Page 4 of 4

Re: widget v3

Posted: Tue Mar 26, 2019 2:48 am
by DudeOfLondon

I got a problem though.
When using UDP I can't browse any site, it hangs there on "TLS handshake with ..." in the browser status line.
Doesn't matter which server or ECC cuve. Also tried different ports, doesn't matter, it does not work with UDP.
When switching to TCP I can browse the web.

What can I do? WHy does UDP not work? I'm on Windows 10, no firewall insalled except the win10 integrated one.

EDIT: Same exact problem and behavior on my android device!

Re: widget v3

Posted: Tue Mar 26, 2019 4:41 am
by DudeOfLondon
So it seems this must be an MTU problem that is only present when using UDP.
I found out that the MTU of my router is 1440 for the bonding tunnel of the DSL+LTE connection.
Minus 28 for UDP should be a link mtu of 1412 and a tunnnel MTU or tun-mtu of 1362.

If I edit the OVPN config file and enter tun-mtu=1362 internet works on my android. (or enter 1362 in the tunnel mtu field of the GUI of Anre Schwabe's app).

But how can I edit the inbuilt configs of the widget to use a different MTU than default?

Re: widget v3

Posted: Tue Mar 26, 2019 10:31 pm
by AnonAsPossible
I don't use their widget, only the openvpn gui.

You should contact their support at; , the response is usually quite fast.

And post their response here, so we can all learn...

Re: widget v3

Posted: Mon Apr 08, 2019 5:34 am
by df
DudeOfLondon: secp521r1 is default because it is more secure than Ed448 or Ed25519, but because it's an NIST curve we decided to also provide Ed25519/Ed448 options.
And there's no such thing as security overkill :-P

Re: widget v3

Posted: Fri May 24, 2019 6:37 pm
by Moonlight
Win 10 Pro x64 OS Build 18362.116

Clean install CS widget

All security options checked

When connecting to Switzerland or Frankfurt, option to select IP is no longer available (was yesterday).

Thank you.

Re: widget v3

Posted: Sun May 26, 2019 11:15 pm
by df
My guess would be a DNS issue. Switzerland currently has 26 IPs, and Frankfurt has 28. Only way I could see the widget not displaying the select IP window is if somehow the host was resolving to only one IP.
If you mean that option doesn't show up at all in the widget's options, then that might be possible if your screen's resolution is very low. The option is at the bottom of the connecting window, so if the screen's too small it might cut off that bit. That build does have code in it though that should detect things like that so that the option is still displayed correctly, but it's possible that there might be something missing in the code causing it not to work on your system.
Anyways, you can enable it manually by editing c:\Program Files (x86)\Cryptostorm Client\user\config.ini and changing the dnschoice_opt line to dnschoice_opt=on
(You'll need admin access to write to that file, so use Notepad++ since Notepad++ will automatically switch to admin mode when you try).

Re: widget v3

Posted: Tue May 28, 2019 9:27 am
by Moonlight

Did the modification to the config.ini as suggested, and it's now working! :D

Tried on a different PC with the same build and it's working, so the problem is with the PC I'm using, will rebuild it in due course.....

Thank you very much for your time and prompt help! :D

Re: widget v3

Posted: Thu Jul 18, 2019 11:36 am
by Behoove
As of yesterday (IIRC), I'm getting a hang in the app: "Disabling STUN/WebRTC leak protection...".
  • I reinstalled twice over these last two days to try and fix. Also did the advanced windows firewall reset just in case.
  • On startup, the status locks up showing "Enabling STUN/WebRTC leak protection...".
  • Selecting / Deselecting the "Enable STUN/WebRTC leak prevention" under Security tab, then hitting the "Back" button results in the hang every time now.
  • Only way to even exit the program is to manually kill all the CS processes; as the 'Close Window' button hangs it the same as 'Exit' button.
Some part of this process doesn't rely on IPv6, does it?

Windows 7 x64 on AMD
CS Widget client v3.42
Latest TAP driver
CS and TAP directories added to AV exclusion list
Connect on port 5062
IPv6 and Teredo blocked in Win Firewall beforehand, also de-selected in adapter configs.

Re: widget v3

Posted: Sat Jul 27, 2019 12:08 am
by df
with the widget closed, open up c:\Program Files (x86)\Cryptostorm Client\user\config.ini in Notepad++ (since it needs admin privs) and change the line:
then restart the widget.