That's intended. The widget detects hibernate/suspend and disconnects the VPN since internet gets killed anyways when that happens. When the computer wakes up, the widget detects that too and will reconnect the VPN if you were connected before the hibernate. If you weren't connected to the VPN before hibernate, it'll still set the DNS to the local DNSCrypt server (127.0.0.1), unless you have DNSCrypt disabled.
Latest widget build is v184.108.40.206, which fixes a small bug where when auto-updating the dnscrypt-resolvers.csv file, it would delete the openssl + openvpn .exe's too if also upgrading those.
There was a v220.127.116.11 that was on the web site for about a minute, but it was quickly removed because of a bug where the upgrade process broke due to a temporary directory not being created correctly. So if anyone downloaded it in the short time it was there, upgrade to v18.104.22.168.
Hashes for v22.214.171.124 are:
Included is the latest nodelist, dnscrypt resolvers, openssl, and openvpn.
As usual, the latest build can be found at https://cryptostorm.is/cryptostorm_setup.exe
Right now I'm trying to change the node list update code since it still does a simple/lazy grab of https://cryptostorm.nu/nodelist3.txt
, which means if cryptostorm.nu goes down or someone is able to do an HTTPS MitM against you, you won't be able to update your node list (or in the MiTM case, someone could point you to a malicious VPN server). I think a solution to that problem would be to only allow updating of the node list after connected to the VPN, so it would grab nodelist3.txt from a local copy stored on node itself, via the VPN tunnel. For people who don't have tokens yet, the feature would also work on Cryptofree.
And yes, I still plan on adding a killswitch function in the near future. If I can't get the code I'm working on now to play nicely with Windows, or if it's going to end up taking much longer than it already has, I'll most likely just slap together something using WFP or Windows Firewall. Not as efficient as I'd like, but it would be functional enough for most people.