14
edits
Changes
From Amahi Wiki
→OpenVPN for Android Client Configuration
{{NeedsUpdate}}<!--Tested with Nexus 6 on 5.1.1 working however instructions need bringing upto date--> =OpenVPN for Android Client Configuration=This wiki has been updated for use with OpenVPN for Android v0.6.73 without Android Root access. Older versions of the wiki are maintained below. It is presumed that you have installed the [http://www.amahi.org/apps/openvpn OpenVPN] server app on your HDA and [https://wiki.amahi.org/index.php/OpenVPN configured] it properly. # Download the (3) certificate files. They can be found on the [[OpenVPN Client Certificates]] download page. ##If downloading from link above directly to Android Device, Google translate may ask if you wish to translate the document, DO NOT allow any translation to occur.##If downloading to a computer first, the key is often downloaded as xxx.key.txt. You must remove the .txt extension.# Launch the OpenVPN app, select Add Profile (+), give it a name and it will bring you to the Basic configuration tab <br />[[File:NoVPNDefined.png | 180px]][[File:AddProfile.png | 180px]]# In the Basic tab, Select "User/PW + Certificates" from the pull down menu of Types <br />[[File:TypeAndCerts.png | 180px]]# In turn, select the CA Certificate, Client Certificate and Client Key files that you downloaded to your device <br />[[File:CertsAdded.png | 180px]]# Username refers to a configured User of the Amahi server you are trying to connect to. Leave password field empty to be prompted to enter a password every time. #Swipe left or right to change tabs in the Configuration page or select them directly from the tab bar.#From the Server List tab, enter your server Dynamic DNS name found on the [http://www.amahi.org Control Panel] - xxx.yourhda.com <br />[[File:serverDNSname.png | 180px]]#From the Authentication/Encryption tab, select Remote Certificate Subject and look closely for the pull down arrow in the open window, select RDN Prefix <br />[[File:SubjectPulldown.png | 180px]]#In the Remote Certificate Subject box change the data field to read Amahi-Server-OpenVPN <br />[[File:HostnameSubject.png | 180px]]#Configuration is complete, hit the android device's back button to return to the OpenVPN main screen. This will show your new profile, and if you are NOT connected to your local network (turn off Wi-Fi and use cellular data), you will be able to select your profile and it will connect. A secure connection will be shown as a key symbol next to the cellular signal strength bar. <br /> = VPN Client - Android - HTC Android G1/Dream = '''NOTE:''' [https://play.google.com/store/apps/details?id=de.blinkt.openvpn&hl=en OpenVPN for Android] works with the certificates below for ICS 4.0 or greater without rooting your device. There is no additional configuration required to the HDA or your device (Tested on HTC One X and Samsung Tab 2 also on HTC One V). For Sony Xperia ZR (and I suspect most other Android devices) the following was necessary: # Download the certificates. They can be found on the [[OpenVPN Client Certificates]] download page.# Launch the OpenVPN app, Add Profile and go to the Basic configuration page<br />[[File:OpenVPNAndroid-1-AddProfile.png|180px]] [[File:OpenVPNAndroid-2-ChooseBasic.png|180px]]# Enter your server address - the Dynamic DNS name works for me, I guess the fixed IP address would as well<br />[[File:OpenVPNAndroid-3-EnterServerAddress.png|180px]]# Select "User/PW + Certificates" from the list of Types (the certificates alone are not enough)<br />[[File:OpenVPNAndroid-4-SelectType.png|180px]] [[File:OpenVPNAndroid-5-SelectedType.png|180px]]# In turn, select the CA Certificate, Client Certificate and Client Key files that you downloaded to your device; note that the app will disable the file type it doesn't think will work so beware if you rename these files<br />[[File:OpenVPNAndroid-6-SelectCertKey.png|180px]]# Enter your username - a general user with access to the shares and apps on your HDA<br />[[File:OpenVPNAndroid-7-EnterUsername.png|180px]]# Go back to the list of profiles and click on this new profile to start connecting to your HDA: you will be alerted to the fact that OpenVPN for Android can intercept network traffic and asked to trust the application (ensure that your device is not already connected to the same network - test from a different location or turn of wifi and use your mobile data connection)<br />[[File:OpenVPNAndroid-8-TrustApplication.png|180px]]# Enter your password - you can decide whether or not the application should save the password<br />[[File:OpenVPNAndroid-9-EnterPassword.png|180px]]# Watch for connection messages to go past as Android notifications and you will also see the OpenVPN log<br />[[File:OpenVPNAndroid-A-Connecting.png|180px]]# Once you get a successful connection you will see a key in the notification bar; selecting this notification will show the status of the connection ind give you some options for working with it<br />[[File:OpenVPNAndroid-B-Connected.png|180px]]# You should now be able to open your favourite app used to access files on your HDA, be that the Amahi app, Plex client, OwnCloud, etc. (note that some of these apps may need to be switched between Local and Remote connection type)
This guide is written for a HTC Android G1/Dream phone rooted with Cyanongenmod 5.
Then, from the terminal run
You will be asked for a export password for the certs.p12 file - enter amahi twice.
To automate this process, paste the code from [http://wiki.amahi.org/images/f/f9/Automate.script automate.script] in your favorite editor. Save it & run it with
sh <filename>
You should now have a certs.p12 file in your /home/username/openvpn folder, copy this certs.p12 file to the root of your sdcard on the Android phone.
Menu -> Save
You should now see an Amahi entry, click on this to connect, . It may ask you for the certificate access password. Then it may ask for your username and password that you use to loginon your HDA. You should see that you are connected, enjoy your VPN connection to your HDA server.
= VPN Client - Android 2.2 - DROID X (Verizon Wireless) =Contact me in the forums if you need help setting this up. If you have a later version of Android such as Gingerbread (Android 2.3) then you can't use this tutorial for setting up openvpn. You can however use the openvpn configurations if your phone is already set up with openvpn.
[[User:Sag47|Sag47]] 00:51, 5 April 2011 (PDT)
* Set "Load module using" to insmod.
* Set "Path to tun module" to /system/lib/modules/tun.ko
Reboot your phone and test the configurations. It should be a one click process within the "OpenVPN Settings" app.
[[Category: VPN]]
