No response after attempting to login with token on High Sierra

48 views

Skip to first unread message

anderson...@gmail.com

unread,

Dec 3, 2017, 10:46:40 PM12/3/17

to tunnelblick-discuss

I managed to connect to a certain ovpn, and it appeared to connect and disconnect just fine. However, after attempting to login with the token after having been connected for a long time, the window appears to be stuck on waiting for password. I attempted a different ovpn and it managed to connect, so I'm not sure what went wrong.

*Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920); Admin user

git commit 3a67cd8d382222545e529f9385c235a5735432ae

Configuration cstorm_country

"Sanitized" condensed configuration file for /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/cstorm_country.tblk:

client

dev tun

resolv-retry 16

remote-random

remote linux-country.cryptostorm.net 443 udp

remote linux-country.cryptostorm.nu 443 udp

remote linux-country.cryptostorm.org 443 udp

remote linux-country.cstorm.pw 443 udp

explicit-exit-notify 3

mssfix 1400

nobind

comp-lzo

down-pre

reneg-sec 0

hand-window 17

verb 4

mute 3

auth-user-pass

ns-cert-type server

auth SHA512

cipher AES-256-CBC

tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA

tls-client

key-method 2

<ca>

[Security-related line(s) omitted]

</ca>

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

33 0 0xffffff7f830a0000 0x110000 0x110000 com.ni.driver.nipalk (2.9.1) D74E3D96-0578-3E6A-48E5-89EF613CB305 <32 12 5 4 3>

================================================================================

There are no unusual files in cstorm_country.tblk

================================================================================

Configuration preferences:

-routeAllTrafficThroughVpn = 1

-keychainHasUsername = 1

-loadTap =

-loadTun =

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

-lastConnectionSucceeded = 0

-tunnelDownSoundName = Sosumi

-tunnelUpSoundName = Hero

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1

tunnelblickVersionHistory = (

"3.7.4a (build 4920)"

)

lastLaunchTime = 534048949.892621

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 102400

lastConnectedDisplayName = cstorm_USnorth

keyboardShortcutIndex = 1

updateCheckAutomatically = 1

NSWindow Frame SettingsSheetWindow = 252 254 829 524 0 0 1280 778

NSWindow Frame ConnectingWindow = 455 351 412 297 0 0 1280 778

detailsWindowFrameVersion = 4920

detailsWindowFrame = {{186, 310}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = cstorm_country

AdvancedWindowTabIdentifier = connectingAndDisconnecting

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

SUEnableAutomaticChecks = 1

SUScheduledCheckInterval = 86400

SULastCheckTime = 2017-12-04 02:55:50 +0000

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920)

2017-12-03 21:36:21 *Tunnelblick: Attempting connection with cstorm_country using shadow copy; Set nameserver = 769; monitoring connection

2017-12-03 21:36:21 *Tunnelblick: openvpnstart start cstorm_country.tblk 1337 769 0 1 0 1065776 -ptADGNWradsgnw 2.3.18-libressl-2.6.2

2017-12-03 21:36:21 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18-libressl-2.6.2/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SUsers-Selliotanderson-SLibrary-SApplication Support-STunnelblick-SConfigurations-Scstorm_country.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065776.1337.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Users/elliotanderson/cstorm_country.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 4920 3.7.4a (build 4920)"

--verb

--config

/Library/Application Support/Tunnelblick/Users/elliotanderson/cstorm_country.tblk/Contents/Resources/config.ovpn

--verb

--cd

/Library/Application Support/Tunnelblick/Users/elliotanderson/cstorm_country.tblk/Contents/Resources

--management

127.0.0.1

1337

--management-query-passwords

--management-hold

--redirect-gateway

def1

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2017-12-03 21:36:21 *Tunnelblick: Established communication with OpenVPN

2017-12-03 21:36:21 OpenVPN 2.3.18 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Nov 10 2017

2017-12-03 21:36:21 library versions: LibreSSL 2.6.2, LZO 2.10

2017-12-03 21:36:21 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337

2017-12-03 21:36:21 Need hold release from management interface, waiting...

2017-12-03 21:36:21 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337

2017-12-03 21:36:21 MANAGEMENT: CMD 'pid'

2017-12-03 21:36:21 MANAGEMENT: CMD 'state on'

2017-12-03 21:36:21 MANAGEMENT: CMD 'state'

2017-12-03 21:36:21 NOTE: --mute triggered...

2017-12-03 21:36:21 *Tunnelblick: openvpnstart starting OpenVPN

2017-12-03 21:37:41 *Tunnelblick: Disconnecting; notification window disconnect button pressed

2017-12-03 21:37:41 *Tunnelblick: No 'pre-disconnect.sh' script to execute

2017-12-03 21:37:41 *Tunnelblick: Disconnecting using 'kill'

2017-12-03 21:37:41 9 variation(s) on previous 3 message(s) suppressed by --mute

2017-12-03 21:37:41 MANAGEMENT: Client disconnected

2017-12-03 21:37:41 ERROR: could not read Auth username/password/ok/string from management interface

2017-12-03 21:37:41 Exiting due to fatal error

2017-12-03 21:37:43 *Tunnelblick: No 'post-disconnect.sh' script to execute

2017-12-03 21:37:43 *Tunnelblick: Expected disconnection occurred.

================================================================================

"Sanitized" full configuration file

# Cryptostorm.is config optimized for Tunnelblick/Viscosity OSX and OpenVPN iOS

client

dev tun

#randomly select a node from the list below, for redundancy against DNS blacklisting-based session blocking attacks.

#see https://openvpn.net/archive/openvpn-users/2004-12/msg00055.html

resolv-retry 16

remote-random

remote linux-country.cryptostorm.net 443 udp

remote linux-country.cryptostorm.nu 443 udp

remote linux-country.cryptostorm.org 443 udp

remote linux-country.cstorm.pw 443 udp

explicit-exit-notify 3

mssfix 1400

nobind

comp-lzo

down-pre

reneg-sec 0

hand-window 17

verb 4

mute 3

auth-user-pass

ns-cert-type server

auth SHA512

cipher AES-256-CBC

tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA

tls-client

key-method 2

<ca>

[Security-related line(s) omitted]

</ca>

# specification & location of server-verification PKI materials

# for details, see https://cryptostorm.org/pki

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>

inet 127.0.0.1 netmask 0xff000000

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

nd6 options=201<PERFORMNUD,DAD>

gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280

stf0: flags=0<> mtu 1280

XHC20: flags=0<> mtu 0

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

ether 3c:15:c2:dc:1e:b0

inet6 fe80::1008:fd23:88d3:9494%en0 prefixlen 64 secured scopeid 0x5

inet 192.168.1.6 netmask 0xffffff00 broadcast 192.168.1.255

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

ether 0e:15:c2:dc:1e:b0

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484

ether 52:28:39:05:9a:58

inet6 fe80::5028:39ff:fe05:9a58%awdl0 prefixlen 64 scopeid 0x7

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=60<TSO4,TSO6>

ether 72:00:03:fe:ed:00

media: autoselect <full-duplex>

status: inactive

en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=60<TSO4,TSO6>

ether 72:00:03:fe:ed:01

media: autoselect <full-duplex>

status: inactive

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether 72:00:03:fe:ed:00

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x2

member: en1 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 8 priority 0 path cost 0

member: en2 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 9 priority 0 path cost 0

nd6 options=201<PERFORMNUD,DAD>

media: <unknown type>

status: inactive

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

options=6403<RXCSUM,TXCSUM,CHANNEL_IO,PARTIAL_CSUM,ZEROINVERT_CSUM>

inet6 fe80::9922:ef11:1d6e:26e4%utun0 prefixlen 64 scopeid 0xb

nd6 options=201<PERFORMNUD,DAD>

utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380

options=6403<RXCSUM,TXCSUM,CHANNEL_IO,PARTIAL_CSUM,ZEROINVERT_CSUM>

inet6 fe80::e638:18ab:4550:8f0e%utun1 prefixlen 64 scopeid 0xc

nd6 options=201<PERFORMNUD,DAD>

================================================================================

Console Log:

2017-12-03 15:51:41 Tunnelblick[7830] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 15:52:06 Tunnelblick[7830] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 15:52:08 Tunnelblick[7830] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 15:52:39 Tunnelblick[7830] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 15:52:41 Tunnelblick[7830] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 15:54:39 Tunnelblick[7830] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2017-12-03 15:54:39 Tunnelblick[7830] Finished shutting down Tunnelblick; allowing termination

2017-12-03 15:54:49 Tunnelblick[8340] Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920)

2017-12-03 15:54:50 Tunnelblick[8340] Sparkle: ===== Tunnelblick =====

2017-12-03 15:54:50 Tunnelblick[8340] Sparkle: Verified appcast signature

2017-12-03 15:55:01 Tunnelblick[8340] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 15:55:17 Tunnelblick[8340] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 18:58:40 Tunnelblick[8340] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 18:58:44 Tunnelblick[8340] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 19:02:39 Tunnelblick[8340] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 19:02:44 Tunnelblick[8340] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 19:12:31 Tunnelblick[8340] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 19:12:35 Tunnelblick[8340] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 19:26:57 Tunnelblick[8340] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 19:26:58 Tunnelblick[8340] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 19:29:30 Tunnelblick[8340] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 19:29:32 Tunnelblick[8340] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 20:38:30 Tunnelblick[8340] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 20:38:33 Tunnelblick[8340] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 20:46:36 Tunnelblick[8340] applicationShouldTerminate: termination because of shutdown; delayed until 'shutdownTunnelblick' finishes

2017-12-03 20:46:36 Tunnelblick[8340] Finished shutting down Tunnelblick; allowing termination

2017-12-03 20:55:47 Tunnelblick[470] Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920)

2017-12-03 20:55:50 Tunnelblick[470] Sparkle: ===== Tunnelblick =====

2017-12-03 20:55:50 Tunnelblick[470] Sparkle: Verified appcast signature

2017-12-03 20:57:03 Tunnelblick[470] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 20:57:08 Tunnelblick[470] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 20:57:29 ksinstall[625] 2017-12-03 20:57:29.299 ksinstall[625/0xa9a9a1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer started.

2017-12-03 20:57:29 ksinstall[625] 2017-12-03 20:57:29.305 ksinstall[625/0xa9a9a1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer starting Installation.

2017-12-03 20:57:29 ksinstall[625] 2017-12-03 20:57:29.725 ksinstall[625/0xa9a9a1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer ran successfully.

2017-12-03 21:04:39 Tunnelblick[470] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

2017-12-03 21:04:41 Tunnelblick[470] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_country' account = 'password' because it does not exist

2017-12-03 21:10:43 Tunnelblick[470] Using icon set '3.3.TBMenuIcons' without Retina images

2017-12-03 21:10:45 Tunnelblick[470] Using icon set 'TunnelBlick-black-white.TBMenuIcons' without Retina images

2017-12-03 21:17:32 ksinstall[726] 2017-12-03 21:17:32.388 ksinstall[726/0xa9a9a1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer started.

2017-12-03 21:17:32 ksinstall[726] 2017-12-03 21:17:32.399 ksinstall[726/0xa9a9a1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer starting Installation.

2017-12-03 21:17:32 ksinstall[726] 2017-12-03 21:17:32.974 ksinstall[726/0xa9a9a1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer ran successfully.

2017-12-03 21:35:01 Tunnelblick[470] Tunnelblick needs to perform an action that requires administrator authorization.

2017-12-03 21:35:01 Tunnelblick[470] Beginning installation or repair

2017-12-03 21:35:02 Tunnelblick[470] Installation or repair succeeded; Log:

Tunnelblick installer started 2017-12-03 21:35:01. 2 arguments: 0x2001

/Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/cstorm_Voodoo_romania_to_russia.tblk

removed /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/cstorm_Voodoo_romania_to_russia.tblk

removed /Library/Application Support/Tunnelblick/Users/elliotanderson/cstorm_Voodoo_romania_to_russia.tblk

Tunnelblick installer finished without error

2017-12-03 21:35:02 Tunnelblick[470] Uninstalled configuration file /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/cstorm_Voodoo_romania_to_russia.tblk

2017-12-03 21:35:12 Tunnelblick[470] Tunnelblick needs to perform an action that requires administrator authorization.

2017-12-03 21:35:12 Tunnelblick[470] Beginning installation or repair

2017-12-03 21:35:13 Tunnelblick[470] Installation or repair succeeded; Log:

Tunnelblick installer started 2017-12-03 21:35:13. 2 arguments: 0x2001

/Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/cstorm_Voodoo_romania_to_isleofman.tblk

removed /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/cstorm_Voodoo_romania_to_isleofman.tblk

removed /Library/Application Support/Tunnelblick/Users/elliotanderson/cstorm_Voodoo_romania_to_isleofman.tblk

Tunnelblick installer finished without error

2017-12-03 21:35:13 Tunnelblick[470] Uninstalled configuration file /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/cstorm_Voodoo_romania_to_isleofman.tblk

2017-12-03 21:36:21 Tunnelblick[470] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_country' account = 'username'

anderson...@gmail.com

unread,

Dec 4, 2017, 7:09:29 PM12/4/17

to tunnelblick-discuss

Well, after installing and uninstalling I've had many times where my internet network would appear to be working, but none of my browsers could connect to any websites. Also, after trying to connect to any ovpn I was told that tunnelblick could not connect after 30 seconds. Here's my current log:

*Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920); Admin user

git commit 3a67cd8d382222545e529f9385c235a5735432ae

Configuration OvpnName

"Sanitized" condensed configuration file for /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/OvpnName.tblk:

client

dev tun

resolv-retry 16

remote-random

remote linux-useast.cryptostorm.net 443 udp

remote linux-useast.cryptostorm.nu 443 udp

remote linux-useast.cryptostorm.org 443 udp

remote linux-useast.cstorm.pw 443 udp

explicit-exit-notify 3

mssfix 1400

nobind

comp-lzo

down-pre

reneg-sec 0

hand-window 17

verb 4

mute 3

auth-user-pass

ns-cert-type server

auth SHA512

cipher AES-256-CBC

tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA

tls-client

key-method 2

<ca>

[Security-related line(s) omitted]

</ca>

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

16 0 0xffffff7f80a48000 0x6000 0x6000 com.malwarebytes.mbam.rtprotection (3.1.1) D7BB2CDA-0110-3A88-B0B0-B55E39A8F145 <7 5 4 3 2 1>

34 0 0xffffff7f83090000 0x110000 0x110000 com.ni.driver.nipalk (2.9.1) D74E3D96-0578-3E6A-48E5-89EF613CB305 <33 12 5 4 3>

================================================================================

There are no unusual files in OvpnName.tblk

================================================================================

Configuration preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1

tunnelblickVersionHistory = (

"3.7.4a (build 4920)"

)

lastLaunchTime = 534123487.634916

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 102400

keyboardShortcutIndex = 1

updateCheckAutomatically = 1

NSWindow Frame ConnectingWindow = 434 374 412 297 0 0 1280 778

detailsWindowFrameVersion = 4920

detailsWindowFrame = {{157, 253}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = OvpnName

AdvancedWindowTabIdentifier = whileConnected

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

SUEnableAutomaticChecks = 1

SUScheduledCheckInterval = 86400

SULastCheckTime = 2017-12-04 23:38:38 +0000

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920)

2017-12-04 17:42:00 *Tunnelblick: Attempting connection with OvpnName using shadow copy; Set nameserver = 769; monitoring connection

2017-12-04 17:42:00 *Tunnelblick: openvpnstart start OvpnName.tblk 1337 769 0 1 0 1065264 -ptADGNWradsgnw 2.3.18-libressl-2.6.2

2017-12-04 17:42:01 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18-libressl-2.6.2/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SUsers-Selliotanderson-SLibrary-SApplication Support-STunnelblick-SConfigurations-SOvpnName.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065264.1337.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 4920 3.7.4a (build 4920)"

--verb

--config

/Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk/Contents/Resources/config.ovpn

--verb

--cd

/Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk/Contents/Resources

--management

127.0.0.1

1337

--management-query-passwords

--management-hold

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2017-12-04 17:42:00 OpenVPN 2.3.18 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Nov 10 2017

2017-12-04 17:42:00 library versions: LibreSSL 2.6.2, LZO 2.10

2017-12-04 17:42:00 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337

2017-12-04 17:42:00 Need hold release from management interface, waiting...

2017-12-04 17:42:01 *Tunnelblick: Established communication with OpenVPN

2017-12-04 17:42:01 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337

2017-12-04 17:42:01 MANAGEMENT: CMD 'pid'

2017-12-04 17:42:01 MANAGEMENT: CMD 'state on'

2017-12-04 17:42:01 MANAGEMENT: CMD 'state'

2017-12-04 17:42:01 NOTE: --mute triggered...

2017-12-04 17:42:16 4 variation(s) on previous 3 message(s) suppressed by --mute

2017-12-04 17:42:16 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.

2017-12-04 17:42:16 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-12-04 17:42:16 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-12-04 17:42:16 MANAGEMENT: >STATE:1512430936,RESOLVE,,,

2017-12-04 17:42:42 *Tunnelblick: Disconnecting; notification window disconnect button pressed

2017-12-04 17:42:42 *Tunnelblick: No 'pre-disconnect.sh' script to execute

2017-12-04 17:42:42 *Tunnelblick: Disconnecting using 'kill'

2017-12-04 17:42:46 RESOLVE: Cannot resolve host address: linux-useast.cryptostorm.org: nodename nor servname provided, or not known

2017-12-04 17:42:46 MANAGEMENT: >STATE:1512430966,RESOLVE,,,

================================================================================

"Sanitized" full configuration file

# Cryptostorm.is config optimized for Tunnelblick/Viscosity OSX and OpenVPN iOS

client

dev tun

#randomly select a node from the list below, for redundancy against DNS blacklisting-based session blocking attacks.

#see https://openvpn.net/archive/openvpn-users/2004-12/msg00055.html

resolv-retry 16

remote-random

remote linux-useast.cryptostorm.net 443 udp

remote linux-useast.cryptostorm.nu 443 udp

remote linux-useast.cryptostorm.org 443 udp

remote linux-useast.cstorm.pw 443 udp

inet6 fe80::1884:c49c:1d75:3b46%en0 prefixlen 64 secured scopeid 0x5

inet 192.168.1.6 netmask 0xffffff00 broadcast 192.168.1.255

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

ether 0e:15:c2:dc:1e:b0

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484

ether 1e:d4:d8:10:92:28

inet6 fe80::1cd4:d8ff:fe10:9228%awdl0 prefixlen 64 scopeid 0x7

inet6 fe80::cd25:6375:3333:d959%utun0 prefixlen 64 scopeid 0xb

nd6 options=201<PERFORMNUD,DAD>

================================================================================

Console Log:

2017-12-04 16:16:40 Tunnelblick[708] Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920)

2017-12-04 16:16:41 Tunnelblick[708] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.

2017-12-04 16:16:52 Tunnelblick[708] Tunnelblick needs to:

• Be installed in /Applications as Tunnelblick

• Change ownership and permissions of the program to secure it

• Secure configurations

2017-12-04 16:16:52 Tunnelblick[708] Beginning installation or repair

2017-12-04 16:16:53 Tunnelblick[708] Installation or repair succeeded; Log:

Tunnelblick installer started 2017-12-04 16:16:52. 1 arguments: 0x0017

Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755

Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0

Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755

Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users/elliotanderson with owner 0:0 and permissions 755

Changed ownership of /Users/elliotanderson/Library/Application Support/Tunnelblick from 501:20 to 501:80

Changed ownership of /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

tunnelblickdHashOK = NO

launchctlPlistHashOK = NO

tunnelblickdPlistOK = NO

socketOK = NO

Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

2017-12-04 16:16:53 Tunnelblick[708] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2017-12-04 16:16:53 Tunnelblick[720] Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920)

2017-12-04 16:16:53 Tunnelblick[708] Finished shutting down Tunnelblick; allowing termination

2017-12-04 16:16:53 Tunnelblick[720] Launching a thread to remove the old login item (if any) so we can use the new mechanism that controls Tunnelblick's launch on login

2017-12-04 16:16:53 Tunnelblick[720] Copied our 'net.tunnelblick.tunnelblick.LaunchAtLogin.plist' into ~/Library/LaunchAgents

2017-12-04 16:16:53 Tunnelblick[720] No old login item to remove

2017-12-04 16:16:54 Tunnelblick[720] Sparkle: ===== Tunnelblick =====

2017-12-04 16:16:54 Tunnelblick[720] Sparkle: Verified appcast signature

2017-12-04 16:16:54 Tunnelblick[720] Copied easy-rsa

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 700 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-ca

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 600 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/vars

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-key-server

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-key-pass

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-req

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-req-pass

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 700 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/ChangeLog

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 700 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 700 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/ca

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/server

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/COMMON

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/client

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 600 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/openssl-1.0.cnf

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/easyrsa

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/vars.example

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/COPYING

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 700 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Intro-To-PKI.md

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Readme.md

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Hacking.md

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Advanced.md

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/TODO

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Upgrade-Notes.md

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 700 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing/gpl-2.0.txt

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/KNOWN_ISSUES

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README.quickstart.md

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/clean-all

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-dh

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 600 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.6.cnf

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/pkitool

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/sign-req

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-key-pkcs12

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/whichopensslcnf

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-inter

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/README

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/revoke-full

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 600 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.8.cnf

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/TB-version.txt

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/list-crl

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/build-key

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 755 to 500 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/inherit-inter

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 600 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/openssl-1.0.0.cnf

2017-12-04 16:16:54 Tunnelblick[720] Changed permissions from 644 to 400 on /Users/elliotanderson/Library/Application Support/Tunnelblick/easy-rsa/v3version.txt

2017-12-04 16:17:06 Tunnelblick[720] Changed permissions from 700 to 755 on /Users/elliotanderson/Desktop

2017-12-04 16:17:06 Tunnelblick[720] assertion failed: 17B1003: libxpc.dylib + 73297 [58676E88-35FD-3CF3-99BB-2A82E09F8058]: 0x89

2017-12-04 16:20:28 Tunnelblick[720] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2017-12-04 16:20:29 Tunnelblick[720] Finished shutting down Tunnelblick; allowing termination

2017-12-04 16:20:37 Tunnelblick[751] Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4a (build 4920)

2017-12-04 16:20:38 Tunnelblick[751] Sparkle: ===== Tunnelblick =====

2017-12-04 16:20:38 Tunnelblick[751] Sparkle: Verified appcast signature

2017-12-04 16:21:25 Tunnelblick[751] Converting/Installing /Users/elliotanderson/Desktop/Sample Tunnelblick VPN Configuration/OvpnName.ovpn: Converted OpenVPN configuration

2017-12-04 16:21:28 Tunnelblick[751] Converting/Installing /Users/elliotanderson/Desktop/Sample Tunnelblick VPN Configuration/OvpnName.ovpn: Converted OpenVPN configuration

2017-12-04 16:21:29 Tunnelblick[751] Converting/Installing /Users/elliotanderson/Desktop/Sample Tunnelblick VPN Configuration/OvpnName.ovpn: Converted OpenVPN configuration

2017-12-04 16:21:36 Tunnelblick[751] localNameFromDisplayName: 'OvpnName' is not a known displayName

2017-12-04 16:21:36 Tunnelblick[751] Tunnelblick needs to perform an action that requires administrator authorization.

2017-12-04 16:21:36 Tunnelblick[751] Beginning installation or repair

2017-12-04 16:21:36 Tunnelblick[751] Installation or repair succeeded; Log:

Tunnelblick installer started 2017-12-04 16:21:36. 3 arguments: 0x0001

/Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/OvpnName.tblk

/private/var/folders/6_/vmj_32j91xggbx970ck7fpxw0000gn/T/Tunnelblick-ZX7iKm/OvpnName.tblk

Copied /private/var/folders/6_/vmj_32j91xggbx970ck7fpxw0000gn/T/Tunnelblick-ZX7iKm/OvpnName.tblk

to /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/OvpnName.tblk.temp

Renamed /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/OvpnName.tblk.temp

to /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/OvpnName.tblk

Changed ownership of /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/OvpnName.tblk and its contents from 501:20 to 501:80

Copied /Users/elliotanderson/Library/Application Support/Tunnelblick/Configurations/OvpnName.tblk

to /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk.temp

Renamed /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk.temp

to /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk

Changed ownership of /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk and its contents from 501:80 to 0:0

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk/Contents

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk/Contents/Resources

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/elliotanderson/OvpnName.tblk/Contents/Resources/config.ovpn

Created secure (shadow) copy of OvpnName.tblk