Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

1.1.0 - 2025-11-06

TLS/SSL Support: Optional TLS/SSL encryption for TCP connections with automatic self-signed certificate generation
- --enable-tls / --disable-tls flags for both client and server
- Automatic certificate generation and management (stored in ~/.padrelay/certs/)
- Certificate expiration warnings
- TLS 1.2+ minimum version requirement
- Server: --cert-path and --key-path options for custom certificates
Password Strength Warnings: Non-enforcing password strength checking with recommendations
- Automatic password strength analysis on startup
- Detailed recommendations for improving weak passwords
- Warnings about very weak or commonly used passwords
Security Enhancements:
- Log sanitization to prevent log injection attacks
- Config file permission warnings for world-readable files
Dependencies: Added cryptography>=41.0.0 and cffi>=1.15.0 for TLS support

TLS/SSL is now enabled by default for TCP connections (can be disabled with --disable-tls)
Enhanced security warnings throughout the application
Improved error messages for security-related issues

CI: GitHub Actions workflow for testing with pytest (python-tests.yml)
CI: GitHub Actions workflow for building and publishing releases on tag push (release.yml)