rtty Files

Bug Fixes

• Verify TLS server identity

• Fix missing server hostname verification and apply the final certificate verification setting before creating TLS sessions. Verification is enabled by default; the explicit --insecure option remains available.

• Prevent stalled TLS reads

• Drain available TLS data on each read event so data buffered inside the TLS library is not left waiting for another socket event.

• Reject truncated terminal messages

• Validate message length before reading the session ID, preventing invalid parsing of incomplete terminal messages.

• Make terminal file transfers more reliable

• Improve transfer control, cancellation, and error reporting. Files uploaded from the browser to the device are written to temporary files and finalized only after successful receipt, without overwriting existing files. Canceled transfers clean up temporary files, and Ctrl+C restores terminal settings.

Improvements

• Allow startup without root privileges or the login program

• The client can now start and connect to the server as a non-root user or on systems without login. Shell sessions still require root privileges and the login program. Non-root operation skips writes to /var/run/rtty to avoid permission errors.

• Show average file transfer speed

• Terminal file transfer progress now displays average throughput, with total elapsed time included when the transfer completes.

• Simplify build dependencies

• Remove the unused libcrypt dependency, so its development package is no longer required to build the client.

New Features

• Serial port forwarding

• Add support for listing device serial ports and opening remote serial terminal sessions with configurable baud rate, data bits, stop bits, and parity.

• TCP port forwarding

• Add support for accessing TCP services reachable from connected devices, with flow control and TCP half-close handling.

Full Changelog: https://github.com/zhaojh329/rtty/compare/v9.1.0...v9.2.0

问题修复

• 修复 TLS 服务端身份校验

• 修复缺失的服务端主机名校验，并在创建 TLS 会话前应用最终的证书校验设置。默认启用校验，同时保留显式指定的 --insecure 选项。

• 避免 TLS 数据读取停滞

• 在每次读事件中读取所有当前可用的 TLS 数据，避免 TLS 库内部已缓存的数据滞留、等待下一次套接字事件。

• 拒绝不完整的终端消息

• 在读取会话 ID 前检查消息长度，避免对不完整的终端消息进行错误解析。

• 提升终端文件传输可靠性

• 改进传输控制、取消操作和错误反馈。从浏览器上传到设备的文件先写入临时文件，完整接收成功后再保存为目标文件，且不会覆盖已有文件。取消传输时清理临时文件，按 Ctrl+C 后恢复终端设置。

改进优化

• 支持非 root 用户及无 login 程序的环境启动

• 客户端现在可由非 root 用户启动，也可在未安装 login 的系统上启动并连接服务端。Shell 会话仍需 root 权限和 login 程序。非 root 运行时跳过写入 /var/run/rtty，避免权限错误。

• 显示文件平均传输速度

• 终端文件传输进度现在显示平均传输速度，并在传输完成时显示总耗时。

• 精简构建依赖

• 移除未使用的 libcrypt 依赖，构建客户端不再需要安装其开发包。

新功能

• 串口转发

• 支持列出设备串口并打开远程串口终端，可配置波特率、数据位、停止位和校验方式。

• TCP 端口转发

• 支持访问已连接设备可达的 TCP 服务，具备流量控制和 TCP 半关闭处理能力。

完整变更记录: https://github.com/zhaojh329/rtty/compare/v9.1.0...v9.2.0