diff options
| -rw-r--r-- | CHANGELOG.rst | 731 | ||||
| -rw-r--r-- | HISTORY.rst | 789 | ||||
| -rw-r--r-- | changes/feature_support-arch-nobody | 1 | ||||
| -rw-r--r-- | relnotes.txt | 16 | ||||
| -rw-r--r-- | src/leap/bitmask/backend/backend.py | 43 | ||||
| -rw-r--r-- | src/leap/bitmask/backend/backend_proxy.py | 25 | ||||
| -rw-r--r-- | src/leap/bitmask/backend/signaler.py | 25 | ||||
| -rw-r--r-- | src/leap/bitmask/backend/signaler_qt.py | 39 | ||||
| -rw-r--r-- | src/leap/bitmask/backend/utils.py | 54 | ||||
| -rw-r--r-- | src/leap/bitmask/backend_app.py | 4 | ||||
| -rw-r--r-- | src/leap/bitmask/config/flags.py | 3 |
11 files changed, 956 insertions, 774 deletions
diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 796e5f84..c46ff20d 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -1,22 +1,33 @@ .. :changelog:: -History -------- +Changelog +--------- -2015 -==== +0.8.1 February 25 ++++++++++++++++++ -0.8.0 January xx -- "Charlie and the code refactory" +Features +~~~~~~~~ +- `#6646 <https://leap.se/code/issues/6658>`_: Gracefully fall back to ZMQ ipc sockets with restricted access if CurveZMQ is not available. +- `#6717 <https://leap.se/code/issues/6717>`_: Split changes log into changelog and history. + +Bugfixes +~~~~~~~~ +- `#6654 <https://leap.se/code/issues/6654>`_: Regression fix, login attempt is made against previously selected provider. +- `#6058 <https://leap.se/code/issues/6058>`_: Support 'nobody' (used on Arch) as well as 'nogroup' as group names. + + +0.8.0 January 04 -- "Charlie and the code refactory" ++++++++++++++++++++++++++++++++++++++++++++++++++++ Features --------- +~~~~~~~~ - #5873: Allow frontend and backend to be run separately. - Refactor login widgets/logic. - Improved changelog :). Bugfixes --------- +~~~~~~~~ - #6058: Support 'nobody' (used on Arch) as well as 'nogroup' as group names. - #6123: Forward the right environment data to subprocess call. - #6150: Do not allow Bitmask to start if there is no polkit agent running. @@ -29,8 +40,6 @@ Bugfixes - Make pkg/tuf/release.py handle removals in the repo. - Reduce the wait for running threads timeout on quit. -2014 -==== 0.7.0 December 12 -- the "One window to rule them all, and in the darkness bind them." release: +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @@ -66,707 +75,5 @@ Bugfixes - Allow the server to set a custom --fragment openvpn option (#5933) - Add Calyx.net as pinned provider. Closes #6518. -0.6.1 August 15 -- the "knock knock knocking on beta's door" release: -+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ - -- Add checks to ensure that the backend is alive or notify the - user. Related to #5873. -- Stop the backend if the frontend process does not exist any more and - backend is not a daemon. Related to #5873. -- Add autostart on Linux. Closes #4989. -- Pressing ESC on 'install helper files' defaults to No. Closes #5819. -- Replace twisted thread with QThread and get pastebin send - working. Closes #5949. -- Wait until EIP is up to autologin. Closes #5939 -- Fix the handling of vpn launcher errors in the UI. Closes: #5955 -- Fix logger window blocking the bitmask quit(). -- Set the standalone value for BaseConfig according to the global - flags. -- Improve Hide and Show Window behavior on Ubuntu. Fixes #5511. -- Use smaller height on the window so it fits better on smaller - resolutions. Closes #5722. -- Disable daemon mode when we run the backend so we can spawn child - processes on it. -- Restrict access to the zmq certificates folder. -- Stop the services if the selected provider is changed. Related to - #4704. Closes #5912, #5554. -- Minor adjustments to the layout of UI elements. Fixes #5514, #5515, - #5510. -- Moved provider selection dropdown menu to be at the top of the main - windowUse same user/password restrictions as in the webapp. Closes - #5894. - -0.6.0 July 18 -- the "nothing to see here" release: -+++++++++++++++++++++++++++++++++++++++++++++++++++ - -- Initial sync message is confusing. Closes #5875. -- Use preferred provider on first run. Closes #5813. -- Add TUF init repository and release tools. Closes #5864. -- Add support for fingerprint-gui's polkit agent. Closes #5880. -- Reroute DNS packets instead of blocking them, eliminating need to - muck around with resolv.conf. Closes #4633, #5655, #5738, #4823 -- Use inline decrypting for initial soledad syncrhonization, to wait - for secrets. -- Add the ability to create an osx bundle with py2app. Closes #5845. -- Split frontend/backend in different files. Closes #5719. -- Implement ZMQ based messaging system. Closes #5733. -- Launch the backend in a different process than the app. Closes - #5734. - -0.5.3 June 27 -- the "encrypt ALL THE THINGS" release: -++++++++++++++++++++++++++++++++++++++++++++++++++++++ - -- Disable EIP if the helper files were not installed. Closes #5818. -- Install helpers to /usr/local for bundle. Closes #5741. -- Improve how pinned providers are handled by hardcoding it instead of - expecting them to be in the config. Closes #4733. -- Remove deprecated policy files. Closes #5651. -- Install helper files only if standalone=True. Related to #5625 -- Use installer helper from within bundle path. Related to #5634 -- Pin Riseup as a provider. Closes #5783. -- Update the bundled binaries to their path if their sha256 is not - correct. Closes #5759. -- Use a dict instead an object to ease later serialization of - ProviderConfig. - -0.5.2 June 6 -- the "are we there yet" release: -+++++++++++++++++++++++++++++++++++++++++++++++ - -- Unblock local multicast IPs from linux firewall, to allow SSDP and - Bonjour/mDNS to work. -- Add support for gnome-shell polkit agent. Closes #4144, #4218. -- Update username regex to support the same as webapp. Closes #5965. -- Wrong error message for username too short. Fixes #5697. -- Cleanup and refactor username/password validators. -- Fix EIP autostart failing. Closes #5721. -- Block ipv6 traffic for the moment. Closes #5693 -- Fix bug with ipv6 blocking that caused block to not get removed from - firewall when Bitmask quit. -- Bring firewall down when switching EIP off. Closes #5687 -- Add OPENVPN_BIN_PATH for OSX so that EIP starts properly. -- Allow usernames to end in a digit. -- Improve signal handling in the mainwindow and wizard. -- Enable UI when OpenVPN bin is not found, plus check before starting - EIP. Fixes #5619. -- Properly set the userid for SMTP. -- Update EIP UI if it fails to download the config. -- Make use of cmdline in psutil backwards-compatible. Closes #5689 -- Add versioning support to bitmask-root. -- Show flag of country for eip exit node, if available. Related #1232 -- Fix nameserver restoring. Closes #5692 -- Warn user if resolvconf cannot be found. -- Refactor Keymanager to backend. Closes #5711. -- Cleanup backend from hacks. Closes #5698. -- Improve wait and quit process. -- Move soledad password change to backend. -- Move Mail logic to backend. -- Separate imap/smtp logic from conductor. -- Refactor SoledadBootstrapper to backend. Closes #5481. - -0.5.1 May 16 -- the "lil less leaky" release: -+++++++++++++++++++++++++++++++++++++++++++++ - -- Use non blocking dialog so the Pastebin result does not block the - app. Closes #5404. -- Handle provider setup problems and show an error to the user. Closes - #5424. -- Disable providers combo box during check and enable combo or line - edit depending on radio button. Closes #5495. -- Hide the bandwidth widget and update status icon if the openvpn - process is killed. Closes #5497. -- Change password doesn't work. Closes #5540. -- Hide services that the current logged in provider does not - have. Closes #5550. -- If we don't have a provider supporting that service we hide the - actions along with the widgets. Related to #5550. -- Client mistakenly says that traffic is routed in the clear. Closes - #5551. -- Avoid user getting errors if he does a 'ctrl-c' on the wizard during - the first run. Closes #5559. -- Download/upload rates were displayed backwards in the widget - rate. Closes #5563. -- Fix unable to login issue. Closes #5581. -- Hardcode paths for openvpn if STANDALONE=True. Related: #5592 -- Increase waiting time to wait for polkit agent to be up. Closes: - #5595 -- Use openvpn hard restart. Closes: #5669 -- Enable Turn ON button for EIP whenever possible (json and cert are - in place). Fixes #5665, #5666. -- Fix Logout button bottom margin. Fixes #4987. -- Properly finish the Qt app before stopping the reactor. -- Let OpenVPN run its course when a ping-restart happens. Fixes #5564. -- Refactor smtp logic into its bootstrapper. -- Add flag to allow the user to start the app hidden in the - tray. Closes #4990. -- Refactor: move SRPAuth to the backend. Closes #5347. -- Refactor: move EIP to backend. Closes #5349. -- Use PySide @Slot decorator instead of 'SLOT' docstring. Closes - #5506. -- Advanced key management: show a note to the user if the provider - does not support Encrypted Email. Closes #5513. -- Gracefully handle SIGTERM, with addSystemEventTrigger twisted - reactor's method. Closes #5672. -- Hide the main window on quit as first thing and show a tooltip to - inform that we are closing. -- Increase expiration life of a pastebin log from 1 week to 1 month. -- Use iptables firewall. Closes: #5588 -- Refactor Soledad initialization retries to SoledadBootstrapper. -- Refactor EIPBootstrapper to the backend. Closes #5348. -- Add flag to skip provider checks in wizard (only for testing). -- Add support for Mate's polkit agent. - -0.5.0 Apr 4 -- the "Long time no see" release: -++++++++++++++++++++++++++++++++++++++++++++++ -- Fix logging out typo, closes #4815. -- Improve logout action, related to #5131. -- In case of soledad bootstrap error (e.g.: network failure), re run - all the setup process. -- Correct resolvconf usage. Avoids permanent break of - resolv.conf. Closes #4633. -- Disable and stop EIP when you set EIP as disabled in the preferences - dialog. Closes #4670. -- Advanced Key Management: add view for stored public keys. Closes - #4734. -- Reset registration error and input widgets if the user goes back to - provider selection in wizard. Closes #4742. -- Disconnect signals before closing the wizard. Closes #4817. -- Fix logout error message, display it similarly to other errors in - the app. Closes #4942. -- Client should say 1 unread email, not emails. Closes #4952. -- Update menu name in Wizard. Closes #4984. -- Config help menu: do not use an empty password. Closes #4985. -- Handle wizard close correctly. Closes #4986. -- Fix "Something went wrong with the logout" misleading error in every - logout. Closes #4995 and #5071. -- Use version checks in the wizard when the user choose to use an - existing provider. Closes #5048. -- Move error messages from srpauth to the GUI and refactor - signals. Closes #5219. -- Fix psutil version to avoid conflicts with gnupg required - version. Closes #5309. -- Update bitmask url in PKG-INFO. Closes #5395. -- Disable 'next' button if the checks passed but the provider is - changed. Closes #5396. -- Do not start soledad and mail if the mail service is - disabled. Closes #5411. -- Don't escape logs for pastebin. Closes #5433. -- Handle closed Soledad database on quit, speedup exit. Closes #5130. -- Catch shutdown errors. Closes: #5313 -- Properly reset imap session on logout. Closes: #4925 -- Sync Soledad before bootstrapping mail only if the key for the user - is not found locally. Otherwise, defer to thread and - continue. Closes #5083. -- Set as selected default for the eip preferences window the item - selented in the bitmask main window. Closes #5153. -- Cancel login does not work or needs to be pressed twice. Closes - #4869, #4973. -- Fail gracefully against keyring import errors. -- Update requirements and code for the new psutil version. -- Use Bitmask icon instead of LEAP's for the super user dialog in - OSX. Fixes #4273. -- Workaround a bug in Ubuntu where the menu is not displayed in the - global menu bar. Fixes #5420. -- Wizard: select by default the use of an existing provider if we have - configured at least one. Closes #4488. -- Add in-app indication of how to connect to local imap and - smtp. Closes #4530. -- Warn the user on incompatible api error. -- Warn the user if is using an old app version. Closes #4636. -- Minor UI changes: re-arrange main window so that the login widget is - at the top and preferences are available under the menu. -- Disable Advanced Key Manager import feature since it's experimental - and may cause data loss. Closes #4877. -- Offline mode for debugging. Closes: #4943 -- Add pastebin button to upload logs from the logs window to ease bug - report. Closes #5163. -- Add support for self signed certs. Closes #5391. -- Add hotkey for the Help menu. Closes #5401. -- Add --repair-mailboxes command line option. It will be needed to - migrate existing account after a data schema changes, like it will - be happening for 0.5.0. Closes #4792. -- Make first Soledad sync wait for EIP to come up after logging in. - Fixes #4885. -- Ensure IMAP flushes data to disk before quitting. Closes #5095. -- Update key manager auth to interact with webapp v2. Fixes #5120. -- Handle invalid auth tokens when syncing Soledad, and show an error - on the GUI. Fixes #5191. -- After connecting EIP check for DNS resolution and warn the user on - error. Closes #5301. -- Display domain for provider the user has just logged in. Fixes - #4631. -- Add ability to import a maildir into a local mailbox. -- Add ability to write mail logs to a separate file. -- Show hash info in About bitmask (for debian versions). -- Add the appname in the reported version string. -- Move/refactor SRPRegister to the backend. -- Add ability to nice application via environment variable. -- Refactor ProviderBootstrapper out of the UI modules to a Backend - module, obscuring all the details. -- Remove qt4reactor as a dependency. - -2013 -==== - -0.3.8 Dec 6 -- the "Three week child" release: -+++++++++++++++++++++++++++++++++++++++++++++++ -- Make the preferences window selects the current selected provider in - the login widget even if the user is not logged in. Closes #4490. -- Support non-ascii characters in a provider name. Closes #4952. -- Disable Turn On EIP in tray if the service is disabled. Closes #4630. -- Do not show the generic message "EIP has stopped" since it's - redundant. Fixes #4632. -- Avoid attempt to install policykit file in debian package. Closes: - #4404 -- Properly close Soledad at quit time. Fixes #4504. -- Fix soledad bootstrap subtasks order. Closes #4537. -- Add --nobind as a VPN parameter to prevent binding on local - addresses. Fixes #4543. -- Disable Turn On EIP until we have an usable provider. Closes #4523. -- Load provider if the wizard was rejected and the setup was - completed. -- Disable Turn On EIP if the "Encrypted Internet" service is disabled. - Closes #4555. -- If EIP service is disabled display 'Disabled' instead of 'You need - to login to use Encrypted Internet'. -- Disable eip-config until we have configured the provider. Closes - #4422. - -0.3.7 Nov 15 -- the "The Big Lebowsky" release: -+++++++++++++++++++++++++++++++++++++++++++++++ -- Use custom SysTray in order to display per-service tooltip easily. - Closes #3998. -- Escape logs with html contents so they get displayed in plaintext - on the log viewer. Closes #4146. -- Wizard now behaves correctly in provider selection after click - 'cancel' or 'back'. Closes #4148. -- Handle Timeout errors during register process. Closes #4358. -- Send user's key to nickserver whenever keymanager is - initialized. Closes #4364. -- Password change dialog is now properly enabled. Closes #4449. -- Remember provider checks in wizard, do not re-run them if the user - goes back and forth through the wizard. Closes #3814 and #3815. -- Improve compatibility with OSX Mavericks. Fixes #4379. -- Initialize mail service with the userid after login, to allow - multiple accounts. Closes: #4394 -- Give SMTP the current logged in userid. Related to #3952. -- Do not wait for initial soledad sync to complete to launch mail - services. Closes: #4452 -- Add hint to user about the duration of the key generation. Closes - #3958. -- Add advanced key management feature. Closes #4448. -- Properly log EIP status changes. - -0.3.6 Nov 1 -- the "bạn có thể đọc này?" release: -+++++++++++++++++++++++++++++++++++++++++++++++++ - -- Fix problem changing a non-ascii password. Closes #4003. -- Enable password change in the client only if it has started the - correct services. Closes #4093. -- Select the current logged in provider in the preferences - window. Closes #4117. -- Fix problem with non-ascii paths. Closes #4189. -- Capture soledad boostrap errors after latest soledad changes. -- Refactor keyring handling and make it properly save user and - password. Fixes #4190. -- Properly stop the imap daemon at logout. Fixes #4199. -- Align left the speed and transferred displays for EIP. Fixes #4204. -- Remove autostart eip option from settings panel, rely on last used - setting. Closes #4132. -- Add support for requests 1.1.0 (raring). Closes: #4308 -- Refactor mail connections to use state machine. Closes: #4059 -- Add a command to setup.py to freeze the versions reported under - debian branches. Closes: #4315 -- Use coloredlogs handler if present (for development, not a - requirement). -- Hide the GUI for services that are not supported on the set of - configured providers. Closes #4170. - -0.3.5 Oct 18 -- the "I can stand on one foot" release: -++++++++++++++++++++++++++++++++++++++++++++++++++++++ - -- In case of Soledad failure, display to the user that there was a - problem. Closes #4025. -- Widget squashing problem in wizard checking a new provider. Closes - #4058. -- Remember last domain used to login. Closes #4116. -- Display first run wizard, regardless of pinned providers. Closes - #4143. -- Show EIP status 'ON' in the systray tooltip when is - connected. Related to #3998. -- Catch u1db errors during soledad initialization. -- Disable --danger flag on release versions. Closes #4124. -- Display mail status in the tray icon as an enabled item. Fixes - #4036. -- Only show N unread Emails when N > 0. Fixes #4098. -- Hide login error message when the user interacts with the widgets - to fix the potential problem. Fixes #4022. -- Add call to `make` to the bootstrap script. -- Improve GUI based on QA rounds. Fixes #4041 and #4042. -- Increase the amount of retries for the authentication request - session. Fixes #4037. -- Rename EIP to Encrypted Internet in its preference panel. Fixes - #4057. -- Disable stdout redirection on Windows for the time being since it - breaks the bundle. -- Default UP_SCRIPT and DOWN_SCRIPT to None and only add that - parameter to the vpn command if not None. -- Look for gpg on windows with the .exe extension. -- Change the Util menu to be named File in OSX. Fixes #4039. -- Show more context information in the logs. Closes #3923. -- Automate internationalization process, create project file - dynamically on make. Closes #3925. -- Add support for running lxde polkit agent. Closes #4028. -- Added Vietnamese and English (United Kingdom) translations. -- Implements openvpn observer. Closes: #3901 -- Reconnect EIP if network down. Closes #3790 -- Reconnect if tls-restart. Closes: #3262 - -0.3.4 Oct 4 -- the "look at my new makeup" release: -+++++++++++++++++++++++++++++++++++++++++++++++++++ - -- Fixes a bug where you cannot login to a different provider once - you logged in to another one. Fixes #3695. -- Resets the session for every login attempt. Related to #3695. -- Avoid error message if --version flag is used. Closes #3914. -- Fix a bug in which failing to authenticate properly left - connection in an unconsistent state. Closes: #3926 -- Avoids errors due to the EIP switch button and action being - enabled when we do not have a configured provider. Closes: #3927 -- Add more verbose error handling during key generation and syncing. - Helps diagnose: #3985; Addresses in part: #3965 -- Choose one gnupg binary path that is also not a symlink. Closes - #3999. -- Refactor vpn launchers, reuse code, improve implementations, - update documentation. Closes #2858. -- Add preferences option to enable/disable the automatic start of - EIP and selection of the EIP provider to auto start. Closes #3631. -- Force cleanlooks style for kde only if the app is running from - bundle. Closes #3981. -- Add a dropdown for known providers in the wizard. Closes #3995. -- Separate pinned providers from user configures ones. Closes #3996. -- Improve error handling during soledad bootstrap. Closes: #3965. - Affects: #3619, #3867, #3966 -- Implement new UI design. Closes #3973. -- Make the initial provider cert verifications against our modified - CA-bundle (includes ca-cert certificates, for now). Closes: #3850 -- Use token header for authenticated requests. Closes #3910. -- Do not distinguish between different possible authentication - errors. Fixes #3859. -- Do not start Soledad if Mail is not enabled. Fixes #3989. -- Allow window minization on OSX. Fixes #3932. -- Properly stop the smtp daemon. Fixes #3873. - -0.3.3 Sep 20 -- "the calm after the tempest" release: -+++++++++++++++++++++++++++++++++++++++++++++++++++++ - -- Remove execution bits in text files in bundle. Closes #3617. -- Use generic bad username/password message instead of specific ones when - the user uses incorrect data during login. Closes #3656. -- Fix LoggerWindow saving more than one line return per line in the logs - file. Closes #3714. -- Fix keyring imports so we do not get import errors. Closes: #3759 -- Catch logout problem, display a user message and allow log back in after a - successful logout if there was a logout error before. Closes #3774. -- Fix path prefix helper for the bundle and add regresion tests. Closes #3778. -- Prevent dialogs closing the app when it has been minimized to the tray. Closes #3791. -- Do not try to install resolv-update globally. Closes: #3803 -- Inconsistent hide/show main window from tray action. Closes #3821. -- Allow SMTP to start even when provider does not offer EIP. Closes: #3847 -- Fix username case problem at register/login. Closes #3857. -- Catch IndexError on `first` utility. -- Update git repo name in docs. Closes: #3417 -- Move STANDALONE flag to a module and unify get_path_prefix queries. - Closes #3636. -- Display the Encrypted Internet and Encrypted Email status in the systray - tooltip. Closes #3758. -- Tasktray menu changes, closes #3792. -- Remove the provider domain item (e.g. bitmask.net). -- Rename the EIP status menu items to be more descriptive. -- Change the EIP status menu items from disabled menu items - to submenus with children. -- Move the EIP action menu items under the EIP status submenu tree. -- Adds ``--version`` flag. Closes: #3816 -- Refactors EIPConnection to use LEAPConnection state machine. Closes: #3900 -- Include resource files and ui in the distrubution tarball. Closes: #3825 - -0.3.2 Sep 6 -- the "no crashes or anything" release: -++++++++++++++++++++++++++++++++++++++++++++++++++++ - -- Fix up script in non-bundle linuces. Closes: #3450 -- Logout stops imap and smtp services. Closes: #3553 -- Properly daemonize polkit-gnome-authentication-agent. Closes: #3554 -- Set appropiate error on login cancel. Closes #3582. -- Fix gateway selection problem. Closes 3595. -- Fix typo in wizard: stablish -> establish. Closes #3615. -- Display Encrypted Mail instead of mx in wizard. Closes #3657. -- Fix save logs to file dialog freezing. Closes #3675. -- Complain if setup.py is run with python3. Closes: #3711 -- Enable preferences option in systray. Closes #3717. -- Make soledad emit failed signal for all kinds of socket error. -- Allow to selectively silence logs from different leap components. Closes: #3504 -- Add option to select gateway manually in the preferences panel. Closes #3505. -- Add preferences option to select the enabled services of a provider. Closes #3534. -- Refactor basic password checks. Closes #3552. -- Use dirspec instead of plain xdg. Closes #3574. -- Remove last page from wizard. Closes #3616. -- Display encrypted mail status in the tray. Closes #3659. - -0.3.1 Aug 23: -+++++++++++++ - -- Replace wizard images with the rainbow mask. Closes #3425. -- Update leap.common minimum version needed. -- Set the standalone flag before it's being used. Fixes #3426. -- Stop the twisted reactor adding the stop call to the call chain - instead of stopping it directly. Fixes #3406. -- Allow soledad initialization to retry if it times out. Closes: - #3413 -- Activate window when setting it visible. Also display Hide/Show - message in the tray icon taking into account the window - activation. Fixes #3433. -- Do not start IMAP daemon if mail was not selected among the - services. Fixes #3435. -- Reword RECONNECTING state of openvpn. Fixes #3429. -- Improve OpenVPN detection by searching for a specific leap-only - string in the command line. This makes it possible to run other - VPN instances while also using EIP. Fixes #3268 and #3364. -- OSX: Check for the tun.kext existence in /Library/Extensions - instead of /System/Library/Extensions. Fixes #3271. -- Use DELETE /1/logout to properly logout. Fixes #3510. -- Make the poll interval bigger to improve openvpn's internal - behavior. If it gets queried too many times per second, it's - behavior won't be good. Fixes #3430. -- Transforms usernames to lower case before they are used in the - registration and authentication. Closes #3541. -- Add filter option to the logger window. Closes #3407. -- Add a preference panel that lets you change your password. Closes - #3500 #2798 #3533. -- Move all client code into its own namespace - (leap.bitmask). Closes: #2959 -- Make mail fetch interval in imap service configurable via - environment variable. Closes: #3409 -- Update to new soledad package scheme (common, client and - server). Closes #3487. -- Fetch incoming mail when mail client logs in. Closes: #3525 -- Add first draft of the UI for Encrypted Mail. Closes #3499. - -0.3.0 Aug 9: -++++++++++++ - -- Add missing scripts does not stop if a command fails, also warns - the user if there was an error. Closes #3294. -- Replace 'Sign Out' with 'Log Out' and 'User' with - 'Username'. Closes #3319. -- Verify cacert existence before using it. Closes bug #3362. -- Properly handle login failures. Closes bug #3401. -- Bugfix, avoid getting negative rates. Closes #3274. -- Raise window when setting it as visible. Fixes #3374 -- Fail gracefully when the events port 8090 is in use by something - else. Fixes #3276. -- Validate the username in the login form against the same regexp as - the wizard registration form. Fixes #3214. -- Update text from the tray menu based on the visibility of the - window. Fixes #3400. -- Add check for outdated polkit file. Closes #3209. -- Add support for multiple schemas so we can support multiples api - versions. Closes #3310. -- Rebrand the client to be named Bitmask. Feature #3313. -- Add cancel button to login. Closes #3318. -- Add multiple schema support for SMTP. Closes #3403. -- Add multiple schema support for Soledad. Closes #3404. -- Update Transifex project name and translators' - documentation. Closes #3418. -- Add check for tuntap kext before launching openvpn. Closes: #2906 -- Accept flag for changing openvpn verbosity in logs. Closes: #3305 -- Add imap service to the client. Closes: #2579 -- Add pyside-uic support inside the virtualenv. This way it won't - fail to 'make' if the virtualenv is activated. Closes #3411. -- Reintegrate SMTP relay module. Closes #3375 -- Reintegrate Soledad into the client. Closes #3307. -- Support bundled gpg. Related to #3397. -- Set the default port for SMTP to be 2013. -- Display a more generic error message in the main window, and leave - the detailed one for the log. Closes #3373. - -0.2.4 Jul 26: -+++++++++++++ - -- Use the provider CA cert for every request once we have it - bootstrapped (TOFU). Closes #3227. -- Make calls to leap.common.events asynchronous. Closes #2937. -- Always logout when closing the app if the user previously signed - in. Fixes #3245. -- Make sure the domain field in provider.json is escaped to avoid - potential problems. Fixes #3244. -- Fix incorrect handling of locks in Windows so that stalled locks - do not avoid raising the first instance of the app. Closes: #2910 -- Use traffic rates instead of totals. Closes #2913 -- Allow to alternate between rates and total throughput for the - virtual interface. Closes: #3232 -- Reset rates/totals when terminating connection. Closes #3249 -- Fix a bug in the displayed magnitude for the up/down traffic rates - and totals. -- Force Cleanlooks style if we are running in a KDE environment, so - that it doesn't load potentially incompatible Qt libs. Fixes - #3194. -- Wrap long login status messages to 40 characters. Fixes #3124 -- Workaround a segmentation fault when emitting a signal with its - last parameter being None. Fixes #3083. -- Added IS_RELEASE_VERSION flag that allows us to use code only in - develop versions. Closes #3224. -- Try to terminate already running openvpn instances. Closes #2916 -- Linux: Dynamically generate policy file for polkit. Closes #3208 -- Workaround some OpenVPN problems with priviledge dropping and - routing. Fixes #3178 #3135 #3207 #3203 - -0.2.3 Jul 12: -+++++++++++++ - -- Adapt code to Soledad 0.2.1 api. -- Fix Main Window briefly display before the wizard on first - start. Closes Bug #2954. -- Bugfix: Remember should not be automatically set to - checked. Closes #2955. -- Bugfix: reload config if switching to a different provider. Closes - #3067. -- Bugfix: logger window's toggle button reflects window - state. Closes #3152. -- Set timeout for requests to 10 seconds globally, configurable from - leap.util.constants. Fixes #2878. -- Bugfix: display error message on registration problem. Closes - #3039. -- Make wizard use the main event loop, ensuring clean termination. -- Use cocoasudo for installing missing updown scripts. -- Bugfix: Systray Turn ON action fails because is not correctly - enabled/disabled. Closes #3125. -- Bugfix: wrong systray icon on startup. Closes #3147. -- Bugfix: parse line return in the logger window. Closes #3151. -- Do not log user data on registration. Fixes #3168. -- Add --log-append eip.log to windows EIP launcher options to save - the logs in case of any problems. Fixes #2054. -- OSX: Make the install_path relative to the launcher path instead - -f absolute. -- OSX: Fix icon display in cocoasudo. -- OSX: Raise window when showing if running on OSX. -- Bugfix: EIP status button moved to status panel. -- Check if there is no gateway to use and display correct - message. Close #2921. -- Reorder tray icons according new design. Closes #2919. -- Redirect stdout/stderr and twisted log to the logger. Closes - #3134. -- Improve LoggerWindow colors for easier debugging. -- Move the key manager to its own repository/package. - -0.2.2 Jun 28: -+++++++++++++ - -- Add support for the kde polkit daemon -- Handle 'Incorrect Password' exception (keyring) -- Select the configured domain in the providers combo box. Closes - #2693. -- Remember provider along with the username and password. Closes - #2755. -- Close the app on rejected wizard. Closes bug #2905. -- Only use the Keyring when it's using a known good backend. Closes - #2960 -- Update implementation and semantics of the supported and available - services by a provider. Closes bug #3032. -- Only show the question mark for a check being done if the previous - -ne passed. Fixes #2569. -- Fix main client window not restoring after minimized into - systray. Closes #2574 -- Set EIP different status icons depending on OS. Closes #2643. -- Reimplement openvpn invocation to use twisted ProcessProtocol -- Add runtime requirements checker, verifies that the requirements - are installed and in its correct versions. Closes #2563 -- Add centraliced logging facility, log history in a window. Closes - #2566 -- Improve wizard, hide registration widgets (labels, inputs, button) - and only display a message. Closes #2694 -- Clarify labels through the app (use of EIP) -- Check if the provider api version is supported. Closes feature - #2774. -- Autoselect VPN gateway based on timezone. Closes #2790. -- Disable vpn disconnect on logout. Closes #2795. -- Improve gateway selector based on timezone. It allows to use - multiple gateways in openvpn for redundancy. Closes #2894. -- Use cocoasudo in place of osascript for osx privilege escalation - during openvpn launch. -- Clicking in the tray icon will always show the context menu - instead of activating the window under certain - circumstances. Closes #2788 -- Autostart EIP whenever possible. Closes #2815 -- Update test suite, run_scripts and requirements to run smoothly - with buildbot. -- Add a copy of the processed requirements to util/ -- Display the default provider configured in the systray menu. Close - #2813 -- Make the login steps be a chain of defers in order to be able to - have more cancel points for the whole procedure. Closes #2571 -- Linux: check for up/down scripts and policy files and ask user for - permission to install them in a root-writeable location. Used from - within bundle or for broken installations. -- Integrate SMTP-Relay into the client. -- Integrate Soledad and KeyManager. -- Move the KeyManager from leap.common to leap-client. -- Only use one systray icon, repesenting the status for EIP. Closes - #2762 -- Properly set the binary manifest to the windows openvpn - binary. Closes #203 -- OSX: Add dialog with suggestion to install up/down scripts if - these not found. Closes: #1264, #2759, #2249 -- Workaround for PySide breaking with multiple inheritance. Closes - #2827 -- Refactor login to its own widget and remove Utils menu. Closes - #2789 -- Refactor the status bits out of the MainWindow to its own - StatusPanelWidget. Closes #2792 -- Save the default provider to be used for autostart EIP as - DefaultProvider in leap.conf. Closes #2793 -- Cleanly terminate openvpn process, sending SIGTERM and SIGKILL - after a while. Closes #2753 -- Use twisted's deferToThread and Deferreds to handle parallel tasks -- Use a qt4 reactor for twisted, for launching leap twisted - services. - -0.2.1 May 15: -+++++++++++++ -- Rewrite most of the client based on the insight gained so far. -- Deselecting the remember checkbox makes the app not populate - user/password values on the login widget. Closes #2059 -- Rewording of setup steps in wizard, to make them more meaningful - to the non-technical user. Closes #2061 -- Fix typo in wizard. -- Fix multiple drawing of services if going back. -- Make registration errors show in red. -- Add a warning if EIP service needs admin password. Addresses part - -f #2062 -- Make traffic indicators display fixed precision. Closes #2114 -- Do not hide the application if the user right clicked the system - tray icon. -- Sanitize network-fetched content that is used to build openvpn - command. -- Avoids multiple instances of leap-client. Each new one just raises - the existing instance and quits. -- Use dark eip icons os osx. Closes #2130 -- Moves BaseConfig to leap.common.config. Closes #2164 -- Add handling for ASSIGN_IP state from OpenVPN in the mainwindow. -- Emit events notifying of the session_id and uid after - authentication so other services can make use of it. Closes #1957 -- Working packaging workflow with rewritten client, using - pyinstaller and platypus. -- Remove network checks temporarily until we find a good way of - doing it, and a good way to deal with them. -- Saves the token to allow token authenticated queries. -- Turn "leap" into namespace package, move common files to - leap_common package that can be shared by other LEAP projects. -- Support standalone configurations for distribution in thumbdrives - and the like. -- Add support for requests < 1.0.0 -- Tests infrastructure, and tests for crypto/srpauth and crypto/srpregister. -- Documentation updated for 0.2.1 release. -- Docstrings style changed to fit sphinx autodoc format. -- Add a simple UI to notify of pending updates. -- Add Windows support. -- Try to install TAP driver on Windows if no tap device is preset. +For older entries look at the HISTORY.rst file. diff --git a/HISTORY.rst b/HISTORY.rst new file mode 100644 index 00000000..dba0f38b --- /dev/null +++ b/HISTORY.rst @@ -0,0 +1,789 @@ +.. :history:: + +History +------- + +==== +2015 +==== + +0.8.1 February 25 ++++++++++++++++++ + +Features +~~~~~~~~ +- `#6646 <https://leap.se/code/issues/6658>`_: Gracefully fall back to ZMQ ipc sockets with restricted access if CurveZMQ is not available. +- `#6717 <https://leap.se/code/issues/6717>`_: Split changes log into changelog and history. + +Bugfixes +~~~~~~~~ +- `#6654 <https://leap.se/code/issues/6654>`_: Regression fix, login attempt is made against previously selected provider. +- `#6058 <https://leap.se/code/issues/6058>`_: Support 'nobody' (used on Arch) as well as 'nogroup' as group names. + +0.8.0 January 04 -- "Charlie and the code refactory" +++++++++++++++++++++++++++++++++++++++++++++++++++++ + +Features +~~~~~~~~ +- #5873: Allow frontend and backend to be run separately. +- Refactor login widgets/logic. +- Improved changelog :). + +Bugfixes +~~~~~~~~ +- #6058: Support 'nobody' (used on Arch) as well as 'nogroup' as group names. +- #6123: Forward the right environment data to subprocess call. +- #6150: Do not allow Bitmask to start if there is no polkit agent running. +- #6631: Fix failing tests. +- #6638: Fix set initialization to support python 2.6. +- #6652: Fix regression: polkit agent is not automatically launched. +- #6654: Login attempt is made against previously selected provider. +- Create zmq certificates if they don't exist. +- Disable '--offline' flag temporarily. +- Make pkg/tuf/release.py handle removals in the repo. +- Reduce the wait for running threads timeout on quit. + +==== +2014 +==== + +0.7.0 December 12 -- the "One window to rule them all, and in the darkness bind them." release: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Select current provider on EIP preferences. Closes #5815. +- Handle logout correctly when we stop_services to launch the + wizard. Related to #5815. +- Properly remove /tmp/bitmask.lock. Closes #5866. +- Hide EIP Start button and display correct warning on missing helpers + files. Closes #5945. +- Save default provider if changed on the combo box. Closes #5995. +- Update the EIP status on provider change. Closes #5996. +- Update and get ready to start a provider on change. Closes #5997. +- Use python2 to run bitmask-root to work fine on systems with python3 + as default. Closes #6048. +- Use python2.7 in bitmask-root shebang since is the common name for + python 2 in Ubuntu, Debian, Arch. Related to #6048. +- Remove dict comprenension in util, for 2.6 compat. +- Login shall not wait for eip to finish if eip is not able to + start. Closes #5994 +- Properly send the token for querying the EIP certificate. Fixes + #6060. +- Code cleanup and logging improvements. +- Add email firewall blocking other users to access bitmask imap & + smtp. Closes #6040 +- Remove the Advanced Key Management since we don't support stable + mail yet. Closes #6087. +- Single combined preferences window. Closes #4704, #4119, #5885. +- Fix soledad imports (#5989). +- Make pkg/tuf/release.py handle removals in the repo +- Remove instructions/references of mail from the client. Closes #6140. +- Add support for the internal LXDE polkit agent. Closes #6043. +- Allow the server to set a custom --fragment openvpn option (#5933) +- Add Calyx.net as pinned provider. Closes #6518. + +0.6.1 August 15 -- the "knock knock knocking on beta's door" release: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Add checks to ensure that the backend is alive or notify the + user. Related to #5873. +- Stop the backend if the frontend process does not exist any more and + backend is not a daemon. Related to #5873. +- Add autostart on Linux. Closes #4989. +- Pressing ESC on 'install helper files' defaults to No. Closes #5819. +- Replace twisted thread with QThread and get pastebin send + working. Closes #5949. +- Wait until EIP is up to autologin. Closes #5939 +- Fix the handling of vpn launcher errors in the UI. Closes: #5955 +- Fix logger window blocking the bitmask quit(). +- Set the standalone value for BaseConfig according to the global + flags. +- Improve Hide and Show Window behavior on Ubuntu. Fixes #5511. +- Use smaller height on the window so it fits better on smaller + resolutions. Closes #5722. +- Disable daemon mode when we run the backend so we can spawn child + processes on it. +- Restrict access to the zmq certificates folder. +- Stop the services if the selected provider is changed. Related to + #4704. Closes #5912, #5554. +- Minor adjustments to the layout of UI elements. Fixes #5514, #5515, + #5510. +- Moved provider selection dropdown menu to be at the top of the main + windowUse same user/password restrictions as in the webapp. Closes + #5894. + +0.6.0 July 18 -- the "nothing to see here" release: ++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Initial sync message is confusing. Closes #5875. +- Use preferred provider on first run. Closes #5813. +- Add TUF init repository and release tools. Closes #5864. +- Add support for fingerprint-gui's polkit agent. Closes #5880. +- Reroute DNS packets instead of blocking them, eliminating need to + muck around with resolv.conf. Closes #4633, #5655, #5738, #4823 +- Use inline decrypting for initial soledad syncrhonization, to wait + for secrets. +- Add the ability to create an osx bundle with py2app. Closes #5845. +- Split frontend/backend in different files. Closes #5719. +- Implement ZMQ based messaging system. Closes #5733. +- Launch the backend in a different process than the app. Closes + #5734. + +0.5.3 June 27 -- the "encrypt ALL THE THINGS" release: +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Disable EIP if the helper files were not installed. Closes #5818. +- Install helpers to /usr/local for bundle. Closes #5741. +- Improve how pinned providers are handled by hardcoding it instead of + expecting them to be in the config. Closes #4733. +- Remove deprecated policy files. Closes #5651. +- Install helper files only if standalone=True. Related to #5625 +- Use installer helper from within bundle path. Related to #5634 +- Pin Riseup as a provider. Closes #5783. +- Update the bundled binaries to their path if their sha256 is not + correct. Closes #5759. +- Use a dict instead an object to ease later serialization of + ProviderConfig. + +0.5.2 June 6 -- the "are we there yet" release: ++++++++++++++++++++++++++++++++++++++++++++++++ + +- Unblock local multicast IPs from linux firewall, to allow SSDP and + Bonjour/mDNS to work. +- Add support for gnome-shell polkit agent. Closes #4144, #4218. +- Update username regex to support the same as webapp. Closes #5965. +- Wrong error message for username too short. Fixes #5697. +- Cleanup and refactor username/password validators. +- Fix EIP autostart failing. Closes #5721. +- Block ipv6 traffic for the moment. Closes #5693 +- Fix bug with ipv6 blocking that caused block to not get removed from + firewall when Bitmask quit. +- Bring firewall down when switching EIP off. Closes #5687 +- Add OPENVPN_BIN_PATH for OSX so that EIP starts properly. +- Allow usernames to end in a digit. +- Improve signal handling in the mainwindow and wizard. +- Enable UI when OpenVPN bin is not found, plus check before starting + EIP. Fixes #5619. +- Properly set the userid for SMTP. +- Update EIP UI if it fails to download the config. +- Make use of cmdline in psutil backwards-compatible. Closes #5689 +- Add versioning support to bitmask-root. +- Show flag of country for eip exit node, if available. Related #1232 +- Fix nameserver restoring. Closes #5692 +- Warn user if resolvconf cannot be found. +- Refactor Keymanager to backend. Closes #5711. +- Cleanup backend from hacks. Closes #5698. +- Improve wait and quit process. +- Move soledad password change to backend. +- Move Mail logic to backend. +- Separate imap/smtp logic from conductor. +- Refactor SoledadBootstrapper to backend. Closes #5481. + +0.5.1 May 16 -- the "lil less leaky" release: ++++++++++++++++++++++++++++++++++++++++++++++ + +- Use non blocking dialog so the Pastebin result does not block the + app. Closes #5404. +- Handle provider setup problems and show an error to the user. Closes + #5424. +- Disable providers combo box during check and enable combo or line + edit depending on radio button. Closes #5495. +- Hide the bandwidth widget and update status icon if the openvpn + process is killed. Closes #5497. +- Change password doesn't work. Closes #5540. +- Hide services that the current logged in provider does not + have. Closes #5550. +- If we don't have a provider supporting that service we hide the + actions along with the widgets. Related to #5550. +- Client mistakenly says that traffic is routed in the clear. Closes + #5551. +- Avoid user getting errors if he does a 'ctrl-c' on the wizard during + the first run. Closes #5559. +- Download/upload rates were displayed backwards in the widget + rate. Closes #5563. +- Fix unable to login issue. Closes #5581. +- Hardcode paths for openvpn if STANDALONE=True. Related: #5592 +- Increase waiting time to wait for polkit agent to be up. Closes: + #5595 +- Use openvpn hard restart. Closes: #5669 +- Enable Turn ON button for EIP whenever possible (json and cert are + in place). Fixes #5665, #5666. +- Fix Logout button bottom margin. Fixes #4987. +- Properly finish the Qt app before stopping the reactor. +- Let OpenVPN run its course when a ping-restart happens. Fixes #5564. +- Refactor smtp logic into its bootstrapper. +- Add flag to allow the user to start the app hidden in the + tray. Closes #4990. +- Refactor: move SRPAuth to the backend. Closes #5347. +- Refactor: move EIP to backend. Closes #5349. +- Use PySide @Slot decorator instead of 'SLOT' docstring. Closes + #5506. +- Advanced key management: show a note to the user if the provider + does not support Encrypted Email. Closes #5513. +- Gracefully handle SIGTERM, with addSystemEventTrigger twisted + reactor's method. Closes #5672. +- Hide the main window on quit as first thing and show a tooltip to + inform that we are closing. +- Increase expiration life of a pastebin log from 1 week to 1 month. +- Use iptables firewall. Closes: #5588 +- Refactor Soledad initialization retries to SoledadBootstrapper. +- Refactor EIPBootstrapper to the backend. Closes #5348. +- Add flag to skip provider checks in wizard (only for testing). +- Add support for Mate's polkit agent. + +0.5.0 Apr 4 -- the "Long time no see" release: +++++++++++++++++++++++++++++++++++++++++++++++ +- Fix logging out typo, closes #4815. +- Improve logout action, related to #5131. +- In case of soledad bootstrap error (e.g.: network failure), re run + all the setup process. +- Correct resolvconf usage. Avoids permanent break of + resolv.conf. Closes #4633. +- Disable and stop EIP when you set EIP as disabled in the preferences + dialog. Closes #4670. +- Advanced Key Management: add view for stored public keys. Closes + #4734. +- Reset registration error and input widgets if the user goes back to + provider selection in wizard. Closes #4742. +- Disconnect signals before closing the wizard. Closes #4817. +- Fix logout error message, display it similarly to other errors in + the app. Closes #4942. +- Client should say 1 unread email, not emails. Closes #4952. +- Update menu name in Wizard. Closes #4984. +- Config help menu: do not use an empty password. Closes #4985. +- Handle wizard close correctly. Closes #4986. +- Fix "Something went wrong with the logout" misleading error in every + logout. Closes #4995 and #5071. +- Use version checks in the wizard when the user choose to use an + existing provider. Closes #5048. +- Move error messages from srpauth to the GUI and refactor + signals. Closes #5219. +- Fix psutil version to avoid conflicts with gnupg required + version. Closes #5309. +- Update bitmask url in PKG-INFO. Closes #5395. +- Disable 'next' button if the checks passed but the provider is + changed. Closes #5396. +- Do not start soledad and mail if the mail service is + disabled. Closes #5411. +- Don't escape logs for pastebin. Closes #5433. +- Handle closed Soledad database on quit, speedup exit. Closes #5130. +- Catch shutdown errors. Closes: #5313 +- Properly reset imap session on logout. Closes: #4925 +- Sync Soledad before bootstrapping mail only if the key for the user + is not found locally. Otherwise, defer to thread and + continue. Closes #5083. +- Set as selected default for the eip preferences window the item + selented in the bitmask main window. Closes #5153. +- Cancel login does not work or needs to be pressed twice. Closes + #4869, #4973. +- Fail gracefully against keyring import errors. +- Update requirements and code for the new psutil version. +- Use Bitmask icon instead of LEAP's for the super user dialog in + OSX. Fixes #4273. +- Workaround a bug in Ubuntu where the menu is not displayed in the + global menu bar. Fixes #5420. +- Wizard: select by default the use of an existing provider if we have + configured at least one. Closes #4488. +- Add in-app indication of how to connect to local imap and + smtp. Closes #4530. +- Warn the user on incompatible api error. +- Warn the user if is using an old app version. Closes #4636. +- Minor UI changes: re-arrange main window so that the login widget is + at the top and preferences are available under the menu. +- Disable Advanced Key Manager import feature since it's experimental + and may cause data loss. Closes #4877. +- Offline mode for debugging. Closes: #4943 +- Add pastebin button to upload logs from the logs window to ease bug + report. Closes #5163. +- Add support for self signed certs. Closes #5391. +- Add hotkey for the Help menu. Closes #5401. +- Add --repair-mailboxes command line option. It will be needed to + migrate existing account after a data schema changes, like it will + be happening for 0.5.0. Closes #4792. +- Make first Soledad sync wait for EIP to come up after logging in. + Fixes #4885. +- Ensure IMAP flushes data to disk before quitting. Closes #5095. +- Update key manager auth to interact with webapp v2. Fixes #5120. +- Handle invalid auth tokens when syncing Soledad, and show an error + on the GUI. Fixes #5191. +- After connecting EIP check for DNS resolution and warn the user on + error. Closes #5301. +- Display domain for provider the user has just logged in. Fixes + #4631. +- Add ability to import a maildir into a local mailbox. +- Add ability to write mail logs to a separate file. +- Show hash info in About bitmask (for debian versions). +- Add the appname in the reported version string. +- Move/refactor SRPRegister to the backend. +- Add ability to nice application via environment variable. +- Refactor ProviderBootstrapper out of the UI modules to a Backend + module, obscuring all the details. +- Remove qt4reactor as a dependency. + +==== +2013 +==== + +0.3.8 Dec 6 -- the "Three week child" release: ++++++++++++++++++++++++++++++++++++++++++++++++ +- Make the preferences window selects the current selected provider in + the login widget even if the user is not logged in. Closes #4490. +- Support non-ascii characters in a provider name. Closes #4952. +- Disable Turn On EIP in tray if the service is disabled. Closes #4630. +- Do not show the generic message "EIP has stopped" since it's + redundant. Fixes #4632. +- Avoid attempt to install policykit file in debian package. Closes: + #4404 +- Properly close Soledad at quit time. Fixes #4504. +- Fix soledad bootstrap subtasks order. Closes #4537. +- Add --nobind as a VPN parameter to prevent binding on local + addresses. Fixes #4543. +- Disable Turn On EIP until we have an usable provider. Closes #4523. +- Load provider if the wizard was rejected and the setup was + completed. +- Disable Turn On EIP if the "Encrypted Internet" service is disabled. + Closes #4555. +- If EIP service is disabled display 'Disabled' instead of 'You need + to login to use Encrypted Internet'. +- Disable eip-config until we have configured the provider. Closes + #4422. + +0.3.7 Nov 15 -- the "The Big Lebowsky" release: ++++++++++++++++++++++++++++++++++++++++++++++++ +- Use custom SysTray in order to display per-service tooltip easily. + Closes #3998. +- Escape logs with html contents so they get displayed in plaintext + on the log viewer. Closes #4146. +- Wizard now behaves correctly in provider selection after click + 'cancel' or 'back'. Closes #4148. +- Handle Timeout errors during register process. Closes #4358. +- Send user's key to nickserver whenever keymanager is + initialized. Closes #4364. +- Password change dialog is now properly enabled. Closes #4449. +- Remember provider checks in wizard, do not re-run them if the user + goes back and forth through the wizard. Closes #3814 and #3815. +- Improve compatibility with OSX Mavericks. Fixes #4379. +- Initialize mail service with the userid after login, to allow + multiple accounts. Closes: #4394 +- Give SMTP the current logged in userid. Related to #3952. +- Do not wait for initial soledad sync to complete to launch mail + services. Closes: #4452 +- Add hint to user about the duration of the key generation. Closes + #3958. +- Add advanced key management feature. Closes #4448. +- Properly log EIP status changes. + +0.3.6 Nov 1 -- the "bạn có thể đọc này?" release: ++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Fix problem changing a non-ascii password. Closes #4003. +- Enable password change in the client only if it has started the + correct services. Closes #4093. +- Select the current logged in provider in the preferences + window. Closes #4117. +- Fix problem with non-ascii paths. Closes #4189. +- Capture soledad boostrap errors after latest soledad changes. +- Refactor keyring handling and make it properly save user and + password. Fixes #4190. +- Properly stop the imap daemon at logout. Fixes #4199. +- Align left the speed and transferred displays for EIP. Fixes #4204. +- Remove autostart eip option from settings panel, rely on last used + setting. Closes #4132. +- Add support for requests 1.1.0 (raring). Closes: #4308 +- Refactor mail connections to use state machine. Closes: #4059 +- Add a command to setup.py to freeze the versions reported under + debian branches. Closes: #4315 +- Use coloredlogs handler if present (for development, not a + requirement). +- Hide the GUI for services that are not supported on the set of + configured providers. Closes #4170. + +0.3.5 Oct 18 -- the "I can stand on one foot" release: +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- In case of Soledad failure, display to the user that there was a + problem. Closes #4025. +- Widget squashing problem in wizard checking a new provider. Closes + #4058. +- Remember last domain used to login. Closes #4116. +- Display first run wizard, regardless of pinned providers. Closes + #4143. +- Show EIP status 'ON' in the systray tooltip when is + connected. Related to #3998. +- Catch u1db errors during soledad initialization. +- Disable --danger flag on release versions. Closes #4124. +- Display mail status in the tray icon as an enabled item. Fixes + #4036. +- Only show N unread Emails when N > 0. Fixes #4098. +- Hide login error message when the user interacts with the widgets + to fix the potential problem. Fixes #4022. +- Add call to `make` to the bootstrap script. +- Improve GUI based on QA rounds. Fixes #4041 and #4042. +- Increase the amount of retries for the authentication request + session. Fixes #4037. +- Rename EIP to Encrypted Internet in its preference panel. Fixes + #4057. +- Disable stdout redirection on Windows for the time being since it + breaks the bundle. +- Default UP_SCRIPT and DOWN_SCRIPT to None and only add that + parameter to the vpn command if not None. +- Look for gpg on windows with the .exe extension. +- Change the Util menu to be named File in OSX. Fixes #4039. +- Show more context information in the logs. Closes #3923. +- Automate internationalization process, create project file + dynamically on make. Closes #3925. +- Add support for running lxde polkit agent. Closes #4028. +- Added Vietnamese and English (United Kingdom) translations. +- Implements openvpn observer. Closes: #3901 +- Reconnect EIP if network down. Closes #3790 +- Reconnect if tls-restart. Closes: #3262 + +0.3.4 Oct 4 -- the "look at my new makeup" release: ++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Fixes a bug where you cannot login to a different provider once + you logged in to another one. Fixes #3695. +- Resets the session for every login attempt. Related to #3695. +- Avoid error message if --version flag is used. Closes #3914. +- Fix a bug in which failing to authenticate properly left + connection in an unconsistent state. Closes: #3926 +- Avoids errors due to the EIP switch button and action being + enabled when we do not have a configured provider. Closes: #3927 +- Add more verbose error handling during key generation and syncing. + Helps diagnose: #3985; Addresses in part: #3965 +- Choose one gnupg binary path that is also not a symlink. Closes + #3999. +- Refactor vpn launchers, reuse code, improve implementations, + update documentation. Closes #2858. +- Add preferences option to enable/disable the automatic start of + EIP and selection of the EIP provider to auto start. Closes #3631. +- Force cleanlooks style for kde only if the app is running from + bundle. Closes #3981. +- Add a dropdown for known providers in the wizard. Closes #3995. +- Separate pinned providers from user configures ones. Closes #3996. +- Improve error handling during soledad bootstrap. Closes: #3965. + Affects: #3619, #3867, #3966 +- Implement new UI design. Closes #3973. +- Make the initial provider cert verifications against our modified + CA-bundle (includes ca-cert certificates, for now). Closes: #3850 +- Use token header for authenticated requests. Closes #3910. +- Do not distinguish between different possible authentication + errors. Fixes #3859. +- Do not start Soledad if Mail is not enabled. Fixes #3989. +- Allow window minization on OSX. Fixes #3932. +- Properly stop the smtp daemon. Fixes #3873. + +0.3.3 Sep 20 -- "the calm after the tempest" release: ++++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Remove execution bits in text files in bundle. Closes #3617. +- Use generic bad username/password message instead of specific ones when + the user uses incorrect data during login. Closes #3656. +- Fix LoggerWindow saving more than one line return per line in the logs + file. Closes #3714. +- Fix keyring imports so we do not get import errors. Closes: #3759 +- Catch logout problem, display a user message and allow log back in after a + successful logout if there was a logout error before. Closes #3774. +- Fix path prefix helper for the bundle and add regresion tests. Closes #3778. +- Prevent dialogs closing the app when it has been minimized to the tray. Closes #3791. +- Do not try to install resolv-update globally. Closes: #3803 +- Inconsistent hide/show main window from tray action. Closes #3821. +- Allow SMTP to start even when provider does not offer EIP. Closes: #3847 +- Fix username case problem at register/login. Closes #3857. +- Catch IndexError on `first` utility. +- Update git repo name in docs. Closes: #3417 +- Move STANDALONE flag to a module and unify get_path_prefix queries. + Closes #3636. +- Display the Encrypted Internet and Encrypted Email status in the systray + tooltip. Closes #3758. +- Tasktray menu changes, closes #3792. +- Remove the provider domain item (e.g. bitmask.net). +- Rename the EIP status menu items to be more descriptive. +- Change the EIP status menu items from disabled menu items + to submenus with children. +- Move the EIP action menu items under the EIP status submenu tree. +- Adds ``--version`` flag. Closes: #3816 +- Refactors EIPConnection to use LEAPConnection state machine. Closes: #3900 +- Include resource files and ui in the distrubution tarball. Closes: #3825 + +0.3.2 Sep 6 -- the "no crashes or anything" release: +++++++++++++++++++++++++++++++++++++++++++++++++++++ + +- Fix up script in non-bundle linuces. Closes: #3450 +- Logout stops imap and smtp services. Closes: #3553 +- Properly daemonize polkit-gnome-authentication-agent. Closes: #3554 +- Set appropiate error on login cancel. Closes #3582. +- Fix gateway selection problem. Closes 3595. +- Fix typo in wizard: stablish -> establish. Closes #3615. +- Display Encrypted Mail instead of mx in wizard. Closes #3657. +- Fix save logs to file dialog freezing. Closes #3675. +- Complain if setup.py is run with python3. Closes: #3711 +- Enable preferences option in systray. Closes #3717. +- Make soledad emit failed signal for all kinds of socket error. +- Allow to selectively silence logs from different leap components. Closes: #3504 +- Add option to select gateway manually in the preferences panel. Closes #3505. +- Add preferences option to select the enabled services of a provider. Closes #3534. +- Refactor basic password checks. Closes #3552. +- Use dirspec instead of plain xdg. Closes #3574. +- Remove last page from wizard. Closes #3616. +- Display encrypted mail status in the tray. Closes #3659. + +0.3.1 Aug 23: ++++++++++++++ + +- Replace wizard images with the rainbow mask. Closes #3425. +- Update leap.common minimum version needed. +- Set the standalone flag before it's being used. Fixes #3426. +- Stop the twisted reactor adding the stop call to the call chain + instead of stopping it directly. Fixes #3406. +- Allow soledad initialization to retry if it times out. Closes: + #3413 +- Activate window when setting it visible. Also display Hide/Show + message in the tray icon taking into account the window + activation. Fixes #3433. +- Do not start IMAP daemon if mail was not selected among the + services. Fixes #3435. +- Reword RECONNECTING state of openvpn. Fixes #3429. +- Improve OpenVPN detection by searching for a specific leap-only + string in the command line. This makes it possible to run other + VPN instances while also using EIP. Fixes #3268 and #3364. +- OSX: Check for the tun.kext existence in /Library/Extensions + instead of /System/Library/Extensions. Fixes #3271. +- Use DELETE /1/logout to properly logout. Fixes #3510. +- Make the poll interval bigger to improve openvpn's internal + behavior. If it gets queried too many times per second, it's + behavior won't be good. Fixes #3430. +- Transforms usernames to lower case before they are used in the + registration and authentication. Closes #3541. +- Add filter option to the logger window. Closes #3407. +- Add a preference panel that lets you change your password. Closes + #3500 #2798 #3533. +- Move all client code into its own namespace + (leap.bitmask). Closes: #2959 +- Make mail fetch interval in imap service configurable via + environment variable. Closes: #3409 +- Update to new soledad package scheme (common, client and + server). Closes #3487. +- Fetch incoming mail when mail client logs in. Closes: #3525 +- Add first draft of the UI for Encrypted Mail. Closes #3499. + +0.3.0 Aug 9: +++++++++++++ + +- Add missing scripts does not stop if a command fails, also warns + the user if there was an error. Closes #3294. +- Replace 'Sign Out' with 'Log Out' and 'User' with + 'Username'. Closes #3319. +- Verify cacert existence before using it. Closes bug #3362. +- Properly handle login failures. Closes bug #3401. +- Bugfix, avoid getting negative rates. Closes #3274. +- Raise window when setting it as visible. Fixes #3374 +- Fail gracefully when the events port 8090 is in use by something + else. Fixes #3276. +- Validate the username in the login form against the same regexp as + the wizard registration form. Fixes #3214. +- Update text from the tray menu based on the visibility of the + window. Fixes #3400. +- Add check for outdated polkit file. Closes #3209. +- Add support for multiple schemas so we can support multiples api + versions. Closes #3310. +- Rebrand the client to be named Bitmask. Feature #3313. +- Add cancel button to login. Closes #3318. +- Add multiple schema support for SMTP. Closes #3403. +- Add multiple schema support for Soledad. Closes #3404. +- Update Transifex project name and translators' + documentation. Closes #3418. +- Add check for tuntap kext before launching openvpn. Closes: #2906 +- Accept flag for changing openvpn verbosity in logs. Closes: #3305 +- Add imap service to the client. Closes: #2579 +- Add pyside-uic support inside the virtualenv. This way it won't + fail to 'make' if the virtualenv is activated. Closes #3411. +- Reintegrate SMTP relay module. Closes #3375 +- Reintegrate Soledad into the client. Closes #3307. +- Support bundled gpg. Related to #3397. +- Set the default port for SMTP to be 2013. +- Display a more generic error message in the main window, and leave + the detailed one for the log. Closes #3373. + +0.2.4 Jul 26: ++++++++++++++ + +- Use the provider CA cert for every request once we have it + bootstrapped (TOFU). Closes #3227. +- Make calls to leap.common.events asynchronous. Closes #2937. +- Always logout when closing the app if the user previously signed + in. Fixes #3245. +- Make sure the domain field in provider.json is escaped to avoid + potential problems. Fixes #3244. +- Fix incorrect handling of locks in Windows so that stalled locks + do not avoid raising the first instance of the app. Closes: #2910 +- Use traffic rates instead of totals. Closes #2913 +- Allow to alternate between rates and total throughput for the + virtual interface. Closes: #3232 +- Reset rates/totals when terminating connection. Closes #3249 +- Fix a bug in the displayed magnitude for the up/down traffic rates + and totals. +- Force Cleanlooks style if we are running in a KDE environment, so + that it doesn't load potentially incompatible Qt libs. Fixes + #3194. +- Wrap long login status messages to 40 characters. Fixes #3124 +- Workaround a segmentation fault when emitting a signal with its + last parameter being None. Fixes #3083. +- Added IS_RELEASE_VERSION flag that allows us to use code only in + develop versions. Closes #3224. +- Try to terminate already running openvpn instances. Closes #2916 +- Linux: Dynamically generate policy file for polkit. Closes #3208 +- Workaround some OpenVPN problems with priviledge dropping and + routing. Fixes #3178 #3135 #3207 #3203 + +0.2.3 Jul 12: ++++++++++++++ + +- Adapt code to Soledad 0.2.1 api. +- Fix Main Window briefly display before the wizard on first + start. Closes Bug #2954. +- Bugfix: Remember should not be automatically set to + checked. Closes #2955. +- Bugfix: reload config if switching to a different provider. Closes + #3067. +- Bugfix: logger window's toggle button reflects window + state. Closes #3152. +- Set timeout for requests to 10 seconds globally, configurable from + leap.util.constants. Fixes #2878. +- Bugfix: display error message on registration problem. Closes + #3039. +- Make wizard use the main event loop, ensuring clean termination. +- Use cocoasudo for installing missing updown scripts. +- Bugfix: Systray Turn ON action fails because is not correctly + enabled/disabled. Closes #3125. +- Bugfix: wrong systray icon on startup. Closes #3147. +- Bugfix: parse line return in the logger window. Closes #3151. +- Do not log user data on registration. Fixes #3168. +- Add --log-append eip.log to windows EIP launcher options to save + the logs in case of any problems. Fixes #2054. +- OSX: Make the install_path relative to the launcher path instead + -f absolute. +- OSX: Fix icon display in cocoasudo. +- OSX: Raise window when showing if running on OSX. +- Bugfix: EIP status button moved to status panel. +- Check if there is no gateway to use and display correct + message. Close #2921. +- Reorder tray icons according new design. Closes #2919. +- Redirect stdout/stderr and twisted log to the logger. Closes + #3134. +- Improve LoggerWindow colors for easier debugging. +- Move the key manager to its own repository/package. + +0.2.2 Jun 28: ++++++++++++++ + +- Add support for the kde polkit daemon +- Handle 'Incorrect Password' exception (keyring) +- Select the configured domain in the providers combo box. Closes + #2693. +- Remember provider along with the username and password. Closes + #2755. +- Close the app on rejected wizard. Closes bug #2905. +- Only use the Keyring when it's using a known good backend. Closes + #2960 +- Update implementation and semantics of the supported and available + services by a provider. Closes bug #3032. +- Only show the question mark for a check being done if the previous + -ne passed. Fixes #2569. +- Fix main client window not restoring after minimized into + systray. Closes #2574 +- Set EIP different status icons depending on OS. Closes #2643. +- Reimplement openvpn invocation to use twisted ProcessProtocol +- Add runtime requirements checker, verifies that the requirements + are installed and in its correct versions. Closes #2563 +- Add centraliced logging facility, log history in a window. Closes + #2566 +- Improve wizard, hide registration widgets (labels, inputs, button) + and only display a message. Closes #2694 +- Clarify labels through the app (use of EIP) +- Check if the provider api version is supported. Closes feature + #2774. +- Autoselect VPN gateway based on timezone. Closes #2790. +- Disable vpn disconnect on logout. Closes #2795. +- Improve gateway selector based on timezone. It allows to use + multiple gateways in openvpn for redundancy. Closes #2894. +- Use cocoasudo in place of osascript for osx privilege escalation + during openvpn launch. +- Clicking in the tray icon will always show the context menu + instead of activating the window under certain + circumstances. Closes #2788 +- Autostart EIP whenever possible. Closes #2815 +- Update test suite, run_scripts and requirements to run smoothly + with buildbot. +- Add a copy of the processed requirements to util/ +- Display the default provider configured in the systray menu. Close + #2813 +- Make the login steps be a chain of defers in order to be able to + have more cancel points for the whole procedure. Closes #2571 +- Linux: check for up/down scripts and policy files and ask user for + permission to install them in a root-writeable location. Used from + within bundle or for broken installations. +- Integrate SMTP-Relay into the client. +- Integrate Soledad and KeyManager. +- Move the KeyManager from leap.common to leap-client. +- Only use one systray icon, repesenting the status for EIP. Closes + #2762 +- Properly set the binary manifest to the windows openvpn + binary. Closes #203 +- OSX: Add dialog with suggestion to install up/down scripts if + these not found. Closes: #1264, #2759, #2249 +- Workaround for PySide breaking with multiple inheritance. Closes + #2827 +- Refactor login to its own widget and remove Utils menu. Closes + #2789 +- Refactor the status bits out of the MainWindow to its own + StatusPanelWidget. Closes #2792 +- Save the default provider to be used for autostart EIP as + DefaultProvider in leap.conf. Closes #2793 +- Cleanly terminate openvpn process, sending SIGTERM and SIGKILL + after a while. Closes #2753 +- Use twisted's deferToThread and Deferreds to handle parallel tasks +- Use a qt4 reactor for twisted, for launching leap twisted + services. + +0.2.1 May 15: ++++++++++++++ + +- Rewrite most of the client based on the insight gained so far. +- Deselecting the remember checkbox makes the app not populate + user/password values on the login widget. Closes #2059 +- Rewording of setup steps in wizard, to make them more meaningful + to the non-technical user. Closes #2061 +- Fix typo in wizard. +- Fix multiple drawing of services if going back. +- Make registration errors show in red. +- Add a warning if EIP service needs admin password. Addresses part + -f #2062 +- Make traffic indicators display fixed precision. Closes #2114 +- Do not hide the application if the user right clicked the system + tray icon. +- Sanitize network-fetched content that is used to build openvpn + command. +- Avoids multiple instances of leap-client. Each new one just raises + the existing instance and quits. +- Use dark eip icons os osx. Closes #2130 +- Moves BaseConfig to leap.common.config. Closes #2164 +- Add handling for ASSIGN_IP state from OpenVPN in the mainwindow. +- Emit events notifying of the session_id and uid after + authentication so other services can make use of it. Closes #1957 +- Working packaging workflow with rewritten client, using + pyinstaller and platypus. +- Remove network checks temporarily until we find a good way of + doing it, and a good way to deal with them. +- Saves the token to allow token authenticated queries. +- Turn "leap" into namespace package, move common files to + leap_common package that can be shared by other LEAP projects. +- Support standalone configurations for distribution in thumbdrives + and the like. +- Add support for requests < 1.0.0 +- Tests infrastructure, and tests for crypto/srpauth and crypto/srpregister. +- Documentation updated for 0.2.1 release. +- Docstrings style changed to fit sphinx autodoc format. +- Add a simple UI to notify of pending updates. +- Add Windows support. +- Try to install TAP driver on Windows if no tap device is preset. + diff --git a/changes/feature_support-arch-nobody b/changes/feature_support-arch-nobody deleted file mode 100644 index 6aa587a3..00000000 --- a/changes/feature_support-arch-nobody +++ /dev/null @@ -1 +0,0 @@ -- Support 'nobody' (used on Arch) as well as 'nogroup' as group names. Related to #6058. diff --git a/relnotes.txt b/relnotes.txt index a229baee..3ac453a2 100644 --- a/relnotes.txt +++ b/relnotes.txt @@ -1,12 +1,10 @@ -ANNOUNCING Bitmask, the Internet Encryption Toolkit, release 0.8.0. +ANNOUNCING Bitmask, the Internet Encryption Toolkit, release 0.8.1. -The LEAP team is pleased to announce the immediate availability of version -0.8.0 of Bitmask, the Internet Encryption Toolkit, codename "Charlie and the -code refactory" +The LEAP team is pleased to announce the immediate availability of version +0.8.1 of Bitmask, the Internet Encryption Toolkit, a bugfix release for 0.8.0. -This release focused on fixing bugs, particularly with the UI, and refactoring -much of the core backend code for the client. There are no new features in this -version. +This release includes a couple of important bugfixes and a secure ZMQ fallback +for distros that does not have CurveZMQ available. Currently, Bitmask desktop client only support Debian and Ubuntu Linux. Support for Mac, Windows, and other Linux distributions is coming. @@ -37,10 +35,10 @@ See https://leap.se/en/docs/get-involved for tips on contacting the developers, getting start hacking on Bitmask, and reporting bugs. If you are lucky enough, you can also spot us drinking mate, sleepless in night -trains, rooftops, rainforests, lonely islands and, always, beyond any border. +trains, rooftops, rainforests, lonely islands and, always, beyond any border. The LEAP team, -February 4, 2015 +February 25, 2015 Somewhere in the middle of the intertubes. EOF diff --git a/src/leap/bitmask/backend/backend.py b/src/leap/bitmask/backend/backend.py index 75eff8a9..cff731ba 100644 --- a/src/leap/bitmask/backend/backend.py +++ b/src/leap/bitmask/backend/backend.py @@ -20,6 +20,7 @@ # TODO use txzmq bindings instead. import json +import os import threading import time @@ -28,10 +29,14 @@ import psutil from twisted.internet import defer, reactor, threads import zmq -from zmq.auth.thread import ThreadAuthenticator +try: + from zmq.auth.thread import ThreadAuthenticator +except ImportError: + pass from leap.bitmask.backend.api import API, PING_REQUEST from leap.bitmask.backend.utils import get_backend_certificates +from leap.bitmask.config import flags from leap.bitmask.backend.signaler import Signaler import logging @@ -43,12 +48,15 @@ class Backend(object): Backend server. Receives signals from backend_proxy and emit signals if needed. """ - # XXX this should not be hardcoded. Make it configurable. - PORT = '5556' - # XXX we might want to make this configurable per-platform, # and use the most performant socket type on each one. - BIND_ADDR = "tcp://127.0.0.1:%s" % PORT + if flags.ZMQ_HAS_CURVE: + # XXX this should not be hardcoded. Make it configurable. + PORT = '5556' + BIND_ADDR = "tcp://127.0.0.1:%s" % PORT + else: + SOCKET_FILE = "/tmp/bitmask.socket.0" + BIND_ADDR = "ipc://%s" % SOCKET_FILE PING_INTERVAL = 2 # secs @@ -73,20 +81,23 @@ class Backend(object): context = zmq.Context() socket = context.socket(zmq.REP) - # Start an authenticator for this context. - auth = ThreadAuthenticator(context) - auth.start() - # XXX do not hardcode this here. - auth.allow('127.0.0.1') + if flags.ZMQ_HAS_CURVE: + # Start an authenticator for this context. + auth = ThreadAuthenticator(context) + auth.start() + # XXX do not hardcode this here. + auth.allow('127.0.0.1') - # Tell authenticator to use the certificate in a directory - auth.configure_curve(domain='*', location=zmq.auth.CURVE_ALLOW_ANY) - public, secret = get_backend_certificates() - socket.curve_publickey = public - socket.curve_secretkey = secret - socket.curve_server = True # must come before bind + # Tell authenticator to use the certificate in a directory + auth.configure_curve(domain='*', location=zmq.auth.CURVE_ALLOW_ANY) + public, secret = get_backend_certificates() + socket.curve_publickey = public + socket.curve_secretkey = secret + socket.curve_server = True # must come before bind socket.bind(self.BIND_ADDR) + if not flags.ZMQ_HAS_CURVE: + os.chmod(self.SOCKET_FILE, 0600) self._zmq_socket = socket diff --git a/src/leap/bitmask/backend/backend_proxy.py b/src/leap/bitmask/backend/backend_proxy.py index e9ad9b4d..04046d3d 100644 --- a/src/leap/bitmask/backend/backend_proxy.py +++ b/src/leap/bitmask/backend/backend_proxy.py @@ -31,6 +31,7 @@ from leap.bitmask.backend.api import API, STOP_REQUEST, PING_REQUEST from leap.bitmask.backend.settings import Settings from leap.bitmask.backend.utils import generate_zmq_certificates_if_needed from leap.bitmask.backend.utils import get_backend_certificates +from leap.bitmask.config import flags import logging logger = logging.getLogger(__name__) @@ -42,8 +43,11 @@ class BackendProxy(object): to the backend. """ - PORT = '5556' - SERVER = "tcp://localhost:%s" % PORT + if flags.ZMQ_HAS_CURVE: + PORT = '5556' + SERVER = "tcp://localhost:%s" % PORT + else: + SERVER = "ipc:///tmp/bitmask.socket.0" POLL_TIMEOUT = 4000 # ms POLL_TRIES = 3 @@ -62,15 +66,16 @@ class BackendProxy(object): logger.debug("Connecting to server...") socket = context.socket(zmq.REQ) - # public, secret = zmq.curve_keypair() - client_keys = zmq.curve_keypair() - socket.curve_publickey = client_keys[0] - socket.curve_secretkey = client_keys[1] + if flags.ZMQ_HAS_CURVE: + # public, secret = zmq.curve_keypair() + client_keys = zmq.curve_keypair() + socket.curve_publickey = client_keys[0] + socket.curve_secretkey = client_keys[1] - # The client must know the server's public key to make a CURVE - # connection. - public, _ = get_backend_certificates() - socket.curve_serverkey = public + # The client must know the server's public key to make a CURVE + # connection. + public, _ = get_backend_certificates() + socket.curve_serverkey = public socket.setsockopt(zmq.RCVTIMEO, 1000) socket.setsockopt(zmq.LINGER, 0) # Terminate early diff --git a/src/leap/bitmask/backend/signaler.py b/src/leap/bitmask/backend/signaler.py index 43cba994..aec2f606 100644 --- a/src/leap/bitmask/backend/signaler.py +++ b/src/leap/bitmask/backend/signaler.py @@ -26,6 +26,7 @@ import zmq from leap.bitmask.backend.api import SIGNALS from leap.bitmask.backend.utils import get_frontend_certificates +from leap.bitmask.config import flags import logging logger = logging.getLogger(__name__) @@ -36,8 +37,11 @@ class Signaler(object): Signaler client. Receives signals from the backend and sends to the signaling server. """ - PORT = "5667" - SERVER = "tcp://localhost:%s" % PORT + if flags.ZMQ_HAS_CURVE: + PORT = "5667" + SERVER = "tcp://localhost:%s" % PORT + else: + SERVER = "ipc:///tmp/bitmask.socket.1" POLL_TIMEOUT = 2000 # ms POLL_TRIES = 500 @@ -49,15 +53,16 @@ class Signaler(object): logger.debug("Connecting to signaling server...") socket = context.socket(zmq.REQ) - # public, secret = zmq.curve_keypair() - client_keys = zmq.curve_keypair() - socket.curve_publickey = client_keys[0] - socket.curve_secretkey = client_keys[1] + if flags.ZMQ_HAS_CURVE: + # public, secret = zmq.curve_keypair() + client_keys = zmq.curve_keypair() + socket.curve_publickey = client_keys[0] + socket.curve_secretkey = client_keys[1] - # The client must know the server's public key to make a CURVE - # connection. - public, _ = get_frontend_certificates() - socket.curve_serverkey = public + # The client must know the server's public key to make a CURVE + # connection. + public, _ = get_frontend_certificates() + socket.curve_serverkey = public socket.setsockopt(zmq.RCVTIMEO, 1000) socket.setsockopt(zmq.LINGER, 0) # Terminate early diff --git a/src/leap/bitmask/backend/signaler_qt.py b/src/leap/bitmask/backend/signaler_qt.py index 433f18ed..b7f48d21 100644 --- a/src/leap/bitmask/backend/signaler_qt.py +++ b/src/leap/bitmask/backend/signaler_qt.py @@ -18,16 +18,21 @@ Signaling server. Receives signals from the signaling client and emit Qt signals for the GUI. """ +import os import threading import time from PySide import QtCore import zmq -from zmq.auth.thread import ThreadAuthenticator +try: + from zmq.auth.thread import ThreadAuthenticator +except ImportError: + pass from leap.bitmask.backend.api import SIGNALS from leap.bitmask.backend.utils import get_frontend_certificates +from leap.bitmask.config import flags import logging logger = logging.getLogger(__name__) @@ -38,8 +43,12 @@ class SignalerQt(QtCore.QObject): Signaling server. Receives signals from the signaling client and emit Qt signals for the GUI. """ - PORT = "5667" - BIND_ADDR = "tcp://127.0.0.1:%s" % PORT + if flags.ZMQ_HAS_CURVE: + PORT = "5667" + BIND_ADDR = "tcp://127.0.0.1:%s" % PORT + else: + SOCKET_FILE = "/tmp/bitmask.socket.1" + BIND_ADDR = "ipc://%s" % SOCKET_FILE def __init__(self): QtCore.QObject.__init__(self) @@ -67,20 +76,24 @@ class SignalerQt(QtCore.QObject): context = zmq.Context() socket = context.socket(zmq.REP) - # Start an authenticator for this context. - auth = ThreadAuthenticator(context) - auth.start() - auth.allow('127.0.0.1') + if flags.ZMQ_HAS_CURVE: + # Start an authenticator for this context. + auth = ThreadAuthenticator(context) + auth.start() + auth.allow('127.0.0.1') - # Tell authenticator to use the certificate in a directory - auth.configure_curve(domain='*', location=zmq.auth.CURVE_ALLOW_ANY) - public, secret = get_frontend_certificates() - socket.curve_publickey = public - socket.curve_secretkey = secret - socket.curve_server = True # must come before bind + # Tell authenticator to use the certificate in a directory + auth.configure_curve(domain='*', location=zmq.auth.CURVE_ALLOW_ANY) + public, secret = get_frontend_certificates() + socket.curve_publickey = public + socket.curve_secretkey = secret + socket.curve_server = True # must come before bind socket.bind(self.BIND_ADDR) + if not flags.ZMQ_HAS_CURVE: + os.chmod(self.SOCKET_FILE, 0600) + while self._do_work.is_set(): # Wait for next request from client try: diff --git a/src/leap/bitmask/backend/utils.py b/src/leap/bitmask/backend/utils.py index 18e70743..b2674330 100644 --- a/src/leap/bitmask/backend/utils.py +++ b/src/leap/bitmask/backend/utils.py @@ -22,20 +22,63 @@ import os import shutil import stat -import zmq.auth +import zmq +try: + import zmq.auth +except ImportError: + pass + +from leap.bitmask.config import flags from leap.bitmask.util import get_path_prefix from leap.common.files import mkdir_p +from leap.common.check import leap_assert logger = logging.getLogger(__name__) KEYS_DIR = os.path.join(get_path_prefix(), 'leap', 'zmq_certificates') +def _zmq_has_curve(): + """ + Return whether the current ZMQ has support for auth and CurveZMQ security. + + :rtype: bool + + Version notes: + `zmq.curve_keypair()` is new in version 14.0, new in version libzmq-4.0. + Requires libzmq (>= 4.0) to have been linked with libsodium. + `zmq.auth` module is new in version 14.1 + `zmq.has()` is new in version 14.1, new in version libzmq-4.1. + """ + zmq_version = zmq.zmq_version_info() + pyzmq_version = zmq.pyzmq_version_info() + + if pyzmq_version >= (14, 1, 0) and zmq_version >= (4, 1): + return zmq.has('curve') + + if pyzmq_version < (14, 1, 0): + return False + + if zmq_version < (4, 0): + # security is new in libzmq 4.0 + return False + + try: + zmq.curve_keypair() + except zmq.error.ZMQError: + # security requires libzmq to be linked against libsodium + return False + + return True + + def generate_zmq_certificates(): """ Generate client and server CURVE certificate files. """ + leap_assert(flags.ZMQ_HAS_CURVE, "CurveZMQ not supported!") + # Create directory for certificates, remove old content if necessary if os.path.exists(KEYS_DIR): shutil.rmtree(KEYS_DIR) @@ -53,6 +96,8 @@ def get_frontend_certificates(): """ Return the frontend's public and secret certificates. """ + leap_assert(flags.ZMQ_HAS_CURVE, "CurveZMQ not supported!") + frontend_secret_file = os.path.join(KEYS_DIR, "frontend.key_secret") public, secret = zmq.auth.load_certificate(frontend_secret_file) return public, secret @@ -62,6 +107,8 @@ def get_backend_certificates(base_dir='.'): """ Return the backend's public and secret certificates. """ + leap_assert(flags.ZMQ_HAS_CURVE, "CurveZMQ not supported!") + backend_secret_file = os.path.join(KEYS_DIR, "backend.key_secret") public, secret = zmq.auth.load_certificate(backend_secret_file) return public, secret @@ -84,5 +131,8 @@ def generate_zmq_certificates_if_needed(): Generate the needed ZMQ certificates for backend/frontend communication if needed. """ - if not _certificates_exist(): + if flags.ZMQ_HAS_CURVE and not _certificates_exist(): generate_zmq_certificates() + + +flags.ZMQ_HAS_CURVE = _zmq_has_curve() diff --git a/src/leap/bitmask/backend_app.py b/src/leap/bitmask/backend_app.py index 286b04f7..3e88a95a 100644 --- a/src/leap/bitmask/backend_app.py +++ b/src/leap/bitmask/backend_app.py @@ -23,6 +23,7 @@ import signal from leap.bitmask.backend.leapbackend import LeapBackend from leap.bitmask.backend.utils import generate_zmq_certificates +from leap.bitmask.config import flags from leap.bitmask.logs.utils import create_logger from leap.bitmask.util import dict_to_flags @@ -57,7 +58,8 @@ def run_backend(bypass_checks=False, flags_dict=None, frontend_pid=None): """ # The backend is the one who always creates the certificates. Either if it # is run separately or in a process in the same app as the frontend. - generate_zmq_certificates() + if flags.ZMQ_HAS_CURVE: + generate_zmq_certificates() # ignore SIGINT since app.py takes care of signaling SIGTERM to us. signal.signal(signal.SIGINT, signal.SIG_IGN) diff --git a/src/leap/bitmask/config/flags.py b/src/leap/bitmask/config/flags.py index 6b70659d..cdde1971 100644 --- a/src/leap/bitmask/config/flags.py +++ b/src/leap/bitmask/config/flags.py @@ -55,3 +55,6 @@ OPENVPN_VERBOSITY = 1 # Skip the checks in the wizard, use for testing purposes only! SKIP_WIZARD_CHECKS = False + +# This flag tells us whether the current pyzmq supports using CurveZMQ or not. +ZMQ_HAS_CURVE = None |