v1.2.8

Changes

What's Changed

• add CLI refresh command by @ekoby in #1046

  $ ziti-edge-tunnel refresh -h
  ziti-edge-tunnel refresh: refresh identity
  usage: ziti-edge-tunnel refresh [-i <identity>]
  
          -i|--identity   identity to be refreshed
  
  $ ziti-edge-tunnel refresh -i etc/mm.json                                                                             
  {
    "Success":true,
    "Code":0
  }
  

• update ziti-sdk-c@1.2.1

  • optimize service bind refresh
  • prevents crashes and/or unresponsive services when posture checks are enabled

Full Changelog: v1.2.7...v1.2.8

v1.2.7

What's Changed

• New enrollment options by @ekoby in #1041
• set explicit additive filemode on linux package signing pubkey by @qrkourier in #1042

Full Changelog: v1.2.6...v1.2.7

v1.2.6

What's Changed

• fix postinstall scriptlet syntax by @qrkourier in #1028
• use persisted config path on darwin by @scareything in #1031
• link with distro libraries by @scareything in #1018
• add usage hint for dns-upstream by @qrkourier in #1027
• don't overwrite ziti c-sdk refresh_rate option when setting tunneler options by @scareything in #1040
• make the linux service env file optional by @qrkourier in #1039

Full Changelog: v1.2.5...v1.2.6

v1.2.6-beta2

Changes

postinstall scriptlet syntax error 1.x @qrkourier (#1029)

What's Changed

• fix postinstall scriptlet syntax by @qrkourier in #1028
• use persisted config path on darwin by @scareything in #1031
• Rc add zfw calls main by @scareything in #1032
• improve vcpkg cache hits by @scareything in #1033
• link with distro libraries by @scareything in #1018

Full Changelog: v1.2.5...v1.2.6-beta2

v1.2.5

What's Changed

• update ziti-sdk-c@1.1.5 by @scareything in #1025

Backwards Compatibility Note

Prior to version 1.2.0 of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with ziti-edge-tunnel 1.2.0 the enabled field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.5 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.2.4...v1.2.5

v1.2.4

What's Changed

• fix rebind loop by @scareything in #1023

Backwards Compatibility Note

Prior to version 1.2.0 of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with ziti-edge-tunnel 1.2.0 the enabled field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.4 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.2.3...v1.2.4

v1.2.3

What's Changed

• expose loading identity in disabled state by @ekoby in #1021
• update ziti-sdk@1.1.3: fix service bind (backward compat) by @ekoby in #1022

Backwards Compatibility Note

Prior to version 1.2.0 of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with this version of ziti-edge-tunnel, the enabled field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.3 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.2.2...v1.2.3

v1.2.2

What's Changed

• CI caching improvements by @scareything in #1016
• update ziti-sdk-c@1.1.2 by @scareything in #1017

Full Changelog: v1.2.1...v1.2.2

v1.2.1

What's Changed

• update ziti-sdk-c@1.1.1 by @scareything in #1014
• use ziti-builder:v1 to generate GH release builds by @scareything in #1015
  This changes makes the ziti-edge-tunnel binaries for Linux compatible with distros that have glibc 2.27 or later (e.g. Ubuntu 18, Debian 10, Rocky 8).

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• HA alpha by @ekoby in #852
• ztx.identity might not be set at the time of MFA event by @ekoby in #858
• use openssl tlsuv engine by @scareything in #879
• macOS: attempt to cleanup exclusion routes on exit by @ekoby in #899
• fix crash during initial load -- ztx.identity may not be available yet by @ekoby in #900
• allow loading/starting ziti identity with provided config instead of file by @ekoby in #908
• notify any connected clients when shutting down by @dovholuknf in #916
• Ext auth support by @ekoby in #913
• Add command to update upstream DNS by @ekoby in #924
• implement tunnel enroll command by @ekoby in #925
• improve dump command by @ekoby in #928
• avoid lwip timer churn by @ekoby in #932
• remember enabled/disabled state by @dovholuknf in #936
• support both IPv4/6 DNS upstreams by @ekoby in #945
• add command to force identity refresh by @ekoby in #946
• allow to set and query multiple upstream nameservers by @ekoby in #953
• update lwip to 2.2.0 by @scareything in #967
• only add nrpt entry when the service has dial permission by @dovholuknf in #970
• remove dns client's active requests from ziti_dns.requests when closing client by @scareything in #977
• update to wintun 14.1 by @dovholuknf in #980
• set tcp error callback sooner so tcp errors that happen while waiting for ziti_dial can be handled by @scareything in #985
• let ziti sdk hold UDP payloads that arrive before ziti_dial completes by @scareything in #986
• add ip_dump IPC command by @scareything in #988
• use RelWithDebInfo build type by @scareything in #958
• Keychain support by @ekoby in #990
• update ziti-sdk-c@1.1.0 by @scareything in #1012

Backwards Compatibility Note

Prior to this version of ziti-edge-tunnel, all identities that were present in config.json were loaded regardless of each identity's enabled field. Starting with this version of ziti-edge-tunnel, the enabled` field of each identity is respected.

Look for this error message in the ziti-edge-tunnel log (or journal) if you have identities that ziti-edge-tunnel 1.2.0 isn't loading:

ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:1235 on_event() ztx[/path/to/identity.json] failed to connect to controller due to ziti context is disabled

If you see this error, you can re-enable the identity with the following command:

ziti-edge-tunnel on_off_identity --identity /path/to/identity.json --onoff true

Full Changelog: v1.1.5...v1.2.0