cli (cmd/bitmask-helper/main.go and) and helpers (pkg/pickle/helpers.go)
were also fixed.

It only calls vpn.Init()

This was introduced in 970c3f4f where the code supported different api
versions, but there was not yet an implementation for v5.
The apiVersion can be set via env. In the future apiVersion will be
fetched from the API using the /providers.json URL"

It only calls config.ConfigureLogger which now get's called directly.

0xacab.org/leap/bitmask-core v0.0.0-20240529192952-8ea2f4de269e => 0xacab.org/leap/bitmask-core v0.0.0-20240705122443-e372171b7c36
golang.org/x/sys v0.17.0 => v0.22.0
github.com/rs/zerolog v1.32.0 => v1.33.0
github.com/stretchr/testify v1.8.4 => v1.9.0

jkito authored 8 months ago and jkito committed 8 months ago

this should help with debugging similar bugs which was
fixed in the previous commit

jkito authored 8 months ago and jkito committed 8 months ago

this fixes a bug where StartFirewall is called with an empty
'gateways' slice leading to blocking outgoing connections to
the openvpn gateway

in startOpenvpn func's global scope there's a 'gateways' var
which is passed to FirewallStart and the gateways are  added
to the firewall's allow list of IPs, this was re-declared in
the code branch for non-private bridge which is out of scope
where FirewallStart is called, leading to an empty 'gateways'
slice being passed to it

jkito authored 8 months ago and jkito committed 8 months ago

both the functions are used to start the obfs4 bridge proxy
one using the bridge connection parameters provided via env
another for starting with the parameters received from  the
api

this commit reuses a single function to start the proxy in both
the scenarios

jkito authored 8 months ago and jkito committed 8 months ago

this updates the helpers starting the obfsvpn bridge
to use the new client interface that was  introduced
in obfsvpn 1.0.0

Pea Nut authored 8 months ago and jkito committed 8 months ago

It does not have a value any more. Directly calling
GatewayPool.GetGatewaysByTimezone instead. Therefore making it public.

Pea Nut authored 8 months ago and jkito committed 8 months ago

It first checks if p.recommended is len=0, then iterates over it.

Pea Nut authored 8 months ago and jkito committed 8 months ago

After removing `Bitmask.ReloadFirewall()` there are no calls to `b.api.GetAllGateways()`
where the calling function actually need the gateways as return values. So I renamed the
function to FetchAllGateways. The function now only returns an error (instead of
`([]bonafide.Gateway, error)`). This simplifies the code of v5 a bit, as
we get rid of yet another function/abstraction. In v3 `gatewayPool.getAll()`
now also returns just an error.

Pea Nut authored 8 months ago and jkito committed 8 months ago

It's never called.

Pea Nut authored 9 months ago and jkito committed 8 months ago

This fixes a small logic error. Each gateway can be multiple times in
p.recommened (for each transport). If a location was selected manually,
each gateway was added twice to the returned list. The returned list is
the list of gateways we will connect to. For more information, please
check: leap/bitmask-vpn!213

jkito authored 9 months ago and jkito committed 8 months ago

apart from its use in snowflake/bootstrap.go its also used
to form the path to eip-service.json file on disk and motd
package both expects the provider name instead of provider
url

As discussed in #838. This is a security fix. Normally this file is
deployed by the Debian packge (with 755).

Pea Nut authored 9 months ago and jkito committed 9 months ago

os.MkdirAll returns nil if the directory exists, so we don't check if
it exists.

currently the check expects only RSA private keys but
newer menshen could serve other keys as well

this updates the check to only look for 'PRIVATE KEY'
in the preamble instead of RSA PRIVATE KEY

the test is failing with the following error:
```
--- FAIL: TestLatency (0.00s)
    integration_test.go:65:
        	Error Trace:	/builds/jkito/bitmask-vpn/pkg/vpn/menshen/integration_test.go:65
        	Error:      	Received unexpected error:
        	            	socket: permission denied
        	Test:       	TestLatency
        	Messages:   	Could not calc latency
FAIL
FAIL	0xacab.org/leap/bitmask-vpn/pkg/vpn/menshen	0.029s
```

it is beacause of missing permissons, the pro-bing library attempts
to send an "unprivileged" ping via UDP. On Linux, this must be enabled
with a sysctl command

this removes the go generate way of generating the
pkg/config/version.go file and uses build time  ld
flags to set the version when building from git or
uses .gitattributes to set it during git archive

Pea Nut authored 9 months ago and jkito committed 9 months ago

Not needed anymore. We call motd.FetchLatest() directly when initializing the Bitmask struct