Newerpr

.github/workflows/debug.yml

@@ -0,0 +1,38 @@
+name: Build Debug APK
+
+on:
+  push:
+    branches: [ "main", "master" ]
+  pull_request:
+    branches: [ "main", "master" ]
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+          cache: gradle
+
+      - name: Make gradlew executable
+        run: chmod +x gradlew
+
+      - name: Build debug APK
+        run: ./gradlew assembleDebug --no-daemon
+
+      - name: Upload debug APK
+        uses: actions/upload-artifact@v4
+        with:
+          name: app-debug
+          path: app/build/outputs/apk/debug/*.apk
+          retention-days: 14

.github/workflows/main.yml

@@ -0,0 +1,41 @@
+name: Build Debug APK
+
+on:
+  push:
+    branches: [ "main", "master" ]
+  pull_request:
+    branches: [ "main", "master" ]
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+          cache: gradle
+
+      - name: Make gradlew executable
+        run: chmod +x gradlew
+
+      - name: Clean build
+        run: ./gradlew clean
+
+      - name: Build debug APK
+        run: ./gradlew assembleDebug --no-daemon --no-build-cache
+
+      - name: Upload debug APK
+        uses: actions/upload-artifact@v4
+        with:
+          name: app-debug
+          path: app/build/outputs/apk/debug/*.apk
+          retention-days: 14

README.md

@@ -1,113 +1 @@
-# Android SSH Proxy
 
-Android application (Android 10+) for system-wide HTTP traffic proxying through an SSH local port-forwarding tunnel using `VpnService.setHttpProxy`.
-
-## ✨ Features
-
-*   **🚀 System-wide HTTP/HTTPS Proxy:** Tunnels all HTTP/HTTPS traffic through an SSH server.
-*   **🔑 Secure Key Management:** Generates and stores SSH keys securely using the Android Keystore.
-*   **🛡️ Host Key Verification:** Protects against MITM attacks by verifying server host keys.
-*   **🔄 Automatic Reconnection:** Automatically reconnects to the server with an exponential backoff strategy.
-*   **🧪 Connection Quality Monitoring:** Monitors connection latency and quality in real-time.
-*   **🌐 "Test All Servers" Feature:** Tests the latency of all configured servers.
-*   **✅ "Test Connection" without VPN:** Allows testing the internet connection without an active VPN.
-*   **📱 Multi-language Support:** Available in English and Russian.
-*   **🎨 Themes:** Supports system, light, and dark themes.
-
-## 📱 How to Use
-
-1.  **📲 Install the application** on an Android 10+ device.
-2.  **🔑 On the first launch:**
-    *   The application will automatically generate a new SSH key pair.
-    *   Copy the public key from the setup wizard or the "Keys" section.
-3.  **📋 Provide the public key** to your server administrator to add it to `~/.ssh/authorized_keys`.
-4.  **🌐 Add your server:**
-    *   Go to the "Servers" section and click the "+" button.
-    *   Enter your server's details (name, host, port, and username).
-5.  **🔌 Connect:**
-    *   Select your server from the list and tap the "Connect" button.
-    *   Grant VPN permission to the application.
-    *   Wait for the status to change to "Connected".
-6.  **✅ Done!** All your HTTP/HTTPS traffic is now routed through your SSH server.
-
-## 🔧 Server Setup (for Administrators)
-
-To set up your own proxy server, you can use the provided setup script in the "Instructions" section of the app. The script will automatically:
-
-*   Create a restricted user for SSH tunneling.
-*   Install and configure Tinyproxy as the HTTP proxy.
-*   Set up the SSH key for authentication.
-*   Restrict the user's access to only local port-forwarding.
-
-**Server Structure:**
-
-```bash
-# Restricted user
-/home/username/.ssh/authorized_keys  # Your public key
-
-# HTTP proxy (Tinyproxy) listening on 127.0.0.1:8118
-# SSH forwarding: phone:8080 -> server:8118
-```
-
-**Security Considerations:**
-
-*   The user has minimal privileges (port-forwarding only).
-*   The proxy is only accessible locally (127.0.0.1).
-*   SSH keys are encrypted using the Android Keystore (AES-256-GCM).
-*   Host keys are validated to prevent MITM attacks.
-*   IPv6 is supported to prevent VPN bypass.
-
-## 🔐 Security Features
-
-### Private Key Encryption
-
-*   **Android Keystore:** All private keys are encrypted and stored in the Android Keystore.
-*   **AES-256-GCM:** Modern symmetric encryption is used.
-*   **TEE/Secure Element:** Encryption keys are protected at the hardware level.
-*   **Zero-knowledge:** Private keys cannot be extracted, even with root access.
-
-### Host Key Validation (Known Hosts)
-
-*   **Automatic Saving:** Host keys are automatically saved on the first connection.
-*   **SHA-256 Fingerprints:** Servers are identified by their SHA-256 fingerprints.
-*   **MITM Protection:** The connection is blocked if the host key changes.
-*   **User Confirmation:** A dialog is shown to the user to accept host key changes.
-
-## ⚠️ Limitations
-
-*   **HTTP Proxy Only:** The application does not modify HTTPS/TLS traffic directly and relies on system support for proxying.
-*   **Android 10+ Required:** The `setHttpProxy` API is only available on Android 10 and above.
-*   **No Per-app Exclusions:** The VPN is configured without routes, and the HTTP proxy is applied globally.
-*   **Server Script:** The server setup script requires root/sudo privileges and should be reviewed before execution.
-
-## 🛠️ Building from Source
-
-```bash
-./gradlew assembleDebug
-# or
-./gradlew assembleRelease
-```
-
-## 🐛 Debugging
-
-```bash
-# Main components
-adb logcat -s SshProxyService AppLog ConnectionHealthMonitor
-
-# Security
-adb logcat -s SecureHostKeyVerifier KnownHostsManager KeystoreManager
-
-# Ping and IP monitoring
-adb logcat -s PingMonitor IpLocationService
-
-# All application components
-adb logcat | grep -E "(SshProxy|SSH|VPN|Ping|android-ssh-proxy)"
-```
-
-## 📄 Disclaimer
-
-This software is provided "as is", without warranty of any kind. Use at your own risk. The use of this application may violate the policies of your network or service provider. This application implements cryptographic functions; ensure compliance with local laws.
-
-## 📜 License
-
-Apache-2.0

app/build.gradle

@@ -11,9 +11,9 @@ android {
     defaultConfig {
         applicationId "com.example.sshproxy"
         minSdk 24
-    targetSdk 34
-        versionCode 5
-        versionName "1.4"
+        targetSdk 34
+        versionCode 6
+        versionName "1.5"
     }
 
     signingConfigs {
@@ -51,33 +51,44 @@ android {
 }
 
 dependencies {
+    // Core Android
     implementation 'androidx.core:core-ktx:1.12.0'
     implementation 'androidx.appcompat:appcompat:1.6.1'
-    implementation 'com.google.android.material:material:1.11.0'
     implementation 'androidx.constraintlayout:constraintlayout:2.1.4'
+    implementation 'androidx.fragment:fragment-ktx:1.6.2'
+
+    // Material Design & UI
+    implementation 'com.google.android.material:material:1.11.0'
+    implementation 'androidx.viewpager2:viewpager2:1.1.0'
+
+    // Lifecycle & Navigation
     implementation 'androidx.lifecycle:lifecycle-livedata-ktx:2.7.0'
     implementation 'androidx.lifecycle:lifecycle-viewmodel-ktx:2.7.0'
     implementation 'androidx.navigation:navigation-fragment-ktx:2.7.7'
     implementation 'androidx.navigation:navigation-ui-ktx:2.7.7'
-    implementation "androidx.fragment:fragment-ktx:1.6.2" // Add this line for by viewModels()
 
-    // SSH libraries
-    implementation 'com.jcraft:jsch:0.1.55'
+    // Local Broadcast Manager
+    implementation 'androidx.localbroadcastmanager:localbroadcastmanager:1.1.0'
+
+    // Coroutines
+    implementation 'org.jetbrains.kotlinx:kotlinx-coroutines-android:1.7.3'
+
+    // SSH Library (modern JSch)
+    implementation 'com.github.mwiede:jsch:0.2.16'
+
+    // Alternative SSH library (optional – can be removed)
     implementation 'com.hierynomus:sshj:0.38.0'
-    
-    // Bouncycastle for cryptography  
+
+    // Cryptography
     implementation 'org.bouncycastle:bcprov-jdk18on:1.75'
     implementation 'org.bouncycastle:bcpkix-jdk18on:1.75'
-    
-    // Gson for JSON
+
+    // JSON
     implementation 'com.google.code.gson:gson:2.10.1'
-
-    // Coroutines
-    implementation 'org.jetbrains.kotlinx:kotlinx-coroutines-android:1.7.3'
-
-    // Room database
+
+    // Room Database
     def room_version = "2.6.1"
     implementation "androidx.room:room-runtime:$room_version"
     implementation "androidx.room:room-ktx:$room_version"
     kapt "androidx.room:room-compiler:$room_version"
-}
+}

app/src/main/AndroidManifest.xml

@@ -4,69 +4,41 @@
 
     <uses-permission android:name="android.permission.INTERNET" />
     <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
-    <uses-permission android:name="android.permission.ACCESS_WIFI_STATE" />
-    <uses-permission android:name="android.permission.CHANGE_NETWORK_STATE" />
-    <uses-permission android:name="android.permission.CHANGE_WIFI_STATE" />
     <uses-permission android:name="android.permission.WAKE_LOCK" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
-    <uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW" />
-    <uses-permission android:name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS" />
-    <uses-permission android:name="android.permission.QUERY_ALL_PACKAGES"
-        tools:ignore="QueryAllPackagesPermission" />
 
     <application
         android:allowBackup="true"
-        android:dataExtractionRules="@xml/data_extraction_rules"
-        android:fullBackupContent="@xml/backup_rules"
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
-        android:supportsRtl="true"
-        android:theme="@style/Theme.SshProxy"
-        tools:targetApi="28">
-        
+        android:theme="@style/Theme.MaterialComponents.Light.NoActionBar"
+        android:usesCleartextTraffic="true"
+        tools:targetApi="31">
+
         <activity
-            android:name=".MainActivity"
+            android:name=".HttpCustomActivity"
             android:exported="true"
-            android:launchMode="singleTask">
+            android:launchMode="singleTop">
             <intent-filter>
                 <action android:name="android.intent.action.MAIN" />
                 <category android:name="android.intent.category.LAUNCHER" />
             </intent-filter>
         </activity>
-
-        <!-- Transparent activity for VPN permission from widget -->
-        <activity
-            android:name=".VpnPermissionActivity"
-            android:exported="false"
-            android:theme="@style/Theme.SshProxy.Transparent"
-            android:excludeFromRecents="true"
-            android:taskAffinity=""
-            android:launchMode="singleInstance">
-        </activity>
+
+        <!-- ❌ REMOVE THIS IF IT EXISTS (no android:name) -->
+        <!-- <activity android:exported="true"></activity> -->
 
         <service
-            android:name=".SshProxyService"
-            android:enabled="true"
-            android:exported="false"
-            android:foregroundServiceType="dataSync"
+            android:name=".CustomVpnService"
             android:permission="android.permission.BIND_VPN_SERVICE"
-            tools:targetApi="p">
+            android:exported="false"
+            android:foregroundServiceType="dataSync">
             <intent-filter>
                 <action android:name="android.net.VpnService" />
             </intent-filter>
         </service>
-
-    <receiver android:name="com.example.sshproxy.widget.VPNStatusWidgetProvider" android:exported="true" tools:ignore="ExportedReceiver">
-            <intent-filter>
-                <action android:name="android.appwidget.action.APPWIDGET_UPDATE" />
-                <action android:name="com.example.sshproxy.widget.ACTION_TOGGLE_VPN" />
-            </intent-filter>
-            <meta-data
-                android:name="android.appwidget.provider"
-                android:resource="@xml/widget_vpn_status" />
-        </receiver>
-    </application>
 
+    </application>
 </manifest>