SecureFishNet

Can't get it to work, it never connects. Strangely enough, it works perfectly through openvpn via the command-line. How do I troubleshoot this?

Sat, 2014/08/16 - 19:06

Cert and keys in config need to be with full path (something like /home/nemo/cert.crt ). If those are ok you could send me that config file, just remove all the info you don't want to give me. Or you could, if you are familiar with systemd, check logs of OVPNdaemon.service.

GuSec

Sun, 2014/08/17 - 11:02

Thank you, it now works like a charm!

I didn't realize the application needed full paths since relative paths have always worked in OpenVPN configs for me before; it wasn't obvious to me at all that this was the problem.

rob_k

Sat, 2014/08/16 - 00:34

It works, and far easier than I expected!

The original description on TMO about setting up OpenVPN didn't work, and I was a little put off by all the config files, certs etc. But SecureFishNet worked like a dream. What I did - maybe handy for others who are (like me) no linux die-hards:
Went to VPN Gate, http://www.vpngate.net/en/
Downloaded the two .ovpn files for udp and tcp (udp is preferred, tcp will work when udp won't), copied them to my Jolla in /home/nemo. (I use Bitvise to connect via SSH, it provides an SFTP window)
Chose "New connection", pointed one of the files, Username vpn, no passwords, and it works.

Thank you korppi!

inte

Wed, 2014/06/25 - 21:15

I expierenced some funny behavior.

One config (using certs) works just fine, while another config (using private key) doesn't work at all, while both work on the command line.

I can't figure out if and to where SecureFishNet is loggin (not to syslog obviously).

I tried starting SecureFishNet from the command line where it displays a "connection refused" error for the buggy connection. Nothing is displayed for the working connection.

The exact error message is:

[D] VpnExec::read_status:126 - Error: "Connection refused"

As mentioned above, this config works just fine (when executed as root) on the commandline. I also checked the file access rights to config and key file which are all the same as for the other connection that works in SecureFishNet. Is there a way to increase verbosity or do you have any idea which could cause this behaviour?

Thanks!!

EDIT:

Just changed the not-working-by-now (key-based) connection to cert-authentification, and now it works fine as well. Maybe SecureFishnet has problems with key-based connections?

Mon, 2014/06/30 - 10:03

Securefishnet just passes config file to openvpn's command line and does not try to understand it...

That error message comes when the gui tries to connect to openvpn's management port and openvpn is refusing. That has never happened to me. It's maybe timeout thing or...

Well I will release next version to fix minor things soon anyway so I'll increase the timeout and lets start with that.

inte

Mon, 2014/06/30 - 12:23

According to https://openvpn.net/index.php/open-source/documentation/miscellaneous/79-management-interface.html

"The static protocol differs from the dynamic protocol in that the challenge question and response field is given to the user in the initial username/password dialog, and the username, password, and response are delivered back to the server in a single transaction."

I think your interface can probably not handle that properly yet.

Mon, 2014/06/30 - 12:42

Well from error message it does not get anywhere near to the point where something could get handled and openvpn just stops responding... So I am thinking that some switches are missing from commandline or something like that. Right now I have no way of testing that and no time do yet another server config... But I'll put that on my TODO list.

inte

Mon, 2014/06/30 - 12:55

Don't worry. it's working for me now (as I wrote in my initial post). I discarded my static config already anyways.

It was just a guess that maybe your script couldn't handle the static reply and therefore timed out. Thanks for your work!

Mon, 2014/06/30 - 13:19

If you can give me the server config that is not working, that would help. Just remove all ip:s and info you don't like to give. I don't like bugs in my programs ;-).

asys3

Mon, 2014/04/14 - 03:57

Great work - works like a charm.
But the configured connection doesn't survive a restart of the app.
So When I stop the connection and quit the app by swipe down -after a restart the main view is empty.
My configured connection isn't preserved.
Seems to be that I'm the only person having this issue otherwise someone should it posted it here already.
I'm using 0.6-1 and 1.0.5.16.
asys3

Mon, 2014/04/14 - 13:25

Try new version.

Fri, 2014/04/11 - 10:22

I was wondering if you could add option to add custom scripts before and after establishing connection. So one could e.g. do some automated tasks. In my case it would help me, because my vpn needs a knock on the door in order to open firewall.

Sun, 2014/04/13 - 16:07

If executing script as user nemo is enough, I can put that in next version. But not sure about automated part yet.

Mon, 2014/04/14 - 01:15

yeah. this would be sufficient and awesome. BTW, the latest update now shows two options after establishing connection: 'Add default gw' and 'update dns'. However, I can't selext/activate any of them and my manual update for resolv.conf is still needed.

Mon, 2014/04/14 - 13:24

This should be fixed.

And script option added to push up menu. Not tested. Please report if working or not.

Script should be named as it says in push up menu.

Tue, 2014/04/15 - 10:16

DNS works fine now. Script execution works as well. Allthough you can't see result/end of script. But nevertheless really great now already. Thank you very much.

Ray_Ven

Wed, 2014/04/02 - 23:44

hmm - won't work. Key etc is in same directory... Do I have to set something special somewhere?

red aboutthe path right now... will look into that

Yaaaaay!!! Wooohoooo!!! VPN!!!!

Manankanchu

Wed, 2014/04/02 - 23:04

Hi,

- do I have to copy ca.crt to a certain path ?

- any chance to get a version where I can enter username/password in GUI ?

Matthias

Thu, 2014/04/03 - 00:00

Certs and keys need full path in config file.

Username/password thing is in todolist... But I have to do other things before it...

Manankanchu

Thu, 2014/04/03 - 00:49

Thanks for your help - entered full paths and set up username/password file

Thanks for a great App !!!

Matthias

Ray_Ven

Thu, 2014/04/03 - 22:59

I'm testing it atm (4.2). Another question though: is this FOSS (Free open source software)

Thank you for the quick work though! Really awesome!

Ray_Ven

Thu, 2014/04/03 - 23:01

IMHO OpenVPN should be open - especially for security reasons :-)

I'd love to donate for an free jolla openvpn client

Thu, 2014/04/10 - 12:05

Sorry for not replying to this. Yes I can understand your worry. And I have no problems in releasing the code later. It is just not made in a way that I am happy with it right now. This is my first little app that I have released ever. And the source is full of my experiments that are not compiled in the version I made just for the users of SailfishOs.

OpenVPN it self is downloaded from default repos configured in SailfishOs. I have nothing to do with it. I ask package manager to get it put nothing else. My program just passes configfiles name and some needed switches to openvpn program and parses its responses. And puts routes little differently from default openvpn style because Sailfishs connection manager is pain in hmm... Is fast to replace default route ;-)

Feathers_McGraw

Fri, 2015/05/15 - 22:20

Hi,

Any update on this? I'd be curious to see what you've done so that I can learn from it. I understand how you feel about releasing your code (I felt the same about my projects at first) but I think people are more likely to just be grateful for the source than they are to judge you for messy code or whatever. You may also find that you get some useful contributions from people!

Thanks

Sat, 2015/05/30 - 12:21

Sorry no updates on releasing source...

It's beyond messy code as this was my first app on any platform with Qt and QML.

But the goal always was releasing the source and I hope that I get there some day.

Tue, 2014/04/01 - 15:11

Great work! Thanks for the effort. I got it configured and it connects with a charm. Unfortunately that's it. It's just connected but afterwards I don't have access to servers within VPN because DNS does not work. Somehow the routing and DNS configs provided by OpenVPN-Server are not considered. Do you have some ideas on how to investigate that further? As a side-note: I use exactly the same config I used on my N9 (meego harmattan) and I had no problems with it.

Info: using latest 0.2.3 versions

Wed, 2014/04/02 - 15:12

Try version 0.4-1.

Wed, 2014/04/02 - 18:35

Thanks for the update (updated to 0.4.2). Unfortunately it still doesn't seem to work. In your description of the app you wrote "(Only if you click switch about DNS...)", but I can not find any such switch. Where is it?

After connection I checked my /etc/resolv.conf and it still had the default nameserver entries (i.e. 127.0.0.1 for IPV4 an ::1 for IPV6). Any suggestion?

Wed, 2014/04/02 - 21:44