| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |\ \
| | |
| | |
| | | |
9141a0a1 connection_basic: remove debug exception ^_^ (moneromooo-monero)
|
| | | | |
|
| | |/
|/|
| |
| | |
get_io_service was deprecated, and got removed
|
| |\ \
| | |
| | |
| | | |
1f2930ce Update 2019 copyright (binaryFate)
|
| | |/ |
|
| | |
| |
| |
| | |
- pkey gets deleted by the pkey_deleter but the caller tries to serialize it which causes errors as the memory is freed
|
| |/
|
|
| |
Use SSL API directly, skip boost layer
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
RPC connections now have optional tranparent SSL.
An optional private key and certificate file can be passed,
using the --{rpc,daemon}-ssl-private-key and
--{rpc,daemon}-ssl-certificate options. Those have as
argument a path to a PEM format private private key and
certificate, respectively.
If not given, a temporary self signed certificate will be used.
SSL can be enabled or disabled using --{rpc}-ssl, which
accepts autodetect (default), disabled or enabled.
Access can be restricted to particular certificates using the
--rpc-ssl-allowed-certificates, which takes a list of
paths to PEM encoded certificates. This can allow a wallet to
connect to only the daemon they think they're connected to,
by forcing SSL and listing the paths to the known good
certificates.
To generate long term certificates:
openssl genrsa -out /tmp/KEY 4096
openssl req -new -key /tmp/KEY -out /tmp/REQ
openssl x509 -req -days 999999 -sha256 -in /tmp/REQ -signkey /tmp/KEY -out /tmp/CERT
/tmp/KEY is the private key, and /tmp/CERT is the certificate,
both in PEM format. /tmp/REQ can be removed. Adjust the last
command to set expiration date, etc, as needed. It doesn't
make a whole lot of sense for monero anyway, since most servers
will run with one time temporary self signed certificates anyway.
SSL support is transparent, so all communication is done on the
existing ports, with SSL autodetection. This means you can start
using an SSL daemon now, but you should not enforce SSL yet or
nothing will talk to you.
|
| |\
| |
| |
| | |
7c3ade44 network_throttle: use circular_buffer where appropriate (moneromooo-monero)
|
| | | |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
RPC connections now have optional tranparent SSL.
An optional private key and certificate file can be passed,
using the --{rpc,daemon}-ssl-private-key and
--{rpc,daemon}-ssl-certificate options. Those have as
argument a path to a PEM format private private key and
certificate, respectively.
If not given, a temporary self signed certificate will be used.
SSL can be enabled or disabled using --{rpc}-ssl, which
accepts autodetect (default), disabled or enabled.
Access can be restricted to particular certificates using the
--rpc-ssl-allowed-certificates, which takes a list of
paths to PEM encoded certificates. This can allow a wallet to
connect to only the daemon they think they're connected to,
by forcing SSL and listing the paths to the known good
certificates.
To generate long term certificates:
openssl genrsa -out /tmp/KEY 4096
openssl req -new -key /tmp/KEY -out /tmp/REQ
openssl x509 -req -days 999999 -sha256 -in /tmp/REQ -signkey /tmp/KEY -out /tmp/CERT
/tmp/KEY is the private key, and /tmp/CERT is the certificate,
both in PEM format. /tmp/REQ can be removed. Adjust the last
command to set expiration date, etc, as needed. It doesn't
make a whole lot of sense for monero anyway, since most servers
will run with one time temporary self signed certificates anyway.
SSL support is transparent, so all communication is done on the
existing ports, with SSL autodetection. This means you can start
using an SSL daemon now, but you should not enforce SSL yet or
nothing will talk to you.
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
- Support for ".onion" in --add-exclusive-node and --add-peer
- Add --anonymizing-proxy for outbound Tor connections
- Add --anonymous-inbounds for inbound Tor connections
- Support for sharing ".onion" addresses over Tor connections
- Support for broadcasting transactions received over RPC exclusively
over Tor (else broadcast over public IP when Tor not enabled).
|
| |/ |
|
| |\
| |
| |
| | |
a5ffc2d5 Remove boost::lexical_cast for uuid and unused uuid function (Lee Clagett)
|
| | | |
|
| |\ \
| | |
| | |
| | | |
85665003 epee: better network buffer data structure (moneromooo-monero)
|
| | |/
| |
| |
| | |
avoids pointless allocs and memcpy
|
| |\ \
| | |
| | |
| | | |
b21a60ef mlocker: set default log category (moneromooo-monero)
|
| | | | |
|
| |\ \ \
| |_|/
|/| |
| | | |
0e2f5cb perf_timer: make all logs Info level (moneromooo-monero)
|
| | | |
| | |
| | |
| | | |
and make them not default at log level 1
|
| |\ \ \
| |/ /
|/| |
| | |
| | |
| | | |
ab783b17 easylogging++: ensure logger is initialized before main (moneromooo-monero)
9b69a0ae daemon: print monero version at startup when calling a detached daemon (moneromooo-monero)
4d71d463 mlocker: remove early page size log (moneromooo-monero)
|
| | | |
| | |
| | |
| | |
| | |
| | | |
It comes before the logger is initialized, so gets displayed
even though it should not be by default, and apparenly comes
too early for (some versions of) Android, where it crashes.
|
| |\ \ \
| | | |
| | | |
| | | | |
40485a73 mlocker: fix access to global lock map after dtor on exit (moneromooo-monero)
|
| | |/ /
| | |
| | |
| | | |
as the lock, it now leaks
|
| |\ \ \
| |_|/
|/| |
| | | |
96e6b439 blockchain_stats: don't use gmtime_r on Windows (moneromooo-monero)
|
| | |/
| |
| |
| |
| |
| | |
In some cases, it doesn't like it (I don't know the details).
Factor into a new epee function
|
| |\ \
| | |
| | |
| | | |
1132436f Only show a single mlock() error, to avoid flooding the log (Martijn Otto)
|
| | |/ |
|
| |\ \
| | |
| | |
| | | |
23829ebb mlocker: don't throw from lock/unlock (moneromooo-monero)
|
| | |/
| |
| |
| |
| |
| |
| | |
This prevents exceptions from showing up in various awkward
places such as dtors, since the only exception that can be
thrown is a lock failure, and nothing handles a lock failure
anyway.
|
| |\ \
| | |
| | |
| | | |
bd98e99c Removed a lot of unnecessary includes (Martijn Otto)
|
| | | | |
|
| |\ \ \
| |_|/
|/| |
| | | |
2b3595d0 various: do not propagate exception through dtor (moneromooo-monero)
|
| | | |
| | |
| | |
| | | |
Coverity 189689, 189690, 189692, 189695
|
| |\ \ \
| |/ /
|/| |
| | | |
0cfd2ae5 mlocker: fix dtor ordering problem (moneromooo-monero)
|
| | |/
| |
| |
| | |
leak the mutex instead, it's a one off
|
| |/
|
|
| |
Coverity 136593
|
| |\
| |
| |
| | |
8f3c7937 readline_buffer: fix "cursor in prompt" bug (moneromooo-monero)
|
| | |
| |
| |
| |
| | |
It happens when readline displays a prompt just before switching
to a shorter one
|
| |\ \
| | |
| | |
| | | |
2e2daebc ANSI colors in Windows 10 (iDunk5400)
|
| | |/ |
|
| | | |
|
| |/ |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
bcf3f6af fuzz_tests: catch unhandled exceptions (moneromooo-monero)
3ebd05d4 miner: restore stream flags after changing them (moneromooo-monero)
a093092e levin_protocol_handler_async: do not propagate exception through dtor (moneromooo-monero)
1eebb82b net_helper: do not propagate exceptions through dtor (moneromooo-monero)
fb6a3630 miner: do not propagate exceptions through dtor (moneromooo-monero)
2e2139ff epee: do not propagate exception through dtor (moneromooo-monero)
0749a8bd db_lmdb: do not propagate exceptions in dtor (moneromooo-monero)
1b0afeeb wallet_rpc_server: exit cleanly on unhandled exceptions (moneromooo-monero)
418a9936 unit_tests: catch unhandled exceptions (moneromooo-monero)
ea7f9543 threadpool: do not propagate exceptions through the dtor (moneromooo-monero)
6e855422 gen_multisig: nice exit on unhandled exception (moneromooo-monero)
53df2deb db_lmdb: catch error in mdb_stat calls during migration (moneromooo-monero)
e67016dd blockchain_blackball: catch failure to commit db transaction (moneromooo-monero)
661439f4 mlog: don't remove old logs if we failed to rename the current file (moneromooo-monero)
5fdcda50 easylogging++: test for NULL before dereference (moneromooo-monero)
7ece1550 performance_test: fix bad last argument calling add_arg (moneromooo-monero)
a085da32 unit_tests: add check for page size > 0 before dividing (moneromooo-monero)
d8b1ec8b unit_tests: use std::shared_ptr to shut coverity up about leaks (moneromooo-monero)
02563bf4 simplewallet: top level exception catcher to print nicer messages (moneromooo-monero)
c57a65b2 blockchain_blackball: fix shift range for 32 bit archs (moneromooo-monero)
|
| |
|
|
| |
b2972927 osx compilation fix: missing boost libs added (Dusan Klinec)
|
| |\
| |
| |
| | |
4d52ec0c mlog: do not display http errors by default (moneromooo-monero)
|
| | |
| |
| |
| | |
They're controllable by potential attackers and would just spam
|
| |/ |
|
| |\
| |
| |
| | |
262e391 mlog: handle filenames without parent directories (moneromooo-monero)
|