diff --git a/README.md b/README.md index 26edda2..29bea9b 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # LOGAR: Fleet Log Aggregation & Centralized Provisioning System ### *Secure Log Aggregation, PKI Fleet Licensing & Centralized Delivery for Autonomous AI Analysis* -[![Version](https://img.shields.io/badge/version-0.3.1-blue.svg)](RELEASE_NOTES.md) +[![Version](https://img.shields.io/badge/version-0.3.2-blue.svg)](RELEASE_NOTES.md) [![Tests](https://img.shields.io/badge/tests-35%20passed-success.svg)](tests/) [![Security](https://img.shields.io/badge/mTLS-TLS%201.3-green.svg)](https://gitea.eibl.tech/me0nline/LOGAR/wiki/PKI-and-Licensing) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 402f5eb..d54c177 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,13 +1,6 @@ -# LOGAR Release v0.3.1 +# LOGAR Release v0.3.2 -### 🛡️ Security Fixes & Defensive Hardening -- **Mandatory Admin Authentication**: Enforced strict administrator authentication across all fleet management endpoints (`/api/clients`, `/api/clients/approve`, `/api/clients/revoke`, `/api/clients/delete`, `/api/client/export-profile`) and license management APIs. -- **Brute-Force Mitigation & Rate Limiting**: Implemented thread-safe sliding-window IP rate limiting on `/login` (10 attempts/min) and `/api/client/enroll` (15 attempts/min) with progressive delays and `HTTP 429` throttling. -- **Cookie Security Flags**: Session cookies now enforce `HttpOnly=True`, `SameSite="Lax"`, and dynamic `Secure=True` for HTTPS connections and reverse-proxy deployments (`X-Forwarded-Proto`). -- **Cryptographic Random Secrets**: Server Hub and License Authority session secrets are now generated with 256-bit CSPRNG (`secrets.token_hex(32)`) on initialization. -- **License Renewal Validation**: Hardened `/api/license/renew` with explicit PEM structure and database validation, preventing unhandled exceptions. - -### ⚡ Operational Improvements & Modernization -- **FastAPI Lifespan Handlers**: Migrated legacy startup events to modern ASGI lifespan context managers. -- **OpenPGP Compression Preferences**: Aligned Server public key compression algorithms (`ZIP`, `ZLIB`, `BZ2`, `Uncompressed`) with client preferences. -- **Cross-Platform Compilation**: Unified automated packaging for standalone Windows and Linux binaries. +### 🪟 Windows Installer Fixes +- **Standalone Windows Binaries & Python Runtime**: Resolved issues with standalone Windows executable execution and bundled runtime paths. +- **Data Directory Selection & Permissions**: Added custom data directory selection during setup and fixed permissions for background Windows services. +- **Service Lifecycle & Clean Uninstallation**: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation. diff --git a/compilation/installer_client.iss b/compilation/installer_client.iss index c972081..000943c 100644 --- a/compilation/installer_client.iss +++ b/compilation/installer_client.iss @@ -1,6 +1,6 @@ [Setup] AppName=LOGAR Client -AppVersion=0.3.1 +AppVersion=0.3.2 AppPublisher=LOGAR Security Systems AppPublisherURL=https://logar.eibl.tech AppSupportURL=https://logar.eibl.tech @@ -14,9 +14,9 @@ SolidCompression=yes WizardStyle=modern VersionInfoCompany=LOGAR Security Systems VersionInfoDescription=LOGAR Windows Edge Log Forwarder Setup -VersionInfoVersion=0.3.1.0 +VersionInfoVersion=0.3.2.0 VersionInfoProductName=LOGAR Client -VersionInfoProductVersion=0.3.1 +VersionInfoProductVersion=0.3.2 [Files] Source: "..\dist\Win_Client.exe"; DestDir: "{app}"; Flags: ignoreversion diff --git a/compilation/installer_client.nsi b/compilation/installer_client.nsi index cdfe74b..014fec6 100644 --- a/compilation/installer_client.nsi +++ b/compilation/installer_client.nsi @@ -8,13 +8,13 @@ RequestExecutionLevel admin BrandingText "LOGAR Enterprise SIEM & Edge Forwarder" -VIProductVersion "0.3.1.0" +VIProductVersion "0.3.2.0" VIAddVersionKey "ProductName" "LOGAR Client" VIAddVersionKey "CompanyName" "LOGAR Security Systems" VIAddVersionKey "LegalCopyright" "© 2026 LOGAR Security Systems" VIAddVersionKey "FileDescription" "LOGAR Windows Edge Log Forwarder Setup" -VIAddVersionKey "FileVersion" "0.3.1.0" -VIAddVersionKey "ProductVersion" "0.3.1.0" +VIAddVersionKey "FileVersion" "0.3.2.0" +VIAddVersionKey "ProductVersion" "0.3.2.0" Var DATADIR diff --git a/compilation/installer_server.iss b/compilation/installer_server.iss index feaa556..1f57de3 100644 --- a/compilation/installer_server.iss +++ b/compilation/installer_server.iss @@ -1,6 +1,6 @@ [Setup] AppName=LOGAR Server -AppVersion=0.3.1 +AppVersion=0.3.2 AppPublisher=LOGAR Security Systems AppPublisherURL=https://logar.eibl.tech AppSupportURL=https://logar.eibl.tech @@ -14,9 +14,9 @@ SolidCompression=yes WizardStyle=modern VersionInfoCompany=LOGAR Security Systems VersionInfoDescription=LOGAR Cloud Hub & TCP Ingestion Server Setup -VersionInfoVersion=0.3.1.0 +VersionInfoVersion=0.3.2.0 VersionInfoProductName=LOGAR Server -VersionInfoProductVersion=0.3.1 +VersionInfoProductVersion=0.3.2 [Files] Source: "..\dist\Server.exe"; DestDir: "{app}"; Flags: ignoreversion diff --git a/compilation/installer_server.nsi b/compilation/installer_server.nsi index f0c825e..088c497 100644 --- a/compilation/installer_server.nsi +++ b/compilation/installer_server.nsi @@ -8,13 +8,13 @@ RequestExecutionLevel admin BrandingText "LOGAR Enterprise SIEM & Log Ingestion" -VIProductVersion "0.3.1.0" +VIProductVersion "0.3.2.0" VIAddVersionKey "ProductName" "LOGAR Server" VIAddVersionKey "CompanyName" "LOGAR Security Systems" VIAddVersionKey "LegalCopyright" "© 2026 LOGAR Security Systems" VIAddVersionKey "FileDescription" "LOGAR Cloud Hub & TCP Ingestion Server Setup" -VIAddVersionKey "FileVersion" "0.3.1.0" -VIAddVersionKey "ProductVersion" "0.3.1.0" +VIAddVersionKey "FileVersion" "0.3.2.0" +VIAddVersionKey "ProductVersion" "0.3.2.0" Var DATADIR