widget v3

Looking for a bit more than customer support, and want to learn more about what cryptostorm is , what we've been announcing lately, and how the cryptostorm network makes the magic? This is a great place to start, so make yourself at home!
DudeOfLondon
Posts: 84
Joined: Sat Jan 10, 2015 5:14 pm

Re: widget v3

Post by DudeOfLondon » Tue Mar 26, 2019 2:48 am

Thanks.

I got a problem though.
When using UDP I can't browse any site, it hangs there on "TLS handshake with www.12324.com ..." in the browser status line.
Doesn't matter which server or ECC cuve. Also tried different ports, doesn't matter, it does not work with UDP.
When switching to TCP I can browse the web.

What can I do? WHy does UDP not work? I'm on Windows 10, no firewall insalled except the win10 integrated one.

EDIT: Same exact problem and behavior on my android device!

DudeOfLondon
Posts: 84
Joined: Sat Jan 10, 2015 5:14 pm

Re: widget v3

Post by DudeOfLondon » Tue Mar 26, 2019 4:41 am

So it seems this must be an MTU problem that is only present when using UDP.
I found out that the MTU of my router is 1440 for the bonding tunnel of the DSL+LTE connection.
Minus 28 for UDP should be a link mtu of 1412 and a tunnnel MTU or tun-mtu of 1362.

If I edit the OVPN config file and enter tun-mtu=1362 internet works on my android. (or enter 1362 in the tunnel mtu field of the GUI of Anre Schwabe's app).

But how can I edit the inbuilt configs of the widget to use a different MTU than default?

AnonAsPossible
Posts: 21
Joined: Fri Feb 10, 2017 3:49 am

Re: widget v3

Post by AnonAsPossible » Tue Mar 26, 2019 10:31 pm

I don't use their widget, only the openvpn gui.

You should contact their support at; support@cryptostorm.is , the response is usually quite fast.

And post their response here, so we can all learn...

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Mon Apr 08, 2019 5:34 am

DudeOfLondon: secp521r1 is default because it is more secure than Ed448 or Ed25519, but because it's an NIST curve we decided to also provide Ed25519/Ed448 options.
And there's no such thing as security overkill :-P

Moonlight

Re: widget v3

Post by Moonlight » Fri May 24, 2019 6:37 pm

Win 10 Pro x64 OS Build 18362.116

Clean install CS widget 3.42.0.17

All security options checked

When connecting to Switzerland or Frankfurt, option to select IP is no longer available (was yesterday).

Thank you.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sun May 26, 2019 11:15 pm

@Moonlight
My guess would be a DNS issue. Switzerland currently has 26 IPs, and Frankfurt has 28. Only way I could see the widget not displaying the select IP window is if somehow the host was resolving to only one IP.
If you mean that option doesn't show up at all in the widget's options, then that might be possible if your screen's resolution is very low. The option is at the bottom of the connecting window, so if the screen's too small it might cut off that bit. That build does have code in it though that should detect things like that so that the option is still displayed correctly, but it's possible that there might be something missing in the code causing it not to work on your system.
Anyways, you can enable it manually by editing c:\Program Files (x86)\Cryptostorm Client\user\config.ini and changing the dnschoice_opt line to dnschoice_opt=on
(You'll need admin access to write to that file, so use Notepad++ since Notepad++ will automatically switch to admin mode when you try).

Moonlight

Re: widget v3

Post by Moonlight » Tue May 28, 2019 9:27 am

@DF

Did the modification to the config.ini as suggested, and it's now working! :D

Tried on a different PC with the same build and it's working, so the problem is with the PC I'm using, will rebuild it in due course.....

Thank you very much for your time and prompt help! :D

Behoove

Re: widget v3

Post by Behoove » Thu Jul 18, 2019 11:36 am

As of yesterday (IIRC), I'm getting a hang in the app: "Disabling STUN/WebRTC leak protection...".
  • I reinstalled twice over these last two days to try and fix. Also did the advanced windows firewall reset just in case.
  • On startup, the status locks up showing "Enabling STUN/WebRTC leak protection...".
  • Selecting / Deselecting the "Enable STUN/WebRTC leak prevention" under Security tab, then hitting the "Back" button results in the hang every time now.
  • Only way to even exit the program is to manually kill all the CS processes; as the 'Close Window' button hangs it the same as 'Exit' button.
Some part of this process doesn't rely on IPv6, does it?

Windows 7 x64 on AMD
CS Widget client v3.42
Latest TAP driver
CS and TAP directories added to AV exclusion list
Connect on port 5062
IPv6 and Teredo blocked in Win Firewall beforehand, also de-selected in adapter configs.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Jul 27, 2019 12:08 am

@Behoove
with the widget closed, open up c:\Program Files (x86)\Cryptostorm Client\user\config.ini in Notepad++ (since it needs admin privs) and change the line:
nostun=on
to
nostun=off
then restart the widget.

User avatar
marzametal
Posts: 434
Joined: Mon Aug 05, 2013 11:39 am

Re: widget v3

Post by marzametal » Fri Nov 15, 2019 6:05 am

I recently upgraded to the latest version of the widget.
This time around, the widget actually completes executing the killswitch (before it stopped on one of the exit nodes).

However, the widget now changes my dns to 127.0.0.1, which results in no chance in connection.
I have to use the Cloudflare 1.1.1.1 dns if I want to connect.
This did not happen with the previous release, which let me connect automatically.

NOTE: This is not the error with the tap adapter, a different error pops up. I will disconnect and connect again to provide a print screen.
DNS error message
DNS error message

User avatar
sysfu
Posts: 54
Joined: Mon Nov 24, 2014 10:22 am

Re: widget v3

Post by sysfu » Sat Nov 23, 2019 4:49 am

marzametal wrote:
Fri Nov 15, 2019 6:05 am
I recently upgraded to the latest version of the widget.
This time around, the widget actually completes executing the killswitch (before it stopped on one of the exit nodes).

However, the widget now changes my dns to 127.0.0.1, which results in no chance in connection.
I have to use the Cloudflare 1.1.1.1 dns if I want to connect.
This did not happen with the previous release, which let me connect automatically.

NOTE: This is not the error with the tap adapter, a different error pops up. I will disconnect and connect again to provide a print screen.

dns.jpg
Can confirm the same issue on Windows 10 1909 with 3.43 CS Widget.

The Widget also hangs when disconnecting, process must be terminated forcefully to recover.

Moonlight

Re: widget v3

Post by Moonlight » Mon Nov 25, 2019 4:59 am

Had the same issue as marzametal last month (didn't have that issue prior) under win10 1903. So I changed to "Obtain DNS server address automatically" and it worked without the error message.

Under win10 1909, it's the opposite. I have to select "Use the following DNS server addresses:" and input 127.0.0.1 for both the cs and ethernet adapters, and I don't get the error message. Once connected, I checked both adapters and the option "Use the following DNS server addresses:" has been changed automatically back to "Obtain DNS server address automatically".

Under both above instances, I have IP selection on (widget 3.43.0.19).

I have another PC, and had no issue at all under both win10 1903 and then 1909 (same physical specs and same ethernet adapter).

In regard to the "The Widget also hangs when disconnecting..." I always had to use the Task Manager except when connected for less than a couple of hours (under both PCs).

Above issues are a very small hassle but not consequential as long as I can connect.

reCAPTCHA is now implemented.

Moonlight

Re: widget v3.44.0.1

Post by Moonlight » Fri Feb 26, 2021 3:33 pm

win 10 x64 os build 19042.844

v3.44.0.1 doesn't work, user account control panel doesn't even come up

installed 3.44.0.1 by clicking yes to the updated version available, no go

so downloaded the widget separately from cryptostorm.is, doesn't work either

uninstalled and did a fresh install, no go too

noticed that v3.44 is 10.5MB vs 17.3MB for v3.43

went back to v3.43

Moonlight

Re: widget v3.44.0.2

Post by Moonlight » Sat Feb 27, 2021 10:33 am

v3.44.0.2 is now working! :thumbup:

one little hiccup, before i connect, is if i click to update the list of nodes, the application close/disappear, but it's still running in the background (cs-dnsc-p.exe (32 bit) is still being listed in task manager), on clicking again the cryptostorm client the application re-open without mentioning that another instance is already running.

also, i noted on opening the widget, a list of instructions that were running/appearing (at the bottom window of the widget) in v3.43 is now absent/invisible (e.g. enabling stun/webrtc leak protection, blocking protocols ... etc).

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Feb 27, 2021 11:12 am

Yea, was gonna mention here that 3.44.0.1 had a bug in it that caused the whole thing not to display. Some obscure TCL lib issue, took a minute to figure out. That's why I didn't use PAR::Packer or perl2exe in the past, because Cava Packager didn't have an issue with TCL. but Cava causes it to load really slowly.
3.44.0.2's TCL issue should be fixed now, but I noticed there's still an issue of something else not working correctly on 32-bit Windows, I'll fix that soon. There's also a 32-bit TAP issue that stems from https://community.openvpn.net/openvpn/ticket/592 (6 yr old issue, still getting comments), but I think I can fix that too by replacing tap32.exe with the newer tapctl.exe.

v3.44.0.2 was several different build attempts, which is why I didn't announce it yet. The list of instructions part should be there in the status bar, just above the black window. Everything in the black window has almost always been OpenVPN output and nothing else.
I see the update node list issue you're talking about. It doesn't show up in perl, but it does when I compile the script into an .exe. I'll try n figure out why it's doing that. And the cs-dnsc-p.exe issue should be easy enough to fix, just need an extra check on exit if it's running (or just blindly kill any 'cs-dns-p.exe' process on exit).

For now, just don't click the update button :-P there's no other new servers anyways, the node list v3.44.* has is the most recent.

noplanman
Posts: 3
Joined: Sun Feb 28, 2021 4:35 am

Re: widget v3

Post by noplanman » Sun Feb 28, 2021 4:38 am

I'm faced with the same issue of having updated and now the widget isn't showing up at all.

Where can I download older versions? Seems to me the versioning of the client doesn't really exist and only finding a single link to the latest version is very unhelpful.

Can anybody point me to a place where older versions can be downloaded directly?

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sun Feb 28, 2021 4:46 am

@noplanman
I'm working on a new version that should fix whatever issue some people are having. In the meantime, there is an older version at https://cryptostorm.is/setup.exe that seems to work for everyone.

noplanman
Posts: 3
Joined: Sun Feb 28, 2021 4:35 am

Re: widget v3

Post by noplanman » Sun Feb 28, 2021 5:08 am

Thanks for the link @df, will give it a shot when I have time and let you know 👍

Regarding the question of versioning, is there some place where the development is happening openly?
I saw the GitHub repo is pretty much abandoned, right?

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sun Feb 28, 2021 9:11 am

@noplanman
GitHub is still used for the configs and deepdns info, but the other repos there are abandoned. There's no real versioning system in place for the widget since (normally) we don't want people using an older version. But with the most recent update some major changes were made that could cause errors like we're seeing now, so it might be a good idea to at least keep around the previous version.

noplanman
Posts: 3
Joined: Sun Feb 28, 2021 4:35 am

Re: widget v3

Post by noplanman » Mon Mar 08, 2021 3:35 pm

@df, the older version is working, thanks again.

Any update on the new release?

I understand the reasoning to make sure people use the latest version, but as you say, having at least 1 "back up" version does make sense.
Well, it totally gets my vote anyway 😉

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Mon Mar 08, 2021 11:39 pm

@noplanman
I'm still working on the latest release. I thought I fixed an issue where an embedded Tcl library .dll sometimes wasn't included, but I'm running into some very odd bugs in the core Perl libraries, or rather in the way perl2exe embeds those libraries into client.exe. I really want to use perl2exe though because the thing I used to use (Cava Packager) takes way too long to start up client.exe. I just have to rewrite some of the widget's code because regular threads aren't working correctly.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sun Mar 14, 2021 1:24 am

Alright, v3.45 is out now. I'm pretty sure I fixed all the bugs that were in 3.44. Tested on 64-bit Windows 7, 8.1, 10, and 32-bit Windows 7. Only issue I found was on the 32-bit Windows 7 VM where the TAP adapter wouldn't install because of some stale ones that were on the system. After a clean OS install the widget and the TAP adapter installed correctly.

I couldn't see a difference in speeds between 32-bit and 64-bit Windows, so instead of dealing with 32 and 64-bit copies of the same program (OpenVPN + OpenSSL + tap utilities), everything is 32-bit now. That cleared out some code, which means the widget should load faster now. Also got rid of all the AES-NI detection crap, and the RSA-if-32bit code since ECC & OpenVPN 2.5.1 works fine on 32-bit. Now, if you really want to use RSA, you can do so from Options -> Securty -> TLS cipher. It'll still use ChaCha2020/Poly1305, but on top of ECDHE RSA. That's only if you want to use RSA though, which you shouldn't. Default TLS cipher is still secp521r1. Ed25519 or Ed448 still available too.

Main problem with v3.44 is that I switched from Cava Packager (which bundles modules/submodules correctly) to Perl2Exe (which doesn't bundle modules/submodules correctly). But Perl2exe creates a client.exe that loads a lot faster (~2-5 secs, Cava's is ~20-40 secs), so I really wanted to switch to that. With all of Perl2Exe's bundling fumbling, it was looking for the TCL .dll's (among other things) in the wrong places, that's why the GUI wouldn't load at all for most people trying to use 3.44. Those issues should be fixed in v3.45.

Moonlight

Re: widget v3.45.0.1

Post by Moonlight » Sun Mar 14, 2021 8:05 am

win 10 x64 os build 19042.867

was on 3.44.02, 3.45.0.1 install completed.

running 3.45.0.1 stops at "Installing tap driver" then get following error message:

cs_3.45.0.1.png
cs_3.45.0.1.png (10.51 KiB) Viewed 174369 times
In control panel there was no TAP adapter listed.

Noticed that TAP-Windows 9.21.2 x64 was installed, so uninstalled it, and re-installed 3.45.0.1, TAP-Windows 9.21.2 x64 was reinstalled. Still the same error message when running 3.45.0.1.

After a reboot, did a fresh install of 3.45.0.1 with same error message when running it.

3.44.0.2 is no longer working for me either i.e. hanging when trying to connect, so went back to 3.43.0.19.

Moonlight

Re: widget v3.45.0.2

Post by Moonlight » Mon Mar 15, 2021 3:17 pm

v3.45.0.2 (over 3.43.0.19), all good! :thumbup:

Thank you.

P.S. for feedback purpose only - 3.45.0.1, tried to install as per your request with the given link but it didn't work.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Mon Mar 15, 2021 3:39 pm

I found the main issue with v3.45.0.2 and versions before it, some core features in the language itself were broken like backticks for executing commands (needed to get the OpenVPN/OpenSSL versions, run the firewall stuff, etc. etc.), certain file system functions, and probably some other things. It would run correctly from client-debug.exe or if client.exe was started from an admin command prompt, or from the installer, but if you run it again from it's desktop/startmenu shortcut, the bugs would show up and the VPN won't start. These bugs are all caused by the way Perl2Exe (insufficiently) tries to scan and bundle the required modules, so I'm giving up on the idea of switching to that for packaging.

I just put v3.45.0.43 up on the website, that one's back to the old Cava Packager, and it doesn't seem to have any of those bugs. Tested on several VMs (win7, 32-bit win7, win8.1, win10) and it connects just fine. The whole reason for switching to Perl2Exe from Cava was that Cava was taking 20-30 seconds to load the GUI, but in my tests just now it only took about 3 seconds. Not sure if that's because some of the fixes for Perl2Exe's bugs are still in the widget, causing modules to load more efficiently, or maybe because Tcl is now included separately in the installer instead of bundled into the .exe, but at any rate, it loads just as fast now and seems to work well :-)

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Tue Mar 16, 2021 10:56 am

Found another bug, in the latest v3.45.0.43 (and possibly previous versions). If "Global random" is selected, the widget fails to resolve the hostname. I'm also seeing gethostbyname fail to resolve the node if you connect with DNSCrypt enabled, disconnect, disable DNScrypt, then try to reconnect. Trying to pinpoint why that's happening.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Sat Mar 20, 2021 9:32 pm

Why we haven't a good widget also for Osx? I can't understand. Please @df buy a mac, we need a good widget also for Osx. Or buy a dev to do it, it's necessary.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Mar 20, 2021 9:45 pm

@lajola
Tunnelblick and Viscosity work just fine on Mac OS X

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Thu Apr 08, 2021 3:12 am

v3.46.0.46 released - https://cryptostorm.is/cryptostorm_setup.exe
  • Feature: SSH and HTTPS tunneling now built into the widget. They're under Options -> Advanced.
    With SSH you can select the tunnel host (has to be different than the VPN node you're connecting to). With HTTPS it'll tunnel through the node you're connecting to, but since the server-side stunnel is doing round-robin balancing against all the server's IPs, the exit IP you get will most likely be different than the one you're connecting to.
  • Change: OpenSSL upgraded to the latest 1.1.1k
  • Change: Instead of dealing with 32-bit and 64-bit copies of all the .exe/.dll's, just doing 32-bit only since there's not really any performance difference with 32-bit and 64-bit OpenVPN. Should make things easier on 32-bit Windows users.
  • Change: Removed the fallback to Cloudflare's 1.1.1.1 DNS server when DNSCrypt fails. The only way that would happen now is if all of the DNSCrypt servers are unreachable, which is unlikely to happen (unless you're offline, in which case you wouldn't have been able to reach 1.1.1.1 anyways).
  • Change: For the backend Tcl/Tk that powers the GUI, switched from ActiveTcl to IronTcl because I think it's neat :-P
  • Bugfix: If you had a regular token in the token text box then selected Cryptofree and exited, the widget would forget your token. Now it won't do that.
  • Bugfix: Some code was iterating through the network adapters list via the registry, but there was a bug where it would keep looping and creating subkeys until a limit was reached. This is what was causing the widget to take so long to start or disconnect/exit, especially when restoring DNS settings on exit (like if DNSCrypt was enabled). Now it starts/exits/disconnects much faster.
  • Bugfix: The SOCKS port under Options -> Advanced sometimes wasn't getting saved correctly on exit, would affect people using Tor Browser's built-in local SOCKS server to do Tor -> CS.
  • Bugfix: Some missing logic was causing autoconnect to fail, mostly when Cryptofree was selected. Should be good now.
  • Bugfix: Removed the "--dev-node cryptostorm" OpenVPN option that forced the widget to use a TAP adapter named "cryptostorm", because sometimes OpenVPN would detect the adapter but Windows wouldn't.
  • Bugfix: Found a bug in the Net::DNS::Resolver module that was being used to pre-resolve the VPN hosts against the local DNSCrypt server (so the user could choose their exit IP, if that option was enabled). The bug would sometimes cause DNS to fail even when the DNSCrypt server was up and running correctly. The idea was to use that module so the DNS didn't need to be set system-wide to DNSCrypt, but the widget does that anyways, so Net::DNS::Resolver isn't necessary.
  • Bugfix: Sometimes the system tray icon would disappear if grouped under hidden icons. Now it should stay visible even if it gets sent there.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Thu Apr 08, 2021 10:13 am

v3.47.0.49 released - https://cryptostorm.is/cryptostorm_setup.exe
  • Bugfix: The bugfix in 3.46 where the widget would forget your token added a dumb bug where Cryptofree would complain about no token being entered (which you can't do when Cryptofree is selected). Added the missing code, all good now.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Thu Apr 08, 2021 10:26 pm

I have had this problem for many versions, I don't remember when it started, obviously I'm on windows 10: the first connection to a server is always successful, but after I have disconnected there is no longer an internet connection working even if there are no obvious errors. In fact, if I try to reconnect the vpn the app crashes on "Connecting". As if there was a DNS problem. Basically it is impossible to navigate, tried anything. The only way to browse again is to reboot the system.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Thu Apr 08, 2021 10:44 pm

@lajola
Are you seeing the same problem in v3.47.0.49?
My guess would be DNS related, but the widget should tell you if it can't resolve the VPN host you're connecting to. Either that or the kill-switch was enabled (or in a weird half-enabled state). Could check the Windows Firewall rules to see if there's anything in there that's blocking.
I do remember seeing a weird bug in OpenVPN's TAP driver where it would go into an odd semi-immutable state where you can't change or access any setting on it. But when I ran into that bug it only stopped the TAP adapter from working, not the other network adapters.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Fri Apr 09, 2021 12:03 am

Yes, same problem with last version 3.47.0.49.
The first connection with the widget works without problems. But after disconnected there is no more connection. Nothing. The only way is a windows reboot.
Don't remember if kill switch was enabled. I use the standard windows 10 firewall and i never touched it.

So what you need to fix this weird bug? I can't reboot honestly every connection.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Fri Apr 09, 2021 12:14 am

I tested on Windows 10, not seeing the issue you're describing. Check in Options -> Security and see if the kill switch is enabled. The kill switch uses the Windows Firewall, so even if you've never used it before there might be some old rules leftover in there from the widget. Try disabling DNSCrypt in there too. If that's enabled and the DNS isn't getting restored on disconnect then it would cause DNS failures. There's also a big button in Options -> Advanced that says "Reset DNS to DHCP". Try clicking that after disconnecting and see if your internet works then.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Fri Apr 09, 2021 12:18 am

df wrote:
Fri Apr 09, 2021 12:14 am
I tested on Windows 10, not seeing the issue you're describing. Check in Options -> Security and see if the kill switch is enabled. The kill switch uses the Windows Firewall, so even if you've never used it before there might be some old rules leftover in there from the widget. Try disabling DNSCrypt in there too. If that's enabled and the DNS isn't getting restored on disconnect then it would cause DNS failures. There's also a big button in Options -> Advanced that says "Reset DNS to DHCP". Try clicking that after disconnecting and see if your internet works then.
Tried. KS was disabled like all other options.
"Reset DNS to DHCP" doesn't fix the problem. Tried many times. It deletes my google dns insert by me.

Which are the kill switch rules remained in the firewall?

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Fri Apr 09, 2021 12:50 am

Ok these are the problems:

1) reboot windows
2) connect with cryptostorm widget
3) disconnect with cryptostorm widget
4) web surfing/connection is not more available
---
5) cryptostorm tap adapter is still ENABLED but CONNECTED
6) manullay disabled it
7) manually enabled it again but now is DISCONNECTED
8) now web surfing/connection is available and working!
---
9) tried again a new vpn cryptostorm connection but doesn't work because widget can't move the TAP adapter from ENABLED(disconnected) to CONNECTED
10) close widget
11) reopen widget and try a new connection
12) now cryptostorm widget can move the TAP adapter from ENABLED(disconnected) to CONNECTED
13) VPN is working
---
14) from point 3

Now why widget can't do all this automatically?

Moonlight

Re: widget v3

Post by Moonlight » Fri Apr 09, 2021 1:48 am

@df

win 10 x64 os build 19042.906

Security Tab: All options checked

v3.46.0.46 :thumbup:

v3.47.0.49 :thumbup:

Thank you.

P.S. Had same issue as lajola but with v3.43.0.19 and a few prior versions only and with Killswitch on. When exiting at that time with Killswitch off, had to wait a few minutes before being able to connect to the internet, or alternatively reboot.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Fri Apr 09, 2021 5:06 am

@lajola
The widget isn't what's changing the TAP adapter from connected/disconnect, that's all handled by OpenVPN. Remember, the widget is mostly just a GUI frontend to OpenVPN. You might be running into that TAP bug I saw a few times where it's state would become unchangeable until a reboot. The TAP adapter the widget comes with is older because the newer ones require different privileges and signing methods, but it might solve your problem if you remove that TAP adapter (from the device manager or network connections window), then install the latest TAP adapter from https://build.openvpn.net/downloads/rel ... stable.exe
There's a few newer versions at https://build.openvpn.net/downloads/releases/ too that might include fixes for that bug, though they might still be in a testing phase.

EDIT:
I am still seeing an issue where it takes about 5-20 seconds for the internet to become reachable after connecting to the VPN, but only in win7. This doesn't seem to be caused by the VPN though, it's caused by Windows and a lag before ipconfig /registerdns kicks in (or it might be that the route additions are taking a while for Windows to recognize them). It might help to change that one --ip-win32 setting in Options -> Advanced to ipapi or netsh (or it might break things altogether, who knows with Windows).

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Fri Apr 09, 2021 10:15 pm

This new tap version doesn't solve the problem. Not only, when i try the crypto connection the widget install the own tap driver so now i have 2 tap drivers connected and enabled together. When i disconnect from widget now both remain enabled and the vpn connection is still ENABLED! So with this new one problem is still there.
Please you need to solve this bug with windows 10.

Edit: now i have uninstalled all tap drivers but now when i try to connect from widget, this last can not install its tap driver anymore. So no more connection with vpn. So how can solve this problem?

Edit2: installed the "original" from cryptostorm folder in /Programs

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Fri Apr 09, 2021 10:53 pm

@lajola
forgot to say, when you install the new one, you need to go into network connections and rename that TAP adapter to "cryptostorm"

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Fri Apr 09, 2021 10:54 pm

df wrote:
Fri Apr 09, 2021 10:53 pm
@lajola
forgot to say, when you install the new one, you need to go into network connections and rename that TAP adapter to "cryptostorm"
Yeah done, but problem is still there :( this bug is really tedious

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Fri Apr 09, 2021 10:58 pm

Trying again with last new tap driver linked previously. With new tap driver i see this thing: only if i exit from widget the tap goes in disconnect and standard connection is working again. We need a way to avoid this EXIT continually from widget to have again standard connection and reopen it again every time we need the vpn connection.
There is also a second problem: after the first vpn connection and then disconnected, also if tap adapter seems still connected it's impossible make a new vpn connection because there is not internet at this moment, non standard connection also obviously. So also here the only way is completely EXIT from widget and then reopen it to have again both standard connection or a the possibility to make a vpn connection.
This also with the last stable tap driver, with the standard one incluse in the crypto widget bug are bigger.

With this last we need a way that when we disconnect from widget the tap must disconnect itself. In this way all is solved/fixed. Because now tap driver disconnect itself only if we EXIT from widget. Why?

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Fri Apr 09, 2021 11:24 pm

Trying again with last new tap driver linked previously. With new tap driver i see this thing: only if i exit from widget the tap goes in disconnect and standard connection is working again. We need a way to avoid this EXIT continually from widget to have again standard connection and reopen it again every time we need the vpn connection.
So when you click the Disconnect button on the widget the TAP adapter is still in a connected state? It only leaves that state when you exit? I'm not seeing that behavior on Windows 10:
widget.gif
EDIT:
The TAP adapter should be unplugged/disconnected whenever OpenVPN (csvpn.exe) exits. The widget forcibly kills that process using a couple of different methods. Maybe an AV or something is preventing that from happening? When you disconnect, check if csvpn.exe is still in the process list by opening the task manager with ctrl+shift+escape then clicking on the Details tab, see if there's a csvpn.exe in there still.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Sat Apr 10, 2021 12:04 am

df wrote:
Fri Apr 09, 2021 11:24 pm
Trying again with last new tap driver linked previously. With new tap driver i see this thing: only if i exit from widget the tap goes in disconnect and standard connection is working again. We need a way to avoid this EXIT continually from widget to have again standard connection and reopen it again every time we need the vpn connection.
So when you click the Disconnect button on the widget the TAP adapter is still in a connected state? It only leaves that state when you exit? I'm not seeing that behavior on Windows 10:
widget.gif
EDIT:
The TAP adapter should be unplugged/disconnected whenever OpenVPN (csvpn.exe) exits. The widget forcibly kills that process using a couple of different methods. Maybe an AV or something is preventing that from happening? When you disconnect, check if csvpn.exe is still in the process list by opening the task manager with ctrl+shift+escape then clicking on the Details tab, see if there's a csvpn.exe in there still.
Yes.

I see csvpn.exe. I have only windows standard antivirus and also disabling it nothing changes. I don't know honestly. But this is a big bug on my side.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Apr 10, 2021 12:08 am

What about other VPN software? And when you say you never see csvpn.exe, does that include when you're connected? Because it has to be in the process list if you're connected.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Sat Apr 10, 2021 12:13 am

df wrote:
Sat Apr 10, 2021 12:08 am
What about other VPN software? And when you say you never see csvpn.exe, does that include when you're connected? Because it has to be in the process list if you're connected.
I edited previous post. I see csvpn.exe and it is there without problems. Other vpn software have no problem.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Apr 10, 2021 12:17 am

I mean are you using any other VPN software? Most of them make the assumption that their TAP adapter is the only one that'll ever be installed, so they'll often trample all over other adapters, changing settings arbitrarily etc.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Sat Apr 10, 2021 12:23 am

df wrote:
Sat Apr 10, 2021 12:17 am
I mean are you using any other VPN software? Most of them make the assumption that their TAP adapter is the only one that'll ever be installed, so they'll often trample all over other adapters, changing settings arbitrarily etc.
The only vpn that i am using, on virtual machine, using tap adapter is cryptostorm. And how written in previous posts i have try with many tap drivers. Now i am using the last stable linked by you.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Apr 10, 2021 12:29 am

What kind of virtual machine?

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Sat Apr 10, 2021 12:33 am

Windows 10 on Parallels

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Apr 10, 2021 1:38 am

Can you run the widget on the host system? That'll let us know that the issue is specific to Parallels. When testing the widget on different Windows versions, I use VirtualBox and never saw this issue before. For Windows 10 testing I also use a laptop that's not doing virtualization.

lajola
Posts: 22
Joined: Wed Mar 10, 2021 7:44 pm

Re: widget v3

Post by lajola » Sat Apr 10, 2021 1:54 am

df wrote:
Sat Apr 10, 2021 1:38 am
Can you run the widget on the host system?
Eh.. it's impossible for me. :cry: I have only a mac. For this i have asked some times a osx widget.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Sat Apr 10, 2021 2:09 am

As I said before, there's no reason to create a MacOS widget because software like Tunnelblick and Viscosity already exist. Why don't you try one of those? Tunnelblick is free and includes the latest OpenVPN/OpenSSL. Viscosity isn't free ($14), but some people say it's easier to use than Tunnelblick. It'll increase speeds too if you're connecting to the VPN on the host system instead of a VM.

User avatar
df
Site Admin
Posts: 476
Joined: Thu Jan 01, 1970 5:00 am

Re: widget v3

Post by df » Wed Apr 28, 2021 5:55 am

v3.48.0.50 released - https://cryptostorm.is/cryptostorm_setup.exe
  • Change: OpenVPN upgraded to the latest 2.5.2
  • Bugfix: Right-clicking in the area where your token goes would spit out an error. Now in brings up the copy/paste menu like it should.
  • Change: That copy/paste menu will have the paste option greyed out (disabled) if the clipboard doesn't contain a valid token (or hash), to help prevent invalid tokens from getting entered. Copy will also be disabled if you're not selecting a valid token.
  • Bugfix: If you had a valid token in the textbox, then edited it so that it was invalid, then exited, the widget would forget the valid token. Now it won't save unless the token is valid.

Post Reply