- update to 2.58.0:
* Post-quantum end-to-end crypto(ML-KEM-512, ML-KEM-768, ML-KEM-1024)
support if OpenSSL >= 3.5.0. Enable it by default
* Datagram2 and Datagram3
* Support boost 1.89
* Don't verify streaming SYN packet signature if comes from an
ECIESx25519 session
* Specify light or dark theme for webconsole
* Try to resolve host again in server tunnel if failed before
* "ssu2.firewalled4" and "ssu2.firewalled6" params to force Firewalled
even if network is OK
* Create unique loopback address from fd00::/8 range for ::1 if
explicitly set in server tunnels
* Don't show Network status if ipv6 only
* SAM PING command
* Send correct version in I2CP SetDate message
* Fixed max UDP buffer size for OpenBSD
* "i2p.streaming.maxWindowSize" and "i2p.streaming.dontSign" params
* Streaming ping through BOB
* Limit number of outbound streaming packets if the peer can't handle
them
* Updated reseeds list
* Fixed lack of file descriptors for Haiku
* Outgoing stream will not constantly re-requests LeaseSet if the
remote peer has gone away
* Don't call deprecated functions for openssl 3
* Accept "HELLO VERSION" without "MIN" and "MAX" in SAM
* Non-blocking mode for UDP sockets in UDP tunnels
- update to 2.57.0:
* Local domain sockets for I2PControl
* HTTP and SOCKS proxy through BOB
* FORWARD session host handling in SAM
* "keys=shareddest" tunnel param to run on shared local destination
* Correct implementation of SSU2 path challenge and path response
* Don't delete trusted routers from netdb
* Fixed crash after SAM stream disconnect
* Disable loss-control in streaming
* OpenIndiana(Solaris) support
* NTCP2 probing resistance
* Set min peer test version to 0.9.62
* Support SAM v1 datagram sessions without port
* Localization to Hebrew and Hindi
* Fixed x86 build for Haiku
* Updated reseeds list
- Boost.System is headers only since 1.69
+ boost-system.patch
OBS-URL: https://build.opensuse.org/request/show/1310819
OBS-URL: https://build.opensuse.org/package/show/security:privacy/i2pd?expand=0&rev=59
- update to 2.56.0:
* Config params for shared local destination
* Exclude disk operations from SSU2 and NTCP2 threads
* Set minimal version for peer test to 0.9.62
* Fixed termination deadlock if SAM session is active
* AddressBook full addresses cache
* Shorter ECIESx25519 ack request interval for datagram and I2CP sessions
* Updated reseeds list
* Recreate tunnels in random order
* Send Ack requested flag after second SSU2 resend attempt
* Don't change datagram routing path too often if unidirectional data stream
* Fixed race condition at tunnel endpoint
* Decline transit tunnel to duplicated router
- format .spec
OBS-URL: https://build.opensuse.org/request/show/1272944
OBS-URL: https://build.opensuse.org/package/show/security:privacy/i2pd?expand=0&rev=57
- update to 2.55.0:
* Support boost 1.87
* New RTO and window size calculation and resetting algorithm for streams
* Faster LeaseSet amd RouterInfo lookups
* Direct link between tunnel and transport to next peer
* Separate thread for tunnel build requests
* Fixed missing RouterInfo buffer in NetDb
* Throttle incoming ECIESx25519 sessions
* Check LeaseSet expiration time
* Resend HolePunch and RelayResponse messages
* Publish 'R' cap for yggdrasil-only routers, and 'U' cap for routers through proxy
* New "i2p.streaming.maxConcurrentStreams" tunnel's param to limit number of simultaneous streams
* Don't delete routers from NetDb when offline
* Save unreachable router's endpoint to use it next time without introducers
* Random tunnel rejection when medium congestion
* Increased hole punch expiration interval
* Handle NTCP2 session handshakes in separate thread
- moved binary from /usr/sbin to /usr/bin
OBS-URL: https://build.opensuse.org/request/show/1244851
OBS-URL: https://build.opensuse.org/package/show/security:privacy/i2pd?expand=0&rev=55
- update to 2.51.0:
* Encrypted tunnel tests
* New streaming RTT/RTO/Window calculation algorithms
* Publish medium congestion indication
* Changed upstream SOCKS proxy from SOCKS4 to SOCKS5
* New implementation of SSU2 retransmission, send buffer, window, congestion control, timeouts
* Transit tunnels limit more than 64K. Default value to 10K
* Fixed lookup of encrypted LeaseSet
* Report error if client is trying to connect to itself in SAM
* Fixed crash when packet comes to terminated stream
* Tunnel status "declined" in web console
* SAM error reply "Incompatible crypto" if remote destination has incompatible crypto
* Fixed outbound tunnel build failure if it's endpoint is the same as reply tunnel gateway
* Reduce unreachable router ban interval to 8 minutes
* Send lookup reply directly to reply tunnel gateway if possible
* Fixed I2PControl RouterManager returns invalid JSON when unknown params are passed
* Correct implementation of "reservedrange" config param
* Less false positive cases for tunnel tests
* Check ipv4/ipv6 compatibility for peer tests
* Allow SSU2 even if port binding fails
* Support local domain sockets for SOCKS proxy upstream
- update to 2.50.2:
* Fixed crash with OpenSSL 3.2.0
* Fixed false positive clock skew detection
- update to 2.50.1:
* Fixed support for new EdDSA usage behavior in OpenSSL 3.2.0
- update to 2.50.0:
* Support of concurrent ACCEPTs on SAM 3.1
* Low bandwidth and far routers can expire before 1 hour
* Don't pick too active peer for first hop
* Try peer test again if status is Unknown
* Send peer tests with random delay
* Updated reseeds list
* Fixed XSS vulnerability in addresshelper
* Fixed publishing NAT64 ipv6 addresses
* Fixed deadlock in AsyncSend callback
OBS-URL: https://build.opensuse.org/request/show/1172146
OBS-URL: https://build.opensuse.org/package/show/security:privacy/i2pd?expand=0&rev=52
