1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
|
package org.pacien.tincapp.service
import android.app.Service
import android.content.Intent
import android.net.VpnService
import android.os.ParcelFileDescriptor
import android.support.v4.content.LocalBroadcastManager
import java8.util.concurrent.CompletableFuture
import org.apache.commons.configuration2.ex.ConversionException
import org.bouncycastle.openssl.PEMException
import org.pacien.tincapp.BuildConfig
import org.pacien.tincapp.R
import org.pacien.tincapp.commands.Executor
import org.pacien.tincapp.commands.Tinc
import org.pacien.tincapp.commands.Tincd
import org.pacien.tincapp.context.App
import org.pacien.tincapp.context.AppPaths
import org.pacien.tincapp.data.TincConfiguration
import org.pacien.tincapp.data.VpnInterfaceConfiguration
import org.pacien.tincapp.extensions.Java.applyIgnoringException
import org.pacien.tincapp.extensions.Java.defaultMessage
import org.pacien.tincapp.extensions.VpnServiceBuilder.applyCfg
import org.pacien.tincapp.intent.Actions
import org.pacien.tincapp.utils.TincKeyring
import org.slf4j.Logger
import org.slf4j.LoggerFactory
import java.io.FileNotFoundException
/**
* @author pacien
*/
class TincVpnService : VpnService() {
private var logger: Logger? = null
override fun onCreate() {
super.onCreate()
logger = LoggerFactory.getLogger(this.javaClass)
}
override fun onDestroy() {
stopVpn()
super.onDestroy()
}
override fun onStartCommand(intent: Intent, flags: Int, startId: Int): Int {
logger?.info("Intent received: {}", intent.action)
when {
intent.action == Actions.ACTION_CONNECT && intent.scheme == Actions.TINC_SCHEME ->
startVpn(intent.data.schemeSpecificPart, intent.data.fragment)
intent.action == Actions.ACTION_DISCONNECT ->
stopVpn()
else ->
throw IllegalArgumentException("Invalid intent action received.")
}
return Service.START_NOT_STICKY
}
private fun startVpn(netName: String, passphrase: String? = null): Unit = synchronized(this) {
if (netName.isBlank())
return reportError(resources.getString(R.string.message_no_network_name_provided), docTopic = "intent-api")
if (TincKeyring.needsPassphrase(netName) && passphrase == null)
return reportError(resources.getString(R.string.message_passphrase_required))
if (!AppPaths.storageAvailable())
return reportError(resources.getString(R.string.message_storage_unavailable))
if (!AppPaths.confDir(netName).exists())
return reportError(resources.getString(R.string.message_no_configuration_for_network_format, netName), docTopic = "configuration")
logger?.info("Starting tinc daemon for network \"$netName\".")
if (isConnected()) stopVpn()
val interfaceCfg = try {
VpnInterfaceConfiguration.fromIfaceConfiguration(AppPaths.existing(AppPaths.netConfFile(netName)))
} catch (e: FileNotFoundException) {
return reportError(resources.getString(R.string.message_network_config_not_found_format, e.defaultMessage()), e, "configuration")
} catch (e: ConversionException) {
return reportError(resources.getString(R.string.message_network_config_invalid_format, e.defaultMessage()), e, "network-interface")
} catch (e: Exception) {
return reportError(resources.getString(R.string.message_could_not_read_network_configuration_format, e.defaultMessage()), e)
}
val deviceFd = try {
Builder().setSession(netName)
.applyCfg(interfaceCfg)
.also { applyIgnoringException(it::addDisallowedApplication, BuildConfig.APPLICATION_ID) }
.establish()!!
} catch (e: IllegalArgumentException) {
return reportError(resources.getString(R.string.message_network_config_invalid_format, e.defaultMessage()), e, "network-interface")
} catch (e: NullPointerException) {
return reportError(resources.getString(R.string.message_could_not_bind_iface), e)
} catch (e: Exception) {
return reportError(resources.getString(R.string.message_could_not_configure_iface, e.defaultMessage()), e)
}
val privateKeys = try {
TincConfiguration.fromTincConfiguration(AppPaths.existing(AppPaths.tincConfFile(netName))).let { tincCfg ->
Pair(
TincKeyring.openPrivateKey(tincCfg.ed25519PrivateKeyFile ?: AppPaths.defaultEd25519PrivateKeyFile(netName), passphrase),
TincKeyring.openPrivateKey(tincCfg.privateKeyFile ?: AppPaths.defaultRsaPrivateKeyFile(netName), passphrase))
}
} catch (e: FileNotFoundException) {
Pair(null, null)
} catch (e: PEMException) {
return reportError(resources.getString(R.string.message_could_not_decrypt_private_keys_format, e.message))
} catch (e: Exception) {
return reportError(resources.getString(R.string.message_could_not_read_private_key_format, e.defaultMessage()), e)
}
val daemon = Tincd.start(netName, deviceFd.fd, privateKeys.first?.fd, privateKeys.second?.fd)
setState(netName, interfaceCfg, deviceFd, daemon)
waitForDaemonStartup().whenComplete { _, exception ->
deviceFd.close()
privateKeys.first?.close()
privateKeys.second?.close()
if (exception != null) {
reportError(resources.getString(R.string.message_daemon_exited, exception.cause!!.defaultMessage()), exception)
} else {
logger?.info("tinc daemon started.")
broadcastEvent(Actions.EVENT_CONNECTED)
}
}
}
private fun stopVpn(): Unit = synchronized(this) {
logger?.info("Stopping any running tinc daemon.")
netName?.let {
Tinc.stop(it).thenRun {
logger?.info("All tinc daemons stopped.")
broadcastEvent(Actions.EVENT_DISCONNECTED)
setState(null, null, null, null)
}
}
}
private fun reportError(msg: String, e: Throwable? = null, docTopic: String? = null) {
if (e != null)
logger?.error(msg, e)
else
logger?.error(msg)
broadcastEvent(Actions.EVENT_ABORTED)
App.alert(R.string.title_unable_to_start_tinc, msg,
if (docTopic != null) resources.getString(R.string.app_doc_url_format, docTopic) else null)
}
private fun broadcastEvent(event: String) {
LocalBroadcastManager.getInstance(this).sendBroadcast(Intent(event))
}
private fun waitForDaemonStartup() =
Executor
.runAsyncTask { Thread.sleep(SETUP_DELAY) }
.thenCompose { if (daemon!!.isDone) daemon!! else Executor.runAsyncTask { Unit } }
companion object {
private const val SETUP_DELAY = 500L // ms
private var netName: String? = null
private var interfaceCfg: VpnInterfaceConfiguration? = null
private var fd: ParcelFileDescriptor? = null
private var daemon: CompletableFuture<Unit>? = null
private fun setState(netName: String?, interfaceCfg: VpnInterfaceConfiguration?,
fd: ParcelFileDescriptor?, daemon: CompletableFuture<Unit>?) {
TincVpnService.netName = netName
TincVpnService.interfaceCfg = interfaceCfg
TincVpnService.fd = fd
TincVpnService.daemon = daemon
}
fun getCurrentNetName() = netName
fun getCurrentInterfaceCfg() = interfaceCfg
fun isConnected() = !(daemon?.isDone ?: true)
fun connect(netName: String, passphrase: String? = null) {
App.getContext().startService(
Intent(App.getContext(), TincVpnService::class.java)
.setAction(Actions.ACTION_CONNECT)
.setData(Actions.buildNetworkUri(netName, passphrase)))
}
fun disconnect() {
App.getContext().startService(
Intent(App.getContext(), TincVpnService::class.java)
.setAction(Actions.ACTION_DISCONNECT))
}
}
}
|