Archives/algo
2
0
Fork 0
mirror of https://github.com/trailofbits/algo synced 2024-11-04 06:00:21 +00:00
Code Issues Projects Releases Wiki Activity
a49caa3c31
algo/docs/Android Setup.md
Alex Van Camp 9d3a65b555 Android client setup documentation (#251). Fixes #240 
* Android client setup documentation

This is a first draft of Android Setup instructions. I expect that these will need some revising and that the formatting of this document will benefit from more tweaking.

We may also want to elaborate on the contents of the "advanced settings" menu ([screenshot](https://i.imgur.com/smsmdQF.png)).

* improve appearance on mobile devices
2017-02-26 23:18:57 +03:00

3.3 KiB
Raw Blame History

NOTE: If you are a Project Fi user, you must disable WiFi Assistant before continuing. See the StrongSwan documentation for details.

Instruction Screenshot(s)
1. Copy your {username}.p12 certificate to your phone's internal storage.
2. Install the StrongSwan VPN Client (Android 4+)
3. Open the app and tap "ADD VPN PROFILE" in the top right. step3-thumb
4. Enter the IP address or hostname of your Algo server and set the "VPN Type" to "IKEv2 Certificate". step4-thumb
5. Tap "Select user certificate". You will be shown a prompt, tap "INSTALL". step5-thumb
6. Use the "Open from" menu to select your certificate. If you downloaded your certificate to your phone, you may find that using the "Downloads" shortcut results in your {username}.p12 certificate being grayed out. If this happens go back to the "Open from" menu and tap on the name of your phone. This will bring up the filesystem. From here, navigate to the folder where you saved your cert (such as "Downloads"), and try again. step6-thumb
7. Enter the password for your certificate. This password was printed to your console at the end of running the algo deployment script. Please note that in some cases, extracting the certificate can take several minutes. step7-thumb
8. Give your certificate a name (it will default to your Algo username), and ensure that "Credential use" is set to "VPN and apps". Tap "OK". step8-thumb
9. You'll then be brought to another prompt. Ensure your newly imported certificate is selected, and tap "ALLOW". Then, tap "SAVE" in the top right. step9-thumb
10. You will be returned to the main menu, and your newly-configured VPN profile should be listed. Tap the profile to connect. step10-thumb

Troubleshooting

Tapping the VPN profile in StrongSwan has no effect.

Ensure that "WiFi Assistant" and any other always-on VPNs are disabled before attempting to enable a StrongSwan VPN. If any other VPN is active, StrongSwan may silently fail to initialize a VPN connection. On Android 7, your can manage your VPNs by going to: Settings > Tap "More" under "Wireless & networks" > VPN > tap the gear icon next to any non-strongSwan VPNs listed and ensure they are disabled.