ISL AlwaysOn 4.4.2332.54 for Windows, macOS and Linux (2024-01-30)

 

General Information

On 30th of January the following was released:

  • ISL AlwaysOn 4.4.2332.54 for Windows (release_date=2024-01-30, build=0f18ba3abd53f68aacbe5df5244c6664efc466de, platform=win32, os_version=0x06010000-0x7fffffff)
  • ISL AlwaysOn 4.4.2332.54 for macOS (release_date=2024-01-30,¬† build=0f18ba3abd53f68aacbe5df5244c6664efc466de, platform=mac, os_version=0x0a0e00-0x1bffff)
  • ISL AlwaysOn 4.4.2332.54 for Linux (release_date=2024-01-30, build=0f18ba3abd53f68aacbe5df5244c6664efc466de, platform=linux64, os_version=0x030a000000021100-0xffffffffffffffff)

 Important: Minimal requirement version for ISL AlwaysOn on Linux was raised to linux version 3.10 and glibc 2.17.

All updates have release date set to 2024-01-30. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.

Upgrading to new version

Hosted service users please check Upgrading Hosted Service.

Server license users please check Upgrading Server License.

Improvements

ISL AlwaysOn - Desktop - Split isl_aon::CtrlConnection class to hefa CtrlConnection and qt CtrlConnection (SPECIAL) [ISLALWAYSON-1779] More

Description

Split isl_aon::Connection class to isl_aon::impl::Connection that contains no Qt code and isl_aon::Connection that extends the impl version. Timers and signals in impl version have been replaced with hefa alternatives.

ISL AlwaysOn - Desktop - Move AlwaysOn build to VS 2019 (SPECIAL) [ISLALWAYSON-1805] More

Description

The build of ISL AlwaysOn was moved to VS 2019.

ISL AlwaysOn - Desktop - Raise QT to 5.15.11 and raise OS version requirement on Linux (SPECIAL) [ISLALWAYSON-1819] More

Description

QT version was raised to 5.15.11 in ISL AlwaysOn application. Additionally minimal requirement version for ISL AlwaysOn on Linux was raised to linux version 3.10 and glibc 2.17.

ISL AlwaysOn - Desktop - Code sign build time executables using new codesign certificate (SPECIAL) [ISLALWAYSON-1855] More

Description

Code sign build time executables will now use new Digicert certificate with validity from 2023 to 2026.

ISL AlwaysOn - Desktop - Upgrade mbedtls to 2.28.5 (SECURITY) [ISLALWAYSON-1827] More

Description

MbedTLS was upgraded to version 2.28.5.

ISL AlwaysOn - Desktop - Unify tray cmd lines (FEATURE) [ISLALWAYSON-1544] More

Description

ISLAlwaysOnTray process on Windows will now expect tray as first command line parameter - same as on other platforms.

ISL AlwaysOn - Desktop - Remove monitor process on Windows (FEATURE) [ISLALWAYSON-1669] More

Description

Starting of ISL Light Fast, ISL Light Client and tray process will not be started by ISL AlwaysOn and not through ISL AlwaysOn monitor. ISL AlwaysOn now uses issc daemon v2 for this. This improves security, since we removed one local pipe that was used by old ISL AlwaysOn Monitor to report status of started processes.

ISL AlwaysOn - Desktop - Switch to qt utils flags (FEATURE) [ISLALWAYSON-1714] More

Description

Implementation of flags was moved to QtUtils. Now the implementation is similar in all client programs. Flags dialog is opened with CTRL+SHIFT+F key sequence in settings dialog.

ISL AlwaysOn - Desktop - Use direct connection on ISL AlwaysOn (FEATURE) [ISLALWAYSON-1751] More

Description

ISL AlwaysOn now supports using direct connection. This direct connection only uses TCP.

ISL AlwaysOn - Desktop - Executable LZMA2 support with compression dictionary (FEATURE) [ISLALWAYSON-1777] More

Description

LZMA2 compression is now used in ISL AlwaysOn and ISL AlwaysOn. LZMA2 compression dictionary for unauthenticated blob is now used on Windows.

ISL AlwaysOn - Desktop - Optimize windows exe configuration (FEATURE) [ISLALWAYSON-1795] More

Description

The ISL AlwaysOn program configuration is now split into static and dynamic. Dynamic configuration now fits into UA blob. Dictionary for command line arguments is now generated based on tags in the source code.

ISL AlwaysOn - Desktop - Add support for extra dict and extra file (FEATURE) [ISLALWAYSON-1800] More

Description

Support for extra file was added to launch. Extra file can be used to reduce size of unauthenticated blob. When extra file is used, UA blob only contains command to jump to extra file (has same name as main file but ends with ".extra"). Hashing algorithm in packet generator was upgraded from MD5 to SHA256.

ISL AlwaysOn - Desktop - Separate "my_hash" argument from main query when downloading ISL Light client (FEATURE) [ISLALWAYSON-1802] More

Description

When querying for program (download client option) my_hash value is now separated from main query.

ISL AlwaysOn - Desktop - Add support for incoming connection emails (FEATURE) [ISLALWAYSON-1804] More

Description

Added support for incoming connection email authorization. Users can now set that email authorization is required for a succesful remote connection. When enabled, an email will be sent to the list of recipients who will be able to allow or deny the connection.

ISL AlwaysOn - Desktop - Deploy, load and use libdatachannel (FEATURE) [ISLALWAYSON-1806] More

Description

ISL AlwaysOn is now deployed with the libdatachannel library.

ISL AlwaysOn - Desktop - Delay keyboard and mouse input until full focus (FEATURE) [ISLALWAYSON-1808] More

Description

When issc view is focused-in the mouse and keyboard inputs are delayed until clipboard is transferred.

ISL AlwaysOn - Desktop - Improve issc clipboard with more retries and logs (FEATURE) [ISLALWAYSON-1809] More

Description

The clipboard functionality was improved and will now perform more retries when the clipboard is not correctly read, transferred or written. In addition, logs will show more information about why the clipboard has failed.

ISL AlwaysOn - Desktop - Send scope_web flag on MUX netstart channel (FEATURE) [ISLALWAYSON-1815] More

Description

Support for ISL Network Start program download channel scope_web flag and user_agent was added. ISL Network Start will run in regular mode (scope_web = true). ISL Light and ISL Player will run downloads in stricter mode (scope_web = false).

ISL AlwaysOn - Desktop - Raise setup version (FEATURE) [ISLALWAYSON-1817] More

Description

Setup version was raised for ISL AlwaysOn due to added support for new password_md5 parameter. When this parameter is used, ISL AlwaysOn installer will check which version is currently installed. If it's a version without support for the new parameter it will force also upgrade of the ISL AlwaysOn application. If the version already supports the new parameter it will only perform the user grant.

ISL AlwaysOn - Desktop - Refactor receive init channel code (FEATURE) [ISLALWAYSON-1832] More

Description

Safe channel was refactored in order to implement support for direct connections functionality.

ISL AlwaysOn - Desktop - Enable direct connection (FEATURE) [ISLALWAYSON-1833] More

Description

ISL AlwaysOn now supports direct connections when direct connection is initiated from the operator side.

ISL AlwaysOn - Desktop - Increase the limit for notification timeout to Unattended Computers with notification set (FEATURE) [ISLALWAYSON-1843] More

Description

The limit for the Notification timeout setting found in ISL AlwaysOn settings under Desktop sharing section was increased from 120 seconds to 500 seconds (8 minutes 20 seconds).

ISL AlwaysOn - Desktop - Update implementation of ISSC Daemon and raise to version 3 (FEATURE) [ISLALWAYSON-1846] More

Description

The ISSC Daemon implementation was updated and is now v3. This has fixed a number of issues: - Console monitor is now called when session message is received - Daemon will start the agent with system token when no other options are specified - Control interface is now always created - also for run_cb interface The ISSC Daemon will be reinstalled to upgrade to version 3.

ISL AlwaysOn - Desktop - Expand hefa metrics with new ranges (FEATURE) [ISLALWAYSON-1853] More

Description

Metrics were expended with new ranges which allows having a better control of the measurement time and repetitions.

ISL AlwaysOn - Desktop - Upgrade LibXML2 to 2.9.14 and LibXSLT to 1.1.37 (FEATURE) [ISLALWAYSON-1856] More

Description

Library LibXML2 was updated to version 2.9.14 and library LibXSLT was updated to version 1.1.37.

ISL AlwaysOn - Desktop - Implement run once construct (FEATURE) [ISLALWAYSON-1857] More

Description

Added new run once construct.

ISL AlwaysOn - Desktop - Make hefa init simpler (FEATURE) [ISLALWAYSON-1859] More

Description

We have changed rec_mutex to be more resilient and will not need global init to work.

ISL AlwaysOn - Desktop - Upgrade libdatachannel (FEATURE) [ISLALWAYSON-1860] More

Description

The libdatachannel and it's dependencies were updated.

ISL AlwaysOn - Desktop - Update scalar, enum and persistent metrics (FEATURE) [ISLALWAYSON-1861] More

Description

Macro UMA_HISTOGRAM_ENUM_SAMPLE_EX now allows specifying the number of events to add. UMA_HISTOGRAM_SCALAR was also updated to have one bucket.

ISL AlwaysOn - Desktop - LZMA2 support (FEATURE) [ISLALWAYSON-1862] More

Description

Support for LZMA1 and LZMA2 compression was added to ISL AlwaysOn.

ISL AlwaysOn - Desktop - Expose direct connection options to settings (FEATURE) [ISLALWAYSON-1863] More

Description

The direct connection can be enabled/disabled through command line arguments. The command line argument for this is: --on-connect 'main?direct_connection=(true|false)'

ISL AlwaysOn - Desktop - Restart connection when direct connection setting change (FEATURE) [ISLALWAYSON-1865] More

Description

The connection will be restarted if direct connection settings change.

ISL AlwaysOn - Desktop - Fix ICE related connection issues (FEATURE) [ISLALWAYSON-1866] More

Description

The direct connection implementation was updated: - When direct connection is available and the quality is the same as with MUX connection, direct connection will be prefered - Broken signal will be called when ICE library does not call it - Fixed an issue where once the direct connection was disabled it was not possible to enable it - Fixed an issue where users experienced constant reconnections

ISL AlwaysOn - Desktop - Measure time metrics in specific scan type (FEATURE) [ISLALWAYSON-1868] More

Description

A time in seconds the session spends with a specific connection type will be now shown in histogram and sent to ISL Conference Proxy.

ISL AlwaysOn - Desktop - Add options to control ice by registry and environment (FEATURE) [ISLALWAYSON-1869] More

Description

The ice connection can now be disabled through the registry or the environment. Following options are available: - ice_allow ... set to false to disable all ice connections - ice_allow_host ... set to false to disable host ice connections - relay: ice_allow_relay ... set to false to disable relay ice connections - srflx: ice_allow_srflx ... set to false to disable srflx ice connections - prflx: ice_allow_prflx ... set to false to disable prflx ice connections - ice_server ... define ice server to be used

ISL AlwaysOn - Desktop - Manage direct connection ciphers (FEATURE) [ISLALWAYSON-1870] More

Description

Direct connection will now force DTLSv1.2 only. Used cipher suite will be displayed.

ISL AlwaysOn - Desktop - Raise signed format version for launchpkt (FEATURE) [ISLALWAYSON-1872] More

Description

Configuration and command line arguments are now written in the unauthenticated blob part of the executable. Since the size of unauthenticated blob is limited, if the data exceeds the limitation the old style of signing of application is used.

ISL AlwaysOn - Desktop - Send my_hash on MUX netstart channel (FEATURE) [ISLALWAYSON-1873] More

Description

"my_hash" argument is now separated from query in netstart "start-boot" command. "my_hash" is reinserted into query on ISL Conference Proxy if it supports new protocol ("my_md5" -> "my_hash"). When chunk that is already available in local cache is received it is now overwritten.

ISL AlwaysOn - Desktop - Share metrics in shared memory (FEATURE) [ISLALWAYSON-1876] More

Description

Metrics are now shared via shared memory. The metrics handle is reported via cmdline "-ipc-metrics".

ISL AlwaysOn - Desktop - Expose metrics api to plugins (FEATURE) [ISLALWAYSON-1877] More

Description

Plugins (file transfer, desktop, talk, ...) now use main applications metrics API. The metric are now also visible to main application.

ISL AlwaysOn - Desktop - Update direct connection manager (FEATURE) [ISLALWAYSON-1878] More

Description

Direct connection manager was reworked with following: - will be enabled/started by default - specific direct connection implementations (tcp, ice) are now allocated on demand - specific implementation packets are now cached if implementation is not available - added status that remote supports some kind of direct connection (remote_sent_ready) This enables us to enable/disable direct connection at any time. Before direct connection needed to be enable when session was established. Adding state (remote_sent_ready) enable us to distinguish if direct connections are available. Before the menu item was disabled if remote had direct connection disabled.

ISL AlwaysOn - Desktop - Force tele flush on session close (FEATURE) [ISLALWAYSON-1879] More

Description

When session ends the ISL AlwaysOn applications sends tele metrics information to ISL Conference Proxy. The metrics are part of session end (chat transcript) message. Before metrics was only sent during live session with pacing.

ISL AlwaysOn - Desktop - Update daemon to version 3 and use daemon on Windows (FEATURE) [ISLALWAYSON-1880] More

Description

ISSC daemon v2 was updated on windows. The following was fixed: - console monitor is now called when session message is received - daemon will start the agent with system token when no other options are specified - control interface is now always created - also for run_cb interface On Linux the following was improved: - session id is taken from ipc structure first and if empty old code path is taken We have also raised daemon version to 3. This will result in issc daemon being reinstalled. ISSC daemon is running when restart&resume is enabled. It is removed when no agent alive (10 minutes for ISL AlwaysOn and 7 days for ISL Light).

ISL AlwaysOn - Desktop - mark ICE prflex as host connection (FEATURE) [ISLALWAYSON-1888] More

Description

We have added detection of prflx ICE type. We also added metrics for unknown ICE type: ice.unknown. Other metrics were also updated, so prflx type is visible. We have also added prflx to settings type.

ISL AlwaysOn - Desktop - Check tags in STRICTv2 xml_sax_parser mode (DEFECT) [ISLALWAYSON-1746] More

Description

In previous version of ISL AlwaysOn in case users opened history of sessions and the file was corrupted, this resulted in crash of ISL AlwaysOn. A stricter parser for XML was added, so the application does no longer crash when opening a corrupted history file.

The defect was fixed.

ISL AlwaysOn - Desktop - Use visible name in light window title (DEFECT) [ISLALWAYSON-1803] More

Description

When connected to an ISL AlwaysOn computer, the connected user's username was displayed. This has been changed to show the user's full name. If full name is not available, it will then use alternatives - nickname, email and finally username.

The defect was fixed.

ISL AlwaysOn - Desktop - Add configuration static to package on MacOS (DEFECT) [ISLALWAYSON-1810] More

Description

ISLAlwaysOn installation on macOS failed in a beta version of the application. The issue was missing launch part in the program script. The launch part was added, application will now be correctly installed.

The defect was fixed.

ISL AlwaysOn - Desktop - System Information shows "Not Available" in the Monitors section on macOS Ventura (DEFECT) [ISLALWAYSON-1812] More

Description

In previous versions the monitors and storage values were incorrect when connected to a newer macOS computer. The API for checking is now redesigned, and the correct values should be shown.

The defect was fixed.

ISL AlwaysOn - Desktop - Change setting text for computer access with local consent (DEFECT) [ISLALWAYSON-1813] More

Description

Setting Allow computer access also with local user consent and no access password located in Desktop sharing section has been revised and changed to Allow computer access without an access password (local user consent required).

ISL AlwaysOn - Desktop - Simplify skip notification on logon screen (DEFECT) [ISLALWAYSON-1814] More

Description

ISL AlwaysOn notification for incoming connection was not skipped when screen is locked and not on logon screen which resulted in inability to connect to remote computer ( users also needed to have CAD sequence enabled by default when performing login ). Handling of locked screen was redesigned, incoming notification is now correctly skipped when screen is locked and user is not on logon screen.

The defect was fixed.

ISL AlwaysOn - Desktop - Fix windows page file usage in memory_status (DEFECT) [ISLALWAYSON-1821] More

Description

Obtaining memory status from API was fixed, so correct size of swap is shown.

The defect was fixed.

ISL AlwaysOn - Desktop - Secure HTTP header encoder (DEFECT) [ISLALWAYSON-1822] More

Description

HTTP response header encoder was improved to reject newline injections. No injections are known to exist at this time, all header usage is done through sanitized or properly encoded APIs.

ISL AlwaysOn - Desktop - Pack glibc in os_version (DEFECT) [ISLALWAYSON-1823] More

Description

Linux programs will now by default include kernel and glibc version packed into os_version header unless explicitly disabled. New os_version will be sent to ISL Conference Proxy in program download requests and compatible program will be selected.

ISL AlwaysOn - Desktop - Fix delay when waiting for grant access (DEFECT) [ISLALWAYSON-1824] More

Description

In case users used silent installer in a beta version of ISL AlwaysOn they could experience an issue with granting procedure not being executed. A delay was introduced when starting granting procedure, which resolves the issue and user grant is correctly performed.

The defect was fixed.

ISL AlwaysOn - Desktop - Style of application changed (DEFECT) [ISLALWAYSON-1825] More

Description

After upgrade of QT version, the interface changed on Windows and macOS. Forcing of style was added to the application so it looks the same as in previous versions.

The defect was fixed.

ISL AlwaysOn - Desktop - Start rptChannel paused (DEFECT) [ISLALWAYSON-1830] More

Description

When doing fast reconnects, rptSafeChannel sometimes missed first connection (reconnect) message. After this event the connection is deaf. When it happens, the connection idle (ping) is detected and new connection established in 30s.

The defect was fixed.

ISL AlwaysOn - Desktop - Send initial packet on reconnect (DEFECT) [ISLALWAYSON-1831] More

Description

The implementation of the session reconnect was improved and now only one version message is sent during the reconnect.

The defect was fixed.

ISL AlwaysOn - Desktop - Mark ping supported on pong (DEFECT) [ISLALWAYSON-1834] More

Description

Ping implementation in common library required for both sides to send ping, but ISL AlwaysOn did not send ping packets only pongs. The implementation was changed so pings are supported when pong is received.

ISL AlwaysOn - Desktop - Handle restart connection with schan (DEFECT) [ISLALWAYSON-1835] More

Description

Implementation of schan did not handle first restarted connection correctly. Handling of first restarted connection was redesigned. the defect was fixed.

ISL AlwaysOn - Desktop - HTML injection is possible in popup messages (DEFECT) [ISLALWAYSON-1836] More

Description

The access popup messages had an issue where the user defined access text was not escaped. The access messages were redesigned and are now correctly escaped.

The defect was fixed.

ISL AlwaysOn - Desktop - Remove passwords from ISL AlwaysOn log files (DEFECT) [ISLALWAYSON-1838] More

Description

ISL AlwaysOn logging was redesigned so that passwords in the log file will be replaced with a '*' character.

The defect was fixed.

ISL AlwaysOn - Desktop - No error message displayed in ISL AlwaysOn Access History when sessions.xml file has broken entries (DEFECT) [ISLALWAYSON-1840] More

Description

In case users had corrupted session.xml file which holds information about history of the session and opened History from ISL AlwaysOn application received empty history window without any error. Error handling was added, in case the file is corrupted users will be notified with an alert which will also show in which line it was detected that the file is corrupted.

The defect was fixed.

ISL AlwaysOn - Desktop - Default user message from customization is not escaped (DEFECT) [ISLALWAYSON-1845] More

Description

Users sometimes experienced an issue where the default user message was not escaped correctly. The functionality was redesigned and the issue is no longer reproducible.

The defect was fixed.

ISL AlwaysOn - Desktop - Unix function for get_this_dll_path on executable will not return full path (DEFECT) [ISLALWAYSON-1847] More

Description

The hefa function get_this_ddl_path would return relative path when called from library and not DLL on UNIX systems. Now, it correctly returns the absolute path.

The defect was fixed.

ISL AlwaysOn - Desktop - Call old uninstaller during upgrade (DEFECT) [ISLALWAYSON-1848] More

Description

The ISSC Daemon upgrade functionality was redesigned so that during upgrade of ISSC Daemon on macOS, if an old version is detected, the old version will first be removed through the uninstall command.

The defect was fixed.

ISL AlwaysOn - Desktop - Cannot transfer a file to AON machine using drag and drop into the viewer (DEFECT) [ISLALWAYSON-1849] More

Description

Users sometimes experienced an issue where they were not able to transfer a file to remote computer via ISL AlwaysOn session. The functionality was redesigned and the issue is no longer reproducible.

The defect was fixed.

ISL AlwaysOn - Desktop - Rename httpt port usage in autotransport (DEFECT) [ISLALWAYSON-1851] More

Description

The HTTP/HTTPS ports setting was renamed to 'Don't use direct connection'.

ISL AlwaysOn - Desktop - Remove unused issc_desktop executable (DEFECT) [ISLALWAYSON-1852] More

Description

The unused issc_desktop executable file was removed.

The defect was fixed.

ISL AlwaysOn - Desktop - Make refc_obj_class_strong safer to use (DEFECT) [ISLALWAYSON-1854] More

Description

In some cases some internal counters would not be updated leading to a memory leak. The object is now safer to use and should prevent memory leak.

The defect was fixed.

ISL AlwaysOn - Desktop - Fix schan crash when transport is abandoned (DEFECT) [ISLALWAYSON-1864] More

Description

In some cases application could crash when a certain connection was abandoned. Handling of abandoned connection was redesigned, application should no longer crash.

The defect was fixed.

ISL AlwaysOn - Desktop - Update schan ping implementation (DEFECT) [ISLALWAYSON-1867] More

Description

Switch from mux to new connection is delayed until mux has ping time. Connection ping handling was moved to connection class. The rchan protocol was also expanded to include flag that rchan ping is supported. Additionally the issue when "switch" command was send over ice connecting, but the the ice connection was already marked as obsolete was also fixed.

The defect was fixed.

ISL AlwaysOn - Desktop - Schan protection during reconnect (DEFECT) [ISLALWAYSON-1871] More

Description

In some cases a connection issue could occur when schan connection checker was executing during autotransport connection function which caused it to reconnect. Starting of direct connection check is now only performed after autotransport is in connected state.

The defect was fixed.

ISL AlwaysOn - Desktop - Beta version has problems with dark theme macOS 14 (DEFECT) [ISLALWAYSON-1874] More

Description

In case users used dark mode in ISL AlwaysOn the text was unreadable due to incorrect color set. Text remained black and was not seen due to dark mode. ISL AlwaysOn application now forces light theme, thus text is now correctly visible.

The defect was fixed.

ISL AlwaysOn - Desktop - Fix Linux font in 'About' screen (DEFECT) [ISLALWAYSON-1875] More

Description

About screen of ISL AlwaysOn on Linux was showing incorrect fonts. Fonts were changed in about screen to DejaVu Sans.

The defect was fixed.

ISL AlwaysOn - Desktop - Function for get_this_dll_path on executable will not return full path on unix (DEFECT) [ISLALWAYSON-1881] More

Description

Internal function get_this_dll_path, when called from binary and not dll on unix, returned relative path. Now the path is expanded to absolute path.

The defect was fixed.

ISL AlwaysOn - Desktop - Update Notifier Thread on Desktop Change (DEFECT) [ISLALWAYSON-1882] More

Description

Users sometimes experienced an issue where they were not able to use copy and paste between the operator and remote computer in ISL AlwaysOn sessions, when session was started to a locked computer. Functionality was redesigned and the issue is no longer reproducible.

The defect was fixed.

ISL AlwaysOn - Desktop - Fix connection notification confirm button on macOS and Linux (DEFECT) [ISLALWAYSON-1884] More

Description

On macOS and Linux when showing dialog for incoming email notification, the dialog had allow button which could confuse users since the confirmation of the connection still required to be confirmed via email. Button was changed to OK and an additional line breaks were added for the text above the button.

The defect was fixed.

ISL AlwaysOn - Desktop - Fix not granting the connection when message dialog times out and default action is set to allow (DEFECT) [ISLALWAYSON-1885] More

Description

Users sometimes experienced an issue where they were not able to connect to the remote computer if notification of upcoming connection was set. The functionality was redesigned and the issue is no longer reproducible.

The defect was fixed.

ISL AlwaysOn - Desktop - Notification of incoming connection has white text in highlighted button on macOS (DEFECT) [ISLALWAYSON-1886] More

Description

On certain macOS versions the buttons were not correctly displayed ( the button was missing color thus shown as white and the button text was also white which caused inability to see the value of the button) in notification dialog and grant dialog. Displaying of buttons was redesigned, buttons should now be displayed correctly.

The defect was fixed.

Tags: cross-platform compatibility, continuous connectivity

Was this article helpful?