Database Develop

OPEN VPN

Has anyone managed to get Open VPN working on a Galaxy S? I have a SPICA on which it is working but I cant find a TUN.KO that works on the Galaxy S. Thanks

Also trying to find a proper TUN.KO for the Galaxy S.
No luck so far.

Read here: http://android.modaco.com/content-page/291919/openvpn-on-android/page/20/

None of the methods described for other phones worked for Samsung Galaxy S. I tried with several tun.ko and all where giving me "format errors" as the kernel was not matching.
Last resort, I compile it myself from Samsung I9000 kernel sources.
Tested it and worked. I know have OpenVPN in Galaxy S (I9000)!
I attach the tun.ko file. I hope other guys out there with I9000 can use it.

Excellent. Will give it a go. Which ROM are you running?

I'm currently running I9000BGF1, I will be soon upgrading to new Firmware.
Kernel Version: 2.6.29 [email protected] #2

Hi Chafw,
Can you talk me through where you put the tun.ko, and where you put your OpenVPN files in the directories? I'm getting no where fast on this!
Thanks
SA

Hi mittu1,
I believe you are already root and busybox/openvpn installed.
I used the same link that tids2k wrote above to setup the whole thing up.
I used openvpn-settings application for starting up openvpn configurations.
In openvpn-settings you can define where the tun.ko driver is located.
Anyway, the simplest thing to do firdst to test whether the tun.ko works for you is to
load it by hand using a root shell:
insmod <path to tun.ko>
I have it installed in /system/lib/modules/tun.ko.
Hope this helps.

The tun.ko is ok, it loads nicely. Many many many thanks !!!
In the "OpenVpn Settings" app, my connection ask me for a password, I see "auth", then nothing, I fall back in front of the "select to turn on OpenVPN tunnel" button.
I have tried with stock libcrypto.so and libssl.so, and then with those from openvpn-binary.zip at hxxp://sourceforge.net/projects/tunneldroid/files/
The OpenVPN app still don't want to establish the connection... In no ways... And no log message in dmesg at all (neither for tun)
So it's enough for this night, but if someone have an idea, you are (really) welcome !!!

Does the module have to match the kernel version exactly? Running european JM2,
kernel is 2.6.29 [email protected]3#2
PS. 1st Post

Do you copy tun.ko in the /lib/modules folder ? or in a new freshly created folder /system/lib/modules (as said on modaco guide) ?
On my system (XXJF3 / XXJF3 / XAJF3), I have no /system/lib/modules folder, and every time a mount in rw my /, then write tun.ko to /lib/modules, then remount in readonly, and then reboot the phone, the tun.ko file disappear...
Do I miss something ? Does the / mount point isn't a real partition ???
thnks in advance

@ Anduru:
No, don't think that is necessary but I'm also quite new to Android.
@raphman:
I created a new folder /system/lib/modules. I didn't have the directory either.
Anyway the OpenVpn-settings applications allow to define the location of the tun.ko. Haven't tried but I believe you could put it anywhere in the system.
Also, make sure the ifconfig and route commands are available and properly linked.

@chafw
thanks for your reply
meanwhile i just tried my luck and it worked.

Guys,
I'm glad it's working but I haven't managed it yet!!
I'm using the I9000XWJM2 rom, rooted! I've downloaded the tun.ko file, the open VPN Setting file off the market, and Open VPN installer. I've got the certs and config files.
Can some one please guide me through installation to get it up and running OR did people use the following link instructions
http://android.modaco.com/content/software/291919/openvpn-on-android/
Would really appreciate someone's help here.

Chaf, many thanks, but in fact, my installation was ok, it was a password problem... Arrrrgggggg !!!!!!!
So now I connect fine to my OpenVpn server, but I cannot reach any server withour using the "Fix DNS" problem.... Strange, because using the connection on my pc automacillay get the DNS given by the vpn....
Many thanks !!!

@raphman:
The DNS is a known issue in Android as OpenVPN uses update-resolv
hook scripts to update the resolv.conf configuration with the passed DNS parameters.
However, this does not work yet with in Android and Openvpn-settings.
You can either use fix-dns or add your hosts in the /etc/hosts file if they are
a limited number.
@mittu1:
Yes, that's the guide.

liblzo
I have got to the stage where my openvpn connection is started but no traffic is being passed through the tunnel. Checking around it seems that I am missing the liblzo.so file that handles compression. Can any of you guys post a working liblzo.so or confirm that your configuration does/doesn't use this file? Thanks.

mittu1 said:
I have got to the stage where my openvpn connection is started but no traffic is being passed through the tunnel. Checking around it seems that I am missing the liblzo.so file that handles compression. Can any of you guys post a working liblzo.so or confirm that your configuration does/doesn't use this file? Thanks.
Click to expand...
Click to collapse
take it here and 1st step is SAVE your old files somewhere !!!
hxxp://sourceforge.net/projects/tunneldroid/files/openvpn-binary.zip/download
then cp in /system/lib and chmod 755. That's ok on my i9000.

hi,
It didn't work! Still same problem. Any other suggestions?

chafw said:
None of the methods described for other phones worked for Samsung Galaxy S. I tried with several tun.ko and all where giving me "format errors" as the kernel was not matching.
Last resort, I compile it myself from Samsung I9000 kernel sources.
Tested it and worked. I know have OpenVPN in Galaxy S (I9000)!
I attach the tun.ko file. I hope other guys out there with I9000 can use it.
Click to expand...
Click to collapse
I tried the tun.ko and it works! Unfortunately my (Endian) firewall can only use a tap device, and apparently both ends have to match. I get the connection, but the the device and IP are never setup. Any chance you can either compile the tap device like you did the tun, or give me the steps so I can do it myself ?

Tun.Ko for Captivate

Has anyone been able to successfully re-compile a tun.ko for the captivate kernel?
Office still has old IPSEC group ID based vpn
Thanks.
[mods please move to development]

Trying my hand at building that module from the vanilla Eclair + Samsung code drop. Will let you know how it goes...

I used this tun.ko, installed openvpn with the openvpn installer from the market, and installed the VPN_Connections_v099.apk from code.google.com/p/get-a-robot-vpnc to manage the connections. I am able to connect to my cisco vpn concentrator with my captivate. Hope this helps...

where on the phone do we copy the tun.ko file?

I put mine in /system/lib/modules/ and openvpn in /system/bin/. I also installed openvpn settings from the market and enabled the "load tun kernel module" option and changed the "load module using" to insmod. For some reason it would not connect without this, I guess because the tun module is not being loaded correctly. Also you can manually load the module by typing “insmod /system/lib/modules/tun.ko” and check to see if it’s loaded by typing “lsmod” and you should see “tun 11088 0 - Live 0xbf195000”

This worked for me.
loaded it manually, not sure if it'll load automatically now or not, haven't tried it.

Can't get this working...
Do you have to start OpenVPN and manually load the tun before launching VPN Connections? Of course after all of these settings...

Still not working...
Okay, I can manually insert and load the tun.ko and installed the VPN Connections app to this version. Every time I try to connect, it INSTANTLY says 'failed to connect'. Any ideas? I have all the right things in all the right places...OpenVPN installed and configured (although I can't see how I need this with the tun.ko manually started and running). HELP! I really need VPN to work on this device or it is going back...

Great information in this thread. I have Busybox installed, Open VPN binaries installed and Open VPN settings installed as well as the Vpn_connection_99.apk file. One issue though!
HOW DO I MANUALLY DROP THE TUN.KO FILE INTO THE SYSTEM/LIB/MODULES FOLDER?
I tried to using Droidexplorer with no luck, so I copied it to the sd card and tried to copy paste it using Astro File Explorer with no luck either. How the hell do I get it into that folder? I'm rooted and running the JH7 captivate stock ROM.
I feel like once I get it in there, I can manually start the file and get this puppy up and going! I tried to put it into another folder and just point Open VPN settings to it there but it just won't work like that. It needs to be in the Modules folder!
Thanks in advance!

Ugh I've tried about everything and no luck with copying the tun.ko file into the system/lib/modules directory.
I've gained root access using adb shell and su commands and I don't receive any errors in the adb shell when I perform cp tun.ko system/lib/modules but it does not copy the file. I tried to chmod 777 the lib folder but was denied. I'm learning I may not have NAND unlocked for full root. I tried to manually start the module from my sd card but it won't work that way either.
Any suggestions?
EDIT: OK BIG IMPROVEMENT. I WAS ABLE TO WRITE THE TUN.KO FILE TO A DIFFERENT LOCATION IN XBIN AND POINT THE OPENVPN AT THIS. AFTER AN LSMOD CHECK I CONFIRMED IT'S RUNNING. CAN ANYONE HELP ME BUILD A VALID OPENVPN .OVPN FILE FOR CONNECTING TO MY VPN? IT'S A STANDARD CISCO ASA IPSEC VPN THAT HAS A GROUP NAME, GROUP KEY AND VPN ADDRESS.
Thanks!
Here is the link that got me able to install the module elsewhere for all you folks facing NAND issues and not able to install tun.ko in the system/lib/modules folder!
http://forum.xda-developers.com/showthread.php?t=793018&highlight=openvpn+config

Thread moved to Q&A.

OK. I've got true ipsec vpn working perfect on the captivate with the latest jh7 build. Cisco asa 5500 is the device being vpnd through.
Sent from my SAMSUNG-SGH-I897 using XDA App

Is anyone doing anything new and/or differently than what's been described in this thread to successfully connect to a Cisco VPN Concentrator? I know October is only two months back, but a lot can change in two months around here.
Also, there was a question on page 1 asking about whether the tun module had to be manually loaded each time or not. That was never answered. Can anyone shed some light on that, please?

Bunkaido said:
Is anyone doing anything new and/or differently than what's been described in this thread to successfully connect to a Cisco VPN Concentrator? I know October is only two months back, but a lot can change in two months around here.
Also, there was a question on page 1 asking about whether the tun module had to be manually loaded each time or not. That was never answered. Can anyone shed some light on that, please?
Click to expand...
Click to collapse
Give me til tomorrow morning. I have EXACTLY what you are looking for. Consider donating if it helps... . It does need to be loaded each time but in the video I point at 2 apps that will make loading it literally a 3-5 second process and not involve you having to use a pc to load it.
http://forum.xda-developers.com/showthread.php?t=871159

Reason for OpenVpn Settings
fixitsteve said:
Okay, I can manually insert and load the tun.ko and installed the VPN Connections app to this version. Every time I try to connect, it INSTANTLY says 'failed to connect'. Any ideas? I have all the right things in all the right places...OpenVPN installed and configured (although I can't see how I need this with the tun.ko manually started and running). HELP! I really need VPN to work on this device or it is going back...
Click to expand...
Click to collapse
The reason I use OpenVpn settings is because when you restart the phone you have to reload the tun.ko and OpenVpn settings is an easy way to do that, it also fixes the dns after you disconnect from the vpn by going to setting and fix dns. The process I use to start the vpn is (starting from a cold boot of the phone)
1. I ALWAYS leave the check box in OpenVPN settings UNCHECKED (OpenVPN off) unless I'm starting the tun.ko after a boot. After the phone boots I open OpenVPN settings and check the box next to OpenVPN and wait a few seconds, then uncheck it. This loads the tun.ko and only needs to be done after a reboot.
2. go to VPN connections and click and hold the vpn connection you made to your VPN concentrator and click connect. (you should be connected at this point)
3. after you disconnect the dns on the phone may not change back automatically from the VPN dns servers, so go to OpenVPN setting and click setting and Fix DNS. You should be able to get out to the Inet again.

Cognition 3.04
Has anyone gotten this to work on the Cognition 3.04 ROM? I keep getting:
fatal:cannot allocate TUN/TAP dev dynamically

K, I don't know what I'm missing here. There's not word one about config files or their format in this thread but, as far as I can tell, this is a fairly worthless collection of bits without one.
I've reviewed the thread 3 times and searched the forums, where can I find formats for these mysterious conf files?

Some custom roms have tun.ko built in. I use Paragon RC6, based on speedmod kernel. To activate tun.ko I rebooted into recovery mode, chose speedmod tweaks and activated tun.ko, rebooted and installed OpenVPN Installer and OpenVPN Settings from the market. Then had to adb some symbolic links (google is your friend). After d/l'ing conf files from my commercial OVPN supplier and some editing the setup works very well.
Sent from somewhere with my Cappy/ParagonROM/OpenVPN

visionlogic said:
Some custom roms have tun.ko built in. I use Paragon RC6, based on speedmod kernel. To activate tun.ko I rebooted into recovery mode, chose speedmod tweaks and activated tun.ko, rebooted and installed OpenVPN Installer and OpenVPN Settings from the market. Then had to adb some symbolic links (google is your friend). After d/l'ing conf files from my commercial OVPN supplier and some editing the setup works very well.
Sent from somewhere with my Cappy/ParagonROM/OpenVPN
Click to expand...
Click to collapse
If my ROM doesn't have tun.ko built in, is it possible to use from a different ROM?

[Q] gingerbread 2.3.3 ad-hoc support

Hi everybody!
so i have a rooted device running xwjv3 -latest official 2.3.3- and i really need to share my laptop internet with my sgs, cuz thats the only way to get internet on the phone.
so how do i get ad-hoc enabled in 2.3.3?
OR is there any sharing ways but ad-hoc so the phone can detect the access point?
by the way, computer's running windows 7
Ps. i already checked the wpa file and stuff, dont seem to be working on gingerbread.

Does this thread help ?

yea, thanks, it actually was my answer- kinda late though, but that's what i was looking for thanks

Glad it worked for you, I had to revert to wpa_supplicant v0.5.11 from the original thread to get it working..

man i have the same problem ,
if u find the solution plz help me

No need to modify wpa_supplicant binary
I changed data/misc/wifi/wpa_supplicant.conf instead of wpa_supplicant. I added ap_scan=2, then set the adhoc network to
priority=1
mode=1
then pushed back the modified file. chown ownership back to system.wifi.
I had root access through adb. So root wasn't necessary for me.
Advantage: Safer than modifying system/etc/wifi/wpa_supplicant binary. Saves you the trouble of compiling modified wpa_supplicant or finding a compiled one for your platform.
Drawback: This is just a temporary solution.You'll have to repeat this process for every new adhoc network as it doesn't enable adhoc forever. It is good for connecting to your home network or other know networks, but if you want to connect to any adhoc network you scan,then this is not your method. Because, wpa_supplicant.conf will be overwritten every time you scan a new network.

Here is an easier alternative to the android to pc adhoc connections without doing anything on the device, only with a PC application ...
http://forum.xda-developers.com/showthread.php?t=2032703

Access Point vs Adhoc
Thanks for the suggestion jota. But, the program suggested by you works in a different way. It creates an Access Point mode Hotspot( a virtual router ) to which Android can directly connect. An application called Connectify can create Access Point mode Hotspot for Windows 7 and above.
What we're discussing here is about another type of Hotspot- adhoc mode. AP mode hotspots are better and newer Hotspot standard, but Windows versions prior to Windows 7 and Nokia Symbian phones with wifi(using softwares like Joikuspot) cant create AP mode hotspots. It's possible to create AP in linux, but not easy for beginers as there's no simple program like Connectify available to do this. You'll have to do some command line works. For those who're stuck wid adhoc networks, this thread is a possible solution.

[RELEASE] OpenVPN for Nexus S

This belongs in Development, but I'm not allowed to post it there because I have fewer than 10 posts.
Anyway, I have compiled together a nice package for putting OpenVPN on the Nexus S. It includes all the files necessary to use OpenVPN, including the tun kernel module, the OpenVPN binary, a dependency of it (liblzo.so), and a nice GUI to configure it. This should work on any rom that uses the stock 2.3.4 kernel.
Instructions:
1. Install the attached package via clockwork recovery.
2. Go to the OpenVPN Settings, and under Advanced Settings, check the box that says "Load tun kernel module".
3. Under "TUN module settings", set it up so that it loads with "insmod", and the path to the tun module is "/system/modules/tun.ko".
That's it! I tried to make this as simple as I could.
Thanks to the following people:
*NielDK for the tun.ko kernel module
*cyanogen for the openvpn binary and liblzo.so file
*Friedrich Schaeuffelhut for the GUI

So this would let me connect to an OpenVPN server like a WRT54GL running Tomato?

Trying it right now.. Just found this after trying to install / set it up myself.... Will let you know.

Hi SomePerson - I just installed your openvpn client and it works great!!
I've been meaning to get my openvpn server up and running and this was just the excuse I needed.
I installed, followed the instructions you posted above and dropped the keys and configuration in the appropriate folder and everything worked - first time CONNECTED.
Any plans to add a widget for the homescreen or "notification power widget" to make it easier to turn on/off?? That is my only critique for the moment - REALLY nice work - and Thanks!!
I'm running a Nexus S (i9020a) on the ZeRoXs Custom ROM (based on 2.3.4) on AT&T and connecting to an openvpn server hosted on a Linksys 610N running DD-WRT.
Oh - also needed is a notification bar icon to show when you are connected...I connected this afternoon and forgot about it all afternoon and wondered why my internet was so confused when I got home and on WiFi (and on my vpn network directly).
Thanks for the great app...works WAY better than the bundled VPN solutions in android...
Sent from my Nexus S using XDA Premium App

Thank you so much, I wasn't able to get openvpn working until now but this works perfectly.

i have the nexus s 4g.. on 2.3.5.
is having 2.3.4 and stock kernel a requirement? im running stock 2.3.5 and the matr1x kernel. im a VPN n00b and this looks like just what i needed.. everyone had good results

Works for me too but the only problem... this version of the OpenVPN client keeps saying in the notification bar
"Username/Password required for configuration vpnname"
so I can't tell if it's connect or not...
I also noticed this version is 0.4.8test1 where as the one on the market is 0.4.7
did you modify this? because I also looked on the official site and only version I can see there is 0.4.7
thanks

Hi! This is my first message, sorry for my English
I have got a problem with this file.
I have Nexus S with ClockWork mod by Superatmel and ROM SuperOSR Gingerbread:
Android version is 2.3.5
I have flashed succesfully this OpenVPN .ZIP, the instalation was succesfully, the configuration is correct.
OpenVPN correctly connects to my OpenVPN server but I have not internet, DNS doesn't work.
Anyone have this problem??
THANKS!!
Solution:
Click on client.CONF, PREFERENCES, USE VPN DNS and on DNS Server put: 8.8.8.8 (Google DNS).
Enjoy!!

tks, very useful!

Thanks for the VPN.

openvpn
can't connect to server it says username password required but i already made a txt file to route automatically with my openvpn account.

OpenVPN
Great job!
However, do you think it should work on Galaxy S2 with CM9?
Thx

SSh tunnel for lollipop fix or alternative?

Noticed i cannot get ssh tunnel to work for global or specific app proxys on any lollipop devices wondering if there was an ideal app you guys would recommend for nexus 6 that would accomplish this same thing?
Used to work great on my previous devices from last i recall prior to moving to a lollipop device
Looking to specifically proxy some apps via ssh tunnel and rest go through normal unencrypted session via carrier ip
Looked into proxydroid and connectbot but haven't seem to get them to work together must be missing something
seems this is a known issue with iptables and ssh proxying in lollipop on some other similiar apps
https://code.google.com/p/sshtunnel/issues/detail?id=193
Would gladly pay for an add free app that does this on lollipop for any devs out there looking for an app idea or can point me to one i missed which offers this
Thanks in advance
Update:
seen this after more searching looks handy gonna give it a ry but it would be nice to have an all in one app for this
http://forum.xda-developers.com/showthread.php?t=2505710

https://code.google.com/p/sshtunnel/issues/detail?id=193#c12
I have posted a solution and modded apk for now, until the problem will be resolved. Check it out.

Try mine, uses autossh with openssh:
https://github.com/lbdroid/Android_SSH
https://github.com/lbdroid/Android-Binaries/blob/master/Android_SSH.apk
A few points;
1) requires root (at the moment, still in dev...)
2) still in dev (could be instabilities...)
3) no ads, no tracking... seriously.. no nonsense.

themightydeity said:
https://code.google.com/p/sshtunnel/issues/detail?id=193#c12
I have posted a solution and modded apk for now, until the problem will be resolved. Check it out.
Click to expand...
Click to collapse
IT WORKS!!!
thank you very much.

Modded apk not working on Nexus 6 running Android 5.1.1
Using Connect not +ProxyDroid
Hopefully next release of sshtunnel will solve current issues

it´s the first time im using this tool... im happy that i found your solution/fix for lolipop.. it works perfect on any website/host in the web.. but i got still a problem..
the routing seems to route everything through the tunnel.. except things that are adressing other services on the same host as the ssh server host..
for example: if there is a webserver or mailaserver on the same host as the ssh server.. the traffic to those mail or webserver are not going through the tunnel..
is this a common problem with ssh-tunnel app?
using ProxyDroid on-top, fixes this.. with ProxyDroid also the mailserver (etc..) traffic is going through the tunnel.. but i would prefer to use only one tool.. not two tools..
any suggestions?

it's just a binary compatibility problem you can extract iptables and redsocks binary from patched version or from anywhere else and copy them to your data folder it will solve the problem

intika said:
it's just a binary compatibility problem you can extract iptables and redsocks binary from patched version or from anywhere else and copy them to your data folder it will solve the problem
Click to expand...
Click to collapse
Yes you are right.
-1 copy/overwrite iptables, redsocks from proxydroid to:
data/data/org.sshtunnel folder.
-2 chmod these two files for the owner/root!

korsanovix said:
Yes you are right.
-1 copy/overwrite iptables, redsocks from proxydroid to:
data/data/org.sshtunnel folder.
-2 chmod these two files for the owner/root!
Click to expand...
Click to collapse
i'm using Ki4A, works perfectly fine in NON ROOTED Marshmallow.
Google Play LINK.
works without any modifications.