vai_prog/Any-Tech-ARCHITECT
Watch
1
0
Fork
You've already forked Any-Tech-ARCHITECT
 0
mirror of https://github.com/Vadim-Khristenko/AmneziaWG-Architect.git synced 2026-10-23 03:27:45 +03:00
Code Issues Projects Releases 30 Packages Wiki Activity
30 releases 33 tags
  • v4.5.1 0b9d3b7aa6

    Any Tech ARCHITECT v4.5.1 Stable

    VIA_GIT_ACTIONS released this 2026-10-08 14:50:35 +03:00 | 0 commits to main since this release

    Signed by vai_prog
    GPG key ID: 2BD468A8EBE4F4EF

    v4.5.1: The box you tick in the app

    A patch: where Amnezia VPN's HeaderProtectionKey is really switched on, and two lengths that did not add up.

    HeaderProtectionKey in Amnezia VPN

    The config for Amnezia VPN promised the key was "picked up on config import". The app's sources say otherwise:

    • the key is generated by the HeaderProtectionKey box in the server's protocol settings, and the app writes it into the server config and into the client configs it hands out;
    • on the client side the same box only shows the state, so a config imported without a key cannot have protection switched on.

    The key is still not written to the file. The hint by the switch, the .conf comment, the client note and the FAQ answer now say where to tick the box. On 3.1 this matters: without it, disabled H1-H4 would go out in the clear. For a server not set up through the app, pick the AmneziaWG client, which writes the key into the file.

    DTLS 1.3: extensions length

    The ClientHello declared 9 bytes of extensions over the 7 that followed, so a strict parser read two bytes past the end of the block. The length is now written by the shared DTLS framing, and the tag and padding bytes go into a GREASE extension (RFC 8701) that receivers ignore. The ClientHello parses to its last byte.

    DNS: tags inside the OPT record

    <t> and <c> were appended after the Padding option, outside its declared length, and with <r> off they followed the question with ARCOUNT 0. The option data now carries the padding together with the tags.

    Both length bugs were found by the awg-containers-and-tools port of the generator.

    Tests: 1303/1303 (12 new; 10 of them fail on 4.5.0), vue-tsc clean.
    Version 4.5.1
    Channel Release
    Built at 2026-10-08T11:51:25Z
    Dist size 13M (127 files)
    Commit 0b9d3b7

    Changes since v4.5.0

    🐛 Bug Fixes

    • fix(awg): say where Amnezia VPN's HeaderProtectionKey is switched on (de7cc78)
    • fix(awg): DTLS 1.3 extensions length and DNS tags inside the OPT record (7cf85e2)

    🔧 Maintenance

    Quick Start

    Extract the archive and run the bundled server. It has no
    dependencies — nothing needs to be installed:

    ./bin/awg-serve-linux            # Linux
./bin/awg-serve-macos            # macOS
bin\awg-serve-windows.exe       # Windows

    It serves on port 8080 and opens a browser.
    Pass a port to change it (awg-serve 3000), or
    --no-open to skip launching the browser.

    If you would rather use a runtime you already have, the
    launchers look for bun, npx or python and offer to install
    bun only if none is found:

    ./scripts/serve.sh               # Linux / macOS
.\scripts\serve.ps1             # Windows (PowerShell)
scripts\serve.bat               # Windows (CMD)

    Add --check to either launcher to see what it found
    without starting anything.

    The archive also carries scripts/awg-gen.sh, which
    generates AmneziaWG configurations from a terminal with no
    browser and no network, and a README.md describing the
    layout. The XRay side is browser-only for now.

    Checksums

    e99aad065f23db7f8aacc8fca94b8d241d0889f862c39ae8889c308c4a01a34e  any-tech-architect-v4.5.1.zip
d170872553b7779b5659adbff945f9204955ed8120546f18222a90612ceba4e4  any-tech-architect-v4.5.1.tar.gz

    🪞 Зеркало / mirror of Vadim-Khristenko/Any-Tech-ARCHITECT · синхронизируется автоматически / synced automatically

    Downloads