[GUIDE] OpenVPN for Dummies

Thanks to all the developers who put the bits & pieces together; without them it wouldn't be possible. You don't need to be an Android or Linux guru to get it working - SDK, ADB, etc. are not required.



What is OpenVPN?

OpenVPN is a free and open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses SSL/TLS security for encryption and is capable of traversing network address translators (NATs) and firewalls.


What's Covered in this Guide:

A step by step tutorial for configuring OpenVPN on the Evo 4G. Use at your own risk!


Not Covered:

Yea but how do I?


Requirements:

Rooted Evo

USB Data Cable

Amon RA Recovery - RA-evo-v1.8.0 (or above)
http://files.androidspin.com/downloads.php?dir=amon_ra/RECOVERY/&file=recovery-RA-evo-v1.8.0.img

Terminal Emulator (download from market)

Super Manager (download from market)

Busybox (download from market)

OpenVPN Installer (download from market)

OpenVPN Settings (download from market)

Tun.ko built for your specific kernel (recommend netarchy-toastmod, Stable: 4.1.9.1 or higher)
http://xdaforums.com/showthread.php?t=719763&highlight=amon

Modified openvpn executable & matching iproute-wrapper script.
http://xdaforums.com/attachment.php?attachmentid=385959&d=1282516002

An OpenVPN Account & config files.

GTech Net Tools (download from market).



Let's begin.


Root your Evo if not already done.

Install GTech Net Tools & run; select My IP & Get IP Address; External Address & Local Information are issued from your cell provider data network; record these values for later comparison.

Install Amon RA.

Install Busybox to /system/xbin.

Install OpenVPN Installer (binaries) to /system/xbin; select path to ifconfig: /system/xbin.

Install OpenVPN Settings (settings later in this guide).

Install custom kernel with built in tun.ko support; flash via Amon RA recovery & reboot.

Install Terminal Emulator.

Install Super Manager.

Open your openvpn config file & add the following to the last line, then save: 'iproute /system/xbin/iproute-wrapper.sh'.

***Make sure your config.ovpn file has NO_SPACES in name***

Connect Evo to PC via USB cable; select 'Disk Drive' & 'Done'.

Create folders on SDCard 'Downloads' (if not already there), and 'openvpn'.

Copy your config.ovpn files to SDCard/openvpn folder

Copy 'openvpn' & 'iproute-wrapper.sh' to Downloads folder on SDCard.

Disconnect USB cable.

Start Super Manager; select Settings; Enable ROOT function; press back button on phone; browse to SDCard/Downloads - copy & paste 'openvpn' & 'iproute-wrapper.sh' to /system/xbin.

Start Terminal Emulator.

@ $, type su & enter key; should now see #

Type 'chmod 755 /system/xbin/openvpn' & enter; then type 'exit' & enter.

Start Super Manager; select Settings; disable ROOT function.

Press Home button on phone.

Start OpenVPN Settings; press 'menu' button on phone; select 'advanced'; check 'load tun kernel module'.

Click 'TUN modules settings'; Check Load module using 'insmod'.

Enter Path to tun module: '/system/lib/modules/tun.ko'.

Select 'path to openvpn binary'; enter '/system/xbin/openvpn'.

Check 'Fix HTC Routes'.

Press Back button on phone.

Check OpenVPN; check your_server.ovpn; 'Username/Password required' should appear on Status bar at top of phone.

Slide Status bar down, click on 'Username/Password required', enter info & click 'OK'.

Under yourserver.ovpn view status - Wait for 'connecting...auth...get config'...should be 'connected to 111.111.111.111 as 222.222.222.222'.

Start GTech Net Tools; select My IP & Get IP Address; External Address & Local Information should now be issued from your OpenVPN provider; compare to original data you recorded earlier.

Press Home button on phone...do you see the 'Key' icon on Status bar?

If Yes.............You have done it!



Additional Resources:


OpenVPN

http://openvpn.net/

Wikipedia - OpenVPN

http://en.wikipedia.org/wiki/Openvpn



Enjoy!

The guide is limited to OpenVPN on the Evo 4G Android platform.

Good questions - focus on keeping things simple.

1Brite1 said:

I am stuck at the Open your openvpn config file & add the following to the last line, then save: 'iproute /system/xbin/iproute-wrapper.sh" step. Is this on the EVO or on the OpenVPN account?

Click to expand...

Click to collapse

Your OpenVPN provider posts config files to download required for their service to work. Normally no editing is necessary, but for Android it is at least for now (*more on why later).
Their config files package may include many different types of files, look for the one with .ovpn extension (there may be several - server_1.ovpn, server_2.ovpn, etc.); open the file(s) with your text editor; normally the last line of this file is 'auth-user-pass'; create a new last line 'iproute /system/xbin/iproute-wrapper.sh' (without quotation marks) and save. Copy this edited file & any other config files your provider requires to the Evo /sdcard/openvpn folder you created earlier.

1Brite1 said:

I signed up for the OpenVPN account and am using a Macbook-with Windows 7 installed via Parallels, an iMac and another laptop running Linux Ubuntu. Which program do I download for my setup on the OpenVPN site so that they all work? I don't see one for OSX? I have tried the EVOVPN app and it works great just for the phone....but computers won't hook up even though I have them set up using the same LAN settings.

Click to expand...

Click to collapse

The good news is whatever OpenVPN service provider you choose, it should work with whatever device you have. However, each operating system has different requirements, so there are clients specific to each of these OS's. For example, Windows client = openvpn client, Linux = gopenvpn, etc. For the Evo, & Android in general, the client is 'OpenVPN Settings', setup of which is included in the guide. 'EVOVPN' is not 'OpenVPN', we're not sure what it is, they don't offer any support or documentation; advise to stay away until more info is available.

1Brite1 said:

I am hoping for something that will let me use a secure server using the EVO connecting all of my computers.

Click to expand...

Click to collapse

As above, only one service provider is needed, the clients vary by operating system. If you're referring to remotely accessing your other computers via the Evo with OpenVPN running, well yes that works but is not covered here; setup for that would be the same whether or not you use OpenVPN.


*The edit to .ovpn config file is required at this time to let the Android client know which routing table is being used; it may become unnecessary with future updates.

Some other great providers not listed above:

Anonyproz - anonyproz.com

blackvpn - blackvpn.com


There are many out there, find one that suits you.

I don't recommend changing anything in the scripts or files. Go back to guide & make sure you have completed all the steps exactly. Possibly you have installed something in a different location, etc.

If still not working, then try a different kernel - you did replace the kernel right?

This one is working as of now, with ROM 3.70.651.1

netarchy-toastmod-4.3-bfs-nohavs-noUV-sbc-universal (No Undervolting)

gpz1100 said:

Why would I want/need vpn (openvpn) on my android device

Click to expand...

Click to collapse

Why would you volunteer your unprotected data to anyone who seeks it?

gpz1100 said:

why would I be connecting to my network using the handset? I'd have the vpn client running on my laptop or netbook.

Click to expand...

Click to collapse

vpn is not openvpn. Why would you connect any device to the internet without security?

Big brother is watching. Really.

enormous said:

If I comment out the "iproute /system/xbin/iproute-wrapper.sh" from my config file, then the vpn will say it is connected, but I won't be able to access anything.

Click to expand...

Click to collapse

Most likely a kernel issue, try replacing with one that has known tun.ko support. Do not comment out 'iproute /system/xbin/iproute-wrapper.sh' or it won't work.