fix(engine): break circular dep betwen session and tunnel (#295)
This diff breaks the circular dependency between session and tunnel, by introducing the concept of early session. An early session is a session that is able to fetch the psiphon configuration file _only_ if it's embedded in the binary. This breaks `miniooni --tunnel=psiphon` for users who have access to the OONI backend. They are not the users we are writing this feature for, though, so I think this is reasonable. At the same time, this opens up the possibility of creating a psiphon tunnel when constructing a session, which is the approach I was following in https://github.com/ooni/probe-cli/pull/286. This work is part of https://github.com/ooni/probe/issues/985. Once this diff is in, I can land https://github.com/ooni/probe-cli/pull/286.
This commit is contained in:
parent
8fe4e5410d
commit
a849213b59
|
@ -10,7 +10,7 @@ import (
|
||||||
func main() {
|
func main() {
|
||||||
defer func() {
|
defer func() {
|
||||||
if s := recover(); s != nil {
|
if s := recover(); s != nil {
|
||||||
fmt.Fprintf(os.Stderr, "%s", s)
|
fmt.Fprintf(os.Stderr, "FATAL: %s\n", s)
|
||||||
}
|
}
|
||||||
}()
|
}()
|
||||||
Main()
|
Main()
|
||||||
|
|
|
@ -369,13 +369,12 @@ func (s *Session) MaybeStartTunnel(ctx context.Context, name string) error {
|
||||||
s.logger.Infof("starting '%s' tunnel; please be patient...", name)
|
s.logger.Infof("starting '%s' tunnel; please be patient...", name)
|
||||||
tunnel, err := tunnel.Start(ctx, &tunnel.Config{
|
tunnel, err := tunnel.Start(ctx, &tunnel.Config{
|
||||||
Name: name,
|
Name: name,
|
||||||
Session: s,
|
Session: &sessionTunnelEarlySession{},
|
||||||
TorArgs: s.TorArgs(),
|
TorArgs: s.TorArgs(),
|
||||||
TorBinary: s.TorBinary(),
|
TorBinary: s.TorBinary(),
|
||||||
TunnelDir: s.tunnelDir,
|
TunnelDir: s.tunnelDir,
|
||||||
})
|
})
|
||||||
if err != nil {
|
if err != nil {
|
||||||
s.logger.Warnf("cannot start tunnel: %+v", err)
|
|
||||||
return err
|
return err
|
||||||
}
|
}
|
||||||
// Implementation note: tunnel _may_ be NIL here if name is ""
|
// Implementation note: tunnel _may_ be NIL here if name is ""
|
||||||
|
|
|
@ -2,7 +2,10 @@
|
||||||
|
|
||||||
package engine
|
package engine
|
||||||
|
|
||||||
import "context"
|
import (
|
||||||
|
"context"
|
||||||
|
"errors"
|
||||||
|
)
|
||||||
|
|
||||||
// FetchPsiphonConfig fetches psiphon config from the API.
|
// FetchPsiphonConfig fetches psiphon config from the API.
|
||||||
func (s *Session) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
func (s *Session) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
||||||
|
@ -12,3 +15,12 @@ func (s *Session) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
||||||
}
|
}
|
||||||
return clnt.FetchPsiphonConfig(ctx)
|
return clnt.FetchPsiphonConfig(ctx)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// sessionTunnelEarlySession is the early session that we pass
|
||||||
|
// to tunnel.Start to fetch the Psiphon configuration.
|
||||||
|
type sessionTunnelEarlySession struct{}
|
||||||
|
|
||||||
|
// FetchPsiphonConfig implements tunnel.Session.FetchPsiphonConfig.
|
||||||
|
func (s *sessionTunnelEarlySession) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
||||||
|
return nil, errors.New("no embedded configuration file")
|
||||||
|
}
|
||||||
|
|
|
@ -17,9 +17,13 @@ var psiphonConfigJSONAge []byte
|
||||||
//go:embed psiphon-config.key
|
//go:embed psiphon-config.key
|
||||||
var psiphonConfigSecretKey string
|
var psiphonConfigSecretKey string
|
||||||
|
|
||||||
|
// sessionTunnelEarlySession is the early session that we pass
|
||||||
|
// to tunnel.Start to fetch the Psiphon configuration.
|
||||||
|
type sessionTunnelEarlySession struct{}
|
||||||
|
|
||||||
// FetchPsiphonConfig decrypts psiphonConfigJSONAge using
|
// FetchPsiphonConfig decrypts psiphonConfigJSONAge using
|
||||||
// filippo.io/age _and_ psiphonConfigSecretKey.
|
// filippo.io/age _and_ psiphonConfigSecretKey.
|
||||||
func (s *Session) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
func (s *sessionTunnelEarlySession) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
||||||
key := "AGE-SECRET-KEY-1" + psiphonConfigSecretKey
|
key := "AGE-SECRET-KEY-1" + psiphonConfigSecretKey
|
||||||
identity, err := age.ParseX25519Identity(key)
|
identity, err := age.ParseX25519Identity(key)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
@ -32,3 +36,10 @@ func (s *Session) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
||||||
}
|
}
|
||||||
return ioutil.ReadAll(output)
|
return ioutil.ReadAll(output)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// FetchPsiphonConfig decrypts psiphonConfigJSONAge using
|
||||||
|
// filippo.io/age _and_ psiphonConfigSecretKey.
|
||||||
|
func (s *Session) FetchPsiphonConfig(ctx context.Context) ([]byte, error) {
|
||||||
|
child := &sessionTunnelEarlySession{}
|
||||||
|
return child.FetchPsiphonConfig(ctx)
|
||||||
|
}
|
||||||
|
|
|
@ -17,8 +17,7 @@ type Config struct {
|
||||||
// "tor" and "psiphon" tunnels.
|
// "tor" and "psiphon" tunnels.
|
||||||
Name string
|
Name string
|
||||||
|
|
||||||
// Session is the current measurement session. This
|
// Session is the mandatory measurement session.
|
||||||
// field is mandatory.
|
|
||||||
Session Session
|
Session Session
|
||||||
|
|
||||||
// TorArgs contains the optional arguments that you want us to pass
|
// TorArgs contains the optional arguments that you want us to pass
|
||||||
|
|
Loading…
Reference in New Issue
Block a user