Skip to content

Latest commit

 

History

History
300 lines (196 loc) · 8.33 KB

README.md

File metadata and controls

300 lines (196 loc) · 8.33 KB
Raw

gaspSync

Build Status

Introduction

the current version is NOT READY FOR PRODUCTION, ONLY FOR TEST FOR NOW

Since Firefox 29, Mozilla has migrated to the 1.5 sync protocol.

Before that I used a Synology NAS to sync my bookmarks across all computers.

Mozilla provides a Python self-hosting script, I wanted to use a simple PHP app like before.

So I built one.

The final goal is to have a simple install on a Synology NAS or other models (it's a PHP app ).

Implemented :

  • Token 1.5 Server : publish token and validate Hawk token security.
  • Sync storage 1.5 Server : store Bso objects like bookmarks, tabs, history, and passwords.
  • Assertion creation and validation : be able to accept and verifiy an assertion from an account server.

Not implemented :

  • account server.
  • content server : create, update account, change password ...

Install & Configuration

PHP Extensions

Required :

  • gmp
  • curl

in the future for account server :

  • scrypt

Server Configuration

  • publish /web You need to point the /web directory to the root of a web directory (with SSL). virtual host can help. We are forced to respond to url like "/.well-known/browserid".

  • sample apache virtualhost :

<VirtualHost *:4000>
ServerName exemple.com
DocumentRoot "/var/services/web/gaspSync/web"
SSLEngine on
</VirtualHost>

On a command line, launch the following:

  • composer global require "fxp/composer-asset-plugin:1.0.0-beta4"
  • composer install : install Yii2, custom package ...
  • yii install Create keys, configuration ...
  • yii migrate and type "yes" to create and empty database
  • For the client configuration, open the root URI of gaspSync

If you don't want to install composer you can install on your computer and push all the arborescence to the NAS, just launch "yii install" and "yii migrate"

Client configuration

  • in Firefox go to the root URI of gaspSync
  • add a permanent exception if the installed certificate is self-signed

Information :

  • !! Warning, when you LOGOUT from a Firefox account, the tokenserverurl is reset to default, you need to restart Firefox before logging in again !!
  • Each time you relaunch Firefox, the custom value of "user.js" are applied.

Running tests

After gaspSync installation, open two terminals: (you can look in .travis.yml for an install toolchain ) Terminal 1 :


cd ./tests
./launchServer.sh

Terminal 2 :

cd ./tests
codecept build
$codecept run

gaspSync hosted on the same computer

if the server is on the same computer you need to de-activate security :

  • Desactive the rules ABE locale
SYSTEM rule:
Site LOCAL
Accept from LOCAL
The o
Deny

Install Scrypt PHP module

####(not functional for now, write down only for reference here)

Debian Turnkey :

apt-get install make php-pear php5-dev
pecl install scrypt

The next goal is to enable cross-compilation (/build dir is a test config) http://benjamin-balet.info/multimedia/synology/cross-compilation-pour-synology/ http://www.aeropassion.net/leblog/post/2013/12/Cross-compilation-pour-un-NAS-Synology

Debugging

How to turn on sync logs:

Open [about:config] and set these to true :

  • services.sync.log.appender.file.logOnSuccess
  • services.sync.log.logger.engine.bookmarks

Restart Firefox and look at: [about:sync-log]

  • in Firefox go to [about:sync-log] 2
  • you now know the directory where all the "success" and "failure" sync are stored.

Useful Urls for FFSync

Ressources & tools used

Javascript

PHP

Ressources & Documentation :

Global

Content Server

Fxa Auth Server

Sync Server (implemented)

-services.mozilla.com/mozsvc/v1/node_secret/ -https://docs.services.mozilla.com/storage/apis-1.5.html -SyncStorage API v1.5* pour dev le serveur sans gerer les authentification

Token Server (implemented)

Each Service Node has a unique Master Secret that it shares with the Login Server, which is used to sign and validate authentication tokens. Multiple secrets can be active at any one time to support graceful rolling over to a new secret.

To simplify management of these secrets, the tokenserver maintains a single list of master secrets and derives a secret specific to each node using HKDF:

node-info = "services.mozilla.com/mozsvc/v1/node_secret/" + node-name node-master-secret = HKDF(master-secret, salt=None, info=node-info, size=digest-length)

The node-specific Master Secret is used to derive keys for various cryptographic routines. At startup time, the Login Server and Node should pre-calculate and cache the signing key as follows:

sig-secret: HKDF(node-master-secret, salt=None, info="SIGNING", size=digest-length)

By using a no salt (or a fixed salt) these secrets can be calculated once and then used for each request.

When issuing or checking an Auth Token, the corresponding Token Secret is calculated as:

token-secret: b64encode(HKDF(node-master-secret, salt=token-salt, info=auth-token, size=digest-length))

Note that the token-secret is base64-encoded for ease of transmission back to the client.

https://developer.mozilla.org/fr/Persona/API_de_verification

TurnKey configuration

php5 gmp
php5 curl


apt-get update
apt-get install samba
apt-get install webmin-samba
apt-get install php5-curl
apt-get install php5-gmp
apt-get install php5-dev
apt-get install php5-sqlite
apt-get install php5-intl
apt-get install php5-gd

apt-get install make
apt-get install webmin

pecl install scrypt

Add to the php.ini :

extension=scrypt.so
extension=curl.so
extension=gmp.so

apache configuration:

  • activate the rewrite mod
  • reboot / restart apache

configure samba

Synology reference

Cross compilation and build of Synology package : https://github.com/SynoCommunity/spksrc

Some useful commands:

/usr/syno/sbin/synoservicecfg --list
/usr/syno/sbin/synoservicecfg --list-config
/usr/syno/sbin/synoservicecfg --show-config
/usr/syno/sbin/synoservicecfg --is-enabled httpd-user
/usr/syno/sbin/synoservicecfg --status
/usr/syno/sbin/synoservicecfg --restart httpd-user
/usr/syno/sbin/synoservicecfg --reload httpd-user
/usr/syno/sbin/synoservicecfg --is-all-up

Copyright

When not explicitly set, files are placed under a 3 clause BSD license