enable TCP stealth option configuration

2 files changed, 64 insertions, 3 deletions

diff --git a/contrib/gnunet_setup_main_window.glade b/contrib/gnunet_setup_main_window.glade
index 1e21945d..cd51e870 100644
--- a/contrib/gnunet_setup_main_window.glade
+++ b/contrib/gnunet_setup_main_window.glade
@@ -2367,6 +2367,24 @@
                                   </packing>
                                 </child>
                                 <child>
+                                  <object class="GtkCheckButton" id="GNUNET_setup_transport_http_stealth_checkbutton">
+                                    <property name="label" translatable="yes">Use TCP Stealth (requires kernel support)</property>
+                                    <property name="visible">True</property>
+                                    <property name="sensitive">False</property>
+                                    <property name="can_focus">True</property>
+                                    <property name="receives_default">False</property>
+                                    <property name="tooltip_text" translatable="yes">Use this option to make your TCP server "stealthy", that is "invisible" (or at least much less visible) to port scanners.  This requires kernel support and may not be available on all operating systems. Note that if you use this option, only clients that also support TCP Stealth (on their operating system) will be able to connect to you. You do not need to check this box to enable TCP Stealth client-side.</property>
+                                    <property name="xalign">0</property>
+                                    <property name="draw_indicator">True</property>
+                                  </object>
+                                  <packing>
+                                    <property name="expand">False</property>
+                                    <property name="fill">False</property>
+                                    <property name="padding">5</property>
+                                    <property name="position">2</property>
+                                  </packing>
+                                </child>
+                                <child>
                                   <object class="GtkHBox" id="GNUNET_setup_transport_http_test_hbox">
                                     <property name="visible">True</property>
                                     <property name="can_focus">False</property>
@@ -2439,7 +2457,7 @@
                                     <property name="expand">False</property>
                                     <property name="fill">False</property>
                                     <property name="padding">5</property>
-                                    <property name="position">2</property>
+                                    <property name="position">3</property>
                                   </packing>
                                 </child>
                               </object>
@@ -2842,6 +2860,24 @@
                                   </packing>
                                 </child>
                                 <child>
+                                  <object class="GtkCheckButton" id="GNUNET_setup_transport_https_stealth_checkbutton">
+                                    <property name="label" translatable="yes">Use TCP Stealth (requires kernel support)</property>
+                                    <property name="visible">True</property>
+                                    <property name="sensitive">False</property>
+                                    <property name="can_focus">True</property>
+                                    <property name="receives_default">False</property>
+                                    <property name="tooltip_text" translatable="yes">Use this option to make your TCP server "stealthy", that is "invisible" (or at least much less visible) to port scanners.  This requires kernel support and may not be available on all operating systems. Note that if you use this option, only clients that also support TCP Stealth (on their operating system) will be able to connect to you. You do not need to check this box to enable TCP Stealth client-side.</property>
+                                    <property name="xalign">0</property>
+                                    <property name="draw_indicator">True</property>
+                                  </object>
+                                  <packing>
+                                    <property name="expand">False</property>
+                                    <property name="fill">False</property>
+                                    <property name="padding">5</property>
+                                    <property name="position">2</property>
+                                  </packing>
+                                </child>
+                                <child>
                                   <object class="GtkHBox" id="GNUNET_setup_transport_https_test_hbox">
                                     <property name="visible">True</property>
                                     <property name="can_focus">False</property>
@@ -2914,7 +2950,7 @@
                                     <property name="expand">False</property>
                                     <property name="fill">False</property>
                                     <property name="padding">5</property>
-                                    <property name="position">2</property>
+                                    <property name="position">3</property>
                                   </packing>
                                 </child>
                               </object>
diff --git a/src/setup/gnunet-setup-options.c b/src/setup/gnunet-setup-options.c
index b35842c0..f3c1213c 100644
--- a/src/setup/gnunet-setup-options.c
+++ b/src/setup/gnunet-setup-options.c
@@ -1,6 +1,6 @@
 /*
      This file is part of GNUnet.
-     (C) 2010, 2011, 2012 Christian Grothoff (and other contributing authors)
+     (C) 2010-2014 Christian Grothoff (and other contributing authors)
 
      GNUnet is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published
@@ -1940,6 +1940,20 @@ const struct GNUNET_SETUP_OptionSpecification option_specifications[] = {
   NULL, NULL,
   NULL},
 
+  {
+   "GNUNET_setup_transport_http_stealth_checkbutton",
+   "toggled",
+   "transport-http",
+   "TCP_STEALTH",
+   gettext_noop ("Should GNUnet use TCP STEALTH for the TCP server?"),
+   "https://gnunet.org/knock",
+   &load_yes_no_check_tcp_stealth,
+   &save_yes_no, NULL,
+   NULL, NULL,
+   NULL },
+
+
+
   /* HTTPS client */
 
   {
@@ -2056,6 +2070,17 @@ const struct GNUNET_SETUP_OptionSpecification option_specifications[] = {
    NULL, NULL,
    NULL},
 
+  {
+   "GNUNET_setup_transport_https_stealth_checkbutton",
+   "toggled",
+   "transport-https",
+   "TCP_STEALTH",
+   gettext_noop ("Should GNUnet use TCP STEALTH for the TCP server?"),
+   "https://gnunet.org/knock",
+   &load_yes_no_check_tcp_stealth,
+   &save_yes_no, NULL,
+   NULL, NULL,
+   NULL },
 
   /* FS TAB */