No active connections

101 views
Skip to first unread message

Adrienne Sörbom

unread,
Dec 15, 2016, 2:30:58 AM12/15/16
to tunnelblick-discuss
Hi, I cannot connect. Have read all FAC:s, but cannot find out what to do. Grateful for help. Adrienne. 

As requested, here is the log: 

*Tunnelblick: OS X 10.9.5; Tunnelblick 3.6.9 (build 4685); Admin user
git commit 6a738c42db959d53f7f2cd156aa79eb61b8856d9


Configuration Sweden

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/Sweden.tblk:

client
dev tun
proto udp
ns-cert-type server
cipher BF-CBC
resolv-retry infinite
auth-user-pass
persist-key
persist-tun
nobind
comp-lzo
verb 2
<ca>
[Security-related line(s) omitted]
</ca>


================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) <Linked Against>

================================================================================

There are no unusual files in Sweden.tblk

================================================================================

Configuration preferences:

-resetPrimaryInterfaceAfterDisconnect = 1
-keychainHasUsernameAndPassword = 1
-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:


================================================================================

Program preferences:

placeIconInStandardPositionInStatusBar = 1
launchAtNextLogin = 1
notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
    "3.6.9 (build 4685)"
)
lastLaunchTime = 503476831.728039
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = Sweden
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
updateSendProfileInfo = 1
NSWindow Frame SettingsSheetWindow = 107 95 829 524 0 0 1366 746 
NSWindow Frame ConnectingWindow = 488 433 389 187 0 0 1366 746 
detailsWindowFrameVersion = 4685
detailsWindowFrame = {{2, 232}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = log
leftNavSelectedDisplayName = Sweden
AdvancedWindowTabIdentifier = vpnCredentials
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SUSendProfileInfo = 1
SULastCheckTime = 2016-12-15 07:10:06 +0000
SULastProfileSubmissionDate = 2016-12-14 20:39:19 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.9.5; Tunnelblick 3.6.9 (build 4685)
2016-12-15 08:15:52 *Tunnelblick: Attempting connection with Sweden; Set nameserver = 769; monitoring connection
2016-12-15 08:15:52 *Tunnelblick: openvpnstart start Sweden.tblk 1338 769 0 3 0 1066288 -ptADGNWradsgnw 2.3.12-openssl-1.0.2j
2016-12-15 08:15:52 *Tunnelblick: openvpnstart log:
     OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
     
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.12-openssl-1.0.2j/openvpn
          --daemon
          --log
          /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SSweden.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1066288.1338.openvpn.log
          --cd
          /Library/Application Support/Tunnelblick/Shared/Sweden.tblk/Contents/Resources
          --verb
          3
          --config
          /Library/Application Support/Tunnelblick/Shared/Sweden.tblk/Contents/Resources/config.ovpn
          --verb
          3
          --cd
          /Library/Application Support/Tunnelblick/Shared/Sweden.tblk/Contents/Resources
          --management
          127.0.0.1
          1338
          --management-query-passwords
          --management-hold
          --script-security
          2
          --up
          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -r -w -ptADGNWradsgnw
          --down
          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -r -w -ptADGNWradsgnw

2016-12-15 08:15:52 *Tunnelblick: openvpnstart starting OpenVPN
2016-12-15 08:15:52 *Tunnelblick: Established communication with OpenVPN
2016-12-15 08:15:52 *Tunnelblick: Obtained VPN username and password from the Keychain
2016-12-15 08:15:52 OpenVPN 2.3.12 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Nov 17 2016
2016-12-15 08:15:52 library versions: OpenSSL 1.0.2j  26 Sep 2016, LZO 2.09
2016-12-15 08:15:52 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1338
2016-12-15 08:15:52 Need hold release from management interface, waiting...
2016-12-15 08:15:52 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1338
2016-12-15 08:15:52 MANAGEMENT: CMD 'pid'
2016-12-15 08:15:52 MANAGEMENT: CMD 'state on'
2016-12-15 08:15:52 MANAGEMENT: CMD 'state'
2016-12-15 08:15:52 MANAGEMENT: CMD 'bytecount 1'
2016-12-15 08:15:52 MANAGEMENT: CMD 'hold release'
2016-12-15 08:15:52 MANAGEMENT: CMD 'username "Auth" "Tigge4t"'
2016-12-15 08:15:52 MANAGEMENT: CMD 'password [...]'
2016-12-15 08:15:52 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2016-12-15 08:15:52 Socket Buffers: R=[196724->196724] S=[9216->9216]
2016-12-15 08:15:52 MANAGEMENT: >STATE:1481786152,RESOLVE,,,
2016-12-15 08:15:52 UDPv4 link local: [undef]
2016-12-15 08:15:52 UDPv4 link remote: [AF_INET]80.67.8.197:443
2016-12-15 08:15:52 MANAGEMENT: >STATE:1481786152,WAIT,,,
2016-12-15 08:15:53 MANAGEMENT: >STATE:1481786153,AUTH,,,
2016-12-15 08:15:53 TLS: Initial packet from [AF_INET]80.67.8.197:443, sid=88d0f9aa 56c3616b
2016-12-15 08:15:53 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2016-12-15 08:16:52 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2016-12-15 08:16:52 TLS Error: TLS handshake failed
2016-12-15 08:16:52 SIGUSR1[soft,tls-error] received, process restarting
2016-12-15 08:16:52 MANAGEMENT: >STATE:1481786212,RECONNECTING,tls-error,,
2016-12-15 08:16:52 MANAGEMENT: CMD 'hold release'
2016-12-15 08:16:52 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2016-12-15 08:16:52 Socket Buffers: R=[196724->196724] S=[9216->9216]
2016-12-15 08:16:52 MANAGEMENT: >STATE:1481786212,RESOLVE,,,
2016-12-15 08:16:52 UDPv4 link local: [undef]
2016-12-15 08:16:52 UDPv4 link remote: [AF_INET]80.67.8.197:443
2016-12-15 08:16:52 MANAGEMENT: >STATE:1481786212,WAIT,,,
2016-12-15 08:17:07 MANAGEMENT: >STATE:1481786227,AUTH,,,
2016-12-15 08:17:07 TLS: Initial packet from [AF_INET]80.67.8.197:443, sid=d5c42446 bf4e1e28
2016-12-15 08:17:08 VERIFY OK: depth=1, C=GB, ST=LN, L=London, O=vpnsvc, OU=vpnsvc, CN=vpnsvc.com, name=vpnsvc, emailAddress=n...@vpnsvc.com
2016-12-15 08:17:08 VERIFY OK: nsCertType=SERVER
2016-12-15 08:17:08 VERIFY OK: depth=0, C=GB, ST=LN, L=London, O=vpnsvc, OU=vpnsvc, CN=vpnsvc, name=vpnsvc, emailAddress=n...@vpnsvc.com
2016-12-15 08:17:12 *Tunnelblick: Disconnecting; VPN Details… window disconnect button pressed
2016-12-15 08:17:12 *Tunnelblick: No 'pre-disconnect.sh' script to execute
2016-12-15 08:17:12 *Tunnelblick: Disconnecting using 'kill'
2016-12-15 08:17:12 event_wait : Interrupted system call (code=4)
2016-12-15 08:17:12 SIGTERM[hard,] received, process exiting
2016-12-15 08:17:12 MANAGEMENT: >STATE:1481786232,EXITING,SIGTERM,,
2016-12-15 08:17:13 *Tunnelblick: No 'post-disconnect.sh' script to execute
2016-12-15 08:17:13 *Tunnelblick: Expected disconnection occurred.

================================================================================

"Sanitized" full configuration file

client
dev tun 
proto udp 
; Cert
ns-cert-type server
cipher BF-CBC
;Host
resolv-retry infinite
;auth
auth-user-pass

persist-key
persist-tun
nobind
comp-lzo
verb 2
<ca>
 [Security-related line(s) omitted]
</ca>



================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 ::1 prefixlen 128 
inet 127.0.0.1 netmask 0xff000000 
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 98:fe:94:4f:e9:f0 
inet6 fe80::9afe:94ff:fe4f:e9f0%en0 prefixlen 64 scopeid 0x4 
inet 10.0.0.218 netmask 0xffffff00 broadcast 10.0.0.255
inet6 2601:647:4900:f2d6:9afe:94ff:fe4f:e9f0 prefixlen 64 autoconf 
inet6 2601:647:4900:f2d6:cdae:25cb:37ad:88e3 prefixlen 64 autoconf temporary 
inet6 2601:647:4900:f2d6::7bcf prefixlen 64 
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
en4: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=60<TSO4,TSO6>
ether 32:00:1a:f1:3b:a0 
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 9a:fe:94:f4:6e:00 
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en4 flags=3<LEARNING,DISCOVER>
       ifmaxaddr 0 port 5 priority 0 path cost 0
nd6 options=1<PERFORMNUD>
media: <unknown type>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether 0a:fe:94:4f:e9:f0 
media: autoselect
status: inactive

================================================================================

Console Log:

2016-12-15 07:21:21 Tunnelblick[50865] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:21:21 Tunnelblick[50865] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:22:44 Tunnelblick[50865] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:22:44 Tunnelblick[50865] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:25:27 Tunnelblick[50865] Invalid color System, labelColor (warning given only once)
2016-12-15 07:27:41 sudo[67678]     root : TTY=unknown ; PWD=/private/tmp/PKInstallSandbox.XhLl7L/Scripts/com.adobe.acrobat.AcroRdrDCUpd1502020042_MUI.Skk34W ; USER=root ; COMMAND=/private/tmp/PKInstallSandbox.XhLl7L/Scripts/com.adobe.acrobat.AcroRdrDCUpd1502020042_MUI.Skk34W/Tools/AcroPatchInstall.app/Contents/MacOS/AcroPatchInstall FixUninstallerIcon /Applications/Acrobat Uninstaller
2016-12-15 07:29:17 Tunnelblick[50865] setShutdownVariables: invoked, but have already set them
2016-12-15 07:29:18 Tunnelblick[50865] setShutdownVariables: invoked, but have already set them
2016-12-15 07:29:18 Tunnelblick[50865] applicationShouldTerminate: termination because of restart; delayed until 'shutdownTunnelblick' finishes
2016-12-15 07:29:18 Tunnelblick[50865] Finished shutting down Tunnelblick; allowing termination
2016-12-15 07:30:07 Tunnelblick[285] Tunnelblick: OS X 10.9.5; Tunnelblick 3.6.9 (build 4685)
2016-12-15 07:30:09 Tunnelblick[285] Set program update feedURL to https://www.tunnelblick.net/appcast-s.rss
2016-12-15 07:30:10 GoogleSoftwareUpdateAgent[263] 2016-12-15 07:30:10.318 GoogleSoftwareUpdateAgent[263/0x1047cb000] [lvl=2] -[KSUpdateCheckAction performAction] KSUpdateCheckAction starting update check for ticket(s): {(
                                        <KSTicket:0x10042fee0
                                        productID=com.google.widevine.installer
                                        version=6.0.0.12757
                                        xc=<KSPathExistenceChecker:0x10042fe30 path=/Library/Internet Plug-Ins/WidevineMediaOptimizer.plugin>
                                        serverType=Omaha
                                        url=https://tools.google.com/service/update2
                                        creationDate=2014-09-02 19:33:52
                                        ticketVersion=0
                                        >,
                                        <KSTicket:0x10042f890
                                        productID=com.google.GoogleDrive
                                        version=1.32.3889.0961
                                        xc=<KSPathExistenceChecker:0x10042ec60 path=/Applications/Google Drive.app>
                                        serverType=Omaha
                                        url=https://tools.google.com/service/update2
                                        creationDate=2014-02-20 18:23:01
                                        ticketVersion=1
                                        >
                                       )}
                                       Using server: <KSOmahaServer:0x10032b1f0
                                        engine=<KSUpdateEngine:0x100263830>
                                       >
2016-12-15 07:30:10 GoogleSoftwareUpdateAgent[263] 2016-12-15 07:30:10.334 GoogleSoftwareUpdateAgent[263/0x1047cb000] [lvl=2] -[KSOmahaServer(PrivateMethods) updateRequestElementForTicket:pingAllowed:isNewInstall:wasRollCall:wasUserActive:wasInstallActive:errors:] KSOmahaServer failed to verify the code signing of the application com.google.widevine.installer: <KSError:0x1005a6d40
                                        domain="com.google.UpdateEngine.CommonErrorDomain"
                                        code=2008
                                        userInfo={
                                        date = 2016-12-15 06:30:10 +0000;
                                        line = 248;
                                        filename = "KSCodeSigningVerification.m";
                                        function = "+[KSCodeSigningVerification verifyBundle:applicationId:error:]";
                                        NSLocalizedDescription = "KSCodeSigningVerification found mismatched bundle '/Library/Internet Plug-Ins/WidevineMediaOptimizer.plugin' identifier. The identifier is '(null)' instead of 'com.google.widevine.installer'.";
                                        }
                                       >
2016-12-15 07:30:10 Tunnelblick[285] Sparkle: ===== Tunnelblick =====
2016-12-15 07:30:10 Tunnelblick[285] Sparkle: Verified appcast signature
2016-12-15 07:30:12 GoogleSoftwareUpdateAgent[263] 2016-12-15 07:30:12.230 GoogleSoftwareUpdateAgent[263/0x1047cb000] [lvl=2] -[KSUpdateCheckAction performAction] KSUpdateCheckAction running KSServerUpdateRequest: <KSOmahaServerUpdateRequest:0x10671bf80
                                        server=<KSOmahaServer:0x10032b1f0>
                                        fallbackURLs=(
                                        )
                                        runningFetchers=0
                                        tickets=2
                                        body=
                                        <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
                                        <request protocol="3.0" version="KeystoneAgent-1.2.6.1370" ismachine="1" requestid="{0CFFA14B-E6CF-4D2C-BCBD-82420BCE8305}" dedup="cr" sessionid="{DDDEB8C1-A4D8-4BA5-A470-EB11461A9BB6}">
                                           <os platform="mac" version="10.9" arch="i486" sp="10.9.5_i486"></os>
                                           <app appid="com.google.widevine.installer" version="6.0.0.12757" lang="en-us" installage="834" brand="GGLG" signed="0">
                                               <ping rd="3635" ping_freshness="{2741F28E-7262-479D-B1BE-C190CB3E7D33}"></ping>
                                               <updatecheck></updatecheck>
                                           </app>
                                           <app appid="com.google.GoogleDrive" version="1.32.3889.0961" lang="en-us" installage="1028" installdate="3500" brand="GGLG" signed="1">
                                               <ping rd="3635" ad="3635" ping_freshness="{9655243A-5EB3-4C14-9736-E1B4D9A2BD95}"></ping>
                                               <updatecheck></updatecheck>
                                           </app>
                                        </request>
                                        headers={
                                        "X-GoogleUpdate-Interactivity" = bg;
                                        }
                                       >
2016-12-15 07:30:12 GoogleSoftwareUpdateAgent[263] 2016-12-15 07:30:12.580 GoogleSoftwareUpdateAgent[263/0x1047cb000] [lvl=2] -[KSUpdateCheckAction(KSServerUpdateRequestDelegate) serverRequest:fetchedWithResponse:] KSUpdateCheckAction received KSServerUpdateResponse: <KSOmahaServerUpdateResponse:0x1002978d0
                                        server=<KSOmahaServer:0x10032b1f0>
                                        tickets=2
                                        status=200
                                        data=
                                        <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
                                        <response protocol="3.0" server="prod">
                                           <daystart elapsed_days="3635" elapsed_seconds="81012"></daystart>
                                           <app appid="com.google.widevine.installer" cohort="" cohortname="" status="ok">
                                               <ping status="ok"></ping>
                                               <updatecheck status="noupdate"></updatecheck>
                                           </app>
                                           <app appid="com.google.GoogleDrive" cohort="" cohortname="" status="ok">
                                               <ping status="ok"></ping>
                                               <updatecheck status="noupdate"></updatecheck>
                                           </app>
                                        </response>
                                       >
2016-12-15 07:30:35 Tunnelblick[285] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:30:35 Tunnelblick[285] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:32:02 Tunnelblick[285] Invalid color System, labelColor (warning given only once)
2016-12-15 07:37:29 Tunnelblick[285] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:37:29 Tunnelblick[285] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:39:53 Tunnelblick[285] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:39:53 Tunnelblick[285] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:40:19 Tunnelblick[285] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2016-12-15 07:40:19 Tunnelblick[285] pthread_mutex_lock( &unloadKextsMutex ) failed; status = 16, errno = 2
2016-12-15 07:40:19 Tunnelblick[285] Finished shutting down Tunnelblick; allowing termination
2016-12-15 07:40:30 Tunnelblick[462] Tunnelblick: OS X 10.9.5; Tunnelblick 3.6.9 (build 4685)
2016-12-15 07:40:31 Tunnelblick[462] Set program update feedURL to https://www.tunnelblick.net/appcast-s.rss
2016-12-15 07:40:33 Tunnelblick[462] Sparkle: ===== Tunnelblick =====
2016-12-15 07:40:33 Tunnelblick[462] Sparkle: Verified appcast signature
2016-12-15 07:40:44 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:40:44 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:47:07 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:47:07 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:47:43 Tunnelblick[462] Invalid color System, labelColor (warning given only once)
2016-12-15 07:49:47 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:49:47 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 07:54:02 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 07:54:02 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 08:10:02 Tunnelblick[462] Sparkle: Verified appcast signature
2016-12-15 08:10:51 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 08:10:51 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'
2016-12-15 08:15:52 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'username'
2016-12-15 08:15:52 Tunnelblick[462] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-Sweden' account = 'password'

Tunnelblick developer

unread,
Dec 15, 2016, 12:53:05 PM12/15/16
to tunnelblick-discuss
This is likely to be a problem with that particular VPN server.

You need to contact your VPN service provider. That is the organization which gave you your configuration files, and perhaps a username and password, and to which you are probably paying a fee for VPN service. For more information, please see  Getting VPN Service.

Tunnelblick is just the free software that many VPN service providers recommend or supply to their customers. We do not provide VPN service, just software.
Reply all
Reply to author
Forward
0 new messages