Releases: hyphanet/fred
build01479: 2017-11-03
Freenet 0.7.5 build 1479 is now available. [overview] This release ships WoT 19 which provides performance and UI improvements. For details see SSK@OJlMHMDMWe7KmHgFS7XlJWGU0XVfop3ADDMsdLrGlqI,bB-kcuDCGlEvp5rAf8cwrCRI7dTaMi0C37HD7Q6JucI,AQACAAE/WoT-19-changelog.txt or https://github.com/freenet/plugin-WebOfTrust/releases/tag/build0019 update.sh can now provide a failover via clearnet again (which was broken when our website SSL certificate provider stopped providing SSL certificates), but only for fproxy itself, not for plugins or dependencies. This is the first step to allow us to again ship changes which touch routing algorithms. On GNU/Linux and MacOSX you can use `./update.sh` to get the most recent version. Note however that this will contact github via clearnet. You should only need that if we break the auto-updater in the larger transitions to come (hopefully not). You can speed up the web interface by letting the browser cache SSK and CHK content (there is a new config option). This will however leave traces in your browser cache. Also: - optimized network settings for the new structure since the link length fix : less peers for the same bandwidth should result in higher throughput per connection. This allows for less powerful devices to join (with low bandwidth settings) and should provide better bandwidth utilization for very fast nodes. - Re-enable RSA-based ciphers for SSL-connections to the node - add jfniki index bookmark (use "add default bookmarks" to get it) - l10n: pull translations from transifex - plugins: WebOfTrust build0019, source available at CHK@gt~foMPFR5ZAhOhSOsFw68f5PBjJuCYpe~ZXPPA1t6g,pk7h34mG5hRsBPhVFWr5UllVbJXU-PS7tC9rbILvoOk,AAMC--8/WebOfTrust-build0019-source.tar.bz2 - plugins: Freemail v0.2.7.3 (new translations) source available at CHK@ZOfWMdsxhS1Lg6QKWK4CJZvVt9RYkkjFnU6-PCizHbg,zfTEQX6DexdUm9-eGyDSP5vKvp76b38SCBS7W9zkoGE,AAMC--8/Freemail-v0.2.7.3-source.tar.bz2 Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2017-11-03 Changes in 1479: This build finally updates WoT to build 19. For details, see SSK@OJlMHMDMWe7KmHgFS7XlJWGU0XVfop3ADDMsdLrGlqI,bB-kcuDCGlEvp5rAf8cwrCRI7dTaMi0C37HD7Q6JucI,AQACAAE/WoT-19-changelog.txt It now provides a developer manual: https://github.com/freenet/plugin-WebOfTrust/blob/cc62a06eb541a147d88ffae84ab43cd48c18adc5/developer-documentation/core-developers-manual/OadSFfF-version1.2-non-print-edition.pdf Also update.sh can provide a failover via clearnet again, but only for fproxy itself, not for plugins or dependencies. This is the first step to allow us to again ship changes which touch routing algorithms. You can speed up the web interface by letting the browser cache SSK and CHK content (there is a new config option). This will however leave traces in your browser cache. Also: - optimized network settings for the new structure since the link length fix : less peers for the same bandwidth should result in higher throughput per connection. This allows for less powerful devices to join (with low bandwidth settings) and should provide better bandwidth utilization for very fast nodes. - Re-enable RSA-based ciphers for SSL-connections to the node - add jfniki index bookmark (use "add default bookmarks" to get it) - l10n: pull translations from transifex - plugins: WebOfTrust build0019, Changelog: https://github.com/freenet/plugin-WebOfTrust/releases/tag/build0019 or: SSK@OJlMHMDMWe7KmHgFS7XlJWGU0XVfop3ADDMsdLrGlqI,bB-kcuDCGlEvp5rAf8cwrCRI7dTaMi0C37HD7Q6JucI,AQACAAE/WoT-19-changelog.txt source available at CHK@gt~foMPFR5ZAhOhSOsFw68f5PBjJuCYpe~ZXPPA1t6g,pk7h34mG5hRsBPhVFWr5UllVbJXU-PS7tC9rbILvoOk,AAMC--8/WebOfTrust-build0019-source.tar.bz2 - plugins: Freemail v0.2.7.3 (new translations) source available at CHK@ZOfWMdsxhS1Lg6QKWK4CJZvVt9RYkkjFnU6-PCizHbg,zfTEQX6DexdUm9-eGyDSP5vKvp76b38SCBS7W9zkoGE,AAMC--8/Freemail-v0.2.7.3-source.tar.bz2 - Arne Babenhauserheide (release manager) ---!Fred changes Arne Babenhauserheide (freenet releases) (18): l10n: pull translations from transifex update NEWS.md Update Freemail to v0.2.7.3 Update WebOfTrust to build0019 update NEWS.md NEWS.md: Add CHK to source for updated plugins fix whitespace plugins: WebOfTrust recommend v19 l10n: fix broken tag in nb-no Update default bookmark editions Update default bookmark editions dependencies.properties: update.sh with duct tape NEWS: note that RSA is for SSL bookmarks: note maintainer of statistics site update statistics bookmark manually update statistics bookmark to latest version Update default bookmark editions Build 1479 David ‘Bombe’ Roden (2): Make handleDownload method private Add config option to allow caching of CHK and SSK keys Florent Daigniere (1): Re-enable RSA-based ciphers drak@kaverne (13): adjust bw limit: min peers 4 and min bandwidth 5KiB/s opennet: last network size estimate: 3000 node: set minimum bandwidth to 4KiB add JFniki Index of indexes jfniki: forkable -> collaborative update NEWS.md for 1479 bookmarks: add the statistics page README: fix test skipping instruction bookmarks: fix jumping layout on missing activelink Bookmarks: Update descriptions of operhiem1 and ArneBab fix binary or used instead of boolean or NEWS: link changelog of WoT19 CSS: tabify ---!Freemail changes Freemail changes: Arne Babenhauserheide (freenet releases) (3): l10n: pull de,fr,hu,it,nl,pl,ru from transifex update version to 0.2.7.3 also increase build number ---!WoT changes (duplicate lines removed) Bert Massop (1): Improve captchas by randomization Daniel Roberts (1): Edit IfNull guard so that it throws when nickname is null xor-freenet (329): English l10n: Improve Common.UnknownIdentityExceptionDescription CreateOwnIdentityWizardPage.BackButton/ContinueButton: Add direction symbols CreateOwnIdentityWizardPage.RetryButton: Improve grammar English l10n: Continue backporting improvements from German German l10n: Fix accidental double space German l10n: "URI" / "Private key" -> "Secret key" German l10n: Shorten German l10n: "Erroneous name" -> "Name not allowed" German l10n: "nickname" -> "name" German l10n: Reduce sentence length English l10n: "Preferences" -> "Settings" German l10n: Fix missing plural German l10n: Clarify that trust values are assigned by the user German l10n: Cross-reference sentences German l10n: Reduce length of sentences German l10n: Better explanation of captcha procedure German l10n: Fix imprecise error message German l10n: Match word used for request URI on multiple UI pages German l10n: Improve variety of words used to explain captchas German l10n: Unify German l10n: Move text to paragraph which it belongs to German l10n: Add missing quotation marks German l10n: Remove useless "also" ("auch") German l10n: Remove escape symbol from Transifex import German/English l10n: Add missing unit to statistics German l10n: Add missing space English l10n: Finish backporting improvements from German English/German l10n: Use different wording in tooltip than string described by it English l10n: Fix remaining occurrence of "fetch" -> "download" English l10n: Fix remaining occurrence of "insert" -> "upload" English l10n: Fix wrong capitalization English / German l10n: Differentiate box header from box content on "My identity" page Stuff which should have been in previous commit Ant builder: Fail if JUnit not found; Tell user how to fix this Merge branch 'issue-0006557-fail-build-if-no-junit' into next WOTUtil: Fix falsely succeeding with commands such as -testAndRepair if database does not exist Merge branch 'issue-0006651-wotutil-testAndRepair-fix' into next XMLTransformer: Disallow import of trust lists with too many trusts XMLTransformer: Log parsing failures as warning so developers notice them Merge branch 'issues-0006663-0006671-xml-parsing-fixes' into next KnownIdentitiesPage: Workaround for issue 6596 KnownIdentitiesPage.getPageCount(): Fix handling identityCount==0 Merge branch 'issues-0006596-0006640-KnownIdentitiesPage-fixes' into next IdentityFileProcessor: Fix processing slowing down startup WebOfTrust unit test constructor: Apply same changes as previous commit applied to non-test constructor Merge branch 'issue-0006653-startup-performance' into next StatisticsPage: Add stats about incremental distrust computations which took more than 10 seconds Merge branch 'issue-0006648-score-computation-stats' into next WebOfTrust: New function isTerminated() AbstractFullNodeTest: Test WebOfTrust.isTerminated() (fails currently!) and .verifyDatabaseIntegrity() AbstractFullNodeTest: Fix for discoveries of https://bugs.freenetproject.org/view.php?id=6683 AbstractFullNodeTest: Fix false failure WebOfTrust: New function: getDatabaseFile() AbstractFullNodeTest: Fix DatabaseClosedException AbstractFullNodeTest: Test Score database correctness after tests are finished ScoreTest: Ensure correctness of database in terms of WebOfTrust.verifyAndCorrectStoredScores() AbstractJunit3BaseTest: Organize imports AbstractJUnit3BaseTest: After tests are finished, test Scores, database integrity and termination WebOfTrust: Fix getDatabaseFile() to work upon WoT's constructed using WebOfTrust(String) AbstractJUnit4BaseTest: After tests are finished, test Scores, database integrity and termination AbstractFullNodeTest: New function testTerminate(): Tests plugin unloading Merge branch 'issues-0006588-0006682-0006686-unit-tests' into next WebOfTrust.cloneDatabase(): Add TODO of fixing misuse of HashSet IdentitifierHashSet: Implement hashCode() and equals() IdentifierHashSet: Add skeleton for unit test of this class IdentifierHashSetTest: Reduce line count AbstractJUnit4BaseTest.addRandomTrustValues(): Return Trusts; be less strict in parameter requirements RankComputationTest: Compile-fix IdentifierHashSetTest: Implement setUp() IdentifierHashSetTest: Fix AssertionFailedError IdentifierHashSetTest: Implement testAdd() IdentifierHashSet.add(): Document & test behavior of add(null) IdentifierHashSetTest: Implement testAddAll() IdentifierHashSetTest: Improve test dataset IdentifierHashSetTest: Documentation IdentifierHashSetTest: Self-test IdentifierHashSetTest: Implement testClear() IdentifierHashSetTest: Implement testContains() IdentifierHashSetTest: Implement testContainsAll() IdentifierHashSetTest: Reduce probability of over-catching IdentifierHashSetTest: Implement testIsEmpty() IdentifierHashSetTest: Implement testIterator IdentifierHashSetTest: Improve robustness IdentifierHashSetTest.testIsEmpty(): Use duplicates IdentifierHashSetTest: Implement testRemove() IdentifierHashSet.add(): Fix modifying set when it should not IdentifierHashSetTest: Improve test data set IdentifierHashSetTest.testIterator(): Document why this tests more than apparent; improve tests of that IdentifierHashSetTest: Impelement testRemoveAll() IdentifierHashSetTest: Fix code duplication IdentifierHashSetTest: Improve existing tests IdentifierHashSetTest: Implement testRetainAll() IdentifierHashSetTest: Implement testSize() IdentifierHashSetTest: Implement testToArray() IdentifierHashSetTest: Implement testToArrayTArray() IdentifierHashSetTest: Implement testHashCode() IdentifierHashSetTest: Add more self-tests IdentifierHashSetTest: Improve tests by recycling return values we already get anyway IdentifierHashSetTest: Test stability of hashCode() IdentifierHashTestTest: Finish implementation by implementing testEqualsObject() IdentifierHashSet: Add FIXME IdentifierHashSet.equals(): Fix to comply with Object.equals() specification IdentifierHashSet.equals(): Optimize performance IdentifierHashSet: Fix visiblity IdentifierHashSet: Allow specifying an initial capacity IntroductionClient: Fix invalid use of HashSet IdentifierHashSet: Allow specifying an initial data set WebOfTrust.cloneDatabase(): Fix invalid use of HashSet WebOfTrust.cloneDatabase(): Fix code duplication WoTTest: JavaDoc AbstractJUnit4BaseTest: Add addRandomIdentities() which also produces OwnIdentitys AbstractJUnit4BaseTest: Make JavaDoc point developers to new function of previous commit AbstractJUnit4BaseTest.addRandomIdentities(): Add test for that function AbstractJUnit4BaseTest: Move self-tests to AbstractJUnit4BaseTestSelfTest WebOfTrust.deleteDuplicateObjects(): Make more visible for unit tests Add draft of unit test for WebOfTrust.deleteDuplicateObjects() WOTUtil: Add fcpCall() to use FCP messages upon WoT WOTUtil: Fix non-output on stdout, use stderr instead WOTUtil: Implement "-fcp" command line operation using fcpCall() Merge branch 'issue-0006812-wotutil-fcp' into next WebOfTrustTest.testDeleteDuplicateObjects(): Remove premature optimization WebOfTrustTest.testDeleteDuplicateObjects(): Finish implementation (fails expectedly) Identity.deleteWithoutCommit(): JavaDoc dangerous use WebOfTrustTest.testDeleteDuplicateObjects(): Test whether after deleting duplicates the database is equals to what it was before creating them WebOfTrustTest.testDeleteDuplicateObjects(): Fix bogus setup WebOfTrust.deleteDuplicateObjects(): Deprecate & explain why Rewrite WebOfTrust.deleteDuplicateObjects(): Fix to properly deal with Trusts & also deal with Scores (unit tests still failing!) Merge branch 'issue-0006814-setNickname-NPE-text-tweak' into next l10n: Update existing translations from Transifex to remove/update strings which changed in English; fix web interface to handle removed trailing whitespace l10n: Add new languages from Transifex: Croatian, Portugese (Portugal) Merge branch 'issue-0006569-English-l10n-revamp' into next l10n: Fix wrong filenames of Norwegian Bokmål and Portuguese (Brazil) Merge branch 'issue-0006817-fix-broken-translations' into next l10n: Add config for Transifex command line tool "tx" Merge branch 'issue-0006815-add-transifex-config' into next AbstractJUnit4BaseTest: Fix overly restrictive assert() WebOfTrustTest.testDeleteDuplicateObjects(): Fix bogus failure WebOfTrustTest.testDeleteDuplicateObjects(): Workaround failure due to db4o bug English l10n- DeleteOwnIdentityPage.DeleteIdentityBox.Text2: Grammar fix English l10n - StatisticsPage.SummaryBox.FullRecomputations: Fix missing plural 's' English l10n - StatisticsPage.SummaryBox.NotInsertedCaptchasSolutions: Fix ambiguity WebOfTrust.deleteDuplicateObjects(): Fix typo in JavaDoc WebOfTrust.deleteDuplicateObjects(): Tweak misconception in the JavaDoc WebOfTrust.computeRankFromScratch(): Improve readability WebOfTrust.computeRankFromScratch_Caching(): Improve readability IdentifierHashSet: Add documentation FIXME AbstractJUnit3BaseTest: JavaDoc dangerous use of HashSet Merge branch 'issue-0006818-english-l10n-transifex-issues' into next Add skeleton of build0019 changelog build0019 Changelog: Add draft of summary and outlook build0019 Changelog: Mention startup time improvement build0019 Changelog: Add instructions how to update build0019 Changelog: Import issue list from bugtracker; sort it Add xor's WoT bachelor thesis as developer's manual Merge branch 'issue-0006840-add-wot-thesis' into next build0019 Changelog: Add issue 0006840 build0019 Changelog: Remove useless " - resolved." / " - assigned" from copypasting build0019 Changelog: Sort issues by importance - user part only build0019 Changelog: Move issue from developer to user section build0019 Changelog: Reflect renaming / recategorization of issues build0019 Changelog: Mention WoT bachelor's thesis in summary build0019 Changelog: Sort issues by importance - developer part build0019 Changelog: Issue 0006653 build0019: Issue 0006663 build0019 Changelog: Issue 0006640 AbstractJUnit3BaseTest: Documentation AbstractJUnit3BaseTest: Add getAll{Identities,Trusts,Scores}() WoTTest.test_RestoreOwnIdentity_DeleteOwnIdentity_Chained(): Fix dangerous use of HashSet AbstractJUnit4BaseTest: Add functions from AbstractJUnit3BaseTest AbstractJUnit3BaseTest: Deprecate functions which were copied to AbstractJUnit4BaseTest SubscriptionManagerFCPTest: Fix dangerous use of HashSet build0019 Changelog: Issue 0006815 build0019 Changelog: Issue 0006557 build0019 Changelog: Issue 0006588 build0019 Changelog: Issue 0006686 build0019 Changelog: Security warning about version correlation. Thanks to ArneBab! build0019 Changelog: Issue 0006682 build0016 Changelog: Issue 0006594 build0019 Changelog: Issue 0006671 build0019 Changelog: Issue 0006814 AbstractJUnit3BaseTest: Reduce code duplication AbstractJUnit3BaseTest: Reduce duplication of documentation AbstractJUnit3BaseTest.newHashSetFromUniqueObjects(): Test input AbstractJUnit3BaseTest: Fix JavaDoc syntax errors Add new interface ReallyCloneable AbstractJUnit4BaseTest: Add new functions from AbstractJUnit3BaseTest AbstractJUnit3BaseTest: Fix JavaDoc links to reflect changing of function signature AbstractJUnit4BaseTest: Reduce code duplication build0019 Changelog: Issue 0006840 build0019 Changelog: Issue 0006651 build0019 Changelog: Issue 0006812 IdentityFile: Change visibility to public WOTUtil: New command: -dumpIdentityFile Merge branch 'issue-0006847-IdentityFile-dumper' into next build0019 Changelog: Sync with bugtracker IdentityFile: Begin changing to human readable file format: Specify format IdentityFile: Adapt members and getters to new file format IdentityFile: Adapt write() to new file format XMLTransformer: Move charset to constant IdentityFile: Finish changing to new file format (NOT TESTED): Adapt read() IdentityFile: Organize imports, add missing ones IdentityFile: Make file format more similar to FCP messages IdentityFile: Use CRC32 as checksum instead of various hashCode() implementations IdentityFile: Bump file format version IdentityFile: Fix outdated documentation IdentityFile: Rename "FileFormatVersion" to "Version" Revert "Merge branch 'issue-0006847-IdentityFile-dumper' into next" IdentityFile: Fix syntax error. Sorry. IdentityFile: Document lack of ability to specify a Charset when writing a SimpleFieldSet Merge branch 'issue-0006846-human-readable-IdentityFile' into next Ant builder: Compile for Java 7 Eclipse builder: Compile for Java 7 Merge branch 'issue-0006849-use-java7' into next Travis CI: Copy config from fred Travis config: Adapt for WoT Travis CI: Don't update fred code if we just pulled it Travis CI: Always recompile fred in case its code changed Travis CI: Fix Git error Travis CI: Remove redundant config Travis CI: Attempt to fix directory structure issues Travis CI: Fix config syntax error Travis CI: Fix compiler errors due to missing JUnit API Travis CI: Fix WoT not finding BouncyCastle Travis CI: Replace outdated bcprov.jar versions in Travis cache Travis CI: Fix JRE buffer overflow Merge branch 'issue-0006760-use-travis-ci' into next newHashSetFromUniqueObjects(): Be less restrictive in parameter type requirements newHashSetFromUniqueObjects(): Rename to listToSetWithDuplicateCheck() listToSetWithDuplicateCheck(): Fix JavaDoc to relax requirements of parameters and mention all features of the function listToSetWithDuplicateCheck(): Adapt code to more promises having been made in the JavaDoc listToSetWithDuplicateCheck(): Rename parameter to match renaming of function Ant builder: Begin implementing Cobertura support: Add directory Cobertura: Add on/off switch, opportunistically enable if JAR is found Cobertura: Inject Cobertura code into unit test WoT JAR Cobertura: Finish implementation: Run in tests, generate HTML report. Cobertura: Fix JVM crash on Java 7 Merge branch 'issue-0006861-analyze-test-coverage' into next IntroductionPuzzle: Implement ReallyCloneable IntroductionPuzzleStoreTest.testGetUninsertedOwnPuzzlesByInserter(): Fix dangerous use of HashSet IntroductionPuzzleStoreTest.testGetUnsolvedByInserter(): Fix dangerous use of HashSet IntroductionPuzzleStoreTest.testGetOfTodayByInserter(): Fix dangerous use of HashSet IntroductionPuzzleStoreTest.testGetUnsolvedPuzzles(): Documentation IntroductionPuzzleStoreTest.testGetUnsolvedPuzzles(): Fix dangerous use of HashSet IntroductionPuzzleStoreTest: Finish fixing dangerous use of HashSet for this class SubscriptionManagerFCPTest: Documentation build0019 Changelog: Adjust summary to recent influx of new developer tools build0019 Changelog: Issue 0006849 build0019 Changelog: Issue 0006760 AbstractFullNodeTest: Fix for fred build 1474 changes L10n: Fix to comply with fred >1475 language codes build0019 Changelog: Issue 0006861 build0019 Changelog: Issue 0006846 build0019 Changelog: Issue 0006817 build0019 Changelog: Issue 0006816 build0019 Changelog: Issue 0006615 build0019 Changelog: Say thanks to the Transifex folks build0019 Changelog: Batch-describe the 8 English l10n issues build0019 Changelog: Issue 0006596 build0019 Changelog: Remove some template stuff build0019 Changelog: Finish summary build0019 Changelog: Remove issue 6615 English l10n: Fix leftover usage of "score" to be "trust value" instead build0019 Changelog: Issue 0006648 Remove empty constructor WebOfTrust.computeAllScores...(): Fix dangerous/slow use of HashMap Documentation IntroductionPuzzleStoreTest: Trim imports WebOfTrustTest: Trim imports ScoreComputationBenchmark: Organize imports IdentifierHashSet.equals(): Document lack of compliance to interface, thanks to bertm! Merge branch 'issue-0006594-fix-HashMap-Set-etc-misuse' into next build0019 Changelog: Remove FIXME which is resolved in branch next build0019 Changelog: Remove issue 0006797, was closed CaptchaFactory1: Move JPEG generation code to class CaptchaFactory1: Indent CaptchaFactory1: Don't pass around stream, not needed CaptchaFactory1: Add main() for testing, creates captcha JPG files CaptchaFactory1: Organize imports CaptchaFactory1.main(): Fix crashing upon random creation of same text CaptchaFactory1: Resolve TODO of estimating max captcha size CaptchaFactory1: Remove useless variable Merge branch 'issue-0006722-captcha-security-improvement' into next build0019 Changelog: Issue 0006722 Merge branch 'build0019-changelog' into next build0019 Changelog: Change minor version build0019 Changelog: Don't mention which fred release this will be bundled with, not sure yet. build0019 Changelog: Fix outdated info on Freenet not having funds build0019 Changelog: Inline link build0019 Changelog: Grammar fix build0019 Changelog: Finish Fix "Correcting wrong IdentityFetcher shouldFetch state: was: false; should be: true" during startup with assertions enabled WebOfTrust.deleteDuplicateObjects(): Improve performance Update edition numbers of seed identities build0019 Changelog: Update test coverage links Version 0.4.5 build0019
testing-build-1479-pre5
.
testing-build-1479-pre4
.
testing-build-1479-pre3
.
build01478: 2017-04-05
Freenet 0.7.5 build 1478 is now available. [overview] - prepare pinned certs for the new Amazon-web-services based site. Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2017-04-05 Changes in 1478: - prepare pinned certs for the new Amazon-web-services based site. - Arne Babenhauserheide --- Arne Babenhauserheide (freenet releases) (3): update NEWS.md for 1478 Update default bookmark editions Build 1478 drak@kaverne (3): add amazon root certificate for the new site FIX: selected wrong cert, Now Amazon1-4. Note: not yet tested FIX: had linked fallback CAs to the primary one
build01477: 2017-03-09
Freenet 0.7.5 build 1477 is now available. [overview] This is an emergency release: - fix clickjacking vulnerability, thanks to Kevin for alerting us! - patch url injection bug introduced in 1476 - fix SSL which broke with Java7 due to a missing cypher Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2017-03-09 Changes in 1477: - fix clickjacking vulnerability - patch open redirect and header injection vulnerability introduced in 1476 - fix SSL which broke with Java7 due to missing cypher - Arne Babenhauserheide --- Arne Babenhauserheide (freenet releases) (2): Update default bookmark editions Build 1477 Florent Daigniere (1): Fix a potential click-jacking vulnerability drak@kaverne (4): Re-enable TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 fix header injection and open redirection vulnerability introduced in 1476 update NEWS.md fix patch over redirection bug to not break the feature
build01476: 2017-03-01
Freenet 0.7.5 build 1476 is now available. [overview] - efficiency improvements: routing for fast nodes and spare bitmaps - a new gif filter with improved security - improved maintainability by replacing custom code with standard code - show update info alongside bookmarks - ssl fixes - update plugins: Sharesite 0.4.4, Library v37, Freereader 6 Thank you for using Freenet! - Arne Babenhauserheide Developer changelog: 2017-03-01 Changes in 1476: - FOAF efficiency enhancements for fast nodes - gif filter - ssl fixes - logger fix - spare bitmap efficiency - reduce custom code - show semi-persistent update info next to bookmarks - plugin updates: Sharesite 0.4.4, Library v37, Freereader 6 Thank you to all involved! - Arne Babenhauserheide Sharesite changes from 0.2.7 to 0.4.4: - provide default content as nicer example - add explicit path option - add insertHour to restrict the upload time - show the current UTC hour next to the insertHour setting - add random wait time of at most the remaining seconds in the insertHour to mask clicking insert during the insertHour. - parse description as textile - syntax help: show block elements first - link to style.css at the bottom - footer: link to the latest version of Sharesite - thanks to banbananabans@CQUZ... from FMS for lots of feedback --- Sharesite changes: Arne Babenhauserheide (16): import patch more syntax help better code help and blockquote help help: add strong again hopefully really breaking block only redirect to edit if not preview clicked. rename ChangeLog to NEWS, because it is user-facing, not developer facing (as by the GNU coding guidelines). prepared version 0.2.1 add Image syntax help. help: {toc} only works as only element in the line mention that the h. headline tags are what are used to form the contents text syntax: note that to the left is the syntax Added tag 0.2.8 for changeset efb842bd4f73 Added signature for changeset 7f938354de9c increase realVersion and version 0.4.4 with updated ant drak@kaverne (91): fix localization and other minor stuff actually switch to an exact copy of the ShareWiki b17 source. add missing activelink template. review everything except for mylyn fix whitespace in review notes. Document the last version of textile-j under LGPL Compiling with Textile-J works. Removed mylyn stuff (under EPL). Use LGPL 2.1 as License, since I may now do that after replacing mylyn wikitext with textile-j, since the original author of sharelink could only have shared this (legally) under a GPL compatible license. add basic syntax help update l10n add syntax help {toc} include the NEWS in the source tarball. rename plugin to Sharesite keep the backup format the same: loads ShareWiki backups update version to 0.2.2 with realVersion 2 update NEWS actually move to Sharesite replace freesite URL link to the Sharesite Freesite instead of ShareLink template: Add ids for header and footer to simplify CSS design more consistent IDs for CSS harmonize coding style harmonize coding style added an activelinkUri field. todo: discuss using a redirect for the activelink increment version to 0.2.4 Added tag 0.2.4 for changeset f6689b03c70c Added signature for changeset be98370f3504 increment build number to 27 add NEWS entry for 0.2.4 Added signature for changeset 03a85d80dfae fix: compare strings with .equals() update version and build number. Added tag 0.2.5 for changeset 4489ccf64d09 Added signature for changeset 038bde8cbc27 improve news activelink: note that the URI must be SSK or CHK prepare 0.2.6 add a very basic Makefile prepare version 0.2.7 fix Makefile a bit and update build number. Added tag 0.2.7 for changeset 06c3625ff20b Added signature for changeset cd12c2e21dad Added signature for changeset e3c31f3768f3 syntax help, block elem first plus tabify parse description as textile and name content content. Thanks to banbananabans@CQUZ... from FMS also link to style.css at the bottom Add explicit path option also use the path for the link in the inserter and the site list footer: link to the latest version of Sharesite Update NEWS file ensure that getPath always has something to return url encode / in paths, because it breaks preview and insert. template: enclose description by div, not by p allow restricting inserts to a certain hour of the day improve UI strings fix source selection in Makefile allow setting the upload time to a random hour FIX: adjusted just the parameter, not the attribute Added signature for changeset 76c0e45f2bee merge git tag and hg sign update NEWS add TODO for a random wait time. Makefile: Always run ant clean before ant dist get the version of the running plugin instance, not the plugin class. add a random wait time within the selected hour interval to mask triggering an insert in that hour public static final -> private static final *happy* Increase version to 0.4.0: We now support convenient anonymous usage update NEWS textilej: add a special case for freenet keys (thank you, you know who you are) file bugs to keep the feature requests from FMS add a template for the initial content (preparation to ease starting to write) show insertHour setting after the path (at the top) version 0.4.1 insertHour below content field add default content update NEWS Added tag 0.4.1 for changeset 2a59727908b1 Added signature for changeset 7d4d68e90ef7 switch to Java 1.7 as source and target use try-with-resources to avoid resource leaks. Thanks to Bombe\! cleanup whitespace add show current utc time bug Show the current UTC hour next to the InsertHour field FIX: used wrong replacement value for current utc hour update to 0.4.2 remove unused variable, thanks to Bombe Added tag 0.4.2 for changeset df61855bf1ad Added signature for changeset 7e2afe9b55ca ant: add a copy task to provide a Sharesite.jar for the release scripts Freereader changes: Alexandre Rio (3): Change installation process for official plugins Remove unnecessary detailed explanation Replace svnVersion number with gitVersion Florent Daigniere (4): update the URL to get jaxen-1.1.1 from Merge branch 'master' of https://github.com/AlexandreRio/plugin-Freereader into AlexandreRio-master Merge branch 'AlexandreRio-master' Release v6 Library changes: KingSloth (1): Fix NullPointerException on old or negative USK edition RdrOfTheSt0rm (2): use freds logger adjust logging levels Steve Dougherty (1): Merge remote-tracking branch 'RdrOfTheSt0rm/use-fred-logger' myself (1): Merge branch 'ksloth-fix-npe' of github.com:bertm/plugin-Library --- Arne Babenhauserheide (2): Update Sharesite to 0.4.4 Update Library to v37 Arne Babenhauserheide (freenet releases) (2): Update default bookmark editions Build 1476 Bert Massop (35): Always keep FOAF locations sorted Reduce algorithmic complexity of FOAF routing PeerLocation: avoid autoboxing, replace list with array PeerLocation: avoid NullPointerException PeerLocation: add unit test and fix discovered bugs PeerLocationTest: additional paranoia Implement GIF87a filter Add support for GIF89a Throw user-readable exception on EOFException Fix missing block termination Add support for Netscape GIF Loop Extension Improve GIFFilter documentation Add GIFFilter error messages to l10n Update GIFFilter status Simplify condition Use IMAGE_SEPARATOR constant appropriately Actually filter GIF87a instead of just preparing for it Add unit test for GIFFilter Get rid of some asserts; clamp the values instead Make SSL work on Java 8+ Extend self-signed certificate life to 10 years Switch to non-outdated high-security SSL crypto Improve SSL error messages Factor out magic values for SSL nextgens suggested to use 256-bit ECDSA instead Improve SparseBitmap efficiency Rewrite BitArray to use BitSet internally Use LinkedList instead of our own DoublyLinkedList Move LimitedEnumeration into its sole using class Remove unused LimitedRangeIntByteArrayMap Deprecate SortedIntSet, document its peculiarities and simplify Remove unused Timer Integer.hashCode() is not available on Java 7; just use the value Improve clarity and brevity of SortedIntSet Add unit test for SortedIntSet Florent Daigniere (1): Display the default value as intended drak@kaverne (2): fix update uri notes update NEWS file xor-freenet (9): BookmarkItem: Remove unused constructor... BookmarkItem: Store the belonging BookmarkManager BookmarkItem: Persist "Bookmark Updated" user alerts across restarts BookmarkManager: Fix losing update alerts if shutting down <5 min after them FProxy bookmarks: Mark updated ones with bold link FProxy bookmarks: Add button to dismiss update notifications FProxy bookmarks: After clicking the dismiss button go back to same section of page Fix whitespace to adhere to Google Java Style Guide Remove trivially obvious comment
build01475: 2016-06-25
2016-06-25
Freenet 0.7.5 build 1475 is now available. It materializes several months of work (the previous release was rushed to fix frostbite) and features some major changes.
It will become mandatory on July 15th.
The following bugs have been fixed/implemented:
- 0006745: Disk crypto: Should type password twice when setting it
- 0006344: Change default compatibility mode to COMPAT_1466
- 0006488: using “visit freesite” to visit a freesite with a hash (#) fails instead of opening it and jumping to the anchor.
Summary of changes:
- fix a critical bug: prevent announcement loops
- drop support for negtype9 (non-cummulative ack logic)
- start to warn user that java7 is EOL
- PluginInfoMessage: Fix wrong "does not provide FCP" info about plugins
- Stop warning users that java9 isn't recent enough
- Don't use FOAF if the HTL isn't high enough
- Attempt to update update.sh
- l10n improvements
- cooldown improvements
- load-limiting changes (token buckets)
- MessageFilter improvements
- relax the CSS parser (see #446)
- support for HTML Audio tags
- ask/confirm the disk-crypto password in the wizard
- make the paste-a-key control usable on the WelcomeToadlet
- the default compatibility mode for inserts is now COMPAT_CURRENT
- remove the DSA related parameters from noderefs
- Fix a major bug that might explain the poor connectivity since 1473
Thank you for using Freenet!
- Florent Daigniere
diffstat:
.classpath | 2 +-
.settings/org.eclipse.jdt.core.prefs | 7 +-
build.properties | 2 +-
dependencies.properties | 8 +-
src/freenet/client/InsertContext.java | 3 +-
src/freenet/client/async/ClientLayerPersister.java | 7 +-
.../client/async/ClientRequestSelector.java | 27 +-
src/freenet/client/async/DatastoreChecker.java | 50 +-
src/freenet/client/async/KeyListenerTracker.java | 182 ++--
src/freenet/client/filter/CSSTokenizerFilter.java | 26 +-
src/freenet/client/filter/GIFFilter.java | 10 +-
src/freenet/client/filter/HTMLFilter.java | 59 ++
src/freenet/clients/fcp/FCPServer.java | 10 +-
src/freenet/clients/fcp/LoadPlugin.java | 5 +
src/freenet/clients/fcp/PluginInfoMessage.java | 5 +-
src/freenet/clients/fcp/ProtocolErrorMessage.java | 1 +
src/freenet/clients/http/FProxyToadlet.java | 8 +-
src/freenet/clients/http/PproxyToadlet.java | 3 +
.../clients/http/SecurityLevelsToadlet.java | 94 +-
src/freenet/clients/http/WelcomeToadlet.java | 31 +-
.../clients/http/staticfiles/defaultbookmarks.dat | 16 +-
.../http/wizardsteps/SECURITY_PHYSICAL.java | 21 +-
src/freenet/crypt/DSAPublicKey.java | 28 +-
src/freenet/crypt/ECDSA.java | 41 +-
src/freenet/crypt/EncryptingIoAdapter.java | 203 ----
src/freenet/io/comm/MessageCore.java | 6 +-
src/freenet/io/comm/MessageFilter.java | 45 +-
src/freenet/l10n/BaseL10n.java | 25 +-
src/freenet/l10n/freenet.l10n.de.properties | 3 +-
src/freenet/l10n/freenet.l10n.en.properties | 24 +-
src/freenet/l10n/freenet.l10n.es.properties | 4 +-
src/freenet/l10n/freenet.l10n.fr.properties | 4 +-
src/freenet/l10n/freenet.l10n.it.properties | 2 +-
src/freenet/l10n/freenet.l10n.nb-no.properties | 3 +-
src/freenet/l10n/freenet.l10n.nl.properties | 4 +-
src/freenet/l10n/freenet.l10n.pt-br.properties | 1 -
src/freenet/l10n/freenet.l10n.ru.properties | 2 +-
src/freenet/l10n/freenet.l10n.zh-cn.properties | 4 +-
src/freenet/l10n/freenet.l10n.zh-tw.properties | 4 +-
src/freenet/node/AnnounceSender.java | 2 +-
src/freenet/node/BasePeerNode.java | 3 -
src/freenet/node/BaseSender.java | 8 +-
src/freenet/node/DarknetPeerNode.java | 4 +-
src/freenet/node/DatabaseKey.java | 7 -
src/freenet/node/FNPPacketMangler.java | 19 +-
src/freenet/node/NPFPacket.java | 73 +-
src/freenet/node/NewPacketFormat.java | 6 +-
src/freenet/node/NewPacketFormatKeyContext.java | 3 +-
src/freenet/node/Node.java | 316 +-----
src/freenet/node/NodeClientCore.java | 1061 +++++++++++---------
src/freenet/node/NodeCrypto.java | 131 +--
src/freenet/node/NodeDispatcher.java | 24 +-
src/freenet/node/NodeStarter.java | 4 +-
src/freenet/node/NodeStats.java | 186 ++--
src/freenet/node/OpennetPeerNode.java | 4 +-
src/freenet/node/PeerManager.java | 4 +-
src/freenet/node/PeerNode.java | 17 +-
src/freenet/node/RequestStarter.java | 19 +-
src/freenet/node/RequestStarterGroup.java | 24 +-
src/freenet/node/SeedClientPeerNode.java | 2 +-
src/freenet/node/SeedServerPeerNode.java | 2 +-
src/freenet/node/fcp/AllDataMessage.java | 22 -
src/freenet/node/fcp/BaseDataCarryingMessage.java | 7 -
src/freenet/node/fcp/ClientGet.java | 132 ---
src/freenet/node/fcp/ClientPut.java | 183 ----
src/freenet/node/fcp/ClientPutBase.java | 72 --
src/freenet/node/fcp/ClientPutDir.java | 105 --
src/freenet/node/fcp/ClientRequest.java | 138 ---
src/freenet/node/fcp/CompatibilityMode.java | 59 --
src/freenet/node/fcp/DataCarryingMessage.java | 13 -
src/freenet/node/fcp/ExpectedHashes.java | 18 -
src/freenet/node/fcp/FCPClient.java | 140 ---
src/freenet/node/fcp/FCPMessage.java | 27 -
src/freenet/node/fcp/FCPPersistentRoot.java | 104 --
src/freenet/node/fcp/GetFailedMessage.java | 53 -
src/freenet/node/fcp/ProtocolErrorMessage.java | 77 --
src/freenet/node/fcp/PutFailedMessage.java | 42 -
src/freenet/node/fcp/SimpleProgressMessage.java | 52 -
src/freenet/node/fcp/package-info.java | 3 -
src/freenet/node/useralerts/JVMVersionAlert.java | 2 +-
src/freenet/pluginmanager/OfficialPlugins.java | 4 +-
src/freenet/pluginmanager/PluginManager.java | 28 +-
src/freenet/support/JVMVersion.java | 18 +-
src/freenet/support/PrioritizedTicker.java | 242 +++--
src/freenet/support/Ticker.java | 36 +
src/freenet/support/TokenBucket.java | 6 +-
src/freenet/support/TrivialTicker.java | 7 +
src/freenet/support/io/ArrayBucket.java | 4 +-
test/freenet/client/filter/CSSParserTest.java | 2 +-
test/freenet/crypt/EncryptingIoAdapterTest.java | 203 ----
test/freenet/node/NewPacketFormatTest.java | 38 +-
test/freenet/node/NodeAndClientLayerBlobTest.java | 110 ++
test/freenet/node/NodeAndClientLayerTest.java | 85 ++
test/freenet/node/NodeAndClientLayerTestBase.java | 40 +
test/freenet/node/NullBasePeerNode.java | 5 -
test/freenet/store/SlashdotStoreTest.java | 12 +-
test/freenet/support/CheatingTicker.java | 6 +
test/freenet/support/JVMVersionTest.java | 19 +-
test/freenet/support/PrioritizedTickerTest.java | 270 ++++-
test/freenet/support/SpeedyTicker.java | 25 +
100 files changed, 1981 insertions(+), 3327 deletions(-)
Git shortlog:
Arne Babenhauserheide (1):
audio-tag: add ?type=audio/mpeg to src-uris
Bert Massop (8):
Fix MessageFilter cleanup delay time
Replace traversal-only LinkedList and HashMap by ArrayList
Reduce frequency of MessageFilter cleanup job
Cleanup KeyListenerTracker
Fix a corner case in BloomFilter length
NodeStats: reduce code duplication in request location tracking
Fix parsing of Java versions >= 9 (JEP-223)
Force stripping ECDSA signature padding: BC 1.54 has retarded checks
Florent Daigniere (86):
Remove the DSA params from the noderefs
Merge branch 'localise-fde-hyperlink' of https://github.com/toad/fred-staging into toad-localise-fde-hyperlink
Merge branch 'toad-localise-fde-hyperlink' into next
Merge branch 'fix-db4o-source-path' of https://github.com/xor-freenet/fred-staging into xor-freenet-fix-db4o-source-path
Merge branch 'xor-freenet-fix-db4o-source-path' into next
Merge branch 'fix-eclipse-java-version' of https://github.com/xor-freenet/fred-staging into xor-freenet-fix-eclipse-java-version
Merge branch 'xor-freenet-fix-eclipse-java-version' into next
Merge branch 'PR500-fixup' of https://github.com/xor-freenet/fred-staging into xor-freenet-PR500-fixup
Merge branch 'xor-freenet-PR500-fixup' into next
Merge branch 'plugins-disable' of https://github.com/toad/fred-staging into toad-plugins-disable
fix indent
Merge branch 'toad-plugins-disable' into next
Merge branch 'lazy-start-datastore-checker' of https://github.com/toad/fred-staging into toad-lazy-start-datastore-checker
fix indent
Merge branch 'toad-lazy-start-datastore-checker' into next
Merge branch 'cooldown-fixes' of https://github.com/toad/fred-staging into toad-cooldown-fixes
fix indent
Merge branch 'toad-cooldown-fixes' into next
Merge branch 'remove-load-limiting-high-level-token-buckets' of https://github.com/toad/fred-staging into toad-remove-load-limiting-high-level-token-buckets
code style
Merge branch 'toad-remove-load-limiting-high-level-token-buckets' into next
Merge branch 'simple-messagefilter-fixes' of https://github.com/bertm/fred-staging into ber...
build01474: 2016-06-05
Freenet 0.7.5 build 1474 is now available. This is an emergency bugfix release, hence I am releasing it rather than Steve while he is incapacitated. It fixes some important bugs, one of which is involved in the current attacks on Frost and Sone.
Summary of changes:
- Fix the Frostbite bug: if the node downloads a malicious key, this would cause the whole client layer to break. This is currently being actively used to attack Frost and Sone.
- Automatically upgrade nodes to use the minimum bandwidth limit if necessary. Some nodes were unable to start up because their bandwidth limit was too low. Apologies to anyone affected by this. Also, improve the logic that sets the per-second bandwidth limits from a monthly setting. Obviously, you should be very careful if using Freenet on a connection with a monthly transfer limit.
- Minor security improvements to the web interface.
If your node is unable to update because of the Frostbite bug, please turn off the affected applications (unload the Web of Trust and Sone plugins and shut down Frost), and then restart the node. It should pick up the update within a few hours. If it still doesn't work, the update.cmd or update.sh scripts may fix the problem, but they will access our website in a traceable manner.
Thank you for using Freenet!
- Matthew Toseland
Git shortlog:
Bert Massop (4):
BloomFilter: additional sanity checking of length and hash count
Add more splitfile sanity checks
Make KeyListenerTracker more resilient
Fix a corner case in BloomFilter length
Florent Daigniere (7):
Set rel='noreferrer noopener' where appropriate
Merge branch 'do-not-die-on-too-low-bandwidth' of https://github.com/ArneBab/fred-staging-1 into ArneBab-do-not-die-on-too-low-bandwidth
Merge branch 'ArneBab-do-not-die-on-too-low-bandwidth' into next
Merge branch 'frostbite-hotfix' of https://github.com/bertm/fred-staging into bertm-frostbite-hotfix
Merge branch 'bertm-frostbite-hotfix' into next
Merge branch 'avoid-claiming-magic' of https://github.com/Thynix/fred-staging into Thynix-avoid-claiming-magic
Merge branch 'Thynix-avoid-claiming-magic' into next
Matthew Toseland (1):
Build 1474, mandatory in a week but crucial bugfixes
Steve Dougherty (3):
Merge remote-tracking branch 'ArneBab/do-not-die-on-too-low-bandwidth' into next
Merge remote-tracking branch 'nextgens/use-noreferrer' into next
l10n: avoid suggesting tracing is impossible
drak@kaverne (5):
FIX: on too low bandwidth, use min bandwidth
node init: log increase of bandwidth to minimum
fixed bandwidth selection per month
whitespace (tabify)
use asymptoticDlFraction + fix whitespace
build01473: 2016-05-21
Freenet 0.7.5 build 1473 is now available. This is the first build to require Java 7! It upgrades Bouncy Castle to version 1.54, and adds a Traditional Chinese translation to the Windows installer. Plugin updates: * Add Sharesite - a fork of ShareWiki - as an official plugin. Thanks to ArneBab for getting it ready! It includes an earlier version of TextileJ to avoid license problems, and adds syntax help, external activelink support, and a template with div IDs for easier CSS. * Update Freereader with the ability to configure the site title and subtitle, and fix the translation support. User-facing core change highlights: * Improve MP3 filtering. * Add The Filtered Index to the default bookmark list. * Fix handling of filenames with non-ASCII spaces. * Alphabetize language configuration dropdown. * Add Hungarian translation support. The translation was added previously but not actually available. * Fix dropping low-traffic connections. This helps with simulations. * Optimize FProxy CSS load order, and fix bugs which prevented caching static assets. This improves web interface responsiveness. Thank you for using Freenet! - Steve Dougherty Developer changelog: 2016-05-21 This is the first build to require Java 7! It upgrades Bouncy Castle to version 1.54, and adds a Traditional Chinese translation to the Windows installer. Plugin updates: * Add Sharesite - a fork of ShareWiki - as an official plugin. Thanks to ArneBab for getting it ready! It includes an earlier version of TextileJ to avoid license problems, and adds syntax help, external activelink support, and a template with div IDs for easier CSS. * Update Freereader with the ability to configure the site title and subtitle, and fix the translation support. Core change highlights: * Improve MP3 filtering. * Reduce test memory usage. * Fix opennet announcements not having location set. * Fix binary blob download over FCP. * Add The Filtered Index to the default bookmark list. * Wait for running transfers on RouteNotFound. * Mark Freenet traffic with QoS. * Fix handling of filenames with non-ASCII spaces. * Alphabetize language configuration dropdown. * Remove NativeBigInteger. This reduces custom code. * Use BouncyCastle's DSA implementation. This improves security and reduces custom code. * Add Hungarian translation support. The translation was added previously but not actually available. * Add random delay to opennet ACKs to improve security. * When converting USK to SSK change negative suggested edition to positive. This should help avoid issues when using USKs with suggested search editions. * Discard unwanted submessages from swap replies. This improves security. * Fix dropping low-traffic connections. This helps with simulations. * Optimize FProxy CSS load order, and fix bugs which prevented caching static assets. This improves web interface responsiveness. Changes since Freereader version 4: --- Alexandre Rio (4): Add l10n files to the final jar Clean readme files and format them to markdown Ignore meta files and build folders Create ToadletContainer with l10n key instead of value Matthew Toseland (2): Fix build Fix build. aleph (3): Add missing : remove space Excessive l10n drak@kaverne (4): add option to use override.properties. use the basename as title of the inserted page. indent with tabs (as in the surrounding code). make site title and subtitle configurable. Includes some code duplication to avoid db4o problems. hernic (1): Update build.xml nicolas hernandez (7): Fix deprecation Add UTF-8 marker Reorganize imports (some old not valid imports) Update build.xml Add l10n mechanism for internationalization First local file Update build.xml Changes since Fred build 1472: --- Bert Massop (21): Fix parsing of sampling frequency Fix parsing of emphasis Fix parsing of padding bit Always consider an invalid header a frame sequence interruption Explicitly skip entire ID3v1 and ID3v2 tags Add unit tests for MP3Filter Fix MPEG version >1 layer III frame size calculation Cleanup MP3Filter a bit Remove redundant braces Replace octal notation with decimal Always URL-encode non-ASCII space characters Add testcase for URI-safe URL-encoding Reduce memory usage of SplitFileInserterStorageTest Rename misleading "Filename" column in upload queue Simplify buttons and behaviour for QueueToadlet Rephrase "In Progress:" queued requests to be "Running" Rename "Wrapper" settings to "Java settings" Make seednodes.fref parsing more robust Clarify comment in seednodes reader Store updated seednodes.fref in nodeDir, not userDir Fix uncompleted uploads being treated as failed in queue Daniel Roberts (2): Fix peer node network traffic statistics Make the traffic-at-startup counters final David ‘Bombe’ Roden (3): Make the first-time wizard configurable Remove direct calls to SubConfig constructor Hide “remove from cache” checkbox for plugins loaded from disk Eleriseth (3): FreenetURI.sskForUSK: negate negative suggestedEdition HMACTest: fix benchmark code HMACTest: benchmark various sizes Florent Daigniere (55): Upgrade to BouncyCastle 1.54 Make deterministic ECDSA signatures (RFC6979) Make DSA signatures deterministic too Comment the DSA code, fix a busy loop HMAC: replace our implementation by the JCA's Configure travis to test with java8 instead of java6 Add a lousy benchmark to show that it's not slower Ensure that we always get 32bytes worth of DSA privkey Fix an obvious side-channel in the legacy DSA code Revert "Fix an obvious side-channel in the legacy DSA code" Target java7 Update the eclipse build file to use BC1.54 Tell users to download BC from their website Mark all FNP traffic with Diffserv AF13 Make it configurable Add a period to the l10n string Use IPTOS_THROUGHPUT instead of AF13 Fix inconsistent braces Spaces before language constructs Throw an IllegalArgumentException instead of reverting back to default Plugins might require java1.8 Use SoftReferences for the SHA256 pool SHA256: let the JVM decide how big the pool should be remove dead code Bertm is right, Sun java is no more I've missed these two with my regexp Use a Queue and make it lockless (thanks bertm) A better version of the same thing formatting Add a new test to catch a crypto-bug happening on next It turns out that we need truncated HMACs hmacLength is a variable that has no reason to exist Add more codepoints as defined by RFC1349 bertm is right, this is not fatal berm made a fair point, we should force the restart Fix logging on DarknetPeerNode We need to write to the peer-file when we add a darknet peer; duh! Ensure that we always write the peer file when we add a peer Add showoutput=yes to junit parameters More debugging in junit parameters; disable forking doh Add a new formatter to try to catch the exception; ensure that we don't paralellize; allocate more memory for each test Add junit3 to build-deps revert last commit, remove threads=1 for junit (not supported in ant 1.8) remove threads=1 for junit (not supported in ant 1.8) delegate the DSA magic to bouncycastle; this hasn't been tested always try both with and without the signature mask get rid of NativeBigIntegers explain the hash truncation doh update comments about truncation meh. Travis' wget is broken ensure that we always return the MD The old logic reverses the boolean, I guess we should keep it that way Simplify and comment the hash truncation logic Matthew Toseland (17): Recreate message, as required Fix keepalives Pass in now Optimise Fix race condition in MultiMessageCallback Random delay for opennet ack when not path folding (locally) Reduce to 3 pings/blocks Use ping or bwlimit, whichever is larger. Logging Argh (logging) Use real-time bulk transfer time But add the ping time to the delay time, as both matter Add javadocs to MultiMessageCallback Assertion: Can't make() after arm() Give a code example in javadocs Better overall explanation Fix code sample Sadao (1): fcp: fix zero-length binary blob download Steve Dougherty (21): DatabaseKey: simplify return condition HMAC_legacy: remove trailing whitespace README: add Travis build status crypt/DSA: fix specifying extra argument fcp: fix ReturnType.DIRECT NPE README.md: add Coverity status badge Remove newly added trailing whitespace BaseL10n: fix spelling of "ensure" DSAGroup: fix mixed tabs and spaces RequestSender: fix whitespace RequestSender: rework value clamping Add Sharesite as an official plugin CONTRIBUTING: fix style guide link l10n: add Sharesite plugin name Update translations Remove outdated translation strings Update Freereader to version 5 Revert "test: fix resource path on Java 6" Fix indentation Update default bookmark editions Build 1473 drak@kaverne (19): http: expiry time 1 day from now, not one day from mod static files: implement cacheControl inspired by the commit from bertm css themes: add missing /static/information.png and alert.png css: turn base into a pure interface and import the sub-files directly in the theme css: Do not import base.css in the static themes update NEWS file http: cache-control, remove ETag update NEWS file documentation: 2MB manifest means 62 CHK redirects default config: min filesize for complaining is 50MiB default config: minimum bandwidth 10 KiB readme: start cleanup (i.e. stop calling 0.7 new) readme: capitalize titles (instead of uppercase) and remove 0.5 section Rename security to Usage and shorten it chat page: use negative usk numbers chat: set Sone minimal version to 72. bookmarks: add the filtered index and improve Nerdageddon entry add missing staticfile images for themes add more missing staticfile images for themes xor-freenet (3): FProxy configuration: Sort language dropdown alphabetically BaseL10n: Remove useless cast BaseL10n: Add support for Hungarian translations yadevel (3): Add missing assignment for Opennet announce location Avoid claiming of unrejected messages by NodeDispatcher wait for running transfers before processing RNF