OpenVPN Connect Android FAQQ: How t

OpenVPN Connect Android FAQ

Q: How to get started?

A: To use this app, you must have an OpenVPN profile and a server to connect to. OpenVPN profiles are files that have an extension of .ovpn

There are several methods available to import a profile:

If you have a .ovpn profile, copy the profile and any files it references to the SD card folder on your device (copy all files to the same folder). Then go to Menu / Import / Import Profile from SD card. If you have an account on an OpenVPN Access Server, you can import the profile directly from the Access Server by going to Menu /Import / Import Access Server Profile. If you have an account on the Private Tunnel service, go to Menu / Import / Import Private Tunnel Profile.

Q: Is OpenVPN Connect for Android vulnerable to Heartbleed?

A: No, all versions of OpenVPN Connect for Android use the PolarSSL library, which is immune to Heartbleed.

Q: Are CRLs (certificate revocation lists) supported?

A: Yes, CRLs are supported starting with version 1.1.14 for Android.

To use a CRL, it must be added to the .ovpn profile, such as:

-----BEGIN X509 CRL-----MIHxMFwwDQYJKoZIhvcNAQEEBQAwFTETMBEGA1UEAxMKT3BlblZQTiBDQRcNMTQw NDIyMDQzOTI3WhcNMjQwNDE5MDQzOTI3WjAWMBQCAQEYDzIwMTQwNDIyMDQzOTI3 WjANBgkqhkiG9w0BAQQFAAOBgQBQXzbNjXkx8+/TeG8qbFQD5wd6wOTe8HnypQTt eELsI7eyNtiRRhJD3qKfawPVUabSijnwhAPHfhoIOLKe67RLfzOwAsFKPNJAVdmq rYw1t2eucHvGjH8PnTh0aJPJaI67jmNbSI4CnHNcRgZ+1ow1GS+RAK7kotS+dZz9 0tc7Qw== -----END X509 CRL-----

Multiple CRLs may be concatenated together within the crl-verify block above.

If you are importing a .ovpn file that references an external CRL file such as

crl-verify crl.pem

make sure to drop the file crl.pem into the same place as the .ovpn file during import, so the profile parser can access it.

Q: I am having trouble importing my .ovpn file.

A: Here are some basic pointers for importing .ovpn files:

When you import a .ovpn file, make sure that all files referenced by the .ovpn file such as ca, cert, and key files are in the same directory on the device as the .ovpn file.

Profiles must be UTF-8 (or ASCII) and under 256 KB in size.

Consider using the unified format for OpenVPN profiles which allows all certs and keys to be embedded into the .ovpn file. This eases management of the OpenVPN configuration because it integrates all elements of the configuration into a single file.

For example, a traditional OpenVPN profile might specify certs and keys as follows:

ca ca.crt cert client.crt key client.key tls-auth ta.key 1

You can convert this usage to unified form by pasting the content of the certificate and key files directly into the OpenVPN profile as follows using an XML-like syntax:

-----BEGIN CERTIFICATE-----MIIBszCCARygAwIBAgIE... . . . /NygscQs1bxBSZ0X3KRk... Lq9iNBNgWg== -----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----. . .

-----BEGIN RSA PRIVATE KEY-----. . .

key-direction 1 -----BEGIN OpenVPN Static key V1-----. . .

Another approach to eliminate certificates and keys from the OpenVPN profile is to use the Android Keychain as described below.

NOTE: when converting tls-auth to unified format, check if there is a second parameter after the filename (usually a 0 or 1). This parameter is known as the key-direction parameter and must be specified as a standalone directive when tls-auth is converted to unified format. For example if the parameter is 1, add this line to the profile:

key-direction 1

If there is no second parameter to tls-auth, you must add this line to the profile:

key-direction bidirectional

Q: Where are the support forums for OpenVPN Connect?

A: https://forums.openvpn.net/

Q: Is IPv6 supported?

A: Yes. The OpenVPN app supports IPv6 transport and IPv6 tunnels as long as the server supports them as well.

Q: Why does OpenVPN Connect show two notification icons when connected?

A: This is something Android requires to affirm that the VPN session is high prio

Kết quả (Việt) 1:

Kết nối OpenVPN Android FAQHỏi: làm thế nào để bắt đầu?A: để sử dụng ứng dụng này, bạn phải có một cấu hình OpenVPN và một máy chủ để kết nối với. Cấu hình OpenVPN là các tập tin có phần mở rộng của .ovpnCó rất nhiều phương pháp có sẵn để nhập một hồ sơ:Nếu bạn có một hồ sơ .ovpn, sao chép hồ sơ và bất kỳ tệp nào nó tham chiếu tới thư mục thẻ SD trên điện thoại của bạn (bản sao tất cả các tập tin vào thư mục tương tự). Sau đó đi đến Menu / nhập khẩu / nhập khẩu hồ sơ từ SD thẻ. Nếu bạn có một tài khoản trên một máy chủ truy cập OpenVPN, bạn có thể nhập cấu hình trực tiếp từ máy chủ truy cập bằng cách đi tới trình đơn /Import / nhập khẩu máy chủ truy cập hồ sơ. Nếu bạn có một tài khoản trên dịch vụ riêng Tunnel, vào Menu / nhập khẩu / nhập khẩu riêng đường hầm hồ sơ.Hỏi: có phải kết nối OpenVPN cho Android dễ bị tổn thương Heartbleed?A: không, tất cả các phiên bản của OpenVPN kết nối cho Android sử dụng thư viện PolarSSL, là miễn dịch với Heartbleed.Hỏi: có CRLs (giấy chứng nhận danh sách thu hồi) được hỗ trợ?A: có, CRLs được hỗ trợ bắt đầu với phiên bản 1.1.14 cho Android.Để sử dụng một CRL, nó phải được thêm vào hồ sơ .ovpn, chẳng hạn như: ---Bắt đầu X 509 CRL---MIHxMFwwDQYJKoZIhvcNAQEEBQAwFTETMBEGA1UEAxMKT3BlblZQTiBDQRcNMTQw NDIyMDQzOTI3WhcNMjQwNDE5MDQzOTI3WjAWMBQCAQEYDzIwMTQwNDIyMDQzOTI3 WjANBgkqhkiG9w0BAQQFAAOBgQBQXzbNjXkx8 / TeG8qbFQD5wd6wOTe8HnypQTt eELsI7eyNtiRRhJD3qKfawPVUabSijnwhAPHfhoIOLKe67RLfzOwAsFKPNJAVdmq rYw1t2eucHvGjH8PnTh0aJPJaI67jmNbSI4CnHNcRgZ + 1ow1GS + RAK7kotS + dZz9 0tc7Qw ==---cuối X 509 CRL---Multiple CRLs may be concatenated together within the crl-verify block above.If you are importing a .ovpn file that references an external CRL file such ascrl-verify crl.pemmake sure to drop the file crl.pem into the same place as the .ovpn file during import, so the profile parser can access it.Q: I am having trouble importing my .ovpn file.A: Here are some basic pointers for importing .ovpn files:When you import a .ovpn file, make sure that all files referenced by the .ovpn file such as ca, cert, and key files are in the same directory on the device as the .ovpn file.Profiles must be UTF-8 (or ASCII) and under 256 KB in size.Consider using the unified format for OpenVPN profiles which allows all certs and keys to be embedded into the .ovpn file. This eases management of the OpenVPN configuration because it integrates all elements of the configuration into a single file.For example, a traditional OpenVPN profile might specify certs and keys as follows:ca ca.crt cert client.crt key client.key tls-auth ta.key 1You can convert this usage to unified form by pasting the content of the certificate and key files directly into the OpenVPN profile as follows using an XML-like syntax: -----BEGIN CERTIFICATE-----MIIBszCCARygAwIBAgIE... . . . /NygscQs1bxBSZ0X3KRk... Lq9iNBNgWg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE-----. . . -----BEGIN RSA PRIVATE KEY-----. . . key-direction 1 -----BEGIN OpenVPN Static key V1-----. . . Another approach to eliminate certificates and keys from the OpenVPN profile is to use the Android Keychain as described below.NOTE: when converting tls-auth to unified format, check if there is a second parameter after the filename (usually a 0 or 1). This parameter is known as the key-direction parameter and must be specified as a standalone directive when tls-auth is converted to unified format. For example if the parameter is 1, add this line to the profile:key-direction 1If there is no second parameter to tls-auth, you must add this line to the profile:key-direction bidirectionalQ: Where are the support forums for OpenVPN Connect?A: https://forums.openvpn.net/Q: Is IPv6 supported?A: Yes. The OpenVPN app supports IPv6 transport and IPv6 tunnels as long as the server supports them as well.Q: Why does OpenVPN Connect show two notification icons when connected?A: This is something Android requires to affirm that the VPN session is high prio