Skip to content

v4.9

Latest
Latest

Choose a tag to compare

View all tags
@mmtaee mmtaee released this 10 Jun 19:33
v4.9
b8f5902
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🚀 Release v4.9

This release delivers major improvements to certificate authentication, traffic accounting, quota enforcement, customer onboarding, and VPN client setup. It also includes numerous fixes for RX/TX calculations, traffic display consistency, installation tooling, and platform compatibility.

Issues: #143 #145

Pull Requests: #144 #154 #157 #159 #160 #161 #164 #165

✨ New Features

Certificate Authentication Support

  • Added first-class certificate authentication support for ocserv users
  • Certificate authentication can now be configured as the primary authentication method
  • Existing username/password authentication remains available as a fallback authentication method
  • Improved certificate handling and authentication workflows

Cisco Secure Client / AnyConnect Setup

  • Added customer-facing Cisco Secure Client (AnyConnect) setup flow

  • Dedicated setup page available from the customer summary page

  • Guided installation process for:

    • Cisco Secure Client installation
    • External Control configuration
    • Certificate import
    • VPN profile creation
    • VPN connection setup

  • Uses Cisco Secure Client URI actions instead of platform-specific profile files

  • Successfully tested on both iOS and Android devices

📊 Traffic Accounting & Quotas

Traffic Calculation Improvements

  • Fixed incorrect RX/TX traffic calculations (#143)
  • Improved live traffic accounting and quota enforcement
  • Fixed customer traffic display inconsistencies
  • Improved traffic usage tracking accuracy
  • Enhanced traffic accounting reliability across the dashboard and APIs

Traffic Quota Enhancements

  • Added support for fractional traffic quotas using MB and GB units
  • Introduced combined RX + TX traffic limit modes
  • Improved quota enforcement behavior
  • Better handling of customer traffic limits and usage tracking

Speed Limits

  • Fixed ocserv group rate-limit serialization
  • Improved RX/TX data-per-second speed limit configuration from the dashboard
  • Enhanced bandwidth limit management and validation

🐛 Bug Fixes

Authentication & Certificates

  • Fixed multiple certificate authentication issues
  • Fixed certificate-authenticated users incorrectly inheriting group configuration settings
  • Improved certificate validation and user configuration handling

User Management

  • Fixed user activation and reset behavior
  • Improved ocpasswd synchronization validation
  • Enhanced user state consistency between dashboard and ocserv

Telegram Integration

  • Fixed Telegram package traffic mode handling
  • Fixed displaying a 404 page instead of user details when Telegram bot integration is disabled

⚙️ Installation & Infrastructure

Installation

  • Updated Node.js installation version to v24
  • Improved installation scripts and dependency handling

Platform Improvements

  • Improved overall configuration serialization
  • Enhanced compatibility between dashboard-generated configuration and ocserv
  • Improved stability of traffic, quota, and authentication-related features

🔧 General Improvements

  • Improved customer onboarding experience
  • Enhanced VPN client setup workflow for mobile users
  • Better traffic visibility and reporting accuracy
  • More reliable authentication and authorization behavior
  • Improved overall dashboard and ocserv integration
Assets 2
Loading