From malkus.lindroos at iki.fi  Thu Nov  1 12:35:32 2007
From: malkus.lindroos at iki.fi (Malkus Lindroos)
Date: Thu, 01 Nov 2007 14:35:32 +0200
Subject: [freenet-support] Freenet 0.7 build 1066
In-Reply-To: <200710241722.22886.toad@amphibian.dyndns.org>
References: <20071024050025.510973C23B8@mail.firenze.linux.it>
	<200710241722.22886.toad@amphibian.dyndns.org>
Message-ID: <4729C814.4020509@iki.fi>

Just noticed that I completely lost connection to opennet in all of my
nodes. At the same time transfer rates dropped + the network stopped
finding stuff as fast as previously. Definitely a negative change. My
nodes got completely cut off from opennet, so they are no longer able to
work as bridges between the networks.

IMO it would make sense to have a limit of e.g. 30 connections for both
networks. Still better, the amount of connections could depend on the
output bandwith limit / load statistics of the node, so that nodes with
plenty of resources would have enough connections to realize their
potential. Perhaps this would make the network slightly heterogenous,
but there would still be enough high-performance nodes around to avoid
single points of failure.

Alternatively, an option to categorize nodes to high-performance nodes
and standard nodes, and leaving room for connections from (other)
high-performance nodes could help to boost the performance of the
network by creating a base grid of fast nodes for transferring large
amounts of data. The high-perf nodes could handle much more load than
nodes on the average, so popular content would be wise to distribute
through these nodes. If, for some reason, all these nodes would be taken
out, there would still be the slower (but operational) network.

--
Malkus Lindroos


Matthew Toseland wrote:
> Maybe. What would the benefit be? Isn't it a good thing to have a fairly 
> homogenous topology, rather than automatically creating ubernodes?
>
> On Wednesday 24 October 2007 06:00, [Anon] Anon User wrote:
>   
>> In  Matthew Toseland <toad at amphibian.dyndns.org> wrote:
>>     
>>> Freenet 0.7 build 1066 is available. It will be mandatory on the 30th of 
>>> October. It includes some fairly large changes including:
>>> - Merge of JFK, a Summer of Code project to implement a new, better link 
>>> encryption setup protocol (we were using a form of STS).
>>> - The opennet peers limit takes into account connected darknet peers, so as 
>>> you get more Friends you will lose Strangers.
>>>       
>> Could "opennet peers limit" be made configurable in freenet.ini/conf?
>>
>> Thanks
>>     
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Support mailing list
>> Support at freenetproject.org
>> http://news.gmane.org/gmane.network.freenet.support
>> Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
>> Or mailto:support-request at freenetproject.org?subject=unsubscribe




From nobody at dizum.com  Fri Nov  2 04:10:07 2007
From: nobody at dizum.com (Nomen Nescio)
Date: Fri,  2 Nov 2007 05:10:07 +0100 (CET)
Subject: [freenet-support] Req: official release of patch for 0.5
Message-ID: <6bdb24b433421f03bd175494892a5fd7@dizum.com>

(please excuse me if this is a duplicate)

Toad,

Recently a message by you was xposted to 0.5 about a crypto weakness you folks discovered in 0.7 that 0.5 is also subject to.

After some discussion, one individual came up with a patch and procedure for fixing this on 0.5. While a lot will simply use that patch and build new freenet.jar executables, there are some who aren't up to it for whatever reason.

Given the patch and the msg announcing it, would you be willing to create an 'official' freenet 0.5 build 5108 and make it available at the same place where the old 0.5 stuff is at http://downloads.freenetproject.org/ ?

BTW- I know you and other freenet devs haven't been in the habit of doing so but would you also be willing to include a digital signature of some kind?  At least an SHA-1 hash, preferably a detached pgp signature.

Thanks

Here's the message I mentioned, followed by the patch:


----- Jack O'Lantern ----- 2007.10.31 - 20:36:40GMT -----

Happy Hallowe'en folks,

a certain Toad recently informed us that the Diffie-Hellman key exchange in freenet 0.5 has been b0rked for about two years and we please bob for the solution to the issue ourselves. So, here goes...

1. obtain a JDK (sun5 works), svn, ant and junit.

2. obtain the source:
   $ svn co http://freenet.googlecode.com/svn/branches/legacy/stable/ freenet-0.5-5108
   $ cd freenet-0.5-5108
   $ svn co http://freenet.googlecode.com/svn/branches/legacy/contrib/ contrib

3. copy freenet-ext.jar from your freenet directory into the newly created freenet-0.5-5108 directory (freenet-ext.jar remains unchanged)

4. obtain the patch I crafted:
   freenet:CHK at Sm50039W8Gt8kzLyMloGB6pvjkQNAwI,xYB4spgd2g1ZtJIYN0lfeg/freenet_dh.patch

5. Examine this patch closely. You don't know me. You never know beforehand if you're about to be tricked or treated, or handled by an incompetent person.
   This patch does the following things:
   a. creates a method to check for weak Diffie-Hellman exponents (imported from freenet 0.7)
   b. there are *extremely* few weak exponentials in the number space, so accidental creation of a weak exponential is *extremely* unlikely; nevertheless, the patch adds code to prevent creating weak exponents (imported from freenet 0.7)
   c. adds code to abort a Diffie-Hellman key exchange if our peer ("Bob") uses a weak key (logs an error) (two instances)
   d. bumps the build number up to 5108. I feel it's justified that we users hijack the build numbering scheme as the developers don't maintain it anymore.

6. If you're satisfied, copy this patch into the freenet-0.5-5108 directory.

7. Apply the patch:
   $ patch -p1 < freenet_dh.patch

8. Build freenet.jar
   $ CLASSPATH=freenet-ext.jar ant distclean dist

9. Make a backup of your old freenet.jar (freenet-ext.jar remains in place).

10. Copy the newly built freenet.jar to your freenet directory.
    $ cp lib/freenet.jar /path/to/freenet/dir

11. Restart freenet

That's it. Enjoy your shiny new freenet build.

It would be great if someone in contact with the freenet 0.7 developers could communicate the patch to them. I'm just a user, and some official acknowledgement that the patch does indeed fix *all* instances of weak Diffie-Hellman handling is appreciated because, you know, the comments in the freenet source are not exactly abundant and it's not easy for a newcomer to find one's way through.

EOM

Here's the patch:
diff -Naur freenet-0.5-5107/build.xml freenet-0.5-5108/build.xml
--- freenet-0.5-5107/build.xml	2007-10-31 18:12:46.000000000 +0100
+++ freenet-0.5-5108/build.xml	2007-10-31 18:22:13.000000000 +0100
@@ -22,8 +22,8 @@
 	<property name="freenet-ext.location" location="${lib}/freenet-ext.jar"/>
 	<!-- this is where the Contrib directory is supposed to be. Override this
 	if necessary -->
-	<property name="contrib.location" location=".."/>
-	<property name="servlet.location" location="${contrib.location}/Contrib/freenet_ext/build_dir"/>
+	<property name="contrib.location" location="."/>
+	<property name="servlet.location" location="${contrib.location}/contrib/freenet_ext/build_dir"/>
 
 <!-- ======================================================================= -->
     <target name="env"
diff -Naur freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java
--- freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java	2007-10-31 18:08:57.000000000 +0100
+++ freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java	2007-10-31 18:21:34.000000000 +0100
@@ -11,6 +11,7 @@
 import java.util.Stack;
 
 import freenet.Core;
+import freenet.support.Logger;
 
 public class DiffieHellman {
 	
@@ -37,6 +38,9 @@
 
 	private static Thread precalcThread;
 
+	public static final BigInteger MIN_EXPONENTIAL_VALUE = new BigInteger("2").pow(24);
+	public static final BigInteger MAX_EXPONENTIAL_VALUE = group.getP().subtract(MIN_EXPONENTIAL_VALUE);
+
 	static {
 		precalcThread = new PrecalcBufferFill();
 		precalcThread.start();
@@ -132,11 +136,53 @@
 	private static BigInteger[] genParams() {
 		BigInteger params[] = new BigInteger[2];
 		// Don't need NativeBigInteger?
-		params[0] = new BigInteger(256, r);
-		params[1] = group.getG().modPow(params[0], group.getP());
+		
+		do {
+			params[0] = new BigInteger(256, r);
+			params[1] = group.getG().modPow(params[0], group.getP());
+		} while(!DiffieHellman.checkDHExponentialValidity(DiffieHellman.class, params[1]));
+
 		return params;
 	}
 
+	/**
+	 * Check the validity of a DH exponential
+	 *
+	 * @param a BigInteger: The exponential to test
+	 * @return a boolean: whether the DH exponential provided is acceptable or not
+	 *
+	 * @see http://securitytracker.com/alerts/2005/Aug/1014739.html
+	 * @see http://www.it.iitb.ac.in/~praj/acads/netsec/FinalReport.pdf
+	 */
+	public static boolean checkDHExponentialValidity(Class caller, BigInteger exponential) {
+		int onesCount=0, zerosCount=0;
+
+		// Ensure that we have at least 16 bits of each gender
+		for(int i=0; i < exponential.bitLength(); i++)
+			if(exponential.testBit(i))
+				onesCount++;
+			else
+				zerosCount++;
+		if((onesCount<16) || (zerosCount<16)) {
+			Core.logger.log(caller, "The provided exponential contains "+zerosCount+" zeros and "+onesCount+" ones wich is unacceptable!", Logger.ERROR);
+			return false;
+		}
+
+		// Ensure that g^x > 2^24
+		if(MIN_EXPONENTIAL_VALUE.compareTo(exponential) > -1) {
+			Core.logger.log(caller, "The provided exponential is smaller than 2^24 which is unacceptable!", Logger.ERROR);
+			return false;
+		}
+		// Ensure that g^x < (p-2^24)
+		if(MAX_EXPONENTIAL_VALUE.compareTo(exponential) < 1) {
+			Core.logger.log(caller, "The provided exponential is bigger than (p - 2^24) which is unacceptable!", Logger.ERROR);
+			return false;
+		}
+
+		return true;
+
+	}
+
 	public static DHGroup getGroup() {
 		return group;
 	}
diff -Naur freenet-0.5-5107/src/freenet/session/FnpLink.java freenet-0.5-5108/src/freenet/session/FnpLink.java
--- freenet-0.5-5107/src/freenet/session/FnpLink.java	2007-10-31 18:05:39.000000000 +0100
+++ freenet-0.5-5108/src/freenet/session/FnpLink.java	2007-10-31 18:21:53.000000000 +0100
@@ -498,6 +498,11 @@
         }
         Ca = Util.readMPI(rawIn);
 
+	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Ca)) {
+		String err = "Cannot accept remote exponential. WARNING: WITH HIGH PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
+		throw new NegotiationFailedException(conn.getPeerAddress(), err);
+	}
+
         Z = Ca.modPow(R, DiffieHellman.getGroup().getP());
         byte[] kent = Util.MPIbytes(Z);
         Util.makeKey(kent, k, 0, k.length);
@@ -646,6 +651,12 @@
         }
 
         Cb = Util.readMPI(rawIn);
+
+	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Cb)) {
+		String err = "Cannot accept remote exponential. WARNING: WITH HIGH PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
+		throw new NegotiationFailedException(conn.getPeerAddress(), err);
+	}
+
         long readMPITime = System.currentTimeMillis();
         long readmpilen = readMPITime - readByteTime;
         if (logDEBUG || readmpilen > 500)
diff -Naur freenet-0.5-5107/src/freenet/Version.java freenet-0.5-5108/src/freenet/Version.java
--- freenet-0.5-5107/src/freenet/Version.java	2007-10-31 18:12:35.000000000 +0100
+++ freenet-0.5-5108/src/freenet/Version.java	2007-10-31 18:21:24.000000000 +0100
@@ -20,7 +20,7 @@
 	public static String protocolVersion = "STABLE-1.51";
 
 	/** The build number of the current revision */
-	public static final int buildNumber = 5107;
+	public static final int buildNumber = 5108;
 
 	/** Oldest build of Fred we will talk to */
 	public static final int lastGoodBuild = 5099;


From nobody at dizum.com  Fri Nov  2 04:50:12 2007
From: nobody at dizum.com (Nomen Nescio)
Date: Fri,  2 Nov 2007 05:50:12 +0100 (CET)
Subject: [freenet-support] Req: official release of patch for 0.5
Message-ID: <6bdb24b433421f03bd175494892a5fd7@dizum.com>

(please excuse me if this is a duplicate)

Toad,

Recently a message by you was xposted to 0.5 about a crypto weakness you folks discovered in 0.7 that 0.5 is also subject to.

After some discussion, one individual came up with a patch and procedure for fixing this on 0.5. While a lot will simply use that patch and build new freenet.jar executables, there are some who aren't up to it for whatever reason.

Given the patch and the msg announcing it, would you be willing to create an 'official' freenet 0.5 build 5108 and make it available at the same place where the old 0.5 stuff is at http://downloads.freenetproject.org/ ?

BTW- I know you and other freenet devs haven't been in the habit of doing so but would you also be willing to include a digital signature of some kind?  At least an SHA-1 hash, preferably a detached pgp signature.

Thanks

Here's the message I mentioned, followed by the patch:


----- Jack O'Lantern ----- 2007.10.31 - 20:36:40GMT -----

Happy Hallowe'en folks,

a certain Toad recently informed us that the Diffie-Hellman key exchange in freenet 0.5 has been b0rked for about two years and we please bob for the solution to the issue ourselves. So, here goes...

1. obtain a JDK (sun5 works), svn, ant and junit.

2. obtain the source:
   $ svn co http://freenet.googlecode.com/svn/branches/legacy/stable/ freenet-0.5-5108
   $ cd freenet-0.5-5108
   $ svn co http://freenet.googlecode.com/svn/branches/legacy/contrib/ contrib

3. copy freenet-ext.jar from your freenet directory into the newly created freenet-0.5-5108 directory (freenet-ext.jar remains unchanged)

4. obtain the patch I crafted:
   freenet:CHK at Sm50039W8Gt8kzLyMloGB6pvjkQNAwI,xYB4spgd2g1ZtJIYN0lfeg/freenet_dh.patch

5. Examine this patch closely. You don't know me. You never know beforehand if you're about to be tricked or treated, or handled by an incompetent person.
   This patch does the following things:
   a. creates a method to check for weak Diffie-Hellman exponents (imported from freenet 0.7)
   b. there are *extremely* few weak exponentials in the number space, so accidental creation of a weak exponential is *extremely* unlikely; nevertheless, the patch adds code to prevent creating weak exponents (imported from freenet 0.7)
   c. adds code to abort a Diffie-Hellman key exchange if our peer ("Bob") uses a weak key (logs an error) (two instances)
   d. bumps the build number up to 5108. I feel it's justified that we users hijack the build numbering scheme as the developers don't maintain it anymore.

6. If you're satisfied, copy this patch into the freenet-0.5-5108 directory.

7. Apply the patch:
   $ patch -p1 < freenet_dh.patch

8. Build freenet.jar
   $ CLASSPATH=freenet-ext.jar ant distclean dist

9. Make a backup of your old freenet.jar (freenet-ext.jar remains in place).

10. Copy the newly built freenet.jar to your freenet directory.
    $ cp lib/freenet.jar /path/to/freenet/dir

11. Restart freenet

That's it. Enjoy your shiny new freenet build.

It would be great if someone in contact with the freenet 0.7 developers could communicate the patch to them. I'm just a user, and some official acknowledgement that the patch does indeed fix *all* instances of weak Diffie-Hellman handling is appreciated because, you know, the comments in the freenet source are not exactly abundant and it's not easy for a newcomer to find one's way through.

EOM

Here's the patch:
diff -Naur freenet-0.5-5107/build.xml freenet-0.5-5108/build.xml
--- freenet-0.5-5107/build.xml	2007-10-31 18:12:46.000000000 +0100
+++ freenet-0.5-5108/build.xml	2007-10-31 18:22:13.000000000 +0100
@@ -22,8 +22,8 @@
 	<property name="freenet-ext.location" location="${lib}/freenet-ext.jar"/>
 	<!-- this is where the Contrib directory is supposed to be. Override this
 	if necessary -->
-	<property name="contrib.location" location=".."/>
-	<property name="servlet.location" location="${contrib.location}/Contrib/freenet_ext/build_dir"/>
+	<property name="contrib.location" location="."/>
+	<property name="servlet.location" location="${contrib.location}/contrib/freenet_ext/build_dir"/>
 
 <!-- ======================================================================= -->
     <target name="env"
diff -Naur freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java
--- freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java	2007-10-31 18:08:57.000000000 +0100
+++ freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java	2007-10-31 18:21:34.000000000 +0100
@@ -11,6 +11,7 @@
 import java.util.Stack;
 
 import freenet.Core;
+import freenet.support.Logger;
 
 public class DiffieHellman {
 	
@@ -37,6 +38,9 @@
 
 	private static Thread precalcThread;
 
+	public static final BigInteger MIN_EXPONENTIAL_VALUE = new BigInteger("2").pow(24);
+	public static final BigInteger MAX_EXPONENTIAL_VALUE = group.getP().subtract(MIN_EXPONENTIAL_VALUE);
+
 	static {
 		precalcThread = new PrecalcBufferFill();
 		precalcThread.start();
@@ -132,11 +136,53 @@
 	private static BigInteger[] genParams() {
 		BigInteger params[] = new BigInteger[2];
 		// Don't need NativeBigInteger?
-		params[0] = new BigInteger(256, r);
-		params[1] = group.getG().modPow(params[0], group.getP());
+		
+		do {
+			params[0] = new BigInteger(256, r);
+			params[1] = group.getG().modPow(params[0], group.getP());
+		} while(!DiffieHellman.checkDHExponentialValidity(DiffieHellman.class, params[1]));
+
 		return params;
 	}
 
+	/**
+	 * Check the validity of a DH exponential
+	 *
+	 * @param a BigInteger: The exponential to test
+	 * @return a boolean: whether the DH exponential provided is acceptable or not
+	 *
+	 * @see http://securitytracker.com/alerts/2005/Aug/1014739.html
+	 * @see http://www.it.iitb.ac.in/~praj/acads/netsec/FinalReport.pdf
+	 */
+	public static boolean checkDHExponentialValidity(Class caller, BigInteger exponential) {
+		int onesCount=0, zerosCount=0;
+
+		// Ensure that we have at least 16 bits of each gender
+		for(int i=0; i < exponential.bitLength(); i++)
+			if(exponential.testBit(i))
+				onesCount++;
+			else
+				zerosCount++;
+		if((onesCount<16) || (zerosCount<16)) {
+			Core.logger.log(caller, "The provided exponential contains "+zerosCount+" zeros and "+onesCount+" ones wich is unacceptable!", Logger.ERROR);
+			return false;
+		}
+
+		// Ensure that g^x > 2^24
+		if(MIN_EXPONENTIAL_VALUE.compareTo(exponential) > -1) {
+			Core.logger.log(caller, "The provided exponential is smaller than 2^24 which is unacceptable!", Logger.ERROR);
+			return false;
+		}
+		// Ensure that g^x < (p-2^24)
+		if(MAX_EXPONENTIAL_VALUE.compareTo(exponential) < 1) {
+			Core.logger.log(caller, "The provided exponential is bigger than (p - 2^24) which is unacceptable!", Logger.ERROR);
+			return false;
+		}
+
+		return true;
+
+	}
+
 	public static DHGroup getGroup() {
 		return group;
 	}
diff -Naur freenet-0.5-5107/src/freenet/session/FnpLink.java freenet-0.5-5108/src/freenet/session/FnpLink.java
--- freenet-0.5-5107/src/freenet/session/FnpLink.java	2007-10-31 18:05:39.000000000 +0100
+++ freenet-0.5-5108/src/freenet/session/FnpLink.java	2007-10-31 18:21:53.000000000 +0100
@@ -498,6 +498,11 @@
         }
         Ca = Util.readMPI(rawIn);
 
+	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Ca)) {
+		String err = "Cannot accept remote exponential. WARNING: WITH HIGH PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
+		throw new NegotiationFailedException(conn.getPeerAddress(), err);
+	}
+
         Z = Ca.modPow(R, DiffieHellman.getGroup().getP());
         byte[] kent = Util.MPIbytes(Z);
         Util.makeKey(kent, k, 0, k.length);
@@ -646,6 +651,12 @@
         }
 
         Cb = Util.readMPI(rawIn);
+
+	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Cb)) {
+		String err = "Cannot accept remote exponential. WARNING: WITH HIGH PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
+		throw new NegotiationFailedException(conn.getPeerAddress(), err);
+	}
+
         long readMPITime = System.currentTimeMillis();
         long readmpilen = readMPITime - readByteTime;
         if (logDEBUG || readmpilen > 500)
diff -Naur freenet-0.5-5107/src/freenet/Version.java freenet-0.5-5108/src/freenet/Version.java
--- freenet-0.5-5107/src/freenet/Version.java	2007-10-31 18:12:35.000000000 +0100
+++ freenet-0.5-5108/src/freenet/Version.java	2007-10-31 18:21:24.000000000 +0100
@@ -20,7 +20,7 @@
 	public static String protocolVersion = "STABLE-1.51";
 
 	/** The build number of the current revision */
-	public static final int buildNumber = 5107;
+	public static final int buildNumber = 5108;
 
 	/** Oldest build of Fred we will talk to */
 	public static final int lastGoodBuild = 5099;


From nobody at dizum.com  Fri Nov  2 05:31:15 2007
From: nobody at dizum.com (Nomen Nescio)
Date: Fri,  2 Nov 2007 06:31:15 +0100 (CET)
Subject: [freenet-support] I almost forgot
Message-ID: <2ba90cd63d62aa9ded70efc3483b1492@dizum.com>

In my earlier request for the crypto fix build for 0.5, I forgot to ask if
you'd also be willing to incorporate the "painkiller" mods in 5108?

Thanks again


From malkus.lindroos at iki.fi  Fri Nov  2 12:51:31 2007
From: malkus.lindroos at iki.fi (Malkus Lindroos)
Date: Fri, 02 Nov 2007 14:51:31 +0200
Subject: [freenet-support] Req: official release of patch for 0.5
In-Reply-To: <6bdb24b433421f03bd175494892a5fd7@dizum.com>
References: <6bdb24b433421f03bd175494892a5fd7@dizum.com>
Message-ID: <472B1D53.30908@iki.fi>

According to the open source -principle, there definitely should be a
solution for this. The current dictatorship of "knowing better" than the
users what is good for them and what is not is more like Apple than an
open source -project.

If users want to have an opennet with loads of peers, why not allow them
to have it? Maybe the users are right - and if not, they will come back
to the 30 connections. Of course, there could be a branching of freenets
(only nets or also codes) where one would be code-customized by users
and the other would be a technology development project by enthusiastic
developers. A bit like Debian and its derivatives.

However, this is hardly good for the cause or justified with a much
smaller project where different lines can be easily combined within a
single project with some flexibility towards the wants of users. It
would be better to have, even at the loss of completely homogenous
network, a version of freenet 0.7 that would resemble freenet 0.5 enough
to close the old net down. That is, only opennet, and a freely
configurable amount of connections. Very probably the increasing amount
of nodes in the 0.7 network would outweigh the loss of rigidity in the
network due to nodes with loads of connections.

The developers are right in one thing though - it would probably not be
good to have a gui -configurable option for more connections, because
then also the basic Windows -(l)users would just tune it up because
"bigger is better". However, having a line in the config file for this
that is not that obvious would get rid of the problem. Label it
"conntrack" an define the value in binary if you like - but just give
those willing to test the ability to do so and involve more users in the
development.

--
Malkus Lindroos

Nomen Nescio wrote:
> (please excuse me if this is a duplicate)
>
> Toad,
>
> Recently a message by you was xposted to 0.5 about a crypto weakness you folks discovered in 0.7 that 0.5 is also subject to.
>
> After some discussion, one individual came up with a patch and procedure for fixing this on 0.5. While a lot will simply use that patch and build new freenet.jar executables, there are some who aren't up to it for whatever reason.
>
> Given the patch and the msg announcing it, would you be willing to create an 'official' freenet 0.5 build 5108 and make it available at the same place where the old 0.5 stuff is at http://downloads.freenetproject.org/ ?
>
> BTW- I know you and other freenet devs haven't been in the habit of doing so but would you also be willing to include a digital signature of some kind?  At least an SHA-1 hash, preferably a detached pgp signature.
>
> Thanks
>
> Here's the message I mentioned, followed by the patch:
>
>
>   
...



From Volodya at WhenGendarmeSleeps.org  Fri Nov  2 16:42:30 2007
From: Volodya at WhenGendarmeSleeps.org (Volodya)
Date: Fri, 02 Nov 2007 19:42:30 +0300
Subject: [freenet-support] Unable to delete "Never Connected" peers
Message-ID: <472B5376.6010201@WhenGendarmeSleeps.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, i've just noticed that my FProxy goes crazy when i try to delete "Never Connected"
peers. If i select more than one it only deletes the top-most and never finishes loading
the page, thus i have to stop and go to /friends/ manually.

I think that recently (relatively recently) the new ability was added that forced the peer
to remove you when you removed that peer... could this be a result of that?

                       - Volodya

- --
http://freedom.libsyn.com/       Voice of Freedom, Radical Podcast
http://freeselfdefence.info/     Self-defence wiki
http://www.kingstonstudents.org/ Kingston University students' forum

 "None of us are free until all of us are free."    ~ Mihail Bakunin
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHK1N2uWy2EFICg+0RAhhwAKCzBsGOLW27ctLma0ER42GaNWkgfACgmz+6
FMaryackz9L2GRUqUC8rjeU=
=6nBZ
-----END PGP SIGNATURE-----


From urza9814 at gmail.com  Sat Nov  3 01:10:26 2007
From: urza9814 at gmail.com (urza9814 at gmail.com)
Date: Fri, 2 Nov 2007 21:10:26 -0400
Subject: [freenet-support] does freenet slow down the computer
In-Reply-To: <969809.76913.qm@web81806.mail.mud.yahoo.com>
References: <969809.76913.qm@web81806.mail.mud.yahoo.com>
Message-ID: <35af28770711021810h4ce8466fg2b48b694d8d1d356@mail.gmail.com>

There should be bandwidth limits somewhere in the config file. I'm
using 0.5myself, I'm guessing you're on
0.7, but look around in freenet.conf or whatever configuration files you can
find for some kind of input and output bandwidth limits. I suggest running a
speed test on your connection (just google 'internet speed test', there's
tons of them out there), and rounding the speeds down to the nearest 100kbps
or so and setting that as your limits. I've actually found that lowering the
OUTGOING bandwidth limit a bit helps my browsing speed a lot more than
limiting the incoming bandwidth.

On Oct 31, 2007 4:51 PM, its me <b41885 at yahoo.com> wrote:

> *After I installed freenet, when the computer is idle, it is sending out
> 56338 packets and receiving 139442 packets even when no program is running.
> *
> **
> *Is this activity all from freenet and if so, is that why my computer is
> very slow when I am trying to browse regular pages on the internet ? *
> **
> *thanks for any help you can provide*
> **
> *Brian*
>
> _______________________________________________
> Support mailing list
> Support at freenetproject.org
> http://news.gmane.org/gmane.network.freenet.support
> Unsubscribe at
> http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
> Or mailto:support-request at freenetproject.org?subject=unsubscribe
>



-- 
<HTML>
<a href="http://www.spreadfirefox.com/?q=affiliates&amp;id=0&amp;t=57"><img
border="0" alt="Get Firefox!" title="Get Firefox!" src="
http://sfx-images.mozilla.org/affiliates/Buttons/180x60/blank.gif"/></a>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://emu.freenetproject.org/pipermail/support/attachments/20071102/c4dc620a/attachment.htm 

From level13 at gmail.com  Sat Nov  3 20:55:45 2007
From: level13 at gmail.com (Level 13)
Date: Sat, 3 Nov 2007 21:55:45 +0100
Subject: [freenet-support] Why does it take longer to start
Message-ID: <8e767170711031355y5d90eeaei9dd33881896433c1@mail.gmail.com>

A while ago I increased the resources for my freenet node (from 40 to
90 connections, and datastore from 1 GB to 5 GB). It used to take a
few seconds to start my node, now it's like 1-2 minutes before it's up
(that is, until the animated tray icon becomes blue after you start
the node). Why is that so? Larger datastore?
Also, what does "Load" of 100 % or over 100 % mean? I've noticed it
happens from time to time.
I'm on 0.5, build 5107.


From Volodya at WhenGendarmeSleeps.org  Sun Nov  4 11:26:45 2007
From: Volodya at WhenGendarmeSleeps.org (Volodya)
Date: Sun, 04 Nov 2007 14:26:45 +0300
Subject: [freenet-support] Why does it take longer to start
In-Reply-To: <8e767170711031355y5d90eeaei9dd33881896433c1@mail.gmail.com>
References: <8e767170711031355y5d90eeaei9dd33881896433c1@mail.gmail.com>
Message-ID: <472DAC75.1050002@WhenGendarmeSleeps.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Level 13 wrote:
> A while ago I increased the resources for my freenet node (from 40 to
> 90 connections, and datastore from 1 GB to 5 GB). It used to take a
> few seconds to start my node, now it's like 1-2 minutes before it's up
> (that is, until the animated tray icon becomes blue after you start
> the node). Why is that so? Larger datastore?
> Also, what does "Load" of 100 % or over 100 % mean? I've noticed it
> happens from time to time.
> I'm on 0.5, build 5107.

Yes, as datastore grows your star-up time will also grow... the problem (from what i've
been seeing on my computer) isn't as bad with 0,7 as it use to be with 0,5.... but i guess
there's nowhere you can go to escape that.

                         - Volodya

- --
http://freedom.libsyn.com/       Voice of Freedom, Radical Podcast
http://freeselfdefence.info/     Self-defence wiki
http://www.kingstonstudents.org/ Kingston University students' forum

 "None of us are free until all of us are free."    ~ Mihail Bakunin
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHLax0uWy2EFICg+0RAkX0AJ486E3ZsPa0TMf+4iN105CgxwcJIwCgvhrw
Rh9nq9ZtG5huj7I26N3r+f8=
=ZvWB
-----END PGP SIGNATURE-----


From toad at amphibian.dyndns.org  Mon Nov  5 13:27:29 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Mon, 5 Nov 2007 13:27:29 +0000
Subject: [freenet-support] Req: official release of patch for 0.5
In-Reply-To: <6bdb24b433421f03bd175494892a5fd7@dizum.com>
References: <6bdb24b433421f03bd175494892a5fd7@dizum.com>
Message-ID: <20071105132729.GE19329@amphibian.dyndns.org>

We will distribute a fixed release shortly.

On Fri, Nov 02, 2007 at 05:10:07AM +0100, Nomen Nescio wrote:
> (please excuse me if this is a duplicate)
> 
> Toad,
> 
> Recently a message by you was xposted to 0.5 about a crypto weakness you folks discovered in 0.7 that 0.5 is also subject to.
> 
> After some discussion, one individual came up with a patch and procedure for fixing this on 0.5. While a lot will simply use that patch and build new freenet.jar executables, there are some who aren't up to it for whatever reason.
> 
> Given the patch and the msg announcing it, would you be willing to create an 'official' freenet 0.5 build 5108 and make it available at the same place where the old 0.5 stuff is at http://downloads.freenetproject.org/ ?
> 
> BTW- I know you and other freenet devs haven't been in the habit of doing so but would you also be willing to include a digital signature of some kind?  At least an SHA-1 hash, preferably a detached pgp signature.
> 
> Thanks
> 
> Here's the message I mentioned, followed by the patch:
> 
> 
> ----- Jack O'Lantern ----- 2007.10.31 - 20:36:40GMT -----
> 
> Happy Hallowe'en folks,
> 
> a certain Toad recently informed us that the Diffie-Hellman key exchange in freenet 0.5 has been b0rked for about two years and we please bob for the solution to the issue ourselves. So, here goes...
> 
> 1. obtain a JDK (sun5 works), svn, ant and junit.
> 
> 2. obtain the source:
>    $ svn co http://freenet.googlecode.com/svn/branches/legacy/stable/ freenet-0.5-5108
>    $ cd freenet-0.5-5108
>    $ svn co http://freenet.googlecode.com/svn/branches/legacy/contrib/ contrib
> 
> 3. copy freenet-ext.jar from your freenet directory into the newly created freenet-0.5-5108 directory (freenet-ext.jar remains unchanged)
> 
> 4. obtain the patch I crafted:
>    freenet:CHK at Sm50039W8Gt8kzLyMloGB6pvjkQNAwI,xYB4spgd2g1ZtJIYN0lfeg/freenet_dh.patch
> 
> 5. Examine this patch closely. You don't know me. You never know beforehand if you're about to be tricked or treated, or handled by an incompetent person.
>    This patch does the following things:
>    a. creates a method to check for weak Diffie-Hellman exponents (imported from freenet 0.7)
>    b. there are *extremely* few weak exponentials in the number space, so accidental creation of a weak exponential is *extremely* unlikely; nevertheless, the patch adds code to prevent creating weak exponents (imported from freenet 0.7)
>    c. adds code to abort a Diffie-Hellman key exchange if our peer ("Bob") uses a weak key (logs an error) (two instances)
>    d. bumps the build number up to 5108. I feel it's justified that we users hijack the build numbering scheme as the developers don't maintain it anymore.
> 
> 6. If you're satisfied, copy this patch into the freenet-0.5-5108 directory.
> 
> 7. Apply the patch:
>    $ patch -p1 < freenet_dh.patch
> 
> 8. Build freenet.jar
>    $ CLASSPATH=freenet-ext.jar ant distclean dist
> 
> 9. Make a backup of your old freenet.jar (freenet-ext.jar remains in place).
> 
> 10. Copy the newly built freenet.jar to your freenet directory.
>     $ cp lib/freenet.jar /path/to/freenet/dir
> 
> 11. Restart freenet
> 
> That's it. Enjoy your shiny new freenet build.
> 
> It would be great if someone in contact with the freenet 0.7 developers could communicate the patch to them. I'm just a user, and some official acknowledgement that the patch does indeed fix *all* instances of weak Diffie-Hellman handling is appreciated because, you know, the comments in the freenet source are not exactly abundant and it's not easy for a newcomer to find one's way through.
> 
> EOM
> 
> Here's the patch:
> diff -Naur freenet-0.5-5107/build.xml freenet-0.5-5108/build.xml
> --- freenet-0.5-5107/build.xml	2007-10-31 18:12:46.000000000 +0100
> +++ freenet-0.5-5108/build.xml	2007-10-31 18:22:13.000000000 +0100
> @@ -22,8 +22,8 @@
>  	<property name="freenet-ext.location" location="${lib}/freenet-ext.jar"/>
>  	<!-- this is where the Contrib directory is supposed to be. Override this
>  	if necessary -->
> -	<property name="contrib.location" location=".."/>
> -	<property name="servlet.location" location="${contrib.location}/Contrib/freenet_ext/build_dir"/>
> +	<property name="contrib.location" location="."/>
> +	<property name="servlet.location" location="${contrib.location}/contrib/freenet_ext/build_dir"/>
>  
>  <!-- ======================================================================= -->
>      <target name="env"
> diff -Naur freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java
> --- freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java	2007-10-31 18:08:57.000000000 +0100
> +++ freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java	2007-10-31 18:21:34.000000000 +0100
> @@ -11,6 +11,7 @@
>  import java.util.Stack;
>  
>  import freenet.Core;
> +import freenet.support.Logger;
>  
>  public class DiffieHellman {
>  	
> @@ -37,6 +38,9 @@
>  
>  	private static Thread precalcThread;
>  
> +	public static final BigInteger MIN_EXPONENTIAL_VALUE = new BigInteger("2").pow(24);
> +	public static final BigInteger MAX_EXPONENTIAL_VALUE = group.getP().subtract(MIN_EXPONENTIAL_VALUE);
> +
>  	static {
>  		precalcThread = new PrecalcBufferFill();
>  		precalcThread.start();
> @@ -132,11 +136,53 @@
>  	private static BigInteger[] genParams() {
>  		BigInteger params[] = new BigInteger[2];
>  		// Don't need NativeBigInteger?
> -		params[0] = new BigInteger(256, r);
> -		params[1] = group.getG().modPow(params[0], group.getP());
> +		
> +		do {
> +			params[0] = new BigInteger(256, r);
> +			params[1] = group.getG().modPow(params[0], group.getP());
> +		} while(!DiffieHellman.checkDHExponentialValidity(DiffieHellman.class, params[1]));
> +
>  		return params;
>  	}
>  
> +	/**
> +	 * Check the validity of a DH exponential
> +	 *
> +	 * @param a BigInteger: The exponential to test
> +	 * @return a boolean: whether the DH exponential provided is acceptable or not
> +	 *
> +	 * @see http://securitytracker.com/alerts/2005/Aug/1014739.html
> +	 * @see http://www.it.iitb.ac.in/~praj/acads/netsec/FinalReport.pdf
> +	 */
> +	public static boolean checkDHExponentialValidity(Class caller, BigInteger exponential) {
> +		int onesCount=0, zerosCount=0;
> +
> +		// Ensure that we have at least 16 bits of each gender
> +		for(int i=0; i < exponential.bitLength(); i++)
> +			if(exponential.testBit(i))
> +				onesCount++;
> +			else
> +				zerosCount++;
> +		if((onesCount<16) || (zerosCount<16)) {
> +			Core.logger.log(caller, "The provided exponential contains "+zerosCount+" zeros and "+onesCount+" ones wich is unacceptable!", Logger.ERROR);
> +			return false;
> +		}
> +
> +		// Ensure that g^x > 2^24
> +		if(MIN_EXPONENTIAL_VALUE.compareTo(exponential) > -1) {
> +			Core.logger.log(caller, "The provided exponential is smaller than 2^24 which is unacceptable!", Logger.ERROR);
> +			return false;
> +		}
> +		// Ensure that g^x < (p-2^24)
> +		if(MAX_EXPONENTIAL_VALUE.compareTo(exponential) < 1) {
> +			Core.logger.log(caller, "The provided exponential is bigger than (p - 2^24) which is unacceptable!", Logger.ERROR);
> +			return false;
> +		}
> +
> +		return true;
> +
> +	}
> +
>  	public static DHGroup getGroup() {
>  		return group;
>  	}
> diff -Naur freenet-0.5-5107/src/freenet/session/FnpLink.java freenet-0.5-5108/src/freenet/session/FnpLink.java
> --- freenet-0.5-5107/src/freenet/session/FnpLink.java	2007-10-31 18:05:39.000000000 +0100
> +++ freenet-0.5-5108/src/freenet/session/FnpLink.java	2007-10-31 18:21:53.000000000 +0100
> @@ -498,6 +498,11 @@
>          }
>          Ca = Util.readMPI(rawIn);
>  
> +	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Ca)) {
> +		String err = "Cannot accept remote exponential. WARNING: WITH HIGH PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
> +		throw new NegotiationFailedException(conn.getPeerAddress(), err);
> +	}
> +
>          Z = Ca.modPow(R, DiffieHellman.getGroup().getP());
>          byte[] kent = Util.MPIbytes(Z);
>          Util.makeKey(kent, k, 0, k.length);
> @@ -646,6 +651,12 @@
>          }
>  
>          Cb = Util.readMPI(rawIn);
> +
> +	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Cb)) {
> +		String err = "Cannot accept remote exponential. WARNING: WITH HIGH PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
> +		throw new NegotiationFailedException(conn.getPeerAddress(), err);
> +	}
> +
>          long readMPITime = System.currentTimeMillis();
>          long readmpilen = readMPITime - readByteTime;
>          if (logDEBUG || readmpilen > 500)
> diff -Naur freenet-0.5-5107/src/freenet/Version.java freenet-0.5-5108/src/freenet/Version.java
> --- freenet-0.5-5107/src/freenet/Version.java	2007-10-31 18:12:35.000000000 +0100
> +++ freenet-0.5-5108/src/freenet/Version.java	2007-10-31 18:21:24.000000000 +0100
> @@ -20,7 +20,7 @@
>  	public static String protocolVersion = "STABLE-1.51";
>  
>  	/** The build number of the current revision */
> -	public static final int buildNumber = 5107;
> +	public static final int buildNumber = 5108;
>  
>  	/** Oldest build of Fred we will talk to */
>  	public static final int lastGoodBuild = 5099;
> _______________________________________________
> Support mailing list
> Support at freenetproject.org
> http://news.gmane.org/gmane.network.freenet.support
> Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
> Or mailto:support-request at freenetproject.org?subject=unsubscribe


From level13 at gmail.com  Thu Nov  8 09:18:43 2007
From: level13 at gmail.com (Level 13)
Date: Thu, 8 Nov 2007 10:18:43 +0100
Subject: [freenet-support] My node won't start anymore after the computer
	crashed
Message-ID: <8e767170711080118x4595ee4al432a28f78143fed4@mail.gmail.com>

My computer crashed last night (or it was an unexpected shutdown).
Now my Freenet node won't start anymore - i.e. the animated icon
(starting...) remains running. I even left it like this for a couple
of hours (in case there was reindexing or something to be performed).
What should I do?

The log is as follows:

Nov 8, 2007 9:59:16 AM (freenet.node.Main, main, NORMAL): Starting
Freenet (Fred) 0.5 node, build #5107 on JVM Sun Microsystems Inc.:Java
HotSpot(TM) Client VM:1.6.0_03-b05
os.arch = x86
Loading native...
Attempting to load freenet/support/CPUInformation/jcpuid-x86-windows.dll
Written to C:\DOCUME~1\XXXXXXXX\LOCALS~1\Temp\jcpuid6998lib.tmp: 40960
INFO: Native CPUID library
'freenet/support/CPUInformation/jcpuid-x86-windows.dll' loaded from
resource
INFO: Optimized native BigInteger library
'net/i2p/util/jbigi-windows-pentium4.dll' loaded from resource
Exception in thread "main" java.io.EOFException
	at freenet.support.io.ReadInputStream.readUTFChar(ReadInputStream.java:223)
	at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:134)
	at freenet.support.io.CommentedReadInputStream.readToEOF(CommentedReadInputStream.java:45)
	at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:184)
	at freenet.FieldSet.privParse(FieldSet.java:521)
	at freenet.FieldSet.parseFields(FieldSet.java:454)
	at freenet.FieldSet.parseFields(FieldSet.java:390)
	at freenet.FieldSet.<init>(FieldSet.java:83)
	at freenet.node.Main.loadNodeFile(Main.java:2950)
	at freenet.node.Main.main(Main.java:515)
Nov 8, 2007 9:59:18 AM (freenet.node.Main, main, NORMAL): loading node
keys: node
Nov 8, 2007 9:59:18 AM (freenet.node.Main, main, ERROR): Unexpected
Exception: java.io.EOFException
java.io.EOFException
	at freenet.support.io.ReadInputStream.readUTFChar(ReadInputStream.java:223)
	at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:134)
	at freenet.support.io.CommentedReadInputStream.readToEOF(CommentedReadInputStream.java:45)
	at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:184)
	at freenet.FieldSet.privParse(FieldSet.java:521)
	at freenet.FieldSet.parseFields(FieldSet.java:454)
	at freenet.FieldSet.parseFields(FieldSet.java:390)
	at freenet.FieldSet.<init>(FieldSet.java:83)
	at freenet.node.Main.loadNodeFile(Main.java:2950)
	at freenet.node.Main.main(Main.java:515)


From toad at amphibian.dyndns.org  Mon Nov 12 23:51:21 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Mon, 12 Nov 2007 23:51:21 +0000
Subject: [freenet-support] Req: official release of patch for 0.5
In-Reply-To: <6bdb24b433421f03bd175494892a5fd7@dizum.com>
References: <6bdb24b433421f03bd175494892a5fd7@dizum.com>
Message-ID: <200711122351.27323.toad@amphibian.dyndns.org>

Applied patch. Although it had to be done manually - something caused lots of 
spurious invisible \240's characters in the below text.

No idea how to rebuild stable, I'll try to get around to it at some point.

On Friday 02 November 2007 04:50, Nomen Nescio wrote:
> (please excuse me if this is a duplicate)
> 
> Toad,
> 
> Recently a message by you was xposted to 0.5 about a crypto weakness you 
folks discovered in 0.7 that 0.5 is also subject to.
> 
> After some discussion, one individual came up with a patch and procedure for 
fixing this on 0.5. While a lot will simply use that patch and build new 
freenet.jar executables, there are some who aren't up to it for whatever 
reason.
> 
> Given the patch and the msg announcing it, would you be willing to create 
an 'official' freenet 0.5 build 5108 and make it available at the same place 
where the old 0.5 stuff is at http://downloads.freenetproject.org/ ?
> 
> BTW- I know you and other freenet devs haven't been in the habit of doing so 
but would you also be willing to include a digital signature of some kind?  
At least an SHA-1 hash, preferably a detached pgp signature.
> 
> Thanks
> 
> Here's the message I mentioned, followed by the patch:
> 
> 
> ----- Jack O'Lantern ----- 2007.10.31 - 20:36:40GMT -----
> 
> Happy Hallowe'en folks,
> 
> a certain Toad recently informed us that the Diffie-Hellman key exchange in 
freenet 0.5 has been b0rked for about two years and we please bob for the 
solution to the issue ourselves. So, here goes...
> 
> 1. obtain a JDK (sun5 works), svn, ant and junit.
> 
> 2. obtain the source:
>    $ svn co http://freenet.googlecode.com/svn/branches/legacy/stable/ 
freenet-0.5-5108
>    $ cd freenet-0.5-5108
>    $ svn co http://freenet.googlecode.com/svn/branches/legacy/contrib/ 
contrib
> 
> 3. copy freenet-ext.jar from your freenet directory into the newly created 
freenet-0.5-5108 directory (freenet-ext.jar remains unchanged)
> 
> 4. obtain the patch I crafted:
>    
freenet:CHK at Sm50039W8Gt8kzLyMloGB6pvjkQNAwI,xYB4spgd2g1ZtJIYN0lfeg/freenet_dh.patch
> 
> 5. Examine this patch closely. You don't know me. You never know beforehand 
if you're about to be tricked or treated, or handled by an incompetent 
person.
>    This patch does the following things:
>    a. creates a method to check for weak Diffie-Hellman exponents (imported 
from freenet 0.7)
>    b. there are *extremely* few weak exponentials in the number space, so 
accidental creation of a weak exponential is *extremely* unlikely; 
nevertheless, the patch adds code to prevent creating weak exponents 
(imported from freenet 0.7)
>    c. adds code to abort a Diffie-Hellman key exchange if our peer ("Bob") 
uses a weak key (logs an error) (two instances)
>    d. bumps the build number up to 5108. I feel it's justified that we users 
hijack the build numbering scheme as the developers don't maintain it 
anymore.
> 
> 6. If you're satisfied, copy this patch into the freenet-0.5-5108 directory.
> 
> 7. Apply the patch:
>    $ patch -p1 < freenet_dh.patch
> 
> 8. Build freenet.jar
>    $ CLASSPATH=freenet-ext.jar ant distclean dist
> 
> 9. Make a backup of your old freenet.jar (freenet-ext.jar remains in place).
> 
> 10. Copy the newly built freenet.jar to your freenet directory.
>     $ cp lib/freenet.jar /path/to/freenet/dir
> 
> 11. Restart freenet
> 
> That's it. Enjoy your shiny new freenet build.
> 
> It would be great if someone in contact with the freenet 0.7 developers 
could communicate the patch to them. I'm just a user, and some official 
acknowledgement that the patch does indeed fix *all* instances of weak 
Diffie-Hellman handling is appreciated because, you know, the comments in the 
freenet source are not exactly abundant and it's not easy for a newcomer to 
find one's way through.
> 
> EOM
> 
> Here's the patch:
> diff -Naur freenet-0.5-5107/build.xml freenet-0.5-5108/build.xml
> --- freenet-0.5-5107/build.xml	2007-10-31 18:12:46.000000000 +0100
> +++ freenet-0.5-5108/build.xml	2007-10-31 18:22:13.000000000 +0100
> @@ -22,8 +22,8 @@
>  	<property name="freenet-ext.location" location="${lib}/freenet-ext.jar"/>
>  	<!-- this is where the Contrib directory is supposed to be. Override this
>  	if necessary -->
> -	<property name="contrib.location" location=".."/>
> -	<property name="servlet.location" 
location="${contrib.location}/Contrib/freenet_ext/build_dir"/>
> +	<property name="contrib.location" location="."/>
> +	<property name="servlet.location" 
location="${contrib.location}/contrib/freenet_ext/build_dir"/>
>  
>  <!-- 
======================================================================= -->
>      <target name="env"
> diff -Naur freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java 
freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java
> --- freenet-0.5-5107/src/freenet/crypt/DiffieHellman.java	2007-10-31 
18:08:57.000000000 +0100
> +++ freenet-0.5-5108/src/freenet/crypt/DiffieHellman.java	2007-10-31 
18:21:34.000000000 +0100
> @@ -11,6 +11,7 @@
>  import java.util.Stack;
>  
>  import freenet.Core;
> +import freenet.support.Logger;
>  
>  public class DiffieHellman {
>  	
> @@ -37,6 +38,9 @@
>  
>  	private static Thread precalcThread;
>  
> +	public static final BigInteger MIN_EXPONENTIAL_VALUE = new 
BigInteger("2").pow(24);
> +	public static final BigInteger MAX_EXPONENTIAL_VALUE = 
group.getP().subtract(MIN_EXPONENTIAL_VALUE);
> +
>  	static {
>  		precalcThread = new PrecalcBufferFill();
>  		precalcThread.start();
> @@ -132,11 +136,53 @@
>  	private static BigInteger[] genParams() {
>  		BigInteger params[] = new BigInteger[2];
>  		// Don't need NativeBigInteger?
> -		params[0] = new BigInteger(256, r);
> -		params[1] = group.getG().modPow(params[0], group.getP());
> +		
> +		do {
> +			params[0] = new BigInteger(256, r);
> +			params[1] = group.getG().modPow(params[0], group.getP());
> +		} while(!DiffieHellman.checkDHExponentialValidity(DiffieHellman.class, 
params[1]));
> +
>  		return params;
>  	}
>  
> +	/**
> +	 * Check the validity of a DH exponential
> +	 *
> +	 * @param a BigInteger: The exponential to test
> +	 * @return a boolean: whether the DH exponential provided is acceptable or 
not
> +	 *
> +	 * @see http://securitytracker.com/alerts/2005/Aug/1014739.html
> +	 * @see http://www.it.iitb.ac.in/~praj/acads/netsec/FinalReport.pdf
> +	 */
> +	public static boolean checkDHExponentialValidity(Class caller, BigInteger 
exponential) {
> +		int onesCount=0, zerosCount=0;
> +
> +		// Ensure that we have at least 16 bits of each gender
> +		for(int i=0; i < exponential.bitLength(); i++)
> +			if(exponential.testBit(i))
> +				onesCount++;
> +			else
> +				zerosCount++;
> +		if((onesCount<16) || (zerosCount<16)) {
> +			Core.logger.log(caller, "The provided exponential 
contains "+zerosCount+" zeros and "+onesCount+" ones wich is unacceptable!", 
Logger.ERROR);
> +			return false;
> +		}
> +
> +		// Ensure that g^x > 2^24
> +		if(MIN_EXPONENTIAL_VALUE.compareTo(exponential) > -1) {
> +			Core.logger.log(caller, "The provided exponential is smaller than 2^24 
which is unacceptable!", Logger.ERROR);
> +			return false;
> +		}
> +		// Ensure that g^x < (p-2^24)
> +		if(MAX_EXPONENTIAL_VALUE.compareTo(exponential) < 1) {
> +			Core.logger.log(caller, "The provided exponential is bigger than (p - 
2^24) which is unacceptable!", Logger.ERROR);
> +			return false;
> +		}
> +
> +		return true;
> +
> +	}
> +
>  	public static DHGroup getGroup() {
>  		return group;
>  	}
> diff -Naur freenet-0.5-5107/src/freenet/session/FnpLink.java 
freenet-0.5-5108/src/freenet/session/FnpLink.java
> --- freenet-0.5-5107/src/freenet/session/FnpLink.java	2007-10-31 
18:05:39.000000000 +0100
> +++ freenet-0.5-5108/src/freenet/session/FnpLink.java	2007-10-31 
18:21:53.000000000 +0100
> @@ -498,6 +498,11 @@
>          }
>          Ca = Util.readMPI(rawIn);
>  
> +	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Ca)) {
> +		String err = "Cannot accept remote exponential. WARNING: WITH HIGH 
PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
> +		throw new NegotiationFailedException(conn.getPeerAddress(), err);
> +	}
> +
>          Z = Ca.modPow(R, DiffieHellman.getGroup().getP());
>          byte[] kent = Util.MPIbytes(Z);
>          Util.makeKey(kent, k, 0, k.length);
> @@ -646,6 +651,12 @@
>          }
>  
>          Cb = Util.readMPI(rawIn);
> +
> +	if(!DiffieHellman.checkDHExponentialValidity(this.getClass(), Cb)) {
> +		String err = "Cannot accept remote exponential. WARNING: WITH HIGH 
PROBABILITY, THIS WAS A DELIBERATE ATTACK!";
> +		throw new NegotiationFailedException(conn.getPeerAddress(), err);
> +	}
> +
>          long readMPITime = System.currentTimeMillis();
>          long readmpilen = readMPITime - readByteTime;
>          if (logDEBUG || readmpilen > 500)
> diff -Naur freenet-0.5-5107/src/freenet/Version.java 
freenet-0.5-5108/src/freenet/Version.java
> --- freenet-0.5-5107/src/freenet/Version.java	2007-10-31 18:12:35.000000000 
+0100
> +++ freenet-0.5-5108/src/freenet/Version.java	2007-10-31 18:21:24.000000000 
+0100
> @@ -20,7 +20,7 @@
>  	public static String protocolVersion = "STABLE-1.51";
>  
>  	/** The build number of the current revision */
> -	public static final int buildNumber = 5107;
> +	public static final int buildNumber = 5108;
>  
>  	/** Oldest build of Fred we will talk to */
>  	public static final int lastGoodBuild = 5099;
> _______________________________________________
> Support mailing list
> Support at freenetproject.org
> http://news.gmane.org/gmane.network.freenet.support
> Unsubscribe at 
http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
> Or mailto:support-request at freenetproject.org?subject=unsubscribe
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071112/6300cf07/attachment.pgp 

From toad at amphibian.dyndns.org  Tue Nov 13 22:19:13 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Tue, 13 Nov 2007 22:19:13 +0000
Subject: [freenet-support] [freenet-dev] Diffie-Hellman security fix for
	freenet 0.5
In-Reply-To: <864265.36396.qm@web44816.mail.sp1.yahoo.com>
References: <864265.36396.qm@web44816.mail.sp1.yahoo.com>
Message-ID: <200711132219.17544.toad@amphibian.dyndns.org>

On Friday 02 November 2007 23:25, Jack O'Lantern wrote:
> Hi,
> 
> it took me some time but I managed to subscribe to
> this list through TOR. I've sent and canceled a
> previous message, sorry for the confusion.
> 
> I've attached a patch for freenet 0.5. It fixes the
> Diffie-Hellman exponential weakness. I hope I caught
> every instance of this weakness in the code. Please
> apply this patch and build freenet 0.5-5108.
> 
> "Nomen Nescio" kindly posted the patch to the support
> list in the form in which I posted it on Frost at Freenet
> 0.5. The only difference in the attached patch is that
> the build.xml file remains unchanged, so you can use
> your own build process.

The patch posted to support has been applied (without the build.xml change). 
It was rather troublesome to apply probably because of its going via Frost 
(tab to space translations?). The weak DH keys issue is not the only security 
problem with Freenet 0.5, and as it is unmaintained by the core team, we 
would be happy for you to have an SVN account and maintain Freenet 0.5.

Major security issues with 0.5 (there are probably more):
- CSS filter updates
- HTML filter updates
- Link level encryption can be cheaply DoSed on CPU (hence JFK in 0.7); this 
can be done stealthily as it doesn't require much bandwidth and freenet 
commonly uses lots of CPU, it would have the effect of overloading the node 
and making traffic go elsewhere, thus the attacker would know that any 
requests from it originate locally. This might be possible on 0.7 but is 
definitely easier on 0.5 because of the link level crypto.
- The most effective attack may simply be to cause lots of connection churn. 
This is also a problem on 0.7 opennet.
- And of course, 0.5 is strictly opennet (thus harvestable), routing table 
takeover is probably not hard, and it's unlikely given current knowledge that 
NGR will scale (and likely that it can be manipulated).
> 
> Jack
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071113/4bf6a6e8/attachment.pgp 

From level13 at gmail.com  Thu Nov 15 16:32:46 2007
From: level13 at gmail.com (Level 13)
Date: Thu, 15 Nov 2007 17:32:46 +0100
Subject: [freenet-support] My node won't start anymore after the
	computer crashed
Message-ID: <8e767170711150832j4381c26i4d35f4ebe64c9a8f@mail.gmail.com>

Is there really no one out there who could advise me what to do? My
node has been down for some time now. Should I try deleting all files
and directories in my freenet store directory?

-------
Author: Level 13
Date:
To: support
Subject: [freenet-support] My node won't start anymore after the
computer crashed
My computer crashed last night (or it was an unexpected shutdown).
Now my Freenet node won't start anymore - i.e. the animated icon
(starting...) remains running. I even left it like this for a couple
of hours (in case there was reindexing or something to be performed).
What should I do?

The log is as follows:

Nov 8, 2007 9:59:16 AM (freenet.node.Main, main, NORMAL): Starting
Freenet (Fred) 0.5 node, build #5107 on JVM Sun Microsystems Inc.:Java
HotSpot(TM) Client VM:1.6.0_03-b05
os.arch = x86
Loading native...
Attempting to load freenet/support/CPUInformation/jcpuid-x86-windows.dll
Written to C:\DOCUME~1\XXXXXXXX\LOCALS~1\Temp\jcpuid6998lib.tmp: 40960
INFO: Native CPUID library
'freenet/support/CPUInformation/jcpuid-x86-windows.dll' loaded from
resource
INFO: Optimized native BigInteger library
'net/i2p/util/jbigi-windows-pentium4.dll' loaded from resource
Exception in thread "main" java.io.EOFException
    at freenet.support.io.ReadInputStream.readUTFChar(ReadInputStream.java:223)
    at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:134)
    at freenet.support.io.CommentedReadInputStream.readToEOF(CommentedReadInputStream.java:45)
    at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:184)
    at freenet.FieldSet.privParse(FieldSet.java:521)
    at freenet.FieldSet.parseFields(FieldSet.java:454)
    at freenet.FieldSet.parseFields(FieldSet.java:390)
    at freenet.FieldSet.<init>(FieldSet.java:83)
    at freenet.node.Main.loadNodeFile(Main.java:2950)
    at freenet.node.Main.main(Main.java:515)
Nov 8, 2007 9:59:18 AM (freenet.node.Main, main, NORMAL): loading node
keys: node
Nov 8, 2007 9:59:18 AM (freenet.node.Main, main, ERROR): Unexpected
Exception: java.io.EOFException
java.io.EOFException
    at freenet.support.io.ReadInputStream.readUTFChar(ReadInputStream.java:223)
    at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:134)
    at freenet.support.io.CommentedReadInputStream.readToEOF(CommentedReadInputStream.java:45)
    at freenet.support.io.ReadInputStream.readToEOF(ReadInputStream.java:184)
    at freenet.FieldSet.privParse(FieldSet.java:521)
    at freenet.FieldSet.parseFields(FieldSet.java:454)
    at freenet.FieldSet.parseFields(FieldSet.java:390)
    at freenet.FieldSet.<init>(FieldSet.java:83)
    at freenet.node.Main.loadNodeFile(Main.java:2950)
    at freenet.node.Main.main(Main.java:515)


From mrflibble at urbantakeover.freeserve.co.uk  Sun Nov 18 13:41:35 2007
From: mrflibble at urbantakeover.freeserve.co.uk (Mr. Flibble)
Date: Sun, 18 Nov 2007 13:41:35 -0000
Subject: [freenet-support] Freenet 0.7 build 1073
In-Reply-To: <200710261930.18702.toad@amphibian.dyndns.org>
Message-ID: <0e6901c829e8$c19be4f0$0a7b0001@deepspace3>

Hi everyone,
Have I missed an announcement of 1073?
I haven't seen one since 1070, and I've checked my spam filters (which
mailing list messages sometimes get stuck in).
Thanks,

MrFlibble



From juiceman69 at gmail.com  Sun Nov 18 15:16:01 2007
From: juiceman69 at gmail.com (Juiceman)
Date: Sun, 18 Nov 2007 10:16:01 -0500
Subject: [freenet-support] Freenet 0.7 build 1073
In-Reply-To: <0e6901c829e8$c19be4f0$0a7b0001@deepspace3>
References: <200710261930.18702.toad@amphibian.dyndns.org>
	<0e6901c829e8$c19be4f0$0a7b0001@deepspace3>
Message-ID: <8b525dee0711180716s556dfb81obe1036f145322ddc@mail.gmail.com>

On Nov 18, 2007 8:41 AM, Mr. Flibble
<mrflibble at urbantakeover.freeserve.co.uk> wrote:
> Hi everyone,
> Have I missed an announcement of 1073?
> I haven't seen one since 1070, and I've checked my spam filters (which
> mailing list messages sometimes get stuck in).
> Thanks,
>
> MrFlibble
>

1073: bugfix release

You might loose the list of loaded plugins when you will update...
That's a known issue we can't easily fix. Most people want at least
the JSTUN plugin (and maybe the UPnP one) to be loaded to improve
their connectivity.

Bugfixes:
- plugins weren't loadable anymore after a failed attempt
- Unloading a FreenetIPDetector plugin could lead to a NPE
- New nodes were unable to start fproxy up because of a bug

Feature:
- Bind services to both ipv4 and ipv6 by default
- Allow plugins to be reloaded ignoring the cache
- Accept local filenames as plugin URI

L10n:
- update to the french translation (thanks to batosai)
- minor improvments to the english one

Credits:
- Bombe
- nextgens

################################################################################################

(Not sure this one was announced)

1072: bugfix release

You might loose the list of loaded plugins when you will update...
That's a known issue we can't easily fix. Most people want at least
the JSTUN plugin (and maybe the UPnP one) to be loaded to improve
their connectivity.

Bugfixes:
       - plugins weren't loadable anymore after a failed attempt
       - Unloading a FreenetIPDetector plugin could lead to a NPE
       - New nodes were unable to start fproxy up because of a bug

Feature:
       - Bind services to both ipv4 and ipv6 by default
       - Allow plugins to be reloaded ignoring the cache
       - Accept local filenames as plugin URI

L10n:
       - update to the french translation (thanks to batosai)
       - minor improvments to the english one

Credits:
       - Bombe
       - nextgens

########################################################################################################

A new build has been released (1071):

New  features:
       - StartupToadlet
       - Refactoring of the /plugins/ toadlet to improve usability
       - Refactoring of part of the plugins API (work in progress)
       - Start plugins off-thread

Bugfixes:
       - HTMLNode was a bit too strict
       - *loads* of various bugfixes to fproxy
       - Maybe fix completionTime on FCP ClientPuts
       - Handshake once a while even with really old nodes
       - Fix the worrying message displayed about jfk (exponent-unknown)

Updated translations:
       - Norwegian thanks to Martin Nyhus
       - German thanks to Thomas

Credits:
       - Bombe
       - nextgens
       - toad


-- 
I may disagree with what you have to say, but I shall defend, to the
death, your right to say it. - Voltaire
Those who would give up Liberty, to purchase temporary Safety, deserve
neither Liberty nor Safety. - Ben Franklin


From mrflibble at urbantakeover.freeserve.co.uk  Sun Nov 18 17:23:24 2007
From: mrflibble at urbantakeover.freeserve.co.uk (Mr. Flibble)
Date: Sun, 18 Nov 2007 17:23:24 -0000
Subject: [freenet-support] Freenet 0.7 build 1073
In-Reply-To: <8b525dee0711180716s556dfb81obe1036f145322ddc@mail.gmail.com>
Message-ID: <0eb501c82a07$c07463d0$0a7b0001@deepspace3>

> 1073: bugfix release

Thanks  juiceman!



From toad at amphibian.dyndns.org  Mon Nov 19 20:41:08 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Mon, 19 Nov 2007 20:41:08 +0000
Subject: [freenet-support] Freenet 0.7 build 1074
Message-ID: <200711192041.12842.toad@amphibian.dyndns.org>

Freenet 0.7 build 1074 is now available. Please upgrade. This build will be 
mandatory on Wednesday, but your node should auto-upgrade even if you miss 
the deadline thanks to update over mandatory. This build includes a 
significant security fix for opennet, a fix to probe requests (a diagnostic 
tool we use to understand the network), activelink support on the bookmarks 
list, translation updates and very many bugfixes.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071119/17e29a29/attachment.pgp 

From toad at amphibian.dyndns.org  Mon Nov 19 23:41:12 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Mon, 19 Nov 2007 23:41:12 +0000
Subject: [freenet-support] Freenet 0.7 build 1074
In-Reply-To: <200711192041.12842.toad@amphibian.dyndns.org>
References: <200711192041.12842.toad@amphibian.dyndns.org>
Message-ID: <200711192341.16953.toad@amphibian.dyndns.org>

On Monday 19 November 2007 20:41, Matthew Toseland wrote:
> Freenet 0.7 build 1074 is now available. Please upgrade. This build will be 
> mandatory on Wednesday, but your node should auto-upgrade even if you miss 
> the deadline thanks to update over mandatory. This build includes a 
> significant security fix for opennet, a fix to probe requests (a diagnostic 
> tool we use to understand the network), activelink support on the bookmarks 
> list, translation updates and very many bugfixes.
> 
Build 1075 is out. It hopefully won't clobber your bookmarks, unlike 1074. 
Sorry. Thanks for testing Freenet!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071119/16fb3616/attachment.pgp 

From batosai at batosai.net  Tue Nov 20 11:17:43 2007
From: batosai at batosai.net (Julien Cornuwel aka batosai)
Date: Tue, 20 Nov 2007 12:17:43 +0100
Subject: [freenet-support] Node still restarting after 1073 update
Message-ID: <4742C257.2060203@batosai.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

My node auto-updated to 1073 yesterday evening and it is not yet up :

Your freenet node is starting up, please hold on.
Current status
INFO | jvm 4 | 2007/11/20 11:08:53 | Moving blocks: 0% ( 12287/1573376)
...

I think it is because I decided to reduce my datastore size from 200GB
to 100GB a few days ago. Is there a way to speed up things ? Or maybe
I can stop it and put it back to the previous value ?

Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHQsJXo6N05NzaOvURArpMAKC6SdEyqnnUbkw//Cl2QZ4yvv67EwCgjVOe
G592vTQ+gT//CNC9zDLhRCQ=
=efy7
-----END PGP SIGNATURE-----



From bbackde at googlemail.com  Tue Nov 20 11:33:10 2007
From: bbackde at googlemail.com (bbackde at googlemail.com)
Date: Tue, 20 Nov 2007 12:33:10 +0100
Subject: [freenet-support] Node still restarting after 1073 update
In-Reply-To: <4742C257.2060203@batosai.net>
References: <4742C257.2060203@batosai.net>
Message-ID: <d6149a790711200333v542d1694j577913e4ce309c32@mail.gmail.com>

I opened a bug against this before some time:

https://bugs.freenetproject.org/view.php?id=1782

By default the node don't shrinks during online time (as recommended
in the configuration page).
It tries to shrink during startup, but this takes endless ages! So it
is currently not really possible to shrink
a store in an acceptable amount of time.

On Nov 20, 2007 12:17 PM, Julien Cornuwel aka batosai
<batosai at batosai.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> My node auto-updated to 1073 yesterday evening and it is not yet up :
>
> Your freenet node is starting up, please hold on.
> Current status
> INFO | jvm 4 | 2007/11/20 11:08:53 | Moving blocks: 0% ( 12287/1573376)
> ...
>
> I think it is because I decided to reduce my datastore size from 200GB
> to 100GB a few days ago. Is there a way to speed up things ? Or maybe
> I can stop it and put it back to the previous value ?
>
> Regards
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFHQsJXo6N05NzaOvURArpMAKC6SdEyqnnUbkw//Cl2QZ4yvv67EwCgjVOe
> G592vTQ+gT//CNC9zDLhRCQ=
> =efy7
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Support mailing list
> Support at freenetproject.org
> http://news.gmane.org/gmane.network.freenet.support
> Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
> Or mailto:support-request at freenetproject.org?subject=unsubscribe
>



-- 
__________________________________________________
GnuPG key:   (0x48DBFA8A)
Keyserver:   pgpkeys.pca.dfn.de
Fingerprint:
477D F057 1BD4 1AE7 8A54 8679 6690 E2EC 48DB FA8A
__________________________________________________


From pd28 at hotmail.it  Wed Nov 14 20:15:24 2007
From: pd28 at hotmail.it (pacchiano davide)
Date: Wed, 14 Nov 2007 20:15:24 +0000
Subject: [freenet-support] uninstalling software
Message-ID: <BAY109-W33CF609621327F56E2B759AD810@phx.gbl>


Goodevening. I can't uninstalling the software. help me please
_________________________________________________________________
Scarica GRATIS 30 emoticon per Messenger!
http://www.emoticons-livemessenger.com/pages/msnit/index.htm
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://emu.freenetproject.org/pipermail/support/attachments/20071114/9f8e24ad/attachment.htm 

From toad at amphibian.dyndns.org  Tue Nov 20 23:06:13 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Tue, 20 Nov 2007 23:06:13 +0000
Subject: [freenet-support] uninstalling software
In-Reply-To: <BAY109-W33CF609621327F56E2B759AD810@phx.gbl>
References: <BAY109-W33CF609621327F56E2B759AD810@phx.gbl>
Message-ID: <200711202306.13683.toad@amphibian.dyndns.org>

On Wednesday 14 November 2007 20:15, pacchiano davide wrote:
> 
> Goodevening. I can't uninstalling the software. help me please

What have you tried?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071120/28e6111c/attachment.pgp 

From level13 at gmail.com  Thu Nov 22 20:47:20 2007
From: level13 at gmail.com (Level 13)
Date: Thu, 22 Nov 2007 21:47:20 +0100
Subject: [freenet-support] My node won't start anymore after the
	computer crashed
Message-ID: <8e767170711221247t15ac1098o482e8d164f208231@mail.gmail.com>

Well, I've deleted my Freenet store completely. Didn't help.
Tried to run UpdateSnapshot.exe. It downloaded something and maybe
updated it (no errors). Didn't help.
Downloaded freenet-webinstall.exe, tried to run it (for a reinstall, I
suppose), but I only received: "I could not find a compatible Java
Runtime Environment installed on this machine. Either download and run
'freenet-java-webinstall.exe' instead, or download a compatible Java
Runtime Environment separately and then rerun this installer. Click OK
to EXIT this installation."
Which is weird because I've had the latest JRE installed (version 1.6
update 3)...
I ran NodeConfig.exe and rechecked all the settings and saved them.
Nothing. My nodes still remains at the animated icon and won't start.
I'm out of ideas. Anyone? Or does this mean version 0.5 is blocked for good??


From mbuni5000 at yahoo.com  Fri Nov 23 01:41:41 2007
From: mbuni5000 at yahoo.com (KB)
Date: Thu, 22 Nov 2007 17:41:41 -0800 (PST)
Subject: [freenet-support] Please help:  New User Can't Access
Message-ID: <268475.79117.qm@web39513.mail.mud.yahoo.com>

I cannot access http://127.0.0.1:8888 - After two days I keep getting a "Cannot establish connection message" on Firefox and Safari (I'm using Mac OS X).

I do NOT go through a proxy.

I've seen from other posts I should probably provide my wrapper.log here, but I do not know what that is or where to get it.

Other info that may be of importance - I'm on a wireless network in Thailand.

Thanks.

       
---------------------------------
Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://emu.freenetproject.org/pipermail/support/attachments/20071122/b15ed096/attachment.htm 

From freenet-support at david.sowder.com  Sun Nov 25 16:05:08 2007
From: freenet-support at david.sowder.com (David Sowder (Zothar))
Date: Sun, 25 Nov 2007 10:05:08 -0600
Subject: [freenet-support] Please help:  New User Can't Access
In-Reply-To: <268475.79117.qm@web39513.mail.mud.yahoo.com>
References: <268475.79117.qm@web39513.mail.mud.yahoo.com>
Message-ID: <47499D34.4070201@david.sowder.com>

wrapper.log should be in the directory where Freenet was installed to. 
I believe, on Mac OS X, this will be in a "freenet" folder living in
your home directory.

KB wrote:
> I cannot access http://127.0.0.1:8888 - After two days I keep getting
> a "Cannot establish connection message" on Firefox and Safari (I'm
> using Mac OS X).
>
> I do NOT go through a proxy.
>
> I've seen from other posts I should probably provide my wrapper.log
> here, but I do not know what that is or where to get it.
>
> Other info that may be of importance - I'm on a wireless network in
> Thailand.
>
> Thanks.
>
> ------------------------------------------------------------------------


From bjorn at b-costa-blanca.com  Mon Nov 26 03:39:38 2007
From: bjorn at b-costa-blanca.com (bjorn at b-costa-blanca.com)
Date: Mon, 26 Nov 2007 04:39:38 +0100 (CET)
Subject: [freenet-support] I need some help
Message-ID: <20071126033938.49F41433@atmail.b-one.net>

An HTML attachment was scrubbed...
URL: http://emu.freenetproject.org/pipermail/support/attachments/20071126/0c477582/attachment.htm 

From luthair2035 at roadrunner.com  Wed Nov 21 07:42:09 2007
From: luthair2035 at roadrunner.com (Anthony)
Date: Tue, 20 Nov 2007 23:42:09 -0800
Subject: [freenet-support] uninstall problem in Vista
In-Reply-To: BAY123-W27F101448A3F1A18365A72DEA30@phx.gbl
References: BAY123-W27F101448A3F1A18365A72DEA30@phx.gbl
Message-ID: <F04A50C54A3D403680304768C33F4592@Shadowcat>

I went through and Deleted Freenet refs, from my Regestry and it got rid of freenet from my program uninstall list.


On 2007-10-15 17:40, Nick Summy wrote:
> I'm trying to uninstall Freenet in Vista using the Programs and Features section in the Control Panels.  I when I hit uninstall I get the following error:  "You do not have sufficient access to uninstall Freenet 0.7-a2-pre.  Please contact your system administrator"  The account I am logged in with is an administrator account.  Just to be sure though I logged in as the actual administrator account and still got the same error.  Does anyone have any ideas?  Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://emu.freenetproject.org/pipermail/support/attachments/20071120/eb1158cb/attachment.htm 

From freenetwork at web.de  Wed Nov 28 09:24:52 2007
From: freenetwork at web.de (freenetwork at web.de)
Date: Wed, 28 Nov 2007 10:24:52 +0100
Subject: [freenet-support] NPE at
	freenet.clients.http.bookmark.BookmarkManager.<init>(BookmarkManager.java:82)
Message-ID: <E1IxJAQ-0001FK-00@smtp05.web.de>

* svn build 16004
* clean install (only freenet[-ext].jar in directory)
* called with java -jar [...] node.Node

[...]
Initializing SSK Datastore
Opened main database for ssk-store-
Opening access times database for ssk-store-
Opened access times database for ssk-store-
Opening block db index
Opened block number database for ssk-store-
Keys in store: db 0 file 0 / max 15344
Initializing SSK Datacache (15344 keys)
Opened main database for ssk-cache-
Opening access times database for ssk-cache-
Opened access times database for ssk-cache-
Opening block db index
Opened block number database for ssk-cache-
Keys in store: db 0 file 0 / max 15344
Deleted 0 of 0 temporary files (0 non-temp files in temp directory) in 0
Initializing USK Manager
Error in WrapperListener.start callback.  java.lang.NullPointerException
java.lang.NullPointerException
        at freenet.clients.http.bookmark.BookmarkManager.<init>(BookmarkManager.java:82)
        at freenet.node.NodeClientCore.<init>(NodeClientCore.java:349)
        at freenet.node.Node.<init>(Node.java:1335)
        at freenet.node.NodeStarter.start(NodeStarter.java:152)
        at org.tanukisoftware.wrapper.WrapperManager.startInner(WrapperManager.java:2831)
        at org.tanukisoftware.wrapper.WrapperManager.privilegedStart(WrapperManager.java:1815)
        at org.tanukisoftware.wrapper.WrapperManager.access$2400(WrapperManager.java:103)
        at org.tanukisoftware.wrapper.WrapperManager$5.run(WrapperManager.java:1743)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.tanukisoftware.wrapper.WrapperManager.start(WrapperManager.java:1740)
        at freenet.node.NodeStarter.main(NodeStarter.java:261)
        at freenet.node.Node.main(Node.java:511)
Closing database due to shutdown.
Closing database due to shutdown.
Closing database due to shutdown.
Closing database due to shutdown.
Closing database due to shutdown.
Closing database due to shutdown.
Closed database
Closed database
Closed database
Closed database
Closed database
Closed database
[EOT]







From toad at amphibian.dyndns.org  Wed Nov 28 12:12:58 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Wed, 28 Nov 2007 12:12:58 +0000
Subject: [freenet-support] NPE at
	freenet.clients.http.bookmark.BookmarkManager.<init>(BookmarkManager.java:82)
In-Reply-To: <E1IxJAQ-0001FK-00@smtp05.web.de>
References: <E1IxJAQ-0001FK-00@smtp05.web.de>
Message-ID: <200711281212.58450.toad@amphibian.dyndns.org>

Fixed in trunk.

On Wednesday 28 November 2007 09:24, freenetwork at web.de wrote:
> * svn build 16004
> * clean install (only freenet[-ext].jar in directory)
> * called with java -jar [...] node.Node
> 
> [...]
> Initializing SSK Datastore
> Opened main database for ssk-store-
> Opening access times database for ssk-store-
> Opened access times database for ssk-store-
> Opening block db index
> Opened block number database for ssk-store-
> Keys in store: db 0 file 0 / max 15344
> Initializing SSK Datacache (15344 keys)
> Opened main database for ssk-cache-
> Opening access times database for ssk-cache-
> Opened access times database for ssk-cache-
> Opening block db index
> Opened block number database for ssk-cache-
> Keys in store: db 0 file 0 / max 15344
> Deleted 0 of 0 temporary files (0 non-temp files in temp directory) in 0
> Initializing USK Manager
> Error in WrapperListener.start callback.  java.lang.NullPointerException
> java.lang.NullPointerException
>         at 
freenet.clients.http.bookmark.BookmarkManager.<init>(BookmarkManager.java:82)
>         at freenet.node.NodeClientCore.<init>(NodeClientCore.java:349)
>         at freenet.node.Node.<init>(Node.java:1335)
>         at freenet.node.NodeStarter.start(NodeStarter.java:152)
>         at 
org.tanukisoftware.wrapper.WrapperManager.startInner(WrapperManager.java:2831)
>         at 
org.tanukisoftware.wrapper.WrapperManager.privilegedStart(WrapperManager.java:1815)
>         at org.tanukisoftware.wrapper.WrapperManager.access$2400
(WrapperManager.java:103)
>         at 
org.tanukisoftware.wrapper.WrapperManager$5.run(WrapperManager.java:1743)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at 
org.tanukisoftware.wrapper.WrapperManager.start(WrapperManager.java:1740)
>         at freenet.node.NodeStarter.main(NodeStarter.java:261)
>         at freenet.node.Node.main(Node.java:511)
> Closing database due to shutdown.
> Closing database due to shutdown.
> Closing database due to shutdown.
> Closing database due to shutdown.
> Closing database due to shutdown.
> Closing database due to shutdown.
> Closed database
> Closed database
> Closed database
> Closed database
> Closed database
> Closed database
> [EOT]
> 
> 
> 
> 
> 
> _______________________________________________
> Support mailing list
> Support at freenetproject.org
> http://news.gmane.org/gmane.network.freenet.support
> Unsubscribe at 
http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
> Or mailto:support-request at freenetproject.org?subject=unsubscribe
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071128/959e8272/attachment.pgp 

From toad at amphibian.dyndns.org  Wed Nov 28 12:17:57 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Wed, 28 Nov 2007 12:17:57 +0000
Subject: [freenet-support] I need some help
In-Reply-To: <20071126033938.49F41433@atmail.b-one.net>
References: <20071126033938.49F41433@atmail.b-one.net>
Message-ID: <200711281217.58151.toad@amphibian.dyndns.org>

On Monday 26 November 2007 03:39, bjorn at b-costa-blanca.com wrote:
>  as nothing works after installing Freenet 0.7.

Could you please explain more? Freenet doesn't work, or the internet doesn't 
work, or the computer doesn't work?
>  
>  Its not much I can do??with my computer, I must write and send e-mail from 
webmail as MS live mail stoped.
>  My new Windows install was not 48 hours old yet.

Vista? We have had some positive reports and some negative reports...
>  
>  I dl Freenet and Java several times as Freenet install and Java install not 
worked together. Java installed but Freenet install couldnt find it. I made a 
check at the Java site and it was installed.

Odd. This is when you downloaded the bundled installer which should install 
both?
>  
>  Finally with dl of Freenet from one link and Java from another solved that, 
both installed successfully but my computer stoped more or less to respond 
even after reboot.

So the computer now won't boot up at all? Or what?

Are you trying to run vista plus freenet on a computer with 512MB or less of 
RAM?
>  
>  But during more than 8 hours I have seen some pages on local web but I cant 
see that ANYTHING of this work.

I'm still not clear what your problem is! Has Freenet somehow broken the rest 
of your computer or does it just not work itself?
>  
>  I have been looking at Freenet 0.5, as this Freenet 0.7 seems to be a lot 
of a beta version.

Freenet 0.5 is unmaintained. Well, it's got a maintainer now, but it's been 
unmaintained for a long time. Freenet 0.7 should do *something* out of the 
box, and is fully supported. And it should not break your computer, if it 
does most likely your computer was broken in the first place.
>  
>  Frost: I cant find anything there. Emty boards?

Be patient. Once your node is online (i.e. once you have got some noderefs 
that actually connect, and turned on promiscuous mode), Frost will be able to 
find new boards. *IF* your node is online.
>  
>  I droped my node reference at http://dark-code.bulix.org/
>  
>  I can be online 24 hrs at least 5 days/week so I am looking for to connect 
to similar nodes. 3 Mbit ADSL.
>  
>  Thanks for any help.
>  
>  Bj?rn
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071128/d6a2e574/attachment.pgp 

From bjorn at b-costa-blanca.com  Wed Nov 28 14:45:15 2007
From: bjorn at b-costa-blanca.com (=?iso-8859-1?Q?Bj=F6rn_-_Costa_Blanca?=)
Date: Wed, 28 Nov 2007 15:45:15 +0100
Subject: [freenet-support] Help   pyFreenet15921.tbz
Message-ID: <D7ED2331B7934944A8C3319EB61FE362@murcia0b1ee88f>

WinXP, I am able to open with Winrar but how to do with the folder  pyFreenet?
Shall I put this folder in the Freenet folder?

The name I put on Freenet folder ..... maybe its too long.

At the time for install I had so much other problem ..... maybe I can rename the folder?

As I alredy had a folder named Freenet I gave it the name Freenet-prog.

In DOS, with the keyboard I have now, I cant access that folder as I dont know the ASCII code for that little worm I need to shorten the name to DOS 8.3 format.
So, maybe it can cause problem.

Bjorn
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://emu.freenetproject.org/pipermail/support/attachments/20071128/fdd241c5/attachment.htm 

From bjorn at b-costa-blanca.com  Wed Nov 28 14:52:50 2007
From: bjorn at b-costa-blanca.com (=?iso-8859-1?Q?Bj=F6rn_-_Costa_Blanca?=)
Date: Wed, 28 Nov 2007 15:52:50 +0100
Subject: [freenet-support] Help   does it work
Message-ID: <148F16E101914F15AEFD34225F2FD09D@murcia0b1ee88f>

In 3 days, (after checking my traffic) Freenet has no in or outgoing signals. Not 1 single bytes during and after install. I doubt that it will work without any signals.

Its totaly dead.

Bjorn
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://emu.freenetproject.org/pipermail/support/attachments/20071128/a49e2bf2/attachment.htm 

From toad at amphibian.dyndns.org  Wed Nov 28 15:27:35 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Wed, 28 Nov 2007 15:27:35 +0000
Subject: [freenet-support] Help   does it work
In-Reply-To: <148F16E101914F15AEFD34225F2FD09D@murcia0b1ee88f>
References: <148F16E101914F15AEFD34225F2FD09D@murcia0b1ee88f>
Message-ID: <200711281527.35718.toad@amphibian.dyndns.org>

On Wednesday 28 November 2007 14:52, Bj?rn - Costa Blanca wrote:
> In 3 days, (after checking my traffic) Freenet has no in or outgoing 
signals. Not 1 single bytes during and after install. I doubt that it will 
work without any signals.

You need to add some peers (Friends or Strangers).
> 
> Its totaly dead.
> 
> Bjorn
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071128/0d230c67/attachment.pgp 

From freenet-support at david.sowder.com  Wed Nov 28 15:28:39 2007
From: freenet-support at david.sowder.com (David Sowder)
Date: Wed, 28 Nov 2007 09:28:39 -0600
Subject: [freenet-support] Help   pyFreenet15921.tbz
In-Reply-To: <D7ED2331B7934944A8C3319EB61FE362@murcia0b1ee88f>
References: <D7ED2331B7934944A8C3319EB61FE362@murcia0b1ee88f>
Message-ID: <474D8927.7010804@david.sowder.com>

Bj?rn - Costa Blanca wrote:
> WinXP, I am able to open with Winrar but how to do with the folder  
> pyFreenet?
Where to extract the archive to is completely up to the program used to 
unpack the archive.  I believe both WinRAR and 7zip make that option 
directly available.
> Shall I put this folder in the Freenet folder?
You could, but you might consider putting it in a separate folder, maybe 
"pyFreenet" in the same parent folder as the Freenet folder, though you 
could put it just about anywhere.
> The name I put on Freenet folder ..... maybe its too long.
>  
> At the time for install I had so much other problem ..... maybe I can 
> rename the folder?
You can rename the folder you extracted pyFreenet to as pyFreenet 
doesn't generally care where it's installed.
> As I alredy had a folder named Freenet I gave it the name Freenet-prog.
>  
> In DOS, with the keyboard I have now, I cant access that folder as I 
> dont know the ASCII code for that little worm I need to shorten the 
> name to DOS 8.3 format.
> So, maybe it can cause problem.

By "In DOS", do you mean at the Windows XP Command Prompt?  That 
supports long filenames.


From toad at amphibian.dyndns.org  Thu Nov 29 20:38:11 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Thu, 29 Nov 2007 20:38:11 +0000
Subject: [freenet-support] Freenet 0.7 build 1076
Message-ID: <200711292038.18925.toad@amphibian.dyndns.org>

Freenet 0.7 build 1076 is now available. Please upgrade! (Hopefully your node 
will automatically upgrade for you). This build features many bugfixes and a 
number of larger changes, including:
- Fix several deadlocks, and a bug causing the node to effectively stop 
functioning with several hung inserts.
- Local requests and inserts are now treated almost exactly the same as remote 
requests and inserts. This should improve security and overall network 
performance.
- Beginnings of port forwarding detection. In the long term this should 
increase network efficiency (by being able to turn off aggressive 
handshaking), and enable parts of opennet and possibly some forms of darknet 
invites.
- Rekey the link encryption every hour or gigabyte, whichever comes first. So 
if an attacker seizes the node, he can only decrypt traffic on open 
connections less recent than 1 hour 5 minutes.
- More improvements to plugins, new plugin API for exposing plugin functions 
to FCP.
- Store the bookmarks list in a separate file.
- Lots of minor code refactoring and cleanups.
- Turn off probe requests for now. We may add new probe requests soon, but 
they will be simpler (threaded).

In other news, the windows installer now has a proper uninstall script, the 
offline installer works again, and various other fixes. And Jack O'Lantern 
has taken over maintaining 0.5.

Thanks to:
batosai
jflesch
Michael Tanzer
nextgens
_ph00
saces
toad
zothar
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071129/1e65fd15/attachment.pgp 

From toad at amphibian.dyndns.org  Fri Nov 30 15:21:42 2007
From: toad at amphibian.dyndns.org (Matthew Toseland)
Date: Fri, 30 Nov 2007 15:21:42 +0000
Subject: [freenet-support] Freenet 0.7 build 1082
Message-ID: <200711301521.47390.toad@amphibian.dyndns.org>

Freenet 0.7 build 1082 is now available. This, and previous builds since 1076, 
fix various bugs, mostly introduced in 1076, mostly relating to the node 
failing to save important data to disk, or accidentally deleting it. It also 
fixes the bandwidth bug, which caused the output bandwidth to be very high 
and the payload percentage to be very low, because of a bug related to 
rekeying. This build will be mandatory on Sunday, so please update; your node 
should do this automatically, or offer to.

Sorry for all the problems in the last few builds, hopefully this will be the 
last critical-bugfix-build for a while. :)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://emu.freenetproject.org/pipermail/support/attachments/20071130/9502bf5a/attachment.pgp