1.0.10

Import a copy of the lockfile tool, because Apple removed it
Address a few glitches in the preferences pane documentation
2015-07-23 10:15:01 +02:00 · 2015-07-22 22:03:52 +02:00 · 2015-07-14 21:10:23 +02:00 · 2015-07-12 11:53:49 +02:00 · 2015-07-12 11:50:32 +02:00 · 2015-07-12 11:41:16 +02:00
18 changed files with 138 additions and 103 deletions
@@ -17,11 +17,11 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.0.8</string>
+	<string>1.0.10</string>
 	<key>CFBundleSignature</key>
 	<string>????</string>
 	<key>CFBundleVersion</key>
-	<string>1.0.8</string>
+	<string>1.0.10</string>
 	<key>LSApplicationCategoryType</key>
 	<string>public.app-category.utilities</string>
 	<key>LSMinimumSystemVersion</key>
@@ -893,7 +893,7 @@
 				<key>USE_HFS+_COMPRESSION</key>
 				<true/>
 				<key>VERSION</key>
-				<string>1.5.0.3</string>
+				<string>1.6.0</string>
 			</dict>
 			<key>UUID</key>
 			<string>7F7D70AB-F7A2-4027-8304-3063C7B9532F</string>
@@ -1433,7 +1433,7 @@
 				<key>USE_HFS+_COMPRESSION</key>
 				<true/>
 				<key>VERSION</key>
-				<string>1.0.8</string>
+				<string>1.0.10</string>
 			</dict>
 			<key>TYPE</key>
 			<integer>0</integer>
@@ -1926,7 +1926,7 @@
 				<key>USE_HFS+_COMPRESSION</key>
 				<true/>
 				<key>VERSION</key>
-				<string>1.0.8</string>
+				<string>1.0.10</string>
 			</dict>
 			<key>TYPE</key>
 			<integer>0</integer>
@@ -1,6 +1,6 @@
 #! /bin/sh

-VERSION='1.0.8'
+VERSION='1.0.10'

 cd build || exit 1
 [ -e DNSCrypt.pkg ] || exit 1
@@ -12,7 +12,6 @@ productsign --sign 'Developer ID Installer' DNSCrypt.pkg DNSCrypt-OSX.pkg
 mv DNSCrypt.pkg DNSCrypt-unsigned.pkg
 mv DNSCrypt-OSX.pkg DNSCrypt.pkg

-zip -9 -r "dnscrypt-osxclient-${VERSION}.zip" DNSCrypt.pkg
 rm -fr dnscrypt-pkg
 rm -f "dnscrypt-osxclient-${VERSION}.dmg"
 mkdir dnscrypt-pkg
@@ -22,3 +21,7 @@ hdiutil create "dnscrypt-osxclient-${VERSION}.dmg" -srcfolder dnscrypt-pkg
 mv dnscrypt-pkg/DNSCrypt.pkg .
 rm -fr dnscrypt-pkg
 rm -fr DNSCrypt-unsigned.pkg
+
+minisign -S -m "dnscrypt-osxclient-${VERSION}.dmg" \
+  -p ../../minisign.pub -s ../../minisign.key \
+  -t "dnscrypt-osxclient-${VERSION}.dmg"
@@ -17,11 +17,11 @@
 	<key>CFBundlePackageType</key>
 	<string>BNDL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.0.8</string>
+	<string>1.0.10</string>
 	<key>CFBundleSignature</key>
 	<string>????</string>
 	<key>CFBundleVersion</key>
-	<string>1.0.8</string>
+	<string>1.0.10</string>
 	<key>NSHumanReadableCopyright</key>
 	<string>BSD</string>
 	<key>NSMainNibFile</key>
@@ -3,7 +3,7 @@
 #import <WebKit/WebKit.h>
 #import "CHCSVParser/CHCSVParser.h"

-#define kDNSCRYPT_PACKAGE_VERSION @"1.0.8"
+#define kDNSCRYPT_PACKAGE_VERSION @"1.0.10"

 #define kDNSCRYPT_PREFPANE_APP_PATH @"/Library/PreferencePanes/DNSCrypt.prefPane"
 #define kDNSCRYPT_USR_BASE_DIR kDNSCRYPT_PREFPANE_APP_PATH @"/Contents/Resources/usr"
@@ -3,14 +3,13 @@
  %head
    %meta{charset: "utf-8"}
    %title About DNSCrypt-OSXClient
-    %style{type: "text/css"}
-      :sass
-        body
-          font:
-            family: arial, helvetica, sans-serif
-          margin: 0
-        h1
-          margin: 0
+    :sass
+      body
+        font:
+          family: arial, helvetica, sans-serif
+        margin: 0
+      h1
+        margin: 0
  %body
    %h1 About DNSCrypt-OSXClient
    %p
@@ -37,12 +36,13 @@
          DNS censorship. Don't enable it unless you are frequently
          roaming and you don't want to manually disable/enable DNSCrypt.
        %li
-          Using Little Snitch? There are 4 rules you need to establish,
+          Using Little Snitch? There are a few rules you need to establish,
          which Little Snitch should prompt for when trying to
          activate this application:
          %ol
            %li Allow any outgoing connection for system processes (dnscrypt-proxy)
            %li Allow any incoming connection for system process (dnscrypt-proxy)
            %li Allow any outgoing connection for system processes (dig)
-            %li Allow outgoing TCP connections on port 80( http) of www.apple.com for system process (curl)
-          (Thanks to @cavemandaveman)
+            %li Allow outgoing TCP connections to port 80 (http) of www.apple.com for system process (curl)
+            %li For automatic updates, allow outgoing TCP connections to port 80 (http) of updates.dnscrypt.org and to port 443 (https) of github.com for system process (curl)
+          (Thanks to @cavemandaveman and @TraderStf)
@@ -3,15 +3,13 @@
  <head>
    <meta charset='utf-8'>
    <title>About DNSCrypt-OSXClient</title>
-    <style type='text/css'>
-      <style>
-        body {
-          font-family: arial, helvetica, sans-serif;
-          margin: 0; }
-        
-        h1 {
-          margin: 0; }
-      </style>
+    <style>
+      body {
+        font-family: arial, helvetica, sans-serif;
+        margin: 0; }
+      
+      h1 {
+        margin: 0; }
    </style>
  </head>
  <body>
@@ -43,16 +41,17 @@
          roaming and you don't want to manually disable/enable DNSCrypt.
        </li>
        <li>
-          Using Little Snitch? There are 4 rules you need to establish,
+          Using Little Snitch? There are a few rules you need to establish,
          which Little Snitch should prompt for when trying to
          activate this application:
          <ol>
            <li>Allow any outgoing connection for system processes (dnscrypt-proxy)</li>
            <li>Allow any incoming connection for system process (dnscrypt-proxy)</li>
            <li>Allow any outgoing connection for system processes (dig)</li>
-            <li>Allow outgoing TCP connections on port 80( http) of www.apple.com for system process (curl)</li>
+            <li>Allow outgoing TCP connections to port 80 (http) of www.apple.com for system process (curl)</li>
+            <li>For automatic updates, allow outgoing TCP connections to port 80 (http) of updates.dnscrypt.org and to port 443 (https) of github.com for system process (curl)</li>
          </ol>
-          (Thanks to @cavemandaveman)
+          (Thanks to @cavemandaveman and @TraderStf)
        </li>
      </ul>
    </p>
@@ -3,16 +3,15 @@
  %head
    %meta{charset: "utf-8"}
    %title Help (advanced settings)
-    %style{type: "text/css"}
-      :sass
-        html
-          background: #e4e4e4
-        body
-          font:
-            family: arial, helvetica, sans-serif
-          margin: 1em
-        h1
-          margin: 0
+    :sass
+      html
+        background: #e4e4e4
+      body
+        font:
+          family: arial, helvetica, sans-serif
+        margin: 1em
+      h1
+        margin: 0
  %body
    %h1 Help (advanced settings)
    %section
@@ -24,11 +23,11 @@
        Separate them with spaces.
    %section
      %h2 Log DNS queries
-      %p      
+      %p
        As a tool designed to protect your privacy, the DNSCrypt proxy does
        not log anything about your DNS queries. Nothing about them will be
        saved to disk ever, and log messages are intentionally kept as generic
-        as possible.        
+        as possible.
      %p
        However, you still may want to look at the DNS queries sent by
        your system. This can be useful in order to spot suspicious
@@ -3,18 +3,16 @@
  <head>
    <meta charset='utf-8'>
    <title>Help (advanced settings)</title>
-    <style type='text/css'>
-      <style>
-        html {
-          background: #e4e4e4; }
-        
-        body {
-          font-family: arial, helvetica, sans-serif;
-          margin: 1em; }
-        
-        h1 {
-          margin: 0; }
-      </style>
+    <style>
+      html {
+        background: #e4e4e4; }
+      
+      body {
+        font-family: arial, helvetica, sans-serif;
+        margin: 1em; }
+      
+      h1 {
+        margin: 0; }
    </style>
  </head>
  <body>
@@ -3,24 +3,37 @@
  %head
    %meta{charset: "utf-8"}
    %title Release notes for DNSCrypt-OSXClient by AlterStep
-    %style{type: "text/css"}
-      :sass
-        body
-          font:
-            family: arial, helvetica, sans-serif
-          margin: 0
-        h1, h2
-          margin: 0
-        h1
-          border-bottom: 1px solid grey
-        article
-          padding-left: 1em
-        time
-          font:
-            style: italic
+    :sass
+      body
+        font:
+          family: arial, helvetica, sans-serif
+        margin: 0
+      h1, h2
+        margin: 0
+      h1
+        border-bottom: 1px solid grey
+      article
+        padding-left: 1em
+      time
+        font:
+          style: italic
  %body
    %h1 Release Notes for DNSCrypt-OSXclient by AlterStep

+    %article
+      %h2 Version 1.0.10 by AlterStep
+      %time Tue, 23 Jul 2015
+      %p
+        Compatibility with OSX 10.11 beta 4
+      %p
+        dnscrypt-proxy 1.6.0
+
+    %article
+      %h2 Version 1.0.9 by AlterStep
+      %time Tue, 12 Jul 2015
+      %p
+        Fixed an issue with libsodium not being found by minisign-verify
+
    %article
      %h2 Version 1.0.8 by AlterStep
      %time Tue, 12 Jul 2015
@@ -3,28 +3,43 @@
  <head>
    <meta charset='utf-8'>
    <title>Release notes for DNSCrypt-OSXClient by AlterStep</title>
-    <style type='text/css'>
-      <style>
-        body {
-          font-family: arial, helvetica, sans-serif;
-          margin: 0; }
-        
-        h1, h2 {
-          margin: 0; }
-        
-        h1 {
-          border-bottom: 1px solid grey; }
-        
-        article {
-          padding-left: 1em; }
-        
-        time {
-          font-style: italic; }
-      </style>
+    <style>
+      body {
+        font-family: arial, helvetica, sans-serif;
+        margin: 0; }
+      
+      h1, h2 {
+        margin: 0; }
+      
+      h1 {
+        border-bottom: 1px solid grey; }
+      
+      article {
+        padding-left: 1em; }
+      
+      time {
+        font-style: italic; }
    </style>
  </head>
  <body>
    <h1>Release Notes for DNSCrypt-OSXclient by AlterStep</h1>
+    <article>
+      <h2>Version 1.0.10 by AlterStep</h2>
+      <time>Tue, 23 Jul 2015</time>
+      <p>
+        Compatibility with OSX 10.11 beta 4
+      </p>
+      <p>
+        dnscrypt-proxy 1.6.0
+      </p>
+    </article>
+    <article>
+      <h2>Version 1.0.9 by AlterStep</h2>
+      <time>Tue, 12 Jul 2015</time>
+      <p>
+        Fixed an issue with libsodium not being found by minisign-verify
+      </p>
+    </article>
    <article>
      <h2>Version 1.0.8 by AlterStep</h2>
      <time>Tue, 12 Jul 2015</time>
@@ -1,5 +1,5 @@

-CURRENT_VERSION=1
+CURRENT_VERSION=3

 DNSCRYPT_USR_BASE_DIR='/Library/PreferencePanes/DNSCrypt.prefPane/Contents/Resources/usr'
 DNSCRYPT_VAR_BASE_DIR='/Library/Application Support/DNSCrypt'
@@ -2,6 +2,9 @@

 . ./common.inc

+DNSCRYPT_LIB_BASE_DIR="${DNSCRYPT_USR_BASE_DIR}/lib"
+export DYLD_LIBRARY_PATH="${DNSCRYPT_LIB_BASE_DIR}:${DYLD_LIBRARY_PATH}"
+
 TARGET_DIR=~/Desktop

 [ -e "$APP_UPDATES_STATE" ] && exit 0
@@ -2,6 +2,9 @@

 . ./common.inc

+DNSCRYPT_LIB_BASE_DIR="${DNSCRYPT_USR_BASE_DIR}/lib"
+export DYLD_LIBRARY_PATH="${DNSCRYPT_LIB_BASE_DIR}:${DYLD_LIBRARY_PATH}"
+
 logger_debug "Checking if updates to the resolvers list are available"

 curl -L --max-redirs 5 -4 -m 30 --connect-timeout 30 -s \
@@ -1,12 +1,10 @@
 OSX client for managing the DNSCrypt Proxy
 ==========================================

-The purpose of this application is to allow the user to have a better
-experience controlling the DNSCrypt Proxy on OSX.
+The purpose of this application is to allow the user to have a better experience controlling the DNSCrypt Proxy on OSX.

-[Download dnscrypt-osxclient-1.0.7.dmg](https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.7/dnscrypt-osxclient-1.0.7.dmg)
-for OSX 10.8 (Mountain Lion), OSX 10.9 (Mavericks), OSX 10.10 (Yosemite) and
-OSX 10.11 (El Capitan).
+[Download dnscrypt-osxclient-1.0.9.dmg](https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.9/dnscrypt-osxclient-1.0.9.dmg)
+for OSX 10.8 (Mountain Lion), OSX 10.9 (Mavericks), OSX 10.10 (Yosemite) and OSX 10.11 (El Capitan).

 Compatible with:
 * Adamas
@@ -22,3 +20,7 @@ Compatible with:
 * d0wn
 * iPredator
 * okTurtles
+
+Packages are signed with [Minisign](https://jedisct1.github.io/minisign/) and can be verified with:
+
+    minisign -V -P RWRvw8aArS/yEI3In0/zQSb9+qfWonLxjjEYG17cXt6zct6GLKtEvUfk -m dnscrypt-osxclient-*.dmg
@@ -1,4 +1,4 @@
-10.8 1 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.8/dnscrypt-osxclient-1.0.8.dmg
-10.9 1 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.8/dnscrypt-osxclient-1.0.8.dmg
-10.10 1 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.8/dnscrypt-osxclient-1.0.8.dmg
-10.11 1 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.8/dnscrypt-osxclient-1.0.8.dmg
+10.8 2 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.9/dnscrypt-osxclient-1.0.9.dmg
+10.9 2 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.9/dnscrypt-osxclient-1.0.9.dmg
+10.10 2 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.9/dnscrypt-osxclient-1.0.9.dmg
+10.11 2 https://github.com/alterstep/dnscrypt-osxclient/releases/download/1.0.9/dnscrypt-osxclient-1.0.9.dmg
@@ -1,4 +1,4 @@
 untrusted comment: signature from minisign secret key
-RWRvw8aArS/yEHYsWWF0s6ueXO4F4Xql7W4QD0TOfRs8ZBSPtjxSgrMPis0k46GPhVkaAFzbWx1jEXCNLgDNlnehWwFEjhD/DQc=
-trusted comment: timestamp: 1436633664 file: versions.txt
-O4OxZpRmxNPlsVSeuVO2SpdmzTwnMpvPV9dMMr1W5FtusQ+WZtXVupBYRu15NZ1VsKbY0b4k0Qb1Jjb7loWsAw==
+RWRvw8aArS/yEM/HQP7vVPbVuXkF4hOWIpKzk6jMnlPY9nTgebaPUzGfbzlERHk5BRpstsLiTYude2nu1zhxOdDBBLV9SzqGzAY=
+trusted comment: timestamp: 1436694823 file: versions.txt
+qkPr7430Pru6nYOTvXxpAHNrEDjaakyJjtlNHLhgbpVw6mG4LNHK0PcuYTeGzwMum3AqiUnu9Lt12b9WiOaQAA==
Author	SHA1	Message	Date
Alter Step	2a6f52de56	1.0.10	2015-07-23 10:15:01 +02:00
Alter Step	a531592494	Import a copy of the lockfile tool, because Apple removed it	2015-07-22 22:03:52 +02:00
Alter Step	676507b0ef	Address a few glitches in the preferences pane documentation	2015-07-14 21:10:23 +02:00
Alter Step	909218a765	First update	2015-07-12 11:53:49 +02:00
Alter Step	eefb31be76	Release 1.0.9	2015-07-12 11:50:32 +02:00
Alter Step	1e3a8db2b6	Fix "minisign-verify cannot be opened due to a problem"	2015-07-12 11:41:16 +02:00
Alter Step	531d3e48ab	Remove ZIP file and sign.sh should sign with minisign	2015-07-12 11:40:35 +02:00
Alter Step	edf400d681	Packages will have a minisign signature from now on	2015-07-11 19:06:20 +02:00