Commit Graph

2270 Commits

Author SHA1 Message Date
zzz 85499fbb8b Hoist random() calls out of session synch blocks 2026-05-10 09:06:00 -04:00
zzz a4afe588f3 Util: Use constant-time comparison in various password checkers
reported by: bottomlineit.co.za
2026-05-08 15:02:22 -04:00
zzz bbe18c9e9f Console: Remove ancient IE workaround code
reported by: bottomlineit.co.za
2026-05-08 12:42:52 -04:00
zzz f0afcfcf68 Console: Add missing description for jsonrpc webapp 2026-05-07 15:30:35 -04:00
zzz a587f79c75 Console: Add search option for PQ SSU2 2026-05-06 12:53:30 -04:00
zzz 8f2a8b3e3a Console: Validate Origin header
related changes to follow
adapted from code in I2P+, same license as ours

reported by: bottomlineit.co.za
2026-05-06 12:48:46 -04:00
zzz 0a9e68f688 Console: Refactor nonces
Replace the following static nonces with a consolidated session-bound nonce queue in CSSHelper:
- "console" static final nonce stored in CSSHelper
- "system" (restart) static final nonce stored in ConfigRestartBean
- "update" nonce stored in System properties via SummaryHelper
- "reseed" nonce stored in System properties via SummaryHelper

related changes to follow

reported by: bottomlineit.co.za
2026-05-06 12:44:49 -04:00
zzz 28bd5ce456 Console: Make section render methods private 2026-05-04 14:50:46 -04:00
zzz c3c222d5d3 Console: Specify full path to Windows service scripts
reported by: bottomlineit.co.za
2026-05-01 16:40:56 -04:00
zzz 66b6986ee0 Update: Randomize the order of news URLs when fetching
so if the "primary" is older than the "backup" things will still get updated eventually
2026-04-26 08:30:49 -04:00
zzz 7c99bb702e Console: Sanitize plugin name in ConfigClientsHandler
reported by: bottomlineit.co.za
2026-04-25 18:19:26 -04:00
zzz ba572bd1bd spotbugs fixes all over 2026-04-25 09:53:32 -04:00
zzz 882b00434e Console: Move language dropdown data so translation report can get to it
Add dropdown data to translation report
2026-03-31 13:28:05 -04:00
zzz 10da8f733e Remove deprecated ThreadGroup and SecurityManager calls 2026-03-26 13:15:09 -04:00
zzz fcce5ed3bf Console: Add sidebar link to client netdb tab 2026-03-25 16:30:20 -04:00
zzz 44263ae960 Console: Display LS2 options if any 2026-03-25 10:36:24 -04:00
zzz 1a4a04eeab Console: Show conn limits on peer status page 2026-03-21 16:19:36 -04:00
eyedeekay 4a6e9e67c8 Merge branch 'master' of github.com:i2p/i2p.i2p 2026-03-17 15:04:40 -04:00
zzz 336b905149 Console: Fix classloader issues when installing plugins
same fix as for starting/restarting plugins
2026-03-17 08:57:07 -04:00
zzz 228287143a Console: Fix classloader issues when starting plugins
same fix as for webapps applied previously
2026-03-17 08:33:01 -04:00
tous 47bf85f555 Console: Update project website URLs 2026-03-15 17:54:48 -03:00
zzz d5e8cf07bb Console: Mark LS1 encrypted leasesets as deprecated
also add notes to javadocs for the KeyRing class used to store the keys
2026-03-13 09:10:16 -04:00
zzz 4ebd92445d Debian: Require libjetty12-java 12.0.32-2
Currently in forky/sid but not trixie/resolute.
12.0.32-2 bundles 4 of the 6 ee8 jars we need.
It does not contain the ee8-nested and ee8-security jars, those are currently in
libjetty12-extra-java. Rather than require -extra-, we bundle those two jars into jetty-extra.jar for now,
as -extra- is very large and has a number of other dependencies.
We have requested that Debian move the two jars to the stndard package.
For the non-libjetty12 builds, those two jars remain in jetty-webapp.jar.

12.0.17 in trixie/resolute is unusable because it is missing the ee8 jars
and is not the official Jetty release version so we can't bundle the jars from the Jetty release,
they are incompatible.
This change removes the 12.0.17 ee8 jars we attempted to bundle.

The trixie/resolute build is still unusable, unless/until they get 12.0.32-2

Update various build.xml classpaths to include jetty-extra.jar.

Fix the reference to cgi-context.xml which was renamed.

There are no changes for the jammy build, which bundles all required Jetty jars,
other than the cgi-context fix.
2026-03-13 08:35:40 -04:00
zzz 04780cae4c Console: Limit banlist output, add page links
Fix concurrent mod exception rendering banlist caused by switch to LHM
2026-02-26 10:07:48 -05:00
zzz 2b22e5f1ea Console: Reduce width of participating tunnels in map 2026-02-20 18:35:58 -05:00
zzz bf5935c07b Console: Add result count to netdb search results header
Increase est. ff heuristic by 4x
2026-02-19 12:03:04 -05:00
zzz 2719a56bd4 Console: Add display of average bandwidth per tunnel
to assist in debugging tunnel bandwidth params (prop. 168)
2026-02-18 15:43:11 -05:00
zzz a130bbfa8e Tunnels: Change tunnel bw rate stat from 5m to 10m
To increase chance we have recent data for tunnel bw params (Prop. 168)
2026-02-17 12:25:05 -05:00
zzz 5fa5d790bd Console: Fix overstatement of lifetime tunnel bw usage
Current tunnels were multiplied by 1024x
2026-02-17 12:19:24 -05:00
zzz 6d3c468a67 Tunnels: BW params handling (Prop. 168)
- Save/display requested and allocated bandwidth for created tunnels
- Display allocated bandwidth for part. tunnels
- Handle IBGW max bw param
- Synch lifetime usage fields
2026-02-17 11:11:24 -05:00
zzz 8e7d31a5e6 Console: TunnelRenderer minor refactor 2026-02-17 08:49:57 -05:00
zzz 8f585d3098 Console: Add netdb search option for NTCP2 PQ transports
and enhance error output if not found
2026-02-15 11:26:10 -05:00
zzz c5e3f73aaa Console: Don't show our router on netdb search results map 2026-02-15 09:54:45 -05:00
zzz 2bc285a8a0 Console: Improve efficiency of transport+cost search 2026-02-15 08:19:37 -05:00
zzz bb1f487fbd Console: Use unique cookie per-install
so we don't get nonce errors on POST
if we have multiple routers on same host in different browser tabs
using default JSESSIONID everywhere
2026-02-14 16:47:25 -05:00
zzz 64ae05da71 Console: Hide some sig and enc types from netdb search form 2026-02-14 12:11:02 -05:00
zzz 2411df02c2 Console: Show country map for netdb search results 2026-02-14 12:07:08 -05:00
zzz 5d315e30fa Plugins: Add Jetty Scanner thread to ignore list so J12 zzzot may be stopped in the UI 2025-12-07 13:17:59 -05:00
zzz b8fa84f066 Ensure classloader is restored on exception 2025-12-01 12:37:42 -05:00
zzz 07c97c3f76 Console: Fix classloader issue starting webapps from UI 2025-12-01 11:01:07 -05:00
zzz 3adbefcb8b Build: Debian/Ubuntu preliminary updates
Not fully tested

```
          Java 17  bcprov 1.80  Jetty 12  libslf4j2   support
trixie      y          y           y         y          y
bookworm    y          n           n         n          y (jammy)
bullseye    y          n           n         n          y (jammy)
buster      n          n           n         n          n

resolute    y          y         not yet     y          y (questing until it gets Jetty 12)
questing    y          y           n         y          y
noble       y          n           n         n          y (jammy)
jammy       y          n           n         n          y
focal       n          n           n         n          n
bionic      n          n           n         n          n
```
2025-10-25 14:36:12 -04:00
zzz 19b63cddde Debian updates for Trixie
untested
remove tomcat8 references
debian-alt TODO
2025-10-11 09:44:31 -04:00
zzz 3d33557ebb Eepsite: Fix config class names, fix webapp environment 2025-10-11 09:44:30 -04:00
zzz d089b15f71 Eepsite on Jetty 12
TODO:

- FCGI
- Migration
- Stop/restart
- Webapp deployer
2025-10-11 09:44:30 -04:00
zzz 01129f0218 Conversion to Jetty 12 / Java 17
- Basic console (tested)
- SSL console (tested)
- Auth (tested)
- Debug logging (tested)
- Console request log (tested)

- I2PControl separate port (untested)
- Eepsite request log (untested)

TODO:

- Eepsites + migration
- Debian with or without Jetty 12
- Snark standalone
- Tomcat upgrade
- Checkin jetty jars
- Cleanups
2025-10-11 09:44:10 -04:00
zzz 1438ab866e New partial Icelandic translation 2025-09-03 11:17:36 -04:00
zzz fad75e47f3 Console: Don't bypass nonce check when password is enabled
Adapted from Github PR #118 thanks Lance James
2025-08-21 09:51:22 -04:00
zzz f5db530c0e Console: Don't hide SSU2 peers with long idle time
because it makes the total look wrong.
2025-08-12 10:00:05 -04:00
zzz d4c660d863 Console: Hide b32 link on netdb LS tabs for encrypted LS
- Fix layout for final LS data section on netdb LS debug tab
2025-08-10 10:54:55 -04:00
zzz ec550dce0b Console: Fix NPE on netdb LS debug tab rendering encrypted LS 2025-08-09 11:34:34 -04:00