Cannot build circuits because we don't have enough directory information

[suntzu93]

Hi All,
I start Orchid 1.0.0 and Orchid 1.2.1 but i got a message :
May 09, 2017 2:44:09 PM com.subgraph.orchid.TorClient start
INFO: Starting Orchid (version: 1.0.0)
May 09, 2017 2:44:09 PM com.subgraph.orchid.directory.DirectoryImpl loadFromStore
INFO: Loading cached network information from disk
May 09, 2017 2:44:09 PM com.subgraph.orchid.directory.DirectoryImpl loadFromStore
INFO: Loading certificates
May 09, 2017 2:44:09 PM com.subgraph.orchid.circuits.CircuitCreationTask checkCircuitsForCreation
INFO: Cannot build circuits because we don't have enough directory information

If you have any suggest for me in this issue ,Please, let me know !
Many thanks !

[ochando]

Same problem for me.
Comparing the server list on Orchid/src/com/subgraph/orchid/directory/TrustedAuthorities.java, and my cached-microdesc-consensus used by the binary tor on my OS, almost all the IPs are different:
dir-source dannenberg 0232AF901C31A04EE9848595AF9BB7620D4C5B2E dannenberg.torauth.de 193.23.244.244 80 443 contact Andreas Lehner vote-digest 2D2BF5A1678938916E627FF4512160AB943BEC52

dir-source tor26 14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4 86.59.21.38 86.59.21.38 80 443 contact Peter Palfrader vote-digest F9959F7D0C188E24DD233167CD45D07D8AEC68C9

dir-source longclaw 23D15D965BC35114467363C165C4F724B64B4F66 199.254.238.53 199.254.238.53 80 443 contact Riseup Networks <collective at riseup dot net> - 1nNzekuHGGzBYRzyjfjFEfeisNvxkn4RT vote-digest B65FA18F0984F6155216494CA2FDF8AE34229946

dir-source maatuska 49015F787433103580E3B66A1707A00E60F2D15B 171.25.193.9 171.25.193.9 443 80 contact 4096R/1E8BF34923291265 Linus Nordberg <linus@nordberg.se> vote-digest 988FAC20BBF2C1472F5BEBE627D4A1E07A1C8D8A

dir-source moria1 D586D18309DED4CD6D57C18FDB97EFA96D330566 128.31.0.34 128.31.0.34 9131 9101 contact 1024D/28988BF5 arma mit edu vote-digest 1E1CBC1E219EAE59876B270E91D4E4E8293B6CD6

dir-source dizum E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58 194.109.206.212 194.109.206.212 80 443 contact 1024R/8D56913D Alex de Joode <adejoode@sabotage.org> vote-digest E2E20692EBACD7E4DB3CA26959F299392845A3C0

dir-source gabelmoo ED03BB616EB2F60BEC80151114BB25CEF515B226 131.188.40.189 131.188.40.189 80 443 contact 4096R/261C5FBE77285F88FB0C343266C8C2D7C5AA446D Sebastian Hahn <tor@sebastianhahn.net> - 12NbRAjAG5U3LLWETSF7fSTcdaz32Mu5CN vote-digest 4F1DF4E39B68AEE7B90F7BE9EDFC9D5A9E31609A

dir-source Faravahar EFCBE720AB3A82B99F9E953CD5BF50F7EEFC7B97 154.35.175.225 154.35.175.225 80 443 contact 0x0B47D56D Sina Rabbani (inf0) <sina redteam net> vote-digest 1B3D633796E9631D303CB75BC8BCAF5C66C5DEE1

I guess that's the problem. Because using the tor bin on my OS, all requests are torified correctly.

Subgraph should provide an easiest way to change this list instead of a hardcoded one.

[nikiwaibel]

I guess it is also hardcoded in the official tor client. Buy there it is updated regularly...

[nomadgy]

Does anyone know of an updated orchid lib that works on samsung s6. I read a post that say that samsung removed some of the cipher libs. I was wondering if anyone managed to find a solution to this problem.

[munsuri]

Are you sure those info/warning's are stopping the lib from working? I get the following as well

2017-05-29 16:10:29 .TorClient start
[INFO] Starting Orchid (version: 1.0.0)
2017-05-29 16:10:29 .DirectoryImpl loadFromStore
[INFO] Loading cached network information from disk
2017-05-29 16:10:29 .DirectoryImpl loadFromStore
[INFO] Loading certificates
2017-05-29 16:10:29 .CircuitCreationTask checkCircuitsForCreation
[INFO] Cannot build circuits because we don't have enough directory information
Waiting for Tor readiness...
2017-05-29 16:10:29 .DirectoryImpl loadFromStore
[INFO] Loading consensus
2017-05-29 16:10:29 .DirectoryImpl addConsensusDocument
[WARNING] Unable to verify signatures on consensus document, discarding...
2017-05-29 16:10:29 .DirectoryImpl loadFromStore
[INFO] Loading microdescriptor cache
2017-05-29 16:10:29 .DirectoryImpl loadFromStore
[INFO] loading state file
2017-05-29 16:10:29 .DirectoryDownloadTask needConsensusDownload
[INFO] Downloading consensus because we have no consensus document
2017-05-29 16:10:42 .ConsensusDocumentImpl verifySingleAuthority
[WARNING] Consensus signed by unrecognized directory authority: xxxxxxxxxxxxxxx
2017-05-29 16:10:42 .ConsensusDocumentImpl verifySignatures
[INFO] Certificates need to be retrieved to verify consensus
2017-05-29 16:10:49 .CircuitCreationTask checkCircuitsForCreation
[INFO] Cannot build circuits because we don't have enough directory information
2017-05-29 16:10:52 .ConsensusDocumentImpl verifySingleAuthority
[WARNING] Consensus signed by unrecognized directory authority: xxxxxxxxxxxxxxx
2017-05-29 16:10:52 .ConsensusDocumentImpl verifySingleAuthority
[WARNING] Consensus signed by unrecognized directory authority: xxxxxxxxxxxxxxx
2017-05-29 16:10:52 .ConsensusDocumentImpl verifySingleAuthority
[WARNING] Consensus signed by unrecognized directory authority: xxxxxxxxxxxxxxx
2017-05-29 16:10:52 .ConsensusDocumentImpl verifySingleAuthority
[WARNING] Consensus signed by unrecognized directory authority: xxxxxxxxxxxxxxx
2017-05-29 16:10:52 .ConsensusDocumentImpl verifySingleAuthority
[WARNING] Consensus signed by unrecognized directory authority: xxxxxxxxxxxxxxx
2017-05-29 16:10:52 .ConsensusDocumentImpl verifySingleAuthority
[WARNING] Consensus signed by unrecognized directory authority: xxxxxxxxxxxxxxx

That ends up downloading the latest consensus files,
which contain the most recent authority servers (https://atlas.torproject.org/#search/flag:authority)

Besides, the HTTP/S requests that I'm doing appear to go through Tor (IP check)

[nomadgy]

Hi munsuri. thank you for replying to me. The orchid library is the best one i have ever seen. Onionkit and orbot is no match for it. I have abondoned my current project because I got no reply earlier and used onionkit instead. I am guve up on irc and looking at alternative ways to post messages online. Its not ideal but I would still prefer the orchid lib.

I wrote an android app that uses the orchid-0.9.1.jar library. I was trying to write a irc chat app that runs over the tor network for freespeech movement in my country because people in my country are being attacked for expressing their opinon openly. It was working initially but when I updated my phone it broke my app (app freezes at connecting to tor).

Having realized this I assumed that it will also affect other versions of android. Someone on the forum mentioned in an issue that it has something to do with ciphers being removed. So I tried to download the orchid source and replace the current crypto lib with spongy castle but realized its a lot of work. I have basically given up on the orchid lib. If you can send me a sample project with (libs included) that works on the samsung s6 with the updates then I would be happy and i can test and verify it works on the samsung s6. You would make my day. Thanks.

[nikiwaibel]

@nomadgy i do 100% agree with you! onionkit+orbot is not what i want either. we need a standalone java lib that creates proper tor circuits. anywhere within java, including android.

[nomadgy]

nikiwaibel, thank you. i am glad to know i am not the only one who support the orchid lib want it to be the best. onionkut does not offer a raw socket connect like orchid does. That is what impresses me about orchid lib. Its simple implementation. I just wish someone can figure out how to fix it on android. I am glad to test it out on my samsung s6.

[munsuri]

What about orchid 1.0.0? It is the one bitcoinj was using till this commit so you can check whether it works for you or not. But I don't know if this project has official support for Android. The authors of this project don't seem to be very active so you would have to try.
Another alternative that says it supports Android (and that it is working for me on desktop) is silvertunnel-ng. You can find the 0.0.5 in maven repos.
Good luck :)

[nomadgy]

I tried that too as a last resort. The same problem. Can put up a sample project somewhere I can download that I can test. I tried looking at silver tunnel but it is confusing. Too many dep libraries. I am using eclipse as my ide. Maybe you can send me a sample project with silvertunnel that actually works. I still prefer orchid because it is simple and only one jar.

[nomadgy]

I wonder why the tor project developers could not take over the orchid project and develop it. They should ensure that libs like orchid is maintained and supported in order to promote freedom of speech. That's the whole point of tor. They should take the lead since they built the network.

[frypatch]

I'm going to look into forking and developing features for orchid. I've already addressed the issues mentioned here and re-wrote the api to act like a traditional http client in a private project.

[nomadgy]

hi geo-gs, thank you very much. you are a life saver. I am glad to get orchid working. I hope the socket interface is still available. I need that feature to tunnel an irc socket connection through tor. let me know when an update is available. thanks.

[nomadgy]

hi geo-gs, You said that the issue was addressed. If you have a fix for the current orchid lib then can you direct me to it. I am talking about the crypto lib problem.

I saw the following code in your project (TorClientFactory.java). Is this code block a built in feature. Is this the fix to the crypto problem?

        if(TorCryptography.hasRestrictedCryptography()){
            TorCryptography.removeCryptographyRestrictions();
        }

I also noticed you are creating a proxy to the torclient. I will assume that is to be used for your http stuff.

public static Proxy getProxy(){
    return new Proxy(Proxy.Type.SOCKS, new InetSocketAddress(PROXY_HOST, PROXY_PORT));
}

In all, your project is good work.

[frypatch]

@nomadgy
I remember having a fix for fixing the not enough directory information bug but didn't publish it anywhere, but it sounds like this is not your problem.

The TorCryptography.removeCryptographyRestrictions() was developed with computers in mind, not phones, so I don't know how it will react on a phone. That being said, the idea behind this function was to easily enable the unlimited strength ciphers in oracle java 7 or 8 via reflection so that the user didn't need to install additional jar files.

However, if the ciphers don't exist at all then this won't work. I'd be surprised if they don't exist though because I think they are needed for https requests too.

According to the source post I was following when implementing this (http://stackoverflow.com/a/22492582) an alternative would be to fork the project, bypass the JCE API, and include/use our own unlimited strength ciphers.

[nomadgy]

hi geo-gs,

I tried something similiar before and it did not work but I will take another look at your link. If I bypass the jce api then is the spongy castle crypto lib compatibale? Will give it a try and see if it works. Thanks.