denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
6668dcfb562304ccccd637a09be22d00c0ece0cd
strongswan-ext/AGENTS.md
T
Denozordec d12fb96dc2
Android / pre-check (push) Failing after 5s
Details
Android / android (push) Skipped
Details
CIFuzz / pre-check (push) Failing after 3s
Details
CIFuzz / fuzzing (address) (push) Skipped
Details
CIFuzz / fuzzing (undefined) (push) Skipped
Details
CodeQL / pre-check (push) Failing after 3s
Details
CodeQL / analyze (python) (push) Skipped
Details
CodeQL / analyze (ruby) (push) Skipped
Details
CodeQL / analyze-cpp (push) Skipped
Details
FreeBSD / pre-check (push) Failing after 3s
Details
FreeBSD / freebsd (14.4) (push) Skipped
Details
FreeBSD / freebsd (15.0) (push) Skipped
Details
Linux / pre-check (push) Failing after 3s
Details
Linux / latest (apidoc) (push) Skipped
Details
Linux / latest (clang, no, all) (push) Skipped
Details
Linux / latest (clang, no, default) (push) Skipped
Details
Linux / latest (clang, no, printf-builtin) (push) Skipped
Details
Linux / latest (clang, no-dbg) (push) Skipped
Details
Linux / latest (clang, no-testable-ke) (push) Skipped
Details
Linux / latest (clang, yes, all) (push) Skipped
Details
Linux / latest (clang, yes, default) (push) Skipped
Details
Linux / latest (clang, yes, fuzzing) (push) Skipped
Details
Linux / latest (coverage) (push) Skipped
Details
Linux / latest (dist) (push) Skipped
Details
Linux / latest (gcc, no, all) (push) Skipped
Details
Linux / latest (gcc, no, default) (push) Skipped
Details
Linux / latest (gcc, no, printf-builtin) (push) Skipped
Details
Linux / latest (gcc, yes, all) (push) Skipped
Details
Linux / latest (gcc, yes, default) (push) Skipped
Details
Linux / latest (nm) (push) Skipped
Details
Linux / latest (no-dbg) (push) Skipped
Details
Linux / latest (no-testable-ke) (push) Skipped
Details
Linux / latest (yes, ld) (push) Skipped
Details
Linux / crypto (ubuntu-22.04, openssl-sys) (push) Skipped
Details
Linux / crypto (ubuntu-latest, botan) (push) Skipped
Details
Linux / crypto (ubuntu-latest, openssl-3) (push) Skipped
Details
Linux / crypto (ubuntu-latest, openssl-4) (push) Skipped
Details
Linux / crypto (ubuntu-latest, openssl-awslc) (push) Skipped
Details
Linux / crypto (ubuntu-latest, openssl-sys) (push) Skipped
Details
Linux / crypto (ubuntu-latest, wolfssl) (push) Skipped
Details
Linux / older (clang, ubuntu-22.04, all) (push) Skipped
Details
Linux / older (gcc, ubuntu-22.04, all) (push) Skipped
Details
Linux / older (gcc, ubuntu-22.04, nm) (push) Skipped
Details
Linux / alpine (push) Skipped
Details
macOS / pre-check (push) Failing after 3s
Details
macOS / macos (macos-14) (push) Skipped
Details
macOS / macos (macos-latest) (push) Skipped
Details
SonarCloud / pre-check (push) Failing after 4s
Details
SonarCloud / sonarcloud (push) Skipped
Details
TKM / pre-check (push) Failing after 3s
Details
TKM / tkm (push) Skipped
Details
Windows / pre-check (push) Failing after 4s
Details
Windows / cross-compile (win32) (push) Skipped
Details
Windows / cross-compile (win64) (push) Skipped
Details
Windows / native (i686, mingw32, win32) (push) Skipped
Details
Windows / native (x86_64, mingw64, win64) (push) Skipped
Details
android: Full Compose rewrite + two-mode RU split with userspace routing 
Replaces the fragment-based UI with a full Jetpack Compose app
(HOME/profiles/routing/settings/trusted networks in Compose, adaptive
brand theming, notification/vector drawables), adds the SHX release
pipeline (build-local.sh, UpdateManager self-update from the S3 bucket,
DiagLog diagnostics rotated into diag.log with crash capture) and the
watchdog/auto-connect/reconnect hardening series.

RU-GeoIP split now has two modes (Routing screen):
- OS routes (default): coarsened complement of the RU list installed
  as system routes, bounded by the binder budget (2.12.x behavior)
- Userspace routing (beta): only the default routes point into the
  TUN; every packet is classified natively against the exact RU list
  (ring-buffer queue, fixed flow tables - allocation-free hot path)
  and RU TCP/UDP leaves through protected sockets. TCP is terminated
  by a vendored lwIP 2.2.0 (tun2socks model, err_t renamed to avoid
  the strongSwan typedef clash, wildcard-port listener patch, asserts
  into diag.log). IPv4 addresses are compared in Java's numeric byte
  order and ranges sorted natively; direct flows re-protect on roam;
  relay errors log errno. Route diagnostics block 12s after connect.

Also: SIM2-crash hardening, connectivity watchdog with wakeup alarm,
profile export, connectivity self-check screen, tests.

Published as 2.13.9 (versionCode 146).
2026-09-30 16:50:03 +07:00

1.9 KiB
Raw Blame History

Память проекта

Android-приложение: сборка и выкладка (src/frontends/android)

  • Бакет S3 (Selectel, shx-app) ПРИВАТНЫЙ. Публичного чтения нет и включать его не нужно: GET https://s3.ru-7.storage.selcloud.ru/shx-app/latest.json всегда отдаёт AccessDenied — это норма, а не ошибка выкладки. Проверять результат публикации только авторизованно: aws s3 cp s3://shx-app/latest.json - (endpoint и ключи из .env).
  • Сборка и публикация — скриптом build-local.sh (Git Bash) или build-local.ps1 в src/frontends/android: он читает .env, собирает assembleRelease, подписывает keystore'ом из .env, генерирует latest.json (sha256/size/versionCode) и заливает shx-vpn.apk + latest.json в корень бакета с Cache-Control: no-cache.
  • .env нельзя парсить через source/eval: значения NOTES_RU и AWS_CA_BUNDLE содержат пробелы и обратные слэши. Разбирать только построчно KEY=... (как в build-local.sh).
  • aws cli установлен через pip: %APPDATA%\Python\Python313\Scripts\aws (скрипт сам добавляет путь в PATH).
  • versionCode растёт вручную в app/build.gradle; перед сборкой сверять с versionCode в latest.json бакета.
  • NOTES_RU в .env — заметки релиза (попадают в latest.json → диалог обновления в приложении); обновлять под релиз.
  • Автообновление приложения: logic/updates/UpdateManager.kt качает манифест/APK, сверяет SHA-256 и подпись.
Reference in new issue View Git Blame Copy Permalink