118 lines
6.4 KiB
HTML
118 lines
6.4 KiB
HTML
|
||
|
||
|
||
<!DOCTYPE html>
|
||
<html lang="en" itemscope itemtype="http://schema.org/Blog">
|
||
|
||
<head>
|
||
<title>Passepartout, OpenVPN client for iOS and macOS</title>
|
||
|
||
<meta charset="utf-8">
|
||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||
|
||
<meta name="author" content="Davide De Rosa" />
|
||
<meta name="description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
|
||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||
<meta name="apple-mobile-web-app-title" content="Passepartout">
|
||
|
||
<!-- Twitter -->
|
||
|
||
<meta name="twitter:card" content="summary" />
|
||
<meta name="twitter:site" content="@keeshux" />
|
||
<meta name="twitter:title" content="Passepartout" />
|
||
<meta name="twitter:url" content="https://passepartoutvpn.app" />
|
||
<meta name="twitter:image" content="https://passepartoutvpn.app/s/logo.png?1545564282" />
|
||
<meta name="twitter:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
|
||
|
||
<!-- Facebook -->
|
||
|
||
<meta property="og:type" content="website" />
|
||
<meta property="og:url" content="https://passepartoutvpn.app" />
|
||
<meta property="og:title" content="Passepartout" />
|
||
<meta property="og:site_name" content="Passepartout" />
|
||
<meta property="og:description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
|
||
<meta property="og:image" content="https://passepartoutvpn.app/s/logo.png?1545564282" />
|
||
|
||
<!-- Google+ -->
|
||
|
||
<meta itemprop="name" content="Passepartout" />
|
||
<meta itemprop="description" content="Passepartout is a non-official, user-friendly OpenVPN® client for iOS and macOS." />
|
||
<meta itemprop="image" content="https://passepartoutvpn.app/s/logo.png?1545564282" />
|
||
|
||
<link rel="canonical" href="https://passepartoutvpn.app" />
|
||
<link rel="author" href="https://plus.google.com/+keeshux" />
|
||
|
||
<link rel="stylesheet" href="/s/main.css?1545564282" />
|
||
<link rel="stylesheet" href="/s/main-mobile.css?1545564282" media="only screen and (max-width: 600px)" />
|
||
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
|
||
|
||
<link rel="shortcut icon" href="/s/favicon.ico?1545564282" />
|
||
<link rel="apple-touch-icon" href="/s/iphone-icon-precomposed.png?1545564282" />
|
||
</head>
|
||
|
||
<body>
|
||
<div id="container">
|
||
<header>
|
||
<a href="https://passepartoutvpn.app"><img id="logo" src="/s/logo.svg" alt="Passepartout" /></a></h1>
|
||
<h1><a href="https://passepartoutvpn.app">Passepartout</a></h1>
|
||
<p>A non-official, user-friendly OpenVPN® client for iOS. Soon for macOS.</p>
|
||
</header>
|
||
|
||
<main>
|
||
<h2 id="frequently-asked-questions">Frequently Asked Questions</h2>
|
||
|
||
<h3 id="why-is-compression-not-supported">Why is compression not supported?</h3>
|
||
|
||
<p>Some users may have noticed that Passepartout is not compatible with any compression algorithm supported by OpenVPN. This is intentional and comes from a logical reasoning. Besides being a relevant overhead against marginal gains -most protocols in the application layer (e.g. HTTP) already use compression nowadays-, compression is vulnerable to an attack that may be able to reveal the secret session keys.</p>
|
||
|
||
<p>The attack is called VORACLE and is <a href="https://community.openvpn.net/openvpn/wiki/VORACLE">extensively explained</a> by the very authors of OpenVPN. Most major providers have taken action and fixed the issue, but many are still refraining to disable compression for no acceptable reason. In case this happens, you are warmly encouraged to report the issue immediately and possibly link to either the official resource you find above, as it comes directly from the software makers, or this page.</p>
|
||
|
||
<p>BEWARE: it’s not about making the app work, this is about <em>your safety</em>. Do prompt your provider to disable compression ASAP. Most of the time it’s as easy as tweaking a single configuration line on their backends.</p>
|
||
|
||
<p>Keeping it broken is absolutely irresponsible.</p>
|
||
|
||
<h3 id="the-configuration-file-contains-an-unsupported-option-external-file">The configuration file contains an unsupported option (external file)</h3>
|
||
|
||
<p>Due to easier interoperability, the app does not support external files in the .ovpn main configuration. That’s because more often than not, it may not make sense referring to relative paths in a mobile device environment. Think of the Mail app for example. The fix is straightforward though, say you have an external <code class="highlighter-rouge">ca</code> file:</p>
|
||
|
||
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code>ca my-ca.crt
|
||
</code></pre></div></div>
|
||
|
||
<p>Just replace it with:</p>
|
||
|
||
<div class="highlighter-rouge"><div class="highlight"><pre class="highlight"><code><ca>
|
||
...
|
||
content of my-ca.crt
|
||
...
|
||
</ca>
|
||
</code></pre></div></div>
|
||
|
||
<p>The same applies to other settings like <code class="highlighter-rouge">cert</code>, <code class="highlighter-rouge">key</code>, <code class="highlighter-rouge">tls-auth</code> and <code class="highlighter-rouge">tls-crypt</code>.</p>
|
||
|
||
|
||
</main>
|
||
|
||
<footer>
|
||
<ul class="contacts">
|
||
<li><a href="https://twitter.com/keeshux" title="Follow the author on Twitter!" class="fab fa-twitter"></a></li>
|
||
<li><a href="https://patreon.com/keeshux" title="Support the author on Patreon!" class="fab fa-patreon"></a></li>
|
||
<li><a href="https://github.com/passepartoutvpn" title="Passepartout on GitHub" class="fab fa-github"></a></li>
|
||
<li><a href="mailto:info@passepartoutvpn.app" title="Submit an inquiry" class="fa fa-envelope"></a></li>
|
||
</ul>
|
||
<ul class="secondary">
|
||
<li><a href="/faq/" title="Frequently Asked Questions">FAQ</a></li>
|
||
<li>—</li>
|
||
<li><a href="/disclaimer/" title="Disclaimer">Disclaimer</a></li>
|
||
<li>—</li>
|
||
<li><a href="/privacy/" title="Privacy policy">Privacy policy</a></li>
|
||
</ul>
|
||
<p class="notice">
|
||
Copyright (c) 2018 <a href="https://davidederosa.com" title="The author website">Davide De Rosa</a><br />
|
||
The logo is taken from the awesome <a href="https://www.iconfinder.com/iconsets/circle-icons-1" title="Circle Icons">Circle Icons</a> set by <a href="https://www.elegantthemes.com/" title="Elegant Themes">Nick Roach</a>
|
||
</p>
|
||
</footer>
|
||
|
||
</div>
|
||
</body>
|
||
</html>
|