[tbb-bugs] #30318 [Applications/Tor Browser]: Integrate snowflake into mobile Tor Browser alpha

[Tor Bug Tracker & Wiki]

#30318: Integrate snowflake into mobile Tor Browser alpha
-----------------------------------------------+---------------------------
 Reporter:  gk                                 |          Owner:  tbb-team
     Type:  enhancement                        |         Status:
                                               |  needs_review
 Priority:  Medium                             |      Milestone:
Component:  Applications/Tor Browser           |        Version:
 Severity:  Normal                             |     Resolution:
 Keywords:  tbb-mobile, TorBrowserTeam202005R  |  Actual Points:
Parent ID:  #19001                             |         Points:
 Reviewer:                                     |        Sponsor:
                                               |  Sponsor28-must
-----------------------------------------------+---------------------------
Changes (by gk):

 * status:  new => needs_review
 * cc: cohosh (added)
 * keywords:  tbb-mobile => tbb-mobile, TorBrowserTeam202005R


Comment:

 Replying to [comment:2 gk]:
 > `bug_30318` (https://gitweb.torproject.org/user/gk/tor-
 browser.git/commit/?h=bug_30318&id=4516c5951e84d5e6f432056ef278c1e2486b2f9b)
 has an untested patch for the browser parts. I plan to write the other
 ones and test those over the weekened. Shouldn't be too hard (famous last
 words).

 That patch is still good to go, I think. The other patches are:

 1) for `tor-andrdoid-service` (https://gitweb.torproject.org/user/gk/tor-
 android-
 service.git/commit/?h=bug_30318&id=ecc251d0a73f7e2034a271efd28036a0108b8688)

 2) for `tor-onion-proxy-library` see attachment.

 Testing is a bit tricky right now, as #28672 is not merged/ready yet. I
 uploaded a test build for armv7 so others can check whether the result
 works for them:

 https://people.torproject.org/~gk/testbuilds/tor-browser-testbuild-
 android-armv7-multi-qa-30318.apk
 https://people.torproject.org/~gk/testbuilds/tor-browser-testbuild-
 android-armv7-multi-qa-30318.apk.asc

 It works for me at least most of the time, I think. snowflake can get
 selected like the other built-in bridges in the UI. Sometimes, though, I
 get the following error, which makes my browser with snowflake stuck:
 {{{
 - NOTICE: Bootstrapped 1% (conn_pt): Connecting to pluggable transport
 - NOTICE: Bootstrapped 2% (conn_done_pt): Connected to pluggable transport
 - NOTICE: Bootstrapped 10% (conn_done): Connected to a relay
 - NOTICE: Bootstrapped 14% (handshake): Handshaking with a relay
 - NOTICE: Bootstrapped 15% (handshake_done): Handshake with a relay done
 - NOTICE: Bootstrapped 20% (onehop_create): Establishing an encrypted
 directory connection
 - NOTICE: Bootstrapped 25% (requesting_status): Asking for networkstatus
 consensus  - Circuit (1) BUILT: 2B280B23E1107BB62ABFC40DDCC8824814F80A72
 - NOTICE: new bridge descriptor 'flakey' (fresh):
 $2B280B23E1107BB62ABFC40DDCC8824814F80A72~flakey at 0.0.3.0
 - NOTICE: Bootstrapped 75% (enough_dirinfo): Loaded enough directory info
 to build circuits
 - NOTICE: Bootstrapped 76% (ap_conn_pt): Connecting to pluggable transport
 to build circuits
 - NOTICE: Bootstrapped 77% (ap_conn_done_pt): Connected to pluggable
 transport to build circuits
 - Circuit (1) CLOSED: flakey
 - NOTICE: Bootstrapped 85% (ap_conn_done): Connected to a relay to build
 circuits
 - WARN: Problem bootstrapping. Stuck at 85% (ap_conn_done): Connected to a
 relay to build circuits. (DONE; DONE; count 1; recommendation warn; host
 2B280B23E1107BB62ABFC40DDCC8824814F80A72 at 0.0.3.0:1)
 - WARN: 1 connections have failed:
 - WARN:  1 connections died in state handshaking (TLS) with SSL state
 SSLv3/TLS write client hello in HANDSHAKE
 - NOTICE: Delaying directory fetches: No running bridges
 }}}
 I don't have good repro steps but I've never seen such a problem with
 other pluggable transports. Sometimes when I don't get
 {{{
 - Circuit (1) CLOSED: flakey
 }}}
 I still get the TLS handshaking issue as above but the bootstrapping
 succeeds and I can use Tor Browser. So, it might not actually be a
 snowflake bug but something else. Hard to say.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30318#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online