OpenVPN for Android Server Address: Server Port: Shared Secret: Connect OpenVPN is connecting… OpenVPN is connected! OpenVPN is disconnected! openvpn.uni-paderborn.de 1194 File dialog Location folder can\'t be read! New Select File name: Cancel Save No Data #ffff0000 Error User Certificate LZO Compression No Certificate Client Certificate Client Certificate Key PKCS12 File CA Certificate Select Nothing selected Openvpn Logo Copyright © 2002–2010 OpenVPN Technologies, Inc. <sales@openvpn.net>\n "OpenVPN" is a trademark of OpenVPN Technologies, Inc.\n Copyright 2012\nArne Schwabe <arne@rfc2549.org> Source code and issue tracker available under http://code.google.com/p/ics-openvpn/ The program uses the following components. See the source for full details on the licenses File Dialog based on work by Alexander Ponomarev" Copyright © 1996 – 2011 Markus Franz Xaver Johannes Oberhumer This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit\n Copyright © 1998-2008 The OpenSSL Project. All rights reserved.\n\n This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)\n Copyright © 1995-1998 Eric Young (eay@cryptsoft.com) All rights reserved. OpenVPN File Dialog LZO OpenSSL About About Openvpn for Android List of all configured VPNs All your precious VPNs Type PKCS12 Password FileTypeIcon Select… Select… Nothing Selected TLS Auth Show advanced settings Use TLS Authentication TLS Direction VPN List Add OpenVPN Config Saved VPN Configs Enter IPv6 Address/Netmask in CIDR Format (e.g. 2000:dd::23/64) Enter IPv4 Address/Netmask in CIDR Format (e.g. 1.2.3.4/24) IPv4 Address IPv6 Address Enter custom OpenVPN. Use with great care. Also note that many of the tun related Openvpn settings cannot be supported by design of the VPNSettings. If you think an important option is missing contact the author Username Password For the static configuration the TLS Auth Keys will be used as static keys. Configure the VPN Add Profile Enter a name identifying the new Profile Duplicate Profile Name Profile Name No User certificate selected. No error found Error in Configuration An error has been found in your VPN configuration: Cannot parse the IPv4 address Cannot parse the custom routes Leave empty to query on demand OpenVPN Shortcut Connect to VPN Profile specified in shortcut not found Random Host Prefix adds 6 random chars in front of hostname Enable Custom Options Specify custom options. Use with care! Route rejected by Android Disconnect clear log Cancel Confirmation Disconnect the connected VPN/cancel the connection attempt? Remove VPN Checks whether the server uses a TLS Server Certificate Except TLS Server Checks the Remote Server Certificate CN against a String Certificate Hostname Check Enter the string against which the remote Server is checked. Openvpn will use prefix matching. "Server" matches "Server-1" and "Server-2"\nLeave empty to check the CN against the server hostname. Remote Hostname(CN) Enables the TLS Key Authentication TLS Auth File Requests IP addresses, routes and timing options from the server. No information is requested from the server. Settings need to be specified below. Pull Settings DNS Override DNS Settings by Server Use your own DNS Servers searchDomain DNS Server to be used. DNS Server to be used. DNS Server Secondary DNS Server used if the normal DNS Server cannot be reached. Backup DNS Server Ignore pushed routes Ignore routed pushed by the server. Redirects all Traffic over the VPN Use default Route Enter custom routes. Only enter destination in CIDR format. "10.0.0.0/8 2002::/16" would direct the networks 10.0.0.0/8 and 2002::/16 over the VPN. Custom Routes Log verbosity level Allows authenticated packets from any IP Allow floating server Custom Options Edit VPN Settings Remove the VPN Profile %s? " On some custom ICS images the permission on /dev/tun might be wrong, or the tun module might be missing completly" Opening tun interface failed badly. "Error: " Clear info Show connection details Last interface configuration from Openvpn: Local IPv4: %1$s/%2$d IPv6: %3$s MTU: %4$d DNS Server: %s DNS Domain: %s Routes: %s Routes Ipv6: %s Got interface information %1$s and %2$s, assuming second address is peer address of remote. Using /32 netmask for local IP. Mode given by openvpn is \"%3$s\". Cannot make sense of %1$s and %2$s as IP route with CIDR netmask, using /32 as netmask. Corrected route %1$s/%2$s to %3$s/%2$s Cannot accces the Android Keychain Certificates. If you restored a backup of the app/app settings reselect the certificate to recreate the permission to access the certificate. %1$s %2$s Could not write log contents to file Send Logfile Send ICS Openvpn log file Copied log entry to clip board Tap Mode Tap Mode is not possible with the non root VPN API. Therefore this application cannot provide tap support Again? Are you kidding? No tap mode is really not supported and sending more mail aksing if it will be supported will not help. A third time? Actually one could write a a tap emulator based on tun that would add layer2 information on send and strip layer2 information on receive. But this tap emulator would have to implement also ARP and possible a DHCP client. I am not aware of anybody doing any work in this direction. Contact me if you want to start coding on this. FAQ frequently asked questions and some adivce Copying log entries To copy a single log entry press and and hold on the log entry. To copy/send the whole log use the Send Log option. Use the hardware menu button if not visible in the gui. Shortcut to start You can place a shortcut to start OpenVPN on your desktop. Depending on your homescreen program you have to add a shortcut or a widget. Your image does not support the VPNService API,sorry :( Encryption Enter Encryption method Enter the cipher key for openvpn. Leave empty to use default cipher Authentication/Encryption File Explorer Inline File Import Error importing File Could not import File from Filesystem [[Inline file data]] Refusing to open tun device without IP information Import Profile from ovpn file Import Could not read Profile to import Error reading Config file add Profile Trying to read file: %1$s Could not find file %1$s mentioned in the imported Config file Importing config file from source %1$s Your config file specified a pkcs12 file. Please import the file by selecting select in the Basic Settings configuration of the converted VPN Your configuration had a few configuration options that could be parsed. These options were added as custom configuration options. The custom configuration is displayed below: Done reading config file. Do not bind to local address and port No local binding Please not that the config importer is an experimental feature. If it does not work for you or you think that things could be done better please drop me a email. Import configuration file Security considerations "As openvpn is security sensitive a few notes about security are sensible. All data on the sdcard is inherently unsecure. Every app can read it (for example this program requires no special sd card rights). The data of this application can only be read by the application itself. By using the import option for cacert/cert/key in the file dialog the data is stored in the vpn profile. The vpn profiles are only accessable by this application. (Do not forget to delete the copies on the sd card afterwards). Even though accessible only by this application the data is stil unecrypted. By rooting the telephone or other exploits it may be possible to retrieve the data. Saved passwords are stored in plain text as well. For pkcs12 files it is highly recommended that you import them into the android keystore." Import Error showing certificate selection Got an excption trying to show the Android 4.0+ certificate selction dialog. This should never happens as this a standard feature of Android 4.0+. Maybe your Android ROM support for certificate storage is broken IPv4 IPv6 Waiting for state message… General Settings imported profile imported profile %d Broken Images <p>Offical HTC images are known to have a strange routing problem causing traffic not to flow through the tunnel (See also <a href=\"http://code.google.com/p/ics-openvpn/issues/detail?id=18\">Issue 18</a> in the bug tracker.)</p><p>The offical SONY images from Xperia arc S and Xperia Ray have been reported to be missing the VPNService completly from the image. Other Sony images may be affected as well. (See also <a href=\"http://code.google.com/p/ics-openvpn/issues/detail?id=29\">Issue 29</a> in the bug tracker.)</p><p>On custom build images the tun module might be missing or the rights of /dev/tun might be wrong. On the experimental CM9 Defy image a <i>chown system /dev/tun</i> is needed to make the VPNService API work.</p> The username must not be empty.