Can't connect to VPN on High Sierra

phillip...@googlemail.com

unread,

Oct 5, 2017, 9:27:05 AM10/5/17

to tunnelblick-discuss

Hi,

always used Tunnelblick without issues (except it crashing always) but since the update nothing works anymore. I can't connect and if I can, I can't access anything. Is there a workaround?

*Tunnelblick: OS X 10.13.0; Tunnelblick 3.7.2a (build 4851)

2017-10-05 15:25:17 *Tunnelblick: Attempting connection with vpn-prod-phillip using shadow copy; Set nameserver = 769; monitoring connection

2017-10-05 15:25:17 *Tunnelblick: openvpnstart start vpn-prod-phillip.tblk 1337 769 0 1 0 1065330 -ptADGNWradsgnw 2.3.18-libressl-2.5.0

2017-10-05 15:25:27 *Tunnelblick: 



Could not start OpenVPN (openvpnstart returned with status #226)



Contents of the openvpnstart log:

*Tunnelblick: openvpnstart log:

     Loading tap-signed.kext

     stderr from kextload: /Applications/Tunnelblick.app/Contents/Resources/tap-signed.kext failed to load - (libkern/kext) kext (kmod) start/stop routine failed; check the system/kernel logs for errors or try kextutil(8).

     stderr from kextload: /Applications/Tunnelblick.app/Contents/Resources/tap-signed.kext failed to load - (libkern/kext) kext (kmod) start/stop routine failed; check the system/kernel logs for errors or try kextutil(8).

     stderr from kextload: /Applications/Tunnelblick.app/Contents/Resources/tap-signed.kext failed to load - (libkern/kext) kext (kmod) start/stop routine failed; check the system/kernel logs for errors or try kextutil(8).

     stderr from kextload: /Applications/Tunnelblick.app/Contents/Resources/tap-signed.kext failed to load - (libkern/kext) kext (kmod) start/stop routine failed; check the system/kernel logs for errors or try kextutil(8).

     stderr from kextload: /Applications/Tunnelblick.app/Contents/Resources/tap-signed.kext failed to load - (libkern/kext) kext (kmod) start/stop routine failed; check the system/kernel logs for errors or try kextutil(8).

     Unable to load net.tunnelblick.tun and/or net.tunnelblick.tap kexts in 5 tries. Status = 71

2017-10-05 15:25:17 *Tunnelblick: openvpnstart starting OpenVPN

I'm by no means an export in this kind of stuff but I already tried unloading these non-Apple kexts, rebooted and then the VPN connected. However, I couldn't access anything and as soon as I disconnected, I couldn't connect again.

Thanks in advance.

Tunnelblick developer

unread,

Oct 5, 2017, 9:57:20 AM10/5/17

to tunnelblick-discuss

Please see Tunnelblick and macOS High Sierra (10.13) about the kext loading problem.

I am concerned by your "(except it crashing always)" comment. Can you provide any details?

phillip...@googlemail.com

unread,

Oct 6, 2017, 3:05:30 AM10/6/17

to tunnelblick-discuss

I did read this post but I'm struggling to understand what my options here are. As I said, I'm not a VPN expert and have no clue what tun, taps, dev-type tuns etc. are. All I know is that I have a working (at least pre-10.13) config which did work on clients such as Tunnelblick and/or Shimo. With the update, none of these work anymore.

What exactly can I do to make the VPN work again?

Re "except it crashing always": I submitted quite a few screencasts on Tunnelblick crashing via mail. Never received a response, so..

Tunnelblick developer

unread,

Oct 6, 2017, 9:04:08 AM10/6/17

to tunnelblick-discuss

It is a difficult situation. To summarize/clarify:

In some situations, High Sierra blocks Tunnelblick from loading a system extension. macOS will pop-up a window that looks like this:

Tunnelblick's kexts are signed by "Jonathan K. Bullard" (me), so that's what should appear in the blocked-by-red area of the window.

The user then has 30 minutes to grant permission for the new system extension to be loaded. As the window says, that permission can be granted on the "Security & Privacy" pane of "System Preferences". (The window doesn't say it, but permission can be granted only on the "General" tab of that pane.) Here is a screenshot of that pane:

(Again, the "System software developer" will be "Jonathan K. Bullard".)

If the user doesn't grant permission within 30 minutes (from what I understand), the permission cannot ever be granted.

In other words, that system extension is permanently barred form being loaded by macOS, and the user can never connect to the VPN. I think that this is the situation in which you find yourself.

================

I have no record of emails from your email address. Did you submit them to devel...@tunnelblick.net? If not, please try that. If so, please email me privately (to jkbullard at gmail dot com) with the email address that you sent them from, so I can look into it. Don't put your email address in a reply to this unless you want it publicly available.

================

Having explained it, I now have an idea that might work for you and others like you who did not grant permission within the 30 minute window: Try a different version of Tunnelblick. It will have a different system extension which macOS hasn't seen, so macOS will block it, pop up the window about blocking it. Grant permission within the 30 minute window, and all will be well.

Please reply back to this discussion if that works!

By "different version of Tunnelblick", I mean that if you have been using the stable version of Tunnelblick (currently 3.7.2a), try the beta version (currently 3.7.3beta03) and vice-versa. (See Stable vs. Beta Releases.)

If you are currently using the stable release, you can just "update" to the beta release:

Launch Tunnelblick
Click on the Tunnelblick icon in the menu bar and click "VPN Details…". A new window will appear.
Click on the large "Preferences" button at the top of the new window.
Put a check in the "Check for updates to beta versions" checkbox.
Click the "Check Now" button.
You will be guided through the process of updating to the beta version.

If you are currently using the beta version, you must download the stable version and install it (by double-clicking, as usual). Installing the stable version over the beta (or vice versa) will preserve your configurations and preferences; the program is "smart enough" to recognize that it is doing an upgrade or downgrade. You can download stable and beta versions from the Tunnelblick Downloads page.

phillip...@googlemail.com

unread,

Oct 10, 2017, 8:55:04 PM10/10/17

to tunnelblick-discuss

Hey Jonathan,

thank you for your detailed response. I understand the issue Tunnelblick is facing on High Sierra. Thing is, I granted the permission in the security panel, within a 5 second window.

I begin to think that there's not a problem with Tunnelblick but with the VPN config file I was provided. At work for example, I can't access the VPN. If I'm in my home wifi, it works however but TB tells me that the public IP hasn't been changed (I assume it should have). What could cause this weird behavior?

Tunnelblick developer

unread,

Oct 10, 2017, 9:16:57 PM10/10/17

to tunnelblick-discuss

Your original post showed error messages that macOS was not loading the "kext". That doesn't seem to be what you are saying now.

There are two likely explanations:

That you didn't grant permissions to Tunnelblick to load the "kext" -- but you now say you did, so that's not the problem, leaving
You have a conflicting kext loaded. See Errors Loading Kexts (Device Drivers).

spku...@gmail.com

unread,

Dec 7, 2017, 5:01:10 AM12/7/17

to tunnelblick-discuss

Trying to connect since updating to High Sierra - stuck in a loop with failed authentication between "Making TCP connection" and "Authorizing".

Need help please so my wife can work remotely... Thanks!

Tunnelblick developer

unread,

Dec 7, 2017, 5:06:35 AM12/7/17

to tunnelblick-discuss

Please follow the instructions at Read Before You Post to get the info needed to diagnose problems and then post that info.

rme...@sdale.org

unread,

Jan 28, 2018, 4:02:57 PM1/28/18

to tunnelblick-discuss

Hello,

I can't connect to the updated VPN my school network provided me. I did a complete uninstall and reinstall to no avail. I followed all the steps to do before posting (except step 8; I could not find that setting on the advanced menu). I tried all the suggestions posted. Please be more help than my district tech.

*Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921); Admin user

git commit 88763bb2b2bfcc7debb3ddc78cdf5a350722717c

Configuration Connection

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/Connection.tblk:

client

dev tun

resolv-retry infinite

nobind

persist-key

persist-tun

ca cacert.pem

auth-user-pass

cipher AES-256-CBC

auth SHA1

comp-lzo

verb 3

nobind

remote 66.204.73.250 443

proto tcp-client

tls-remote "/C=US/ST=AR/L=Springdale/O=Springdale_Schools/OU=Technology/CN=Springdale_Cert/emailAddress=[redacted]@blank.org"

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

================================================================================

There are no unusual files in Connection.tblk

================================================================================

Configuration preferences:

-openvpnVersion = 2.4.4-openssl-1.0.2n

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

-doNotDisableIpv6onTun = 1

-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1

tunnelblickVersionHistory = (

"3.7.4b (build 4921)"

)

lastLaunchTime = 538860103.477247

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 102400

keyboardShortcutIndex = 1

updateCheckAutomatically = 1

NSWindow Frame SettingsSheetWindow = 305 -19 829 524 0 0 1440 877

NSWindow Frame ConnectingWindow = 525 531 389 187 0 0 1440 877

detailsWindowFrameVersion = 4921

detailsWindowFrame = {{520, 169}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = Connection

AdvancedWindowTabIdentifier = connectingAndDisconnecting

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

SUEnableAutomaticChecks = 1

SUScheduledCheckInterval = 86400

SULastCheckTime = 2018-01-28 19:34:57 +0000

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:53:34 *Tunnelblick: Attempting connection with Connection; Set nameserver = 769; monitoring connection

2018-01-28 13:53:34 *Tunnelblick: openvpnstart start Connection.tblk 1337 769 0 3 0 16688 -ptADGNWradsgnw 2.4.4-openssl-1.0.2n

2018-01-28 13:53:34 *Tunnelblick:

Could not start OpenVPN (openvpnstart returned with status #251)

Contents of the openvpnstart log:

*Tunnelblick: openvpnstart log:

OpenVPN returned with status 1, errno = 0:

Undefined error: 0

Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.4-openssl-1.0.2n/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SConnection.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_16688.1337.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 4921 3.7.4b (build 4921)"

--verb

3

--config

/Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents/Resources/config.ovpn

--verb

3

--cd

/Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents/Resources

--management

127.0.0.1

1337

--management-query-passwords

--management-hold

--script-security

2

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw

Contents of the OpenVPN log:

Options error: Unrecognized option or missing or extra parameter(s) in /Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents/Resources/config.ovpn:17: tls-remote (2.4.4)

Use --help for more information.

More details may be in the Console Log's "All Messages"

================================================================================

"Sanitized" full configuration file

client

dev tun

resolv-retry infinite

nobind

persist-key

persist-tun

ca cacert.pem

auth-user-pass

cipher AES-256-CBC

auth SHA1

comp-lzo

verb 3

nobind

remote 66.204.73.250 443

proto tcp-client

tls-remote "/C=US/ST=AR/L=Springdale/O=Springdale_Schools/OU=Technology/CN=Springdale_Cert/emailAddress=[redacted]@blank.org"

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>

inet 127.0.0.1 netmask 0xff000000

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

nd6 options=201<PERFORMNUD,DAD>

gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280

stf0: flags=0<> mtu 1280

XHC20: flags=0<> mtu 0

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

ether 2c:f0:ee:09:8a:96

inet6 fe80::147f:2e9c:4c3f:2873%en0 prefixlen 64 secured scopeid 0x5

inet 10.0.1.7 netmask 0xffffff00 broadcast 10.0.1.255

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

ether 0e:f0:ee:09:8a:96

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484

ether da:2a:64:b1:61:d9

inet6 fe80::d82a:64ff:feb1:61d9%awdl0 prefixlen 64 scopeid 0x7

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=60<TSO4,TSO6>

ether 32:00:1f:bf:e0:00

media: autoselect <full-duplex>

status: inactive

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether 32:00:1f:bf:e0:00

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x2

member: en1 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 8 priority 0 path cost 0

nd6 options=201<PERFORMNUD,DAD>

media: <unknown type>

status: inactive

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

inet6 fe80::2acb:90f:873c:75c2%utun0 prefixlen 64 scopeid 0xa

nd6 options=201<PERFORMNUD,DAD>

================================================================================

Console Log:

2018-01-28 11:21:59 Tunnelblick[875] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.5beta05 (build 4980)

2018-01-28 11:22:02 tunnelblickd[906] Status = 251 from tunnelblick-helper command 'start Connection.tblk 1337 769 0 1 0 1065264 -ptADGNWradsgnw 2.5_git_5a0e82c-libressl-2.6.3'

2018-01-28 11:22:02 Tunnelblick[875] tunnelblickd status from start: 251

2018-01-28 11:22:03 Tunnelblick[875] Sparkle: ===== Tunnelblick =====

2018-01-28 11:22:03 Tunnelblick[875] Sparkle: Verified appcast signature

2018-01-28 12:11:31 ksinstall[1155] 2018-01-28 12:11:31.631 ksinstall[1155/0xa9b2c1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer started.

2018-01-28 12:11:31 ksinstall[1155] 2018-01-28 12:11:31.644 ksinstall[1155/0xa9b2c1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer starting Installation.

2018-01-28 12:11:32 ksinstall[1155] 2018-01-28 12:11:32.275 ksinstall[1155/0xa9b2c1c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer ran successfully.

2018-01-28 12:16:44 Tunnelblick[875] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-01-28 12:16:44 Tunnelblick[875] Finished shutting down Tunnelblick; allowing termination

2018-01-28 12:18:56 com.apple.xpc.launchd[1] Could not find and/or execute program specified by service: 2: No such file or directory: /Applications/Tunnelblick.app/Contents/MacOS/Tunnelblick

2018-01-28 13:10:45 ksinstall[448] 2018-01-28 13:10:45.663 ksinstall[448/0xa9b381c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer started.

2018-01-28 13:10:45 ksinstall[448] 2018-01-28 13:10:45.678 ksinstall[448/0xa9b381c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer starting Installation.

2018-01-28 13:10:46 ksinstall[448] 2018-01-28 13:10:46.431 ksinstall[448/0xa9b381c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer ran successfully.

2018-01-28 13:15:32 ksinstall[495] 2018-01-28 13:15:32.660 ksinstall[495/0xa9b381c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer started.

2018-01-28 13:15:32 ksinstall[495] 2018-01-28 13:15:32.678 ksinstall[495/0xa9b381c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer starting Installation.

2018-01-28 13:15:33 ksinstall[495] 2018-01-28 13:15:33.372 ksinstall[495/0xa9b381c0] [lvl=2] -[KeystoneInstallTool main] Google Software Update installer ran successfully.

2018-01-28 13:16:18 Tunnelblick[530] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:16:18 Tunnelblick[530] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.

2018-01-28 13:16:33 Tunnelblick[530] Tunnelblick needs to:

• Be installed in /Applications as Tunnelblick

• Change ownership and permissions of the program to secure it

• Secure configurations

2018-01-28 13:16:33 Tunnelblick[530] Beginning installation or repair

2018-01-28 13:16:34 Tunnelblick[530] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-28 13:16:33. 1 arguments: 0x0017

Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755

Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0

Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755

Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users/rachelmeyer with owner 0:0 and permissions 755

Changed ownership of /Users/rachelmeyer/Library/Application Support/Tunnelblick from 501:20 to 501:80

Changed ownership of /Users/rachelmeyer/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

tunnelblickdHashOK = NO

launchctlPlistHashOK = NO

tunnelblickdPlistOK = NO

socketOK = NO

Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

2018-01-28 13:16:34 Tunnelblick[530] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-01-28 13:16:35 Tunnelblick[541] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:16:35 Tunnelblick[530] Finished shutting down Tunnelblick; allowing termination

2018-01-28 13:16:35 Tunnelblick[541] Launching a thread to remove the old login item (if any) so we can use the new mechanism that controls Tunnelblick's launch on login

2018-01-28 13:16:35 Tunnelblick[541] Copied our 'net.tunnelblick.tunnelblick.LaunchAtLogin.plist' into ~/Library/LaunchAgents

2018-01-28 13:16:35 Tunnelblick[541] No old login item to remove

2018-01-28 13:16:36 Tunnelblick[541] Sparkle: ===== Tunnelblick =====

2018-01-28 13:16:36 Tunnelblick[541] Sparkle: Verified appcast signature

2018-01-28 13:16:36 Tunnelblick[541] Copied easy-rsa

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 700 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-ca

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 600 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/vars

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-key-server

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-key-pass

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-req

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-req-pass

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 700 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/ChangeLog

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 700 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 700 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/ca

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/server

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/COMMON

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/client

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 600 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/openssl-1.0.cnf

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/easyrsa

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/vars.example

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/COPYING

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 700 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Intro-To-PKI.md

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Readme.md

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Hacking.md

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Advanced.md

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/TODO

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Upgrade-Notes.md

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 700 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing/gpl-2.0.txt

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/KNOWN_ISSUES

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README.quickstart.md

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/clean-all

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-dh

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 600 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.6.cnf

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/pkitool

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/sign-req

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-key-pkcs12

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/whichopensslcnf

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-inter

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/README

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/revoke-full

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 600 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.8.cnf

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/TB-version.txt

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/list-crl

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/build-key

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 755 to 500 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/inherit-inter

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 600 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/openssl-1.0.0.cnf

2018-01-28 13:16:36 Tunnelblick[541] Changed permissions from 644 to 400 on /Users/rachelmeyer/Library/Application Support/Tunnelblick/easy-rsa/v3version.txt

2018-01-28 13:19:08 Tunnelblick[541] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn: One or more CR characters have been removed or replaced with LF characters

2018-01-28 13:19:08 Tunnelblick[541] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn at line 7: Copied cacert.pem

2018-01-28 13:19:08 Tunnelblick[541] Changed permissions from 644 to 740 on /private/var/folders/mz/50tycp8s7zv08mylk78lf1cm0000gn/T/Tunnelblick-rFfDxo/Connection.tblk/Contents/Resources/cacert.pem

2018-01-28 13:19:08 Tunnelblick[541] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn: Converted OpenVPN configuration

2018-01-28 13:19:52 Tunnelblick[592] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:19:53 Tunnelblick[592] Tunnelblick can only run when it is /Applications/Tunnelblick.app; path = /Users/rachelmeyer/Desktop/Tunnelblick.app.

2018-01-28 13:20:02 Tunnelblick[592] Tunnelblick needs to:

• Be installed in /Applications as Tunnelblick

• Change ownership and permissions of the program to secure it

• Secure configurations

2018-01-28 13:20:02 Tunnelblick[592] Beginning installation or repair

2018-01-28 13:20:03 Tunnelblick[592] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-28 13:20:02. 1 arguments: 0x0017

Copied /Users/rachelmeyer/Desktop/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Tunnelblick installer finished without error

2018-01-28 13:20:03 Tunnelblick[592] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-01-28 13:20:03 Tunnelblick[600] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:20:03 Tunnelblick[592] Finished shutting down Tunnelblick; allowing termination

2018-01-28 13:20:04 Tunnelblick[600] Sparkle: ===== Tunnelblick =====

2018-01-28 13:20:04 Tunnelblick[600] Sparkle: Verified appcast signature

2018-01-28 13:20:21 Tunnelblick[611] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:20:21 Tunnelblick[611] Tunnelblick can only run when it is /Applications/Tunnelblick.app; path = /Users/rachelmeyer/Desktop/Tunnelblick.app.

2018-01-28 13:20:26 Tunnelblick[611] The Tunnelblick installation was cancelled by the user.

2018-01-28 13:20:26 Tunnelblick[611] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-01-28 13:20:26 Tunnelblick[611] Finished shutting down Tunnelblick; allowing termination

2018-01-28 13:20:31 Tunnelblick[616] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:20:32 Tunnelblick[616] Tunnelblick can only run when it is /Applications/Tunnelblick.app; path = /Users/rachelmeyer/Desktop/Tunnelblick.app.

2018-01-28 13:20:43 Tunnelblick[600] SIGTERM (signal 15) received

2018-01-28 13:20:43 Tunnelblick[600] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-01-28 13:20:44 Tunnelblick[600] Finished shutting down Tunnelblick; allowing termination

2018-01-28 13:20:44 Tunnelblick[616] Tunnelblick needs to:

• Be installed in /Applications as Tunnelblick

• Change ownership and permissions of the program to secure it

• Secure configurations

2018-01-28 13:20:44 Tunnelblick[616] Beginning installation or repair

2018-01-28 13:20:45 Tunnelblick[616] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-28 13:20:45. 1 arguments: 0x0017

Moved /Applications/Tunnelblick.app to the Trash

Copied /Users/rachelmeyer/Desktop/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Tunnelblick installer finished without error

2018-01-28 13:20:46 Tunnelblick[616] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-01-28 13:20:46 Tunnelblick[626] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:20:46 Tunnelblick[616] Finished shutting down Tunnelblick; allowing termination

2018-01-28 13:20:47 Tunnelblick[626] Sparkle: ===== Tunnelblick =====

2018-01-28 13:20:47 Tunnelblick[626] Sparkle: Verified appcast signature

2018-01-28 13:21:24 Tunnelblick[626] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

2018-01-28 13:21:24 Tunnelblick[626] Finished shutting down Tunnelblick; allowing termination

2018-01-28 13:21:42 Tunnelblick[647] Tunnelblick: OS X 10.13.3; Tunnelblick 3.7.4b (build 4921)

2018-01-28 13:21:43 Tunnelblick[647] Sparkle: ===== Tunnelblick =====

2018-01-28 13:21:43 Tunnelblick[647] Sparkle: Verified appcast signature

2018-01-28 13:22:05 Tunnelblick[647] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn: One or more CR characters have been removed or replaced with LF characters

2018-01-28 13:22:05 Tunnelblick[647] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn at line 7: Copied cacert.pem

2018-01-28 13:22:05 Tunnelblick[647] Changed permissions from 644 to 740 on /private/var/folders/mz/50tycp8s7zv08mylk78lf1cm0000gn/T/Tunnelblick-VChtqM/Connection.tblk/Contents/Resources/cacert.pem

2018-01-28 13:22:05 Tunnelblick[647] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn: Converted OpenVPN configuration

2018-01-28 13:22:15 Tunnelblick[647] localNameFromDisplayName: 'Connection' is not a known displayName

2018-01-28 13:22:15 Tunnelblick[647] Tunnelblick needs to perform an action that requires administrator authorization.

2018-01-28 13:22:15 Tunnelblick[647] Beginning installation or repair

2018-01-28 13:22:15 Tunnelblick[647] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-28 13:22:15. 3 arguments: 0x0001

/Library/Application Support/Tunnelblick/Shared/Connection.tblk

/private/var/folders/mz/50tycp8s7zv08mylk78lf1cm0000gn/T/Tunnelblick-VChtqM/Connection.tblk

Copied /private/var/folders/mz/50tycp8s7zv08mylk78lf1cm0000gn/T/Tunnelblick-VChtqM/Connection.tblk

to /Library/Application Support/Tunnelblick/Shared/Connection.tblk.temp

Renamed /Library/Application Support/Tunnelblick/Shared/Connection.tblk.temp

to /Library/Application Support/Tunnelblick/Shared/Connection.tblk

Changed ownership of /Library/Application Support/Tunnelblick/Shared/Connection.tblk and its contents from 501:20 to 0:0

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Connection.tblk

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents/Resources

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents/Resources/cacert.pem

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Connection.tblk/Contents/Resources/config.ovpn

Tunnelblick installer finished without error

2018-01-28 13:22:29 tunnelblickd[665] Status = 251 from tunnelblick-helper command 'start Connection.tblk 1337 769 0 3 0 1065264 -ptADGNWradsgnw 2.4.4-openssl-1.0.2n'

2018-01-28 13:22:30 Tunnelblick[647] tunnelblickd status from start: 251

2018-01-28 13:34:55 Tunnelblick[647] Sparkle: Verified appcast signature

2018-01-28 13:38:58 Tunnelblick[647] Tunnelblick needs to perform an action that requires administrator authorization.

2018-01-28 13:38:58 Tunnelblick[647] Beginning installation or repair

2018-01-28 13:38:58 Tunnelblick[647] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-28 13:38:58. 2 arguments: 0x2001

/Library/Application Support/Tunnelblick/Shared/Connection.tblk

removed /Library/Application Support/Tunnelblick/Shared/Connection.tblk

Tunnelblick installer finished without error

2018-01-28 13:38:58 Tunnelblick[647] Uninstalled configuration file /Library/Application Support/Tunnelblick/Shared/Connection.tblk

2018-01-28 13:39:45 Tunnelblick[647] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn: One or more CR characters have been removed or replaced with LF characters

2018-01-28 13:39:45 Tunnelblick[647] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn at line 7: Copied cacert.pem

2018-01-28 13:39:45 Tunnelblick[647] Changed permissions from 644 to 740 on /private/var/folders/mz/50tycp8s7zv08mylk78lf1cm0000gn/T/Tunnelblick-e3yyQ0/Connection.tblk/Contents/Resources/cacert.pem

2018-01-28 13:39:45 Tunnelblick[647] Converting/Installing /Users/rachelmeyer/Downloads/Springdale Schools Mac VPN Client 2/Connection.ovpn: Converted OpenVPN configuration

2018-01-28 13:39:50 Tunnelblick[647] localNameFromDisplayName: 'Connection' is not a known displayName

2018-01-28 13:39:51 Tunnelblick[647] Tunnelblick needs to perform an action that requires administrator authorization.

2018-01-28 13:39:51 Tunnelblick[647] Beginning installation or repair

2018-01-28 13:39:51 Tunnelblick[647] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-28 13:39:51. 3 arguments: 0x0001

/Library/Application Support/Tunnelblick/Shared/Connection.tblk

/private/var/folders/mz/50tycp8s7zv08mylk78lf1cm0000gn/T/Tunnelblick-e3yyQ0/Connection.tblk

Copied /private/var/folders/mz/50tycp8s7zv08mylk78lf1cm0000gn/T/Tunnelblick-e3yyQ0/Connection.tblk