ovpnmcgen.rb 0.4.1 → 0.4.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6ef44c3fa31e42f64bd986012e60ee32cb6ebb2f
-  data.tar.gz: 66afa4c68f2d00f6d2b502402ade0397cf5981d8
+  metadata.gz: d8d3f0580baa1a948a526b83986d6fd5c42f50ec
+  data.tar.gz: ebcf4f757ce5c1f46c00fde71db26b59c2ef913b
 SHA512:
-  metadata.gz: 3f4ba7bb60994c9cd443617b0ec24d5e8ebef7b53dd3cf28aae74475f12ca12c01dad9d2954bd199868272cabadc1170b906ef26307625b613f08090e64ccf09
-  data.tar.gz: 3a3f40a2d17f28f25683e37d51a15c732937768b5d8a540c44c996740d445b44ae66b0a98c72d2893fc59508706451d50e5e70566196f244fc8eec57b12ed7dd
+  metadata.gz: 98012329bd990d08a71b8825d93a7fae52b8aff2645fbbf9fe519abf3b613ad4e11885aded0e08d94444da42bb11aa28b51c993c41c67a2c783266c98ba791c8
+  data.tar.gz: 31efba1f7f54a78099ea8eeb2d26cfa0aa0eb266d96d87b860dbecc19e13938e01565280ff46bff1bc0d34b2f0278bb910092f9a116c290ea0a1320b5fdd4af1

data/.travis.yml

@@ -1,11 +1,13 @@
 language: ruby
+
 before_install:
   - gem update bundler
   - bundle version
+
 rvm:
-  - 1.9.3
-  - 2.0.0
-  - 2.1
+  - "1.9.3"
+  - "2.0.0"
+  - "2.1"
   - ruby-head
   - jruby-19mode
 
@@ -13,3 +15,14 @@ matrix:
   fast_finish: true
   allow_failures:
     - rvm: ruby-head
+    - rvm: jruby-19mode
+
+deploy:
+  provider: rubygems
+  api_key:
+    secure: BQQeiJ84RINkM5Pxm7zFSAbOS2T5THi+37CoswQXe5eTi+0PIl14plWJByGOj2ho2e6kam5XU/VUgQzDexhkFz174QDP+BIuhdNxRMuMqgKuffi0Cyb9CM7JybpsB+Yd97X3nNxiubR/qoJPQ5nvG1SvCuF2TK3Zq8cL5VfxZ9o=
+  gem: ovpnmcgen.rb
+  on:
+    tags: true
+    repo: "iphoting/ovpnmcgen.rb"
+    branch: master

data/ChangeLog

@@ -1,3 +1,6 @@
+= 0.4.2 / 2014-07-05
+	* Bugfix: Default catch-all rule should be 'Ignore', any other option does not make sense.
+
 = 0.4.1 / 2014-05-07
 	* Bugfix: SSIDs specified as a string in configfile now correctly output
 	as arrays. (#a9e638)

data/README.md

@@ -15,7 +15,7 @@ Although there are many possible VPN-on-Demand (VoD) triggers, this utility curr
 - Else if wireless SSID matches any specified with `--untrusted-ssids`, unconditionally bring up the VPN connection on the next network attempt.
 - Else if the primary network interface becomes Wifi (any SSID except those above), unconditionally bring up the VPN connection on the next network attempt.
 - Else if the primary network interface becomes Cellular, leave any existing VPN connection up, but do not reconnect on demand.
-- Else, unconditionally bring up the VPN connection on the next network attempt.
+- Else, leave any existing VPN connection up, but do not reconnect on demand.
 
 Note: The other match triggers, such as `DNSDomainMatch`, `DNSServerAddressMatch`, and per-connection domain inspection (`ActionParameters`), are not implemented. I reckon some kind of DSL will need to be built to support them; pull-requests are welcome.
 
@@ -91,7 +91,7 @@ For 'paranoid' security level, the following algorithm is executed upon network
 - Else if wireless SSID matches any specified with `--untrusted-ssids`, unconditionally bring up the VPN connection on the next network attempt.
 - Else if the primary network interface becomes Wifi (any SSID except those above), unconditionally bring up the VPN connection on the next network attempt.
 - Else if the primary network interface becomes Cellular, unconditionally bring up the VPN connection on the next network attempt.
-- Else, unconditionally bring up the VPN connection on the next network attempt.
+- Else, leave any existing VPN connection up, but do not reconnect on demand.
 
 For 'medium' security level, the following algorithm is executed upon network changes, in order:
 
@@ -99,7 +99,7 @@ For 'medium' security level, the following algorithm is executed upon network ch
 - Else if wireless SSID matches any specified with `--untrusted-ssids`, unconditionally bring up the VPN connection on the next network attempt.
 - Else if the primary network interface becomes Wifi (any SSID except those above), leave any existing VPN connection up, but do not reconnect on demand.
 - Else if the primary network interface becomes Cellular, leave any existing VPN connection up, but do not reconnect on demand.
-- Else, unconditionally bring up the VPN connection on the next network attempt.
+- Else, leave any existing VPN connection up, but do not reconnect on demand.
 
 ### URL Probe
 
@@ -359,6 +359,9 @@ Output similar to above:
 ## TODO
 
 - Config file to specify global options, such as `--cafile`, `--tafile`, `--host`, `--[un]trusted-ssids`.
+
+	See commit `#d9c015618` for feature.
+
 - Batch-operation mode, with CSV-file as input, and a CSV UUID-index file to track generated profiles as output.
 
 	The same UUID should be used for profile updates, so that iOS knows which profile to replace, especially in MDM environments.

data/features/gen_basic.feature

@@ -143,13 +143,6 @@ Feature: Basic Generate Functionality
 			"""
 			<key>URLStringProbe</key>
 			"""
-		And the output should not match:
-			"""
-			<dict>
-			\s*<key>Action</key>
-			\s*<string>Ignore</string>
-			\s*</dict>
-			"""
 
 	Scenario: The [un]trusted-ssids flags are set.
 		When I run `ovpnmcgen.rb g --host aruba.cucumber.org --cafile ca.crt --p12file p12file.p12 --trusted-ssids trusted1,trusted2 --untrusted-ssids evil3,evil4 cucumber aruba`

data/lib/ovpnmcgen/version.rb

@@ -1,4 +1,4 @@
 module Ovpnmcgen
-  VERSION = "0.4.1"
+  VERSION = "0.4.2"
   SUMMARY = "An OpenVPN iOS Configuration Profile (.mobileconfig) Utility"
 end

data/lib/ovpnmcgen.rb

@@ -90,7 +90,7 @@ module Ovpnmcgen
           end
     }
     vodDefault = { # Default catch-all
-      'Action' => 'Connect'
+      'Action' => 'Ignore'
     }
 
     # Insert URLStringProbe conditions when enabled with --url-probe

data/ovpnmcgen.rb.gemspec

@@ -6,6 +6,7 @@ require 'ovpnmcgen/version'
 Gem::Specification.new do |spec|
   spec.name          = "ovpnmcgen.rb"
   spec.version       = Ovpnmcgen::VERSION
+  spec.version       = "#{spec.version}-pre-#{ENV['TRAVIS_BUILD_NUMBER']}" if ENV['TRAVIS']
   spec.authors       = ["Ronald Ip"]
   spec.email         = ["myself@iphoting.com"]
   spec.summary       = Ovpnmcgen::SUMMARY

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ovpnmcgen.rb
 version: !ruby/object:Gem::Version
-  version: 0.4.1
+  version: 0.4.2
 platform: ruby
 authors:
 - Ronald Ip
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-05-07 00:00:00.000000000 Z
+date: 2014-07-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler