AFTV stick (OS 5.2.1.0) and OpenVPN - Fire TV General

Hello all,
I am trying to run openvpn on the aftv stick (OS 5.2.1.0) that has been rooted. There are reports of successes online (cannot post link apprently)
I performed the following steps:
1) Root the device using kingoroot
2) Installed the openvpn installer manually (could not do it through the GUI), that involved transferring the executable openvpn to /system/xbin
3) Installed BusyBox
4) Pushed my ovpn configuration files to /sdcard/openvpn
5) Installed the openVPN settings apk
6) Logged into abd shell and ran the following command:
Code:
# su
# openvpn --iproute /system/xbin/ip --config my_file.ovpn
I had to specify the iproute because openvpn looks for iproute2 in /sbin/ip and not /system/xbin/ip.
Although it connects, the public IP does not change..... FAIL
Here is the log of the command above:
Code:
Sat Jul 9 17:52:55 2016 OpenVPN 2.1.1 jc v0.1 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Aug 7 2015
Sat Jul 9 17:52:55 2016 WARNING: file 'pass.txt' is group or others accessible
Sat Jul 9 17:52:55 2016 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Jul 9 17:52:55 2016 NOTE: --fast-io is disabled since we are not using UDP
Sat Jul 9 17:52:55 2016 LZO compression initialized
Sat Jul 9 17:52:55 2016 Attempting to establish TCP connection with 195.154.235.91:443 [nonblock]
Sat Jul 9 17:52:56 2016 TCP connection established with 195.154.235.91:443
Sat Jul 9 17:52:56 2016 TCPv4_CLIENT link local: [undef]
Sat Jul 9 17:52:56 2016 TCPv4_CLIENT link remote: 195.154.235.91:443
Sat Jul 9 17:52:56 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Jul 9 17:52:57 2016 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1576'
Sat Jul 9 17:52:57 2016 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Sat Jul 9 17:52:57 2016 [TG-OVPN-CA] Peer Connection Initiated with 195.154.235.91:443
Sat Jul 9 17:52:59 2016 TUN/TAP device tun0 opened
Sat Jul 9 17:52:59 2016 /system/xbin/ip link set dev tun0 up mtu 1500
Sat Jul 9 17:52:59 2016 /system/xbin/ip addr add dev tun0 local 10.8.0.14 peer 10.8.0.13
Sat Jul 9 17:52:59 2016 NOTE: unable to redirect default gateway -- Cannot read current default gateway from system
ip: RTNETLINK answers: No such process
Sat Jul 9 17:52:59 2016 ERROR: Linux route add command failed: external program exited with error status: 2
Sat Jul 9 17:52:59 2016 Initialization Sequence Completed
^CSat Jul 9 17:53:13 2016 event_wait : Interrupted system call (code=4)
Sat Jul 9 17:53:13 2016 /system/xbin/ip addr del dev tun0 local 10.8.0.14 peer 10.8.0.13
Sat Jul 9 17:53:13 2016 SIGINT[hard,] received, process exiting
iproute /system/xbin/ip --config TorGuard.France.ovpn <
Sat Jul 9 17:53:52 2016 OpenVPN 2.1.1 jc v0.1 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Aug 7 2015
Sat Jul 9 17:53:52 2016 WARNING: file 'pass.txt' is group or others accessible
Sat Jul 9 17:53:52 2016 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Jul 9 17:53:52 2016 NOTE: --fast-io is disabled since we are not using UDP
Sat Jul 9 17:53:52 2016 LZO compression initialized
Sat Jul 9 17:53:52 2016 Attempting to establish TCP connection with 195.154.235.91:443 [nonblock]
Sat Jul 9 17:53:53 2016 TCP connection established with 195.154.235.91:443
Sat Jul 9 17:53:53 2016 TCPv4_CLIENT link local: [undef]
Sat Jul 9 17:53:53 2016 TCPv4_CLIENT link remote: 195.154.235.91:443
Sat Jul 9 17:53:53 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sat Jul 9 17:53:54 2016 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1576'
Sat Jul 9 17:53:54 2016 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Sat Jul 9 17:53:54 2016 [TG-OVPN-CA] Peer Connection Initiated with 195.154.235.91:443
Sat Jul 9 17:53:56 2016 TUN/TAP device tun0 opened
Sat Jul 9 17:53:56 2016 /system/xbin/ip link set dev tun0 up mtu 1500
Sat Jul 9 17:53:56 2016 /system/xbin/ip addr add dev tun0 local 10.8.0.14 peer 10.8.0.13
Sat Jul 9 17:53:56 2016 NOTE: unable to redirect default gateway -- Cannot read current default gateway from system
ip: RTNETLINK answers: No such process
Sat Jul 9 17:53:56 2016 ERROR: Linux route add command failed: external program exited with error status: 2
Sat Jul 9 17:53:56 2016 Initialization Sequence Completed
It seems that the key in the log are these two lines:
Code:
Sat Jul 9 17:53:56 2016 NOTE: unable to redirect default gateway -- Cannot read current default gateway from system
ip: RTNETLINK answers: No such process
Sat Jul 9 17:53:56 2016 ERROR: Linux route add command failed: external program exited with error status: 2
I guess this is a problem with the routing table, however this is the limit of my knowledge.
Although most people suggest using a DDWRT router for this, it seems strange to me that it won't work even on this highly modified version of android.
Any help would be very much appreciated
EDIT: OK I realised the cause of the error came from the fact that I was using a bad openvpn binary when I was installing it (step 2) (sorry no links because of xda policy) manually. It explains why I had to specify the --iproute since it was pointing to it in /sbin when it was in /xbin. The error is because it uses the native ifconfig, and we need it to use the busybox ifconfig
If I extract the correct one (with busybox bin) I get:
Code:
error: only position independent executables (PIE) are supported.[\CODE]
Apparently this is a new security feature from google. This means that openvpn needs to be compiled with PIE and the correct paths for the xbin ip and ifconfig.
Any one knows how to do that?

melclic said:
Hello all,
I am trying to run openvpn on the aftv stick (OS 5.2.1.0) that has been rooted. There are reports of successes online (cannot post link apprently)
I performed the following steps:
1) Root the device using kingoroot
2) Installed the openvpn installer manually (could not do it through the GUI), that involved transferring the executable openvpn to /system/xbin
3) Installed BusyBox
4) Pushed my ovpn configuration files to /sdcard/openvpn
5) Installed the openVPN settings apk
6) Logged into abd shell and ran the following command:
I had to specify the iproute because openvpn looks for iproute2 in /sbin/ip and not /system/xbin/ip.
Although it connects, the public IP does not change..... FAIL
Here is the log of the command above:
It seems that the key in the log are these two lines:
I guess this is a problem with the routing table, however this is the limit of my knowledge.
Although most people suggest using a DDWRT router for this, it seems strange to me that it won't work even on this highly modified version of android.
Any help would be very much appreciated
EDIT: OK I realised the cause of the error came from the fact that I was using a bad openvpn binary when I was installing it (step 2) (sorry no links because of xda policy) manually. It explains why I had to specify the --iproute since it was pointing to it in /sbin when it was in /xbin. The error is because it uses the native ifconfig, and we need it to use the busybox ifconfig
If I extract the correct one (with busybox bin) I get:
Code:
error: only position independent executables (PIE) are supported.[\CODE]
Apparently this is a new security feature from google. This means that openvpn needs to be compiled with PIE and the correct paths for the xbin ip and ifconfig.
Any one knows how to do that?[/QUOTE]
Instalar
Click to expand...
Click to collapse

Jael1 said:
Instalar
Click to expand...
Click to collapse
Cheers for the reply. Care to elaborate?

Hi got some News?

hi,
iam connected, but my ip is the same ?
i got some errors:
Authenticate/Decrypt packet error: packet HMAC authentication failed
any ideas?

I had the same problem.
Just installed the "OpenVPN Connect" Client, works like a charm!

LeBroesel said:
I had the same problem.
Just installed the "OpenVPN Connect" Client, works like a charm!
Click to expand...
Click to collapse
how do u installed it?
i only have a .ca & .ovpn file
cant connect .-(
got fragment error

when I run Open-VPN-Connect, it connects but then the Fire TV Stick says it does not have network connection anymore.
same with app from my VPN Provider.
when trying to run OpenVPN-Installer-app it keeps failing to install...

Is it possible to install openvpn in kodi as a plugin?
I think it is not possible to get openvpn workbon the stick as apk.
Mayby in kodi?
On openelec it works!
But Android is a little bit different.
Some suggestions?

I sideloaded the Apk from APKDownloader.
I have a rooted FireTV 2 with OS 5.2.
And I also sideloaded and installed BusyBox.

On firetv2 it's working but not on the stick.

Related

SQUAT failed to open index file

Hi,
everytime I try to connect to my Postfix Server (with Cyrus IMAP) I get the following "error"
Code:
/var/log/mail.log
Apr 21 02:49:47 h137XXXX cyrus/imap[11563]: accepted connection
Apr 21 02:49:51 h137XXXX cyrus/imap[11563]: client id: "vendor" "Microsoft" "os" "Windows Mobile" "os-version" "5.2" "os-revision" "0.7.2" "guid" "294b479XXXXb91003c10fcXXXXb5f4a20a657c09"
Apr 21 02:49:52 h137XXXX cyrus/imap[11562]: seen_db: user XXX opened /var/lib/cyrus/user/c/XXX.seen
Apr 21 02:49:52 h137XXXX cyrus/imap[11562]: open: user XXX opened INBOX
Apr 21 02:49:53 h137XXXX cyrus/imap[11563]: login: 16.106.113.82.net.de.o2.com [82.113.106.16] XXX plaintext User logged in
Apr 21 02:49:54 h137XXXX cyrus/imap[11562]: SQUAT failed to open index file
Apr 21 02:49:54 h137XXXX cyrus/imap[11562]: SQUAT failed
Any idea what is going wrong? Using a Prophet with Windows Mobile 6 (Shadow 1.0).
I know its more or less a Linux question, but an XDA is involved
(/usr/lib/cyrus/bin/reconstruct -r user.XXX - had no effect at all)

[Q] VPN on NAND Android

Good morning,
have installed on my HD2 Android (MDJ 2.2) in the NAND. Now I want to create VPN.
OpenVPN settings downloaded. Superuser downloaded.
Linkages of the ifconfig and route to / system / bin / ifconfig to / system / xbins / bb / ifconfig
created.
OpenVPN binary is / system / xbins / openvpn
OpenVPN Settings settings: insmod = / system / lib / modules / tun.ko
Now I start a terminal session and run VPN:
# Openvpn - config /sdcard/openvpn/config.conf > /sdcard/openvpn/debug.txt
debug.txt file in the route and all the tun0 interface are created successfully.
Code:
Thu Jan 6 08:45:40 2011 us = 717 712 PUSH: Received control message: 'PUSH_REPLY, route
192.168.12.0 255.255.255.0 vpn_gateway route 192.168.18.0 255.255.255.0 vpn_gateway, route
10.40.7.1, ping 10, ping-restart 120, ifconfig 10.40.7.6 10.40.7.5 '
Thu Jan 6 08:45:40 2011 us = 717 956 OPTIONS IMPORT: timers and / or timeouts modified
Thu Jan 6 08:45:40 2011 us = 718 048 OPTIONS IMPORT: --ifconfig/up options modified
Thu Jan 6 08:45:40 2011 us = 718 170 OPTIONS IMPORT: route options modified
Thu Jan 6 08:45:40 2011 us = 719 238 ROUTE DEFAULT_GATEWAY = xx.xx.xx.xx
Thu Jan 6 08:45:40 2011 us = 724 090 TUN / TAP device tun0 opened
Thu Jan 6 08:45:40 2011 us = 724 304 TUN / TAP TX queue length set to 100
Thu Jan 6 08:45:40 2011 us = 724 517 /system/xbins/bb/ifconfig tun0 10.40.7.6 10.40.7.5 pointopoint
mtu 1500
Thu Jan 6 08:45:40 2011 us = 741 912 /system/xbins/bb/route add-net 192.168.12.0 netmask
255.255.255.0 gw 10.40.7.5
Thu Jan 6 08:45:40 2011 us = 749 176 /system/xbins/bb/route add-net 192.168.18.0 netmask
255.255.255.0 gw 10.40.7.5
Thu Jan 6 08:45:40 2011 us = 756 195 /system/xbins/bb/route add-net 10.40.7.1 netmask
255 255 255 255 gw 10.40.7.5
Thu Jan 6 08:45:40 2011 us = 762 023 Initialization Sequence Completed
The traffic stops at 0.02Kbyte. And I get no ping to the outside network. Does anyone have an idea?
When I had Android on SD card it worked just fine with the same settings.
Many thanks also
Mfg
Ok OpenVPN Settings DNS Fixes will clear the Problem
mfg
android vpn
here is android vpn tutorial and connection that i am using now ....
android vpn ​

[Q] OpenVPN para Milestone 2

Alguem já consegui instalar e usar o OpenVPN no milestone 2 com android 2.2 ? podem explicar como fizeram ?
Obrigado
Um. Yah. Might try English.
Sent from my DROID2 using XDA App
I believe he's looking for an explanation on how to use OpenVPN for the milestone 2 or he wants to know how it's made. not sure which. It is Portuguese though.
Sorry,
I am unable to use the openvpn milestone in February with android 2.2
I installed openvpn and openvpn sentings install, busybox.
The options are
Load kernel module tun
lsnmod 'system / lib / modules / tun
Path to configurations
/ sdcard / openvpn
Path to binary openvpn
/ system / xbin / openpvn
client.conf
client
fast-io
dev tun
proto tcp
nobind
remote XXX.XXX.XXX.XXX: 1194
route-method exe
route-delay 2
resolv-retry infinite
persist-key
persist-tun
auth-user-pass
ca / sdcard / openvpn / turquesa.cer
comp-lzo
verb 3
Status / sdcard / openvpn / openvpn_status.log
log-append / sdcard / openvpn / openvpn.log
The error is this
Sun Feb 13 14:38:18 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Feb 13 14:38:18 2011 NOTE: --fast-io is disabled since we are not using UDP
Sun Feb 13 14:38:18 2011 LZO compression initialized
Sun Feb 13 14:38:18 2011 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Feb 13 14:38:18 2011 MANAGEMENT: >STATE:1297618698,RESOLVE,,,
Sun Feb 13 14:38:18 2011 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Sun Feb 13 14:38:18 2011 Local Options hash (VER=V4): '69109d17'
Sun Feb 13 14:38:18 2011 Expected Remote Options hash (VER=V4): 'c0103fa8'
Sun Feb 13 14:38:18 2011 Attempting to establish TCP connection with 189.71.249.81:443 [nonblock]
Sun Feb 13 14:38:18 2011 MANAGEMENT: >STATE:1297618698,TCP_CONNECT,,,
Sun Feb 13 14:38:18 2011 MANAGEMENT: CMD 'bytecount 0'
Sun Feb 13 14:38:19 2011 MANAGEMENT: CMD 'bytecount 0'
Sun Feb 13 14:38:20 2011 TCP connection established with XXX.XXX.XXX.XXX:1194
Sun Feb 13 14:38:20 2011 Socket Buffers: R=[131072->131072] S=[131072->131072]
Sun Feb 13 14:38:20 2011 TCPv4_CLIENT link local: [undef]
Sun Feb 13 14:38:20 2011 TCPv4_CLIENT link remote: XXX.XXX.XXX.XXX:1194
Sun Feb 13 14:38:20 2011 MANAGEMENT: >STATE:1297618700,WAIT,,,
Sun Feb 13 14:38:20 2011 MANAGEMENT: CMD 'bytecount 0'
Sun Feb 13 14:38:20 2011 MANAGEMENT: >STATE:1297618700,AUTH,,,
Sun Feb 13 14:38:20 2011 TLS: Initial packet from XXX.XXX.XXX.XXX:1194, sid=9e42ad84 c9a371e6
Sun Feb 13 14:38:20 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Feb 13 14:38:20 2011 MANAGEMENT: CMD 'bytecount 0'
Sun Feb 13 14:38:21 2011 VERIFY OK: depth=1, /C=IT/O=efw/CN=efw_CA
Sun Feb 13 14:38:21 2011 VERIFY OK: depth=0, /C=IT/O=efw/CN=127.0.0.1
Sun Feb 13 14:38:23 2011 WARNING: 'dev-type' is used inconsistently, local='dev-type tun', remote='dev-type tap'
Sun Feb 13 14:38:23 2011 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1544', remote='link-mtu 1576'
Sun Feb 13 14:38:23 2011 WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Sun Feb 13 14:38:23 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Feb 13 14:38:23 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 13 14:38:23 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Feb 13 14:38:23 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Feb 13 14:38:23 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Feb 13 14:38:23 2011 [127.0.0.1] Peer Connection Initiated with 189.71.249.81:443
Sun Feb 13 14:38:24 2011 MANAGEMENT: >STATE:1297618704,GET_CONFIG,,,
Sun Feb 13 14:38:24 2011 MANAGEMENT: CMD 'bytecount 0'
Sun Feb 13 14:38:26 2011 SENT CONTROL [127.0.0.1]: 'PUSH_REQUEST' (status=1)
Sun Feb 13 14:38:26 2011 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.0.0,route 192.168.0.0 255.255.255.0,route-gateway 192.168.0.0,ping 8,ping-restart 30,ifconfig 192.168.0.240 255.255.255.0'
Sun Feb 13 14:38:26 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:2: route (2.1.1)
Sun Feb 13 14:38:26 2011 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:6: ifconfig (2.1.1)
Sun Feb 13 14:38:26 2011 OPTIONS IMPORT: timers and/or timeouts modified
Sun Feb 13 14:38:26 2011 OPTIONS IMPORT: route-related options modified
Sun Feb 13 14:38:26 2011 Note: Cannot open TUN/TAP dev /dev/tun: No such file or directory (errno=2)
Sun Feb 13 14:38:26 2011 Note: Attempting fallback to kernel 2.2 TUN/TAP interface
Sun Feb 13 14:38:26 2011 MANAGEMENT: Client disconnected
Sun Feb 13 14:38:26 2011 Cannot allocate TUN/TAP dev dynamically
Sun Feb 13 14:38:26 2011 Exiting
Thiago
You might want to put. " CODE /CODE " (with brackets around both without perenths) tags around that for readability and space.
Sent from my DROID2 using XDA App

[Problem] [CM9] Cannot open TUN/TAP dev openvpn: No such file or directory (errno=2)

Hello!
I have installed app "OpenVPN Settings" to setup a VPN connection to my OpenVPN server.
When I start the app, I can see this in the corresponding client log:
Sat Jun 30 11:21:28 2012 OpenVPN 2.2.2 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Jun 24 2012
Sat Jun 30 11:21:28 2012 MANAGEMENT: TCP Socket listening on 127.0.0.1:26370
Sat Jun 30 11:21:28 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Jun 30 11:21:28 2012 Need password(s) from management interface, waiting...
Sat Jun 30 11:21:31 2012 MANAGEMENT: Client connected from 127.0.0.1:26370
Sat Jun 30 11:21:31 2012 MANAGEMENT: CMD 'state'
Sat Jun 30 11:21:31 2012 MANAGEMENT: CMD 'state on'
Sat Jun 30 11:21:31 2012 MANAGEMENT: CMD 'bytecount 0'
Sat Jun 30 11:21:58 2012 MANAGEMENT: CMD 'password [...]'
Sat Jun 30 11:21:59 2012 WARNING: file '/sdcard/openvpn/mobile2.key' is group or others accessible
Sat Jun 30 11:21:59 2012 WARNING: file '/sdcard/openvpn/static.key' is group or others accessible
Sat Jun 30 11:21:59 2012 Control Channel Authentication: using '/sdcard/openvpn/static.key' as a OpenVPN static key file
Sat Jun 30 11:21:59 2012 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 30 11:21:59 2012 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 30 11:21:59 2012 LZO compression initialized
Sat Jun 30 11:21:59 2012 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Sat Jun 30 11:21:59 2012 Socket Buffers: R=[110592->131072] S=[110592->131072]
Sat Jun 30 11:21:59 2012 MANAGEMENT: >STATE:1341048119,RESOLVE,,,
Sat Jun 30 11:21:59 2012 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Sat Jun 30 11:21:59 2012 Local Options hash (VER=V4): '13a273ba'
Sat Jun 30 11:21:59 2012 Expected Remote Options hash (VER=V4): '360696c5'
Sat Jun 30 11:21:59 2012 UDPv4 link local: [undef]
Sat Jun 30 11:21:59 2012 UDPv4 link remote: 77.2.182.171:1194
Sat Jun 30 11:21:59 2012 MANAGEMENT: >STATE:1341048119,WAIT,,,
Sat Jun 30 11:21:59 2012 MANAGEMENT: CMD 'bytecount 0'
Sat Jun 30 11:21:59 2012 MANAGEMENT: CMD 'bytecount 0'
Sat Jun 30 11:22:00 2012 MANAGEMENT: >STATE:1341048120,AUTH,,,
Sat Jun 30 11:22:00 2012 TLS: Initial packet from 77.2.182.171:1194, sid=6be307be 1c6229c8
Sat Jun 30 11:22:00 2012 MANAGEMENT: CMD 'bytecount 0'
Sat Jun 30 11:22:02 2012 VERIFY OK: depth=1, /C=DE/ST=BW/L=location/O=OpenVPN/OU=orga/CN=orga/name=orga/[email protected]
Sat Jun 30 11:22:02 2012 VERIFY OK: nsCertType=SERVER
Sat Jun 30 11:22:02 2012 VERIFY OK: depth=0, /C=DE/ST=BW/L=location/O=OpenVPN/OU=orga/CN=net1/name=orga/[email protected]
Sat Jun 30 11:22:08 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Jun 30 11:22:08 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 30 11:22:08 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Jun 30 11:22:08 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 30 11:22:08 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Jun 30 11:22:08 2012 [net1] Peer Connection Initiated with 77.2.182.171:1194
Sat Jun 30 11:22:09 2012 MANAGEMENT: >STATE:1341048129,GET_CONFIG,,,
Sat Jun 30 11:22:09 2012 MANAGEMENT: CMD 'bytecount 0'
Sat Jun 30 11:22:10 2012 SENT CONTROL [net1]: 'PUSH_REQUEST' (status=1)
Sat Jun 30 11:22:10 2012 PUSH: Received control message: 'PUSH_REPLY,route-gateway 192.168.178.1,route 192.168.178.0 255.255.255.0,route 192.168.178.1,ping 10,ping-restart 120,ifconfig 192.168.178.101 255.255.255.0'
Sat Jun 30 11:22:10 2012 OPTIONS IMPORT: timers and/or timeouts modified
Sat Jun 30 11:22:10 2012 OPTIONS IMPORT: --ifconfig/up options modified
Sat Jun 30 11:22:10 2012 OPTIONS IMPORT: route options modified
Sat Jun 30 11:22:10 2012 OPTIONS IMPORT: route-related options modified
Sat Jun 30 11:22:10 2012 ROUTE default_gateway=10.66.180.1
Sat Jun 30 11:22:10 2012 Note: Cannot open TUN/TAP dev openvpn: No such file or directory (errno=2)
Sat Jun 30 11:22:10 2012 MANAGEMENT: >STATE:1341048130,ASSIGN_IP,,192.168.178.101,
Sat Jun 30 11:22:10 2012 /system/bin/ip link set dev up mtu 1500
Usage: ip link add [link DEV] [ name ] NAME
[ txqueuelen PACKETS ]
[ address LLADDR ]
[ broadcast LLADDR ]
[ mtu MTU ]
type TYPE [ ARGS ]
ip link delete DEV type TYPE [ ARGS ]
ip link set { dev DEVICE | group DEVGROUP } [ { up | down } ]
[ arp { on | off } ]
[ dynamic { on | off } ]
[ multicast { on | off } ]
[ allmulticast { on | off } ]
[ promisc { on | off } ]
[ trailers { on | off } ]
[ txqueuelen PACKETS ]
[ name NEWNAME ]
[ address LLADDR ]
[ broadcast LLADDR ]
[ mtu MTU ]
[ netns PID ]
[ netns NAME ]
[ alias NAME ]
[ vf NUM [ mac LLADDR ]
[ vlan VLANID [ qos VLAN-QOS ] ]
[ rate TXRATE ] ]
[ spoofchk { on | off} ] ]
[ master DEVICE ]
[ nomaster ]
ip link show [ DEVICE | group GROUP ]
TYPE := { vlan | veth | vcan | dummy | ifb | macvlan | can | bridge }
Sat Jun 30 11:22:10 2012 MANAGEMENT: Client disconnected
Sat Jun 30 11:22:10 2012 Linux ip link set failed: external program exited with error status: 255
Sat Jun 30 11:22:10 2012 Exiting
My understanding is that the tun-module is not used / loaded.
Checking on the device with lsmod, I get this output:
[email protected]:/ $ lsmod
Si4709_driver 17043 0 - Live 0xbf015000
j4fs 65970 1 - Live 0xbf000000 (P)
Is there a known problem or bug with tun-module with CM9?
I thought tun is not integrated in the kernel?
If this is wrong or simply not working, I assume I have to install a tun.ko on the device in /system/lib/modules. Where can I get this file?
Or is it advised to install another kernel?
If yes, which kernel is recommended?
THX
RESOLVED
Modification of client configuration:
comment out parameter
dev-node openvpn

From CAF/MSM8974 to Omni

Hallo,
i'm trying to build Omni for I9506/ks01lte. How can i achieve a list of present hardware so i know which drivers are needed? There is no 'lshw' binary or '/proc/device-tree' on my current CM13 image and I'm not sure how to gather a reliable hardware map to start searching for drivers. Are unknown detected devices listed in dmesg?
Looking at find7op kernel dts files it seems they injected some older stuff (most files include copyright from 2014). I guess they've taken that from stock. But how did they know what to pick in the first place?
My first milestone is setting up a vanilla caf msm8974 defconfig kernel with boot interrupted 'bootable/recovery' image. This should bring up a minimal system with adb i think.
DualJoe said:
Hallo,
i'm trying to build Omni for I9506/ks01lte. How can i achieve a list of present hardware so i know which drivers are needed? There is no 'lshw' binary or '/proc/device-tree' on my current CM13 image and I'm not sure how to gather a reliable hardware map to start searching for drivers. Are unknown detected devices listed in dmesg?
Looking at find7op kernel dts files it seems they injected some older stuff (most files include copyright from 2014). I guess they've taken that from stock. But how did they know what to pick in the first place?
My first milestone is setting up a vanilla caf msm8974 defconfig kernel with boot interrupted 'bootable/recovery' image. This should bring up a minimal system with adb i think.
Click to expand...
Click to collapse
General idea is - Try to determine which CAF tag the OEM derived their source from. Sometimes (not Samsung) the vendor is nice and tells you where they started.
Otherwise, you typically determine from https://codeaurora.org/xwiki/bin/QAEP/release which tags correspond to your chipset and the Android version of the OEM source
e.g. back in the Oppo find7 days, we started with (if I recall correctly) msm8974 and Android version 04.03.00 or something like that.
It takes a bit of work to check out a CAF tag, drop the source on it, and come up with a metric of "how much changed" - some people use "lines of code in the patch" others use "physical size of the resulting patch" - Someone else wrote a script that automated this, I don't have a link on hand though.
Once you determine the closest CAF tag to the OEM source - check that out, drop the OEM source on it, then commit the changes. Then work on splitting the diff up into smaller digestible chunks, usually by path.
Then apply these chunks to a new CAF tag, reading through everything and making a judgement call on what changes are needed/what aren't. Can be harder with Samsung as they make a lot of unnecessary changes.
https://github.com/Entropy512/kernel_find7_reference/commits/oppo_kernel - diffchunked Oppo find7 kernel, start point was LNX.LA.3.2.5-00210-8x74.0
https://github.com/Entropy512/kernel_find7_reference/tree/kk_3.5_oppo - initial effort to rebase onto CAF kk_3.5 tag (this was the chosen CAF baseline back then)
NOTE: Over the years, Max has stripped out even more "unneeded ****" over time.
Thanks. I somewhat hoped for a more "sorted" sub-vendor patches approach but looks like the world is not yet ready for that. Will give it a shot anyway.
There are more than 30 branches (LA.BF.1.1.1) for 5.0.1 in CAF repo though and Samsung were so nice and cleared/unified all file dates in their kernel. I already wasted too much time in trying to find some place to identify the kernel somehow. Without any success though.
I think i will do as you said and compare everything starting in the middle of the branches and try to see in which direction i have to go dependent on 'diff' difference. Its 100MB download per CAF kernel and 2x500MB comparison data. I will test with 'diff -r folder1 folder2'.
Looks like its LA.BF.1.1.1_rb1.1 for Samsung-I9506XXUDOJ2 (Android 5.0.1).
Code:
git init
git remote add git://codeaurora.org/quic/la/kernel/msm
git fetch --depth 1 origin '+refs/heads/LA.BF.1.1.1*:refs/heads/LA.BF.1.1.1*'
# '--depth 1' strips commit history (for smaller download)
git checkout LA.BF.1.1.1_rb1.1
git checkout -b LA.BF.1.1.1_rb1.1-Samsung-overlay
(copy/overwrite Samsung kernel into worktree)
git add -A
git commit -m 'LA.BF.1.1.1_rb1.1-Samsung-I9506XXUDOJ2 kernel overlay'
GLOBIGNORE="*"; for i in $(git branch); do if [[ ! "$i" = "*" ]]; then echo "$i"; git diff --diff-filter=M "$i"..LA.BF.1.1.1_rb1.1-Samsung-overlay > ../"$i".txt; fi; done
# The active branch is marked with asterisk that globs to filenames. The 'if' handles that.
$ ls -lSr --block-size=K
total 196716K
drwxrwxr-x+ 1 User None 0K Mar 27 22:08 msm
-rw-rw-r--+ 1 User None 6408K Mar 27 22:29 LA.BF.1.1.1_rb1.1.txt
-rw-rw-r--+ 1 User None 6415K Mar 27 22:30 LA.BF.1.1.1_rb1.3.txt
-rw-rw-r--+ 1 User None 6422K Mar 27 22:29 LA.BF.1.1.1.c2.txt
-rw-rw-r--+ 1 User None 6432K Mar 27 22:30 LA.BF.1.1.1_rb1.4.txt
-rw-rw-r--+ 1 User None 6432K Mar 27 22:31 LA.BF.1.1.1_rb1.7.txt
-rw-rw-r--+ 1 User None 6433K Mar 27 22:30 LA.BF.1.1.1_rb1.6.txt
-rw-rw-r--+ 1 User None 6433K Mar 27 22:31 LA.BF.1.1.1_rb1.8.txt
-rw-rw-r--+ 1 User None 6453K Mar 27 22:31 LA.BF.1.1.1_rb1.9.txt
-rw-rw-r--+ 1 User None 6461K Mar 27 22:29 LA.BF.1.1.1_rb1.10.txt
-rw-rw-r--+ 1 User None 6470K Mar 27 22:29 LA.BF.1.1.1.c1_rb1.txt
-rw-rw-r--+ 1 User None 6485K Mar 27 22:29 LA.BF.1.1.1_rb1.12.txt
-rw-rw-r--+ 1 User None 6500K Mar 27 22:29 LA.BF.1.1.1.c1_rb1.2.txt
-rw-rw-r--+ 1 User None 6501K Mar 27 22:29 LA.BF.1.1.1.c1_rb1.1.txt
-rw-rw-r--+ 1 User None 6503K Mar 27 22:29 LA.BF.1.1.1_rb1.13.txt
-rw-rw-r--+ 1 User None 6510K Mar 27 22:29 LA.BF.1.1.1_rb1.14.txt
-rw-rw-r--+ 1 User None 6552K Mar 27 22:29 LA.BF.1.1.1_rb1.15.txt
-rw-rw-r--+ 1 User None 6555K Mar 27 22:30 LA.BF.1.1.1_rb1.16.txt
-rw-rw-r--+ 1 User None 6556K Mar 27 22:30 LA.BF.1.1.1_rb1.17.txt
-rw-rw-r--+ 1 User None 6570K Mar 27 22:29 LA.BF.1.1.1.c3.txt
-rw-rw-r--+ 1 User None 6577K Mar 27 22:30 LA.BF.1.1.1_rb1.18.txt
-rw-rw-r--+ 1 User None 6606K Mar 27 22:30 LA.BF.1.1.1_rb1.19.txt
-rw-rw-r--+ 1 User None 6634K Mar 27 22:30 LA.BF.1.1.1_rb1.20.txt
-rw-rw-r--+ 1 User None 6639K Mar 27 22:30 LA.BF.1.1.1_rb1.21.txt
-rw-rw-r--+ 1 User None 6653K Mar 27 22:30 LA.BF.1.1.1_rb1.22.txt
-rw-rw-r--+ 1 User None 6655K Mar 27 22:30 LA.BF.1.1.1_rb1.23.txt
-rw-rw-r--+ 1 User None 6663K Mar 27 22:30 LA.BF.1.1.1_rb1.24.txt
-rw-rw-r--+ 1 User None 6696K Mar 27 22:30 LA.BF.1.1.1_rb1.25.txt
-rw-rw-r--+ 1 User None 6714K Mar 27 22:30 LA.BF.1.1.1_rb1.26.txt
-rw-rw-r--+ 1 User None 6714K Mar 27 22:29 LA.BF.1.1.1.c5.txt
-rw-rw-r--+ 1 User None 7020K Mar 27 22:29 LA.BF.1.1.1.c4.txt
Click to expand...
Click to collapse
DualJoe said:
Thanks. I somewhat hoped for a more "sorted" sub-vendor patches approach but looks like the world is not yet ready for that. Will give it a shot anyway.
There are more than 30 branches (LA.BF.1.1.1) for 5.0.1 in CAF repo though and Samsung were so nice and cleared/unified all file dates in their kernel. I already wasted too much time in trying to find some place to identify the kernel somehow. Without any success though.
I think i will do as you said and compare everything starting in the middle of the branches and try to see in which direction i have to go dependent on 'diff' difference. Its 100MB download per CAF kernel and 2x500MB comparison data. I will test with 'diff -r folder1 folder2'.
Click to expand...
Click to collapse
If you grab CAF's git repo, it contains all branches and you can switch between them with "git checkout".
Process is something, sort-of, like:
git checkout <candidate tag> - should be able to just use the tag right from the releases page
extract Samsung tarball onto the checked out source
git diff > somefile
Look at size of somefile - Note, somewhere someone has a script that automates this whole thing and I think does it by analyzing lines of code change instead of diff patch size
I forget the sequence of git commands to pretty much clean the tree - you can do a "git diff" without committing FYI.
Repeat the above steps for each candidate
You might be able to, instead, drop the Samsung source somewhere, tag it, then diff the Samsung source's tag and the CAF tag with something like
git diff <tag1> <tag2>
eliminating the need to repeatedly drop the source onto a tag.

Categories

Resources