<p>You should contact with your provider to double check if there is interest in being added to Passepartout. Beware that some may be concerned instead. Ultimately, you can submit your provider request for a viability review to <ahref="mailto:providers@passepartoutvpn.app">providers@passepartoutvpn.app</a>.</p>
<h3id="why-is-compression-not-supported">Why is compression not supported?</h3>
<p>Some users may have noticed that Passepartout is not compatible with any compression algorithm supported by OpenVPN. This is intentional and comes from a logical reasoning. Besides being a relevant overhead against marginal gains -most protocols in the application layer (e.g. HTTP) already use compression nowadays-, compression is vulnerable to an attack that may be able to reveal the secret session keys.</p>
<p>The attack is called VORACLE and is <ahref="https://community.openvpn.net/openvpn/wiki/VORACLE">extensively explained</a> by the very authors of OpenVPN. Most major providers have taken action and fixed the issue, but many are still refraining to disable compression for no acceptable reason. In case this happens, you are warmly encouraged to report the issue immediately and possibly link to either the official resource you find above, as it comes directly from the software makers, or this page.</p>
<p>BEWARE: it’s not about making the app work, this is about <em>your safety</em>. Do prompt your provider to disable compression ASAP. Most of the time it’s as easy as tweaking a single configuration line on their backends.</p>
<p>Keeping it broken is absolutely irresponsible.</p>
<h3id="the-configuration-file-contains-an-unsupported-option-external-file">The configuration file contains an unsupported option (external file)</h3>
<p>Due to easier interoperability, the app does not support external files in the .ovpn main configuration. That’s because more often than not, it may not make sense referring to relative paths in a mobile device environment. Think of the Mail app for example. The fix is straightforward though, say you have an external <codeclass="highlighter-rouge">ca</code> file:</p>
<p>The same applies to other settings like <codeclass="highlighter-rouge">cert</code>, <codeclass="highlighter-rouge">key</code>, <codeclass="highlighter-rouge">tls-auth</code> and <codeclass="highlighter-rouge">tls-crypt</code>.</p>
<h3id="id-like-to-see-my-ip-address-in-the-app">I’d like to see my IP address in the app</h3>
<p>The reason why Passepartout does not present any personal information in app is <em>privacy</em>. Obtaining one’s IP address, regardless of being connected to a VPN or not, involves querying -and trusting- a third party service. Knowing such info is also of little use, given that most of the time you don’t want to share your VPN IP address and therefore link your identity to it. However, this feature might be introduced later as a diagnostic tool.</p>
Copyright (c) 2018 <ahref="https://davidederosa.com"title="The author website">Davide De Rosa</a><br/>
The logo is taken from the awesome <ahref="https://www.iconfinder.com/iconsets/circle-icons-1"title="Circle Icons">Circle Icons</a> set by <ahref="https://www.elegantthemes.com/"title="Elegant Themes">Nick Roach</a>
