4ffaf4128e
SU3File:
...
- enum for content type
- fix NPE if private key not found
- use certs instead of public keys for verification
- improve validate-without-extract
- new extract command
2013-09-13 13:02:37 +00:00
801ca47a0c
add Koblitz curves for testing
2013-09-13 00:49:10 +00:00
43f5062169
SSLEepGet: Move all certificates to certificates/ssl, in preparation
...
for other certificate uses by SU3File
2013-09-12 21:47:25 +00:00
7ab4dd7f4b
KeyStoreUtil:
...
- Overwrite check in createKeys()
- New getCert(), getKey()
SU3File:
- Store generated keys in keystore
- Get private key for signing from keystore
2013-09-12 20:22:30 +00:00
71c0104236
Add base algorithm type in prep for RSA
2013-09-12 18:23:28 +00:00
a608d21571
KeyStore: change keygen default to RSA 2048 (ticket #1017 )
...
fix key length setting
2013-09-12 14:55:16 +00:00
935ddaa0b2
fix default expiration
2013-09-12 14:41:25 +00:00
945e7b75fd
Crypto - prep for using certificates in SU3File:
...
Consolidate KeyStore code from SSLEepGet, I2CPSSLSocketFactory,
SSLClientListenerRunner, and RouterConsoleRunner into new
KeyStoreUtil and CertUtil classes in net.i2p.crypto (ticket #744 )
2013-09-12 14:27:16 +00:00
a8a21ea7ce
propagate from branch 'i2p.i2p' (head 6667c4a9f9fcc0705e407006d1933dd31942ffb2)
...
to branch 'i2p.i2p.zzz.ecdsa' (head bf746450400fc5ffa0e727ed0cd6a3966f6ce51f)
2013-09-10 13:03:40 +00:00
23444e4b81
* Router: Log new router hash in event log after rekeying
2013-09-10 12:25:24 +00:00
a3ea1f9429
remove static log
2013-09-10 12:23:45 +00:00
78d4b6d8a7
- Simple DirKeyRing backend for testing
2013-09-09 19:46:24 +00:00
3e3399adc6
- Add Java key import to SigUtil
...
- Import priv key to SU3File in Java encoded format instead of I2P format
- New KeyRing stub
2013-09-09 00:49:14 +00:00
1e554dd0fe
- Move I2P-to-Java DSA key conversion from DSAEngine to SigUtil
...
- Add Java-to-I2P DSA key conversion to SigUtil
- Export keys from SU3File in Java encoded format instead of I2P format
2013-09-08 21:47:48 +00:00
meeh
388e7088e1
Updating cert for reseed.info
2013-09-08 16:14:53 +00:00
zab2
e65289cd0d
Document logCloseLoop() methods
2013-09-08 15:23:09 +00:00
zab2
c4d68a8352
minor cleanup
2013-09-08 15:21:25 +00:00
zab2
7be0a93251
Use AtomicBoolean to prevent multiple close()-s
2013-09-08 13:18:47 +00:00
zab2
175f47293a
Ticket #1012 - remove nested locking on close() and
...
finishInboundEstablishment()
2013-09-08 13:13:14 +00:00
27936fce04
cache key conversion
2013-09-08 13:06:30 +00:00
zab2
592680302f
make the logCloseLoop() methods members of the Log class
...
so they can be used everywhere
2013-09-08 12:55:05 +00:00
55318cf14b
Crypto: Set file modes on written keys; don't overwrite existing files
2013-09-08 11:57:15 +00:00
83ead0c304
- SU3File: Readahead to get sigtype on verify, as we need the hash type
2013-09-07 20:24:40 +00:00
38ec55bc72
- DSAEngine: Implement raw ECDSA sign/verify
...
- SU3File: Implement keygen
2013-09-07 19:37:02 +00:00
c4f97ed65e
- DSAEngine: Start of support for signing hashes with other SigTypes
...
- KeyGenerator: Measure sign and verify separately in test
- SU3File: Start to support other SigTypes
- SigType: Add getHashInstance(), fix hash length for ECDSA_SHA256_P192
- SHA1Hash: Add no-arg constructor
2013-09-07 18:12:19 +00:00
78a426e9ac
* Crypto: Don't use "short exponent" on faster platforms.
...
Rebuild router identity if key length doesn't match setting.
This affects RI and LS encryption keys, and DH and YK.
Faster = 64 bit with working jbigi, non-ARM, non-GNU (for now)
Override default with crypto.elGamal.useLongKey=true/false
LS key is built at client startup (Dest key unused)
This will churn most of the RIs at the release.
* SystemVersion: Add isARM()
2013-09-07 13:43:28 +00:00
928b4bbbe5
- genSpec: fallback to BC provider
2013-09-06 13:53:15 +00:00
d27c465371
- KeyPairGen: Catch ProviderException, fallback to BC provider
2013-09-06 13:30:47 +00:00
4d62f63c71
* Start of ECDSA branch:
...
- Add ECConstants which looks for named curves and falls back to
explicitly defining the curves
- Add SigUtil with converters from Java formats (ASN.1, X.509,
PKCS#8) to I2P formats for Signatures and SigningKeys
- Move ASN.1 converter from DSAEngine to SigUtil, generalize
for variable length, add support for longer sequences,
add more sanity checks, add more exceptions
- Attempt to add BC as a Provider
- Add parameters (curve specs) to SigTypes
- Add support for ECDSA to DSAEngine and KeyGenerator
- Add KeyGenerator main() tests
- More javadocs
All is Java 1.5 compatible but the actual algorithms, curves,
and other support aren't necessarily present in any JVM.
Todo: More tests, more fallbacks for various JVMs
2013-09-06 12:04:22 +00:00
f4039b085a
* Crypto: SigType tweaks, prep for parameters, show type in toString()
...
* NativeBigInteger: Don't use native for negative arguments, which aren't supported in jbigi.c
2013-09-06 11:40:50 +00:00
kytv
53ed10cfc8
typo fix (s/lt/le/)
2013-09-04 01:42:12 +00:00
0859dbe57f
* i2ptunnel: Reduce buffer size and use cache in HTTPServer
...
* Jetty: Increase maxIdleTime
2013-09-04 00:46:43 +00:00
42bc4bb1f4
reduce log level
2013-09-03 12:13:07 +00:00
caead8a3a4
consolidate maxMemory() calls
2013-09-03 11:37:36 +00:00
7394c7997b
change pw restart warning to error so people dont miss it
2013-09-03 10:25:18 +00:00
0298e4ab4c
use different sort for floodfill profiles display
2013-09-01 12:12:40 +00:00
e3a5cdbbc2
deprecate most of LeaseSetKeys
2013-09-01 12:12:05 +00:00
zab2
6ae46abac0
fix ticket number
2013-08-31 18:42:07 +00:00
zab2
615a5f3c39
update history
2013-08-31 18:40:39 +00:00
zab2
6812dc1db8
Ticket #1007 use only non-retransmitted packets in RTT
...
sampling. (RFC 6298)
2013-08-31 18:39:29 +00:00
41595cafce
* Addressbook: Don't write to log file on Android (ticket #859 )
2013-08-31 15:35:57 +00:00
d6c4e411be
highlight snark table rows on hover
2013-08-31 15:19:00 +00:00
6ca797ec1f
* Console: Display "accepting tunnels" instead of "rejecting tunnels" after 20 minutes (ticket #902 )
2013-08-30 12:07:42 +00:00
8655988c66
* NTCP: Handle race where peer's NTCP address goes away
2013-08-30 12:01:51 +00:00
de5f2940ce
* SSU, confignet: Add support for specifiying multiple addresses
2013-08-30 10:27:22 +00:00
1933e6239b
* SusiDNS: Don't require last subscription to be terminated by newline (ticket #1000 )
2013-08-30 10:21:57 +00:00
8aec1e2eb6
* Addresses: Treat Teredo addresses 2001:0::/32 as local
2013-08-30 10:20:43 +00:00
zab2
def30c5903
javadoc update
2013-08-14 20:29:40 +00:00
zab2
193f0bbc42
More elegant
2013-08-11 20:21:06 +00:00
kytv
b7a3b7bf05
debian: add missing timestamp to changelog
2013-08-11 17:00:26 +00:00