From 6bd35ef74006d4220640983e2aa72decd49f6379 Mon Sep 17 00:00:00 2001
From: zotlabs <mike@macgirvin.com>
Date: Thu, 21 Sep 2017 18:29:41 -0700
Subject: [PATCH 1/6] log the lack of http sig info

---
 Zotlabs/Web/HTTPSig.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Zotlabs/Web/HTTPSig.php b/Zotlabs/Web/HTTPSig.php
index 986e10d73..8062764fb 100644
--- a/Zotlabs/Web/HTTPSig.php
+++ b/Zotlabs/Web/HTTPSig.php
@@ -67,8 +67,10 @@ class HTTPSig {
 			$sig_block = self::parse_sigheader($headers['authorization']);
 		}
 
-		if(! $sig_block)
+		if(! $sig_block) {
+			logger('no signature provided.');
 			return $result;
+		}
 
 		logger('sig_block: ' . print_r($sig_block,true), LOGGER_DATA);
 

From fefc2290a142072f740d091e800258d957378e96 Mon Sep 17 00:00:00 2001
From: zotlabs <mike@macgirvin.com>
Date: Thu, 21 Sep 2017 21:32:59 -0700
Subject: [PATCH 2/6] pubsites broken and directory server admin selection
 includes known dead sites

---
 Zotlabs/Module/Admin/Site.php | 2 +-
 Zotlabs/Module/Pubsites.php   | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/Zotlabs/Module/Admin/Site.php b/Zotlabs/Module/Admin/Site.php
index 4c5b82e78..4946e3433 100644
--- a/Zotlabs/Module/Admin/Site.php
+++ b/Zotlabs/Module/Admin/Site.php
@@ -206,7 +206,7 @@ class Site {
 		// directory server should not be set or settable unless we are a directory client
 
 		if($dirmode == DIRECTORY_MODE_NORMAL) {
-			$x = q("select site_url from site where site_flags in (%d,%d) and site_realm = '%s'",
+			$x = q("select site_url from site where site_flags in (%d,%d) and site_realm = '%s' and site_dead = 0",
 				intval(DIRECTORY_MODE_SECONDARY),
 				intval(DIRECTORY_MODE_PRIMARY),
 				dbesc($realm)
diff --git a/Zotlabs/Module/Pubsites.php b/Zotlabs/Module/Pubsites.php
index d87967189..ef02cf099 100644
--- a/Zotlabs/Module/Pubsites.php
+++ b/Zotlabs/Module/Pubsites.php
@@ -36,7 +36,8 @@ class Pubsites extends \Zotlabs\Web\Controller {
 				$o .= '</tr>';
 				if($j['sites']) {
 					foreach($j['sites'] as $jj) {
-						if(! \Zotlabs\Lib\System::compatible_project($jj['project']))
+						$projectname = explode(' ',$jj['project']);
+						if(! \Zotlabs\Lib\System::compatible_project($projectname[0]))
 							continue;
 						if(strpos($jj['version'],' ')) {
 							$x = explode(' ', $jj['version']);

From ae5a1362a7ea864cafc2ecc652863eeb9939742c Mon Sep 17 00:00:00 2001
From: zotlabs <mike@macgirvin.com>
Date: Thu, 21 Sep 2017 22:19:21 -0700
Subject: [PATCH 3/6] no visible feedback when moving the affinity slider and
 waiting for content to load, the appropriate spinner div seems to have gone
 missing at some time in the past

---
 view/tpl/main_slider.tpl | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/view/tpl/main_slider.tpl b/view/tpl/main_slider.tpl
index a4e2e1925..d4f0dd936 100755
--- a/view/tpl/main_slider.tpl
+++ b/view/tpl/main_slider.tpl
@@ -1,4 +1,5 @@
 <div id="main-slider" class="slider" ><input id="main-range" type="text" name="cminmax" value="{{$val}}" /></div>
+<div id="profile-jot-text-loading" style="display:none;"></div>
 <script>
 $(document).ready(function() {
 	var old_cmin = 0;
@@ -19,6 +20,7 @@ $(document).ready(function() {
 
 	var slideTimer = null;
 	function networkRefresh() {
+
 		$("#profile-jot-text-loading").show();
 
 		if((document.readyState !== "complete") || (slideTimer !== null))

From 3456c192feeab9495693e2cbdcff16fe99bff932 Mon Sep 17 00:00:00 2001
From: zotlabs <mike@macgirvin.com>
Date: Thu, 21 Sep 2017 23:37:13 -0700
Subject: [PATCH 4/6] encrypt delivery reports. This will cause a bit of
 consternation because this is not backward compatible and older sites will
 see some incorrect delivery reports from newer sites until the next upgrade;
 as their systems will not know how to read the ecnrypted final reports.

---
 Zotlabs/Daemon/Deliver.php |  1 +
 include/zot.php            | 23 ++++++++++++++++++++---
 2 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/Zotlabs/Daemon/Deliver.php b/Zotlabs/Daemon/Deliver.php
index 7c1ff717f..39c9ffdb1 100644
--- a/Zotlabs/Daemon/Deliver.php
+++ b/Zotlabs/Daemon/Deliver.php
@@ -53,6 +53,7 @@ class Deliver {
 						remove_queue_item($r[0]['outq_hash']);
 
 						if($dresult && is_array($dresult)) {
+
 							if(array_key_exists('iv',$dresult)) {
 								$dresult = json_decode(crypto_unencapsulate($dresult,get_config('system','prvkey')),true);
 							}
diff --git a/include/zot.php b/include/zot.php
index c8321c2ae..f03445781 100644
--- a/include/zot.php
+++ b/include/zot.php
@@ -977,6 +977,18 @@ function zot_process_response($hub, $arr, $outq) {
 	}
 
 	if(is_array($x) && array_key_exists('delivery_report',$x) && is_array($x['delivery_report'])) {
+
+		if(array_key_exists('iv',$x['delivery_report'])) {
+			$j = crypto_unencapsulate($x['delivery_report'],get_config('system','prvkey'));
+			if($j) {
+				$x['delivery_report'] = json_decode($j,true); 
+			}
+			if(! (is_array($x['delivery_report']) && count($x['delivery_report']))) {
+				logger('encrypted delivery report could not be decrypted');
+				return;
+			}
+		}
+
 		foreach($x['delivery_report'] as $xx) {
 			if(is_array($xx) && array_key_exists('message_id',$xx) && delivery_report_is_storable($xx)) {
 				q("insert into dreport ( dreport_mid, dreport_site, dreport_recip, dreport_result, dreport_time, dreport_xchan ) values ( '%s', '%s','%s','%s','%s','%s' ) ",
@@ -1048,13 +1060,15 @@ function zot_fetch($arr) {
 
 	foreach($ret_hubs as $ret_hub) {
 
+		$secret = substr(preg_replace('/[^0-9a-fA-F]/','',$arr['secret']),0,64);
+
 		$data = [
 			'type'         => 'pickup',
 			'url'          => z_root(),
 			'callback_sig' => base64url_encode(rsa_sign(z_root() . '/post', get_config('system','prvkey'))),
 			'callback'     => z_root() . '/post',
-			'secret'       => $arr['secret'],
-			'secret_sig'   => base64url_encode(rsa_sign($arr['secret'], get_config('system','prvkey')))
+			'secret'       => $secret,
+			'secret_sig'   => base64url_encode(rsa_sign($secret, get_config('system','prvkey')))
 		];
 
 		$algorithm = zot_best_algorithm($ret_hub['site_crypto']);
@@ -1064,8 +1078,11 @@ function zot_fetch($arr) {
 
 		$result = zot_import($fetch, $arr['sender']['url']);
 
-		if($result)
+		if($result) {
+			$result = crypto_encapsulate(json_encode($result),$ret_hub['hubloc_sitekey'], $algorithm);
 			return $result;
+		}
+
 	}
 
 	return;

From aef239f4212244997a09c10445072f886c8bf368 Mon Sep 17 00:00:00 2001
From: zotlabs <mike@macgirvin.com>
Date: Thu, 21 Sep 2017 23:51:04 -0700
Subject: [PATCH 5/6] delivery report decryption is not needed for local
 delivery

---
 Zotlabs/Daemon/Deliver.php | 33 ++++++++++++++-------------------
 1 file changed, 14 insertions(+), 19 deletions(-)

diff --git a/Zotlabs/Daemon/Deliver.php b/Zotlabs/Daemon/Deliver.php
index 39c9ffdb1..394a7bf3e 100644
--- a/Zotlabs/Daemon/Deliver.php
+++ b/Zotlabs/Daemon/Deliver.php
@@ -54,29 +54,24 @@ class Deliver {
 
 						if($dresult && is_array($dresult)) {
 
-							if(array_key_exists('iv',$dresult)) {
-								$dresult = json_decode(crypto_unencapsulate($dresult,get_config('system','prvkey')),true);
-							}
-							if(! $dresult) {
-								logger('dreport decryption failure');
-							}
-							else {
-								foreach($dresult as $xx) {
-									if(is_array($xx) && array_key_exists('message_id',$xx)) {
-										if(delivery_report_is_storable($xx)) {
-											q("insert into dreport ( dreport_mid, dreport_site, dreport_recip, dreport_result, dreport_time, dreport_xchan ) values ( '%s', '%s','%s','%s','%s','%s' ) ",
-												dbesc($xx['message_id']),
-												dbesc($xx['location']),
-												dbesc($xx['recipient']),
-												dbesc($xx['status']),
-												dbesc(datetime_convert($xx['date'])),
-												dbesc($xx['sender'])
-											);
-										}
+							// delivery reports for local deliveries do not require encryption
+
+							foreach($dresult as $xx) {
+								if(is_array($xx) && array_key_exists('message_id',$xx)) {
+									if(delivery_report_is_storable($xx)) {
+										q("insert into dreport ( dreport_mid, dreport_site, dreport_recip, dreport_result, dreport_time, dreport_xchan ) values ( '%s', '%s','%s','%s','%s','%s' ) ",
+											dbesc($xx['message_id']),
+											dbesc($xx['location']),
+											dbesc($xx['recipient']),
+											dbesc($xx['status']),
+											dbesc(datetime_convert($xx['date'])),
+											dbesc($xx['sender'])
+										);
 									}
 								}
 							}
 						}
+
 						q("delete from dreport where dreport_queue = '%s'",
 							dbesc($argv[$x])
 						);

From 2988e33b57b8b971da86ce6e945f8c65f4ebb6b1 Mon Sep 17 00:00:00 2001
From: Mario Vavti <mario@mariovavti.com>
Date: Sat, 23 Sep 2017 23:16:11 +0200
Subject: [PATCH 6/6] fix missing content on channel page

---
 view/pdl/mod_channel.pdl | 1 +
 1 file changed, 1 insertion(+)

diff --git a/view/pdl/mod_channel.pdl b/view/pdl/mod_channel.pdl
index 54c2fb489..967dd89b4 100644
--- a/view/pdl/mod_channel.pdl
+++ b/view/pdl/mod_channel.pdl
@@ -9,5 +9,6 @@
 [/region]
 [region=content]
 [widget=common_friends][/widget]
+$content
 [/region]