OpenVPN for WM5/6 Smartphone

[jockyw2001]

I managed to install and run OpenVPN for PPC on my S710 smartphone. I'm sure it will also work on other WM5/6 smartphones.

Here are the steps to install:
1. Make sure your device is unlocked, otherwise unlock it with Microsoft Security Manager
2. Unzip the attached .zip and copy the OpenVPN directory to \Storage Card\Program Files (you can choose another path but then you will have to modify two shortcuts in \Windows\Start Menu
3. Copy the Windows directory to \ (don't worry, it only adds two files in \Windows and two shortcuts in \Windows\Start Menu)
4. Copy the two registry files form the Registry directory to your device, e.g. to \My Documents and register them. To easily do that, I recommend Resco Registry editor)

To use OpenVPN you must of course have an OpenVPN server where you can connect to. Furthermore you need to create a config file and save it as "smartphone.ovpn" to \Storage Card\Program Files\OpenVPN\config
I have put there an example file which contains a line to write a log file "client.log" to \Storage Card\Program Files\OpenVPN\log. The log file helps you to debug any connection issues.

If you want to connect to your OpenVPN server, first fire up your Wifi or GPRS/Edge/UMTS. Now start the OpenVPN Connection manager, return to the Home screen and start the OpenVPN client by clicking on the white icon in your Start menu (sorry, I didn't bother to create or link it with a nice icon ...). The VPN connection will be established on top of your existing data connection. I noticed that it is sometimes necessary to tweak connection settings in the browser (toggle from Internet to Work or vice versa. It requires some experimenting to get the hang of it).

If you want to disconnect then click on OpenVPN Connection manager and select the VPN tab. In the bottom-right corner you can see just a little part of a button. Use the D-pad to select that button (the border line will become bold if you selected it) and click it. This will send a terminate signal to client and release the TAP network interface.

My mobile operator blocks VoIP ports so I mainly use an OpenVPN connection to tunnel VoIP traffic through an Edge connection :D

Only if you have smartphone specific feedback post in this thread. Do not ask general OpenVPN questions here. For more info about OpenVPN for PPC see: http://ovpnppc.ziggurat29.com/ovpnppc-main.htm there is a forum as well.

Have fun!

[agentdr8]

Awesome info, thanks!

[Menneisyys]

Excellent info, will link it in from my forthoing OpenVPN article!

[koxx]

great job !

[timolthy_keithy]

Hi,

I have DASH WM6 from T-Mobile.

4. Copy the two registry files form the Registry directory to your device, e.g. to \My Documents and register them. To easily do that, I recommend Resco Registry editor)

I did save 2 registry files in \My Documents. But I don't know how to register them, I execute TAP Device and TAP Device1 I get "no Application Associate to it"

I downloaded regeditor Rescue, but I get an error says, Unsuccessful install because this app not for this device"

I downloaded the SKTools - Registry Editor, but don't know to to register 2 registry files.

Please help.

I like to use GRPS to VPN back to my office and use VOIP.

Thanks in Advance.

[timolthy_keithy]

Hi,

Also, I have Windows 2003 Radius Server (also VPN Server). Would it work with openVPN client? I see your sample.ovpn with some kind of security certs (TLS). Are there any steps to export the cert from Win-2003 server to this OpenVPN client? [I did copy the server cert on the phone; when I am in office, I can get phone Wi-Fi to auth with WPA TLS - Wi-Fi Access point.]


Thanks,

[jockyw2001]

No, unfortunately OpenVPN client only connects to an OpenVPN server.

[invader zog]

Hi,

I have DASH WM6 from T-Mobile.

4. Copy the two registry files form the Registry directory to your device, e.g. to \My Documents and register them. To easily do that, I recommend Resco Registry editor)


I'm having the same problem. I downloaded and installed the PHM registry editor, but I can't seem to figure out how to get it just import the registry entries. I thought about doing it manually, but the .REG files seem to be in a binary format...

[GnarusLeo]

Does anyone know how I can use IPsec VPN? I've got Bluefire VPN wich supports it, but when I try to connect it says

"The Connection Settings do not allow a VPN connection to be established. The device may be configured to use the same network for both The Internet and Work. Please verify the Connection Settings and try again (-71)"

Ive looked all over for this sort of settings, but havent been able to find any. Anyone to help?

[jockyw2001]

@invader_zog: it seems you didn't perform step 1.

Here are the steps to install:
1. Make sure your device is unlocked, otherwise unlock it with Microsoft Security Manager


@GnarusLeo: no need to hijack this thread, just open a new topic in the networking forum.

[Menneisyys]

BTW, please also repost and/or link non-Vox-only tutorials like this from the General forum so that all users can be notified of it.

[chri13]

Hi,

i am trying to connect to my VPN using your software. Everything seems OK from the log, but in the OpenVPN Connection Manager, the TAP device becomes unloaded and the VPN State is Oprhan. Do you have a similar problem ?

--
Chri13

[invader zog]

@invader_zog: it seems you didn't perform step 1.


@GnarusLeo: no need to hijack this thread, just open a new topic in the networking forum.

I did do step 1, but I ended up needing to get the registry tool recommended. I think I have everything working except I realized that the IP addresses of the back network I am VPNing into is in the same subnet as the IP that the phone has... but at least that is a networking problem I can more easily sink my teeth into...

[NetrunnerAT]

Hi,

Also, I have Windows 2003 Radius Server (also VPN Server). Would it work with openVPN client?

If you have a Win2k3 or a MS ISA ... you dont need any VPN Client! Its included in WM5 and WM6. Read VPN Articel in the Technet.

[swish77]

I downloaded regeditor Rescue, but I get an error says, Unsuccessful install because this app not for this device"

I downloaded the SKTools - Registry Editor, but don't know to to register 2 registry files.



http://www.resco.net/downloads/cab/registryen_s.ARM.CAB

i found add-in for resco explorer. :)
it works on i600.

[bcred]

Though Resco Registry Editor says it successfully imported the contents of the *.reg files, the entries aren't really there. I've tried to manually enter with Resco and with PHM, but neither can make changes in HKLM. (They can edit in HKCU, though).

I have a T-Mobile Dash with their WM6 ROM.

Any suggestions?

FWIW: Everything seems to be working OK upto the point where the TAP device is started. Certs are negotiated and settings are received from OpenVPN server, but it just cannot start the TAP device. Last lines in the logfile are:
Thu Sep 20 23:15:57 2007 us=563000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Sep 20 23:15:57 2007 us=564000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Sep 20 23:15:57 2007 us=566000 OPTIONS IMPORT: route options modified
Thu Sep 20 23:15:57 2007 us=568000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Sep 20 23:15:57 2007 us=663000 There are no TAP-Win32 adapters on this system.
Thu Sep 20 23:15:57 2007 us=664000 Exiting

Update: I have successfully imported the Registry keys using Resco Registry Editor. They fix was to install the application unlock cab found at: http://forum.xda-developers.com/showpost.php?p=1146363&postcount=30

Now I can establish an OpenVPN to my home network and browse internal systems (Needed to set IE to use "Work" network: Menu->Tools->Options->Connections: Un-check Audomatically detect settings, Select Network: Work).

[otheitis]

I have the HTC S710 vox,i made all the pass for installing the VPN,but i can not use this aplication.The program start but i can not modify nothing and if i press the button ok the aplication make exit.Please help me!

[schnurzelat]

It seems i had the same problem like bcred, but his solution doesn't work for me.

I have a Vodafone VPA Compact GPS (HTC P3600, HTC Trinity) Original branded WM5


Mon Feb 18 09:50:27 2008 us=712000 There are no TAP-Win32 adapters on this system.
Mon Feb 18 09:50:27 2008 us=713000 Exiting

I used the unlock cab and the imported the Registry Keys. But it still doesn't work. Always the message above.

While using the OpenVPN Manager i see one TAP device, which is not loaded. If i try to start it, a message came: cannot be started. I can delete the adapter, install a new one, but it is still not useable.

In the networkcards tab, i can see the "TAP1 Virtual Ethernet Device" and "Virtual Ethernet Intermediate Miniport". But there are no options available.

Has anyone a suggestion for me?

Thanks
schnurzelat

[Axet]

Hi,

I've been using openvpn for a while now with my Kaiser and it rocks. Yet I do have one small issue I'd like help with... whenever I turn the screen off or if it turns itself off (power saving settings) the vpn drops. I'd like it to stay live even when the screen is off. How can I acheive this ?

Thanks,

Axet

[uccellino]

I would guess changing the power saving settings for the WIFI would help this (if you're using WIFI) - most have a setting to turn WIFI off if the screen goes off

[Axet]

My vpn is going over the HSDPA (3G+) network :/

[juliensweiss]

Hello,
i have successfully installed OpenVPN on a Motorola Q9h.
I am trying to route all traffic through VPN, without success ...
Here are the config files:

Server:
dev tap
ifconfig 10.8.0.1 255.255.255.0
push "redirect-gateway"
log-append openvpn.log
proto udp
tls-server
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
tls-auth ta.key 0
client-to-client
duplicate-cn
mode server
keysize 256
keepalive 10 60
ping-timer-rem
comp-lzo
persist-key
persist-tun


Client:
proto udp
port 1194
verb 5
dev tap
remote xxx.yyy.zzz.ttt
conmgr "auto" 1
keysize 256
route-method exe
route-delay 2
management 127.0.0.1 10000
service openvpn_exit_1
dhcp-option DNS dd.dd.dd.dd
dhcp-option DNS dd.dd.dd.dd
tls-client
ca "\\Storage Card\\Program Files\\OpenVPN\\config\\ca.crt"
cert "\\Storage Card\\Program Files\\OpenVPN\\config\\client1.crt"
key "\\Storage Card\\Program Files\\OpenVPN\\config\\client1.key"
tls-auth "\\Storage Card\\Program Files\\OpenVPN\\config\\ta.key" 1
log "\\Storage Card\\Program Files\\OpenVPN\\log\\client.log"
keepalive 10 60
persist-key
persist-tun
ping-timer-rem
resolv-retry infinite
nobind
comp-lzo
ifconfig 10.8.0.6 255.255.255.0
route remote_host 255.255.255.255 net_gateway
route-gateway 10.8.0.1
redirect-gateway

I have selected for the Work network the TAP device, when i open Internet Explorer and i select Work network, i am able to open just the http://10.8.0.1 address, but cannot open anything else. I have tried both host names and IP addresses ... Does anybody have any ideea what is wrong ?
PS i used the same configuration on a HTC Advantage also with WM6 and it worked fine ...

[weazl]

@schnurzelat

I have exactly the same props as you. Have you managed to set up a VPN-Connection yet?

Regards,

weazl

[hashman]

this is excellent news
going to try right now on samsung i320... will update

[ehabh]

I think it is this line that is allowing you only to access 10. addresses

ifconfig 10.8.0.1 255.255.255.0

You should look at the openvpn documents.

[vomacko]

Hi, some time from last post...


ok works for me htc touch pro - wm 6.1 pro