[tor-talk] meek-client debian packages

[iry]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

> is there a official meek-client package for debian available?


meek has not been [packaged in to
Debian](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764007) as a
standalone client because of its increasingly high-coupling with TBB.

Related ticket on tor-trac:
https://trac.torproject.org/projects/tor/ticket/12716

However, yawning said in [Tor ticket
#12716](https://trac.torproject.org/projects/tor/ticket/12716#comment:33
):

> obfs4proxy as packaged in Debian supports acting as a meek client
and has for quite a while.

The implementation of it can be found here:
https://github.com/Yawning/obfs4/commit/611205be681322883a4d73dd00fcb13c
4352fe53

Specific instructions:

1. [add TPO repository for core
Tor](https://www.torproject.org/docs/debian.html.en);
2. [add TPO repository for
obfs4proxy](https://www.torproject.org/docs/debian.html.en) (You only
need this when using obfs4proxy from Debian old stable repository
which is too old to support acting as a meek client);
3. `sudo apt-get update && sudo apt-get install tor obfs4proxy`
4. Then, edit `/etc/tor/torrc` as follows (I am posting the real
bridge info here because the strategy behind `meek` is `collateral
freedom`, unlike the philosophy behind `obfs4` which is `security by
obscurity` ):

    DisableNetwork 0
    UseBridges 1
    ClientTransportPlugin obfs3,obfs4,meek_lite exec /usr/bin/obfs4proxy
    Bridge meek_lite 0.0.2.0:2
B9E7141C594AF25699E0079C1F0146F409495296
url=https://d2cly7j4zqgua7.cloudfront.net/ front=a0.awsstatic.com

Notice that it is `meek_lite`, NOT `meek` because this is a different
implementation, this is `obfs4proxy` acting as `meek` client.

Best Regards,
iry
-----BEGIN PGP SIGNATURE-----
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=gilE
-----END PGP SIGNATURE-----