windows installer fixes

README.md

@@ -1,7 +1,7 @@
 # LOGAR: Fleet Log Aggregation & Centralized Provisioning System
 ### *Secure Log Aggregation, PKI Fleet Licensing & Centralized Delivery for Autonomous AI Analysis*
 
-[![Version](https://img.shields.io/badge/version-0.3.1-blue.svg)](RELEASE_NOTES.md)
+[![Version](https://img.shields.io/badge/version-0.3.2-blue.svg)](RELEASE_NOTES.md)
 [![Tests](https://img.shields.io/badge/tests-35%20passed-success.svg)](tests/)
 [![Security](https://img.shields.io/badge/mTLS-TLS%201.3-green.svg)](https://gitea.eibl.tech/me0nline/LOGAR/wiki/PKI-and-Licensing)
 

RELEASE_NOTES.md

@@ -1,13 +1,6 @@
-# LOGAR Release v0.3.1
+# LOGAR Release v0.3.2
 
-### 🛡️ Security Fixes & Defensive Hardening
+### 🪟 Windows Installer Fixes
-- **Mandatory Admin Authentication**: Enforced strict administrator authentication across all fleet management endpoints (`/api/clients`, `/api/clients/approve`, `/api/clients/revoke`, `/api/clients/delete`, `/api/client/export-profile`) and license management APIs.
+- **Standalone Windows Binaries & Python Runtime**: Resolved issues with standalone Windows executable execution and bundled runtime paths.
-- **Brute-Force Mitigation & Rate Limiting**: Implemented thread-safe sliding-window IP rate limiting on `/login` (10 attempts/min) and `/api/client/enroll` (15 attempts/min) with progressive delays and `HTTP 429` throttling.
+- **Data Directory Selection & Permissions**: Added custom data directory selection during setup and fixed permissions for background Windows services.
-- **Cookie Security Flags**: Session cookies now enforce `HttpOnly=True`, `SameSite="Lax"`, and dynamic `Secure=True` for HTTPS connections and reverse-proxy deployments (`X-Forwarded-Proto`).
+- **Service Lifecycle & Clean Uninstallation**: Resolved service startup issues and ensured complete cleanup of state files upon uninstallation.
-- **Cryptographic Random Secrets**: Server Hub and License Authority session secrets are now generated with 256-bit CSPRNG (`secrets.token_hex(32)`) on initialization.
-- **License Renewal Validation**: Hardened `/api/license/renew` with explicit PEM structure and database validation, preventing unhandled exceptions.
-
-### ⚡ Operational Improvements & Modernization
-- **FastAPI Lifespan Handlers**: Migrated legacy startup events to modern ASGI lifespan context managers.
-- **OpenPGP Compression Preferences**: Aligned Server public key compression algorithms (`ZIP`, `ZLIB`, `BZ2`, `Uncompressed`) with client preferences.
-- **Cross-Platform Compilation**: Unified automated packaging for standalone Windows and Linux binaries.

compilation/installer_client.iss

@@ -1,6 +1,6 @@
 [Setup]
 AppName=LOGAR Client
-AppVersion=0.3.1
+AppVersion=0.3.2
 AppPublisher=LOGAR Security Systems
 AppPublisherURL=https://logar.eibl.tech
 AppSupportURL=https://logar.eibl.tech
@@ -14,9 +14,9 @@ SolidCompression=yes
 WizardStyle=modern
 VersionInfoCompany=LOGAR Security Systems
 VersionInfoDescription=LOGAR Windows Edge Log Forwarder Setup
-VersionInfoVersion=0.3.1.0
+VersionInfoVersion=0.3.2.0
 VersionInfoProductName=LOGAR Client
-VersionInfoProductVersion=0.3.1
+VersionInfoProductVersion=0.3.2
 
 [Files]
 Source: "..\dist\Win_Client.exe"; DestDir: "{app}"; Flags: ignoreversion

compilation/installer_client.nsi

@@ -8,13 +8,13 @@ RequestExecutionLevel admin
 
 BrandingText "LOGAR Enterprise SIEM & Edge Forwarder"
 
-VIProductVersion "0.3.1.0"
+VIProductVersion "0.3.2.0"
 VIAddVersionKey "ProductName" "LOGAR Client"
 VIAddVersionKey "CompanyName" "LOGAR Security Systems"
 VIAddVersionKey "LegalCopyright" "© 2026 LOGAR Security Systems"
 VIAddVersionKey "FileDescription" "LOGAR Windows Edge Log Forwarder Setup"
-VIAddVersionKey "FileVersion" "0.3.1.0"
+VIAddVersionKey "FileVersion" "0.3.2.0"
-VIAddVersionKey "ProductVersion" "0.3.1.0"
+VIAddVersionKey "ProductVersion" "0.3.2.0"
 
 Var DATADIR
 

compilation/installer_server.iss

@@ -1,6 +1,6 @@
 [Setup]
 AppName=LOGAR Server
-AppVersion=0.3.1
+AppVersion=0.3.2
 AppPublisher=LOGAR Security Systems
 AppPublisherURL=https://logar.eibl.tech
 AppSupportURL=https://logar.eibl.tech
@@ -14,9 +14,9 @@ SolidCompression=yes
 WizardStyle=modern
 VersionInfoCompany=LOGAR Security Systems
 VersionInfoDescription=LOGAR Cloud Hub & TCP Ingestion Server Setup
-VersionInfoVersion=0.3.1.0
+VersionInfoVersion=0.3.2.0
 VersionInfoProductName=LOGAR Server
-VersionInfoProductVersion=0.3.1
+VersionInfoProductVersion=0.3.2
 
 [Files]
 Source: "..\dist\Server.exe"; DestDir: "{app}"; Flags: ignoreversion

compilation/installer_server.nsi

@@ -8,13 +8,13 @@ RequestExecutionLevel admin
 
 BrandingText "LOGAR Enterprise SIEM & Log Ingestion"
 
-VIProductVersion "0.3.1.0"
+VIProductVersion "0.3.2.0"
 VIAddVersionKey "ProductName" "LOGAR Server"
 VIAddVersionKey "CompanyName" "LOGAR Security Systems"
 VIAddVersionKey "LegalCopyright" "© 2026 LOGAR Security Systems"
 VIAddVersionKey "FileDescription" "LOGAR Cloud Hub & TCP Ingestion Server Setup"
-VIAddVersionKey "FileVersion" "0.3.1.0"
+VIAddVersionKey "FileVersion" "0.3.2.0"
-VIAddVersionKey "ProductVersion" "0.3.1.0"
+VIAddVersionKey "ProductVersion" "0.3.2.0"
 
 Var DATADIR