Commit Graph

2199 Commits

Author SHA1 Message Date
Quentin McGaw 0f7f35d6dc fix(configuration/settings/wireguard): ignore empty address strings 2026-07-29 05:30:23 +00:00
Quentin McGaw ec71f1881b fix(provider/pia): update default OpenVPN ports
- 8080 for UDP
- 8443 for TCP
- According to https://github.com/pia-foss/manual-connections/commit/8a75e46be81583d17f9ab3570881419b35000969
- Credits to @darthShadow
2026-07-29 05:30:21 +00:00
Quentin McGaw 44f2df6f87 fix(configuration/sources/files/wireguard): fix parsing ipv6 endpoint port 2026-07-29 05:30:18 +00:00
Quentin McGaw 650c61e93c fix(pia): allow ports 501 and 502 as custom ports given they are the defaults 2026-07-29 05:30:16 +00:00
Quentin McGaw 2f98539848 hotfix(openvpn): fix support for tcp-client
- always use `proto tcp-client` when using TCP
- parses `tcp-client` (on top of `tcp`, `tcp4`, `tcp6`) as meaning TCP
- Fix #3302
2026-07-29 05:30:14 +00:00
Quentin McGaw 5c02e2106c hotfix(pia): fix servers data updater and update servers data
- use v7 API endpoint to get correct list of servers
- skip offline regions
- do not skip *.pvt.site
2026-07-29 05:30:12 +00:00
Quentin McGaw e6815054d9 fix(pia): ignore *.pvt.site regions 2026-07-29 05:30:10 +00:00
Quentin McGaw 9fe34266f0 fix(pia): try x.y.128.1 and x.y.0.1 from the gateway IP to find the API IP address 2026-07-29 05:30:08 +00:00
Quentin McGaw cdfd644c04 fix(portforward): no longer stuck after failed port forwarding 2026-07-29 05:30:06 +00:00
Quentin McGaw 1c722b0f80 hotfix(dns): fix pool panicing (again) 2026-07-29 05:30:04 +00:00
Quentin McGaw 2e204e11b6 hotfix(dns): fix race condition with DoT pool 2026-07-29 05:30:02 +00:00
Quentin McGaw c745f61156 fix(privateinternetaccess): use AES-GCM for all presets 2026-07-29 05:29:59 +00:00
Quentin McGaw 4301196c21 fix(privateinternetaccess): remove none encryption preset 2026-07-29 05:29:57 +00:00
Quentin McGaw ef48826e48 fix(dns): DNS over TLS pool behavior fixed
- handle timed out connections the same as closed connections
- close connection on TLS handshake failure
- improve mutex handling during connection renewal and retrieval
2026-07-29 05:29:55 +00:00
Quentin McGaw 3fca8b3dfe fix(proton): fix updater code
- simplest fix ever
- proton: how can you return such obscure error messages
- ai: you suck hard at fixing anything still it's embarassing
2026-07-29 05:29:53 +00:00
Drew Wells 8ab97bb4b4 fix(wireguard): support IPv6 address formatting from config files (#3273) 2026-07-29 05:29:51 +00:00
Quentin McGaw 8269fad3b2 fix(server/auth): return 404 or 405 depending on route
- Fix #3275
2026-07-29 05:29:49 +00:00
Damoon Tahmasbi 16870d6385 fix(vyprvpn/updater): update OpenVPN configs zip URL (#3264) 2026-07-29 05:28:32 +00:00
Quentin McGaw d41081f4b3 fix(server/portforward): use port and ports for both single port and multiple ports forwarded 2026-07-29 05:28:30 +00:00
Michael Bisbjerg 5fbe277f9c fix(openvpn): bundle provider CA certificates in one block (#3258) 2026-07-29 05:28:28 +00:00
Quentin McGaw c5b20a3b06 fix(firewall/iptables): shared mutex for both iptables and ip6tables 2026-07-29 05:28:27 +00:00
Quentin McGaw 1b871496ea fix(ci): set hash of PR commit instead of synthetic commit in docker build argument 2026-07-29 05:24:31 +00:00
Quentin McGaw 05795ad2d1 fix(dns): correct error wrapping for DNS listening address validation
- Fix #3216
2026-07-29 05:24:27 +00:00
Quentin McGaw f9a86f48aa fix(updater): only uses DoH to cloudflare+google
- prevent dns plaintext manipulation both the periodic update and when running in cli mode
- possibly higher reliability on poor connections versus UDP
- drop `-dns` flag in update command
- for now no configuration allowed since it makes everything rather complex
2026-07-29 05:24:03 +00:00
Quentin McGaw 3a39236fa8 fix(expressvpn): remove pakistan server 2026-07-29 05:24:01 +00:00
github-actions[bot] 998ae46e97 feat(airvpn): update servers data (#3186) 2026-07-29 05:23:59 +00:00
Dennis Nienhuis c4e65f8cc7 fix(expressvpn): fix missing characters in CA string (#3192) 2026-07-29 05:23:57 +00:00
Dennis Nienhuis a20795df9e fix(expressvpn): add new CA3 certificate to fix TLS handshake failure (#3184) 2026-07-29 05:22:40 +00:00
Quentin McGaw 78929cd6e1 fix(openvpn/extract): restrict custom openvpn config protocol to tcp or udp internally
- Fix #3179
- I believe specifying tcp4, tcp6 or tcp-client does not change anything versus tcp + remote ip address
- I believe specifying udp4 or udp6 does not change anything versus tcp + remote ip address
- Simplify firewall code to not account for tcp-client etc.
2026-07-29 05:22:38 +00:00
Quentin McGaw 75c2404179 fix(privado): allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp 2026-07-29 05:22:36 +00:00
Quentin McGaw bcbc8c41f2 fix(privado): allow OpenVPN TCP protocol 2026-07-29 05:22:34 +00:00
Quentin McGaw 3da0c21c82 fix(mod): probe searches for features built-in the kernel 2026-07-29 05:22:32 +00:00
Quentin McGaw 009b8e45b7 fix(privado): update servers data using JSON API
- Fixes #3159
- Fixes #2118
- Fixes #2657
2026-07-29 05:22:29 +00:00
Quentin McGaw 05dc21ed61 fix(all): increase global http client timeout to 35s and precise lower timeouts where needed
- Fix DNS blocklists slow downloads, fix #3102
- Leave 35s timeout for updaters
- Set timeouts to 1s for local calls
- Set timeouts to 5s for LAN VPN calls and small external calls
- Set timeouts to 10s external VPN API calls
2026-07-29 05:22:27 +00:00
Quentin McGaw 270dce9acb fix(dns): skip blocking if block lists download fails 2026-07-29 05:22:25 +00:00
Quentin McGaw 23cf3231f0 fix(healthcheck): corret behavior when HEALTH_RESTART_VPN=off and startup check fails 2026-07-29 05:16:23 +00:00
Quentin McGaw 7f22fb3276 fix(protonvpn): support port 51820 for UDP OpenVPN v3.41.1 2026-02-11 14:13:34 +00:00
Quentin McGaw 6909a0c123 fix(healthcheck): prevent race condition and fix #3096 (#3123) 2026-02-11 14:12:20 +00:00
Quentin McGaw 3e1f48932a fix(openvpn): only log openvpn version corresponding to OPENVPN_VERSION 2026-02-11 14:12:08 +00:00
Chris Duck 50744852c5 fix(protonvpn): update OpenVPN settings (#3120) 2026-02-11 14:11:57 +00:00
Quentin McGaw 09e52bc685 fix(httpproxy): remove info log when no Proxy-Authorization header is present 2026-02-11 14:11:46 +00:00
Quentin McGaw 857fe425ec fix(wireguard): fix detection of kernelspace wireguard 2026-02-11 14:11:36 +00:00
Quentin McGaw a10349e378 fix(slickvpn): add missing servers found online v3.41.0 2025-12-24 20:29:05 +00:00
Marcin Łapaj 983330266a fix(purevpn/updater): parse country and city from hostname and merges with ip address information (#2991) 2025-12-24 05:02:57 +01:00
Jeremy Lin 6eb511fb2a fix(publicip/api/cloudflare): add Referer header (#3058) 2025-12-24 04:52:25 +01:00
Quentin McGaw 666f55767b hotfix(autoheal): monitor health errors asynchronously with other setup steps
- May resolve #3021
- no need to wait for dns, port forwarding etc. to setup to monitor health errors
2025-12-24 02:58:42 +00:00
Quentin McGaw 0a0bb4cf71 hotfix(healthcheck): only fallback to plain dns if icmp is not permitted on the very first try 2025-12-24 02:58:42 +00:00
Quentin McGaw 2b0719225d fix(purevpn): update openvpn configuration
- Credits to @mlapaj
- Taken and verified from #2991
2025-12-23 17:34:25 +00:00
Quentin McGaw c97bd1bb7c fix(publicip/api/ip2location): rename countries to match standard country names 2025-12-23 17:34:25 +00:00
Quentin McGaw 10a7c75aa6 feat(publicip/api): query all fetchers in parallel and pick most popular result 2025-12-23 17:34:25 +00:00