What changed, and why it matters
This commit only updates generated Java API documentation (Javadoc HTML files). It adds descriptions explaining how SSL/TLS certificate verification works when connecting to a Monero daemon. No actual program code was changed, so this commit cannot by itself introduce or fix a security vulnerability.
No security action required for this documentation-only commit. Review the underlying source code if the newly documented SSL verification behavior is of concern, but that code is not changed here.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is limited to docs/javadocs/*.html files. It documents two existing behaviors: (1) MoneroRpcConnection equality/hashing depends on URI, credentials, proxy, ZMQ URI, and TLS verification, and should not be mutated while used as a hash key; and (2) setDaemonConnection’s explicit SslOptions override the connection’s verification setting, and wallet RPC requires a CA file or fingerprints or falls back to autodetect that may accept unverified certificates. These are documentation-only changes; no source code or logic was modified.
Changed components
docs/javadocs/index-files/index-18.htmldocs/javadocs/monero/common/MoneroRpcConnection.htmldocs/javadocs/monero/common/class-use/MoneroRpcConnection.htmldocs/javadocs/monero/common/class-use/SslOptions.htmldocs/javadocs/monero/wallet/MoneroWalletRpc.htmlInspect captured patch +17 / −4
### docs/javadocs/index-files/index-18.html
@@ -359,7 +359,9 @@ <h2 class="title" id="I:S">S</h2>
<dt><a href="../monero/wallet/MoneroWalletRpc.html#setDaemonConnection(monero.common.MoneroRpcConnection,java.lang.Boolean)" class="member-name-link">setDaemonConnection(MoneroRpcConnection, Boolean)</a> - Method in class monero.wallet.<a href="../monero/wallet/MoneroWalletRpc.html" title="class in monero.wallet">MoneroWalletRpc</a></dt>
<dd> </dd>
<dt><a href="../monero/wallet/MoneroWalletRpc.html#setDaemonConnection(monero.common.MoneroRpcConnection,java.lang.Boolean,monero.common.SslOptions)" class="member-name-link">setDaemonConnection(MoneroRpcConnection, Boolean, SslOptions)</a> - Method in class monero.wallet.<a href="../monero/wallet/MoneroWalletRpc.html" title="class in monero.wallet">MoneroWalletRpc</a></dt>
-<dd> </dd>
+<dd>
+<div class="block">Explicit SSL options take precedence over the connection's verification setting.</div>
+</dd>
<dt><a href="../monero/daemon/model/MoneroDaemonInfo.html#setDatabaseSize(java.lang.Long)" class="member-name-link">setDatabaseSize(Long)</a> - Method in class monero.daemon.model.<a href="../monero/daemon/model/MoneroDaemonInfo.html" title="class in monero.daemon.model">MoneroDaemonInfo</a></dt>
<dd> </dd>
<dt><a href="../monero/daemon/model/MoneroBlock.html#setDepth(java.lang.Long)" class="member-name-link">setDepth(Long)</a> - Method in class monero.daemon.model.<a href="../monero/daemon/model/MoneroBlock.html" title="class in monero.daemon.model">MoneroBlock</a></dt>
### docs/javadocs/monero/common/MoneroRpcConnection.html
@@ -94,6 +94,8 @@ <h1 title="Class MoneroRpcConnection" class="title">Class MoneroRpcConnection</h
<div class="type-signature"><span class="modifiers">public class </span><span class="element-name type-name-label">MoneroRpcConnection</span>
<span class="extends-implements">extends <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/Object.html" title="class or interface in java.lang" class="external-link">Object</a></span></div>
<div class="block">Maintains a connection and sends requests to a Monero RPC API.
+ Equality compares URI, credentials, proxy, ZMQ URI, and TLS verification.
+ Do not mutate these settings while using a connection as a hash key.
TODO: refactor MoneroRpcConnection extends MoneroConnection?</div>
</section>
### docs/javadocs/monero/common/class-use/MoneroRpcConnection.html
@@ -320,7 +320,9 @@ <h2>Uses of <a href="../MoneroRpcConnection.html" title="class in monero.common"
<div class="col-second even-row-color"><span class="type-name-label">MoneroWalletRpc.</span><code><a href="../../wallet/MoneroWalletRpc.html#setDaemonConnection(monero.common.MoneroRpcConnection,java.lang.Boolean,monero.common.SslOptions)" class="member-name-link">setDaemonConnection</a><wbr>(<a href="../MoneroRpcConnection.html" title="class in monero.common">MoneroRpcConnection</a> connection,
<a href="https://docs.oracle.com/javase/8/docs/api/java/lang/Boolean.html" title="class or interface in java.lang" class="external-link">Boolean</a> isTrusted,
<a href="../SslOptions.html" title="class in monero.common">SslOptions</a> sslOptions)</code></div>
-<div class="col-last even-row-color"> </div>
+<div class="col-last even-row-color">
+<div class="block">Explicit SSL options take precedence over the connection's verification setting.</div>
+</div>
</div>
<div class="caption"><span>Constructors in <a href="../../wallet/package-summary.html">monero.wallet</a> with parameters of type <a href="../MoneroRpcConnection.html" title="class in monero.common">MoneroRpcConnection</a></span></div>
<div class="summary-table three-column-summary">
### docs/javadocs/monero/common/class-use/SslOptions.html
@@ -72,7 +72,9 @@ <h2>Uses of <a href="../SslOptions.html" title="class in monero.common">SslOptio
<div class="col-second even-row-color"><span class="type-name-label">MoneroWalletRpc.</span><code><a href="../../wallet/MoneroWalletRpc.html#setDaemonConnection(monero.common.MoneroRpcConnection,java.lang.Boolean,monero.common.SslOptions)" class="member-name-link">setDaemonConnection</a><wbr>(<a href="../MoneroRpcConnection.html" title="class in monero.common">MoneroRpcConnection</a> connection,
<a href="https://docs.oracle.com/javase/8/docs/api/java/lang/Boolean.html" title="class or interface in java.lang" class="external-link">Boolean</a> isTrusted,
<a href="../SslOptions.html" title="class in monero.common">SslOptions</a> sslOptions)</code></div>
-<div class="col-last even-row-color"> </div>
+<div class="col-last even-row-color">
+<div class="block">Explicit SSL options take precedence over the connection's verification setting.</div>
+</div>
</div>
</section>
</li>
### docs/javadocs/monero/wallet/MoneroWalletRpc.html
@@ -943,7 +943,9 @@ <h2>Method Summary</h2>
<div class="col-second even-row-color method-summary-table method-summary-table-tab2 method-summary-table-tab4"><code><a href="#setDaemonConnection(monero.common.MoneroRpcConnection,java.lang.Boolean,monero.common.SslOptions)" class="member-name-link">setDaemonConnection</a><wbr>(<a href="../common/MoneroRpcConnection.html" title="class in monero.common">MoneroRpcConnection</a> connection,
<a href="https://docs.oracle.com/javase/8/docs/api/java/lang/Boolean.html" title="class or interface in java.lang" class="external-link">Boolean</a> isTrusted,
<a href="../common/SslOptions.html" title="class in monero.common">SslOptions</a> sslOptions)</code></div>
-<div class="col-last even-row-color method-summary-table method-summary-table-tab2 method-summary-table-tab4"> </div>
+<div class="col-last even-row-color method-summary-table method-summary-table-tab2 method-summary-table-tab4">
+<div class="block">Explicit SSL options take precedence over the connection's verification setting.</div>
+</div>
<div class="col-first odd-row-color method-summary-table method-summary-table-tab2 method-summary-table-tab4"><code>void</code></div>
<div class="col-second odd-row-color method-summary-table method-summary-table-tab2 method-summary-table-tab4"><code><a href="#setSubaddressLabel(int,int,java.lang.String)" class="member-name-link">setSubaddressLabel</a><wbr>(int accountIdx,
int subaddressIdx,
@@ -1425,6 +1427,9 @@ <h3>setDaemonConnection</h3>
<div class="member-signature"><span class="modifiers">public</span> <span class="return-type">void</span> <span class="element-name">setDaemonConnection</span><wbr><span class="parameters">(<a href="../common/MoneroRpcConnection.html" title="class in monero.common">MoneroRpcConnection</a> connection,
<a href="https://docs.oracle.com/javase/8/docs/api/java/lang/Boolean.html" title="class or interface in java.lang" class="external-link">Boolean</a> isTrusted,
<a href="../common/SslOptions.html" title="class in monero.common">SslOptions</a> sslOptions)</span></div>
+<div class="block">Explicit SSL options take precedence over the connection's verification setting.
+ The cached connection records the requested allow-any-cert setting, not custom SSL options.
+ Wallet RPC enforces a CA file or fingerprints; otherwise SSL autodetect can accept unverified certificates.</div>
</section>
</li>
<li>Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.