Has anyone been able to get the new OpenVPN 3.0.0 app to work with PIA

pjc123

I was happily running the older app, but my phones just updated to OpenVPN version 3.0.0 and erased all my setup profiles.  So, I started setting up new ones today and It appears as if it is not accepting the.crt certificate file, and is requesting a .pfx or .p12 file.

[Deleted User]

Hmm, I just set up a profile on 3.0.0 with no issue. Were you using a config file with an embedded cert, or did you choose one of the others on our site? 

pjc123

I have been using the following config files for the past year or so on two different brands of phones with the older OpenVPN app(s), specifically because they grant me access to the occasional routers that the PIA app will not connect to, due to restrictive networks:

https://helpdesk.privateinternetaccess.com/hc/en-us/articles/219438937-Installing-OpenVPN-PIA-on-Android-restricted-networks-

Neither phone works with the new app.

pjc123

They issued a new OpenVPN version (3.0.1) the next day or so after many complaints, but I still have no connection.

[Deleted User]

@pjc123, give this config file a try. It includes an embedded cert just like the regular mobile config files do, so you don't need to worry about importing the .crt and .pem files. Just import this file alone, and all you should have to do is enter your authentication details and connect. 

pjc123

OK, that worked. Are you now going to supply the ip, ip-port, tcp and ip-tcp versions for each area of the US, various countries, etc, like you did before, that now work with the new version of OpenVPN?

pjc123

The OpenVPN folks requested information about this issue as well.  I sent it out to them today, and will reply here when they report back.

pjc123

The developer from OpenVPN replied back today.  He believes that the previous method that PIA used (storing external certs), is not compatible with the newer Android SDK.  As I mentioned previously, are you going to supply updated config files?  It wouldn't make sense for everyone to do this themselves, if it can be done in one place.  Thanks.

[Deleted User]

@pjc123, this set of config files should work with the new OpenVPN Connect update. I've reached out about making it clearer that these will work on both iOS and Android! I've also asked that we offer a few more ready-made options that are more effective for censorship circumvention (particularly, a set that connects with an IP over TCP 443). 

In the meantime, I'm always happy to put one together by request. 

pjc123

Fantastic!  Of course what did I do early this morning, but create the ones I needed using your sample as a guide.  If nothing else it forced me to learn how they work.

pjc123

Wait a minute, no matter what I click on it is the same set of files.  So I guess I did have to create my own tcp, tcp-ip, and ip-port versions this morning?  Oh well, at least I am up and running.  Too bad everyone else that needs various configurations is going to have to go through the pain I went through to create them.

pjc123

PIAColleen.  In response to "In the meantime, I'm always happy to put one together by request". I was able to get the various types working with both Android and Win10, but I am getting some Warnings on the Win10 side that I would like to correct if possible and make sure I am connecting securely.  I Pm'd you the config files and logs..  I sent them to tech support yesterday but their reply shows me that they have no clue what they mean.

pjc123

SOLVED: The warnings are not an issue.  Thanks to PIAColleen for all the information.  I am now not only able to get OpenVPN to work on Android 7.1.2 with OpenVPN versions above 3.0.0,  but also OpenVPN with Win 10 and Linux Mint 18.3 (Both Network Manager GUI and Command Line), all using the four restrictive profiles.  The only issue I have is with Centos 7, where I have it working from the command line but not from the Network manager GUI, but no big deal.

[Deleted User]

No problem! We're also working on making these mobile config files a little less confusing to generate and use with OpenVPN. Keep an eye out