Upgrade to OpenVPN 1.2.5 (iOS): Proxy settings not applied

[asiaexplorer]

I have just installed OpenVPN Client 1.2.5 on my iPhone X.

I am connecting to my own VPN Server at home and the Server is pushing dhcp proxy settings to the client:

push "dhcp-option PROXY_HTTP 192.168.178.50 8639"
push "dhcp-option PROXY_HTTPS 192.168.178.50 8639"

Till yesterday everything worked fine for me.

After the updated the proxy settings won't get applied on the iPhone, even the log shows:

2018-01-10 11: 10:00:05 NIP: adding HTTP proxy to 192.168.178.50 8639
2018-01-10 11: 10:00:05 NIP: adding HTTPS proxy to 192.168.178.50 8639

But it's not working. Opening a control site of privoxy to check if proxyserver settings are applied gives me the information that no proxy is used at the moment.

Using IPsec VPN with proxy settings on my iPhone is still working fine for me.

Please fix.

Thank you.

[ordex]

Thanks for the report. I am opening an internal ticket to further deepen this issue. In the meantime, could you please share your full client log?
Thanks a lot

[asiaexplorer]

Here it is:

Code: Select all

2018-01-10 11:33:23 ----- OpenVPN Start -----
OpenVPN core 3.1.2 ios arm64 64-bit built on Jan  5 2018 23:09:59
2018-01-10 11:33:23 Frame=512/2048/512 mssfix-ctrl=1250
2018-01-10 11:33:23 UNUSED OPTIONS
0 [persist-tun] 
1 [persist-key] 
4 [tls-client] 
7 [block-outside-dns] 

2018-01-10 11:33:23 EVENT: RESOLVE
2018-01-10 11:33:23 Contacting [X.XXX.XX.XX]:1274/UDP via UDP
2018-01-10 11:33:23 EVENT: WAIT
2018-01-10 11:33:23 Connecting to [vpn.example.de]:1274 (X.XXX.XX.XX) via UDPv4
2018-01-10 11:33:23 EVENT: CONNECTING
2018-01-10 11:33:23 Tunnel Options:V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client
2018-01-10 11:33:23 Creds: Username/Password
2018-01-10 11:33:23 Peer Info:
IV_GUI_VER=net.openvpn.connect.ios 1.2.5-1
IV_VER=3.1.2
IV_PLAT=ios
IV_NCP=2
IV_TCPNL=1
IV_PROTO=2
IV_LZO=1

2018-01-10 11:33:23 VERIFY OK : depth=1
cert. version    : 3
serial number    : 00
issuer name      : C=CN, ST=Home, L=Home, O=Private, emailAddress=example@mail.de, CN=CA
subject name      : C=CN, ST=Home, L=Home, O=Private, emailAddress=example@mail.de, CN=CA
issued  on        : 2017-11-15 01:31:01
expires on        : 2027-11-13 01:31:01
signed using      : RSA with SHA-256
RSA key size      : 4096 bits
basic constraints : CA=true
key usage        : Key Cert Sign, CRL Sign

2018-01-10 11:33:23 VERIFY OK : depth=0
cert. version    : 3
serial number    : 01
issuer name      : C=CN, ST=Home, L=Home, O=Private, emailAddress=example@mail.de, CN=CA
subject name      : C=CN, ST=Home, L=Home, O=Private, emailAddress=example@mail.de, CN=Server.Certificate
issued  on        : 2017-11-15 01:31:03
expires on        : 2027-11-13 01:31:03
signed using      : RSA with SHA-256
RSA key size      : 4096 bits
basic constraints : CA=false
subject alt name  : Server.Certificate
cert. type        : SSL Server
key usage        : Digital Signature, Key Encipherment
ext key usage    : TLS Web Server Authentication, ???

2018-01-10 11:33:24 SSL Handshake: TLSv1.2/TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
2018-01-10 11:33:24 Session is ACTIVE
2018-01-10 11:33:24 EVENT: GET_CONFIG
2018-01-10 11:33:24 Sending PUSH_REQUEST to server...
2018-01-10 11:33:24 OPTIONS:
0 [dhcp-option] [DNS] [84.200.69.80] 
1 [dhcp-option] [DNS] [84.200.70.40] 
2 [redirect-gateway] [def1] 
3 [dhcp-option] [PROXY_HTTP] [192.168.178.50] [8693] 
4 [dhcp-option] [PROXY_HTTPS] [192.168.178.50] [8639] 
5 [route-gateway] [10.0.8.1] 
6 [topology] [subnet] 
7 [ping] [10] 
8 [ping-restart] [60] 
9 [ifconfig] [10.0.8.3] [255.255.255.0] 
10 [peer-id] [1] 
11 [cipher] [AES-256-GCM] 

2018-01-10 11:33:24 PROTOCOL OPTIONS:
  cipher: AES-256-GCM
  digest: SHA512
  compress: LZO
  peer ID: 1
2018-01-10 11:33:24 EVENT: ASSIGN_IP
2018-01-10 11:33:24 NIP: preparing TUN network settings
2018-01-10 11:33:24 NIP: init TUN network settings with endpoint: X.XXX.XX.XX
2018-01-10 11:33:24 NIP: adding IPv4 address to network settings 10.0.8.3/255.255.255.0
2018-01-10 11:33:24 NIP: redirecting all IPv4 traffic to TUN interface
2018-01-10 11:33:24 NIP: adding DNS 84.200.69.80
2018-01-10 11:33:24 NIP: adding DNS 84.200.70.40
2018-01-10 11:33:24 NIP: setting HTTP proxy to 192.168.178.50 8639
2018-01-10 11:33:24 NIP: setting HTTPS proxy to 192.168.178.50 8639
2018-01-10 11:33:24 Connected via NetworkExtensionTUN
2018-01-10 11:33:24 LZO-ASYM init swap=0 asym=0
2018-01-10 11:33:24 EVENT: CONNECTED client@vpn.example.de:1274 (X.XXX.XX.XX) via /UDPv4 on NetworkExtensionTUN/10.0.8.3/ gw=[/]

[ordex]

Hello, our devs have found a solution to this problem. The fix will be part of the next release. Thanks a lot for your support!

[fgafr]

Hello,

Do you have any information regarding the timeframe for the next release resolving this problem ?

Thanks

Best regards

François

[ordex]

Not yet, as we are pulling together other bug fixes. However this is our top priority at the moment, therefore we'll try to minimize any delay.

[kendon]

Please keep us updated about the progress. Thanks for the effort.

[fgafr]

Hi,

First of all thank you for the delivery of a the new release which is resolving the issue

[ordex]

Glad to hear it works!

OpenVPN Connect for iOS 1.2.6 is out on the AppStore.
Please refer to this post if you want to submit bugs of feature requests: viewtopic.php?f=36&t=25650

Thanks!