From 2495d8032eb6839a55080b79ac818383c2f75b79 Mon Sep 17 00:00:00 2001
From: Pacien TRAN-GIRARD
Date: Fri, 5 May 2017 01:02:16 +0200
Subject: Import unversioned prototype

---
 .../pacien/tincapp/activities/BaseActivity.java    | 71 +++++++++++++++++++
 .../pacien/tincapp/activities/StartActivity.java   | 82 ++++++++++++++++++++++
 .../java/org/pacien/tincapp/commands/Command.java  | 67 ++++++++++++++++++
 .../java/org/pacien/tincapp/commands/Executor.java | 44 ++++++++++++
 .../pacien/tincapp/commands/PermissionFixer.java   | 34 +++++++++
 .../java/org/pacien/tincapp/commands/Tinc.java     | 60 ++++++++++++++++
 .../java/org/pacien/tincapp/commands/Tincd.java    | 28 ++++++++
 .../java/org/pacien/tincapp/context/AppInfo.java   | 42 +++++++++++
 .../java/org/pacien/tincapp/context/AppPaths.java  | 75 ++++++++++++++++++++
 .../org/pacien/tincapp/service/TincVpnService.java | 51 ++++++++++++++
 .../tincapp/service/VpnInterfaceConfigurator.java  | 81 +++++++++++++++++++++
 .../java/org/pacien/tincapp/util/Function.java     | 28 ++++++++
 12 files changed, 663 insertions(+)
 create mode 100644 app/src/main/java/org/pacien/tincapp/activities/BaseActivity.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/activities/StartActivity.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/commands/Command.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/commands/Executor.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/commands/PermissionFixer.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/commands/Tinc.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/commands/Tincd.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/context/AppInfo.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/context/AppPaths.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/service/TincVpnService.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/service/VpnInterfaceConfigurator.java
 create mode 100644 app/src/main/java/org/pacien/tincapp/util/Function.java

(limited to 'app/src/main/java')

diff --git a/app/src/main/java/org/pacien/tincapp/activities/BaseActivity.java b/app/src/main/java/org/pacien/tincapp/activities/BaseActivity.java
new file mode 100644
index 0000000..0e6cb95
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/activities/BaseActivity.java
@@ -0,0 +1,71 @@
+package org.pacien.tincapp.activities;
+
+import android.content.ClipData;
+import android.content.ClipboardManager;
+import android.content.Context;
+import android.content.Intent;
+import android.net.Uri;
+import android.os.Bundle;
+import android.support.annotation.StringRes;
+import android.support.design.widget.Snackbar;
+import android.support.v7.app.AlertDialog;
+import android.support.v7.app.AppCompatActivity;
+import android.support.v7.widget.Toolbar;
+import android.view.Menu;
+import android.view.MenuItem;
+import android.view.ViewGroup;
+
+import org.pacien.tincapp.BuildConfig;
+import org.pacien.tincapp.R;
+import org.pacien.tincapp.context.AppInfo;
+
+/**
+ * @author pacien
+ */
+public abstract class BaseActivity extends AppCompatActivity {
+
+	@Override
+	protected void onCreate(Bundle savedInstanceState) {
+		super.onCreate(savedInstanceState);
+		setContentView(R.layout.base);
+		Toolbar toolbar = (Toolbar) findViewById(R.id.toolbar);
+		setSupportActionBar(toolbar);
+	}
+
+	@Override
+	public boolean onCreateOptionsMenu(Menu m) {
+		getMenuInflater().inflate(R.menu.menu_base, m);
+		return true;
+	}
+
+	public void aboutDialog(MenuItem i) {
+		new AlertDialog.Builder(this)
+				.setTitle(BuildConfig.APPLICATION_ID)
+				.setMessage(getResources().getString(R.string.app_short_desc) + "\n\n" +
+						getResources().getString(R.string.app_copyright) + " " +
+						getResources().getString(R.string.app_license) + "\n\n" +
+						AppInfo.all(getResources()))
+				.setNeutralButton(R.string.action_open_project_website, (dialog, which) -> openWebsite(R.string.app_website_url))
+				.setPositiveButton(R.string.action_close, (dialog, which) -> { /* nop */ })
+				.show();
+	}
+
+	protected ViewGroup getContentView() {
+		return (ViewGroup) findViewById(R.id.main_content);
+	}
+
+	protected void openWebsite(@StringRes int url) {
+		startActivity(new Intent(Intent.ACTION_VIEW, Uri.parse(getResources().getString(url))));
+	}
+
+	protected void notify(@StringRes int msg) {
+		Snackbar.make(findViewById(R.id.activity_base), msg, Snackbar.LENGTH_LONG).show();
+	}
+
+	protected void copyIntoClipboard(String label, String str) {
+		ClipboardManager c = (ClipboardManager) getSystemService(Context.CLIPBOARD_SERVICE);
+		c.setPrimaryClip(ClipData.newPlainText(label, str));
+		notify(R.string.message_text_copied);
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/activities/StartActivity.java b/app/src/main/java/org/pacien/tincapp/activities/StartActivity.java
new file mode 100644
index 0000000..e469fa0
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/activities/StartActivity.java
@@ -0,0 +1,82 @@
+package org.pacien.tincapp.activities;
+
+import android.annotation.SuppressLint;
+import android.content.Intent;
+import android.os.Bundle;
+import android.support.v7.app.AlertDialog;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.EditText;
+import android.widget.FrameLayout;
+
+import org.pacien.tincapp.R;
+import org.pacien.tincapp.commands.PermissionFixer;
+import org.pacien.tincapp.context.AppPaths;
+import org.pacien.tincapp.service.TincVpnService;
+
+/**
+ * @author pacien
+ */
+public class StartActivity extends BaseActivity {
+
+	@Override
+	protected void onCreate(Bundle savedInstanceState) {
+		super.onCreate(savedInstanceState);
+		getLayoutInflater().inflate(R.layout.page_start, getContentView());
+	}
+
+	@Override
+	protected void onActivityResult(int request, int result, Intent data) {
+		notify(result == RESULT_OK ? R.string.message_vpn_permissions_granted : R.string.message_vpn_permissions_denied);
+	}
+
+	public void requestVpnPermission(View v) {
+		Intent askPermIntent = TincVpnService.prepare(this);
+
+		if (askPermIntent != null)
+			startActivityForResult(askPermIntent, 0);
+		else
+			onActivityResult(0, RESULT_OK, null);
+	}
+
+	public void startVpnDialog(View v) {
+		final EditText i = new EditText(this);
+		i.setLayoutParams(new FrameLayout.LayoutParams(FrameLayout.LayoutParams.MATCH_PARENT, FrameLayout.LayoutParams.MATCH_PARENT));
+		i.setHint(R.string.field_net_name);
+
+		@SuppressLint("InflateParams")
+		ViewGroup vg = (ViewGroup) getLayoutInflater().inflate(R.layout.dialog_frame, null);
+		vg.addView(i);
+
+		new AlertDialog.Builder(this)
+				.setTitle(R.string.title_connect_to_network)
+				.setView(vg)
+				.setPositiveButton(R.string.action_connect, (dialog, which) -> startVpn(i.getText().toString()))
+				.setNegativeButton(R.string.action_close, (dialog, which) -> { /* nop */ })
+				.show();
+	}
+
+	public void confDirDialog(View v) {
+		String confDir = AppPaths.confDir(this).getPath();
+
+		new AlertDialog.Builder(this)
+				.setTitle(R.string.title_tinc_config_dir)
+				.setMessage(confDir)
+				.setNeutralButton(R.string.action_fix_perms, (dialog, which) -> fixPerms())
+				.setNegativeButton(R.string.action_copy,
+						(dialog, which) -> copyIntoClipboard(getResources().getString(R.string.title_tinc_config_dir), confDir))
+				.setPositiveButton(R.string.action_close, (dialog, which) -> { /* nop */ })
+				.show();
+	}
+
+	private void startVpn(String netName) {
+		startService(new Intent(this, TincVpnService.class)
+				.putExtra(TincVpnService.INTENT_EXTRA_NET_NAME, netName));
+	}
+
+	private void fixPerms() {
+		boolean ok = PermissionFixer.makePrivateDirsPublic(getApplicationContext());
+		notify(ok ? R.string.message_perms_fixed : R.string.message_perms_fix_failure);
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/commands/Command.java b/app/src/main/java/org/pacien/tincapp/commands/Command.java
new file mode 100644
index 0000000..28ff226
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/commands/Command.java
@@ -0,0 +1,67 @@
+package org.pacien.tincapp.commands;
+
+import com.annimon.stream.Collectors;
+import com.annimon.stream.Optional;
+import com.annimon.stream.Stream;
+
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.LinkedList;
+import java.util.List;
+
+/**
+ * @author pacien
+ */
+class Command {
+
+	static private class Option {
+		final String key;
+		final Optional<java.lang.String> val;
+
+		Option(String key, String val) {
+			this.key = key;
+			this.val = Optional.ofNullable(val);
+		}
+
+		@Override
+		public String toString() {
+			return val.isPresent() ? "--" + key + "=" + val.get() : "--" + key;
+		}
+	}
+
+	final private String cmd;
+	final private List<Option> opts;
+	final private List<String> args;
+
+	public Command(String cmd) {
+		this.cmd = cmd;
+		this.opts = new LinkedList<>();
+		this.args = new LinkedList<>();
+	}
+
+	public Command withOption(String key, String val) {
+		this.opts.add(new Option(key, val));
+		return this;
+	}
+
+	public Command withOption(String key) {
+		return this.withOption(key, null);
+	}
+
+	public Command withArguments(String... args) {
+		this.args.addAll(Arrays.asList(args));
+		return this;
+	}
+
+	public List<String> asList() {
+		return Collections.unmodifiableList(
+				Stream.concat(Stream.of(Collections.singleton(this.cmd)),
+						Stream.concat(Stream.of(this.opts).map(Option::toString), Stream.of(this.args)))
+						.collect(Collectors.toList()));
+	}
+
+	public String[] asArray() {
+		return this.asList().toArray(new String[0]);
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/commands/Executor.java b/app/src/main/java/org/pacien/tincapp/commands/Executor.java
new file mode 100644
index 0000000..edf229c
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/commands/Executor.java
@@ -0,0 +1,44 @@
+package org.pacien.tincapp.commands;
+
+import java.io.BufferedReader;
+import java.io.IOException;
+import java.io.InputStreamReader;
+import java.util.Collections;
+import java.util.LinkedList;
+import java.util.List;
+
+/**
+ * @author pacien
+ */
+final class Executor {
+
+	private Executor() {
+		// static class
+	}
+
+	static {
+		System.loadLibrary("exec");
+	}
+
+	/**
+	 * @return -1 on error, forked child PID otherwise
+	 */
+	static private native int forkExec(String[] argcv);
+
+	static public void forkExec(Command cmd) throws IOException {
+		if (forkExec(cmd.asArray()) == -1)
+			throw new IOException();
+	}
+
+	static public List<String> call(Command cmd) throws IOException {
+		Process proc = new ProcessBuilder(cmd.asList()).start();
+		BufferedReader outputReader = new BufferedReader(new InputStreamReader(proc.getInputStream()));
+
+		String line;
+		List<String> list = new LinkedList<>();
+		while ((line = outputReader.readLine()) != null) list.add(line);
+
+		return Collections.unmodifiableList(list);
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/commands/PermissionFixer.java b/app/src/main/java/org/pacien/tincapp/commands/PermissionFixer.java
new file mode 100644
index 0000000..b00d0d6
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/commands/PermissionFixer.java
@@ -0,0 +1,34 @@
+package org.pacien.tincapp.commands;
+
+import android.annotation.SuppressLint;
+import android.content.Context;
+
+import com.annimon.stream.Stream;
+
+import org.pacien.tincapp.context.AppPaths;
+
+import java.io.File;
+
+/**
+ * @author pacien
+ */
+final public class PermissionFixer {
+
+	private PermissionFixer() {
+		// static class
+	}
+
+	@SuppressLint({"SetWorldReadable", "SetWorldWritable"})
+	static private Boolean setAllRWXPermissions(File f) {
+		return f.setReadable(true, false)
+				&& f.setWritable(true, false)
+				&& f.setExecutable(true, false);
+	}
+
+	static public Boolean makePrivateDirsPublic(Context ctx) {
+		return Stream.of(AppPaths.confDir(ctx), AppPaths.logDir(ctx), AppPaths.pidDir(ctx))
+				.map(PermissionFixer::setAllRWXPermissions)
+				.reduce((x, y) -> x && y).get();
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/commands/Tinc.java b/app/src/main/java/org/pacien/tincapp/commands/Tinc.java
new file mode 100644
index 0000000..ca11698
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/commands/Tinc.java
@@ -0,0 +1,60 @@
+package org.pacien.tincapp.commands;
+
+import android.content.Context;
+
+import com.annimon.stream.Stream;
+
+import org.pacien.tincapp.context.AppPaths;
+
+import java.io.IOException;
+import java.util.List;
+
+/**
+ * @author pacien
+ */
+final public class Tinc {
+
+	private Tinc() {
+		// static class
+	}
+
+	static private Command newCommand(Context ctx, String netName) {
+		return new Command(AppPaths.tinc(ctx).getAbsolutePath())
+				.withOption("config", AppPaths.confDir(ctx, netName).getAbsolutePath())
+				.withOption("pidfile", AppPaths.pidFile(ctx, netName).getAbsolutePath());
+	}
+
+	// independently runnable commands
+
+	static public List<String> network(Context ctx) throws IOException {
+		return Executor.call(new Command(AppPaths.tinc(ctx).getAbsolutePath())
+				.withOption("config", AppPaths.confDir(ctx).getAbsolutePath())
+				.withArguments("network"));
+	}
+
+	static public List<String> fsck(Context ctx, String netName, Boolean fix) throws IOException {
+		Command cmd = newCommand(ctx, netName).withArguments("fsck");
+		if (fix) cmd = cmd.withOption("force");
+		return Executor.call(cmd);
+	}
+
+	// commands requiring a running tinc daemon
+
+	static public void stop(Context ctx, String netName) throws IOException {
+		Executor.call(newCommand(ctx, netName).withArguments("stop"));
+	}
+
+	static public List<String> dumpNodes(Context ctx, String netName, Boolean reachable) throws IOException {
+		Command cmd = reachable
+				? newCommand(ctx, netName).withArguments("dump", "reachable", "nodes")
+				: newCommand(ctx, netName).withArguments("dump", "nodes");
+
+		return Executor.call(cmd);
+	}
+
+	static public String info(Context ctx, String netName, String node) throws IOException {
+		List<String> output = Executor.call(newCommand(ctx, netName).withArguments("info", node));
+		return Stream.of(output).reduce((l, r) -> l + '\n' + r).get();
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/commands/Tincd.java b/app/src/main/java/org/pacien/tincapp/commands/Tincd.java
new file mode 100644
index 0000000..07acc3d
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/commands/Tincd.java
@@ -0,0 +1,28 @@
+package org.pacien.tincapp.commands;
+
+import android.content.Context;
+
+import org.pacien.tincapp.context.AppPaths;
+
+import java.io.IOException;
+
+/**
+ * @author pacien
+ */
+final public class Tincd {
+
+	private Tincd() {
+		// static class
+	}
+
+	static public void start(Context ctx, String netName, Integer fd) throws IOException {
+		Executor.forkExec(new Command(AppPaths.tincd(ctx).getAbsolutePath())
+				.withOption("no-detach")
+				.withOption("config", AppPaths.confDir(ctx, netName).getAbsolutePath())
+				.withOption("pidfile", AppPaths.pidFile(ctx, netName).getAbsolutePath())
+				.withOption("logfile", AppPaths.logFile(ctx, netName).getAbsolutePath())
+				.withOption("option", "DeviceType=fd")
+				.withOption("option", "Device=" + fd));
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/context/AppInfo.java b/app/src/main/java/org/pacien/tincapp/context/AppInfo.java
new file mode 100644
index 0000000..075402d
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/context/AppInfo.java
@@ -0,0 +1,42 @@
+package org.pacien.tincapp.context;
+
+import android.content.res.Resources;
+import android.os.Build;
+
+import com.annimon.stream.Stream;
+
+import org.pacien.tincapp.BuildConfig;
+import org.pacien.tincapp.R;
+
+/**
+ * @author pacien
+ */
+final public class AppInfo {
+
+	private AppInfo() {
+		// static class
+	}
+
+	static public String appVersion(Resources r) {
+		return r.getString(R.string.info_version_format,
+				BuildConfig.VERSION_NAME,
+				BuildConfig.BUILD_TYPE);
+	}
+
+	static public String androidVersion(Resources r) {
+		return r.getString(R.string.info_running_on_format,
+				Build.VERSION.CODENAME,
+				Build.VERSION.RELEASE);
+	}
+
+	static public String supportedABIs(Resources r) {
+		return r.getString(R.string.info_supported_abis_format,
+				Stream.of(Build.SUPPORTED_ABIS).reduce((x, y) -> x + "," + y).get());
+	}
+
+	static public String all(Resources r) {
+		return Stream.of(appVersion(r), androidVersion(r), supportedABIs(r))
+				.reduce((x, y) -> x + '\n' + y).get();
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/context/AppPaths.java b/app/src/main/java/org/pacien/tincapp/context/AppPaths.java
new file mode 100644
index 0000000..d854d4e
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/context/AppPaths.java
@@ -0,0 +1,75 @@
+package org.pacien.tincapp.context;
+
+import android.content.Context;
+
+import java.io.File;
+
+/**
+ * @author pacien
+ * @implNote Logs and PID files are stored in the cache directory for easy clean up.
+ */
+final public class AppPaths {
+
+	private AppPaths() {
+		// static class
+	}
+
+	static final private String CONFDIR = "conf";
+	static final private String LOGDIR = "log";
+	static final private String PIDDIR = "pid";
+
+	static final private String TINCD_BIN = "libtincd.so";
+	static final private String TINC_BIN = "libtinc.so";
+
+	static final private String LOGFILE_FORMAT = "tinc.%s.log";
+	static final private String PIDFILE_FORMAT = "tinc.%s.pid";
+
+	static final private String NET_CONF_FILE = "network.conf";
+
+	static private File createDirIfNotExists(File basePath, String newDir) {
+		File f = new File(basePath, newDir);
+		f.mkdirs();
+		return f;
+	}
+
+	static public File confDir(Context ctx) {
+		return ctx.getDir(CONFDIR, Context.MODE_PRIVATE);
+	}
+
+	static public File confDir(Context ctx, String netName) {
+		return new File(confDir(ctx), netName);
+	}
+
+	static public File logDir(Context ctx) {
+		return createDirIfNotExists(ctx.getCacheDir(), LOGDIR);
+	}
+
+	static public File pidDir(Context ctx) {
+		return createDirIfNotExists(ctx.getCacheDir(), PIDDIR);
+	}
+
+	static public File logFile(Context ctx, String netName) {
+		return new File(logDir(ctx), String.format(LOGFILE_FORMAT, netName));
+	}
+
+	static public File pidFile(Context ctx, String netName) {
+		return new File(pidDir(ctx), String.format(PIDFILE_FORMAT, netName));
+	}
+
+	static public File netConfFile(Context ctx, String netName) {
+		return new File(confDir(ctx, netName), NET_CONF_FILE);
+	}
+
+	static public File binDir(Context ctx) {
+		return new File(ctx.getApplicationInfo().nativeLibraryDir);
+	}
+
+	static public File tincd(Context ctx) {
+		return new File(binDir(ctx), TINCD_BIN);
+	}
+
+	static public File tinc(Context ctx) {
+		return new File(binDir(ctx), TINC_BIN);
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/service/TincVpnService.java b/app/src/main/java/org/pacien/tincapp/service/TincVpnService.java
new file mode 100644
index 0000000..1a6f58f
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/service/TincVpnService.java
@@ -0,0 +1,51 @@
+package org.pacien.tincapp.service;
+
+import android.app.Service;
+import android.content.Intent;
+import android.net.VpnService;
+
+import org.pacien.tincapp.BuildConfig;
+import org.pacien.tincapp.commands.Tinc;
+import org.pacien.tincapp.commands.Tincd;
+import org.pacien.tincapp.context.AppPaths;
+
+import java.io.IOException;
+
+import static org.pacien.tincapp.util.Function.applyIgnoringExcept;
+
+/**
+ * @author pacien
+ */
+public class TincVpnService extends VpnService {
+
+	static final public String INTENT_EXTRA_NET_NAME = "netName";
+
+	private String netName;
+
+	@Override
+	public int onStartCommand(Intent intent, int flags, int startId) {
+		this.netName = intent.getStringExtra(INTENT_EXTRA_NET_NAME);
+
+		Builder net = new Builder().setSession(this.netName);
+		VpnInterfaceConfigurator.applyConfiguration(net, AppPaths.netConfFile(this, this.netName));
+		applyIgnoringExcept(net::addDisallowedApplication, BuildConfig.APPLICATION_ID);
+
+		try {
+			Tincd.start(this, this.netName, net.establish().detachFd());
+		} catch (IOException e) {
+			e.printStackTrace();
+		}
+
+		return Service.START_STICKY;
+	}
+
+	@Override
+	public void onDestroy() {
+		try {
+			Tinc.stop(this, this.netName);
+		} catch (IOException e) {
+			e.printStackTrace();
+		}
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/service/VpnInterfaceConfigurator.java b/app/src/main/java/org/pacien/tincapp/service/VpnInterfaceConfigurator.java
new file mode 100644
index 0000000..0bf6ada
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/service/VpnInterfaceConfigurator.java
@@ -0,0 +1,81 @@
+package org.pacien.tincapp.service;
+
+import android.net.VpnService;
+
+import com.annimon.stream.Stream;
+import com.annimon.stream.function.BiFunction;
+import com.annimon.stream.function.Consumer;
+
+import org.apache.commons.configuration2.Configuration;
+import org.apache.commons.configuration2.builder.fluent.Configurations;
+import org.apache.commons.configuration2.ex.ConfigurationException;
+
+import java.io.File;
+
+import static org.pacien.tincapp.util.Function.applyIgnoringExcept;
+
+/**
+ * @author pacien
+ */
+final public class VpnInterfaceConfigurator {
+
+	private VpnInterfaceConfigurator() {
+		// static class
+	}
+
+	static final public String KEY_ADDRESSES = "Address";
+	static final public String KEY_ROUTES = "Route";
+	static final public String KEY_DNS_SERVERS = "DNSServer";
+	static final public String KEY_SEARCH_DOMAINS = "SearchDomain";
+	static final public String KEY_ALLOWED_APPLICATIONS = "AllowApplication";
+	static final public String KEY_DISALLOWED_APPLICATIONS = "DisallowApplication";
+	static final public String KEY_ALLOWED_FAMILIES = "AllowFamily";
+	static final public String KEY_ALLOW_BYPASS = "AllowBypass";
+	static final public String KEY_BLOCKING = "Blocking";
+	static final public String KEY_MTU = "MTU";
+
+	static private Stream<String> getStringStream(Configuration cfg, String key) {
+		return Stream.ofNullable(cfg.getList(String.class, key));
+	}
+
+	static private Stream<Integer> getIntegerStream(Configuration cfg, String key) {
+		return Stream.ofNullable(cfg.getList(Integer.class, key));
+	}
+
+	static private void doIf(Configuration cfg, String key, Consumer<Boolean> func) {
+		if (cfg.getBoolean(key, false)) func.accept(true);
+	}
+
+	static private void doWithInt(Configuration cfg, String key, Consumer<Integer> func) {
+		Stream.ofNullable(cfg.getInteger(key, null)).forEach(func);
+	}
+
+	static private <R> R applyAddressNetmask(BiFunction<String, Integer, R> func, String addrStr) {
+		String[] addrParts = addrStr.split("/", 2);
+		return func.apply(addrParts[0], Integer.parseInt(addrParts[1]));
+	}
+
+	static public VpnService.Builder applyConfiguration(VpnService.Builder net, Configuration cfg) {
+		getStringStream(cfg, KEY_ADDRESSES).forEach(str -> applyAddressNetmask(net::addAddress, str));
+		getStringStream(cfg, KEY_ROUTES).forEach(str -> applyAddressNetmask(net::addRoute, str));
+		getStringStream(cfg, KEY_DNS_SERVERS).forEach(net::addDnsServer);
+		getStringStream(cfg, KEY_SEARCH_DOMAINS).forEach(net::addSearchDomain);
+		getStringStream(cfg, KEY_ALLOWED_APPLICATIONS).forEach(str -> applyIgnoringExcept(net::addAllowedApplication, str));
+		getStringStream(cfg, KEY_DISALLOWED_APPLICATIONS).forEach(str -> applyIgnoringExcept(net::addDisallowedApplication, str));
+		getIntegerStream(cfg, KEY_ALLOWED_FAMILIES).forEach(net::allowFamily);
+		doIf(cfg, KEY_ALLOW_BYPASS, v -> net.allowBypass());
+		doIf(cfg, KEY_BLOCKING, net::setBlocking);
+		doWithInt(cfg, KEY_MTU, net::setMtu);
+
+		return net;
+	}
+
+	static public VpnService.Builder applyConfiguration(VpnService.Builder net, File cfg) {
+		try {
+			return applyConfiguration(net, new Configurations().properties(cfg));
+		} catch (ConfigurationException e) {
+			throw new IllegalArgumentException(e.getMessage());
+		}
+	}
+
+}
diff --git a/app/src/main/java/org/pacien/tincapp/util/Function.java b/app/src/main/java/org/pacien/tincapp/util/Function.java
new file mode 100644
index 0000000..3a6e115
--- /dev/null
+++ b/app/src/main/java/org/pacien/tincapp/util/Function.java
@@ -0,0 +1,28 @@
+package org.pacien.tincapp.util;
+
+import com.annimon.stream.function.FunctionalInterface;
+
+/**
+ * @author pacien
+ */
+final public class Function {
+
+	private Function() {
+		// static class
+	}
+
+	@FunctionalInterface
+	public interface CheckedFunction<T, R> {
+		R apply(T t) throws Exception;
+	}
+
+	static public <T, R> R applyIgnoringExcept(CheckedFunction<T, R> func, T parm) {
+		try {
+			return func.apply(parm);
+		} catch (Exception e) {
+			e.printStackTrace();
+			return null;
+		}
+	}
+
+}
-- 
cgit v1.2.3