Search the Community

Tutorial: SSH-Tunneled VPN on Stock Android 0. Notes - no proprietary / commercial apps required. FOSS only! (Free and Open Source Software) - no root / custom ROM required - tested on Android 4.4.4 - minimum requirement: Android 4.x 1. Required apps - OpenVPN for Android - ConnectBot (any advanced SSH client will work, ) - CyanogenMod File Manager (or pick any file manager you like) I highly recommend installing all of these apps via F-Droid, a Free Open Source Software platform: https://f-droid.org/ In order to install F-Droid, you may need to temporarily "Allow installation of apps from unknown sources" in Android's security settings. 2. Generate config files Use the AirVPN Generator (https://airvpn.org/generator/) to create SSH config files for Linux (not Android). Only pick one specific server. Screenshot #1: http://i.imgur.com/FWcuXH2.jpg 3. Transfer config files We only need 2 out of the 3 generated files: - sshtunnel.key - the .ovpn profile Screenshot #2: http://i.imgur.com/p2L7T0l.jpg Transfer both of them to your Android's sdcard. Also, open the .ovpn file in a text editor and look for a line that starts with "route", it contains the server's IP - we will need it in step 5. Example: route 199.19.94.12 255.255.255.255 net_gateway That's the IP we will need. 4. Import key file in ConnectBot Launch ConnectBot. Go into menu and "Manage Pubkeys". Screenshot #3: https://i.imgur.com/uGT3UgC.jpg Import the sshtunnel.key file. Screenshot #4: https://i.imgur.com/ZPYhI6V.jpg 5. Configure SSH connection in ConnectBot Go to ConnectBot's main screen. At the bottom of the screen, enter: sshtunnel@199.19.94.12 (Notice, that's the IP we took note of in step 3). Screenshot #5A: http://i.imgur.com/ludTDgv.jpg If the default port 22 is blocked, you can try an alternative port by appending it at the end: sshtunnel@199.19.94.12:80 or sshtunnel@199.19.94.12:53 - Press Enter on your keyboard. It will try to connect and ask you to continue. Choose "Yes". Screenshot #5B: http://i.imgur.com/UJNpB9n.jpg - Cancel the connection, we need to configure it now. Long-press the newly created connection and choose "Edit host". Screenshot #6: https://i.imgur.com/n3OtM2D.jpg - Change "Use pubkey authentication" to "sshtunnel.key". Screenshot #7: https://i.imgur.com/CwfFSoO.jpg - Disable the option "Start shell session" Screenshot #8: https://i.imgur.com/l2niHqG.jpg - Consider enabling the option "Stay connected". 6. Configure SSH port forwarding - Go to ConnectBot's main screen. - Long-press the new connection again, but this time choose "Edit port forwards". "Add port forward" with the following values: Type: Local Source port: 1412 Destination: 127.0.0.1:2018 Screenshot #9: https://i.imgur.com/TBnsKQx.jpg - Press "Create port forward". Configuration of the SSH connection is now complete. - Go back to ConnectBot's main screen and tap the connection entry to establish a connection. Leave the ConnectBot app using your "home" button. 7. Import OpenVPN config - Launch "OpenVPN for Android" - Tap the folder icon. In the "Open from" dialog, choose "File Manager" Screenshot #10: https://i.imgur.com/Nhc6fDa.jpg - Pick the AirVPN_...SSH-22.ovpn file - OpenVPN will present you with an "import log", tap the "Save" file to accept. - You may want to dive into the new profile's settings, go to "ROUTING" and enable "Use default route". - in the ALLOWED APPS tab, find and select ConnectBot to exclude it from OpenVPN's routing 8. Start OpenVPN connection - In OpenVPN's main screen, tap the VPN profile to establish the connection. - Provided that the SSH connection is still running, OpenVPN will be able to connect. Congratulations 9. How to connect / disconnect from now on When establishing a connection, always - start the SSH connection first - then launch OpenVPN When disconnecting, always - disconnect the OpenVPN connection first - then disconnect SSH in ConnectBot 10. Thoughts on reliabilty and firewalling If avoiding network leaks is important to you: be careful on Android, especially on unreliable mobile or WiFi networks that might cause the connection to collapse quite often. I don't have a solution for this potential issue on stock Android, but if you're on a rooted device, you should absolutely consider installing AFWall+ (available in F-Droid). AFWall+ allows you to firewall individual apps, restricting their network access to VPN-only. (You have to dive into its settings to enable VPN mode). Finally: Good luck!

I know Windows requires a properly configured firewall to prevent DNS leaks so I'm wondering if android has a similar vulnerability. I would assume it does but I haven't seen any mention of it. If so is there there anything that can be done to prevent it? Firewall?

Hello, I signed up for an account and am trying to get it working with an old CM7 based Android device. Please do not tell me to upgrade my device unless you are willing to send me a better device yourself. I don't have the money. That out of the way, I can't find OpenVPN for Android on Play (and I think it wouldn't work anyway, since CM7 is 2.x.x), and OpenVPN Connect is "not compatible with my device." CM7 does have a built in VPN menu. I'd like to use UDP if possible but as long as my privacy is protected on random wifi I'll be a bit happier than not. The options are: Add PPTP VPNAdd L2TP VPNAdd L2TP/IPSec PSK VPNAdd L2TP/IPSec CRT VPNAdd OpenVPN VPN (OpenVPN SSL VPN)The OpenVPN settings want a server, a user authentication checkbox, a CA certificate, a user certificate, and a DNS search domain. When I tap the cert items, they bring up an empty dropdown box so I'm imagining I'd need to add the certs to my device through a different part of the settings menu. Any help?

Android XMPP (Jabber) client with OTR http://www.xabber.org/ Menu -> Settings -> XMPP accounts -> Add account Account type: XMPP Username: @xmpp.airvpn.org Password: Chat through TOR anonymity network and force TLS cryptographic protocol: if you wish so. By default it uses TLS if enabled. Click the created account, search TLS/SSL usage and force Require TLS.

Hi to all. Little issue here. i want to cast a video through chromecast to my tv (with apps like crunchyroll or youtube), but when my android phone was air-connected (with openvpn) the chromecast results as "not found" on my network. if i turn off the vpn connection, chromecast return available. instead sending chrome tabs working normally with PC (windows 7). what can i do, any suggestions?

Hi, i am having a tls key negotation problem with android, this is the log generated by Openvpn for android: I don't know what could be, pls help.

​Has anyone sucessfully made and received SIP phone calls, on Android, while connected to the VPN? I'm creating a WiFi only Android phone (No SIM card, Airplane Mode) and inputting all the open access points in my area, for a data connection. I have an OSTEL.co account, which allows for encrypted (ZRTP) SIP phone calls, using the CSIP Simple application. It also interfaces with Jitsi on the desktop. I want to activate the VPN before leaving the house, and make and receive phone calls. This all works great when using my bare home ISP connection, and on my carriers data network - but as soon as I connect to the VPN, I get nothing. Is this because I would need to forward ports in my Air account? ​ ​

Install from Google Play Store OpenVPN Connect, the official OpenVPN client for Android developed by OpenVPN Technologies, Inc. Launch your internet browser. NOTE: don't use the default Android browser because it has an unresolved bug. Chrome and Opera have been tested by us and work. Log in the AirVPN website and create the configuration files from our Config Generator. Choose Linux as platform (only direct TCP and UDP connections are supported) and finally click then "Generate" button to download it. Downloaded .ovpn files may be imported directly into the application but the behavior depends on many factors (employed browser, files manager, Android version, etc). For simplicity's sake, we assume in this guide that you saved .ovpn generated files under the Download's directory in the Android filesystem. Launch OpenVPN Connect and click on the top right menu button: Click on the "Import" button: Click on "Import Profile from SD card": Browse your *.ovpn files: Select your configuration of choice: Confirm the import by clicking the "Select" button: Click on the "Connect" button to connect: Confirm Android security prompt dialog: Wait for the connection's bootstrap process: The VPN tunnel is now established: When you need to disconnect from the VPN click on the "Disconnect" button:

Install OpenVPN for Android. Hosted on GitHub: https://github.com/schwabe/ics-openvpnNote: if you don't have access to Google Play Store, you can download "OpenVPN for Android" apk here: https://airvpn.org/repository/ics-openvpn-latest-stable.apkLaunch your internet browser.NOTE: don't use the default Android browser because it has an unresolved bug. Chrome and Opera have been tested by us and work. Connect to AirVPN website, login and create the configuration files from our Config Generator.Choose Linux as platform (only direct TCP and UDP connections are supported) and finally click the "Generate" button to download it. Downloaded .ovpn files may be imported directly into the application but the behavior depends on many factors (employed browser, files manager, Android version, etc).For simplicity's sake, we assume in this guide that you saved .ovpn generated files under the Download directory in the Android filesystem. Open OpenVPN for Android and tap the top right "Import" button: Click on the import button of the prompt dialog: Browse to *.ovpn files: Select your configuration of choice: Confim the import with the top right button: Click on the imported profile to connect: Confirm the Android's security prompt dialog: Wait for the bootstrap sequence: The VPN tunnel is now established: When you need to disconnect from the VPN click on the "Disconnect" button from the app's notification: Confirm the prompt dialog:

Hi- this isn't so much a problem as a change I've noticed since upgrading my OS to run OpenVPN Last year was running 2 main devices. Laptop on Ubuntu 9.04 and a tablet on Ice Cream Sandwich. OpenVPN wouldn't run on Ubuntu 9.04 on laptop, had to configure seperately via Network Manager. Worked a treat on laptop, except whenever my connection was disrupted and AirVPN automatically reconnected but to a different server, Facebook and Gmail would go into spasms, lock me out and I'd need to reanswer security questions. It was painful, but I felt safe I could run OpenVPN on my Android tablet, and I don't recall having this reconnection security issue at either site ( but didn't use the tablet much ) I upgraded to Mint last year, was able to install OpenVPN and run my AirVPN acct through it. But I did notice that since then, neither FB or Gmail has had security issues with this when connection drops and is re-established via a different server A colleague suggested that perhaps in the interim AirVPN may have updated it's routing so that reconnects don't cause Facebook/ Gmail to warn about session hijacks, and I should check that first Is this the case? Or is OpenVPN somehow signalling that a VPN is being used with some sites such as Facebook? TIA

Hi, Is there any development going on to enable SSH or SSL tunnels on Android to avoid DPI in China? Some other providers already have this service on Android. Thanks,

Hi, sorry for being a noob, i am trying to connect mg phone with Android 4.2.2, i followed the instructions but when i try to import the ovpn file openvpn says "profile import failed: line too long" any help? Thanks

Hi Im on a Nexus7 tablet. No matter what server / mode combination I try it just sits at Looking up DNS name when I try to connect. Then it timesout. Is this a common problem, what am I doing wrong? I am using the config generator and trying different servers TCP/UDP different ports etc. Im using the official OpenVPN Connect. Thanks for any help!

I have a suggestion for an addition to the Android installation instructions. After importing the profile into OpenVPN Connect, you should delete the profile from the Download folder. In many cases, any app with WRITE_EXTERNAL_STORAGE (and, recently, READ_EXTERNAL_STORAGE) will be able to read the contents of the Download folder, allowing a malicious app to grab your profile. The profile is more secure in the OpenVPN Connect app storage area. Is this worth adding?

I have just installed openvpn on my galaxy s4, following the instructions here. Downloaded the config file, installed in the android app, tried to connect and got the error message given here in the title. How or what do I need to change to get authorised? Any help appreciated.