Commit Graph

18305 Commits

Author SHA1 Message Date
zzz 35585ce02d bump -8 2026-05-18 12:11:25 -04:00
zzz 38e2b31e5b SSU2: Remove check for SSU 1 2026-05-18 08:32:46 -04:00
zzz 609803e080 SSU2: Peer test result fix as Alice when we never got Charlie's RI
If we got msg 4 but not the RI, but we got msg 5 while waiting,
we can still declare success and return OK instead of UNKNOWN,
even though we never sent msg 6. See spec.
2026-05-18 07:42:25 -04:00
zzz ba694d4702 i2psnark: Fix check for existing base file when adding via create form
don't use the filtered name
2026-05-17 12:27:06 -04:00
zzz a9ded0827d i2psnark: Use unfiltered base file name if it exists
reported by: Igillis
2026-05-17 12:23:03 -04:00
zzz 479154c75e i2psnark: Add check for empty filenames
reported by: bottomlineit.co.za
2026-05-17 12:16:33 -04:00
zzz 3114275b10 Transports: Reduce min downtime to rekey transport keys 2026-05-16 20:06:48 -04:00
zzz dd29ae7e86 Remove more deprecated thread calls in bw tester 2026-05-16 14:48:17 -04:00
zzz 634a533861 i2psnark: Increase max form keys
Jetty default max is 1000 which got hit by a user
on the details page priorities form with more than 1000 files in a directory.
2026-05-15 13:56:25 -04:00
zzz d4fb957549 susimail: Remove static login nonce
Fix the original problem this was a workaround for.
The next nonce was put in the old session object that was invalidated.
Put it in the new session object instead.
2026-05-15 12:44:18 -04:00
zzz 2e194a47fe Console: Don't display hide/show news links on /configupdate
and stay on same page when clicking hide/show links.
Also fix HTML dangling span if lastUpdated == 0

Fixes Gitea #249
Adapted from GH PR #149 by tahnous
2026-05-15 10:24:07 -04:00
zzz 1180597882 Router: Fix rare NPE at startup in InNetMessagePool
where netdb has not registered a DatabaseStoreMessage job builder.

- Add shortcut for DSRM and DeliveryStatus that do not have job builders.
- Log tweaks

reported by: postman
2026-05-15 10:06:37 -04:00
zzz 2bf04648c3 bump -7 2026-05-12 11:43:42 -04:00
zzz d042a7d354 SSU2: Require three consecutive peer tests for IPv6 state changes
due to high false-positive firewalled rates
2026-05-12 11:43:10 -04:00
zzz a00bc02fb9 SSU2: Require two peers from different /16s to change address
(/32 for IPv6)

suggested by: bottomlineit.co.za
2026-05-11 13:58:32 -04:00
zzz a403278fe6 Util: eqCT() null check 2026-05-11 07:37:25 -04:00
zzz 5f71311cbd More constant time string comparisons
adapted from I2PPlus
2026-05-10 19:28:42 -04:00
zzz 514f0c1237 I2NP: Add missing length checks in readMessage() methods
- strict checks in Data, DeliveryStatus, Garlic, TunnelData
- check if we did read over and throw in DatabaseLookup, DatabaseSearchReply
- fix potential leaseset read overrun in DatabaseStore
- convert AIOOBE to I2NPMessageException in I2NPMessageImpl

DLM reported by: bottomlineit.co.za
2026-05-10 17:32:54 -04:00
zzz fac0f85197 I2NP: Enforce 4 bits for RI netdb type in DSM
to match current spec
2026-05-10 16:40:32 -04:00
zzz b48cb21119 Remove old NTCP1 I2NPMessageHandler pool, unused 2026-05-10 15:26:16 -04:00
zzz 85499fbb8b Hoist random() calls out of session synch blocks 2026-05-10 09:06:00 -04:00
zzz dfaa5c3f81 i2ptunnel: P-R-G for list page forms 2026-05-09 12:48:28 -04:00
zzz 102b7f0674 i2ptunnel: Refactor list page forms
- Move all form buttons to POST and enforce
- Use form attributes for per-tunnel buttons (thanks drzed)
- Remove xml headers
- Remove ancient IE workarounds
2026-05-09 12:00:51 -04:00
zzz a4afe588f3 Util: Use constant-time comparison in various password checkers
reported by: bottomlineit.co.za
2026-05-08 15:02:22 -04:00
zzz bbe18c9e9f Console: Remove ancient IE workaround code
reported by: bottomlineit.co.za
2026-05-08 12:42:52 -04:00
zzz 3429f733f3 SSU2: Resurrect hole punch throttling as Charlie
Was in SSU 1 code but was never adapted for SSU2 and then got deleted.
Send limit reject code when throttled.
Add conn limit check.
Limits same as previously, to be reviewed and adjusted.

reported by: bottomlineit.co.za
2026-05-08 12:16:37 -04:00
zzz f0afcfcf68 Console: Add missing description for jsonrpc webapp 2026-05-07 15:30:35 -04:00
zzz 7dbeb265a1 Transport: Disable SSU bid adjustment for new routers as of next release 2026-05-07 13:58:55 -04:00
zzz 41ba80fa87 i2ptunnel: Refactor nonces
Replace the static nonce list with a session-bound nonce queue,
move form keys from static to session.
Prep for button conversion to POST

related changes to follow
2026-05-07 13:51:08 -04:00
zzz 98fb8c2af5 javadoc corrections 2026-05-07 11:40:42 -04:00
zzz f13ba5d987 i2psnark: Refactor nonces
Replace the webapp-wide nonce with two session-bound nonce queues,
one for the outer section and details/config pages, one for
the inner (XHR) section.

Any form-stuffing scripts that grab the nonce must be updated
to store and return the session cookie also.

related changes to follow

reported by: bottomlineit.co.za
2026-05-07 11:14:35 -04:00
zzz 85854c5454 Javadoc fix (json-simple)
fixed 6 years ago but got reverted in the update to 2.3.1
2026-05-06 17:29:04 -04:00
zzz ea83c15d49 CSS tweak 2026-05-06 13:14:23 -04:00
zzz 704f4949e4 bump -6 2026-05-06 13:01:04 -04:00
zzz a587f79c75 Console: Add search option for PQ SSU2 2026-05-06 12:53:30 -04:00
zzz 8f2a8b3e3a Console: Validate Origin header
related changes to follow
adapted from code in I2P+, same license as ours

reported by: bottomlineit.co.za
2026-05-06 12:48:46 -04:00
zzz 0a9e68f688 Console: Refactor nonces
Replace the following static nonces with a consolidated session-bound nonce queue in CSSHelper:
- "console" static final nonce stored in CSSHelper
- "system" (restart) static final nonce stored in ConfigRestartBean
- "update" nonce stored in System properties via SummaryHelper
- "reseed" nonce stored in System properties via SummaryHelper

related changes to follow

reported by: bottomlineit.co.za
2026-05-06 12:44:49 -04:00
eyedeekay 8989914372 Docker: Update eepsite configuration to use net.i2p.jetty.JettyStart 2026-05-06 11:16:03 -04:00
eyedeekay 4f938db339 Docker: Ensure the .i2p directory exists and is owned by the i2p user before starting the application 2026-05-06 09:58:19 -04:00
eyedeekay f6a0b271c0 Merge branch 'master' of github.com:i2p/i2p.i2p 2026-05-06 09:57:47 -04:00
eyedeekay 003d868cdb Docker: Remove USER directive from Dockerfile and update startapp.sh to use exec -runuser to start java as non-root 2026-05-06 09:37:57 -04:00
idk d11e2869a7 Merge pull request #146 from tahnous/update-readme
Update bug report URL's
2026-05-06 09:24:42 -04:00
eyedeekay 7eb7f40a15 Merge branch 'master' of i2pgit.org:I2P_Developers/i2p.i2p 2026-05-05 14:46:53 -04:00
eyedeekay 9960bacd92 Docker: Run startapp.sh as non-root. Clarify need to rewrite 127.0.0.1 to Docker internal localhost(172.17.0.* normally) in order to avoid IP-based client denials. Remove dead s6 script. Change 127.0.0.1 to localhost in docker rootfs config files. Clarify documentation. 2026-05-05 14:45:07 -04:00
zzz 05438ab51d Util: Set minidns fields to final
reported by: bottomlineit.co.za
2026-05-04 17:22:15 -04:00
zzz 28bd5ce456 Console: Make section render methods private 2026-05-04 14:50:46 -04:00
zzz 7ecd7fcae1 Console: Remove unused getNonce() calls 2026-05-04 14:44:31 -04:00
zzz 635584bfcb Transport: Fix PQ SSU2 I2NP block header, bump -5
was using SSU1-style header
remove SSU1 code in fragmenter

reported by: orignal
2026-05-02 18:26:50 -04:00
tous 5f37d3c107 Update bug report URL's 2026-05-02 16:51:36 -03:00
zzz d2d4325e65 bump -4 2026-05-01 18:28:08 -04:00