Official Android App

bmorales

Any plans for an official android app?

krzee

openvpn runs fine on android. for an interface, openvpn-settings is already nice.
The problem is that you first must get root, and install a rom that has a tun device.
If you look at cyanogenmod 7, it has openvpn built into the "add vpn" interface, just like ipsec. I would like to see this done on stock android releases, but it is not up to me. Android has the unique ability to do this because they already use so much GPL code. Then people would not need to root and find tun.ko just to get their vpn working on their phone.
We just sent a request to communicate with google regarding this, and hoping to hear back.

hamzen

krzee wrote...If you look at cyanogenmod 7, it has openvpn built into the "add vpn" interface, just like ipsec. ...

I've "upgraded" my Motorola Cliq with this "Cyanogenmod 7.1RC modded Android (v2.3.4)" and there is really OpenVPN on the list. BUT if I try to add a new VPN, it is not allowing to choose the 4 .ca and .key files, only an empty box with "Cancel" button showing.

I've also tried the app "OpenVPN settings" from the Market:
- it is a bit better, because it allows to copy all needed (5) files into /sdcard/openvpn/ dir.
- BUT it can not connect either. (with tested keys and setup)
- and because there are no logs, I can not even figure out, WHY ?
- (logs are ment to show in a future version of the program)
...
in between I've trying to debug through USB, but still can not find the error. Will try to write a msg. to the APP programmer and send him the logs.

pir

With the advent of Android 4.0 there is an API for VPN clients:
http://developer.android.com/sdk/android-4.0-highlights.html

Any chance of an openvpn client that doesn't require root?

Ta,
P.

Mimiko

pir wroteAny chance of an openvpn client that doesn't require root?

Root'ing is required to modify routing table and set static IP to the tun interface.

pir

Mimiko wrote
pir wroteAny chance of an openvpn client that doesn't require root?
Root'ing is required to modify routing table and set static IP to the tun interface.

While that's true on pre-Android 4.0, if you look at the URL I added it is not true in Android 4.0.
An API has been made available so the VPN clients can be added without rooting.

So my question stands, how about an OpenVPN client that uses the API and thus does not need root?

AllenG

I haven't tried running OpenVPN on Android but I can't wait to try it for myself. I want to keep myself updated on this one. Thanks guys! 🙂

tlopatic

Hey guys,

Just a quick FYI and product plug: It doesn't take Ice Cream Sandwich anymore for OpenVPN without root.[1] A few days back we released FEAT VPN, which is a version of OpenVPN for Android 2.1 through 3.2 that does not require root:

http://www.featvpn.com

We put a local L2TP server on the phone and connect Android's built-in L2TP client to the local on-device L2TP server. Thus we are able to get our hands on IP packets from the phone and to simulate a TUN device for our OpenVPN port. It comes with a few limitations: As we run without root, we cannot set routes, for example. So not split tunnels. All your traffic always goes through the VPN tunnel. Also we inherit a few limitations from the built-in L2TP client. We only support TUN devices, for example, and no TAP devices.

But in general it works quite well on the vast majority of Android devices for typical use cases. Take a look, if you like.

Thomas

[1] Yeah, I know... Great timing! Now that ICS is out, it doesn't take ICS anymore. Hehe. Google caught us completely off guard with their support for VPN apps in ICS. I mean, they previously hadn't cared about VPN apps for years: http://code.google.com/p/android/issues/detail?id=3635

krzee

ICS devices can use openvpn without root now
this package is very new, if you use it please report back how you like it! 😃
http://swupdate.openvpn.net/beta-downloads/OpenVPN-RC1.apk

krzee

tlopatic: clever hack man! makes me think of tunemu... well played!

atmel8051

I installed this app and when i try import vpn.ovpn i get this error:
Error parsing OpenVPN profile: vpn.ovpn : option 'remote' must have at least 3 arguments.

I have in vpn.ovpn on the first line: remote x.x.x.x
When i add on end of line port, i get this error:
Error parsing OpenVPN profile: vpn.ovpn : option 'remote' must have at least 4 arguments.

atmel8051

krzee wroteICS devices can use openvpn without root now
this package is very new, if you use it please report back how you like it! 😃
http://swupdate.openvpn.net/beta-downloads/OpenVPN-RC1.apk

mnekouasl

Hello new to openvpn and this forum. I was wondering if anyone can point me to the source for the android client: http://swupdate.openvpn.net/beta-downlo ... PN-RC1.apk

frankuit

atmel8051 wrote I have in vpn.ovpn on the first line: remote x.x.x.x
When i add on end of line port, i get this error:
Error parsing OpenVPN profile: vpn.ovpn : option 'remote' must have at least 4 arguments.

I had that to,

Just add udp or tcp behind the remote option in your config file and it works

atmel8051

frankuit wrote
atmel8051 wrote I have in vpn.ovpn on the first line: remote x.x.x.x
When i add on end of line port, i get this error:
Error parsing OpenVPN profile: vpn.ovpn : option 'remote' must have at least 4 arguments.
I had that to,

Just add udp or tcp behind the remote option in your config file and it works

Thanks, it works 🙂

krzee

mnekouasl wroteHello new to openvpn and this forum. I was wondering if anyone can point me to the source for the android client: http://swupdate.openvpn.net/beta-downlo ... PN-RC1.apk

no, it has not been released (yet?)

KeithHowe

atmel8051 wrote
frankuit wrote
atmel8051 wrote I have in vpn.ovpn on the first line: remote x.x.x.x
When i add on end of line port, i get this error:
Error parsing OpenVPN profile: vpn.ovpn : option 'remote' must have at least 4 arguments.
I had that to,

Just add udp or tcp behind the remote option in your config file and it works
Thanks, it works 🙂

I can now load the .ovpn file, thanks.
But when I click connect, it says
OpenVPN core error: X509::parse-pem:error in cert:: error 0906D06C:PEM routines:PM_read_bio:no start line

I have all my ovpn, ca, cert and key in the same folder on my phone.

I've also verified that this ca, cert, key works on my laptop.

Suggestions?

Thanks,
Keith

frankuit

Hmm,

Strangely enough i have the same problem now.
Try changing the path to your certificate files in your conf file and see if that fixes the problem.

plaisthos

You could also try to use my opensource variant for ICS: https://play.google.com/store/apps/details?id=de.blinkt.openvpn and see if it works better 🙂

quicksand jesus

The app worked, but now it is expired. Is there a new version I can download?