Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2019-03-05 | Update 2019 copyright | binaryFate | 1 | -1/+1 | |
2019-03-05 | epee: add SSL support | Martijn Otto | 1 | -0/+7 | |
RPC connections now have optional tranparent SSL. An optional private key and certificate file can be passed, using the --{rpc,daemon}-ssl-private-key and --{rpc,daemon}-ssl-certificate options. Those have as argument a path to a PEM format private private key and certificate, respectively. If not given, a temporary self signed certificate will be used. SSL can be enabled or disabled using --{rpc}-ssl, which accepts autodetect (default), disabled or enabled. Access can be restricted to particular certificates using the --rpc-ssl-allowed-certificates, which takes a list of paths to PEM encoded certificates. This can allow a wallet to connect to only the daemon they think they're connected to, by forcing SSL and listing the paths to the known good certificates. To generate long term certificates: openssl genrsa -out /tmp/KEY 4096 openssl req -new -key /tmp/KEY -out /tmp/REQ openssl x509 -req -days 999999 -sha256 -in /tmp/REQ -signkey /tmp/KEY -out /tmp/CERT /tmp/KEY is the private key, and /tmp/CERT is the certificate, both in PEM format. /tmp/REQ can be removed. Adjust the last command to set expiration date, etc, as needed. It doesn't make a whole lot of sense for monero anyway, since most servers will run with one time temporary self signed certificates anyway. SSL support is transparent, so all communication is done on the existing ports, with SSL autodetection. This means you can start using an SSL daemon now, but you should not enforce SSL yet or nothing will talk to you. | |||||
2018-09-12 | wipeable_string: add hex_to_pod function | moneromooo-monero | 1 | -0/+1 | |
2018-08-16 | wallet: wipe seed from memory where appropriate | moneromooo-monero | 1 | -0/+5 | |
2018-01-26 | Readd copyright starting date | xmr-eric | 1 | -1/+1 | |
2018-01-26 | Update 2018 copyright | xmr-eric | 1 | -1/+1 | |
2017-04-11 | Simplified the implementation and features of span | Lee Clagett | 1 | -20/+7 | |
2017-04-11 | Improvements for epee binary to hex functions: | Lee Clagett | 1 | -31/+44 | |
- Performance improvements - Added `span` for zero-copy pointer+length arguments - Added `std::ostream` overload for direct writing to output buffers - Removal of unused `string_tools::buff_to_hex` | |||||
2017-02-27 | node_rpc_proxy: allow caching daemon RPC version | moneromooo-monero | 1 | -0/+2 | |
2017-02-27 | wallet: invalidate node proxy cache when reconnecting | moneromooo-monero | 1 | -0/+2 | |
2017-01-25 | Updates to epee HTTP client code | Lee Clagett | 1 | -5/+1 | |
- http_simple_client now uses std::chrono for timeouts - http_simple_client accepts timeouts per connect / invoke call - shortened names of epee http invoke functions - invoke command functions only take relative path, connection is not automatically performed | |||||
2017-01-16 | wallet: add a node RPC cache layer for simple RPC calls | moneromooo-monero | 1 | -34/+28 | |
Mostly getinfo and get_hard_fork_info, which are called pretty often. This speeds up transfers as a bonus. | |||||
2015-12-31 | updated copyright year | Riccardo Spagni | 1 | -1/+1 | |
2015-10-27 | common: const and init list pedantry | moneromooo-monero | 1 | -1/+2 | |
2015-05-31 | cleaning up, removing redundant files, renaming, fixing incorrect licenses | Riccardo Spagni | 1 | -0/+28 | |
2015-02-24 | Daemonize changes pulled in -- daemon builds | Thomas Winget | 1 | -0/+42 | |
many RPC functions added by the daemonize changes (and related changes on the upstream dev branch that were not merged) were commented out (apart from return). Other than that, this *should* work...at any rate, it builds, and that's something. |