Can I add my version of OpenVPN to Tunnelblick?

[Руслан Лутфуллин]

Can I add my version of OpenVPN to Tunnelblick? I want to add my patched xor version of OpenVPN.

[Tunnelblick developer]

What is your "patched xor version"? Each copy of OpenVPN included in Tunnelblick already has been patched with our own version of the "openvpn_xorpatch", see Tunnelblick and openvpn_xorpatch. So adding your own version is not necessary if you want that patch.

If you are talking about some other patch, please share it -- that's what Open Source is all about.

To answer your question, though: yes, you can add your own version(s) of OpenVPN to Tunnelblick. Note that:

• You must build OpenVPN with static-linked SSL libraries (either OpenSSL or LibreSSL);
  
• You must also build "openvpn-down-root.so"; and
  
• You must add your versions of the two binaries to the Tunnelblick application as described below. Doing that invalidates the application's digital signature, which means that there may be extra prompts for your login password after you update Tunnelblick (if you do update it) to access usernames/passwords/passphrases that have been saved in the Keychain.
  
• If you update Tunnelblick, the update will not include your version(s).

To add your version to Tunnelblick:

1. Create a folder named with the version of OpenVPN and the name and version of the SSL libraries. For example, for OpenVPN version 1.2.3 linked with OpenSSL 4.5.6, the folder would be named "openvpn-1.2.3-openssl-4.5.6".
   
2. Put your OpenVPN binary, named "openvpn", into the folder.
   
3. Put your "openvpn-down-root.so" binary (with that exact name) in the folder.
   
4. Put the folder inside the /Applications/Tunnelblick.app/Contents/Resources/openvpn folder.