jkito authored 2 years ago and Kali Kaneko committed 2 years ago

the installation path depends on how sigcheck was
installed, in case it is installed from choco its
put in another location

this assumes sigcheck.exe will be available on path

jkito authored 2 years ago and Kali Kaneko committed 2 years ago

this changes the symlinking to instead copy the  vendor
files same as done for when detecting platform is mingw

kali authored 3 years ago and Kali Kaneko committed 2 years ago

- Resolves: #339

It changes the transifex urls that are used for localization, updates to
related documentation as well.

Related: #614

Signed-off-by: Sam Whited <sam@samwhited.com>

Sam Whited authored 3 years ago and Kali Kaneko committed 3 years ago

Removes some GNUisms in favor of POSIX-make or generally more portable
make constructs.

Signed-off-by: Sam Whited <sam@samwhited.com>

kali authored 3 years ago and Kali Kaneko committed 3 years ago

A vulnerability in QtIFW produces improper ACLs to be set when
installing in custom locations. This can lead to privilege escalation if
a non-privileged user overwrites the openvpn binary. Thanks to
researchers at Tenable for finding and reporting this!

Impact is considered low-medium, since an installation outside of the
suggested path is needed to trigger the issue.

Privileged execution of openvpn should be abandoned in next release, in
favor of the interactive service.

A bug upstream should be filed since other projects could be affected by
this vulnerability too.

-Resolves: #569

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

this should also hopefully make the CI/CD work again

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

now we can call "make -jX build" with X>1 and
it will work \o/

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>

Kali Kaneko authored 3 years ago and Kali Kaneko committed 3 years ago

- Resolves: #443

this is mainly a workaround for #497

admin authored 4 years ago and Kali Kaneko committed 4 years ago

there was a mismatch after latest changes to the plist template
location.

also revert latest osx depends, since some are not installable via
homebrew in osx.

kali authored 4 years ago and Kali Kaneko committed 4 years ago

stop if:

- bitmask is running (we don't want to mess with the helper if the app
  is running)
- we cannot stop the service for some reason.

powershell gives more flexibility to stop services, but Remove-Service
is not present in PS < 6, so we try to remove the service from the
post-install too (the golang helper will complain about an eventlog
registry key).

this could probably be improved in the helper, but we'll be moving to
the official openvpnserv2 service for 0.21.4. we might want to revisit
the current helper for the firewall/killswitch.

Kali Kaneko authored 4 years ago and Kali Kaneko committed 4 years ago

- install into global /Applications
- document how to troubleshoot helper
- uninstall app is visible on top-level folder
- improve detection of running processes for old and new binaries

- Closes: #441
- Closes: #445
- Closes: #435