VPNWorkbench — corresponding source (GNU GPL v2)
============================================

Version: 2026.9.68

VPNWorkbench bundles and links strongSwan (https://www.strongswan.org/), dnsmasq
(https://thekelleys.org.uk/dnsmasq/doc.html), and OpenVPN
(https://openvpn.net/community-downloads/), all licensed under the GNU General
Public License, version 2. This archive contains the source of VPNWorkbench itself
and its build system. The source for the bundled strongSwan, OpenSSL, dnsmasq,
and OpenVPN is offered separately (see below).

Contents
--------
  project.yml, Makefile, Scripts/   Build system (XcodeGen + xcodebuild + the
                                    OpenSSL/strongSwan build scripts).
  VPNWorkbench/, VPNWorkbenchHelper/,        VPNWorkbench application + privileged helper +
  Shared/, CVici/                    shared code.

Bundled third-party source (offered, not included here)
--------------------------------------------------------
VPNWorkbench ships unmodified upstream releases of strongSwan, OpenSSL, dnsmasq, and
OpenVPN, built by the scripts in Scripts/ with no source patches. The exact
releases bundled in this version are:

  strongswan-6.0.7.tar.gz
    SHA-256: b58266a437f054fbdba90db4555e92248ed80be383ca7dc903e681e24ac1f852
  openssl-3.6.2.tar.gz
    SHA-256: aaf51a1fe064384f811daeaeb4ec4dce7340ec8bd893027eee676af31e83a04f
  dnsmasq-2.90.tar.gz
    SHA-256: 8f6666b542403b5ee7ccce66ea73a4a51cf19dd49392aaccd37231a2c51b303b
  openvpn-2.7.7.tar.gz
    SHA-256: 3ab8f48fd6c26d49ba2333a092433949afdb5c85c0e6a1ff265784fbc04a2463

WRITTEN OFFER: For at least three (3) years from the date you received this
software, Juvex Oy will provide, to any third party, a complete machine-readable
copy of the corresponding source code for the strongSwan, OpenSSL, dnsmasq, and
OpenVPN releases identified above, for no more than the cost of physically
performing the distribution. Request it from: source@juvex.fi

The identical releases are also published upstream as a convenience — verify the
SHA-256 above:
  strongSwan: https://download.strongswan.org/
  OpenSSL:    https://www.openssl.org/source/
  dnsmasq:    https://www.thekelleys.org.uk/dnsmasq/
  OpenVPN:    https://build.openvpn.net/downloads/releases/

Licenses
--------
  strongSwan:   GNU GPL v2 (with an OpenSSL/LGPL linking exception) — see
                LICENSE / COPYING inside the strongSwan release.
  dnsmasq:      GNU GPL v2 — see COPYING inside the dnsmasq release.
  OpenVPN:      GNU GPL v2 — see COPYRIGHT.GPL inside the OpenVPN release. The
                app bundle carries its LICENSE file at
                Contents/Resources/openvpn/LICENSE.
  OpenSSL 3:    Apache License 2.0 — see LICENSE.txt inside the OpenSSL release.
  wireguard-go: MIT License (permissive — no written-offer obligation; not
                included in the GPL accounting above). The app bundle carries
                its LICENSE file at Contents/Resources/wireguard/LICENSE.
                Source: https://git.zx2c4.com/wireguard-go

Building
--------
  Requirements: Xcode, `brew install xcodegen`, an Apple Developer ID signing
  identity, and the strongSwan + OpenSSL + OpenVPN tarballs above placed in
  src/. The dnsmasq tarball is downloaded automatically on first build. Then:

      make build          # debug
      make build-release  # release

  `make build` builds OpenSSL, strongSwan, dnsmasq, and OpenVPN from src/ on
  first run. See README.md for the architecture and build details.

Note: signing identities, notarization credentials, and deployment hosts are
NOT included in this archive — substitute your own in the Makefile / project.yml.
