Hak5 1405 – Build Your Own a Free VPN Server in Minutes and Securely Setup Android Client

Setting up an OpenVPN Server with Android clients, connecting to preconfigured wifi channels on your Android device, and more!

Download HD | Download MP4

Build your own a Free VPN Server in Minutes and Securely Setup Android Client

Thanks to Micah and all others who pointed out the MS-CHAPv2 vulnetability demonstrated at DEFCON 20. I can’t believe I missed this. Check out the writeup at cloudcracker.com

Previously on the show we used Adito to setup an OpenVPN server. This time I’m using Untangle and my Open Source router software of choice.

The setup couldn’t be easier so follow along as I demonstrate an OpenVPN server setup on Untangle from within a Virtual Machine

Remember, once you’ve setup the OpenVPN app in Untangle and created your first user you’ll want to hit Apply changes in order to find the Distribute link. Click Distribute and then the “Other OS” link to get the files you’ll need for an Android client. Save ’em to the default location (~/Desktop) and now you’ll be ready to SCP ’em to your phone or PC.

In Untangle just minimize the admin panel and you’ll find a Terminal link in the bottom right. You’ll find the config.zip file in the Desktop directory. In my demo the Android phone is running an SSH server on port 4444 so the command is

scp -P 4444 config.zip [email protected]:

After uncompressing the zip file on the root of my Android phones SD card I SSH to the device and move the config files into a single directory – this is what the Android OpenVPN Connect app will want.

 

ssh -p 4444 [email protected]

cd sdcard/untangle-vpn

mv hak5* untangle-vpn/

Once everything is in the right place it’s simply a matter of opening OpenVPN Connect and importing the credentials from SD card.

If this is useful to you I encourage you to check out untangle.com/hak5 – it warms my heart to be sponsored by a cool open source project that I’ve been using since ’09 and they might be a perfect fit for you too. –Darren

 

Feedback

Charles writes: I was wondering what distro and bash colors Darren is using in Episode 1225? It looks awesome…

Geekalomaniac: I pass by a few capptive portals on my way to work. That can be really annoying because my cellphone allways connects to the strongest available wifi. Is there a way to configure android devices to connect to certain wifis only.

10 Comments

    • auxchar
      Reply

      I switched from Ubuntu to Arch with LUKS over a year ago, and there’s been no other distro for me. Except maybe Knoppix & Backtrack. Seriously though, Arch is fricken awesome, and for someone like Darren, it’d be perfect.

  • cybernetx
    Reply

    I have created two Android encryption applications that I want hak5 to review. The first one is GV Secure (Google Voice Secure), this application uses Google Voice SMS features to send encrypted text messages. It also uses Dropbox Cloud to store and share your pictures and videos which can be encrypted before you store them in the Cloud for your added security. You can even share the Dropbox link encrypted via a GV Secure text message. Lastly GV Secure supports a Google Voice call back feature. One thing great about GV Secure is no messages are stored on the device and the user needs to login every time to use.

    https://play.google.com/store/apps/details?id=com.cybernetxsystems.gvsecurelite
    https://play.google.com/store/apps/details?id=com.cybernetxsystems.cloudsecurecameralite

    The second application is called CloudSecureCamera. This application is a standalone secure cloud feature that was added in GV Secure stated above and is not dependent on GV Secure to send your text messages just use any message application would work.

    These application can be used on any Android device (phone/tablet) running version 2.1 or higher.

    To improve security and performance speed in GV Secure I will added a read and burn method. When you read a message it will automatically get deleted.

  • James
    Reply

    Hey Hak5, I was just wondering if you’ve seen/used untangled with 2FA? I’m interested in doing this to help beef up security even further. Thanks!!

  • louis vuitton online
    Reply

    Louis Vuitton added new runway handbag styles along with sky-high platform shoes
    and heavy winter coats to create an overall collection ideal for travel and
    the cool weather season. You can easily shoulder them, some of them may also slung a little lower on the hips.

    Though there is no woman-handling of the bags, it’s a feast for hungry eyes.

  • akademisches ghostwriting
    Reply

    Hey! Someone in my Facebook group shared this website with us
    so I came to check it out. I’m definitely enjoying the information. I’m bookmarking and
    will be tweeting this to my followers! Fantastic blog and superb style and design.

  • wholesale burberry medium nova check tote bag 37531781 pink sales promotion
    Reply

    Usually, once you’ve got made consistent on-time payments
    from a time period of time, the lending company will release the co-signer from liability, after
    about six months or so wholesale burberry medium nova check
    tote bag 37531781 pink sales promotion they don’t realize that capital one small business loan poor credit
    loans apply online, and in many cases less how you can take advantage at their store.

  • discount christian louboutin
    Reply

    Somehow these leather shoes created a mass hysteria for
    all the fashionistas in the world. Secondly
    they might not make you appear the right height as that of
    your partner and then they might cause you pain if you
    haven’t chosen them for comfort. French footwear Designer Christian Louboutin is opening his
    first US store for men in New York in the spring of 2012.

  • BerneiceGSpinelli
    Reply

    I believe that is one of the so much vital information for me.
    And i am glad studying your article. But should commentary on few common issues, The site style is great,
    the articles is in point of fact excellent : D. Good job, cheers

  • Asian Fashion
    Reply

    This new regulation is set to guard those customers who do not want to repay a loan from applying
    for another Asian Fashion making a checklist of questions to inquire about
    the lender regarding these types of costs before signing the legal plans could be
    helpful.

  • Brandi Rein
    Reply

    12 Month Loans no Fees: Without any kind of fees and available for twelve
    months Brandi Rein but this won’t constitute that does
    not making repayments on this kind of loan won’t have
    detrimental result.

  • tyler collins website
    Reply

    Whoever you are or what status in life you have, bumping the financial meltdown is entirely irrepressible tyler collins
    website we have joined together so that you can have our
    voices heard so we can easily protect the finance options available to us and always
    make your own financial decisions.

  • Letisha Omelia
    Reply

    Looking at their face would be too unsettling and that
    means you’d spend an inordinate quantity of time stirring the sugar in your
    drink and watching it fade Letisha Omelia
    some plans may be pretty lengthy but within the end your obligations is going to be met as well as your credit score restored.

  • cool t shirts
    Reply

    Have you ever thought about including a little bit more than just your articles?
    I mean, what you say is important and all. But think
    of if you added some great visuals or videos to
    give your posts more, “pop”! Your content is excellent but
    with pics and video clips, this site could certainly be one of the most
    beneficial in its field. Very good blog!

  • replica michael kors
    Reply

    A new direct marketing division was launched by C D
    T in December of 2004, which is designed to allow the company to effectively sell a
    very high volume of their first class diamonds at extremely
    low wholesale prices. There is another program, called the ’10-14′ program, in it all the children range from being 10 to 14 years of
    age. She was working as the activity administrator when she decided to offer exercise classes for babies with their parents.

  • air jordans 2015
    Reply

    Since the collapse of the Soviet Union, each ship has received a new name- Admiral Ushakov,
    Admiral Nakhimov, Admiral Lazarev, and Pyotr Velikiy- respectively.

    An added benefit, to practice mind-full awareness is at
    mealtime – practice portion control, the key to weight control.

    Nike Air Jordan Fusion shoes are some of the most popular footwear among many folks, based on the fact that they can be worn for both fashion purposes as well as
    sporting activities.

  • michael kors canada
    Reply

    The online connectivity options can help you in easily connecting to the internet anytime and anywhere.
    “My husband says that he got most of his comfort from me, because he felt that I was in control both of my disease and of the day-to-day workings of our lives. The full HD display in 8 inch screen is backed with IPS technology and vivid colors use in-plane switching, which displays a 180-degree viewing angle.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>