Commit Graph

17 Commits

Author SHA1 Message Date
jahway603
ccfd17b3b2 minor change 2022-03-27 00:40:46 -04:00
Duke Leto
4a536d62dc Update copyrights 2021-04-17 13:03:22 -04:00
Duke Leto
fe0d371165 Improve TLS error reporting 2021-03-29 09:57:03 -04:00
Duke Leto
ca4fb7b9a0 TLS tweaking and freaking 2021-01-24 19:30:54 -05:00
Duke Leto
415636af68 Improve TLS p2p error-handling and reduce logspam 2021-01-24 15:57:21 -05:00
Duke Leto
1488a03f1c Improved TLS error handling and teach getpeerinfo about cipher of each connection 2021-01-24 15:06:34 -05:00
Duke Leto
c9b4dfa9c7 Force WolfSSL side-channel resistance
There seems to be some build-bug in WolfSSL, such that even though
--enable-harden (HARDEN) is default, it's not set correctly in options.h .

So we define it correctly just after parsing all other config options
BUT BEFORE we load the rest of WolfSSL headers.

These will be defined no matter what options are given to wolfssl ./configure:

ECC_TIMING_RESISTANT
TFM_TIMING_RESISTANT
2021-01-24 13:09:25 -05:00
Duke Leto
b58c15b9fb update copyrights 2020-12-10 07:45:36 -05:00
miodragpop
3ae6205a9b tls shape-up 2020-11-03 16:09:20 +01:00
miodragpop
9ff7565901 OpenSSL replaced by WolfSSL 2020-10-28 22:13:52 +01:00
miodragpop
eaed7355c6 tls rework 2020-10-23 21:17:20 +02:00
Duke Leto
be16f80abc Hush Full Node is now GPLv3
Any projects which want to use Hush code from now on will need to be licensed as
GPLv3 or we will send the lawyers: https://www.softwarefreedom.org/

Notably, Komodo (KMD) is licensed as GPLv2 and is no longer compatible to receive
code changes, without causing legal issues. MIT projects, such as Zcash, also cannot pull
in changes from the Hush Full Node without permission from The Hush Developers,
which may in some circumstances grant an MIT license on a case-by-case basis.
2020-10-21 07:28:10 -04:00
Duke Leto
155c310be0 Make nodes randomly prefer one ciphersuite or another upon startup 2020-10-03 12:59:22 -04:00
Duke Leto
9bae61c894 Merge pull request #146 from miodragpop/hush3-tls
Patch: openssl config to build support for TLS_CHACHA20_POLY1305_SHA256 cipher
2020-10-03 06:29:26 -07:00
miodragpop
de8a436f3b limiting available ciphers to a few strongest 2020-10-03 13:54:44 +02:00
Duke Leto
46177addbe Update copyrights 2020-10-03 07:20:17 -04:00
miodragpop
62f67821ec tls implemented 2020-09-29 13:08:45 +02:00