diff --git a/i2p2www/blog/2014/11/01/0.9.16-Release.rst.draft b/i2p2www/blog/2014/11/01/0.9.16-Release.rst.draft new file mode 100644 index 00000000..a1ea19c7 --- /dev/null +++ b/i2p2www/blog/2014/11/01/0.9.16-Release.rst.draft @@ -0,0 +1,97 @@ +{% trans -%} +============== +0.9.16 Release +============== +{%- endtrans %} +.. meta:: + :author: zzz + :date: 2014-11-01 + :category: release + :excerpt: {% trans %}0.9.16 includes crypto migration and many fixes{% endtrans %} + +{% trans -%} +0.9.16 is a significant step forward in our plan to migrate +from DSA to ECDSA and then EdDSA cryptographic signatures, +and makes several other changes to increase your anonymity and security. +Client tunnels for standard, IRC, and SOCKS IRC will use ECDSA signatures by default. +In addition, we've fixed a large number of serious bugs, including console lockups. +{%- endtrans %} + +{% trans -%} +Changes in router data structures will require i2pcontrol plugin users to update to version 0.0.9. +{%- endtrans %} + +{% trans -%} +If you run an eepsite or a service and you are not running a recent release, +or your Java or OS does not support ECDSA (as noted in the logs and on the /logs page in the console), +please fix the issue as soon as possible or your users will soon be unable to connect. +{%- endtrans %} + +{% trans -%} +As usual, we recommend that you update to this release. The best way to +maintain security and help the network is to run the latest release. +{%- endtrans %} + + +**{% trans %}RELEASE DETAILS{% endtrans %}** + + +**{% trans %}Changes{% endtrans %}** + +- {% trans %}Add support for stronger Router Info signatures{% endtrans %} +- {% trans %}Encrypt RI lookups and responses on faster boxes{% endtrans %} +- {% trans %}Require I2CP authorization for all messages when enabled (requires 0.9.11 or higher client){% endtrans %} +- {% trans %}Disable TLSv3 and older ciphers for reseeding and other uses of SSL{% endtrans %} +- {% trans %}Use ECDSA by default for i2ptunnel IRC, SOCKS-IRC, and standard client tunnels{% endtrans %} +- {% trans %}Don't prefer floodfills in some countries{% endtrans %} +- {% trans %}New column sorting, set-all priority buttons, and upload ratio display in i2psnark{% endtrans %} +- {% trans %}Increase i2psnark tunnel default to 3 hops{% endtrans %} +- {% trans %}Implement bundling of multiple fragments in a single SSU message for efficiency{% endtrans %} +- {% trans %}New add-to-addressbook links on netdb leaseset page{% endtrans %} +- {% trans %}Implement I2NP DatabaseLookupMessage search type field to improve lookup efficiency{% endtrans %} + + + +**{% trans %}Bug Fixes{% endtrans %}** + + +- {% trans %}CPUID fixes and updates for recent processors{% endtrans %} +- {% trans %}i2psnark fix magnet links with %-encoding{% endtrans %} +- {% trans %}Improve handling of SSU socket closing out from under us (hopefully fix 100% CPU){% endtrans %} +- {% trans %}SSU bitfield handling fixes{% endtrans %} +- {% trans %}Fix HTTP header issues in i2psnark{% endtrans %} +- {% trans %}Fix rare NPE when building garlic message{% endtrans %} +- {% trans %}Fix console lockups (hopefully){% endtrans %} +- {% trans %}Fix i2ptunnel js confirm-delete{% endtrans %} + + +**{% trans %}Other{% endtrans %}** + +- {% trans %}Move router data structures from i2p.jar to router.jar (breaks i2pcontrol plugin){% endtrans %} +- {% trans %}New router keys now stored in router.keys.dat (eepPriv.dat format) instead of router.keys{% endtrans %} +- {% trans %}Improve handling of unsupported encryption throughout{% endtrans %} +- {% trans %}More error checking of client I2CP messages by the router{% endtrans %} +- {% trans %}Initial work on hooks for pluggable transports{% endtrans %} +- {% trans %}Enforce request timestamp in tunnel build messages{% endtrans %} +- {% trans %}Re-enable message status in streaming, but treat no leaseset as a soft failure for now{% endtrans %} +- {% trans %}Return unused DH keypairs to the pool for efficiency{% endtrans %} +- {% trans %}Raise failsafe tagset limit and improve deletion strategy when hit{% endtrans %} +- {% trans %}Change eepsite Jetty threadpool and queue configuration (new installs only){% endtrans %} +- {% trans %}NTCP establishment refactoring in prep for NTCP2 and PT{% endtrans %} +- Jetty 8.1.16-v20140903 +- {% trans %}Translation updates{% endtrans %} +- {% trans %}Update GeoIP data (new installs and PPA only){% endtrans %} + + +**{% trans %}SHA256 Checksums:{% endtrans %}** + +:: + + + 186bbe30a37802b6201fe129516e2d9515925cfc60e2f68645eb6413ec172953 i2pinstall_0.9.16_windows.exe + 5b2a1e23273e1d76a071142adc58b836ed300e2c1f2fd80d330ac61632fab173 i2pinstall_0.9.16.jar + ebc319585b9c58127676243694151c45296a56abaf51a36ae5919be3fc7f544e i2psource_0.9.16.tar.bz2 + 06f3ab867499fa8407f5bcf52ccee196031df6f0b76b000db98b74ef61ecd24f i2pupdate_0.9.16.zip + 7d32cc4c90b35e0eedf6a75377dc3bd4b4dc962e5a42a57fdcc0df500bd2e924 i2pupdate.su2 + 867739321ee4e3c6e418e99f10b6337ccb3e2aeb2e32979734b209b2310c9e8e i2pupdate.su3 + b7bd6b420c1ebc58aa23860b26594acc549ea26116c39c911a0b49091f954b52 i2pupdate.sud