This commit is contained in:
Davide De Rosa 2019-10-23 13:36:12 +02:00
parent e4ea613919
commit 33ee2a2a57
6 changed files with 64 additions and 57 deletions

View File

@ -21,7 +21,7 @@
<meta name="twitter:site" content="@keeshux" />
<meta name="twitter:title" content="Passepartout" />
<meta name="twitter:url" content="https://passepartoutvpn.app" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<meta name="twitter:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<!-- Facebook -->
@ -31,23 +31,23 @@
<meta property="og:title" content="Passepartout" />
<meta property="og:site_name" content="Passepartout" />
<meta property="og:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<!-- Google+ -->
<meta itemprop="name" content="Passepartout" />
<meta itemprop="description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<link rel="canonical" href="https://passepartoutvpn.app" />
<link rel="author" href="https://plus.google.com/+keeshux" />
<link rel="stylesheet" href="/s/main.css?1569176647" />
<link rel="stylesheet" href="/s/main-mobile.css?1569176647" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="/s/main.css?1571830571" />
<link rel="stylesheet" href="/s/main-mobile.css?1571830571" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
<link rel="shortcut icon" href="/s/favicon.ico?1569176647" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1569176647" />
<link rel="shortcut icon" href="/s/favicon.ico?1571830571" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1571830571" />
</head>
<body>

View File

@ -21,7 +21,7 @@
<meta name="twitter:site" content="@keeshux" />
<meta name="twitter:title" content="Passepartout" />
<meta name="twitter:url" content="https://passepartoutvpn.app" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<meta name="twitter:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<!-- Facebook -->
@ -31,23 +31,23 @@
<meta property="og:title" content="Passepartout" />
<meta property="og:site_name" content="Passepartout" />
<meta property="og:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<!-- Google+ -->
<meta itemprop="name" content="Passepartout" />
<meta itemprop="description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<link rel="canonical" href="https://passepartoutvpn.app" />
<link rel="author" href="https://plus.google.com/+keeshux" />
<link rel="stylesheet" href="/s/main.css?1569176647" />
<link rel="stylesheet" href="/s/main-mobile.css?1569176647" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="/s/main.css?1571830571" />
<link rel="stylesheet" href="/s/main-mobile.css?1571830571" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
<link rel="shortcut icon" href="/s/favicon.ico?1569176647" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1569176647" />
<link rel="shortcut icon" href="/s/favicon.ico?1571830571" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1571830571" />
</head>
<body>

View File

@ -21,7 +21,7 @@
<meta name="twitter:site" content="@keeshux" />
<meta name="twitter:title" content="Passepartout" />
<meta name="twitter:url" content="https://passepartoutvpn.app" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<meta name="twitter:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<!-- Facebook -->
@ -31,23 +31,23 @@
<meta property="og:title" content="Passepartout" />
<meta property="og:site_name" content="Passepartout" />
<meta property="og:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<!-- Google+ -->
<meta itemprop="name" content="Passepartout" />
<meta itemprop="description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<link rel="canonical" href="https://passepartoutvpn.app" />
<link rel="author" href="https://plus.google.com/+keeshux" />
<link rel="stylesheet" href="/s/main.css?1569176647" />
<link rel="stylesheet" href="/s/main-mobile.css?1569176647" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="/s/main.css?1571830571" />
<link rel="stylesheet" href="/s/main-mobile.css?1571830571" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
<link rel="shortcut icon" href="/s/favicon.ico?1569176647" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1569176647" />
<link rel="shortcut icon" href="/s/favicon.ico?1571830571" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1571830571" />
</head>
<body>
@ -65,8 +65,11 @@
<li><a href="#my-provider-is-not-listed">My provider is not listed</a></li>
<li><a href="#im-on-wi-fi-but-my-device-shows-im-connected-via-lte">Im on Wi-Fi but my device shows Im connected via LTE</a></li>
<li><a href="#im-unable-to-add-my-wi-fi-to-trusted-networks">Im unable to add my Wi-Fi to Trusted Networks</a></li>
<li><a href="#the-configuration-file-contains-an-unsupported-option-external-file">The configuration file contains an unsupported option (external file)</a></li>
<li><a href="#the-vpn-connects-but-immediately-disconnects-with-encryption-failed">The VPN connects but immediately disconnects with “Encryption failed”</a></li>
<li><a href="#the-vpn-fails-with-auth-failed-or-immediately-disconnects-with-encryption-failed">The VPN fails with “Auth failed” or immediately disconnects with “Encryption failed”</a></li>
<li><a href="#my-provider-returns-auth-failed-but-my-credentials-are-correct">My provider returns “Auth failed” but my credentials are correct</a></li>
<li>
<p><a href="#the-configuration-file-contains-an-unsupported-option-external-file">The configuration file contains an unsupported option (external file)</a></p>
</li>
<li><a href="#why-dont-siri-shortcuts-execute-in-the-background">Why dont Siri Shortcuts execute in the background?</a></li>
<li><a href="#it-seems-that-my-traffic-doesnt-necessarily-go-through-the-vpn">It seems that my traffic doesnt necessarily go through the VPN</a></li>
<li><a href="#id-like-to-see-a-today-widget-in-the-notification-center">Id like to see a Today Widget in the Notification Center</a></li>
@ -92,6 +95,29 @@
<p>To work around this issue, you should trust the network while the VPN is enabled and connected through such network. I will try to restore former behavior in future versions of Passepartout, or at least add an informational footer below the “Trusted networks” section.</p>
<h3 id="the-vpn-fails-with-auth-failed-or-immediately-disconnects-with-encryption-failed">The VPN fails with “Auth failed” or immediately disconnects with “Encryption failed”</h3>
<p>This may happen when you rely on default OpenVPN encryption, which is normally Blowfish (BF-CBC). The algorithm, besides being unsupported by Passepartout, is also weak and therefore discouraged. In order to fix this issue, you must switch to AES encryption. Passepartout only supports AES, be it in CBC or GCM mode.</p>
<p>Set encryption explicitly in the server configuration, e.g.:</p>
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>cipher AES-128-CBC
auth SHA1
</code></pre></div></div>
<p>and dont forget to update the client .ovpn as well with the <strong>exact same parameters</strong>.</p>
<p>If you want to leverage newer AES-GCM encryption, you could just use:</p>
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ncp-ciphers AES-256-GCM # or AES-128-GCM
</code></pre></div></div>
<p>and the client wouldnt need to change a thing, because the algorithm will be enforced by the server no matter what.</p>
<h3 id="my-provider-returns-auth-failed-but-my-credentials-are-correct">My provider returns “Auth failed” but my credentials are correct</h3>
<p>Bear in mind that some providers require specific credentials for their direct OpenVPN servers. Thats why Passepartout, in those cases, has a convenient link in the bottom of the Account screen showing you where to find such credentials on your providers website.</p>
<h3 id="the-configuration-file-contains-an-unsupported-option-external-file">The configuration file contains an unsupported option (external file)</h3>
<p>Due to easier interoperability, the app does not support external files in the .ovpn main configuration. Thats because more often than not, it may not make sense referring to relative paths in a mobile device environment. Think of the Mail app for example. The fix is straightforward though, say you have an external <code class="highlighter-rouge">ca</code> file:</p>
@ -110,25 +136,6 @@ content of my-ca.crt
<p>The same applies to other settings like <code class="highlighter-rouge">cert</code>, <code class="highlighter-rouge">key</code>, <code class="highlighter-rouge">tls-auth</code> and <code class="highlighter-rouge">tls-crypt</code>.</p>
<h3 id="the-vpn-connects-but-immediately-disconnects-with-encryption-failed">The VPN connects but immediately disconnects with “Encryption failed”</h3>
<p>This happens when you rely on default OpenVPN encryption, which is normally Blowfish. The algorithm, besides being unsupported by Passepartout, is also weak and therefore discouraged. In order to fix this issue, you must switch to AES encryption. Passepartout only supports AES, be it in CBC or GCM mode.</p>
<p>Set encryption explicitly in the server configuration, e.g.:</p>
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>cipher AES-128-CBC
auth SHA1
</code></pre></div></div>
<p>and dont forget to update the client .ovpn as well with the <strong>exact same parameters</strong>.</p>
<p>If you want to leverage newer AES-GCM encryption, you could just use:</p>
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ncp-ciphers AES-256-GCM # or AES-128-GCM
</code></pre></div></div>
<p>and the client wouldnt need to change a thing, because the algorithm will be enforced by the server no matter what.</p>
<h3 id="why-dont-siri-shortcuts-execute-in-the-background">Why dont Siri Shortcuts execute in the background?</h3>
<p>Unfortunately Apple is guilty of not fixing a related bug. I mean, its been there for years -since iOS 9 with my first bug report dating back to 2017- without them caring at all. No feedback and not even a proper response. And of course, no progress.</p>

View File

@ -1 +1 @@
<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.8.5">Jekyll</generator><link href="https://passepartoutvpn.app/feed.xml" rel="self" type="application/atom+xml" /><link href="https://passepartoutvpn.app/" rel="alternate" type="text/html" /><updated>2019-09-22T20:24:07+02:00</updated><id>https://passepartoutvpn.app/feed.xml</id><title type="html">Passepartout, OpenVPN client for iOS and macOS</title><subtitle>Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS.</subtitle><author><name>Davide De Rosa</name></author></feed>
<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.8.5">Jekyll</generator><link href="https://passepartoutvpn.app/feed.xml" rel="self" type="application/atom+xml" /><link href="https://passepartoutvpn.app/" rel="alternate" type="text/html" /><updated>2019-10-23T13:36:11+02:00</updated><id>https://passepartoutvpn.app/feed.xml</id><title type="html">Passepartout, OpenVPN client for iOS and macOS</title><subtitle>Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS.</subtitle><author><name>Davide De Rosa</name></author></feed>

View File

@ -21,7 +21,7 @@
<meta name="twitter:site" content="@keeshux" />
<meta name="twitter:title" content="Passepartout" />
<meta name="twitter:url" content="https://passepartoutvpn.app" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<meta name="twitter:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<!-- Facebook -->
@ -31,23 +31,23 @@
<meta property="og:title" content="Passepartout" />
<meta property="og:site_name" content="Passepartout" />
<meta property="og:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<!-- Google+ -->
<meta itemprop="name" content="Passepartout" />
<meta itemprop="description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<link rel="canonical" href="https://passepartoutvpn.app" />
<link rel="author" href="https://plus.google.com/+keeshux" />
<link rel="stylesheet" href="/s/main.css?1569176647" />
<link rel="stylesheet" href="/s/main-mobile.css?1569176647" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="/s/main.css?1571830571" />
<link rel="stylesheet" href="/s/main-mobile.css?1571830571" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
<link rel="shortcut icon" href="/s/favicon.ico?1569176647" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1569176647" />
<link rel="shortcut icon" href="/s/favicon.ico?1571830571" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1571830571" />
</head>
<body>

View File

@ -21,7 +21,7 @@
<meta name="twitter:site" content="@keeshux" />
<meta name="twitter:title" content="Passepartout" />
<meta name="twitter:url" content="https://passepartoutvpn.app" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<meta name="twitter:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<!-- Facebook -->
@ -31,23 +31,23 @@
<meta property="og:title" content="Passepartout" />
<meta property="og:site_name" content="Passepartout" />
<meta property="og:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<!-- Google+ -->
<meta itemprop="name" content="Passepartout" />
<meta itemprop="description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1569176647" />
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1571830571" />
<link rel="canonical" href="https://passepartoutvpn.app" />
<link rel="author" href="https://plus.google.com/+keeshux" />
<link rel="stylesheet" href="/s/main.css?1569176647" />
<link rel="stylesheet" href="/s/main-mobile.css?1569176647" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="/s/main.css?1571830571" />
<link rel="stylesheet" href="/s/main-mobile.css?1571830571" media="only screen and (max-width: 600px)" />
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
<link rel="shortcut icon" href="/s/favicon.ico?1569176647" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1569176647" />
<link rel="shortcut icon" href="/s/favicon.ico?1571830571" />
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1571830571" />
</head>
<body>