Streisand: Issues with OpenVPN and SSLDroid in Android 8.0

[itsrajivshah]

Expected behavior: OpenVPN connects, using the SSL wrapper from SSLDroid

Actual Behavior: OpenVPN gets stuck in a loop, trying to connect and then failing, then retrying, etc.

Steps to Reproduce:

1. Follow the steps on the Streisand page to install both SSLDroid and OpenVPN on android and configure as instructed.
2. Ensure SSLDroid service is running
3. Connect to server in OpenVPN

Additional Details:

Log output from Ansible or other relevant services (link to Gist for longer output):

Target Cloud Provider: DigitalOcean

Operating System of target host: Ubuntu 16.04.3 LTS

Operating System of client: Android 8.0 Oreo

Version of Ansible, using ansible --version :ansible 2.3.2.0

config file =
configured module search path = Default w/o overrides
python version = 2.7.12 (default, Nov 19 2016, 06:48:10) [GCC 5.4.0 20160609]

Output from git rev-parse HEAD in your Streisand directory :b197e7bd79ca1bc7b65b05dae778c82804ba06e0

[alimakki]

@itsrajivshah Could you let me know what data center on Digital Ocean did you spin your server up on?

[itsrajivshah]

@alimakki I spun this one up in the London DC

[Isso]

I can confirm that the same issue happens on Android 8.0

[ghost]

This issue is not a server issue.SSLDroid app is too old.We need new stunnel client for latest Android OS (Android 7.0, 8.0...).

[Palatis]

well the problem is, when VPN connection is established, Android tries to route all connections through VPN, including the stunnel connection.

I'm using OpenVPN for Android, and the solution is to add the tunneling app (SSLDroid, SSL/TLS Tunnel, or whatever) into the "whitelist"...

[itsrajivshah]

I can confirm that everything is working fine with @Palatis's suggestion. Thanks all.

[mariansw]

@Palatis I am new to Android, Could you please show me how to "whitelist" the Openvpn. Thank you.

[Keridoo]

Are there actively maintained Android SSH clients out there – ideally free and open source?

@ghost What do you mean by "too old"? Is SSLDroid broken?

[arcaartem]

just to expand on to @Palatis's whitelist solution, you'd have to open OpenVPN app and edit the relevant profile. One of the options at the top is 'Allowed Apps'. If you navigate to that tab, you can exclude "SSLDroid" from using the selected VPN profile

[Alex220]

I have the same Issue with Local http-proxy + official openvpn (https://play.google.com/store/apps/details?id=net.openvpn.openvpn) on Android _8_

route XXX.XXX.XXX.XXX 255.255.255.255 net_gateway Solves the problem on Android 6 And windows 10, But on Android _8_ OpenVPN gets stuck in a loop.

P.S: Allowed Apps on OpenVPN for Android (https://play.google.com/store/apps/details?id=de.blinkt.openvpn) Solves the problem, But I want to use config file.