Release notes for v2.4.0

doc/newsfragments/build-failure-mipsel-riscv.bugfix

@@ -1 +0,0 @@
-Fix build failure on mips*el and riscv64 architecture.

doc/newsfragments/client-certificate-checking.bugfix

@@ -1,7 +0,0 @@
-SECURITY ISSUE
-
-Barrier now supports client identity verification (fixes CVE-2021-42072, CVE-2021-42073).
-
-To support seamless upgrades from older versions of Barrier this is currently disabled by default.
-The feature can be enabled in the settings dialog. If enabled, older clients of Barrier will be
-rejected.

doc/newsfragments/client-send-certificate.feature

@@ -1 +0,0 @@
-Barrier client now sends certificate that the server can verify.

doc/newsfragments/configuration-reading-non-ascii-windows.bugfix

@@ -1 +0,0 @@
-Fixed reading of configuration on Windows when the paths contain non-ASCII characters (https://github.com/debauchee/barrier/issues/976, https://github.com/debauchee/barrier/issues/974, https://github.com/debauchee/barrier/issues/444).

doc/newsfragments/dont-use-openssl-cli.bugfix

@@ -1 +0,0 @@
-Barrier no longer uses openssl CLI tool for any operations and hooks into the openssl library directly.

doc/newsfragments/drop-target--option.feature

@@ -1 +0,0 @@
-Added `--drop-target` option that improves drag and drop support on Windows when Barrier is being run as a portable app.

doc/newsfragments/enable-crypto-by-default.feature

@@ -1,2 +0,0 @@
-The `--enable-crypto` command line option has been made the default to reduce chances of accidental security mishaps when configuring Barrier from command line.
-A new `--disable-crypto` command line option has been added to explicitly disable encryption.

doc/newsfragments/fingerprint-randomart.feature

@@ -1,3 +0,0 @@
-Added support for randomart images for easier comparison of SSL
-certificate fingerprints. The algorithm is identical to what
-OpenSSH uses.

doc/newsfragments/fix-x11-paste.bugfix

@@ -1 +0,0 @@
- Map more X11 clipboard MIME types to corresponding converters (https://github.com/debauchee/barrier/issues/344).

doc/newsfragments/gui-autostart.feature

@@ -1 +0,0 @@
-Implemented a configuration option for Server GUI auto-start.

doc/newsfragments/gui-hotkey-multiple-actions.bugfix

@@ -1 +0,0 @@
-Fixed setup of multiple actions associated with a hotkey.

doc/newsfragments/gui-hotkey-special-keys-handling.bugfix

@@ -1 +0,0 @@
-Fixed setup of hotkeys with special characters such as comma and semicolon (https://github.com/debauchee/barrier/issues/778).

doc/newsfragments/gui-keyboard-enabled-screen-layout.feature

@@ -1 +0,0 @@
-Made it possible to use keyboard instead of mouse to modify screen layout.

doc/newsfragments/keyboard-backlight-media-keys.feature

@@ -1 +0,0 @@
-Added support for keyboard backlight media keys

doc/newsfragments/muhenkan-eisu-toggle-keys.feature

@@ -1 +0,0 @@
-Added support for Eisu_toggle and Muhenkan keys

doc/newsfragments/non-ascii-character-transfer.bugfix

@@ -1 +0,0 @@
-Fixed transfer of non-ASCII characters coming from a Windows server in certain cases (https://github.com/debauchee/barrier/issues/527).

doc/newsfragments/profile-dir-option.feature

@@ -1 +0,0 @@
-Added `--profile-dir` option that allows to select custom profile directory.

doc/newsfragments/regenerate-broken-server-cert.bugfix

@@ -1 +0,0 @@
-Barrier will now regenerate server certificate if it's invalid instead of failing to launch (https://github.com/debauchee/barrier/issues/802)

doc/newsfragments/sha256-fingerprints.bugfix

@@ -1,4 +0,0 @@
-Barrier now uses SHA256 fingerprints for establishing security of encrypted SSL connections.
-After upgrading client to new version the existing server fingerprint will need to be approved again.
-Client and server will show both SHA1 and SHA256 server fingerprints to allow interoperability
-with older versions of Barrier.

doc/newsfragments/sun-keyboard-keys.bugfix

@@ -1 +0,0 @@
-Added support for additional keys on Sun Microsystems USB keyboards (https://github.com/debauchee/barrier/issues/784).

doc/newsfragments/translation_chinese.bugfix

@@ -1 +0,0 @@
-Updated Chinese translation.

doc/newsfragments/translation_slovak.bugfix

@@ -1 +0,0 @@
-Updated Slovak translation.

doc/newsfragments/use-theme-icons.bugfix

@@ -1 +0,0 @@
-Theme icons are now preferred to icons distributed together with Barrier (https://github.com/debauchee/barrier/issues/471).

doc/newsfragments/windows-service-path.bugfix

@@ -1 +0,0 @@
-Fixed incorrect setup of Barrier service path on Windows.

doc/release_notes/index.md

@@ -3,6 +3,68 @@ Release notes
 
 [comment]: <> (towncrier release notes start)
 
+Barrier `2.4.0` ( `2021-11-01` )
+================================
+
+Security fixes
+--------------
+
+- Barrier now supports client identity verification (fixes CVE-2021-42072, CVE-2021-42073).
+
+  Previously a malicious client could connect to Barrier server without any authentication and
+  send application-level messages. This made the attack surface of Barrier significantly larger.
+  Additionally, in case the malicious client got possession of a valid screen name by brute forcing
+  or other means it could modify the clipboard contents of the server.
+
+  To support seamless upgrades from older versions of Barrier this is currently disabled by default.
+  The feature can be enabled in the settings dialog. If enabled, older clients of Barrier will be
+  rejected.
+
+- Barrier now uses SHA256 fingerprints for establishing security of encrypted SSL connections.
+  After upgrading client to new version the existing server fingerprint will need to be approved
+  again. Client and server will show both SHA1 and SHA256 server fingerprints to allow
+  interoperability with older versions of Barrier.
+
+Bug fixes
+---------
+
+- Fixed build failure on mips*el and riscv64 architecture.
+- Fixed reading of configuration on Windows when the paths contain non-ASCII characters
+(https://github.com/debauchee/barrier/issues/976, https://github.com/debauchee/barrier/issues/974,
+ https://github.com/debauchee/barrier/issues/444).
+- Barrier no longer uses openssl CLI tool for any operations and hooks into the openssl library directly.
+- More X11 clipboard MIME types have been mapped to corresponding converters (https://github.com/debauchee/barrier/issues/344).
+- Fixed setup of multiple actions associated with a hotkey.
+- Fixed setup of hotkeys with special characters such as comma and semicolon
+  (https://github.com/debauchee/barrier/issues/778).
+- Fixed transfer of non-ASCII characters coming from a Windows server in certain cases
+ (https://github.com/debauchee/barrier/issues/527).
+- Barrier will now regenerate server certificate if it's invalid instead of failing to launch
+ (https://github.com/debauchee/barrier/issues/802)
+- Added support for additional keys on Sun Microsystems USB keyboards
+ (https://github.com/debauchee/barrier/issues/784).
+- Updated Chinese translation.
+- Updated Slovak translation.
+- Theme icons are now preferred to icons distributed together with Barrier
+ (https://github.com/debauchee/barrier/issues/471).
+- Fixed incorrect setup of Barrier service path on Windows.
+
+Features
+--------
+
+- Added `--drop-target` option that improves drag and drop support on Windows when Barrier is
+  being run as a portable app.
+- The `--enable-crypto` command line option has been made the default to reduce chances of
+  accidental security mishaps when configuring Barrier from command line.
+  A new `--disable-crypto` command line option has been added to explicitly disable encryption.
+- Added support for randomart images for easier comparison of SSL certificate fingerprints.
+  The algorithm is identical to what OpenSSH uses.
+- Implemented a configuration option for Server GUI auto-start.
+- Made it possible to use keyboard instead of mouse to modify screen layout.
+- Added support for keyboard backlight media keys
+- Added support for Eisu_toggle and Muhenkan keys
+- Added `--profile-dir` option that allows to select custom profile directory.
+
 Barrier `2.3.4` ( `2021-11-01` )
 ================================