Thema: Anonym im Netz: Die Darknets kommen

[SiLæncer]

Changelog

Changes

    Console setup wizard improvements
    Tunnel wizard simplification
    New I2CP BlindingInfo message for LS2
    New proxy page to enter encrypted leaseset credentials

Bug Fixes

    Fix tunnel SSL wizard
    Fixes for SusiMail sent and drafts folder page
    Detect IPv6 address changes
    Fix detection and handling of IPv6 firewalled
    Fix manual reseed from URL

Other

    i2ptunnel support for quoted custom options
    i2psnark now starts with reduced tunnel count then increases as necessary
    NTCP performance improvement
    Refactor and speed up tunnel AES processing
    Preliminary support for Servlet 3.0 webapps
    Standardize date/time formatting in console
    Tomcat 8.5.46
    Translation updates
    Update GeoIP data

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

 * Pull translations

2019-11-30 sadie
 * Console, SusiDNS: CSS updates

2019-11-29 zzz
 * Console, proxy, SusiDNS: Add partial Persian translations

2019-11-27 zzz
 * GeoIP update

2019-11-24 zzz
 * Debian: Add apparmor support for Java 11 (Github PR #19)
 * i2psnark: File system error message improvements

2019-11-23 zzz
 * Router:
   - Don't count zero-hop tunnels as part of the pool when building
   - Don't build more than one zero-hop tunnel in a pool
   - Assume high build failure rate for new installs
   - Reduce threshold for tunnel length override

2019-11-20 zzz
 * I2CP:
   - Prevent an uncaught OCMOSJ exception from killing the session
   - Don't put ECIES first in LS2

2019-11-17 zzz
 * SSU: Lower ACKSender log level (ticket #2651)

2019-11-16 zzz
 * Transport: Save IPv6 firewalled state across restarts (ticket #2175)

2019-11-15 zzz
 * Console: Fix plugin icon-code images
 * i2psnark: Don't start tunnels when autostart enabled but no
   torrents set to autostart (ticket #2662)
 * SSU: Remove redundant field (ticket #2659)

2019-11-14 zzz
 * Transport:
   - Fixes for IPv6 firewalled logic (ticket #2175)
   - Fix SSU log value (ticket #2652)
   - Remove unused currentReceiveSecond (ticket #2661)

2019-11-13 zzz
 * Console: Hide buttons on /configkeyring if no entries
 * i2ptunnel: Don't delay after ConnectException if stopped
   (fixes zzzot stop delay)

2019-11-12 zzz
 * i2psnark:
   - Audio playlist support
   - Restrict mime types for HTML5 players

2019-11-11 zzz
 * KeyGenerator: Use new PrivateKey constructor
 * Router: Set default sig type to EdDSA for Android (ticket #2643)

2019-11-08 zzz
 * i2psnark: Add HTML5 players on details page

2019-11-06 idk
 * Router: Use Local Application Data(%LOCALAPPDATA%)
   instead of Roaming for config (ticket #1258)
 * Console: Change home page organization and headers

2019-11-05 zzz
 * Router: No longer check the clove ID in the Bloom filter

2019-11-02 zzz
 * Router: NSR/ES fixes for proposal 144

2019-10-31 zzz
 * Router: Updates for proposal 144

2019-10-27 zzz
 * NetDB: Don't send encrypted lookup reply to ratchet dest
 * OCMOSJ:
   - Bundle unwrapped ack with LS for ratchet dest
   - Keep bundling LS until acked

2019-10-25 zzz
 * Router (proposal 144):
   - Set client SKM based on configured encryption
   - Select target key in LS based on local client's support
   - Hook new SKMs and engines into Garlic Message encryption/decryption
 * Transport: Publish IPv6 address on transition to non-firewalled
   (ticket #2175)

2019-10-24 zzz
 * Router: New SKMs and Engines for Ratchet (proposal 144)

2019-10-23 zzz
 * Build:
   - Recognize gettext 0.20
   - Make 3 release targets, with jbigi/geoip/neither
 * Crypto:
   - New KeyFactory interface
   - Base classes for ECIES-Ratchet (proposal 144)
 * Data:
   - Reduce SessionTag size
   - Cache public key in private key class
   - Add LeaseSet methods to get encryption key by type
 * I2CP:
   - Fix error message for config errors (ticket #2639)
   - Add config to disable loopback for testing
 * i2ptunnel: Add encrytion type selection to form (proposal 144)
 * NetDb: Don't garlic encrypt netdb messages with a ECIES key
 * Router (proposal 144):
   - Add KeyManager support for multiple leaseset private keys
   - Fix logic error in check for local destinations
   - Register all LS2 keys with KeyManager
 * Startup: clients.config.d files must end in ".config"

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

    Changes:

    Dark theme improvements
    Console icon changes
    Move some translations from console to router and core for embedded uses
    Jetty 9.2.29
    Tomcat 8.5.50
    i2psnark HTML5 preview player for partial files

    Bug Fixes:

    Numerous bandwidth test fixes
    Hidden mode fixes to prevent losing peers
    Hebrew translation fixes

    Other:

    Content Security Policy improvements
    SSU extend timeout for large messages
    ECIES-X25519 continued development and fixes
    Cancel timeout jobs on message reply
    Add SSL and SSL redirect support to EepGet
    Translation updates
    Update JBigI library

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Changes

    ECIES-X25519-AEAD-Ratchet encryption complete, ready for testing (proposal 144)
    Hidden Services Manager: Redesign edit pages
    i2psnark: Fix marking torrents as BAD at startup
    NetDB: Support ECIES replies to lookups (proposal 154)
    RRD4J 3.5 replaces jrobin
    Streaming performance improvments using Westwood+ congestion control

Bug Fixes

    Hidden Services Manager: Fixes for changing shared client options, prevent changing certain options while tunnel is running
    Reproducible build fix
    Streaming: Multiple fixes
    UPnP: Several fixes for changing interfaces and devices
    Windows: Fix permissions on install directory

Other

    Build process changes to support git
    Console: Don't show IPv6 temporary addresses as bind options
    Console: Fix up javascript, stricter Content Security Policy
    Crypto: Disable speculative tagset usage
    Eepsites: Add Jetty GzipHandler for Jetty 9.3+
    I2CP: Disable gzip for HTTP server tunnels and i2psnark
    i2psnark: Connect out to other seeds to fetch new comments
    i2psnark: Support file paths in add form
    NetDB: Don't send "fake hash" to indicate exploration
    Profiles: Change decay algorithm
    Profiles: Limit average speed calculation to high capacity peers
    Router: Auto-floodfill now class N minimum
    Router: Checks for key certificates in destinations (proposal 145)
    Router: Enforce minimum version for tunnel peers
    SusiDNS: Support adding Base 32 addresses
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

2020-08-14 zzz
 * Profiles: Create profiles in the nonblocking path

2020-08-10 idk
 * Replace all icons with icons from a single consistent source/style, icons
   used from FontAwesome suggested by design team and selected and edited by
   Sadie.

2020-08-01 zzz
 * Debian: Support libjson-simple-java 3 for bullseye
 * I2NP: Locking for message ID
 * NetDB: Track client that requested LS
 * OCMOSJ: Don't send to a RAP LS
 * Router: Logging fix for client start failures
 * Util:
   - More efficient use of random data
   - Add KeyStore and SHA256 to CLI

2020-07-28 zzz
 * Data: Don't check LS1 revocation signature

2020-07-22 zzz
 * i2ptunnel:
   - Change default encType to both for new tunnels, http client,
     shared clients, and all tunnels for new installs (ticket #2751)
   - Change IRC tunnel sigType to EdDSA for new installs (ticket #2749)
   - Change CONNECT tunnel default sigType to EdDSA (ticket #2749)

2020-07-19 zzz
 * i2psnark: Increase max pipeline, negotiate actual value (ticket #2280)

2020-07-11 zzz
 * NTCP: Atomics for NTCP final state (ticket #2701)
 * OCMOSJ: Don't lookup an expiring LS2 if unpublished

2020-07-07 zzz
 * i2psnark: Change ETA default sort order (ticket #2733)
 * Reseed: Enforce minimum version in generated bundle

2020-07-02 zzz
 * i2ptunnel: Fix missing throttling section for non-HTTP servers (ticket #2758)

2020-06-28 zzz
 * NetDB: Check signature in verify

2020-06-23 idk
 * Update the images on the bandwidth wizard, based on undraw
   assets, used under licenses/LICENSE-Undraw.txt. Design and assets
   were developed by @sadie.

2020-06-22 zzz
 * Sybil: Enable analysis and blocking by default

2020-06-12 zzz
 * I2CP: Meta LS2 error code handling

2020-06-10 zzz
 * Util: Support hostname lookups in LookupDest CLI

2020-06-07 zzz
 * i2ptunnel: Fix missing tunnel quantity section for servers (ticket #2747)
 * Jetty: Update servlet-api

2020-06-06 zzz
 * Data: Fix creation of Encrypted LS2 (ticket #2746)
 * I2CP: Fix issues with persisted leaseset private keys
 * I2CP, i2ptunnel: Check for expired offline signature client-side

2020-06-03 zzz
 * i2psnark: Enable dual-keys
 * Router: Implement ratchet-layer acks (proposal 144)

2020-06-01 zzz
 * Profiles: Make more calls nonblocking
 * Transports: Make unreachable maps concurrent

2020-05-31 zzz
 * Tomcat 9.0.35 (Servlet 4.0)
 * Util: Update json-simple lib to 2.3.0

2020-05-30 zzz
 * Streaming: Increase MTU for ratchet (proposal 155)
 * Util: Fix DoH handling of Cloudflare responses

2020-05-28 zzz
 * Console: RRD4J 3.6 (ticket #2716)

2020-05-27 zzz
 * Installer:
   - Require Java 8 (ticket #2511)
   - Sign the dlls (ticket #2704)
 * Jetty 9.3.28 (ticket #2098)
 * UPnP: More fixes
 * Util: Faster gzip

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Changes

    Avoid old DSA-SHA1 routers for lookups, stores, and tunnel peers
    Block same-country connections when in hidden mode
    BOB: Add deprecation warning
    Build: Drop support for Xenial; ant 1.9.8 or higher required to build
    i2ptunnel: Enable dual-key encryption for most tunnel types
    JBigI: Add library for Linux aarch64, zen, and zen2
    Preliminary support for ECIES-X25519 routers (proposals 152 and 156)
    Ratchet: Efficiency improvements and memory reduction
    SSU: Randomize intro key
    SSU performance improvements
    System tray: Enable by default for Linux KDE and LXDE

Bug Fixes

    Build: Set release property for better runtime compatibility
    Console: Fix Jetty not starting on Java 11.0.9.1
    i2psnark: Limit size of embedded video
    Improved IPv6 address validation
    Installer: Disable pack200 to support Java 14+
    Installer: Add missing linux armv7 and aarch64 wrapper binaries
    i2ptunnel: Filter server response headers when not compressing
    NTCP2: Fix sending termination message on idle timeout
    Streaming: Fix handling of tag options

Other

    Build: Reproducible build fix
    Core: Refactoring of data structures to reduce memory usage
    Crypto: Cache HMAC256 instances
    i2psnark: Hide BEP 48 padding directory in UI
    i2psnark: Checks for unsupported v2 torrents
    i2psnark: Remove old opentrackers
    i2ptunnel: Improved support for offline keys
    Jetty 9.3.29
    NetDB: Increase minimum floodfill version for leaseset lookups
    NTCP: Set nodelay on sockets
    Proxy: Remove old jump servers
    Ratchet: Rotate keys faster
    Tomcat 9.0.40
    Wrapper 3.5.44 (new installs only)
    Zxing 3.4.1
    New partial translations for Kurdish, Turkmen, Argentinian Spanish
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Changes

    Build: Git migration
    Build: Move web resources to wars
    i2psnark WebSeed support
    i2psnark padding file support
    i2ptunnel: Move proxy resources to jar
    Router: Redesign ECIES encryption for floodfills (proposal 156)
    Router: Verify RI stores after startup
    Router: Reduce Sybil threshold
    Router: ECIES for new routers
    Router: Start of ECIES migration
    SSU: Send individual fragments of messages
    SSU: Westwood+ congestion control
    SSU: Fast retransmit

Bug Fixes

    Build: Fix Gradle build
    Crypto: Increase ratchet tag window to prevent message loss
    I2CP: Fix encrypted leaseset combined with ECIES crypto or offline keys
    i2ptunnel: Fix config file saving issues
    Router: Fix leaseset request fails causing watchdog to bark
    Router: Hidden mode fixes
    SSU: Fix partial acks not being sent
    SSU: Fix occasional high CPU usage

Other

    Crypto: AES performance improvements
    DoH: Change to RFC 8484 style
    i2ptunnel: Remove DSA shared clients
    Proxy: Add jump servers
    Router: Add more countries for hidden mode
    Router: Tunnel peer selection changes
    Router: Move Sybil subsystem from console to router for embedded use
    Router: Verify RI stores for a while after startup
    Util: New unit tests
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Changes

    Docker improvements
    NTCP: Remove support for version 1
    Reseed: Use DNSOverHTTPS
    Router: Increase ECIES rekey probability
    Router: Persist Sybil blocklist
    SSU: Enable introducers and introductions via IPv6 (proposal 158)
    Tomcat 9.0.45
    Transports: Publish support for outbound IPv4/v6 (proposal 158)
    UPnP: Add support for IPv6

Bug Fixes

    Debian: Fix link to compiler jar
    i2psnark: Fix theme selection
    Jetty: Fix detection of SSL connector
    NetDB: Fix NPE when validating expired blinded leaseset
    NTP: Year 2036 fixes
    Router: Fix rekeying every restart on ARM
    Router: Fix decryption of encrypted leasesets
    SAM: Fix removal of subsessions
    SSU: Fix excessive dropping by the bandwidth limiter
    SSU: Fix publishing 'C' capability when not an introducer
    SSU: Fixes for firewalled/not firewalled state transitions
    SSU: IPv6 fixes
    SSU: Peer test fixes
    SusiMail: Fix theme selection
    SusiMail: Fix stream closed errors
    SusiMail: Fix corruption in display of large, new messages
    Tunnels: Several fixes in the participating tunnel bandwidth limiter
    UPnP: Fix leases not being renewed before expiration

Other

    Build: Remove empty jars and wars from installers
    Build: Prep for different release and API versions
    Build: Remove launcher code
    Gradle build fixes
    Profiles: Disable tunnel peer test
    Profiles: Remove unused tunnel test response time stat
    SSU: Avoid outbound connections to buggy routers
    Transports: Increase connection limits for some platforms
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Yes, that's right, after 9 years of 0.9.x releases, we are going straight from 0.9.50 to 1.5.0. This does not signify a major API change, or a claim that development is now complete. It is simply a recognition of almost 20 years of work to provide anonymity and security for our users.

This release finishes implementation of smaller tunnel build messages to reduce bandwidth. We continue the transition of the network's routers to X25519 encryption. Of course there are also numerous bug fixes and performance improvements.

As usual, we recommend that you update to this release. The best way to maintain security and help the network is to run the latest release.

RELEASE DETAILS

Changes

    RRD4J 3.8
    Tunnels: Finish support for new build messages (proposal 157)
    Updates: Support for .dmg and .exe updates

Bug Fixes

    Console: Fix generation of SSL keys on Java 17
    i2psnark: Fix autostart for magnets
    Router: Fix rare deadlock in publishing our RI
    SSU: Fix handling of bad peer test responses
    UPnP: IPv6 fixes

Other

    Jetty: Improve sort in directory listings
    Jetty: Add X-I2P-Location header
    Router: Increase probability to rekey to ECIES
    Streaming: Performance improvements for low-latency connections
    Translation updates

Full list of fixed bugs

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Changes

    Console: Add theme selection to new-install wizard
    Jetty 9.3.30.v20211001
    Router: Increase probability of rekey to X25519
    SSU: Performance improvements
    SSU: Improve security of peer test
    Tomcat 9.0.54
    Tunnels: Enable sending new short build messages

Bug Fixes

    i2ptunnel: Fix encryption type selection logic

Other

    Improve support for non-Java plugins
    Router: Reduce tunnel build Bloom filter memory usage
    Updates: More changes to support bundled updaters
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Changes

    BOB: Remove
    i2psnark: New torrent editor
    i2psnark standalone: Fixes and improvements
    i2ptunnel: Support IRCv3 message tags
    NetDB: Lookup/store reliability improvements
    System tray: Add popup messages
    Transport: NTCP2 performance improvements
    Transport: NTCP2 clock skew handling improvements
    Transport: Use priority in SSU sender queue
    Tunnels: Remove outbound tunnel when can't connect to first hop
    Tunnels: Fallback to exploratory for building after repeated build failure
    Tunnels: Enable tunnel testing by default
    Tunnels: Use tunnel builds as a tunnel test

Bug Fixes

    Plugins: Fixes for webapps named different from the plugin
    Reseed: Fixes for IPv6-only
    Router: Fix rare deadlock at startup
    Tunnels: Restore IP restriction tests

Other

    API version: 0.9.53
    i2pcontrol: Improved state mapping
    i2ptunnel: Refactor UDP support
    Plugins: Fixes for webapps
    Router: Workarounds for i2pd 2.40.0 SSU bug
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

    Changes:

    SSU2: Preliminary implementation
    Tomcat 9.0.62

    Bug Fixes:

    Crypto: Fix handling of EdDSA certs with official OID
    I2CP: Fix external connections when session ID is 0
    I2PSnark: Fix size calculation causing tracker errors
    I2PSnark standalone: More fixes and improvements
    Router: Family fixes and improvements
    Router: Fix database store logic
    Router: Fix invalid store and rekeying at startup
    Router: Don't use he.net addresses for GeoIP
    Router: Soft restart fixes
    SSU: Peer test fixes
    SSU: Publish empty IPv6 address when missing introducers
    SSU: Reduce ack delay to improve performance
    Transport: Fix UPnP deadlock
    Tunnels: Don't build client tunnels shorter than minimum length
    UPnP: IPv6 fixes

    Other:

    API version: 0.9.54
    Console: Setup wizard redesign
    i2psnark: Load system mime types if available
    I2PSnark standalone: Add system tray
    Router: Reduce build reply timeout so we will retry faster
    Router: Avoid Sybil penalty for trusted large families
    Source: Remove BOB
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

Changes

    Add deadlock detector
    Periodically send our RI to connected peers
    SSU MTU/PMTU improvements and fixes
    SSU2 base protocol fixes and improvements
    SSU2 peer test and relay implementation
    SSU2 published address fixes
    SSU2: Enable for Android, ARM, and a small portion of others at random

Bug Fixes

    Clock: Fix deadlock after clock shift
    Debian: Apparmor profile fixes
    Don't allow family key errors to crash router
    Fix EC family key loading on Android
    Fix EdDSA key loading on Java 15+
    i2psnark: Fix DHT not restarting after router restart
    OSX: Prevent hangs at shutdown after dock right-click quit
    SSU: Fix publishing of MTU in addresses without IPs
    SSU: Fix rare HMAC NPE
    SusiDNS CSS fixes
    Transport: Improve processing after message delivery failure
    UPnP: Don't briefly bind to all addresses at startup

Other

    Set outproxy to exit.stormycloud.i2p (new installs only)
    Disable SSU introductions on Android
    API version: 0.9.55
    New translation: Spanish (Argentina)
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

    Changes:

    i2ptunnel: Support SHA-256 digest proxy authentication (RFC 7616)
    SSU2: Connection migration
    SSU2: Immediate acks
    SSU2: Enable by default

    Bug Fixes:

    i2ptunnel: Fix IRC USER line filtering
    Installer: Fix path for Windows service, caused local eepsite to be broken
    Installer: Fix error on Windows when username contains a space
    NetDB: Database store message handling fixes
    NetDB: Fix reseeding when clock is skewed
    Router: Deadlock fix
    SSU2: Fix packets exceeding MTU
    SSU2: Fix ping packets less than minimum size
    SSU2: Fix handling of termination acks
    SusiDNS: Fix adding entry to empty address book
    SusiMail: Fix dark theme button icons
    UPnP: IPv6 fix
    Windows: Fix launching preferred browser at startup

    Other:

    Deadlock detector improvements
    Debian: Change dependency from libservlet3.1-java to libjsp-api-java and libservlet-api-java
    i2psnark: Increase max pieces to 64K
    i2psnark: Add links to additional instances in the console
    Option to compress router logs
    Translation updates

[close]

http://www.i2p2.de/

[SiLæncer]

Changelog

    Changes:

    i2psnark: New search feature
    i2psnark: New max files per torrent config
    NetDB: Expiration improvements
    NetDB: More restrictions on lookups and exploration
    NetDB: Store handling improvements
    NTCP2: Banning improvements
    Profiles: Adjust capacity estimates
    Profiles: Expiration improvements
    Router: Initial support for congestion caps (proposal 162)
    Transports: Add inbound connection limiting
    Tunnels: Refactor and improve peer selection
    Tunnels: Improve handling of "probabalistic" rejections
    Tunnels: Reduce usage of unreachable and floodfill routers

    Bug Fixes:

    Docker: Fix graphs not displaying
    i2psnark: Fix torrents with '#' in the name
    i2psnark standalone: Fix running from outside directory
    i2psnark standalone: Remove "Start I2P" menu item from systray
    i2ptunnel: Fix typo in HTTPS outproxy hostname
    i2ptunnel: Interrupt tunnel build if stop button clicked
    i2ptunnel: Return error message to IRC, HTTP, and SOCKS clients on failure to build tunnels
    NTCP2: Ensure an IPv6 address is published when firewalled and IPv4 is not
    Ratchet: Don't bundle wrong leaseset with ack
    Router: Fixes for symmetric NAT errors on 'full cone' NAT
    SAM: Interrupt tunnel build if client times out
    SSU2: Fix rare peer test NPE
    Sybil: Don't blame i2pd publishing ::1
    Sybil: Memory usage and priority reduction
    Transports: More IP checks

    Other:

    Blocklist efficiency improvements
    Bundles: Identify Win and Mac bundles in version info
    Console: Identify service installs, revision, and build time in version info
    Console: NetDB search form and tunnels page improvements (advanced only)
    Router: Reduce stats memory usage
    Tunnels: Reduce "grace period"
    Translation updates

[close]

http://www.i2p2.de/