klinquist / ios-vpn-autoconnect Goto Github PK

I think this project helps a lot of people. People that would gladly buy you a beer.

Do you plan to have a Paypal.me kind thing in order to let people send you a few bucks?

Line Breaks in the SSID string value cause it to fail to properly recognize the necessary SSID.

Line 308:
onlySsids += ' <string>\n ' + ssids[i].trim() + '\n </string>\n'

Change to:
onlySsids += ' <string>' + ssids[i].trim() + '</string>\n'

When you generate the exclusion list, it appears that order matters quite a bit.

With the generator it'll spit out the following for "On wifi only":
<key>OnDemandRules</key> <array> <dict> <key>InterfaceTypeMatch</key> <string>WiFi</string> <key>Action</key> <string>Connect</string> </dict> <dict> <!-- VPN Default state --> <key>Action</key> <string>Disconnect</string> </dict> <dict> <key>InterfaceTypeMatch</key> <string>WiFi</string> <key>SSIDMatch</key> <array> <string> SSID_EXCLUSION_HERE </string> </array> <key>Action</key> <string>Disconnect</string> </dict> </array>

It needs to be changed to:
<key>OnDemandRules</key> <array> <dict> <key>InterfaceTypeMatch</key> <string>WiFi</string> <key>SSIDMatch</key> <array> <string> SSID_EXCLUSION_HERE </string> </array> <key>Action</key> <string>Disconnect</string> </dict> <dict> <key>InterfaceTypeMatch</key> <string>WiFi</string> <key>Action</key> <string>Connect</string> </dict> <dict> <!-- VPN Default state --> <key>Action</key> <string>Disconnect</string> </dict> </array>

Using this tool, I setup a profile that connects VPN when using untrusted wifi and cellular and I am seeing a problem. When switching from cellular to untrusted wifi, the VPN does not disconnect/reconnect and the device continues using cellular (with VPN) instead of the expected wifi (with VPN).

This is also a problem when switching from trusted (or untrusted) wifi to a new untrusted wifi as the device will switch to cellular (with VPN) temporarily until the new untrusted wifi connects. Once the new untrusted wifi connects, the device is still using cellular (with VPN).

Honestly, this feels like an iOS/MDM problem, but I thought I would post it here just in case there is something in the profile that your code generates that can control this behaviour.

Why don't you create URL to easy way use?

Hi, I tried "iOS VPN Profile Generator", on iPhone and it works, but It doesn't work on MacOS BigSur 11.1.
Is there a way to use it on MacOS, too?
This is what happens when I try the profile on MacOS: I set to connect VPN when I'm not connected to my Home WiFi, but when I connect to my iPhone's Tethering to test the created profile, VPN continues to connect and disconnect repeatedly.
What can I do?

Hi,

I was setting up a vpn.mobileconfig file and sent them to my mail address.
If want import the file, also over my website I get always a error "Safari can't open and install this profile (unknown error).
If I use this https://gist.github.com/noestreich/60f4248564e4801365183b79dbfce186#file-fritzboxvpn-mobileconfig-xml it works out of the box.

Something seems to be wrong in the generated file.

Any idea?

Best Theo

The VPN Autoconnect seems to work very well for iOS, but for macOS, connecting to an untrusted WiFi network will cause the system to rapidly connect and disconnect the VPN. Any ideas on how to work this?

Hi,

Thanks for the configurator!

I have the following issue:

If I am on cellular, then it will be connected to the VPN over cellular internet. Once I get on my wifi it seems that the VPN over cellular is still active and is the primary internet. Is that a common thing or have I done something wrong? I would expect the logic to disconnect VPN over cellular and connect over WIFI once the phone is on WIFI.

Thanks.

Hey there,

thank you very much for creating this tool! I just noticed that once you download a profile, further changes are not applied to consecutive downloads. So you have to reload the page for every new profile. Can you reproduce this behavior?

Thanks, Lucas

Hi all,
It's great that I've found this generator which works on IOS devices.
So far I have an issue is to set a custom DNS in the script to like a Google DNS.
My questions is, whether we can set the custom DNS inside the script (mobileconfig)?

Thank you very much for your time.
Dean

Is it possible to add the "Send all Traffic" option to on or off

Will this work with OpenVPN?

Is it possible to set this up for use with Tunnelbear? Looking at the profile Tunnelbear installed, it seems to use IKEv2.

Wireguard actually works great on iOS, especially with the on-demand feature.
However, it has had the nasty bug for quite some time that a permanent 24/7 connection is not possible if the IP address of the endpoint changes (e.g. because the Wireguard sever is self-hosted via DynDNS). Thus, every morning the connection must be manually disconnected and reconnected. Otherwise, websites simply don't load without an error message, which naturally frustrates users when they have to manually put their iPhone back online.
The issue is neither server-side nor with the client app on the iOS device solvable so far.

Therefore, if "iOS-VPN-Autoconnect" were extended to Wireguard and could contain the simple function: "rebuild the vpn tunnel daily at 6 am", this would make Wireguard really useful for many on iOS.
(or it doesn't have to be a time based automation, it would be enough if the script would support in case of Wireguard "automatically disconnect and reconnect" instead of just "automatically connect" in case of Wireguard, because otherwise the old "dead" tunnel will be reused, like it is the case when you switch on and off the flight mode, the Wireguard client then continues to use the old connection and doesn't establish a new one).

Encountered a problem when using '&' in a password; needed to be encoded as '&' to function. iOS gave 'profile is corrupted' errors until this was done.

will be there support for ipsec? instead of just l2tp?

谢谢