Software Updates¶

StormTunnel automatically keeps your application up to date with the latest features, security patches, and bug fixes through its built-in update system powered by Sparkle.

Overview¶

The update system provides:

• Automatic checking for new versions every 24 hours
• Cryptographic verification of all updates using EdDSA signatures
• Silent background downloads when enabled
• User control over when updates are installed
• Manual update checks anytime via the menu bar

Update Options¶

StormTunnel offers flexible update preferences to match your workflow:

Automatic Checking¶

When enabled, StormTunnel checks for updates every 24 hours in the background. You'll be notified when a new version is available.

Automatic update checking is enabled by default to ensure you receive important security updates.

Automatic Downloads¶

When enabled alongside automatic checking, StormTunnel downloads updates in the background without interrupting your work.

What happens when a download completes:

1. A notification appears: "Update Ready to Install"
2. You see the version number and are asked: "Would you like to quit and install now?"
3. Two options are presented:
   • Install and Relaunch - Quit the app, install the update, and relaunch automatically
   • Later - Defer installation until you quit the app manually

Enable both automatic checking and downloading for a seamless update experience. You'll always be notified before installation, giving you control over when to update.

Checking for Updates Manually¶

You can check for updates anytime without waiting for the automatic check:

1. Open the StormTunnel menu (in the menu bar)
2. Select Check for Updates...
3. If an update is available, you'll see a dialog with:
   • Version number
   • Release notes
   • Download size
   • "Install and Relaunch" button

Or use the Settings window:

1. Open StormTunnel → Settings (Cmd+,)
2. Navigate to the Updates tab
3. Click Check for Updates Now

Update Security¶

StormTunnel takes update security seriously:

Cryptographic Verification¶

Every update is digitally signed using EdDSA (ed25519) cryptographic signatures. The app verifies each update before installation to ensure:

• ✅ The update comes from the official StormTunnel source
• ✅ The update hasn't been tampered with
• ✅ The update is newer than your current version

If an update fails signature verification, it will be rejected automatically and you'll see an error message. This is a security feature to protect you from malicious updates.

Apple Notarization¶

All releases are notarized by Apple, providing an additional layer of security through:

• Malware scanning by Apple
• Verification of Developer ID
• Gatekeeper approval

Secure Transport¶

• All updates are delivered over HTTPS (encrypted connections)
• Update feeds are served from updates.storm-tunnel.app
• No unencrypted update channels are supported

Update Settings¶

Configure update behavior in Settings → Updates:

The settings window also displays:

• Last check date - When the last update check was performed
• Check for Updates Now button - Trigger an immediate manual check

See Updates Settings Reference for detailed configuration options.

Update Process¶

Automatic Update Flow¶

When both automatic settings are enabled:

mermaid graph LR A[Background Check<br/>Every 24 Hours] --> B{Update<br/>Available?} B -->|No| A B -->|Yes| C[Download Silently] C --> D[Verify Signature] D -->|Valid| E[Show Popup] D -->|Invalid| F[Reject & Log Error] E -->|Install Now| G[Quit → Install → Relaunch] E -->|Later| H[Install on Next Quit]

Manual Update Flow¶

When you click "Check for Updates...":

mermaid graph LR A[User Clicks<br/>Check for Updates] --> B[Contact Update Server] B --> C{Update<br/>Available?} C -->|No| D[Show "Up to Date"] C -->|Yes| E[Show Update Dialog] E --> F{User<br/>Decision} F -->|Install| G[Download & Verify] F -->|Skip| H[Dismiss] G --> I[Quit → Install → Relaunch]

Version Information¶

Where to Find Your Version¶

Your current version is displayed in several places:

• About Window: StormTunnel → About StormTunnel
• Settings: Settings → License tab (at the bottom)
• Menu Bar: Hold Option while clicking the StormTunnel menu to see advanced info

Version Numbering¶

StormTunnel uses Semantic Versioning:

• Major.Minor.Patch (e.g., 1.2.3)
  • Major: Breaking changes or major new features
  • Minor: New features, backwards compatible
  • Patch: Bug fixes and small improvements

Release Channels¶

StormTunnel offers different release channels:

Stable (Default)¶

• Well-tested, production-ready releases
• Recommended for most users
• Updates every 2-4 weeks

What's in a Release?¶

Release notes are shown in the update dialog and typically include:

• 🎉 New features
• 🐛 Bug fixes
• 🔒 Security improvements
• Performance enhancements
• 📚 Documentation updates

Troubleshooting¶

"Unable to Check for Updates"¶

Possible causes:

• No internet connection
• Firewall blocking updates.storm-tunnel.app
• Update server temporarily unavailable

Solutions:

1. Check your internet connection
2. Verify firewall settings allow HTTPS traffic
3. Try again in a few minutes
4. If problem persists, download manually from storm-tunnel.app

"Update Verification Failed"¶

What this means:

The downloaded update could not be verified with a valid EdDSA signature.

Solutions:

1. Delete the partial download:

   rm -rf ~/Library/Caches/in.rs.olujic.StormTunnel/Updates/
   

2. Try checking for updates again
3. If problem persists, download manually from the official website

Never ignore signature verification failures. This could indicate:

- A corrupted download (most common)
- Network tampering (rare)
- A security issue with the update server (very rare)

Update Check Taking Too Long¶

Normal behavior:

• First check: Up to 10 seconds
• Subsequent checks: 2-5 seconds

If it takes longer:

1. Check your network speed
2. Verify DNS resolution: nslookup updates.storm-tunnel.app
3. Try manually: StormTunnel menu → Check for Updates

"Update Ready to Install" Not Appearing¶

If you have automatic downloads enabled but don't see the install prompt:

1. Verify both settings are enabled:
   • ✅ Automatically check for updates
   • ✅ Automatically download updates
2. Check logs: Settings → Advanced → View Logs
3. Look for: Update ready to install: X.X.X

Privacy¶

The update system respects your privacy:

• ✅ No personal data transmitted to update servers
• ✅ No analytics or tracking in update checks
• ✅ Only version number and macOS version sent (for compatibility)
• ✅ IP address logged temporarily for rate limiting only

Manual Installation¶

If automatic updates aren't working, you can always:

1. Download the latest DMG from storm-tunnel.app
2. Quit StormTunnel completely
3. Open the DMG and drag StormTunnel to Applications (replace existing)
4. Eject the DMG
5. Launch StormTunnel from Applications

Your settings, tunnels, and SSH keys are preserved during manual updates as they're stored separately in:

- Settings: `~/Library/Application Support/StormTunnel/`
- SSH Keys: Keychain

Best Practices¶

For Individual Users¶

• ✅ Keep automatic checking enabled
• ✅ Enable automatic downloads for convenience
• ✅ Update promptly when security releases are announced
• ❌ Don't postpone critical security updates

For Teams¶

• ✅ Test updates on a staging machine first
• ✅ Keep automatic checking enabled for awareness
• ❌ Consider disabling automatic downloads on production machines
• ✅ Schedule update installations during maintenance windows
• ✅ Document update procedures in runbooks

For Enterprise¶

• ✅ Use centralized update policies
• ✅ Test releases thoroughly before deployment
• ✅ Consider using a local update mirror
• ❌ Don't block updates.storm-tunnel.app in firewall
• ✅ Monitor update logs for compliance

Related Topics¶

• Updates Settings Reference - Detailed settings documentation
• License Management - License updates and activation
• Performance Optimization - Post-update performance tips

Support¶

Having trouble with updates?

• Email: [email protected]
• Community: GitHub Discussions
• 🐛 Bug Reports: GitHub Issues