torbrowser-launcher

   1 #!/usr/bin/env python
   2 from twisted.internet import gtk2reactor
   3 gtk2reactor.install()
   4 from twisted.internet import reactor
   5
   6 import pygtk
   7 pygtk.require('2.0')
   8 import gtk
   9
  10 import os, sys, subprocess, locale, urllib2, gobject, time, pickle, json
  11
  12 from twisted.web.client import Agent, ResponseDone
  13 from twisted.web.http_headers import Headers
  14 from twisted.internet.protocol import Protocol
  15 from twisted.internet.ssl import ClientContextFactory
  16
  17 from OpenSSL.SSL import Context, VERIFY_PEER, VERIFY_FAIL_IF_NO_PEER_CERT
  18 from OpenSSL.crypto import load_certificate, FILETYPE_PEM
  19
  20 class VerifyTorProjectCert(ClientContextFactory):
  21
  22     def __init__(self, torproject_pem):
  23         self.torproject_ca = load_certificate(FILETYPE_PEM, open(torproject_pem, 'r').read())
  24
  25     def getContext(self, host, port):
  26         ctx = ClientContextFactory.getContext(self)
  27         ctx.set_verify_depth(0)
  28         ctx.set_verify(VERIFY_PEER | VERIFY_FAIL_IF_NO_PEER_CERT, self.verifyHostname)
  29         return ctx
  30
  31     def verifyHostname(self, connection, cert, errno, depth, preverifyOK):
  32         return cert.digest('sha256') == self.torproject_ca.digest('sha256')
  33
  34
  35 class TorBrowserLauncher:
  36     def __init__(self):
  37         # initialize the app
  38         self.set_gui(None, '', [])
  39         self.discover_arch_lang()
  40         self.build_paths()
  41         self.mkdir(self.paths['dir']['download'])
  42         self.mkdir(self.paths['dir']['tbb'])
  43         self.init_gnupg()
  44
  45         # allow buttons to have icons
  46         try:
  47             settings = gtk.settings_get_default()
  48             settings.props.gtk_button_images = True
  49         except:
  50             pass
  51
  52         self.launch_gui = True
  53
  54         # if we haven't already hit an error
  55         if self.gui != 'error':
  56             # load settings
  57             if self.load_settings():
  58                 self.build_paths(self.settings['latest_version'])
  59
  60                 # how long was it since the last update check?
  61                 # 86400 seconds = 24 hours
  62                 current_timestamp = int(time.time())
  63                 if current_timestamp - self.settings['last_update_check_timestamp'] >= 86400:
  64                     # check for update
  65                     print 'Checking for update'
  66                     self.set_gui('task', "Checking for Tor Browser update.",
  67                         ['download_update_check',
  68                          'attempt_update'])
  69
  70                 else:
  71                     # no need to check for update
  72                     print 'Checked for update within 24 hours, skipping'
  73                     self.start_launcher()
  74
  75             else:
  76                 self.set_gui('error', "Error loading settings. Delete ~/.torbrowser and try again.", [])
  77
  78         if self.launch_gui:
  79             # set up the window
  80             self.window = gtk.Window(gtk.WINDOW_TOPLEVEL)
  81             self.window.set_title("Tor Browser")
  82             self.window.set_icon_from_file(self.paths['file']['icon'])
  83             self.window.set_position(gtk.WIN_POS_CENTER)
  84             self.window.set_border_width(10)
  85             self.window.connect("delete_event", self.delete_event)
  86             self.window.connect("destroy", self.destroy)
  87
  88             # build the rest of the UI
  89             self.build_ui()
  90
  91     # download or run TBB
  92     def start_launcher(self):
  93       # is TBB already installed?
  94       if os.path.isfile(self.paths['file']['start']) and os.access(self.paths['file']['start'], os.X_OK):
  95         if self.settings['installed_version'] == self.settings['latest_version']:
  96           # current version of tbb is installed, launch it
  97           self.run(False)
  98           self.launch_gui = False
  99         elif self.settings['installed_version'] < self.settings['latest_version']:
 100           # there is a tbb upgrade available
 101           self.set_gui('task', "Your Tor Browser is out of date.",
 102             ['download_tarball',
 103              'download_tarball_sig',
 104              'verify',
 105              'extract',
 106              'run'])
 107         else:
 108           # for some reason the installed tbb is newer than the current version?
 109           self.set_gui('error', "Something is wrong. The version of Tor Browser Bundle you have installed is newer than the current version?", [])
 110
 111       # not installed
 112       else:
 113           # are the tarball and sig already downloaded?
 114           if os.path.isfile(self.paths['file']['tarball']) and os.path.isfile(self.paths['file']['tarball_sig']):
 115               # start the gui with verify
 116               self.set_gui('task', "Installing Tor Browser.",
 117                   ['verify',
 118                    'extract',
 119                    'run'])
 120
 121           # first run
 122           else:
 123               self.set_gui('task', "Downloading and installing Tor Browser.",
 124                   ['download_tarball',
 125                    'download_tarball_sig',
 126                    'verify',
 127                    'extract',
 128                    'run'])
 129
 130     # discover the architecture and language
 131     def discover_arch_lang(self):
 132         # figure out the architecture
 133         (sysname, nodename, release, version, machine) = os.uname()
 134         self.architecture = machine
 135
 136         # figure out the language
 137         available_languages = ['en-US', 'ar', 'de', 'es-ES', 'fa', 'fr', 'it', 'ko', 'nl', 'pl', 'pt-PT', 'ru', 'vi', 'zh-CN']
 138         default_locale = locale.getdefaultlocale()[0]
 139         if default_locale == None:
 140             self.language = 'en-US'
 141         else:
 142             self.language = default_locale.replace('_', '-')
 143             if self.language not in available_languages:
 144                 self.language = self.language.split('-')[0]
 145                 if self.language not in available_languages:
 146                     for l in available_languages:
 147                         if l[0:2] == self.language:
 148                             self.language = l
 149             # if language isn't available, default to english
 150             if self.language not in available_languages:
 151                 self.language = 'en-US'
 152
 153     # build all relevant paths
 154     def build_paths(self, tbb_version = None):
 155         homedir = os.getenv('HOME')
 156         if not homedir:
 157             homedir = '/tmp/.torbrowser-'+os.getenv('USER')
 158             if os.path.exists(homedir) == False:
 159                 try:
 160                     os.mkdir(homedir, 0700)
 161                 except:
 162                     self.set_gui('error', "Error creating %s" % homedir, [], False)
 163         if not os.access(homedir, os.W_OK):
 164             self.set_gui('error', "%s is not writable" % homedir, [], False)
 165
 166         tbb_data = '%s/.torbrowser' % homedir
 167
 168         if tbb_version:
 169             tarball_filename = 'tor-browser-gnu-linux-'+self.architecture+'-'+tbb_version+'-dev-'+self.language+'.tar.gz'
 170             self.paths['file']['tarball'] = tbb_data+'/download/'+tarball_filename
 171             self.paths['file']['tarball_sig'] = tbb_data+'/download/'+tarball_filename+'.asc'
 172             self.paths['url']['tarball'] = 'https://www.torproject.org/dist/torbrowser/linux/'+tarball_filename
 173             self.paths['url']['tarball_sig'] = 'https://www.torproject.org/dist/torbrowser/linux/'+tarball_filename+'.asc'
 174             self.paths['filename']['tarball'] = tarball_filename
 175             self.paths['filename']['tarball_sig'] = tarball_filename+'.asc'
 176
 177         else:
 178             self.paths = {
 179                 'dir': {
 180                     'data': tbb_data,
 181                     'download': tbb_data+'/download',
 182                     'tbb': tbb_data+'/tbb/'+self.architecture,
 183                     'gnupg_homedir': tbb_data+'/gnupg_homedir'
 184                 },
 185                 'file': {
 186                     'settings': tbb_data+'/settings',
 187                     'version': tbb_data+'/version',
 188                     'start': tbb_data+'/tbb/'+self.architecture+'/tor-browser_'+self.language+'/start-tor-browser',
 189                     'update_check': tbb_data+'/download/RecommendedTBBVersions',
 190                     'icon': '/usr/share/pixmaps/torbrowser80.xpm',
 191                     'torproject_pem': '/usr/share/torbrowser-launcher/torproject.pem',
 192                     'erinn_key': '/usr/share/torbrowser-launcher/erinn.asc',
 193                     'sebastian_key': '/usr/share/torbrowser-launcher/sebastian.asc'
 194                 },
 195                 'url': {
 196                     'update_check': 'https://check.torproject.org/RecommendedTBBVersions'
 197                 },
 198                 'filename': {}
 199             }
 200
 201     # create a directory
 202     def mkdir(self, path):
 203         try:
 204             if os.path.exists(path) == False:
 205                 os.makedirs(path, 0700)
 206                 return True
 207         except:
 208             self.set_gui('error', "Cannot create directory %s" % path, [], False)
 209             return False
 210         if not os.access(path, os.W_OK):
 211             self.set_gui('error', "%s is not writable" % path, [], False)
 212             return False
 213         return True
 214
 215     # if gnupg_homedir isn't set up, set it up
 216     def init_gnupg(self):
 217         if not os.path.exists(self.paths['dir']['gnupg_homedir']):
 218             print 'Creating GnuPG homedir', self.paths['dir']['gnupg_homedir']
 219             if self.mkdir(self.paths['dir']['gnupg_homedir']):
 220                 # import keys
 221                 print 'Importing keys'
 222                 p1 = subprocess.Popen(['/usr/bin/gpg', '--homedir', self.paths['dir']['gnupg_homedir'], '--import', self.paths['file']['erinn_key']])
 223                 p2 = subprocess.Popen(['/usr/bin/gpg', '--homedir', self.paths['dir']['gnupg_homedir'], '--import', self.paths['file']['sebastian_key']])
 224                 # wait for keys to import before moving on
 225                 p1.wait()
 226                 p2.wait()
 227
 228     # there are different GUIs that might appear, this sets which one we want
 229     def set_gui(self, gui, message, tasks, autostart=True):
 230         self.gui = gui
 231         self.gui_message = message
 232         self.gui_tasks = tasks
 233         self.gui_task_i = 0
 234         self.gui_autostart = autostart
 235
 236     # set all gtk variables to False
 237     def clear_ui(self):
 238         if hasattr(self, 'box'):
 239             self.box.destroy()
 240         self.box = False
 241
 242         self.label = False
 243         self.progressbar = False
 244         self.button_box = False
 245         self.start_button = False
 246         self.exit_button = False
 247
 248     # build the application's UI
 249     def build_ui(self):
 250         self.box = gtk.VBox(False, 20)
 251         self.window.add(self.box)
 252
 253         if self.gui == 'error':
 254             # labels
 255             self.label = gtk.Label( self.gui_message )
 256             self.label.set_line_wrap(True)
 257             self.box.pack_start(self.label, True, True, 0)
 258             self.label.show()
 259
 260             #self.label2 = gtk.Label("You can fix the problem by deleting:\n"+self.paths['dir']['data']+"\n\nHowever, you will lose all your bookmarks and other Tor Browser preferences.")
 261             #self.label2.set_line_wrap(True)
 262             #self.box.pack_start(self.label2, True, True, 0)
 263             #self.label2.show()
 264
 265             # exit button
 266             exit_image = gtk.Image()
 267             exit_image.set_from_stock(gtk.STOCK_CANCEL, gtk.ICON_SIZE_BUTTON)
 268             self.exit_button = gtk.Button("Exit")
 269             self.exit_button.set_image(exit_image)
 270             self.exit_button.connect("clicked", self.destroy, None)
 271             self.box.add(self.exit_button)
 272             self.exit_button.show()
 273
 274         elif self.gui == 'task':
 275             # label
 276             self.label = gtk.Label( self.gui_message )
 277             self.label.set_line_wrap(True)
 278             self.box.pack_start(self.label, True, True, 0)
 279             self.label.show()
 280
 281             # progress bar
 282             self.progressbar = gtk.ProgressBar(adjustment=None)
 283             self.progressbar.set_orientation(gtk.PROGRESS_LEFT_TO_RIGHT)
 284             self.progressbar.set_pulse_step(0.01)
 285             self.box.pack_start(self.progressbar, True, True, 0)
 286
 287             # button box
 288             self.button_box = gtk.HButtonBox()
 289             self.button_box.set_layout(gtk.BUTTONBOX_SPREAD)
 290             self.box.pack_start(self.button_box, True, True, 0)
 291             self.button_box.show()
 292
 293             # start button
 294             start_image = gtk.Image()
 295             start_image.set_from_stock(gtk.STOCK_APPLY, gtk.ICON_SIZE_BUTTON)
 296             self.start_button = gtk.Button("Start")
 297             self.start_button.set_image(start_image)
 298             self.start_button.connect("clicked", self.start, None)
 299             self.button_box.add(self.start_button)
 300             if not self.gui_autostart:
 301               self.start_button.show()
 302
 303             # exit button
 304             exit_image = gtk.Image()
 305             exit_image.set_from_stock(gtk.STOCK_CANCEL, gtk.ICON_SIZE_BUTTON)
 306             self.exit_button = gtk.Button("Exit")
 307             self.exit_button.set_image(exit_image)
 308             self.exit_button.connect("clicked", self.destroy, None)
 309             self.button_box.add(self.exit_button)
 310             self.exit_button.show()
 311
 312         self.box.show()
 313         self.window.show()
 314
 315         if self.gui_autostart:
 316             self.start(None)
 317
 318     # start button clicked, begin tasks
 319     def start(self, widget, data=None):
 320         # disable the start button
 321         if self.start_button:
 322             self.start_button.set_sensitive(False)
 323
 324         # start running tasks
 325         self.run_task()
 326
 327     # run the next task in the task list
 328     def run_task(self):
 329         self.refresh_gtk()
 330
 331         if self.gui_task_i >= len(self.gui_tasks):
 332             self.destroy(False)
 333             return
 334
 335         task = self.gui_tasks[self.gui_task_i]
 336
 337         # get ready for the next task
 338         self.gui_task_i += 1
 339
 340         if task == 'download_update_check':
 341             print 'Downloading '+self.paths['url']['update_check']
 342             self.download('update check', self.paths['url']['update_check'], self.paths['file']['update_check'])
 343
 344         if task == 'attempt_update':
 345             print 'Checking to see if update it needed'
 346             self.attempt_update()
 347
 348         elif task == 'download_tarball':
 349             print 'Downloading '+self.paths['url']['tarball']
 350             self.download('tarball', self.paths['url']['tarball'], self.paths['file']['tarball'])
 351
 352         elif task == 'download_tarball_sig':
 353             print 'Downloading '+self.paths['url']['tarball_sig']
 354             self.download('signature', self.paths['url']['tarball_sig'], self.paths['file']['tarball_sig'])
 355
 356         elif task == 'verify':
 357             print 'Verifying signature'
 358             self.verify()
 359
 360         elif task == 'extract':
 361             print 'Extracting '+self.paths['filename']['tarball']
 362             self.extract()
 363
 364         elif task == 'run':
 365             print 'Running '+self.paths['file']['start']
 366             self.run()
 367
 368         elif task == 'start_over':
 369             print 'Starting download over again'
 370             self.start_over()
 371
 372     def response_received(self, response):
 373         class FileDownloader(Protocol):
 374             def __init__(self, file, total, progress, done_cb):
 375                 self.file = file
 376                 self.total = total
 377                 self.so_far = 0
 378                 self.progress = progress
 379                 self.all_done = done_cb
 380
 381             def dataReceived(self, bytes):
 382                 self.file.write(bytes)
 383                 self.so_far += len(bytes)
 384                 percent = float(self.so_far) / float(self.total)
 385                 self.progress.set_fraction(percent)
 386                 amount = float(self.so_far)
 387                 units = "bytes"
 388                 for (size, unit) in [(1024 * 1024, "MiB"), (1024, "KiB")]:
 389                     if amount > size:
 390                         units = unit
 391                         amount = amount / float(size)
 392                         break
 393
 394                 self.progress.set_text('Downloaded %2.1f%% (%2.1f %s)' % ((percent * 100.0), amount, units))
 395
 396             def connectionLost(self, reason):
 397                 print 'Finished receiving body:', reason.getErrorMessage()
 398                 self.all_done(reason)
 399
 400         dl = FileDownloader(self.file_download, response.length, self.progressbar, self.response_finished)
 401         response.deliverBody(dl)
 402
 403     def response_finished(self, msg):
 404         if msg.check(ResponseDone):
 405             self.file_download.close()
 406             # next task!
 407             self.run_task()
 408
 409         else:
 410             print "FINISHED", msg
 411             ## FIXME handle errors
 412
 413     def download_error(self, f):
 414         print "Download error", f
 415         self.set_gui('error', "Error starting download:\n\n%s\n\nAre you connected to the internet?" % f.value, [], False)
 416         self.clear_ui()
 417         self.build_ui()
 418
 419     def download(self, name, url, path):
 420         # initialize the progress bar
 421         self.progressbar.set_fraction(0)
 422         self.progressbar.set_text('Downloading '+name)
 423         self.progressbar.show()
 424         self.refresh_gtk()
 425
 426         agent = Agent(reactor, VerifyTorProjectCert(self.paths['file']['torproject_pem']))
 427         d = agent.request('GET', url,
 428                           Headers({'User-Agent': ['torbrowser-launcher']}),
 429                           None)
 430
 431         self.file_download = open(path, 'w')
 432         d.addCallback(self.response_received).addErrback(self.download_error)
 433
 434         if not reactor.running:
 435             reactor.run()
 436
 437     def attempt_update(self):
 438         # load the update check file
 439         try:
 440             versions = json.load(open(self.paths['file']['update_check']))
 441             latest_version = None
 442
 443             end = '-Linux'
 444             for version in versions:
 445                 if str(version).find(end) != -1:
 446                     latest_version = str(version)
 447
 448             if latest_version:
 449                 self.settings['latest_version'] = latest_version[:-len(end)]
 450                 self.settings['last_update_check_timestamp'] = int(time.time())
 451                 self.save_settings()
 452                 self.build_paths(self.settings['latest_version'])
 453                 self.start_launcher()
 454
 455             else:
 456                 # failed to find the latest version
 457                 self.set_gui('error', "Error checking for updates.", [], False)
 458
 459         except:
 460             # not a valid JSON object
 461             self.set_gui('error', "Error checking for updates.", [], False)
 462
 463         # now start over
 464         self.clear_ui()
 465         self.build_ui()
 466
 467     def verify(self):
 468         # initialize the progress bar
 469         self.progressbar.set_fraction(0)
 470         self.progressbar.set_text('Verifying Signature')
 471         self.progressbar.show()
 472
 473         p = subprocess.Popen(['/usr/bin/gpg', '--homedir', self.paths['dir']['gnupg_homedir'], '--verify', self.paths['file']['tarball_sig']])
 474         self.pulse_until_process_exits(p)
 475
 476         if p.returncode == 0:
 477             self.run_task()
 478         else:
 479             self.set_gui('task', "SIGNATURE VERIFICATION FAILED!\n\nYou might be under attack, or there might just be a networking problem. Click Start try the download again.", ['start_over'], False)
 480             self.clear_ui()
 481             self.build_ui()
 482
 483             if not reactor.running:
 484                 reactor.run()
 485
 486     def extract(self):
 487         # initialize the progress bar
 488         self.progressbar.set_fraction(0)
 489         self.progressbar.set_text('Installing')
 490         self.progressbar.show()
 491
 492         p = subprocess.Popen(['tar', '-xf', self.paths['file']['tarball'], '-C', self.paths['dir']['tbb']], stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
 493         self.pulse_until_process_exits(p)
 494
 495         # installation is finished, so save installed_version
 496         self.settings['installed_version'] = self.settings['latest_version']
 497         self.save_settings()
 498
 499         self.run_task()
 500
 501     def run(self, run_next_task = True):
 502         subprocess.Popen([self.paths['file']['start']])
 503         if run_next_task:
 504             self.run_task()
 505
 506     # make the progress bar pulse until process p (a Popen object) finishes
 507     def pulse_until_process_exits(self, p):
 508         while p.poll() == None:
 509             time.sleep(0.01)
 510             self.progressbar.pulse()
 511             self.refresh_gtk()
 512
 513     # start over and download TBB again
 514     def start_over(self):
 515         self.label.set_text("Downloading Tor Browser Bundle over again.")
 516         self.gui_tasks = ['download_tarball', 'download_tarball_sig', 'verify', 'extract', 'run']
 517         self.gui_task_i = 0
 518         self.start(None)
 519
 520     # load settings
 521     def load_settings(self):
 522         if os.path.isfile(self.paths['file']['settings']):
 523             self.settings = pickle.load(open(self.paths['file']['settings']))
 524             # sanity checks
 525             if not 'installed_version' in self.settings:
 526                 return False
 527             if not 'latest_version' in self.settings:
 528                 return False
 529             if not 'last_update_check_timestamp' in self.settings:
 530                 return False
 531         else:
 532             self.settings = {
 533                 'installed_version': False,
 534                 'latest_version': '0',
 535                 'last_update_check_timestamp': 0
 536             }
 537             self.save_settings()
 538         return True
 539
 540     # save settings
 541     def save_settings(self):
 542         pickle.dump(self.settings, open(self.paths['file']['settings'], 'w'))
 543         return True
 544
 545     # refresh gtk
 546     def refresh_gtk(self):
 547         while gtk.events_pending():
 548             gtk.main_iteration(False)
 549
 550     # exit
 551     def delete_event(self, widget, event, data=None):
 552         return False
 553     def destroy(self, widget, data=None):
 554         if hasattr(self, 'file_download'):
 555             self.file_download.close()
 556         if reactor.running:
 557             reactor.stop()
 558
 559 if __name__ == "__main__":
 560     tor_browser_launcher_version = '0.1'
 561
 562     print 'Tor Browser Launcher'
 563     print 'version %s' % (tor_browser_launcher_version)
 564     print 'https://github.com/micahflee/torbrowser-launcher'
 565
 566     app = TorBrowserLauncher()
 567