SecureFishNet

Rating: 
4.892855
Your rating: None Average: 4.9 (28 votes)

SecureFishNet is OpenVPN client manager for
Sailfish. You can manage openvpn connection with it. It requires
Openvpn and that will be downloaded from repository. (If not you can
do it with “pkcon install openvpn”).

You need normal openvpn configuration file.

This package contains daemon and securefishnet-gui.

PushUpMenu:

- PushUpMenu has function to prevent deeper device sleep.

If you have difficulties keeping the connection up or it freezes, use that.

Don't use it unless you absolutely need it. It will drain battery.

- And there is “flush”. In case of something broke routing and network does not work.

This reverses every change this program made to routing. If network still does not work after this, reboot is your friend.

 

IPv6 does not work, yet.

 

 

 

Application versions: 
AttachmentSizeDate
securefishnet-1.5-3.armv7hl.rpm78.1 KB26/08/2015 - 13:12
securefishnet-1.5-4.armv7hl.rpm77.79 KB26/08/2015 - 20:14
securefishnet-1.6-2.armv7hl.rpm111.93 KB22/10/2015 - 16:57
securefishnet-1.6-2.i486.rpm120.59 KB22/10/2015 - 17:35
securefishnet-1.6-3.armv7hl.rpm112.33 KB28/10/2015 - 17:26
securefishnet-1.6-3.i486.rpm120.95 KB28/10/2015 - 18:21
securefishnet-1.6-4.armv7hl.rpm112.34 KB11/11/2015 - 13:10
securefishnet-1.6-4.i486.rpm120.94 KB11/11/2015 - 13:10
securefishnet-1.6-5.armv7hl.rpm112.38 KB16/11/2015 - 09:42
securefishnet-1.6-5.i486.rpm120.93 KB16/11/2015 - 09:42
securefishnet-1.9-2.armv7hl.rpm139.88 KB10/04/2016 - 20:56
securefishnet-1.9-2.i486.rpm151.24 KB10/04/2016 - 20:56
securefishnet-1.9-5.armv7hl.rpm140.77 KB12/05/2016 - 15:02
securefishnet-1.9-5.i486.rpm151.47 KB12/05/2016 - 15:02
securefishnet-2.0-5.i486.rpm150.52 KB20/09/2016 - 16:11
securefishnet-2.0-5.armv7hl.rpm138.31 KB20/09/2016 - 16:11
securefishnet-2.0-7.armv7hl.rpm139.05 KB20/10/2016 - 14:01
securefishnet-2.0-7.i486.rpm151.95 KB20/10/2016 - 14:01
Changelog: 

2.0-7

  • bug fixes
  • ui tweaks
  • connection changing logic improved

2.0-5

  • bug fixes
  • ui tweaks
  • more than 3 connections or conffiles
  • rewrite of connection changing logic ( again )

1.9-5

  • bug fixes

1.9-2

  • lots of new features (check config page)
  • rewrite of connection changing logic ( only tested with SFOS 2.0.1.7 )

1.6-5

  • fixed bug with routing not always working as it should

1.6-4

  • bug fixes

1.6-3

  • bug fixes

1.6-2

  • Lots of minor tweaks
  • UI fixes
  • more icon sizes = bigger rpm...
  • i486 build (not tested on real device but runs fine on emulator)

1.5-4

  • and more old bugs fixed... huh...

1.5-3

  • more bug fixes

1.5-2

  • bug fixes
  • You should reboot AFTER installing this as there might be some unwanted leftovers (in routing table) from earlier versions.

1.5-1

  • bug fixes
  • tcp connection handling improvements and other internal changes

1.4-4

  • bug fixes

1.4-2

  • new filepicker
  • uses less memory
  • loads faster

1.3-2

  • bug fixes
  • better roaming logic

1.2-4

  • Some roaming fixes
  • UI fixes
  • "Static Key" in config dialog might help if connection doesn't start (at all)

1.2-2

  • Roaming logic is removed from UI and daemon handles that now so you can close UI and it should still roam
  • bug fix for routing

1.0-4

  • bug fixes

1.0-2

  • fix for minor bug in roaming
  • less memory used
  • fix for gw not being set with newer openvpn

1.0-1

  • UIs internal logic rewrite
  • Added connection detection
  • Fixed reconnect with openvpn
  • Added restart of connection when changing networks ( wlan <-> mobile )
  • After UI start status of connection is now shown (If connection is/was up). Roaming logic is in UI so changing networks won't work when UI is closed. 

0.9-5

  • ui fixes

0.9-3

  • ui fixes

0.8-5

  • more bug fixes

0.8-4

  • fixes bug: dns forwarding in android apps

0.8-2

  • MicroSD button in filepicker might actually work now ;-)
  • Wait longer for response from openvpn

0.8-1

  • Landscape

0.7-2

  • Bug fixes

0.7-1

  • Small UI improvements
  • Encryption is now used on username and passwords when saved ( light encryption only )

0.6-3

  • Bug fixes

0.6-2

  • Bug fixes
  • You can now execute script with PushUpMenu ( user nemo )

0.6-1

  • Support for username/password
  • Rewrite of everything but UI

0.4-2

  • Minor bug fix

0.4-1

  • Added support for password encrypted keys ( in config )
  • Bug fixes

0.2-3

  • Bug fixes

0.2-2

  • Bug fixes
  • UI improvements

0.1-2 - initial release

Comments

DarkTuring's picture

When searching and selecting new VPN profile please maintain last known VPN connection until a new connection is chosen.

 

 

 

Currently as soon as you start browsing through VPN profiles it disconnects current VPN connection. Which makes it less secure during switching since you dont always want to pick the next connection but a very specific country connection for example.

 

 

 

This would be a usability and security enhancement amd should be fairly easy to implement!?

articice's picture

Do I need to setuid the openvpn executable or something? It works by hand from devel-su, but doesn't from this app.

ps: I also need to run "modprobe tun" as root first :(

korppi's picture

No you shouldn't need to do anything special to get it working. But if you are using some ported devices or Jollas tablet I can't really test on those.

IPv6 does not work and I don't have time to make it work, If it's that...

Or you have certs and keys in places that for some reason are not found or there is permission problem.

Or half broken conffile because only thing this app checks is if it is tun or tap interface what needs to be created.

But you provided no logs or output from openvpn so this is just guess...

If you need "modprobe tun" that is device adaptation problem and nothing to do with this app... But you can fix that by adding file "/etc/modules-load.d/tun.conf" with the content "tun" and it is loaded when booting.

DarkTuring's picture

In most uptodate version and SFOS 2.0.4.14 securefisnet randomely switches on DNS search through VPN even though i had selected it off. I want the option permanently off but when launching some apps Android or Sailfish it reverts to on. Please fix.

korppi's picture

Well very late reply ...   ;-)

It is override switch what is below the start/stop button NOT a setting (and thats is why it is where it is) and it does work until you push STOP and then reverts to whatever the server tells it to do.

Maybe I make it config switch some day but for now it is meant as short term override.

If you see some other behavior then something is killing the daemon for some reason.

DarkTuring's picture

Ok thank you for the reply.

ergo's picture

Hello,

I tried to install secureFishNet on my Jolla Phone. Unfortunately it failed with a "repo-not-available" status. It say further "'./core/armv7hl/openvpn-2.3.6-1.4.1.armv7hl.rpm' not found on medium 'https://release.jolla.com/releases/2.0.4.14/jolla/armv7hl/'

What went wrong?

korppi's picture

Try "pkcon refresh" and then install this app again. Version of openvpn from Jolla should be 2.3.6-1.3.18 ... so it can't find 2.3.6-1.4.1 if it's not there

k0stek's picture

Excellent job, first try 100% success, what´s what i´ve needed.

eson's picture

Hi,
I can't make SecureFishNet work with https://ovpn.se. I can connect via command line, so I know the service works, but it would help a lot to have it working via your gui. I think one problem is that I can't browse /etc/openvpn/, where ovpn.se wants me to put config files. Can you help please? Unfortunately the gui who's running the vpn service, is at no help.

korppi's picture

Config files are in /etc by default in linux systems, but nothing prevents you placing them somewhere else.
There is no reason that they have to be there.

There was bug with apps file browser. Fix for the bug is in version 2.0-5. :)

eson's picture

Thanks! Works perfect after file browser fix. Great app! :)
Couldn't make it work any place else than /etc/openvpn. Guess I would have to rewrite config file for other directory.

korppi's picture

Ok, so conf file was written with absolute file paths... Not very nice way of doing it... ;-)
Good that you got it working anyway.

vm5's picture

Very good app! Maybe I'm wrong but I'm not able to set more than 3 different Vpn servers.

korppi's picture

You can't set more than 3 vpn servers right now. But I am working on it to support more.

vm5's picture

Ok, thank You.

kaulian's picture

Thanks for the new release and the "autoconnect on data or wifi" nice feature

sebsikora's picture

Hi, problem here, and fix.

(apologies if this appears twice, buggy connection)

- Couldn't connect to Mulvad VPN using SecureFishNet.

- Tried using openvpn from command line - didn't work - couldn't find auto-resolv-conf

- Found this post - https://talk.maemo.org/showthread.php?t=92276 - in which author describes process for setting up connection using openvpn. Points out that once following the steps to copy the resolv updater scripts into the correct location, their filenames may not match those that appear in your VPN config file.

- I checked, mine did not. I edited the file as stated in the post and openvpn connection then worked from command line.

- I reopened SecureFishNet and could now connect in this manner also.

Happy hunting.

korppi's picture

You should NOT use any up/down/resolver-scripts. And config that does not work with openvpn directly is likely to fail(because openvpn is used here too).

You really should remove that resolv-updater from your config because sailfishOS's connectionmanager(=connman) really hates when somebody changes that file(/etc/resolv.conf) and connection sometimes stops working after that. And I mean all connections to anywhere.

But nice that you found temp fix...

sebsikora's picture

Do you mean that the openvpn config should contain no references to the client up and down scripts at all? From a fresh install Openvpn would not connect, with the original paths in it's config. If I simply remove the references, rather than 'correct' them, it should work?

korppi's picture

I mean in context of sailfish or any other system which is controlled by some kind of network manager, in this case connman. You should NOT use any of those scripts which do something to network connection. It is just generally bad idea, but if know what you are doing then...

So just remove or comment out the lines in config unless you absolutely need them. Or something strange might happen... Or not ;-)

caprico's picture

Really great app! Just gave it again a try after it didn't work a couple versions ago. Everything's perfect now :-) Thanks for figuring out the issues. I look forward to use SecureFishNet from now on.

jaekkay's picture

After upgrading to version 1.6-4, the application says it is connected but browser still shows actuall IP instead of VPN IP. It seems routing is not working as it should. 

korppi's picture

Check with 1.6-5. Contains some fixes for that.

cy8aer's picture

This version fixes my route problems too!

jaekkay's picture

Thanks, it is working fine with 1.6-5.

Ingvix's picture

The app says it's connected but when I check my ip from duckduckgo on the browser it gives my own IP. What's the problem?

korppi's picture

Check with 1.6-5. Contains some fixes for that.

Ingvix's picture

Working for me too now.

kaulian's picture

Hi,
Thanks for this application

is there a possibility to start connexion at launch ? or with cmd line ?

i would like to start vpn always when phone use mobile data. i think use situation to monitoring the change of connexion but i dont know how to auto connect to the vpn.

thanks

Pages