monzero-core.git/contrib/epee/src, branch v0.14.1.0 Monzero core node, command-line wallet, consensus code, and release tooling. https://code.monzero.org/monzero-core.git/atom?h=v0.14.1.0 2019-06-14T08:48:25Z ensure no NULL is passed to memcpy 2019-06-14T08:48:25Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-04-29T08:17:32Z urn:sha1:434e617a1d7f2f6f6b4507ada00f9ab69d0bd27e NULL is valid when size is 0, but memcpy uses nonnull attributes, so let's not poke the bear Merge pull request #5527 2019-05-14T20:55:25Z luigi1111 luigi1111w@gmail.com 2019-05-14T20:55:25Z urn:sha1:14723fc6e7a5a219c74c27e9232127e8fafcccfa 9a7a453 net_ssl: free certs after setting them up (moneromooo-monero) Merge pull request #5519 2019-05-14T20:52:32Z luigi1111 luigi1111w@gmail.com 2019-05-14T20:52:32Z urn:sha1:1fc1c7318cadce0ce3e27e525b443a763fb292dc b8b957d cmake: fix incorrect hint for OPENSSL_ROOT_DIR (moneromooo-monero) 367bb80 mlog: default to not showing SSL errors (moneromooo-monero) net_ssl: free certs after setting them up 2019-05-10T00:16:49Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-05-10T00:16:07Z urn:sha1:9a7a453f258425e4958de45c1db35a9094ec9c35 net_ssl: SSL config tweaks for compatibility and security 2019-05-07T10:01:42Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-05-01T22:01:53Z urn:sha1:a62e0725715a7ce2bacf0487379130a402c7a3dd add two RSA based ciphers for Windows/depends compatibility also enforce server cipher ordering also set ECDH to auto because vtnerd says it is good :) When built with the depends system, openssl does not include any cipher on the current whitelist, so add this one, which fixes the problem, and does seem sensible. mlog: default to not showing SSL errors 2019-05-06T07:38:52Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-05-04T20:26:41Z urn:sha1:367bb80ae719fadb565a1618e8db5d7d4b67f107 change SSL certificate fingerprint whitelisting from SHA1 to SHA-256 2019-04-26T11:37:15Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-04-25T16:35:27Z urn:sha1:5e0da6fb68446612844970be1e862f0e5bc25183 SHA1 is too close to bruteforceable serialization: set default log category 2019-04-21T09:26:25Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2019-04-21T09:22:43Z urn:sha1:7a9316ebef2336caad9d2ea0babd10abc9a93925 Enabling daemon-rpc SSL now requires non-system CA verification 2019-04-07T17:02:43Z Lee Clagett code@leeclagett.com 2019-04-07T01:28:37Z urn:sha1:2e578b8214b8b47d7ddefceb1cbf2d8129e85a5a If `--daemon-ssl enabled` is set in the wallet, then a user certificate, fingerprint, or onion/i2p address must be provided. Require manual override for user chain certificates. 2019-04-07T04:44:37Z Lee Clagett code@leeclagett.com 2019-04-04T17:35:33Z urn:sha1:d58f368289709e0869c9b7927778339670cb85a7 An override for the wallet to daemon connection is provided, but not for other SSL contexts. The intent is to prevent users from supplying a system CA as the "user" whitelisted certificate, which is less secure since the key is controlled by a third party.