Add Qt olm binding #443

CarlSchwan · 2021-01-22T22:40:10Z

Start working on better Qt olm binding. The api and implementation is a plain port of the rust lib: olm-rs.

lib/olm/e2ee.h

lib/olm/qolmaccount.cpp

lib/olm/qolmoutboundsession.h

TobiasFella · 2021-01-24T01:13:46Z

Fails to build when building tests but not E2EE

CarlSchwan · 2021-01-24T17:04:07Z

Fails to build when building tests but not E2EE

This should now be fixed. I just needed to ifdef everything. A good goal would still be at some point to remove all this ifdef once this feature is stable and don't crash :)

autotests/testgroupsession.cpp

KitsuneRal · 2021-01-28T11:03:34Z

I feel a bit uneasy about having olm/ directory inside libQuotient tree - it's not immediately clear whether a given header file comes from Olm itself or the wrapper. Perhaps rename it to e2ee/ or qolm?

Also: did I get it right that you plan to eventually get rid of QtOlm dependency, rather than rewrite it?

CarlSchwan · 2021-01-28T16:36:34Z

I feel a bit uneasy about having olm/ directory inside libQuotient tree - it's not immediately clear whether a given header file comes from Olm itself or the wrapper. Perhaps rename it to e2ee/ or qolm?

Yes, it's probably that I will do soon, even more as I'm adding stuff related to encryption but not to olm specific (e.g. key export)

Also: did I get it right that you plan to eventually get rid of QtOlm dependency, rather than rewrite it?

Yes, the goal is to get rid of QtOlm. For the moment, I still have dependencies to QtOlm but it's only to make sure the code still compiles but I think I will be soon at a point where I can replace it with the new API.

autotests/testolmaccount.h

lib/converters.cpp

nicolasfella · 2021-02-12T20:37:49Z

lib/crypto/qolmaccount.h

+    QOlmAccount(OlmAccount *account);
+    OlmAccount *data();
+private:
+    OlmAccount *m_account = nullptr; // owning


unique_ptr?

An unique_ptr with its own custom deleter could work but it's more just add more complexity.

lib/room.cpp

nicolasfella · 2021-02-12T20:42:24Z

lib/networkaccessmanager.cpp

@@ -15,7 +15,12 @@ class NetworkAccessManager::Private {

 NetworkAccessManager::NetworkAccessManager(QObject* parent)
    : QNetworkAccessManager(parent), d(std::make_unique<Private>())
-{}
+{
+    connect(this, &QNetworkAccessManager::sslErrors, this, [](QNetworkReply *reply, const QList<QSslError> &errors)


Is this related?

it's for the test but need a better solution because we can't ignore the SSL errors in production...

Patch that should fix it but doesn't work. Probably because of a stupid error somewhere.

diff --git a/autotests/testolmaccount.cpp b/autotests/testolmaccount.cpp index 9134224..eb44791 100644 --- a/autotests/testolmaccount.cpp +++ b/autotests/testolmaccount.cpp @@ -165,6 +165,7 @@ void TestOlmAccount::encryptedFile() #define CREATE_CONNECTION(VAR, USERNAME, SECRET, DEVICE_NAME) \ auto VAR = std::make_shared<Connection>(); \ + VAR->ignoreSslErrors(true); \ (VAR) ->resolveServer("@alice:localhost:" + QString::number(443)); \ connect( (VAR) .get(), &Connection::loginFlowsChanged, this, [this, VAR ] () { \ (VAR) ->loginWithPassword( (USERNAME) , SECRET , DEVICE_NAME , ""); \ diff --git a/lib/connection.cpp b/lib/connection.cpp index 070aac0..d01aab3 100644 --- a/lib/connection.cpp +++ b/lib/connection.cpp @@ -573,6 +573,11 @@ void Connection::sync(int timeout) }); } +void Connection::ignoreSslErrors(bool ignore) +{ + connectionData()->ignoreSslErrors(ignore); +} + void Connection::syncLoop(int timeout) { if (d->syncLoopConnection && d->syncTimeout == timeout) { diff --git a/lib/connection.h b/lib/connection.h index 9a952e0..f3a6b8c 100644 --- a/lib/connection.h +++ b/lib/connection.h @@ -481,6 +481,11 @@ public: setUserFactory(defaultUserFactory<T>()); } + /// Ignore ssl errors (usefull for automated testing with local synapse + /// instance). + /// \internal + void ignoreSslErrors(bool ignore); + public Q_SLOTS: /** Set the homeserver base URL */ void setHomeserver(const QUrl& baseUrl); diff --git a/lib/connectiondata.cpp b/lib/connectiondata.cpp index e54d909..123febe 100644 --- a/lib/connectiondata.cpp +++ b/lib/connectiondata.cpp @@ -140,6 +140,12 @@ bool ConnectionData::needsToken(const QString& requestName) const != d->needToken.cend(); } +void ConnectionData::ignoreSslErrors(bool ignore) const +{ + auto quotientNam = static_cast<NetworkAccessManager>(nam()); + quotientNam.ignoreSslErrors(ignore); +} + void ConnectionData::setDeviceId(const QString& deviceId) { d->deviceId = deviceId; diff --git a/lib/connectiondata.h b/lib/connectiondata.h index 7dd96f2..00d056e 100644 --- a/lib/connectiondata.h +++ b/lib/connectiondata.h @@ -29,6 +29,7 @@ public: bool needsToken(const QString& requestName) const; QNetworkAccessManager* nam() const; + void ignoreSslErrors(bool ignore = true) const; void setBaseUrl(QUrl baseUrl); void setToken(QByteArray accessToken); [[deprecated("Use setBaseUrl() instead")]] diff --git a/lib/networkaccessmanager.cpp b/lib/networkaccessmanager.cpp index c6e761e..1276305 100644 --- a/lib/networkaccessmanager.cpp +++ b/lib/networkaccessmanager.cpp @@ -16,10 +16,6 @@ public: NetworkAccessManager::NetworkAccessManager(QObject* parent) : QNetworkAccessManager(parent), d(std::make_unique<Private>()) { - connect(this, &QNetworkAccessManager::sslErrors, this, [](QNetworkReply *reply, const QList<QSslError> &errors) - { - reply->ignoreSslErrors(); - }); } QList<QSslError> NetworkAccessManager::ignoredSslErrors() const @@ -27,6 +23,19 @@ QList<QSslError> NetworkAccessManager::ignoredSslErrors() const return d->ignoredSslErrors; } +void NetworkAccessManager::ignoreSslErrors(bool ignore) const +{ + if (ignore) { + connect(this, &QNetworkAccessManager::sslErrors, this, [](QNetworkReply *reply, const QList<QSslError> &errors) + { + qDebug() << 24 / 0; + reply->ignoreSslErrors(); + }); + } else { + disconnect(this, &QNetworkAccessManager::sslErrors, this, nullptr); + } +} + void NetworkAccessManager::addIgnoredSslError(const QSslError& error) { d->ignoredSslErrors << error; diff --git a/lib/networkaccessmanager.h b/lib/networkaccessmanager.h index 47729a1..22280e0 100644 --- a/lib/networkaccessmanager.h +++ b/lib/networkaccessmanager.h @@ -17,6 +17,7 @@ public: QList<QSslError> ignoredSslErrors() const; void addIgnoredSslError(const QSslError& error); void clearIgnoredSslErrors(); + void ignoreSslErrors(bool ignore = true) const; /** Get a pointer to the singleton */ static NetworkAccessManager* instance();

lib/encryptionmanager.cpp

lib/crypto/qolmutils.cpp

autotests/testolmaccount.cpp

lib/crypto/qolmaccount.cpp

TobiasFella · 2021-03-17T22:28:50Z

lib/crypto/qolmaccount.cpp

+
+bool operator==(const IdentityKeys& lhs, const IdentityKeys& rhs)
+{
+    return lhs.curve25519 == rhs.curve25519 &&& lhs.ed25519 == rhs.ed25519;


That's a lot of '&' - is that something in C++ i don't know or an error?

TobiasFella · 2021-03-17T22:31:08Z

lib/crypto/qolmaccount.cpp

+}
+
+// Convert olm error to enum
+QOlmError lastError(OlmAccount *account) {


Should that be a member function of QOlmAccount instead?

it's an internal function, that could be a private method too but I don't really see an advantage.

TobiasFella · 2021-03-17T22:34:28Z

lib/crypto/qolmaccount.cpp

+    QByteArray randomData = getRandom(randomSize);
+    const auto error = olm_create_account(m_account, randomData.data(), randomSize);
+    if (error == olm_error()) {
+        throw lastError(m_account);


Can we not throw things?

Generally I tried to only throw for errors that can't and shouldn't be recovered. In that case, it should only throw when there was a problem when allocating the memory.

lib/crypto/qolmaccount.cpp

lib/crypto/qolmaccount.h

autotests/testgroupsession.cpp

autotests/testgroupsession.h

TobiasFella · 2021-03-21T17:19:43Z

autotests/testolmaccount.cpp

+    const auto ed25519 = identityKeys.ed25519;
+    // verify encoded keys length
+    QCOMPARE(curve25519.size(), 43);
+    QCOMPARE(ed25519.size(), 43);


is that a safe assumption?

TobiasFella · 2021-03-21T17:26:38Z

autotests/testolmaccount.cpp

+    QOlmAccount olmAccount(QStringLiteral("@foo:bar.com"), QStringLiteral("QuotientTestDevice"));
+    olmAccount.createNewAccount();
+    const auto maxNumberOfOneTimeKeys = olmAccount.maxNumberOfOneTimeKeys();
+    QCOMPARE(100, maxNumberOfOneTimeKeys);


is that defined as the maximum somewhere or is it just what olm outputs currently?

TobiasFella · 2021-03-21T17:43:46Z

autotests/testolmaccount.cpp

+    connect(request, &BaseJob::result, this, [request, conn](BaseJob *job) {
+        auto job2 = static_cast<UploadKeysJob *>(job);
+        QCOMPARE(job2->oneTimeKeyCounts().size(), 0);


Suggested change

connect(request, &BaseJob::result, this, [request, conn](BaseJob *job) {

auto job2 = static_cast<UploadKeysJob *>(job);

QCOMPARE(job2->oneTimeKeyCounts().size(), 0);

connect(request, &BaseJob::result, this, [request]() {

QCOMPARE(request->oneTimeKeyCounts().size(), 0);

should be the same

TobiasFella · 2021-03-21T18:59:53Z

autotests/testolmaccount.cpp

+    connect(request, &BaseJob::result, this, [request, conn](BaseJob *job) {
+        auto job2 = static_cast<UploadKeysJob *>(job);
+        QCOMPARE(job2->oneTimeKeyCounts().size(), 1);
+        QCOMPARE(job2->oneTimeKeyCounts()["curve25519"], 5);


Suggested change

connect(request, &BaseJob::result, this, [request, conn](BaseJob *job) {

auto job2 = static_cast<UploadKeysJob *>(job);

QCOMPARE(job2->oneTimeKeyCounts().size(), 1);

QCOMPARE(job2->oneTimeKeyCounts()["curve25519"], 5);

connect(request, &BaseJob::result, this, [request]() {

QCOMPARE(request->oneTimeKeyCounts().size(), 1);

QCOMPARE(request->oneTimeKeyCounts()["curve25519"], 5);

TobiasFella · 2021-03-21T19:04:00Z

autotests/testolmaccount.cpp

+        QVariant var;
+        var.setValue(key);
+        oneTimeKeysHash[keyId] = var;


Suggested change

QVariant var;

var.setValue(key);

oneTimeKeysHash[keyId] = var;

oneTimeKeysHash[keyId] = QVariant::fromValue(key);

TobiasFella · 2021-03-21T19:08:47Z

autotests/testolmaccount.cpp

+    connect(request, &BaseJob::result, this, [request, nKeys, conn](BaseJob *job) {
+        auto job2 = static_cast<UploadKeysJob *>(job);
+        QCOMPARE(job2->oneTimeKeyCounts().size(), 1);
+        QCOMPARE(job2->oneTimeKeyCounts()["signed_curve25519"], nKeys);


Suggested change

connect(request, &BaseJob::result, this, [request, nKeys, conn](BaseJob *job) {

auto job2 = static_cast<UploadKeysJob *>(job);

QCOMPARE(job2->oneTimeKeyCounts().size(), 1);

QCOMPARE(job2->oneTimeKeyCounts()["signed_curve25519"], nKeys);

connect(request, &BaseJob::result, this, [request, nKeys]() {

QCOMPARE(request->oneTimeKeyCounts().size(), 1);

QCOMPARE(request->oneTimeKeyCounts()["signed_curve25519"], nKeys);

TobiasFella · 2021-03-21T19:15:38Z

autotests/testolmaccount.cpp

+    connect(request, &BaseJob::result, this, [request, conn](BaseJob *job) {
+        auto job2 = static_cast<UploadKeysJob *>(job);
+        QCOMPARE(job2->oneTimeKeyCounts().size(), 1);
+        QCOMPARE(job2->oneTimeKeyCounts()["signed_curve25519"], 1);


Suggested change

connect(request, &BaseJob::result, this, [request, conn](BaseJob *job) {

auto job2 = static_cast<UploadKeysJob *>(job);

QCOMPARE(job2->oneTimeKeyCounts().size(), 1);

QCOMPARE(job2->oneTimeKeyCounts()["signed_curve25519"], 1);

connect(request, &BaseJob::result, this, [request]() {

QCOMPARE(request->oneTimeKeyCounts().size(), 1);

QCOMPARE(request->oneTimeKeyCounts()["signed_curve25519"], 1);

TobiasFella · 2021-03-21T19:17:58Z

autotests/testolmaccount.cpp

+void TestOlmAccount::claimKeys()
+{
+    CREATE_CONNECTION(alice, "alice", "secret", "AlicePhone")
+    CREATE_CONNECTION(bob, "alice", "secret", "AlicePhone")


Not sure if it's important, but should bob maybe log in as "bob" instead of "alice"?

TobiasFella · 2021-03-21T20:15:59Z

autotests/testolmaccount.cpp

+    auto job = bob->callApi<ClaimKeysJob>(oneTimeKeys);
+    connect(job, &BaseJob::result, this, [bob, job] {
+        const auto userId = bob->userId();
+        const auto deviceId = bob->deviceId();


Suggested change

const auto deviceId = bob->deviceId();

autotests/testolmaccount.h

autotests/testolmsession.cpp

autotests/testolmsession.h

TobiasFella · 2021-03-21T22:33:07Z

autotests/testolmutility.cpp

+    auto utility = olm_utility(utilityBuf);
+
+
+    QByteArray signatureBuf1(sig.length(), '0');


Why is this copy needed?

If I remember correctly olm_ed25519_verify will modify sig and we still need the original sig later.

TobiasFella · 2021-03-21T22:39:56Z

autotests/testolmutility.cpp

+    QCOMPARE(res2, true);
+}
+
+void TestOlmUtility::validUploadKeysRequest()


The content doesn't really fit to the method name

autotests/testolmutility.h

TobiasFella · 2021-03-21T22:50:40Z

lib/converters.cpp

+    if (v.canConvert<SignedOneTimeKey>()) {
+        return toJson(v.value<SignedOneTimeKey>());
+    }


This looks like it shouldn't be necessary. is it just some hack or is there a deeper reason for it?

It's a hack, unfortunately, the JSON /C++ bridge can't really handle the case where something is either an object or a string.

TobiasFella · 2021-03-21T22:56:39Z

lib/connection.cpp

            qCDebug(E2EE) << "Found key" << ourKey
                          << "instead of ours own ed25519 key"
-                          << encryptionManager->account()->ed25519IdentityKey()


I know that this is not new code, but is it a good idea to log keys?

I guess this is just debugging code, for the moment I completely disabled this code since it was crashy

lib/crypto/qolmutility.h

TobiasFella · 2021-03-22T00:46:23Z

lib/crypto/qolmutility.cpp

+    const auto ret = olm_ed25519_verify(m_utility, key.data(), key.size(),
+            message.data(), message.size(), (void *)signatureBuf.data(), signatureBuf.size());
+
+    const auto error = ret;


yeah, that stuff should be simplified (same with the if condition underneath)

lib/crypto/qolmoutboundsession.h

TobiasFella · 2021-03-22T15:06:25Z

Since there will probably be other E2EE encryption systems in matrix sooner or later, should the olm stuff be moved to crypto/qolm or something?

TobiasFella · 2021-03-22T22:50:59Z

lib/crypto/qolmaccount.cpp

+    const QByteArray key = toKey(mode);
+    const auto error = olm_unpickle_account(m_account, key.data(), key.length(), pickled.data(), pickled.size());
+    if (error == olm_error()) {
+        throw lastError(m_account);


some of the errors thrown by olm_unpickle_account (invalid base64, bad account key) are probably recoverable

TobiasFella · 2021-03-22T23:01:13Z

lib/crypto/qolminboundsession.cpp

+            reinterpret_cast<const uint8_t *>(temp.data()), temp.size());
+
+    if (error == olm_error()) {
+        throw lastError(olmInboundGroupSession);


we probably shouldn't fail completely for these errors

TobiasFella · 2021-03-22T23:01:30Z

lib/crypto/qolminboundsession.cpp

+    const auto error = olm_import_inbound_group_session(olmInboundGroupSession,
+            reinterpret_cast<const uint8_t *>(keyBuf.data()), keyBuf.size());
+    if (error == olm_error()) {
+        throw lastError(olmInboundGroupSession);


TobiasFella · 2021-03-22T23:10:20Z

lib/crypto/qolmsession.cpp

+{
+    if (preKeyMessage.type() != QOlmMessage::PreKey) {
+        qCDebug(E2EE) << "The message is not a pre-key";
+        throw BadMessageFormat;


Can we assume that this will never happen if the client uses this correctly?

TobiasFella · 2021-03-22T23:14:20Z

lib/crypto/qolmsession.cpp

+{
+    const auto messageTypeResult = olm_encrypt_message_type(m_session);
+    if (messageTypeResult == olm_error()) {
+        throw lastError(m_session);


The olm documentation does not specify which errors might happen here. we should look into the implementation to figure out if we should handle them or not

TobiasFella · 2021-03-22T23:19:29Z

we could also assert the unrecoverable errors instead of throwing them, since they should not happen if the program is reasonably correct

Co-authored-by: Tobias Fella <[email protected]>

Co-authored-by: Nicolas Fella <[email protected]>

Co-authored-by: Tobias Fella <[email protected]>

KitsuneRal · 2021-05-15T13:14:34Z

Upon a quick look-through, without really analysing the code:

Please double-check the code is formatted according to .clang-format.
Please indicate the Qt module of the header: #include <QtCore/QDebug>, not #include <QDebug>.
I understand the idea of throwing when things are utterly grim and irrecoverable; but in some cases throw is combined with the error object, which is very confusing from the API standpoint. Please let's really try to go without exceptions, as long as there's QOlmError.

I will look closer into the code; it would help if you could clearly declare the scope of the work accomplished by now (what is supposed to work, namely).

CarlSchwan · 2021-05-19T19:00:04Z

I pushed this to the work/olm branch. I will close this MR and new E2EE related MR should be done against the work/olm branch. Once everything is working we can merge the work/olm branch inside master. :)

hugohn · 2022-04-04T17:56:39Z

Hi guys, is this still ongoing work? was there an MR that replaced this MR?

CarlSchwan · 2022-04-04T18:14:33Z

Hi guys, is this still ongoing work? was there an MR that replaced this MR?

This was merged in another mr. Message decryption should now work if the compile flag is set

hugohn · 2022-04-04T19:27:24Z

Hi guys, is this still ongoing work? was there an MR that replaced this MR?

This was merged in another mr. Message decryption should now work if the compile flag is set

Awesome! Since 0.7 is not out yet, I assume message decryption is currently available only in the dev branch, correct?

Also do you know when will 0.7 be released?

KitsuneRal · 2022-04-15T17:43:53Z

Hopefully sometime later in the summer, contingent on me having at least some reasonable time for the project (and in any case it likely won't have complete E2EE, rather an early beta of sorts).

CarlSchwan marked this pull request as draft January 23, 2021 16:11

TobiasFella reviewed Jan 24, 2021

View reviewed changes

lib/olm/e2ee.h Outdated Show resolved Hide resolved

lib/olm/qolmaccount.cpp Outdated Show resolved Hide resolved

lib/olm/qolmoutboundsession.h Outdated Show resolved Hide resolved

CarlSchwan commented Jan 24, 2021

View reviewed changes

autotests/testgroupsession.cpp Outdated Show resolved Hide resolved

CarlSchwan force-pushed the work/olm branch from 27fd506 to 27d10fc Compare January 26, 2021 19:16

CarlSchwan force-pushed the work/olm branch from d02fbf7 to af97ef4 Compare January 29, 2021 19:26

CarlSchwan mentioned this pull request Feb 5, 2021

Implement OlmV1Curve25519AesSha2AlgoKey decryption and encryption #451

Closed

4 tasks

TobiasFella reviewed Feb 12, 2021

View reviewed changes

autotests/testolmaccount.h Outdated Show resolved Hide resolved

nicolasfella reviewed Feb 12, 2021

View reviewed changes

TobiasFella reviewed Feb 12, 2021

View reviewed changes

autotests/testolmaccount.cpp Outdated Show resolved Hide resolved

autotests/testolmaccount.cpp Outdated Show resolved Hide resolved

TobiasFella reviewed Mar 17, 2021

View reviewed changes

TobiasFella reviewed Mar 21, 2021

View reviewed changes

TobiasFella reviewed Mar 22, 2021

View reviewed changes

CarlSchwan and others added 9 commits May 6, 2021 00:25

Start implementing Qt olm binding

1d98639

Add tests

d2c0b2c

Add destructor

e16ae79

Start inboundsession wrapper

e2ff63d

Implement Inboundsession

aa46589

Implement outboundsession

a729932

ifdef everything

9a93fb1

Fix documentation typos

8c0f71b

Co-authored-by: Tobias Fella <[email protected]>

Make it work

844a945

CarlSchwan and others added 15 commits May 6, 2021 00:25

More porting to new API

4b54169

More tests

5c50c4f

Key verification

62d661e

Add more test and use macro to remove duplicated code

a8dc175

More test but still failing in signing/signature verification

ffb3867

remove old files

ddbe6c3

Fix signing keys

74c7843

Fix cmake code

ad0158c

Apply suggestions from code review

88da786

Co-authored-by: Nicolas Fella <[email protected]>

Apply a few more comments

aeed90e

fix typo

44bca97

Ifdef E2EE out at cmake level

9244613

Apply suggestions from code review

f1acf80

Co-authored-by: Tobias Fella <[email protected]>

ssl

fe7ff15

Fix error manager

9d64694

CarlSchwan force-pushed the work/olm branch from a13173b to fe7ff15 Compare May 5, 2021 22:29

Fix everything

3e7dbfe

CarlSchwan changed the title ~~Draft: Start implementing Qt olm binding~~ Start implementing Qt olm binding May 6, 2021

CarlSchwan changed the title ~~Start implementing Qt olm binding~~ Add Qt olm binding May 6, 2021

KitsuneRal added the enhancement A feature or change request for the library label May 15, 2021

CarlSchwan closed this May 19, 2021

KitsuneRal mentioned this pull request Sep 17, 2021

Support E2E encryption quotient-im/Quaternion#75

Open

		auto utility = olm_utility(utilityBuf);


		QByteArray signatureBuf1(sig.length(), '0');

Add Qt olm binding #443

Add Qt olm binding #443

Conversation

CarlSchwan commented Jan 22, 2021

TobiasFella commented Jan 24, 2021

CarlSchwan commented Jan 24, 2021

KitsuneRal commented Jan 28, 2021

CarlSchwan commented Jan 28, 2021

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

TobiasFella commented Mar 22, 2021

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

TobiasFella commented Mar 22, 2021

KitsuneRal commented May 15, 2021

CarlSchwan commented May 19, 2021

hugohn commented Apr 4, 2022

CarlSchwan commented Apr 4, 2022

hugohn commented Apr 4, 2022

KitsuneRal commented Apr 15, 2022