VPN client [released]

Question

438

VPN client [released]

asked 2013-12-24 17:25:48 +0200

Manankanchu

9022 ●42 ●54 ●50

http://www.manankanchu.co...

updated 2015-05-16 12:19:55 +0200

r0kk3rz

10112 ●108 ●186 ●181

As I use my phone also for business purposes and services like SwissVPN I would love to see a VPN client with GUI configuration on board.

My options would be (highest preference on top):

PPTP/MPPE (I know it's hackable but it's the most distributed type of VPN and my security requirements are low)
L2TP/IPSec
SSL VPN / SSTP
OpenVPN
OpenConnect / VPNC
tinc

Username/Password would be sufficient for me, others may require certs

EDIT: added tinc (see https://together.jolla.com/question/14495/mer-tools-package-for-tinc-vpn-software/)

EDIT: @developers of VPN GUI: I can provide you with test accounts for PPTP/MPPE, L2TP/IPsec, OpenVPN and SSL VPN servers - please contact me at jollavpn (at) manankanchu.com

EDIT: added OpenConnect as requested protocol, see https://together.jolla.com/question/5817/duplicate-cisco-ssl-vpn-support-openconnect/ (resolved thru native app "SecureFishNet")

EDIT 05/15: Open VPN Support announced on SailfishOS Roadmap

edit retag flag offensive reopen delete

The question has been closed for the following reason "released in a software update" by nthn
close date 2017-03-06 12:49:11.310288

Comments

16

Also for Cisco VPN

renegade22 ( 2013-12-25 21:15:28 +0200 )edit

16

Don't know if it's possible, but i'd like to have the possibility to auto connect some vpn depending on the wifi network I'm connected to.

kael ( 2013-12-26 16:07:04 +0200 )edit

2

kael: this sounds as work for Profilematic successor .. :)

Kaacz ( 2013-12-31 02:45:51 +0200 )edit

5

If someone starts coding a gui for this, Connman (used as a connection manager in Sailfish) has a readily made dbus api for handling at least OpenConnect, OpenVPN, VPNC, L2TP and PPTP. For example autoconnecting a certain vpn depending on the wifi network should be very easily doable with it.

Jare ( 2014-01-01 10:39:15 +0200 )edit

2

for me, PPTP is also quite important. Of course, GUI for both pptp and ipsec would be very welcome.

casanunda ( 2014-01-06 01:06:50 +0200 )edit

Also for Cisco VPN
renegade22 ( 2013-12-25 21:15:28 +0200 )edit
Don't know if it's possible, but i'd like to have the possibility to auto connect some vpn depending on the wifi network I'm connected to.
kael ( 2013-12-26 16:07:04 +0200 )edit
kael: this sounds as work for Profilematic successor .. :)
Kaacz ( 2013-12-31 02:45:51 +0200 )edit
If someone starts coding a gui for this, Connman (used as a connection manager in Sailfish) has a readily made dbus api for handling at least OpenConnect, OpenVPN, VPNC, L2TP and PPTP. For example autoconnecting a certain vpn depending on the wifi network should be very easily doable with it.
Jare ( 2014-01-01 10:39:15 +0200 )edit
for me, PPTP is also quite important. Of course, GUI for both pptp and ipsec would be very welcome.
casanunda ( 2014-01-06 01:06:50 +0200 )edit

Answer 1

48

answered 2013-12-24 17:37:53 +0200

lbt

6514 ●41 ●48 ●51

moderator

http://www.merproject.org...

updated 2013-12-24 17:38:22 +0200

openvpn is available already; however you need developer mode to access it and there's currently no app to help set it up.

Login as nemo and:

 ssu ar mer-tools
 pkcon refresh
 pkcon install openvpn

edit flag offensive delete publish link

Comments

8

Yeah, OpenVPN is definitely a "must have". We still need a GUI :)

PhixGre ( 2013-12-24 18:00:43 +0200 )edit

1

I have OpenVPN set up and working as described above. Gui would be nice, but then again whenever I need it on my phone I do need the fingerterm as well.

Frye ( 2013-12-24 19:02:57 +0200 )edit

9

True, OpenVPN is running perfectly from the shell. A GUI like on N900 wold be quite handy. Maybe it could even be integrated as little icon in "settings" like GPS, or flight mode?

ibins ( 2013-12-24 20:19:21 +0200 )edit

1

Can we also have openconnect ?

Sfiet_Konstantin ( 2013-12-24 22:10:55 +0200 )edit

8

YES! Need install vpnc & openconnect rpm

openconnect --certificate='/home/nemo/VPN/my-personal-cert.p12' --no-passwd --cafile='/home/nemo/VPN/CA-server-signed.pem' --disable-ipv6 --useragent='Cisco AnyConnect VPN Agent for Linux 3.0.2052' --script='/etc/vpnc/vpnc-script' vpngw.mydomain.com

Kaacz ( 2013-12-28 04:59:01 +0200 )edit

Answer 2

24

answered 2014-10-30 01:09:22 +0200

hook

3092 ●16 ●28 ●24

http://matija.suklje.name...

There is also SecureFishNet:

SecureFishNet is OpenVPN client manager for Sailfish. You can manage openvpn connection with it. It requires Openvpn and that will be downloaded from repository. (If not you can do it with “pkcon install openvpn”).

edit flag offensive delete publish link

Comments

3

VPN is surely very important - even for private use nowadays. My first two preferencies would be 1. L2TP/IPSec 2. Open VPN (to configure from GUI)

Downloaded and installed package openvpn as inidcated above. How can I configure this in the absence of a GUI possibility and how can I activate a connectiion when needed?

imagomundi ( 2014-12-02 15:12:47 +0200 )edit

SecureFishNet works like a charm for OpenVPN connections. Luckily, my company just switched from PPTP to OpenVPN, so no I can use it for connecting to both my home and company network...

casanunda ( 2015-01-27 17:57:48 +0200 )edit

Just downloaded SFN, works very well with my OpenVPN server! GUI is a bit weird but works nice.

ozzi ( 2015-07-03 14:00:49 +0200 )edit

Answer 3

2

answered 2015-07-01 09:09:22 +0200

BirdZhang

1211 ●27 ●40 ●44

http://www.birdzhang.xyz/

updated 2015-07-01 10:58:11 +0200

For PPTP/MPPE users:

Install ppp&pptp&pptp-setup from warehouse

Links:

https://openrepos.net/content/ketilk/ppp

https://openrepos.net/content/ketilk/pptp

https://openrepos.net/content/ketilk/pptp-setup

Use these commands in terminal(devel-su needed)

 pptpsetup --create vpn --server XXX.XXX.XXX.XX --username jolla --password jolla --encrypt --start

If success ,will show like this:

Using interface ppp0

Connect: ppp0 <–> /dev/pts/2

CHAP authentication succeeded

MPPE 128-bit stateless compression enabled

local  IP address 192.168.111.103

remote IP address 192.168.111.100

Then,add ppp0 to route

route add -net 0.0.0.0 dev ppp0

Note:Everytime your network changed,you should execute these commands:

pppd call vpn

route add -net 0.0.0.0 dev ppp0

edit flag offensive delete publish link

Comments

I have to disagree - as this solution does not work.

Well - at least for me - have tried for several times now - never successfully.

See: https://together.jolla.com/question/88176/pptp-cant-be-installed/

Also in my opinion such a basic feature - as much needed and voted for as that simply needs to be integrated of a client in the official store - but not through a command line solution.

kaktux ( 2015-07-01 11:25:10 +0200 )edit

@kaktux I also want a GUI not a command. But at this time,there is none GUI. I only want to share my solution for sailors who want. And it works for me.

BirdZhang ( 2015-07-02 04:50:11 +0200 )edit

Answer 4

1

answered 2015-05-23 14:45:01 +0200

chruldt
51 ●1 ●5 ●6

I just built strongswan on my Jolla, but it seems I need some more kernel modules to get it working as I get 'unable to allocate SPIs from kernel'

https://lists.strongswan.org/pipermail/users/2012-January/002441.html links to a page saying I need all of these:

CONFIG_XFRM_USER is not set

CONFIG_NET_KEY_MIGRATE is not set

CONFIG_INET_IPCOMP is not set

CONFIG_INET_XFRM_TUNNEL is not set

CONFIG_INET_LRO is not set

CONFIG_INET_UDP_DIAG is not set

CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION is not set

CONFIG_INET_IPCOMP is not set

CONFIG_IPV6_SIT_6RD is not set

CONFIG_IPV6_TUNNEL is not set

CONFIG_IPV6_MROUTE is not set

CONFIG_NETFILTER_DEBUG is not set

CONFIG_NETFILTER_XT_TARGET_CHECKSUM is not set

CONFIG_NETFILTER_XT_TARGET_CT is not set

CONFIG_NETFILTER_XT_TARGET_DSCP is not set

CONFIG_NETFILTER_XT_TARGET_HL is not set

CONFIG_NETFILTER_XT_TARGET_IDLETIMER is not set

CONFIG_NETFILTER_XT_TARGET_NFLOG is not set

CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set

CONFIG_NETFILTER_XT_TARGET_RATEEST is not set

CONFIG_NETFILTER_XT_TARGET_TEE is not set

CONFIG_NETFILTER_XT_TARGET_TPROXY is not set

CONFIG_NETFILTER_XT_TARGET_TRACE is not set

CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set

CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set

CONFIG_NETFILTER_XT_MATCH_ADDRTYPE is not set

CONFIG_NETFILTER_XT_MATCH_CLUSTER is not set

CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set

CONFIG_NETFILTER_XT_MATCH_CPU is not set

CONFIG_NETFILTER_XT_MATCH_DCCP is not set

CONFIG_NETFILTER_XT_MATCH_DEVGROUP is not set

CONFIG_NETFILTER_XT_MATCH_DSCP is not set

CONFIG_NETFILTER_XT_MATCH_ESP is not set

CONFIG_NETFILTER_XT_MATCH_OSF is not set

CONFIG_NETFILTER_XT_MATCH_OWNER is not set

CONFIG_NETFILTER_XT_MATCH_PHYSDEV is not set

CONFIG_NETFILTER_XT_MATCH_RATEEST is not set

CONFIG_NETFILTER_XT_MATCH_REALM is not set

CONFIG_NETFILTER_XT_MATCH_RECENT is not set

CONFIG_NETFILTER_XT_MATCH_SCTP is not set

CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set

edit flag offensive delete publish link

Answer 5

1

answered 2015-09-10 18:38:41 +0200

lobelia
11 ●1 ●2

I know this thread is pretty old but in case it helps somebody I got is working with openvpn

Install openvpn

devel-su
pkcon install openvpn

Create config file (conf.ovpn)

tls-client
fragment 1450
pull
comp-lzo
dev tun
remote vpn.myvpn.com 2195
proto udp
ca /home/nemo/vpn/ca-pem.crt
ns-cert-type server
tls-client
key /home/nemo/vpn/vpn_key.pem
cert /home/nemo/vpn/vpn_cert.pem
auth-user-pass

Launch openvpn

openvpn --config /home/nemo/vpn/conf.ovpn

edit flag offensive delete publish link

Comments

...or install SecureFishnet as mentioned above to do configuration and starting of VPN through a GUI...

casanunda ( 2015-09-10 19:12:29 +0200 )edit

I couldn't find it in the Jolla store and I don't usually install Android apps

lobelia ( 2015-09-10 22:12:05 +0200 )edit

1

It would make more sense to utilize connman-vpn and its openvpn plugin instead of running these commands by hand. Check vpn-config-format.txt how to create suitable config file for openvpn. Routes etc. are setup properly if you use connman-vpn and also connman then knows about the vpn link.

jr ( 2015-09-10 22:15:52 +0200 )edit

1

@lobelia: SecureFishNet is not in the official Jolla store, it is in the community OpenRepos that have their own app store called Warehouse. You can read more about it on the link in this comment.

hook ( 2015-10-01 09:17:36 +0200 )edit

Thanks hook, SecureFishNet app makes things much easier, and I don't know how I managed to live without OpenRepos and Warehouse until now :)

lobelia ( 2015-10-01 11:01:39 +0200 )edit

Answer 6

0

answered 2015-03-14 22:11:00 +0200

iourine
437 ●15 ●27 ●24

updated 2015-03-14 22:15:12 +0200

PPTP is not the best option since nowdays many mobile providers (and some fixed ones) do block protocols other than the well-known three (TCP, UDP, ICMP). PPTP utilises GRE and thus does not work in this case. I had many complaints from my customers about this, and the only solution was switching to TCP- or UDP-based tunneling.

OpenVPN is great but definitely it needs a GUI client for regular users, which are not networking experts.

IPsec + X.509 + NAT Traversal (that is, AH/ESP-over-UDP) is also highly desirable, but there is a caveat: there are 2 popular implementations for Linux, StrongSWAN and OpenSWAN. They are _said_ to be compatible to standards and to each other, yet never I have seen a working examle of communication between them. Nor could I couple them myself. Thus, none is perfect, and none will provide 100% compatibility with the other systems. Thus, a perfect system should have an option to select either of the *SWANs to be de/re/installed on user's choice.

What is even more discouraging is that Jolla shipbuilders cannot even say definitely if IPsec support is complied into the kernel or not. Not to say which of the two...

edit flag offensive delete publish link

Answer 7

0

answered 2016-03-26 14:11:32 +0200

Tuep
121 ●5 ●7 ●9

Is there somewhere an easy step-by-step instruction how one can setup a connection via vpnc? I set up an VPN via my Frizbox router and would like to connect with the jolla.

edit flag offensive delete publish link

Comments

Have you tried this? https://talk.maemo.org/showthread.php?t=92338

max ( 2016-03-26 16:34:23 +0200 )edit

I edited now the conf file, but i dont know how to proceed the instructions are unclear to me.

Tuep ( 2016-03-26 17:09:16 +0200 )edit

Accepted Answer

0

answered 2017-03-06 12:48:48 +0200

nthn

12631 ●154 ●230 ●225

VPN is at last available inside Settings as of 2.1.0.9. There are some bugs left, especially with importing VPN configurations, but generally it works. Closing!

edit flag offensive delete publish link

Comments

And when will 2.1.0.9 be available?

Julf ( 2017-03-07 16:00:31 +0200 )edit

I can connect to my openVPN, but my traffic is not routed through it. Is there an option in the GUI or do I have to set the routing manually?

JaVaEs ( 2017-03-17 17:58:12 +0200 )edit

1

@JaVaEs - add the ovpn then connect once and reboot the device - that way it works for me - this is needed for every new server - after that it works like a charm - for security reasons I do an IP check after I connect to a new network to be sure it's working as expected ...

elastic ( 2017-04-04 22:12:05 +0200 )edit

VPN client [released]

The question has been closed for the following reason "released in a software update" by nthn close date 2017-03-06 12:49:11.310288

Comments

8 Answers

Comments

Comments

Comments

CONFIG_XFRM_USER is not set

CONFIG_NET_KEY_MIGRATE is not set

CONFIG_INET_IPCOMP is not set

CONFIG_INET_XFRM_TUNNEL is not set

CONFIG_INET_LRO is not set

CONFIG_INET_UDP_DIAG is not set

CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION is not set

CONFIG_INET_IPCOMP is not set

CONFIG_IPV6_SIT_6RD is not set

CONFIG_IPV6_TUNNEL is not set

CONFIG_IPV6_MROUTE is not set

CONFIG_NETFILTER_DEBUG is not set

CONFIG_NETFILTER_XT_TARGET_CHECKSUM is not set

CONFIG_NETFILTER_XT_TARGET_CT is not set

CONFIG_NETFILTER_XT_TARGET_DSCP is not set

CONFIG_NETFILTER_XT_TARGET_HL is not set

CONFIG_NETFILTER_XT_TARGET_IDLETIMER is not set

CONFIG_NETFILTER_XT_TARGET_NFLOG is not set

CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set

CONFIG_NETFILTER_XT_TARGET_RATEEST is not set

CONFIG_NETFILTER_XT_TARGET_TEE is not set

CONFIG_NETFILTER_XT_TARGET_TPROXY is not set

CONFIG_NETFILTER_XT_TARGET_TRACE is not set

CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set

CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set

CONFIG_NETFILTER_XT_MATCH_ADDRTYPE is not set

CONFIG_NETFILTER_XT_MATCH_CLUSTER is not set

CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set

CONFIG_NETFILTER_XT_MATCH_CPU is not set

CONFIG_NETFILTER_XT_MATCH_DCCP is not set

CONFIG_NETFILTER_XT_MATCH_DEVGROUP is not set

CONFIG_NETFILTER_XT_MATCH_DSCP is not set

CONFIG_NETFILTER_XT_MATCH_ESP is not set

CONFIG_NETFILTER_XT_MATCH_OSF is not set

CONFIG_NETFILTER_XT_MATCH_OWNER is not set

CONFIG_NETFILTER_XT_MATCH_PHYSDEV is not set

CONFIG_NETFILTER_XT_MATCH_RATEEST is not set

CONFIG_NETFILTER_XT_MATCH_REALM is not set

CONFIG_NETFILTER_XT_MATCH_RECENT is not set

CONFIG_NETFILTER_XT_MATCH_SCTP is not set

CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set

Comments

Comments

Comments

Question tools

Public thread

Stats

Related questions

The question has been closed for the following reason "released in a software update" by nthn
close date 2017-03-06 12:49:11.310288