VPN Access - Revision history

Thw: /* MacOS (tunnelblick) */

2020-11-25T16:04:26Z

‎MacOS (tunnelblick)

Thw: /* Replacing the CA Certificate in macOS */

2020-11-25T15:58:34Z

‎Replacing the CA Certificate in macOS

Thw: /* MacOS (tunnelblick) */

2020-11-25T15:56:14Z

‎MacOS (tunnelblick)

Thw: /* Replacing the CA Certificate in macOS */

2020-11-25T15:41:38Z

‎Replacing the CA Certificate in macOS

Thw: /* MacOS (tunnelblick) */

2020-11-25T15:22:57Z

‎MacOS (tunnelblick)

Thw at 15:06, 25 November 2020

2020-11-25T15:06:17Z

Thw at 13:14, 4 November 2020

2020-11-04T13:14:25Z

Bremer at 12:42, 3 November 2020

2020-11-03T12:42:36Z

Bremer: /* OpenVPN for Windows 10 */

2020-10-06T13:05:26Z

‎OpenVPN for Windows 10

Bremer: /* OpenVPN for Windows 10 */

2020-10-06T12:53:55Z

‎OpenVPN for Windows 10

@@ Line 115: / Line 115: @@
 [[File:Tunnelblick2.png|center|750px]]
 Open the settings page, like shown in the screenshot below and make sure the Default Route Option is selected. This option is ignored from the ovpn configuration.
 [[File:Ovpn_settings_default_route.jpg|center|750px]]
 If something fails look into the log of the connection. It also includes multiple times the path to place where the configuration file (tunnelblick automatically renames it into 'config.ovpn') and the certificate are stored. The exact path varies depending on your previous choice to use the configuration just for the  current user or for all users.

@@ Line 138: / Line 138: @@
 == Replacing the CA Certificate in macOS ==
-When importing the configuration, the crt file is copied to somewhere in the system (see above). If you replace the crt file in your download or whatever folder it will not be used. The simpliest way to fix this is to delete the configuration from Tunnelblick and reimport it.
+When importing the configuration, the crt file is copied to somewhere in the system (see above). If you replace the crt file in your download or whatever folder it will not be used. The simpliest way to fix this is to delete the configuration from Tunnelblick and reimport it. Make sure the option "Route all traffic through the VPN" is checked (see instrcutions above).
 This is needed after the replacment of the CA certificate in Nov 2020. This lives for 5 years. Next replacment will be in 2025, if we are still using openVPN then.

← Older revision		Revision as of 15:56, 25 November 2020
Line 117:		Line 117:

	Now you can connect to the itp vpn via the new tunnelblick icon.		Now you can connect to the itp vpn via the new tunnelblick icon.
		+
		+	Open the settings page, like shown in the screenshot below and make sure the Default Route Option is selected. This option is ignored from the ovpn configuration.
		+
		+	[[File:Ovpn_settings_default_route.jpg\|center\|750px]]

	If something fails look into the log of the connection. It also includes multiple times the path to place where the configuration file (tunnelblick automatically renames it into 'config.ovpn') and the certificate are stored. The exact path varies depending on your previous choice to use the configuration just for the current user or for all users.		If something fails look into the log of the connection. It also includes multiple times the path to place where the configuration file (tunnelblick automatically renames it into 'config.ovpn') and the certificate are stored. The exact path varies depending on your previous choice to use the configuration just for the current user or for all users.

@@ Line 134: / Line 134: @@
 == Replacing the CA Certificate in macOS ==
-When importing the configuration, the crt file is copied to somewhere in the system. If you replace the crt file in your download or whatever folder it will not be used. The simpliest way to fix this is to delete the configuration from Tunnelblick and reimport it.
+When importing the configuration, the crt file is copied to somewhere in the system (see above). If you replace the crt file in your download or whatever folder it will not be used. The simpliest way to fix this is to delete the configuration from Tunnelblick and reimport it.
 This is needed after the replacment of the CA certificate in Nov 2020. This lives for 5 years. Next replacment will be in 2025, if we are still using openVPN then.

@@ Line 112: / Line 112: @@
 [[File:Tunnelblick1.png|center|750px]]
-After completion of the installation, a new icon appears in the top bar. Drag and drop the downloaded configuration file to this new icon to add the configuration to tunnelblick. Most likely you do not need to add the certificate manually (it was enough to download it and is handled automatically).
+After completion of the installation, a new icon appears in the top bar. Drag and drop the downloaded configuration file to this new icon to add the configuration to tunnelblick. Most likely you do not need to add the certificate manually (it was enough to download it and is handled automatically). Alternatively double-clicking the .ovpn file will also start the import. Both files are copied to system. The original files are no longer referred.
 [[File:Tunnelblick2.png|center|750px]]

← Older revision		Revision as of 15:06, 25 November 2020
Line 131:		Line 131:
	If you get the following warning, you can check the box and click OK.		If you get the following warning, you can check the box and click OK.
	[[File:Tb-warn.png\|center\|500px]]		[[File:Tb-warn.png\|center\|500px]]
		+
		+	== Replacing the CA Certificate in macOS ==
		+
		+	When importing the configuration, the crt file is copied to somewhere in the system. If you replace the crt file in your download or whatever folder it will not be used. The simpliest way to fix this is to delete the configuration from Tunnelblick and reimport it.
		+
		+	This is needed after the replacment of the CA certificate in Nov 2020. This lives for 5 years. Next replacment will be in 2025, if we are still using openVPN then.

← Older revision		Revision as of 13:14, 4 November 2020
Line 77:		Line 77:

	Termiate the session by pressing Ctrl-C in this terminal.		Termiate the session by pressing Ctrl-C in this terminal.
−
−	~~=== Previous VPN gateway (deperecated) ===~~
−
−	~~The old VPN has been decommissioned.~~
−
−	~~If your VPN configuration still contains the remote name 'vpn.th.physik.uni-frankfurt.de', you need to update the configuration.~~

	==OpenVPN for Windows 10==		==OpenVPN for Windows 10==

← Older revision		Revision as of 12:42, 3 November 2020
Line 133:		Line 133:

	There were problems reported when switching in tunnelblick from the old vpn (vpn.th.physik.uni-frankfurt.de with tap) to the new one (vgw.itp.uni-frankfurt.de with tun). You also have this problem if, after applying the new configuration file itp.ovpn, the vpn does not work and the output contains a line containing 'vpn.th.physik.uni-frankfurt.de'. Search the output for a line beginning with '--config' and ending on '.ovpn'. This line specifies which configuration file (.ovpn) is used to establish the vpn connection and where it is located. Edit this file to have the same content as the itp.ovpn [http://th.physik.uni-frankfurt.de/~thw/vpn/itp.ovpn] (most likely the lines 2, 5 and 6 need to be edited).		There were problems reported when switching in tunnelblick from the old vpn (vpn.th.physik.uni-frankfurt.de with tap) to the new one (vgw.itp.uni-frankfurt.de with tun). You also have this problem if, after applying the new configuration file itp.ovpn, the vpn does not work and the output contains a line containing 'vpn.th.physik.uni-frankfurt.de'. Search the output for a line beginning with '--config' and ending on '.ovpn'. This line specifies which configuration file (.ovpn) is used to establish the vpn connection and where it is located. Edit this file to have the same content as the itp.ovpn [http://th.physik.uni-frankfurt.de/~thw/vpn/itp.ovpn] (most likely the lines 2, 5 and 6 need to be edited).
		+
		+	==Warning in tunnelblick (macOS)==
		+	If you get the following warning, you can check the box and click OK.
		+	[[File:Tb-warn.png\|center\|500px]]

← Older revision		Revision as of 13:05, 6 October 2020
Line 91:		Line 91:

	Next you need to download our CA (Certificate of Authority) [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and the config file [http://th.physik.uni-frankfurt.de/~thw/vpn/all-via-itp.ovpn].		Next you need to download our CA (Certificate of Authority) [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and the config file [http://th.physik.uni-frankfurt.de/~thw/vpn/all-via-itp.ovpn].
		+
		+	Some Browsers, depending on the download method, save some of these files as standard text files '.txt'. If this happens, you need to rename them to 'private-ca-itp.crt' and 'all-via-itp.ovpn'. With standard configuration Windows 10 does not show the endings of the file names. The endings are correct if for 'all-via-itp.ovpn' the file type is shown as 'OpenVPN Config' and for 'private-ca-itp.crt' as 'Sicherheitszertifikat' or 'security certificate'.

	You need to copy/save both files to C:/Users/'yourusername'/OpenVPN/config/, where 'yourusername' is your local username. In the picture below, the directory with the two needed files in it for a german Windows 10 is shown (for the username 'user'). (For both is assumed that 'C' is, as for most Windows systems, your main hard drive.)		You need to copy/save both files to C:/Users/'yourusername'/OpenVPN/config/, where 'yourusername' is your local username. In the picture below, the directory with the two needed files in it for a german Windows 10 is shown (for the username 'user'). (For both is assumed that 'C' is, as for most Windows systems, your main hard drive.)

@@ Line 90: / Line 90: @@
 Start 'OpenVPN GUI'. You will get a message that no config file was found. But starting 'OpenVPN GUI' creates a directory to put the config files into.
-Next you need to download our CA (Certificate of Authority) [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and the config file [http://th.physik.uni-frankfurt.de/~thw/vpn/itp.ovpn].
+Next you need to download our CA (Certificate of Authority) [http://th.physik.uni-frankfurt.de/~thw/vpn/private-ca-itp.crt] and the config file [http://th.physik.uni-frankfurt.de/~thw/vpn/all-via-itp.ovpn].
 You need to copy/save both files to C:/Users/'yourusername'/OpenVPN/config/, where 'yourusername' is your local username. In the picture below, the directory with the two needed files in it for a german Windows 10 is shown (for the username 'user'). (For both is assumed that 'C' is, as for most Windows systems, your main hard drive.)
@@ Line 107: / Line 107: @@
 [[File:Openvpn-win10-4.png|center]]
 ==MacOS (tunnelblick)==