VPN setup walkthrough for PIA (Private Internet Access)? [answered]

Question

0

VPN setup walkthrough for PIA (Private Internet Access)? [answered]

asked 2017-03-05 21:17:35 +0200

This post is a wiki. Anyone with karma >75 is welcome to improve it.

updated 2017-03-07 08:08:42 +0200

eson

4617 ●89 ●127 ●141

https://svenskasprakfiler...

Hello,

Was very happy to see VPN setup was built into the GUI of the latest Iijoki update. I have been using PIA for my VPN on my computer and was very much hoping setup for Jolla would be a breeze, but I can't seem to get it working.

What I've done is I've downloaded the openvpn.zip from PIA's website and I've tried entering an .ovpn file as prompted for, but when I do that the phone exits the configuration screen and shows the app screen showing all running apps (of which conf is one).

I've also tried to do things manually but I guess I'm not too sure of what all the required info is I have to provide. A walkthrough would be much appreciated.

edit retag flag offensive reopen delete

The question has been closed for the following reason "the question is answered, an answer was accepted" by aatu
close date 2017-05-21 00:06:41.958743

Comments

The .ovpn import feature is broken so skip that, and concentrate on manual configuration. To give correct instructions for manual configuration, one would have to know what's pre configured in your .ovpn file. Is there a way to download a copy, with no account? Do not publish any sensitive information here.

eson ( 2017-03-06 10:32:30 +0200 )edit

1

Hi!

Yup, the file content is here (for Finland for example, e.g. "Finland.ovpn"):

client
dev tun
proto udp
remote fi.privateinternetaccess.com 1198
resolv-retry infinite
nobind
persist-key
persist-tun
cipher aes-128-cbc
auth sha1
tls-client
remote-cert-tls server
auth-user-pass
comp-lzo
verb 1
reneg-sec 0
crl-verify crl.rsa.2048.pem
ca ca.rsa.2048.crt
disable-occ

The whole package with all .ovpn files and a .crt and .pem file can be downloaded here: https://www.privateinternetaccess.com/openvpn/openvpn.zip

aatu ( 2017-03-06 17:55:42 +0200 )edit

The .ovpn import feature is broken so skip that, and concentrate on manual configuration. To give correct instructions for manual configuration, one would have to know what's pre configured in your .ovpn file. Is there a way to download a copy, with no account? Do not publish any sensitive information here.
eson ( 2017-03-06 10:32:30 +0200 )edit
Hi!
Yup, the file content is here (for Finland for example, e.g. "Finland.ovpn"):
client dev tun proto udp remote fi.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun cipher aes-128-cbc auth sha1 tls-client remote-cert-tls server auth-user-pass comp-lzo verb 1 reneg-sec 0 crl-verify crl.rsa.2048.pem ca ca.rsa.2048.crt disable-occ
The whole package with all .ovpn files and a .crt and .pem file can be downloaded here: https://www.privateinternetaccess.com/openvpn/openvpn.zip
aatu ( 2017-03-06 17:55:42 +0200 )edit

Accepted Answer

0

answered 2017-03-07 07:50:45 +0200

eson

4617 ●89 ●127 ●141

https://svenskasprakfiler...

updated 2017-05-21 07:04:36 +0200

I do not have a PIA account, and I'm certanly not an expert on vpn, but as the real experts tend to be very quite in here, I will give it a try.

First I would edit the .ovpn file like below and create a text file named "credentials" (no file extension) with this content...

credentials

<Your loginname>
<Your password>

Finland.ovpn

client
dev tun
proto udp
remote fi.privateinternetaccess.com 1198
resolv-retry infinite
nobind
persist-key
persist-tun
cipher aes-128-cbc
auth sha1
tls-client
remote-cert-tls server
auth-user-pass /etc/openvpn/credentials
comp-lzo
verb 1
reneg-sec 0
crl-verify /etc/openvpn/crl.rsa.2048.pem
ca /etc/openvpn/ca.rsa.2048.crt
disable-occ

.

Then I choose to put all my required files (ca.rsa.2048.crt, credentials, crl.rsa.2048.pem and Finland.ovpn) in the default openvpn directory, /etc/openvpn/. You could probably choose some other directory but if so, you'll have to edit your .ovpn file to the corresponding.

When files are in place, I will fill in the whole first page in Sailfish app... image description

Under Advanced, I would first try pointing to the .ovpn file only. If that isn't enough I would go for the rest seen in screen shot below (Protocol type, LZO Compression, Enforce remote certificate type). Prevent caching credentials should probably always be ticked.

image description

When done, swipe back, accept and test connection.

If it says connected, you will have to reboot phone to really get connected.

edit flag offensive delete publish link

Comments

Please, confirm if it worked or not, or if it worked with modifications. I'd like to update my instructions if necessary.

eson ( 2017-03-09 07:20:26 +0200 )edit

Oh, thank tack så mycket you. I will, when I get around to it. I suspect that the fact I flashed my phone with a bootleg factory image (cause it was bricked) last week has brought me some other issues that needs looking in too. Like this ssu thing, whatever that was, isn't looking as it should I'm afraid. I don't remember things like if the nemo account is sort of root or if those commands should be launched with some sudo equivalent and such. And what is ssu short for? Don't remember. Though I like sailfish a lot it is kind of a patchwork on a tinkering user level at times, or least that's how I feel.

aatu ( 2017-03-09 08:02:43 +0200 )edit

Don't know what you're up to, but ssu probably is short for Signaling Server Unit.

Nemo is user, not root. To get root you'll need to set an SSH/Root password and use devel-su.

eson ( 2017-03-09 08:24:38 +0200 )edit

Yo, Eson, a heads up to you. You prolly forgot about all this already. I tried this out now, with Iijoki 2.1.0.11 onboard. No worky. I put the files in /home/nemo/vpn. It appears to work, it connects, but when I check the IP I'm still with my official carrier. Fiddling with the advanced options above changes nothing, xcept if I tick the prevent caching of credentials option it says it can't connect.

Chchcheers,

aatu ( 2017-05-20 21:00:08 +0200 )edit

@aatu Cant guarantee it will work for you, but I always have to reboot phone to make it really work. Just like you describe, it says I'm connected but I'm actually not, until reboot.

eson ( 2017-05-20 22:09:27 +0200 )edit

VPN setup walkthrough for PIA (Private Internet Access)? [answered]

The question has been closed for the following reason "the question is answered, an answer was accepted" by aatu
close date 2017-05-21 00:06:41.958743

Comments

1 Answer

Comments

Question tools

Stats

Related questions

VPN setup walkthrough for PIA (Private Internet Access)? [answered]

The question has been closed for the following reason "the question is answered, an answer was accepted" by aatu close date 2017-05-21 00:06:41.958743

Comments

1 Answer

Comments

Question tools

Public thread

Stats

Related questions

The question has been closed for the following reason "the question is answered, an answer was accepted" by aatu
close date 2017-05-21 00:06:41.958743