feat: salt prefix support

cordova-plugin-outline/android/aidl/org/outline/shadowsocks/ShadowsocksConfig.aidl

@@ -19,4 +19,5 @@ parcelable ShadowsocksConfig {
   int port;
   String password;
   String method;
+  @nullable byte[] prefix;
 }

cordova-plugin-outline/android/java/org/outline/vpn/VpnTunnel.java

@@ -27,6 +27,8 @@
 import java.util.logging.Logger;
 import tun2socks.OutlineTunnel;
 import tun2socks.Tun2socks;
+import org.outline.shadowsocks.ShadowsocksConfig;
+
 
 /**
  * Manages the life-cycle of the system VPN, and of the tunnel that processes its traffic.
@@ -120,20 +122,16 @@ public synchronized void tearDownVpn() {
   /**
    * Connects a tunnel between a Shadowsocks proxy server and the VPN TUN interface.
    *
-   * @param host is  IP address of the SOCKS proxy server.
-   * @param port is the port of the SOCKS proxy server.
-   * @param password is the password of the Shadowsocks proxy.
-   * @param cipher is the encryption cipher used by the Shadowsocks proxy.
+   * @param client provides access to the Shadowsocks proxy.
    * @throws IllegalArgumentException if |socksServerAddress| is null.
    * @throws IllegalStateException if the VPN has not been established, or the tunnel is already
    *     connected.
    * @throws Exception when the tunnel fails to connect.
    */
-  public synchronized void connectTunnel(final String host, int port, final String password,
-      final String cipher, boolean isUdpEnabled) throws Exception {
+  public synchronized void connectTunnel(final shadowsocks.Client client, boolean isUdpEnabled) throws Exception {
     LOG.info("Connecting the tunnel.");
-    if (host == null || port <= 0 || port > 65535 || password == null || cipher == null) {
-      throw new IllegalArgumentException("Must provide valid Shadowsocks proxy parameters.");
+    if (client == null) {
+      throw new IllegalArgumentException("Must provide a Shadowsocks client.");
     }
     if (tunFd == null) {
       throw new IllegalStateException("Must establish the VPN before connecting the tunnel.");
@@ -143,8 +141,7 @@ public synchronized void connectTunnel(final String host, int port, final String
     }
 
     LOG.fine("Starting tun2socks...");
-    tunnel = Tun2socks.connectShadowsocksTunnel(
-        tunFd.getFd(), host, port, password, cipher, isUdpEnabled);
+    tunnel = Tun2socks.connectShadowsocksTunnel(tunFd.getFd(), client, isUdpEnabled);
   }
 
   /* Disconnects a tunnel created by a previous call to |connectTunnel|. */

cordova-plugin-outline/android/java/org/outline/vpn/VpnTunnelService.java

@@ -173,6 +173,16 @@ public static TunnelConfig makeTunnelConfig(final String tunnelId, final JSONObj
     } catch (JSONException e) {
       LOG.fine("Tunnel config missing name");
     }
+    try {
+      String prefix = config.getString("prefix");
+      LOG.fine("Activating experimental prefix support");
+      tunnelConfig.proxy.prefix = new byte[prefix.length()];
+      for (int i = 0; i < prefix.length(); i++) {
+        tunnelConfig.proxy.prefix[i] = (byte)prefix.charAt(i);
+      }
+    } catch (JSONException e) {
+      // pass
+    }
     return tunnelConfig;
   }
 
@@ -201,13 +211,26 @@ private synchronized OutlinePlugin.ErrorCode startTunnel(
       }
     }
 
-    final ShadowsocksConfig proxyConfig = config.proxy;
+    final shadowsocks.Config configCopy = new shadowsocks.Config();
+    configCopy.setHost(config.proxy.host);
+    configCopy.setPort(config.proxy.port);
+    configCopy.setCipherName(config.proxy.method);
+    configCopy.setPassword(config.proxy.password);
+    configCopy.setPrefix(config.proxy.prefix);
+    final shadowsocks.Client client;
+    try {
+      client = new shadowsocks.Client(configCopy);
+    } catch (Exception e) {
+      tearDownActiveTunnel();
+      return OutlinePlugin.ErrorCode.ILLEGAL_SERVER_CONFIGURATION;
+    }
+
     OutlinePlugin.ErrorCode errorCode = OutlinePlugin.ErrorCode.NO_ERROR;
     if (!isAutoStart) {
       try {
         // Do not perform connectivity checks when connecting on startup. We should avoid failing
         // the connection due to a network error, as network may not be ready.
-        errorCode = checkServerConnectivity(proxyConfig);
+        errorCode = checkServerConnectivity(client);
         if (!(errorCode == OutlinePlugin.ErrorCode.NO_ERROR
                 || errorCode == OutlinePlugin.ErrorCode.UDP_RELAY_NOT_ENABLED)) {
           tearDownActiveTunnel();
@@ -233,8 +256,7 @@ private synchronized OutlinePlugin.ErrorCode startTunnel(
     final boolean remoteUdpForwardingEnabled =
         isAutoStart ? tunnelStore.isUdpSupported() : errorCode == OutlinePlugin.ErrorCode.NO_ERROR;
     try {
-      vpnTunnel.connectTunnel(proxyConfig.host, proxyConfig.port, proxyConfig.password,
-          proxyConfig.method, remoteUdpForwardingEnabled);
+      vpnTunnel.connectTunnel(client, remoteUdpForwardingEnabled);
     } catch (Exception e) {
       LOG.log(Level.SEVERE, "Failed to connect the tunnel", e);
       tearDownActiveTunnel();
@@ -286,10 +308,9 @@ private void stopVpnTunnel() {
 
   // Shadowsocks
 
-  private OutlinePlugin.ErrorCode checkServerConnectivity(final ShadowsocksConfig config) {
+  private OutlinePlugin.ErrorCode checkServerConnectivity(final shadowsocks.Client client) {
     try {
-      long errorCode = shadowsocks.Shadowsocks.checkConnectivity(
-          config.host, config.port, config.password, config.method);
+      long errorCode = Shadowsocks.checkConnectivity(client);
       OutlinePlugin.ErrorCode result = OutlinePlugin.ErrorCode.values()[(int) errorCode];
       LOG.info(String.format(Locale.ROOT, "Go connectivity check result: %s", result.name()));
       return result;
@@ -429,6 +450,15 @@ private void storeActiveTunnel(final TunnelConfig config, boolean isUdpSupported
       proxyConfig.put("port", config.proxy.port);
       proxyConfig.put("password", config.proxy.password);
       proxyConfig.put("method", config.proxy.method);
+
+      if (config.proxy.prefix != null) {
+        char[] chars = new char[config.proxy.prefix.length];
+        for (int i = 0; i < config.proxy.prefix.length; i++) {
+          chars[i] = (char)(config.proxy.prefix[i] & 0xFF);
+        }
+        proxyConfig.put("prefix", new String(chars));
+      }
+
       tunnel.put(TUNNEL_ID_KEY, config.id).put(TUNNEL_CONFIG_KEY, proxyConfig);
       tunnelStore.save(tunnel);
     } catch (JSONException e) {

src/electron/go_vpn_tunnel.ts

@@ -104,6 +104,7 @@ export class GoVpnTunnel implements VpnTunnel {
     console.log(`UDP support: ${this.isUdpEnabled}`);
     await this.tun2socks.start(this.isUdpEnabled);
 
+    console.log('starting routing daemon');
     await this.routing.start();
   }
 
@@ -225,7 +226,8 @@ class GoTun2socks {
     //   -tunName outline-tap0 -tunDNS 1.1.1.1,9.9.9.9 \
     //   -tunAddr 10.0.85.2 -tunGw 10.0.85.1 -tunMask 255.255.255.0 \
     //   -proxyHost 127.0.0.1 -proxyPort 1080 -proxyPassword mypassword \
-    //   -proxyCipher chacha20-ietf-poly1035 [-dnsFallback] [-checkConnectivity]
+    //   -proxyCipher chacha20-ietf-poly1035
+    //   [-dnsFallback] [-checkConnectivity] [-proxyPrefix]
     const args: string[] = [];
     args.push('-tunName', TUN2SOCKS_TAP_DEVICE_NAME);
     args.push('-tunAddr', TUN2SOCKS_TAP_DEVICE_IP);
@@ -236,6 +238,7 @@ class GoTun2socks {
     args.push('-proxyPort', `${this.config.port}`);
     args.push('-proxyPassword', this.config.password || '');
     args.push('-proxyCipher', this.config.method || '');
+    args.push('-proxyPrefix', encodeURI(this.config.prefix || ''));
     args.push('-logLevel', this.process.isDebugModeEnabled ? 'debug' : 'info');
     if (!isUdpEnabled) {
       args.push('-dnsFallback');
@@ -287,6 +290,7 @@ async function checkConnectivity(config: ShadowsocksSessionConfig) {
   args.push('-proxyPort', `${config.port}`);
   args.push('-proxyPassword', config.password || '');
   args.push('-proxyCipher', config.method || '');
+  args.push('-proxyPrefix', encodeURI(config.prefix || ''));
   // Checks connectivity and exits with an error code as defined in `errors.ErrorCode`
   // -tun* and -dnsFallback options have no effect on this mode.
   args.push('-checkConnectivity');
@@ -296,7 +300,7 @@ async function checkConnectivity(config: ShadowsocksSessionConfig) {
     await exec(pathToEmbeddedBinary('outline-go-tun2socks', 'tun2socks'), args);
   } catch (e) {
     console.error(`connectivity check failed: ${e}`);
-    const code = e.status;
+    const code = e.code;
     if (code === errors.ErrorCode.UDP_RELAY_NOT_ENABLED) {
       // Don't treat lack of UDP support as an error, relay to the caller.
       return false;

src/electron/routing_service.ts

@@ -132,7 +132,8 @@ export class RoutingDaemon {
         );
       }));
 
-      const initialErrorHandler = () => {
+      const initialErrorHandler = (err: Error) => {
+        console.error('Routing daemon socket setup failed', err);
         this.socket = null;
         reject(new SystemConfigurationException('routing daemon is not running'));
       };

src/www/app/outline_server_repository/access_key_serialization.ts

@@ -29,6 +29,7 @@ export function staticKeyToShadowsocksSessionConfig(staticKey: string): Shadowso
       port: config.port.data,
       method: config.method.data,
       password: config.password.data,
+      prefix: config.extra['prefix'],
     };
   } catch (error) {
     throw new errors.ServerAccessKeyInvalid(error.message || 'Failed to parse static access key.');
@@ -38,19 +39,21 @@ export function staticKeyToShadowsocksSessionConfig(staticKey: string): Shadowso
 function parseShadowsocksSessionConfigJson(maybeJsonText: string): ShadowsocksSessionConfig | null {
   let sessionConfig;
   try {
-    const {method, password, server: host, server_port: port} = JSON.parse(maybeJsonText);
+    const {method, password, server: host, server_port: port, extra} = JSON.parse(maybeJsonText);
 
     sessionConfig = {
       method,
       password,
       host,
       port,
+      prefix: extra['prefix'],
     };
   } catch (_) {
     // It's not JSON, so return null.
     return null;
   }
 
+  // These are the mandatory keys.
   for (const key of ['method', 'password', 'host', 'port']) {
     if (sessionConfig && !sessionConfig[key]) {
       throw new errors.ServerAccessKeyInvalid(

src/www/app/outline_server_repository/index.ts

@@ -32,7 +32,13 @@ function staticKeysMatch(a: string, b: string): boolean {
   try {
     const l = staticKeyToShadowsocksSessionConfig(a);
     const r = staticKeyToShadowsocksSessionConfig(b);
-    return l.host === r.host && l.port === r.port && l.password === r.password && l.method === r.method;
+    return (
+      l.host === r.host &&
+      l.port === r.port &&
+      l.password === r.password &&
+      l.method === r.method &&
+      l.prefix == r.prefix
+    );
   } catch (e) {
     console.debug(`failed to parse access key for comparison`);
   }

src/www/app/tunnel.ts

@@ -17,6 +17,7 @@ export interface ShadowsocksSessionConfig {
   port?: number;
   password?: string;
   method?: string;
+  prefix?: string;
 }
 
 export const enum TunnelStatus {