Version 3.0.5

• Fixed a bug with the password being not taken from the configuration file in some situations.

Version 3.0.4

• Fixed a bug with the wrong MFA code being stored in the keychain.
• Fixed several issues with the loading and storing password in the keychain.
• Delete persistent IKE session if the tunnel cannot be created.

Version 3.0.3

• Only do a tunnel signout call when manually disconnecting an IPSec tunnel

Version 3.0.2

• Fixed a problem with a persistent IKE session which wasn't restored for some VPN servers

Version 3.0.1

• Various connectivity fixes

Version 3.0.0

• Added support for TCP Transport mode (TCPT) for IPSec tunnels. It can be selected by two options: ike-transport=tcpt and esp-transport=tcpt. Use the first option only if you encounter the "failed to fill whole buffer" error. Use the second option only if you encounter the "Probing failed, server is not reachable via ESPinUDP tunnel" error.
• Added a workaround to attempt to unblock IPSec port 4500 in some cases.
• Implemented a sign-out call after tunnel disconnection.
• Resolved a compatibility issue with OpenSSL 1.x when building on older hosts.

Version 2.9.0

• Added dns-servers and ignore-dns-servers options.
• UI: refactored authentication settings: moved certificate authentication options to general tab which are shown depending on the selected authentication type.

Version 2.8.3

• Fixed a bug with incorrect resolver detection when /etc/resolv.conf is a relative symlink.
• Added "Apply" button in the settings dialog (validate and save settings without closing the dialog).

Version 2.8.2

• Removed a superfluous title from the system tray icon (visible on some desktop environments).
• Fixed a problem with the invalid MFA prompt shown when password is stored in the keychain and server-prompt option is enabled.
• Fixed a problem with the incorrect resolver detection when /etc/resolv.conf is a multi-level symlink.

Version 2.8.1

• Fixed a bug with a tun device being not removed after SSL tunnel is disconnected.