Release 2.0.1

What's New

• Bug fixes

Component Updates and Bug Fixes

• github.com/openziti/ziti/v2: v2.0.0 -> v2.0.1
  • Issue #4083 - [Backport-2.0] Controller bootstrap misclassifies DNS names like 8.8.8.8.nip.io when generating cert SANs. The advertised address is now classified as IPv4 only on an anchored dotted-quad, and any ":" is treated as an IPv6 address
  • Issue #4070 - [Backport-2.0] Controller can cache empty apiAddresses forever due to startup race between raft mesh and xweb config load
  • Issue #4049 - [Backport-2.0] Non-admin with enrollment permission can escalate to admin identity
  • Issue #4031 - [Backport-2.0] Router deletes terminators ~12m after creation when host SDK replies with wrong inspect content type
  • Issue #4054 - [Backport-2.0] Router panics evaluating an AnyOf process posture check when client reports no process/OS data
  • Issue #3959 - [Backport-2.0] Refcount wildcard-allocated intercept hostnames
  • Issue #3958 - [Backport-2.0] Tunneler skips iptables rules for services sharing an intercept hostname
  • Issue #3952 - externalIdClaim on CA returns HTTP 500 with empty body for most matcher/parser combinations
  • Issue #3929 - Router does not enforce api-session or identity revocations on live connections
  • Issue #3928 - [Backport-2.0] Router posture-data updates don't revoke SDK-hosted xgress circuits or hosted terminators