Commit Graph
20 Commits
Author SHA1 Message Date
Jonathan "Duke" Leto 5d2307a709 Update copyrights to 2022 2022-09-19 15:45:30 -07:00
jahway603 ccfd17b3b2 minor change 2022-03-27 00:40:46 -04:00
Duke Leto 4a536d62dc Update copyrights 2021-04-17 13:03:22 -04:00
Duke Leto fe0d371165 Improve TLS error reporting 2021-03-29 09:57:03 -04:00
Duke Leto ca4fb7b9a0 TLS tweaking and freaking 2021-01-24 19:30:54 -05:00
Duke Leto 415636af68 Improve TLS p2p error-handling and reduce logspam 2021-01-24 15:57:21 -05:00
Duke Leto 1488a03f1c Improved TLS error handling and teach getpeerinfo about cipher of each connection 2021-01-24 15:06:34 -05:00
Duke Leto c9b4dfa9c7 Force WolfSSL side-channel resistance
There seems to be some build-bug in WolfSSL, such that even though
--enable-harden (HARDEN) is default, it's not set correctly in options.h .

So we define it correctly just after parsing all other config options
BUT BEFORE we load the rest of WolfSSL headers.

These will be defined no matter what options are given to wolfssl ./configure:

ECC_TIMING_RESISTANT
TFM_TIMING_RESISTANT
2021-01-24 13:09:25 -05:00
Duke Leto e3a68dfdfb Hush is the extreme future, Komodo is the KYC past 2020-12-16 22:49:58 -05:00
Duke Leto b58c15b9fb update copyrights 2020-12-10 07:45:36 -05:00
miodragpop 3ae6205a9b tls shape-up 2020-11-03 16:09:20 +01:00
miodragpop 9ff7565901 OpenSSL replaced by WolfSSL 2020-10-28 22:13:52 +01:00
miodragpop 6aac6ed3d7 ECDSA certificate generation 2020-10-27 13:45:55 +01:00
miodragpop eaed7355c6 tls rework 2020-10-23 21:17:20 +02:00
Duke Leto be16f80abc Hush Full Node is now GPLv3
Any projects which want to use Hush code from now on will need to be licensed as
GPLv3 or we will send the lawyers: https://www.softwarefreedom.org/

Notably, Komodo (KMD) is licensed as GPLv2 and is no longer compatible to receive
code changes, without causing legal issues. MIT projects, such as Zcash, also cannot pull
in changes from the Hush Full Node without permission from The Hush Developers,
which may in some circumstances grant an MIT license on a case-by-case basis.
2020-10-21 07:28:10 -04:00
Duke Leto 155c310be0 Make nodes randomly prefer one ciphersuite or another upon startup 2020-10-03 12:59:22 -04:00
Duke Leto 9bae61c894 Merge pull request #146 from miodragpop/hush3-tls
Patch: openssl config to build support for TLS_CHACHA20_POLY1305_SHA256 cipher
2020-10-03 06:29:26 -07:00
miodragpop de8a436f3b limiting available ciphers to a few strongest 2020-10-03 13:54:44 +02:00
Duke Leto 46177addbe Update copyrights 2020-10-03 07:20:17 -04:00
miodragpop 62f67821ec tls implemented 2020-09-29 13:08:45 +02:00