SecureFishNet

Rating: 
4.885715
Your rating: None Average: 4.9 (35 votes)

SecureFishNet is OpenVPN client manager for
Sailfish. You can manage openvpn connection with it. It requires
Openvpn and that will be downloaded from repository. (If not you can
do it with “pkcon install openvpn”).

You need normal openvpn configuration file.

This package contains daemon and securefishnet-gui.

PushUpMenu:

- “flush”. In case of something broke routing and network does not work.

This reverses every change this program made to routing. If network still does not work after this, reboot is your friend.

 

IPv6 does not work, yet.

 

 

 

Application versions: 
AttachmentSizeDate
File securefishnet-1.5-3.armv7hl.rpm78.1 KB26/08/2015 - 13:12
File securefishnet-1.5-4.armv7hl.rpm77.79 KB26/08/2015 - 20:14
File securefishnet-1.6-2.armv7hl.rpm111.93 KB22/10/2015 - 16:57
File securefishnet-1.6-2.i486.rpm120.59 KB22/10/2015 - 17:35
File securefishnet-1.6-3.armv7hl.rpm112.33 KB28/10/2015 - 17:26
File securefishnet-1.6-3.i486.rpm120.95 KB28/10/2015 - 18:21
File securefishnet-1.6-4.armv7hl.rpm112.34 KB11/11/2015 - 13:10
File securefishnet-1.6-4.i486.rpm120.94 KB11/11/2015 - 13:10
File securefishnet-1.6-5.armv7hl.rpm112.38 KB16/11/2015 - 09:42
File securefishnet-1.6-5.i486.rpm120.93 KB16/11/2015 - 09:42
File securefishnet-1.9-2.armv7hl.rpm139.88 KB10/04/2016 - 20:56
File securefishnet-1.9-2.i486.rpm151.24 KB10/04/2016 - 20:56
File securefishnet-1.9-5.armv7hl.rpm140.77 KB12/05/2016 - 15:02
File securefishnet-1.9-5.i486.rpm151.47 KB12/05/2016 - 15:02
File securefishnet-2.0-5.i486.rpm150.52 KB20/09/2016 - 16:11
File securefishnet-2.0-5.armv7hl.rpm138.31 KB20/09/2016 - 16:11
File securefishnet-2.0-7.armv7hl.rpm139.05 KB20/10/2016 - 14:01
File securefishnet-2.0-7.i486.rpm151.95 KB20/10/2016 - 14:01
File securefishnet-2.1-2.armv7hl.rpm139.59 KB30/08/2017 - 17:03
File securefishnet-2.1-2.i486.rpm151.33 KB30/08/2017 - 17:03
File securefishnet-2.1-4.armv7hl.rpm144.66 KB17/06/2018 - 12:35
File securefishnet-2.1-4.i486.rpm156.96 KB17/06/2018 - 12:35
File securefishnet-2.1-5.armv7hl.rpm144.81 KB12/09/2018 - 20:32
File securefishnet-2.1-5.i486.rpm157.23 KB12/09/2018 - 20:32
Changelog: 

2.1-5

  • Fix for changes in SFOS 2.2.1.18 ( UI opened twice because of the way autostart was made (used when VPN is selected to start at boot) )

2.1-4

  • fixes for 2.2.0.29
  • fix for default gateway not persistent in connection change

2.1-2

  • fixes for 2.1.1.26 (not tested with earlier OS versions)

2.0-7

  • bug fixes
  • ui tweaks
  • connection changing logic improved

2.0-5

  • bug fixes
  • ui tweaks
  • more than 3 connections or conffiles
  • rewrite of connection changing logic ( again )

1.9-5

  • bug fixes

1.9-2

  • lots of new features (check config page)
  • rewrite of connection changing logic ( only tested with SFOS 2.0.1.7 )

1.6-5

  • fixed bug with routing not always working as it should

1.6-4

  • bug fixes

1.6-3

  • bug fixes

1.6-2

  • Lots of minor tweaks
  • UI fixes
  • more icon sizes = bigger rpm...
  • i486 build (not tested on real device but runs fine on emulator)

1.5-4

  • and more old bugs fixed... huh...

1.5-3

  • more bug fixes

1.5-2

  • bug fixes
  • You should reboot AFTER installing this as there might be some unwanted leftovers (in routing table) from earlier versions.

1.5-1

  • bug fixes
  • tcp connection handling improvements and other internal changes

1.4-4

  • bug fixes

1.4-2

  • new filepicker
  • uses less memory
  • loads faster

1.3-2

  • bug fixes
  • better roaming logic

1.2-4

  • Some roaming fixes
  • UI fixes
  • "Static Key" in config dialog might help if connection doesn't start (at all)

1.2-2

  • Roaming logic is removed from UI and daemon handles that now so you can close UI and it should still roam
  • bug fix for routing

1.0-4

  • bug fixes

1.0-2

  • fix for minor bug in roaming
  • less memory used
  • fix for gw not being set with newer openvpn

1.0-1

  • UIs internal logic rewrite
  • Added connection detection
  • Fixed reconnect with openvpn
  • Added restart of connection when changing networks ( wlan <-> mobile )
  • After UI start status of connection is now shown (If connection is/was up). Roaming logic is in UI so changing networks won't work when UI is closed. 

0.9-5

  • ui fixes

0.9-3

  • ui fixes

0.8-5

  • more bug fixes

0.8-4

  • fixes bug: dns forwarding in android apps

0.8-2

  • MicroSD button in filepicker might actually work now ;-)
  • Wait longer for response from openvpn

0.8-1

  • Landscape

0.7-2

  • Bug fixes

0.7-1

  • Small UI improvements
  • Encryption is now used on username and passwords when saved ( light encryption only )

0.6-3

  • Bug fixes

0.6-2

  • Bug fixes
  • You can now execute script with PushUpMenu ( user nemo )

0.6-1

  • Support for username/password
  • Rewrite of everything but UI

0.4-2

  • Minor bug fix

0.4-1

  • Added support for password encrypted keys ( in config )
  • Bug fixes

0.2-3

  • Bug fixes

0.2-2

  • Bug fixes
  • UI improvements

0.1-2 - initial release

Comments

ade's picture

Three and a half years ago you claimed you where going to release the code after some cleanup. But the app is still that closed that for some reason even the plain QML source is wrapped in the binary. It's not a matter of trust from my side, but I would like to be able to modify a program when needed.
It's your choice to opensource it or not, but at least say that you are not going to opensource it if you don't want to.

The latest issue with SailfishOS 2.2.0.29 (and not being able to do anything about it) made me move away to another vpnclient gui that I can modify. A pity, because I liked securefishnet as an app.

korppi's picture

I did say that I would opensource this but I have no time for this app anymore, except for fixing broken things.

Thing is this apps daemon part is far more complex than necessery and full of experinments, just because I wanted practice on multithreaded server things and thus would need full rewrite and I simply don't have time for it.

So I'm not going to opensource this anytime soon, if ever and I should have said that sooner, sorry.

DarkTuring's picture

Best app in Sailfish, since current SFOS still doesnt support all Data VPN secure connection as Securefishnet does.

korppi's picture

Thanks

cvp's picture

Does the app work with SFOS 2.2.0.29? Somehow I can not connect anymore. I reflashed the Sony. But did not bring anything. Another users has the same problem.

korppi's picture

Openvpn in sailfishos was updated to new version and it changed some commandline flags.

Fixed in new version.

And thanks for reminding me, I forgot to release fixed version.

PizzaProgram's picture

Dear Korppi :)

 Thank you VERY much for this great app!

Sailfish's default OpenVPN GUI does NOT work for me :( ... only typing into a terminal window manually every time my phone re/starts.
But your program WORKS! Congratulation, nice work. :)))

The only "tiny" problem is:
 - It forces ALL internet connections to go through the established VPN. (By setting default gateway to it.)
 - But we don't want that! Not by default, not at all, because it stops internet to work.
(We just want to reach our clients securely through our OWN VPNserver.)
So currently we have 2 choices:
 - Connect to VPN >> but everything else stops working (no email notifications, no Repos, No browsing...)
 - Stop VPN + Flush >> everything works again

I see there is a button: Default GW to VPN
1.) if I turn it off >> programs get internet again, but VPN isn't working any more
2.) if I turn it ON again >> VPN ok, internet Not ok.

So HOW do I prevent your app using the VPN as "default GW "?
 (Looked into OVPNdaemon.service file too, but found nothing how turn it off by default.)
korppi's picture

Default gateway comes from openvpn server, so if you have access to it you can turn it off.

There was bug in default gw handling thou and every time connection was changed it broke...

Now you only need turn it off once. (on applaunch) . So no setting yet but maybe some day I get there.

Sorry for very late reply.

DarkTuring's picture

When searching and selecting new VPN profile please maintain last known VPN connection until a new connection is chosen.

 

 

 

Currently as soon as you start browsing through VPN profiles it disconnects current VPN connection. Which makes it less secure during switching since you dont always want to pick the next connection but a very specific country connection for example.

 

 

 

This would be a usability and security enhancement amd should be fairly easy to implement!?

korppi's picture

There can be only one was the design decision. ;-)

And no time for fixing it. Sorry.

articice's picture

Do I need to setuid the openvpn executable or something? It works by hand from devel-su, but doesn't from this app.

ps: I also need to run "modprobe tun" as root first :(

korppi's picture

No you shouldn't need to do anything special to get it working. But if you are using some ported devices or Jollas tablet I can't really test on those.

IPv6 does not work and I don't have time to make it work, If it's that...

Or you have certs and keys in places that for some reason are not found or there is permission problem.

Or half broken conffile because only thing this app checks is if it is tun or tap interface what needs to be created.

But you provided no logs or output from openvpn so this is just guess...

If you need "modprobe tun" that is device adaptation problem and nothing to do with this app... But you can fix that by adding file "/etc/modules-load.d/tun.conf" with the content "tun" and it is loaded when booting.

DarkTuring's picture

In most uptodate version and SFOS 2.0.4.14 securefisnet randomely switches on DNS search through VPN even though i had selected it off. I want the option permanently off but when launching some apps Android or Sailfish it reverts to on. Please fix.

korppi's picture

Well very late reply ...   ;-)

It is override switch what is below the start/stop button NOT a setting (and thats is why it is where it is) and it does work until you push STOP and then reverts to whatever the server tells it to do.

Maybe I make it config switch some day but for now it is meant as short term override.

If you see some other behavior then something is killing the daemon for some reason.

DarkTuring's picture

Ok thank you for the reply.

ergo's picture

Hello,

I tried to install secureFishNet on my Jolla Phone. Unfortunately it failed with a "repo-not-available" status. It say further "'./core/armv7hl/openvpn-2.3.6-1.4.1.armv7hl.rpm' not found on medium 'https://release.jolla.com/releases/2.0.4.14/jolla/armv7hl/'

What went wrong?

korppi's picture

Try "pkcon refresh" and then install this app again. Version of openvpn from Jolla should be 2.3.6-1.3.18 ... so it can't find 2.3.6-1.4.1 if it's not there

k0stek's picture

Excellent job, first try 100% success, what´s what i´ve needed.

eson's picture

Hi,
I can't make SecureFishNet work with https://ovpn.se. I can connect via command line, so I know the service works, but it would help a lot to have it working via your gui. I think one problem is that I can't browse /etc/openvpn/, where ovpn.se wants me to put config files. Can you help please? Unfortunately the gui who's running the vpn service, is at no help.

korppi's picture

Config files are in /etc by default in linux systems, but nothing prevents you placing them somewhere else.
There is no reason that they have to be there.

There was bug with apps file browser. Fix for the bug is in version 2.0-5. :)

eson's picture

Thanks! Works perfect after file browser fix. Great app! :)
Couldn't make it work any place else than /etc/openvpn. Guess I would have to rewrite config file for other directory.

korppi's picture

Ok, so conf file was written with absolute file paths... Not very nice way of doing it... ;-)
Good that you got it working anyway.

vm5's picture

Very good app! Maybe I'm wrong but I'm not able to set more than 3 different Vpn servers.

korppi's picture

You can't set more than 3 vpn servers right now. But I am working on it to support more.

vm5's picture

Ok, thank You.

kaulian's picture

Thanks for the new release and the "autoconnect on data or wifi" nice feature

sebsikora's picture

Hi, problem here, and fix.

(apologies if this appears twice, buggy connection)

- Couldn't connect to Mulvad VPN using SecureFishNet.

- Tried using openvpn from command line - didn't work - couldn't find auto-resolv-conf

- Found this post - https://talk.maemo.org/showthread.php?t=92276 - in which author describes process for setting up connection using openvpn. Points out that once following the steps to copy the resolv updater scripts into the correct location, their filenames may not match those that appear in your VPN config file.

- I checked, mine did not. I edited the file as stated in the post and openvpn connection then worked from command line.

- I reopened SecureFishNet and could now connect in this manner also.

Happy hunting.

korppi's picture

You should NOT use any up/down/resolver-scripts. And config that does not work with openvpn directly is likely to fail(because openvpn is used here too).

You really should remove that resolv-updater from your config because sailfishOS's connectionmanager(=connman) really hates when somebody changes that file(/etc/resolv.conf) and connection sometimes stops working after that. And I mean all connections to anywhere.

But nice that you found temp fix...

sebsikora's picture

Do you mean that the openvpn config should contain no references to the client up and down scripts at all? From a fresh install Openvpn would not connect, with the original paths in it's config. If I simply remove the references, rather than 'correct' them, it should work?

korppi's picture

I mean in context of sailfish or any other system which is controlled by some kind of network manager, in this case connman. You should NOT use any of those scripts which do something to network connection. It is just generally bad idea, but if know what you are doing then...

So just remove or comment out the lines in config unless you absolutely need them. Or something strange might happen... Or not ;-)

Pages