472 Commits (080ea734c2c6da5a3b90cb25a383df53a44168cd)

Author	SHA1	Message	Date
luigi1111	18da0fa240	Merge pull request #5918 ... 4371791 epee: implement handshake timeout for SSL connections (xiphon)	5 years ago
luigi1111	ca975bcb79	Merge pull request #5917 ... 7d81850 epee: fix network timeouts in blocked_mode_client (xiphon)	5 years ago
luigi1111	15b9b4e047	Merge pull request #5910 ... 1b91beb abstract_tcp_server2: fix lingering connections (moneromooo-monero)	5 years ago
luigi1111	c6430f9dd0	Merge pull request #5893 ... Coverity fixes [3a81639, 1bd962d, 2825f07, d099658, d46f701, cd57a10] (anonimal)	5 years ago
moneromooo-monero	89339551a2	epee: misc_log_ex.h can now be used in C code ... use mfatal/merror/mwarning/minfo/mdebug/mtrace	5 years ago
xiphon	4371791977	epee: implement handshake timeout for SSL connections	5 years ago
xiphon	7d81850a46	epee: fix network timeouts in blocked_mode_client	5 years ago
moneromooo-monero	32f725d32f	Properly format multiline logs ... As a side effect, colouring on Windows should now work regardless of version	5 years ago
luigi1111	b4ac8969a8	Merge pull request #5898 ... 73f22c4 depends: fix MacOS build with Clang 3.7.1 (vtnerd)	5 years ago
moneromooo-monero	1b91bebd2e	abstract_tcp_server2: fix lingering connections ... Resetting the timer after shutdown was initiated would keep a reference to the object inside ASIO, which would keep the connection alive until the timer timed out	5 years ago
Lee Clagett	73f22c48e1	depends: fix MacOS build with Clang 3.7.1	5 years ago
anonimal	cd57a10c90	epee: abstract_tcp_server2: resolve CID 203919 (DC.WEAK_CRYPTO) ... The problem actually exists in two parts: 1. When sending chunks over a connection, if the queue size is greater than N, the seed is predictable across every monero node. >"If rand() is used before any calls to srand(), rand() behaves as if it was seeded with srand(1). Each time rand() is seeded with the same seed, it must produce the same sequence of values." 2. The CID speaks for itself: "'rand' should not be used for security-related applications, because linear congruential algorithms are too easy to break." *But* this is an area of contention. One could argue that a CSPRNG is warranted in order to fully mitigate any potential timing attacks based on crafting chunk responses. Others could argue that the existing LCG, or even an MTG, would suffice (if properly seeded). As a compromise, I've used an MTG with a full bit space. This should give a healthy balance of security and speed without relying on the existing crypto library (which I'm told might break on some systems since epee is not (shouldn't be) dependent upon the existing crypto library).	5 years ago
moneromooo-monero	bc1144e98e	Fix IP address serialization on big endian ... IP addresses are stored in network byte order even on little endian hosts	5 years ago
moneromooo-monero	516f7b9de0	storages: fix "portable" storage on big endian	5 years ago
moneromooo-monero	32c3834948	storages: fix writing varints on big endian	5 years ago
moneromooo-monero	bdda084651	epee: fix local/loopback checks on big endian ... IPv4 addresses are kept in network byte order in memory	5 years ago
luigi1111	1b93cb74bb	Merge pull request #5824 ... 2a41dc0 epee: fix connections not being properly closed in some instances (moneromooo-monero)	5 years ago
luigi1111	6fe281d315	Merge pull request #5814 ... bdcdb0e Remove unused code under WINDWOS_PLATFORM guard (tomsmeding) a84aa04 syncobj.h no longer defines shared_guard, so remove those define's (tomsmeding)	5 years ago
luigi1111	23547e6ed6	Merge pull request #5536 ... 1a367d6 simplewallet: lock console on inactivity (moneromooo-monero)	5 years ago
moneromooo-monero	1a367d6a22	simplewallet: lock console on inactivity	5 years ago
Tom Smeding	a84aa04d57	syncobj.h no longer defines shared_guard, so remove those define's ... The removed preprocessor macro's refer to types that are not defined in the file anymore; the only other place where shared_guard is defined is in winobj.h, which also defines the same macro's. Therefore, this change is safe. (Side note is that these macro's weren't used at all anyway, but that is orthogonal to the issue.)	5 years ago
Jethro Grassie	30779de39d	fix feature not introduced until boost 1.66	5 years ago
moneromooo-monero	2a41dc0453	epee: fix connections not being properly closed in some instances ... Fixed by Fixed by crCr62U0	5 years ago
moneromooo-monero	eeca5ca0c8	epee: support unicode in parsed strings	5 years ago
luigi1111	8a0711f2f2	Merge pull request #5674 ... fcbf7b3 p2p: propagate out peers limit to payload handler (moneromooo-monero) 098aadf p2p: close the right number of connections on setting max in/out peers (moneromooo-monero)	5 years ago
luigi1111	df064eaa36	Merge pull request #5649 ... a182df2 Bans for RPC connections (hyc)	5 years ago
Tom Smeding	bdcdb0e813	Remove unused code under WINDWOS_PLATFORM guard ... This code has been present, unchanged, ever since the original move to github in 2014 with commit 296ae46ed.	5 years ago
Thomas Winget	155475d971	Add IPv6 support ... new cli options (RPC ones also apply to wallet): --p2p-bind-ipv6-address (default = "::") --p2p-bind-port-ipv6 (default same as ipv4 port for given nettype) --rpc-bind-ipv6-address (default = "::1") --p2p-use-ipv6 (default false) --rpc-use-ipv6 (default false) --p2p-require-ipv4 (default true, if ipv4 bind fails and this is true, will not continue even if ipv6 bind successful) --rpc-require-ipv4 (default true, description as above) ipv6 addresses are to be specified as "[xx:xx:xx::xx:xx]:port" except in the cases of the cli args for bind address. For those the square braces can be omitted.	5 years ago
luigi1111	38e0e58a95	Merge pull request #5531 ... 9a6006b abstract_tcp_server2: move some things out of a lock (moneromooo-monero)	5 years ago
luigi1111	e579fe4ae0	Merge pull request #5530 ... 6abaaaa remove obsolete save_graph skeleton code (moneromooo-monero)	5 years ago
luigi1111	8774384ace	Merge pull request #5528 ... f61a315 net_utils: fix m_ssl type from time_t to bool (moneromooo-monero)	5 years ago
Lee Clagett	3b24b1d082	Added support for "noise" over I1P/Tor to mask Tx transmission.	5 years ago
Lee Clagett	bdfc63ae4d	Add ref-counted buffer byte_slice. Currently used for sending TCP data.	5 years ago
moneromooo-monero	65c4004963	allow blocking whole subnets	5 years ago
moneromooo-monero	098aadf084	p2p: close the right number of connections on setting max in/out peers	5 years ago
Howard Chu	a182df21d0	Bans for RPC connections ... Make bans control RPC sessions too. And auto-ban some bad requests. Drops HTTP connections whenever response code is 500.	5 years ago
moneromooo-monero	bc09766bf9	abstract_tcp_server2: improve DoS resistance	5 years ago
moneromooo-monero	39169ace09	epee: basic sanity check on allocation size from untrusted source ... Reported by guidov	5 years ago
luigi1111	9c0e9c40ec	Merge pull request #5618 ... b0a04f7 epee: fix SSL autodetect on reconnection (xiphon)	5 years ago
xiphon	b0a04f7d45	epee: fix SSL autodetect on reconnection	5 years ago
moneromooo-monero	35c20c4332	Fix GCC 9.1 build warnings ... GCC wants operator= aand copy ctor to be both defined, or neither	5 years ago
Lee Clagett	3544596f9f	Add ssl_options support to monerod's rpc mode.	5 years ago
moneromooo-monero	9a6006bad8	abstract_tcp_server2: move some things out of a lock ... The lock is meant for the network throttle object only, and this should help coverity get unconfused	5 years ago
moneromooo-monero	6abaaaa994	remove obsolete save_graph skeleton code	5 years ago
moneromooo-monero	f61a315e8b	net_utils: fix m_ssl type from time_t to bool	5 years ago
Riccardo Spagni	c0bc6d96cd	Merge pull request #5509 ... a62e0725 net_ssl: SSL config tweaks for compatibility and security (moneromooo-monero)	5 years ago
Riccardo Spagni	2d04b0e500	Merge pull request #5499 ... a4c4a2d8 blockchain: keep a rolling long term block weight median (moneromooo-monero)	5 years ago
moneromooo-monero	a62e072571	net_ssl: SSL config tweaks for compatibility and security ... add two RSA based ciphers for Windows/depends compatibility also enforce server cipher ordering also set ECDH to auto because vtnerd says it is good :) When built with the depends system, openssl does not include any cipher on the current whitelist, so add this one, which fixes the problem, and does seem sensible.	5 years ago
moneromooo-monero	a4c4a2d8aa	blockchain: keep a rolling long term block weight median	5 years ago
moneromooo-monero	5e0da6fb68	change SSL certificate fingerprint whitelisting from SHA1 to SHA-256 ... SHA1 is too close to bruteforceable	5 years ago