OpenFortiGUI is an open-source VPN-Client to connect to Fortigate and Barracuda VPN-Hardware. For Fortigate VPN it uses openfortivpn, for Barracuda it uses the official Barracuda VPN Client (must be installed) and adds an easy to use and nice GUI on top of it, written in Qt5.
Unlike other VPN-clients it is also possible to connect to multiple VPN-destinations simultaneously (for Fortigate only). It is an alternative for the closed-source Forticlient – SSLVPN Client.
Features include:
- Qt5 GUI
- Fortigate: openfortivpn library built-in, no separate download required
- Barracuda: Official Barracuda VPN Client required, you must first download from Barracuda download site
- All settings saved in text-files, so easy to share, passwords saved AES-encrypted (key can be defined as needed, GNOME keyring & KWallet support)
- VPNs divided into local and global sections (readonly, useful for enterprise deployments to many users)
- VPN-groups can be defined to start defined groups of VPNs at the same time
- Trayicon with fast access to start/stop VPNs and groups
- Multiple VPN connections possible simultaneously
- Certificate and user/password auth supported
- 2Factor support (TOTP)
- Autostart VPNs on program startup
- English, german, catalan (thanks wagafo@github) and japanese (thanks tsundeoku@github) language
- Optional: KRunner Plugin for KDE5
Source & community development: https://github.com/theinvisible/openfortigui
Prebuild packages are available for following Distros:
Last Update 9.2.2024
https://apt.iteas.at/iteas/pool/main/o/openfortigui/
Recommended: Use our apt mirror, for instructions see: https://apt.iteas.at/
Available packages on our apt mirror: openfortigui and openfortigui-runner
Quick instruction to build from source:
- Install DEV-tools (on Ubuntu: build-essential, qt5-default, libssl-dev, qt5keychain-dev)
- git clone https://github.com/theinvisible/openfortigui.git
- cd openfortigui && git submodule init && git submodule update
- qmake && make -j4
- openfortigui binary is ready
Debugging
If you want to help debugging please follow the next steps to produce a debug binary.
- Install DEV-tools (on Ubuntu: build-essential, qt5-default, libssl-dev, qt5keychain-dev)
- git clone https://github.com/theinvisible/openfortigui.git
- cd openfortigui && git submodule init && git submodule update
- qmake openfortigui-project.pro -spec linux-g++ CONFIG+=debug CONFIG+=qml_debug && /usr/bin/make -j4
- openfortigui debug binary is ready
OpenFortiGUI spawns new processes for every VPN connection profile.
You can also start a VPN connection on terminal and so use gdb. For example: sudo /usr/bin/openfortigui –start-vpn –vpn-name [yourvpnname] –main-config ‘/home/[yourusername]/.openfortigui/main.conf’
Just replace [yourvpnname] with your vpn profile name and [yourusername] with your Linux username.
Used software/libraries/resources:
If you are looking to build this for a newer UBUNTU version like 25.04 or even ARM instead of AMD64, you can do the following:
1. sudo apt-get install build-essential qtbase5-dev qtchooser qt5-qmake qtbase5-dev-tools libssl-dev qt5keychain-dev
2. git clone https://github.com/theinvisible/openfortigui.git
3. cd openfortigui && git submodule init && git submodule update
4. qmake && make -j4
5. You need to be within the directory where the repo was cloned to and then run: ./openfortigui/openfortigui
Works like a charm on latest debain (see comment date).
Great work!
Hello from Ukraine.
I have a connection name on сyrillic. But I can put a connection name only on latin. Is it a bug or a feature? Is it any way to configure my connection with the name on cyrillic?
#RussiaIsATerroristState
hola
Adiós
Hello.
I just install software on Linux MInt 21.3 (jammy)
and do not work. What can I do?
The old software, working.
Thanks
Hello, Where can i find a Debian Bookworm package for i386 ?
Yes, i use a good old NetTop MSI U120; it fit in my pocket suite 🙂
Pingback: How to install OpenFortiGUI on Ubuntu Linux – RunModule
Hi
i am using OPENFORTIGUI, since a year, still working until now because our company changing to SAML Authentifikaton.
Now i find a special openfortivpn see https://github.com/LorenzISR/openfortivpnSAML/ which has the option –saml. In terminal it works fine.
Is there a simple way to use this extra options with the GUI.
2. Question
I am not able to update the GUI i am still working with 0.9.5 How can i update
Thanks
Gerald
Not working in MX 23 (based on Debian 12). libssl1.1 is no longer supported. Any way we could get an update built against libssl3?
Otherwise, this project has been a lifesaver
There is a debian 12 package available but not yet linked in project page: https://apt.iteas.at/iteas/pool/main/o/openfortigui/openfortigui_0.9.9-1_amd64_bookworm.deb
Didn’t work on debian 12
Try the bookworm package: https://apt.iteas.at/iteas/pool/main/o/openfortigui/openfortigui_0.9.9-1_amd64_bookworm.deb
What a useful tool, thank you!
I had the same problem on Xubuntu 22.04: no authentication dialog appeared when I clicked the “Connect” button. I did 2 things to fix it:
1. Do NOT enter a password in the setup wizard’s Authentication section. Check ~/.openfortigui/vpnprofiles/your_server_name.conf for the line starting with “password=”. That should be the only text on that line, i.e. no password given.
2. Set your server Name to exactly that required by your VPN server provider, not your own label.
(I’m not sure the 2nd step was strictly necessary.)
It is not getting a password from k-wallet on Fedora 38
jul. 19 15:57:11 sudo: um terminal é necessário para ler a senha; use a opção -S para ler a entrada padrão ou configure um auxiliar de askpass
jul. 19 15:57:13 sudo: uma senha é necessária
same here. o mesmo por aqui
Hi.
It’s a wonderful job.
However, everytime I connected, I needed to go go konsole and set routes manually.
Is there any way to do so via GUI?
Thanks.
#### FOR MINT 20 USERS ####
I just found these steps on the issues forum for the project in github – https://github.com/theinvisible/openfortigui/issues/133
Here’s a copy of the instructions (from Oct. 27, 2020):
Currently found a workaround:
run OpenFortiGUI via sudo (with root permissions)
configure connection
connect – now it asks certificate properly and connects
run OpenFortiGUI again as regular user
now it connects also here
then used SUDO -E option from OpenFortiGUI settings and then also certificate as regular user received and now works also as regular user
then you can delete all configuration, profiles under sudo permissions and use these under regular user only as it should be
Hello, hope find you well.
On Ubuntu 22.04 there is a problem with UI ’cause ‘Connect’ doesn’t work. Also on click for connection in the main window, neither with the double click setting. Obviously the icon ‘Connect’ doesn’t work also in the contextual menu from the vpn list.
The log is empty (last message is dated April 21st, the day of my Ubuntu update).
openFortiGUI 0.9.5
This helps me after I updated Ubuntu from 18 to 22:
Open settings file ~/.openfortigui/main.conf
In section [main] change “sudo_preserve_env” variable from false to true.
Hi I’ve been facing the same issue. I have Ubuntu 22.04 when I try to connect VPN from my company does not work. I catch these errors on log:
jun. 30 17:23:53 openfortiGUI::Debug: tiConfVpnProfile::readVpnProfiles() -> vpnprofile found: “/home//.openfortigui/vpnprofiles/VPN.conf”
jun. 30 17:23:53 openfortiGUI::Debug: vpnManager::onClientConnected()
jun. 30 17:23:53 openfortiGUI::Debug: client api helo command:: 0 ::name:: “VPN”
jun. 30 17:23:54 openfortiGUI::Debug: client disconnected:: “VPN”
jun. 30 17:23:54 openfortiGUI::Debug: vpnManager::onClientVPNStatusChanged() “VPN-” status 0
jun. 30 17:23:54 openfortiGUI::Debug: MainWindow::onClientVPNStatusChanged:: “VPN” ::status:: 0
jun. 30 17:23:54 openfortiGUI::Debug: VPN process “VPN” error occurred!
jun. 30 17:23:54 openfortiGUI::Debug: VPN process “VPN” finished!
Thanks a lot! It works when I change sudo_preserve_env to true