Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.mobile.android > #22466 > unrolled thread

Want to use VPN on Android Linux - where is openSSL hiding?

Back to article view | Back to comp.mobile.android

Contents

  Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-26 18:35 +0000
    Re: Want to use VPN on Android Linux - where is openSSL hiding? Mike Easter <MikeE@ster.invalid> - 2015-09-26 12:07 -0700
    Re: Want to use VPN on Android Linux - where is openSSL hiding? Mike Easter <MikeE@ster.invalid> - 2015-09-26 12:16 -0700
      Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-26 20:41 +0000
        Re: Want to use VPN on Android Linux - where is openSSL hiding? Mike Easter <MikeE@ster.invalid> - 2015-09-26 14:25 -0700
          Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-26 22:26 +0000
        Re: Want to use VPN on Android Linux - where is openSSL hiding? Anssi Saari <as@sci.fi> - 2015-09-28 22:54 +0300
          Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-28 22:49 +0000
    Re: Want to use VPN on Android Linux - where is openSSL hiding? Mitch Kaufmann <mitch284@outlook.com> - 2015-09-26 18:37 -0400
      Re: Want to use VPN on Android Linux - where is openSSL hiding? I R A Darth Aggie <n0b0dy@invalid.invalid> - 2015-09-27 01:37 +0000
        Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-28 22:52 +0000
          Re: Want to use VPN on Android Linux - where is openSSL hiding? I R A Darth Aggie <n0b0dy@invalid.invalid> - 2015-09-29 13:19 +0000
    Re: Want to use VPN on Android Linux - where is openSSL hiding? Jasen Betts <jasen@xnet.co.nz> - 2015-09-27 05:45 +0000
      Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-28 22:51 +0000
      Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-28 22:57 +0000
        Re: Want to use VPN on Android Linux - where is openSSL hiding? Jasen Betts <jasen@xnet.co.nz> - 2015-09-29 08:49 +0000
          Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-29 23:18 +0000
    Re: Want to use VPN on Android Linux - where is openSSL hiding? Fritz Wuehler <fritz@spamexpire-201509.rodent.frell.theremailer.net> - 2015-09-27 22:23 +0200
      Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-28 23:02 +0000
    Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-29 23:41 +0000
      Re: Want to use VPN on Android Linux - where is openSSL hiding? I R A Darth Aggie <n0b0dy@invalid.invalid> - 2015-09-30 15:52 +0000
        Re: Want to use VPN on Android Linux - where is openSSL hiding? Ablang <ablang@usa.com> - 2015-09-30 22:26 +0000
          Re: Want to use VPN on Android Linux - where is openSSL hiding? I R A Darth Aggie <n0b0dy@invalid.invalid> - 2015-10-01 13:20 +0000
      Re: Want to use VPN on Android Linux - where is openSSL hiding? Nomen Nescio <nobody@dizum.com> - 2015-09-30 21:15 +0200
      Re: Want to use VPN on Android Linux - where is openSSL hiding? Anssi Saari <as@sci.fi> - 2015-10-01 08:56 +0300
      Re: Want to use VPN on Android Linux - where is openSSL hiding? Jasen Betts <jasen@xnet.co.nz> - 2015-10-02 20:45 +0000
        Netfix usage controls (was: Want to use VPN on Android Linux..) Jack Ryan <noreply@remailer.cpunk.us> - 2015-10-03 04:44 -0400
    Re: Want to use VPN on Android Linux - where is openSSL hiding? "J.O. Aho" <user@example.net> - 2015-10-01 08:04 +0200

Page 1 of 2  [1] 2  Next page →

#22466 — Want to use VPN on Android Linux - where is openSSL hiding?

I just want to load the VPN configuration files that are freely
available at vpngate.net so that I can use VPN with Android.

All I need is an "openssl" client for Android, and it should
work as simply as typing the following command in Android.
 openssl --config vpngatefile.ovpn

Searching for an OpenSSL client on Android, I don't see any.
I see "Bluebox OpenSSL Security Scanner", "OpenSSL Checker", 
etc., but not the basic linux OpenSSL program.

But Andoroid is linux, right?

Does a freeware openssl linux program exist for Android?

[toc] | [next] | [standalone]

#22467

Ablang wrote:
> But Andoroid is linux, right?

Android is derived from the linux kernel, but quite different from a 
typical kernel found in various linux distros.  I wouldn't call android 
a 'linux distro', but rather a linux 'kernel fork'.

http://www.howtogeek.com/189036/android-is-based-on-linux-but-what-does-that-mean/ 
  Android is Based on Linux, But What Does That Mean? (nice graphic of 
android architecture)

Chrome OS is a much closer kin linux kernel fork than android.


-- 
Mike Easter

[toc] | [prev] | [next] | [standalone]

#22468

Ablang wrote:
> so that I can use VPN with Android.

More HTG for you 
http://www.howtogeek.com/135036/how-to-connect-to-a-vpn-on-android/  How 
to Connect to a VPN on Android

-- 
Mike Easter

[toc] | [prev] | [next] | [standalone]

#22470

Mike Easter wrote:

> More HTG for you 
> http://www.howtogeek.com/135036/how-to-connect-to-a-vpn-on-android/  How 
> to Connect to a VPN on Android

I'm not sure what HTG means, but, I see that article suggested the app
"OpenvpnConnect", which seems to be a Google Android app.
https://play.google.com/store/apps/details?id=net.openvpn.openvpn&hl=en

This should work.
Let me know if it works for you.

1. Download any convenient ovpn configuration file to your compute device.
   http://vpngate.net (choose any desired country's ovpn file).

2. Start OpenvpnConnect on your mobile device.

3. Press "Menu > Import > Import Profile from SD Card > /sdcard/Download/
   filename.ovpn > Select 

4. Then press the "Connect" which pops up after it says "Profile Imported".

It's hard to tell if you're connected. 

On Linux, you just type "ipa", where that's an alias for:
alias ipa='curl http://myip.dnsomatic.com;echo'

Or, you simply type "inxi -i" 

I guess, on Android, if there isn't a quick command, you can always point
your web browser to http://whatismyipaddress.com

[toc] | [prev] | [next] | [standalone]

#22471

Ablang wrote:
> Mike Easter wrote:
>
>> More HTG for you
>
> I'm not sure what HTG means,

I posted 2 HowToGeek links.

> Or, you simply type "inxi -i"

I *LUV* the inxi script capabilities.

> you can always point your web browser to
> http://whatismyipaddress.com

Or if you want one that only has the IP text http://myip.dnsdynamic.com/

Or, if you are troubleshooting and your DNS is b0rken, the ipchicken 
will answer its IP http://209.68.27.16/


-- 
Mike Easter

[toc] | [prev] | [next] | [standalone]

#22472

Mike Easter wrote:

> Or if you want one that only has the IP text http://myip.dnsdynamic.com/

What is the best way, on Android, to make this a "command"?

On Linux, we just make an alias for instant access to something.

Is there a way, on Android, to save this, not as a bookmark, but, 
as a shortcut file on the desktop?

[toc] | [prev] | [next] | [standalone]

#22489

Ablang <ablang@usa.com> writes:

> Mike Easter wrote:
>
>> More HTG for you 
>> http://www.howtogeek.com/135036/how-to-connect-to-a-vpn-on-android/  How 
>> to Connect to a VPN on Android
>
> I'm not sure what HTG means, but, I see that article suggested the app
> "OpenvpnConnect", which seems to be a Google Android app.

There is an open source openvpn client in the play store too,
https://play.google.com/store/apps/details?id=de.blinkt.openvpn 

As I recall, openvpn used to recommend that. Now they recommend their
Private Tunnel VPN at
https://play.google.com/store/apps/details?id=net.openvpn.privatetunnel

I've only used the former. I didn't think it's that great but it
certainly worked fine for Airvpn. I'm using Freedome currently, mostly
because Freedome provides tracking protection too.

[toc] | [prev] | [next] | [standalone]

#22493

Anssi Saari wrote:

> There is an open source openvpn client in the play store too,
> https://play.google.com/store/apps/details?id=de.blinkt.openvpn

This procedure works fine to put me on vpn for free on Android.

1. Download any ovpn configuration file from vpngate.net 
   (or use any free public vpn ovpn file you can find on the net)

2. Start "OpenVPN Connect" client & load the ovpn file using
   "Menu > Import > Import Profile from SD Card > /sdcard/Download/
   filename.ovpn > Select 

3. Then press the "Connect" which pops up after it says "Profile Imported".

I used the three web sites Mike suggested to double check vpn status.
a. http://whatismyipaddress.com
b. http://myip.dnsdynamic.com
c. http://ipchicken.com

[toc] | [prev] | [next] | [standalone]

#22473

On Sat, 26 Sep 2015 18:35:00 +0000, Ablang wrote:

> Does a freeware openssl linux program exist for Android?

How does that work exactly?

If you're "on vpn" on a cellphone, do the phone calls go out
encrypted somehow?

Or is it just the SMS text messages that are encrypted?

Or, maybe just the browser and Usenet communications?

What is encrypted and who can see it in the clear?

[toc] | [prev] | [next] | [standalone]

#22474

On Sat, 26 Sep 2015 18:37:58 -0400,
Mitch Kaufmann <mitch284@outlook.com>, in
<be42d$56071e46$45703fed$22022@nntpswitch.blueworldhosting.com> wrote:
>  On Sat, 26 Sep 2015 18:35:00 +0000, Ablang wrote:
> 
> > Does a freeware openssl linux program exist for Android?
> 
>  How does that work exactly?
>  What is encrypted and who can see it in the clear?

Just your network connections, be that cellular data or wifi. The
transmissions will be in the clear when they leave the VPN tunnel and
get out on the commodity internet, starting with the VPN provider.

-- 
Consulting Minister for Consultants, DNRC
I can please only one person per day. Today is not your day. Tomorrow
isn't looking good, either.
I am BOFH. Resistance is futile. Your network will be assimilated.

[toc] | [prev] | [next] | [standalone]

#22495

I R A Darth Aggie wrote:

> Just your network connections, be that cellular data or wifi. The
> transmissions will be in the clear when they leave the VPN tunnel and
> get out on the commodity internet, starting with the VPN provider.

To be more clear, do you mean only the web traffic and the nntp
traffic but not SMS or MMS text?

What about the GPS data that goes to Google (and all those apps
which have access to your location)?

Do all those app privilages go out on the encrypted connection also?

[toc] | [prev] | [next] | [standalone]

#22509

On Mon, 28 Sep 2015 22:52:45 +0000 (UTC),
Ablang <ablang@usa.com>, in
<mucgbt$u56$3@speranza.aioe.org> wrote:
>  I R A Darth Aggie wrote:
> 
> > Just your network connections, be that cellular data or wifi. The
> > transmissions will be in the clear when they leave the VPN tunnel and
> > get out on the commodity internet, starting with the VPN provider.
> 
>  To be more clear, do you mean only the web traffic and the nntp
>  traffic but not SMS or MMS text?

As far as I understand SMS/MMS does not use the data connection. If
they do use the data connection, they'll be tunnelled thru your VPN
provider, then routed to your cell provider for final disposition.

>  What about the GPS data that goes to Google (and all those apps
>  which have access to your location)?
> 
>  Do all those app privilages go out on the encrypted connection also?

A VPN transmits all non-local data thru the tunnel. Here's what
ifconfig looks like on a linux laptop:

tun1: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
inet 10.10.19.32  netmask 255.255.255.0  destination 10.10.19.32
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
RX packets 1614  bytes 566100 (552.8 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 2532  bytes 178300 (174.1 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
						
and routes:

route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.10.19.1      128.0.0.0       UG    0      0        0 tun1
default         homeportal      0.0.0.0         UG    600    0        0 wlan0
10.10.19.0      0.0.0.0         255.255.255.0   U     0      0        0 tun1
x.xxxxxx.       homeportal      255.255.255.255 UGH   0      0        0 wlan0
128.0.0.0       10.10.19.1      128.0.0.0       UG    0      0        0 tun1
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 wlan0
192.168.1.0     0.0.0.0         255.255.255.0   U     600    0        0 wlan0

so everything is going out thru 10.10.19.1, while the cable modem
lives in 192.168.1.x space.

You can get some meta data leakave via  your DNS servers.

-- 
Consulting Minister for Consultants, DNRC
I can please only one person per day. Today is not your day. Tomorrow
isn't looking good, either.
I am BOFH. Resistance is futile. Your network will be assimilated.

[toc] | [prev] | [next] | [standalone]

#22475

On 2015-09-26, Ablang <ablang@usa.com> wrote:
> I just want to load the VPN configuration files that are freely
> available at vpngate.net so that I can use VPN with Android.
>
> All I need is an "openssl" client for Android, and it should
> work as simply as typing the following command in Android.
>  openssl --config vpngatefile.ovpn

Sounds like hogwash to me. perhaps you mean "openvpn" which is very
different to "openssl"

my phone claims L2TP, PPTP, and IPSec as stock features, but did not
ship with openvpn  support.


-- 
  \_(ツ)_

[toc] | [prev] | [next] | [standalone]

#22494

Jasen Betts wrote:

> Sounds like hogwash to me. perhaps you mean "openvpn" which is very
> different to "openssl"
> 
> my phone claims L2TP, PPTP, and IPSec as stock features, but did not
> ship with openvpn  support.

I think I made a mistake by calling it open ssl. 
Instead, I should have called it open vpn.
So, that's why my search for openssl failed.
But the openvpn search worked perfect.

So, now I have free public vpn working on my cell phone for my 
data communications when I connect to a public hotspot.

[toc] | [prev] | [next] | [standalone]

#22496

Jasen Betts wrote:

> my phone claims L2TP, PPTP, and IPSec as stock features, but did not
> ship with openvpn  support.

What does that mean that you don't have openvpn support on your phone?

Does that mean that the suggested "OpenVPN Connect" freeware won't 
work on your phone?

[toc] | [prev] | [next] | [standalone]

#22508

On 2015-09-28, Ablang <ablang@usa.com> wrote:
> Jasen Betts wrote:
>
>> my phone claims L2TP, PPTP, and IPSec as stock features, but did not
>> ship with openvpn support.
>
> What does that mean that you don't have openvpn support on your phone?

I was discussing factory settings.  I don't use my phone enough to
have opted for a VPN, and I feel any gratis VPN I choose is likely 
to get me more attention, rather than less.

> Does that mean that the suggested "OpenVPN Connect" freeware won't 
> work on your phone?

I can't say for sure, bu would expect it to work. I posted the above,
discussing only what comes built in, before seeing that suggestion.

-- 
  \_(ツ)_

[toc] | [prev] | [next] | [standalone]

#22518

Jasen Betts wrote:

> I can't say for sure, bu would expect it to work. I posted the above,
> discussing only what comes built in, before seeing that suggestion.

I tested OpenVPN Connect freeware for a couple of days and it works ok.
Not great. But ok.

The ability to save a dozen VPNs each as their own desktop shortcut is
convenient. But the debugging is atrocious. When it works, it tells you
it worked. But when it fails, it just tells you it failed. You get no 
decent debugging output.

But, it works and it's free, so, here is how to get free VPN on Android.

1. You go to any web site (I use vpngate.net) to download any ovpn file.
2. You start OpenVPN Connect & import the ovpn file from your Downloads.
3. You have the option of saving that file as a desktop shortcut.

[toc] | [prev] | [next] | [standalone]

#22478

> All I need is an "openssl" client for Android, and it should
> work as simply as typing the following command in Android.
>  openssl --config vpngatefile.ovpn

That cannot be right.  Openssl is not a VPN tool - it's /used by/ VPN
tools.  I think you mean:

  openvpn --config vpngatefile.ovpn

Moreover, if your Android is not 4.0 or newer, you must *hack* it to
install openvpn.

VPN on Android's are a sad state of affairs.  The phones native VPN
software won't understand *.ovpn files.  Although it would
theoretically be possible to use an IPSEC or PPTP type of VPN, it is
likely broken.  Many Androids are design-defective; the software has a
bug preventing them from establishing any of the VPN connections.
Certainly all Android versions 2.3 and earlier are broken (not sure
what version it was fixed in, if any).

> But Andoroid is linux, right?

Android is commercial *proprietary* linux.  Unlike linux desktops, you
cannot just do what you want with it.  You cannot just upgrade when
you want.  And all Android phones are jailed, blocking you from
control, with these corner-case exceptions that come with
warranty-supported root access:

* Geeksphone <= very old
* Moto X Developer Edition <= Motorola was caught putting spyware

Not to mention there are still closed source bits on them.  If you
want a linux-based phone that gives more control, it might be
worthwhile to check out Ubuntu Phone.. although that is also not
rooted either.

Options are grim.  Buying a recent phone (4.0+) will give you what you
want, but the phone still won't be open to tinkering, and you'll be
financially supporting a phone maker that proactively blocks
consumers from getting root access.  Or you get a dev. edition
Motorola, and trust that they stopped putting spyware on their
phones.

> Does a freeware openssl linux program exist for Android?

openvpn-- but it's only usable if the phone is "rooted" (hacked with
warranty voided) or 4.0 or later.

[toc] | [prev] | [next] | [standalone]

#22497

Fritz Wuehler wrote:

> That cannot be right.  Openssl is not a VPN tool - it's /used by/ VPN
> tools.  I think you mean:
>   openvpn --config vpngatefile.ovpn

I realize my mistake now, and you are totally correct that I should not
have asked for openssl, but I should have asked for openvpn instead!

> Moreover, if your Android is not 4.0 or newer, you must *hack* it to
> install openvpn.

It's Android 4.3

> VPN on Android's are a sad state of affairs.  The phones native VPN
> software won't understand *.ovpn files.  

I did not know there was "native" Android vpn software.
What is it called?
What kind of files does it read?
Are there free public VPN providers that supply those config files?

> Although it would
> theoretically be possible to use an IPSEC or PPTP type of VPN, it is
> likely broken.  Many Androids are design-defective; the software has a
> bug preventing them from establishing any of the VPN connections.
> Certainly all Android versions 2.3 and earlier are broken (not sure
> what version it was fixed in, if any).

I don't understand that IPSEC or PPTP. 
All I do, on Android 4.3, is go to any web site that hosts ovpn files
(I use vpngate.net but there are certainly others out there). 

I download the ovpn configuration file.
And I just load it, on Linux, using:
$ openvpn --config file.ovpn

That instantly puts me on VPN, for free on the computer.
I just want the same for the cellphone.

> openvpn-- but it's only usable if the phone is "rooted" (hacked with
> warranty voided) or 4.0 or later.

My Android 4.3 phone is not hacked but the suggested openvpn connect
program seems to have worked perfectly with the ovpn files at 
vpngate.net so, I think this is the best solution suggested.

[toc] | [prev] | [next] | [standalone]

#22519

tauseeefgt wrote:

> Find all the configuration at www.vpnranks.com specially for android.

I don't get that web page at all.
In fact, I must be talking a different *language* than that web page.

Two really big disconnects at that web page confuse me.

The first is why they even talk about ranking crazy "windows VPNs" or 
"Android VPNs" or even crazier "Hulu VPNs" or "Netflix VPNs". 

Huh?
What does the operating system have to do with VPN?
What does a domain you visit while on VPN have to do with it?

To me, VPN is a simple platform independent text configuration file. 
You load the text file into OpenVPN and you're on that VPN server.

There's nothing more to it.
It's operating system independent.
It's domain independent (you can visit any domain).

Do I misunderstand VPN?
What does the operating system have to do with it?
What does the domain you visit have to do with it?

[toc] | [prev] | [next] | [standalone]

Page 1 of 2  [1] 2  Next page →

Back to top | Article view | comp.mobile.android

csiph-web