Mobile and Wireguard support

Change Log

Implemented enhancements:

• CI should check mobile builds on PR stage #586
• Adjust mobile entrypoint to handle statistics channel #573
• refactor the session storage #572
• Wireguard consumer should generate own keys #562
• Bidirectional data exchange for service provider and consumer #556
• Stale PR should be marked in a 2 weeks #436
• Make Openvpn plugable transport #382
• Refactor: BrokerPort should be configurable #226
• Added destroy callback for transport services #612 (soffokl)
• Initial support for multiple wireguard sessions #608 (soffokl)
• Added routes configuration for wireguard connection #603 (soffokl)
• Changed subnet to IPaddr in wireguard config #600 (soffokl)
• Enable real forwarding for wireguard service #596 (soffokl)
• Added check for mobile build for PRs #587 (soffokl)
• Added Wireguard service manager #561 (soffokl)
• Added Wireguard noop support #555 (soffokl)
• Added publishing Android SDK to Bintray and JCenter. #520 #525 (soffokl)
• Semantic version for dev releases #469 (soffokl)

Fixed bugs:

• Wrong formatting of session.dateStarted on /sessions endpoint #583
• session-create topic deduplication #533
• go-homedir dependency dont work on Android #508
• Change the name of the Carthage file to Mysterium.json #507
• Tequilapi "/stop" endpoint does not stop myst service #443
• Pre-builded images does not provide correct version information. #441
• Example docker run command in README fails #439
• Avoid travis build collision on S3 storage #432
• Tequilapi http client never times-out #386
• Cleaning nats subscriptions on session destroy #611 (soffokl)
• Fixed duplicate dialog on session creation #607 (soffokl)
• Fixed android build with wireguard #585 (soffokl)
• Do not create S3 bucket for outside PR. #540 (soffokl)
• Fixed docker images sync via S3 #539 (soffokl)
• Fixed travis builds related to S3 #538 (soffokl)
• Fixed publishing Android SDK #527 (soffokl)
• Added unique s3 path for builds to prevent collisions #526 (soffokl)
• Updated chzyer/readline to fix CLI quit command. #462 #477 (soffokl)
• Fixed stopping of service, daemon and CLI #471 (soffokl)
• Added token usage for Github API calls #470 (soffokl)
• Fixed build in version in docker images. #441 #468 (soffokl)

Closed issues:

• allocate / release WG interface for kernel space #604
• provider: improve authorisation to properly handle reconnect #589
• SPIKE: investigate openvpn TLS floating feature #574
• Event based connection manager #559
• Implement connection.Manager for WG #557
• tequilapi publish documentation automatically #544
• Travis build failed for testing new mobile build. #536
• Final removal of "openvpn" wording #530
• Expose identity registration data for mobile #522
• Automated build for Mysterium framework for iOS and Android. #520
• Pass runtime environment as option to mobile entrypoint #513
• Deploy android archives (aar, sources) as maven repo in mysterium infrastructure #512
• Implement service.Manager for WG #503
• Frame WG service as Node PT with Noops #502
• Move Wireguard SPIKE to github WIKI #495
• Package WG ubuntu / debian / centos packages within our docker images #491
• node service start all supported transports #483
• Dummy service which does Noop tunnel #482
• Enable Noop connection for mobile #480
• Start having Carthage frozen releases #473
• Release node as iOS framework and Android aar package #466
• Quiting the cli hangs instead of quitting #462
• Promise check should be available through --experiment-promise-check flag only #456
• High Level architecture documentation #437
• Semantic version for dev releases #434
• Sessions endpoint #433
• Endpoint /proposals?fetchQuality=true merges Discovery + Quality Oracle data #429
• Make 'myst daemon' as separate command #402
• SPIKE: wg central device vs separate device for each peer #391
• Create top level mobile package for exposing core apis to mobile platforms #364
• SPIKE: protocols compatible with mobile #357
• Paid identity POC #334
• Mint MYST through Wallet #333
• Can the addresses in .env be passed at runtime? #225
• 400 BAD REQUEST ON macOS #28

Merged pull requests:

• session stats are now reset #617 (vkuznecovas)
• override artifacts #615 (zolia)
• Improvement/refactor discovery related stuff #610 (tadovas)
• go-openvpn version for session reconnect support #609 (zolia)
• Filter out unsupported proposals #606 (tadovas)
• do not kill openvpn connect with different clientID #605 (zolia)
• services can now be started with a comma separated list #602 ([vkuznecovas](https://git...

Experimental promises support & Proposals metrics

Implemented enhancements:

• Added --experiment-promise-check flag #464 (soffokl)

Fixed bugs:

• Fixed getting version from tag #467 (soffokl)
• Goimports check do nothing since goimport is not installed for CI #450

Closed issues:

• Payments. Provider stores Consumer promises (state) #347

Merged pull requests:

• Update development environment setup docs #461 (tcharding)
• Force bin/build to run #459 (tcharding)
• Reduce noise when running check\_golint #457 (tcharding)
• Check we have goimports #453 (tcharding)
• Run goimports with builder #452 (tadovas)
• Cherrypick of "Identity check disabled by default, added flag to enable it. #363" #445 (Waldz)
• Added fetchQuality to the proposals endpoint with a fake data #444 (soffokl)
• Added promises validation and storing for the service provider. #347 #404 (soffokl)
• Move towards a more modular connection manager #385 (vkuznecovas)
• Compile in geoip2 database and avoid external file reading #281 (tadovas)

Full Changelog

Reverted mandatory flag "--agreed-terms-and-conditions" for service

0.3.2

Merge pull request #442 from mysteriumnetwork/backport-agree-terms-an…

Config layout fixes

Merge pull request #418 from mysteriumnetwork/release-03-fixes

Backport of configuration fixes from #406

Experimental support of paid identity

• Support for Paid Mysterium ID
• Added --experiment-identity-check for enabling paid identity
• Single executable myst which acts in server role or client role
• Statistics fix for short sessions

Fixed binary packing for Windows

Added .exe suffix to Windows binary

Tequilapi now prints correct semantic version

• Tequilapi now prints correct semantic version

Fix config directory structure

• Warning how to do port forwarding PUBLIC_IP:1194 -> NODE_IP:1194, assuming that host doesn't have external interface with public ip
• Add files to config directory with proper structure

Enabling Service Providers (Nodes)

Management middlewares introduced
Clients calculates traffic byte statistics
Update installation instructions
Remove unstable packages from build
Ubuntu and Alpine docker for node
Remove hardcoded environment variables
Document Docker in installation docs
Compare IPs before, and after VPN session
Possibility to inject VPN middleware to server/client programs
Listen for client state changes
CLI command interfaces introduced
Deployment scripts
Package for Debian improved
Possibility to test without dedicated server for node
Initd linux service management
Systemd linux service management
Prepare binaries for supported systems
Require exact Openvpn version in .deb package
Monitor CI system
Docker for node building system
Prepare development documentation
Make docker-compose.yml to work
NATS server support for communication channel
Define interface for CommunicationChannel
Define ServiceProposal data structures
Improve contribution documentation
Add communication channel to VPN client
HTTP-like communication client
Split NATS Channel into Server/Client/Receiver/Sender responsibilities
VPN ServiceDefinition to JSON
Added money handling package with currency definitions
Node registration sends service proposal
generate keys, encode, decode, sign, verify
Install Ethereum accounts library
testing sign, verify messages
identity manager
passphrase as a parameter for CreateNewIdentity
Initial minimal api with tests
httprouter library added
Node registers identity via Identity API
Communication got tests
Server&Receiver contacts crystallized
Introduce communication Dialog
Mock NATS connection in tests
securing openvpn config per recommendation: https://gist.github.com/pwnsdx/8fc14ee1e9f561a0a5b8
outbound IP detection without external service
cmd.Run starts serving tequila api now
tequila list proposals endpoint
Use new stats endpoint
Node creates identity on each run
Openvpn session manager introduced
Separate tests, real unit tests
Install Ubuntu images from local .deb package
Multistage building for Alpine and Ubuntu images
broker address propagated to client in proposal
Tests for transport added, signature can represent itself as Base64
Pack/Unpack messages with signature
Sender/Receiver requires codec
All mysterium api rest messages are signed now
Add cors headers for tequilapi service
Document source code
generate openvpn certificates on the fly
Interactive CLI tequila client
Add unlock endpoint for tequilapi
Add command option for passphrase
Add country detection, send country in proposal
Call sarah connor when terminator comes
Make --cli optional when running bin/client_run
Make linter happy
Openvpn client cert and key removed
Add tequilapi endpoint for current ip
Lets name things by their real names
Add "GET /connection/statistics" endpoint
Add session duration counting
Prefix is added before session id signing/verifying to avoid abuse of client signing everything the node gives
Add CLI command for proposals
Stop client on POST /stop
execute script to update mac system dns servers after openvpn connects / disconnects
Improve Stopper to allow killing multiple commands
Added tls auth key prototype
Use tls-crypt instead of tls-auth for more security
Introduce config directory for client
Travis CI introduced
Code restructuring
Reduce ip resolving timeout
Limit openvpn client reconnects
Expose tequilapi port
Alpine container for client
e2e tests implemented
Use ipify service for public IP detection
Client and node docker entrypoint should accept any additional params received through CMD
add UnregisterProposal
Add link to license
fix reconnect issue to gnatsd
Format code using go fmt
Add copyright header to all go files
Duplicate openvpn session check
Merge check process improved
Moved openvpn management from unix socket to TCP to support windows
README, INSTALL and CONTRIBUTING files updated for new version
Add 'license','warranty' and 'conditions' for CLI client
Add 'license','warranty' and 'conditions' for node
Prepare cross compile scripts
Make Debian builds work again
Use xgo for cross-compiling
Start using XGO in CI flow
Connect linter, fmt and license check to CI flow
Tequilapi swagger documentation added
Move client and server configurations to appropriate packages
Add version to program logs
Stop openvpn executable in OS portable way
Sudo introduced
Tun management service introduced
Linux privilege downgrading for openvpn process
config dirs remade
Connect debian packaging to CI
Add DNS update support for windows
Force user to agree with terms and conditions when running server
Add instructions about accepting terms & conditions
Connect Docker packaging to CI
Make resolvconf skip the post install
Separate Docker building from releasing to Docker Hub
Add 'healthcheck' command to CLI
Terms and conditions during deb installation

Traffic statistics "Data transfered" for node sessions #4

0.0.6

Make node key required CLI variable