Installing personalVPN-SSL on Linux
From Witopiawiki
These directions are geared around the popular Ubuntu distro using the Gnome desktop system. Please make the appropriate adjustments for your machine. All gnome based distros will have the openvpn and openvpn-applet available to them.
Contents |
Getting personalVPN for Linux
- At the current time, WiTopia does not provide a Linux installer package. Instead purchase the version (either Mac or Windows) of personalVPN-SSL you will be able to install on a local computer. Follow the respective installation instructions provided within the email receipt for installation. Then follow the below for Moving to Linux from Windows or Mac OS
- If you don't have access to a Mac or Windows computer, you can ACTIVATE (but don't install) the service you purchased, then follow Q1 in our personalVPN-SSL FAQ to create a new set of security credentials which are available via download for any operating system.
Setup
Installing Required Software
You will need to install OPENVPN and for Ease we suggest the openVPN network manager applet.
- You will need to add the "proposed" repositories
- System -> Administration -> Synaptic Package Manager -> Settings -> Repositories -> Updates -> Pre-released updates
- Open a terminal window
- Type: sudo apt-get install openvpn network-manager-openvpn -y
- NOTE: KDE Users you MUST type network-manager-openvpn-kde or it will NOT install the network manager for KDE.
- You will be prompted for the admin password of your local machine
- Type exit to close the terminal window once the files have installed
Moving to Linux from Windows or OSX (Mac)
If you are currently using the VPN on a windows or OSX (Mac) machine and would like to ALSO run the VPN on your Linux machine please follow these directions
Each operating system and program is unique so pay close attention to the location and names of folders and files.
- Windows: C:\Program Files\personalvpn\config\ (copy all files)
- NOTE: You will need to rename each file from .ovpn to .conf EXAMPLE: 001 - us - Atlanta.ovpn needs to be 001 - us - Atlanta.conf
- OSX - Tunnelblick (pre 3.0): /users/username/library/openvpn/ (copy all files) note: this is the version we supply from our website, or from support
- OSX - Tunnelblick (3.0 or higher): /users/username/library/application support/tunnelblick/configurations/ (copy all files) note: you will have this version if you downloaded it off the tunnelblick website
- OSX - Viscosity: /users/username/library/application support/viscosity/openvpn/(numbered folder)/ (copy all files)
- NOTE: EACH numbered folder for Viscosity contains the same files. If you want to move ALL files, you will need to either copy all the numbered folders, or copy the ca.crt, cert.crt, key.key the config.conf file from the FIRST folder, and then rename EACH config.conf from the other folder to be a unique name when you copy it over
- Now that you have the name.crt (viscosity users = cert.crt), name.key (viscosity users = key.key), ca.crt, and somename.config (viscosity users = config.conf if only one file is moved) copy them to a USB Drive etc
- Now create a folder in your HOME directory called "Witopia" and place ALL the files into this folder (it is ok if you copy the individual folder from viscosity)
- You are now ready to Import the configs for usage on your computer.
Importing Your Config and Auto Setup of VPN Settings
Starting in 10.10 the import functions for Ubuntu are greatly improved and so it is possible to NOT manually setup all options. You can now use the import function. You will still need to extract the configs, certs, and key files using the "moving to linux" instructions above.
- Once you have extracted the files, and stored them in the "Witopia" folder in your home directory open the network manager and select configure vpn:
- In the new windows click on import
- Navigate to the folder where you stored the configs, certs, key files and double click on any of the configs
- Your screen should look something like this
- click apply
That is all that is needed to auto import the vpn connection settings.
How To Run the Service
Via Terminal
You must run OpenVPN as root because it needs to modify the routing table
- open a terminal window
- type the following: sudo openvpn --config /usr/local/openvpn/conf/personalVPN.conf
- Replace /usr/local/openvpn/conf with the path to where your personalVPN.conf file is located
Via Network Manager Applet
- Click on the network manager icon in the upper right corner (varies but usually looks like a up/down arrow or wifi signal)
- Scroll down to VPN Connections and a submenu will appear
- click on the vpn connection you want to use
You will know you are connected as a small lock will appear on the network applet
Need Help How To Get Log Files
Via Terminal Window
If you run the vpn from the terminal directly, just copy the terminal output and send us the log. If not, then you need to tail a file to get the log.
- open terminal
- type tail -f /var/log/daemon.log
- send us the output
Via Log Viewer
Click System -> Administration -> Log File Viewer
Now click on daemon.log on the left side, and scroll to the bottom (the log lists the OLDEST entries at the top).
Send us the complete log.
Common Issues & Fixes
Connecting but Cannot Use Internet When Connected
If you are connecting to the VPN fine, but you cannot pass any traffic this is usually related to a local config import error.
The most common type of import error is the LZO compression does not get set properly.
This is easy to change:
- Click on the applet -> Hover over the vpn connections option -> Choose configure vpn
- Now click on the vpn connection you want to modify -> Click edit
- Click on advanced
- Now click on the "use LZO data compression" (should look like the screen shot)
- Click OK -> Apply and you should now be able to reconnect and it will work. If you still have issues please send us the log files.
TLS Server Instructions
- click on the applet -> Hover over the vpn connections option -> Choose configure vpn -> and then import one of the TLS configurations 'us - Washington DC TLS Server' for example
- click on advanced -> TLS
- click on the key and browse to the same folder and double click the ta.key file
- set the direction to 1
- Your screen should look like this
Help
If you are having problems with any of the instructions, please contact support@witopia.net for help.
