Version 1.2.0-rc.2

Added --disable-authentication flag, which disables client certificate authentication (#150).

Version 1.2.0-rc.1

Release candidate for version 1.2.0, which includes Windows support.

Version 1.1.2

Notable Changes

• Improved startup logging, print some extra messages to make log output more useful (#123)
• Updated vendored dependencies and added release builds for Linux and macOS (#124, #125)
• Require Go 1.9 for building ghostunnel from source (due to updated certigo/lib dependency)

Version 1.1.1

New Features

• Added server certificate assertions for client mode (#119)
• Support for loading private keys from PKCS#11 modules (#114, needs CGO_ENABLED=1)

Version 1.1.0

New Features

• Add optional support for HTTP CONNECT proxies (allows traversing web proxies, #104)
• Support ChaCha cipher suites, add flag for selecting between AES-GCM/ChaCha (#102)

Bug Fixes

• Don't cache DNS lookup results in process, rely on OS-level caching instead (ba9fcb9)
• Rename --graphite to --metrics-graphite to match other metrics flags (53814dc)
• Rename --timeout to --connect-timeout to distinguish from shutdown timeout (a0bd3d8)

Deprecated

• Removed support for wrapping other commands (we recommend dumb-init instead)
• Removed support for old Go versions, requires Go 1.8 to compile as a minimum now

Version 1.0.6

Notable changes
Update TLS settings to specify curve preferences (#101, 3c32ee0)

Version 1.0.5

Notable changes
Don't rm target UNIX socket on shutdown, we don't own that (#98, e024dca)
Support reading certificate/private key from a PEM file (#100, 269b4cb)
Add more error logging for better debugging (#94, #95, fe9b954, ad60f93)

Version 1.0.4

Notable changes
Better child termination logic. Ensure we terminate child if shutdown times out (#92, 0796b08)
Make cacert flag optional, use system roots by default if flag is not specified (#93, b77669b)

Due to the change in #93, Ghostunnel now requires Go 1.7 for building.

Version 1.0.3

Notable changes
Allow status port to be a UNIX socket (c946514)
Configurable metrics publishing interval (50336f8)
Add vendor subdirectory to repo (3c48d37)

Version 1.0.2

Notable changes
Better logging for rejected connections (b3027c6)
Simplified certificate reloading logic (644aceb)