BoxeeVPN 2.0 - release

[mwpei]

:) BOXEE VPN 2.0 :)

I finally got my repository working so please download from http://boxeeatca.fileave.com using the "app box" in boxee.
(NOTE: This does NOT download and install openvpn)

http://lh6.ggpht.com/_LuWI2RhZ39k/Sb1LRIJYUzI/AAAAAAAAABU/vkjDGLSx4Xo/s800/Picture%201.png

This is my 2nd main release of the openvpn controller “BoxeeVPN 2.0”, redeveloped as a skin application and with a few new features. (keep in mind it is still in alpha)

Special thanks goes out the the hulu-feed plugin team as I used their skin as a starting point and learned lots about how skins work from reviewing their code.

This plugin allows you to control your openvpn (start and stop it) as well it allows you to configure up-to 5 different vpn connections. (one connection to the US, one to the UK, etc...) You do need to have a vpn provider that has servers in the different countries.

here is the Link to the zip file (boxeevpn-2.0.zip)
Link: http://code.google.com/p/boxeevpn/downloads/list

Until I get this into a repository that app box can link too, do the following to install:

download and unzip file
place the boxee-vpn directory (and all it's contents) into your [User]/Library/Application Support/BOXEE/UserData/apps/
update your sources.xml file ([User]/Library/Application Support/BOXEE/UserData/profiles/[boxeeUser]/sources.xml) to include the follow (don't forget to remove the boxeevpn 1.0 from your sources file if you had it installed) :



<source>
<name>Boxee VPN</name>
<path>app://boxee-vpn/</path>
<thumbnail>http://upload.wikimedia.org/wikipedia/commons/e/e0/Crystal_Clear_action_encrypted.png</thumbnail>
<private>true</private>
</source>


VPN Configuration:
You must now configure your vpn's by clicking on the configure icon, you can select witch of the 5 you want to configure by selecting the configure icon and moving up or down to select the vpn you want to configure (unconfigured vpn's will appear as you navigate to them)
The plugin will ask you a few questions:

A VPN name to be used on the GUI.
The openvpn application. This needs to be the actual openvpn file, not the “hotspot sheild.app”. You will find the openvpn application inside the contents of the .app. (hotspot sheild.app/contents/resources/openvpn)
The vpn config file. This is the config file provided by your vpn provider. If you have a provider with multiple servers you can make copies of your config file and edit the server address inside them so that you can have multiple vpns configured for different countries.
Your admin/root password, this is required because openvpn is run under the root user.


New Features:

Can be run on other platforms other then just atv now. (tested on mac and atv - I don't think it will work on windows yet)
VPN Configuration (as talked about in the vpn configuration section) and the reason why it works on other platforms
Control up to 5 different vpn set-ups
New Location and IP indicator that shows if your vpn is connected and what IP you are using. (you can press the refresh button to update this info – but see know issue #3)
Spaces in directories and names are now supported (You no longer have to rename “hotspot shield.app” to “hotspot.app”)
You can remove vpn's by simply clicking the “x” on the given vpn. (just removes it from the list does not remove any files from your system)
And the best is the sexy new look...


Known issues:

I still get the "2009 Mac OS X ifconfig failed: shell command fork failed" error some times.
I have not been able to get the vpn.txt file to be displayed when you press the view log button, so currently the view log button has been disabled (and visible has been set to false)
The vpn connection takes a few seconds to actually connect so after you start your vpn you have to wait before refreshing the location indicator.
The plugin is using the xbmc file navigator window, and this control does not allow you to access all areas of your hard drive, as a result I would suggest copying your tunnelblick.app or hotspot sheild.app into a sub directory of your users folder (maybe under Library/openvpn or something like that)
Plugin likely will not run under windows because it makes some cmd os calls to start openvpn. Maybe with the help of some window users they can help me figure out how to run openvpn in it's own thread on windows.


If you need to install Hotspot or TunnelBlick you can read over the following posts:
http://forum.boxee.tv/showthread.php?p=35536
or take a look at the boxeevpn v1.0 post:
http://forum.boxee.tv/showthread.php?t=5682

If you have problems, there is a log file produced with the output of the commands that are used to start the vpn. It will be located in the same directory as your vpn config file.
Please check this file if you are having problems.

If you used the first plugin you will notice that I removed the pause and resume options, I did not find that these options where that useful but if you find that you can't live with out them let me know and maybe we can put them back in.

Also, If anyone thinks they need more then 5 vpn connection we could add more, I picked 5 because I figured no one would every need more then 5 but I have been known to be wrong on things like this...

As always, comments and suggestion to make things better are always welcome, just try to provide as much info as posable.

Happy VPNing


on a side note:
I am still trying to figure out how to setup a repository that can be read by the "app box" so if someone can help me I would really appreciate it.

[jdog]

great work! I can verify this works on both Mac and Apple TV.

however, I ran into some challenges on Mac...

my setup: copied Tunnelblick.app to ~/Library/openvpn (original still at /Applications)

1) when VPN connected through your boxee plugin, can't access Internet in Web browser
a) after trying Web browser, VPN plugin page wouldn't load in boxee
b) Web browser works again after quitting boxee and quit/restart /Applications/Tunnelblick.app (see challenge 2)

2) Tunnelblick menu in OS X menubar becomes blank and unusable
a) after quit/restart /Applications/Tunnelblick, menu has two different connection choices: "personalVPN" and "openVPN"
b) "personalVPN" works like it used to and enables system-wide VPN
c) "openVPN" prompts for admin password and doesn't activate VPN connection at all - seems to point at openvpn.conf template under ~/Library/openvpn/Tunnelblick.app (created for boxee)
d) trashing ~/Library/openvpn/Tunnelblick.app removes "openVPN" from Tunnelblick menu but then boxee VPN doesn't work

Ideally I'd like to have only one copy of Tunnelblick.app (at /Applications) that enables system-wide VPN regardless of whether it's run from OS X menubar or through your boxee plugin.

[mwpei]

great work! I can verify this works on both Mac and Apple TV.

however, I ran into some challenges on Mac...

my setup: copied Tunnelblick.app to ~/Library/openvpn (original still at /Applications)

1) when VPN connected through your boxee plugin, can't access Internet in Web browser
a) after trying Web browser, VPN plugin page wouldn't load in boxee
b) Web browser works again after quitting boxee and quit/restart /Applications/Tunnelblick.app (see challenge 2)

2) Tunnelblick menu in OS X menubar becomes blank and unusable
a) after quit/restart /Applications/Tunnelblick, menu has two different connection choices: "personalVPN" and "openVPN"
b) "personalVPN" works like it used to and enables system-wide VPN
c) "openVPN" prompts for admin password and doesn't activate VPN connection at all - seems to point at openvpn.conf template under ~/Library/openvpn/Tunnelblick.app (created for boxee)
d) trashing ~/Library/openvpn/Tunnelblick.app removes "openVPN" from Tunnelblick menu but then boxee VPN doesn't work

Ideally I'd like to have only one copy of Tunnelblick.app (at /Applications) that enables system-wide VPN regardless of whether it's run from OS X menubar or through your boxee plugin.

I think I may have found a way around having two copies of tunnelblick on the mac. go into your sources.xml file and add the applications folder as a source, it should look something like the following after (at bottom of source.xml file)



<files>
<default></default>
<source>
<name>Applications</name>
<path>/Applications/</path>
</source>
</files>

I am not sure if this has any negative affects as I just tried it out to see what happens and it seems to work. Please give it a try and let me know if fixes the problem.

thanks

[jdog]

OK, added /Applications/ to sources.xml as you suggested and modified my VPN configuration for your plug-in (on Mac not Apple TV). confirmed this works as expected both from your plugin in boxee and from the Mac OS X menubar.

some suggestions for improving usability:

1) figure out a way to show status and to toggle on/off one favorite VPN config (or to switch between two configs) in the main boxee left-hand menu. makes sense to surface this higher in UI since the need for VPN crosses content types (video, music and pictures).

2) use single multi-state icon for VPN on/off. or come up with icons that are more different. even just adding words "on" and "off" on top of the locks would help).

3) don't force re-type of name and re-select of app/conf locations when editing a config - actually support editing.

[ijer]

Works well on my Apple TV. Great UI! The only issue I had is that "Location" is always set to "United States" (whenever my VPN is off or on) although I'm in Canada right now.

Thanks for this plugin mwpei!

[thomasj]

Excellent work, mate... really hope to see this on a repository sometime soon...

[mwpei]

Works well on my Apple TV. Great UI! The only issue I had is that "Location" is always set to "United States" (whenever my VPN is off or on) although I'm in Canada right now.

Thanks for this plugin mwpei!

that is interesting, does hulu work with your normal ip address?

Currently the plugin is using http://www.geobytes.com/IpLocator.htm?GetLocation&template=xml.txt to look up the location information, maybe it is not that good of a service (but it is free). If anyone has a better free service I could change it for the next version.

[mwpei]

OK, added /Applications/ to sources.xml as you suggested and modified my VPN configuration for your plug-in (on Mac not Apple TV). confirmed this works as expected both from your plugin in boxee and from the Mac OS X menubar.

some suggestions for improving usability:

1) figure out a way to show status and to toggle on/off one favorite VPN config (or to switch between two configs) in the main boxee left-hand menu. makes sense to surface this higher in UI since the need for VPN crosses content types (video, music and pictures).

2) use single multi-state icon for VPN on/off. or come up with icons that are more different. even just adding words "on" and "off" on top of the locks would help).

3) don't force re-type of name and re-select of app/conf locations when editing a config - actually support editing.

I like your suggestions, here are a few comments.

#1 - this would be nice but it would be a change to the actual boxee code, maybe something the boxee team can look into.

#2 - This one is a bit hard to do, as it is hard to tell what VPN is actually running and what state it is in. I have a very alpha test version that does provide an overall "connected/not connected" status but when the vpn is not running trying to get this info causes boxee to crash. I will continue to work on trying to get something working here to make this better.
The ON/OFF idea is a good one and I will make this change in the next version. (If anyone has better suggestions for icons, or would like to create a set of icons for me that would be great. I am limited to what free icons I can find on line right now)

#3 - will be done, I think I figured out how to do this at the last minute but did not what to make a bunch of changes and have to retest but I will include it in the next version.

Thanks for the review, it is very helpful.

[Gormanimal]

Wow! Great job. Look forward to dropping this on my ATV and getting my VPN back. Thanks.

[mojo17]

Noob question here.

I have my own USA-based server that I regularly connect to via SSH.
Is it possible to use BoxeeVPN to autoconnect to this server? if so, how?
When I try to add a vpn, I am asked for an OpenVPN file. How can I generate sch file for my ssh configuration?

I'm using Boxee on a Macbook Pro, btw.
Thanks,

[mojo17]

Noob question here.

I have my own USA-based server that I regularly connect to via SSH.
Is it possible to use BoxeeVPN to autoconnect to this server? if so, how?
When I try to add a vpn, I am asked for an OpenVPN file. How can I generate sch file for my ssh configuration?

I'm using Boxee on a Macbook Pro, btw.
Thanks,

Actually, I did a little digging, and here are my findings, maybe they're useful for someone else:

To get a tunnel to work, one needs OpenVPN installed on their server (OpenSSH will not do the trick, not as easily at least). I set it up by following one of the countless tutorials on the web (This thread, for instance: http://www.webhostingtalk.com/showthread.php?t=595436 ).

Then, you can use BoxeeVPN to connect to your OpenVPN server from within Boxee. I also used an OpenVPN client from outside Boxee, and it did the trick. One such client for Mac is Tunnelblick ( http://code.google.com/p/tunnelblick/ ).

[carlhvmoll]

@mwpei

I’ve been following your thread(s) since the beginning (v1) and just wanted to say, you’re doing fantastic work and deserve allot of kudos here, especially in providing everyone outside the US a method to get at some great stuff, just wanted to say a BIG Thanks. :)

I’m a newbie on aTV and have windows, so it’s a hard transition for me and hard to figure some of this stuff and get it working, but your app will solve my problem - so I’m going to persevere and get this running on my aTV. I was wondering for the noobies like me, whether your install instructions could be more detailed. What’s simple to others is a minefield for folk like me.
But again major kudus to you and many many thanks.

[Gormanimal]

@mwpei

I’ve been following your thread(s) since the beginning (v1) and just wanted to say, you’re doing fantastic work and deserve allot of kudos here, especially in providing everyone outside the US a method to get at some great stuff, just wanted to say a BIG Thanks. :)

I’m a newbie on aTV and have windows, so it’s a hard transition for me and hard to figure some of this stuff and get it working, but your app will solve my problem - so I’m going to persevere and get this running on my aTV. I was wondering for the noobies like me, whether your install instructions could be more detailed. What’s simple to others is a minefield for folk like me.
But again major kudus to you and many many thanks.

Is there any particular part you're stuck on?

[carlhvmoll]

@Gormanimal
If you dont mind ill little "r" you as i dont want to take up the space on this thread

[terrier2006]

Thanks for this great plugin.

I am having a problem stopping the trying to restart the VPN. I have two config files one for the UK and the other US. Both work but if say the UK one is running then I stop it my IP returns to normal but If I try to either start the US one or restart the UK one nothing happens. I then have to restart Boxee and the one I choose works again.

Here are the contents of the vpn.txt file http://pastebin.com/m48198581

have you any thoughts or suggestions, the main reason I need to do this is switching between the UK and US service.

Many thanks

terrier

[Gormanimal]

Where are the python scripts stored in v2? I was looking to mod them to see if I could fix an error I'm running to.

[mwpei]

Where are the python scripts stored in v2? I was looking to mod them to see if I could fix an error I'm running to.

The are actually in the skin main.xml file (just do a seach for main.xml within the boxee-vpn directory within the boxee/apps, they are repeaded for each of the vpn's (look for the on click events).

Note: I had wanted to make an exteral script file and just call it from the skin but for some reason the external script call did not work.

Please if you figure out a better way to start and stop the vpns post it and I will update it in the base build.

thanks,

[mwpei]

Thanks for this great plugin.

I am having a problem stopping the trying to restart the VPN. I have two config files one for the UK and the other US. Both work but if say the UK one is running then I stop it my IP returns to normal but If I try to either start the US one or restart the UK one nothing happens. I then have to restart Boxee and the one I choose works again.

Here are the contents of the vpn.txt file http://pastebin.com/m48198581

have you any thoughts or suggestions, the main reason I need to do this is switching between the UK and US service.

Many thanks

terrier


You are getting the "Mac OS X ifconfig failed: external program fork failed" error, I have not been able to figure out why this is happening yet and up until now I though I was the only one getting it (I figured I had done somethign during my development that cuased it).
I think this is caused by the kill command that is done to make sure two openvpn apps are not running at the same time. I will take a bit closer look at this and see if we can figure out a better way to stop and start the service.

One question, do you remember if you stopped the vpn before you tried to start the 2nd vpn? This is what I though I was doing wrong.

[terrier2006]

You are getting the "Mac OS X ifconfig failed: external program fork failed" error, I have not been able to figure out why this is happening yet and up until now I though I was the only one getting it (I figured I had done somethign during my development that cuased it).
I think this is caused by the kill command that is done to make sure two openvpn apps are not running at the same time. I will take a bit closer look at this and see if we can figure out a better way to stop and start the service.

One question, do you remember if you stopped the vpn before you tried to start the 2nd vpn? This is what I though I was doing wrong.

Yes in fact I tried it both ways, I stopped the UK vpn and my IP went back to my Canadian one but I was unable to start again. I then restarted Boxee started the US vpn the IP changed to US. I then started the UK vpn without stopping the US vpn the IP went back to Canada and UK vpn didn't start.

Just on a side note, I run version 1 of your plugin on XBMC (works very well) and the same problems stopping are evident on that platform.

Terrier

[rlow101]

mwpei, thanks for your efforts, really great to get this working.

I'm new to both mac and appletv after finally seeing the light, so appreciate your help.

My problem on appletv, in Boxee is error code 61 connection refused.

I can get hotspot to work from my mac using ssh:

DickOM:~ dick$ ssh frontrow@10.1.1.8

Welcome to the world of Apple TV with aTV Flash
--For support please visit aTVFlash.com--

frontrow@10.1.1.8's password:
-bash-2.05b$ cd /Users/frontrow/Applications/Hotspot.app/Contents/Resources-
-bash-2.05b$ sudo chown -R root:wheel tun.kext
-bash-2.05b$ sudo kextload tun.kext
kextload: tun.kext loaded successfully
-bash-2.05b$ sudo openvpn --config config.hvpn

but from Boxee on the appletv - conection refused error 61, is it a permissions thing? I used "frontrow" for the password in the boxee configure.
I cannot find the vpn.txt file anywhere to check whats happening.

any help greatly appreciated.

BTW thanks again for a grate app.

[seanmac30]

Hi,

In use openVPN provided by Witopia on MS Vista. Will your instrcuction work do you think for this?

Thanks,

Johnny

[mwpei]

mwpei, thanks for your efforts, really great to get this working.

I'm new to both mac and appletv after finally seeing the light, so appreciate your help.

My problem on appletv, in Boxee is error code 61 connection refused.

I can get hotspot to work from my mac using ssh:

DickOM:~ dick$ ssh frontrow@10.1.1.8

Welcome to the world of Apple TV with aTV Flash
--For support please visit aTVFlash.com--

frontrow@10.1.1.8's password:
-bash-2.05b$ cd /Users/frontrow/Applications/Hotspot.app/Contents/Resources-
-bash-2.05b$ sudo chown -R root:wheel tun.kext
-bash-2.05b$ sudo kextload tun.kext
kextload: tun.kext loaded successfully
-bash-2.05b$ sudo openvpn --config config.hvpn

but from Boxee on the appletv - conection refused error 61, is it a permissions thing? I used "frontrow" for the password in the boxee configure.
I cannot find the vpn.txt file anywhere to check whats happening.

any help greatly appreciated.

BTW thanks again for a grate app.


The vpn.txt should be in the same file as your config file, if it is not I would suggest removing the vpn and adding it again.

[mwpei]

Hi,

In use openVPN provided by Witopia on MS Vista. Will your instrcuction work do you think for this?

Thanks,

Johnny

It should work but I think you may need to get a mac version of openVPN (such as tunnelblick), if you talke to the Witopia guys they maybe willing to send you this, then all you have to do is place your config files onto the atv. I had asked Witopia about using config file from the windows install on mac's and they suggested that they should be exactly the same except for the extension of the file. They also have a web page that allow you to generate up new config files.

[darukka]

I tryed to get this working. But instead I get a 61 'Connection refused' Error.

I'm trying to use the plugin on a Mac, not ATV. I probably just forgot to do something, but what?

[Gormanimal]

I tryed to get this working. But instead I get a 61 'Connection refused' Error.

I'm trying to use the plugin on a Mac, not ATV. I probably just forgot to do something, but what?
I've seen that error pop-up when I didn't have the tun.kext file loaded. It needs to be reloaded whenever you restart your Mac.

[overkil6]

I too am getting the following error:


Mac OS X ifconfig failed: external program fork failed

I can run openvpn manually but this GUI provided always fails with this. I know you mentioned that not many are experiencing this but just letting you know it's out there.

[robb14]

Hi ,

Keep up the great work ...finally got this bad boy working ...it's great.

But - also getting the occasional Mac OS X fail. Just as others - when moving between locations, will test some more but gotta get some sleep..)

all the best

[Stefmannen]

I just wanted to share my experience on this topic and perhaps a few of you, with similar problems as I had, will get it resolved.

I got Witopia yesterday after finding Hotspot Shield wasn't good enough (from Sweden).
I installed it on my iMac first and tried it out. Hulu worked like a charm both in the browser and thru Boxee (latest test version).
Then I moved stuff over to my appleTV and it would just not work...
It would connect the VPN but I had problems getting Hulu, MTV etc. to show its content and images. If I was able to find a video then Boxee would just show the spinner and become unresponsive. I had to reboot it each time.

Today I recalled the Tunnelblick on my iMac had a checkbox for "Set nameserver" in the Details window, and it sounded reasonable to me that the issues I've been having were related to name resolving.

After googling "openvpn set nameserver" and finding some tips for OS X about creating two scripts. one for setting up DNS on VPN going up and the other for restoring it when shutting down the connection.

I also found two script that seemed to do just this that came with the Witopia install. one called client.up.osx.sh and the other client.down.osx.sh
They are under Tunnelblick.app/Contents/Resources so you should have them on the ATV already if you have copied the app over.

Then I added two lines to the Tunnelblick configfile (in my case /Users/frontrow/Library/personalVPN-iad.conf for my US file and ...personalVPN-man.conf for my UK file):
<code>
up client.up.osx.sh
down client.down.osx.sh
/code>

Then tried to start Boxee VPN but it would't start.
Tried a cmd line start and got the following message:
<code>
Sat Apr 4 17:50:11 2009 openvpn_execve: external program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info.
Sat Apr 4 17:50:11 2009 script failed: external program fork failed
Sat Apr 4 17:50:11 2009 Exiting
</code>

One more manual start adding '--script-security 2' to the cmd line and I
was rocking Hulu and other stuff on my ATV without issues.

....So @mwpei, will there be a fix for this in the next version of the Boxee VPN plugin so I won't have to start it from cmd line every time? :)

[michaelny]

hi there ,

first I would like to say thx to all who are here to help and who to make boxee such a great experience

after reading and testing and more reading and testing I am now on a point where I am kind of lost

after numerous attempts of inserting all the proper things into boxee via cyberduck and terminal ( hotspotshield ) i seem to be almost there but quite not done yet

the current situation is that I got within boxee under Internet the boxeevpn logo and when I hit this then I get a new menu

(config.hvpn) Start HotSpot Shield VPN

PAUSE VPN

REFRESH VPN

RESUME VPN

Stop VPN

when I now select the first menu entry the little rotating sun (gear ) appears and after a few seconds it returns to the menue but nothing else

hulu still can not be selected from the internet menue or to be exact it tells me that the service is no longer available on boxee

so do I just miss something little or am I wrong alltogether

by the way I am trying to connect via T-Com Germany

thx

[Stefmannen]

Doh!
mwpei doesn't have to fix anything.
Of course I just add the setting to the config file(s) instead.

btw Thanks for this plugin!
cheers

[mwpei]

Great work, and yes I will add this to the next version.

thanks.


I just wanted to share my experience on this topic and perhaps a few of you, with similar problems as I had, will get it resolved.

I got Witopia yesterday after finding Hotspot Shield wasn't good enough (from Sweden).
I installed it on my iMac first and tried it out. Hulu worked like a charm both in the browser and thru Boxee (latest test version).
Then I moved stuff over to my appleTV and it would just not work...
It would connect the VPN but I had problems getting Hulu, MTV etc. to show its content and images. If I was able to find a video then Boxee would just show the spinner and become unresponsive. I had to reboot it each time.

Today I recalled the Tunnelblick on my iMac had a checkbox for "Set nameserver" in the Details window, and it sounded reasonable to me that the issues I've been having were related to name resolving.

After googling "openvpn set nameserver" and finding some tips for OS X about creating two scripts. one for setting up DNS on VPN going up and the other for restoring it when shutting down the connection.

I also found two script that seemed to do just this that came with the Witopia install. one called client.up.osx.sh and the other client.down.osx.sh
They are under Tunnelblick.app/Contents/Resources so you should have them on the ATV already if you have copied the app over.

Then I added two lines to the Tunnelblick configfile (in my case /Users/frontrow/Library/personalVPN-iad.conf for my US file and ...personalVPN-man.conf for my UK file):
<code>
up client.up.osx.sh
down client.down.osx.sh
/code>

Then tried to start Boxee VPN but it would't start.
Tried a cmd line start and got the following message:
<code>
Sat Apr 4 17:50:11 2009 openvpn_execve: external program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info.
Sat Apr 4 17:50:11 2009 script failed: external program fork failed
Sat Apr 4 17:50:11 2009 Exiting
</code>

One more manual start adding '--script-security 2' to the cmd line and I
was rocking Hulu and other stuff on my ATV without issues.

....So @mwpei, will there be a fix for this in the next version of the Boxee VPN plugin so I won't have to start it from cmd line every time? :)

[mwpei]

Great work, and yes I will add this to the next version.

thanks.

Just read your last post, so it sounds like we can just define the security in the config file.

[Stefmannen]

Just read your last post, so it sounds like we can just define the security in the config file.

Yep that worked however it's not 100%.
It works great just after starting openvpn but something happens after a while (15-30 minutes?) that seemingly makes it lose the name resolving capabilities.
I get this popup when browing hulu and other content and I have to restart openvpn:


[Errno socket error] (7, 'No address associated with...


Also I'm having a lot of the fork errors reported earlier when trying to start via the plugin. Looking forward to a fix for this.

Thanks

[mwpei]

the fork errors seems to be either related to how I run the openvpn (aka via the commandline) or something to do with openvpn it's self. I have not been able to find out any info on what is actually causing the problem, but will keep looking.


Yep that worked however it's not 100%.
It works great just after starting openvpn but something happens after a while (15-30 minutes?) that seemingly makes it lose the name resolving capabilities.
I get this popup when browing hulu and other content and I have to restart openvpn:


[Errno socket error] (7, 'No address associated with...


Also I'm having a lot of the fork errors reported earlier when trying to start via the plugin. Looking forward to a fix for this.

Thanks

[tron90]

mwpei thanks for all your work it's great!

I got it to work properly, but I think I'd be nice if you could set up Boxee vpn so that it starts the vpn connection when boxee opens and closes it when boxee exits.

Is this possible to do?

[kikkegek]

can you very shortly explain to me why I would want to use VPN for Boxee?

[rlow101]

I tryed to get this working. But instead I get a 61 'Connection refused' Error.

I'm trying to use the plugin on a Mac, not ATV. I probably just forgot to do something, but what?

I am having the same problem.

But on an ATV. I have reloaded Hotspot and Tunnelblick both work from ssh but not from Boxee. Just error 61 connection refused.

Anyone any ideas?

[BritBloke]

Wow, I just posted my 1st post and in it I was saying how great it would be to have a VPN switcher in the program. Then I searched the forums and found your thread mwpei!

As a Windows user however, I'll have to wait both for the Win version of Boxee and also your excellent BoxeeVPN.

I have an OpenVPN account with Witopia just so I can access UK and US content (like you mwpei, I'm stuck in the middle in Canada so need a VPN for both countries :rolleyes:).

I'm no programmer but I'm hoping that I can get your app running under Win. *crosses fingers*

Thanks again, and hopefully there's some Canadian Windows users that would love this too!

[mwpei]

can you very shortly explain to me why I would want to use VPN for Boxee?

VPNs are good for protecting your IP address. But some people find it useful when accessing sites that are geo blocked, not that I am suggesting that this is what the plugin is for, but one could use it for that if they wanted.

[scherem]

So I've been trying to get this to work consitently for the past couple of days. I just bought my atv on the 8th, so everything is relatively fresh. Only things to have been added to it are apple updates, the newest boxee/xbmc/launcher flash stick, openvpn, and atv_afp. I'm looking into adding more codecs and USB drive support.

This plugin for the openvpn has been great (even though the install was a bit confusing, you may want to say exactly where you should modify the sources.xml file). I did have some problems installing it beyond the sources.xml file, the following is what I've done to get it working the first time and the current problem I'm having.

First problem was running:

sudo kextload tun.kext

Solution was to download and run turbo_kext_enabler.bin (as someone else suggested on these forums) first. After that kextload ran fine. I have noticed though on reboots of the appleTV, I have to rerun the turbo_kext_enabler.bin again before kextload works.

Next problem was that when I tried to run openvpn from the command line, I was getting an error that it could not find my key. I'll not now that my conf file is named personalVPN.conf (this is the 2nd tier package on witopia), and its possible the contents of this conf are at fault-- I've looked at them, and its a list of commands with no paths.

Solution was to move all the files from ~/Library/openvpn to ~/Applications/Tunnelblick.app/Contents/Resources/

After doing this openvpn ran succesfully. I turned off my atv and did some errands, came home and installed the ATV_AFP package (as suggested elsewhere on these forums) so I could use AFP to transfer files at a higher speed then sftp.

After which I've tried to use openvpn again with little success. On the command line, I am now getting the following output:

-bash-2.05b$ openvpn --config personalVPN.conf
Fri Apr 10 09:35:31 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Fri Apr 10 09:35:31 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Apr 10 09:35:31 2009 LZO compression initialized
Fri Apr 10 09:35:31 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 10 09:35:31 2009 RESOLVE: NOTE: vpn.witopia.net resolves to 4 addresses, choosing one by random
Fri Apr 10 09:35:31 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 10 09:35:31 2009 Local Options hash (VER=V4): '41690919'
Fri Apr 10 09:35:31 2009 Expected Remote Options hash (VER=V4): '530fdded'
Fri Apr 10 09:35:31 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Fri Apr 10 09:35:31 2009 UDPv4 link local: [undef]
Fri Apr 10 09:35:31 2009 UDPv4 link remote: 216.93.191.243:1194
Fri Apr 10 09:35:31 2009 TLS: Initial packet from 216.93.191.243:1194, sid=b56e41e4 63b8f924
Fri Apr 10 09:35:32 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Fri Apr 10 09:35:32 2009 VERIFY OK: nsCertType=SERVER
Fri Apr 10 09:35:32 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Fri Apr 10 09:35:33 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 10 09:35:33 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 10 09:35:33 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 10 09:35:33 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 10 09:35:33 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 10 09:35:33 2009 [vpn] Peer Connection Initiated with 216.93.191.243:1194
Fri Apr 10 09:35:34 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Fri Apr 10 09:35:34 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.143.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.143.1.114 10.143.1.113'
Fri Apr 10 09:35:34 2009 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 10 09:35:34 2009 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 10 09:35:34 2009 OPTIONS IMPORT: route options modified
Fri Apr 10 09:35:34 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 10 09:35:34 2009 ROUTE default_gateway=192.168.1.1
Fri Apr 10 09:35:34 2009 Cannot allocate TUN/TAP dev dynamically
Fri Apr 10 09:35:34 2009 Exiting


I assume this bolded part is a problem. I'm running my atv behind a router.

Any help in solving this would be great-- I got a taste of it working, and now I want more.

Update: I wasn't running openvpn under sudo --- it seems work on the command line now. Do I have to do this everytime I want to run it on boxee (the command line work) ?

[scherem]

Then I added two lines to the Tunnelblick configfile (in my case /Users/frontrow/Library/personalVPN-iad.conf for my US file and ...personalVPN-man.conf for my UK file):
<code>
up client.up.osx.sh
down client.down.osx.sh
/code>


Can you show the contents of your conf file-- I'm wondering where I should put the up and down commands.

[anmoro]

Hi,

I have been through all the steps and my VPN works with in command line mode. Although I have one big issue and I am new to this I feel like I am going to be an ass but what ever.

I paste the boxee-VPN in: /mnt/Scratch/Users/frontrow/Library/Application Support/BOXEE/UserData/apps/
And the modified XML in: /mnt/Scratch/Users/frontrow/Library/Application Support/BOXEE/UserData/profiles/xxx/

Then it says:

VPN Configuration:
You must now configure your vpn's by clicking on the configure icon

I just don't find the configuration icon

If some one has any idea ...!

[mwpei]

Update: I wasn't running openvpn under sudo --- it seems work on the command line now. Do I have to do this everytime I want to run it on boxee (the command line work) ?

No you should not need to do any command line work after you get things working, the plugin runs the two command to start the kext and openvpn.

I am guessing that you have a problem with the kext if you have to run the kext enabler each time you reboot. You may want to look into installing nitv and running the smart update, this is the suggested way to get kext working correctly. You can install nitv by using the "software menu" plugin that is installed when you use your patch stick to hack you atv.

[mwpei]

Hi,

I have been through all the steps and my VPN works with in command line mode. Although I have one big issue and I am new to this I feel like I am going to be an ass but what ever.

I paste the boxee-VPN in: /mnt/Scratch/Users/frontrow/Library/Application Support/BOXEE/UserData/apps/
And the modified XML in: /mnt/Scratch/Users/frontrow/Library/Application Support/BOXEE/UserData/profiles/xxx/

Then it says:

VPN Configuration:
You must now configure your vpn's by clicking on the configure icon

I just don't find the configuration icon

If some one has any idea ...!


So once you added the boxee-vpn app and updated your source.xml file does the boxeeVPN icon show up in your Video/internet menu?

If it does, click on it and open up the plugin, navigate down to the first vpn and click one the config icon (looks like a wrench and screwdriver), it should be the only icon that is visible. Then follow the direction, make sure your read each direction as you have to pick different files.

[anmoro]

So once you added the boxee-vpn app and updated your source.xml file does the boxeeVPN icon show up in your Video/internet menu?

If it does, click on it and open up the plugin, navigate down to the first vpn and click one the config icon (looks like a wrench and screwdriver), it should be the only icon that is visible. Then follow the direction, make sure your read each direction as you have to pick different files.

Thx for the quick answer but when I go in Video/Internet there is just nothing ...!

Is there anything that I need to do or can do so I am sure that the XML file is reloaded ?

My XML file is :

<source>
<name>Boxee VPN</name>
<path>app://boxee-vpn/</path>
<thumbnail>http://upload.wikimedia.org/wikipedia/commons/e/e0/Crystal_Clear_action_encrypted.png</thumbnail>
<private>true</private>
</source>

And I added it to the top of the file. Should I put it on the bottom ?

[anmoro]

OK

Found my problem...!

I did not modify the XML at the proper place.

Now I have "Error 61, Connection refused"

Working on it...!

If you have any idea ?

[mwpei]

OK

Found my problem...!

I did not modify the XML at the proper place

Now it seems to work.

Sorry I was not thinking really hard on this one

you need to add the plugin to your sources.xml file, see instruction #3.

[anmoro]

It seems to work now meaning that the VPN starts and the my IP changes but then I can not access anything like if the DNS resolution was not working anymore. I can ping other IP from my SSH but I can not ping google.com

[mwpei]

sorry about the reply to the old post, something is going wrong on the form for me as I only see the old posts until I submit my reply. Something must be caching some place.



Thx for the quick answer but when I go in Video/Internet there is just nothing ...!

Is there anything that I need to do or can do so I am sure that the XML file is reloaded ?

My XML file is :

<source>
<name>Boxee VPN</name>
<path>app://boxee-vpn/</path>
<thumbnail>http://upload.wikimedia.org/wikipedia/commons/e/e0/Crystal_Clear_action_encrypted.png</thumbnail>
<private>true</private>
</source>

And I added it to the top of the file. Should I put it on the bottom ?


you don't have it in the correct spot. It needs to be a sub element of video, just like the other video plugins, below should show you. The .... are all the other plugins that are being used.



<sources>
<programs>
<default></default>
</programs>
<video>
<default></default>
<source>
<name>Boxee Downloads</name>
<path>H:/Downloads/Boxee</path>
<private>false</private>
</source>
.......
<source>
<name>Boxee VPN</name>
<path>app://boxee-vpn/</path>
<thumbnail>http://upload.wikimedia.org/wikipedia/commons/e/e0/Crystal_Clear_action_encrypted.png</thumbnail>
<private>true</private>
</source>

.......
</video>
.......

[anmoro]

I am stuck and I don't know why, my DNS where not working and it fixed them so now when I do: #dig google.com it works. But when I do ping google.com it's not working.

In the vpn.txt I see the following:

PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.160.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.160.7.14 10.160.7.13'

I am not sure but what is the option: dhcp-option DNS 10.118.0.1 ?
Where does it come from and where does it gets this IP for the DNS 10.118.0.1 ? I am not sure that this IP is really a DNS. I am using WITOPIA and on there website this is not the IP they give for there own DNS

I just don't know why and this issue is blocking everything. So if anyone has encountered this issue before I could use some help.
Thx

[mwpei]

Have you tried emailing WITOPIA, I have found that they are quite helpful most of the time. They are aware of boxee and they also seem to be aware of this plugin.

BTW, I see the exact same line in my log file.


I am stuck and I don't know why, my DNS where not working and it fixed them so now when I do: #dig google.com it works. But when I do ping google.com it's not working.

In the vpn.txt I see the following:

PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.160.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.160.7.14 10.160.7.13'

I am not sure but what is the option: dhcp-option DNS 10.118.0.1 ?
Where does it come from and where does it gets this IP for the DNS 10.118.0.1 ? I am not sure that this IP is really a DNS. I am using WITOPIA and on there website this is not the IP they give for there own DNS

I just don't know why and this issue is blocking everything. So if anyone has encountered this issue before I could use some help.
Thx

[Stefmannen]

Can you show the contents of your conf file-- I'm wondering where I should put the up and down commands.

I just have them last in the config file along with 'script-security 2'.
no other additions to the default config.
you might want to put the fully qualified paths to the up&down scripts.


I'm still having the issue with dns (inactivity?) timeouts though.

[Pwoolgrove]

Can someone suggest a good VPN for windows that i can use this with?

[michaelny]

first I would like to say thx to mwpei for your advice given via PM - I purchased saturday my witopia " tunnelblick " account

the current status is as follows

- I got a personal.conf for the UK and the US and depending on which I select I can watch all content ( BBC ,CBS , HULU , FOX and so on ) via my browser on my iMac as well as on my MacBook without any problems so there is one point solved

- when I start Tunnelblick and start after this boxee than the whole thing will work as well from within boxee on my iMac ( MB not tested yet ) for the US and British stations ....so it works even though I have to start and switch locations outside of boxee

conclusion up to this point it seems more smooth when running it via boxee rather than trough my browser , less choppy , minimal loading and buffering times and in fullscreen mode ( when I tryed that via my browser it got rather choppy ) ....

the whole point is still missed here , at least for my person , because I want it automated from within boxee and on my atv

so I started on the next step ( again :-) )

I downloaded boxeevpn 2.0 and placed it after unzipping into the [User]/Library/Application Support/BOXEE/UserData/apps/

next I updated the sources.xml as followed <source>
<name>Boxee VPN</name>
<path>app://boxee-vpn/</path>
<thumbnail>http://upload.wikimedia.org/wikipedia/commons/e/e0/Crystal_Clear_action_encrypted.png</thumbnail>
<private>true</private>
</source>

and after restarting boxee the symbol was there

I started it and went to configure the whole thing but had to copy tunnelblick before , because the configuration tool was not able to see it in its applications folder so I guided the configuration in both instances to the desired folder to get the openvpn file and the vpn config

now it gets quite odd - the boxee vpn connects my to a HongKong (SAR) server ....that will not do the trick that's for sure so what am I doing wrong here ?

right now I am asking myself if it would be possible to let my atv run trough my iMac via ICS , which makes me believe that this would mean same IP and therefore a way trough the tunnel or am I entirely wrong ?

[kikkegek]

VPNs are good for protecting your IP address. But some people find it useful when accessing sites that are geo blocked, not that I am suggesting that this is what the plugin is for, but one could use it for that if they wanted.

cool, so this would mean I could use it here in the Netherlands for accesssing US content...great!

I'll look into this!

[mmclary]

Not sure what I did wrong here but I get the following error message. I am new to hacking the ATV so my apologies if it is something simple.

"-bash-2.05b$ sudo kextload tun.kext
Password:
kextload: /mnt/Scratch/Users/frontrow/tun.kext: no such bundle file exists
can't add kernel extension tun.kext (file access/permissions) (run kextload on this kext with -t for diagnostic output)"

Thanks

NOTE: Found the solution in another post by using turbo_kext. I do have another problem.

bash-2.05b# sudo openvpn --config /Library/openvpn/personalVPN-US.conf
Options error: In [CMD-LINE]:1: Error opening configuration file: /Library/openvpn/personalVPN-US.conf

Will keep searching...

Thanks

[mwpei]

I think this is being caused by your config file, witopia has a way to tell your vpn to connect to a specific set of servers, they have some instructions on the website, you basicly have to create two config files (one for US and one of UK) then edit each config file and add the US. or UK. in front of the server name (so I think it goes from vpn.witopia.net to vpn.us.witopia.net) but check the witopia website to make sure that is correct.


first I would like to say thx to mwpei for your advice given via PM - I purchased saturday my witopia " tunnelblick " account

the current status is as follows

- I got a personal.conf for the UK and the US and depending on which I select I can watch all content ( BBC ,CBS , HULU , FOX and so on ) via my browser on my iMac as well as on my MacBook without any problems so there is one point solved

- when I start Tunnelblick and start after this boxee than the whole thing will work as well from within boxee on my iMac ( MB not tested yet ) for the US and British stations ....so it works even though I have to start and switch locations outside of boxee

conclusion up to this point it seems more smooth when running it via boxee rather than trough my browser , less choppy , minimal loading and buffering times and in fullscreen mode ( when I tryed that via my browser it got rather choppy ) ....

the whole point is still missed here , at least for my person , because I want it automated from within boxee and on my atv

so I started on the next step ( again :-) )

I downloaded boxeevpn 2.0 and placed it after unzipping into the [User]/Library/Application Support/BOXEE/UserData/apps/

next I updated the sources.xml as followed <source>
<name>Boxee VPN</name>
<path>app://boxee-vpn/</path>
<thumbnail>http://upload.wikimedia.org/wikipedia/commons/e/e0/Crystal_Clear_action_encrypted.png</thumbnail>
<private>true</private>
</source>

and after restarting boxee the symbol was there

I started it and went to configure the whole thing but had to copy tunnelblick before , because the configuration tool was not able to see it in its applications folder so I guided the configuration in both instances to the desired folder to get the openvpn file and the vpn config

now it gets quite odd - the boxee vpn connects my to a HongKong (SAR) server ....that will not do the trick that's for sure so what am I doing wrong here ?

right now I am asking myself if it would be possible to let my atv run trough my iMac via ICS , which makes me believe that this would mean same IP and therefore a way trough the tunnel or am I entirely wrong ?

[michaelny]

I think this is being caused by your config file, witopia has a way to tell your vpn to connect to a specific set of servers, they have some instructions on the website, you basicly have to create two config files (one for US and one of UK) then edit each config file and add the US. or UK. in front of the server name (so I think it goes from vpn.witopia.net to vpn.us.witopia.net) but check the witopia website to make sure that is correct.

thx but I know this already ...... I got one for a US Server and a different one for the Manchaster UK server ......therefore when I select either one of them than I can watch their corosponding lineup but as I said only via boxee when I launch tunnelblick first outside .....

to make it first simple and not to confuse the boxee system I only took the US server just for testing purpose but to no avail or with the HK hookup as I mentioned before

any other Idea ? maybe something wrong about the way of placing a simple copy of the app into the home folder rather than installing it there ?

[mwpei]

thx but I know this already ...... I got one for a US Server and a different one for the Manchaster UK server ......therefore when I select either one of them than I can watch their corosponding lineup but as I said only via boxee when I launch tunnelblick first outside .....

to make it first simple and not to confuse the boxee system I only took the US server just for testing purpose but to no avail or with the HK hookup as I mentioned before

any other Idea ? maybe something wrong about the way of placing a simple copy of the app into the home folder rather than installing it there ?

So do you have two config files setup, one with the US server and one with the UK server? (I don't think it ships with two files so you would have had to make them)

The other thing that this maybe is just a misunderstanding of the plugin, the plugin runs openvpn and starts it in its own thread, it then returns. It does not wait for the openvpn to be connected before returning so if you are expecting your location to change as soon as your start openvpn that is not going to happen, you need to start it wait 30 sec or so then press the refresh button and hopfully it will change.

if it still does not work take a look at the vpn.txt file to see the output of the openvpn connection.

[rlow101]

The vpn.txt should be in the same file as your config file, if it is not I would suggest removing the vpn and adding it again.

Hi mwpei,

Have started from scratch, rebuilt from a clean ATV.

Still get error 61 however I now have a vpn.txt file.

would you mnd looking at it for me with any ideas.

Thanks again for a great app.

Mon Apr 13 17:12:34 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Mon Apr 13 17:12:34 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Mon Apr 13 17:12:34 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Apr 13 17:12:34 2009 LZO compression initialized
Mon Apr 13 17:12:34 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Apr 13 17:12:34 2009 RESOLVE: NOTE: vpn.us.witopia.net resolves to 9 addresses, choosing one by random
Mon Apr 13 17:12:34 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Apr 13 17:12:34 2009 Local Options hash (VER=V4): '41690919'
Mon Apr 13 17:12:34 2009 Expected Remote Options hash (VER=V4): '530fdded'
Mon Apr 13 17:12:34 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Mon Apr 13 17:12:34 2009 UDPv4 link local: [undef]
Mon Apr 13 17:12:34 2009 UDPv4 link remote: 216.93.191.243:1194
Mon Apr 13 17:12:34 2009 TLS: Initial packet from 216.93.191.243:1194, sid=156251de 4544aef9
Mon Apr 13 17:12:35 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Mon Apr 13 17:12:35 2009 VERIFY OK: nsCertType=SERVER
Mon Apr 13 17:12:35 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Mon Apr 13 17:12:37 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 13 17:12:37 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 13 17:12:37 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 13 17:12:37 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 13 17:12:37 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Apr 13 17:12:37 2009 [vpn] Peer Connection Initiated with 216.93.191.243:1194
Mon Apr 13 17:12:38 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Mon Apr 13 17:12:38 2009 MANAGEMENT: Client connected from 127.0.0.1:8000
Mon Apr 13 17:12:38 2009 MANAGEMENT: Client disconnected
Mon Apr 13 17:12:38 2009 TCP/UDP: Closing socket
Mon Apr 13 17:12:38 2009 SIGTERM[hard,] received, process exiting

[michaelny]

So do you have two config files setup, one with the US server and one with the UK server? (I don't think it ships with two files so you would have had to make them)

The other thing that this maybe is just a misunderstanding of the plugin, the plugin runs openvpn and starts it in its own thread, it then returns. It does not wait for the openvpn to be connected before returning so if you are expecting your location to change as soon as your start openvpn that is not going to happen, you need to start it wait 30 sec or so then press the refresh button and hopfully it will change.

if it still does not work take a look at the vpn.txt file to see the output of the openvpn connection.

hi ,

yeah you are right it ships with only one standard .config file but I got the info from their site and created two different .config files ..... this way I am able to select from the tunnelblick icon in the "iMac Top Toolbar" which server I would like to connect to and then I can select either the UK sites and watch their content or I select to connect to a US Server and watch the US content ...works just fine but it is trough my browser ...... the other option is to start either of the two connections and start than boxee to watch what ever I selected as server beforeand that works just fine as well ......the downside is pretty much obvious and defeats the sense of your nicely done plugin

now you see the problem ?

[mwpei]

hi ,

yeah you are right it ships with only one standard .config file but I got the info from their site and created two different .config files ..... this way I am able to select from the tunnelblick icon in the "iMac Top Toolbar" which server I would like to connect to and then I can select either the UK sites and watch their content or I select to connect to a US Server and watch the US content ...works just fine but it is trough my browser ...... the other option is to start either of the two connections and start than boxee to watch what ever I selected as server beforeand that works just fine as well ......the downside is pretty much obvious and defeats the sense of your nicely done plugin

now you see the problem ?

tunnelblick uses different commands when it is run via your mac toolbar, what you really need to do is try running it on your mac via the commandline and see if you get the same problem.

I would also suggest that you post the following:

For each vpn setup, please post what you entered or selected during the setup (don't need your password):
name:
openvpn file (with path):
config file (with path):

Then try to start one of the vpns and post the vpn.txt file.

[mwpei]

I am not sure what is going wrong here, can you provide a bit more info about your setup and what things you did.

thanks,


Hi mwpei,

Have started from scratch, rebuilt from a clean ATV.

Still get error 61 however I now have a vpn.txt file.

would you mnd looking at it for me with any ideas.

Thanks again for a great app.

Mon Apr 13 17:12:34 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Mon Apr 13 17:12:34 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Mon Apr 13 17:12:34 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Apr 13 17:12:34 2009 LZO compression initialized
Mon Apr 13 17:12:34 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Mon Apr 13 17:12:34 2009 RESOLVE: NOTE: vpn.us.witopia.net resolves to 9 addresses, choosing one by random
Mon Apr 13 17:12:34 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon Apr 13 17:12:34 2009 Local Options hash (VER=V4): '41690919'
Mon Apr 13 17:12:34 2009 Expected Remote Options hash (VER=V4): '530fdded'
Mon Apr 13 17:12:34 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Mon Apr 13 17:12:34 2009 UDPv4 link local: [undef]
Mon Apr 13 17:12:34 2009 UDPv4 link remote: 216.93.191.243:1194
Mon Apr 13 17:12:34 2009 TLS: Initial packet from 216.93.191.243:1194, sid=156251de 4544aef9
Mon Apr 13 17:12:35 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Mon Apr 13 17:12:35 2009 VERIFY OK: nsCertType=SERVER
Mon Apr 13 17:12:35 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Mon Apr 13 17:12:37 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 13 17:12:37 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 13 17:12:37 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Mon Apr 13 17:12:37 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon Apr 13 17:12:37 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Mon Apr 13 17:12:37 2009 [vpn] Peer Connection Initiated with 216.93.191.243:1194
Mon Apr 13 17:12:38 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Mon Apr 13 17:12:38 2009 MANAGEMENT: Client connected from 127.0.0.1:8000
Mon Apr 13 17:12:38 2009 MANAGEMENT: Client disconnected
Mon Apr 13 17:12:38 2009 TCP/UDP: Closing socket
Mon Apr 13 17:12:38 2009 SIGTERM[hard,] received, process exiting

[michaelny]

@ mwpei

so now all seems to work just fine ..... when I hit in your nicely done tool UK than I can watch UK Channels , when I hit USA than I can watch US Channels but for some odd reason I get a country ID for the UAE when I hit USA but I can watch the US Channels

next step is now to try the whole thing on my ATV

[jgw1977]

Is there a way to bundle this as an app so that us lesser morsels can use this?

ATV would be great!

Keep up the good work!

[michaelny]

to be honest I am after all that reading still not clear what files I have to put on what exact position within the ATV

[mwpei]

to be honest I am after all that reading still not clear what files I have to put on what exact position within the ATV

What part is not clear? The setup of the plugin or the setup of Openvpn.

[michaelny]

the main problem are the exact destinations for the different things

as far as I know I have to put the following via SSH into my atv

- boxee vpn
- tunnelblick.app
- openvpn folder contents
- furthermore I have to change the sources xml

you probably think I am the noob or dumbaxx of the year but I am quite confused by the directory structure of the atv

ok here we go :

- I ssh into my atv
- first directory I see is " /mnt/Scratch/Users/Frontrow "( is this the actual directory what we will use for the things we copy to the ATV ? ) reason for my question is that I somewhere saw that they put things into " /Volumes/OSBoot " and so on or they put things into " /Library/ "and so on

you see what I mean ? the above shown path's are exact the way they appear in the cyber duck ssh pulldown menu at the top center where it shows your current position in the menu

in order not to get to confusing there are multiple startpoints available ( or I am just plain and simple stupid or blind )

1) (HDD Symbol) /

2) (Folder Symbol) /mnt/Scratch/Users/frontrow

3) (Folder Symbol) /Volumes/OSBoot

sorry for the trouble

[mwpei]

I can see why you are confused, I don't actualy use cyberduck for access to my atv (I normally use finder(mac))

I think you can assume that references to [User]/... is your frontrow directory, so /mnt/Scratch/Users/Frontrow the correct spot to start (just to verify you can check to make sure that you have a sub directory call "Library", if you do then you are likly in the correct spot). You should be able to do everything from within this directory.

Hope that helps.


the main problem are the exact destinations for the different things

as far as I know I have to put the following via SSH into my atv

- boxee vpn
- tunnelblick.app
- openvpn folder contents
- furthermore I have to change the sources xml

you probably think I am the noob or dumbaxx of the year but I am quite confused by the directory structure of the atv

ok here we go :

- I ssh into my atv
- first directory I see is " /mnt/Scratch/Users/Frontrow "( is this the actual directory what we will use for the things we copy to the ATV ? ) reason for my question is that I somewhere saw that they put things into " /Volumes/OSBoot " and so on or they put things into " /Library/ "and so on

you see what I mean ? the above shown path's are exact the way they appear in the cyber duck ssh pulldown menu at the top center where it shows your current position in the menu

in order not to get to confusing there are multiple startpoints available ( or I am just plain and simple stupid or blind )

1) (HDD Symbol) /

2) (Folder Symbol) /mnt/Scratch/Users/frontrow

3) (Folder Symbol) /Volumes/OSBoot

sorry for the trouble

[michaelny]

looks like I am just plain stupid

I did now put the boxee vpn in different folders as advised but it will not show up on the screen

[mwpei]

looks like I am just plain stupid

I did now put the boxee vpn in different folders as advised but it will not show up on the screen

What do you mean "it will not show up on the screen"

1. - plugin does not show up in the video/internet menu - this means you sources.xml is wrong.
2. - plugin does not show up once you start he plugin - this means you plugin maybe in the wrong place (or your sources.xml is wrong)
3. - config files do not show up when you configure your vpn - this is due to the menu structure and you kind of have to look around for them, normally it is best to pick you home directory first and go from there.

[bernshaw]

Hi

I have successfully loaded the BoxeeVPN 2.0 plugin on my ATV. I have also installed Witopia SSL on Windows Vista which is working correctly. However i am stuck as to what I need to do to get Witopia to install from Windows to ATV. Can anyone HELP please?:confused:

Thanks

[michaelny]

@ mwpei

ok I finally made some progress

I used now Forklift instead of Cyberduck and realized that for some reason the edited sources.xml was not taken into account or to be exact it was written in there , saved and after recall was a goner again ....very odd but with forklift it went trough

now I finally got under

boxee/movies/internet your " Lock " icon and got in there - without any trouble I was able to localize the needed files and created two different VPN connections but that's the point where I am stuck now , because for some reason it will not establish any connection

I hit the connect button - wait a little - refresh and nothing ..... when I then hit disconnect I get error " ( 61, Connection refused ) what makes perfect sense to me , because there is no connection established which can be taken offline

to make sure there are no server problems I did the same procedure on my iMac and it connected right away

by the way ......thanks for your patience and help

[basiepoenskop]

@ mwpei
I hit the connect button - wait a little - refresh and nothing ..... when I then hit disconnect I get error " ( 61, Connection refused )

Hey I am also having the same Issue ::confused:

[mwpei]

Can you take a look for your vpn.txt file, it should be in the same location as the config file that you selected. Have a look at it and if you can't figure out what is going wrong post the contents of ht vpn.txt file.

The most common thing that people have had issues with is the kextloader and being present on the atv, if you have not already run the "smart update" that is part of nitotv please do so. (nitotv is a plugin on the main atv menu and can be installed by using the software menu)

thanks,


@ mwpei

ok I finally made some progress

I used now Forklift instead of Cyberduck and realized that for some reason the edited sources.xml was not taken into account or to be exact it was written in there , saved and after recall was a goner again ....very odd but with forklift it went trough

now I finally got under

boxee/movies/internet your " Lock " icon and got in there - without any trouble I was able to localize the needed files and created two different VPN connections but that's the point where I am stuck now , because for some reason it will not establish any connection

I hit the connect button - wait a little - refresh and nothing ..... when I then hit disconnect I get error " ( 61, Connection refused ) what makes perfect sense to me , because there is no connection established which can be taken offline

to make sure there are no server problems I did the same procedure on my iMac and it connected right away

by the way ......thanks for your patience and help

[michaelny]

Can you take a look for your vpn.txt file, it should be in the same location as the config file that you selected. Have a look at it and if you can't figure out what is going wrong post the contents of ht vpn.txt file.

The most common thing that people have had issues with is the kextloader and being present on the atv, if you have not already run the "smart update" that is part of nitotv please do so. (nitotv is a plugin on the main atv menu and can be installed by using the software menu)

thanks,

the kextloader was run already by me a couple of weeks back but I checked it and there it says " turbo's kextloader " already installed

Fri Apr 17 15:13:15 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Fri Apr 17 15:13:15 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Fri Apr 17 15:13:15 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Apr 17 15:13:15 2009 LZO compression initialized
Fri Apr 17 15:13:15 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 17 15:13:15 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 17 15:13:15 2009 Local Options hash (VER=V4): '41690919'
Fri Apr 17 15:13:15 2009 Expected Remote Options hash (VER=V4): '530fdded'
Fri Apr 17 15:13:15 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Fri Apr 17 15:13:15 2009 UDPv4 link local: [undef]
Fri Apr 17 15:13:15 2009 UDPv4 link remote: 64.237.45.68:1194
Fri Apr 17 15:13:15 2009 TLS: Initial packet from 64.237.45.68:1194, sid=bbb4702e 5e659144
Fri Apr 17 15:13:17 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Fri Apr 17 15:13:17 2009 VERIFY OK: nsCertType=SERVER
Fri Apr 17 15:13:17 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Fri Apr 17 15:13:22 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 17 15:13:22 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 17 15:13:22 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 17 15:13:22 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 17 15:13:22 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 17 15:13:22 2009 [vpn] Peer Connection Initiated with 64.237.45.68:1194
Fri Apr 17 15:13:23 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Fri Apr 17 15:13:24 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.160.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.160.7.98 10.160.7.97'
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: route options modified
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 17 15:13:24 2009 ROUTE default_gateway=XXX.XXX.X.XXX
Fri Apr 17 15:13:24 2009 Cannot allocate TUN/TAP dev dynamically
Fri Apr 17 15:13:24 2009 Exiting

[mwpei]

"Cannot allocate TUN/TAP dev dynamically" - means that it is not able to run the kextloader, I would suggest rerunning your smart update.


the kextloader was run already by me a couple of weeks back but I checked it and there it says " turbo's kextloader " already installed

Fri Apr 17 15:13:15 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Fri Apr 17 15:13:15 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Fri Apr 17 15:13:15 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Apr 17 15:13:15 2009 LZO compression initialized
Fri Apr 17 15:13:15 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Apr 17 15:13:15 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Apr 17 15:13:15 2009 Local Options hash (VER=V4): '41690919'
Fri Apr 17 15:13:15 2009 Expected Remote Options hash (VER=V4): '530fdded'
Fri Apr 17 15:13:15 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Fri Apr 17 15:13:15 2009 UDPv4 link local: [undef]
Fri Apr 17 15:13:15 2009 UDPv4 link remote: 64.237.45.68:1194
Fri Apr 17 15:13:15 2009 TLS: Initial packet from 64.237.45.68:1194, sid=bbb4702e 5e659144
Fri Apr 17 15:13:17 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Fri Apr 17 15:13:17 2009 VERIFY OK: nsCertType=SERVER
Fri Apr 17 15:13:17 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Fri Apr 17 15:13:22 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 17 15:13:22 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 17 15:13:22 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Apr 17 15:13:22 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Apr 17 15:13:22 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Apr 17 15:13:22 2009 [vpn] Peer Connection Initiated with 64.237.45.68:1194
Fri Apr 17 15:13:23 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Fri Apr 17 15:13:24 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.160.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.160.7.98 10.160.7.97'
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: timers and/or timeouts modified
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: --ifconfig/up options modified
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: route options modified
Fri Apr 17 15:13:24 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Apr 17 15:13:24 2009 ROUTE default_gateway=XXX.XXX.X.XXX
Fri Apr 17 15:13:24 2009 Cannot allocate TUN/TAP dev dynamically
Fri Apr 17 15:13:24 2009 Exiting

[michaelny]

I did this already

when I now select it then tells me the following

Install Partial or Failed

2009-04-17 15:46:08.268 nitoHelper(183) Root filesystem already writable

2009-04-17 15:46:08.709 nitohelper(183) mach_kernel.prelink already patched or unrecognized
2009-04-17 15:46:08.731 nitoHelper(183) kextloader already installed!

2009-04-17 15:46:09.199 nitohelper(183) bins installed successfully!

2009-04-17 15:46:09.271 nitoHelper(183) no files to install!,returning


by now I am on a point where I consider giving my ATV a factory restore and start with all from scratch because I do think that I screwed up something while tinkering around with cyberduck....do you think that would do the trick ?

[mwpei]

try running the kextloader from the commandline to see if it will work, the instructions post has info about how to do this.


I did this already

when I now select it then tells me the following

Install Partial or Failed

2009-04-17 15:46:08.268 nitoHelper(183) Root filesystem already writable

2009-04-17 15:46:08.709 nitohelper(183) mach_kernel.prelink already patched or unrecognized
2009-04-17 15:46:08.731 nitoHelper(183) kextloader already installed!

2009-04-17 15:46:09.199 nitohelper(183) bins installed successfully!

2009-04-17 15:46:09.271 nitoHelper(183) no files to install!,returning


by now I am on a point where I consider giving my ATV a factory restore and start with all from scratch because I do think that I screwed up something while tinkering around with cyberduck....do you think that would do the trick ?

[basiepoenskop]

Can you take a look for your vpn.txt file
thanks,


Hrmm mine has this

kextload: extension /Users/frontrow/Applications/Hotspot Shield.app/Contents/Resources/tun.kext is already loaded
Options error: Unrecognized option or missing parameter(s) in /Users/frontrow/Applications/Hotspot Shield.app/Contents/Resources/openvpn:1: *˛∫æ (2.1_beta14)
Use --help for more information.


:confused: lol :(

[michaelny]

try running the kextloader from the commandline to see if it will work, the instructions post has info about how to do this.

to be honest I am not sure what you mean

I entered in the terminal

sudo kextload tun.kext

and get in return this

kextload: /mnt/Scratch/Users/frontrow/tun.kext: no such bundle file exists
can't add kernel extension tun.kext (file access/permissions) (run kextload on this kext with -t for diagnostic output)
-bash-2.05b$

now i proceeded to the following

cd "/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources"

sudo chown -R root:wheel tun.kext


this way I managed to get a connection to the witopia SFO server ..... first time the connection was there the show was like watching it frame by frame and sound / picture was not in sync ......

so to make sure it will work again and because of the choppy show I restarted the ATV

there was no chance of connecting again .......as soon as I entered via the terminal the commands again it connected with witopia ...

will this mean I always have to use the terminal in order to get this going ?

when I leave the connection and try another one or even to get back to the one before there is no way of connecting again

when I get out of boxee and launch again it than it will connect again ..... but the loading time is so bad and again a slide show only or only the hulu screen without any further progress

to make sure my line or their servers don't screw around I went out of the ATV and launched boxee on my iMac and there it just works the way it's supposed to be


btw - I guess I really have to start from scratch with my ATV because I got now the third complete lockup of the ATV after calling it out of standby and starting boxee ( right on the boxee loginscreen )

[mwpei]

two things.
1. take a look at the openvpn that you picked and make sure that is the correct file.
2. run the command /Users/frontrow/Applications/Hotspot Shield.app/Contents/Resources/openvpn --help (make sure that it accepts both the -config and -management options)

I wonder if this is because you are using a beta version, I can't check what version I have installed right now but if anyone else could do this it would help.



Hrmm mine has this

kextload: extension /Users/frontrow/Applications/Hotspot Shield.app/Contents/Resources/tun.kext is already loaded
Options error: Unrecognized option or missing parameter(s) in /Users/frontrow/Applications/Hotspot Shield.app/Contents/Resources/openvpn:1: *˛∫æ (2.1_beta14)
Use --help for more information.


:confused: lol :(

[mwpei]

If you can get this working via commandline then the plugin should work, the only issue that I could think of is that you are not picking the same files when you configure it. If you open up the boxee.log file (I think it is in the library/logs dir) you will see the exact command line that is used by the plugin, you can check the paths to see if is looking at a different set of files.


to be honest I am not sure what you mean

I entered in the terminal

sudo kextload tun.kext

and get in return this

kextload: /mnt/Scratch/Users/frontrow/tun.kext: no such bundle file exists
can't add kernel extension tun.kext (file access/permissions) (run kextload on this kext with -t for diagnostic output)
-bash-2.05b$

now i proceeded to the following

cd "/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources"

sudo chown -R root:wheel tun.kext


this way I managed to get a connection to the witopia SFO server ..... first time the connection was there the show was like watching it frame by frame and sound / picture was not in sync ......

so to make sure it will work again and because of the choppy show I restarted the ATV

there was no chance of connecting again .......as soon as I entered via the terminal the commands again it connected with witopia ...

will this mean I always have to use the terminal in order to get this going ?

when I leave the connection and try another one or even to get back to the one before there is no way of connecting again

when I get out of boxee and launch again it than it will connect again ..... but the loading time is so bad and again a slide show only or only the hulu screen without any further progress

to make sure my line or their servers don't screw around I went out of the ATV and launched boxee on my iMac and there it just works the way it's supposed to be


btw - I guess I really have to start from scratch with my ATV because I got now the third complete lockup of the ATV after calling it out of standby and starting boxee ( right on the boxee loginscreen )

[michaelny]

I just gave my box an overhaul

now I am down to this point

Welcome to the AppleTV (via atv-usbcreator)
frontrow@192.168.2.105's password:
-bash-2.05b$ cd "/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources"
-bash-2.05b$ sudo chown -R root:wheel tun.kext
-bash-2.05b$ sudo kextload tun.kext
kextload: tun.kext loaded successfully
-bash-2.05b$ sudo openvpn --config /Users/frontrow/Library/openvpn/openvpn.conf
Options error: In [CMD-LINE]:1: Error opening configuration file: /Users/frontrow/Library/openvpn/openvpn.conf
Use --help for more information.
-bash-2.05b$


even though I get the above error I can log myself via your tool in and get the desired location .......but when I am inside HULU I get to the selection screen of a show and can highlight an episode but it will not start...neither loading nor anything else ( when I selct the episode I can hear the noise of the clicking but nothing else .... and yeah I already tested on my iMac if the show is available and yes it is working via iMac boxee )

[mwpei]

I would say that the reason you can not play hulu is because the vpn is not starting (only the video content is geo blocked, not the menus)
If you have confirmed that your config file is in that location and is the correct format, then I have no idea why it is not able to read it. What version of openvpn are you using.
I checked mine an it is
OpenVPN 2.0.9 i386-apple-darwin9.0.0 [SSL] [LZO] built on Oct 29 2007

you can check this by running openvpn --help

If you have a newer version maybe try downloading this version


I just gave my box an overhaul

now I am down to this point

Welcome to the AppleTV (via atv-usbcreator)
frontrow@192.168.2.105's password:
-bash-2.05b$ cd "/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources"
-bash-2.05b$ sudo chown -R root:wheel tun.kext
-bash-2.05b$ sudo kextload tun.kext
kextload: tun.kext loaded successfully
-bash-2.05b$ sudo openvpn --config /Users/frontrow/Library/openvpn/openvpn.conf
Options error: In [CMD-LINE]:1: Error opening configuration file: /Users/frontrow/Library/openvpn/openvpn.conf
Use --help for more information.
-bash-2.05b$


even though I get the above error I can log myself via your tool in and get the desired location .......but when I am inside HULU I get to the selection screen of a show and can highlight an episode but it will not start...neither loading nor anything else ( when I selct the episode I can hear the noise of the clicking but nothing else .... and yeah I already tested on my iMac if the show is available and yes it is working via iMac boxee )

[jules@1651]

I am able to get the vpn going from the command line, and then BBC iplayer works on my atv, but I can only stop it with the app. When I hit lock, nothing happens.

Setup:

Name: UK
OpenVPN file: Users/frontrow/applications2/tunnelblick.app/Contents/Resources/openvpn
Config file: Users/frontrow/library/openvpn/personalVPN-uk.conf
PW: frontrow

Any help would be appreciated.

[michaelny]

here we go

current status in order

-start boxee
-start boxee-vpn
-select ip location after a few secs the ip provider shows up after refresh
-start hulu - hulu works a bit jerky ( I guess it's more a hulu prob )
-leaving hulu and disconnecting from the current server and after a few secs the original german IP shows up
-now trying to connect to the UK server but it will not do the trick - trying to reconnect to the US server from before will not work either
-the only wat to make this happen is to get out of boxee via EXIT and to get back into boxee-after this I am able to connect to the UK location and can watch BBC iPlayer

btw you asked about the VPN version : OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009

the above mentioned error is still there when I call it via the terminal

furthermore I discovered that the same location change problem exists on my iMac Boxee version also , so that I have to restart boxee in order to switch the locations


one other question ....did I eventually miss something in the beginning ?

- I moved a copy of tunnelblick into the desired folder
- I moved the open vpn config files into the desired folder
- I moved the boxee.vpn into it's desired folder
- I changed the sources.xml file

did I miss something ? something about permissions or command line input ?

like I said it works right now .....right now I am watching American Dad but I do have to restart boxee in order to change the location and get the error in the terminal

[colony nofi]

Am quite new at this, but seem to be coming up against a problem some others are - except I'm simply on a macbookpro, not atv.

Managed to get everything installed ok :
sources.xml modified as mentioned on page 1, tunnelblick COPIED to the openvpn folder, etc.
Run boxee, and go to configure the VPN.
Once all the files have been found, after 30secs or so, I hit the closed lock icon, and got an OSX message :
System extension cannot be used. The system extension "Users/colonynofi/Library/openvpn/Tunnelblick.app/Contents/Resources/turn.kext" was installed improperly and cannot be used. Please try reinstalling it, or contact the product's vendor for an update.

I've pasted my log file below as well.

I've been using tunnelblick/witopia for a while, and never had any issues. Could it have to do with simply copying the app (from the applications folder into the openvpn folder)?

Seems the error I'm getting in the log is exactly the same as menioned by others, but I can't figure out what I should try next.

Thanks for any thoughts / ideas.

Cheers!

Log :

Thu Apr 23 10:51:27 2009 OpenVPN 2.0.9 i386-apple-darwin9.0.0 [SSL] [LZO] built on Oct 29 2007
Thu Apr 23 10:51:27 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Thu Apr 23 10:51:27 2009 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Apr 23 10:51:27 2009 LZO compression initialized
Thu Apr 23 10:51:27 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Apr 23 10:51:28 2009 RESOLVE: NOTE: vpn.witopia.net resolves to 4 addresses, choosing one by random
Thu Apr 23 10:51:28 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Thu Apr 23 10:51:28 2009 Local Options hash (VER=V4): '41690919'
Thu Apr 23 10:51:28 2009 Expected Remote Options hash (VER=V4): '530fdded'
Thu Apr 23 10:51:28 2009 UDPv4 link local: [undef]
Thu Apr 23 10:51:28 2009 UDPv4 link remote: 216.93.191.243:1194
Thu Apr 23 10:51:28 2009 TLS: Initial packet from 216.93.191.243:1194, sid=42cb4539 638a802e
Thu Apr 23 10:51:29 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Thu Apr 23 10:51:29 2009 VERIFY OK: nsCertType=SERVER
Thu Apr 23 10:51:29 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Thu Apr 23 10:51:31 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 23 10:51:31 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 23 10:51:31 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Apr 23 10:51:31 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Apr 23 10:51:31 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Apr 23 10:51:31 2009 [vpn] Peer Connection Initiated with 216.93.191.243:1194
Thu Apr 23 10:51:32 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Thu Apr 23 10:51:32 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.143.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.143.0.250 10.143.0.249'
Thu Apr 23 10:51:32 2009 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:4: topology (2.0.9)
Thu Apr 23 10:51:32 2009 OPTIONS IMPORT: timers and/or timeouts modified
Thu Apr 23 10:51:32 2009 OPTIONS IMPORT: --ifconfig/up options modified
Thu Apr 23 10:51:32 2009 OPTIONS IMPORT: route options modified
Thu Apr 23 10:51:32 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Apr 23 10:51:32 2009 gw 192.168.0.1
Thu Apr 23 10:51:32 2009 Cannot allocate TUN/TAP dev dynamically
Thu Apr 23 10:51:32 2009 Exiting

[colony nofi]

A quick update - solved my first problem by reinstalling openvpn / tunnelblick from scratch, and I *think* everything is sort of working... at least from viewing the new log file.
However, I am still not able to use "location based services" - the dreaded "check your connection" error message in hulu etc.
The IP is coming up as san-fran, (although inside boxee / vpn config, it says that the location is UAE (though, I don't think that is accurate...)

Any further ideas? (do I need to disconnect tunnelblick before going into boxee?)

Thanks.

[kikkegek]

I am from the Netherlands. Can somebody point me to a good free VPN service in the US?

[colony nofi]

Unfortunately, from what I've found, good and "free" don't really belong in the same sentence when it comes to these types of things.
Witopia is these days $59 for a year - quite reasonable considering the number of different locations they currently offer.
The only other way you could (possibly) do it is if you had a web host with root access in the US... and you could set it up yourself. But a difficult road to travel down if you are not unix savvy...

hth.

[stustaff]

Hi all im fairly new so forgive me if I ask an oft asked question, however i have done a search and read of lots of topics including this one and am wondering...

Is there a simple guide to all this stuff somewhere?

Im thinking somethin along the lines of...

Step 1 - Install boxee (Link)
Step 2 - if in the uk or US and wanting to view content from the other then first arrange for VPN service (Link to witopia etc) tio. get the witopia XX service
Step 3 - Download boxeevpn 2.0 here (link) follow set up here (link)

Now when you next open boxee to watch hulu in the uk or iplayer if your in the US do this - blah blah blah

If there isnt I will try and do it myself but any pointer would be good.

[mwpei]

I finally got my repository working so please download from

http://boxeeatca.fileave.com

using the "app box" in boxee.

NOTE: This does NOT download and install openvpn, if someone wants to figure out a script to do this I could try to add it to the app and repository.

(For anyone else putting up a repository, don't use the built Mac OSX in zip util, download "Better Zip" and use it)

[grey]

can i use this to listen to LastFM as i were in US or UK ?

thanks

[basiepoenskop]

Ah I did not correctly locate the open vpn cofigure file...
where is it :confused:


two things.
1. take a look at the openvpn that you picked and make sure that is the correct file.
2. run the command /Users/frontrow/Applications/Hotspot Shield.app/Contents/Resources/openvpn --help (make sure that it accepts both the -config and -management options)

I wonder if this is because you are using a beta version, I can't check what version I have installed right now but if anyone else could do this it would help.

[basiepoenskop]

Ah I did not correctly locate the open vpn cofigure file...
where is it :confused:

6. copy (from your mac) the contents of /Users/{User}/Library/openvpn to the atv /Users/frontrow/Library/openvpn (this directory contants the key, crt and conf files for your connection)

However now I am still getting the same error... do I need to rename Hotspot Shield to Hotspot ?

[basiepoenskop]

6. copy (from your mac) the contents of
However now I am still getting the same error... do I need to rename Hotspot Shield to Hotspot ?

cd "/Users/frontrow/Applications/Hotspot.app/Contents/Resources"
sudo chown -R root:wheel tun.kext
sudo kextload tun.kext
sudo openvpn --config config.hvpn

When I do this it shows that I am now in USA. But it shows error 61 if I try and do it from boxee.

No idea what I have done wrong.

[mwpei]

cd "/Users/frontrow/Applications/Hotspot.app/Contents/Resources"
sudo chown -R root:wheel tun.kext
sudo kextload tun.kext
sudo openvpn --config config.hvpn

When I do this it shows that I am now in USA. But it shows error 61 if I try and do it from boxee.

No idea what I have done wrong.

If it works from the command line then it must be that you are not selecting the correct files during the VPN setup. you need to make sure that you pick the openvpn file (the same one that you run in the "sudo openvpn --config config.hvpn") then it will ask you for the config file make sure you are picking the config.hvpn that you referanced in the command line.

[Stefmannen]

I finally got my repository working so please download from

http://boxeeatca.fileave.com

using the "app box" in boxee.

NOTE: This does NOT download and install openvpn, if someone wants to figure out a script to do this I could try to add it to the app and repository.

(For anyone else putting up a repository, don't use the built Mac OSX in zip util, download "Better Zip" and use it)
Cool! Will this mess with my current install if I try it out?
And what's the issue with the zip file? I'm curious since I might build apps some day.

[mwpei]

Cool! Will this mess with my current install if I try it out?
And what's the issue with the zip file? I'm curious since I might build apps some day.

It will not affect your current hotspot or tunnelbrick install. I expect that it may clear out the plugin setup as I had to rename the plugin to get it to work (it is now called boxeeatca.feeds)


As for the issue with the zip file, the problem had to do with using the Mac OSX built in zip and it was causing problems, I used the better zip program and it fixed the issue.

[tjoseps]

Please can you point me to a step by step (ie none technical) guide to using BoxeeVPN on ATV with a PC?

Thanks very much

PS in UK looking to access Hulu

[mwpei]

Please can you point me to a step by step (ie none technical) guide to using BoxeeVPN on ATV with a PC?

Thanks very much

PS in UK looking to access Hulu

The instructions provided are as simple as it gets, they are already a combination of several other threads. With the addition of the repository for installing the actual BoxeeVPN app this removes the need for any of the app specific setup however you still need to get openvpn setup on your ATV.

[ijer]

that is interesting, does hulu work with your normal ip address?

Currently the plugin is using http://www.geobytes.com/IpLocator.htm?GetLocation&template=xml.txt to look up the location information, maybe it is not that good of a service (but it is free). If anyone has a better free service I could change it for the next version.
hulu doesn't work with my normal IP address, so they probably use another geo-detection service...

[hjubm2]

Is it possible to get the Hotspot Shield files off a Windows computer to make this work? If not where can the required files be downloaded from?

Thanx

[rlivings]

I was able to install the plugins and have everything working ok it seems like but when I go to cbs.com or hulu.com to watch a show it just hangs up. Here is my vpn.txt, any help would be much appreciated.

kextload: /Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext loaded successfully
Sat May 9 09:05:02 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.5.0 [SSL] [LZO2] built on Nov 19 2008
Sat May 9 09:05:02 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Sat May 9 09:05:02 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat May 9 09:05:02 2009 WARNING: file 'John_Doe.key' is group or others accessible
Sat May 9 09:05:03 2009 LZO compression initialized
Sat May 9 09:05:03 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat May 9 09:05:04 2009 RESOLVE: NOTE: vpn.witopia.net resolves to 4 addresses, choosing one by random
Sat May 9 09:05:04 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 9 09:05:04 2009 Local Options hash (VER=V4): '41690919'
Sat May 9 09:05:04 2009 Expected Remote Options hash (VER=V4): '530fdded'
Sat May 9 09:05:04 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Sat May 9 09:05:04 2009 UDPv4 link local: [undef]
Sat May 9 09:05:04 2009 UDPv4 link remote: 216.93.191.242:1194
Sat May 9 09:05:04 2009 TLS: Initial packet from 216.93.191.242:1194, sid=d7bac8ac 3e9f1bb0
Sat May 9 09:05:05 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Sat May 9 09:05:05 2009 VERIFY OK: nsCertType=SERVER
Sat May 9 09:05:05 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Sat May 9 09:05:07 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 9 09:05:07 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 9 09:05:07 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 9 09:05:07 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 9 09:05:07 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat May 9 09:05:07 2009 [vpn] Peer Connection Initiated with 216.93.191.242:1194
Sat May 9 09:05:08 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Sat May 9 09:05:08 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.142.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.142.0.90 10.142.0.89'
Sat May 9 09:05:08 2009 OPTIONS IMPORT: timers and/or timeouts modified
Sat May 9 09:05:08 2009 OPTIONS IMPORT: --ifconfig/up options modified
Sat May 9 09:05:08 2009 OPTIONS IMPORT: route options modified
Sat May 9 09:05:08 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat May 9 09:05:08 2009 ROUTE default_gateway=192.168.1.1
Sat May 9 09:05:08 2009 TUN/TAP device /dev/tun0 opened
Sat May 9 09:05:08 2009 /sbin/ifconfig tun0 delete
Sat May 9 09:05:09 2009 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Sat May 9 09:05:09 2009 /sbin/ifconfig tun0 10.142.0.90 10.142.0.89 mtu 1500 netmask 255.255.255.255 up
Sat May 9 09:05:09 2009 /sbin/route add -net 216.93.191.242 192.168.1.1 255.255.255.255
add net 216.93.191.242: gateway 192.168.1.1
Sat May 9 09:05:09 2009 /sbin/route add -net 0.0.0.0 10.142.0.89 128.0.0.0
add net 0.0.0.0: gateway 10.142.0.89
Sat May 9 09:05:09 2009 /sbin/route add -net 128.0.0.0 10.142.0.89 128.0.0.0
add net 128.0.0.0: gateway 10.142.0.89
Sat May 9 09:05:09 2009 /sbin/route add -net 10.142.0.1 10.142.0.89 255.255.255.255
add net 10.142.0.1: gateway 10.142.0.89
Sat May 9 09:05:09 2009 Initialization Sequence Completed

[mwpei]

Looks like the vpn is connected just fine. you may want to look a the provider of the vpn, maybe you just dont have enough bandwidth.



I was able to install the plugins and have everything working ok it seems like but when I go to cbs.com or hulu.com to watch a show it just hangs up. Here is my vpn.txt, any help would be much appreciated.

kextload: /Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext loaded successfully
Sat May 9 09:05:02 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.5.0 [SSL] [LZO2] built on Nov 19 2008
Sat May 9 09:05:02 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Sat May 9 09:05:02 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat May 9 09:05:02 2009 WARNING: file 'John_Doe.key' is group or others accessible
Sat May 9 09:05:03 2009 LZO compression initialized
Sat May 9 09:05:03 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat May 9 09:05:04 2009 RESOLVE: NOTE: vpn.witopia.net resolves to 4 addresses, choosing one by random
Sat May 9 09:05:04 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat May 9 09:05:04 2009 Local Options hash (VER=V4): '41690919'
Sat May 9 09:05:04 2009 Expected Remote Options hash (VER=V4): '530fdded'
Sat May 9 09:05:04 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Sat May 9 09:05:04 2009 UDPv4 link local: [undef]
Sat May 9 09:05:04 2009 UDPv4 link remote: 216.93.191.242:1194
Sat May 9 09:05:04 2009 TLS: Initial packet from 216.93.191.242:1194, sid=d7bac8ac 3e9f1bb0
Sat May 9 09:05:05 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Sat May 9 09:05:05 2009 VERIFY OK: nsCertType=SERVER
Sat May 9 09:05:05 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Sat May 9 09:05:07 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 9 09:05:07 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 9 09:05:07 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat May 9 09:05:07 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat May 9 09:05:07 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat May 9 09:05:07 2009 [vpn] Peer Connection Initiated with 216.93.191.242:1194
Sat May 9 09:05:08 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Sat May 9 09:05:08 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.142.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.142.0.90 10.142.0.89'
Sat May 9 09:05:08 2009 OPTIONS IMPORT: timers and/or timeouts modified
Sat May 9 09:05:08 2009 OPTIONS IMPORT: --ifconfig/up options modified
Sat May 9 09:05:08 2009 OPTIONS IMPORT: route options modified
Sat May 9 09:05:08 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat May 9 09:05:08 2009 ROUTE default_gateway=192.168.1.1
Sat May 9 09:05:08 2009 TUN/TAP device /dev/tun0 opened
Sat May 9 09:05:08 2009 /sbin/ifconfig tun0 delete
Sat May 9 09:05:09 2009 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
Sat May 9 09:05:09 2009 /sbin/ifconfig tun0 10.142.0.90 10.142.0.89 mtu 1500 netmask 255.255.255.255 up
Sat May 9 09:05:09 2009 /sbin/route add -net 216.93.191.242 192.168.1.1 255.255.255.255
add net 216.93.191.242: gateway 192.168.1.1
Sat May 9 09:05:09 2009 /sbin/route add -net 0.0.0.0 10.142.0.89 128.0.0.0
add net 0.0.0.0: gateway 10.142.0.89
Sat May 9 09:05:09 2009 /sbin/route add -net 128.0.0.0 10.142.0.89 128.0.0.0
add net 128.0.0.0: gateway 10.142.0.89
Sat May 9 09:05:09 2009 /sbin/route add -net 10.142.0.1 10.142.0.89 255.255.255.255
add net 10.142.0.1: gateway 10.142.0.89
Sat May 9 09:05:09 2009 Initialization Sequence Completed

[cesarcesar]

First off, @mwpei great plugin.. i cant wait to get it fully working on my aTV.

I live in Germany and am in desperate need of some American tv! I have tried to get Boxee to work now for a while and seem to hit brick walls one after another. Now though i think im almost there. Before i unload a bunch of comments about my experience getting it all installed, I have to finish the process first.

Where im stuck now is I cant get a connection to Witopia's VPN via BoxeeVPN 2.0. When in Boxee at the VPN selection screen (one shown at the start of this thread) i click the connect lock and the thinking animation starts, then a few seconds later it stops ad returns to the screen and nothing has happened, my IP is still in Germany. When i click the "stop" lock i get the (61, 'connection refused') though i know this is because there is no connection. So whats up?

Is there a way to test the connection outside of Boxee, but within aTV? Maybe via terminal? I do know the VPN is active because it works on my MacBook via Tunnelblick fine. thanks much for the suggestions.

[cesarcesar]

Also, when installing Tunnelblick the last two steps are -

sudo kextload tun.kext
sudo openvpn --config /Users/frontrow/Library/openvpn/openvpn.conf

The first one comes back as good. The second fails though.

-bash-2.05b$ cd Library/openvpn/
-bash-2.05b$ ls
Cxxx_Vxxx.crt ca.crt vpn.txt
Cxxx_Vxxx.key personalVPN.conf
-bash-2.05b$ sudo openvpn --config personalVPN.conf
Password:
sudo: openvpn: command not found


As you can see there is no openvpn app in that folder. The location of the openvpn is in this dir,

-bash-2.05b$ cd Users/frontrow/Applications/Tunnelblick.app/Contents/Resources
-bash-2.05b$ ls
00_closed.tif Korean.lproj openvpn
01.tif LogWindow.nib openvpn.conf
02.tif MainMenu.nib openvpnstart
03.tif Norwegian.lproj tap.kext
English.lproj client.down.osx.sh tun.kext
French.lproj client.up.osx.sh tunnelblick.icns
German.lproj connected.png vpn.txt
Japanese.lproj installer

So what do i do? Also my VPN conf file is "personalVPN.conf" not "openvpn.conf", is this a problem?

Thanks again.

[mwpei]

Also, when installing Tunnelblick the last two steps are -

sudo kextload tun.kext
sudo openvpn --config /Users/frontrow/Library/openvpn/openvpn.conf

The first one comes back as good. The second fails though.


As you can see there is no openvpn app in that folder. The location of the openvpn is in this dir,

So what do i do? Also my VPN conf file is "personalVPN.conf" not "openvpn.conf", is this a problem?

Thanks again.


you just need to go to the location of your openvpn and run the command from there. (you can also change the name of the conf file)

Once you have that working you can test it with the boxeeVPN plugin, remember that the plugin creates a vpn.txt file that gives you the same output as you get when you run the "sudo openvpn ..." command from the command line.

One other thing to note, the plugin does not automaticly update your IP and location. Once you start your vpn (via the lock icon) wait a few seconds (maybe 30) to give it time to connect then refresh your location (button is below the IP address)

If id does not work take a look at your vpn.txt file, it will be in the same location as the conf file that you have selected. (if you can't fine the vpn.txt file then you have not setup your vpn in the plugin correctly, I would suggest removing it and starting over. Make sure you read the direction very carefully, lots of people have selected the wrong file during setup and had trouble when trying to set things up)

[cesarcesar]

you just need to go to the location of your openvpn and run the command from there. (you can also change the name of the conf file)

Thanks for the quick reply. So do I move the Witopia supplied personalVPN.conf file to the location of the openvpn? Currently the openvpn.conf file that i have i believe is left over from a previous Witopia PPTP install.

[cesarcesar]

I set up boxeeVPN 2.0 on my MacBook. Everything went smooth. Though i cannot figure out ow to add multiple VPN connection. I have one to the UK but i also need to add one to the USA. Thanks.

[rlivings]

Looks like the vpn is connected just fine. you may want to look a the provider of the vpn, maybe you just dont have enough bandwidth.

Thanks mwpei, I'll look into the bandwidth. Just wanted to add that this is a great plugin and we appreciate all your hardwork.

[hjubm2]

Has anyone set this up on an Apple TV from a Windows computer? I'm looking for help if anyone has done it via Windows. Thanx

[mwpei]

Thanks for the quick reply. So do I move the Witopia supplied personalVPN.conf file to the location of the openvpn? Currently the openvpn.conf file that i have i believe is left over from a previous Witopia PPTP install.

You can move it if you want but it does not matter, you just need to tell it were it is by putting the correct path infront of the config file.

The best way to do this is to keep the config file where every it is normally installed and referance it there. (this is because there are other files that it also uses)

If you have "left over files" I would suggest that you clean things up first becuase it is just going to cause you problems in the end.

[cesarcesar]

I tried what you have suggested and still get the same result, nothing happens when i start the VPN services.

I also went through and deleted everything i thought was related to the install. I will try the whole process here again now and detail what i do. My issues are in bold.

Removing Current install-
1. In Boxee > App Box > My Applications, remove Boxee VPN.
2. Remove Boxee CA from Repositories.
3. Delete folder /frontrow/Library/Application Support/BOXEE/UserData/apps/boxeeatca.vpn
4. Delete content in folder /frontrow/Library/openvpn/
5. Delete folder /frontrow/Applications/Tunnelblick.app
6. Delete folder /frontrow/Library/Application Support/BOXEE/UserData/profiles/cesarcesar/apps/boxee-vpn/
7. Delete folder /frontrow/Library/Application Support/BOXEE/UserData/profiles/cesarcesar/apps/boxeeatca.vpn
8. Delete folder /Applications/Boxee.app/Contents/Resources/Boxee/plugins/video/BoxeeVPN/

That covers everything (i think) needs to be removed. Now on to installing.

1. Install Tunnelblick as detailed in post #66 here, http://forum.boxee.tv/showthread.php?p=35536.

The final step still comes back "Command not Found". As far as i can tell the app is in the folder.

-bash-2.05b$ cd Tunnelblick.app/Contents/Resources/

-bash-2.05b$ ls
00_closed.tif Japanese.lproj connected.png
01.tif Korean.lproj installer
02.tif LogWindow.nib openvpn
03.tif MainMenu.nib openvpnstart
English.lproj Norwegian.lproj tap.kext
French.lproj client.down.osx.sh tun.kext
German.lproj client.up.osx.sh tunnelblick.icns

-bash-2.05b$ sudo openvpn --config ../../../../Library/openvpn/personalVPN-us.conf
Password:
sudo: openvpn: command not found

-bash-2.05b$


Content of vpn.txt -
kextload: extension /Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext is already loaded

2. Moving on.. Install BoxeeVPN 2.0 via repository.
3. Edit sources.xml to include Boxee VPN. I placed the edit in the Video's Section. Correct? Not sure.
4. Add a VPN configuration. Still dont see how to add multiple connection in aTV or Macbook.
5. Restart aTV.

Apple TV is still not able to establish a connection via BoxeeVPN 2.0. When selecting to start the VPN the waiting animation goes then stops. I wait a bit and refresh the IP. Its still shows as my normal IP.

This is my 4th time doing this process. I dont think im doing anything wrong...but its not working so i must be. Can anyone see my mistake? To note, i have BoxeeVPN 2.0 running on my MacBook fine... besides only having one VPN configuration.

Is there anything i can provide that would tell any of you more whats erroring? Thanks much for the feedback. Cesar.

[mwpei]

I tried what you have suggested and still get the same result, nothing happens when i start the VPN services.

I also went through and deleted everything i thought was related to the install. I will try the whole process here again now and detail what i do. My issues are in bold.

Removing Current install-
1. In Boxee > App Box > My Applications, remove Boxee VPN.
2. Remove Boxee CA from Repositories.
3. Delete folder /frontrow/Library/Application Support/BOXEE/UserData/apps/boxeeatca.vpn
4. Delete content in folder /frontrow/Library/openvpn/
5. Delete folder /frontrow/Applications/Tunnelblick.app
6. Delete folder /frontrow/Library/Application Support/BOXEE/UserData/profiles/cesarcesar/apps/boxee-vpn/
7. Delete folder /frontrow/Library/Application Support/BOXEE/UserData/profiles/cesarcesar/apps/boxeeatca.vpn
8. Delete folder /Applications/Boxee.app/Contents/Resources/Boxee/plugins/video/BoxeeVPN/

That covers everything (i think) needs to be removed. Now on to installing.

1. Install Tunnelblick as detailed in post #66 here, http://forum.boxee.tv/showthread.php?p=35536.



2. Moving on.. Install BoxeeVPN 2.0 via repository.
3. Edit sources.xml to include Boxee VPN. I placed the edit in the Video's Section. Correct? Not sure.
4. Add a VPN configuration. Still dont see how to add multiple connection in aTV or Macbook.
5. Restart aTV.

Apple TV is still not able to establish a connection via BoxeeVPN 2.0. When selecting to start the VPN the waiting animation goes then stops. I wait a bit and refresh the IP. Its still shows as my normal IP.

This is my 4th time doing this process. I dont think im doing anything wrong...but its not working so i must be. Can anyone see my mistake? To note, i have BoxeeVPN 2.0 running on my MacBook fine... besides only having one VPN configuration.

Is there anything i can provide that would tell any of you more whats erroring? Thanks much for the feedback. Cesar.


First thing to try is to change your command line from
-bash-2.05b$ sudo openvpn --config ../../../../Library/openvpn/personalVPN-us.conf
to :
-bash-2.05b$ sudo ./openvpn --config ../../../../Library/openvpn/personalVPN-us.conf

this should allow it to find the openvpn app, if it does not find it then try doing a "sudo chmod 777 *" (I think that is the correct format, if that does nto work type "sudo chmod * 777")

then retry your command line.

Hopefully this will work, if it does start up boxee and go to the boxeevpn2.0
(btw if you installed if via the repository you should not need to edit your sources.xml file)
So run boxeevpn and go to the first VPN configuration, click on the config icon and do the following
1. enter you name.
2. select the openvpn applicaiton (remember it has to be the actual openvpn file, not the tunnelbrick.app dir)
3. select the config file (this should be the one in your Library/openvpn directory) - many people miss this step and think step 2 failed so they pick the openvpn file again.
4. enter you password for your atv (aka frontrow)

Now try to start the vpn. Then go to your Library/openvpn directory and look at the vpn.txt file, make sure that it was just modified (file date should change) open it up and see what is inside of it.

Hope this helps.
mwpei

BTW - if you want to add multiple VPN connections go into the boxeevpn app, select the first vpn configuration, then arrow down. This should bring up the 2nd VPN configuration, if you arrow down again you will see the 3rd one, you can have upto 5. (you need a differnt config file for each configuration)

[cesarcesar]

Its working!!! Now its not. So i did your suggestions and it worked until i restarted aTV, then it will not connect again. I tried to redo the steps again (a bunch of times) and it still is not working. Below are my Terminal results and the latest vpn.txt entries.

-bash-2.05b$ ls00_closed.tif Japanese.lproj connected.png
01.tif Korean.lproj installer
02.tif LogWindow.nib openvpn
03.tif MainMenu.nib openvpnstart
English.lproj Norwegian.lproj tap.kext
French.lproj client.down.osx.sh tun.kext
German.lproj client.up.osx.sh tunnelblick.icns

-bash-2.05b$ sudo chmod 777 *
Password:

-bash-2.05b$ sudo ./openvpn --config ../../../../Library/openvpn/personalVPN-us.conf
Wed May 13 23:32:46 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Wed May 13 23:32:46 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 13 23:32:46 2009 Cannot load certificate file Cesar_Villaca.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib
Wed May 13 23:32:46 2009 Exiting

-bash-2.05b$



Wed May 13 23:34:41 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Wed May 13 23:34:41 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Wed May 13 23:34:41 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 13 23:34:41 2009 WARNING: file 'Cesar_Villaca.key' is group or others accessible
Wed May 13 23:34:41 2009 LZO compression initialized
Wed May 13 23:34:41 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 13 23:34:41 2009 RESOLVE: NOTE: vpn.us.witopia.net resolves to 10 addresses, choosing one by random
Wed May 13 23:34:41 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 13 23:34:41 2009 Local Options hash (VER=V4): '41690919'
Wed May 13 23:34:41 2009 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 13 23:34:41 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Wed May 13 23:34:41 2009 UDPv4 link local: [undef]
Wed May 13 23:34:41 2009 UDPv4 link remote: 38.100.141.142:1194
Wed May 13 23:34:41 2009 TLS: Initial packet from 38.100.141.142:1194, sid=78aa3c0f d0dc7f43
Wed May 13 23:34:42 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Wed May 13 23:34:42 2009 VERIFY OK: nsCertType=SERVER
Wed May 13 23:34:42 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Wed May 13 23:34:43 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed May 13 23:34:43 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 13 23:34:43 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed May 13 23:34:43 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 13 23:34:43 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed May 13 23:34:43 2009 [vpn] Peer Connection Initiated with 38.100.141.142:1194
Wed May 13 23:34:44 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Wed May 13 23:34:45 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.122.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.122.0.162 10.122.0.161'
Wed May 13 23:34:45 2009 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 13 23:34:45 2009 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 13 23:34:45 2009 OPTIONS IMPORT: route options modified
Wed May 13 23:34:45 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed May 13 23:34:45 2009 ROUTE default_gateway=192.168.15.1
Wed May 13 23:34:45 2009 Cannot allocate TUN/TAP dev dynamically
Wed May 13 23:34:45 2009 Exiting

[cesarcesar]

BTW - if you want to add multiple VPN connections go into the boxeevpn app, select the first vpn configuration, then arrow down. This should bring up the 2nd VPN configuration, if you arrow down again you will see the 3rd one, you can have upto 5. (you need a differnt config file for each configuration)

Addition: you must have the configuration icon selected, then press down.

[mwpei]

cesarcesar,

I see 2 issues here:

1st issue:


-bash-2.05b$ sudo ./openvpn --config ../../../../Library/openvpn/personalVPN-us.conf
Wed May 13 23:32:46 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Wed May 13 23:32:46 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 13 23:32:46 2009 Cannot load certificate file Cesar_Villaca.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib
Wed May 13 23:32:46 2009 Exiting

when you ran the command from the command line it was not able to find your Cesar_Villaca.crt file, make sure that it is in the same directory as your config file. You may also need to run the command from that directory, if you do then you will need to update your paths.

2nd issue:


Wed May 13 23:34:41 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.6.0 [SSL] [LZO2] built on Feb 5 2009
Wed May 13 23:34:41 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Wed May 13 23:34:41 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed May 13 23:34:41 2009 WARNING: file 'Cesar_Villaca.key' is group or others accessible
Wed May 13 23:34:41 2009 LZO compression initialized
Wed May 13 23:34:41 2009 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed May 13 23:34:41 2009 RESOLVE: NOTE: vpn.us.witopia.net resolves to 10 addresses, choosing one by random
Wed May 13 23:34:41 2009 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Wed May 13 23:34:41 2009 Local Options hash (VER=V4): '41690919'
Wed May 13 23:34:41 2009 Expected Remote Options hash (VER=V4): '530fdded'
Wed May 13 23:34:41 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Wed May 13 23:34:41 2009 UDPv4 link local: [undef]
Wed May 13 23:34:41 2009 UDPv4 link remote: 38.100.141.142:1194
Wed May 13 23:34:41 2009 TLS: Initial packet from 38.100.141.142:1194, sid=78aa3c0f d0dc7f43
Wed May 13 23:34:42 2009 VERIFY OK: depth=1, /C=US/ST=Virginia/L=Reston/O=Full_Mesh_Networks__Inc./OU=FMN_Engineering___Operations/CN=Full_Mesh_Networks_Certificate_Authority/emailAddress=support@fullmesh.net
Wed May 13 23:34:42 2009 VERIFY OK: nsCertType=SERVER
Wed May 13 23:34:42 2009 VERIFY OK: depth=0, /C=US/ST=Virginia/O=Full_Mesh_Networks__Inc./OU=WiTopia_Engineering___Operations/CN=vpn/emailAddress=support@witopia.net
Wed May 13 23:34:43 2009 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed May 13 23:34:43 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 13 23:34:43 2009 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed May 13 23:34:43 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed May 13 23:34:43 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed May 13 23:34:43 2009 [vpn] Peer Connection Initiated with 38.100.141.142:1194
Wed May 13 23:34:44 2009 SENT CONTROL [vpn]: 'PUSH_REQUEST' (status=1)
Wed May 13 23:34:45 2009 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.118.0.1,route 10.122.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.122.0.162 10.122.0.161'
Wed May 13 23:34:45 2009 OPTIONS IMPORT: timers and/or timeouts modified
Wed May 13 23:34:45 2009 OPTIONS IMPORT: --ifconfig/up options modified
Wed May 13 23:34:45 2009 OPTIONS IMPORT: route options modified
Wed May 13 23:34:45 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed May 13 23:34:45 2009 ROUTE default_gateway=192.168.15.1
Wed May 13 23:34:45 2009 Cannot allocate TUN/TAP dev dynamically
Wed May 13 23:34:45 2009 Exiting

I expect that this log file is from the vpn.txt file, the second last line ("Cannot allocate TUN/TAP dev dynamically") indicates that the kext is not loaded for some reason. Normally the way to fix this is to run the smart update (via nitotv). A few other people have noted that after a reboot they get this error but after they ran the smart update again it seemed to fix the problem (or at least they stopped asking about it)

[cesarcesar]

1st issue:Solved using your suggested method. The Terminal output seems to be what is in the vpn.txt.


2nd issue:I ran via NitoTV the "Smart Installer" (couldn't find Smart Update). It said on screen everything was installed properly and nothing was changed. The Terminal output is almost exact to the vpn.txt i posted before. It still says "Cannot allocate TUN/TAP dev dynamically". I'm almost there.

[mwpei]

Solved using your suggested method. The Terminal output seems to be what is in the vpn.txt.

I ran via NitoTV the "Smart Installer" (couldn't find Smart Update). It said on screen everything was installed properly and nothing was changed. The Terminal output is almost exact to the vpn.txt i posted before. It still says "Cannot allocate TUN/TAP dev dynamically". I'm almost there.

Try running the "sudo kextload tun.kext" from the command line again (I think you need to be in the same directory as your openvpn is in.

If it loads successfully then try running the plugin and see if it works, if it does not work you should try the command "sudo chown -R root:wheel tun.kext" (once again needs to be run with in the correct directory)

hope it helps.

[cesarcesar]

Sill no go.. vpn.txt still says Cannot allocate TUN/TAP dev dynamically.


-bash-2.05b$ cd Applications/Tunnelblick.app/Contents/Resources/

-bash-2.05b$ ls
00_closed.tif Japanese.lproj connected.png
01.tif Korean.lproj installer
02.tif LogWindow.nib openvpn
03.tif MainMenu.nib openvpnstart
English.lproj Norwegian.lproj tap.kext
French.lproj client.down.osx.sh tun.kext
German.lproj client.up.osx.sh tunnelblick.icns

-bash-2.05b$ sudo kextload tun.kext
Password:
kextload: extension /mnt/Scratch/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext is not authentic (check ownership and permissions)

-bash-2.05b$ sudo chown -R root:wheel tun.kext

[cesarcesar]

Note: To remove folder /frontrow/Applications/Tunnelblick.app to a "sudo rm -rf ./Tunnelblick.app" while in the Applications folder.

[cesarcesar]

So I (again) deleted and re-installed everything. Everything went smooth and pretty fast (done it enough times). Got connections to both UK and US VPN's. Watched some Comedy Central. Rebooted.

Again no connection after reboot. I tried the after reboot fix and i still get this error,
-bash-2.05b$ sudo kextload tun.kext
Password:
kextload: extension /mnt/Scratch/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext is not authentic (check ownership and permissions)

I have also tried sudo chown -R root:wheel tun.kext before and after. Same results. Next suggestion?

Also mwpei, you should post a donate link or something. I think you deserve some kickback. You have been very helpful to a lot of us. Thanks.

[mwpei]

So I (again) deleted and re-installed everything. Everything went smooth and pretty fast (done it enough times). Got connections to both UK and US VPN's. Watched some Comedy Central. Rebooted.

Again no connection after reboot. I tried the after reboot fix and i still get this error,
-bash-2.05b$ sudo kextload tun.kext
Password:
kextload: extension /mnt/Scratch/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext is not authentic (check ownership and permissions)

I have also tried sudo chown -R root:wheel tun.kext before and after. Same results. Next suggestion?

Also mwpei, you should post a donate link or something. I think you deserve some kickback. You have been very helpful to a lot of us. Thanks.


Try running the following "kextload -t tun.kext" it should give you more info about what the "not authentic" issue is.


you could also check out this link, looks like someone else having the same type of issue:
http://www.insanelymac.com/forum/lofiversion/index.php/t3441.html
http://lists.apple.com/archives/darwin-kernel/2002/Sep/msg00076.html

[cesarcesar]

My result is -

-bash-2.05b$ sudo kextload -t tun.kext
kernel extension tun.kext has problems:
Authentication failures:
{
"File owner/permissions are incorrect" = (
"/mnt/Scratch/Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext"
)
}
Warnings:
{
"Kext has a kernel dependency prior to version 6.0 and CFBundleVersion does not match executable's MODULE_VERSION" = true
"Kext has a kernel dependency prior to version 6.0 and CFBundleIdentifier does not match executable's MODULE_NAME" = true
}

-bash-2.05b$



What would the proper owner permissions be? The tun.kext folder is "root wheel 777". rwx 777 is only on the main folder. Everything inside is different.

Once changed will it stop reverting on start up? (i assume yes). thanks

[cesarcesar]

Its Working. I had to do the following to the tun.kext dir.

sudo chown -R root:wheel tun.kext
sudo chmod -R 755 tun.kext
restart

Thanks so much for your diligent help @mwpei.

[mwpei]

Its Working. I had to do the following to the tun.kext dir.


Thanks so much for your diligent help @mwpei.

glad to here it is working.

[Telamon]

I've just picked up an Apple TV after running Boxee on a Mini Mac and a Windows machine for a while now.

I have my VPN service working fine on both of these machines, so would like it on the Apple TV too, but I've been trying for 2 days to get this working with no luck.
I've followed all the steps shown, even factory reset and started again, but I always wind up with the same error:

Error 61 'Connection Refused'

My vpn.txt looks like this:
kextload: extension /Users/frontrow/Applications/Tunnelblick.app/Contents/Resources/tun.kext is already loaded
Mon May 25 11:20:28 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.5.0 [SSL] [LZO2] built on Nov 19 2008
Mon May 25 11:20:28 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Mon May 25 11:20:28 2009 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon May 25 11:20:28 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon May 25 11:20:28 2009 Cannot load certificate file client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib
Mon May 25 11:20:28 2009 Exiting

I'm a PC user for the main part (sorry!) and haven't done much UNIX since I was at college approximately 10 years ago, so it's possible I'm missing something really obvious!

Can anyone lend a hand?

I'm using VforVPN incidentally, in case that makes any difference...

[cesarcesar]

Error 61 'Connection Refused'

This will always show when your connection is not right. I had a lot of issues getting it to work also (none due to the app). I suggest reading my posts in this thread. They are very detailed and worked for me. The app owner info is also great.

[Telamon]

I figured out my first problem (my configuration file wasn't actually named openvpn.conf - OOPS!)
But now I get a long string of TLS error, like this:

Mon May 25 17:46:56 2009 OpenVPN 2.1_rc15 i386-apple-darwin9.5.0 [SSL] [LZO2] built on Nov 19 2008
Mon May 25 17:46:56 2009 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon May 25 17:46:56 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon May 25 17:46:56 2009 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Mon May 25 17:46:56 2009 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 25 17:46:56 2009 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 25 17:46:56 2009 LZO compression initialized
Mon May 25 17:46:56 2009 Control Channel MTU parms [ L:1558 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon May 25 17:46:56 2009 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
Mon May 25 17:46:56 2009 Local Options hash (VER=V4): '9e7066d2'
Mon May 25 17:46:56 2009 Expected Remote Options hash (VER=V4): '162b04de'
Mon May 25 17:46:56 2009 Socket Buffers: R=[42080->65536] S=[9216->65536]
Mon May 25 17:46:56 2009 UDPv4 link local: [undef]
Mon May 25 17:46:56 2009 UDPv4 link remote: 174.37.95.88:53
Mon May 25 17:46:56 2009 TLS: Initial packet from 174.37.95.88:53, sid=70f55ea2 0c8a3d87
Mon May 25 17:46:56 2009 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #1 / time = (1243270057) Mon May 25 17:47:37 2009 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Mon May 25 17:46:56 2009 TLS Error: incoming packet authentication failed from 174.37.95.88:53
^
Deleted a bunch of the same
^
Mon May 25 17:46:58 2009 VERIFY OK: depth=1, /C=US/ST=OR/L=Halfway/O=VforVPN__LLC/CN=VforVPN__LLC_CA/emailAddress=pki@vforvpn.com
Mon May 25 17:46:58 2009 VERIFY OK: depth=0, /C=US/ST=OR/L=Halfway/O=VforVPN__LLC/CN=server/emailAddress=pki@vforvpn.com
^
Deleted some more TLS errors...
^
Mon May 25 17:47:08 2009 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #70 / time = (1243270057) Mon May 25 17:47:37 2009 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Mon May 25 17:47:08 2009 TLS Error: incoming packet authentication failed from 174.37.95.88:53
Mon May 25 17:47:08 2009 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon May 25 17:47:08 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 25 17:47:08 2009 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Mon May 25 17:47:08 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 25 17:47:08 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Mon May 25 17:47:08 2009 [server] Peer Connection Initiated with 174.37.95.88:53
Mon May 25 17:47:09 2009 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Mon May 25 17:47:10 2009 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #73 / time = (1243270057) Mon May 25 17:47:37 2009 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Mon May 25 17:47:10 2009 TLS Error: incoming packet authentication failed from 174.37.95.88:53
Mon May 25 17:47:10 2009 Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #73 / time = (1243270057) Mon May 25 17:47:37 2009 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings
Mon May 25 17:47:10 2009 TLS Error: incoming packet authentication failed from 174.37.95.88:53
Mon May 25 17:47:10 2009 PUSH: Received control message: 'PUSH_REPLY,route 174.37.95.97 255.255.255.255,redirect-gateway def1,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.162.0.1,ping 10,ping-restart 120,ifconfig 10.162.1.250 10.162.1.249'
Mon May 25 17:47:10 2009 OPTIONS IMPORT: timers and/or timeouts modified
Mon May 25 17:47:10 2009 OPTIONS IMPORT: --ifconfig/up options modified
Mon May 25 17:47:10 2009 OPTIONS IMPORT: route options modified
Mon May 25 17:47:10 2009 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon May 25 17:47:10 2009 ROUTE default_gateway=192.168.1.1
Mon May 25 17:47:10 2009 Cannot allocate TUN/TAP dev dynamically
Mon May 25 17:47:10 2009 Exiting


The final message (Cannot allocate TUN/TAP dev) looks similar to your problems, but unfortunately your fix didn't do it for me!

[Telamon]

Fixed!

It's amazing what happens when you actually use your brain!
Plus it turns out, programming is a bit like riding a bike, it does come back to you, even if you've not done any in 10 years!

I binned my configuration file and rewrote it, not too sure what the error was, but it was obviously something I'd changed (wrongly!) over the past couple of days.

Anyway, all seems to be behaving as it should now.

Thanks for the help, just writing issues down tends to help me work through them better.

And of course thanks to the creator of this great plugin!

[babbe]

After reading through all these threads for almost days, I am almost there.
I got my vpn connections running on my mac with either Tunnelblick or with Viscosity.
When trying to start the vpn server using sudo openvpn --config ./config.conf
(I verified that the config file is in the correct folder), I am being asked for login / password despite having the key file in the same directory as the openvpn file
After entering the correct info, the vpn connection works without problems.
How can I prevent having to enter my credentials ?

Can anyone help ?

[puritycontrol]

Is there a way to use WiTopia PPTP service with this plug-in? If no, can someone point me in the right direction?

I'm a Canadian boxee user that wants to get Hulu working on an Apple TV.

[BritBloke]

I think that I maybe the first to test this out on a Windows 7 install.

I've installed the plugin, configured it with the exception of "root password" which I'm guessing is more to do with Linux / OSX installs for sudo permission. I just left that field blank.

When I try to connect to my US VPN I get an error message "module object has no attribute system". I'm guessing this is a python specific error. Can anyone shed any light on how to correct it in Windows?

[stustaff]

Is there a way to use WiTopia PPTP service with this plug-in? If no, can someone point me in the right direction?

I'm a Canadian boxee user that wants to get Hulu working on an Apple TV.

Hey me too, unfortuanetely dont hava an answer but heres some more info,

basically with witopia there is no config file as such.. you just use your existing vpn client enter details and away you go? so is there some way to enter this in the app?

heres the instructions for witopia that work for me inm the macs own vpn client thingy

1. Locate your VPN Client
a. PANTHER/TIGER USERS = Open your "Applications" folder.
b. PANTHER/TIGER USERS = Find the “Internet Connect” icon and double-click on it.
If no PPTP Account exists you will have to create one.
CLICK on "+" and add a new VPN connection with Interface "VPN" and "VPN Type" PPTP

2. Create a New VPN Connection (PANTHER/TIGER ONLY)
a. Go to the "File" menu and select “New VPN Connection.”
b. In new window, Click "PPTP", then click "Continue."

3. Configure Client (LOCATIONS OF THE BUTTONS AND FIELDS VARY)
a. Check box "Show VPN status in menu bar"
b. PANTHER/TIGER USERS = Click on "Other" and select "Edit Configurations…" in pulldown menu.
c. Enter the information as described below:
Description: "WiTopia PPTP" (or whatever you wish)
Server Address: pptp.witopia.net
Account Name: "Your WiTopia username"@witopia
EXAMPLE: stevejobs@witopia
Authentication Settings:
a.Choose "Password"
b. Enter your WiTopia PPTP Password
Encryption Settings:
"Maximum" (we use 128-bit)
Advanced Settings:
Leave "Enable VPN on demand" UN-checked (tends to cause problems when checked)

4. Click the "OK" button.
That's it! Your WiTopia PPTP is set up.

[mwpei]

If someone wants to figure out how to call openVPN with the below settings then I could add this to the app. Need to be able to call it via the commandline.


Hey me too, unfortuanetely dont hava an answer but heres some more info,

basically with witopia there is no config file as such.. you just use your existing vpn client enter details and away you go? so is there some way to enter this in the app?

heres the instructions for witopia that work for me inm the macs own vpn client thingy

1. Locate your VPN Client
a. PANTHER/TIGER USERS = Open your "Applications" folder.
b. PANTHER/TIGER USERS = Find the “Internet Connect” icon and double-click on it.
If no PPTP Account exists you will have to create one.
CLICK on "+" and add a new VPN connection with Interface "VPN" and "VPN Type" PPTP

2. Create a New VPN Connection (PANTHER/TIGER ONLY)
a. Go to the "File" menu and select “New VPN Connection.”
b. In new window, Click "PPTP", then click "Continue."

3. Configure Client (LOCATIONS OF THE BUTTONS AND FIELDS VARY)
a. Check box "Show VPN status in menu bar"
b. PANTHER/TIGER USERS = Click on "Other" and select "Edit Configurations…" in pulldown menu.
c. Enter the information as described below:
Description: "WiTopia PPTP" (or whatever you wish)
Server Address: pptp.witopia.net
Account Name: "Your WiTopia username"@witopia
EXAMPLE: stevejobs@witopia
Authentication Settings:
a.Choose "Password"
b. Enter your WiTopia PPTP Password
Encryption Settings:
"Maximum" (we use 128-bit)
Advanced Settings:
Leave "Enable VPN on demand" UN-checked (tends to cause problems when checked)

4. Click the "OK" button.
That's it! Your WiTopia PPTP is set up.

[stustaff]

If someone wants to figure out how to call openVPN with the below settings then I could add this to the app. Need to be able to call it via the commandline.

Well I'd love to help but the most I could offer is testing! I have never used command line?

Would love it if someone who is able took the time to do this, I really think BoxeeVPN and witopia personal VPN could be a great combo as its the cheapest FAST VPN I have seen at $40 a year.

[mwpei]

Well I'd love to help but the most I could offer is testing! I have never used command line?

Would love it if someone who is able took the time to do this, I really think BoxeeVPN and witopia personal VPN could be a great combo as its the cheapest FAST VPN I have seen at $40 a year.

I am a bit confused, it was witopia that I origonally developed this plugin for, do they have a new VPN setup that does not include a config file anymore? I know that they have a version of the VPN that you can use for your IPhone that does not use a config file, but the version of witopia that I use does have a config file and works fine with the plugin in.

[stustaff]

I am a bit confused, it was witopia that I origonally developed this plugin for, do they have a new VPN setup that does not include a config file anymore? I know that they have a version of the VPN that you can use for your IPhone that does not use a config file, but the version of witopia that I use does have a config file and works fine with the plugin in.

no config file that im aware of?

I have the first choice here - http://www.witopia.net/index.php/products/

and the set up was as above no config file required??

[mwpei]

no config file that im aware of?

I have the first choice here - http://www.witopia.net/index.php/products/

and the set up was as above no config file required??

Ok, I have the 2nd one, that one that says OpenVPN. You may want to ask witopia if they have a version of the first one that uses a config file, let them know that you are using it for the boxee vpn plugin (I have talked to them about it in the past so they should be aware of it).

[derrick1985]

Hi,

Is there a way I can get boxee to work with Hotspot shield, on a Windows Vista machine? and if so, how?

Thanks,

[darcilicious]

If someone wants to figure out how to call openVPN with the below settings then I could add this to the app. Need to be able to call it via the commandline.I have no idea about the openvpn part but the following will work from the XP or Vista command line, once the VPN connection has been set up via the default Windows VPN/PPTP setup instructions.

rasdial.exe ConnectionName Username Password

e.g.

rasdial.exe "Banana VPN" MyUserName MyPassword

Would the above work as a way to integrate into BoxeeVPN somehow?

Oh, and to disconnect would be:

rasdial.exe "Banana VPN" /disconnect

[faudee]

If someone wants to figure out how to call openVPN with the below settings then I could add this to the app. Need to be able to call it via the commandline.
Id love to have this feature, because the none OpenVPN Plan ist much cheaper (and i only need the us servers). right now im using an apple script to connect to WiTopia and after that launch Hulu.app/Boxee.app
The Script looks like that



set vpnName to "VPN (PPTP)" --Set up your VPN Connection Name
set connectingWait to 6 --If nothing Happens after launching the Script change to something higher, time to wait before the connection is up

set appName to "Boxee VPN Helper"
tell application "GrowlHelperApp" -- ** the daemon that is behind the scenes
set the allNotificationsList to {"Connecting", "Connected", "Disconnected"}
set the enabledNotificationsList to {"Connecting", "Connected", "Disconnected"}
register as application appName all notifications allNotificationsList default notifications enabledNotificationsList icon of application "Hulu Desktop"
tell application "System Events"
tell current location of network preferences
set VPNservice to service vpnName -- set the name of your VPN service
set VPNUP to connected of current configuration of VPNservice
if VPNUP is false then --if disconnected connect
connect VPNservice
tell application "GrowlHelperApp" to notify with name "Connecting" title "Connecting" description "Connecting to VPN..." application name appName
else
disconnect VPNservice --if connected disconnect
tell application "GrowlHelperApp" to notify with name "Disconnected" title "Disconnected" description "Disconnected from VPN, quitting Boxee." application name appName
delay 1
tell application "Boxee"
quit
end tell
end if
delay connectingWait --wait for set seconds
set VPNUP_launch to connected of current configuration of VPNservice
if VPNUP_launch is true then --if only if connected launch hulu
tell application "GrowlHelperApp" to notify with name "Connected" title "Connected" description "Connected to VPN, now launching Boxee" application name appName
tell application "Boxee"
activate
end tell

end if
end tell
end tell --system events
end tell --growl


Could this script be called via a button in Boxee? (i might start to learn how to do it after my summer term exams :rolleyes:)

[alphajr]

a few Q's

I have installed the app and trying to configure Tunnelblick

is the password : frontrow ?

this is the txt file:

Fri Jul 17 16:23:53 2009 MANAGEMENT: TCP Socket listening on 127.0.0.1:8000
Fri Jul 17 16:23:53 2009 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Jul 17 16:23:53 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Jul 17 16:23:53 2009 Cannot load certificate file client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib
Fri Jul 17 16:23:53 2009 Exiting

any tips?

[alphajr]

Ok - through many hours got it working, not sure what files are supposed to go. But that was basically the issue.

Put everything into Library and applications and then it worked.

[derrick1985]

Hi,

Is there a way I can get boxee to work with Hotspot shield, on a Windows Vista machine? and if so, how?

Thanks,

*bump* in hopes someone answers the above.

[ninethirty]

Hey Everyone,

So.. I've been trying to figure this out, but with no luck so far. I'm a beginner when it comes to command line anything but perhaps someone can help me.

I've got the VPN 2.0 software on my ATV.. when I launch into it, there's no options to chose from (so I need to install Tunnelblick).

Here's the thing. I go with Strongvpn.com - have for a long time. Speed is good, and I dig it. But I only have a regular account, not an OpenVPN account.

Is there any way for me to create the config file for my regular VPN and use it through Boxee or do i HAVE to upgrade to OpenVPN?

Thanks in advance!

[djepyon]

What exactly does VPN configurations inside of Boxee grant a person? Not questioning its use by any means, I'm probably just to naive to know how cool this really is.

[alphajr]

witopia - the feed from them in the UK to the US (here in LA) seems to be throttled and as such I can't watch BBC Iplayer. I have used another service in the UK and the streaming speed isn't affected. Do i have to use witopia? if not how do i set it up for another service?

[derrick1985]

Hi,

Is there a way I can get boxee to work with Hotspot shield, on a Windows Vista machine? and if so, how?

Thanks,

Trying this one more time.

[thriftynomad]

Hello,

Thanks so much for your work both on this plugin and also the Canadian plugin. Both are really great.

My VPN provider vpnuk.net provides OpenVPN access and I'm able to use Boxee on my apple tv if I ssh in and launch OpenVPN from the command line, but in addition to the certificates, I also need to provide a user name and password to log in. From the command line, OpenVPN prompts me for this right after I launch, but from the Boxee plugin, it just fails and the log says 'can't read auth username from stdin'.

Is there, or can there be, support for entering a username/password after connecting? To be clear, this is with OpenVPN, not PPTP or IPSec... and everything works great from the command line on my Apple TV, so it's all installed OK.

In OpenVPN, the method is --auth-user-pass and unfortunately, my provider does not allow the username password to be saved in a separate file (although I've put in a request for this).

Also, after a reboot, I got the same Cannot allocate TUN/TAP dev dynamically error that others have reported. I've tried to chown, rerun kextloader and reinstall smart installer and all report that they are already installed. I can just uninstall/reinstall, but can't seem to get this sorted out.

Again, a very big thanks!!

[bcre3306]

Hello,

Thanks so much for your work both on this plugin and also the Canadian plugin. Both are really great.

My VPN provider vpnuk.net provides OpenVPN access and I'm able to use Boxee on my apple tv if I ssh in and launch OpenVPN from the command line, but in addition to the certificates, I also need to provide a user name and password to log in. From the command line, OpenVPN prompts me for this right after I launch, but from the Boxee plugin, it just fails and the log says 'can't read auth username from stdin'.

Is there, or can there be, support for entering a username/password after connecting? To be clear, this is with OpenVPN, not PPTP or IPSec... and everything works great from the command line on my Apple TV, so it's all installed OK.

In OpenVPN, the method is --auth-user-pass and unfortunately, my provider does not allow the username password to be saved in a separate file (although I've put in a request for this).

Also, after a reboot, I got the same Cannot allocate TUN/TAP dev dynamically error that others have reported. I've tried to chown, rerun kextloader and reinstall smart installer and all report that they are already installed. I can just uninstall/reinstall, but can't seem to get this sorted out.

Again, a very big thanks!!

I too have the same problem with the user/pass. I havent found a solution yet but if I do I will pass it on. For the TUN/TAP error after a reboot I also faced this but was able to fix it by adding these two lines to the /etc/rc.local
/sbin/kextload -v /System/Library/Extensions/tun.kext
/sbin/kextload -v /System/Library/Extensions/tap.kext
You will need to sudo nano /etc/rc.local when you edit it.

Hope it helps a little.
Thanks

[RememberMe]

Thanks a lot mwpei for your hard work!

I have completed the transfer part of the plug-ins to the ATV.

I read most of the posts , unless I overlook, I am stuck at the tunnelblick.app since I have only the windows version of tunnelblick. Thus, the second part left needed help!

Sadly I don't have a mac, could any one give me instructions how to get mac version folder of the tunnelblick app after installation to transfer to ATV (still unsure this part).

Or can anyone send me the working tunnelblick folder configured on ATV so I can copy over my vpn config to get it working since I have VPN with Witopia but used it as windows version only.

Anyhelp is appreciated!

[tienshan]

If someone wants to figure out how to call openVPN with the below settings then I could add this to the app. Need to be able to call it via the commandline.

PPTP VPN connections can be made with the built-in networking on the Mac. The relevant command line daemon is vpnd (manual page here (http://developer.apple.com/documentation/Darwin/Reference/ManPages/man8/vpnd.8.html))

It would be brilliant if you could add this to your Boxee plugin. I use a UK-based VPN (Adtelly) to view iPlayer. The VPN service is over PPTP and authentication is purely server/username/password entered into networking panel on Mac which must be easy to replicate in command line, tho I'm no expert.

[nblit]

Hi mwpei,
I am using boxee on Ubuntu Jaunty.
The install of the vpn worked fine but when configuring a new vpn, when i try to select the file which contains the vpn configuration *.ovpn, the program hicks up and the browse screen reloads.

Thank you,

[paj]

I too have the same problem with the user/pass. I havent found a solution yet but if I do I will pass it on. For the TUN/TAP error after a reboot I also faced this but was able to fix it by adding these two lines to the /etc/rc.local
/sbin/kextload -v /System/Library/Extensions/tun.kext
/sbin/kextload -v /System/Library/Extensions/tap.kext
You will need to sudo nano /etc/rc.local when you edit it.

Hope it helps a little.
Thanks
Hi, in common with lots of others when running openvpn from the command line I have the "Cannot allocate TUN/TAP dev dynamically" error. On my system I didn't have the rc.local file - I created it (with correct permissions) and rebooted but still get the same error. Any ideas.
Thanks
--PAJ

[agreen91]

Hello,

Thanks so much for your work both on this plugin and also the Canadian plugin. Both are really great.

My VPN provider vpnuk.net provides OpenVPN access and I'm able to use Boxee on my apple tv if I ssh in and launch OpenVPN from the command line, but in addition to the certificates, I also need to provide a user name and password to log in. From the command line, OpenVPN prompts me for this right after I launch, but from the Boxee plugin, it just fails and the log says 'can't read auth username from stdin'.

Is there, or can there be, support for entering a username/password after connecting? To be clear, this is with OpenVPN, not PPTP or IPSec... and everything works great from the command line on my Apple TV, so it's all installed OK.

In OpenVPN, the method is --auth-user-pass and unfortunately, my provider does not allow the username password to be saved in a separate file (although I've put in a request for this).

Also, after a reboot, I got the same Cannot allocate TUN/TAP dev dynamically error that others have reported. I've tried to chown, rerun kextloader and reinstall smart installer and all report that they are already installed. I can just uninstall/reinstall, but can't seem to get this sorted out.

Again, a very big thanks!!

I use vpnuk.info and they do allow you to use a seperate file for username and password. The tunnelblink version of openvpn does not come with this option compiled as default. You have to recompile the openvpn binary with --enable-password-save option. ./configure --enable-password-save under the openvpn directory in tunnelblink

Ash

[moontan]

is anyone using this with ubuntu? if so can they provide instructions on how to set it up?

[culculapraline]

I've been readin so much and all I can see when I close my eyes are threads of those discussions.

I decided to join the forum cuz you guys seem qualified to give me closure.

What online content can I acces via boxee on my ATV? does the VPN plugin allow us canadians to go on HULU? if not, does the CTV lugin work cuz i followed instructions and I cant see any logos on the CTV page on boxee, i try clicking and get some funky symbols, but then i cant click on anything that works.

please help.

any clarification will be greatly appreciated!

[gavinbern]

Hello,

Thanks for the great work on the app. I am trying to install on my atv. I have signed up for an account with Witopia, but I need a copy of Tunnelbrick.app. Problem is I do not have an apple to install the application and copy the .app file to my ATV.

Could someone please send me tunnelbrick.app I would really appreciate it.

Thanks

[mwpei]

Hello all,

I have not been able to support my apps over the last few months and it is not looking like I will be able to support them any time soon so I am looking for someone to take over the development and support of this app (as well as the CTV app)

I will try to check back to see if there is any interest.

thanks,
mwpei

[dan11]

Hello,

Thanks so much for your work both on this plugin and also the Canadian plugin. Both are really great.

My VPN provider vpnuk.net provides OpenVPN access and I'm able to use Boxee on my apple tv if I ssh in and launch OpenVPN from the command line, but in addition to the certificates, I also need to provide a user name and password to log in. From the command line, OpenVPN prompts me for this right after I launch, but from the Boxee plugin, it just fails and the log says 'can't read auth username from stdin'.

Is there, or can there be, support for entering a username/password after connecting? To be clear, this is with OpenVPN, not PPTP or IPSec... and everything works great from the command line on my Apple TV, so it's all installed OK.

In OpenVPN, the method is --auth-user-pass and unfortunately, my provider does not allow the username password to be saved in a separate file (although I've put in a request for this).

Also, after a reboot, I got the same Cannot allocate TUN/TAP dev dynamically error that others have reported. I've tried to chown, rerun kextloader and reinstall smart installer and all report that they are already installed. I can just uninstall/reinstall, but can't seem to get this sorted out.

Again, a very big thanks!!

Did you get a solution? I'm using BlackVPN with Tunnelblick and have the same error! Also at the Terminal i get an error:


Thu Dec 10 17:36:58 2009 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Thu Dec 10 17:36:58 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Dec 10 17:36:58 2009 Cannot load CA certificate file ssl/ca.crt path (null) (SSL_CTX_load_verify_locations): error:02001002:system library:fopen:No such file or directory: error:2006D080:BIO routines:BIO_new_file:no such file: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib


Any help?:(

[ammc]

RE: Post of May 12th, 2009, 11:12 PM from hjubm2


Did you receive any replies to your request for help installing VPN to ATV via windows computer? Everyone on here seems to use Macs. If I can't get VPN working on ATV I'll be returning the ATV I bought a few days ago! I not thick, I'm just unfamiliar with Mac terminology. I can follow instructions, however, and am hoping somone in this forum has some help for us Windows lepers.

Thanks

[ammc]

Hello

I have managed to get OpenVPN installed by copying files from a kindly soul's Mac. I managed to get the VPN plug-in installed by adding the Canadian Content Repository mentioned elsewhere on this site. I am trying Witopia and it works though the UK VPN connection is only just fast enough to stream video (occasionally choppy). I would like to try and find a faster VPN service but most services other than Witopia seem to require that a username and password be entered and this is something that the Boxee plugin does not seem to support.

Apparently, you can specify in your config file that username and password should be read from a file but the openVPN binary has to have been compiled with the option "--enable-password-save" in order for this to be possible.

Would anyone be able to direct me to somewhere where I can download the openvpn binary (for Mac /Apple TV) that has been recompiled with the --enable-password-save option.
This would open up a lot more VPN service providers of ruse with the Apple TV.

Alternatively, perhaps the expert that created the Boxee VPN 2.0 application (thank you mwpei!) might be able to revise it to store user id and password and pass them to openvpn at execution time?

Thank you

Alastair

[ammc]

VPN Plugin 2.0 for ATV and Boxee Beta Problem

Has anyone tried reinstalling the VPN 2.0 with the new Boxee Beta? Mine had been working fine on alpha (thanks to numerous helpful posts here and especially from David Allonby at www.overplay.net who sent me a compiled binary of OpenVPN with "password save" enabled)

On Boxee Beta, which I installed today, running the VPN 2.0 plugin fails with a script error - something to do with the script line ending in COLOR])') - after having loaded the top part of the screen and the little "config" "crossed-tools" icon. I feel fairly sure this must be something straightforward and am looking forward to one of the helpful people on here seeing if they can help to diagnose the problem.

The boxee log shows the following, is it relevant?

2:57:17 T:2684407808 M: 3088384 INFO: Launching app: app://boxeeatca.vpn/
12:57:17 T:2684407808 M: 3067904 INFO: Loading skin file: DialogProgress.xml
12:57:18 T:2684407808 M: 3301376 INFO: Loading skin file: special://home/apps/boxeeatca.vpn/skin/Boxee Skin NG/720p/main.xml
12:57:18 T:2684407808 M: 3297280 WARNING: Skin has invalid include: Main_Menu_Fade_Animation
12:57:18 T:2684407808 M: 3297280 WARNING: Skin has invalid include: Main_Menu_Fade_Animation
12:57:18 T:54898176 M: 3297280 WARNING: CUtil::GetMatchingSource... no matching source found for [/Users/frontrow/Movies/OSBoot/private/var/]
12:57:18 T:2684407808 M: 3297280 WARNING: Skin has invalid include: Common_Main_Menu_Button
12:57:18 T:2684407808 M: 3297280 WARNING: Skin has invalid include: Common_Main_Menu_Button

and, for some reason, the icons that display aren't the nice shiny padlocks that seem to be the .png files, there is a rather plain yellow padlock.

[motd2k]

I've made a very early fork of this app on a repository at http://overplay.net/boxee.

It should work totally 'out-of-the-box' with www.overplay.net VPN accounts on the AppleTV, our US/UK/Irish/Swedish VPNs are pre-configured, and the openvpn binary is included in the AppBox.

When you start the app for the first time it'll prompt you for your overplay.net login - in the current version you must ensure this is correct, because i've not enabled any feedback for username/password failures yet (and once you've entered the username/password the only way to forget it is to uninstall the app, restart Boxee, and reinstall the app - far from perfect!)

mwpei, there was no license file, so I'm assuming GPL. If that isn't the case, please PM. I'll be fixing it up somewhat more over the next few weeks.

motd

[dshad]

HI.

I'd like to help you out on Boxee beta, but I don't even seem to be able to install it? I followed the instructions on page 1 (I did the same for alpha and it worked), but after movein folder to the Boxee/Userdata/apps and updating the sources.xml, the application won't show up in the Application page screen.

I also tried from the repository, but I don't see the app so that's why ùI tried a manual install.

How did you install it?

Thanks


P.S. Oh by the way, it's the 2.1 version I tried to install. Not the 2.0


VPN Plugin 2.0 for ATV and Boxee Beta Problem

Has anyone tried reinstalling the VPN 2.0 with the new Boxee Beta? Mine had been working fine on alpha (thanks to numerous helpful posts here and especially from David Allonby at www.overplay.net who sent me a compiled binary of OpenVPN with "password save" enabled)

On Boxee Beta, which I installed today, running the VPN 2.0 plugin fails with a script error - something to do with the script line ending in COLOR])') - after having loaded the top part of the screen and the little "config" "crossed-tools" icon. I feel fairly sure this must be something straightforward and am looking forward to one of the helpful people on here seeing if they can help to diagnose the problem.

[ammc]

dshad

I used Boxee App Box to add the repository http://boxeeatca.fileave.com. It then appeared on the list of new apps and I installed it from there

Alastair

[dshad]

Well... I see the new repository but don't see any new apps...

Weird...



dshad

I used Boxee App Box to add the repository http://boxeeatca.fileave.com. It then appeared on the list of new apps and I installed it from there

Alastair

EDIT: Ok I see: after installing the new repo, I have to SELECT it in order to see the new apps.

But I got SCRIPT Failed same as you... Hope it can be fixed!

[patr_1_8]

Hi, I am new at installing stuff like this but I was able to instal boxee and nitotv with no problems. For some reason I have tried many things but I just can't seem to figure out this one. I live in Canada and I need this app to watch videos. Is there anyone that can help me out with this, get me the new paths that I would need for the updated ATV and maybe some pointers and a revised step by step on installing this whole app from nothing.

Thanks in advance.

[motd2k]

I've updated the code on the repo at http://overplay.net/boxee to support both the Boxee beta and also to support Boxee installations running on OSX, as well as the original AppleTV version.

As before, this is preconfigured (and really easy to use) with http://overplay.net 's VPN servers.

[dshad]

I've updated the code on the repo at http://overplay.net/boxee to support both the Boxee beta and also to support Boxee installations running on OSX, as well as the original AppleTV version.

As before, this is preconfigured (and really easy to use) with http://overplay.net 's VPN servers.

I have Witopia as server... Is it something that can be fixed?

Thanks

[dgilbert2]

I've updated the code on the repo at http://overplay.net/boxee to support both the Boxee beta and also to support Boxee installations running on OSX, as well as the original AppleTV version.

As before, this is preconfigured (and really easy to use) with http://overplay.net 's VPN servers.

Can you still access Hulu with Overplay?

[motd2k]

Hulu should be fine, yes

[BritBloke]

I have Witopia as server... Is it something that can be fixed?

ThanksWitopia uses OpenVPN, the same as Overplay, so it's just a case of copying your Witopia settings over.

[dgilbert2]

Witopia uses OpenVPN, the same as Overplay, so it's just a case of copying your Witopia settings over.

Could you explain how to do this as I only have the .conf and .key files etc Witopia does not need a login name and password like overlay?

[dshad]

Could you explain how to do this as I only have the .conf and .key files etc Witopia does not need a login name and password like overlay?

I think Witopia have put our username and password in a config file somewhere... I tried to find them (I was in a hurry this morning) and couldn't find them...

If someone can tell us where to find the username and password Witopia uses in order to get logged in their VPN, please let us know. Then it will be easy to fix the config file.

[BritBloke]

Sorry, I thought that Overplay used SSL, not PPTP to login. Witopia uses SSL and so there's no username password, it's all done through .crt and .key files in the OpenVPN folder.

[dshad]

Sorry, I thought that Overplay used SSL, not PPTP to login. Witopia uses SSL and so there's no username password, it's all done through .crt and .key files in the OpenVPN folder.

So would it be possible for you to adapt it in order for us to use it with Witopia? It would be very kind of you!

[BritBloke]

So would it be possible for you to adapt it in order for us to use it with Witopia? It would be very kind of you!No, I don't think it would work as there's no user name associated with my SSL Witopia connection. I would have to create another PPTP account with Witopia but don't really need to as I already have their SSL service.

[fostewi]

Hi, after installing Boxee Beta and realizing all the great content I am missing being in Canada I decided to sign up for overplay.net so I could use this VPN plugin on my ATV (I tried Hotsheild first on my mac but it was just too slow). Having never installed an OpenVPN client on my ATV I am looking for some help. First, overplay has OpenVPN for download but it says it is for Leopard or above so I assume I should use "Tunnelbrick" for the ATV? I installed it on my Mac and it works (my mac is also an older PPC with Tiger) but am not sure how to get it on the ATV so that it works with the plugin.

Do I just copy the Tunnelbrick application to ~/Applications and the "openvpn" folder from my mac in my Application Support/Library directory to the same directory on the ATV (for the frontrow user)? Thanks!

EDIT : found the info after more searching...will try it out and come back for help if I can't get it working....

[fostewi]

OK, got it working...I was accidentally downloading from the old repository and when I got the new one it worked fine...thanks. Hulu is choppy (as most have said) but I can now access all the media that was previously not available.

However, I seem to have a strange Apple remote problem now. After using Boxee with VPN, when I go back to XBMC my Apple ATV remote no longer works (it works in frontrow, but not once I start XBMC). It's very strange, I had to reboot for it too work again (I tried killing the openvpn related processes and that did not work). I also tried using Boxee (without starting the VPN App) and was able to go back to XBMC without issue which is why I am assuming it is somehow related to VPN. However, I also updated XBMC to use the nightly builds yesterday which I suppose could be related..but does not change the fact that the remote stops responding only after using VPN (based on my experiences so far anyway)...any ideas?

[ammc]

Hello

Overplay.net's VPN plugin and service worked fine on boxee beta for me. I am also trialling another VPN provider that also worked fine until a few days ago when I had to reinstall Boxee. Now, using overplay.net I can connect fine, but using the other provider I get a "bus error" which also seems to ocurr if openvpn can't find the config files or if I enter a config filename that doers not exist (see below). I don't understand how it can fail to find the openvpn config file if I have already cd'd to the correct directory. Does anyone have any ideas I could pursue please? Thank you.



-bash-2.05b$ ls
Overplay - Ireland.conf acevpn-test.conf
Overplay - Sweden.conf acevpn-user.crt
Overplay - UK1.conf acevpn-user.key
Overplay - US-East.conf openvpn
Overplay - US-West.conf opexec
OverplayCert.crt overplay_user.pwd
aceuk.conf root.pwd
acevpn-ca.crt tap.kext
acevpn-pass tun.kext
acevpn-premium-udp-faster - UK.ovpn user.pwd
acevpn-premium-udp-faster - US.ovpn vpn.txt
-bash-2.05b$ sudo ./openvpn --config aceuk.conf Password:
Bus error
-bash-2.05b$ sudo ./openvpn --config doesnotexist.conf
Bus error
-bash-2.05b$

[minidriver]

Hello,

can you please help me. I want to use the BoxeeVPN in connenction with the Witopia gateway.
Is it possible to use the VPN client with Witopia "personalVPN™ – SSL (openVPN)" or do I have to get the "personalVPN™ – PPTP" witch seems to be slower.

Thanks a lot,
Patrick :D

[motd2k]

I've updated the repository at http://overplay.net/boxee to additionally support 32 and 64bit versions of Linux, as well as OSX and AppleTV. As before this should be compatible with both the Alpha and Beta versions of Boxee.

Whilst tested with Ubuntu 9.10, please view this as alpha quality under Linux at the moment. To recap, this is preconfigured with all files required to connect to Overplay's VPN servers, along with a quick GUI setup for username/passwords etc.

Under linux, you may need to run...



sudo apt-get install liblzo1 liblzo-dev libssl-dev


...in order to ensure the required libraries are available.

Note that the openvpn binaries (included) are compiled from SVN and source for them is available under GPL from http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn

[jaaps]

Nice app!
Worked on my linux box but not on my macbook. I looked at the source code and found two problems:

1: "pidloadFile +''+vpnFile" should be "pidloadFile +' '+vpnFile" (note the space)
2: chmod +x doesn't work because it tries to chmod "openvpn" while the binary in OS X is "openvpnOSX"

Thanks for your work on this! Works nicely after those two changes.

[motd2k]

Ah you're right - thanks for those jaaps... i broke the first rule of coding and didn't regression test after adding functionality :P

[minidriver]

Hello,

can you please help me. I want to use the BoxeeVPN in connenction with the Witopia gateway.
Is it possible to use the VPN client with Witopia "personalVPN™ – SSL (openVPN)" or do I have to get the "personalVPN™ – PPTP" witch seems to be slower.

Thanks a lot,
Patrick :D

Hey guys,
does nobody knows what type of account works on VPN2. :confused:
Would be nice if you can help me.

[neilio]

I just signed up with Overplay.net to see how its integration with the app works, and it doesn't seem to work on the latest beta builds. I'm seeing this error whenever I try to make a connection to any server:


2/8/10 5:02:40 PM [0x0-0x17c97c8].tv.boxee.boxee[5738] chmod: /Users/neilio/Library/Application Support/BOXEE/UserData/apps/overplay.vpn/openvpn/openvpn: No such file or directory
2/8/10 5:02:40 PM [0x0-0x17c97c8].tv.boxee.boxee[5738] sudo: /Users/neilio/Library/Application Support/BOXEE/UserData/apps/overplay.vpn/openvpn/opexec~/Library/Application Support/BOXEE/UserData/apps/overplay.vpn/openvpn/openvpnOSX: command not found

I've tried uninstalling and reinstalling but no dice. Any ideas?

[motd2k]

Thats the problem posted about a few messages up. I'll fix it up on the repo now.


EDIT: should be fixed on there now. It'll probably be a good idea to rm -Rf /Users/neilio/Library/Application Support/BOXEE/UserData/apps/overplay.vpn and then close/restart boxee and download the app again.

[neilio]

Thanks for the update. I just installed it (following your directions to rm the old app folder) and the two openvpn processes seem to launch successfully, but the connection doesn't work.

Also notable is the boxee process starts dumping a ton of stuff into the console, and the only way to stop it is to kill the openvpnosx process.


2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee R
2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee wRwrW
2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee R
2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee wrW
2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee Rw
2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee Rw
2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee RwrWrW
2/8/10 8:18:23 PM [0x0-0x17e97e8].tv.boxee.boxee Rw

[motd2k]

You can get rid of the RW spam by editing the .conf files and changing the number after the 'verb' to something lower... 3 usually is good.

Anyway, the RW indicates that traffic is being sent over the connection, so it's a good sign that its active - could you open a ticket at http://www.overplay.net/support and we can work with you to figure out what is going wrong (and then update this thread)

[neilio]

Thanks - that seems to have fixed that issue.

I'm still getting the username/password prompts every time I launch the app - is that expected?

[ro-76]

Thanks - that seems to have fixed that issue.

I'm still getting the username/password prompts every time I launch the app - is that expected?
I have that problem, and I also have a problem with BBC iPlayer. Without boxeeVPN I can see BBC iplayer load normally, with the various thumbnails for the videos. If I try to play a video, I get the location error. If I use BoxeeVPN, I can see that I successfully get a UK IP when I refresh, but iPlayer does not work. No thumbnails etc on the home screen, and a blank white screen when playing a video.

[motd2k]

Which OS/system are you using?

[rockboxee]

Hi

I get both of these issues on Snow Leopard.

--

I'm still getting the username/password prompts every time I launch the app - is that expected?

This first one I managed to work around by changing line 17 in main.xml
from

homePath = '~/Library/Application\ Support/BOXEE/UserData/apps/overplay.vpn'
to

homePath = '~/Library/Application Support/BOXEE/UserData/apps/overplay.vpn'

I.e. remove the escaping backslash before the space in the path.

If I don't,
os.path.exists will return false because
os.path.expanduser creates double backslashes.

--

No thumbnails etc on the home screen, and a blank white screen when playing a video.

For this second issue I can tell you that it's working fine if using overplay VPN from outside of boxee in Tunnelblick. Going back into boxee after connecting, all videos and other media play fine.

[ro-76]

Which OS/system are you using?

I'm using AppleTV with a fresh install using the http://www.green-light.ca/blog/2010/...ing-beta-baby/ method.

I connect fine using the BoxeeVPN app, I can refresh the IP after a few seconds and see that I have a UK IP.

When I launch the iplayer app, I can select a TV show but I then get to a white screen and nothing beyond that.

Without the VPN app setup, with my US IP, I get get an error that I am outside the US.

My problem is that I cannot figure out if this is a problem with BoxeeVPN, or with the iplayer app. I have even done a full fresh install of boxee, and still have this problem.

[motd2k]

Please could someone post a Boxee logfile from the whitescreen issue? I'm not all-together sure how it could possibly be connected to the VPN though, since the video playback via flash should be unaffected.

[ro-76]

Hi

I get both of these issues on Snow Leopard.

--


This first one I managed to work around by changing line 17 in main.xml
from

homePath = '~/Library/Application\ Support/BOXEE/UserData/apps/overplay.vpn'
to

homePath = '~/Library/Application Support/BOXEE/UserData/apps/overplay.vpn'

I.e. remove the escaping backslash before the space in the path.

If I don't,
os.path.exists will return false because
os.path.expanduser creates double backslashes.

--


For this second issue I can tell you that it's working fine if using overplay VPN from outside of boxee in Tunnelblick. Going back into boxee after connecting, all videos and other media play fine.

Thanks for that. Can you please tell me where main.xml is located? I've been looking everywhere and cannot find it.

Thanks

[ro-76]

Please could someone post a Boxee logfile from the whitescreen issue? I'm not all-together sure how it could possibly be connected to the VPN though, since the video playback via flash should be unaffected.

I have attached the log file.

Thanks

[motd2k]

main.xml is in ~/Library/Application Support/BOXEE/UserData/apps/overplay.vpn/skin/Boxee Skin NG/720p

[motd2k]

I've pushed a fix onto the repo with that escaping problem hopefully resolved. Unfortunately os.system requires the homePath to be escaped, so as a quick fix there are now two strings (one escaped, one not). I'm sure there's a much neater way of doing it in python, but this should work regardless.

[ro-76]

I've pushed a fix onto the repo with that escaping problem hopefully resolved. Unfortunately os.system requires the homePath to be escaped, so as a quick fix there are now two strings (one escaped, one not). I'm sure there's a much neater way of doing it in python, but this should work regardless.
Is the escaping problem the cause of the white screen?

[motd2k]

No, I can't recreate that problem i'm afraid. Its possible you need to use flash 10.

[ro-76]

I restored my ATV, installed the new beta with the new patchstick, removed the BoxeeVPN folder in apps/overplay.vpn and then installed BoxeeVPN again from the repo.

Now I enter my username and passwords, but when I connect to the UK VPN, it does not change to UK when I refresh.

Has anyone confirmed this to be working with the new beta?

Thanks

[rockboxee]

I'm not all-together sure how it could possibly be connected to the VPN though, since the video playback via flash should be unaffected.

Hi,
Maybe I misunderstood you but playing a flash video will involve accessing a URL of its location. So in my mind it's not unaffected.

Besides, in my case, it's not only flash video that stops working after connecting the VPN. Other data access fails like showing thumbnails and list TV show episodes. Things that work perfectly fine with VPN off.

From what I understand DNS issues are common with VPN and this feels like just that.

I plan on making a screencast showing exactly what happens and I'll post it here when.

cheers!

[ro-76]

Hi,
Maybe I misunderstood you but playing a flash video will involve accessing a URL of its location. So in my mind it's not unaffected.

Besides, in my case, it's not only flash video that stops working after connecting the VPN. Other data access fails like showing thumbnails and list TV show episodes. Things that work perfectly fine with VPN off.

From what I understand DNS issues are common with VPN and this feels like just that.

I plan on making a screencast showing exactly what happens and I'll post it here when.

cheers!
That's exactly how it works for me also.

Is anyone having success with an ATV?

[fr8d]

I've installed Boxee Beta on 2 separate Apple TVs. I haven't managed to make the overplay app work on any of them.

On one Apple TV, the app never asked for my overplay username & password. It just goes to the server page where, obviously, selecting any server doesn't lead to changing my IP address.

On my second Apple TV, I was able to enter all my credentials. However, selecting any of the available servers, doesn't seem to change anything. When I refresh my IP address, it still is the same...

Is there a way to solve this?

Thanks in advance,

[ro-76]

On my second Apple TV, I was able to enter all my credentials. However, selecting any of the available servers, doesn't seem to change anything. When I refresh my IP address, it still is the same...


I had this problem with the latest beta installed via the launcher menu, so I reverted to the http://www.green-light.ca/blog/2010/01/boxee-bleeding-beta-baby/ method, and now I can get it as far as chaning the IP. It still does not work with iPlayer.



Besides, in my case, it's not only flash video that stops working after connecting the VPN. Other data access fails like showing thumbnails and list TV show episodes. Things that work perfectly fine with VPN off.

From what I understand DNS issues are common with VPN and this feels like just that.

cheers!

I agree that it's a bigger problem than flash. I cannot access any new apps, or even the overplay repository once I have set the UK or IE VPN.

I still have not heard of a successful ATV user.

[fr8d]

[QUOTE=ro-76;88466]I had this problem with the latest beta installed via the launcher menu, so I reverted to the http://www.green-light.ca/blog/2010/01/boxee-bleeding-beta-baby/ method, and now I can get it as far as chaning the IP. It still does not work with iPlayer.

Would using this method allow me to watch hulu or any US based content? Or does it only go as far as changing the IP?

[fr8d]

I'm also getting a weird error message (RSA key has been modified) when I try to ssh my second Apple TV now... I wonder if this is related to the overplay plugin installation...

[dshad]

I'm also getting a weird error message (RSA key has been modified) when I try to ssh my second Apple TV now... I wonder if this is related to the overplay plugin installation...

I think you need to do this in the terminal of your Mac computer:

rm .ssh/known_hosts

And then try again.

[fr8d]

I think you need to do this in the terminal of your Mac computer:

rm .ssh/known_hosts

And then try again.

Thanks! It worked!

Has anyone managed to make Witpoia or overplay with a WRT54GL custom formware and Apple TV?

[motd2k]

I'll try installing the Boxee Beta on an ATV over the weekend, the plugin was tested on ATV using the official version of Boxee.

[ro-76]

the plugin was tested on ATV using the official version of Boxee.


I don't understand what you mean by "official". The only versions are alpha or beta. There are no other versions. What version have you used this with? Do you have a functional install at the moment?

[motd2k]

Well, no, there is no Beta officially for the AppleTV, as such it was tested on the 'official' alpha.

OSX and Linux were tested on Beta.

[ro-76]

Well, no, there is no Beta officially for the AppleTV, as such it was tested on the 'official' alpha.

OSX and Linux were tested on Beta.


OK. I understand. I might try to go back to the alpha myself. I have had nothing but trouble with the beta.

[ro-76]

I'll try installing the Boxee Beta on an ATV over the weekend, the plugin was tested on ATV using the official version of Boxee.
did you have any luck?

[rockboxee]

That's exactly how it works for me also.

Is anyone having success with an ATV?

I just bought an Apple time capsule and installed it between my cable modem and my mac mini. Previously the mac mini was connected directly to the cable modem.

The funny, and very good thing for me, is that the OverPlay app in Boxee now works without any issues.

So the issue must have been in the VPN communication with the cable modem.
Not with Boxee or the OverPlay app.

[shmootz]

I know you said that it will probably not work on Windows, but is there any way of getting it to work with Boxee on Windows 7?

Please help if anyone knows of a solution.

Thanks!
Adam

[durdedur]

Can anyone please confirm if this version and these instructions work on Boxee ver. 0.9.22 on the Mac? I've also tried to install on my Apple TV. Neither works

[durdedur]

Is the repository http://boxeeatca.fileave.com working? I can't seem to add it to my Boxee

[Cuban WhoDat]

Is the repository http://boxeeatca.fileave.com working? I can't seem to add it to my Boxee

me neither...

[matpol]

have a look at this: http://wtf.butcherbrand.ca/2010/09/15/reliable-openvpn-on-boxee/

[osmorgan]

Access Denied - Account Disabled

[darcilicious]

Access Denied - Account Disabled

You want to read the info contained in the link in the post right above yours.

[matpol]

@darcilicious Saying that I am not sure the overplay repo is working either? Anybody had any luck with it?

I cannot access it in boxee at the mo as I have a problem connecting to anything on the internet in boxee at the mo.

[matpol]

I have managed to access this now!

[motd2k]

I've updated the OverPlay repo with a few fixes to allow it to work with the latest Beta on Ubuntu 10.04.

We're also working on a total rewrite which will enable access to all 22 Countries we provide VPN servers in, with a much tidier UI and Windows support. Stay tuned to http://www.overplay.net/blog for updates.

[jcdtv]

i had a little hack around the UI, and changed the god awfull yellow text on START/STOP (please god think of the children!!).

I noticed a few little things missing that i would suggest and that i managed to implement in it fairly easily.

On startup, do a telnet check to see if OpenVPN console is open still, and prompt to stop first/continue or similar.

I change the last tab to a status button, that updates when you start/stop.

I also edited it manualy, so it gives a Red Text/IP if the location is not what you expect. Green if it is. (e.g. want United States for HULU etc) gives red for other locations but green for United States).

[jcdtv]

I know you said that it will probably not work on Windows, but is there any way of getting it to work with Boxee on Windows 7?

Please help if anyone knows of a solution.

Thanks!
Adam

The script dosnt have any win32 detection that i can see so by default it wont work.

However it should be possible, as u can run the OpenVPN connection the same on windows as its being done on linux.

The only thing that stops it working easily is it needs a Windows Build of OpenVPN with ( ./configure --enable-password-save ) , By default its turned off so you cant load the passkey file.

[motd2k]

The problem is more to do with UAC and the admin permissions required to update the routing table on Windows. If UAC is disabled, and Boxee is run as an admin account then yes, its very simple.

Building the binary with --enable-password-save is a 10 second job.

[dmets]

This may be two very silly questions - but...

1) Is there link to a build out there for Windows 7 64bit that I can download that has already been compiled with the "--enable-password-save" option?

2) If not, is it possible for me to down load the source and compile it myself? I have Win7 only - I don't have any development tools.

Thanks.

[kara]

I'm using ibVPN (http://www.ibvpn.com). Does anyone know how can i integrate this vpn service with boxee?

[darcilicious]

What do you mean by "integrate" precisely and are you running Boxee software on a computer or the Boxee Box?