aboutsummaryrefslogtreecommitdiff
path: root/src (unfollow)
AgeCommit message (Collapse)AuthorFilesLines
2019-08-19daemon: fix print_pl only printing public zone peersmoneromooo-monero5-14/+30
2019-08-16wallet_api: add multi destination tx supportselsta3-48/+79
2019-08-15Replace std::random_shuffle with std::shuffleTom Smeding3-4/+4
According to [1], std::random_shuffle is deprecated in C++14 and removed in C++17. Since std::shuffle is available since C++11 as a replacement and monero already requires C++11, this is a good replacement. A cryptographically secure random number generator is used in all cases to prevent people from perhaps copying an insecure std::shuffle call over to a place where a secure one would be warranted. A form of defense-in-depth. [1]: https://en.cppreference.com/w/cpp/algorithm/random_shuffle
2019-07-31Add IPv6 supportThomas Winget12-46/+344
new cli options (RPC ones also apply to wallet): --p2p-bind-ipv6-address (default = "::") --p2p-bind-port-ipv6 (default same as ipv4 port for given nettype) --rpc-bind-ipv6-address (default = "::1") --p2p-use-ipv6 (default false) --rpc-use-ipv6 (default false) --p2p-require-ipv4 (default true, if ipv4 bind fails and this is true, will not continue even if ipv6 bind successful) --rpc-require-ipv4 (default true, description as above) ipv6 addresses are to be specified as "[xx:xx:xx::xx:xx]:port" except in the cases of the cli args for bind address. For those the square braces can be omitted.
2019-07-30daemon: print 128bit diff properlystoffu1-17/+40
2019-07-29functional_tests: add validate_address testsmoneromooo-monero1-3/+2
2019-07-29rpc: implement get_public_nodes commandxiphon3-1/+90
2019-07-28Fixed error preventing build of monero-guiNejcraft1-1/+3
get_attribute expects 2 values instead of 1
2019-07-18bump version to 0.14.1.2Riccardo Spagni1-1/+1
2019-07-18update checkpoints.dat hashRiccardo Spagni1-1/+1
2019-07-17prep for 0.14.1.1Riccardo Spagni2-1/+1
2019-07-16allow blocking whole subnetsmoneromooo-monero14-29/+293
2019-07-16p2p: store network address directly in blocked host listmoneromooo-monero4-12/+12
rather than their string representation
2019-07-15Remove unused txs member in NOTIFY_RESPONSE_GET_OBJECTDoyle3-18/+9
2019-07-09wallet_rpc_server: fix get_bulk_payments with short payment idsmoneromooo-monero1-0/+5
2019-07-08simplewallet: add restore_height commandthotbot2-0/+10
2019-07-08Fix incorrectly named binding for MMS send_signer_config commandtobtoht1-1/+1
send_message_config isn't used anywhere else in the code, and it is clear from the help command that it should be named send_signer_config.
2019-07-06Minor formatting fix in help set commandtobtoht1-1/+1
2019-07-05p2p: don't connect to more than one IP per class B if we canmoneromooo-monero1-11/+45
2019-07-04keccak: guard against misaligned memory accesses on ARMmoneromooo-monero1-3/+6
The code generated is exactly the same as the direct access one on x86_64
2019-07-04cryptonote_protocol: drop peers we can't download from when syncingmoneromooo-monero1-0/+5
Any peer that's behind us while syncing is useless to us (though not to them). This ensures that we don't get our peer slots filled with peers that we can't use. Once we've synced, we can connect to them and they can then sync off us if they want.
2019-07-04p2p: add a few missing connection close callsmoneromooo-monero1-2/+6
2019-07-04CryptonightR_JIT: fix return value on errorselene1-3/+3
The value was positive rather than zero, but the caller only checks for negative errors
2019-07-03Remove unnecessary m_check_txin_table, fix const correctnessMartijn Otto2-43/+12
2019-07-03rpc: get_block_template add optional extra_nonceJethro Grassie2-1/+27
Circumvents the need to create a new blockhashing blob when you already know the data you want to set in the extra_nonce (so use this instead of reserve_size).
2019-07-02simplewallet: optional all flag to export_outputs/export_key_imagesmoneromooo-monero3-13/+32
2019-07-02miner: fix --bg-mining-enable descriptionmoneromooo-monero1-1/+1
2019-07-01zmq: MacPorts latest fixJethro Grassie1-1/+1
2019-07-01wallet: do not print log settings when unsetmoneromooo-monero1-1/+4
Coverity 199721
2019-06-26p2p: don't forget pruning seed or public RPC port when updating peersmoneromooo-monero1-4/+16
Older nodes don't pass that information around
2019-06-25rpc headers fixMichal vel m@lbit1-1/+1
2019-06-22simplewallet: don't ask about mining when running a command linemoneromooo-monero1-1/+3
This is likely to be done via a script
2019-06-21p2p: add a reference to Cao, Tong et al. for the last_seen changesmoneromooo-monero1-0/+3
"Exploring the Monero Peer-to-Peer Network". https://eprint.iacr.org/2019/411
2019-06-21Remove Xiala.net from the list of dns resolverstobtoht1-1/+0
It is down permanently. See: https://xiala.net/ "Ende November 2018 werden alle Dienste von xiala.net abgeschaltet."
2019-06-20rpc: set sanity_check_failed to false when successfulstoffu1-0/+1
2019-06-19tx_sanity_check: relax the median check a lotmoneromooo-monero1-1/+1
we don't want to prevent bona fide txes, just obvious bad ones
2019-06-19p2p: close the right number of connections on setting max in/out peersmoneromooo-monero1-2/+2
2019-06-19p2p: propagate out peers limit to payload handlermoneromooo-monero1-0/+1
2019-06-19wallet_api: catch getTxKey exceptionDusan Klinec1-8/+17
- getTxKey method throws an exception, e.g., when user declines txKey export
2019-06-19wallet2: fix change subaddress mixup when sending pre rct outputsmoneromooo-monero1-0/+1
2019-06-17core: fix --prune-blockchain not pruning if no blockchain existsmoneromooo-monero1-1/+1
2019-06-17device: show address on device displayDusan Klinec11-6/+127
- Trezor: support for device address display (subaddress, integrated address) - Wallet::API support added - Simplewallet: - address device [<index>] - address new <label> // shows address on device also - integrated_address [device] <payment_id|address> // new optional "device" arg to display also on the device
2019-06-17device: tx_key caching fixed, store recovered txkeyDusan Klinec1-3/+11
2019-06-16Fix --restore-date usageHoward Chu1-1/+1
The wallet was ignoring --restore-height and --restore-date params and prompting for them again.
2019-06-16blockchain: silence an error getting blocks for pruned nodesmoneromooo-monero1-4/+8
This happens often when a pre-pruning node asks a pruned node for data it does not have
2019-06-16Bans for RPC connectionsHoward Chu3-0/+26
Make bans control RPC sessions too. And auto-ban some bad requests. Drops HTTP connections whenever response code is 500.
2019-06-15db_lmdb: commit pruning txn at checkpointsmoneromooo-monero1-1/+50
to avoid errors when the txn is too large
2019-06-14prep for 0.14.1 releaseRiccardo Spagni3-1/+2
2019-06-14rpc: restrict the recent cutoff size in restricted RPC modemoneromooo-monero1-0/+9
2019-06-14ensure no NULL is passed to memcpymoneromooo-monero2-3/+4
NULL is valid when size is 0, but memcpy uses nonnull attributes, so let's not poke the bear
2019-06-14serialization: check stream good flag at the endmoneromooo-monero3-6/+6
just in case
2019-06-14tree-hash: allocate variable memory on heap, not stackmoneromooo-monero1-5/+7
Large amounts might run out of stack Reported by guidov
2019-06-14cryptonote: throw on tx hash calculation errormoneromooo-monero1-3/+3
2019-06-14serialization: fail on read_varint errormoneromooo-monero1-1/+2
2019-06-14cryptonote_protocol: fix another potential P2P DoSmoneromooo-monero1-0/+15
When asking for txes in a fluffy transaction, one might ask for the same (large) tx many times
2019-06-14cryptonote_protocol: expand basic DoS protectionmoneromooo-monero2-4/+4
Count transactions as well
2019-06-14cryptonote_protocol_handler: prevent potential DoSanonimal2-0/+12
Essentially, one can send such a large amount of IDs that core exhausts all free memory. This issue can theoretically be exploited using very large CN blockchains, such as Monero. This is a partial fix. Thanks and credit given to CryptoNote author 'cryptozoidberg' for collaboration and the fix. Also thanks to 'moneromooo'. Referencing HackerOne report #506595.
2019-06-13core: do not complain about low block rate if disconnectedmoneromooo-monero1-1/+1
In that case, we'll still keep the "Monero is now disconnected from the network" near the end of the log
2019-06-12rpc: work around a GCC 7.4.0 (at least) bugmoneromooo-monero1-1/+3
In static member function ‘static boost::optional<cryptonote::rpc::output_distribution_data> cryptonote::rpc::RpcHandler::get_output_distribution(const std::function<bool(long unsigned int, long unsigned int, long unsigned int, long unsigned int&, std::vector<long unsigned int>&, long unsigned int&)>&, uint64_t, uint64_t, uint64_t, const std::function<crypto::hash(long unsigned int)>&, bool, uint64_t)’: cc1plus: warning: ‘void* __builtin_memset(void*, int, long unsigned int)’: specified size 18446744073709551536 exceeds maximum object size 9223372036854775807 [-Wstringop-overflow=]
2019-06-12tx_sanity_check: don't print an error when not enough outs to checkmoneromooo-monero1-1/+1
2019-06-12rpc: fix get_transactions getting v1 txes from the txpoolmoneromooo-monero1-1/+2
It would try to get their prunable hash, but v1 txes don't have one
2019-06-11Delete more include string.hYour Name1-1/+0
2019-06-10rpc: implement set_bootstrap_daemon methodxiphon3-27/+108
2019-06-09Fix GCC 9.1 build warningsmoneromooo-monero2-0/+15
GCC wants operator= aand copy ctor to be both defined, or neither
2019-06-09miner: fix double free of thread attributesston1th4-18/+8
issue: #5568
2019-06-08p2p: fix GCC 9.1 crashmoneromooo-monero1-4/+6
2019-06-06p2p: delay IGP probing on startupmoneromooo-monero3-7/+54
We might have external access without having to do this
2019-06-06simplewallet: print errors on exceptions creating walletsmoneromooo-monero1-4/+12
Exceptions would otherwise terminate the process silently
2019-06-04rpc: use ip address string representation for peer::host fieldxiphon1-1/+4
2019-06-02Remember RPC version on initial connectHoward Chu2-7/+13
Don't keep asking for it on an intact connection Wallet is too chatty over the wire
2019-06-01add a command line option to disable ZMQ serverJethro Grassie4-14/+28
2019-06-01daemon: add more chain specific info in alt_chain_infomoneromooo-monero5-29/+113
2019-05-31daemon: display peer address type in print_cnmoneromooo-monero4-0/+21
2019-05-30rpc: in/out peers can now return the setting's valuemoneromooo-monero7-21/+63
2019-05-30add cumulative difficulty to diff commandwowario1-0/+1
2019-05-29Unused private member m_miner_addressJesus Ramirez2-2/+0
2019-05-28core: update pruning if using --prune-blockchain on a pruned blockchainmoneromooo-monero1-1/+7
Avoids a massive amount of spurious warnings if the last update before the daemon exited was a while ago and the daemon was syncing
2019-05-27wallet_manager: omit redundant disconnect, drop unused variablexiphon2-4/+0
2019-05-26blockchain: do not try to pop blocks down to the genesis blockmoneromooo-monero1-0/+3
2019-05-25core: do not commit half constructed batch db txnmoneromooo-monero5-14/+51
2019-05-24blockchain_export: allow exporting blocks.dat format from prunedmoneromooo-monero1-1/+1
We don't need any of the pruned data for this
2019-05-24daemon: fix "never seen before" time span display for peersmoneromooo-monero1-1/+1
2019-05-22Fix allow any cert mode in wallet rpc when configured over rpcLee Clagett1-1/+5
2019-05-22Add ssl_options support to monerod's rpc mode.Lee Clagett13-140/+122
2019-05-21Fix configuration bug; wallet2 --daemon-ssl-allow-any-cert now works.Lee Clagett1-1/+4
2019-05-19Fix #5553Howard Chu1-1/+2
Make sure the tip hash still matches the cached block
2019-05-16wallet: add unlock_time details to show_transfersmoneromooo-monero5-7/+30
also add a note when receiving the tx, because the user might not notice the "XXX blocks to unlock" in the balance.
2019-05-12Made code block usage consistent across all .md filesRohaq1-1/+1
2019-05-11wallet: fix certificate fingerprint length checkmoneromooo-monero2-2/+2
Fixed by crCr62U0
2019-05-10password: do not use line input on windowsmoneromooo-monero1-5/+1
This keeps its builtin command editing away Thanks iDunk for testing on Windows
2019-05-10expose set/get walletcache attribute functionality in wallet apidsc3-0/+28
2019-05-10wallet_rpc_server: use original addresses in destinations in get_transfersmoneromooo-monero1-1/+9
And add them for pending transfers, where they were missing
2019-05-10remove obsolete save_graph skeleton codemoneromooo-monero11-161/+0
2019-05-09rpc: fail update RPC when running offlinemoneromooo-monero1-0/+7
2019-05-09daemon: add optional arguments to alt_chain_infomoneromooo-monero3-8/+47
>N limits display to alt chains with more than N blocks -N limits display to alt chains younger than N blocks
2019-05-09daemon: sort alt chains by heightmoneromooo-monero5-7/+9
2019-05-08blockchain: keep alternative blocks in LMDBmoneromooo-monero7-94/+379
Alternative blocks are cleared on startup unless --keep-alt-blocks is passed on the command line
2019-05-02wallet2: don't wait a day before using new version feesmoneromooo-monero1-2/+2
30 blocks should be more than enough to drain the txpool of transactions made with the old fee scheme
2019-05-02wallet: distinguish between empty and absent attributesmoneromooo-monero4-6/+16
2019-05-02error: fix compile error on windows with dependsmoneromooo-monero1-1/+1
state_not_recoverable is not defined there
2019-05-02blockchain: keep a rolling long term block weight medianmoneromooo-monero3-34/+37
2019-05-02wallet_rpc_server: use original addresses in destinations in get_transfersmoneromooo-monero1-1/+9
And add them for pending transfers, where they were missing
2019-05-01fix wide difficulty conversion with some versions of boostmoneromooo-monero7-15/+15
2019-05-01wallet2: reject standalone short payment IDs in monero: URI APImoneromooo-monero1-4/+2
2019-04-30mnemonics: fix 4 byte UTF-8 rewritingmoneromooo-monero1-1/+1
2019-04-30wallet_rpc_server: reject standalone short payment id in address bookmoneromooo-monero1-4/+4
2019-04-29remove unused codemoneromooo-monero5-12/+2
2019-04-29add a few checks where it seems appropriatemoneromooo-monero4-2/+5
2019-04-29wallet2: fix infinite loop picking outputs in corner casemoneromooo-monero1-2/+5
If we have fewer outputs available on the chain than what we require, but the output we're spending already has a ring, it would loop picking outputs randomly, but never find enough. Also tune logs for better debugging this kind of thing.
2019-04-26change SSL certificate fingerprint whitelisting from SHA1 to SHA-256moneromooo-monero3-0/+24
SHA1 is too close to bruteforceable
2019-04-25wallet_rpc_server: adding missing return on error in set_daemonmoneromooo-monero1-0/+1
2019-04-25wallet_rpc_server: return false on error in set_log_categoriesmoneromooo-monero1-1/+1
Reported by SmajeNz0
2019-04-25wallet_rpc_server: fix crash in validate_address if no wallet is loadedmoneromooo-monero1-1/+2
Reported by SmajeNz0
2019-04-25rpc: improve get_output_distributionmoneromooo-monero4-8/+34
It can now handle small reorgs without having to rescan the whole blockchain. Also add a test for it.
2019-04-25device/trezor: device sorting and filtering improvedDusan Klinec3-16/+115
- Trezor type detection refactored, T1 disabled (was enabled before which was a bug) - Sort connected devices by env TREZOR_PATH - Compatibility with Trezor ecosystem using TREZOR_PATH env var - Enables to pick particular Trezor to use in GUI as we don't have the multi-device selection yet - Dump all detected devices to log for better debugging / troubleshooting
2019-04-24p2p: do not send last_seen timestamp to peersmoneromooo-monero3-12/+30
This can be used for fingerprinting and working out the network topology. Instead of sending the first N (which are sorted by last seen time), we sent a random subset of the first N+N/5, which ensures reasonably recent peers are used, while preventing repeated calls from deducing new entries are peers the target node just connected to. The list is also randomly shuffled so the original set of timestamps cannot be approximated.
2019-04-24wallet2: default to trying to keep 5 outputs of 2+ moneromoneromooo-monero1-3/+13
In the case where previously a second unneeded output would be added to a transaction. This should help *some* of the cases where outputs are slowly being consolidated, leading to the whole balance being locked when sending monero.
2019-04-23consensus: from v12, enforce >= 2 outputsmoneromooo-monero7-0/+26
2019-04-23tx_sanity_check: relax uniqueness check a bitmoneromooo-monero1-2/+2
It triggers easily on testnet
2019-04-23wallet2: add missing "sanity check failed" reason messagemoneromooo-monero1-0/+2
2019-04-23wallet2: fix wrong change being recorded in sweep_allmoneromooo-monero1-2/+2
leading to the sanity check triggering
2019-04-23dns_checks: new helper program to check on DNSSEC lookupsmoneromooo-monero3-1/+172
2019-04-23daemonizer: add --non-interactive for windowsmoneromooo-monero1-1/+9
The RPC functional tests need it Thanks to iDunk for debugging/testing
2019-04-22wallet: fix key image computation signaling to the deviceDusan Klinec1-1/+1
2019-04-20wallet_rpc_server: add block_height and frozen to incoming_transfersmoneromooo-monero2-1/+7
2019-04-20hardfork: fix off by one updating fork index after poppingmoneromooo-monero1-3/+2
2019-04-18device/trezor: button request callback fixDusan Klinec1-1/+2
2019-04-18simplewallet: fix output representation offsetmoneromooo-monero2-3/+3
2019-04-18wallet2: "output lineup" fake out selectionmoneromooo-monero2-60/+72
Based on python code by sarang: https://github.com/SarangNoether/skunkworks/blob/outputs/outputs/simulate.py
2019-04-18Windows: fix a build error in MSYS2 with boost 1.70.0iDunk54001-0/+3
2019-04-18simplewallet: prompt when spending more than one old out in one txmoneromooo-monero2-3/+58
2019-04-17wallet_rpc_server: add unlocked field to incoming_transfers outputmoneromooo-monero2-1/+4
2019-04-17wallet_rpc_server: remove unused variablemoneromooo-monero1-2/+0
2019-04-17simplewallet: add the change amount to the prompt when lockingmoneromooo-monero1-1/+3
2019-04-17testdb: add override keyword where missingstoffu3-132/+100
and delete obsolete BlockchainBDB::get_tx_output_indices along the way
2019-04-16daemon: fix absolute/relative log file test for windowsmoneromooo-monero1-5/+1
2019-04-16wallet_rpc_server: set suggested_confirmations_threshold for pool txesmoneromooo-monero1-5/+3
2019-04-16wallet_rpc_server: add set_log_level/set_log_categoriesmoneromooo-monero4-1/+82
2019-04-16rpc: add a pruned bool to the prune_blockchain callmoneromooo-monero2-1/+4
2019-04-16simplewallet: add another warning about long payment idsmoneromooo-monero1-0/+8
2019-04-15daemon: remove debug infomoneromooo-monero1-1/+1
2019-04-15rpc: fix get_block_hashes.bin from wallet on pruned blockchainmoneromooo-monero4-14/+14
We want to get all blocks here, even pruned ones
2019-04-15blockchain: lock the blockchain while pruningmoneromooo-monero1-0/+4
2019-04-15wallet: new --offline optionmoneromooo-monero4-60/+115
It will avoid connecting to a daemon (so useful for cold signing using a RPC wallet), and not perform DNS queries.
2019-04-15wallet_rpc_server: remove unused codemoneromooo-monero1-5/+1
2019-04-15rpc: omit irrelevant fields for pool txes in gettransactionsmoneromooo-monero1-4/+10
2019-04-15rpc: add relayed in get_transaction outputmoneromooo-monero2-5/+11
2019-04-15rpc: set default log category in core_rpc_server.hmoneromooo-monero1-0/+3
2019-04-15Increment m_threads_active when mining thread startsDoyle1-0/+1
2019-04-14hardfork: remove "no hf version db" recreation checkmoneromooo-monero1-20/+2
This is now obsolete, and this removes the warning on startup on a new db that confuses some people
2019-04-14cryptonote_protocol: warn when the last connection goesmoneromooo-monero1-0/+2
2019-04-14daemon: fix ratio not being floating pointmoneromooo-monero1-1/+1
Coverity 197648
2019-04-14core_rpc_server: remove dummy assigning int to boolmoneromooo-monero1-3/+1
Coverity 197653
2019-04-14blockchain_db: fix db txn ending too earlymoneromooo-monero7-93/+123
The db txn in add_block ending caused the entire overarching batch txn to stop. Also add a new guard class so a db txn can be stopped in the face of exceptions. Also use a read only db txn in init when the db itself is read only, and do not save the max tx size in that case.
2019-04-13bulletproofs: cut down on keyV allocationsmoneromooo-monero1-29/+33
2019-04-13daemon: if a log file has a /, interpret it from the cwdmoneromooo-monero1-1/+6
rather than from data dir where it normally is. It makes things like --log-file ./foo.log behave as you'd expect.
2019-04-12rpc: new sanity check on relayed transactionsmoneromooo-monero6-0/+152
This will weed out some transactions with silly rings
2019-04-12simplewallet: fix warning about long payment id using the old optionmoneromooo-monero1-1/+1
2019-04-12wallet_rpc_server: fix inconsistent wallet caches on reloadmoneromooo-monero2-42/+58
Loading the same wallet as the currently loaded one would autosave the current state after loading it, leading to some kind of rollback effect. We now save before loading to avoid this. If loading fails, it means the current wallet will be saved (or maybe not, depending on where the failure occurs: most of the sanity checks occur before saving). There is a new autosave_current flag to open/restore calls so the (enabled by default) autosave can be skipped.
2019-04-12rpc.getblocktemplate: set reserved_offset to zero when reserve_size==0stoffu1-1/+4
2019-04-11p2p: fix integer overflow in host bansmoneromooo-monero1-1/+8
2019-04-11ringct: prevent use of full ringct signatures for more than one inputmoneromooo-monero2-0/+3
2019-04-11simplewallet: fix merge error with new welcome commandmoneromooo-monero1-1/+2
2019-04-11wallet2: update estimate_rct_tx_size for smaller rct proofsmoneromooo-monero1-1/+1
2019-04-11rpc: fix off by one in get_heightmoneromooo-monero1-0/+1
2019-04-11simplewallet: add a welcome/disclaimer message commandmoneromooo-monero2-0/+34
I saw one when landing on www.tribler.org, and it seemed like a good idea to have something similar, alongside some more general "what is monero" text.
2019-04-11functional_tests: add more blockchain related testsmoneromooo-monero9-73/+208
Related to emission, reorgs, getting tx data back, output distribution and histogram
2019-04-11simplewallet: new net_stats commandmoneromooo-monero4-0/+26
displays total sent and received bytes
2019-04-10device/trezor: env-configurable portsDusan Klinec2-21/+53
2019-04-10wallet_rpc_server: add a all flag to export_outputsmoneromooo-monero4-9/+13
if we don't want to export new outputs only
2019-04-09blockchain: remove unused calc of short_term_constraintstoffu1-1/+0
2019-04-07Enabling daemon-rpc SSL now requires non-system CA verificationLee Clagett2-17/+29
If `--daemon-ssl enabled` is set in the wallet, then a user certificate, fingerprint, or onion/i2p address must be provided.
2019-04-07build fix: combinator.h stdexcept missing includeDusan Klinec1-0/+1
2019-04-07blockchain_import: error out if preparing to handle blocks failsmoneromooo-monero1-1/+5
Coverity 197562
2019-04-07core: don't check block rate nor fork time in regtest modemoneromooo-monero1-1/+4
2019-04-07device/trezor: add button pressed requestDusan Klinec7-1/+42
2019-04-07Require manual override for user chain certificates.Lee Clagett1-0/+5
An override for the wallet to daemon connection is provided, but not for other SSL contexts. The intent is to prevent users from supplying a system CA as the "user" whitelisted certificate, which is less secure since the key is controlled by a third party.
2019-04-07Pass SSL arguments via one class and use shared_ptr instead of referenceLee Clagett4-43/+74
2019-04-06Change default SSL to "enabled" if user specifies fingerprint/certificateLee Clagett3-14/+29
Currently if a user specifies a ca file or fingerprint to verify peer, the default behavior is SSL autodetect which allows for mitm downgrade attacks. It should be investigated whether a manual override should be allowed - the configuration is likely always invalid.
2019-04-06Change SSL certificate file list to OpenSSL builtin load_verify_locationLee Clagett6-58/+27
Specifying SSL certificates for peer verification does an exact match, making it a not-so-obvious alias for the fingerprints option. This changes the checks to OpenSSL which loads concatenated certificate(s) from a single file and does a certificate-authority (chain of trust) check instead. There is no drop in security - a compromised exact match fingerprint has the same worse case failure. There is increased security in allowing separate long-term CA key and short-term SSL server keys. This also removes loading of the system-default CA files if a custom CA file or certificate fingerprint is specified.
2019-04-06wallet: add number of blocks required for the balance to fully unlockmoneromooo-monero5-22/+63
2019-04-06rpc: merge the two get_info implementationsmoneromooo-monero1-62/+3
2019-04-05wallet: API changes to enable passphrase entryDusan Klinec4-10/+37
2019-04-05rpc: make wide_difficulty hexadecimalmoneromooo-monero3-1/+19
This should be friendlier for clients which don't have bignum support
2019-04-05cryptonote: rework block blob size sanity checkmoneromooo-monero10-16/+100
Use the actual block weight limit, assuming that weight is always greater or equal to size
2019-04-04wallet: new option to start background miningmoneromooo-monero10-20/+264
The setup-background-mining option can be used to select background mining when a wallet loads. The user will be asked the first time the wallet is created.
2019-04-04wallet2: add --no-dns flagmoneromooo-monero2-3/+10
2019-04-04crypto: replace rand<T>()%N idiom with unbiased rand_idx(N)stoffu5-12/+36
2019-04-04rpc.gettransactions: fill as_json with partial tx in pruned modestoffu1-12/+43
2019-04-03wallet2: support multi out txes without change in sanity checkmoneromooo-monero1-7/+9
2019-04-02libwallet_merged: add missing net targetselsta1-0/+1
2019-04-02simplewallet: new unset_ring commandmoneromooo-monero6-12/+100
Useful when debugging, though not much for users
2019-04-02api/wallet: fix some wrong namespacestoffu1-2/+2
2019-04-01wallet: add number of blocks required for the balance to fully unlockmoneromooo-monero5-23/+64
2019-04-01wallet2: set confirmations to 0 for pool txes in proofsmoneromooo-monero1-4/+4
It makes more sense than (uint64_t)-1, which is going to look like very much confirmed when not checking in_pool
2019-04-01wallet_rpc_server: error out on getting the spend key from a hot walletmoneromooo-monero1-1/+7
2019-04-01wallet_rpc_server: always fill out subaddr_indices in get_transfersmoneromooo-monero1-0/+2
It was not filled out for in and pool types
2019-04-01miner: fix race when stopping mining with start mining enabledmoneromooo-monero2-6/+10
2019-04-01blockchain_stats: fix sign in formatting functionmoneromooo-monero1-1/+1
2019-04-01various: remove unused variablesmoneromooo-monero1-2/+0
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-28 20:08:09 +0000