Page 1 of 1

Acknowledge system proxy-settings after OpenVPN-connection

Posted: Tue Jan 21, 2014 12:16 am
by knutsel
Just to be clear, this is not about connecting to an OpenVPN-server through a proxy.

iPad 1 with OpenVPN Connect 1.0.1.:
If one uses a proxy via WiFi-settings on the iPad, and doesn't use OpenVPN, the proxy settings are acknowledged as they should be.
If one uses a proxy via WiFi-settings on the iPad, and is connected to an OpenVPN-server via the OpenVPN Connect app, the proxy settings are completely passed and ignored by the app and therefore don't work.
Neither does the OpenVPN Connect app acknowledge proxy-settings directly made in the server configuration or client configuration.
The VPN connection itself works flawlessly.

The changelog for OpenVPN Connect (in the Appstore) states:
What's New in Version 1.0.3

Raised minimum required iOS version to 6.1 (iOS 5.1.1 installer will not install Connect, and will delete previous working 1.0.1 install)

...

* Added the capability for server to push proxy options, e.g.:

push "dhcp-option PROXY_HTTP 10.144.5.14 3128"
push "dhcp-option PROXY_HTTPS 10.144.5.14 3128"
push "dhcp-option PROXY_BYPASS http://www.openvpn.net http://www.openvpn.org"
push "dhcp-option PROXY_AUTO_CONFIG_URL http://www.openvpn.net/proxy.pac"

Note that this is a separate and distinct feature from the one to connect through an HTTP proxy. This feature allows proxy options to be set for Safari (and possibly other apps as well) for the duration of the VPN session.

These options can be placed directly in the profile, i.e.

--> dhcp-option PROXY_HTTP 10.144.5.14 3128

or pushed by the server:

--> push "dhcp-option PROXY_HTTP 10.144.5.14 3128"
It looks as if all this is made possible in version 1.3, and in this topic it's suggested it will be more extensively incorporated in version 1.0.4.
The sad part is, i've got an iPad 1. That will only go to iOS 5.1.1.. And exactly the function i need so badly, is implemented in the first version i'm not able to install anymore... :(
So if you're stuck with iOS 5.1.1., you can't use proxy settings in iOS itself nor in a client configuration file nor in a server configuration file, because whatever way you try, the OpenVPN Connect app just ignores everything.

My questions:
  • Is support for iOS 5.1.1. (and therefore the iPad 1) dropped from now on? Clearly you can't support every single device till the end of times, but there are still lots of iPad 1's out there, and not just as secondary devices.
    I understand that there was a problem with an installer on the 1.0.2.-update, but isn't it possible to keep supporting iOS 5.1.1. or does that require a complete overhaul of the app?
  • If there won't be official updates for iOS 5 anymore in the Appstore, will it be possible to install a later version of OpenVPN Connect some other way? Maybe without iTunes, when a device has a jailbreak?
  • If both these things won't be possible, is there a way to configure the OpenVPN-server in such a way that all traffic (consequently from all connected clients) will be forwarded to a particular proxy, and will be led back to the right client?

Obviously, i would prefer support for iOS 5.1.1. of course.
Hoping to get an answer, wether positive or negative, so that i can consider what to do next.
Thanks in advance. :)

Re: Acknowledge system proxy-settings after OpenVPN-connecti

Posted: Fri Jan 24, 2014 7:50 am
by jamesyonan
The blocker for this is that iOS 5.1.1 can't handle universal binaries that contain 64-bit plugins. So there's no way, right now, for us to create a build that would work on 5.1.1 through 7.

James