yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] cernekee:
Not sure - I don't actually have one of these devices, and I have not seen any response from Samsung (even on their own forum).

Is it possible that the Omega ROM developers fixed it themselves, or does everything work OK when you flash a stock ROM?
[Android Apps and Games] schack:
Not sure, I don't want to Flash a stock ROM, it's my daily driver this phone :)

Br

Henrik Schack
[Android Apps and Games] cernekee:
This still looks to me like it is MTU/MSS related. The pcap shows a successful TLS key exchange and cipher negotiation. After the Change Cipher Spec message, the client (your Android device) sends a 1406-byte packet. This is the first full-sized packet in that direction. I see TCP ACKs from the server for everything up to this point, but even after numerous retransmissions, the 1406-byte packet never gets acknowledged. Eventually the server times out and closes the connection.

So let's gather some more information:

If you run "busybox ifconfig -a" when connected with OpenConnect, what are the MTU values reported on the 3G, wifi, and tun0 interfaces? (You may need to temporarily disable wifi to see the 3G MTU.)

If you run "busybox ifconfig -a" when connected with AnyConnect, what are the MTU values reported on the 3G, wifi, and tun0 interfaces?

Does your wifi connection use DSL? Cable? Or something else?

Also, if you have root access, you can try lowering the MTU after establishing the connection to see if that fixes the problem:

busybox ifconfig tun0 mtu 1200
[Android Apps and Games] petelking:
Many thanks for getting back to me, Anyconnect MTU is 1405 while openconnect MTU is 1406

Changing the MTU to 1200 solved this but also chaining it to 1405 solved so I'd like to thank you for your efforts :good:

Any way to make this change permenent?

busybox ifconfig tun0 mtu 1405

Cheers!
[Android Apps and Games] cernekee:
Hmm, that's odd. I wonder how it is being calculated. Normally we just get a number from the server and use it as-is. When I connect to a local ASA with either client, I get 1406.

Can you send the MTU info for the other interfaces under both clients?
[Android Apps and Games] petelking:
Sent Via Email

After further testing, setting MTU to 1200 as you suggested works a lot better than 1405 with a lot less time-outs and retransmits.

Thanks.
[Android Apps and Games] GT3XX:
(Tasker) intent to start vpn connection

Hi all,

I just switched from Apple to Android and like it already! ;)

Tho, I can't figure out what's the intent to add to tasker to start the vpn connection. I read the github page which said smth about the intent, but i can't translate it to tasker format. Can someone put me into the right direction?
[Android Apps and Games] cernekee:
This feature was in the original ics-openvpn sources, but it isn't currently working in OpenConnect.

I can look into getting it fixed up if you're interested in using it. Are you starting/stopping the VPN connection based on e.g. location, hours, etc.?
[Android Apps and Games] GT3XX:
Aff, sorry. I'ts getting kinda late here. It would be great if I can start the VPN connection when the phone is connected to specific WIFI APs.
[Android Apps and Games] GT3XX:
Don't want to hesitate you, but I'm still interested. Do you have any updates? Thanks!
[Android Apps and Games] cernekee:
I haven't coded anything up yet but I gave it some thought.

First - I think SmoothConnect does some sort of blacklist/whitelist based on wifi SSIDs, so that might be something to check out.

Disconnecting in response to another app's intent is easy. Connecting is often interactive, so I think it might work best if the following conditions are satisfied:

VpnService confirmation dialog is bypassed. Arne Schwab made an Xposed module for this. I was thinking I might integrate a cut-down version of this feature into OpenConnect directly, so that if you install OpenConnect you'll automatically get an option in the Xposed Installer to always allow VPN connections from OpenConnect. Hopefully this doesn't have any ill effects if Xposed is not installed.

You would probably want to use batch mode (or a passwordless cert) so that OpenConnect doesn't bug you for group/login/password on every connection. Does this currently work for you?
[Android Apps and Games] GT3XX:
1157

Thanks for your quick reply. I own an ASA for home use so I'm able to set it up as needed.

At this moment, I have to Anyconnect profiles:

Cert based - To use an encrypted tunnel when I'm connected to public AP's so it would be hard to intercept traffic.

AAA + 2 factor authentication - To access my LAN.

I'd like to connect to my cert based profile when I'm not locally connected to my LAN nor 4G. I tried to setup SmoothConnect but it keeps bugging me certficate warnings (your OpenConnect and the official AnyConnect apps work perfectly though).

If it ain't much work the most ideal situation would be to manage the connection by Tasker and be able to see the status of the connection by Tasker variables.
[Android Apps and Games] Ray-Out:
I found a problem with the current version:

Since commit 4d4c10 certificate files in the cache folder that get used by the lib are no more updated with the ones for the connection.

Seems path never gets changed as only srcPath is assigned.
[Android Apps and Games] cernekee:
Oops, looks like I forgot to return srcPath for the !isExecutable case (no temp file). Thanks for catching that.

I'll make a v1.02 with the fix.
[Android Apps and Games] Ray-Out:
Thanks, and sorry for being too lazy to send a patch ;)
[Android Apps and Games] RainFlying:
Is it possible to connect to a "default" connection upon launching?
[Android Apps and Games] wilhexm:
Hello

I connected to a Cisco ASA server with a P12 file certification. But I can't select user group, while I can chose it by AnyConnect app.

Need for help, Thank you.
[Android Apps and Games] hatoxda:
When the mtu is less than 1280, the ipv6 should be disabled

Hi, thanks for this great app. But I got a problem regarding MTU setting:

Because the lame HUAWEI phone has an MTU of 1400 for both wireless and mobile data interface, the resulted MTU is 1269. And the app fallback to 1280, I think it's for the IPV6? In this case, I think the IPV6 should be disabled instead of fallback? I believe the recent version of ocserv is doing this. I also filed an issue on GitHub. Could you please have a look on this?

Thanks.
[Android Apps and Games] batvan:
Split Tunelling

Hello

Can someone help me set up split tunelling? I want to be able to access my local home printer while on my work VPN .

I tried using both options and inputted my home subnet;

192.168.0.0/24

Doesn't seem to be working .
[Android Apps and Games] lyrelai:
The split tunnel is specified to include the ip address range you want Openconnect to route to on your Work VPN side. Any other ip address that is not in this range will be routed through your normal local network route. So, put your work VPN internal ip address range in that split tunnel range, then everything else will not be routed through VPN.

Lyre
[Android Apps and Games] batvan:
Thanks. I got it working using 10.0.0.0/8
[Android Apps and Games] Quirken:
seems like the TOTP token isn't working for me.

I set software token to TOTP and entered my token string and when i connect, it still asks me for my 2 step passcode. It isn't prefilled with anything

The log tab mentions

CALLBACK: onProcessAuthForm

AUTH: message 'somestringblahblah'

AUTH form result is 1

Running Android 6 if relevant, AOSP stock. Typing in the code manually succeeds with connection.
[Android Apps and Games] aderbalito:
Alphanumeric PIN

PIN allow only numbers and I need to use alphanumeric characters...
[Android Apps and Games] UgiPletzet:
having issues after upgrading to nougat. Trying to connect with an imported rsa token.

cannot establish vpn connection, error message from log:

Server certificate verify failed: signer not found.

Ideas?

Thanks.
[Android Apps and Games] trigous:
got!

Server certificate verify failed:
[Android Apps and Games] Hasan Abasi:
Hi
[Android Apps and Games] Hasan Abasi:
Hi

---------- Post added at 04:06 PM ---------- Previous post was at 03:59 PM ----------

Hi
[Android Apps and Games] Slick1123:
Disable Google Wi-Fi Assistant "always on VPN"

Attention users on Nexus or Project Fi: If you enable Google Wi-Fi Assistant's "Always-on VPN" (under Settings, More, VPN), OpenConnect will silently drop out (no logs!) when trying to connect.

You'll need to disable the Always-on VPN for proper OpenConnect functionality. Google Wi-Fi Assistant should still work. ("Always-on VPN" is a generic option shown for all VPN connections; it does not appear to do anything for Google Wi-Fi Assistant except block other VPNs from working!)
[Android Apps and Games] 0oVicero0:
I pull route table from server, there is only no-route entry (no route setting).

iOS anyconnect works well, but anyconnect on android or isc-openconnect fail to add exclude rules.
[Android Apps and Games] te36:
Setup: Mate 9 pro (android 7.0), OpenConnect for Android v1.11, server is ocserv on openwrt.

Problem: can not get packets routed across VPN tunnel on the phone.

Diagnosis: Pinging ocserv IP address works. Using "ip show route table 0", there is no default route via tun0 interface. Trying all three "split tunnel" config options, no difference. Configuring split tunnel network 0.0.0.0/0 does create a default route, but traffic does not use it, because the route is later in table 0 than the default route towards the actual (WiFi) interface on the phone.

Workaround: creating two split tunnel routes: 0.0.0.0/1,128.0.0.0/1 - both routes have one bit longer prefix length than default route towards physical interface, so traffic now seems to nicely use the VPN tunnel.

Quesion: How is this supposed to work without my workaround ? Why does it not work without workaround on my phone ? problem of the specific phone, android 7.0 problem ? Anyone having openconnect run successfully on 7.0 ?
[Android Apps and Games] ildar_prophet:
I had a 1 hour troubleshooting session on MIUI ROM Android 6. Got to the conclusion that the app is totally screwed (adding to that it's no more developing).

I see strings coming but not outgoing.

Any alternative around?
[Android Apps and Games] lover:
This client is very fast and best VPN app for not consuming battery...

I have a weird problem, in Samsung devices after a while the Connected VPN indicator (the key icon) in bar will disappear but OpenConnect's notification is still there (i have tested this with many different Samsung models and different ROMs and all of them have this common problem)

, i have got myself a new Oneplus3t and with this device it's different! The OpenConnect's connected VPN indicator key icon in bar remains but no OpenConnect's notification! I hope someone provide a fix this or perhaps a new version or modded version!
[Android Apps and Games] moshepupkin:
Are there any instructions on how to configure OpenConnect on Android? For example, where to find certificates (to be taken from AnyConnect I guess)...

Thanks
[Android Apps and Games] ildar_prophet:
No. The backend program used is the same OpenConnect for Linux. So reading numerous docs about it may help a lot. One link for starters: https://duckduckgo.com/?q=OpenConnect+NetworkManager&t=ffab&iax=images&ia=images
[Android Apps and Games] benjaminw:
Have you used this to turn your Android into a VPN server?

Hello VPN users,

Great app! Have any of the app users been successful at letting AP clients reach VPN resources? I'd like to run this on my Android that provides internet to my laptop and desktop via the wireless AP, and also enable the wireless clients to use the VPN. Has anyone successfully set this up?

Thanks in advance and again, great app!

Ben
[Android Apps and Games] ms.durian:
Is there any way to show saved passwords?
[Android Apps and Games] ildar_prophet:
[MENTION=3522821]ms.durian[/MENTION] you mean you've lost a password and want to recover it?
[Android Apps and Games] ms.durian:
Yup I've forgotten the password. I've saved the password in my old phone but am trying to setup on my new phone
[Android Apps and Games] ildar_prophet:
then you can backup the app data on the old and restore on the new phone.

E.g. with https://f-droid.org/packages/dk.jens.backup
[Android Apps and Games] moxfyre:
Hi all,

I've extended OpenConnect for Android to support the Juniper and PAN GlobalProtect protocols, which are both supported in openconnect 8.0+. (Full disclosure: I am the primary author of the upstream GlobalProtect support.)

The changes needed to support multiple protocols are actually quite minor (https://github.com/cernekee/ics-openconnect/pull/34) now that openconnect has an API for figuring out the supported protocols.

Pre-built APK: https://drive.google.com/file/d/17IRsGNYqUav9Yf2bsInxnc0uGD6g_PZz/view

12 Aug 2018 - based on OpenConnect v8.0 pre-release

06 Jan 2019 - based on OpenConnect v8.02

28 May 2019 - based on OpenConnect v8.03

03 Jun 2019 - added Quick Settings Tile (contributed by Terry Yao)

My ics-openconnect repository: https://github.com/dlenski/ics-openconnect
[Android Apps and Games] skozhedub:
some issues

Hi all,

I use openconnect android every day to connect sip phone over vpn. It is quite stable and easy to use but with android 8.0 (Galaxy S8) I have some issues with network access for some google apps. For example, with vpn connected:

- google play can not download updates/install new apps while Play app itself working and content loads. Only issue is when I tap install/update. With vpn disconnected there is no issue.

- services like opening pdf with google docs also don't work

not sure if this is a problem of android or Samsung build or openconnect. Did anybody faced same issues? Any workaround/fix exist?

Thanks
[Android Apps and Games] Miankyloyd:
How do I create a profile
[Android Apps and Games] tronmech:
I am incredibly thankful for this. While the GlobalProtect App seems to work, it also seems to misidentify my host. Openconnect worked wonderfully for me on ubuntu, and this means I can use OpenConnect here too.
[Android Apps and Games] into_311:
Hi [MENTION=5293221]cernekee[/MENTION] - just wanted to let you know. I've been using your app for years. But Virustotal mobile app has recently flagged the APK for this application which is available on play store (v1.1.11) as Malware. It's only MaxSecure who is saying that. But you might want to contact them and get the problem corrected.

https://www.virustotal.com/gui/file...fc0344f4a3a1d689cd2887f0b8b076e21ecb4/details

https://www.virustotal.com/gui/file...b1359760dce69f4a1e6cea021d1f5b787b7/detection
[Android Apps and Games] Vel-San:
Great stuff, thanks.
[Android Apps and Games] kchung:
Can you please look into fixing the Android 10 crash?

https://github.com/cernekee/ics-openconnect/issues/51#issuecomment-540503056
[Android Apps and Games] fifthelement:
Is this project abandoned by original dev ? It is not updated on playstore since 2015.
[Android Apps and Games] alienator88:
It seems like it. Dev(Kevin) actually responded in his github page here where I posted an issue for android 10 like 2 months ago. But nothing else from him..
[Android Apps and Games] fifthelement:
Please keep updating this app and publish it on playstore if you can. the original app is not updated for 4 years.
[Android Apps and Games] Soheil_rf:
is there any update for android 10 ?
[Android Apps and Games] pedritopl:
Well, someone made their own copy of Openconnect with Android 10 changes and published it in Play Store:

https://play.google.com/store/apps/details?id=com.github.digitalsoftwaresolutions.openconnect
[Android Apps and Games] Soheil_rf:
Thank you mate , works well
[Android Apps and Games] Alireza0099richer:
[QUOTE = "xnpu ، پست: 52337429 ، عضو: 609424"]

من تاکنون از برنامه بسیار راضی بوده ام. دو نظر:

* اگرچه برنامه گذرواژه PKCS12 من را به درستی به یاد می آورد ، اما همچنان هر بار با گفتگوی رمزعبور باز می شود. فقط باید روی OK کلیک کنم ، بنابراین دردسر بزرگی نیست ، اما اگر اصلاً به صورت پاپ آپ نمی شد بهتر بود. فقط در صورتي كه رمز عبور را به خاطر نمي آورد و يا رمز عبوري را كه به خاطر مي آورد از سوي سرور رد مي شود ، بايد از من درخواست رمز عبور كند.

* تا زمانی که برنامه در پس زمینه در حال اجرا باشد ، من می توانم بدون هیچ مشکلی متصل و قطع ارتباط کنم. اگر من برنامه را خاتمه دهم ، مثلاً با استفاده از مدیر وظیفه یا خاموش کردن تلفن ، و سپس آن را دوباره شروع کنم ، دیگر اتصال برقرار نیست. خطای نشان داده شده "خطای اتصال به میزبان XXX است. برای جزئیات بیشتر به گزارش ورود مراجعه کنید." سپس باید با انتخاب مجدد گواهی کاربر این مشکل را برطرف کنم. اگرچه نمایه [STORED] را برای گواهی کاربر به خوبی نشان می دهد اما ظاهراً هنگام خاتمه برنامه چیزی فراموش می شود.

[/ QUOTE]
[Thinkpad Tablet General] naximus:
could some one pls upload the recovery image for 32GB ROW ver.

all links on the web seem to be dead.
[LG Optimus G (International)] tjstreak123:
I was able to boot into TWRP and this was the first custom rom being installed every. I messed up and wiped the stock rom and now when I try to flash a custom ROM it says "Failed" and when I try to reboot to fix this it says "NO OS INSTALLED ARE YOU SURE?" If I reboot to recovery will it boot to recovery or fail? Please help. I tried to find link to stock roms but download links are broken

What do I do now? Is there a way to fix this?

I cannot put files onto do the SDcard unless I adb push which I did but still fail!
[LG Optimus G (International)] tjstreak123:
it also says my device is "geehrc4g"

i cannot find roms for this!
[LG Optimus G (International)] tjstreak123:
Yes! I managed to find a ROM that works! The AOSP Geeb KitKat 4.4 houstonn v3! The first time I flashed it it got stuck into the google boot loop. Then flashed it again and it worked!

If anyone has a problem with your model being "geehrc4g" and not wanting to install other roms get the rom at http://xdaforums.com/showthread.php?t=2509457
[LG Optimus G (International)] kt-Froggy:
...then why not just remove the device check from the install script?
[LG Optimus G (International)] tjstreak123:
I don't know how to do this

I looked in the update-script file thing to change the device names but didn't want to change the wrong thing and render the device useless
[LG Optimus G (International)] tjstreak123:
Can someone explain what I need to edit in the update-script file for it in order to flash a rom?
[LG Optimus G (International)] naveenii1991:
In twrp after selecting the custom rom zip

Did you remove check box ..where it shows verification (click on it )

After that ...Try to flash ROM by swiping
[LG Optimus G (International)] kt-Froggy:
I am not familiar with TWRP options, but I believe you are talking about package signature verification, which is a completely different thing...

One of the first few lines of the script usually has a device type verification. It may be the assert check, or a different syntax (looking for certain build.prop properties), but it's pretty obvious. You just need to remove that one line, so the script doesn't check for your device model.

I don't have a specific example handy right now to show you, but it's been discussed many times before. Just try searching for "remove assert" or similar.

Please note that if, by removing this check, you manage to flash something totally incompatible with your device and royally screw it up, it's your fault, and your problem. :p
[LG Optimus G (International)] naveenii1991:
Tks for letting me know the imp of signature ....

I screwed a mobile once upon a time and it was APPLE IPHONE and got New one too :p and never did again :D
[LG Optimus G (International)] tjstreak123:
Thanks everyone. So I can flash a e973 ROM on e971? Both Canadian models

The script starts with;

I delete that whole thing? Even though it has two semi colons at the end or is one of the semi colons for the abort function and one of the whole assert function?
[Verizon Samsung Galaxy S III] Vatofeo:
Hi all,

I'm sorry if my question is kinda dumb, I already looked in the forum but I can't find an answer or someone experiencing the same issue.

I recently got a GS3 SCH-i535 which I'm currently using with Movistar from Mexico.

I configured the APN and I can't get 3G or 4G to work, but it works fine over EDGE. The problem is that when the phone is receiving data over EDGE I can't receive phone calls and I think messaging is not working either. The problem ends when I turned off mobile data, everything goes back to normal.

I already unlocked the bootloader, rooted the phone and flashed it with BoneStock 4.3 to see if changing the ROM fixed the problem... the ROM works like a charm, but it didn't solve the issue.

Any ideas or is this something I'll have to live with the rest of my life?

Thanks in advance
[Verizon Samsung Galaxy S III] ThePagel:
Could it be the sim?
[Verizon Samsung Galaxy S III] Vatofeo:
I already tested this sim in an HTC One X from AT&T and it worked just fine
[Nexus 10 General] maxal:
Found this new Manta rom http://www.codenamelungo.net/#download
[Nexus 10 General] SFG:
What do you think of it?
[Nexus 10 General] maxal:
It's good I am using it as my daily.
[Nexus 10 General] maxal:
Found another rom http://download.paranoidandroid.co/roms/manta/
[HTC EVO 3D] scsiuw:
Hi Guys,

I have a HTC Evo 3D GSM with HBOOT 1.48.0005

I did a lot of searching but I didn't find anything useful for my HBOOT version.

Revolutionary (revolutionari dot io) solution works for 1.49.0007

Higher HBOOT needs to be downgraded to 1.49.0007, but what about lower versions? I didn't want to risk do anything stupid so I didn't try that. I looked at the HBOOT downgrade solutions so maybe I can use it to upgrade, but those solutions need an unlocked bootloader. I tried unlocking my bootloader with HTCdev, but when I flash my unlock code the bootloader unlock confirmation page doesn't pop up on my phone. (Maybe because of the old HBOOT/software, I found other ppl with 1.48.0005 who had the same problem.) The last solution could be updating the phone in the 'legal' way, but I'm afraid it would make S-off impossible/extra hard. So anyone has any experience with 1.48.0005 HBOOT? Please help me! Thanks!
[HTC EVO 3D] jcfunk:
Don't see a problem upgrading if revolutionary can s-off 1.49.0007, also can always downgrade hboot.
[HTC EVO 3D] scsiuw:
Problem solved!

I just upgraded to an official(?) 1.49.0007

Before the upgrade I changed my CID to HTC__001 (I thought it's not possible with locked bootloader but it worked, my CID was HTC11111 before)

I used this zip file: downloadandroidrom dot com/file/HTCEvo3D/hbootdowngrade/Free%203VO_V2.zip there is a rom.zip file inside, just renamed that to PG86IMG.zip and put it in the root of my SD. It upgraded me to 1.49.0007 and after i just simply used Revolutionary to go S-off.

I hope this helps if someone finds an EVO 3D under a rock which still has HBOOT 1.48.0005 and wants to go S-off.

And thanks for the answer, I'm not sure if you suggested something like this, or to go to the newest HBOOT and downgrade from there, but I was trying to keep things simple.
[Nexus 7 Q&A, Help & Troubleshooting] robgee789:
hey guys i need some help :), im trying to find a good app that will let me transfer files between my tf300 and my nexus 7 via my wifi network but i need it to be as simple to use as possible lol, so have you guys got any suggestions?
[Nexus 7 Q&A, Help & Troubleshooting] rahulpat13:
You can try airdroid
[Nexus 7 Q&A, Help & Troubleshooting] robgee789:
i use airdroid to move things to and from my pc but it never works that well from android to android with dolphin browser, would a differnet browser make a difference?
[Nexus 7 Q&A, Help & Troubleshooting] darkmage93:
use wifi file transfer, i used it to transfer files from my phone to my friend's ipad https://play.google.com/store/apps/details?id=com.smarterdroid.wififiletransfer&hl=en

of course, the free version can only allow you to send files of a certain size, but you can do a little search on google, for the full version :p
[Nexus 7 Q&A, Help & Troubleshooting] robgee789:
Cheshire mate I'll have a look at that:)
[Nexus 7 Q&A, Help & Troubleshooting] rahulpat13:
Superbeam may do the trick!