bitmask-vpn installs a daemon called bitmask-helper
which exposes a http api to handle firewall up/down
and openvpn connect/disconnect (only in macos)

this daemon was listening on localhost, since it is
meant to be only accessible to local processes we'v
changed it to listen on a unix domain socket

using unix socket allows to apply file  permissions
and restrict access to the api to only the intended
user

we found a bug on obfsvpn that prevents the app
from being able to connect via bridge a  second
time onwards after disconnecting from the first

ref: obfsvpn#64

Adds geolocation lookup feature. Update go version to go 1.22.2 as
bitmask-core uses/needs it.

0xacab.org/leap/bitmask-core v0.0.0-20240529192952-8ea2f4de269e => 0xacab.org/leap/bitmask-core v0.0.0-20240705122443-e372171b7c36
golang.org/x/sys v0.17.0 => v0.22.0
github.com/rs/zerolog v1.32.0 => v1.33.0
github.com/stretchr/testify v1.8.4 => v1.9.0

jkito authored 8 months ago and jkito committed 8 months ago

this updates the helpers starting the obfsvpn bridge
to use the new client interface that was  introduced
in obfsvpn 1.0.0

Multiple log levels are supported and can be set via env variable (LOG_LEVEL)
- trace (LOG_LEVEL=TRACE)
- debug (LOG_LEVEL=DEBUG)
- everything else: INFO

this fixes a hang in the UI when using the obfs4 transport

fixes #760

this sets the minimum go version in go.mod to 1.19 as that is
the version of golang currently available on debian stable

this updates all dependencies to the their latest version except
xtaci/kcp-go as the latest version needs go1.21, we use 5.5.15

Previously we saved the vendor tree in version control, making any
commit that changed a dependency rather large.
Go Modules gives us most of the advantages of vendoring except that if a
dependency which is not stored on the proxy is deleted we would lose
access to it.
For now, we can remove the vendor tree and when we get CI working again
we can possibly generate and save the vendor tree as a build artifact.

Signed-off-by: Sam Whited <sam@samwhited.com>

I think there's no need of vendoring this.
The debian package builds fine without them - at least with the text-dev
package in testing.

this adds upstream PR #74

after
https://github.com/getlantern/systray/commit/5fb0feca3c0677e9fa31e579ff69631f49a379a2
was merged, we don't need to keep using the vendoring of systray.

there is some flickering with the stop/start/cancel menu items
chening their orderning that still needs to be solved.

- Resolves: #26

Stop generating one file in /tmp for each icon change. Let's move the
clean up to the set icon instead of waiting for the quit clean up.
Unlink will remove the file from /tmp, but app_indicator will hold a
descriptor until it finishes with it.

This is a cherry-pick from a pull-request upstream:
https://github.com/getlantern/systray/pull/63

- Resolves: #60

Kali Kaneko authored 6 years ago and Kali Kaneko committed 6 years ago

this is a workaround for riseup_vpn#28