Commit Graph
3147 Commits
Author SHA1 Message Date
zzz 6408c3b692 DG2: Remove unused variable 2026-07-03 13:32:28 -04:00
zzz f581d3d723 Crypto: Fix unused TrustedUpdate.verify() method
which takes a public key file as an argument.
Update CLI tool to use and test it.
Broken since the beginning.

Adapted from fix in I2PPlus
2026-07-03 13:28:17 -04:00
zzz b24aae44c7 Datagram2: Fix validation with offline keys
Fix main() test
Adapted from fix in I2PPlus
2026-07-03 10:36:16 -04:00
zzz e104ca71f6 Lint: Change replace(String) to replace(char) all over 2026-06-06 10:43:59 -04:00
zzz 2de2741e4d I2CP: Length check exception message improvement 2026-05-29 13:51:13 -04:00
zzz 9399698c10 Util: Fix eepget/eephead CLI not honoring timeout option
reported by: RN
2026-05-27 14:05:01 -04:00
zzz a403278fe6 Util: eqCT() null check 2026-05-11 07:37:25 -04:00
zzz a4afe588f3 Util: Use constant-time comparison in various password checkers
reported by: bottomlineit.co.za
2026-05-08 15:02:22 -04:00
zzz 85854c5454 Javadoc fix (json-simple)
fixed 6 years ago but got reverted in the update to 2.3.1
2026-05-06 17:29:04 -04:00
zzz 05438ab51d Util: Set minidns fields to final
reported by: bottomlineit.co.za
2026-05-04 17:22:15 -04:00
zzz 57e8f8c1cf Util: Remove useless synchronized on no-op method
reported by: bottomlineit.co.za
2026-05-01 13:15:11 -04:00
zzz 41647e94f0 I2CP: Wait for queue space on internal queue close()
reported by: bottomlineit.co.za
2026-05-01 13:10:19 -04:00
zzz 66a270e7a2 Crypto: Use constant-time modPow() for ElG private key operations
Deprecate unused ElGamalSigEngine

reported by: bottomlineit.co.za
2026-05-01 11:34:28 -04:00
zzz 93be42925b Util: Update json-simple to 2.3.1
from https://github.com/cliftonlabs/json-simple.git tag json-simple.2.3.1 2018-02-05

Fixes:
- Jsoner.serialize array off-by-one deterministic crash on 9 primitive/Object array branches

reported by: bottomlineit.co.za
2026-04-30 20:17:28 -04:00
zzz dafde0c327 Util: Update minidns to 1.1.1
from https://github.com/MiniDNS/minidns tag 1.1.1 2024-10-24

Possible fixes (unverified):
- MiniDNS per-RR parsers throw NegativeArraySizeException on malformed header
- DnsName.parse recurses per label without depth bound StackOverflow DoS
- DnsName parser throws AIOOBE (not IOException) on truncated pointer
- ipv4From / ipv6From resolve via DNS instead of parsing literals
- Question constructor uses assert for null checks
- DnsMessage pre-allocates ArrayLists from 16-bit header counts
- OPT.parse uses dis.read() and disabled assert for bounds

reported by: bottomlineit.co.za
2026-04-30 19:06:49 -04:00
zzz 051dccf4b1 Util: Revert change causing failed decode of compressed IPv6 addresses
partial revert of aa77c9a4ab

reported by: bottomlineit.co.za
2026-04-30 18:21:33 -04:00
zzz bb49736b33 Crypto: Disallow DSA-SHA1 signing k=q
reported by: bottomlineit.co.za
2026-04-25 17:47:20 -04:00
zzz aa77c9a4ab Router: Don't use InetAddress.getByName() for blocklist IP conversion
to make really sure we don't use DNS, and it's slow anyway.

reported by: bottomlineit.co.za
2026-04-25 17:03:13 -04:00
zzz 20a10ae0ae Crypto: Change RFC 7748 DH error to a checked exception
so things are cleaned up properly
2026-04-25 15:22:21 -04:00
zzz b9bdce41a0 Add missing file for I2CP, bump -2 2026-04-25 10:57:31 -04:00
zzz 4f892d6331 I2CP, SAM: Support lookup of ls2 options (proposal 167) 2026-04-25 10:43:58 -04:00
zzz 1aba9220a3 I2CP: Add missing max length check on alternate readMessage() path
reported by: bottomlineit.co.za
2026-04-25 10:15:08 -04:00
zzz ba572bd1bd spotbugs fixes all over 2026-04-25 09:53:32 -04:00
eyedeekay 2800040dee Bump version to 2.12.0 and update related files 2026-04-20 09:44:38 -04:00
zzz 9d0d5eb604 Pull translations from Weblate
fix 'ant testscripts'
2026-04-17 14:24:24 -04:00
zzz 5ba9ad218c Crypto: Use constant-time comparison in ElG decrypt and HMAC verification
check for zero output in X25519 DH as recommmended by RFC 7748

reported by: bottomlineit.co.za
2026-04-13 08:09:49 -04:00
zzz 9a0f22c0d7 I2CP: Fix LS2 options not being updated on subsession 2026-03-25 13:09:47 -04:00
zzz 527ed57e4a I2NP: HostReplyMessage updates for proposal 167 (WIP) 2026-03-24 11:32:53 -04:00
zzz 39b2116afa Util: Add note about formatTime() output 2026-03-21 07:49:46 -04:00
zzz a18db19244 Util: Bump max Java version for CLI output 2026-03-21 07:48:14 -04:00
zzz 174061bd2d Stats: Fix 60s stat getAverage() returning 20% high
due to CoalesceStatsEvent being on a 50s timer

- Caused by rounding in Rate.coalesce()
- Affected data on /stats, Prometheus plugin, console sidebar, and internal use
- Did not affect graphs
- Apparently dates back to original jrandom code
2026-03-19 10:25:12 -04:00
zzz d5e8cf07bb Console: Mark LS1 encrypted leasesets as deprecated
also add notes to javadocs for the KeyRing class used to store the keys
2026-03-13 09:10:16 -04:00
zzz 9597bc540f I2CP: Force LS2 even for ElG-only
i2pd request
2026-02-28 09:14:51 -05:00
zzz fc4cd14534 Data: Add cached entries for common properties (props 168, 169) 2026-02-14 14:15:55 -05:00
zzz bef32f70c3 Datagrams: Use smaller initial buffer size in DG1 maker
and improve exception messages and comments.
Also increase max size to match spec.
2026-02-14 13:21:53 -05:00
zzz 98644e565f i2psnark: Clear bw limiters on session stop 2026-02-14 13:08:51 -05:00
eyedeekay 8e1eb6b012 Update checklist.md and bump version numbers 2026-02-09 14:27:41 -05:00
zzz 358f5fa453 Change canonical domain to i2p.net 2026-01-14 12:08:01 -05:00
zzz 75d7513532 Util: Add namecoin and GNS to DoH blacklist 2025-12-29 11:35:47 -05:00
eyedeekay 9c1573d357 Release I2P 2.10.0 2025-09-08 18:24:08 -04:00
zzz 38805ee866 I2CP: Stub out new HostLookup types for service records (proposal 167)
not complete, not yet hooked in
2025-07-27 11:24:18 -04:00
zzz 4128335115 Crypto: Reduce YK precalc pool size, almost unused 2025-07-27 09:11:35 -04:00
zzz 41b7b42ec2 I2CP: Destroy session fixes
- Destroying subsession no longer destroys primary session on client side
- Ignore SessionStatus(Destroyed) on client side, it wasn't doing the right thing
- Add notes on router side about not sending SessionStatus(Destroyed)
2025-07-17 18:06:33 -04:00
zzz a439c86b98 Remove exclusion of class already removed 2025-07-04 07:46:09 -04:00
zzz fd436ec35a Util: Android Java version detection improvements 2025-07-04 07:30:26 -04:00
zzz f6289cb41b Merge pull request 'PQ MLKEM hybrid ratchet only' (#517) from zzz/i2p.i2p:pq-ratchet into master
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/517
Reviewed-by: idk <idki2p@mail.i2p>
2025-06-24 08:31:49 -04:00
zzz 5bb3cc488c Merge pull request 'I2CP: Add async lookup API' (#511) from zzz/i2p.i2p:i2cp-asynch-lookup into master
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/511
Reviewed-by: idk <idki2p@mail.i2p>
2025-06-18 11:35:35 -04:00
zzz 0aa280435a Merge pull request 'Stats: Remove ancient stat log' (#503) from zzz/i2p.i2p:statlog into master
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/503
Reviewed-by: idk <idki2p@mail.i2p>
2025-06-15 08:08:17 -04:00
zzz 5c828fa116 Merge pull request 'I2CP: Add support for service records (proposal 167)' (#501) from zzz/i2p.i2p:prop167 into master
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/501
Reviewed-by: idk <idki2p@mail.i2p>
2025-06-15 08:04:08 -04:00
zzz e3b176b676 I2P changes for ratchet 2025-06-13 08:56:52 -04:00