API

Version 1.11.0

• Released August 17, 2025

Added

• Capture and log manual SKA-P deregister device events.
• Controller action to help pick hub hosts.

Changed

• Updated default SKA-P API URLs to match SKA-P 25.06 release.

Version 1.10.0

• Released July 10, 2025

Added

• Adds 3 new security-related headers to HTTP responses:

  Content-Security-Policy: default-src 'none'; form-action 'none'; base-uri 'none'; frame-ancestors 'none'; sandbox
  Strict-Transport-Security: max-age=7776000
  X-Content-Type-Options: nosniff
  

  HSTS header is included only if its max age is specified via the HSTS_MAX_AGE env var; eg HSTS_MAX_AGE=90d for 90 days.
• Optional S3 signed URLs for agent downloads. Enabled via DOWNLOADS_ACCESS_KEY_ID (and other DOWNLOADS_*) env vars.
• Optional EULA acceptance tracking. Enabled via TERMS_LAST_UPDATED env var (eg TERMS_LAST_UPDATED=2025-07-01).
• Mandatory seat-based license-key enforcement. License keys must be placed in directory specified by LICENSE_DIR env var (defaults to /etc/cruxvpn/license).

Changed

• Upgraded from Erlang/OTP 27.2 to 27.3.4.1
• Upgraded from Elixir 1.17.3 to 1.18.4

Removed

• Removed preshared-key mismatch alert (which was incongruent with keys generated via SKA-P).

Version 1.9.2

Added

• Support for Ubuntu 24.04 installations
• New functionality to connect to Arqit API
• New log entries based on changes pushed via Arqit API

Changed

• Changes to registration flow based on Arqit device properties
• Rearrange PSK logic in endpoint controller

Version 1.8.0

• Initial Release