Releases: ancwrd1/snx-rs
Releases · ancwrd1/snx-rs
Version 5.0.1
- Packaging fixes: removed libsqlite3.so dependency
Version 5.0.0
- Added Mobile Access authentication support using the embedded WebKit browser. Requires a libwebkitgtk-6.0 package and a cargo feature flag
mobile-access. This feature emulates the native Check Point 'cshell' tunnel. - Various bugfixes and improvements for connection profiles and the UI.
- GUI app no longer accepts a command line parameter with a configuration file.
- Use SQLite database for storing the IKE sessions.
- Added DEB and RPM packaging assets.
Version 4.9.1
- Fixed several UI issues with the connection profiles.
- Fixed a regression where the cancellation of pending browser SSO did not work correctly.
Version 4.9.0
- Added support for multiple connection profiles in the UI.
- Disable DNSoverTLS for the tunnel interface.
- Fixed a few internal stability issues.
Version 4.8.3
- Privacy fix: disable mDNS and LLMNR for the tunnel interface.
Version 4.8.2
- Fixed a problem with some VPN servers which do not advertise default_authentication_method field.
- The packaging assets have been moved to
packagedirectory.
Version 4.8.1
- Enabled SAML SSO authentication for SSL tunnel.
- An installer is now created as part of the release pipeline, with
.runextension. - Service and desktop files are modified to point to /usr/bin by default.
Version 4.8.0
- Added
transport-typeoption to specify the IPSec transport type explicitly. - Added WSL2 environment detection where the xfrm interface does not work.
- Fixed compilation for 32-bit targets (ARMv6/ARMv7).
- Fixed a problem with incorrectly constructed routes for some VPN servers which advertise routing policy as 0.0.0.1-255.255.255.254.
- Improved browser OTP listener.
- Added a logic to try to keep the same IP address during IP renewal. Might not work for all users, please report any issues.
Version 4.7.0
- Added
mtuoption to specify the MTU size for the tunnel interface. - Fixed an issue with SAML SSO authentication when browser uses CORS preflight checks.
Version 4.6.0
- Fixed a problem with IP address renewal for some Linux distros which have
net.ipv4.conf.default.promote_secondariesset to 0. - Added
disable-ipv6option to help prevent IPv6 leaks. It disables IPv6 globally when thedefault-routesetting is enabled.