ed9789214e
fixed seed initialization problem
4 years ago
f4f3808d43
added missing new dependencies for migration to Solr 8
...
after pulling https://github.com/yacy/yacy_search_server/pull/403
4 years ago
ffe8786d69
Merge pull request #403 from alsutton/address_security_issues
...
Update dependencies to address vulnerabilities.
4 years ago
f4dd6e6d41
Update Lucene to 8.8.1
4 years ago
721dd3e1ba
Update Guava to match version pulled through from solr dependencies
4 years ago
b5203de923
Update ant build solr dependency to 8.8.1
4 years ago
8ade8b8775
Remove forced clear to match new behaviour in 2da71c2a40
4 years ago
09695fc6d3
Update exceptions to match updated API
4 years ago
69014a701e
Update API Usage
4 years ago
9ba0fa1beb
Update dependencies to address vulnerabilities.
...
JUnit 4.13.1 addresses a vulnerability in 4.13 -
https://github.com/junit-team/junit4/blob/HEAD/doc/ReleaseNotes4.13.1.md
Solr has a number of vulnerabilities which should be patched, the
main one being something that affects all versions under 8.4.0;
CVE-2019-17558 - Remote code execution in Solr 5.0.0 - 8.3.1
https://nvd.nist.gov/vuln/detail/CVE-2019-17558
To address this I've updated the dependency to be the latest version
(8.8.1).
4 years ago
78bd82f8ef
Workaround for CVE-2020-15250
4 years ago
b46513f4a1
added stub of rc3assembly style
...
a little bit late but whatever
4 years ago
3da7628117
use environment variables to overwrite configuration variables
...
you can i.e. do:
export YACY_PORT=8092 && ./startYACY.sh
Just append "YACY_" to uppercase version of environment variables and
replace all "." with "_".
4 years ago
13a2e6dc6e
Merge branch 'master' of https://github.com/yacy/yacy_search_server.git
4 years ago
0ae8ccf657
Make it possible to set an empty password disabling the authentication
...
protocol completely
If you set now an empty password, then the http server will not ask to
authentify. This is required for environment where we attach an outside
authentification service like keycloak or similar using authentication
in an ingress proxy.
This change is part of the approach to run YaCy inside of a kubernetes
cluster where we do not want individual authentication of peers and want
to apply a ingress authentication.
4 years ago
96592a10cf
added option to set yacy configuration values using environment
...
variables
To use that feature, set an environment variable with prefix "yacy." and
suffix identical to the yacy configuration attribute name.
Additionaly we implemented a way to set a peer name using the setting
"network.unit.agent". This can therefore now be used to set a peer name
with the java call parameter
-Dyacy.network.unit.agent=anonymous
The purpose for this feature is the ability to set peer names in
mass-deployed kubernetes clusters to the same name to prevent that we
are flooding peer name statistics with auto-deployment-generated names.
4 years ago
198826c362
added network scanner process to discover all YaCy peers in the intranet
...
this will be used to wire YaCy peers in a kubernetes cluster
4 years ago
d9602e8325
Implemented a new syntax in the template engine to simplify json APIs
...
Added also an example for one of the existing APIs. The problem is the
comma separator between objects which must not be there for the last
entry in a sequence. The new syntax adds the separator symbol
automatically.
4 years ago
5a7f12a9c1
allow network scans for non-standard http/https ports
4 years ago
022fb15670
fix for https://github.com/yacy/yacy_search_server/issues/385
4 years ago
17672fcbb4
adding hint how to shrink the disk size after an index deletion.
...
implements https://github.com/yacy/yacy_search_server/issues/360
4 years ago
b8d264f7ec
fixes logging
4 years ago
13e42c2dd2
aded dockerfiles for 32 and 64 bit ARM/Raspberry Pi
4 years ago
062111a003
improved dockerfiles
...
They do not use git pull to get the latest YaCy code.
Instead they copy from local file system.
4 years ago
4c920d05b5
removed superfluous lines
4 years ago
48dd87e1e1
added a dockerignore file
4 years ago
ca10f0afca
fixed optional default PW
4 years ago
907f121d0c
do not overwrite PW with random PW
4 years ago
3e6a1e0a49
fixed surrogate process counter
4 years ago
88590db91e
Merge branch 'master' of git@github.com:yacy/yacy_search_server.git
4 years ago
d3526c52af
fixed a problem in warc importer: do not fail if single WARC entries are
...
faulty
4 years ago
256fa3d985
new limitation documentation
...
just replaced two by four
4 years ago
3078b74e1d
Merge branch 'master' of https://github.com/yacy/yacy_search_server.git
4 years ago
01cc32217f
fixed apicall call method parameters
...
and verification in transaction manager
which did not have and exception for localhost/basic authentication
4 years ago
7997836506
fixed lock image
4 years ago
63f58e4785
enhanced strategy in host browser
...
limit number of fresh hosts in round robin hashes
4 years ago
9be36800a4
increased redirect depth by one
...
this makes sense if one redirect replaces http with https and another
replaces www subdomain by without (and vice versa)
4 years ago
d0abb0cedb
enabling all crawl profiles in all network modes
...
also: increased default internet crawl speed to
4 urls/s/host
4 years ago
32ca669bfb
panic release for #googledown
4 years ago
baad56d83d
beautified default peer names
4 years ago
a9befbba5f
Merge branch 'master' of git@github.com:yacy/yacy_search_server.git
4 years ago
fed8bd6325
automatically refresh css cache when switching skin
...
and setting of default skin to current skin in selector
4 years ago
9a5694261a
design update
...
more space
4 years ago
4ec55289a8
using a lock symbol which looks also good in dark designs
4 years ago
43a9f4f574
updated solr 6.6.6 -> 7.7.3
...
dropped GSA support (GSA API is still in YaCy Grid)
The 6.6.6 solr index works without migration also with 7.7.3
4 years ago
c0d9a3e9a7
turned HostBrowser into a admin-only page, now called IndexBrowser
...
This was required because spiders and bots crawled through this page and
created load on the peer without use for the user or the YaCy network.
4 years ago
d359d521a1
fixed warc importer
...
The importer tried to import a gziped files as plain warc.
It will now check the file extension and use a unzip automatically
on-the-fly.
4 years ago
39f87f7f28
added a hint to the default settings how to set a default password
4 years ago
e54ab39958
Going back to basic authentication for console/shell commands
...
This does not affect security because:
- it is going to localhost only
- only users who have already access to the pw hash can do this
- no clear text pw is transmitted because that is not stored anywhere
The switch to basic is required because these commands are required
in the context of hosting on root servers and docker containers
where a password change must be done. But the password shell command
was not working without password which made the concept unusable.
This deficit made it virtually impossible for root server operators
to use YaCy because they had been unable to set up a proper password.
4 years ago
6271e9122c
javadoc fix
4 years ago
Michael Peter Christen