[tor-project] cohosh's monthly status report, April 2023

Cecylia_Bocovich · May 5, 2023, 7:02pm

Hi! This is my status report for contract work done in April 2023.

# Reputation-based Bridge Distribution

- Iterated on wasm target addition to rust project in tor-browser-build

- Reviewed and merged work on the rdsys backend api rust library and lox-distributor

# Conjure PT

- Added basic CI to Conjure

- Added dependency bot to the Conjure project

- Opened an upstream issue to restore needed functionality in the
newest version of tapdance

github.com/refraction-networking/gotapdance

Support custom http.Client for APIRegistrar

opened 05:38PM - 12 Apr 23 UTC

closed 03:00PM - 14 Apr 23 UTC

cohosh

I'm going through to process of adapting the Tor Conjure PT to use the latest ve…rsion of the gotapdance library, and there have been significant changes since version 1.3.0 (as an aside, I highly recommend using [semantic versioning](https://semver.org/) in the future to signal breaking API changes). Before, I implemented domain fronting by setting the `APIRegistrarBidirectional.Client` to my own `http.Client` with the appropriate front domain. See the excerpt from [client/registration.go](https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conjure/-/blob/a73326edc0a0022f1763608d7897bcd06cfc0ee7/client/registration.go#L73): ```golang // APIRegistrarBidirectional expects an HTTP client for sending the registration request. // The http.RoundTripper associated with this client dictates the censorship-resistant // rendezvous method used to establish a connection with the registration server. // As of now, the deployed Conjure station supports direct HTTP connections and domain // fronted connections. registrar.Client = &http.Client{ Transport: &Rendezvous{ registerURL: config.registerURL, front: config.front, transport: transport, }, } ``` However, this is no longer exposed. The easiest ways I can think to do this are: - export a `SetHTTPClient` function that allows the caller to pass an `http.Client` to it (different from how [`setHTTPClient`](https://github.com/refraction-networking/gotapdance/blob/master/pkg/registration/api-registrar.go#L149) currently works), or - add an `HTTPClient` field to `registration.Config`

- Properly close all opened SOCKS conns

# Snowflake Webextension

- Added a Content Security Policy to manifest

- Released a new version of the web extension (v0.7.2)

- Reviewed several merge requests

···

_______________________________________________
tor-project mailing list
tor-project@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project