aboutsummaryrefslogtreecommitdiff
path: root/contrib/epee/include/net
Commit message (Collapse)AuthorAgeFilesLines
...
* Merge pull request #6006luigi11112019-10-241-2/+6
|\ | | | | | | 9f3be3b epee: use SO_REUSEADDR on non-Windows targets (xiphon)
| * epee: use SO_REUSEADDR on non-Windows targetsxiphon2019-10-221-2/+6
| |
* | Merge pull request #5996luigi11112019-10-221-0/+1
|\ \ | | | | | | | | | 23ba69e epee: fix SSL server handshake, run_one() can block, use poll_one() (xiphon)
| * | epee: fix SSL server handshake, run_one() can block, use poll_one()xiphon2019-10-181-0/+1
| |/
* | Merge pull request #5986luigi11112019-10-221-1/+1
|\ \ | |/ |/| | | 1080136 abstract_tcp_server2: move 'Trying to connect' from error to debug (moneromooo-monero)
| * abstract_tcp_server2: move "Trying to connect" from error to debugmoneromooo-monero2019-10-141-1/+1
| | | | | | | | and fix the message grammar
* | Merge pull request #5911luigi11112019-10-161-0/+5
|\ \ | | | | | | | | | e48dcb7 levin: armour against some 'should not happen' case (moneromooo-monero)
| * | levin: armour against some "should not happen" casemoneromooo-monero2019-10-151-0/+5
| | | | | | | | | | | | | | | | | | If adding a response handler after the protocol is released, they could never be cancelled again, and would end up keeping a ref that never goes away
* | | Merge pull request #5947luigi11112019-10-141-4/+2
|\ \ \ | | | | | | | | | | | | c9cfbf7 epee: tcp server - set SO_LINGER instead of SO_REUSEADDR option (xiphon)
| * | | epee: tcp server - set SO_LINGER instead of SO_REUSEADDR optionxiphon2019-10-021-4/+2
| | | |
* | | | Merge pull request #5937luigi11112019-10-141-1/+1
|\ \ \ \ | |_|_|/ |/| | | | | | | 4b654f6 abstract_tcp_server2: log pointer, not contents, where appropriate (moneromooo-monero)
| * | | abstract_tcp_server2: log pointer, not contents, where appropriatemoneromooo-monero2019-09-271-1/+1
| | | |
* | | | Merge pull request #5918luigi11112019-10-082-2/+6
|\ \ \ \ | | | | | | | | | | | | | | | 4371791 epee: implement handshake timeout for SSL connections (xiphon)
| * | | | epee: implement handshake timeout for SSL connectionsxiphon2019-09-172-2/+6
| | |_|/ | |/| |
* | | | Merge pull request #5917luigi11112019-10-081-1/+2
|\ \ \ \ | |_|_|/ |/| | | | | | | 7d81850 epee: fix network timeouts in blocked_mode_client (xiphon)
| * | | epee: fix network timeouts in blocked_mode_clientxiphon2019-09-161-1/+2
| |/ /
* | | Merge pull request #5910luigi11112019-09-301-0/+5
|\ \ \ | | | | | | | | | | | | 1b91beb abstract_tcp_server2: fix lingering connections (moneromooo-monero)
| * | | abstract_tcp_server2: fix lingering connectionsmoneromooo-monero2019-09-121-0/+5
| |/ / | | | | | | | | | | | | | | | Resetting the timer after shutdown was initiated would keep a reference to the object inside ASIO, which would keep the connection alive until the timer timed out
* | | Merge pull request #5893luigi11112019-09-301-1/+13
|\ \ \ | |_|/ |/| | | | | Coverity fixes [3a81639, 1bd962d, 2825f07, d099658, d46f701, cd57a10] (anonimal)
| * | epee: abstract_tcp_server2: resolve CID 203919 (DC.WEAK_CRYPTO)anonimal2019-09-081-1/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The problem actually exists in two parts: 1. When sending chunks over a connection, if the queue size is greater than N, the seed is predictable across every monero node. >"If rand() is used before any calls to srand(), rand() behaves as if it was seeded with srand(1). Each time rand() is seeded with the same seed, it must produce the same sequence of values." 2. The CID speaks for itself: "'rand' should not be used for security-related applications, because linear congruential algorithms are too easy to break." *But* this is an area of contention. One could argue that a CSPRNG is warranted in order to fully mitigate any potential timing attacks based on crafting chunk responses. Others could argue that the existing LCG, or even an MTG, would suffice (if properly seeded). As a compromise, I've used an MTG with a full bit space. This should give a healthy balance of security and speed without relying on the existing crypto library (which I'm told might break on some systems since epee is not (shouldn't be) dependent upon the existing crypto library).
* | | Merge pull request #5898luigi11112019-09-141-1/+1
|\ \ \ | |_|/ |/| | | | | 73f22c4 depends: fix MacOS build with Clang 3.7.1 (vtnerd)
| * | depends: fix MacOS build with Clang 3.7.1Lee Clagett2019-09-081-1/+1
| |/
* | Fix IP address serialization on big endianmoneromooo-monero2019-09-041-1/+15
| | | | | | | | | | IP addresses are stored in network byte order even on little endian hosts
* | epee: fix local/loopback checks on big endianmoneromooo-monero2019-09-041-0/+7
|/ | | | IPv4 addresses are kept in network byte order in memory
* Merge pull request #5824luigi11112019-09-041-1/+1
|\ | | | | | | 2a41dc0 epee: fix connections not being properly closed in some instances (moneromooo-monero)
| * epee: fix connections not being properly closed in some instancesmoneromooo-monero2019-08-191-1/+1
| | | | | | | | Fixed by Fixed by crCr62U0
* | Added support for "noise" over I1P/Tor to mask Tx transmission.Lee Clagett2019-07-177-61/+158
| |
* | Add ref-counted buffer byte_slice. Currently used for sending TCP data.Lee Clagett2019-07-167-145/+87
| |
* | fix feature not introduced until boost 1.66Jethro Grassie2019-08-201-1/+1
|/
* Merge pull request #5674luigi11112019-08-151-0/+24
|\ | | | | | | | | fcbf7b3 p2p: propagate out peers limit to payload handler (moneromooo-monero) 098aadf p2p: close the right number of connections on setting max in/out peers (moneromooo-monero)
| * p2p: close the right number of connections on setting max in/out peersmoneromooo-monero2019-06-191-0/+24
| |
* | Merge pull request #5649luigi11112019-08-152-2/+6
|\ \ | | | | | | | | | a182df2 Bans for RPC connections (hyc)
| * | Bans for RPC connectionsHoward Chu2019-06-162-2/+6
| |/ | | | | | | | | Make bans control RPC sessions too. And auto-ban some bad requests. Drops HTTP connections whenever response code is 500.
* | Add IPv6 supportThomas Winget2019-07-316-64/+416
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | new cli options (RPC ones also apply to wallet): --p2p-bind-ipv6-address (default = "::") --p2p-bind-port-ipv6 (default same as ipv4 port for given nettype) --rpc-bind-ipv6-address (default = "::1") --p2p-use-ipv6 (default false) --rpc-use-ipv6 (default false) --p2p-require-ipv4 (default true, if ipv4 bind fails and this is true, will not continue even if ipv6 bind successful) --rpc-require-ipv4 (default true, description as above) ipv6 addresses are to be specified as "[xx:xx:xx::xx:xx]:port" except in the cases of the cli args for bind address. For those the square braces can be omitted.
* | Merge pull request #5531luigi11112019-07-241-4/+8
|\ \ | | | | | | | | | 9a6006b abstract_tcp_server2: move some things out of a lock (moneromooo-monero)
| * | abstract_tcp_server2: move some things out of a lockmoneromooo-monero2019-05-101-4/+8
| | | | | | | | | | | | | | | The lock is meant for the network throttle object only, and this should help coverity get unconfused
* | | Merge pull request #5530luigi11112019-07-241-2/+0
|\ \ \ | | | | | | | | | | | | 6abaaaa remove obsolete save_graph skeleton code (moneromooo-monero)
| * | | remove obsolete save_graph skeleton codemoneromooo-monero2019-05-101-2/+0
| |/ /
* | | Merge pull request #5528luigi11112019-07-241-1/+1
|\ \ \ | | | | | | | | | | | | f61a315 net_utils: fix m_ssl type from time_t to bool (moneromooo-monero)
| * | | net_utils: fix m_ssl type from time_t to boolmoneromooo-monero2019-05-101-1/+1
| |/ /
* | / allow blocking whole subnetsmoneromooo-monero2019-07-162-2/+49
| |/ |/|
* | abstract_tcp_server2: improve DoS resistancemoneromooo-monero2019-06-141-4/+5
| |
* | Merge pull request #5618luigi11112019-06-111-6/+4
|\ \ | | | | | | | | | b0a04f7 epee: fix SSL autodetect on reconnection (xiphon)
| * | epee: fix SSL autodetect on reconnectionxiphon2019-06-101-6/+4
| |/
* | Fix GCC 9.1 build warningsmoneromooo-monero2019-06-091-0/+5
| | | | | | | | GCC wants operator= aand copy ctor to be both defined, or neither
* | Add ssl_options support to monerod's rpc mode.Lee Clagett2019-05-221-0/+38
|/
* net_ssl: SSL config tweaks for compatibility and securitymoneromooo-monero2019-05-071-0/+3
| | | | | | | | | | add two RSA based ciphers for Windows/depends compatibility also enforce server cipher ordering also set ECDH to auto because vtnerd says it is good :) When built with the depends system, openssl does not include any cipher on the current whitelist, so add this one, which fixes the problem, and does seem sensible.
* change SSL certificate fingerprint whitelisting from SHA1 to SHA-256moneromooo-monero2019-04-261-0/+2
| | | | SHA1 is too close to bruteforceable
* Merge pull request #5482Riccardo Spagni2019-04-241-0/+1
|\ | | | | | | 9956500d net_helper: clear recv buffer on eof (moneromooo-monero)
| * net_helper: clear recv buffer on eofmoneromooo-monero2019-04-231-0/+1
| |
generated by cgit v1.2.3 (git 2.51.0) at 2026-08-16 20:45:21 +0000