Alexander Blair
a62f7dc573
Merge pull request #6182
...
e896cca8
2020-02-06 00:34:15 -08:00
Alexander Blair
8039fd4cab
Merge pull request #6143
...
6efeefbc
2020-01-16 17:46:13 -08:00
moneromooo-monero
e896cca86e
epee: reorder a couple init list fields to match declaration
...
This is a bug waiting to happen
2019-11-25 19:27:54 +00:00
moneromooo-monero
6efeefbca2
epee: set application/json MIME type on json errors
2019-11-15 19:39:20 +00:00
moneromooo-monero
3d649d528a
epee: close connection when the peer has done so
...
This fixes rapid reconnections failing as the peer hasn't yet
worked out the other side is gone, and will reject "duplicate"
connections until a timeout.
2019-11-11 20:05:24 +00:00
luigi1111
42d84ad35e
Merge pull request #6006
...
9f3be3b
2019-10-24 12:41:59 -05:00
xiphon
9f3be3baed
epee: use SO_REUSEADDR on non-Windows targets
2019-10-22 18:40:01 +00:00
luigi1111
6b58d6248a
Merge pull request #5996
...
23ba69e
2019-10-22 10:26:31 -05:00
luigi1111
18f62f89d8
Merge pull request #5986
...
1080136
2019-10-22 10:23:04 -05:00
xiphon
23ba69ec88
epee: fix SSL server handshake, run_one() can block, use poll_one()
2019-10-18 18:32:33 +00:00
luigi1111
7ec8d9640e
Merge pull request #5911
...
e48dcb7
2019-10-16 13:35:55 -05:00
moneromooo-monero
e48dcb7a01
levin: armour against some "should not happen" case
...
If adding a response handler after the protocol is released,
they could never be cancelled again, and would end up keeping
a ref that never goes away
2019-10-15 10:30:08 +00:00
luigi1111
8fcdf77d7b
Merge pull request #5947
...
c9cfbf7
2019-10-14 20:04:02 -05:00
luigi1111
4118e4b1e9
Merge pull request #5937
...
4b654f6
2019-10-14 18:08:47 -05:00
moneromooo-monero
10801362f4
abstract_tcp_server2: move "Trying to connect" from error to debug
...
and fix the message grammar
2019-10-14 14:15:21 +00:00
luigi1111
18da0fa240
Merge pull request #5918
...
4371791
2019-10-08 14:30:45 -05:00
luigi1111
ca975bcb79
Merge pull request #5917
...
7d81850
2019-10-08 14:28:50 -05:00
xiphon
c9cfbf7fb3
epee: tcp server - set SO_LINGER instead of SO_REUSEADDR option
2019-10-02 19:08:02 +00:00
luigi1111
15b9b4e047
Merge pull request #5910
...
1b91beb
2019-09-30 18:55:58 -05:00
luigi1111
c6430f9dd0
Merge pull request #5893
...
Coverity fixes [3a816391bd962d2825f07d099658d46f701cd57a10
2019-09-30 18:43:48 -05:00
moneromooo-monero
4b654f65a3
abstract_tcp_server2: log pointer, not contents, where appropriate
2019-09-27 15:15:32 +00:00
xiphon
4371791977
epee: implement handshake timeout for SSL connections
2019-09-17 22:21:16 +00:00
xiphon
7d81850a46
epee: fix network timeouts in blocked_mode_client
2019-09-16 18:55:36 +00:00
luigi1111
b4ac8969a8
Merge pull request #5898
...
73f22c4
2019-09-14 13:22:35 -05:00
moneromooo-monero
1b91bebd2e
abstract_tcp_server2: fix lingering connections
...
Resetting the timer after shutdown was initiated would keep
a reference to the object inside ASIO, which would keep the
connection alive until the timer timed out
2019-09-12 12:10:50 +00:00
Lee Clagett
73f22c48e1
depends: fix MacOS build with Clang 3.7.1
2019-09-08 22:49:11 +02:00
anonimal
cd57a10c90
epee: abstract_tcp_server2: resolve CID 203919 (DC.WEAK_CRYPTO)
...
The problem actually exists in two parts:
1. When sending chunks over a connection, if the queue size is
greater than N, the seed is predictable across every monero node.
>"If rand() is used before any calls to srand(), rand() behaves as if
it was seeded with srand(1). Each time rand() is seeded with the same seed, it
must produce the same sequence of values."
2. The CID speaks for itself: "'rand' should not be used for security-related
applications, because linear congruential algorithms are too easy to break."
*But* this is an area of contention.
One could argue that a CSPRNG is warranted in order to fully mitigate any
potential timing attacks based on crafting chunk responses. Others could argue
that the existing LCG, or even an MTG, would suffice (if properly seeded). As a
compromise, I've used an MTG with a full bit space. This should give a healthy
balance of security and speed without relying on the existing crypto library
(which I'm told might break on some systems since epee is not (shouldn't be)
dependent upon the existing crypto library).
2019-09-08 01:14:39 +00:00
moneromooo-monero
bc1144e98e
Fix IP address serialization on big endian
...
IP addresses are stored in network byte order even on little
endian hosts
2019-09-04 14:54:01 +00:00
moneromooo-monero
bdda084651
epee: fix local/loopback checks on big endian
...
IPv4 addresses are kept in network byte order in memory
2019-09-04 14:53:56 +00:00
luigi1111
1b93cb74bb
Merge pull request #5824
...
2a41dc0
2019-09-04 09:40:21 -05:00
moneromooo-monero
2a41dc0453
epee: fix connections not being properly closed in some instances
...
Fixed by Fixed by crCr62U0
2019-08-19 22:09:55 +00:00
luigi1111
8a0711f2f2
Merge pull request #5674
...
fcbf7b3098aadf
2019-08-15 17:22:39 -05:00
luigi1111
df064eaa36
Merge pull request #5649
...
a182df2
2019-08-15 17:10:49 -05:00
Thomas Winget
155475d971
Add IPv6 support
...
new cli options (RPC ones also apply to wallet):
--p2p-bind-ipv6-address (default = "::")
--p2p-bind-port-ipv6 (default same as ipv4 port for given nettype)
--rpc-bind-ipv6-address (default = "::1")
--p2p-use-ipv6 (default false)
--rpc-use-ipv6 (default false)
--p2p-require-ipv4 (default true, if ipv4 bind fails and this is
true, will not continue even if ipv6 bind
successful)
--rpc-require-ipv4 (default true, description as above)
ipv6 addresses are to be specified as "[xx:xx:xx::xx:xx]:port" except
in the cases of the cli args for bind address. For those the square
braces can be omitted.
2019-07-31 20:04:57 -04:00
luigi1111
38e0e58a95
Merge pull request #5531
...
9a6006b
2019-07-24 14:08:52 -05:00
luigi1111
e579fe4ae0
Merge pull request #5530
...
6abaaaa
2019-07-24 14:07:29 -05:00
luigi1111
8774384ace
Merge pull request #5528
...
f61a315
2019-07-24 14:05:18 -05:00
Lee Clagett
3b24b1d082
Added support for "noise" over I1P/Tor to mask Tx transmission.
2019-07-17 14:22:37 +00:00
Lee Clagett
bdfc63ae4d
Add ref-counted buffer byte_slice. Currently used for sending TCP data.
2019-07-16 16:30:35 +00:00
Jethro Grassie
30779de39d
fix feature not introduced until boost 1.66
2019-08-20 01:06:59 -04:00
moneromooo-monero
65c4004963
allow blocking whole subnets
2019-07-16 11:35:53 +00:00
moneromooo-monero
098aadf084
p2p: close the right number of connections on setting max in/out peers
2019-06-19 11:49:36 +00:00
Howard Chu
a182df21d0
Bans for RPC connections
...
Make bans control RPC sessions too. And auto-ban some bad requests.
Drops HTTP connections whenever response code is 500.
2019-06-16 11:38:08 +01:00
moneromooo-monero
bc09766bf9
abstract_tcp_server2: improve DoS resistance
2019-06-14 08:47:26 +00:00
luigi1111
9c0e9c40ec
Merge pull request #5618
...
b0a04f7
2019-06-11 18:15:48 -05:00
xiphon
b0a04f7d45
epee: fix SSL autodetect on reconnection
2019-06-10 10:40:16 +00:00
moneromooo-monero
35c20c4332
Fix GCC 9.1 build warnings
...
GCC wants operator= aand copy ctor to be both defined, or neither
2019-06-09 09:39:18 +00:00
Lee Clagett
3544596f9f
Add ssl_options support to monerod's rpc mode.
2019-05-22 00:09:11 -04:00
moneromooo-monero
9a6006bad8
abstract_tcp_server2: move some things out of a lock
...
The lock is meant for the network throttle object only,
and this should help coverity get unconfused
2019-05-10 14:18:11 +00:00
moneromooo-monero
6abaaaa994
remove obsolete save_graph skeleton code
2019-05-10 14:17:18 +00:00
