Feature #5858

VPN support

Added by Tails 2013-07-18 07:47:18 . Updated 2019-12-16 21:54:24 .

Status:
Confirmed
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
Due date:
% Done:

50%

Feature Branch:
Type of work:
Code
Blueprint:

https://tails.boum.org/blueprint/vpn_support

Starter:
0
Affected tool:
Deliverable for:

Description

Files

OpenVPN_over_Tor_in_Tails_1.8.x.txt (3134 B) londonsilver, 2016-02-28 18:00:00
OpenVPN_over_Tor_in_Tails_2.4.x.sh (3053 B) openvpner, 2016-07-20 23:34:07

Subtasks

Feature #6135: PPTP Confirmed

0
Feature #6141: iodine Rejected

100

Related issues

Has duplicate Tails - Bug #9714: Offer help - Tails need CryptoStorm Duplicate 2015-07-08
Has duplicate Tails - Bug #9730: Cannot send emails to tails-dev@boum.org (and please support VPN) Duplicate 2015-07-12

History

#1 Updated by intrigeri 2013-10-03 11:18:41

  • Subject changed from vpn support to VPN support
  • Starter set to No

#2 Updated by BitingBird 2015-07-09 13:33:34

  • has duplicate Bug #9714: Offer help - Tails need CryptoStorm added

#3 Updated by kytv 2015-07-12 09:37:42

  • is duplicate of Bug #9730: Cannot send emails to tails-dev@boum.org (and please support VPN) added

#4 Updated by intrigeri 2015-07-13 00:16:33

  • has duplicate deleted (Bug #9730: Cannot send emails to tails-dev@boum.org (and please support VPN))

#5 Updated by intrigeri 2015-07-13 00:16:48

  • has duplicate Bug #9730: Cannot send emails to tails-dev@boum.org (and please support VPN) added

#6 Updated by londonsilver 2016-02-28 18:00:44

Here’s a script for 1.8.2 that installs OpenVPN (if not yet installed) and modifies ferm.conf, torrc and ip route to enable OpenVPN over Tor.
Requirement: Working OpenVPN config in /home/amnesia/Persistent/vpn.ovpn.

HTH

#7 Updated by londonsilver 2016-02-28 18:24:23

looking back at the “constructive” feedback in #tails I should add that the *.ovpn needs to be configured using TCP (obvious but I mentioned it hereby).

also:

- you might want to consider not to run openvpn as root user but user “openvpn” - maybe according to https://community.openvpn.net/openvpn/wiki/UnprivilegedUser

- it was way better to have fixed markers in ferm.conf that awk could look for
- a user “vpnuser” used to ‘sudo -u vpnuser desired_software’ was desirable too instead to (ab)use the user “clearnet”

#8 Updated by londonsilver 2016-02-28 20:24:53

#tails user “geb” requested to add this:
https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN (“If you know what…”)

#9 Updated by londonsilver 2016-02-29 09:24:39

FWIW: Script works 1:1 in Tails 2.2 RC1

#10 Updated by openvpner 2016-07-20 23:35:40

I modified the script to run with default bash on Tails 2.4.x.

Seems to be working and I have tun0 interface but I don’t know how to connect to it. Any help would be appreciated.

#11 Updated by mrtails 2019-11-06 23:49:29

the .sh script don t work… I tried lunch it but terminal give me error:

[….] Reloading ferm configuration (via systemctl): ferm.serviceJob for ferm.service failed because the control process exited with error code.
See “systemctl status ferm.service” and “journalctl -xe” for details

how to solve?

#12 Updated by mrtails 2019-12-16 21:54:24

..