Enable uTLS and use the full bridge line for snowflake (!540) · Merge requests · The Tor Project / Applications / tor-browser-build · GitLab

Resolves #40654 (closed)

In some networks they block snowflake on mobile phones by it's TLS fingerprint, let's use uTLS by default.

Including the full bridge line helps for other clients that don't have the default params already configured when launching snowflake client.

Related: tpo/anti-censorship/team#101 (closed) tpo/anti-censorship/team#96 (closed)

Edited Oct 20, 2022 by morgan

projects/browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix

+1 −1

Changes for projects/browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix: 1 added line, 1 removed line.
Original line number	Original line	Diff line number	Diff line
	@@ -2,4 +2,4 @@
	ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec ./TorBrowser/Tor/PluggableTransports/obfs4proxy		ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec ./TorBrowser/Tor/PluggableTransports/obfs4proxy

	## snowflake configuration		## snowflake configuration
	ClientTransportPlugin snowflake exec ./TorBrowser/Tor/PluggableTransports/snowflake-client -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478		ClientTransportPlugin snowflake exec ./TorBrowser/Tor/PluggableTransports/snowflake-client

projects/browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix

+1 −1

Changes for projects/browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix: 1 added line, 1 removed line.
Original line number	Original line	Diff line number	Diff line
	@@ -2,4 +2,4 @@
	ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec PluggableTransports/obfs4proxy		ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec PluggableTransports/obfs4proxy

	## snowflake configuration		## snowflake configuration
	ClientTransportPlugin snowflake exec PluggableTransports/snowflake-client -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478		ClientTransportPlugin snowflake exec PluggableTransports/snowflake-client

projects/browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix

+1 −1

Changes for projects/browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix: 1 added line, 1 removed line.
Original line number	Original line	Diff line number	Diff line
	@@ -2,4 +2,4 @@
	ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec TorBrowser\Tor\PluggableTransports\obfs4proxy.exe		ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec TorBrowser\Tor\PluggableTransports\obfs4proxy.exe

	## snowflake configuration		## snowflake configuration
	ClientTransportPlugin snowflake exec TorBrowser\Tor\PluggableTransports\snowflake-client.exe -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478		ClientTransportPlugin snowflake exec TorBrowser\Tor\PluggableTransports\snowflake-client.exe