and the command service to use Unix domain sockets.
• Fixed many issues related to a concurrent use of the GUI frontend and the snxctl utility.
• It is now possible to cancel the pending connection, also in the MFA state.
• Refactored internal IPSec certificate validation to use the advertised internal_ca_fingerprint.
• Show extended server information with the 'snxctl info` command.
• Fixed a bug with incomplete SSL tunnel shutdown.