1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
package se.leap.bitmaskclient.base.models;
import android.net.Uri;
import android.os.Parcel;
import android.os.Parcelable;
import java.io.UnsupportedEncodingException;
import java.net.IDN;
import java.net.URISyntaxException;
import java.net.URLEncoder;
import java.util.Locale;
public class Introducer implements Parcelable {
private final String type;
private final String address;
private final String certificate;
private final String fullyQualifiedDomainName;
private final boolean kcpEnabled;
private final String auth;
public Introducer(String type, String address, String certificate, String fullyQualifiedDomainName, boolean kcpEnabled, String auth) {
this.type = type;
this.address = address;
this.certificate = certificate;
this.fullyQualifiedDomainName = fullyQualifiedDomainName;
this.kcpEnabled = kcpEnabled;
this.auth = auth;
}
protected Introducer(Parcel in) {
type = in.readString();
address = in.readString();
certificate = in.readString();
fullyQualifiedDomainName = in.readString();
kcpEnabled = in.readByte() != 0;
auth = in.readString();
}
public String getFullyQualifiedDomainName() {
return fullyQualifiedDomainName;
}
@Override
public void writeToParcel(Parcel dest, int flags) {
dest.writeString(type);
dest.writeString(address);
dest.writeString(certificate);
dest.writeString(fullyQualifiedDomainName);
dest.writeByte((byte) (kcpEnabled ? 1 : 0));
dest.writeString(auth);
}
@Override
public int describeContents() {
return 0;
}
public static final Creator<Introducer> CREATOR = new Creator<>() {
@Override
public Introducer createFromParcel(Parcel in) {
return new Introducer(in);
}
@Override
public Introducer[] newArray(int size) {
return new Introducer[size];
}
};
public boolean validate() {
if (!"obfsvpnintro".equals(type)) {
throw new IllegalArgumentException("Unknown type: " + type);
}
if (!address.contains(":") || address.split(":").length != 2) {
throw new IllegalArgumentException("Expected address in format ipaddr:port");
}
if (certificate.length() != 70) {
throw new IllegalArgumentException("Wrong certificate length: " + certificate.length());
}
if (!"localhost".equals(fullyQualifiedDomainName) && fullyQualifiedDomainName.split("\\.").length < 2) {
throw new IllegalArgumentException("Expected a FQDN, got: " + fullyQualifiedDomainName);
}
if (auth == null || auth.isEmpty()) {
throw new IllegalArgumentException("Auth token is missing");
}
return true;
}
public static Introducer fromUrl(String introducerUrl) throws URISyntaxException, IllegalArgumentException {
Uri uri = Uri.parse(introducerUrl);
String fqdn = uri.getQueryParameter("fqdn");
if (fqdn == null || fqdn.isEmpty()) {
throw new IllegalArgumentException("FQDN not found in the introducer URL");
}
if (!isAscii(fqdn)) {
throw new IllegalArgumentException("FQDN is not ASCII: " + fqdn);
}
boolean kcp = "1".equals(uri.getQueryParameter( "kcp"));
String cert = uri.getQueryParameter( "cert");
if (cert == null || cert.isEmpty()) {
throw new IllegalArgumentException("Cert not found in the introducer URL");
}
String auth = uri.getQueryParameter( "auth");
if (auth == null || auth.isEmpty()) {
throw new IllegalArgumentException("Authentication token not found in the introducer URL");
}
return new Introducer(uri.getScheme(), uri.getAuthority(), cert, fqdn, kcp, auth);
}
public String getAuthToken() {
return auth;
}
private static boolean isAscii(String fqdn) {
try {
String asciiFQDN = IDN.toASCII(fqdn, IDN.USE_STD3_ASCII_RULES);
return fqdn.equals(asciiFQDN);
} catch (IllegalArgumentException e) {
return false;
}
}
public String toUrl() throws UnsupportedEncodingException {
return String.format(Locale.US, "%s://%s?fqdn=%s&kcp=%d&cert=%s&auth=%s", type, address, URLEncoder.encode(fullyQualifiedDomainName, "UTF-8"), kcpEnabled ? 1 : 0, URLEncoder.encode(certificate, "UTF-8"), URLEncoder.encode(auth, "UTF-8"));
}
}
|
