OpenVPN PPC/Windows Mobile

WebFooL · 12-28-2009, 11:08 AM

Hi,

I am thinking of building a installer (or add to the existing) for Windows Mobile/Pocket PC devices.

Do ppl wan't this or is it just me?

My First thoughts is to add check box to the normal OpenVPN installer and during section that ask the user to sync to the Windows Mobile device.

pls let me know what you think.

dscammell · 12-28-2009, 11:30 AM

I would have to say a resounding "YES!"

I tried using the "other" OpenVPN app for Windows Mobile, which is several years old and does not play nicely with Windows Phone 6.5.x, although it does work well with Windows Mobile 5.x (I used it years ago).

I think it would be very helpful to have a current implementation of OpenVPN for Windows Phone 6.5.x.

I will even offer my services as a Beta tester.

jzero · 12-28-2009, 07:10 PM

I got my first smartphone with Windows Mobile (WM6.5), 2 weeks ago. Believe me for my surprise I found openvpn ppc, and decided give a try just to test RDP from smartphone.

My happiness finished faster as the download file and transfer it to my smartphone.
It does not install, as many other apps I found.

Perhaps due to young wm6.5.

Of course would be good have such feature.
But I think you have a hard work ahead.

WebFooL · 12-30-2009, 11:38 AM

So far.

Here is my check list.

Active:
Generating a openvpn.inf file and with cabwiz.exe generate a cab file.

Content of the openvpn.inf:

Code:

[Version]
Signature = "$Chicago$"
Provider = "WebFooL Beta OpenVPN Installer"
CESignature = "$Windows CE$"

[CEStrings]
AppName = "OpenVPN"
InstallDir = "%CE1%\%AppName%"

[Strings]
Creator=WebFooL

[SourceDisksNames]
1 = ,"Disk-9939219",,C:\temp\OpenVPN
2 = ,"Disk-7638437",,C:\temp\OpenVPN\config
3 = ,"Disk-5541874",,C:\temp\Windows
4 = ,"Disk-6551378",,C:\temp\Windows\Start Menu

[SourceDisksFiles]
"Doclist.dll"=1
"langres.dll"=1
"MFCCE300.DLL"=1
"openvpn.exe"=1
"ovpncmgr.exe"=1
"setup_cmgr.dll"=1
"sample.ovpn"=2
"secret.key"=2
"smartphone.ovpn"=2
"ovpncmgr.en.htm"=3
"tap-ce.dll"=3
"OpenVPN.lnk"=4
"OpenVPNcmgr.lnk"=4

[CopyFiles-3838342]
Doclist.dll,Doclist.dll,
langres.dll,langres.dll,
MFCCE300.DLL,MFCCE300.DLL,
openvpn.exe,openvpn.exe,
ovpncmgr.exe,ovpncmgr.exe,
setup_cmgr.dll,setup_cmgr.dll,

[CopyFiles-7859516]
sample.ovpn,sample.ovpn,
secret.key,secret.key,
smartphone.ovpn,smartphone.ovpn,

[CopyFiles-342978]
ovpncmgr.en.htm,ovpncmgr.en.htm,
tap-ce.dll,tap-ce.dll,

[CopyFiles-9377231]
OpenVPN.lnk,OpenVPN.lnk,
OpenVPNcmgr.lnk,OpenVPNcmgr.lnk,

[DestinationDirs]
CopyFiles-3838342=0,%InstallDir%
CopyFiles-7859516=0,%InstallDir%\config
CopyFiles-342978=0,%CE2%
CopyFiles-9377231=0,%CE17%
DefaultDestDir=0,%InstallDir%

[DefaultInstall]
Copyfiles=CopyFiles-3838342,CopyFiles-7859516,CopyFiles-342978,CopyFiles-9377231

[aRegistrySection]
HKLM,Comm\TAP Device 1,DisplayName,0x00000002,TAP1: Virtual Ethernet Device
HKLM,Comm\TAP Device 1,Group,0x00000002,NDIS
HKLM,Comm\TAP Device 1,ImagePath,0x00000002,tap-ce.dll
HKLM,Comm\TAP Device 1\Parms,BusNumber,0x00010003,0
HKLM,Comm\TAP Device 1\Parms,BusType,0x00010003,0
HKLM,Comm\TAP Device 1\Parms,StreamName,0x00000002,TAP
HKLM,Comm\TAP Device 1\Parms,StreamIndex,0x00010003,1
HKLM,Comm\TAP Device 1\Parms\TCPIP,LeaseObtainedLow,0x00010003,-282597632
HKLM,Comm\TAP Device 1\Parms\TCPIP,LeaseObtainedHigh,0x00010003,29865991
HKLM,Comm\TAP Device 1\Parms\TCPIP,AutoInterval,0x00010003,300
HKLM,Comm\TAP Device 1\Parms\TCPIP,AutoMask,0x00010002,2
HKLM,Comm\TAP Device 1\Parms\TCPIP,AutoSubnet,0x00010002,1
HKLM,Comm\TAP Device 1\Parms\TCPIP,AutoSeed,0x00010003,0
HKLM,Comm\TAP Device 1\Parms\TCPIP,PrevReqOptions,0x00000003,07,01,03,06,0F,2C,2E,2F
HKLM,Comm\TAP Device 1\Parms\TCPIP,T2,0x00010003,27594000
HKLM,Comm\TAP Device 1\Parms\TCPIP,T1,0x00010003,15768000
HKLM,Comm\TAP Device 1\Parms\TCPIP,Lease,0x00010003,31536000
HKLM,Comm\TAP Device 1\Parms\TCPIP,DhcpServer,0x00010002,1
HKLM,Comm\TAP Device 1\Parms\TCPIP,DhcpSubnetMask,0x00010002,2
HKLM,Comm\TAP Device 1\Parms\TCPIP,DhcpIPAddress,0x00010002,1
HKLM,Comm\TAP Device 1\Parms\TCPIP,AutoCfg,0x00010003,1
HKLM,Comm\TAP Device 1\Parms\TCPIP,EnableDHCP,0x00010003,1
HKLM,Comm\TAP Device,DisplayName,0x00000002,TAP Virtual Ethernet Device
HKLM,Comm\TAP Device,Group,0x00000002,NDIS
HKLM,Comm\TAP Device,ImagePath,0x00000002,tap-ce.dll
HKLM,Comm\TAP Device\Linkage,Route,0x00010002,T

On Hold:
Changing Nsis script to generate cab file during the normal installation of openvpn.
Includes Untangle Client Certificate during the creation.
Add Section to the nsis script for the WM/PPC edition.
Beta test.

bigdessert · 12-30-2009, 12:18 PM

WebFooL I will love you forever it you make this happen!!!!

WebFooL · 12-30-2009, 12:27 PM

I have a few more days to work with this then I have to work with serious things again

But if i keep to my time line i should have a beta packet tomorrow night :P
Hopefully before the fireworks

WebFooL · 12-31-2009, 02:31 AM

Ok i need some help :P

The Version of openvpn i use is picky about the path for the keys/and certs.
So either I need to change the path for them or apply them to the .ovpn file.

The problem i have here is with the client cert file.
When i apend it to the .ovpn file i get

Code:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476266994 (0x1c6341f2)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: CN=ca.does.not.exists, C=SE, ST=Sormalnd, L=Eskilstuna, O=Hallsta Maskinstation, OU=54e45c6e021ffd9/dnQualifier=certificateAuthority
        Validity
            Not Before: Nov 21 14:43:23 2009 GMT
            Not After : Nov 19 14:43:23 2019 GMT
        Subject: C=SE, ST=Sormalnd, O=Hallsta Maskinstation, OU=54e45c6e021ffd9, CN=webfool_stand/dnQualifier=client
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1536 bit)
                Modulus (1536 bit):
                    00:c1:b6:f5:25:f5:5b:c2:6f:81:a3:07:f7:0d:eb:
                    5f:dd:a4:6b:dc:d8:15:20:81:16:9c:00:0f:ac:01:
                    17:61:64:b0:28:a5:67:0c:cf:23:ab:46:d3:df:29:
                    b7:90:d7:19:3c:f9:c6:c4:a4:cb:d2:54:64:04:7d:
                    12:0a:0d:3f:ab:b6:9b:8e:ab:27:18:17:6b:6f:73:
                    24:ca:8b:84:0b:e5:a8:ba:96:b9:e4:91:6e:1f:a9:
                    a0:23:7a:06:df:a8:0c:b0:e7:b1:69:39:33:5e:f5:
                    b0:f6:84:4d:c2:20:75:45:72:2d:67:bf:d9:ef:19:
                    5c:cc:32:15:7c:ea:47:35:48:6f:0a:ac:70:0b:b6:
                    42:4a:ee:8e:6f:0e:34:ce:4e:9d:8a:e0:2e:71:81:
                    f6:c2:44:82:97:cc:2a:b7:1a:03:5b:13:9c:04:a0:
                    00:5d:6c:37:fa:af:ec:3c:e8:2f:a7:f3:fe:ac:dc:
                    bd:1f:fd:51:2d:06:06:8c:cd:be:36:6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                F7:5C:A4:5D:4F:BC:8D:CA:74:0E:35:66:2F:2B:53:05:AA:AF:15:F7
            X509v3 Authority Key Identifier: 
                keyid:C2:BE:EB:E0:26:88:6F:69:90:EA:03:3E:68:5B:1B:F0:4F:7E:4F:AD
                DirName:/CN=ca.does.not.exists/C=SE/ST=Sormalnd/L=Eskilstuna/O=Hallsta Maskinstation/OU=54e45c6e021ffd9/dnQualifier=certificateAuthority
                serial:97:DB:13:50:BF:41:AC:FF

    Signature Algorithm: md5WithRSAEncryption
        74:30:d3:d9:80:95:6c:40:9b:f8:2a:8a:fe:ed:b0:31:39:7e:
        b3:ff:91:44:d4:f5:9e:cc:b5:96:fd:5e:ae:d7:e6:2a:29:d3:
        16:3f:3d:0e:7d:03:81:f8:e8:98:e4:0c:82:88:73:07:87:19:
        bd:14:e8:8c:86:df:c9:5b:75:a7:e5:e3:6d:59:c3:3b:62:97:
        6a:2a:0f:72:13:3c:d2:a8:17:f9:a4:a1:f3:2d:6f:d8:32:2b:
        ad:6b:b9:62:10:e3:35:8e:cd:67:14:4c:06:0a:f7:ea:ef:c5:
        16:3b:82:1f:33:b5:2a:0d:c8:d2:97:19:2f:a2:cc:5f:43:9f:
        a7:c5:11:32:6f:dd:13:97:4a:35:16:88:b7:a6:14:61:19:79:
        2a:12:1c:f5:73:c8:1d:0a:2a:5e:4b:15:d7:ba:a4:3c:0b:34:
        1f:db:2f:ab:ad:47:24:8b:8b:5c:ad:bf:8c:10:ad:b5:32:6b:
        a2:10:8e:f9:ac:5d:9c:fb:35:20:df:98
-----BEGIN CERTIFICATE-----
MIIEfTCCA6agAwIBAgIEHGNB8jANBgkqhkiG9w0BAQQFADCBqzEbMBkGA1UEAxMS
Y2EuZG9lcy5ub3QuZXhpc3RzMQswCQYDVQQGEwJTRTERMA8GA1UECBMIU29ybWFs
bmQxEzARBgNVBAcTCkVza2lsc3R1bmExHjAcBgNVBAoTFUhhbGxzdGEgTWFza2lu
c3RhdGlvbjEYMBYGA1UECxMPNTRlNDVjNmUwMjFmZmQ5MR0wGwYDVQQuExRjZXJ0
aWZpY2F0ZUF1dGhvcml0eTAeFw0wOTExMjExNDQzMjNaFw0xOTExMTkxNDQzMjNa
MIGDMQswCQYDVQQGEwJTRTERMA8GA1UECBMIU29ybWFsbmQxHjAcBgNVBAoTFUhh
bGxzdGEgTWFza2luc3RhdGlvbjEYMBYGA1UECxMPNTRlNDVjNmUwMjFmZmQ5MRYw
FAYDVQQDFA13ZWJmb29sX3N0YW5kMQ8wDQYDVQQuEwZjbGllbnQwgd8wDQYJKoZI
hvcNAQEBBQADgc0AMIHJAoHBAMG29SX1W8JvgaMH9w3rX92ka9zYFSCBFpwAD6wB
F2FksCilZwzPI6tG098pt5DXGTz5xsSky9JUZAR9EgoNP6u2m46rJxgXa29zJMqL
hAvlqLqWueSRbh+poCN6Bt+oDLDnsWk5M171sPaETcIgdUVyLWe/2e8ZXMwyFXzq
RzVIbwqscAu2Qkrujm8ONM5OnYrgLnGB9sJEgpfMKrcaA1sTnASgAF1sN/qv7Dzo
L6fz/qzcvR/9US0GBozNvjZrYwIDAQABo4IBUjCCAU4wCQYDVR0TBAIwADARBglg
hkgBhvhCAQEEBAMCB4AwLAYJYIZIAYb4QgENBB8WHU9wZW5TU0wgR2VuZXJhdGVk
IENlcnRpZmljYXRlMB0GA1UdDgQWBBT3XKRdT7yNynQONWYvK1MFqq8V9zCB4AYD
VR0jBIHYMIHVgBTCvuvgJohvaZDqAz5oWxvwT35PraGBsaSBrjCBqzEbMBkGA1UE
AxMSY2EuZG9lcy5ub3QuZXhpc3RzMQswCQYDVQQGEwJTRTERMA8GA1UECBMIU29y
bWFsbmQxEzARBgNVBAcTCkVza2lsc3R1bmExHjAcBgNVBAoTFUhhbGxzdGEgTWFz
a2luc3RhdGlvbjEYMBYGA1UECxMPNTRlNDVjNmUwMjFmZmQ5MR0wGwYDVQQuExRj
ZXJ0aWZpY2F0ZUF1dGhvcml0eYIJAJfbE1C/Qaz/MA0GCSqGSIb3DQEBBAUAA4HB
AHQw09mAlWxAm/gqiv7tsDE5frP/kUTU9Z7MtZb9Xq7X5iop0xY/PQ59A4H46Jjk
DIKIcweHGb0U6IyG38lbdafl421Zwztil2oqD3ITPNKoF/mkofMtb9gyK61ruWIQ
4zWOzWcUTAYK9+rvxRY7gh8ztSoNyNKXGS+izF9Dn6fFETJv3ROXSjUWiLemFGEZ
eSoSHPVzyB0KKl5LFde6pDwLNB/bL6utRySLi1ytv4wQrbUya6IQjvmsXZz7NSDf
mA==
-----END CERTIFICATE-----

And the part i need it

Code:

Dose any body have a idee on how to only append that part ?

Preferable with dos commands. (as then i can use them in the nsis script)

That is just this part left else i have a beta .cab file working.

WebFooL · 12-31-2009, 03:48 AM

This is a BETA and use on own risk

Here is the first beta cab cretor.
http://fakenews.se/untangle/wm/beta.rar

I have tested this on my Qtek S200 and Sony Ericsson Xperia X1i.
And it works on both.

But they run WM6 and WM6.1.
I have no WM6.5 to test with.

So as i have not solved the scripting on creating the merge client.ovpn you will have to do some manual copy paste.

Read the readme file and if you have any questions just ask

Cheers,
WebFooL

WebFooL · 12-31-2009, 07:48 AM

Nsis changes.

This is what i have come up with so far.
I will have to work with the creation of the client.ovpn

Code:

Section "WindowsMobile" SecWindowsMobile
  SetOverwrite on
  SetOutPath "$INSTDIR\wm\OpenVPN\"
  File "${Home}\wm\Doclist.dll"
  File "${Home}\wm\langres.dll"
  File "${Home}\wm\MFCCE300.DLL"
  File "${Home}\wm\setup_cmgr.dll"
  File "${Home}\wm\openvpn.exe"
  File "${Home}\wm\ovpncmgr.exe"

  SetOutPath "$INSTDIR\wm\OpenVPN\log"
  File "${Home}\wm\log\client.log"

  SetOutPath "$INSTDIR\wm\OpenVPN\Config"
  #File /oname=${SITE_NAME}.ovpn "${MV_PACKAGE_DIR}/client-${COMMON_NAME}.ovpn"
  File "${Home}\wm\Config\client.ovpn"
  
  SetOutPath "$INSTDIR\wm\OpenVPN\config\untangle-vpn"
  #File /oname=${SITE_NAME}-${COMMON_NAME}.crt "${MV_PKI_DIR}/client-${COMMON_NAME}.crt"
  #File /oname=${SITE_NAME}-${COMMON_NAME}.key "${MV_PKI_DIR}/client-${COMMON_NAME}.key"
  #File /oname=${SITE_NAME}-ca.crt "${MV_PKI_DIR}/ca.crt"
  
  SetOutPath "$INSTDIR\wm\Windows"
  File "${Home}\wm\windows\tap-ce.dll"
  File "${Home}\wm\windows\ovpncmgr.en.htm"
  
  SetOutPath "$INSTDIR\wm\Install"
  File "${Home}\wm\install\cabwiz.ddf"
  File "${Home}\wm\install\cabwiz.exe"
  File "${Home}\wm\install\OpenVPN.inf"

nsExec::Exec 'cmd /C cabwiz.exe OpenVPN.inf'

SectionEnd

WebFooL · 01-01-2010, 03:39 AM

I think i have naild the script creating the Client.ovpn

Code:

Echo Off
Echo Proccessig Client.ovpn
sed "s/cert /#cert /g" *.ovpn >> ClientC.ovpn
sed "s/key /#key /g" ClientC.ovpn >> ClientK.ovpn
sed "s/ca /#ca /g" ClientK.ovpn >> Client.ovpn
del ClientC.ovpn /q
del ClientK.ovpn /q
printf "<ca>\n" >> Client.ovpn
Tail -n 27 *ca.crt >> Client.ovpn
printf "</ca>\n" >> Client.ovpn
del *ca.crt /q
printf "<cert>\n" >> Client.ovpn
Tail -n 27 *.crt >> Client.ovpn
printf "</cert>\n" >> Client.ovpn
printf "<key>\n" >> Client.ovpn
Tail -n 30 *.key >> Client.ovpn
printf "</key>\n" >> Client.ovpn

If anybody can improve on it pls let me know.

View Poll Results: Do you want a Windows mobile/Pocket PC Installer for OpenVPN?
Yes	25	92.59%
No	2	7.41%
Voters: 27. You may not vote on this poll

12-28-2009, 11:08 AM	#1 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	OpenVPN PPC/Windows Mobile Installer? Hi, I am thinking of building a installer (or add to the existing) for Windows Mobile/Pocket PC devices. Do ppl wan't this or is it just me? My First thoughts is to add check box to the normal OpenVPN installer and during section that ask the user to sync to the Windows Mobile device. pls let me know what you think. __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post? Last edited by WebFooL; 12-28-2009 at 11:16 AM..

12-28-2009, 11:30 AM	#2 (permalink)
dscammell Newbie Join Date: Apr 2008 Location: Lake Mary, FL Posts: 4	OpenVPN for Windows Phone I would have to say a resounding "YES!" I tried using the "other" OpenVPN app for Windows Mobile, which is several years old and does not play nicely with Windows Phone 6.5.x, although it does work well with Windows Mobile 5.x (I used it years ago). I think it would be very helpful to have a current implementation of OpenVPN for Windows Phone 6.5.x. I will even offer my services as a Beta tester.

12-30-2009, 12:27 PM	#6 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	I have a few more days to work with this then I have to work with serious things again But if i keep to my time line i should have a beta packet tomorrow night :P Hopefully before the fireworks __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post?

12-31-2009, 03:48 AM	#8 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	This is a BETA and use on own risk Here is the first beta cab cretor. http://fakenews.se/untangle/wm/beta.rar I have tested this on my Qtek S200 and Sony Ericsson Xperia X1i. And it works on both. But they run WM6 and WM6.1. I have no WM6.5 to test with. So as i have not solved the scripting on creating the merge client.ovpn you will have to do some manual copy paste. Read the readme file and if you have any questions just ask Cheers, WebFooL __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post? Last edited by WebFooL; 12-31-2009 at 03:58 AM..

12-28-2009, 07:10 PM	#3 (permalink)
jzero Master Untangler Join Date: Aug 2008 Location: Brazil (Sao Paulo) Posts: 285	I got my first smartphone with Windows Mobile (WM6.5), 2 weeks ago. Believe me for my surprise I found openvpn ppc, and decided give a try just to test RDP from smartphone. My happiness finished faster as the download file and transfer it to my smartphone. It does not install, as many other apps I found. Perhaps due to young wm6.5. Of course would be good have such feature. But I think you have a hard work ahead.

12-30-2009, 12:18 PM	#5 (permalink)
bigdessert Master Untangler Join Date: Apr 2007 Posts: 339	WebFooL I will love you forever it you make this happen!!!!