summaryrefslogtreecommitdiffhomepage
path: root/mullvad-cli
AgeCommit message (Collapse)AuthorFilesLines
2024-06-24Run `cargo +nightly fmt`Sebastian Holmin1-4/+2
2024-06-20Add `PrepareRestartv2` gRPC callMarkus Pettersson1-0/+15
- Add option to automatically shutdown daemon on after running through the same safety routine as `PrepareRestart`. This is exposed via a new gRPC call called `PrepareRestartV2`. - Add help text for enabling full disk access to the CLI
2024-04-30Add initial split tunneling implementation for macOSDavid Lönnhager3-3/+90
2024-04-22Fix broken lints in rustdocsSebastian Holmin2-11/+11
I ran `cargo doc` and fixed as many broken links as I could find.
2024-04-16Add DAITA Windows client and updated tuncfgDavid Lönnhager3-2/+42
2024-04-03Enable single-use-lifetimes rustc lintLinus Färnstrand3-3/+3
Removes superfluous lifetime definitions. Simplifying the code
2024-03-27Refactor `mullvad-relay-selector`Markus Pettersson7-13/+19
Implement a system built on 'queries' for selecting appropriate relays. A query is a set of constraints which dictates which relay(s) that *can* be chosen by the relay selector. The user's settings can naturally be expressed as a query. The semantics of merging two queries in a way that always prefer user settings is defined by the new `Intersection` trait. Split `mullvad-relay-selector` into several modules: - `query.rs`: Definition of a query on different types of relays. This module is integral to the new API of `mullvad-relay-selector` - `matcher.rs`: Logic for filtering out candidate relays based on a query. - `detailer.rs`: Logic for deriving connection details for the selected relay. - `tests/`: Integration tests for the new relay selector. These tests only use the public APIs of `RelaySelector` and make sure that the output matches the expected output in different scenarios.
2024-02-28Make `block-connection` block even if disconnectedJoakim Hulthe1-0/+3
2024-02-27Replace err_derive with thiserrorJoakim Hulthe2-4/+4
`err_derive` is unmaintained and will probably stop working with rust edition 2024. `thiserror` is almost a drop-in replacement. This commit simply replaces all occurences of `derive(err_derive::Error)` with `derive(thiserror::Error)` and fixes the attributes, but the Error and Display impls should be identical.
2024-02-19Update copyright year to 2024Oskar Nyberg1-1/+1
2024-01-22Bump `clap` and `clap_complete`Sebastian Holmin1-1/+1
2024-01-22Better error message for failed shell completionsSebastian Holmin1-3/+2
2024-01-22Move logic of toggling disabled access methods on use to the daemonMarkus Pettersson1-6/+1
2024-01-18Update the tunnel state on lockdown mode change.Sebastian Holmin1-8/+17
The printing of lockdown mode by `mullvad status` does not reflect the current setting unless the tunnel state has also been updated.
2024-01-18Print if lockdown mode is enabled when disconnected for `mullvad status`Sebastian Holmin2-7/+20
Add `locked_down` field to disconnected tunnel state.
2024-01-16Add rust-version to all Cargo.tomlLinus Färnstrand1-0/+1
2024-01-12Validate SOCKS5 credentialsMarkus Pettersson4-86/+72
Validate SOCKS credentials by checking that both `username` and `password` both have a length between 1 and 255 bytes. Link to RFC detailing SOCKS5 username/password authentication: https://datatracker.ietf.org/doc/html/rfc1929
2024-01-11Add missing tokio feature to mullvad-cliDavid Lönnhager1-1/+1
2024-01-11Simplify CLI patch module slightlyDavid Lönnhager1-25/+19
2024-01-10Simplify JSON import and export in the CLIDavid Lönnhager1-106/+20
2024-01-10Print help if no argument is provided to export-settings or import-settings ↵David Lönnhager1-0/+2
in the CLI
2024-01-10Add CLI export-settings commandDavid Lönnhager2-5/+57
2024-01-10Add patch export to the management interfaceDavid Lönnhager3-5/+5
2024-01-09Remove version and publish cargo metadataLinus Färnstrand1-2/+0
Since Rust 1.75.0 the `version` field is optional. The version defaults to "0.0.0" if it's not specified, and `publish` defaults to false if no version has been given. So by not specifying a version we get both `version = "0.0.0" and `publish = false` "for free"
2024-01-08Add new internal daemon event `AccessMethodEvent`Markus Pettersson1-0/+5
Add a new `InternalDaemonEvent` for announcing when the current API access method changes.
2024-01-05Run `cargo +nightly fmt`Sebastian Holmin2-4/+6
2024-01-04Add workspace level lintsLinus Färnstrand2-2/+2
2024-01-03Allow app to use custom socks5 and shadwosocks proxiesJonathan4-389/+462
This PR has a couple of different purposes - Allow users to use socks5 local proxies with the CLI without having to be root nor use split-tunneling. This only works for OpenVPN. - Unify the types used by different proxy parts of the codebase, such as the Access Methods as well as some already existing OpenVPN proxy code. This PR changes the firewall on all desktop platforms as well as changes the routing table slightly on MacOS and Windows. On Linux the firewall code is modified to apply the appropriate firewall marks to all packages that go to a remote endpoint corresponding to the remote part of a local socks5 proxy. The firewall marks will allow the routing to be done without having to modify the routing table. On MacOS and Windows the routing table is modified to allow packages to go to that same endpoint to pass outside the VPN tunnel, it will additionally punch a hole in the firewall. The PR also migrates the settings file from version 7 to version 8 in order to properly and neatly unify Proxy related types. Finally it provides some slight extensions to the gRPC interface in order to allow for control over the custom proxy settings.
2023-12-29Show account id in the CLI with 'mullvad account get -v'David Lönnhager1-10/+16
2023-12-21Handle am.i.mullvad.net with internal daemon eventSebastian Holmin2-4/+2
Add `geoip::GeoIpHandler`, which sends an `InternalDaemonEvent::LocationEvent` when the location arrives. It also handles aborting in-flight requests and retries.
2023-12-21Remove `GetCurrentLocation`.Sebastian Holmin2-44/+44
Make the daemon send two tunnel state updates, one with out IP being empty, and another with it being filled when am.i.mullvad.net responds. Update CLI for this change. Other front ends are left out.
2023-12-04Perform testing of access methods asynchronouslyMarkus Pettersson1-2/+2
Perform testing of access methods asynchronously in a separate `tokio` task as to not block the daemon from handling other daemon events during the testing window
2023-12-04Move access method testing logic to `mullvad-daemon`Markus Pettersson1-28/+13
Move access method testing logic to `mullvad-daemon`, which means that the implementation details of how the test works is opaque to whatever frontend which wants to issue a test of some (configured) access method.
2023-11-23Remove unused crate `env_logger`Sebastian Holmin2-3/+0
2023-11-23Add `mullvad debug block-connection` commandSebastian Holmin3-3/+50
2023-11-23Add subcommand level `entry` to `wireguard`Sebastian Holmin1-11/+18
The command `relay set tunnel wireguard entry-location` is replaced with `relay set tunnel wireguard entry location` and `relay set tunnel wireguard custom-list` is replaced with `relay set tunnel wireguard entry custom-list`. This is intended to communicate that the `custom-list` also affects the entry relay and are mutually exclusive.
2023-11-23Improve feedback and error handling for custom-listsSebastian Holmin1-12/+21
2023-11-23Add `resolve_location_constraint` fnSebastian Holmin3-94/+141
The fn exists and returns error on hostname having wrong server type. Allow any host in custom-lists, only the currently configured tunnel protocol for `relay set location`, only bridges for the `bridge` subcommand and only wireguard servers in for the `wireguard` entry command. Reduce repeated init of rpc client Refactor inconsistent filtering on hostname
2023-11-23Refactor match statementSebastian Holmin1-10/+7
2023-11-23Simplify relay filter fnSebastian Holmin1-31/+31
Refactor: Unwrap result return type Refactor: for loop to iter map
2023-11-17Add CLI interface for applying JSON settings patchesDavid Lönnhager3-0/+109
2023-11-13Warn if setting relay overrides for non-existent hostname in the CLIDavid Lönnhager3-19/+45
2023-11-13Add CLI for relay overridesDavid Lönnhager3-29/+227
2023-11-07Add configurable transport protocol to local SOCKS5 access methodMarkus Pettersson1-7/+41
2023-11-06Remove `from_args` constructors for `access_methods` datatypesMarkus Pettersson1-66/+36
In particular, `access_methods::Socks5Local`, `access_methods::Socks5Remote` & `access_methods::Shadowsocks` have got new constructors which are all infallible.
2023-11-06Prefix remote `ip` and `port` with `remote_` in Socks5Local contextsMarkus Pettersson1-9/+12
2023-10-31Replace UpdateRelaySettings with SetRelaySettingsDavid Lönnhager1-35/+43
2023-10-27Make username+password authentication optional in SOCKS5 remote configurationMarkus Pettersson1-2/+3
SOCKS5 optionally supports username+password authentication, which has been implemented previously. This commit addresses a bug in the argument parsing, which made username+password required arguments when adding a remote SOCKS5 api access method using `mullvad api-access add socks5 remote`. Apparently, this is a known pitfall with `clap`: https://github.com/clap-rs/clap/issues/5092
2023-10-24Add missing macros feature to tokioLinus Färnstrand1-1/+1
2023-10-20`cipher` is now a `long` `clap` argument without default valueMarkus Pettersson1-1/+1
i.e. the user has to explicitly pass the `--cipher` flag to `mullvad api-access add shadowsocks ..` subcommand to configure a non-default cipher.
Copyright © 2025 - 2026 Wayne Cole. WTFPL. Attribution appreciated. No warranty. Not liable for bodily damages.