844 commits

Author	SHA1	Message	Date
luigi1111	cbec75ec31	Merge pull request #5892 ... ab2819a depends: attempt to fix readline (iDunk5400)	2019-09-24 10:34:59 -05:00
xiphon	4371791977	epee: implement handshake timeout for SSL connections	2019-09-17 22:21:16 +00:00
xiphon	7d81850a46	epee: fix network timeouts in blocked_mode_client	2019-09-16 18:55:36 +00:00
moneromooo-monero	32f725d32f	Properly format multiline logs ... As a side effect, colouring on Windows should now work regardless of version	2019-09-16 16:58:01 +00:00
luigi1111	b4ac8969a8	Merge pull request #5898 ... 73f22c4 depends: fix MacOS build with Clang 3.7.1 (vtnerd)	2019-09-14 13:22:35 -05:00
moneromooo-monero	1b91bebd2e	abstract_tcp_server2: fix lingering connections ... Resetting the timer after shutdown was initiated would keep a reference to the object inside ASIO, which would keep the connection alive until the timer timed out	2019-09-12 12:10:50 +00:00
Lee Clagett	73f22c48e1	depends: fix MacOS build with Clang 3.7.1	2019-09-08 22:49:11 +02:00
anonimal	cd57a10c90	epee: abstract_tcp_server2: resolve CID 203919 (DC.WEAK_CRYPTO) ... The problem actually exists in two parts: 1. When sending chunks over a connection, if the queue size is greater than N, the seed is predictable across every monero node. >"If rand() is used before any calls to srand(), rand() behaves as if it was seeded with srand(1). Each time rand() is seeded with the same seed, it must produce the same sequence of values." 2. The CID speaks for itself: "'rand' should not be used for security-related applications, because linear congruential algorithms are too easy to break." *But* this is an area of contention. One could argue that a CSPRNG is warranted in order to fully mitigate any potential timing attacks based on crafting chunk responses. Others could argue that the existing LCG, or even an MTG, would suffice (if properly seeded). As a compromise, I've used an MTG with a full bit space. This should give a healthy balance of security and speed without relying on the existing crypto library (which I'm told might break on some systems since epee is not (shouldn't be) dependent upon the existing crypto library).	2019-09-08 01:14:39 +00:00
iDunk5400	ab2819a365	depends: attempt to fix readline ... Make readline actually compile, and make ncurses use existing terminfo data (if available).	2019-09-07 22:02:11 +02:00
anonimal	2825f07d95	epee: connection_basic: resolve CID 203916 (UNINIT_CTOR)	2019-09-06 23:18:00 +00:00
anonimal	3a816398b3	epee: connection_basic: resolve CID 203920 (UNINIT_CTOR)	2019-09-06 22:48:16 +00:00
moneromooo-monero	bc1144e98e	Fix IP address serialization on big endian ... IP addresses are stored in network byte order even on little endian hosts	2019-09-04 14:54:01 +00:00
moneromooo-monero	516f7b9de0	storages: fix "portable" storage on big endian	2019-09-04 14:53:57 +00:00
moneromooo-monero	32c3834948	storages: fix writing varints on big endian	2019-09-04 14:53:57 +00:00
moneromooo-monero	bdda084651	epee: fix local/loopback checks on big endian ... IPv4 addresses are kept in network byte order in memory	2019-09-04 14:53:56 +00:00
luigi1111	1b93cb74bb	Merge pull request #5824 ... 2a41dc0 epee: fix connections not being properly closed in some instances (moneromooo-monero)	2019-09-04 09:40:21 -05:00
luigi1111	6fe281d315	Merge pull request #5814 ... bdcdb0e Remove unused code under WINDWOS_PLATFORM guard (tomsmeding) a84aa04 syncobj.h no longer defines shared_guard, so remove those define's (tomsmeding)	2019-09-04 09:30:29 -05:00
luigi1111	23547e6ed6	Merge pull request #5536 ... 1a367d6 simplewallet: lock console on inactivity (moneromooo-monero)	2019-09-04 09:18:38 -05:00
moneromooo-monero	1a367d6a22	simplewallet: lock console on inactivity	2019-08-28 19:01:48 +00:00
Tom Smeding	a84aa04d57	syncobj.h no longer defines shared_guard, so remove those define's ... The removed preprocessor macro's refer to types that are not defined in the file anymore; the only other place where shared_guard is defined is in winobj.h, which also defines the same macro's. Therefore, this change is safe. (Side note is that these macro's weren't used at all anyway, but that is orthogonal to the issue.)	2019-08-23 08:42:36 +02:00
Jethro Grassie	30779de39d	fix feature not introduced until boost 1.66	2019-08-20 01:06:59 -04:00
moneromooo-monero	2a41dc0453	epee: fix connections not being properly closed in some instances ... Fixed by Fixed by crCr62U0	2019-08-19 22:09:55 +00:00
moneromooo-monero	eeca5ca0c8	epee: support unicode in parsed strings	2019-08-16 17:06:03 +00:00
luigi1111	8a0711f2f2	Merge pull request #5674 ... fcbf7b3 p2p: propagate out peers limit to payload handler (moneromooo-monero) 098aadf p2p: close the right number of connections on setting max in/out peers (moneromooo-monero)	2019-08-15 17:22:39 -05:00
luigi1111	df064eaa36	Merge pull request #5649 ... a182df2 Bans for RPC connections (hyc)	2019-08-15 17:10:49 -05:00
Tom Smeding	bdcdb0e813	Remove unused code under WINDWOS_PLATFORM guard ... This code has been present, unchanged, ever since the original move to github in 2014 with commit 296ae46ed.	2019-08-15 14:57:27 +02:00
Thomas Winget	155475d971	Add IPv6 support ... new cli options (RPC ones also apply to wallet): --p2p-bind-ipv6-address (default = "::") --p2p-bind-port-ipv6 (default same as ipv4 port for given nettype) --rpc-bind-ipv6-address (default = "::1") --p2p-use-ipv6 (default false) --rpc-use-ipv6 (default false) --p2p-require-ipv4 (default true, if ipv4 bind fails and this is true, will not continue even if ipv6 bind successful) --rpc-require-ipv4 (default true, description as above) ipv6 addresses are to be specified as "[xx:xx:xx::xx:xx]:port" except in the cases of the cli args for bind address. For those the square braces can be omitted.	2019-07-31 20:04:57 -04:00
luigi1111	38e0e58a95	Merge pull request #5531 ... 9a6006b abstract_tcp_server2: move some things out of a lock (moneromooo-monero)	2019-07-24 14:08:52 -05:00
luigi1111	e579fe4ae0	Merge pull request #5530 ... 6abaaaa remove obsolete save_graph skeleton code (moneromooo-monero)	2019-07-24 14:07:29 -05:00
luigi1111	8774384ace	Merge pull request #5528 ... f61a315 net_utils: fix m_ssl type from time_t to bool (moneromooo-monero)	2019-07-24 14:05:18 -05:00
Lee Clagett	3b24b1d082	Added support for "noise" over I1P/Tor to mask Tx transmission.	2019-07-17 14:22:37 +00:00
Lee Clagett	bdfc63ae4d	Add ref-counted buffer byte_slice. Currently used for sending TCP data.	2019-07-16 16:30:35 +00:00
moneromooo-monero	65c4004963	allow blocking whole subnets	2019-07-16 11:35:53 +00:00
moneromooo-monero	098aadf084	p2p: close the right number of connections on setting max in/out peers	2019-06-19 11:49:36 +00:00
Howard Chu	a182df21d0	Bans for RPC connections ... Make bans control RPC sessions too. And auto-ban some bad requests. Drops HTTP connections whenever response code is 500.	2019-06-16 11:38:08 +01:00
moneromooo-monero	0564da5fdc	ensure no NULL is passed to memcpy ... NULL is valid when size is 0, but memcpy uses nonnull attributes, so let's not poke the bear	2019-06-14 08:47:29 +00:00
moneromooo-monero	bc09766bf9	abstract_tcp_server2: improve DoS resistance	2019-06-14 08:47:26 +00:00
moneromooo-monero	39169ace09	epee: basic sanity check on allocation size from untrusted source ... Reported by guidov	2019-06-14 08:47:01 +00:00
luigi1111	9c0e9c40ec	Merge pull request #5618 ... b0a04f7 epee: fix SSL autodetect on reconnection (xiphon)	2019-06-11 18:15:48 -05:00
xiphon	b0a04f7d45	epee: fix SSL autodetect on reconnection	2019-06-10 10:40:16 +00:00
moneromooo-monero	35c20c4332	Fix GCC 9.1 build warnings ... GCC wants operator= aand copy ctor to be both defined, or neither	2019-06-09 09:39:18 +00:00
Lee Clagett	3544596f9f	Add ssl_options support to monerod's rpc mode.	2019-05-22 00:09:11 -04:00
luigi1111	14723fc6e7	Merge pull request #5527 ... 9a7a453 net_ssl: free certs after setting them up (moneromooo-monero)	2019-05-14 15:55:25 -05:00
luigi1111	1fc1c7318c	Merge pull request #5519 ... b8b957d cmake: fix incorrect hint for OPENSSL_ROOT_DIR (moneromooo-monero) 367bb80 mlog: default to not showing SSL errors (moneromooo-monero)	2019-05-14 15:52:32 -05:00
moneromooo-monero	9a6006bad8	abstract_tcp_server2: move some things out of a lock ... The lock is meant for the network throttle object only, and this should help coverity get unconfused	2019-05-10 14:18:11 +00:00
moneromooo-monero	6abaaaa994	remove obsolete save_graph skeleton code	2019-05-10 14:17:18 +00:00
moneromooo-monero	f61a315e8b	net_utils: fix m_ssl type from time_t to bool	2019-05-10 14:14:49 +00:00
moneromooo-monero	9a7a453f25	net_ssl: free certs after setting them up	2019-05-10 00:16:49 +00:00
Riccardo Spagni	c0bc6d96cd	Merge pull request #5509 ... a62e0725 net_ssl: SSL config tweaks for compatibility and security (moneromooo-monero)	2019-05-07 17:39:20 +02:00
Riccardo Spagni	2d04b0e500	Merge pull request #5499 ... a4c4a2d8 blockchain: keep a rolling long term block weight median (moneromooo-monero)	2019-05-07 17:31:45 +02:00