torbrowser-launcher

   1 #!/usr/bin/env python
   2
   3 import gettext
   4 gettext.install('torbrowser-launcher', '/usr/share/torbrowser-launcher/locale')
   5
   6 from twisted.internet import gtk2reactor
   7 gtk2reactor.install()
   8 from twisted.internet import reactor
   9
  10 import pygtk
  11 pygtk.require('2.0')
  12 import gtk
  13
  14 import os, sys, subprocess, locale, urllib2, gobject, time, pickle, json
  15
  16 from twisted.web.client import Agent, ResponseDone
  17 from twisted.web.http_headers import Headers
  18 from twisted.internet.protocol import Protocol
  19 from twisted.internet.ssl import ClientContextFactory
  20
  21 from OpenSSL.SSL import Context, VERIFY_PEER, VERIFY_FAIL_IF_NO_PEER_CERT
  22 from OpenSSL.crypto import load_certificate, FILETYPE_PEM
  23
  24 class VerifyTorProjectCert(ClientContextFactory):
  25
  26     def __init__(self, torproject_pem):
  27         self.torproject_ca = load_certificate(FILETYPE_PEM, open(torproject_pem, 'r').read())
  28
  29     def getContext(self, host, port):
  30         ctx = ClientContextFactory.getContext(self)
  31         ctx.set_verify_depth(0)
  32         ctx.set_verify(VERIFY_PEER | VERIFY_FAIL_IF_NO_PEER_CERT, self.verifyHostname)
  33         return ctx
  34
  35     def verifyHostname(self, connection, cert, errno, depth, preverifyOK):
  36         return cert.digest('sha256') == self.torproject_ca.digest('sha256')
  37
  38
  39 class TorBrowserLauncher:
  40     def __init__(self):
  41         # initialize the app
  42         self.set_gui(None, '', [])
  43         self.discover_arch_lang()
  44         self.build_paths()
  45         self.mkdir(self.paths['dir']['download'])
  46         self.mkdir(self.paths['dir']['tbb'])
  47         self.init_gnupg()
  48
  49         # allow buttons to have icons
  50         try:
  51             settings = gtk.settings_get_default()
  52             settings.props.gtk_button_images = True
  53         except:
  54             pass
  55
  56         self.launch_gui = True
  57
  58         # if we haven't already hit an error
  59         if self.gui != 'error':
  60             # load settings
  61             if self.load_settings():
  62                 self.build_paths(self.settings['latest_version'])
  63
  64                 # how long was it since the last update check?
  65                 # 86400 seconds = 24 hours
  66                 current_timestamp = int(time.time())
  67                 if current_timestamp - self.settings['last_update_check_timestamp'] >= 86400:
  68                     # check for update
  69                     print 'Checking for update'
  70                     self.set_gui('task', _("Checking for Tor Browser update."),
  71                         ['download_update_check',
  72                          'attempt_update'])
  73
  74                 else:
  75                     # no need to check for update
  76                     print _('Checked for update within 24 hours, skipping')
  77                     self.start_launcher()
  78
  79             else:
  80                 self.set_gui('error', _("Error loading settings. Delete ~/.torbrowser and try again."), [])
  81
  82         if self.launch_gui:
  83             # set up the window
  84             self.window = gtk.Window(gtk.WINDOW_TOPLEVEL)
  85             self.window.set_title(_("Tor Browser"))
  86             self.window.set_icon_from_file(self.paths['file']['icon'])
  87             self.window.set_position(gtk.WIN_POS_CENTER)
  88             self.window.set_border_width(10)
  89             self.window.connect("delete_event", self.delete_event)
  90             self.window.connect("destroy", self.destroy)
  91
  92             # build the rest of the UI
  93             self.build_ui()
  94
  95     # download or run TBB
  96     def start_launcher(self):
  97       # is TBB already installed?
  98       if os.path.isfile(self.paths['file']['start']) and os.access(self.paths['file']['start'], os.X_OK):
  99         if self.settings['installed_version'] == self.settings['latest_version']:
 100           # current version of tbb is installed, launch it
 101           self.run(False)
 102           self.launch_gui = False
 103         elif self.settings['installed_version'] < self.settings['latest_version']:
 104           # there is a tbb upgrade available
 105           self.set_gui('task', _("Your Tor Browser is out of date."),
 106             ['download_tarball',
 107              'download_tarball_sig',
 108              'verify',
 109              'extract',
 110              'run'])
 111         else:
 112           # for some reason the installed tbb is newer than the current version?
 113           self.set_gui('error', _("Something is wrong. The version of Tor Browser Bundle you have installed is newer than the current version?"), [])
 114
 115       # not installed
 116       else:
 117           # are the tarball and sig already downloaded?
 118           if os.path.isfile(self.paths['file']['tarball']) and os.path.isfile(self.paths['file']['tarball_sig']):
 119               # start the gui with verify
 120               self.set_gui('task', _("Installing Tor Browser."),
 121                   ['verify',
 122                    'extract',
 123                    'run'])
 124
 125           # first run
 126           else:
 127               self.set_gui('task', _("Downloading and installing Tor Browser."),
 128                   ['download_tarball',
 129                    'download_tarball_sig',
 130                    'verify',
 131                    'extract',
 132                    'run'])
 133
 134     # discover the architecture and language
 135     def discover_arch_lang(self):
 136         # figure out the architecture
 137         (sysname, nodename, release, version, machine) = os.uname()
 138         self.architecture = machine
 139
 140         # figure out the language
 141         available_languages = ['en-US', 'ar', 'de', 'es-ES', 'fa', 'fr', 'it', 'ko', 'nl', 'pl', 'pt-PT', 'ru', 'vi', 'zh-CN']
 142         default_locale = locale.getdefaultlocale()[0]
 143         if default_locale == None:
 144             self.language = 'en-US'
 145         else:
 146             self.language = default_locale.replace('_', '-')
 147             if self.language not in available_languages:
 148                 self.language = self.language.split('-')[0]
 149                 if self.language not in available_languages:
 150                     for l in available_languages:
 151                         if l[0:2] == self.language:
 152                             self.language = l
 153             # if language isn't available, default to english
 154             if self.language not in available_languages:
 155                 self.language = 'en-US'
 156
 157     # build all relevant paths
 158     def build_paths(self, tbb_version = None):
 159         homedir = os.getenv('HOME')
 160         if not homedir:
 161             homedir = '/tmp/.torbrowser-'+os.getenv('USER')
 162             if os.path.exists(homedir) == False:
 163                 try:
 164                     os.mkdir(homedir, 0700)
 165                 except:
 166                     self.set_gui('error', _("Error creating {0}").format(homedir), [], False)
 167         if not os.access(homedir, os.W_OK):
 168             self.set_gui('error', _("{0} is not writable").format(homedir), [], False)
 169
 170         tbb_data = '%s/.torbrowser' % homedir
 171
 172         if tbb_version:
 173             tarball_filename = 'tor-browser-gnu-linux-'+self.architecture+'-'+tbb_version+'-dev-'+self.language+'.tar.gz'
 174             self.paths['file']['tarball'] = tbb_data+'/download/'+tarball_filename
 175             self.paths['file']['tarball_sig'] = tbb_data+'/download/'+tarball_filename+'.asc'
 176             self.paths['url']['tarball'] = 'https://www.torproject.org/dist/torbrowser/linux/'+tarball_filename
 177             self.paths['url']['tarball_sig'] = 'https://www.torproject.org/dist/torbrowser/linux/'+tarball_filename+'.asc'
 178             self.paths['filename']['tarball'] = tarball_filename
 179             self.paths['filename']['tarball_sig'] = tarball_filename+'.asc'
 180
 181         else:
 182             self.paths = {
 183                 'dir': {
 184                     'data': tbb_data,
 185                     'download': tbb_data+'/download',
 186                     'tbb': tbb_data+'/tbb/'+self.architecture,
 187                     'gnupg_homedir': tbb_data+'/gnupg_homedir'
 188                 },
 189                 'file': {
 190                     'settings': tbb_data+'/settings',
 191                     'version': tbb_data+'/version',
 192                     'start': tbb_data+'/tbb/'+self.architecture+'/tor-browser_'+self.language+'/start-tor-browser',
 193                     'update_check': tbb_data+'/download/RecommendedTBBVersions',
 194                     'icon': '/usr/share/pixmaps/torbrowser80.xpm',
 195                     'torproject_pem': '/usr/share/torbrowser-launcher/torproject.pem',
 196                     'erinn_key': '/usr/share/torbrowser-launcher/erinn.asc',
 197                     'sebastian_key': '/usr/share/torbrowser-launcher/sebastian.asc'
 198                 },
 199                 'url': {
 200                     'update_check': 'https://check.torproject.org/RecommendedTBBVersions'
 201                 },
 202                 'filename': {}
 203             }
 204
 205     # create a directory
 206     def mkdir(self, path):
 207         try:
 208             if os.path.exists(path) == False:
 209                 os.makedirs(path, 0700)
 210                 return True
 211         except:
 212             self.set_gui('error', _("Cannot create directory {0}").format(path), [], False)
 213             return False
 214         if not os.access(path, os.W_OK):
 215             self.set_gui('error', _("{0} is not writable").format(path), [], False)
 216             return False
 217         return True
 218
 219     # if gnupg_homedir isn't set up, set it up
 220     def init_gnupg(self):
 221         if not os.path.exists(self.paths['dir']['gnupg_homedir']):
 222             print _('Creating GnuPG homedir'), self.paths['dir']['gnupg_homedir']
 223             if self.mkdir(self.paths['dir']['gnupg_homedir']):
 224                 # import keys
 225                 print _('Importing keys')
 226                 p1 = subprocess.Popen(['/usr/bin/gpg', '--homedir', self.paths['dir']['gnupg_homedir'], '--import', self.paths['file']['erinn_key']])
 227                 p2 = subprocess.Popen(['/usr/bin/gpg', '--homedir', self.paths['dir']['gnupg_homedir'], '--import', self.paths['file']['sebastian_key']])
 228                 # wait for keys to import before moving on
 229                 p1.wait()
 230                 p2.wait()
 231
 232     # there are different GUIs that might appear, this sets which one we want
 233     def set_gui(self, gui, message, tasks, autostart=True):
 234         self.gui = gui
 235         self.gui_message = message
 236         self.gui_tasks = tasks
 237         self.gui_task_i = 0
 238         self.gui_autostart = autostart
 239
 240     # set all gtk variables to False
 241     def clear_ui(self):
 242         if hasattr(self, 'box'):
 243             self.box.destroy()
 244         self.box = False
 245
 246         self.label = False
 247         self.progressbar = False
 248         self.button_box = False
 249         self.start_button = False
 250         self.exit_button = False
 251
 252     # build the application's UI
 253     def build_ui(self):
 254         self.box = gtk.VBox(False, 20)
 255         self.window.add(self.box)
 256
 257         if self.gui == 'error':
 258             # labels
 259             self.label = gtk.Label( self.gui_message )
 260             self.label.set_line_wrap(True)
 261             self.box.pack_start(self.label, True, True, 0)
 262             self.label.show()
 263
 264             #self.label2 = gtk.Label("You can fix the problem by deleting:\n"+self.paths['dir']['data']+"\n\nHowever, you will lose all your bookmarks and other Tor Browser preferences.")
 265             #self.label2.set_line_wrap(True)
 266             #self.box.pack_start(self.label2, True, True, 0)
 267             #self.label2.show()
 268
 269             # exit button
 270             exit_image = gtk.Image()
 271             exit_image.set_from_stock(gtk.STOCK_CANCEL, gtk.ICON_SIZE_BUTTON)
 272             self.exit_button = gtk.Button("Exit")
 273             self.exit_button.set_image(exit_image)
 274             self.exit_button.connect("clicked", self.destroy, None)
 275             self.box.add(self.exit_button)
 276             self.exit_button.show()
 277
 278         elif self.gui == 'task':
 279             # label
 280             self.label = gtk.Label( self.gui_message )
 281             self.label.set_line_wrap(True)
 282             self.box.pack_start(self.label, True, True, 0)
 283             self.label.show()
 284
 285             # progress bar
 286             self.progressbar = gtk.ProgressBar(adjustment=None)
 287             self.progressbar.set_orientation(gtk.PROGRESS_LEFT_TO_RIGHT)
 288             self.progressbar.set_pulse_step(0.01)
 289             self.box.pack_start(self.progressbar, True, True, 0)
 290
 291             # button box
 292             self.button_box = gtk.HButtonBox()
 293             self.button_box.set_layout(gtk.BUTTONBOX_SPREAD)
 294             self.box.pack_start(self.button_box, True, True, 0)
 295             self.button_box.show()
 296
 297             # start button
 298             start_image = gtk.Image()
 299             start_image.set_from_stock(gtk.STOCK_APPLY, gtk.ICON_SIZE_BUTTON)
 300             self.start_button = gtk.Button("Start")
 301             self.start_button.set_image(start_image)
 302             self.start_button.connect("clicked", self.start, None)
 303             self.button_box.add(self.start_button)
 304             if not self.gui_autostart:
 305               self.start_button.show()
 306
 307             # exit button
 308             exit_image = gtk.Image()
 309             exit_image.set_from_stock(gtk.STOCK_CANCEL, gtk.ICON_SIZE_BUTTON)
 310             self.exit_button = gtk.Button("Exit")
 311             self.exit_button.set_image(exit_image)
 312             self.exit_button.connect("clicked", self.destroy, None)
 313             self.button_box.add(self.exit_button)
 314             self.exit_button.show()
 315
 316         self.box.show()
 317         self.window.show()
 318
 319         if self.gui_autostart:
 320             self.start(None)
 321
 322     # start button clicked, begin tasks
 323     def start(self, widget, data=None):
 324         # disable the start button
 325         if self.start_button:
 326             self.start_button.set_sensitive(False)
 327
 328         # start running tasks
 329         self.run_task()
 330
 331     # run the next task in the task list
 332     def run_task(self):
 333         self.refresh_gtk()
 334
 335         if self.gui_task_i >= len(self.gui_tasks):
 336             self.destroy(False)
 337             return
 338
 339         task = self.gui_tasks[self.gui_task_i]
 340
 341         # get ready for the next task
 342         self.gui_task_i += 1
 343
 344         if task == 'download_update_check':
 345             print _('Downloading'), self.paths['url']['update_check']
 346             self.download('update check', self.paths['url']['update_check'], self.paths['file']['update_check'])
 347
 348         if task == 'attempt_update':
 349             print _('Checking to see if update it needed')
 350             self.attempt_update()
 351
 352         elif task == 'download_tarball':
 353             print _('Downloading'), self.paths['url']['tarball']
 354             self.download('tarball', self.paths['url']['tarball'], self.paths['file']['tarball'])
 355
 356         elif task == 'download_tarball_sig':
 357             print _('Downloading'), +self.paths['url']['tarball_sig']
 358             self.download('signature', self.paths['url']['tarball_sig'], self.paths['file']['tarball_sig'])
 359
 360         elif task == 'verify':
 361             print _('Verifying signature')
 362             self.verify()
 363
 364         elif task == 'extract':
 365             print _('Extracting'), self.paths['filename']['tarball']
 366             self.extract()
 367
 368         elif task == 'run':
 369             print _('Running'), self.paths['file']['start']
 370             self.run()
 371
 372         elif task == 'start_over':
 373             print _('Starting download over again')
 374             self.start_over()
 375
 376     def response_received(self, response):
 377         class FileDownloader(Protocol):
 378             def __init__(self, file, total, progress, done_cb):
 379                 self.file = file
 380                 self.total = total
 381                 self.so_far = 0
 382                 self.progress = progress
 383                 self.all_done = done_cb
 384
 385             def dataReceived(self, bytes):
 386                 self.file.write(bytes)
 387                 self.so_far += len(bytes)
 388                 percent = float(self.so_far) / float(self.total)
 389                 self.progress.set_fraction(percent)
 390                 amount = float(self.so_far)
 391                 units = "bytes"
 392                 for (size, unit) in [(1024 * 1024, "MiB"), (1024, "KiB")]:
 393                     if amount > size:
 394                         units = unit
 395                         amount = amount / float(size)
 396                         break
 397
 398                 self.progress.set_text(_('Downloaded')+('%2.1f%% (%2.1f %s)' % ((percent * 100.0), amount, units)))
 399
 400             def connectionLost(self, reason):
 401                 print _('Finished receiving body:'), reason.getErrorMessage()
 402                 self.all_done(reason)
 403
 404         dl = FileDownloader(self.file_download, response.length, self.progressbar, self.response_finished)
 405         response.deliverBody(dl)
 406
 407     def response_finished(self, msg):
 408         if msg.check(ResponseDone):
 409             self.file_download.close()
 410             # next task!
 411             self.run_task()
 412
 413         else:
 414             print "FINISHED", msg
 415             ## FIXME handle errors
 416
 417     def download_error(self, f):
 418         print _("Download error"), f
 419         self.set_gui('error', _("Error starting download:\n\n{0}\n\nAre you connected to the internet?").format(f.value), [], False)
 420         self.clear_ui()
 421         self.build_ui()
 422
 423     def download(self, name, url, path):
 424         # initialize the progress bar
 425         self.progressbar.set_fraction(0)
 426         self.progressbar.set_text(_('Downloading {0}').format(name))
 427         self.progressbar.show()
 428         self.refresh_gtk()
 429
 430         agent = Agent(reactor, VerifyTorProjectCert(self.paths['file']['torproject_pem']))
 431         d = agent.request('GET', url,
 432                           Headers({'User-Agent': ['torbrowser-launcher']}),
 433                           None)
 434
 435         self.file_download = open(path, 'w')
 436         d.addCallback(self.response_received).addErrback(self.download_error)
 437
 438         if not reactor.running:
 439             reactor.run()
 440
 441     def attempt_update(self):
 442         # load the update check file
 443         try:
 444             versions = json.load(open(self.paths['file']['update_check']))
 445             latest_version = None
 446
 447             end = '-Linux'
 448             for version in versions:
 449                 if str(version).find(end) != -1:
 450                     latest_version = str(version)
 451
 452             if latest_version:
 453                 self.settings['latest_version'] = latest_version[:-len(end)]
 454                 self.settings['last_update_check_timestamp'] = int(time.time())
 455                 self.save_settings()
 456                 self.build_paths(self.settings['latest_version'])
 457                 self.start_launcher()
 458
 459             else:
 460                 # failed to find the latest version
 461                 self.set_gui('error', _("Error checking for updates."), [], False)
 462
 463         except:
 464             # not a valid JSON object
 465             self.set_gui('error', _("Error checking for updates."), [], False)
 466
 467         # now start over
 468         self.clear_ui()
 469         self.build_ui()
 470
 471     def verify(self):
 472         # initialize the progress bar
 473         self.progressbar.set_fraction(0)
 474         self.progressbar.set_text(_('Verifying Signature'))
 475         self.progressbar.show()
 476
 477         p = subprocess.Popen(['/usr/bin/gpg', '--homedir', self.paths['dir']['gnupg_homedir'], '--verify', self.paths['file']['tarball_sig']])
 478         self.pulse_until_process_exits(p)
 479
 480         if p.returncode == 0:
 481             self.run_task()
 482         else:
 483             self.set_gui('task', _("SIGNATURE VERIFICATION FAILED!\n\nYou might be under attack, or there might just be a networking problem. Click Start try the download again."), ['start_over'], False)
 484             self.clear_ui()
 485             self.build_ui()
 486
 487             if not reactor.running:
 488                 reactor.run()
 489
 490     def extract(self):
 491         # initialize the progress bar
 492         self.progressbar.set_fraction(0)
 493         self.progressbar.set_text(_('Installing'))
 494         self.progressbar.show()
 495
 496         p = subprocess.Popen(['tar', '-xf', self.paths['file']['tarball'], '-C', self.paths['dir']['tbb']], stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
 497         self.pulse_until_process_exits(p)
 498
 499         # installation is finished, so save installed_version
 500         self.settings['installed_version'] = self.settings['latest_version']
 501         self.save_settings()
 502
 503         self.run_task()
 504
 505     def run(self, run_next_task = True):
 506         subprocess.Popen([self.paths['file']['start']])
 507         if run_next_task:
 508             self.run_task()
 509
 510     # make the progress bar pulse until process p (a Popen object) finishes
 511     def pulse_until_process_exits(self, p):
 512         while p.poll() == None:
 513             time.sleep(0.01)
 514             self.progressbar.pulse()
 515             self.refresh_gtk()
 516
 517     # start over and download TBB again
 518     def start_over(self):
 519         self.label.set_text(_("Downloading Tor Browser Bundle over again."))
 520         self.gui_tasks = ['download_tarball', 'download_tarball_sig', 'verify', 'extract', 'run']
 521         self.gui_task_i = 0
 522         self.start(None)
 523
 524     # load settings
 525     def load_settings(self):
 526         if os.path.isfile(self.paths['file']['settings']):
 527             self.settings = pickle.load(open(self.paths['file']['settings']))
 528             # sanity checks
 529             if not 'installed_version' in self.settings:
 530                 return False
 531             if not 'latest_version' in self.settings:
 532                 return False
 533             if not 'last_update_check_timestamp' in self.settings:
 534                 return False
 535         else:
 536             self.settings = {
 537                 'installed_version': False,
 538                 'latest_version': '0',
 539                 'last_update_check_timestamp': 0
 540             }
 541             self.save_settings()
 542         return True
 543
 544     # save settings
 545     def save_settings(self):
 546         pickle.dump(self.settings, open(self.paths['file']['settings'], 'w'))
 547         return True
 548
 549     # refresh gtk
 550     def refresh_gtk(self):
 551         while gtk.events_pending():
 552             gtk.main_iteration(False)
 553
 554     # exit
 555     def delete_event(self, widget, event, data=None):
 556         return False
 557     def destroy(self, widget, data=None):
 558         if hasattr(self, 'file_download'):
 559             self.file_download.close()
 560         if reactor.running:
 561             reactor.stop()
 562
 563 if __name__ == "__main__":
 564     tor_browser_launcher_version = '0.1'
 565
 566     print _('Tor Browser Launcher')
 567     print _('version {0}').format(tor_browser_launcher_version)
 568     print 'https://github.com/micahflee/torbrowser-launcher'
 569
 570     app = TorBrowserLauncher()
 571