Post Quantum Kyber Support (M126)

Post Quantum Kyber Support

Starting with release 1.9.5 and 1.8.7, Post Quantum Kyber Support is added on all of supported Platforms. You can enable it via Options Dialog(non-iOS)/Settings(iOS) manually.

There is no changes in default options. This option will be enabled by default in the future (M128).

Caddy HTTPS protocol support

Caddy's HTTPS protocol is compatible from release 1.10.3 and 1.9.7.

Tcmalloc support enabled for both windows and linux

Tcmalloc support is added for windows since 1.10.4 (excluding arm64/aarch64 platform) and for linux.

Experimental SOCKS cipher Support

Experimental socks4/socks4a/socks5/socks5h cipher support is added for both of CLI and GUI.

Experimental DoH (DNS over HTTPS) and DoT (DNS over TLS) Support

Experimental DoH and DoT support is added for both of CLI and GUI.

Fix disk space occupation issue

Starting with release 1.9.2, it will no longer keep log file and will not occupy extra disk space for Android/iOS/HarmonyOS client.

Fix a regression bug in 1.7.4

Fix a regression bug causing windows client to lose its port settings in configuration.

Status of NaïveProxy Protocol Support

It refers to http2 cipher as NaïveProxy-compatible protocol support.

Please refer to this wiki page for more information about the support matrix.

Android vpn service support

Android releases from 1.6.3 are signed and have been updated to add VpnService support.

iOS packet tunnel support

iOS releases from 1.5.22 have fixed memory pressure crashes and have been updated to add Packet tunnel support. You need a PC (with iTune) or a mac (through Finder) to install ipa directly or wait for app store release.

Alternative way: Join TesfFlight. For Apple Silicon macOS Users such as M1/M2/M3, you can also install packet tunnel version via TestFlight.

Notarized macOS releases

macOS releases from 1.5.19 are notarized. Please note the dmg suffixed with -unsigned is not.

Supplementary support for missing ISRG (Let's Encrypt Root) on some Windows 11 Installation and Android prior to 7.1.1

Releases from 1.5.25 and 1.6.4 fixes an issue that ISRG Root 1 and ISRG Root 2 might be missing in some machines and that causes troubles.

What's Changed

• net: support socks-style cipher by @Chilledheart in #945
• ios: use NetworkPathMonitor by @Chilledheart in #946
• Bump chromium 126 dependents by @Chilledheart in #947
• harmony: update for sdk api level 11 by @Chilledheart in #949
• core: update rand_util_win by @Chilledheart in #950
• net: support username/password auth for socks5 cipher by @Chilledheart in #951
• bump nghttp2 to v1.62.0 by @Chilledheart in #952
• gtk: update po files by @Chilledheart in #953
• cli: handle keep-alive for http proxy properly by @Chilledheart in #955
• cli: resolve domain name locally for sock4/socks5 on demand by @Chilledheart in #956
• net: return http version correctly by @Chilledheart in #958
• net: don't call send in recv callback (nghttp2) by @Chilledheart in #959
• net: handle submit request failure by @Chilledheart in #960
• net: send any pending writes if possible by @Chilledheart in #961
• net: reduce memory footprint peak and cpu peak by @Chilledheart in #962
• cmake: add basic ctest support by @Chilledheart in #963
• gh actions: use xcode 15.4 for mac/ios builds by @Chilledheart in #964
• gh actions: replace fedora 38 with fedora 39 by @Chilledheart in #965
• net: detect DigiCert Global Root G2 ca by @Chilledheart in #966
• mingw: add missing manifests for cli/server by @Chilledheart in #968
• ssl: add load ca tests by @Chilledheart in #969
• windows: attach parent's console if current is unavailable by @Chilledheart in #971
• gh actions: use cmake 3.28.5 for deb packaging by @Chilledheart in #972
• gh actions: replace with alpine3.20 by @Chilledheart in #973
• build: generate subtag suffix correctly by @Chilledheart in #974
• gh actions: use cmake 3.28.5 if possible by @Chilledheart in #975
• freebsd: don't build with builtin ca bundle by @Chilledheart in #976
• mac: bring to front on startup/recover by @Chilledheart in #977
• android: return to parent activity correctly by @Chilledheart in #978
• linux: use mold linker for prebuilt binaries by @Chilledheart in #979
• net: add modp_b64 by @Chilledheart in #980
• net: allow empty authorization for http by @Chilledheart in #981
• net: support https protocol via caddy by @Chilledheart in #982
• core: add mimalloc support by @Chilledheart in #984
• benchmark: update for 1.8.4 by @Chilledheart in #985
• tcmalloc: enable win32 build by @Chilledheart in #986

Full Changelog: https://github.com/Chilledheart/yass/compare/1.9.5..1.10.4