I managed to install and run OpenVPN for PPC on my S710 smartphone. I'm sure it will also work on other WM5/6 smartphones.
Here are the steps to install:
1. Make sure your device is unlocked, otherwise unlock it with Microsoft Security Manager
2. Unzip the attached .zip and copy the OpenVPN directory to \Storage Card\Program Files (you can choose another path but then you will have to modify two shortcuts in \Windows\Start Menu
3. Copy the Windows directory to \ (don't worry, it only adds two files in \Windows and two shortcuts in \Windows\Start Menu)
4. Copy the two registry files form the Registry directory to your device, e.g. to \My Documents and register them. To easily do that, I recommend Resco Registry editor)
To use OpenVPN you must of course have an OpenVPN server where you can connect to. Furthermore you need to create a config file and save it as "smartphone.ovpn" to \Storage Card\Program Files\OpenVPN\config
I have put there an example file which contains a line to write a log file "client.log" to \Storage Card\Program Files\OpenVPN\log. The log file helps you to debug any connection issues.
If you want to connect to your OpenVPN server, first fire up your Wifi or GPRS/Edge/UMTS. Now start the OpenVPN Connection manager, return to the Home screen and start the OpenVPN client by clicking on the white icon in your Start menu (sorry, I didn't bother to create or link it with a nice icon ...). The VPN connection will be established on top of your existing data connection. I noticed that it is sometimes necessary to tweak connection settings in the browser (toggle from Internet to Work or vice versa. It requires some experimenting to get the hang of it).
If you want to disconnect then click on OpenVPN Connection manager and select the VPN tab. In the bottom-right corner you can see just a little part of a button. Use the D-pad to select that button (the border line will become bold if you selected it) and click it. This will send a terminate signal to client and release the TAP network interface.
My mobile operator blocks VoIP ports so I mainly use an OpenVPN connection to tunnel VoIP traffic through an Edge connection
Only if you have smartphone specific feedback post in this thread. Do not ask general OpenVPN questions here. For more info about OpenVPN for PPC see: http://ovpnppc.ziggurat29.com/ovpnppc-main.htm there is a forum as well.
Have fun!
Awesome info, thanks!
Excellent info, will link it in from my forthoing OpenVPN article!
great job !
Hi,
I have DASH WM6 from T-Mobile.
4. Copy the two registry files form the Registry directory to your device, e.g. to \My Documents and register them. To easily do that, I recommend Resco Registry editor)
I did save 2 registry files in \My Documents. But I don't know how to register them, I execute TAP Device and TAP Device1 I get "no Application Associate to it"
I downloaded regeditor Rescue, but I get an error says, Unsuccessful install because this app not for this device"
I downloaded the SKTools - Registry Editor, but don't know to to register 2 registry files.
Please help.
I like to use GRPS to VPN back to my office and use VOIP.
Thanks in Advance.
Hi,
Also, I have Windows 2003 Radius Server (also VPN Server). Would it work with openVPN client? I see your sample.ovpn with some kind of security certs (TLS). Are there any steps to export the cert from Win-2003 server to this OpenVPN client? [I did copy the server cert on the phone; when I am in office, I can get phone Wi-Fi to auth with WPA TLS - Wi-Fi Access point.]
Thanks,
No, unfortunately OpenVPN client only connects to an OpenVPN server.
timolthy_keithy said:
Hi,
I have DASH WM6 from T-Mobile.
4. Copy the two registry files form the Registry directory to your device, e.g. to \My Documents and register them. To easily do that, I recommend Resco Registry editor)
Click to expand...
Click to collapse
I'm having the same problem. I downloaded and installed the PHM registry editor, but I can't seem to figure out how to get it just import the registry entries. I thought about doing it manually, but the .REG files seem to be in a binary format...
Does anyone know how I can use IPsec VPN? I've got Bluefire VPN wich supports it, but when I try to connect it says
"The Connection Settings do not allow a VPN connection to be established. The device may be configured to use the same network for both The Internet and Work. Please verify the Connection Settings and try again (-71)"
Ive looked all over for this sort of settings, but havent been able to find any. Anyone to help?
@invader_zog: it seems you didn't perform step 1.
Here are the steps to install:
1. Make sure your device is unlocked, otherwise unlock it with Microsoft Security Manager
Click to expand...
Click to collapse
@GnarusLeo: no need to hijack this thread, just open a new topic in the networking forum.
BTW, please also repost and/or link non-Vox-only tutorials like this from the General forum so that all users can be notified of it.
Something strange...
Hi,
i am trying to connect to my VPN using your software. Everything seems OK from the log, but in the OpenVPN Connection Manager, the TAP device becomes unloaded and the VPN State is Oprhan. Do you have a similar problem ?
--
Chri13
jockyw2001 said:
@invader_zog: it seems you didn't perform step 1.
@GnarusLeo: no need to hijack this thread, just open a new topic in the networking forum.
Click to expand...
Click to collapse
I did do step 1, but I ended up needing to get the registry tool recommended. I think I have everything working except I realized that the IP addresses of the back network I am VPNing into is in the same subnet as the IP that the phone has... but at least that is a networking problem I can more easily sink my teeth into...
timolthy_keithy said:
Hi,
Also, I have Windows 2003 Radius Server (also VPN Server). Would it work with openVPN client?
Click to expand...
Click to collapse
If you have a Win2k3 or a MS ISA ... you dont need any VPN Client! Its included in WM5 and WM6. Read VPN Articel in the Technet.
timolthy_keithy said:
I downloaded regeditor Rescue, but I get an error says, Unsuccessful install because this app not for this device"
I downloaded the SKTools - Registry Editor, but don't know to to register 2 registry files.
Click to expand...
Click to collapse
http://www.resco.net/downloads/cab/registryen_s.ARM.CAB
Click to expand...
Click to collapse
i found add-in for resco explorer.
it works on i600.
No TAP Device ... Can't regedit HKLM
Though Resco Registry Editor says it successfully imported the contents of the *.reg files, the entries aren't really there. I've tried to manually enter with Resco and with PHM, but neither can make changes in HKLM. (They can edit in HKCU, though).
I have a T-Mobile Dash with their WM6 ROM.
Any suggestions?
FWIW: Everything seems to be working OK upto the point where the TAP device is started. Certs are negotiated and settings are received from OpenVPN server, but it just cannot start the TAP device. Last lines in the logfile are:
Thu Sep 20 23:15:57 2007 us=563000 OPTIONS IMPORT: timers and/or timeouts modified
Thu Sep 20 23:15:57 2007 us=564000 OPTIONS IMPORT: --ifconfig/up options modified
Thu Sep 20 23:15:57 2007 us=566000 OPTIONS IMPORT: route options modified
Thu Sep 20 23:15:57 2007 us=568000 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Sep 20 23:15:57 2007 us=663000 There are no TAP-Win32 adapters on this system.
Thu Sep 20 23:15:57 2007 us=664000 Exiting
Update: I have successfully imported the Registry keys using Resco Registry Editor. They fix was to install the application unlock cab found at: http://forum.xda-developers.com/showpost.php?p=1146363&postcount=30
Now I can establish an OpenVPN to my home network and browse internal systems (Needed to set IE to use "Work" network: Menu->Tools->Options->Connections: Un-check Audomatically detect settings, Select Network: Work).
I have the HTC S710 vox,i made all the pass for installing the VPN,but i can not use this aplication.The program start but i can not modify nothing and if i press the button ok the aplication make exit.Please help me!
It seems i had the same problem like bcred, but his solution doesn't work for me.
I have a Vodafone VPA Compact GPS (HTC P3600, HTC Trinity) Original branded WM5
Code:
Mon Feb 18 09:50:27 2008 us=712000 There are no TAP-Win32 adapters on this system.
Mon Feb 18 09:50:27 2008 us=713000 Exiting
I used the unlock cab and the imported the Registry Keys. But it still doesn't work. Always the message above.
While using the OpenVPN Manager i see one TAP device, which is not loaded. If i try to start it, a message came: cannot be started. I can delete the adapter, install a new one, but it is still not useable.
In the networkcards tab, i can see the "TAP1 Virtual Ethernet Device" and "Virtual Ethernet Intermediate Miniport". But there are no options available.
Has anyone a suggestion for me?
Thanks
schnurzelat
Hi,
I've been using openvpn for a while now with my Kaiser and it rocks. Yet I do have one small issue I'd like help with... whenever I turn the screen off or if it turns itself off (power saving settings) the vpn drops. I'd like it to stay live even when the screen is off. How can I acheive this ?
Thanks,
Axet
I would guess changing the power saving settings for the WIFI would help this (if you're using WIFI) - most have a setting to turn WIFI off if the screen goes off
Hello
It is possible to make a ROM with some personal information like name, phone number, e-mail adress, company name, ... in it?
Maybe it's possible to put in cooked ROM additional settings like network connections, exchange settings, email settings, my own start menu structure?
nemesisss said:
Hello
It is possible to make a ROM with some personal information like name, phone number, e-mail adress, company name, ... in it?
Maybe it's possible to put in cooked ROM additional settings like network connections, exchange settings, email settings, my own start menu structure?
Click to expand...
Click to collapse
You can make a CAB with all the settings you need. I did this in order to not have to put my Name/Address, email accounts, and many more tweaks onto each new ROM I flash.
For me to do it it took some time searching the forums and searching the registry of my Hermes which was what I was using when I made the CAB. I even went as far as adding my home router WEP key to the settings.
You have to spend some time to create your masterpiece but it was worth it!
There's a lot of good information in the UC thread located here. Included are tools that convert exported registry keys to xml along with how to create a cab that contains xml CSPs.
The good news is that the cab will give you easy customization. Better yet, the xml that goes into it can be used directly by any UC capable ROM to automatically do your provisioning every time you hard reset.
I cheated and used OEMIZER to get a RGU and a PROVXML file that let me build my own custom CAB that does the following:
1. Owner Information (from the RGU - see Sleuth's UC Customization thread for a tool to convert REG/RGU files to the XML file you need).
2. Exchange settings
3. GMail Settings
4. Appropriate KaiserTweak settings for my use.
Most everything you need can be found at http://forum.xda-developers.com/showthread.php?t=366337.
OEMIZER can be found at http://tiermann.net/index.php?option=com_content&task=view&id=3&Itemid=3
With just a little work, it isn't very difficult...
Hi All,
I've tried searching the forums, but couldn't quite find what I was looking for.
In my line of work, I have the need to many different complex passwords. Each of which change at different intervals, and have different logins.
I am looking for:
An application which will securely store my passwords on my device. I used to have a fantastic memory, but more recently due to the increase in accounts and password policies, I find I am using the "I forgot my password" routine more frequently. Ideally something I can use on both the main PC and sync with the device would be cool, but not essential.
I've looked at SplashID and CodeWallet Pro.
Are there any applications the folks within XDA Devs can recommend?
Cheers
WTFH
PS. Don't suggest Post-It's stuck to the monitor, or using my memory!
I'm using KeePass, on both the PC and my WM6 device.
PC version is at: http://keepass.info/
PPC version is at: http://keepasssd.sourceforge.net/
My password file is in a folder I sync with the desktop.
eflow said:
I'm using KeePass, on both the PC and my WM6 device.
PC version is at: http://keepass.info/
PPC version is at: http://keepasssd.sourceforge.net/
My password file is in a folder I sync with the desktop.
Click to expand...
Click to collapse
My vote for KeePass.
Awesome program.
Hi all! With my UNI I would like to use an application (Good Link, Good Messaging). As I try to connect to the server the client application push some information from my device to the server. One of this infos are the Settings / Device Information / Identity / Model No.:, which is currently "PU10"
May I change this info? If Yes, how can I chage it forexample to the following string: "I600xxgd1"
Norbicsek said:
Hi all! With my UNI I would like to use an application (Good Link, Good Messaging). As I try to connect to the server the client application push some information from my device to the server. One of this infos are the Settings / Device Information / Identity / Model No.:, which is currently "PU10"
May I change this info? If Yes, how can I chage it forexample to the following string: "I600xxgd1"
Click to expand...
Click to collapse
Unlikely - I'm pretty sure its written into the actual device, if not then the ROM
If you do find a way, please post it (it'll be interesting to see...)
Alternatively, install the program on the correct device, then grab all of the files and registry keys (or get the files\registry keys off someone who does have that device)
I recently found DojoCrypt a utility that will activate the native OS based encryption on WM 6.1 and later devices without the need for a server & server push or the use of third party software.
According to msdn article bb964600 the following files/folders are encrypted by default.
User documents: \My Documents
Sync email: \cemail.vol
PIM data: \pim.vol
Sync email stream properties: \windows\messaging
Sync email attachments: \windows\messaging\attachments
Temporary internet cache: \windows\profiles\guest\Temporary Internet Files​
It will also allow you to specify exclusions & inclusions.
I spent a lot of time searching for something like this that was affordable (free in this case) & didn't overly affect device performance* & thought others might want to know about this tool.
My Question: Can anyone speak to the quality of security provided by MS's implementation of the encryption. It uses AES-128 but I'm not asking about the quality of AES-128 rather the implementation of security on the WM device.
Thank you for any info or pointers to other resources.
Ed
*In the past I used the long defunct "PDA defense" on my old PPC 2003 and then Utimaco (now sophos) Safeguard PDA on my Tytn & Tytn2 and both seriously degraded performance & stability .
it's good enough so people who have to reset or flash roms always lose
all their encrypted data
it should only ever be used when the data having to be secret is more important then the data itself