Changes between 1.2.8 and 1.2.9:
- show MD5 warning pop-up only once per VPN session
- fix glitch upon key re-negotiation when using tls-crypt
- fix interoperability issue with private keys created using OpenSSL 1.1 default settings (aka add support for private keys encrypted using PKCS#5v2.0 with PRF newer than SHA1)
Changes between 1.2.7 and 1.2.8:
- fixed spurious crash on reconnection after sleep
- restored access to CertificatePayloads (p12 bundles) uploaded via Provisioning Profiles (.mobileconfig files)
- show warning pop-up when connecting to server using insecure MD5 algorithm to sign certificates (MD5 support will be dropped end of Apr 2018)
- report unique app specific UUID to server within peer info (variable IV_HWADDR)
- added support for ECDSA ciphersuites (for EC certificates)
- fixed VPN status after closing and re-opening App with tunnel activated (VPN IPs, last event, etc.)
- fixed profiles loading from iCloud with Files app (due to an iOS bug, only 1 file can be loaded at once)
- improved .ovpn12 file import
Changes between 1.2.6 and 1.2.7:
- fixed WiFi detection while connected via LTE
- fixed tunnel reconfiguration after reconnection with seamless tunnel ON
- added message about new .ovpn12 extension in cert list (when empty)
- fixed issue with DNS upon reconnection in split tunnel setups
- fixed tunnel disconnection when closing App from background app list
- fixed spurious connection crash when connecting using TCP
- fixed several connection instabilities
- fixed routing towards VPN IPs other than the VPN server
- fixed usage of PROXY_AUTO_CONFIG_URL and PROXY_BYPASS setting
- fixed DNS settings when server directive comes as last one
Changes between 1.2.5 and 1.2.6
- fixed reconnection with external certificate or password when device is still locked
- fixed blank-screen issue on iPods
- fixed reconnection after sleep or connectivity loss
- fixed seamless tunnel handling
- fixed tls-auth setup. missing key-direction in new profiles is again interpreted as "bidirectional" mode
- fixed DNS server assignment on split tunnel configurations
- fixed IPv6 DNS server assignment on split tunnel configurations
- fixed search domain assignment on split tunnel configurations
- fixed profile renaming
- fixed PROXY settings assignment
- fixed permanent disconnection due to TRANSPORT_ERROR when uplink is unavailable
Changes between 1.1.1 and 1.2.5
- converted VPN backend to new Apple Network Extensions framework
- implemented private keychain for storing certificates and passwords. PKCS#12 bundles imported via Safari or Mail must now end with '.ovpn12'
- implemented support for "tls-crypt" config option. If the OpenVPN server you are connecting to has enabled this option, it will provider a safer method to exchange certificates during the initial TLS handshake
- improved log verbosity
- added preference switch to disable MD5 in TLS
- updated mbedTLS to 2.6.0 (MD5 support will be dropped on Apr, 31st 2018)
- updated ovpn3 backend