Connection to OpenVPN works, but needs 70 seconds and more for establishing

niklas.n...@gmail.com

unread,

Jan 6, 2018, 10:27:22 AM1/6/18

to tunnelblick-discuss

Good day, I have a small problem using tunnelblick with OpenVPN via PIVPN, running on a raspberry pi 3. While my iPhone and Fire Tablet connect to the VPN in a few seconds, tunnelblick needs about 70 seconds, but then finally connect successfully too. I checked out the tunnelblick log and found something strange, first I receive an error

2018-01-06 15:41:54 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2018-01-06 15:41:54 TLS Error: TLS handshake failed"

but then it seems to retry to connect and it works just fine. The 60 seconds time period mentioned in the log would match the total time for establishing the connection of about 70 seconds. I searched for this error, but it seems like this problem usually means that you can not connect to the VPN at all.

I am new into this, so if I missed some important information, please let me know.

Here is the full log:

*Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4b (build 4921); Admin user

git commit 88763bb2b2bfcc7debb3ddc78cdf5a350722717c

Configuration NiklasMBP

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/NiklasMBP.tblk:

client

dev tun

proto udp

remote XXX.myfritz.net 1194

resolv-retry infinite

nobind

persist-key

persist-tun

key-direction 1

remote-cert-tls server

tls-version-min 1.2

verify-x509-name server_123xy name

cipher AES-256-CBC

auth SHA256

comp-lzo

verb 1

<ca>

[Security-related line(s) omitted]

</ca>

<cert>

[Security-related line(s) omitted]

</cert>

<key>

[Security-related line(s) omitted]

</key>

<tls-auth>

[Security-related line(s) omitted]

</tls-auth>

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

================================================================================

There are no unusual files in NiklasMBP.tblk

================================================================================

Configuration preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

-lastConnectionSucceeded = 1

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

inhibitOutboundTunneblickTraffic = 0

launchAtNextLogin = 1

tunnelblickVersionHistory = (

"3.7.4b (build 4921)"

)

lastLaunchTime = 536942431.7409641

lastLanguageAtLaunchWasRTL = 0

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 102400

lastConnectedDisplayName = NiklasMBP

keyboardShortcutIndex = 1

updateCheckAutomatically = 1

NSWindow Frame ConnectingWindow = 434 423 412 232 0 0 1280 777

detailsWindowFrameVersion = 4921

detailsWindowFrame = {{302, 211}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = NiklasMBP

AdvancedWindowTabIdentifier = sounds

haveDealtWithOldTunTapPreferences = 1

haveDealtWithOldLoginItem = 1

SUEnableAutomaticChecks = 1

SUScheduledCheckInterval = 86400

SULastCheckTime = 2018-01-06 14:40:31 +0000

SUHasLaunchedBefore = 1

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.13.1; Tunnelblick 3.7.4b (build 4921)

2018-01-06 15:40:45 *Tunnelblick: Attempting connection with NiklasMBP; Set nameserver = 769; monitoring connection

2018-01-06 15:40:45 *Tunnelblick: openvpnstart start NiklasMBP.tblk 1337 769 0 3 0 1065264 -ptADGNWradsgnw 2.4.4-openssl-1.0.2n

2018-01-06 15:40:45 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.4-openssl-1.0.2n/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SNiklasMBP.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1065264.1337.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Shared/NiklasMBP.tblk/Contents/Resources

--setenv

IV_GUI_VER

"net.tunnelblick.tunnelblick 4921 3.7.4b (build 4921)"

--verb

3

--config

/Library/Application Support/Tunnelblick/Shared/NiklasMBP.tblk/Contents/Resources/config.ovpn

--verb

3

--cd

/Library/Application Support/Tunnelblick/Shared/NiklasMBP.tblk/Contents/Resources

--management

127.0.0.1

1337

--management-query-passwords

--management-hold

--script-security

2

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2018-01-06 15:40:45 *Tunnelblick: Established communication with OpenVPN

2018-01-06 15:40:45 OpenVPN 2.4.4 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Dec 7 2017

2018-01-06 15:40:45 library versions: OpenSSL 1.0.2n 7 Dec 2017, LZO 2.10

2018-01-06 15:40:45 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337

2018-01-06 15:40:45 Need hold release from management interface, waiting...

2018-01-06 15:40:45 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337

2018-01-06 15:40:45 MANAGEMENT: CMD 'pid'

2018-01-06 15:40:45 MANAGEMENT: CMD 'state on'

2018-01-06 15:40:45 MANAGEMENT: CMD 'state'

2018-01-06 15:40:45 MANAGEMENT: CMD 'bytecount 1'

2018-01-06 15:40:45 MANAGEMENT: CMD 'hold release'

2018-01-06 15:40:45 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2018-01-06 15:40:45 *Tunnelblick: openvpnstart starting OpenVPN

2018-01-06 15:40:53 MANAGEMENT: CMD 'password [...]'

2018-01-06 15:40:53 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

2018-01-06 15:40:53 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication

2018-01-06 15:40:53 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication

2018-01-06 15:40:53 MANAGEMENT: >STATE:1515249653,RESOLVE,,,,,,

2018-01-06 15:40:53 TCP/UDP: Preserving recently used remote address: [AF_INET6]2a02:8109:8000:1c:74af:9af6:8ab1:b74f:1194

2018-01-06 15:40:53 Socket Buffers: R=[196724->196724] S=[9216->9216]

2018-01-06 15:40:53 UDP link local: (not bound)

2018-01-06 15:40:54 UDP link remote: [AF_INET6]2a02:8109:8000:1c:74af:9af6:8ab1:b74f:1194

2018-01-06 15:40:54 MANAGEMENT: >STATE:1515249654,WAIT,,,,,,

2018-01-06 15:41:54 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

2018-01-06 15:41:54 TLS Error: TLS handshake failed

2018-01-06 15:41:54 SIGUSR1[soft,tls-error] received, process restarting

2018-01-06 15:41:54 MANAGEMENT: >STATE:1515249714,RECONNECTING,tls-error,,,,,

2018-01-06 15:41:54 MANAGEMENT: CMD 'hold release'

2018-01-06 15:41:54 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts

2018-01-06 15:41:54 TCP/UDP: Preserving recently used remote address: [AF_INET]91.63.103.81:1194

2018-01-06 15:41:54 Socket Buffers: R=[196724->196724] S=[9216->9216]

2018-01-06 15:41:54 UDP link local: (not bound)

2018-01-06 15:41:54 UDP link remote: [AF_INET]91.63.103.81:1194

2018-01-06 15:41:54 MANAGEMENT: >STATE:1515249714,WAIT,,,,,,

2018-01-06 15:41:54 MANAGEMENT: >STATE:1515249714,AUTH,,,,,,

2018-01-06 15:41:54 TLS: Initial packet from [AF_INET]91.63.103.81:1194, sid=3a78cee8 3176c8b9

2018-01-06 15:41:54 VERIFY OK: depth=1, CN=ChangeMe

2018-01-06 15:41:54 VERIFY KU OK

2018-01-06 15:41:54 Validating certificate extended key usage

2018-01-06 15:41:54 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

2018-01-06 15:41:54 VERIFY EKU OK

2018-01-06 15:41:54 VERIFY X509NAME OK: CN=server_123xy

2018-01-06 15:41:54 VERIFY OK: depth=0, CN=server_123xy

2018-01-06 15:41:54 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

2018-01-06 15:41:54 [server_123xy] Peer Connection Initiated with [AF_INET]91.63.103.81:1194

2018-01-06 15:41:55 MANAGEMENT: >STATE:1515249715,GET_CONFIG,,,,,,

2018-01-06 15:41:55 SENT CONTROL [server_123xy]: 'PUSH_REQUEST' (status=1)

2018-01-06 15:41:55 PUSH: Received control message: 'PUSH_REPLY,route 10.8.0.1 255.255.255.255,route 10.8.0.0 255.255.255.0,route 0.0.0.0 ,dhcp-option DNS 192.168.11.15,redirect-gateway def1,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.4 255.255.255.0,peer-id 1,cipher AES-256-GCM'

2018-01-06 15:41:55 OPTIONS IMPORT: timers and/or timeouts modified

2018-01-06 15:41:55 OPTIONS IMPORT: --ifconfig/up options modified

2018-01-06 15:41:55 OPTIONS IMPORT: route options modified

2018-01-06 15:41:55 OPTIONS IMPORT: route-related options modified

2018-01-06 15:41:55 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

2018-01-06 15:41:55 OPTIONS IMPORT: peer-id set

2018-01-06 15:41:55 OPTIONS IMPORT: adjusting link_mtu to 1625

2018-01-06 15:41:55 OPTIONS IMPORT: data channel crypto options modified

2018-01-06 15:41:55 Data Channel: using negotiated cipher 'AES-256-GCM'

2018-01-06 15:41:55 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

2018-01-06 15:41:55 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

2018-01-06 15:41:55 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)

2018-01-06 15:41:55 Opened utun device utun2

2018-01-06 15:41:55 do_ifconfig, tt->did_ifconfig_ipv6_setup=0

2018-01-06 15:41:55 MANAGEMENT: >STATE:1515249715,ASSIGN_IP,,10.8.0.4,,,,

2018-01-06 15:41:55 /sbin/ifconfig utun2 delete

ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address

2018-01-06 15:41:55 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure

2018-01-06 15:41:55 /sbin/ifconfig utun2 10.8.0.4 10.8.0.4 netmask 255.255.255.0 mtu 1500 up

2018-01-06 15:41:55 /sbin/route add -net 10.8.0.0 10.8.0.4 255.255.255.0

add net 10.8.0.0: gateway 10.8.0.4

2018-01-06 15:41:55 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun2 1500 1553 10.8.0.4 255.255.255.0 init

**********************************************

Start of output from client.up.tunnelblick.sh

Disabled IPv6 for 'Wi-Fi'

Disabled IPv6 for 'iPhone'

Disabled IPv6 for 'Bluetooth PAN'

Disabled IPv6 for 'Thunderbolt Bridge'

Retrieved from OpenVPN: name server(s) [ 192.168.11.15 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]

Not aggregating ServerAddresses because running on OS X 10.6 or higher

Setting search domains to 'openvpn' because running under OS X 10.6 or higher and the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected

Saved the DNS and SMB configurations so they can be restored

Did not change DNS ServerAddresses setting of '192.168.11.15' (but re-set it)

Changed DNS SearchDomains setting from '' to 'openvpn'

Changed DNS DomainName setting from 'fritz.box' to 'openvpn'

Did not change SMB NetBIOSName setting of ''

Did not change SMB Workgroup setting of ''

Did not change SMB WINSAddresses setting of ''

DNS servers '192.168.11.15' will be used for DNS queries when the VPN is active

NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.

Flushed the DNS cache via dscacheutil

/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil

Notified mDNSResponder that the DNS cache was flushed

Setting up to monitor system configuration with process-network-changes

End of output from client.up.tunnelblick.sh

**********************************************

2018-01-06 15:41:59 *Tunnelblick: No 'connected.sh' script to execute

2018-01-06 15:41:59 *Tunnelblick: Could not determine this computer's apparent public IP address before the connection was completed

2018-01-06 15:41:59 /sbin/route add -net 91.63.103.81 192.168.11.1 255.255.255.255

add net 91.63.103.81: gateway 192.168.11.1

2018-01-06 15:41:59 /sbin/route add -net 0.0.0.0 10.8.0.1 128.0.0.0

add net 0.0.0.0: gateway 10.8.0.1

2018-01-06 15:41:59 /sbin/route add -net 128.0.0.0 10.8.0.1 128.0.0.0

add net 128.0.0.0: gateway 10.8.0.1

2018-01-06 15:41:59 MANAGEMENT: >STATE:1515249719,ADD_ROUTES,,,,,,

2018-01-06 15:41:59 /sbin/route add -net 10.8.0.1 10.8.0.1 255.255.255.255

route: writing to routing socket: Can't assign requested address

add net 10.8.0.1: gateway 10.8.0.1: Can't assign requested address

2018-01-06 15:41:59 /sbin/route add -net 10.8.0.0 10.8.0.1 255.255.255.0

route: writing to routing socket: File exists

add net 10.8.0.0: gateway 10.8.0.1: File exists

2018-01-06 15:41:59 /sbin/route add -net 0.0.0.0 10.8.0.1 255.255.255.255

add net 0.0.0.0: gateway 10.8.0.1

2018-01-06 15:41:59 Initialization Sequence Completed

2018-01-06 15:41:59 MANAGEMENT: >STATE:1515249719,CONNECTED,SUCCESS,10.8.0.4,91.63.103.81,1194,,

2018-01-06 15:42:04 *Tunnelblick process-network-changes: A system configuration change was ignored

================================================================================

"Sanitized" full configuration file

client

dev tun

proto udp

remote XXX.myfritz.net 1194

resolv-retry infinite

nobind

persist-key

persist-tun

key-direction 1

remote-cert-tls server

tls-version-min 1.2

verify-x509-name server_123xy name

cipher AES-256-CBC

auth SHA256

comp-lzo

verb 1

<ca>

[Security-related line(s) omitted]

</ca>

<cert>

[Security-related line(s) omitted]

</cert>

<key>

[Security-related line(s) omitted]

</key>

<tls-auth>

[Security-related line(s) omitted]

</tls-auth>

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>

inet 127.0.0.1 netmask 0xff000000

inet6 ::1 prefixlen 128

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

nd6 options=201<PERFORMNUD,DAD>

gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280

stf0: flags=0<> mtu 1280

XHC20: flags=0<> mtu 0

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

ether ac:bc:32:b5:08:3b

inet 192.168.11.29 netmask 0xffffff00 broadcast 192.168.11.255

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

ether 0e:bc:32:b5:08:3b

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484

ether 5e:0c:f2:55:dd:a4

inet6 fe80::5c0c:f2ff:fe55:dda4%awdl0 prefixlen 64 scopeid 0x7

nd6 options=201<PERFORMNUD,DAD>

media: autoselect

status: active

en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=60<TSO4,TSO6>

ether 4a:00:03:b4:67:50

media: autoselect <full-duplex>

status: inactive

en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=60<TSO4,TSO6>

ether 4a:00:03:b4:67:51

media: autoselect <full-duplex>

status: inactive

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether 4a:00:03:b4:67:50

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x2

member: en1 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 8 priority 0 path cost 0

member: en2 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 9 priority 0 path cost 0

nd6 options=201<PERFORMNUD,DAD>

media: <unknown type>

status: inactive

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

options=6403<RXCSUM,TXCSUM,CHANNEL_IO,PARTIAL_CSUM,ZEROINVERT_CSUM>

inet6 fe80::bc50:779f:153:715a%utun0 prefixlen 64 scopeid 0xb

nd6 options=201<PERFORMNUD,DAD>

utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380

options=6403<RXCSUM,TXCSUM,CHANNEL_IO,PARTIAL_CSUM,ZEROINVERT_CSUM>

inet6 fe80::6ec3:59c7:d315:361f%utun1 prefixlen 64 scopeid 0xc

nd6 options=201<PERFORMNUD,DAD>

utun2: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500

options=6403<RXCSUM,TXCSUM,CHANNEL_IO,PARTIAL_CSUM,ZEROINVERT_CSUM>

inet 10.8.0.4 --> 10.8.0.4 netmask 0xffffff00

================================================================================

Console Log:

2018-01-06 13:16:19 Tunnelblick[634] Converting/Installing /Users/niklasschmidt/Downloads/Portunity.tblk/portunity.conf: Converted OpenVPN configuration

2018-01-06 13:16:51 Tunnelblick[634] localNameFromDisplayName: 'Portunity' is not a known displayName

2018-01-06 13:16:51 Tunnelblick[634] Tunnelblick muss eine Aktion durchführen, die Administratorrechte benötigt.

2018-01-06 13:16:51 Tunnelblick[634] Beginning installation or repair

2018-01-06 13:16:51 Tunnelblick[634] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-06 13:16:51. 3 arguments: 0x0001

/Library/Application Support/Tunnelblick/Shared/Portunity.tblk

/private/var/folders/d3/75r6y8k167g0f6pcr9rczdfw0000gn/T/Tunnelblick-IcHt6y/Portunity.tblk

Copied /private/var/folders/d3/75r6y8k167g0f6pcr9rczdfw0000gn/T/Tunnelblick-IcHt6y/Portunity.tblk

to /Library/Application Support/Tunnelblick/Shared/Portunity.tblk.temp

Renamed /Library/Application Support/Tunnelblick/Shared/Portunity.tblk.temp

to /Library/Application Support/Tunnelblick/Shared/Portunity.tblk

Changed ownership of /Library/Application Support/Tunnelblick/Shared/Portunity.tblk and its contents from 501:20 to 0:0

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Portunity.tblk

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Portunity.tblk/Contents

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/Portunity.tblk/Contents/Resources

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Portunity.tblk/Contents/Resources/ta.key

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Portunity.tblk/Contents/Resources/ca.crt

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/Portunity.tblk/Contents/Resources/config.ovpn

Tunnelblick installer finished without error

2018-01-06 13:18:47 Tunnelblick[634] Authorizing an operation without admin username/password because Tunnelblick is in administrator mode

2018-01-06 13:18:47 Tunnelblick[634] Tunnelblick muss eine Aktion durchführen, die Administratorrechte benötigt.

2018-01-06 13:18:47 Tunnelblick[634] Beginning installation or repair

2018-01-06 13:18:47 Tunnelblick[634] Authorizing an operation without admin username/password because Tunnelblick is in administrator mode

2018-01-06 13:18:48 Tunnelblick[634] Installation or repair succeeded; Log:

Tunnelblick installer started 2018-01-06 13:18:47. 3 arguments: 0x1001

/Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk

/Library/Application Support/Tunnelblick/Shared/Portunity.tblk

Copied /Library/Application Support/Tunnelblick/Shared/Portunity.tblk

to /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk.temp

Deleted /Library/Application Support/Tunnelblick/Shared/Portunity.tblk

Renamed /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk.temp

to /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk

Changed ownership of /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk and its contents from 0:0 to 501:80

Changed permissions from 755 to 750 on /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk

Changed permissions from 755 to 750 on /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk/Contents

Changed permissions from 755 to 750 on /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk/Contents/Resources

Changed permissions from 700 to 740 on /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk/Contents/Resources/ta.key

Changed permissions from 700 to 740 on /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk/Contents/Resources/ca.crt

Changed permissions from 700 to 740 on /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk/Contents/Resources/config.ovpn

Copied /Users/niklasschmidt/Library/Application Support/Tunnelblick/Configurations/Portunity.tblk

to /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk.temp

Renamed /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk.temp

to /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk

Changed ownership of /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk and its contents from 501:80 to 0:0

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk/Contents

Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk/Contents/Resources

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk/Contents/Resources/ta.key

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk/Contents/Resources/ca.crt

Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/niklasschmidt/Portunity.tblk/Contents/Resources/config.ovpn

Created secure (shadow) copy of Portunity.tblk

Tunnelblick installer finished without error

2018-01-06 13:18:48 tunnelblickd[1494] Status = 1 from tunnelblick-helper command 'printSanitizedConfigurationFile Portunity.tblk 3'

2018-01-06 13:18:48 Tunnelblick[634] tunnelblickd status from printSanitizedConfigurationFile: 1

2018-01-06 13:18:48 Tunnelblick[634] Internal failure (1) of openvpnstart printSanitizedConfigurationFile Portunity.tblk 3