eduvpn-common, branch 0.3.0 Fork of codeberg.org/eduVPN/eduvpn-common for <b>reasons</b> https://herkulessi.de/git/eduvpn-common/atom?h=0.3.0 2023-02-01T12:48:02Z Changes: Add & Update 2023-02-01T12:48:02Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-02-01T12:47:37Z urn:sha1:163705e7484ddde5a295484e8ce7506b4b76566a Version: Bump to 0.3.0 2023-02-01T12:44:03Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-02-01T12:44:03Z urn:sha1:5e408e15100cdb3eb82565a279fe7c15617b24fa CLI: Do not use pkg/browser to open the browser 2023-01-31T14:29:00Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T14:18:02Z urn:sha1:c03d17d3bbadfb406ec7cb179d23370f19086533 Server: Add script-security 0 to the OpenVPN config 2023-01-31T11:16:33Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T11:15:22Z urn:sha1:0969bbdda92aef8568e72dbdda338b7cdf920191 This prevents scripts from being executed by default. Clients can override this by either using the OpenVPN --script-security flag or add a script-security setting themselves. Client: Check if client ID is valid 2023-01-31T11:05:39Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T11:00:44Z urn:sha1:f25dcda007547f7dfb75c4aded7fd94ed2236e21 Discovery Test: Fix http -> https typo 2023-01-31T09:23:53Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T09:23:53Z urn:sha1:31ef27e6faaa82a12d2d841d18f1df6732a3ecf0 We rewrite URLs anyway so this is still fine but let's not make it so confusing Util Test: test for HTTPS rewrite 2023-01-31T09:14:19Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T09:14:19Z urn:sha1:383db3d8ed804e66fe7052e9eb0488c59cef7671 Discovery: Setup a local HTTPS server 2023-01-31T09:14:09Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T09:14:09Z urn:sha1:249d1e0faebe33c4b112818bf79a80c386a11faf Client Test: Fix construct URL arguments 2023-01-31T09:13:46Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T09:13:46Z urn:sha1:a73a24c412d039ecbfa7f47e9ba9662d8479d383 CLI: Use stderr and open browser properly 2023-01-31T08:40:15Z jwijenbergh jeroenwijenbergh@protonmail.com 2023-01-31T08:38:40Z urn:sha1:574fcd6f2f86f1f9381984c974589b75b7e5e309 Also double check scheme such that no malicious schemes are passed such as network drives