jigsaw-code / outline-apps Goto Github PK

Hi,

Is it possible to add this app to F-Droid. It's a very safe way to get this app, for example for folks who can't access Google Play in their country. They will build your app from source, if there is no proprietary dependencies.

Otherwise, could you please provide a signed "release" apk in the release section?

Details:

With servers created via the DO integration, traffic is better displayed. The total traffic for a VPS is displayed, and the traffic is reset monthly. Most VPS providers work the same way, they set a traffic quota and its reset monthly.

We should be able to have this with all providers. We set the traffic amount allowed by the VPS and then, the display should look the same as with DO. Traffic used out of the total quota, and the traffic usage should reset monthly.

I'm encountering problems when connecting to my node, I've determined it is because if inner network blocks that I can't fix, is there any specific port I should open on the client side or any specific block to remove so I can use the software properly?

I've completely confident this is caused by a restriction within my network, just not sure which one. It is not a private network, but my school network.

Thanks, I appreciate every answer!

SIP002 URL's alias seems not parse correctly in Andriod client when outline parameter exist:

ss://{Base64Data}@my.server:port/?outline=1#Alias got server name 'Outline Server'

ss://{Base64Data}@my.server:port/?some_data=something#Alias got server name 'Alias'

BTW, when detected a URL with plugin argument, it's best to show a notice (such as "This server require SS plugin, connection may fail.") beacuse Outline client doesn't support plugin now

Hi,

For organisations managing Android (corp or BYOD) allowing an org to set up the server and pre-configure the app during install on devices would be great.

https://developer.android.com/work/managed-configurations.html

More on Android enterprise here: bytn.uk/ae

Hello, i try to build the project on windows, follow the tutorial, and in the end after i cloned the master branch, my application can not run on the devices (neither android and web).
I get an issue. I added the 2 picture about it.
Can anyone help me why i get this exception?

Please add support for a Linux client. I just dual-booted my laptop with Linux and it would be nice to be able to run it on Linux.

I would reccommend using .AppImage (), which allows a program that can be run on any platform simply by making it executable and running it (FUSE also needs to be installed which is on most platforms and easy to install otherwise).

Server side is Debian 7 and ss-server works background see below information:
ss-server -m chacha20-ietf-poly1305 -u --fast-open -p 37507 -k 0lrWx0CJEGCX --manager-address 127.0.0.1:33697 -d 8.8.8.8 -d 8.8.4.4 -d 8.8.8.4
firewall: port opened: from 8989:65525

But outlin client always show
and then disconnect quickly. Client location in China.

Hi there! I'm not sure if it outlines or telegram desktop client issue but seems telegram app doesn't use VPN provided by the outline. VPN on chrome works perfectly fine

such as

ss://{hash}@{ip}:{port}#{alias}

Whenever I run outline-client I can't connect to Chromecast. Is there any workaround to fix this?

Would it be possible to provide a Chrome OS client for the chromebooks that do not get Android support?

You claim to support Chrome OS 65+ .. but for example the Acer C720p does run 65+, but does not support Android apps so it can not use your Android App to provide VPN

We see that Outline Manager is providing users with a invite page link from s3.amazonaws.com, which is not available to people in Mainland China. Though I know it's purely frontend work and I can simply do one myself, it's better to release code of the invite page, and use some kind of configuration for linking in Manager.

As BASE64 URIs are pretty long, it would be very convenient to add a QR scanner in the "Add access key" dialog on mobile apps.

As an enhancement, it would be nice and convenient to have a tile button you can put into your quick settings drawer on Android. ShadowSocks has this feature already.

The macOS Outline App is not available in the Chinese App Store.

Can you provide outline.dmg image in Release Page?

I think user may want to revoke the "My access key" in some situations, such as the key is compromised. However, that there is no way to revoke a key with the manager UI.

If we can't allow the server has no access key, then I think we should allow users to regenerate the key at least.

Outline Manager currently accepts configuration strings that contain a domain name instead of the server’s IP address in apiUrl. However, invites issued by the app still contain the IP address.

It would be great if invites issued by Outline Manager that is configured with a domain name referenced the same domain name instead of the server’s IP address.

Right now, it is possible to manually replace IP addresses with domain names in invites, but less tech-savvy users may get stuck on this step.

Example

Outline Manager accepts this:
{ "apiUrl": "https://node1.outline.example.com:1234/V0exXlX58SvhD_6kmCME3A", "certSha256": "B06368232C4769A6D14962F76F0BEB4A75DFFAC1FE7EB5230E4D9824AB0BFCA3" }

Still, invites created with Outline Manager look like this:
ss://[email protected]:1234/?outline=1

It would be nice if invites looked like this:
ss://1234abcd1234abcd1234abcd1234abcd1234abcd1234abc=@node1.outline.example.com:1234/?outline=1

As new Shadowsocks user I don't really understand how to connect third-party SS client (for example: shadowsocks/shadowsocks-windows) to Outline. I don't understand protocol at all: what is password, what is host, what is port, which encryption used by Outline and why my third-party client doesn't work.

Outline client is easy to use, but it lacks a lot of useful functions I want to see: starting with OS, possibility to minimize to tray and auto-updates. And I know there are a lot of good SS clients, but I have no idea how to connect them to my Outline server.

I want to beg you to add definitive guides to your FAQ.

Why my outlineclient works on AndroidPhone well,
but it's not work on Windows10?
On Windows10 it's just show connected,but IP not change.
(I use School Network PPPOE)

Hey

Been trying to download this Outline-Client,exe and i keep getting an alert on my anti virus. Have narrowed it down to SetSystemProxy.exe

Ran this through online malware analysis and it keep saying its infected. Its mostly is a false positive, but thought it good to bring to attention since most non-technical users might freak at this.

Would like your inputs.

Here are some reports

https://vicheck.ca/htmlreport.php?SHA=9633560ad4f17effc050d832590835ce727d31762b574c5dc88c3697a3aa0391

https://www.virustotal.com/#/file/9633560ad4f17effc050d832590835ce727d31762b574c5dc88c3697a3aa0391/detection

( I know there are more engines which classify this as a virus. Kaspersky for sure does. )

I have 4 server that my friend has sent to me
I want to add the same servers and keys to my laptop too (and maybe android)
And I have deleted the links by fault, How can I export the servers from my PC and use theme in other PC (or android device)??

Thank you Guys!

First, thank you.
Now to share a key, click, then we got invitation message and a link; the key is in the url and ,of course, url-encoded, which make it quite inconvenient for one to just copy the key and paste it into Client. Can we at the same time have a plain pastable key ?

it would be very convenient

This is helpful to distribute keys, and verify client's identity whenever the key is used.

Sometimes, we don't simply trust the person who "has" the key, this additional step should secure the organization network from leaked keys.

https://github.com/Jigsaw-Code/outline-client/tree/master/third_party

It's better (cleaner) to use git submodule here since all of those 3rd party code have git repositories.

CocoaAsyncSocket: https://github.com/robbiehanson/CocoaAsyncSocket
CocoaLumberjack: https://github.com/CocoaLumberjack/CocoaLumberjack
Potatso: https://github.com/haxpor/Potatso
badvpn: https://github.com/ambrop72/badvpn or https://github.com/shadowsocks/badvpn
c-ares: https://github.com/c-ares/c-ares
Cygwin: https://github.com/cygwin/cygwin
libev: https://github.com/shadowsocks/libev or https://github.com/enki/libev
mbedtls: https://github.com/ARMmbed/mbedtls
pcre: https://github.com/svn2github/pcre
sentry-java: https://github.com/getsentry/sentry-java
sentry-cocoa: https://github.com/getsentry/sentry-cocoa
ss-libev: https://github.com/shadowsocks/shadowsocks-libev
libsodium: https://github.com/jedisct1/libsodium

It would be nice if there were a CI for this repo. To start, it could check that latest.yml is consistent with the actual file.

Already defined here https://github.com/Jigsaw-Code/outline-client/blob/master/third_party/shadowsocks-libev/src/aead.c#L110
Since we can use Outline Client as Shadowsocks Client, its necessary to support as many ciphers as possible. Thanks for your amazing work.

OS: MAC OS X 10.12.2
when I install yarn with brew install yarn, it installs one of it's dependences, node-9.9.0.sierra.bottle.tar.gz
when I run "yarn" to install all dependencies, it says :
error [email protected]: The engine "node" is incompatible with this module. Expected version ">=6.11.4". error An unexpected error occurred: "Found incompatible module".
But when I run "node --version", it outputs v6.11.0

My router uses 192.168.1.1 for administration, I can't open that page after my computer is connected to the proxy server. However, the router page can be opened in a browser when proxy of that browser is disabled, so It would be great if local sites are proxy-free so that we can see them while we have open Internet.

I suggest that you add local IP addresses to Windows proxy bypass setting, like what Shadowsocks Windows client does in regards to proxy configuration. It works.

This is configuration of Shadowsocks Windows client:
localhost;127.*;10.*;172.16.*;172.17.*;172.18.*;172.19.*;172.20.*;172.21.*;172.22.*;172.23.*;172.24.*;172.25.*;172.26.*;172.27.*;172.28.*;172.29.*;172.30.*;172.31.*;172.32.*;192.168.*

...this should have gone to the Linux client issue (#10)...closed

The icon just died in my taskbar, looks like it was drawn on using paint.

Anyone has an idea why it happend?

Hi.

I'm trying to run Outline Windows client behind our corporate proxy. It doesn't work. It seems that Outline itself isn't supporting going through a proxy. And it has no any settings for customizing port(s). I even cannot ask our admin for opening some ports for me as it's unclear which ones.

So in the whole it seems unusable now for using from companies. And honestly I can't any advantages against other "single-script" VPNs based on OpenVPN or L2TP/IPSec and so on. But idea is great.

So let me ask about any plans for the mentioned scenario - connecting behind corporate proxies - will it work someday?
Thanks.

I found that both Mac version of outline manager and client use google services like fonts.googleapis.com and fonts.gstatic.com when first time open the app. And they just went blank when these services are not accessible.

I think it's better to use these apps without any dependencies

We can do the same thing as OpenVPN: Use tun2socks ( or equivalent ) provide a virtual NIC. Then edit route table to redirect traffic. Then open shadowsocks local socks5 proxy.

client -> tun2socks virtual NIC -> ss socks5 proxy [-> internet -> ss server -> server]

Someone manually configured this solution on windows then successfully got a global 'VPN'. We can do this automatically.

ShadowsocksR provides far better protection than the original Shadowsocks. It's using better encryption, obfuscation, and can pretend to be browsing another website. And the R version is technically backward compatible.There's someone already made one using electron framework. https://github.com/erguotou520/electron-ssr

sent 34405 bytes received 638 bytes 70086.00 bytes/sec
total size is 132086 speedup is 3.77
[13:45:32] Running cordova compile osx --

You have been opted out of telemetry. To change this, run: cordova telemetry on.
Error: xcode-select: error: tool 'xcodebuild' requires Xcode, but active developer directory '/Library/Developer/CommandLineTools' is a command line tools instance

[13:45:32] Done

AFAIK, libs licensed under GPL are not suitable to App Store.

Please add VPN on demand for apple devices

I had OutlineVPN installed and working on my Asus Chromebook flip. I had to perform a Powerwash and install Increased Security to get it to work-before that it would expose my home IP address on sites like whatismyip and ipinfo.io However, after I installed the latest stable chromeos the symptom of exposing the home IP address returned. I no longer have the option to increase security.

This is more like a feature request, not a bug report.

When using Outline client on Android it takes quite some time to find the app, open it and press "connect". Meanwhile there is a Quick Settings dropdown menu in android that is used for quick access to most common settings and apps.

So the feature I request is to add Outline shortcut to the Android's Quick Settings dropdown menu. Some third party VPN services do add their shortcuts there (see attached screenshot) So could you please do the same?

Feature description

Add rules for URL/IP addresses so that they can connect DIRECTly or through the PROXY, or even REJECT to connect.

Why?

For some local applications, we may need to set them as "direct connect" due to speed or regional restrictions or security(they may collect VPS information and provide it to government agencies) reason and only need to proxy some blocked addresses.

For example, some people in China maintain a list of addresses blocked by the government, called gfwlist(https://github.com/gfwlist/gfwlist).
And some rules for 3rd ss/v2ray iOS client shadowrocket, like https://github.com/lhie1/Surge/blob/master/Shadowrocket.conf

So could you add a feature that can subscribe to these online rules or manually add?
Thanks a lot.

Anyone knows how can I change the DNS for the clients? Currently they are using OpenDNS by default. I need to use my internal DNS server.

The weakest part of inviting somebody onboard is sharing the key. People tends to share the key via some unencrypted IM or even SMS, which means censors may directly get the key, causing attacks.

I’m suggesting adding QR code sharing, which is perfect for face-to-face sharing, fast, easy and secure.

Outline Window client clears current system proxy settings and doesn't restore them. Even if it failed to connect. Please make it to restore proxy settings. At least on exit.