[guardian-dev] Fwd: Re: Https and Orbot/Orlib

[Nathan of Guardian]

News on the text-only browser that works with Orbot without rooting on
Android 2.x.



-------- Original Message --------
Subject: 	Re: Https and Orbot/Orlib
Date: 	Mon, 3 Jan 2011 16:42:05 +0200
From: 	Nick Derachits <n.derachits at gmail.com>
To: 	Nathan of Guardian <nathan at guardianproject.info>



Some words about ND Private Browser: It's text based, works on Android
2.x without root. It's based on Webkit. I made it textbased because it
looks impossible to intercept all the requests from Webkit component
without root so I decided to render text and links only.

About package org.torproject.android.net
<http://org.torproject.android.net/>:
I tried it as a replacement for orlib but sadly it didn't help.
Now I'm trying to connect to http proxy enstead of SOCKS. And it works
for https://check.torproject.org/ but for most of other urls it fails
with strange error inside of DefaultHttpClient implementation. I will
try to figure it out.

Have a nice day,
Nick
On Mon, Jan 3, 2011 at 12:23 AM, Nathan of Guardian
<nathan at guardianproject.info <mailto:nathan at guardianproject.info>> wrote:

    Nick,

    Great to hear from you, and excited to checkout "ND Private Browser".

    I believe we have some updated code for ORLib that fixes the HTTPS
    issue. I can look into it shortly and get back to you, but if you look
    at the Orbot code, I believe we've fixed it there in the
    org.torproject.android.net <http://org.torproject.android.net> package.

    Check out ModSSLSocketFactory:

https://svn.torproject.org/svn/projects/android/trunk/Orbot/src/org/torproject/android/net/ModSSLSocketFactory.java

    Otherwise, can you tell me more about the browser and how it works? Is
    it based on Webkit? Does it work on Android 1.x and 2.x?

    +Nathan

    On 1/2/11 1:13 PM, Guardian Contact: Nick Derachits wrote:
    > From: Nick Derachits <n.derachits at gmail.com
    <mailto:n.derachits at gmail.com>>
    > Subject: Https and Orbot/Orlib
    >
    > Message Body:
    > Hello, I'm android developer. I wrote application on top of orlib
    - "ND Private Browser". It is available in Android Market with
    sources. I met one problem - https doesn't work. BTW, http scheme
    works fin. Also I found line
    > // SSL Sockets don't work at the moment. (line 282 of
    ModSSLSocketFactory.java)
    >
    > So, my question: Is it possible to connect to https resources
    using orlib/orbot library and if it is, could you please share some
    lines of code how.
    >
    > Thanks in advance,
    > Nick Derachits
    >
    > --
    > This mail is sent via contact form on The Guardian Project
    http://guardianproject.info
    >