Download Latest Version ghostunnel-windows-amd64.exe (61.2 MB)
Email in envelope

Get an email when there's a new version of Ghostunnel

Home / v1.10.0
Name Modified Size InfoDownloads / Week
Parent folder
ghostunnel-darwin-amd64 2026-04-29 45.3 MB
0
ghostunnel-linux-amd64 2026-04-29 43.0 MB
0
ghostunnel-windows-amd64.exe 2026-04-29 59.0 MB
0
ghostunnel-darwin-arm64 2026-04-29 42.3 MB
0
ghostunnel-darwin-universal 2026-04-29 87.6 MB
0
ghostunnel-linux-arm64 2026-04-29 40.3 MB
0
README.md 2026-04-29 2.2 kB
0
Version 1.10.0 source code.tar.gz 2026-04-29 13.3 MB
0
Version 1.10.0 source code.zip 2026-04-29 17.6 MB
0
Totals: 9 Items   348.3 MB 0

New Features

  • PROXY protocol v2 TLS metadata. New --proxy-protocol-mode flag for PROXY protocol v2 with optional TLS metadata TLVs (#705). Modes: conn (connection info only, same as the existing --proxy-protocol flag), tls (adds TLS version/ALPN/SNI), and tls-full (adds TLS metadata and client certificate).

Code Quality Changes

  • Native code correctness fixes. Landed a number of fixes in the macOS keychain and Windows certificate store code, identified through GitHub code scanning (CodeQL, Copilot Autofix) and local AI development tools. These include CFObject memory leaks in macOS CertificateChain, data races in macOS keychain lazy initialization, a C string leak in launchdSocket, a C array leak in getProviderParam on Windows, and incorrect certificate store search order on Windows (#656, [#694], [#699], [#704]).
  • Certloader safety improvements. Replaced unsafe.Pointer with atomic.Pointer[T] in certloader (#677), extracted shared baseCertificate struct to reduce duplication (#679), and improved error context in PKCS#11 code paths (#690).
  • Dependency cleanup. Removed the certigo dependency, switched to smallstep/pkcs7 (#664), and replaced github.com/pkg/errors with stdlib errors and fmt (#684). Various dependency upgrades via Dependabot.

Testing Improvements

  • Windows integration testing. The integration test suite can now run on Windows (#695), and we added a number of new unit and integration tests for better coverage of features like platform keychain identities.
  • Faster & better integration test suite. Parallelized integration tests with dynamic port allocation and improved timeout handling, significantly reducing test suite runtime (#662, [#703]). Skipped tests now report SKIP status with a reason (#696).
  • New unit and integration tests. Added unit and integration tests for keychain handling, certstore reload paths, and edge cases across multiple packages (#697, [#700], [#702]).

Other

  • Website. Launched project website on ghostunnel.dev and made comprehensive documentation improvements (#657, [#659], [#704], [#707]).
Source: README.md, updated 2026-04-29