Database Develop

Need help with OpenVPN

I have Cyanogen Mod 4.2.15.1 and want to use OpenVPN on it since it seems OpenVPN is now completely integrated and works well. I already have my OpenVPN server setup and running perfectly, works great from my laptop.
I guess my question is WHERE do I put the configuration file? Everytime I try to add the VPN, the GUI can't find my configuration file and I have no idea where it is looking for it. I have tried the root of the sdcard and /sdcard/openvpn/ no luck. Please let me know where it looks for the file. Thank you!

+1
i need a solution for this problem
how can we use OpenVPN .

been wondering the same...

bump? is there a guide for how to use openvpn? specifically on CM6, but I'll take anything.

http://forum.xda-developers.com/showthread.php?t=551512

Open the Macket and install OpenVPN Settings, and put the confingure files to the folder /sdcard/openvpn. Then run OpenVPN Settings, and select one of your OpenVPN confingures to connect.

Tun.Ko for Captivate

Has anyone been able to successfully re-compile a tun.ko for the captivate kernel?
Office still has old IPSEC group ID based vpn
Thanks.
[mods please move to development]

Trying my hand at building that module from the vanilla Eclair + Samsung code drop. Will let you know how it goes...

I used this tun.ko, installed openvpn with the openvpn installer from the market, and installed the VPN_Connections_v099.apk from code.google.com/p/get-a-robot-vpnc to manage the connections. I am able to connect to my cisco vpn concentrator with my captivate. Hope this helps...

where on the phone do we copy the tun.ko file?

I put mine in /system/lib/modules/ and openvpn in /system/bin/. I also installed openvpn settings from the market and enabled the "load tun kernel module" option and changed the "load module using" to insmod. For some reason it would not connect without this, I guess because the tun module is not being loaded correctly. Also you can manually load the module by typing “insmod /system/lib/modules/tun.ko” and check to see if it’s loaded by typing “lsmod” and you should see “tun 11088 0 - Live 0xbf195000”

This worked for me.
loaded it manually, not sure if it'll load automatically now or not, haven't tried it.

Can't get this working...
Do you have to start OpenVPN and manually load the tun before launching VPN Connections? Of course after all of these settings...

Still not working...
Okay, I can manually insert and load the tun.ko and installed the VPN Connections app to this version. Every time I try to connect, it INSTANTLY says 'failed to connect'. Any ideas? I have all the right things in all the right places...OpenVPN installed and configured (although I can't see how I need this with the tun.ko manually started and running). HELP! I really need VPN to work on this device or it is going back...

Great information in this thread. I have Busybox installed, Open VPN binaries installed and Open VPN settings installed as well as the Vpn_connection_99.apk file. One issue though!
HOW DO I MANUALLY DROP THE TUN.KO FILE INTO THE SYSTEM/LIB/MODULES FOLDER?
I tried to using Droidexplorer with no luck, so I copied it to the sd card and tried to copy paste it using Astro File Explorer with no luck either. How the hell do I get it into that folder? I'm rooted and running the JH7 captivate stock ROM.
I feel like once I get it in there, I can manually start the file and get this puppy up and going! I tried to put it into another folder and just point Open VPN settings to it there but it just won't work like that. It needs to be in the Modules folder!
Thanks in advance!

Ugh I've tried about everything and no luck with copying the tun.ko file into the system/lib/modules directory.
I've gained root access using adb shell and su commands and I don't receive any errors in the adb shell when I perform cp tun.ko system/lib/modules but it does not copy the file. I tried to chmod 777 the lib folder but was denied. I'm learning I may not have NAND unlocked for full root. I tried to manually start the module from my sd card but it won't work that way either.
Any suggestions?
EDIT: OK BIG IMPROVEMENT. I WAS ABLE TO WRITE THE TUN.KO FILE TO A DIFFERENT LOCATION IN XBIN AND POINT THE OPENVPN AT THIS. AFTER AN LSMOD CHECK I CONFIRMED IT'S RUNNING. CAN ANYONE HELP ME BUILD A VALID OPENVPN .OVPN FILE FOR CONNECTING TO MY VPN? IT'S A STANDARD CISCO ASA IPSEC VPN THAT HAS A GROUP NAME, GROUP KEY AND VPN ADDRESS.
Thanks!
Here is the link that got me able to install the module elsewhere for all you folks facing NAND issues and not able to install tun.ko in the system/lib/modules folder!
http://forum.xda-developers.com/showthread.php?t=793018&highlight=openvpn+config

Thread moved to Q&A.

OK. I've got true ipsec vpn working perfect on the captivate with the latest jh7 build. Cisco asa 5500 is the device being vpnd through.
Sent from my SAMSUNG-SGH-I897 using XDA App

Is anyone doing anything new and/or differently than what's been described in this thread to successfully connect to a Cisco VPN Concentrator? I know October is only two months back, but a lot can change in two months around here.
Also, there was a question on page 1 asking about whether the tun module had to be manually loaded each time or not. That was never answered. Can anyone shed some light on that, please?

Bunkaido said:
Is anyone doing anything new and/or differently than what's been described in this thread to successfully connect to a Cisco VPN Concentrator? I know October is only two months back, but a lot can change in two months around here.
Also, there was a question on page 1 asking about whether the tun module had to be manually loaded each time or not. That was never answered. Can anyone shed some light on that, please?
Click to expand...
Click to collapse
Give me til tomorrow morning. I have EXACTLY what you are looking for. Consider donating if it helps... . It does need to be loaded each time but in the video I point at 2 apps that will make loading it literally a 3-5 second process and not involve you having to use a pc to load it.
http://forum.xda-developers.com/showthread.php?t=871159

Reason for OpenVpn Settings
fixitsteve said:
Okay, I can manually insert and load the tun.ko and installed the VPN Connections app to this version. Every time I try to connect, it INSTANTLY says 'failed to connect'. Any ideas? I have all the right things in all the right places...OpenVPN installed and configured (although I can't see how I need this with the tun.ko manually started and running). HELP! I really need VPN to work on this device or it is going back...
Click to expand...
Click to collapse
The reason I use OpenVpn settings is because when you restart the phone you have to reload the tun.ko and OpenVpn settings is an easy way to do that, it also fixes the dns after you disconnect from the vpn by going to setting and fix dns. The process I use to start the vpn is (starting from a cold boot of the phone)
1. I ALWAYS leave the check box in OpenVPN settings UNCHECKED (OpenVPN off) unless I'm starting the tun.ko after a boot. After the phone boots I open OpenVPN settings and check the box next to OpenVPN and wait a few seconds, then uncheck it. This loads the tun.ko and only needs to be done after a reboot.
2. go to VPN connections and click and hold the vpn connection you made to your VPN concentrator and click connect. (you should be connected at this point)
3. after you disconnect the dns on the phone may not change back automatically from the VPN dns servers, so go to OpenVPN setting and click setting and Fix DNS. You should be able to get out to the Inet again.

Cognition 3.04
Has anyone gotten this to work on the Cognition 3.04 ROM? I keep getting:
fatal:cannot allocate TUN/TAP dev dynamically

K, I don't know what I'm missing here. There's not word one about config files or their format in this thread but, as far as I can tell, this is a fairly worthless collection of bits without one.
I've reviewed the thread 3 times and searched the forums, where can I find formats for these mysterious conf files?

Some custom roms have tun.ko built in. I use Paragon RC6, based on speedmod kernel. To activate tun.ko I rebooted into recovery mode, chose speedmod tweaks and activated tun.ko, rebooted and installed OpenVPN Installer and OpenVPN Settings from the market. Then had to adb some symbolic links (google is your friend). After d/l'ing conf files from my commercial OVPN supplier and some editing the setup works very well.
Sent from somewhere with my Cappy/ParagonROM/OpenVPN

visionlogic said:
Some custom roms have tun.ko built in. I use Paragon RC6, based on speedmod kernel. To activate tun.ko I rebooted into recovery mode, chose speedmod tweaks and activated tun.ko, rebooted and installed OpenVPN Installer and OpenVPN Settings from the market. Then had to adb some symbolic links (google is your friend). After d/l'ing conf files from my commercial OVPN supplier and some editing the setup works very well.
Sent from somewhere with my Cappy/ParagonROM/OpenVPN
Click to expand...
Click to collapse
If my ROM doesn't have tun.ko built in, is it possible to use from a different ROM?

$10 BOUNTY!!! Fix my OpenVPN

I'm offering up a bounty of $10, payable immediately by Paypal, to anyone who can help me figure out how to make OpenVPN (using Hidemyass Pro) correctly run on my HTC Incredible with Virtuous 3.2 Rom installed.
I used the following directions from this site to set up OpenVPN:
Easy way - OpenVPN on rooted/S_OFF Incredible with BusyBox installed:
This is by far the easiest way to set up OpenVPN. Make sure you copy your config file and any relevant keys to a folder on your sdcard.
If you do not have tun.ko on your system, then you can download it for 2.2 (tun.zip) or 2.1 (inside openvpn.zip) attached to this post.
Next, download the following two apps from the Android Market:
OpenVPN Installer
OpenVPN Settings
Next, run OpenVPN installer, click install, give it an install path (I prefer /system/xbin), and give it the path to BusyBox.
Finally, run OpenVPN Settings. Go to Menu -> Advanced, make sure "Load tun kernel module" is checked.
Click on "TUN module settings"
Change "Load module using" to insmod
Change "Path to tun module" to... the path to your tun.ko file. Click back.
Update "Path to configurations" and "Path to openvpn binary".
That should be it!
Okay, so let me be clear in explaining exactly what I've done:
1) I used OpenVPN installer, clicked install, and pointed the install path to /system/xbin and then to Busy box - Binaries installed perfectly without a problem
2) I put all the Hide My Ass Config files into a folder on my SD card called Openvpn (/sdcard/openvpn)
3) I opened the advanced menu and checked "Load tun kernal module"
4) Changed the "Load Module Using" to insmod
5) Changed the Path to tun to (/sdcard/openvpn/tun.ko) - this is the folder where I put all my config files, including tun.ko
6) Changed "Path to configurations" to (/sdcard/openvpn) - which, just like the tun.ko file, is where the config files are located, along with the keys
7) Kept "Path to Binaries" as default setting (/system/xbin/openvpn)
So, after all this has been accomplished, it lists my VPN's servers and I click on one of them. It asks me for my login credentials, and when I put them in, I get the following error:
Fatal;"Cannot load certificate file./keys/hmauser.crt: error:02001002:systemlibrary:fopen:No such file or directory: error: 20074002:BIO.routines:File_CTRL.system lib: error:140AD002:SSL routines: SSL_CTX_use_certicate_file:system lib
Don't know what this means and don't know where to begin to fix the problem. But as I said, first person who gets me online using openvpn will get $10 by Paypal immediately. Who's in?!
If this helps, here's where I got the Hide My Ass Config files:
http://hidemyass.com/vpn-config/

Virtuous 3.2?

digitalicecream said:
Virtuous 3.2?
Click to expand...
Click to collapse
Yes, Virtious 3.2

lol
10ch

EDIT: Think I found your problem. Open the .ovpn file and look for
ca ./keys/ca.crt
cert ./keys/hmauser.crt
key ./keys/hmauser.key
change ./keys/ to where you are storing the files.

FredMan said:
EDIT: Think I found your problem. Open the .ovpn file and look for
ca ./keys/ca.crt
cert ./keys/hmauser.crt
key ./keys/hmauser.key
change ./keys/ to where you are storing the files.
Click to expand...
Click to collapse
It looks like the .ovpn files are all the same, more or less. I don't know where to find what you're mentioning above.
Here are all the files HMA provides. Which of these should i change?:
http://hidemyass.com/vpn-config/

Pick one that is closest to you.
Open it up and look for
Code:
ca ./keys/ca.crt
cert ./keys/hmauser.crt
key ./keys/hmauser.key
Change ./keys/ to ./sdcard/openvpn/

FredMan said:
Pick one that is closest to you.
Open it up and look for
Code:
ca ./keys/ca.crt
cert ./keys/hmauser.crt
key ./keys/hmauser.key
Change ./keys/ to ./sdcard/openvpn/
Click to expand...
Click to collapse
I changed it, but now I get the same error message but with the above thread:
Fatal;"Cannot load certificate file./sdcard/Openvpn/hmauser.crt: error:02001002:systemlibrary:fopen:No such file or directory: error: 20074002:BIO.routines:File_CTRL.system lib: error:140AD002:SSL routines: SSL_CTX_use_certicate_file:system lib
What does the "." before "/sdcard" mean? Am I manipulating the data incorrectly or is there something else I should try?

it's case sensitive Make sure the folders match. Try it with and without the "."

FredMan said:
it's case sensitive Make sure the folders match. Try it with and without the "."
Click to expand...
Click to collapse
You are so close to getting that $10!!
I changed the sequence to /sdcard/Openvpn and for the first time, it actually tried to authenticate and login. But now I got a new error.
It goes through the following:
Auth
Get Config
A quick Ip number that I can't read
then, the following error:
"FATAL: Linux ifconfig failed: could not execute external program"
Any idea how to fix this? I feel like we're very close!!

i dont want the bounty. Just helping out.
open terminal emulator and do
ls /system/xbin
Click to expand...
Click to collapse
look to see if 'ifconfig' is there

FredMan said:
i dont want the bounty. Just helping out.
open terminal emulator and do
look to see if 'ifconfig' is there
Click to expand...
Click to collapse
Thanks for helping out...
Since I have s-off, I'm guessing I'd have to boot into recovery to do anything in terminal emulator (earlier I was told I'd need to do this to use ADB Shell). Is this correct?
I have Astro file viewer on my phone, can I accomplish the same thing by just looking in the folder with that?

You can use astro, just make sure it's there.

FredMan said:
You can use astro, just make sure it's there.
Click to expand...
Click to collapse
Just checked. Yes, it's there. I noticed in the original post on how to set up OpenVPN, posts # 5-8 deal with this exact issue.
http://forum.xda-developers.com/showthread.php?t=702634
I'm not sure what, if anything, I should do with the file the OP posted in post #8, since this was months ago, and the version of OpenVPN I downloaded came out of the market this week. Also, from his original post, it looks like the OpenVPN he attached is for 2.1 not 2.2.
Any ideas?

Stockmoose16 said:
Just checked. Yes, it's there. I noticed in the original post on how to set up OpenVPN, posts # 5-8 deal with this exact issue.
http://forum.xda-developers.com/showthread.php?t=702634
I'm not sure what, if anything, I should do with the file the OP posted in post #8, since this was months ago, and the version of OpenVPN I downloaded came out of the market this week. Also, from his original post, it looks like the OpenVPN he attached is for 2.1 not 2.2.
Any ideas?
Click to expand...
Click to collapse
I GOT IT!!!!!
I had followed the original directions, which said to put ifconfig in system/xbin/bb, but I just reinstalled the binaries in system/xbin and it connected.
Don't know why the original directions were off, but I am so happy. Thank you so much.

Congrats! Have Fun.

FredMan said:
Congrats! Have Fun.
Click to expand...
Click to collapse
Since you were so helpful, can I trouble you for one more question that you may or may not know the answer to?
I have Tasker on my Android and I need it to kill the OpenVPN session when I'm using a certain wifi. This was easy to do with the VPN 1 plugin for PPTP, but I don't know how to make it kill an OpenVPN session (tried to set it up, but it seems to keep trying to reconnect and less I manually toggle off "OpenVPN" in "OpenVPNSettings."
Wanna take a crack?

I will look into it. Love Tasker.

[RELEASE] OpenVPN for Nexus S

This belongs in Development, but I'm not allowed to post it there because I have fewer than 10 posts.
Anyway, I have compiled together a nice package for putting OpenVPN on the Nexus S. It includes all the files necessary to use OpenVPN, including the tun kernel module, the OpenVPN binary, a dependency of it (liblzo.so), and a nice GUI to configure it. This should work on any rom that uses the stock 2.3.4 kernel.
Instructions:
1. Install the attached package via clockwork recovery.
2. Go to the OpenVPN Settings, and under Advanced Settings, check the box that says "Load tun kernel module".
3. Under "TUN module settings", set it up so that it loads with "insmod", and the path to the tun module is "/system/modules/tun.ko".
That's it! I tried to make this as simple as I could.
Thanks to the following people:
*NielDK for the tun.ko kernel module
*cyanogen for the openvpn binary and liblzo.so file
*Friedrich Schaeuffelhut for the GUI

So this would let me connect to an OpenVPN server like a WRT54GL running Tomato?

Trying it right now.. Just found this after trying to install / set it up myself.... Will let you know.

Hi SomePerson - I just installed your openvpn client and it works great!!
I've been meaning to get my openvpn server up and running and this was just the excuse I needed.
I installed, followed the instructions you posted above and dropped the keys and configuration in the appropriate folder and everything worked - first time CONNECTED.
Any plans to add a widget for the homescreen or "notification power widget" to make it easier to turn on/off?? That is my only critique for the moment - REALLY nice work - and Thanks!!
I'm running a Nexus S (i9020a) on the ZeRoXs Custom ROM (based on 2.3.4) on AT&T and connecting to an openvpn server hosted on a Linksys 610N running DD-WRT.
Oh - also needed is a notification bar icon to show when you are connected...I connected this afternoon and forgot about it all afternoon and wondered why my internet was so confused when I got home and on WiFi (and on my vpn network directly).
Thanks for the great app...works WAY better than the bundled VPN solutions in android...
Sent from my Nexus S using XDA Premium App

Thank you so much, I wasn't able to get openvpn working until now but this works perfectly.

i have the nexus s 4g.. on 2.3.5.
is having 2.3.4 and stock kernel a requirement? im running stock 2.3.5 and the matr1x kernel. im a VPN n00b and this looks like just what i needed.. everyone had good results

Works for me too but the only problem... this version of the OpenVPN client keeps saying in the notification bar
"Username/Password required for configuration vpnname"
so I can't tell if it's connect or not...
I also noticed this version is 0.4.8test1 where as the one on the market is 0.4.7
did you modify this? because I also looked on the official site and only version I can see there is 0.4.7
thanks

Hi! This is my first message, sorry for my English
I have got a problem with this file.
I have Nexus S with ClockWork mod by Superatmel and ROM SuperOSR Gingerbread:
Android version is 2.3.5
I have flashed succesfully this OpenVPN .ZIP, the instalation was succesfully, the configuration is correct.
OpenVPN correctly connects to my OpenVPN server but I have not internet, DNS doesn't work.
Anyone have this problem??
THANKS!!
Solution:
Click on client.CONF, PREFERENCES, USE VPN DNS and on DNS Server put: 8.8.8.8 (Google DNS).
Enjoy!!

tks, very useful!

Thanks for the VPN.

openvpn
can't connect to server it says username password required but i already made a txt file to route automatically with my openvpn account.

OpenVPN
Great job!
However, do you think it should work on Galaxy S2 with CM9?
Thx

Openvpn

I am setting up openvpn.
I have run into several problems.
- I'm not sure where to find the connection log, or routing table log.
- I'm not sure if it is using TAP or TUN.*
- not sure if I need tun.ko.
- my .conf file tells me that it looks for ca.crt and .login in /etc/openvpn. I'm not sure how to copy those files to /etc .
- not sure how to format the .login file.
I know that is a real laundry list. I have been searching for a couple hours. Is anyone familiar with setting openvpn up?

krustmother said:
I am setting up openvpn.
I have run into several problems.
- I'm not sure where to find the connection log, or routing table log.
- I'm not sure if it is using TAP or TUN.*
- not sure if I need tun.ko.
- my .conf file tells me that it looks for ca.crt and .login in /etc/openvpn. I'm not sure how to copy those files to /etc .
- not sure how to format the .login file.
I know that is a real laundry list. I have been searching for a couple hours. Is anyone familiar with setting openvpn up?
Click to expand...
Click to collapse
You need a kernel that has tun.
Sent from my HTC PH39100 using xda premium

I think you are telling me that there is no pushing tun.ko to system because only the kernel can write to it?

krustmother said:
I think you are telling me that there is no pushing tun.ko to system because only the kernel can write to it?
Click to expand...
Click to collapse
Tun.ko is compile when a kernel is compile and is kernel specific. My kernel has this.
Sent from my HTC PH39100 using xda premium

Thank you for clearing that up!

Openvpn running on Vivid
Setting up openvpn on htc vivid. How I did it, anyway...
Get root.
Install esfileelorer and terminal.
Install openVPN installer and openVPN settings.
It took a bit to figure out permissions, for me anyway, I copied the .ca certificate authority file, along with the .ovpn files that have my various VPN *server info in them to /etc/openvpn . *To auto-login, make a text file, call it password.txt or whatever. Open your .ovpn files, goto the --user-pass-auth line, add the name of your password file. Now it should work as long as you have permissions right.
My provider gives you a .ca and some .ovpn files. With a password.txt file, it should be enough.
This site gives some visual info. Not exactly the same as the open on I used. http://vpnblog.info/android-openvpn-strongvpn.html
The binary has to be loaded to /system/xbin. That broke ls or some other command. I was forced to re-link it. Other than that, I'm not sure if it's running TUN. It was stated above that tun.ko has to be proper. Looking into it.