[tor-bugs] #11183 [meek]: Make an HTTP requestor Firefox extension for meek-client

[Tor Bug Tracker & Wiki]

#11183: Make an HTTP requestor Firefox extension for meek-client
-------------------------+----------------------
     Reporter:  dcf      |      Owner:  dcf
         Type:  project  |     Status:  assigned
     Priority:  normal   |  Milestone:
    Component:  meek     |    Version:
   Resolution:           |   Keywords:  meek
Actual Points:           |  Parent ID:  #10935
       Points:           |
-------------------------+----------------------

Comment (by dcf):

 Here are bundles that use an extension in a separate instance of Firefox.
 The second instance sets network.proxy.socks_remote_dns=false so that no
 patch for DNS lookups is needed in Tor Browser, and sets
 security.enable_tls_session_tickets=true in order to send the session
 ticket TLS extension. This version has the extension listen on an
 ephemeral port, which is written to the browser's stdout and read by the
 transport plugin.

  * https://people.torproject.org/~dcf/pt-bundle/3.5.2.1-meek-4/
  * https://gitweb.torproject.org/pluggable-
 transports/meek.git/commit/7cba0a659c3abd4b92eb289b20263726d1c6d610
  * https://gitweb.torproject.org/user/dcf/tor-browser-
 bundle.git/tag/refs/tags/tbb-3.5.2.1-meek-4

 The TLS signature of this bundle matches Firefox's, in what I have tested
 so far. A diff between client hellos is just
 {{{
              Length: 165
              Version: TLS 1.0 (0x0301)
              Random
 -                gmt_unix_time: Jul 12, 2089 08:23:06.000000000 PDT
 -                random_bytes:
 f0b149a04ac4a554c5bda57030b17342cc1c0ab59c925cc8...
 +                gmt_unix_time: Oct 23, 2081 13:09:42.000000000 PDT
 +                random_bytes:
 1608e4e50bbc5fb188ab87211ce29f35622d117a4829ebb2...
              Session ID Length: 0
              Cipher Suites Length: 70
              Cipher Suites (35 suites)
 }}}

 When you start the browser, it's immediately going to open a dialog box.
 The dialog is actually the sub-instance of Firefox running the meek-http-
 helper extension.
 [[Image(get-down-get-funky?.png)]]
 Don't close the dialog or it will shut down the extension. The modal
 dialog prevents a browser window from being shown, and the extension kills
 the whole program when the dialog is closed. We need to find a way to
 accomplish the same thing without showing a visible dialog. For now it's
 kind of nice in that it makes it easy to see if the sub-instance of
 Firefox is being killed properly, etc.

 There's a known bug, which is that subprocesses don't get cleaned up on
 Windows. In particular, meek-client and the second Firefox keep running
 when you close the main browser. I think it's because of #9330--the
 program that starts meek-client and Firefox gets killed by
 ProcessTerminate without being able to notify its children. I have an idea
 for dealing with that that I'll try in the next round of bundles.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11183#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online