cculianu/Fulcrum v1.5.4

Fulcrum 1.5.4

on GitHub

What's new:

This is a maintenance release of Fulcrum. It provides a couple of minor fixes and a compatibility workaround for the Phoenix BTC wallet.

Summary of changes:

• Added a compatibility workaround so that Fulcrum will be able to serve Phoenix wallet clients (BTC). Thanks @hMsats for reporting and troubleshooting. Closes issue #91.
• Build system: Don't use system rocksdb lib if it is not compiled with RTTI support (which is required by Fulcrum). Instead, use the in-tree rocksdb static lib in that case. Thanks @EchterAgo, PR #92.
• Demoted the spurious error message: Could not create per-IP data object in ServerBase::attachPerIPDataAndCheckLimits, which was wrongly being reported at error level "Error". It now is reworded to be less scary and is at the more appropriate "Warning" error level.
  • Note that this warning is not really a problem -- it can happen under normal operation if a client disconnects very quickly after connecting, before we can even process their connection fully.
  • An option would have been to not even warn when this happens. However if a client were to frequently do this, it is an indication of a misbehaving client, so the diagnostic message could perhaps be helpful to server admins.
• Some tiny code fixups.

A Note about OpenSSL 1.1.1

Note to Linux server admins - There is an extant OpenSSL vulnerability in versions of OpenSSL 1.1.1-1.1.1j. If you are using Qt 5.15 with OpenSSL 1.1.1, it is recommended you update your system OpenSSL to 1.1.1k (or later). The Linux static build does not bundle OpenSSL, but instead loads the system OpenSSL at run-time. So please update your system to use OpenSSL 1.1.1k or later!

Windows static builds do embed OpenSSL, however, and they have been updated below with an embedded OpenSSL 1.1.1k.

Linux Ubuntu 16 (Xenial) static builds are compiled to look for the system OpenSSL 1.0.x series, which does not suffer from the above-linked vulnerability.

If unsure which OpenSSL Fulcrum is using, run ./Fulcrum --version and it should tell you which libssl version it found and is using at runtime.

Pre-compiled binaries for Linux

I have provided two pre-built binaries for Linux:

• Fulcrum-1.5.4-x86_64-linux.tar.gz, which is compiled on an Ubuntu 18.04 system using Docker.
• Fulcrum-1.5.4-x86_64-linux-ub16.tar.gz, which is compiled on a stock Ubuntu 16.04 system (using Docker) but with g++ 7.3.0 installed from this ppa source: ppa:jonathonf/gcc-7.3 & ppa:jonathonf/gcc

Both of the above binaries contain jemalloc, libzmq, Qt5Core and Qt5Network from Qt 5.15.2 statically linked. They still require libz2, libstd++, and the right libc version as dynamic libs on your system (but those are usually present if you are on a recent system).

If the first regular -linux binary fails, try the second one (-linux-ub16), which should work on older systems, hopefully.

Pre-compiled binaries for Windows

• Fulcrum-1.5.4-win64.zip - Pre-built, statically linked Windows version.
  • It should "just work" on any Windows 7 or above 64-bit system.
  • Includes is a statically-linked Fulcrum.exe, built with jemalloc, libzmq, Qt 5.15.2, OpenSSL 1.1.1k, and gcc 7.5.0.
  • Additionally, FulcrumAdmin.exe is included which is the python script, but made into a onefile .exe using PyInstaller.

See the .asc files at the bottom for signatures; my gpg public key can be obtained here: https://github.com/Electron-Cash/keys-n-hashes/blob/master/pubkeys/calinkey.txt

Binary builds for macOS coming soon -- Until then you can always build from source!