Hi, After update to 1.2.5, the OpenVPN connect can not access to the keychain, where I store the certificates to connect to my VPN server. Any idea to how to fix this? Thanks in advance

The entire release is broken beyond belief. 1. Certificate present in the iOS keychain are not found. 2. A user is now unable to rename a connection. 3. When, on the random chance, the updated app saves the renamed profile you are then unable to connect to the profile receiving an error 'Profile not Enabled'. 4. After enabling 'save password', the radio button to indicate a connection stays to the left, meaning you have an open connection, but no green radio button. The entire thing is a DISASTER of a release.

Same here, certificates aren't found. Please rollback or release a fix asap

Hi, Same problems for me too with an iPhone X and additionally I can't import ovpn configuration files from the files app.

Hey, same Probs here. Please fix it

Same here, anxiously awaiting an update.

Not working at all, always disconnects ((((((( Please return 1.2.4, which worked perfectly. During update the new version deletes your VPN profiles, so if you are abroad you'll have no access to your VPN server until you return and use your home iTunes again. You'll also have a duplicate profiles after using iTunes again and continuous disconnect. PLEASE RETURN VERSION 1.2.4 !!!!!!!!!!!!!!

Hello and thanks for reporting your issues with the new App. Unfortunately, due to the way the new Apple API works, the App is restricted from accessing the iOS keychain. Keys have to be imported in the OpenVPN Connect App keychain directly in order to be visible. This can be done by renaming the extension of your PKCS#12 file to .ovpn12 (instead of .p12 of .pfx) and then sharing the file with the App (same as you would do with a ovpn profile). Once you shared the file, the key/cert will be saved in the App keychain and will be available for use. We are currently working with Apple to find a way to have at least partly access to the iOS keychain again. We are sorry for this change in behaviour. We tried to highlight this change in the changelog, but it was probably not enough. For those unable to import profiles at all, could you please let us know if you get any error message at all?

What about points 2,3 & 4? The application is unusable once a profile is successfully renamed. The app needs to be pulled!

Upgrade to OpenVPN 1.2.5 (iOS): issues

dmq

I opened a ticket - I think we are dealing with nearly the same issue. I'll keep the forum up2date.

danquel

bearever wrote For those who want to roll back to v1.1.1, you don’t need to jailbreak your phone. You can accomplish the roll back with these steps. First of all you will need to download these tools:

iTunes 12.6.3 (the latest version of iTunes no longer has App Store so you will need install an older version):
http://osxdaily.com/2017/10/09/get-itunes-12-6-3-with-app-store/

Fiddler (to trick App Store to give you an older version of iPhone/iPad app):
https://www.telerik.com/fiddler

And follow this generic tutorial:
https://m.youtube.com/watch?v=LBNHia-lqs8

You will also need to disable auto update for apps in iPhone settings (Settings -> iTunes & App Store -> Updates -> toggle to OFF).

Good luck!

Has it worked for you? Can you send it to me? (danquel@hotmail.com) thank you, we are desperate

oat_bondmen

Given the absolute shambles surrounding this release and chronically bad response to it, what is the update on progress made to fix error 'OpenVPN profile not enabled' when multiple profiles are configured?

oat_bondmen

danquel wrote Has it worked for you? Can you send it to me? (danquel@hotmail.com) thank you, we are desperate

It won't work. The App is signed specific to an iTunes account. You need to pressure the amateurs at OpenVPN who released this hogwash of a release to fix their application. How this EVER made it past QA is absolutely beyond me (still no explanation on that either from OVPN).

TinCanTech

@oat_bondman

Please see this:
https://docs.openvpn.net/openvpn-connect-for-ios-issues/

Please note: Feed back with details about problems is very helpful, publicly insulting people is not.
Please don't make us ban you again ..

danquel

could you please put a link to ipa (openvpn 1.1.1) to install it manually or through our MDM and deactivating the automatic updates ?, we are desperate, thanks

ordex wrote I have opened internal tickets for them and we are working on fixing them as soon as possible. Unfortunately, AppStore does not allow us to easily rollback.

oat_bondmen

TinCanTech wrote @oat_bondman

Please see this:
https://docs.openvpn.net/openvpn-connect-for-ios-issues/

That link is of no use whatsoever. Nor does it deal with the specific issues I am having - failure to rename profiles and error messages about 'profile not enabled' being received when using multiple profiles.

You should hopefully understand why when I receive useless responses like yours pointing me to an already debunked statement I grow frustrated.

Please don't make us ban you again ..

Nobody made you do anything. You chose to ban me of your own volition. I can continue to create accounts in response. It's no trouble to me. We can waste time on this all day if you wish. I would hope you would prefer engagement rather than banning those who are calling out your release for the shambles it is.

mdeneen

I also had a problem with the update to 1.2.5. Versions 1.2.4 (somehow on an iPad) and 1.1.1 worked fine. It would connect successfully but not pass traffic. This is a split-tunnel situation where not all traffic is destined for the tunnel.

I did a packet capture on the openvpn-2.4.4 server and noticed that no traffic, besides the periodic pings, was being sent between the client and server. I then did a ping from the server to the client and received responses. The tunnel was working, but I suspected that the routing table on the client was not correct.

I had to add:

push "route 192.168.20.0 255.255.255.0"

to my server config. It appears as if the network as defined by the "server" directive is not being added to the routing table of the iOS device. Adding the manual route push fixed my problem.

Hopefully this is helpful to others.

markymarrow

edemalm wrote My on-demand profiles created with Apple Configurator also stopped working. I cannot connect at all, not within the iPhone Settings and not within the OpenVPN Connect app. The flip switch just jumps back to disconnected. The log window is completely empty, and the server logs sees no traffic as well

Today I've gone from here to up and working again - adding the key 'vpn-on-demand' with the value 0 in the Custom Data section should allow you to attempt connection within the OpenVPN Connect app (without having to remove the on demand status of the mobileconfig). Doing it this way should give you some log info to work with.

Of note - I have user authentication set to Certificate but I have no certificates in the mobile config (as they end up in the ios keychain which OpenVPN can't get to anymore)
All my certificates & keys are bundled in the Custom data section & needed to be changed from:

-----BEGIN PRIVATE KEY------
xxxxxxxxxxxxxx
xxxxxxxxxxxxxx
xxxxxxxxxxxxxx
-----END PRIVATE KEY-----

-----BEGIN PRIVATE KEY------\nxxxxxxxxxxxxxx\n...\n-----END PRIVATE KEY-----

nullbandit

Iphone X and Iphone 8 Plus are showing off these logs. Hope these help.

NetworkExtensionTUN/10.7.7.2/ gw=[/]
2018-01-10 15:28:52 TCP recv EOF
2018-01-10 15:28:52 Transport Error: Transport error on 'us.
*****.com: NETWORK_EOF_ERROR
2018-01-10 15:28:52 EVENT: TRANSPORT_ERROR Transport error on 'us.*******.com: NETWORK_EOF_ERROR [ERR]
2018-01-10 15:28:52 Client terminated, restarting in 5000 ms...
2018-01-10 15:28:52 Raw stats on disconnect:
  BYTES_IN : 5830650
  BYTES_OUT : 738494
  PACKETS_IN : 3719
  PACKETS_OUT : 4101
  TUN_BYTES_IN : 360113
  TUN_BYTES_OUT : 5327768
  TUN_PACKETS_IN : 4315
  TUN_PACKETS_OUT : 4807
  NETWORK_EOF_ERROR : 1
  TRANSPORT_ERROR : 1
  TCP_OVERFLOW : 200
  N_PAUSE : 36
  N_RECONNECT : 36
2018-01-10 15:28:52 Performance stats on disconnect:
  CPU usage (microseconds): 2331462
  Tunnel compression ratio (uplink): 2.05073
  Tunnel compression ratio (downlink): 1.09439
  Network bytes per CPU second: 2817607
  Tunnel bytes per CPU second: 2439619

nullbandit

If it helps anyone, here is one trick that helps me hold the connection for longer. In the openvpn ios APP, click on "connected" which opens up the log window. Now when I switch over the app (not force closing the app) to background my connection sticks for quite a long time. Somehow this works "only" when I set the "SSL Log Level" to 4 or 5 in the settings->openvpn

As soon as any push notifications are received the tunnel breaks without indicating anything in the logs. This has been consistent throughout.

Is there an ETA for the upgraded release with fixes ?

iPhrankie

We tried reinstalling an OpenVPN.ipa file we had via our MDM. Got stuck in a loop of Apple Store login and the app not installing. I imagine installing the app manually this way instead of it coming via the App store requires a dev login to authenticate the app installations. Just a guess.

bearever

danquel wrote
bearever wrote For those who want to roll back to v1.1.1, you don’t need to jailbreak your phone. You can accomplish the roll back with these steps. First of all you will need to download these tools:

iTunes 12.6.3 (the latest version of iTunes no longer has App Store so you will need install an older version):
http://osxdaily.com/2017/10/09/get-itunes-12-6-3-with-app-store/

Fiddler (to trick App Store to give you an older version of iPhone/iPad app):
https://www.telerik.com/fiddler

And follow this generic tutorial:
https://m.youtube.com/watch?v=LBNHia-lqs8

You will also need to disable auto update for apps in iPhone settings (Settings -> iTunes & App Store -> Updates -> toggle to OFF).

Good luck!
Has it worked for you? Can you send it to me? (danquel@hotmail.com) thank you, we are desperate

The above method does work (FYI I rolled back my openvpn app to v1.1.1) but you need to follow the above youtube tutorial by yourself. I cannot share my ipa file with you as the app is tied to my iTunes account.

asiaexplorer

bearever wrote
danquel wrote
bearever wrote For those who want to roll back to v1.1.1, you don’t need to jailbreak your phone. You can accomplish the roll back with these steps. First of all you will need to download these tools:

iTunes 12.6.3 (the latest version of iTunes no longer has App Store so you will need install an older version):
http://osxdaily.com/2017/10/09/get-itunes-12-6-3-with-app-store/

Fiddler (to trick App Store to give you an older version of iPhone/iPad app):
https://www.telerik.com/fiddler

And follow this generic tutorial:
https://m.youtube.com/watch?v=LBNHia-lqs8

You will also need to disable auto update for apps in iPhone settings (Settings -> iTunes & App Store -> Updates -> toggle to OFF).

Good luck!
Has it worked for you? Can you send it to me? (danquel@hotmail.com) thank you, we are desperate
The above method does work (FYI I rolled back my openvpn app to v1.1.1) but you need to follow the above youtube tutorial by yourself. I cannot share my ipa file with you as the app is tied to my iTunes account.

I also can confirm that. It's working. Just rolled back to v1.1.1.

I followed the youtube link and the following tutorial: https://medium.com/@iosight/how-to-legally-download-any-previous-version-of-an-app-store-app-through-itunes-9b45559b8357

The correct string for the version 1.1.1 is:

819500456

With this information you can follow the tutorial from step 15. All steps above are only to find out the right string.

Of course you need the right iTunes version mentioned above to enter the app store and fiddler installed.

diepvries

Okay, the downgrade trick worked! :mrgreen:

But this is not a perfect solution for us, we have about 20 users (worldwide) using the OpenVPN app. The app is now in my (older) iTunes but I can't just connect other iPhones to my computer and reinstall the older version because iTunes states that the other iPhone is on a different iCloud account... :oops: It would probably work if I logout my iTunes en login with the users iCloud account and do the trick once over but it would take a lot of time to do this, I got all my hope on version 1.2.6...

Is there going to be an update for this issue?

dmq

No, downgrade can't be the solution.

PhC

Hi all,

same problem here, with lots of users in many countries ... no way to get them following the above downgrade procedure.

Question to OpenVPN dev team : could we imagine to take the source code of version 1.1.1 (wich worked fine) and recompile it with version number 1.2.6 (or whatever above 1.2.5) then urgently push this "new" version to the App store, in order to have the client installing it and hopefully working again ?

Kind regards,
PhC.

Flu0ki

asiaexplorer wrote
bearever wrote
danquel wrote

Has it worked for you? Can you send it to me? (danquel@hotmail.com) thank you, we are desperate
The above method does work (FYI I rolled back my openvpn app to v1.1.1) but you need to follow the above youtube tutorial by yourself. I cannot share my ipa file with you as the app is tied to my iTunes account.
I also can confirm that. It's working. Just rolled back to v1.1.1.

I followed the youtube link and the following tutorial: https://medium.com/@iosight/how-to-legally-download-any-previous-version-of-an-app-store-app-through-itunes-9b45559b8357

The correct string for the version 1.1.1 is:
819500456
With this information you can follow the tutorial from step 15. All steps above are only to find out the right string.

Of course you need the right iTunes version mentioned above to enter the app store and fiddler installed.

Thanks for the version number. This method works! IOS 11.2.2 iphone 6 (openvpn set 1.1.1) thanks again

ordex

PhC wrote Hi all,

same problem here, with lots of users in many countries ... no way to get them following the above downgrade procedure.

Question to OpenVPN dev team : could we imagine to take the source code of version 1.1.1 (wich worked fine) and recompile it with version number 1.2.6 (or whatever above 1.2.5) then urgently push this "new" version to the App store, in order to have the client installing it and hopefully working again ?

Kind regards,
PhC.

Sorry but this is not possible due to the requirements of the old App not supported by Apple anymore.

ordex

ordex wrote
PhC wrote Hi all,

same problem here, with lots of users in many countries ... no way to get them following the above downgrade procedure.

Question to OpenVPN dev team : could we imagine to take the source code of version 1.1.1 (wich worked fine) and recompile it with version number 1.2.6 (or whatever above 1.2.5) then urgently push this "new" version to the App store, in order to have the client installing it and hopefully working again ?

Kind regards,
PhC.
Sorry but this is not possible due to the requirements of the old App not supported by Apple anymore.

What problem are you having exactly?

« Previous Page Next Page »