Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

OpenVPN Compatibility?

Does anyone know of a way to get OpenVPN to work with an iPhone? Our business utilizes OpenVPN and I'd like to let our iPhone users access through this type of connection. Thanks for any thoughts!

MacBook Pro 2.16, Mac Pro 2007, Mac Pro 2008, iPhone 3G, Mac OS X (10.5.4), Both Mac Pros running RAIDs

Posted on Jul 14, 2008 7:48 PM

Reply
207 replies

Jul 28, 2008 3:13 PM in response to schalliol

Creating an OpenVPN tunnel requires a tap/tun interface. This is provided on OS X with a kernel extension. Unfortunately, it's not easy (without the iPhone kernel source) to compile the extensions for the iPhone. Even if so, it'd be unlikely Apple would allow 3rd party kernel extensions on the iPhone.

For what it's worth, I've successfully compiled OpenVPN for the iPhone. It's just useless until somebody can manage to get the tun/tap kernel extension compiled.

Aug 1, 2008 9:49 AM in response to schalliol

schalliol wrote:
That sure is disappointing. It's too bad that the SDK doesn't allow extensions of functionality like this. I heard there was an App called NetShare up for a few hours that let you share your Internet connection, so maybe there's some way of doing it via an app.



That was pulled since AT&T does not allow tethering which is what that App was all about.

Aug 1, 2008 10:12 AM in response to Paul Judd

Yeah, I'm aware of that. OpenVPN wouldn't be a problem with the wireless TOS, and I'm just saying that this was accessing the network connections and perhaps an OpenVPN app is possible. I say this not being a developer, so I'm not suggesting I know what I'm talking about, but rather a developer may want to look at what this pulled app does.

Aug 4, 2008 11:59 PM in response to schalliol

NetShare is just a simple SOCKS proxy. You configure your app (web browser or other SOCKS compatible app) to use it, it connects to it and tells it where to connect to and then data is relayed. All done over TCP.

Tunnelling or encapsulation is a good bit harder because it requires lower-level packet manipulation. No, there's nothing wrong with it from a ToS stand point but Apple doesn't want people mucking about with kernel extensions on the iPhone since they're going for 'stability'. (Yes, that makes me chuckle too 🙂 There isn't even an official Apple tun/tap kernel extension for Mac OS X, it's third party.

OpenVPN Compatibility?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.