Am 16.01.13 15:32, schrieb Alok Kulkarni:
> Hi,I am writing an Android application which needs to Connect to
> OpenVpn server using OpnVpn for Android.
> I need to pass OVPN configuration to OpenVpn For Android app through
> my application.
> I can pass the Ovpn file path(Stored on SDcard) to
> de.blinkt.openvpn.ConfigConverter.java class through Intent , but i
> need a more secure way as i do not want to store the configuration
> file on SDcard. I can create the OVPN file through my application and
> pass it to ConfigConverter class as a String using Intent
>
> I am inserting the code changes to onStart() method in
> ConfigConverter.java class below as well as attaching the entire java
> file with this mail.
Thanks for the code. While I have no doubt that this code will work I
don't think that it is feasible to include the current form into the
application. The code uses no authentication or validity checking which
can lead to the confused deputy problem. I am working on more secure
solution but cannot give you an ETA when it is done. Not that in current
you can trigger the config import by using an application/ovpn intent
and start the profile if you know the name.

Arne

Reply via email to