elective-stereophonic
elective-stereophonic
NRS v1.7.5
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Stable Nxt Client: Nxt 1.12.2

Pages: 1 2 3 [4] 5 6 ... 9  All

Author Topic: NRS v1.7.5  (Read 52921 times)

DrCharles

  • Jr. Member
  • **
  • Karma: +1/-0
  • Offline Offline
  • Posts: 52
    • View Profile
Re: NRS v1.7.5
« Reply #60 on: January 28, 2016, 10:05:06 pm »

I keep getting the message "FINE: didn't accept any blocks, pushing back my previous blocks" and the blockchain is not downloading any further. What can I do to get the rest of the blockchain downloaded?

Use the test page http://localhost:7876/test to invoke the popOff API with block height 621000. This should get you out of the fork in most cases.

Perfect.. it looks like the blockchain has started to progress again... you saved the day haha

I was starting to panic when I saw "Blacklisted" popping up a bunch of times.

Riker

  • Core Dev
  • Hero Member
  • *****
  • Karma: +440/-42
  • Offline Offline
  • Posts: 1796
    • View Profile
Re: NRS v1.7.5
« Reply #61 on: January 28, 2016, 10:07:58 pm »

After installing 1.7.5 from zero with the .dmg file i can't visit localhost:7876 cause i get

Quote
HTTP ERROR: 404

Problem accessing /index.html. Reason:

    Not Found
Powered by Jetty:// 9.3.6.v20151106

I can reproduce this too. Either something new with OS/X El Capitan or just something I messed up. Will try to fix this for 1.7.6.
Logged
NXT Core Dev
Account: NXT-HBFW-X8TE-WXPW-DZFAG
Public Key: D8311651 Key fingerprint: 0560 443B 035C EE08 0EC0  D2DD 275E 94A7 D831 1651

allwelder

  • Hero Member
  • *****
  • Karma: +196/-13
  • Offline Offline
  • Posts: 1867
  • NxtChina.org
    • View Profile
    • NxtChina.org
Re: NRS v1.7.5
« Reply #62 on: January 28, 2016, 11:07:50 pm »

Those plots are of unconfirmed transaction numbers, not block times. There is some correlation because when there is a long block, more unconfirmed transactions accumulate. But another reason for a peak would be somebody doing a dividend payment sending hundreds of transactions at once, probably what happened.
What will happen if submit 255 tx at the same time? More unconfirmed tx?
Logged
NxtChina |Weibo |Twitter Donation welcomed:NXT-APL9-66GU-K8LY-B3JJJ

qq2536007339

  • Hero Member
  • *****
  • Karma: +42/-9
  • Offline Offline
  • Posts: 514
    • View Profile
Re: NRS v1.7.5
« Reply #63 on: January 29, 2016, 04:55:36 am »

My raspberry just stopped,don't know why,and here is the error message.In the mean time,NRS testnet run normal.After restart,mainnet back to normal again.

Quote
2016-01-29 11:24:31 FINE: Connect: announced address home.kaerner.net now points to 91.7.34.52, replacing peer 91.7.37.186
2016-01-29 11:26:20 FINE: Blacklisting 2.85.10.30 because of: java.net.UnknownHostException: pakisnxt.no-ip.org: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 94.226.14.92 because of: java.net.UnknownHostException: nxt1.testdruif.be: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 92.222.65.159 because of: java.net.UnknownHostException: nxt.scryptmh.eu: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 23.89.5.60 because of: java.net.UnknownHostException: ct.flipflop.mooo.com: unknown error
killed

Maybe JL or Riker interested.
« Last Edit: January 29, 2016, 04:58:05 am by qq2536007339 »
Logged
你送我阿朵,我是要的。ARDOR-DJ68-PG7W-4JEU-2LU5T

allwelder

  • Hero Member
  • *****
  • Karma: +196/-13
  • Offline Offline
  • Posts: 1867
  • NxtChina.org
    • View Profile
    • NxtChina.org
Re: NRS v1.7.5
« Reply #64 on: January 29, 2016, 05:34:30 am »

With account control, Let say I set my 'A' account control ,and adding my 'B' account as the only one whitelist to approve tx from 'A'.
How to set Minimum and maximum phasing durations?

e.g,I set maximum phasing durations: 1440 blocks.
This means 'B' account need to approve the transaction of A account within 1440 blocks?
If not approved within 1440 blocks ,the sending NXT will be returned back to A account?

Did I understand correctly?
Thanks.
Logged
NxtChina |Weibo |Twitter Donation welcomed:NXT-APL9-66GU-K8LY-B3JJJ

Riker

  • Core Dev
  • Hero Member
  • *****
  • Karma: +440/-42
  • Offline Offline
  • Posts: 1796
    • View Profile
Re: NRS v1.7.5
« Reply #65 on: January 29, 2016, 06:43:55 am »

With account control, Let say I set my 'A' account control ,and adding my 'B' account as the only one whitelist to approve tx from 'A'.
How to set Minimum and maximum phasing durations?

e.g,I set maximum phasing durations: 1440 blocks.
This means 'B' account need to approve the transaction of A account within 1440 blocks?
If not approved within 1440 blocks ,the sending NXT will be returned back to A account?

Did I understand correctly?
Thanks.

According to the tooltip in the set mandatory approval modal:
"Restricts the phasing period of the transactions issued by the account. Useful in case the controlled account is compromised. The maximum duration determines for how long an attacker will be able to lock the account funds before the controlling entities are able to rescue them to a new account. The minimum duration, together with the Maximum Pending Fees, determines at what rate an attacker will be able to burn through fees the NXT owned by the controlled account"

For these parameters the value 0 means "do not validate", maxDuration has to be less than 14*1440 i.e. 14 days and minDuration has to be smaller than maxDuration.
The values 1,2,3 are not allowed probably to prevent short range reorgs problems.

Like all phased transactions, if not approved during this block range the transaction is not executed. It will stay in the blockchain forever but won't affect any account balance.

Let's say that an account under your control is compromised and the attacker tries to move the funds to his account. You do not approve this transaction, so this transaction stays an approved and locks the funds until the maxDuration expires. Now the rightful owner of the account can issue another transaction to rescue the funds that you can approve.
Logged
NXT Core Dev
Account: NXT-HBFW-X8TE-WXPW-DZFAG
Public Key: D8311651 Key fingerprint: 0560 443B 035C EE08 0EC0  D2DD 275E 94A7 D831 1651

allwelder

  • Hero Member
  • *****
  • Karma: +196/-13
  • Offline Offline
  • Posts: 1867
  • NxtChina.org
    • View Profile
    • NxtChina.org
Re: NRS v1.7.5
« Reply #66 on: January 29, 2016, 07:31:47 am »

Thanks for answering.really a good tool for security and anti-comprised.
Tested,worked well.

But seems set the maxDuration bigger than 10077 is meaningless,because the phased transaction will be rejected if not approved within default max 10077 blocks.
Logged
NxtChina |Weibo |Twitter Donation welcomed:NXT-APL9-66GU-K8LY-B3JJJ

blackyblack1

  • Hero Member
  • *****
  • Karma: +165/-82
  • Offline Offline
  • Posts: 1764
    • View Profile
Re: NRS v1.7.5
« Reply #67 on: January 29, 2016, 09:46:01 am »

Do we have any way to have a multilanguage support for NRS plugins?
Logged

Jean-Luc

  • Core Dev
  • Hero Member
  • *****
  • Karma: +816/-81
  • Offline Offline
  • Posts: 1610
    • View Profile
Re: NRS v1.7.5
« Reply #68 on: January 29, 2016, 10:51:06 am »

My raspberry just stopped,don't know why,and here is the error message.In the mean time,NRS testnet run normal.After restart,mainnet back to normal again.

Quote
2016-01-29 11:24:31 FINE: Connect: announced address home.kaerner.net now points to 91.7.34.52, replacing peer 91.7.37.186
2016-01-29 11:26:20 FINE: Blacklisting 2.85.10.30 because of: java.net.UnknownHostException: pakisnxt.no-ip.org: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 94.226.14.92 because of: java.net.UnknownHostException: nxt1.testdruif.be: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 92.222.65.159 because of: java.net.UnknownHostException: nxt.scryptmh.eu: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 23.89.5.60 because of: java.net.UnknownHostException: ct.flipflop.mooo.com: unknown error
killed

Maybe JL or Riker interested.

Probably the OS got too low on memory and had to kill the java process. Or, you started it without using nohup or screen, and it got killed when you disconnected.
The UnknownHostExceptions indicate some temporary networking or DNS problem.
 
Logged
GPG key fingerprint: 263A 9EB0 29CF C77A 3D06  FD13 811D 6940 E1E4 240C
NXT-X4LF-9A4G-WN9Z-2R322

Jean-Luc

  • Core Dev
  • Hero Member
  • *****
  • Karma: +816/-81
  • Offline Offline
  • Posts: 1610
    • View Profile
Re: NRS v1.7.5
« Reply #69 on: January 29, 2016, 10:53:01 am »

What will happen if submit 255 tx at the same time? More unconfirmed tx?
They just wait as unconfirmed and get included in the next blocks, by default in order of highest fee/size ratio.
Logged
GPG key fingerprint: 263A 9EB0 29CF C77A 3D06  FD13 811D 6940 E1E4 240C
NXT-X4LF-9A4G-WN9Z-2R322

nxtapple

  • Jr. Member
  • **
  • Karma: +8/-1
  • Offline Offline
  • Posts: 30
    • View Profile
Re: NRS v1.7.5
« Reply #70 on: January 29, 2016, 01:34:48 pm »

I just downloaded the blockchain (fresh install) but once it finished, it just says "Downloading blockchain...". This disappears for a while but if I log out and in immediately, it happens again for about 30 seconds. Also transactions don't go through, even though a new block has been found.

Any help?  ;D
Logged

Riker

  • Core Dev
  • Hero Member
  • *****
  • Karma: +440/-42
  • Offline Offline
  • Posts: 1796
    • View Profile
Re: NRS v1.7.5
« Reply #71 on: January 29, 2016, 01:38:18 pm »

I just downloaded the blockchain (fresh install) but once it finished, it just says "Downloading blockchain...". This disappears for a while but if I log out and in immediately, it happens again for about 30 seconds. Also transactions don't go through, even though a new block has been found.

Any help?  ;D

We need to see your nxt.log
Logged
NXT Core Dev
Account: NXT-HBFW-X8TE-WXPW-DZFAG
Public Key: D8311651 Key fingerprint: 0560 443B 035C EE08 0EC0  D2DD 275E 94A7 D831 1651

coretechs

  • Sr. Member
  • ****
  • Karma: +161/-1
  • Offline Offline
  • Posts: 436
    • View Profile
Re: NRS v1.7.5
« Reply #72 on: January 29, 2016, 06:38:30 pm »

Oracle vs OpenJDK - any reason prefer one over the other for running a Nxt node?
Logged
https://ardorportal.org - Ardor blockchain explorer | https://nxtportal.org - Nxt blockchain explorer | http://bitcoindoc.com - The Rise and Rise of Bitcoin
ARDOR-T43P-R2K9-8W79-9W2AL | NXT-WY9K-ZMTT-QQTT-3NBL7

verymuchso

  • Hero Member
  • *****
  • Karma: +118/-2
  • Offline Offline
  • Posts: 549
    • View Profile
    • HEAT Ledger
Re: NRS v1.7.5
« Reply #73 on: January 29, 2016, 07:27:57 pm »

Oracle vs OpenJDK - any reason prefer one over the other for running a Nxt node?

No difference, but i'd pick oracle.
Built by the same people but the version released under oracle label has had more testing hours and basically has more money spend on it.
Same goes for windows java oracle vs linux java oracle, same engineers but the finishing of the first one just has a lot more resources thrown against it, thats why it performs much better in general.
Logged
HEAT: DEX | SDK | HOME

Jean-Luc

  • Core Dev
  • Hero Member
  • *****
  • Karma: +816/-81
  • Offline Offline
  • Posts: 1610
    • View Profile
Re: NRS v1.7.5
« Reply #74 on: January 30, 2016, 12:45:52 am »

Oracle vs OpenJDK - any reason prefer one over the other for running a Nxt node?
While at that, any experience running Nxt, or in general doing java development on FreeBSD? I am trying it now, and so far it seems to work, using OpenJDK. Still need to make sure I can get running all desktop applications I am used to, or find good replacements. But IntelliJ and SmartGit work.
Logged
GPG key fingerprint: 263A 9EB0 29CF C77A 3D06  FD13 811D 6940 E1E4 240C
NXT-X4LF-9A4G-WN9Z-2R322

qq2536007339

  • Hero Member
  • *****
  • Karma: +42/-9
  • Offline Offline
  • Posts: 514
    • View Profile
Re: NRS v1.7.5
« Reply #75 on: January 30, 2016, 02:45:34 am »

My raspberry just stopped,don't know why,and here is the error message.In the mean time,NRS testnet run normal.After restart,mainnet back to normal again.

Quote
2016-01-29 11:24:31 FINE: Connect: announced address home.kaerner.net now points to 91.7.34.52, replacing peer 91.7.37.186
2016-01-29 11:26:20 FINE: Blacklisting 2.85.10.30 because of: java.net.UnknownHostException: pakisnxt.no-ip.org: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 94.226.14.92 because of: java.net.UnknownHostException: nxt1.testdruif.be: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 92.222.65.159 because of: java.net.UnknownHostException: nxt.scryptmh.eu: unknown error
2016-01-29 11:26:40 FINE: Blacklisting 23.89.5.60 because of: java.net.UnknownHostException: ct.flipflop.mooo.com: unknown error
killed

Maybe JL or Riker interested.

Probably the OS got too low on memory and had to kill the java process. Or, you started it without using nohup or screen, and it got killed when you disconnected.
The UnknownHostExceptions indicate some temporary networking or DNS problem.

You are right,I didn't started with nohup or screen,I want see NRS what's going on,didn't know it will got killed when disconnected.
Logged
你送我阿朵,我是要的。ARDOR-DJ68-PG7W-4JEU-2LU5T

coretechs

  • Sr. Member
  • ****
  • Karma: +161/-1
  • Offline Offline
  • Posts: 436
    • View Profile
Re: NRS v1.7.5
« Reply #76 on: January 30, 2016, 04:41:58 pm »

Oracle vs OpenJDK - any reason prefer one over the other for running a Nxt node?

No difference, but i'd pick oracle.
Built by the same people but the version released under oracle label has had more testing hours and basically has more money spend on it.
Same goes for windows java oracle vs linux java oracle, same engineers but the finishing of the first one just has a lot more resources thrown against it, thats why it performs much better in general.


I found an interesting difference between the two while playing around with certs.  OpenJDK appears to include the "unlimited strength" jurisdiction policies by default whereas Oracle Java ships with "strong" which limits the strength of the SSL/TLS ciphers.

For a default installation -
Oracle Java connection: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, 128 bit keys, TLS 1.2
OpenJDK connection: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, 256 bit keys, TLS 1.2

If you are using Oracle Java and you want to enable "unlimited strength" encryption you need to download and install additional policy files that overwrite the defaults:
http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

Copy the policy files to $JAVA_HOME/jre/lib/security/ and restart Nxt and your connection should now use stronger encryption w/256 bit keys.
Logged
https://ardorportal.org - Ardor blockchain explorer | https://nxtportal.org - Nxt blockchain explorer | http://bitcoindoc.com - The Rise and Rise of Bitcoin
ARDOR-T43P-R2K9-8W79-9W2AL | NXT-WY9K-ZMTT-QQTT-3NBL7

verymuchso

  • Hero Member
  • *****
  • Karma: +118/-2
  • Offline Offline
  • Posts: 549
    • View Profile
    • HEAT Ledger
Re: NRS v1.7.5
« Reply #77 on: January 30, 2016, 05:07:59 pm »

I found an interesting difference between the two while playing around with certs.  OpenJDK appears to include the "unlimited strength" jurisdiction policies by default whereas Oracle Java ships with "strong" which limits the strength of the SSL/TLS ciphers.

This has to do with a US law that says >256? bit encryption is considered some sort of a weapon and is bound to export restrictions.
I had no idea this did not apply to OpenJDK.

Good catch, thanks for sharing!
Logged
HEAT: DEX | SDK | HOME

coretechs

  • Sr. Member
  • ****
  • Karma: +161/-1
  • Offline Offline
  • Posts: 436
    • View Profile
Re: NRS v1.7.5
« Reply #78 on: January 31, 2016, 06:46:58 am »

Oracle vs OpenJDK - any reason prefer one over the other for running a Nxt node?

No difference, but i'd pick oracle.
Built by the same people but the version released under oracle label has had more testing hours and basically has more money spend on it.
Same goes for windows java oracle vs linux java oracle, same engineers but the finishing of the first one just has a lot more resources thrown against it, thats why it performs much better in general.


I found an interesting difference between the two while playing around with certs.  OpenJDK appears to include the "unlimited strength" jurisdiction policies by default whereas Oracle Java ships with "strong" which limits the strength of the SSL/TLS ciphers.

For a default installation -
Oracle Java connection: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, 128 bit keys, TLS 1.2
OpenJDK connection: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, 256 bit keys, TLS 1.2

If you are using Oracle Java and you want to enable "unlimited strength" encryption you need to download and install additional policy files that overwrite the defaults:
http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

Copy the policy files to $JAVA_HOME/jre/lib/security/ and restart Nxt and your connection should now use stronger encryption w/256 bit keys.

I did a lot of testing on a Raspberry Pi 2 today and found that the Oracle Java seems to perform *significantly* faster than OpenJDK.  Average initialization for the Nxt server is 20-25 seconds for Oracle vs. 110-150 seconds for OpenJDK.  Unless there is something in the configuration that I'm overlooking, I'll probably update my Raspberry Pi install guide shortly to recommend using Oracle Java.

Also, most modern browsers prioritize AES-GCM (https://en.wikipedia.org/wiki/Galois/Counter_Mode) over AES-CBC.  Chrome reports TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA as "strong" but also "obsolete".  The default Sun/Java crypto providers prioritize AES-CBC (https://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html) but if you add the following to API.java you can configure jetty to use AES-GCM:

Code: [Select]
sslContextFactory.setIncludeCipherSuites("TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256");

This way you use either an EC or RSA self-signed cert and get the performance of the modern cipher suites.  On a Raspberry Pi every little bit helps, just remember that older browsers and some mobile devices may not support them.
Logged
https://ardorportal.org - Ardor blockchain explorer | https://nxtportal.org - Nxt blockchain explorer | http://bitcoindoc.com - The Rise and Rise of Bitcoin
ARDOR-T43P-R2K9-8W79-9W2AL | NXT-WY9K-ZMTT-QQTT-3NBL7

Jean-Luc

  • Core Dev
  • Hero Member
  • *****
  • Karma: +816/-81
  • Offline Offline
  • Posts: 1610
    • View Profile
Re: NRS v1.7.5
« Reply #79 on: January 31, 2016, 11:23:47 am »

I will make the list of enabled cipher suites for the API SSL a configurable property. However, when using Oracle Java unless the unlimited strength policy files are installed, 256-bit keys will not be available. Even if BouncyCastle is set as default security provider.

This affects only the security of the API SSL connections. For our message encryption and shuffling encryption, we use the BouncyCastle lightweight API directly, with 256-bit AES keys, regardless of what the JDK supports.

Logged
GPG key fingerprint: 263A 9EB0 29CF C77A 3D06  FD13 811D 6940 E1E4 240C
NXT-X4LF-9A4G-WN9Z-2R322
Pages: 1 2 3 [4] 5 6 ... 9  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly