From 344a52c66b70e71093ba7eee9711e899a11decf8 Mon Sep 17 00:00:00 2001 From: Arne Schwabe Date: Sun, 14 Jan 2018 12:17:37 +0100 Subject: More string fixes --- main/src/main/res/values-fr/strings.xml | 1 - main/src/main/res/values/strings.xml | 405 +++++++------------------------- 2 files changed, 80 insertions(+), 326 deletions(-) diff --git a/main/src/main/res/values-fr/strings.xml b/main/src/main/res/values-fr/strings.xml index 476fbbc8..e0dbf668 100755 --- a/main/src/main/res/values-fr/strings.xml +++ b/main/src/main/res/values-fr/strings.xml @@ -253,7 +253,6 @@ Sur certaines images, cette notification joue un son.\nAndroid à introduit ces Connexion (TCP) Authentification échouée En attente d\'un réseau utilisable - French Non connecté Connexion au VPN %s Connexion au VPN %s diff --git a/main/src/main/res/values/strings.xml b/main/src/main/res/values/strings.xml index 3eb51c8a..3f6e98d9 100755 --- a/main/src/main/res/values/strings.xml +++ b/main/src/main/res/values/strings.xml @@ -18,12 +18,8 @@ PKCS12 File CA Certificate You must select a certificate - Source code and issue tracker available at - https://github.com/schwabe/ics-openvpn/ - - This program uses the following components; see the source code for full details on - the licenses - + Source code and issue tracker available at https://github.com/schwabe/ics-openvpn/ + This program uses the following components; see the source code for full details on the licenses About Profiles Type @@ -36,10 +32,7 @@ Enter IPv4 Address/Netmask in CIDR Format (e.g. 1.2.3.4/24) IPv4 Address IPv6 Address - Enter custom OpenVPN options. Use with caution. Also note that many of the tun - related OpenVPN settings cannot be supported by design of the VPNSettings. If you think an important option is - missing contact the author - + Enter custom OpenVPN options. Use with caution. Also note that many of the tun related OpenVPN settings cannot be supported by design of the VPNSettings. If you think an important option is missing contact the author Username Password For the static configuration the TLS Auth Keys will be used as static keys @@ -69,24 +62,16 @@ Cancel Confirmation Disconnect the connected VPN/cancel the connection attempt? Remove VPN - Checks whether the server uses a certificate with TLS Server extensions - (--remote-cert-tls server) - + Checks whether the server uses a certificate with TLS Server extensions (--remote-cert-tls server) Expect TLS server certificate Checks the Remote Server Certificate Subject DN Certificate Hostname Check - Specify the check used to verify the remote certificate DN (e.g. C=DE, - L=Paderborn, OU=Avian IP Carriers, CN=openvpn.blinkt.de)\n\nSpecify the complete DN or the RDN - (openvpn.blinkt.de in the example) or an RDN prefix for verification.\n\nWhen using RDN prefix \"Server\" - matches \"Server-1\" and \"Server-2\"\n\nLeaving the text field empty will check the RDN against the server - hostname.\n\nFor more details see the OpenVPN 2.3.1+ manpage under —verify-x509-name - + Specify the check used to verify the remote certificate DN (e.g. C=DE, L=Paderborn, OU=Avian IP Carriers, CN=openvpn.blinkt.de)\n\nSpecify the complete DN or the RDN (openvpn.blinkt.de in the example) or an RDN prefix for verification.\n\nWhen using RDN prefix \"Server\" matches \"Server-1\" and \"Server-2\"\n\nLeaving the text field empty will check the RDN against the server hostname.\n\nFor more details see the OpenVPN 2.3.1+ manpage under —verify-x509-name Remote certificate subject Enables the TLS Key Authentication TLS Auth File Requests IP addresses, routes and timing options from the server. - No information is requested from the server. Settings need to be specified below. - + No information is requested from the server. Settings need to be specified below. Pull Settings DNS Override DNS Settings by Server @@ -100,12 +85,8 @@ Ignore routed pushed by the server. Redirects all Traffic over the VPN Use default Route - Enter custom routes. Only enter destination in CIDR format. \"10.0.0.0/8 - 2002::/16\" would direct the networks 10.0.0.0/8 and 2002::/16 over the VPN. - - Routes that should NOT be routed over the VPN. Use the same syntax as - for included routes. - + Enter custom routes. Only enter destination in CIDR format. \"10.0.0.0/8 2002::/16\" would direct the networks 10.0.0.0/8 and 2002::/16 over the VPN. + Routes that should NOT be routed over the VPN. Use the same syntax as for included routes. Custom Routes Excluded Networks Log verbosity level @@ -114,9 +95,7 @@ Custom Options Edit VPN Settings Remove the VPN Profile \'%s\'? - On some custom ICS images the permission on /dev/tun might be wrong, or the tun - module might be missing completely. For CM9 images try the fix ownership option under general settings - + On some custom ICS images the permission on /dev/tun might be wrong, or the tun module might be missing completely. For CM9 images try the fix ownership option under general settings Failed to open the tun interface "Error: " Clear @@ -126,52 +105,29 @@ Routes: %1$s %2$s Routes excluded: %1$s %2$s VpnService routes installed: %1$s %2$s - Got interface information %1$s and %2$s, assuming second address is peer address of - remote. Using /32 netmask for local IP. Mode given by OpenVPN is \"%3$s\". - - Cannot make sense of %1$s and %2$s as IP route with CIDR netmask, using /32 as - netmask. - + Got interface information %1$s and %2$s, assuming second address is peer address of remote. Using /32 netmask for local IP. Mode given by OpenVPN is \"%3$s\". + Cannot make sense of %1$s and %2$s as IP route with CIDR netmask, using /32 as netmask. Corrected route %1$s/%2$s to %3$s/%2$s - Cannot access the Android Keychain Certificates. This can be caused by a firmware - upgrade or by restoring a backup of the app/app settings. Please edit the VPN and reselect the certificate under - basic settings to recreate the permission to access the certificate. - + Cannot access the Android Keychain Certificates. This can be caused by a firmware upgrade or by restoring a backup of the app/app settings. Please edit the VPN and reselect the certificate under basic settings to recreate the permission to access the certificate. %1$s %2$s Send log file Send ICS OpenVPN log file Copied log entry to clip board Tap Mode - Tap Mode is not possible with the non root VPN API. Therefore this application cannot - provide tap support - - Again? Are you kidding? No, tap mode is really not supported and sending more mail asking if - it will be supported will not help. - - A third time? Actually, one could write a a tap emulator based on tun that would add layer2 - information on send and strip layer2 information on receive. But this tap emulator would also have to implement - ARP and possibly a DHCP client. I am not aware of anybody doing any work in this direction. Contact me if you - want to start coding on this. - + Tap Mode is not possible with the non root VPN API. Therefore this application cannot provide tap support + Again? Are you kidding? No, tap mode is really not supported and sending more mail asking if it will be supported will not help. + A third time? Actually, one could write a a tap emulator based on tun that would add layer2 information on send and strip layer2 information on receive. But this tap emulator would also have to implement ARP and possibly a DHCP client. I am not aware of anybody doing any work in this direction. Contact me if you want to start coding on this. FAQ Copying log entries - To copy a single log entry press and hold on the log entry. To copy/send the whole log - use the Send Log option. Use the hardware menu button, if the button is not visible in the GUI. - + To copy a single log entry press and hold on the log entry. To copy/send the whole log use the Send Log option. Use the hardware menu button, if the button is not visible in the GUI. Shortcut to start - You can place a shortcut to start OpenVPN on your desktop. Depending on your - homescreen program you will have to add either a shortcut or a widget. - + You can place a shortcut to start OpenVPN on your desktop. Depending on your homescreen program you will have to add either a shortcut or a widget. Your image does not support the VPNService API, sorry :( Encryption Enter encryption method - Enter the encryption cipher algorithm used by OpenVPN. Leave empty to use - default cipher. - - Enter the authentication digest used for OpenVPN. Leave empty to use default - digest. - + Enter the encryption cipher algorithm used by OpenVPN. Leave empty to use default cipher. + Enter the authentication digest used for OpenVPN. Leave empty to use default digest. Authentication/Encryption File Explorer Inline File @@ -186,46 +142,23 @@ add Profile Could not find file %1$s mentioned in the imported config file Importing config file from source %1$s - Your configuration had a few configuration options that are not mapped - to UI configurations. These options were added as custom configuration options. The custom configuration is - displayed below: - + Your configuration had a few configuration options that are not mapped to UI configurations. These options were added as custom configuration options. The custom configuration is displayed below: Done reading config file. Do not bind to local address and port No local binding Import configuration file Security considerations - "As OpenVPN is security sensitive a few notes about security are sensible. All data on - the sdcard is inherently insecure. Every app can read it (for example this program requires no special sd card - rights). The data of this application can only be read by the application itself. By using the import option for - cacert/cert/key in the file dialog the data is stored in the VPN profile. The VPN profiles are only accessible - by this application. (Do not forget to delete the copies on the sd card afterwards). Even though accessible only - by this application the data is still unencrypted. By rooting the telephone or other exploits it may be possible - to retrieve the data. Saved passwords are stored in plain text as well. For pkcs12 files it is highly - recommended that you import them into the android keystore." - + "As OpenVPN is security sensitive a few notes about security are sensible. All data on the sdcard is inherently insecure. Every app can read it (for example this program requires no special sd card rights). The data of this application can only be read by the application itself. By using the import option for cacert/cert/key in the file dialog the data is stored in the VPN profile. The VPN profiles are only accessible by this application. (Do not forget to delete the copies on the sd card afterwards). Even though accessible only by this application the data is still unencrypted. By rooting the telephone or other exploits it may be possible to retrieve the data. Saved passwords are stored in plain text as well. For pkcs12 files it is highly recommended that you import them into the android keystore." Import Error showing certificate selection - Got an exception trying to show the Android 4.0+ certificate selection dialog. This - should never happen as this a standard feature of Android 4.0+. Maybe your Android ROM support for certificate - storage is broken - + Got an exception trying to show the Android 4.0+ certificate selection dialog. This should never happen as this a standard feature of Android 4.0+. Maybe your Android ROM support for certificate storage is broken IPv4 IPv6 Waiting for state message… imported profile imported profile %d Broken Images - <p>Official HTC images are known to have a strange routing problem causing - traffic not to flow through the tunnel (See also <a href="https://github.com/schwabe/ics-openvpn/issues/18">Issue - 18</a> in the bug tracker.)</p><p>Older official SONY images from Xperia Arc S and Xperia Ray - have been reported to be missing the VPNService completely from the image. (See also <a - href="https://github.com/schwabe/ics-openvpn/issues/29">Issue 29</a> in the bug tracker.)</p><p>On - custom build images the tun module might be missing or the rights of /dev/tun might be wrong. Some CM9 images - need the "Fix ownership" option under "Device specific hacks" enabled.</p><p>Most importantly: If - your device has a broken Android image, report it to your vendor. The more people who report an issue to the - vendor, the more likely they are to fix it.</p> - + <p>Official HTC images are known to have a strange routing problem causing traffic not to flow through the tunnel (See also <a href="https://github.com/schwabe/ics-openvpn/issues/18">Issue 18</a> in the bug tracker.)</p><p>Older official SONY images from Xperia Arc S and Xperia Ray have been reported to be missing the VPNService completely from the image. (See also <a href="https://github.com/schwabe/ics-openvpn/issues/29">Issue 29</a> in the bug tracker.)</p><p>On custom build images the tun module might be missing or the rights of /dev/tun might be wrong. Some CM9 images need the "Fix ownership" option under "Device specific hacks" enabled.</p><p>Most importantly: If your device has a broken Android image, report it to your vendor. The more people who report an issue to the vendor, the more likely they are to fix it.</p> PKCS12 File Encryption Key Private Key Password Password @@ -233,38 +166,22 @@ TLS Authentication/Encryption Generated Config Settings - Tries to set the owner of /dev/tun to system. Some CM9 images need this to make the - VPNService API work. Requires root. - + Tries to set the owner of /dev/tun to system. Some CM9 images need this to make the VPNService API work. Requires root. Fix ownership of /dev/tun Shows the generated OpenVPN Configuration File Editing \"%s\" Building configuration… - Turning this option on will force a reconnect if the network state is changed (e.g. - WiFi to/from mobile) - + Turning this option on will force a reconnect if the network state is changed (e.g. WiFi to/from mobile) Reconnect on network change Network Status: %s - The CA cert is usually returned from the Android keystore. Specify a separate certificate - if you get certificate verification errors. - + The CA cert is usually returned from the Android keystore. Specify a separate certificate if you get certificate verification errors. Select - No CA Certificate returned while reading from Android keystore. Authentication will - probably fail. - - Shows the log window on connect. The log window can always be accessed from the - notification status. - + No CA Certificate returned while reading from Android keystore. Authentication will probably fail. + Shows the log window on connect. The log window can always be accessed from the notification status. Show log window - %10$s %9$s running on %3$s %1$s (%2$s), Android %6$s (%7$s) API %4$d, ABI %5$s, (%8$s) - + %10$s %9$s running on %3$s %1$s (%2$s), Android %6$s (%7$s) API %4$d, ABI %5$s, (%8$s) Error signing with Android keystore key %1$s: %2$s - The VPN connection warning telling you that this app can intercept all traffic is - imposed by the system to prevent abuse of the VPNService API.\nThe VPN connection notification (The key symbol) - is also imposed by the Android system to signal an ongoing VPN connection. On some images this notification - plays a sound.\nAndroid introduced these system dialogs for your own safety and made sure that they cannot be - circumvented. (On some images this unfortunately includes a notification sound) - + The VPN connection warning telling you that this app can intercept all traffic is imposed by the system to prevent abuse of the VPNService API.\nThe VPN connection notification (The key symbol) is also imposed by the Android system to signal an ongoing VPN connection. On some images this notification plays a sound.\nAndroid introduced these system dialogs for your own safety and made sure that they cannot be circumvented. (On some images this unfortunately includes a notification sound) Connection warning and notification sound English translation by Arne Schwabe<arne@rfc2549.org> IP and DNS @@ -273,99 +190,46 @@ Obscure OpenVPN Settings. Normally not needed. Advanced ICS Openvpn Config - No DNS servers being used. Name resolution may not work. Consider setting custom DNS - Servers. Please also note that Android will keep using your proxy settings specified for your mobile/Wi-Fi - connection when no DNS servers are set. - + No DNS servers being used. Name resolution may not work. Consider setting custom DNS Servers. Please also note that Android will keep using your proxy settings specified for your mobile/Wi-Fi connection when no DNS servers are set. Could not add DNS Server \"%1$s\", rejected by the system: %2$s Could not configure IP Address \"%1$s\", rejected by the system: %2$s - <p>Get a working config (tested on your computer or download from your - provider/organisation)</p><p>If it is a single file with no extra pem/pkcs12 files you can email the - file yourself and open the attachment. If you have multiple files put them on your sd card.</p><p>Click - on the email attachment/Use the folder icon in the vpn list to import the config file</p><p>If there - are errors about missing files put the missing files on your sd card.</p><p>Click on the save symbol - to add the imported VPN to your VPN list</p><p>Connect the VPN by clicking on the name of the VPN</p><p>If - there are error or warnings in the log try to understand the warnings/error and try to fix them</p> - + <p>Get a working config (tested on your computer or download from your provider/organisation)</p><p>If it is a single file with no extra pem/pkcs12 files you can email the file yourself and open the attachment. If you have multiple files put them on your sd card.</p><p>Click on the email attachment/Use the folder icon in the vpn list to import the config file</p><p>If there are errors about missing files put the missing files on your sd card.</p><p>Click on the save symbol to add the imported VPN to your VPN list</p><p>Connect the VPN by clicking on the name of the VPN</p><p>If there are error or warnings in the log try to understand the warnings/error and try to fix them</p> Quick Start - Try to load the tun.ko kernel module before trying to connect. Needs rooted - devices. - + Try to load the tun.ko kernel module before trying to connect. Needs rooted devices. Load tun module Import PKCS12 from configuration into Android Keystore Error getting proxy settings: %s Using proxy %1$s %2$d Use system proxy - Use the system wide configuration for HTTP/HTTPS proxies to connect. - - OpenVPN will connect the specified VPN if it was active on system boot. Please - read the connection warning FAQ before using this option on Android < 5.0. - + Use the system wide configuration for HTTP/HTTPS proxies to connect. + OpenVPN will connect the specified VPN if it was active on system boot. Please read the connection warning FAQ before using this option on Android < 5.0. Connect on boot Ignore Restart - Configuration changes are applied after restarting the VPN. (Re)start the - VPN now? - + Configuration changes are applied after restarting the VPN. (Re)start the VPN now? Configuration changed Could not determine last connected profile for editing Duplicate notifications - If Android is under system memory (RAM) pressure, apps and service which - are not needed at the moment are removed from active memory. This terminates an ongoing VPN connection. To - ensure that the connection/OpenVPN survives the service runs with higher priority. To run with higher priority - the application must display a notification. The key notification icon is imposed by the system as described in - the previous FAQ entry. It does not count as app notification for purpose of running with higher priority. - + If Android is under system memory (RAM) pressure, apps and service which are not needed at the moment are removed from active memory. This terminates an ongoing VPN connection. To ensure that the connection/OpenVPN survives the service runs with higher priority. To run with higher priority the application must display a notification. The key notification icon is imposed by the system as described in the previous FAQ entry. It does not count as app notification for purpose of running with higher priority. No VPN profiles defined. Use the <img src=\"ic_menu_add\"/> icon to add a new VPN - Use the <img src=\"ic_menu_archive\"/> icon to import an existing (.ovpn or - .conf) profile from your sdcard. - + Use the <img src=\"ic_menu_archive\"/> icon to import an existing (.ovpn or .conf) profile from your sdcard. Be sure to also check out the FAQ. There is a quick start guide. Routing/Interface Configuration - The Routing and interface configuration is not done via traditional ifconfig/route - commands but by using the VPNService API. This results in a different routing configuration than on other OSes. - \nThe configuration of the VPN tunnel consists of the IP address and the networks that should be routed over - this interface. Especially, no peer partner address or gateway address is needed or required. Special routes to - reach the VPN Server (for example added when using redirect-gateway) are not needed either. The application will - consequently ignore these settings when importing a configuration. The app ensures with the VPNService API that - the connection to the server is not routed through the VPN tunnel.\nThe VPNService API does not allow specifying - networks that should not be routed via the VPN. As a workaround the app tries to detect networks that should not - be routed over tunnel (e.g. route x.x.x.x y.y.y.y net_gateway) and calculates a set of routes that excludes this - routes to emulate the behaviour of other platforms. The log windows shows the configuration of the VPNService - upon establishing a connection.\nBehind the scenes: Android 4.4+ does use policy routing. Using route/ifconfig - will not show the installed routes. Instead use ip rule, iptables -t mangle -L - + The Routing and interface configuration is not done via traditional ifconfig/route commands but by using the VPNService API. This results in a different routing configuration than on other OSes. \nThe configuration of the VPN tunnel consists of the IP address and the networks that should be routed over this interface. Especially, no peer partner address or gateway address is needed or required. Special routes to reach the VPN Server (for example added when using redirect-gateway) are not needed either. The application will consequently ignore these settings when importing a configuration. The app ensures with the VPNService API that the connection to the server is not routed through the VPN tunnel.\nThe VPNService API does not allow specifying networks that should not be routed via the VPN. As a workaround the app tries to detect networks that should not be routed over tunnel (e.g. route x.x.x.x y.y.y.y net_gateway) and calculates a set of routes that excludes this routes to emulate the behaviour of other platforms. The log windows shows the configuration of the VPNService upon establishing a connection.\nBehind the scenes: Android 4.4+ does use policy routing. Using route/ifconfig will not show the installed routes. Instead use ip rule, iptables -t mangle -L Do not fallback to no VPN connection when OpenVPN is reconnecting. Persistent tun OpenVPN Log Import OpenVPN configuration Battery consumption - In my personal tests the main reason for high battery consumption of OpenVPN are - the keepalive packets. Most OpenVPN servers have a configuration directive like \'keepalive 10 60\' which causes - the client and server to exchange keepalive packets every ten seconds. <p> While these packets are small - and do not use much traffic, they keep the mobile radio network busy and increase the energy consumption. (See - also <a - href="http://developer.android.com/training/efficient-downloads/efficient-network-access.html#RadioStateMachine">The - Radio State Machine | Android Developers</a>) <p> This keepalive setting cannot be changed on the - client. Only the system administrator of the OpenVPN can change the setting. <p> Unfortunately using a - keepalive larger than 60 seconds with UDP can cause some NAT gateways to drop the connection due to an - inactivity timeout. Using TCP with a long keep alive timeout works, but tunneling TCP over TCP performs - extremely poorly on connections with high packet loss. (See <a - href="http://sites.inka.de/bigred/devel/tcp-tcp.html">Why TCP Over TCP Is A Bad Idea</a>) - - The Android Tethering feature (over WiFi, USB or Bluetooth) and the VPNService API - (used by this program) do not work together. For more details see the <a - href=\"https://github.com/schwabe/ics-openvpn/issues/34\">issue #34</a> - + In my personal tests the main reason for high battery consumption of OpenVPN are the keepalive packets. Most OpenVPN servers have a configuration directive like \'keepalive 10 60\' which causes the client and server to exchange keepalive packets every ten seconds. <p> While these packets are small and do not use much traffic, they keep the mobile radio network busy and increase the energy consumption. (See also <a href="http://developer.android.com/training/efficient-downloads/efficient-network-access.html#RadioStateMachine">The Radio State Machine | Android Developers</a>) <p> This keepalive setting cannot be changed on the client. Only the system administrator of the OpenVPN can change the setting. <p> Unfortunately using a keepalive larger than 60 seconds with UDP can cause some NAT gateways to drop the connection due to an inactivity timeout. Using TCP with a long keep alive timeout works, but tunneling TCP over TCP performs extremely poorly on connections with high packet loss. (See <a href="http://sites.inka.de/bigred/devel/tcp-tcp.html">Why TCP Over TCP Is A Bad Idea</a>) + The Android Tethering feature (over WiFi, USB or Bluetooth) and the VPNService API (used by this program) do not work together. For more details see the <a href=\"https://github.com/schwabe/ics-openvpn/issues/34\">issue #34</a> VPN and Tethering Connection retries Reconnection settings Number of seconds to wait between connection attempts. Seconds between connections - OpenVPN crashed unexpectedly. Please consider using the send Minidump option in - the main menu - + OpenVPN crashed unexpectedly. Please consider using the send Minidump option in the main menu Send Minidump to developer Sends debugging information about last crash to developer OpenVPN - %s @@ -390,10 +254,7 @@ Not connected Connecting to VPN %s Connecting to VPN %s - Some versions of Android 4.1 have problems if the name of the - keystore certificate contains non alphanumeric characters (like spaces, underscores or dashes). Try to reimport - the certificate without special characters - + Some versions of Android 4.1 have problems if the name of the keystore certificate contains non alphanumeric characters (like spaces, underscores or dashes). Try to reimport the certificate without special characters Encryption cipher Packet authentication Enter packet authentication method @@ -405,32 +266,21 @@ Add Send config file Complete DN - Your imported configuration used the old DEPRECATED tls-remote option which uses a - different DN format. - + Your imported configuration used the old DEPRECATED tls-remote option which uses a different DN format. RDN (common name) RDN prefix tls-remote (DEPRECATED) - You can help translating by visiting http://crowdin.net/project/ics-openvpn/invite - + You can help translating by visiting http://crowdin.net/project/ics-openvpn/invite %1$s attempts to control %2$s - By proceeding, you are giving the application permission to completely control OpenVPN - for Android and to intercept all network traffic.Do NOT accept unless you trust the application. Otherwise, - you run the risk of having your data compromised by malicious software." - + By proceeding, you are giving the application permission to completely control OpenVPN for Android and to intercept all network traffic.Do NOT accept unless you trust the application. Otherwise, you run the risk of having your data compromised by malicious software." I trust this application. No app allowed to use external API Allowed apps: %s Clear list of allowed external apps?\nCurrent list of allowed apps:\n\n%s - Pause VPN when screen is off and less than 64 kB transferred data in 60s. When the - \"Persistent Tun\" option is enabled pausing the VPN will leave your device with NO network connectivity. - Without the \"Persistent Tun\" option the device will have no VPN connection/protection. - + Pause VPN when screen is off and less than 64 kB transferred data in 60s. When the \"Persistent Tun\" option is enabled pausing the VPN will leave your device with NO network connectivity. Without the \"Persistent Tun\" option the device will have no VPN connection/protection. Pause VPN connection after screen off Pausing connection in screen off state: less than %1$s in %2$ss - Warning: Persistent tun not enabled for this VPN. Traffic will use the normal - Internet connection when the screen is off. - + Warning: Persistent tun not enabled for this VPN. Traffic will use the normal Internet connection when the screen is off. Save Password Pause VPN Resume VPN @@ -443,12 +293,7 @@ Allow changes to VPN Profiles Hardware Keystore: Icon of app trying to use OpenVPN for Android - "Starting with Android 4.3 the VPN confirmation is guarded against \"overlaying - apps\". This results in the dialog not reacting to touch input. If you have an app that uses overlays it may - cause this behaviour. If you find an offending app contact the author of the app. This problem affect all VPN - applications on Android 4.3 and later. See also <a - href=\"https://github.com/schwabe/ics-openvpn/issues/185\">Issue 185<a> for additional details" - + "Starting with Android 4.3 the VPN confirmation is guarded against \"overlaying apps\". This results in the dialog not reacting to touch input. If you have an app that uses overlays it may cause this behaviour. If you find an offending app contact the author of the app. This problem affect all VPN applications on Android 4.3 and later. See also <a href=\"https://github.com/schwabe/ics-openvpn/issues/185\">Issue 185<a> for additional details" Vpn Confirmation Dialog Alternatively you can send me a donation with the Play Store: Thanks for donating %s! @@ -465,34 +310,19 @@ View options Unhandled exception: %1$s\n\n%2$s %3$s: %1$s\n\n%2$s - If you have rooted your Android device you can install the <a - href=\"http://xposed.info/\">Xposed framework</a> and the <a - href=\"http://repo.xposed.info/module/de.blinkt.vpndialogxposed\">VPN Dialog confirm module</a> at your - own risk" - + If you have rooted your Android device you can install the <a href=\"http://xposed.info/\">Xposed framework</a> and the <a href=\"http://repo.xposed.info/module/de.blinkt.vpndialogxposed\">VPN Dialog confirm module</a> at your own risk" Full licenses - Networks directly connected to the local interfaces will not be routed over the - VPN. Deselecting this option will redirect all traffic intented for local networks to the VPN. - + Networks directly connected to the local interfaces will not be routed over the VPN. Deselecting this option will redirect all traffic intented for local networks to the VPN. Bypass VPN for local networks Username/Password file [Imported from: %s] - Some files could not be found. Please select the files to import the profile: - - To use this app you need a VPN provider/VPN gateway supporting OpenVPN (often - provided by your employer). Check out http://community.openvpn.net/ for more information on OpenVPN and how to - setup your own OpenVPN server. - + Some files could not be found. Please select the files to import the profile: + To use this app you need a VPN provider/VPN gateway supporting OpenVPN (often provided by your employer). Check out http://community.openvpn.net/ for more information on OpenVPN and how to setup your own OpenVPN server. Import log: - Vpn topology \"%3$s\" specified but ifconfig %1$s %2$s looks more like an IP - address with a network mask. Assuming \"subnet\" topology. - + Vpn topology \"%3$s\" specified but ifconfig %1$s %2$s looks more like an IP address with a network mask. Assuming \"subnet\" topology. The MSS override value has to be a integer between 0 and 9000 The MTU override value has to be a integer between 64 and 9000 - Announce to TCP sessions running over the tunnel that they should limit their - send packet sizes such that after OpenVPN has encapsulated them, the resulting UDP packet size that OpenVPN - sends to its peer will not exceed this number of bytes. (default is 1450) - + Announce to TCP sessions running over the tunnel that they should limit their send packet sizes such that after OpenVPN has encapsulated them, the resulting UDP packet size that OpenVPN sends to its peer will not exceed this number of bytes. (default is 1450) Override MSS value of TCP payload Set MSS of TCP payload Client behaviour @@ -500,8 +330,7 @@ Loading… Allowed VPN apps: %1$s Disallowed VPN apps: %1$s - Package %s is no longer installed, removing it from app allow/disallow list - + Package %s is no longer installed, removing it from app allow/disallow list VPN is used for all apps but exclude selected VPN is used for only for selected apps Remove remote server entry? @@ -519,59 +348,19 @@ Duplicate VPN profile Duplicating profile: %s Show log - Multiple OpenVPN clients for Android exist. The most common ones are OpenVPN for - Android (this client), OpenVPN Connect and OpenVPN Settings.<p>The clients can be grouped into two groups: - OpenVPN for Android and OpenVPN Connect use the official VPNService API (Android 4.0+) and require no root and - OpenVPN Settings which uses root.<p>OpenVPN for Android is an open source client and developed by Arne - Schwabe. It is targeted at more advanced users and offers many settings and the ability to import profiles from - files and to configure/change profiles inside the app. The client is based on the community version of OpenVPN. - It is based on the OpenVPN 2.x source code. This client can be seen as the semi officially client of the - community. <p>OpenVPN Connect is non open source client that is developed by OpenVPN Technologies, Inc. - The client is indented to be general use client and more targeted at the average user and allows the import of - OpenVPN profiles. This client is based on the OpenVPN C++ reimplementation of the OpenVPN protocol (This was - required to allow OpenVPN Technologies, Inc to publish an iOS OpenVPN app). This client is the official client - of the OpenVPN technologies <p> OpenVPN Settings is the oldest of the clients and also a UI for the open - source OpenVPN. In contrast to OpenVPN for Android it requires root and does not use the VPNService API. It does - not depend on Android 4.0+ - + Multiple OpenVPN clients for Android exist. The most common ones are OpenVPN for Android (this client), OpenVPN Connect and OpenVPN Settings.<p>The clients can be grouped into two groups: OpenVPN for Android and OpenVPN Connect use the official VPNService API (Android 4.0+) and require no root and OpenVPN Settings which uses root.<p>OpenVPN for Android is an open source client and developed by Arne Schwabe. It is targeted at more advanced users and offers many settings and the ability to import profiles from files and to configure/change profiles inside the app. The client is based on the community version of OpenVPN. It is based on the OpenVPN 2.x source code. This client can be seen as the semi officially client of the community. <p>OpenVPN Connect is non open source client that is developed by OpenVPN Technologies, Inc. The client is indented to be general use client and more targeted at the average user and allows the import of OpenVPN profiles. This client is based on the OpenVPN C++ reimplementation of the OpenVPN protocol (This was required to allow OpenVPN Technologies, Inc to publish an iOS OpenVPN app). This client is the official client of the OpenVPN technologies <p> OpenVPN Settings is the oldest of the clients and also a UI for the open source OpenVPN. In contrast to OpenVPN for Android it requires root and does not use the VPNService API. It does not depend on Android 4.0+ Differences between the OpenVPN Android clients Ignoring multicast route: %s - Android supports only CIDR routes to the VPN. Since non-CIDR routes are almost never - used, OpenVPN for Android will use a /32 for routes that are not CIDR and issue a warning. - - Tethering works while the VPN is active. The tethered connection will NOT use the - VPN. - - Early KitKat version set the wrong MSS value on TCP connections (#61948). Try to enable - the mssfix option to workaround this bug. - - Android will keep using your proxy settings specified for the mobile/Wi-Fi connection when - no DNS servers are set. OpenVPN for Android will warn you about this in the log. -

When a VPN sets a DNS server Android will not use a proxy. There is no API to set a proxy for a VPN - connection. -

- - VPN apps may stop working when uninstalled and reinstalled again. For details - see #80074 - - The configured client IP and the IPs in its network mask are not routed to the - VPN. OpenVPN works around this bug by explicitly adding a route that corrosponds to the client IP and its - netmask - - Opening a tun device while another tun device is active, which is used for persist-tun - support, crashes the VPNServices on the device. A reboot is required to make VPN work again. OpenVPN for Android - tries to avoid reopening the tun device and if really needed first closes the current TUN before opening the new - TUN device to avoid to crash. This may lead to a short window where packets are sent over the non-VPN - connection. Even with this workaround the VPNServices sometimes crashes and requires a reboot of the device. - + Android supports only CIDR routes to the VPN. Since non-CIDR routes are almost never used, OpenVPN for Android will use a /32 for routes that are not CIDR and issue a warning. + Tethering works while the VPN is active. The tethered connection will NOT use the VPN. + Early KitKat version set the wrong MSS value on TCP connections (#61948). Try to enable the mssfix option to workaround this bug. + Android will keep using your proxy settings specified for the mobile/Wi-Fi connection when no DNS servers are set. OpenVPN for Android will warn you about this in the log.

When a VPN sets a DNS server Android will not use a proxy. There is no API to set a proxy for a VPN connection.

 + VPN apps may stop working when uninstalled and reinstalled again. For details see #80074 + The configured client IP and the IPs in its network mask are not routed to the VPN. OpenVPN works around this bug by explicitly adding a route that corrosponds to the client IP and its netmask + Opening a tun device while another tun device is active, which is used for persist-tun support, crashes the VPNServices on the device. A reboot is required to make VPN work again. OpenVPN for Android tries to avoid reopening the tun device and if really needed first closes the current TUN before opening the new TUN device to avoid to crash. This may lead to a short window where packets are sent over the non-VPN connection. Even with this workaround the VPNServices sometimes crashes and requires a reboot of the device. VPN does not work at all for secondary users. - "Multiple users report that the mobile connection/mobile data connection is - frequently dropped while using the VPN app. The behaviour seems to affect only some mobile provider/device - combination and so far no cause/workaround for the bug could be identified. " - - Only destination can be reached over the VPN that are reachable without VPN. - IPv6 VPNs does not work at all. - + "Multiple users report that the mobile connection/mobile data connection is frequently dropped while using the VPN app. The behaviour seems to affect only some mobile provider/device combination and so far no cause/workaround for the bug could be identified. " + Only destination can be reached over the VPN that are reachable without VPN. IPv6 VPNs does not work at all. Non CIDR Routes Proxy behaviour for VPNs Reinstalling VPN apps @@ -587,45 +376,24 @@ Remote networks not reachable Persist tun mode %s and later - Connections fails with SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure - - Newer OpenVPN for Android versions (0.6.29/March 2015) use a more secure default for - the allowed cipher suites (tls-cipher \"DEFAULT:!EXP:!PSK:!SRP:!kRSA\"). Unfortunately, omitting the less secure - cipher suites and export cipher suites, especially the omission of cipher suites that do not support Perfect - Forward Secrecy (Diffie-Hellman) causes some problems. This usually caused by an well-intentioned but poorly - executed attempt to strengthen TLS security by setting tls-cipher on the server or some embedded OSes with - stripped down SSL (e.g. MikroTik).\nTo solve this problem the problem, set the tls-cipher settings on the server - to reasonable default like tls-cipher \"DEFAULT:!EXP:!PSK:!SRP:!kRSA\". To work around the problem on the client - add the custom option tls-cipher DEFAULT on the Android client. - - This profile has been added from an external app (%s) and has been marked as not - user editable. - + Connections fails with SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure + Newer OpenVPN for Android versions (0.6.29/March 2015) use a more secure default for the allowed cipher suites (tls-cipher \"DEFAULT:!EXP:!PSK:!SRP:!kRSA\"). Unfortunately, omitting the less secure cipher suites and export cipher suites, especially the omission of cipher suites that do not support Perfect Forward Secrecy (Diffie-Hellman) causes some problems. This usually caused by an well-intentioned but poorly executed attempt to strengthen TLS security by setting tls-cipher on the server or some embedded OSes with stripped down SSL (e.g. MikroTik).\nTo solve this problem the problem, set the tls-cipher settings on the server to reasonable default like tls-cipher \"DEFAULT:!EXP:!PSK:!SRP:!kRSA\". To work around the problem on the client add the custom option tls-cipher DEFAULT on the Android client. + This profile has been added from an external app (%s) and has been marked as not user editable. Certificate Revocation List - Restarting OpenVPN Service (App crashed probably crashed or killed for memory - pressure) - + Restarting OpenVPN Service (App crashed probably crashed or killed for memory pressure) Importing the config yielded an error, cannot save it Search (Last dump is %1$d:%2$dh old (%3$s)) Clear log on new connection Connect Timeout - No allowed app added. Adding ourselves (%s) to have at least one app in the allowed - app list to not allow all apps - - OpenVPN for Android can try to discover the missing file(s) on the sdcard - automatically. Tap this message start the permission request. - + No allowed app added. Adding ourselves (%s) to have at least one app in the allowed app list to not allow all apps + OpenVPN for Android can try to discover the missing file(s) on the sdcard automatically. Tap this message start the permission request. Protocol Enabled - Preferred native ABI precedence of this device (%1$s) and ABI reported by native - libraries (%2$s) mismatch - - VPN permission revoked by OS (e.g. other VPN program started), stopping VPN - + Preferred native ABI precedence of this device (%1$s) and ABI reported by native libraries (%2$s) mismatch + VPN permission revoked by OS (e.g. other VPN program started), stopping VPN Push Peer info - Send extra information to the server, e.g. SSL version and Android version - + Send extra information to the server, e.g. SSL version and Android version Need %1$s Please enter the password for profile %1$s Use inline data @@ -635,39 +403,26 @@ Missing CA certificate Certifcate Revoke List (optional) Reread (%d) log items from log cache file - Even though Samsung phones are among the most selling Android phones, Samsung\'s - firmware are also among the most buggy Android firmwares. The bugs are not limited to the VPN operation on these - devices but many of them can be workarounded. In the following some of these bugs are described.\n\nDNS does not - work unless the DNS server in the VPN range.\n\nOn many Samsung 5.x devices the allowed/disallowed apps feature - does not work.\nOn Samsung 6.x VPN is reported not to work unless the VPN app is exempted from Powersave - features. - + Even though Samsung phones are among the most selling Android phones, Samsung\'s firmware are also among the most buggy Android firmwares. The bugs are not limited to the VPN operation on these devices but many of them can be workarounded. In the following some of these bugs are described.\n\nDNS does not work unless the DNS server in the VPN range.\n\nOn many Samsung 5.x devices the allowed/disallowed apps feature does not work.\nOn Samsung 6.x VPN is reported not to work unless the VPN app is exempted from Powersave features. Samsung phones No VPN selected. Default VPN - VPN used in places where a default VPN needed. These are currently on boot, for - Always-On and the Quick Settings Tile. - + VPN used in places where a default VPN needed. These are currently on boot, for Always-On and the Quick Settings Tile. Currently selected VPN: \'%s\' Reconnect Toggle VPN Connect to %s Disconnect %s - Enter the maximum time between connection attempts. OpenVPN will slowly raise - its waiting time after an unsuccessful connection attempt up to this value. Defaults to 300s. - + Enter the maximum time between connection attempts. OpenVPN will slowly raise its waiting time after an unsuccessful connection attempt up to this value. Defaults to 300s. Maximum time between connection attempts Waiting %ss seconds between connection attempt - - Networks more .. -> VPNS]]> + Networks more .. -> VPNS]]> Connection to OpenVPN closed (%s) Change sorting Sort Profiles sorted by last recently used Profiles sorted by name - Config uses option tls-remote that was deprecated in 2.3 and finally removed in - 2.4 - + Config uses option tls-remote that was deprecated in 2.3 and finally removed in 2.4 Behaviour on AUTH_FAILED Graph Use logarithmic scale -- cgit v1.2.3