tor-android/src/org/torproject/android/vpn/OrbotVpnService.java

/*
 * Copyright (C) 2011 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.torproject.android.vpn;

import java.net.InetAddress;
import java.util.ArrayList;
import java.util.Locale;

import org.sufficientlysecure.rootcommands.Shell;
import org.sufficientlysecure.rootcommands.command.SimpleCommand;
import org.torproject.android.OrbotApp;
import org.torproject.android.service.TorServiceConstants;
import org.torproject.android.service.TorServiceUtils;
import org.torproject.android.settings.AppManager;
import org.torproject.android.settings.TorifiedApp;

import android.annotation.TargetApi;
import android.app.PendingIntent;
import android.content.Intent;
import android.content.SharedPreferences;
import android.content.pm.PackageManager.NameNotFoundException;
import android.net.VpnService;
import android.os.Build;
import android.os.Handler;
import android.os.Message;
import android.os.ParcelFileDescriptor;
import android.util.Log;
import android.widget.Toast;

import com.runjva.sourceforge.jsocks.protocol.ProxyServer;
import com.runjva.sourceforge.jsocks.server.ServerAuthenticatorNone;

@TargetApi(Build.VERSION_CODES.ICE_CREAM_SANDWICH)

public class OrbotVpnService extends VpnService implements Handler.Callback {
    private static final String TAG = "OrbotVpnService";

    private PendingIntent mConfigureIntent;

    private Handler mHandler;
    private Thread mThreadVPN;

    private String mSessionName = "OrbotVPN";
    private ParcelFileDescriptor mInterface;

    public static int mSocksProxyPort = -1;
    private ProxyServer mSocksProxyServer;
    
    private final static int VPN_MTU = 1500;
    
    private final static boolean mIsLollipop = Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP;
    
    private boolean isRestart = false;
    
    @Override
    public int onStartCommand(Intent intent, int flags, int startId) {

    	if (intent != null)
    	{
	    	String action = intent.getAction();
	    	
	    	if (action.equals("start"))
	    	{
		
		        // Stop the previous session by interrupting the thread.
		        if (mThreadVPN == null || (!mThreadVPN.isAlive()))
		        {
		        	Log.d(TAG,"starting OrbotVPNService service!");
		        	
			    	mSocksProxyPort = intent.getIntExtra("proxyPort", 0);
			    	
			        // The handler is only used to show messages.
			        if (mHandler == null) {
			            mHandler = new Handler(this);
			        }
		        	
		        	if (!mIsLollipop)
		        	{
		        		startSocksBypass();
		        	}
		        	
		            setupTun2Socks();               
		        }
	    	}
	    	else if (action.equals("stop"))
	    	{
	    		Log.d(TAG,"stop OrbotVPNService service!");
	    		
	    		stopVPN();    		
	    		if (mHandler != null)
	    			mHandler.postDelayed(new Runnable () { public void run () { stopSelf(); }}, 1000);
	    	}
	    	else if (action.equals("refresh"))
	    	{
	    		Log.d(TAG,"refresh OrbotVPNService service!");
	    		
	    		if (!mIsLollipop)
	    		  startSocksBypass();
	    		
	    		if (!isRestart)
	    			setupTun2Socks();
	    	}
    	}
     
        
        return START_STICKY;
    }
  
    private void startSocksBypass()
    {
       
    	new Thread ()
    	{
    		
    		public void run ()
    		{
		    	if (mSocksProxyServer != null)
		    	{
		    		stopSocksBypass ();
		    	}
		    	
		    	try
		    	{
			        mSocksProxyServer = new ProxyServer(new ServerAuthenticatorNone(null, null));
			        ProxyServer.setVpnService(OrbotVpnService.this);
			        mSocksProxyServer.start(mSocksProxyPort, 5, InetAddress.getLocalHost());
			        
		    	}
		    	catch (Exception e)
		    	{
		    		Log.e(TAG,"error getting host",e);
		    	}
    		}
    	}.start();
       
    }

    private synchronized void stopSocksBypass ()
    {

        if (mSocksProxyServer != null){
            mSocksProxyServer.stop();
            mSocksProxyServer = null;
        }
        
        
    }
    
    @Override
	public void onCreate() {
		super.onCreate();
		
		System.loadLibrary("tun2socks");
		

		// Set the locale to English (or probably any other language that^M
        // uses Hindu-Arabic (aka Latin) numerals).^M
        // We have found that VpnService.Builder does something locale-dependent^M
        // internally that causes errors when the locale uses its own numerals^M
        // (i.e., Farsi and Arabic).^M
		Locale.setDefault(new Locale("en"));
		
	}


	@Override
    public void onDestroy() {
    	stopVPN();
    }
    
    private void stopVPN ()
    {
    	if (mIsLollipop)
    		stopSocksBypass ();
        
        if (mInterface != null){
            try
            {
            	Log.d(TAG,"closing interface, destroying VPN interface");
                
        		mInterface.close();
        		mInterface = null;
            	
            }
            catch (Exception e)
            {
                Log.d(TAG,"error stopping tun2socks",e);
            }
            catch (Error e)
            {
                Log.d(TAG,"error stopping tun2socks",e);
            }   
        }
        
        Tun2Socks.Stop();
        
        mThreadVPN = null;
        

    }

    @Override
    public boolean handleMessage(Message message) {
        if (message != null) {
            Toast.makeText(this, message.what, Toast.LENGTH_SHORT).show();
        }
        return true;
    }

  
    private synchronized void setupTun2Socks()  {

    	
        if (mInterface != null) //stop tun2socks now to give it time to clean up
        {
        	isRestart = true;
        	Tun2Socks.Stop();
        }
        
    	mThreadVPN = new Thread ()
    	{
    		
    		public void run ()
    		{
	    		try
		        {
	    			
	    			if (isRestart)
	    			{
	    				Log.d(TAG,"is a restart... let's wait for a few seconds");
			        	Thread.sleep(3000);
	    			}
	    			
		    		final String vpnName = "OrbotVPN";
		    		final String localhost = "127.0.0.1";

		    	//	final String virtualGateway = "10.0.0.1";
		    		final String virtualIP = "192.168.10.1";
		    		final String virtualNetMask = "255.255.255.0";
		    		final String dummyDNS = "8.8.8.8"; //this is intercepted by the tun2socks library, but we must put in a valid DNS to start
		    		final String defaultRoute = "0.0.0.0";
		    		
		    		final String localSocks = localhost + ':'
		    		        + String.valueOf(TorServiceConstants.SOCKS_PROXY_PORT_DEFAULT);
		    		
		    		final String localDNS = localhost + ':' + String.valueOf(TorServiceConstants.TOR_DNS_PORT_DEFAULT);
		        	final boolean localDnsTransparentProxy = true;
		        	
			        Builder builder = new Builder();
			        
			        builder.setMtu(VPN_MTU);
			        builder.addAddress(virtualIP,24);
			        builder.setSession(vpnName);			        
			        
			        //route all traffic through VPN (we might offer country specific exclude lists in the future)
			        builder.addRoute(defaultRoute,0);	
			        
			        builder.addDnsServer(dummyDNS);
			        builder.addRoute(dummyDNS,32);
			        
			        
			        if (mIsLollipop)			        
			        	doLollipopAppRouting(builder);			        

			         // Create a new interface using the builder and save the parameters.
			        ParcelFileDescriptor newInterface = builder.setSession(mSessionName)
			                .setConfigureIntent(mConfigureIntent)
			                .establish();
		
			        if (mInterface != null)
			        {
			        	Log.d(TAG,"Stopping existing VPN interface");
			        	mInterface.close();
			        	mInterface = null;
			        }

		        	mInterface = newInterface;
			        
		        	Tun2Socks.Start(mInterface, VPN_MTU, virtualIP, virtualNetMask, localSocks , localDNS , localDnsTransparentProxy);
		        	
		        	isRestart = false;
		        	
		        }
		        catch (Exception e)
		        {
		        	Log.d(TAG,"tun2Socks has stopped",e);
		        }
	    	}
    		
    	};
    	
    	mThreadVPN.start();
    }
    
    
    @TargetApi(Build.VERSION_CODES.LOLLIPOP)
	private void doLollipopAppRouting (Builder builder) throws NameNotFoundException
    {    
    	   
        ArrayList<TorifiedApp> apps = AppManager.getApps(this, TorServiceUtils.getSharedPrefs(getApplicationContext()));
    
        boolean appAllowed = false;
        
        for (TorifiedApp app : apps)
        {
        	if (app.isTorified())
        	{
        		builder.addAllowedApplication(app.getUsername());
        		appAllowed = true;
        	}
        	
        }
    
        if (!appAllowed)
        	builder.addDisallowedApplication(getPackageName());
    
    }
    
    @Override
    public void onRevoke() {
    
    	if (!isRestart)
    	{
	    	SharedPreferences prefs = TorServiceUtils.getSharedPrefs(getApplicationContext()); 
	        prefs.edit().putBoolean("pref_vpn", false).commit();      
	    	stopVPN();
	    	
    	}
    	
    	isRestart = false;
    	
        super.onRevoke();
    }
    
}