strange connect-problem with tunnelblick 3.7.4beta01 and macos 10.13 high sierra

70 views

Skip to first unread message

ferdina...@gmail.com

unread,

Nov 3, 2017, 6:44:20 AM11/3/17

to tunnelblick-discuss

hi,

I use for about 2 years tunnelblick with several openvpn-server, since updating to macOS 10.13 high sierra two of my vpns doesn't work anymore.

after clicking on "connect" a small window appears where I can see ingoing and outgoing traffic rate, after about 15 seconds the B/s goes down to 0 B/s (in & out) and never goes up again, at this moment it doesn't help to click on disconnect or go to the tunnelblick-settings and click on "quit alle openvpn processes" - I can only use tunnelblick again if I restart my macbook.

the strange thing is:

I have 10 different vpn-profiles to different openvpn-servers, two profiles have this problem

I can use one of these problematic vpn-profiles without problems on my test-macbook (with macOS 10.12) and with openVPN on my iphone

I already tried removing tunnelblick completely with the instructions from the tunnelblick-homepage and reinstalling, didn't helped.

the company, who owns the openvpn-server rebooted the vpn-service for me.

many thanks for your help in advance!

regards, ferdinand

my logfile - I replaced sensitive information:

*Tunnelblick: OS X 10.13.0; Tunnelblick 3.7.4beta01 (build 4890); prior version 3.7.3beta03 (build 4870)

2017-10-24 18:59:03 *Tunnelblick: Attempting connection with acmeinc using shadow copy; Set nameserver = 2817; monitoring connection

2017-10-24 18:59:03 *Tunnelblick: openvpnstart start acmeinc.tblk 1337 2817 0 1 0 1065264 -ptADGNWradsgnw 2.3.18-libressl-2.5.5

2017-10-24 18:59:03 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18-libressl-2.5.5/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SUsers-Scoyote-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sacmeinc.tblk-SContents-SResources-Sconfig.ovpn.2817_0_1_0_1065264.1337.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Users/coyote/acmeinc.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 4890 3.7.4beta01 (build 4890)"

--verb

--config

/Library/Application Support/Tunnelblick/Users/coyote/acmeinc.tblk/Contents/Resources/config.ovpn

--verb

--cd

/Library/Application Support/Tunnelblick/Users/coyote/acmeinc.tblk/Contents/Resources

--management

127.0.0.1

1337

--management-query-passwords

--management-hold

--script-security

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2017-10-24 18:59:03 *Tunnelblick: openvpnstart starting OpenVPN

2017-10-24 18:59:03 *Tunnelblick: Established communication with OpenVPN

2017-10-24 18:59:03 NOTE: debug verbosity (--verb 11) is enabled but this build lacks debug support.

2017-10-24 18:59:03 Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/coyote/acmeinc.tblk/Contents/Resources/config.ovpn:17: block-outside-dns (2.3.18)

2017-10-24 18:59:03 NOTE: debug verbosity (--verb 11) is enabled but this build lacks debug support.

2017-10-24 18:59:03 us=215857 Current Parameter Settings:

2017-10-24 18:59:03 us=215881 config = '/Library/Application Support/Tunnelblick/Users/coyote/acmeinc.tblk/Contents/Resources/config.ovpn'

2017-10-24 18:59:03 us=215893 mode = 0

2017-10-24 18:59:03 us=215903 show_ciphers = DISABLED

2017-10-24 18:59:03 us=215913 show_digests = DISABLED

2017-10-24 18:59:03 us=215922 show_engines = DISABLED

2017-10-24 18:59:03 us=215932 genkey = DISABLED

2017-10-24 18:59:03 us=215941 key_pass_file = '[UNDEF]'

2017-10-24 18:59:03 us=215951 show_tls_ciphers = DISABLED

2017-10-24 18:59:03 us=215960 Connection profiles [default]:

2017-10-24 18:59:03 us=215988 proto = udp

2017-10-24 18:59:03 us=215998 local = '[UNDEF]'

2017-10-24 18:59:03 us=216007 local_port = 0

2017-10-24 18:59:03 us=216017 remote = 'vpn.acmeinc.net'

2017-10-24 18:59:03 us=216026 remote_port = 1194

2017-10-24 18:59:03 us=216036 remote_float = DISABLED

2017-10-24 18:59:03 us=216045 bind_defined = DISABLED

2017-10-24 18:59:03 us=216054 bind_local = ENABLED

2017-10-24 18:59:03 us=216064 connect_retry_seconds = 5

2017-10-24 18:59:03 us=216073 connect_timeout = 10

2017-10-24 18:59:03 us=216083 connect_retry_max = 0

2017-10-24 18:59:03 us=216092 xormethod = 0

2017-10-24 18:59:03 us=216615 xormask = ''

2017-10-24 18:59:03 us=216665 xormasklen = 0

2017-10-24 18:59:03 us=216695 socks_proxy_server = '[UNDEF]'

2017-10-24 18:59:03 us=216706 socks_proxy_port = 0

2017-10-24 18:59:03 us=216716 socks_proxy_retry = DISABLED

2017-10-24 18:59:03 us=216725 tun_mtu = 1500

2017-10-24 18:59:03 us=216735 tun_mtu_defined = ENABLED

2017-10-24 18:59:03 us=216744 link_mtu = 1500

2017-10-24 18:59:03 us=216754 link_mtu_defined = DISABLED

2017-10-24 18:59:03 us=216763 tun_mtu_extra = 0

2017-10-24 18:59:03 us=216781 tun_mtu_extra_defined = DISABLED

2017-10-24 18:59:03 us=216791 mtu_discover_type = -1

2017-10-24 18:59:03 us=216801 fragment = 0

2017-10-24 18:59:03 us=216811 mssfix = 1450

2017-10-24 18:59:03 us=216821 explicit_exit_notification = 0

2017-10-24 18:59:03 us=216832 Connection profiles END

2017-10-24 18:59:03 us=216910 remote_random = DISABLED

2017-10-24 18:59:03 us=216929 ipchange = '[UNDEF]'

2017-10-24 18:59:03 us=216946 dev = 'tun'

2017-10-24 18:59:03 us=216964 dev_type = '[UNDEF]'

2017-10-24 18:59:03 us=216979 dev_node = '[UNDEF]'

2017-10-24 18:59:03 us=216990 lladdr = '[UNDEF]'

2017-10-24 18:59:03 us=217000 topology = 1

2017-10-24 18:59:03 us=217010 tun_ipv6 = DISABLED

2017-10-24 18:59:03 us=217020 ifconfig_local = '[UNDEF]'

2017-10-24 18:59:03 us=217030 ifconfig_remote_netmask = '[UNDEF]'

2017-10-24 18:59:03 us=217040 ifconfig_noexec = DISABLED

2017-10-24 18:59:03 us=217050 ifconfig_nowarn = DISABLED

2017-10-24 18:59:03 us=217060 ifconfig_ipv6_local = '[UNDEF]'

2017-10-24 18:59:03 us=217070 ifconfig_ipv6_netbits = 0

2017-10-24 18:59:03 us=217080 ifconfig_ipv6_remote = '[UNDEF]'

2017-10-24 18:59:03 us=217090 shaper = 0

2017-10-24 18:59:03 us=217099 mtu_test = 0

2017-10-24 18:59:03 us=217109 mlock = DISABLED

2017-10-24 18:59:03 us=217119 keepalive_ping = 0

2017-10-24 18:59:03 us=217129 keepalive_timeout = 0

2017-10-24 18:59:03 us=217198 inactivity_timeout = 0

2017-10-24 18:59:03 us=217235 ping_send_timeout = 0

2017-10-24 18:59:03 us=217268 ping_rec_timeout = 0

2017-10-24 18:59:03 us=217285 ping_rec_timeout_action = 0

2017-10-24 18:59:03 us=217307 ping_timer_remote = DISABLED

2017-10-24 18:59:03 us=217317 remap_sigusr1 = 0

2017-10-24 18:59:03 us=217327 persist_tun = ENABLED

2017-10-24 18:59:03 us=217337 persist_local_ip = DISABLED

2017-10-24 18:59:03 us=217347 persist_remote_ip = DISABLED

2017-10-24 18:59:03 us=217357 persist_key = ENABLED

2017-10-24 18:59:03 us=217367 passtos = DISABLED

2017-10-24 18:59:03 us=217377 resolve_retry_seconds = 1000000000

2017-10-24 18:59:03 us=217387 username = '[UNDEF]'

2017-10-24 18:59:03 us=217397 groupname = '[UNDEF]'

2017-10-24 18:59:03 us=217407 chroot_dir = '[UNDEF]'

2017-10-24 18:59:03 us=217417 cd_dir = '/Library/Application Support/Tunnelblick/Users/coyote/acmeinc.tblk/Contents/Resources'

2017-10-24 18:59:03 us=217428 writepid = '[UNDEF]'

2017-10-24 18:59:03 us=217438 up_script = '/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw'

2017-10-24 18:59:03 us=217470 down_script = '/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw'

2017-10-24 18:59:03 us=217481 down_pre = DISABLED

2017-10-24 18:59:03 us=217491 up_restart = DISABLED

2017-10-24 18:59:03 us=217501 up_delay = DISABLED

2017-10-24 18:59:03 us=217511 daemon = ENABLED

2017-10-24 18:59:03 us=217521 inetd = 0

2017-10-24 18:59:03 us=217531 log = ENABLED

2017-10-24 18:59:03 us=217541 suppress_timestamps = DISABLED

2017-10-24 18:59:03 us=217551 nice = 0

2017-10-24 18:59:03 us=217561 verbosity = 11

2017-10-24 18:59:03 us=217571 mute = 0

2017-10-24 18:59:03 us=217581 status_file = '[UNDEF]'

2017-10-24 18:59:03 us=217591 status_file_version = 1

2017-10-24 18:59:03 us=217601 status_file_update_freq = 60

2017-10-24 18:59:03 us=217611 occ = ENABLED

2017-10-24 18:59:03 us=217621 rcvbuf = 0

2017-10-24 18:59:03 us=217631 sndbuf = 0

2017-10-24 18:59:03 us=217641 sockflags = 0

2017-10-24 18:59:03 us=217651 fast_io = DISABLED

2017-10-24 18:59:03 us=217660 lzo = 0

2017-10-24 18:59:03 us=217670 route_script = '[UNDEF]'

2017-10-24 18:59:03 us=217681 route_default_gateway = '[UNDEF]'

2017-10-24 18:59:03 us=217691 route_default_metric = 0

2017-10-24 18:59:03 us=217701 route_noexec = DISABLED

2017-10-24 18:59:03 us=217712 route_delay = 0

2017-10-24 18:59:03 us=217722 route_delay_window = 30

2017-10-24 18:59:03 us=217732 route_delay_defined = DISABLED

2017-10-24 18:59:03 us=217742 route_nopull = DISABLED

2017-10-24 18:59:03 us=217752 route_gateway_via_dhcp = DISABLED

2017-10-24 18:59:03 us=217763 max_routes = 100

2017-10-24 18:59:03 us=217773 allow_pull_fqdn = DISABLED

2017-10-24 18:59:03 us=217783 management_addr = '127.0.0.1'

2017-10-24 18:59:03 us=217801 management_port = 1337

2017-10-24 18:59:03 us=217815 management_user_pass = '[UNDEF]'

2017-10-24 18:59:03 us=217825 management_log_history_cache = 250

2017-10-24 18:59:03 us=217835 management_echo_buffer_size = 100

2017-10-24 18:59:03 us=217845 management_write_peer_info_file = '[UNDEF]'

2017-10-24 18:59:03 us=217854 management_client_user = '[UNDEF]'

2017-10-24 18:59:03 us=217864 management_client_group = '[UNDEF]'

2017-10-24 18:59:03 us=217874 management_flags = 6

2017-10-24 18:59:03 us=217915 shared_secret_file = '[UNDEF]'

2017-10-24 18:59:03 us=217931 key_direction = 2

2017-10-24 18:59:03 us=217942 ciphername_defined = ENABLED

2017-10-24 18:59:03 us=217952 ciphername = 'AES-256-CBC'

2017-10-24 18:59:03 us=217962 authname_defined = ENABLED

2017-10-24 18:59:03 us=217971 authname = 'SHA1'

2017-10-24 18:59:03 us=217981 prng_hash = 'SHA1'

2017-10-24 18:59:03 us=217990 prng_nonce_secret_len = 16

2017-10-24 18:59:03 us=218000 keysize = 0

2017-10-24 18:59:03 us=218019 engine = DISABLED

2017-10-24 18:59:03 us=218029 replay = ENABLED

2017-10-24 18:59:03 us=218039 mute_replay_warnings = DISABLED

2017-10-24 18:59:03 us=218048 replay_window = 64

2017-10-24 18:59:03 us=218058 replay_time = 15

2017-10-24 18:59:03 us=218068 packet_id_file = '[UNDEF]'

2017-10-24 18:59:03 us=218077 use_iv = ENABLED

2017-10-24 18:59:03 us=218087 test_crypto = DISABLED

2017-10-24 18:59:03 us=218096 tls_server = DISABLED

2017-10-24 18:59:03 us=218106 tls_client = ENABLED

2017-10-24 18:59:03 us=218115 key_method = 2

2017-10-24 18:59:03 us=218125 ca_file = 'ca.crt'

2017-10-24 18:59:03 us=218134 ca_path = '[UNDEF]'

2017-10-24 18:59:03 us=218144 dh_file = '[UNDEF]'

2017-10-24 18:59:03 us=218153 cert_file = '[UNDEF]'

2017-10-24 18:59:03 us=218163 extra_certs_file = '[UNDEF]'

2017-10-24 18:59:03 us=218191 priv_key_file = '[UNDEF]'

2017-10-24 18:59:03 us=218201 pkcs12_file = '[UNDEF]'

2017-10-24 18:59:03 us=218211 cipher_list = '[UNDEF]'

2017-10-24 18:59:03 us=218220 tls_verify = '[UNDEF]'

2017-10-24 18:59:03 us=218230 tls_export_cert = '[UNDEF]'

2017-10-24 18:59:03 us=218239 verify_x509_type = 0

2017-10-24 18:59:03 us=218249 verify_x509_name = '[UNDEF]'

2017-10-24 18:59:03 us=218258 crl_file = '[UNDEF]'

2017-10-24 18:59:03 us=218268 ns_cert_type = 1

2017-10-24 18:59:03 us=218277 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218287 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218296 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218306 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218315 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218324 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218334 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218343 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218352 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218362 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218371 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218380 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218390 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218399 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218409 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218418 remote_cert_ku[i] = 0

2017-10-24 18:59:03 us=218427 remote_cert_eku = '[UNDEF]'

2017-10-24 18:59:03 us=218437 ssl_flags = 0

2017-10-24 18:59:03 us=218447 tls_timeout = 2

2017-10-24 18:59:03 us=218463 renegotiate_bytes = -1

2017-10-24 18:59:03 us=218482 renegotiate_packets = 0

2017-10-24 18:59:03 us=218503 renegotiate_seconds = 3600

2017-10-24 18:59:03 us=218517 handshake_window = 60

2017-10-24 18:59:03 us=218527 transition_window = 3600

2017-10-24 18:59:03 us=218537 single_session = DISABLED

2017-10-24 18:59:03 us=218546 push_peer_info = DISABLED

2017-10-24 18:59:03 us=218555 tls_exit = DISABLED

2017-10-24 18:59:03 us=218565 tls_auth_file = 'ta.key'

2017-10-24 18:59:03 us=218575 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218584 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218594 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218603 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218612 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218622 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218631 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218640 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218650 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218659 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218668 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218678 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218696 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218706 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218715 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218725 pkcs11_protected_authentication = DISABLED

2017-10-24 18:59:03 us=218734 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218744 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218754 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218763 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218772 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218782 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218791 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218801 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218810 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218820 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218829 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218839 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218848 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218858 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218867 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218876 pkcs11_private_mode = 00000000

2017-10-24 18:59:03 us=218886 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218895 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218905 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218914 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218926 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218936 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218946 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218955 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218965 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218974 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218984 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=218994 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=219003 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=219013 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=219022 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=219032 pkcs11_cert_private = DISABLED

2017-10-24 18:59:03 us=219041 pkcs11_pin_cache_period = -1

2017-10-24 18:59:03 us=219051 pkcs11_id = '[UNDEF]'

2017-10-24 18:59:03 us=219060 pkcs11_id_management = DISABLED

2017-10-24 18:59:03 us=219138 server_network = 0.0.0.0

2017-10-24 18:59:03 us=219160 server_netmask = 0.0.0.0

2017-10-24 18:59:03 us=219189 server_network_ipv6 = ::

2017-10-24 18:59:03 us=219201 server_netbits_ipv6 = 0

2017-10-24 18:59:03 us=219212 server_bridge_ip = 0.0.0.0

2017-10-24 18:59:03 us=219222 server_bridge_netmask = 0.0.0.0

2017-10-24 18:59:03 us=219232 server_bridge_pool_start = 0.0.0.0

2017-10-24 18:59:03 us=219243 server_bridge_pool_end = 0.0.0.0

2017-10-24 18:59:03 us=219252 ifconfig_pool_defined = DISABLED

2017-10-24 18:59:03 us=219262 ifconfig_pool_start = 0.0.0.0

2017-10-24 18:59:03 us=219273 ifconfig_pool_end = 0.0.0.0

2017-10-24 18:59:03 us=219283 ifconfig_pool_netmask = 0.0.0.0

2017-10-24 18:59:03 us=219292 ifconfig_pool_persist_filename = '[UNDEF]'

2017-10-24 18:59:03 us=219302 ifconfig_pool_persist_refresh_freq = 600

2017-10-24 18:59:03 us=219311 ifconfig_ipv6_pool_defined = DISABLED

2017-10-24 18:59:03 us=219321 ifconfig_ipv6_pool_base = ::

2017-10-24 18:59:03 us=219331 ifconfig_ipv6_pool_netbits = 0

2017-10-24 18:59:03 us=219340 n_bcast_buf = 256

2017-10-24 18:59:03 us=219350 tcp_queue_limit = 64

2017-10-24 18:59:03 us=219359 real_hash_size = 256

2017-10-24 18:59:03 us=219369 virtual_hash_size = 256

2017-10-24 18:59:03 us=219388 client_connect_script = '[UNDEF]'

2017-10-24 18:59:03 us=219398 learn_address_script = '[UNDEF]'

2017-10-24 18:59:03 us=219407 client_disconnect_script = '[UNDEF]'

2017-10-24 18:59:03 us=219417 client_config_dir = '[UNDEF]'

2017-10-24 18:59:03 us=219426 ccd_exclusive = DISABLED

2017-10-24 18:59:03 us=219436 tmp_dir = '/var/folders/__/0_2f0hyx0sb_vf_8ntys6hbc0000gn/T/'

2017-10-24 18:59:03 us=219445 push_ifconfig_defined = DISABLED

2017-10-24 18:59:03 us=219456 push_ifconfig_local = 0.0.0.0

2017-10-24 18:59:03 us=219466 push_ifconfig_remote_netmask = 0.0.0.0

2017-10-24 18:59:03 us=219475 push_ifconfig_ipv6_defined = DISABLED

2017-10-24 18:59:03 us=219485 push_ifconfig_ipv6_local = ::/0

2017-10-24 18:59:03 us=219495 push_ifconfig_ipv6_remote = ::

2017-10-24 18:59:03 us=219505 enable_c2c = DISABLED

2017-10-24 18:59:03 us=219514 duplicate_cn = DISABLED

2017-10-24 18:59:03 us=219524 cf_max = 0

2017-10-24 18:59:03 us=219533 cf_per = 0

2017-10-24 18:59:03 us=219543 max_clients = 1024

2017-10-24 18:59:03 us=219552 max_routes_per_client = 256

2017-10-24 18:59:03 us=219562 auth_user_pass_verify_script = '[UNDEF]'

2017-10-24 18:59:03 us=219572 auth_user_pass_verify_script_via_file = DISABLED

2017-10-24 18:59:03 us=219581 port_share_host = '[UNDEF]'

2017-10-24 18:59:03 us=219590 port_share_port = 0

2017-10-24 18:59:03 us=219600 client = ENABLED

2017-10-24 18:59:03 us=219609 pull = ENABLED

2017-10-24 18:59:03 us=219619 auth_user_pass_file = 'stdin'

2017-10-24 18:59:03 us=219630 OpenVPN 2.3.18 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Oct 19 2017

2017-10-24 18:59:03 us=220003 library versions: LibreSSL 2.5.5, LZO 2.10

2017-10-24 18:59:03 us=221031 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337

2017-10-24 18:59:03 us=221443 Need hold release from management interface, waiting...

2017-10-24 18:59:03 us=383455 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337

2017-10-24 18:59:03 us=410523 MANAGEMENT: CMD 'pid'

2017-10-24 18:59:03 *Tunnelblick: Obtained VPN username and password from the Keychain

2017-10-24 18:59:03 us=411061 MANAGEMENT: CMD 'state on'

2017-10-24 18:59:03 us=412724 MANAGEMENT: CMD 'state'

2017-10-24 18:59:03 us=413011 MANAGEMENT: CMD 'bytecount 1'

2017-10-24 18:59:03 us=413269 MANAGEMENT: CMD 'hold release'

2017-10-24 18:59:03 us=522349 MANAGEMENT: CMD 'username "Auth" "fuchs"'

2017-10-24 18:59:03 us=522900 MANAGEMENT: CMD 'password [...]'

2017-10-24 18:59:03 us=536857 WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead.

2017-10-24 18:59:03 us=537513 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2017-10-24 18:59:03 us=543791 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file

2017-10-24 18:59:03 us=545401 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-10-24 18:59:03 us=545766 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-10-24 18:59:03 us=547241 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 56 bytes

2017-10-24 18:59:03 us=548636 crypto_adjust_frame_parameters: Adjusting frame parameters for crypto by 28 bytes

2017-10-24 18:59:03 us=551165 Control Channel MTU parms [ L:1557 D:1184 EF:66 EB:0 ET:0 EL:3 ]

2017-10-24 18:59:03 us=551535 Socket Buffers: R=[196724->196724] S=[9216->9216]

2017-10-24 18:59:03 us=552810 MANAGEMENT: >STATE:1508864343,RESOLVE,,,

2017-10-24 18:59:03 us=611283 Data Channel MTU parms [ L:1557 D:1450 EF:57 EB:12 ET:0 EL:3 ]

2017-10-24 18:59:03 us=612061 Local Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'

2017-10-24 18:59:03 us=614362 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1557,tun-mtu 1500,proto UDPv4,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'

2017-10-24 18:59:03 us=615938 Local Options hash (VER=V4): 'ed844052'

2017-10-24 18:59:03 us=617465 Expected Remote Options hash (VER=V4): '8a244582'

2017-10-24 18:59:03 us=618951 UDPv4 link local (bound): [undef]

2017-10-24 18:59:03 us=620344 UDPv4 link remote: [AF_INET]222.222.222.222:1194

2017-10-24 18:59:03 us=623025 MANAGEMENT: >STATE:1508864343,WAIT,,,

2017-10-24 18:59:03 us=623454 event_wait returned 2

2017-10-24 18:59:03 us=626681 UDPv4 WRITE [42] to [AF_INET]222.222.222.222:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 sid=3c788b2d df26ceec tls_hmac=86282ff1 69fca8de b3d6f37e 991a57c0 e6c3d255 pid=[ #1 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ ] pid=0 DATA

2017-10-24 18:59:03 us=627035 UDPv4 write returned 42

2017-10-24 18:59:03 us=627802 event_wait returned 1

2017-10-24 18:59:03 us=672465 event_wait returned 1

2017-10-24 18:59:03 us=673391 UDPv4 read returned 54

2017-10-24 18:59:03 us=677029 UDPv4 READ [54] from [AF_INET]222.222.222.222:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 sid=277267f9 2d9357d6 tls_hmac=927115c2 f79d1ff2 3ffa396c 90d07d8a bfc33225 pid=[ #1 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 0 sid=3c788b2d df26ceec ] pid=0 DATA

2017-10-24 18:59:03 us=677408 MANAGEMENT: >STATE:1508864343,AUTH,,,

2017-10-24 18:59:03 us=677763 TLS: Initial packet from [AF_INET]222.222.222.222:1194, sid=277267f9 2d9357d6

2017-10-24 18:59:03 us=678093 event_wait returned 2

2017-10-24 18:59:03 us=681662 UDPv4 WRITE [50] to [AF_INET]222.222.222.222:1194: P_ACK_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=318aaa58 31f5f234 215da0d9 e41ce41a bcb7657c pid=[ #2 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 0 sid=277267f9 2d9357d6 ]

2017-10-24 18:59:03 us=682317 UDPv4 write returned 50

2017-10-24 18:59:03 us=682686 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

2017-10-24 18:59:03 us=683018 event_wait returned 1

2017-10-24 18:59:03 us=683724 UDPv4 WRITE [236] to [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=86f2cc36 b398f842 946946df ab819f7f b7b239fe pid=[ #3 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ ] pid=1 DATA 16030100 bd010000 b9030375 a251b335 09f7d38a cd7d5e92 a9546083 0a826bb[more...]

2017-10-24 18:59:03 us=684015 UDPv4 write returned 236

2017-10-24 18:59:03 us=763454 event_wait returned 1

2017-10-24 18:59:03 us=764100 UDPv4 read returned 1172

2017-10-24 18:59:03 us=767701 UDPv4 READ [1172] from [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=277267f9 2d9357d6 tls_hmac=08f4e3d3 9ed78f79 2ebb8e6c 27659865 8575b481 pid=[ #2 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 1 sid=3c788b2d df26ceec ] pid=1 DATA 16030300 31020000 2d03038a cc5e6728 047dba82 7b5a2afe e76a5ff8

2017-10-24 18:59:03 us=770115 event_wait returned 1

2017-10-24 18:59:03 us=773042 UDPv4 WRITE [50] to [AF_INET]222.222.222.222:1194: P_ACK_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=f2d8f03a efe8e71d b6566038 467783a6 3d828745 pid=[ #4 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 1 sid=277267f9 2d9357d6 ]

2017-10-24 18:59:03 us=773617 UDPv4 write returned 50

2017-10-24 18:59:03 us=775616 event_wait returned 1

2017-10-24 18:59:03 us=777407 UDPv4 read returned 1160

2017-10-24 18:59:03 us=781626 UDPv4 READ [1160] from [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=277267f9 2d9357d6 tls_hmac=42138775 1f232151 111c3e18 df72c8de 2af2a18d pid=[ #3 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ ] pid=2 DATA fc11dedc 73aca166 033177d4 2bc7af7a c426714d 2bc08406 94ca9554 7b5e781[more...]

2017-10-24 18:59:03 us=782098 event_wait returned 1

2017-10-24 18:59:03 us=785539 UDPv4 WRITE [50] to [AF_INET]222.222.222.222:1194: P_ACK_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=07aa55d4 2739830d cfd9bc52 c66f0336 6c8edb07 pid=[ #5 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 2 sid=277267f9 2d9357d6 ]

2017-10-24 18:59:03 us=785904 UDPv4 write returned 50

2017-10-24 18:59:03 us=787746 event_wait returned 1

2017-10-24 18:59:03 us=789642 UDPv4 read returned 1067

2017-10-24 18:59:03 us=794748 UDPv4 READ [1067] from [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=277267f9 2d9357d6 tls_hmac=341b8a05 47ec0b7d 996c34d5 38c231b7 c4a137ad pid=[ #4 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ ] pid=3 DATA 70093921 6eaa5d25 1a67c839 ccea29a0 df293602 e1af8626 6ce3eab1 0e4d3c4[more...]

2017-10-24 18:59:03 us=798931 VERIFY OK: depth=1, C=AT, ST=AT, L=Vienna, O=acmeinc, emailAddress=ferd...@macfuchs.com, CN=acmeincca

2017-10-24 18:59:03 us=801436 VERIFY OK: nsCertType=SERVER

2017-10-24 18:59:03 us=801822 VERIFY OK: depth=0, C=AT, ST=AT, L=Vienna, O=acmeinc, emailAddress=ferd...@macfuchs.com, CN=vpn.acmeinc.net

2017-10-24 18:59:03 us=830586 event_wait returned 1

2017-10-24 18:59:03 us=832545 UDPv4 WRITE [372] to [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=793c0a0c d4d83816 8e7dd8d5 931c43a4 ab7e2413 pid=[ #6 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 3 sid=277267f9 2d9357d6 ] pid=2 DATA 16030301 06100001 02010040 c0a6bd61 5d7d81e9 504abd38 d2529be2

2017-10-24 18:59:03 us=832864 UDPv4 write returned 372

2017-10-24 18:59:03 us=902083 event_wait returned 1

2017-10-24 18:59:03 us=902783 UDPv4 read returned 105

2017-10-24 18:59:03 us=906395 UDPv4 READ [105] from [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=277267f9 2d9357d6 tls_hmac=1ba469be 633756a7 134c36c7 22efb629 1a6ae3bd pid=[ #5 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 2 sid=3c788b2d df26ceec ] pid=4 DATA 14030300 01011603 03002822 f7bc2f75 332df7bf 7d1e747e 60ce3e2f

2017-10-24 18:59:03 us=907110 event_wait returned 1

2017-10-24 18:59:03 us=910379 UDPv4 WRITE [474] to [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=c96e0cb1 d53fd5e9 056d72a4 1f4f7b88 d96e45b1 pid=[ #7 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 4 sid=277267f9 2d9357d6 ] pid=3 DATA 17030301 9f000000 00000000 01ec189d 8227e838 bf6718e2 4d4bbc7a

2017-10-24 18:59:03 us=910700 UDPv4 write returned 474

2017-10-24 18:59:04 us=4773 event_wait returned 1

2017-10-24 18:59:04 us=5563 UDPv4 read returned 298

2017-10-24 18:59:04 us=9365 UDPv4 READ [298] from [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=277267f9 2d9357d6 tls_hmac=48c88f6f be894d51 be9258ef 820e16e6 839978fa pid=[ #6 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 3 sid=3c788b2d df26ceec ] pid=5 DATA 17030300 ef22f7bc 2f75332d f8445ddd a861a991 e1929c11 f5745621

2017-10-24 18:59:04 us=9761 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

2017-10-24 18:59:04 us=10078 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-10-24 18:59:04 us=10388 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

2017-10-24 18:59:04 us=10666 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2017-10-24 18:59:04 us=10949 event_wait returned 2

2017-10-24 18:59:04 us=11560 UDPv4 WRITE [50] to [AF_INET]222.222.222.222:1194: P_ACK_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=18460278 3b284c6e 805e9bc9 1de8d88e 30e0c38f pid=[ #8 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 5 sid=277267f9 2d9357d6 ]

2017-10-24 18:59:04 us=11849 UDPv4 write returned 50

2017-10-24 18:59:04 us=12379 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2017-10-24 18:59:04 us=12901 [vpn.acmeinc.net] Peer Connection Initiated with [AF_INET]222.222.222.222:1194

2017-10-24 18:59:05 us=165116 event_wait returned 0

2017-10-24 18:59:05 us=165857 MANAGEMENT: >STATE:1508864345,GET_CONFIG,,,

2017-10-24 18:59:05 us=168975 event_wait returned 1

2017-10-24 18:59:06 us=338342 event_wait returned 0

2017-10-24 18:59:06 us=339035 SENT CONTROL [vpn.acmeinc.net]: 'PUSH_REQUEST' (status=1)

2017-10-24 18:59:06 us=341798 event_wait returned 1

2017-10-24 18:59:06 us=344132 UDPv4 WRITE [84] to [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=3c788b2d df26ceec tls_hmac=25b40ca4 61a0c754 7573c14b d5f3104b 0e70bb94 pid=[ #9 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ ] pid=4 DATA 17030300 25000000 00000000 028184a5 5ace7f56 9c226442 ea9f2097 c8ff467[more...]

2017-10-24 18:59:06 us=344501 UDPv4 write returned 84

2017-10-24 18:59:06 us=344874 event_wait returned 1

2017-10-24 18:59:06 us=393367 event_wait returned 1

2017-10-24 18:59:06 us=394043 UDPv4 read returned 50

2017-10-24 18:59:06 us=397915 UDPv4 READ [50] from [AF_INET]222.222.222.222:1194: P_ACK_V1 kid=0 sid=277267f9 2d9357d6 tls_hmac=3e492bb9 0b8389c2 88b697cf 56562843 600dfeda pid=[ #7 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ 4 sid=3c788b2d df26ceec ]

2017-10-24 18:59:06 us=398841 event_wait returned 1

2017-10-24 18:59:06 us=400210 UDPv4 read returned 315

2017-10-24 18:59:06 us=402835 UDPv4 READ [315] from [AF_INET]222.222.222.222:1194: P_CONTROL_V1 kid=0 sid=277267f9 2d9357d6 tls_hmac=1a7f261b 3688ca5a 6323eee2 8dba9331 eb112af3 pid=[ #8 / time = (1508864343) Tue Oct 24 18:59:03 2017 ] [ ] pid=6 DATA 17030301 0c22f7bc 2f75332d f95e1dfc 9b10780c 016075ed 33e810b1 72786e3[more...]

2017-10-24 18:59:06 us=403144 PUSH: Received control message: 'PUSH_REPLY,route 192.168.99.0 255.255.255.0,route 192.168.62.0 255.255.255.0,dhcp-option DOMAIN local.acmeinc.net,dhcp-option DNS 192.168.61.10,route-gateway 10.0.10.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.0.10.5 255.255.255.0'

2017-10-24 18:59:06 us=404427 OPTIONS IMPORT: timers and/or timeouts modified

2017-10-24 18:59:06 us=405611 OPTIONS IMPORT: --ifconfig/up options modified

2017-10-24 18:59:06 us=406736 OPTIONS IMPORT: route options modified

2017-10-24 18:59:06 us=408251 OPTIONS IMPORT: route-related options modified

2017-10-24 18:59:06 us=411389 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

2017-10-24 18:59:06 us=413599 Opening utun (connect(AF_SYS_CONTROL)): Resource busy

2017-10-24 18:59:06 us=413959 Opening utun (connect(AF_SYS_CONTROL)): Resource busy

2017-10-24 18:59:06 us=419112 Opened utun device utun2

2017-10-24 18:59:06 us=419607 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

2017-10-24 18:59:06 us=427334 MANAGEMENT: >STATE:1508864346,ASSIGN_IP,,10.0.10.5,

2017-10-24 18:59:06 us=432489 /sbin/ifconfig utun2 delete

ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address

2017-10-24 18:59:06 us=464929 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure

2017-10-24 18:59:06 us=465695 /sbin/ifconfig utun2 10.0.10.5 10.0.10.5 netmask 255.255.255.0 mtu 1500 up

2017-10-24 18:59:06 us=471725 /sbin/route add -net 10.0.10.0 10.0.10.5 255.255.255.0

add net 10.0.10.0: gateway 10.0.10.5

2017-10-24 18:59:06 us=483553 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun2 1500 1557 10.0.10.5 255.255.255.0 init

**********************************************

Start of output from client.up.tunnelblick.sh

Tunnelblick developer

unread,

Nov 3, 2017, 7:04:29 AM11/3/17

to tunnelblick-discuss

Please follow the instructions at Read Before You Post to get the info needed to diagnose problems and then post that info.

For your particular situation:

Please remember to set the "VPN log level" to "OpenVPN level 3". (It is currently set to11.)
and
Please wait three minutes after connecting to the VPN before clicking "Disconnect", and then wait three more minutes before getting the "diagnostic info".

Reply all

Reply to author

Forward

0 new messages