owd-larrd / android-openvpn-settings Goto Github PK

I'm using the newest version of openvpn settings on an HTC Hero with Cronos 
1.5.1 Rom. Openvpn tells me that the connection is working, but I get no 
internet.

What steps will reproduce the problem?
1. edit Preferences the a config.
2. enable "Use VPN DNS Server"
3. go back and connect to the server.

What is the expected output? What do you see instead?
  Expect DNS be set to the one I entered after connected.
  Actually DNS haven't been changed.
What version of the product are you using? On what operating system?
  0.4.3test1

Please provide any additional information below.

Following diff can fix it.

git diff HEAD~1          
diff --git 
a/src/main/src/de/schaeuffelhut/android/openvpn/EditConfigPreferences.java 
b/src/main/src/de/schaeuffelhut/android/openvpn/EditConfigPreferences.java
index 2653c00..ecf675e 100644
--- a/src/main/src/de/schaeuffelhut/android/openvpn/EditConfigPreferences.java
+++ b/src/main/src/de/schaeuffelhut/android/openvpn/EditConfigPreferences.java

@@ -60,8 +60,8 @@ public class EditConfigPreferences extends PreferenceActivity

        private void renamePreference(String oldKey, String newKey) {
                Preference pref = findPreference( oldKey );
-               pref.setKey( newKey );
                getPreferenceScreen().removePreference( pref );
+               pref.setKey( newKey );
                getPreferenceScreen().addPreference( pref );
        }

Feature Request:

I'm not sure how feasible this would be as I imagine the list of available
VPN config files is generated at runtime, but I'd like to be able to add
shortcuts to VPN links directly to my Home Screen, rather than having to
open the OpenVPN Settings application and then choosing.

For an example of this functionality, see ConnectBot. Stored sessions can
be added to the home screen for quick and easy access.

Thanks so much for a great product!

What steps will reproduce the problem?
1. Put a config file in the config directory
2. Start the application

What is the expected output? What do you see instead?
Select to turn on OpenVPN tunnel

Select to turn on OpenVPN tunel

What version of the product are you using?
0.4.7

Feature request:

Would be useful to have the option to add a secondary DNS server for VPN 
connections.

Proposal for a feature:
- on first startup try to autodetect the tun.ko driver and set the
preferences (insmod and tun.ko path)

Find the file with the following command (root not required) 
# find /sdcard /system /data -name tun.ko
/system/lib/modules/tun.ko


What do you think?

I setted up -HTC Hero- VillainRom 12.0 with Openvpn binaries as well as OpenVPN 
settings apps. I ask Openvpn to run through WIFI and 3G. Everyting is OK till i 
go out from WIFI net. At this time OpenVPN should switch to 3G but doesn't from 
what I see in OpenVPN Settings menu.

I then started manually my config file from this menu (each time have to start 
twice) before having OpenVPN Connecting -> Connect few seconds and disconnect 
immediately with TCP error Permission denied (error=13). I then open network 
discovery apps and at my surprise, saw a tun interface. I pinged then the VPN 
IP from other side and had answer. I launched an application using the VPN and 
this one was also running fine!

Add an option to remember the passwords when a checkbox is selected.

This way the user is not forced to type his passwords.



When implementing this we should be careful to use a safe data storage.

Hi,

In the same way that we can configure to set net.dns1 it would also be nice
if we can use the dhcp pushed search-domain to set net.dns.search.

This can be done in a up/down script but it would be neater to not have to
write one just for this.

Keep up the good work,

Daire

If somebody knows a good howto out there: please post it here!

What steps will reproduce the problem?
1. connect to the vpn

What is the expected output? What do you see instead?
Expected: 
- gui shows full progress of the tunnel and says when it's connected

Now:
- after state "connecting" the GUI shows disconnected while the vpn is
still building up. This is because of a lost connection with the openvpn
management interface.


D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-daemon-stdout( 
898): Sun Mar  7 10:19:56 2010 MANAGEMENT: Client connected from
127.0.0.1:10736
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):
>INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
V/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):
onState("1267953596,TCP_CONNECT,,,")
D/OpenVPN-Settings-getprop(  898): invoking external process:
/system/bin/sh -s -x
D/OpenVPN-Settings-getprop(  898): exec getprop net.dnschange
D/OpenVPN-Settings-getprop-stderr(  898): + exec getprop net.dnschange
D/OpenVPN-Settings-getprop-stdout(  898): 2
I/OpenVPN-Settings-getprop-stdout(  898): terminated
I/OpenVPN-Settings-getprop-stderr(  898): terminated
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):
=============> 0 == 2 resetting dns, leaving dns alone
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):
unknown state: TCP_CONNECT
D/OpenVPNDaemonEnabler(  898): Received OpenVPN network state changed from
Connecting to Unknown
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):
Lost connection to OpenVPN daemon
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):
java.io.IOException: Invalid Mark.
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):     at
java.io.BufferedReader.reset(BufferedReader.java:465)
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):     at
java.io.LineNumberReader.reset(LineNumberReader.java:237)
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):     at
de.schaeuffelhut.android.openvpn.service.ManagementThread.block(DaemonMonitor.ja
va:458)
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):     at
de.schaeuffelhut.android.openvpn.service.ManagementThread.monitor(DaemonMonitor.
java:426)
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):     at
de.schaeuffelhut.android.openvpn.service.ManagementThread.run(DaemonMonitor.java
:350)
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-daemon-stdout( 
898): Sun Mar  7 10:19:56 2010 MANAGEMENT: Client disconnected
D/OpenVPNDaemonEnabler(  898): Received OpenVPN network state changed from
Unknown to Unknown
D/OpenVPNDaemonEnabler(  898): Received OpenVPN daemon state changed from
Unknown to Disabled
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-mgmt(  898):
terminated
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-daemon-stdout( 
898): Sun Mar  7 10:19:57 2010 TCP connection established with
87.98.190.159:443
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-daemon-stdout( 
898): Sun Mar  7 10:19:57 2010 Socket Buffers: R=[87380->131072]
S=[16384->131072]
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-daemon-stdout( 
898): Sun Mar  7 10:19:57 2010 TCPv4_CLIENT link local: [undef]
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-daemon-stdout( 
898): Sun Mar  7 10:19:57 2010 TCPv4_CLIENT link remote: 87.98.190.159:443
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/imset-nopass.ovpn]-daemon-stdout( 
898): Sun Mar  7 10:19:57 2010 MANAGEMENT: >STATE:1267953597,WAIT,,,
D/OpenVPN-DaemonMonito

Make path to tun.ko a configuration parameter.

Suggested via the market comments.

Traffic stats are not working yet.

Notifications are always appearing in the title-bar

Make logging accessible to the user using the GUI.

What steps will reproduce the problem?
1.Put every needed active openvpn file onto sdcard
2.Set the config file path correctly
3.then the problem persists

What is the expected output? What do you see instead?

It shows FATAL: cannot allocate tun/tap dev dynamically

What version of the product are you using? On what operating system?

I'm using the latest version of OpenVPN Settings downloaded from android 
market, on the MOTO Milestone v2.1-update1 rooted.

Please provide any additional information below.

I hope you could add an support for load tun.ko files. Before the merging 
with TunnelDroid, which could specify the path of tun.ko file, the 
TunnelDroid works perfectly.

Thanks in advance!

What steps will reproduce the problem?
1. Connect to openvpn server on dynamic IP address (server is using dyndns DNS 
alias)
2. Change server IP address by restarting ISP connection (ISP assigns new IP 
address and dyndns alias is updated to new address). Note that dyndns uses a 
very short 'lifetime' for DNS records to prevent caching by clients)
3. Notice that openvpn on android fails to reconnect and fails to resolve the 
new IP address.

What is the expected output? What do you see instead?

openvpn on linux/windows will resolve the new IP address automatically when 
reconnecting. this behaviour doesn't appear to work in android. Possibilities 
are that the openvpn client is not resolving the new IP address (and simply 
tries to connect to the last known IP address). 

While openvpn was continually retrying connection to the 'stale' IP address, I 
used a terminal in android to ping the DNS alias and it resolved to the correct 
(new) IP address - meaning that the DNS entry is not being cache within the 
operating system itself.

What version of the product are you using?
0.4.7

Which Android phone are you using?
HTC Desire

Which firmware version are you using?
2.2 Froyo (T-Mod / LeeDroid 2.2b)

Please provide any additional information below.

What steps will reproduce the problem?
1. In preference, select "Use VPN DNS Server", and fill in the IP of the 
VPN DNS server.
2. Connect to the VPN server.
3. After successful connection, restart VPN server service. 
4. The client (phone) will try to reconnect, and then get stuck 
at "Resolve".

What is the expected output? What do you see instead?

When the VPN connection is lost, system DNS is reset to the 3G data DNS 
server instantly. This is correct and can be seen from "getprop net.dns1" 
or from the popup of "Fix DNS". At this time, OpenVPN Settings should have 
no problem resolve the IP of the VPN server using the 3G data DNS server 
when it tries to reconnect. However, for some reason, it get stuck here 
and cannot resolve the IP of the VPN server. I haven't read the code, but 
my guess is that the process is still using the VPN DNS server to resolve 
the IP of the VPN server while it cannot reach the VPN DNS server before 
the VPN channel is established.

What version of the product are you using? On what operating system?

Latest version of 0.4.4. Phone is Tmobile G1 with Cyanogenmod 4.2.15.1.

Please provide any additional information below.

Every time I woke up the phone, I found the VPN was disconnected and stuck 
at "Resolve". I have to click to disable the channel, wait for a minute 
for the channel to recover (be able to click to turn on again). It looks 
like the VPN was unable to resolve the IP of the VPN server after the 
connection was lost and trying to reconnect. 

Feature request.

Currently it's easy to use a config directory on the sdcard like 
/sdcard/openvpn to get set up with openvpn, put in all the keys, etc, but it's 
somewhat insecure as all apps have access to your configs, server info, keys, 
etc. If you're not using auth-user-pass then any app could copy everything 
necessary to gain VPN access.

I would suggest an option to import configs and keys to a secure working 
directory under OpenVPN Settings's /data storage. Since openvpn is run as 
root it should still be able to read all the necessary files. This would keep 
other (non-root) apps from copying configs and keys.

On Motorola Milestone there is no modprobe. Allow alternative use of insmod.
Or even better allow to invoke an arbitrary command line when starting 
OpenvpnService

After some debugging i managed to get openvpn working on my Desire with the new 
HTC froyo roms so i am sharing the workaround and maybe hope to be able to set 
it up in openvpn-settings for an automatic fix.

I only tested in LeeDroid 1.3a but i guess this may just as well be the same in 
other HTC Sense roms since they have the same base.

The problem is that on this ROM HTC is defining multiple routing tables:

sh-3.2# ip rule                  
0:      from all lookup local 
3001:   from all lookup wifi 
32766:  from all lookup main 
32767:  from all lookup default 

and when the VPN connects it only modifies the routes on the main table, so the 
wifi table which defines the wifi default GW is still in use: nothing goes into 
the tunnel (the nasty thing is that the network still works so users might not 
even realize they are on the unsecure channel)

The easiest workaround is to issue:
ip rule del from all lookup wifi

IMHO there is nothing of value in the wifi table, before the vpn connects it 
has the same routes as the main table; and it is "safe" as it gets recreated 
when the wifi reconnects.

So would love to see an advanced option to do just that; or better make the 
program detect the situation by itself (since most user probably won't).

What steps will reproduce the problem?
1.Turn on OpenVPN in OpenVPN Settings
2.
3.

What is the expected output? What do you see instead?
VPN does not come up

What version of the product are you using?
OpenVPN settings 0.4.6 (from market)
OpenVPN installer ?? (from market)
tun.ko 

Which Android phone are you using? Droid 1 Froyo FRG22D Rooted


Which firmware version are you using?


Please provide any additional information below.
09-27 16:09:21.831: DEBUG/OpenVPN-Settings(3383): onCreate()

09-27 16:09:21.902: DEBUG/OpenVPN-Settings(3383): onResume()

09-27 16:09:22.105: INFO/ActivityManager(1092): Displayed activity 

de.schaeuffelhut.android.openvpn/.OpenVpnSettings: 432 ms (total 432 ms)

09-27 16:09:27.324: DEBUG/dalvikvm(1180): GC_EXPLICIT freed 2144 objects / 
128400 bytes in 112ms

09-27 16:09:27.355: DEBUG/dalvikvm(1178): GC_FOR_MALLOC freed 11979 objects / 
549864 bytes in 68ms

09-27 16:09:27.370: DEBUG/AlarmManagerService(1092): Kernel timezone updated to 
240 minutes west of GMT

09-27 16:09:32.449: DEBUG/AlarmManagerService(1092): Kernel timezone updated to 
240 minutes west of GMT

09-27 16:09:32.542: DEBUG/dalvikvm(2041): GC_EXPLICIT freed 33 objects / 1744 
bytes in 149ms

09-27 16:09:39.667: INFO/OpenVPN-ControlShell(3383): starting

09-27 16:09:39.675: DEBUG/OpenVPN-ControlShell(3383): mConfigDir=/sdcard/openvpn

09-27 16:09:39.675: DEBUG/OpenVPN-ControlShell(3383): 

mComDir=/data/data/de.schaeuffelhut.android.openvpn/files/com.d

09-27 16:09:39.675: DEBUG/OpenVPN-ControlShell(3383): trying to attach to 
already running daemons

09-27 16:09:39.699: VERBOSE/OpenVPN-ControlShell(3383): /sdcard/openvpn/001 us 
- Wash DC Metro MAIN.ovpn: trying to attach

09-27 16:09:39.714: DEBUG/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash 
DC Metro MAIN.ovpn]-mgmt(3383): attach(): using management port at 48056

09-27 16:09:40.120: ERROR/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash 
DC Metro MAIN.ovpn]-mgmt(3383): attaching to OpenVPN daemon: 
localhost/::1:48056 - Connection refused

09-27 16:09:40.120: VERBOSE/OpenVPN-ControlShell(3383): /sdcard/openvpn/001 us 
- Wash DC Metro MAIN.ovpn: not attached

09-27 16:09:40.120: VERBOSE/OpenVPN-ControlShell(3383): /sdcard/openvpn/001 us 
- Wash DC Metro MAIN.ovpn: daemon is enabled in settings, starting

09-27 16:09:40.175: WARN/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash DC 
Metro MAIN.ovpn](3383): start(): choosing random port for management interface: 
59905

09-27 16:09:40.238: DEBUG/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash 
DC Metro MAIN.ovpn]-daemon(3383): invoking external process: /system/bin/su

09-27 16:09:40.433: DEBUG/su(3391): 10107 de.schaeuffelhut.android.openvpn 
executing 0 /system/bin/sh using shell /system/bin/sh : sh

09-27 16:09:40.566: INFO/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash DC 
Metro MAIN.ovpn]-daemon-stdout (3383): terminated

09-27 16:09:40.566: INFO/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash DC 
Metro MAIN.ovpn]-daemon-stderr (3383): terminated

09-27 16:09:40.597: DEBUG/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash 
DC Metro MAIN.ovpn]-daemon(3383): invoking external process: /system/bin/su

09-27 16:09:40.730: DEBUG/OpenVPNDaemonEnabler(3383): Received OpenVPN daemon 
state changed from Unknown to Startup

09-27 16:09:40.753: DEBUG/OpenVPNDaemonEnabler(3383): Received OpenVPN daemon 
state changed from Unknown to Disabled

09-27 16:09:40.761: DEBUG/OpenVPN-Settings(3383): Connected to OpenVpnService

09-27 16:09:40.761: INFO/OpenVPN-ControlShell(3383): /sdcard/openvpn/001 us - 
Wash DC Metro MAIN.ovpn is not running

09-27 16:09:41.050: DEBUG/su(3399): 10107 de.schaeuffelhut.android.openvpn 
executing 0 /system/bin/sh using shell /system/bin/sh : sh

09-27 16:09:41.074: DEBUG/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash 
DC Metro MAIN.ovpn]-daemon-stderr

(3383): /system/xbin: permission denied

09-27 16:09:41.074: INFO/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash DC 
Metro MAIN.ovpn]-daemon-stdout (3383): terminated

09-27 16:09:41.074: INFO/OpenVPN-DaemonMonitor[/sdcard/openvpn/001 us - Wash DC 
Metro MAIN.ovpn]-daemon-stderr (3383): terminated

OpenVPN Settings now supports one ovpn configuration file

And if I put my configurations like this

/sdcard/openvpn/test1/test1.ovpn
/sdcard/openvpn/test2/test2.ovpn

it cannot recognize anyone of them, seemed that openVPN Settings can only 
load the configuration file located below openvpn but can't load any of 
them if it putted into sub-folder under /sdcard/openvpn

So, would you please add this feature?

Thanks in advance!

What steps will reproduce the problem?
1. Long-press hold on script -> Preferencse -> VPN DNS Server
2. Try to enter IP address via hardware keyboard. When typing a period a 
comma appears instead. Comma is the fn-character for the period. 
Holding fn or or shift while pressing period still results in a comma. 
Entering via onscreen keyboard works fine.

Similarly, other keys appear fn-shifted. Pressing 'e' results in a '+', 'r' in 
a 
'-', etc.

What version of the product are you using? On what operating system?
Samsung Moment cupcake 1.5 MR14

Please provide any additional information below.

Feature request: Would be useful to be able to tweak config files using a full-
screen text editing window.

I need a working tun.ko file.

What is the expected output?
  An OpenVPN connection

What do you see instead?
  FATAL: cannot allocate TUN/TAP dev dynamically (like Issue 18)

What version of the product are you using?
  Rooted per http://www.droid-life.com/2010/09/22/how-to-root-droid-x-running-official-android-2-2/

  BusyBox installer ver 3.2.3 (Marketplace)

  TUN/TAP -> see below

  OpenVPN Installer ver 0.2.3 (Marketplace)

  OpenVPN Settings ver 0.4.6 (Marketplace)

Which Android phone are you using?
  DROID X

Which firmware version are you using?
  Froyo 2.2

Please provide any additional information below.
I have already trying:
-> 
http://code.google.com/p/get-a-robot-vpnc/downloads/detail?name=tun.ko&can=2&q=
-> http://www.saturnwiki.net/droid_tun_driver/2.6.32.9/tun_alt.ko
-> 
http://www.droidforums.net/forum/droid-hacks/10796-got-openvpn-running-2-1-a.htm
l

Retreive DNS Settings from server

On g2 android2.1, when connecting , it just cannot assign the ip, toast: 
ifconfig failed, exit with error status 1.

Then i run in the shell: #openvpn --config XXX.ovpn 
see: 
/system/xbin/ifconfig tun0 10.0.10.6 poingopoint 255.255.255.0 mtu 1500
ifconfig:SIOCSIFDSTADDR: Invalid argument
linux ifconfig failed:externam program exited with error status :1

and before that ,it gives a warning about the argument "255.255.255.0", said:
since you are using --dev tun with a point-to-point topolgy, the second 
argument to --ifconfig must be an IP address. You are using something 
255.255.255.0 that looks more like a netmask.

So why i got that? is my config worng?

What steps will reproduce the problem?
1. Updated OpenVPN settings (also attempted with clean install after rm-ing
all associated files from adb shell.)
2. Starting a vpn connection now hangs with the message "Startup.." below
the connection name, check box next to connection name will not change to
"checked".
3.

What is the expected output? What do you see instead?
Expected outcome: vpn connection is started.
Saw instead:  Connection status hangs at "Startup"

What version of the product are you using? On what operating system?
OpenVPN Settings 0.4.4 on DroidMod `1.0

Please provide any additional information below.
It appears the superuser permissions invocation has changed.  It appears
that the current call of "exec /system/bin/sh -x -x -i" (specifically the
'-i' flag) is causing sh to drop to an interactive shell, causing OpenVPN
Settings to hang.  After multiple attempts, multiple processes of
"/system/bin/sh -x -s -i" are shown by 'ps' in a terminal (adb shell or
ConnectBot local root shell), but killing them will not cause the
connection to start.

The "Fix DNS" function currently changes the DNS server to 8.8.8.8 
(Google).

It would be more useful for Fix DNS to restore the actual DNS servers for 
the currently active link.

This could automatically be done when the last VPN connection is closed, 
though I would recommend against that until the disconnection from the 
management port issues are worked out fully.

Similarly, a "Restore DNS" function could be useful for each vpn 
connection, to switch just the DNS settings between various VPN DNS 
Settings, so someone with multiple VPNs up could switch DNS around as 
necessary.

---
I believe the currently active link can be found in:
net.connectivity.type

On the Samsung Moment, that's set to either "WIFI" or "CDMA1". I imagine 
there are other options on other phones.

If it's set to wifi, then the interface name can be found in wifi.interface.
If it's set to CDMA1, then the interface name can be found in 
net.cdma.ppp.interface

The provider DNS can then be found in dhcp.eth0.dns[1-4] or 
net.ppp0.dns[1-2]

What steps will reproduce the problem?
1.Connect to VPN
2.Options Error: Unrecognized option or mising parameter(s) in
[PUSH-OPTIONS]:1: route (2.1.1)
Options Error: Unrecognized option or mising parameter(s) in
[PUSH-OPTIONS]:1: ifconfig (2.1.1)
3.Busybox 1.1.6 installed and I'm rooted (SDX Root). (Samsung Moment)

What is the expected output? What do you see instead?
Should have input the routes into the phone, but didn't import properly.

What version of the product are you using? On what operating system?
OpenVPN 2.1.1 (Server/Client)

Please provide any additional information below.
Config works 100% on Windows box.
Phone will connect and stay connected, just will not be able to ping
gateway. (Windows box can ping gateway using same config on android)

In my vpn the server assign address in the range of 10.9.9.0/
255.255.255.248.

Then I have 10.9.9.0 (network) 10.9.9.1-6 (possible assignable ip range) and 
10.9.9.7 (broadcast).

When I connect successfully (always) an address is assigned to my G1 as 
reported by the server.

But if I check the tap0 settings I see that the broadcast address (10.9.9.7) is 
assigned to the interface instead of the right ip address, so I need to set 
manually in a second step.

Feature request: please add option to enable script calls (it may be a 
reasonable default setting)

Sometimes link up/down scripts are needed for vpns, particularly on 
Android due to openvpn itself being unable to directly manipulate 
Android's DNS settings.

However these scripts won't be run unless openvpn is called with the "--
script-security 2" option.

As I temporary workaround, I relocated the openvpn binary to openvpn-
bin and replaced /system/xbin/openvpn with a shell script:
#!/bin/sh
/system/xbin/openvpn-bin --script-security 2 "$@"

This works, but it would be nice to have built-in support so one could go 
straight from the OpenVPN Installer to OpenVPN Settings.

What steps will reproduce the problem?
1./system/bin/route add -net XXX.59.XXX.XX netmask 255.255.255.255 gw 
XXX.196.XXX.XXX
Fri Jun 25 11:21:01 2010 ERROR: Linux route add command failed: could not 
execute external program
Fri Jun 25 11:21:01 2010 /system/bin/route add -net 0.0.0.0 netmask 128.0.0.0 
gw 10.8.0.1
Fri Jun 25 11:21:01 2010 ERROR: Linux route add command failed: could not 
execute external program
Fri Jun 25 11:21:01 2010 /system/bin/route add -net 128.0.0.0 netmask 128.0.0.0 
gw 10.8.0.1
Fri Jun 25 11:21:01 2010 ERROR: Linux route add command failed: could not 
execute external program 
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.
VanillaEclair  openvpn is ok.

It seems to be hard to find the right tun module for a specific phone.
OpenVPN-Settings could collect the kernel version and tun module from phones.
Those modules could then be integrated with OpenVPN-Installer or a separate 
TUN-Installer app.

What steps will reproduce the problem?
1.  openvpn settings loads
2.  config file is present,  tun.ko is present and loaded with insmod
3.  superuser visionary grants su
4.  clicking on config file checkbox doesn't do anything

What is the expected output? What do you see instead?
checked box, connection attempts

What version of the product are you using?
0.4.7

Which Android phone are you using?
g2 vision

Which firmware version are you usin8g?
2.2   kernel 2.6.32.17-g814e0a1

Please provide any additional information below.

What steps will reproduce the problem?
1. Connect to the VPN and can't ping the VPN server.  I can see phone is 
connected to the server and ifconfig on the phone shows the tun adapter 
received an IP address but I can ping the server no can I ping the phone from 
the server.  I don't get an arp entry either on the phone or the server.

What is the expected output? What do you see instead?
Should be able to ping the server.

What version of the product are you using?
OpenVPN-Settings-0.4.7.apk and OpenVPN-Installer-0.2.3.apk

Which Android phone are you using?
HD2

Which firmware version are you using?
2.2

Please provide any additional information below.
Basically copied the config/directory from a working linux computer on the 
sdcard.  The config works for the laptop but not the phone.  I can attach the 
server/client config if needed.  Also, I connect through a http proxy...

# /bin/route
/bin/route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
172.30.10.9     *               255.255.255.255 UH    0      0        0 tun0
10.72.225.22   10.40.255.1    255.255.255.255 UGH   0      0        0 eth0
172.30.10.1     172.30.10.9     255.255.255.255 UGH   0      0        0 tun0
192.168.20.0    *               255.255.255.0   U     0      0        0 usb0
10.40.255.0    *               255.255.255.0   U     0      0        0 eth0
192.168.1.0     172.30.10.9     255.255.255.0   UG    0      0        0 tun0
10.0.0.0       10.40.255.1    255.0.0.0       UG    0      0        0 eth0
default         172.30.10.9     128.0.0.0       UG    0      0        0 tun0
128.0.0.0       172.30.10.9     128.0.0.0       UG    0      0        0 tun0
default         10.40.255.1    0.0.0.0         UG    0      0        0 eth0
# /bin/ifconfig
/bin/ifconfig
eth0      Link encap:Ethernet  HWaddr 00:90:4C:C5:00:34
          inet addr:10.40.255.221  Bcast:10.40.255.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1320 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1536 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:158836 (155.1 KiB)  TX bytes:174725 (170.6 KiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1078 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1078 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:70280 (68.6 KiB)  TX bytes:70280 (68.6 KiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00
          inet addr:172.30.10.10  P-t-P:172.30.10.9  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

usb0      Link encap:Ethernet  HWaddr 2E:AB:7B:52:8B:12
          inet addr:192.168.20.1  Bcast:192.168.20.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

# ping 172.30.10.9
ping 172.30.10.9
PING 172.30.10.9 (172.30.10.9) 56(84) bytes of data.
# arp -a
arp -a
? (10.40.255.1) at 00:00:0c:07:ac:03 [ether]  on eth0

Display total transfers

Occasionally, after editing a client configuration file via the OpenVPN
Settings gui, attempting to save the changed file results in a Force Close.
The changes to the file are still there when the app is reopened so the
save is obviously happening, but having to reload the application is still
annoying. Viewing adb logcat shows that an uncaught null pointer exception
is the culprit. Logdump is attached.

What steps will reproduce the problem?
1.Connect the VPN
2.Make or receive a phone call

What is the expected output? What do you see instead?

I have 2 issues that seem to be related:

1. When I tap on the box where it says "select to turn on OpenVPN tunel" it
blinks for a second but it doesn't appear to connect.  If I open up a shell
however the tunnel IS up an running.  If I click again it shows some
connection progress and then shows up as connected in the UI.

2.  Sometimes when I make or receive a call the VPN will Pause and pick
back up again after the call is finished.  Other times I see a brief error
message "Cannot create udp socket" on the screen and the vpn disconnects
and must be manually restarted.

The reason I'm listing these together is that the second problem seems to
happen mostly when the openvpn-settings software is showing that the tunnel
is up.  If I only click on client.conf once and just trust that the vpn is
up even though it isn't showing in the UI the tunnel is more likely to stay
up through a phone call.

What version of the product are you using? On what operating system?
Version 0.4.4 of Openvpn-Settings.  Openvpn binary from Openvpn Installer
app.  Rom, Bugless Beast 1.1.  Motorola Droid.


Please provide any additional information below.
Attached is a log showing both problems.

Hi,

Thanks for making OpenVPN Settings. It's very useful.

I'm encountering a bug occasionally with connections requiring 
auth-user-pass. OpenVPN Settings queries me for the user/pass, but when I 
enter them, it sometimes just hangs on 'Connecting'.

Other auth-user-pass connections will work, whether started before or 
after. Usually it seems like just 1 of my 3 connections refuses to work, 
while the other two work fine, but which connection it is varies from 
session to session.

It may be that the one first in the list has the problems. I also noticed 
that the user/pass dialog often seems confused about which it is prompting 
me for. For example, if I have conf files a.conf, b.conf, c.onf, and I try 
to connect to a.conf, a notification will appear saying a.conf needs me to 
enter my password. WHen I select the notification, the window text says 
b.conf needs my password. Maybe it's related to the auth issues.

Here's what logcat says:
I/ActivityManager( 1760): Displayed activity 
de.schaeuffelhut.android.openvpn/.EnterUserPassword: 741 ms
W/OpenVPN-DaemonMonitor[/sdcard/openvpn/a.conf]-mgmt( 2151): Won't 
send unexpected user/password to openvpn daemon!
D/OpenVPN-Settings( 2151): onResume()
D/OpenVPNDaemonEnabler( 2151): Received OpenVPN daemon state changed from 
Unknown to Enabled
D/OpenVPNDaemonEnabler( 2151): Received OpenVPN network state changed from 
Connecting to Connecting

Does the code at http://code.google.com/p/android-openvpn-settings/ 
correspond to the released version on the Market? If so I may try to 
figure it out, though I'm not very familiar with android coding yet so I 
may not have much luck.

Thanks again for making a great tool.

Hi, I am a beginner...just started using android phone...
Can anyone provide steps for successful installation and working on my phone.
1) how to get root
2) and get openvpn binary
3) set path to tun.ko 
and 4) allow use of insmod.
Sincere thanks
Karan

The application help text says that I should place *.config files into
/sdcard/openvpn.  I found that OpenVPN Settings wouldn't recognize any
.config files, and I needed to use a .conf file instead.

What steps will reproduce the problem?
1. Run OpenVPN setting,
2. Select a config file to connect

What is the expected output? What do you see instead?

The UI doesn't reflect the status of openvpn status and no any message and 
hint, actually it connected successfully which ifconfig and route can confirm 
it, also does browser.

dmesg report "tun0: disabled privacy extensions"

What version of the product are you using?

0.46

Which Android phone are you using?

HTC magic

Which firmware version are you using?

Rogers 2.1 SENSE ROM

Please provide any additional information below.

The ROM doesn't has tun.ko with it, so I complie one from hero kernel source. 
When using adb shell run openvpn --config [my config file], it's no problem, 
using the old TunnelDorid also no problem. But using OpenVPN setting, it 
doesn't reflect the status of openvpn connection, so you can't disconnect it, 
every times when phone reboot, it will connect to my OpenVPN server 
automatically and no notification, which kind of annoying.

What steps will reproduce the problem?
1. Server config has "redirect-gateway def1"
2. Connect the client.
3. Try browse the web. Nothing happens.

What is the expected output? What do you see instead?
The expectation is that all traffic would be routed via the VPN. Instead no
browsing is possible.


What version of the product are you using? On what operating system?
Nexus 1, Cyanogen 5.0.6

Please provide any additional information below.

Server config file:

dev tun
server 10.8.0.0 255.255.255.0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
verb 5
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "route SERVERSDEFAULTGWIP 255.255.255.255"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
client-config-dir ccd
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
comp-lzo
status /var/log/openvpn-status.log
log /var/log/openvpn.log
log-append /var/log/openvpn.log



Client config file:

remote myvpnserverdomain.com
dev tun
client
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
comp-lzo
ca ca.crt
cert client1.crt
key client1.key
mute-replay-warnings

Naturally, the server works fine with multiple other desktop clients, all
traffic being redirected via the vpn.

What steps will reproduce the problem?
1.G1 with Cyanogenmod 5.0.8 test1~4 installed
2.Start OpenVPN Settings and try to start a VPN channel

What is the expected output? What do you see instead?
It worked in previous versions till Cyanogenmod 5.0.7. In Cyanogenmod 5.0.8, it 
was stuck at "Startup".

Please provide any additional information below.
The log shows that OpenVPN Settings failed to connect to the local management 
port. The build-in VPN control works fine though. 

In addition to the above issue, OpenVPN Settings is frequently knocked out by 
Market, Browser etc. though it will try to reconnect immediately, probably 
because Cyanogenmod 5.x.x does not have enough free RAM.

What steps will reproduce the problem?
1. Long press a config and edit the config file.

What is the expected output? What do you see instead?
Editings do not seem to be saved after pressing the OK button.

What version of the product are you using? On what operating system?
0.4.6 with Cyanogenmod 5.0.8 on G1.

Not really sure if this is an issue or user issue

What steps will reproduce the problem?
1. Attempt to connect fails.

What is the expected output? What do you see instead?
The app asks for credentials (not really sure... never got past this issue)
The tick for client.conf stays unchecked.

What version of the product are you using?
OpenVPN Settings 0.4.6

Which Android phone are you using?
HTC Desire (Telstra A8183 model)

Which firmware version are you using?
T-Mod 2.0 LeeDrOiD V2.1a 

Please provide any additional information below.

LOGCAT
-=-=-=-
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf]-mgmt(  674): attach(): 
using management port at 38765
E/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf]-mgmt(  674): attaching to 
OpenVPN daemon: localhost/127.0.0.1:38765 - Connection refused
W/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf](  674): start(): choosing 
random port for management interface: 44890
D/dalvikvm(  674): GC_FOR_MALLOC freed 10448 objects / 594552 bytes in 39ms
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf]-daemon(  674): invoking 
external process: /system/bin/su
D/OpenVPNDaemonEnabler(  674): Received OpenVPN daemon state changed from 
Unknown to Startup
D/OpenVPNDaemonEnabler(  674): Received OpenVPN daemon state changed from 
Unknown to Disabled
D/su      ( 1397): 10113 de.schaeuffelhut.android.openvpn executing 0 
/system/bin/sh using shell /system/bin/sh : sh
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf]-daemon-stderr(  674): FIX 
ME! implement ttyname() bionic/libc/bionic/stubs.c:360
D/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf]-daemon-stderr(  674): sh: 
line 1: /system/xbin: is a directory
I/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf]-daemon-stdout(  674): 
terminated
I/OpenVPN-DaemonMonitor[/sdcard/openvpn/client.conf]-daemon-stderr(  674): 
terminated


sh-3.2# sh --version
GNU bash, version 3.2.0(1)-release (arm-android-eabi)
Copyright (C) 2005 Free Software Foundation, Inc.



sh-3.2# lsmod
bcm4329 210375 0 - Live 0xbf0bf000
cpufreq_powersave 668 0 - Live 0xbf0bc000
cpufreq_interactive 2368 1 - Live 0xbf0b6000
perflock_disable 752 0 - Live 0xbf0b0000
cifs 215150 0 - Live 0xbf070000
nls_utf8 998 0 - Live 0xbf06a000
tun 10734 0 - Live 0xbf061000
ext4 207558 0 - Live 0xbf020000
jbd2 48134 1 ext4, Live 0xbf00b000
cfq_iosched 17976 0 - Live 0xbf000000



sh-3.2# busybox
BusyBox v1.17.1 (2010-08-05 03:25:40 CDT) multi-call binary.
Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vlasenko
and others. Licensed under GPLv2.


sh-3.2# ./openvpn --version
OpenVPN 2.1.1 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Jul 26 2010
Originally developed by James Yonan
Copyright (C) 2002-2009 OpenVPN Technologies, Inc. <[email protected]>

What steps will reproduce the problem?
1.Connect to an OpenVPN server
2.Enable GPS
3.Open Google Maps

What is the expected output? What do you see instead?
The VPN connection should stay as it is, but OpenVPN Settings restart the 
connection by SIGUSR1.

What version of the product are you using? On what operating system?
OpenVPN Settings 0.4.6, Cyanogen Mod 5.0.8 for Dream/Magic

Please provide any additional information below.

What steps will reproduce the problem?
1. HTC Desir whit leedroid rom
2. Connect whith OpenVPN-Settings-0.4.7test1.apk i check Fix HTC Routes
3. I connect to my vpn the default gateway is my vpn

What is the expected output? What do you see instead?
After i connect i can't do general web browsing but i can  ping my
local network and internet. I try fix dns that do nothing.

Trying to connect to Full Tunnel VPN. Connection starts but: "Connected to
131.188.xx.xx as " blank - so no redirect? Traffic is still on my Standard
IP as if there would be no VPN connection.

Yes, the config works on other systems (desktop PC). 

Config file see here:
http://www.rrze.uni-erlangen.de/dienste/internet-zugang/vpn/RRZE-full-tunnel.ovp
n
(german version, sorry for that)

BR, Peter!

(Milestone 2.1, rooted, tun.ko installed, openVPN lib installed)