search

guardianproject / haven

Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors
https://guardianproject.github.io/haven/
GNU General Public License v3.0
6.61k stars 726 forks source link

Tor has successfully opened a circuit, but did not acknowledge serving haven's port 8888 despite being setup. #290

Open jidhub opened 6 years ago

jidhub commented 6 years ago

My tor browser[1] failed accessing Haven's logs[2] on the onion server hosted by "Orbot: proxy with tor" [3]. (On the point of reporting this, I discovered4 that Haven's servers was also accessible on localhost:8888. I suggested on a pull request[5] to document that in the help text hovering in the app.)

The server is running well on localhost:8888, and it is now serving me content through a port forwarding. I did never see orbot's warning "An app wants to open hidden server port 8888 to the Tor network. This is safe if you trust the app."[6].

[1]: linux64-7.5.3_en-US https://www.torproject.org/projects/torbrowser.html [2]: 0.1.0-RC-1 installed with google play on android 6.0 [3]: 16.0.0-RC-2-multi-SDK16 also installed with google play on android 6.0; it says "NOTICE: Tor has successfully opened a circuit. Looks ..."

[5] https://github.com/guardianproject/haven/pull/289 [6] https://github.com/guardianproject/haven/issues/175 ; it would be good to also document that message in a troubleshooting guide.

lukeswitz commented 6 years ago

In working on 2FA and multi-device support, this part is without a doubt a headache. The proxy setup isn’t flexible...yet.

The web server makes it all but easy to open a circuit, a big problem being the blank password with no feedback. It will ask Tor to open the port and then abort. Without enough time allotted, the call fails with no feedback and the user is confused.

If you initially forgot a password, I’d prefer it alert the user instead of attempting to start the server. (The catch statement now is just logging there was blank input).

*After careful review, the issue is not with Haven but a configuration issue. A fresh Orbot & Haven install should sort out any cached proxy misconfiguration

jidhub commented 6 years ago

Tor browser did not show a password form, it just shows:

"Unable to connect

Firefox can’t establish a connection to the server at paXXXXXXXXus.onion:8888."

lukeswitz commented 6 years ago

Yes, I mean the password settings field in the Haven app itself. I’ve also run into problems using Firefox Tor configs. Have you tested and reproduced the same using Orfox?

jidhub commented 6 years ago

Sorry, can you explain why this password field, if functionning correctly when accessing localhost:8888, would no more work if using Tor ?

n8fr8 commented 6 years ago

I think the issue here sounds like something at the Tor level, with @jidhub onion site ( paXXXXXXXXus.onion:8888) being unreachable.

habib98 commented 5 years ago

wow