maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   VPN suggestions (https://talk.maemo.org/showthread.php?t=32800)

allnameswereout 2009-10-15 16:55

Re: VPN suggestions
 
Maybe the thread about PPTP VPN helps. Also see PPTP security concerns.

icbolsh 2009-10-15 17:19

Re: VPN suggestions
 
Quote:

Originally Posted by mikkov (Post 347096)
Ivacy seems to be using pptp so you cannot use Openvpn client for it.

Now wait a minute...I was just looking at the Ivacy website and they have a page on configuring OpenVPN on Win XP.
http://ivacy.com/en/doc/user/setup/winxp_openvpn
Doesn't that mean it should work for OpenVPN on Maemo?

icbolsh 2009-10-15 17:20

Re: VPN suggestions
 
Quote:

Originally Posted by allnameswereout (Post 347406)
Maybe the thread about PPTP VPN helps. Also see PPTP security concerns.

Thanks this helps a lot. I'll see what I can learn before asking for help.

allnameswereout 2009-10-15 17:38

Re: VPN suggestions
 
Quote:

Originally Posted by icbolsh (Post 347439)
Now wait a minute...I was just looking at the Ivacy website and they have a page on configuring OpenVPN on Win XP.
http://ivacy.com/en/doc/user/setup/winxp_openvpn
Doesn't that mean it should work for OpenVPN on Maemo?

Yes, it should. Ivacy supports PPTP, IPsec, and OpenVPN. They have howtos for various operating systems, too.

icbolsh 2009-10-16 06:59

Re: VPN suggestions
 
Seeing how I am an extreme newbie to VPNs and their settings...I was wondering if someone could kindly help me maybe point me in the right direction.
I have Openvpn installed and am using the the front end applet to configure everything. I put these config files(from Ivacy) into the required firelds but I think I'm doing something wrong. When testing it, this error message comes up.

Fri Oct 16 13:56:14 2009 OpenVPN 2.1_rc19 arm-unknown-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Sep 7 2009
Enter Auth Username:Enter Auth Password:Fri Oct 16 13:56:14 2009 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Oct 16 13:56:14 2009 Cannot load certificate file ivacy-keys/ivacy-client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib
Fri Oct 16 13:56:14 2009 Exiting

Any ideas what I'm doing wrong?

frals 2009-10-16 08:17

Re: VPN suggestions
 
Cannot load certificate file ivacy-keys/ivacy-client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002

is the .crt in the right folder?

icbolsh 2009-10-16 09:05

Re: VPN suggestions
 
Quote:

Originally Posted by frals (Post 348154)
Cannot load certificate file ivacy-keys/ivacy-client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002

is the .crt in the right folder?

Maybe.
Here is what I got:
Openvpn applet asks for...

Configuration file:
Key file:
Cert File:
Ca file:
Secret File:
PKCS12 file:

What I get from the Ivacy website is:

Ivacy-client.ovpn
Ivacy-ca.crt
Ivacy-client.crt
Ivacy-client.key
Ivacy-tls.key

Maybe I'm putting some of the files in the wrong fields. This is what I'm assuming.

Configuration file: Ivacy-client.ovpn
Key file: Ivacy-client.key
Cert File: Ivacy-client.crt
Ca file: Ivacy-ca.crt
Secret File: ? don't know maybe Ivacy-tls.key
PKCS12 file: ?

Sorry if there is some obvious stupidity going on here. Can show me what I did wrong?

mikkov 2009-10-16 10:32

Re: VPN suggestions
 
Sorry didn't notice the openvpn support

Try to modify Ivacy-client.ovpn so that all files are in same directory.

Code:

ca ivacy-ca.crt
cert ivacy-client.crt
key ivacy-client.key
tls-auth ivacy-tls.key 1

Modify .ovpn, place all file in the same directory and then try to import them. Make sure that all files are imported, put ivacy-tls.key for example to PKCS12 field (or secret field, doesn't matter), because I don't think that applet has autodetection support for that.

icbolsh 2009-10-16 15:33

Re: VPN suggestions
 
Okay I modified .ovpn and when importing it put them all in except for ivacy-tls.key. So I put it in the PKCS12 field manually. When running a test now is says something different.

Fri Oct 16 23:24:40 2009 OpenVPN 2.1_rc19 arm-unknown-linux-gnueabi [SSL] [LZO2] [EPOLL] built on Sep 7 2009
Enter Auth Username:Enter Auth Password:Fri Oct 16 23:24:40 2009 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Oct 16 23:24:40 2009 /usr/bin/openssl-vulnkey -q -b 2048 -m <modulus omitted>
Fri Oct 16 23:24:40 2009 ******* WARNING *******: '(null)' is a known vulnerable key. See 'man openvpn-vulnkey' for details.
Fri Oct 16 23:24:40 2009 Cannot open file key file 'ivacy-tls.key': No such file or directory (errno=2)
Fri Oct 16 23:24:40 2009 Exiting

So what is my next step? And I just want to say thank you for all this help.

mikkov 2009-10-16 15:55

Re: VPN suggestions
 
it seems that ivacy-tls.key wasn't imported. Apparently there is still problems in openvpn-applet (I am the author).

Easiest is to copy the file manually. Install rootsh, open X terminal, type sudo gainroot, copy with cp ivacy-tls.key /etc/openvpn


All times are GMT. The time now is 21:47.

vBulletin® Version 3.8.8