Add settings to disable DoH

Close #3130

app/src/main/java/com/topjohnwu/magisk/core/Config.kt

@@ -9,6 +9,7 @@ import com.topjohnwu.magisk.BuildConfig
 import com.topjohnwu.magisk.core.magiskdb.SettingsDao
 import com.topjohnwu.magisk.core.magiskdb.StringDao
 import com.topjohnwu.magisk.core.utils.BiometricHelper
+import com.topjohnwu.magisk.core.utils.defaultLocale
 import com.topjohnwu.magisk.core.utils.refreshLocale
 import com.topjohnwu.magisk.data.preference.PreferenceModel
 import com.topjohnwu.magisk.data.repository.DBConfig
@@ -54,6 +55,7 @@ object Config : PreferenceModel, DBConfig {
         const val THEME_ORDINAL = "theme_ordinal"
         const val BOOT_ID = "boot_id"
         const val ASKED_HOME = "asked_home"
+        const val DOH = "doh"
 
         // system state
         const val MAGISKHIDE = "magiskhide"
@@ -126,6 +128,7 @@ object Config : PreferenceModel, DBConfig {
     var themeOrdinal by preference(Key.THEME_ORDINAL, Theme.Piplup.ordinal)
     var suReAuth by preference(Key.SU_REAUTH, false)
     var checkUpdate by preference(Key.CHECK_UPDATES, true)
+    var doh by preference(Key.DOH, defaultLocale.country == "CN")
     var magiskHide by preference(Key.MAGISKHIDE, true)
     var showSystemApp by preference(Key.SHOW_SYSTEM_APP, false)
 

app/src/main/java/com/topjohnwu/magisk/di/NetworkingModule.kt

@@ -3,6 +3,7 @@ package com.topjohnwu.magisk.di
 import android.content.Context
 import android.os.Build
 import com.squareup.moshi.Moshi
+import com.topjohnwu.magisk.core.Config
 import com.topjohnwu.magisk.core.Const
 import com.topjohnwu.magisk.core.Info
 import com.topjohnwu.magisk.data.network.GithubApiServices
@@ -32,22 +33,12 @@ val networkingModule = module {
     single { createMarkwon(get(), get()) }
 }
 
-@Suppress("DEPRECATION")
-fun createOkHttpClient(context: Context): OkHttpClient {
-    val builder = OkHttpClient.Builder()
+private class DnsResolver(client: OkHttpClient) : Dns {
 
-//    val httpLoggingInterceptor = HttpLoggingInterceptor().apply {
-//        level = HttpLoggingInterceptor.Level.HEADERS
-//    }
-//    builder.addInterceptor(httpLoggingInterceptor)
-
-    if (!Networking.init(context)) {
-        Info.hasGMS = false
-        if (Build.VERSION.SDK_INT < 21)
-            builder.sslSocketFactory(NoSSLv3SocketFactory())
-    }
-
-    val doh = DnsOverHttps.Builder().client(builder.build())
+    private var dohError = false
+    private val poisonedHosts = listOf("raw.githubusercontent.com")
+    private val doh by lazy {
+        DnsOverHttps.Builder().client(client)
             .url(HttpUrl.get("https://cloudflare-dns.com/dns-query"))
             .bootstrapDnsHosts(listOf(
                 InetAddress.getByName("162.159.36.1"),
@@ -62,21 +53,37 @@ fun createOkHttpClient(context: Context): OkHttpClient {
             ))
             .resolvePrivateAddresses(true)  /* To make PublicSuffixDatabase never used */
             .build()
+    }
 
-    var skipDoH = false
-    builder.dns { hostname ->
-        // Only resolve via DoH for known DNS polluted hostnames
-        if (!skipDoH && hostname == "raw.githubusercontent.com") {
+    override fun lookup(hostname: String): List<InetAddress> {
+        return if (!dohError && Config.doh && poisonedHosts.contains(hostname)) {
             try {
                 doh.lookup(hostname)
             } catch (e: UnknownHostException) {
-                skipDoH = true
+                dohError = true
                 Dns.SYSTEM.lookup(hostname)
             }
         } else {
             Dns.SYSTEM.lookup(hostname)
         }
     }
+}
+
+@Suppress("DEPRECATION")
+fun createOkHttpClient(context: Context): OkHttpClient {
+    val builder = OkHttpClient.Builder()
+
+//    val httpLoggingInterceptor = HttpLoggingInterceptor().apply {
+//        level = HttpLoggingInterceptor.Level.HEADERS
+//    }
+//    builder.addInterceptor(httpLoggingInterceptor)
+
+    if (!Networking.init(context)) {
+        Info.hasGMS = false
+        if (Build.VERSION.SDK_INT < 21)
+            builder.sslSocketFactory(NoSSLv3SocketFactory())
+    }
+    builder.dns(DnsResolver(builder.build()))
 
     return builder.build()
 }

app/src/main/java/com/topjohnwu/magisk/ui/settings/SettingsItems.kt

@@ -174,6 +174,15 @@ object UpdateChecker : BaseSettingsItem.Toggle() {
         }
 }
 
+object DoHToggle : BaseSettingsItem.Toggle() {
+    override val title = R.string.settings_doh_title.asTransitive()
+    override val description = R.string.settings_doh_description.asTransitive()
+    override var value = Config.doh
+        set(value) = setV(value, field, { field = it }) {
+            Config.doh = it
+        }
+}
+
 // check whether is module already installed beforehand?
 object SystemlessHosts : BaseSettingsItem.Blank() {
     override val title = R.string.settings_hosts_title.asTransitive()

app/src/main/java/com/topjohnwu/magisk/ui/settings/SettingsViewModel.kt

@@ -58,7 +58,7 @@ class SettingsViewModel(
         // Manager
         list.addAll(listOf(
             Manager,
-            UpdateChannel, UpdateChannelUrl, UpdateChecker, DownloadPath
+            UpdateChannel, UpdateChannelUrl, DoHToggle, UpdateChecker, DownloadPath
         ))
         if (Info.env.isActive) {
             list.add(ClearRepoCache)

app/src/main/res/values/strings.xml

@@ -175,6 +175,8 @@
     <string name="no_biometric">Unsupported device or no biometric settings are enabled</string>
     <string name="settings_customization">Customization</string>
     <string name="setting_add_shortcut_summary">Add a pretty shortcut in the home screen in case the name and icon are difficult to recognize after hiding the app</string>
+    <string name="settings_doh_title">DNS over HTTPS</string>
+    <string name="settings_doh_description">Workaround DNS poisoning in some nations</string>
 
     <string name="multiuser_mode">Multiuser Mode</string>
     <string name="settings_owner_only">Device Owner Only</string>