How To : Install and Configure OpenVPN client - Samsung Epic 4G Touch

Purpose:
Tutorial to describe how to install and configure an OpenVPN client on a rooted Epic 4G Touch. This "how to" assumes you know what OpenVPN is and have a verified working OpenVPN server.
Client Requirements:
Rooted Epic 4G Touch with either:
A kernel with built-in tun support (stock kernel)
A kernel with a seperate tun.ko module (Rogue Desperado).
Tested Rom/Kernel Combinations:
Blazer 1.2 ROM (EG30 Base) with included Kernel :
Blazer 1.2 ROM (EG30 Base) with Rogue v1.3.0 "Desperado" Kernel (comes with seperate tun.ko module)
Tested Server Configurations:
Windows OpenVPN server (Bridged mode UDP).
Windows OpenVPN server (Bridged mode TCP).
Asus RT-N16 router running DD-WRT v24-sp2 (06/14/11) mega - build 17201 (Bridged mode TCP)
Install BusyBox:
If you already have BusyBox this step may be unnecessary, if you do have it BusyBox Installer should tell you where.
On your device download and install "BusyBox Installer" (by JRummy16):
https://market.android.com/details?id=com.jrummy.busybox.installer
Run the BusyBox Installer and accept the default version (BusyBox v1.19.3) and location (/system/xbin/)
Scroll down to the bottom and press the "Install" button.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Install OpenVPN Installer:
When I first installed OpenVPN I used Freidrich Schäuffelhut's installer which let me connect, however the client never got an IP address from the OpenVPN DHCP server. I had to go through the manual step of opening a terminal window on my device after I connected and typing the command "netcfg tap0 dhcp". This is due to Schäuffelhut's installer putting an OpenVPN binary that's not fully compatible with BusyBox, this can fixed by using Sascha Volkenandt's installer instead.
On your device download "OpenVPN Installer" (from Sascha Volkenandt NOT Friedrich Schäuffelhut):
https://market.android.com/details?id=de.akvsoft.droid.ovpninstall
Run the installer, keep the default path values (OpenVPN Targe Location: /system/xbin, Busybox Install Path: /system/xbin), unless you have an existing Busybox installed in an alternate location, then obviously change the Busybox install path value to that location.
Verify that "Your device is rooted" and "Busybox is installed" status lines are checked. You can ignore the yellow exlamation mark on the "TAP/TUN module is NOT installed" line, the installer said that for both kernels that I tested which worked fine, so obviously the installer's tap module detection method isn't quite flawless.
Press the Install button.
Install OpenVPN Settings:
On your device download and install "OpenVPN Settings" (Friedrich Schäuffelhut):
https://market.android.com/details?id=de.schaeuffelhut.android.openvpn
Configure OpenVPN Settings to use the tun.ko module:
The following procedure is only needed for kernels that have an external tun.ko module such as the Rogue v1.3.0 "Desperado" Kernel, not kernels with built-in tun support, such as the stock kernel.
Run OpenVPN Settings
Press the "menu"
Press the item labeled "Advanced"
Check the "Load tun kernel module" option
Press "TUN module settings"
Press item labeled "Path to tun module"
Set the textbox value to the path of your tun.ko module, for the Desperado Kernel the installed location is "/lib/modules/tun.ko", then press the "OK" button
Press item labeled "Load module using"
Choose the "insmod" option
Connect and test the VPN connection:
Make sure you have transfered your .ovpn client connection configuration file(s) and certificates to your device. The default location that the OpenVPN settings application looks for these files is in the "/sdcard/openvpn" folder (folder location can be specified in the advanced settings).
Start the OpenVPN Settings application
Make sure "OpenVPN" is checked.
Pick the .ovpn client config from list of OpenVPN configurations
After you're connected the status line should tell your IP address on the remote network.
Test your connection by pinging an IP address and/or host name on the remote network. I use Ping & DNS as my ping application.
Note: The OpenVPN Settings client doesn't pick up the remote DNS server DHCP push option so you must configure the DNS per connection configuration manually by:
Tap and Holding the OpenVPN configuration from the list.
Choosing "Preferences" from the popup menu.
Checking the "Use VPN DNS Server" option.
Press the "VPN DNS Sever" item and set it to your desired DNS server.
Troubleshooting:
Install and run Android Terminal Emulator by Jack Palevich:
https://market.android.com/details?id=jackpal.androidterm
Check for an active tap0 interface
Open terminal
type "su"
type "netcfg", one of the entries should be labeled "tap0" with a valid IP address.
Sample Client .ovpn connection configuration:
client
dev tap
proto udp
remote myhost.mydns.xxx 1184
resolv-retry infinite
nobind
persist-key
persist-tun
ca "home/ca.crt"
cert "home/client1.crt"
key "home/client1.key"
ns-cert-type server
comp-lzo
verb 3
Click to expand...
Click to collapse

Not a bad guide, well detailed.

Excellent guide. Had the same issues as you (OV would show connected but no IP address was assigned to it). Thanks!
EDIT: Working OK with Calkulin's 2.6

Very great guide, but unfortunately I read it after I already had installed the OpenVPN Installer by Friedrich Schäuffelhut...
Any tips on how to remove it so I can install Sascha Volkenandt's version?
I've already confirmed that I still have a /system/xbin/openvpn binary after I already uninstalled the OpenVPN Installer app, which makes sense, since all that stuff is done separate from the app.

jauling said:
Very great guide, but unfortunately I read it after I already had installed the OpenVPN Installer by Friedrich Schäuffelhut...
Any tips on how to remove it so I can install Sascha Volkenandt's version?
I've already confirmed that I still have a /system/xbin/openvpn binary after I already uninstalled the OpenVPN Installer app, which makes sense, since all that stuff is done separate from the app.
Click to expand...
Click to collapse
You can uninstall the program then just install Volkenandt's version. But you don't even need to do any of this unless you are still on Gingerbread. For ICS and Jellybean, just use the program OpenVPN for Android... much more simplified.

beezar said:
You can uninstall the program then just install Volkenandt's version. But you don't even need to do any of this unless you are still on Gingerbread. For ICS and Jellybean, just use the program OpenVPN for Android... much more simplified.
Click to expand...
Click to collapse
Thanks for the reply!
Any idea if OpenVPN for Android supports tap? That's the main reason why I went with the app I did. I wasnt sure if Arne's app meant 4.0+ doesnt support tap, or just 4.0...

Related

[UPDATED-06-APR-2011] New XAP installer, in-place app update, no dev tool and more...

Please download XAPDeployX-V0.9.zip, it is the latest and greatest version
If you have any of the 0x89xxxx errors, please download the attached "vs_sdeprolightup-enu.zip" file and run it.
Hi,
attached you'll find a new XAP installer which has quite a few unique selling points.
- In-place update on the phone: In-place update on the phone, e.g. if you already have Version 1.0.0.0 of an app installed on the phone and install 1.0.2.0 an in-place update will performed. No more full "uninstall-new install" cycle required. Your settings, custom files etc. won't be removed (same as marketplace update)
- CoreCon2 based, e.g. Phone Dev Tools are no longer required for application deployment!
- Deploy from file or URL: You can either specify a file or an URL. If you enter an URL the installer will automatically download the xap.
- Own protocol "wphome": Zune's one-click download for homebrew apps. Automatically install homebrew XAPs with a click on a hyperlink. If you want, you can register the application for the wphome protocol. The application will then be allowed to handle urls like wphome:www.test.com/test.xap and will automatically start as soon as you click on such a link.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
To be able to use "wphome" hyperlinks, you have to click on "Register protocol..." once.
wphome Testlink: wphome:http://www.nextbestgeek.com/wp-content/uploads/2011/03/helloworld.xap (for testing after you've installed the tool and registered it for the protocol)
After you've opened a XAP file, details will be shown in the top bar.
This is the first step in my plan to provide a homebrew marketplace.
Updated V0.6 - 1-APR-2011
+ Full Log
+ Multiple tweaks, bugfixes
Updated V0.7 - 2-APR-2011
+ CoreCon2 based, e.g. Phone Dev Tools are no longer required for application deployment! [*]
+ Drag'n'Drop support. Just drag and drop any xap from explorer to the tool.
[*] You need a working CoreCon2 installation. If CoreCon2 is not installed on your pc (normally only installed with the Phone Dev Tool) the tool will detect it and download a small installer.
Updated V0.8 - 2-APR-2011
+ Fixed "No addional data: Could not extract XAP file" Bug
+ XAP-Information is show much faster now
+ CoreCon2 Installer now online. You won't need the full Phone Dev Tools for this XAP Deployer
Updated V0.9 - 6-APR-2011
+ Selected Target will now be automatically saved
+ Deploy-Menu for XAP files. Registers a file handler for *.xap and provides a "Deploy" menu entry in file's context menu.
General Prerequisits
- Phone has to be unlocked (either dev, chevron or any other method)
- Zune has to be running and has to be connected to the phone
- Windows Vista or Windows 7, according to users: Windows XP
Regards,
-k
nice
+1 for this step into homebrew marketplace creating ;D
edit: some xaps show info, others dont show info and just say "done" when trying to deploy.
awsome job.
+1 as well
@diboze: Can you provide a xap which doesn't show info? (XNA Apps might not show an image but name, description, version & author should always be shown)
"Done" means -> Deployment finished
The app does currently not check if the Max Apps limit is reached. Therefore done means either "deployment finished" or "could not deploy because max apps is reached".
UPDATE V06 - 1-APR-2011:
- There is no "Done" anymore. You have a full-fledged activity log now.
- Max App error is now reported in log
-k
Thanks for your time.. hopefully this develops further. Your most recent was done on April 1, 2011 right? and not 2010..
Awesome stuff man!
I'm going to assume that in order to successfully deploy, you still need the Windows Phone Dev Tools installed, right?
Otherwise, it's a really great looking and convenient app. I look forward to more updates.
Fantastic... thanks, gonna try it
It shows "Done" but there's no App installed
clicheboy said:
It shows "Done" but there's no App installed
Click to expand...
Click to collapse
Can you send me the log (as seen in the third screen shot) or copy&paste it here?
-k
ChevronWP7 unlocker doesn't work on NoDo. In order for this to be useful beyond a niche number of users, there needs to be a way to easily unlock the phonse so that XAPs can be deployed.
I see no mention of that in the OP.
Why list a good app on that for free (if it's not free it will get pirated with the XAP being there for everyone) when you can just list it on Zune Market place for 99 cents and make some money. For responsible adults the fee to join the developer program isn't that bad.
V0.7 will only require CoreCon installed
Hi,
prjkthack said:
I'm going to assume that in order to successfully deploy, you still need the Windows Phone Dev Tools installed, right?
Click to expand...
Click to collapse
Glad you've asked. Version V0.7 will no longer use the SmartDevice.ConnectivityDll but will talk to CoreCon (ConMan2) direct. This way you'll only need a ~4MB download to deploy successfully and won't have to download the Dev Tools package.
-k
it says "No addional data: Could not extract XAP file".
linkju said:
it says "No addional data: Could not extract XAP file".
Click to expand...
Click to collapse
same problem here
kirimaru89 said:
same problem here
Click to expand...
Click to collapse
+1
,,,,,,,,,,,,,,,,
linkju said:
it says "No addional data: Could not extract XAP file".
Click to expand...
Click to collapse
Yes, looks like there are some XAPs around which have a different ZIP-Header value. Besides not showing the name, image & description this message shouldn't have influence to the deployment capabilities.
BUT: I've replaced the ZIP stack and now any XAP-file can be read. The reading is even a lot faster.
Therefore: FIXED
In addition:
CoreCon2 installer is also online -> if you don't have the Phone Dev Tools already installed you won't have to just for XAP deployment. XAPDeployX installs a minimal set of required files (< 1MB) on its own.
-k
Fable: Coin Golf error
I get the Following:
Deployment started Fable: Coin Golf
Connecting to device... success
Application Fable: Coin Golf not yet installed. Full-install cycle.
Deployment FAILED with the following ERROR:
Installation of the application failed. XAP package signature is not valid or the WP manifest file is invalid. Re-sign with valid signature and fix the manifest file.
_______________________________________________________________
Any ideas? How to fix that.
xdamir said:
Installation of the application failed. XAP package signature is not valid or the WP manifest file is invalid. Re-sign with valid signature and fix the manifest file.
_______________________________________________________________
Any ideas? How to fix that.
Click to expand...
Click to collapse
Based on the error message, you've tried to deploy a non-homebrew xap, e.g. a xap file downloaded from zune marketplace. These files are digitally signed and cannot be deployed as the tool does not remove any security measures.
-k
I have the following error. Some info wold be appreciated
Deployment started TouchXplorer
Connecting to device...
Deployment FAILED with the following ERROR:
0x89721508
wick3d00 said:
I have the following error. Some info wold be appreciated
Deployment started TouchXplorer
Connecting to device...
Deployment FAILED with the following ERROR:
0x89721508
Click to expand...
Click to collapse
Have the same problem with test XAP

WP7 FTP+HTTP Client public library - need testers

Hi Friends.
I did some attempts to make working WP7 FTP(+HTTP) library. It may allow to endpoint applications to list, upload and download ANY files (include binaries etc.) from FTP or HTTP servers.
The simpliest way is to use web service. I have got working one, but based on closed code hacked, then it is possible for my internal use only, not for public presentation. Second problem is web services unstability.
Second way is native code, allowed by RootProject or custom ROM. First I tried MFC Internet+FTP classes. But WinInet functions are disabled or not present in WP7 core (or I do not know only, how to allowe them).
Then I have got public multiplatform source FTPClient library, based on native sockets management, and did (very small) changes in it to be usable at unlocked WP7. Library is working now. But, only simple native test application is finished and I have no free time now.
If you somebody want to participate, write here or send me PM. I will send FTP account to site, containing full source code and FTP test subsite too.
It is needed:
1. To repair SIZE command. On some servers library gets code 550 SIZE is not allowed in ASCII mode (library changes mode in download time only).
2. To make better, WM/WP consistent interface.
3. To make managed wrapper (we will do it to w.i.n.c.o's wNativeCom library and as Phone Commander plugin, but WP7DllImport wrapper is needed too).
4. To make automatical tests or to test all functions manually.
5. To refactorize all project by used code opensource licence.
Martin7Pro said:
Second way is native code, allowed by RootProject or custom ROM. First I tried MFC Internet+FTP classes. But WinInet functions are disabled or not present in WP7 core (or I do not know only, how to allowe them).
Click to expand...
Click to collapse
WININET is working and internally used by MS apps.
ultrashot said:
WININET is working and internally used by MS apps.
Click to expand...
Click to collapse
Thanks for info. I thought that it must be used. But, when I use WinInet CE6 API, I have got error "This function is not supported on this system". What I must do to use InternetConnect() etc? Thanks, M.
Martin7Pro said:
Thanks for info. I thinked it must be used. But, when I use WinInet CE6 API, I have got error "This function is not supported on this system". What I must do to use InternetConnect() etc? Thanks, M.
Click to expand...
Click to collapse
I don't know what you use and from where do you get this error - it mustn't happen if you use APIs directly.
ultrashot said:
I don't know what you use and from where do you get this error - it mustn't happen if you use APIs directly
Click to expand...
Click to collapse
Code:
HINTERNET hInternetConnect;
HINTERNET hOpen = InternetOpen (L"FTP",
INTERNET_OPEN_TYPE_PRECONFIG,
NULL, NULL, 0); /// This function works OK.
if ( !hOpen )
{
AfxMessageBox(L"Failed to open WinInet");
}
else
{
hInternetConnect =
InternetConnect(hOpen,
m_URL,
INTERNET_DEFAULT_FTP_PORT,
m_Username,
m_Password,
INTERNET_SERVICE_FTP,
INTERNET_FLAG_PASSIVE,
0); /// This function returns error.
if( hInternetConnect ){
AfxMessageBox(L"Internet Connect succeded");
/*
if(FtpGetFile(hInternetConnect, m_Filename_Remote, m_Filename_Local, 0, 0, FTP_TRANSFER_TYPE_BINARY, 0))
{
}
else{
AfxMessageBox(L"Get File Failed");
return false;
}
*/
InternetCloseHandle(hInternetConnect);
}
else
{
CString csError = ErrorString(GetLastError());
TRACE(csError);
AfxMessageBox(csError);
return false;
}
InternetCloseHandle(hOpen);
}
returns:
This function is not supported on this system. Error code : 78
And another, bigger problem:
When I uncomment FtpGetFile part, application is compiled and deployed OK. But after starting it does nothing, it does not want to start totally. I do not understand, how can the unused portion of the code affect the behavior of the application starts.
Socket library does not do anything similar.
Microsoft!!!
http://support.microsoft.com/kb/2735592
But patch is developed for ARM >=5 only and licensed to PB customers.
Finished - test binaries
Hi friends. There are binaries for testing. Predefined values download nice picture from our Czech glamour atelier to your "Storage card" device directory, but you can try much other servers, directories and accounts. All directory contents may be downloaded to your :Storage card" directory, no selecting is possible in example. I mean there will problems after firewalls etc., post your feedback. WinInet really does not work on WP7 for FTP servers, there is used little changed class from D. J. Bernstein and codeproject. If anybody know, how to export STL templates from dll, help me. Use "Exit" button for appclosing instead WP7 usual "Esc".
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Edit: There is actual version (without licencing conflict probably).
Managed wrapper will be added later (by wNativeCom probably). XAP istallable example for non-developers in deeper future.
Code is totally thread unsafe, after validation I will use http://forum.xda-developers.com/showthread.php?t=2208647 for it.
You can try unfinished Silverlight version:
http://wp7ftp.howto.cz/XDA/FTPClientExample.xap ... will be updated. EDIT: Xap 1.1 version is available from April 5th.
http://wp7ftp.howto.cz/XDA/FtpClientLibrary.dll ... this native library is needed in your device "\Windows\" directory (download and transport it to place). EDIT: If it not works on any device, try to delete \Windows\FtpClientLibrary.dll and install xap 1.1 version only.
Preliminary results:
1. Native FTP library works well.
2. Managed/Native callbacks synchronisation works well. (Thanks to MS idiots I must code all desktop like functionality again). There is a most important part for mechanism studying.
3. Silwerlight for WP7 is the most stupid and bugged Microsoft feature.
Simple app description:
Type Host, User, Pass and Remote (dir) values. You can stay predefined for testing. Tap to "Connect". You can see result in scrollable block on the bottom. If unsuccess, check your internet connection and typed strings, try again. If success, tap to second empty line under "Remote" (thanks to normal multiselectbox WP7 absention). Check wanted file names and tap do bottom cross (is it normal in ListPicker to have two crosses???). Tap to "Download". It is all. You can tap to "Disc.", change remote path or server values and tap to "Connect" again. First empty line under "Remote" contains remote directories list, but I am too busy to finish any logical directory tracing with bugged and unlogical Silverlight Toolkit features.
Known bug: Edit: Solved in 1.1 version. If deadlock occures still (unavailable FTP response), app restart (or phone reboot) helps you. Do you know anybody, if SL TextBox has limited capacity and how to bind string list to ListPicker?
Attention: "Connect" again after successfull previous connect and without disconnect = possible memory leaking!
Note: It is FTP. Must wait for all directives any seconds. If unsuccess, try the same again. This is normal FTP beahiour by mobile connection.
If anybody want, libraries are opensource and you can download them from the same FTP, which is used as predefined example values, or equal http http://wp7ftp.howto.cz/XDA/. You all have full FTP access, do not change anything important, upload relevant patches only! Managed part (Visual Studio 2010 for WP) is usable along by FTPClientUIDebugManagedWrappers.sln solution. I want to add FTP as plugin to Phone Commander only, I mean two-pane UI is the best solution of the FTP client. But, standalone FTP client can be usable too, when somebody Silverlight experienced will repair listControls behaviour there (all n/m callbacks are prepared, UI finishing is necessary only). Download only is finished in native library, upload will repaired in next versions.
Version 1.3
Uploaded FTPClient v 1.3 (the newest version is allways on http://wp7ftp.howto.cz/XDA/FTPClientExample.xap) solves ListPicker issues. Instead Remote Directories ListPicker is used totally wrong, but functioning global strings listbox, I am too busy to solve SL toolkit bugs now.
Known bug: Native library losts connection sometime and does not inform main application about it. You will see empty directories list from non-empty directories in this case. Application (or sometime device) reset helps you.
Known restriction: Server must be typed by name alias, not by IP address. I do not know why still, it will probably repaired in future versions.
Version 1.4
V 1.4:
Repaired file unselect after directory changing.
Showed "./././.." instead ".." as "Up" directory for better tapping.
Response TextBox content is rounded to 1000 characters. Is it a known TextBox bug to show any first characters only?

[Kernel] X11 support in Ubuntu Touch for Galaxy Nexus (maguro)

As you know there is no support for X11 in Ubuntu Touch with default CM10 kernel. To be more correct: there is no VT (virtual terminal) devices in Ubuntu Touch at Android layer. So you can install X11 but you can't run it! I decided to fix it and made kernel with VT support. Now it's possible to run X11 server and your favorite desktop environment. However there are some bugs with it: qml-phone-shell (which is Touch Shell) renders at top level and X11 - at bottom. Still you can interact with both of them: Touch Shell on phone and X11 over VNC. Another bugs are green tint on phone display and slow x11 render.
X11 over VNC:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Installation:
1. Get Kernel:
View attachment boot.img
2. Flash it with fastboot:
Code:
fastboot flash boot boot.img
3. And now you can install X11, x11vnc and desktop environment (e.g.: xfce4):
Code:
sudo apt-get install xorg x11vnc xubuntu-desktop
4. Also you need valid config for X11:
View attachment 99-omap.zip
5. Unrar it and put to device:
Code:
adb push 99-omap.conf /data/ubuntu/usr/share/X11/xorg.conf.d/99-omap.conf
6.Reboot phone
7. Set password for x11vnc server:
Code:
x11vnc -storepasswd <your_passwd>
8. Start x11vnc server:
Code:
sudo x11vnc -dontdisconnect -notruecolor -noxfixes -shared -forever -rfbport 5900 -bg -o /var/log/x11vnc.log -rfbauth /home/phablet/.vnc/passwd
Now you can connect to device with VNC Client.
How does this compare in performance to using a remote X server, as in this thread
http://forum.xda-developers.com/showthread.php?t=2161884
With that method I found most applications to perform decent except QtCreator.
Having to render the x server on the phone itself I would think wouldn't perform that fast.
BukaKing said:
Having to render the x server on the phone itself I would think wouldn't perform that fast.
Click to expand...
Click to collapse
That's true. X Server on phone slow enough and your way is better. Perhaps this one is alternative and require only VNC client or not require client at all. If you stop qml-phone-shell, X11 will be rendered to device. So this kernel is for testing purpose only.
VNC?
Great achievement. Can you run Xserver on its own dedicated VT when VT switching is enabled? What is VNC needed for in this scenario?
I will report a bug at launchpad so that the upstream (ubuntu-touch) kernel enables VT switch.
eudoxos.eu said:
Can you run Xserver on its own dedicated VT when VT switching is enabled? What is VNC needed for in this scenario?
Click to expand...
Click to collapse
You mean to use another tty? That's possible, since there lot of them. VNC server and client will be same (e.g. x11vnc and UltraVNC).
dim319 said:
VNC server and client will be same (e.g. x11vnc and UltraVNC).
Click to expand...
Click to collapse
The X11 server can't talk to the GPU directly, even without acceleration? In that case you could drop VNC completely.
dim319 said:
qml-phone-shell (which is Touch Shell) renders at top level and X11 - at bottom.
Click to expand...
Click to collapse
You can stop phone-shell with
Code:
service ubuntu-session stop
I installed gnome on my SGS2 GT-I9100 (worked without modifying kernel from http://forum.xda-developers.com/showthread.php?t=2188621 ), now I can start gdm with:
Code:
service gdm start
I have some trouble with onscreen keyboard in gdm (onboard), but you can enable autologin in /etc/gdm/custom.conf
Code:
[daemon]
# Enabling automatic login
AutomaticLoginEnable = true
AutomaticLogin = phablet
With this /etc/X11/xorg.conf even the touchscreen works (in a laptop-touchpad way):
Code:
Section "ServerLayout"
Identifier "Layout0"
Screen "Screen0"
InputDevice "cyttsp-i2c" "CorePointer"
EndSection
Section "InputDevice"
Identifier "cyttsp-i2c"
Driver "multitouch"
# MatchIsTouchpad "true"
# Driver "evdev"
Option "CorePointer" "true"
Option "SendCoreEvents" "true"
Option "Device" "/dev/input/event2"
Option "Protocol" "Auto"
Option "Rotate" "CW"
EndSection
Section "Device"
Identifier "Card0"
Driver "fbdev"
Option "fbdev" "/dev/graphics/fb0"
# rotate screen to be in sync with touchpad orientation
Option "Rotate" "OFF" # OFF=0 CW=90 UD=180 CCW=270
EndSection
Section "Screen"
Identifier "Screen0"
Device "Card0"
EndSection
(don't forget to install xserver-xorg-input-multitouch for touchsceen!)
Unfortunately I messed up my packaging system (didn't work because no space left on device, now even apt-get install -f can't repair it ), so i will have to try again i guess...
no VT needed?
-schumi- said:
You can stop phone-shell with
Code:
service ubuntu-session stop
I installed gnome on my SGS2 GT-I9100 (worked without modifying kernel from http://forum.xda-developers.com/showthread.php?t=2188621 ), now I can start gdm with:
Code:
service gdm start
Click to expand...
Click to collapse
Does that mean that I can run xorg on Nexus 10 with the official preview images - if I stop ubuntu-session, which occupies the only virtual terminal? (Sorry for perhaps a dumb question, I don't want to re-flash ubuntu-touch over CM again just to try that).
eudoxos.eu said:
The X11 server can't talk to the GPU directly, even without acceleration? In that case you could drop VNC completely.
Click to expand...
Click to collapse
The X11 works with framebuffer (which is fb0), not with GPU. You can use VNC to view X11 from phone to host. X11 can be viewed on phone without VNC.
-schumi- said:
You can stop phone-shell with
Code:
service ubuntu-session stop
I installed gnome on my SGS2 GT-I9100 (worked without modifying kernel from http://forum.xda-developers.com/showthread.php?t=2188621 ), now I can start gdm with:
Code:
service gdm start
Click to expand...
Click to collapse
I see. This is better than making new kernel, and require only correct config for xorg. I saw few solutions: one from BukaKing,one with Xvfb, mine kernel, and yours is best one!
I've worked around the virtual terminal issue by linking PTMX in the past.
just make a new Virtual Terminal device
Code:
rm /dev/ptmx
mknod --mode 666 /dev/ptmx c 5 2
/bin/dbus-uuidgen --ensure
Thanks for the info, great thread! I'm hoping to run a single dedicated X11 app, no real need for the original interface. That said, this seemed like a good starting point.
In case it helps anyone, attached is a kernel boot image I just built for a Nexus 7 wifi (Grouper) that has CONFIG_VT enabled. Ubuntu 13.04, kernel 3.1.10.
Thanks,
Brian

[Q] OpenVPN & FireTV Help?

Hi, Hopefully somebody can help me, I am trying to use my OpenVPN connection on my FireTV
I have been following this helpful guide and have installed everything correctly but when I transfer my .ovpn config file and open it on the FireTV it should ask for my username and password, However it does not. I don't know if its perhaps a problem with how the "OpenVPN Settings" app is reading my .ovpn file (Using CyberGhost).
Or can anyone advise another way of getting it working on the FireTV?
Unfortunately I cant configure it at router level as it is not fast enough to handle the encryption.
Thanks for any advice.
Craig
~Craig~ said:
Hi, Hopefully somebody can help me, I am trying to use my OpenVPN connection on my FireTV
I have been following this helpful guide and have installed everything correctly but when I transfer my .ovpn config file and open it on the FireTV it should ask for my username and password, However it does not. I don't know if its perhaps a problem with how the "OpenVPN Settings" app is reading my .ovpn file (Using CyberGhost).
Or can anyone advise another way of getting it working on the FireTV?
Unfortunately I cant configure it at router level as it is not fast enough to handle the encryption.
Thanks for any advice.
Craig
Click to expand...
Click to collapse
If the username and password are embedded in the .ovpn file, then it won't ask you to enter them again. It should automatically connect you to the VPN server you choose.
xtrememc8 said:
If the username and password are embedded in the .ovpn file, then it won't ask you to enter them again. It should automatically connect you to the VPN server you choose.
Click to expand...
Click to collapse
I dont believe they are in the .ovpn file as when I had it briefly enabled on my router after importing the file I still had to type them in.
~Craig~ said:
I dont believe they are in the .ovpn file as when I had it briefly enabled on my router after importing the file I still had to type them in.
Click to expand...
Click to collapse
.ovpn file needs the certificate file to work properly. upload the certificate (.crt) to Fire TV if the certificate is not included in the .ovpn configuration file
xtrememc8 said:
.ovpn file needs the certificate file to work properly. upload the certificate (.crt) to Fire TV if the certificate is not included in the .ovpn configuration file
Click to expand...
Click to collapse
I think the .ovpn file also includes all the certs as when I tried it on my router I noticed they were pre-filled. I dont believe CyberGhost have a seperate .crt download.
After removing all security related info (just put XXX in place of your data like certs/usernames/passwords, DON'T REMOVE ANY LINES THOUGH), can you post your ovpn file? do you see a line which says "auth-user-pass" in the ovpn file?
I just installed OpenVPN as per the guide you referenced and works like a charm (I don't use any commerical VPN, I have OpenVPN activated on my DD-WRT router on ASUS 1900AC). I use certificates to authenticate, not username/password though. But, if you post the file, it might be helpful.
dbdoshi said:
After removing all security related info (just put XXX in place of your data like certs/usernames/passwords, DON'T REMOVE ANY LINES THOUGH), can you post your ovpn file? do you see a line which says "auth-user-pass" in the ovpn file?
I just installed OpenVPN as per the guide you referenced and works like a charm (I don't use any commerical VPN, I have OpenVPN activated on my DD-WRT router on ASUS 1900AC). I use certificates to authenticate, not username/password though. But, if you post the file, it might be helpful.
Click to expand...
Click to collapse
Hi, Sure I have attached a copy of their .ovpn file, Near the top is the line auth-user-pass
As suggested I blanked out various parts.
Thanks
Craig
~Craig~ said:
Hi, Sure I have attached a copy of their .ovpn file, Near the top is the line auth-user-pass
As suggested I blanked out various parts.
Thanks
Craig
Click to expand...
Click to collapse
Launch OpenVPN settings app; then click the "menu" button on Fire TV remote; click "prerequisites" on the menu ; make sure drive, binary files are correctly installed (success with green dots).
~Craig~ said:
Hi, Sure I have attached a copy of their .ovpn file, Near the top is the line auth-user-pass
As suggested I blanked out various parts.
Thanks
Craig
Click to expand...
Click to collapse
OK, I tested your file. This file works:
client
remote gb-openvpn.cyberghostvpn.com 443
dev tun
proto udp
auth-user-pass
resolv-retry infinite
redirect-gateway def1
persist-key
persist-tun
nobind
cipher AES-256-CBC
auth MD5
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5
tun-mtu 1500
verb 4
comp-lzo
<ca>
-----BEGIN CERTIFICATE-----
XXXX
-----END CERTIFICATE-----
</ca>
Note, the file ends at </ca>.
I found 4 problem lines in your file.
1. dhcp-release
2. dhcp-renew
(These 2 just don't work)
3. fragment 1300
4. mssfix 1300
(These 2 are not supported on Android. Please refer: https://docs.openvpn.net/docs/openvpn-connect/openvpn-connect-android-faq.html)
Once you remove these 4 lines (AND EVERYTHING AFTER THE </ca> tag), I am getting the prompt for username/password.
-- Also, please verify that your app has all the prerequisites listed by the above poster.
Hope all this helps. My suggestion is to copy my paste of the file, stick in your certificate and give it a shot. Best of luck!
---------- Post added at 09:40 PM ---------- Previous post was at 09:11 PM ----------
Make sure you do a force shutdown and reopen the app every time you make any changes to your config file and upload them to FTV. I am not sure how the caching works on Android or within this app. To be on the safe side, shutdown/reopen the app.
Your certficate file is publicly available. If after you do as the previous poster suggested and use my text as your file, post your complete file here that still does not work, if it does not work! We can go through the logs to see where the holdup might be.
I am assuming you are ONLY using username/password to log into your VPN provider. If you are required to also use client certificates, you will have to add 2 extra XML tags after the </ca> tag.
Seems CG uses a different method for OpenVPN on Android devices vs a router or PC (You'll see below). I wonder if you should of just stopped at the "Configure VPN" part of the guide & sideloaded & installed the CyberGhost APP(.apk).
For some reason https://apps.evozi.com/apk-downloader/ can't handle the ".de." in the link of the CG's apk @ the PlayStore. So I downloaded it from another device. I would recommend you install it from the PlayStore once you've added that to your FireTV. Uploaded the file below but it's always best you download your own.
Also found this: (It's from 2013 so not sure if things have changed but it is the third help item that pops up on CG's site when I do a "Android OpenVPN" search)
Configure OpenVPN for Android (> 4.x)
Configure OpenVPN for Android (> 4.x)
Posted by Uli Brügmann on 25 February 2013 01:22 PM
On Android, CyberGhost VPN can be used with OpenVPN, if the following requirements are met: OpenVPN app is preinstalled on your distribution, you own a Premium or Premium Plus CyberGhost subscription, an online CyberGhost account and a OpenVPN configuration file, which will be created for you in your account.
Please note: Android versions below 4.x don't support OpenVPN. To be able to use OpenVPN anyway, you need to root and modd your device. An alternative (and recommended) solution is the usage of the L2TP/IPSec protocol.
Click to expand...
Click to collapse
There is also and update: New VPN addresses for the manual configuration of the native protocols
New VPN addresses for the manual configuration of the native protocols
Posted by Uli Brügmann on 14 May 2014 02:21 PM
Users of mobile devices and desktop PCs who usually configure their native protocols manually, should acknowledge that CyberGhost changed some address types. While addresses used with Premium and Premium Plus subscriptions (e.g. 'us-l2tp.cyberghostvpn.com') remain unchanged, users with Special Editions or promotional activation keys should re-adjust the server addresses for L2TP, PPTP and OpenVPN connections as follows:
Click to expand...
Click to collapse
So I am only seeing the two solutions. Either use the App once you have OpenVPN fully installed which sound like you have & then add your account info. Or log into your account to get the proper files from CG which should include your credentials. Hope you figure it out & share the info. Will be using CG too, eventually.
@xtrememc8 @dbdoshi @Y314K
Thank you very much for all your help, I have tried as instructed but still no luck.
After checking the "prerequisites" menu I can confirm everything is correct, All green dots.
I have tried editing my .ovpn file and it certainly is a step forward, I removed the four lines etc and it now asks me for my username and password, But when I enter these and tick the box to enable the VPN it just keeps toggling between Connecting / Reconnecting (caused by tls-error).
Is it safe to post my untouched .ovpn file just to make sure I did not miss something crucial when I edited it? (It does contain my username)
Yes CyberGhost only require you to enter your username / password after using their .ovpn file during any OpenVPN configuration.
That's an interesting point, It never crossed my mind to try side-loading their app. Perhaps if I cant get this working I should try that. I'm wondering what would be better suited or if either can auto-start?
Craig
~Craig~ said:
@xtrememc8 @dbdoshi @Y314K
Thank you very much for all your help, I have tried as instructed but still no luck.
After checking the "prerequisites" menu I can confirm everything is correct, All green dots.
I have tried editing my .ovpn file and it certainly is a step forward, I removed the four lines etc and it now asks me for my username and password, But when I enter these and tick the box to enable the VPN it just keeps toggling between Connecting / Reconnecting (caused by tls-error).
Is it safe to post my untouched .ovpn file just to make sure I did not miss something crucial when I edited it? (It does contain my username)
Yes CyberGhost only require you to enter your username / password after using their .ovpn file during any OpenVPN configuration.
That's an interesting point, It never crossed my mind to try side-loading their app. Perhaps if I cant get this working I should try that. I'm wondering what would be better suited or if either can auto-start?
Craig
Click to expand...
Click to collapse
? Is the CG configuration file you are trying to use specifically made for Android ?? Or is it the one you had on your PC or router which I think does not suppose to work according to CG. The configuration files seem to be OS specific.
Y314K said:
? Is the CG configuration file you are trying to use specifically made for Android ?? Or is it the one you had on your PC or router which I think does not suppose to work according to CG. The configuration files seem to be OS specific.
Click to expand...
Click to collapse
Yeah its the Android specific file I am using. They offer it for os 2.0 or 4.0
The FireTV of course uses 3.0, They tell me the 2.0 will work.
~Craig~ said:
Yeah its the Android specific file I am using. They offer it for os 2.0 or 4.0
The FireTV of course uses 3.0, They tell me the 2.0 will work.
Click to expand...
Click to collapse
Well FireTV is based on Android 4.2 actually. The FireOS is 3.0 but not the Android it is based on. I would definitely change to the Android 4.0 option @ CG when making the config file.
Y314K said:
Well FireTV is based on Android 4.2 actually. The FireOS is 3.0 but not the Android it is based on. I would definitely change to the Android 4.0 option @ CG when making the config file.
Click to expand...
Click to collapse
Really, I did not know that, Just tried the 4.0 option and again removed the lines as you suggested but sadly still toggling between Connecting / Reconnecting (caused by tls-error).
Is it safe to post my untouched .ovpn file just to make sure I did not miss something crucial when I edited it? (It does contain my username)
Thanks
Craig
~Craig~ said:
Really, I did not know that, Just tried the 4.0 option and again removed the lines as you suggested but sadly still toggling between Connecting / Reconnecting (caused by tls-error).
Is it safe to post my untouched .ovpn file just to make sure I did not miss something crucial when I edited it? (It does contain my username)
Thanks
Craig
Click to expand...
Click to collapse
Try it without removing anything(any lines). That was someone else that took at look the other config file & suggested to remove lines. I would not post something related to encryption or accounts online without taking out any private info on it.
Y314K said:
Try it without removing anything(any lines). That was someone else that took at look the other config file & suggested to remove lines. I would not post something related to encryption or accounts online without taking out any private info on it.
Click to expand...
Click to collapse
Sorry, Everyone is being so helpful its hard to keep up
I should have said prior to today I had already tried it untouched. As it was it would not go as far as even trying to connect as it would not ask for a username or password
~Craig~ said:
Sorry, Everyone is being so helpful its hard to keep up
I should have said prior to today I had already tried it untouched. As it was it would not go as far as even trying to connect as it would not ask for a username or password
Click to expand...
Click to collapse
Right.. But you need to create a new configuration file over at CG with OpenVPN, Android 4.0 & the Country you will be surfing from in the settings and try that file without any modifications.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Or what settings did you have for Android on the prior file ?
Y314K said:
Right.. But you need to create a new configuration file over at CG with OpenVPN, Android 4.0 & the Country you will be surfing from in the settings and try that file without any modifications.
Or what settings did you have for Android on the prior file ?
Click to expand...
Click to collapse
I have tried it all ways each time with a new .ovpn file, ie
2.0 (untouched, did not ask for username / password)
2.0 (edited, asks for username / password but puts out the tsl error)
4.0 (untouched, did not ask for username / password)
4.0 (edited, asks for username / password but puts out the tsl error)
~Craig~ said:
I have tried it all ways each time with a new .ovpn file, ie
2.0 (untouched, did not ask for username / password)
2.0 (edited, asks for username / password but puts out the tsl error)
4.0 (untouched, did not ask for username / password)
4.0 (edited, asks for username / password but puts out the tsl error)
Click to expand...
Click to collapse
One more thing to try is the app they mention here: https://support.cyberghostvpn.com/i.../View/403/0/configure-openvpn-for-android--4x
'OpenVPN for Android' from Arne Schwabe

[How to]Root Project Astoria

Root section #​Hello guys,
after 45564564165 hours of research (joke but this took me about 1 week ._.) I finally rooted Project Astoria
Images
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Current issues​Apps can't request root because of limit of project astoria. I'm working on it.
Procedure​Perform an Hard reset first.
After settings up, deploy Root Tool.
Go to Lumia Registry Editor, click on navbar > templates and then select all.
Close the app and go to settings > Update and security > For developers.
Enable developer mode and click on Discovery. It should show to you the pin.
Download Astoria Tools.rar
Extract it.
Open that extracted folder.
You should see wconnect and so on.
On the "void" area, make SHIFT + Right click, and then click to "Open Command prompts here".
Write wconnect usb and write the pin.
After this, download AOW shortcut.7z in the attachment, extract it, copy that in your phone, example "Phone\Documents"
Now, go to your phone and open File Explorer. Open Documents and click on Aow shortcut
Go to RootFS directory and delete the file init.
Warning, there are 2 files, you need to delete "init.rc", it has about 20-19 KB.
Restart now your phone.
Keep it plugged on computer and wait about 5 minutes. it should you show "Windows Phone" device connection.
Open it and go to: Data\Users\DefApps\APPDATA\Local\Aow\RootFS
Download from Astoria folder link, the latest Rootkit & Gapps version.
Extract it.
Copy ALL Files to the phone (Data\Users\DefApps\APPDATA\Local\Aow\RootFS).
It ask you if you want to replace/merge files. Say Yes.
Press yes if it show this to you:
After you finished you need to set MTP to the standard path.
Download CustomPFD and deploy it.
Open that app.
Navigate to TWEAKS PAGE and click to General tweaks.
Navigate to UTILITIES: check FULL FS ACCESS and uncheck again.
Restart your phone.
Download Superuser.rar and extract it on Astoria tools folder.
After boot, connect to your pc and install superuser.apk (adb install superuser.apk)
After installation, you can launch the command "adb shell" and as you can see you are a root user
I'm really destroyed but at the same time happy
THANKS​djamol and ngame for his Interop Unlock method/app.
Marocco2 for his help.
snickler for his help.
Pasqui industry for making CustomPFD.
(I forgot someone?)
And all member of XDA and the world itself
Download​
Astoria Folder (Astoria Tools - AOW shortcut - Rootkit & gapps): http://astoriafolder.adeltax.com (Redirect to mediafire)
Attached some files because of problem with mediafire (stupid block)
-- EDIT --
If you have problem with installing APK after root, go to your phone and delete packageinstaller.odex using Aow shortcut and going to RootFS > System > app folder (The lowest size, approx 153 KB)
GAPPS Section​
Not yet, still working on it.
Here will be my "research"
Changelog:
v0.72
First version.
I will make GUI Installer/Package manager or something like this.
You are a monster, on fire!
\o/.
U are my hero o/
Happy rooting
Ah so you actually have to delete the init.rc files and wait for them to reproduce? That's why! Awesome job. I can't wait to test this out @ADeltaX
Hello there,
I can then the Google Play Store etc. properly use and also
Install Android applications on the Store from Google?
HannHenne said:
Hello there,
I can then the Google Play Store etc. properly use and also
Install Android applications on the Store from Google?
Click to expand...
Click to collapse
Not yet. For now it's very hard to resolve an "issue".
@ADeltaX, have you tried Insecure root or insecure su binary? The su binary that doesn't rely on a root management app like SuperSU? Because we can get direct root access on an app instantly if it requests for root with that...
Sent from Ponyville
Can we get a custom android with root now?
Got to final Stage now im getting an error code 14 Problem booting Astoria
Using Lumia Icon (929) on OS 10166
Lanex777 said:
Can we get a custom android with root now?
Click to expand...
Click to collapse
Nope, you need to edit Hyper-v library (and this is impossible)
darkcroc said:
Got to final Stage now im getting an error code 14 Problem booting Astoria
Using Lumia Icon (929) on OS 10166
Click to expand...
Click to collapse
Some files are missing on AOW folder.
Retry and replace the folder again.
mrchezco1995 said:
@ADeltaX, have you tried Insecure root or insecure su binary? The su binary that doesn't rely on a root management app like SuperSU? Because we can get direct root access on an app instantly if it requests for root with that...
Sent from Ponyville
Click to expand...
Click to collapse
Nope, Sincerely I never heard about insecure SU binary.
The SU version is a modded one, because if I use the SuperSU version, on invoking SU it say "segmentation fault" --> mean something doesn't work like shared object (library aka .so).
Someone can compile strace binary for armeabi/armeabi-v7a?
At this time Virtual Box doesn't want to start (I have Linux Mint in VM with AOSP source).
ADeltaX said:
Nope, Sincerely I never heard about insecure SU binary.
The SU version is a modded one, because if I use the SuperSU version, on invoking SU it say "segmentation fault" --> mean something doesn't work like shared object (library aka .so).
Click to expand...
Click to collapse
Some Chinese tablets I fix had insecure su... How did I know? When I adb shell it's already # . Or those only work with adb and not apps requiring su permission?
Sent from Ponyville

Categories

Resources