koridor/koridor-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

2 Releases 2 Tags

RSS Feed
  • v0.1.0-beta.2 b7e5dad3be
    Compare

    Koridor v0.1.0-beta.2 Pre-Release

    eugen released this 2026-10-06 16:09:03 +00:00 | 1 commits to master since this release

    Beta 2 — Host Key Trust, Clean Teardown, DNS and WireGuard Fixes

    A reliability and security release. Most of the work is in what happens at the
    edges: the first connection to a new server, the moment the tunnel drops, and the
    moment koridor exits.

    Security

    • SSH host keys are enforced. koridor now refuses a server whose host key has
      not been explicitly trusted. On first connect it asks, showing the real
      fingerprint, and if a known server's key changes it shows both fingerprints
      instead of connecting silently.
    • QR profile imports are size-bounded. Oversized payloads are rejected before
      they are decompressed.
    • authorized_keys is written atomically, with the correct file mode, when
      koridor provisions a server.

    Fixed

    • Teardown on exit. Ctrl+C, kill and SIGTERM now remove koridor's routes and
      DNS changes before the process ends, instead of leaving the host's routing behind.
      A route-cleanup step that fails no longer aborts the rest of the cleanup, and the
      server's host route is no longer left behind or forgotten after teardown.
    • The GUI no longer shows "connected" for a tunnel that has gone. A dead tunnel
      now shows red.
    • DNS through the tunnel. Queries are resolved via the server's own resolver
      configuration rather than a hardcoded guess, and intercepted DNS answers now come
      back from the address that was asked, so the system accepts them.
    • An existing WireGuard VPN keeps working (Linux). If a WireGuard VPN is already
      up when koridor starts, it stays off the tunnel instead of losing its carrier and
      its DNS.
    • Cancel during the first connect is no longer lost.
    • Startup with a locked keyring works, a profile without a key no longer
      prevents launch, and a failed key read no longer destroys the stored key.
    • Linux AppImage upgrades replace the previous version's app data instead of
      nesting the new data inside the old ("Unable to load asset" after an update).

    Under the hood

    • Engine and GUI logs are mirrored to stdout, and tools/tunnel-check.sh tells a
      dead tunnel apart from a DNS failure.
    • Routing is tested in throwaway network namespaces, and a live end-to-end tunnel
      suite now cleans up after itself.

    Report bugs via Gitea issues; send vulnerability reports by email — see the repo
    README for details.

    Downloads
  • v0.1.0-beta.1 002c7452a3
    Compare

    Koridor v0.1.0-beta.1 Pre-Release

    eugen released this 2026-07-31 10:38:34 +00:00 | 2 commits to master since this release

    Beta 1 — First Public Release

    koridor is a full-device VPN client built around a single idea: you already
    have a server you trust — just tunnel through it. Instead of operating its
    own VPN infrastructure, koridor routes your device's traffic through a plain
    SSH server you configure yourself. There's no koridor-operated backend, no
    account, and no third party in the middle.

    Platforms

    This first release ships on Linux, Windows, and Android:

    • Linux — self-contained AppImage.
    • Windows — zipped release build; unzip and run koridor.exe (prompts for
      Administrator via UAC — required to create the WinTun network adapter).
    • Android — install the AAB via the Play Store beta track.

    Report bugs via Gitea issues; send vulnerability reports by email — see the
    repo README for details.

    Downloads