Re: [tor-dev] RFC: Using `utls` in meek_lite.

2019-01-23 Thread David Fifield
On Thu, Jan 24, 2019 at 07:44:48AM +, Yawning Angel wrote: > On 1/24/19 7:38 AM, David Fifield wrote: > > I see, you're right. It has to do with the reuse of the initConn. > > A proper "general" solution that solves that problem and the ALPN issue > is to have a `initConn` and `http.RoundTripp

Re: [tor-dev] RFC: Using `utls` in meek_lite.

2019-01-23 Thread Yawning Angel
On 1/24/19 7:38 AM, David Fifield wrote: > I see, you're right. It has to do with the reuse of the initConn. A proper "general" solution that solves that problem and the ALPN issue is to have a `initConn` and `http.RoundTripper` instance per destination host, and some additional locking. With mor

Re: [tor-dev] RFC: Using `utls` in meek_lite.

2019-01-23 Thread David Fifield
On Thu, Jan 24, 2019 at 07:33:39AM +, Yawning Angel wrote: > On 1/24/19 6:47 AM, David Fifield wrote: > > // This also assumes that req.URL.Host will remain constant for the > > // lifetime of the roundTripper, which is a valid assumption for > > meeklite. > > > > Am I wrong, or is th

Re: [tor-dev] RFC: Using `utls` in meek_lite.

2019-01-23 Thread Yawning Angel
On 1/24/19 6:47 AM, David Fifield wrote: > // This also assumes that req.URL.Host will remain constant for the > // lifetime of the roundTripper, which is a valid assumption for > meeklite. > > Am I wrong, or is the actual restriction less strict? You can reuse the > roundTripper for

Re: [tor-dev] RFC: Using `utls` in meek_lite.

2019-01-23 Thread David Fifield
On Mon, Jan 21, 2019 at 05:12:41AM +, Yawning Angel wrote: > I just pushed a change to obfs4proxy master to use `utls` to mask the > ClientHello signature (currently Chrome 70.x). > > https://gitlab.com/yawning/obfs4/commit/4d453dab2120082b00bf6e63ab4aaeeda6b8d8a3 // This also assumes

Re: [tor-dev] using obfs4 to tunnel to a SOCKS proxy server

2019-01-23 Thread David Fifield
On Wed, Jan 23, 2019 at 11:41:42AM +, Yawning Angel wrote: > > For example, could the obfs4 server side provide a generic SOCKS proxy? > > There is no functionality for doing such a thing in mainline obfs4proxy. > > What currently will work is any one of: > > * Stick a proxy server of your

Re: [tor-dev] using obfs4 to tunnel to a SOCKS proxy server

2019-01-23 Thread Yawning Angel
On 1/23/19 10:42 AM, Hans-Christoph Steiner wrote: > uniqx got the setup working with obfs4 connecting to a port on the > server side, like a webserver. Weŕe trying to figure out a way to make > this obfs4 setup to behave like an SSH port forward, but weŕe banging > our heads against the concept.

[tor-dev] using obfs4 to tunnel to a SOCKS proxy server

2019-01-23 Thread Hans-Christoph Steiner
Hey all, Hopefully this is a valid place to ask about PTs technical details. So n8fr8, uniqx (Michael Pöhn), and I are working to make an easily reproducible obfs4 client and server setup with ansible scripts uniqx got the setup working with obfs4 connecting to a port on the server side, like a