Finally, I created an alternative to OpenVPN Connect for iOS, and it's 100% open source!

I’m having a bit of a problem adding hosts to the app. I open a .ovpn in Safari but I’m not sure what to do after that. Am I supposed to get a prompt or try to open it through the app using that open in button on the center of the Safari app toolbar?

I couldn’t get Mullvad to work. Kept connecting and then disconnecting. Great project nevertheless and I’ll keep an eye on it

That is a very interesting and exciting software you got there! Very impressive!

I’m not very VPN savvy so I’m not sure of what you mean when you say it’s limited to PIA for now. I use a paid VPN that allows me to create .ovpn files from a config generator. As of now, they can’t be imported in passepartout, is that it?

Also I’m not sure I saw it on the features but do you plan to make it possible to run a VPN and a DNS based adblocker (using a fake VPN profile and allowing split tunnel) at the same time?

Anyways can’t wait to try it!

Will 2FA (will be) supported?

Sorry if this is a stupid question, but what is OpenVPN? How does it different from an average VPN?

Hopefully you make an Android and windows version next. After all the main stream OS are developed for. You can create a Linux version. At the moment most VPNS make Linux users either use the command prompt or open VPN and it’s an unintuitive way to connect to them.

Sounds awesome. I wanted to try it butTestFligth asks for a code. Where can I find it?

Update

Given the increasing number of reports in such a short timespan, I decided starting a brand new sub:

I encourage everyone to please bring reported issues over there, in specific posts, so that I can look into them appropriately. Let’s aim at making it the reference place for any kind of present and future discussion about Passepartout, be it for iOS or any other potential platform.

Cheers!

Congratulations Davide :wink:

Hi, now I am trying your app on iphone Xs. It is great so far.

When the connection change, i.e. from Wifi to carrier network, it reconnect seamlessly.

I am wondering whether it drains battery faster or not compare with native PIA app or openvpn client, seeing it always connect to the VPN.

Anyway, can’t wait to see this app on appstore soon.

Any chances of you monetizing this? I think this VPN would do wonders for those pure Apple environments.

Thanks kovica1, what are your preference platforms instead? I’ve always been interested in gathering a bit of what users need in their VPN apps.

It’s not much, still let me share a sneak peek: https://imgur.com/a/w0KQYLX

With this around the corner, you might want to hold off a bit but as a remote employee this was the best $14 ive spent in a while.

FYI I started a /r/passepartout subreddit where to follow updates on the app (s). You definitely want to subscribe to it for the upcoming macOS version.

I’m sure you will, thanks for your support!

I’m glad you ask as there’s always some debate on the subject.

First off, please notice that Passepartout isn’t on the App Store yet. The main reason, even before what you say, is that Apple restricts VPN apps to organizations only. So I cannot publish it as an individual, I should set up a company for that. Whatever, this is another issue I would need help for.

~

Back to your concern. My guess is that Apple has never given OpenVPN Connect any exclusive privilege. The reason of it being the only available client is to find elsewhere.

The official OpenVPN libraries are written in C or C++ and distributed under the GPL. Pure GPL doesn’t get along well with the App Store policy, in that GPL software distribution can’t be restricted whatsoever (IIRC the infamous point 6 of the GPLv3). Unless you get in touch with the authors, the only option you’re left with is writing your own implementation.

That said, it was a while ago when a former colleague at PIA laid the foundations of a minimal alternative OpenVPN client. I took it from there and blended in my Swift expertise, thus making the client more convenient for iOS and macOS development. Aside from the license, OpenVPN is in fact known to be a very complex library to work with.

The outcome of this effort was PIATunnel, which is MIT licensed and is the core part of the PIA VPN app for iOS, which I also curated since 2016 until recently. There was no conflict because the library was literally written from scratch.

However, I wanted to make that library more universal and get rid of a few PIA requirements, so I hard forked PIATunnel into TunnelKit. I also preferred GPL over MIT, but I had to attach a specific exception to the license in an attempt to make it useful for the community. Legally speaking, a GPL library for iOS is of no use, because it could never make it to the App Store.

I could be wrong, it’s just my take based on facts in the public domain.

Indeed, you can feed it your own .ovpn configuration file. You will have to disable tls-auth/tls-crypt for now, in case you’re using any of them. Let me know if you encounter any issue.

Too bad! Best you can do is “Report issue”, you find it in the About screen. Make sure you attach the [anonymous] debug log, you’re asked for it right before opening the email template.

Enter the “Endpoint” screen to switch between UDP and TCP. As to the rest, PIA servers use a non-standard handshake to enable GCM, so I should re-add a patch to the TunnelKit code. Initially I wanted to keep it standard, but it’s a choice I might reconsider. The patch would also open up more UDP/TCP endpoints. Thanks for the note, I’ll let you know!