Adding Tunnelblick support for macOS Sierra and dropping supprort for old versions of OS X

[jkbull...gmail.com]

Tunnelblick Support for macOS Sierra

Apple has announced the availability of the next version of the operating system for Macs, "macOS Sierra". It is currently available for beta testing by registered developers and is scheduled for public beta testing in July and final release in the third-quarter of 2016.

Tunnelblick users are urged to test Tunnelblick under Sierra and report problems to devel...@tunnelblick.net without breaching Apple's NDA. That should be possible by simply describing what needs to be done in Tunnelblick to cause a problem to happen. (A hint as to what the problem is would be appreciated, too, of course.)

Tunnelblick Support for OS X 10.4, 10.5, and 10.6

When Tunnelblick for Sierra is released, we plan to discontinue security updates of Tunnelblick version 3.5, which is the last version that runs on OS X 10.4, 10.5, and 10.6.0 - 10.6.7 and on PowerPC processors.

[bar...@gmail.com]

Sorry folks but neither the stable or beta releases of Tunnelblick work with 10.12. Seems like a loop happens on the install cycle :-(

[jkbull...gmail.com]

First, note that Tunnelblick must be installed in /Applications on the boot drive. (That doesn't seem to be what you are doing in the screenshot, which says it is in "/Sierra Server/Applications/".)

But there is a "loop saying Tunnelblick must be installed in /Applications" problem.

It is fixed in the source code and the fix will be in the next beta release. In the meantime, there is a workaround:

1. Install by double-clicking Tunnelblick in the disk image (that is, normally).
   
2. After the install, when Tunnelblick gets in the loop that says it must be installed in Applications, click "Cancel"
   
3. Drag the Tunnelblick icon from the disk image to /Applications (replacing the newly-installed copy).
   
4. Launch Tunnelblick from /Applications
   
5. Enter your password when asked to "Secure" Tunnelblick (or "Complete the installation", I forget which).

From then on, Tunnelblick should work normally.

[bar...@gmail.com]

Sorry to correct you but if anything is wrong it’s either the way the installer works or how 10.12 handles the installation.

I did exactly what I was expecting to do.

Mount the disk image

Click on the Application

Let the app install itself

Nothing more and nothing less.

Yes I do have two drives - a 128GB SSD boot drive and a traditional 750GB HD which is being used for the home folder.

I’ll log in remotely and manually install instead of letting the app do it itself.

Regards

Ken Turner

Senior Apple Field Engineer

Apple Certified Technical Coordinator

Registered developer

[jkbull...gmail.com]

Thanks for describing what you did in more detail.

Upon further reflection, I think I now understand why the screenshot you posted described Tunnelblick as being located in "/Sierra Server/Applications/" and understand that you were not trying to launch it on a non-boot drive.

I'm not sure what you mean by "manually install", but if you mean "install by copying to /Applications", that may not work properly either (although it may appear to work). Please try installing using the steps I enumerated as a workaround for the problem.

I won't describe the problem or the solution in greater detail because of Apple's NDA, but the problem affects Tunnelblick only on Sierra.

[bar...@gmail.com]

1. Drag the Tunnelblick icon from the disk image to /Applications (replacing the newly-installed copy).

Worked like a charm! Thank you so much for your help. I'm now a very happy bunny :-) 

[andrey...@gmail.com]

I'm not sure about you guys but whenever I try to install Tunnelblock on Mac OS 10.11.2 El Capitan the following message appears:

The installation or repair took too long or failed. Try again?

Neither seems to help. ANyone's getting the same thing?

[jkbull...gmail.com]

Thanks for reporting the problem.

I've only seen this in virtual machines where the disk image is on a network drive (that is, not on the virtual machine's virtual drive). Just copy the Tunnelblick.app to your Sierra desktop and double-click it there.

Even if that is your situation, please post the relevant entries from the Console Log so I can figure out what's going on.

[jkbull...gmail.com]

This and all other known problems on Sierra (as of 2016-07-18 18:00 UTC) are fixed in just-released Tunnelblick 3.6.6beta02.

On Monday, June 20, 2016 at 10:16:14 AM UTC-4, <> wrote:

[oha...@gmail.com]

Hi,

I updated my MAC to macOS Sierra Version 10.12 (Beta 16A254g).

Tunnelblick works great, but when I lunch it I got a message that there is a update.
When I try to update I got error:

My Tunnelblick version: 3.6.3 (build 4560)

Thank you.

[Tunnelblick developer]

Thanks for the report. I can reproduce this -- updating Tunnelblick is broken on Sierra. I will look into it.

It will be a big problem if old versions of Tunnelblick can't update, so I hope it is something that can be fixed on the website and not require people to download and install new versions of Tunnelblick manually.

In the meantime, you should download and install the most recent beta from the Tunnelblick Downloads page. A double-click install will update your copy and keep your setup intact.

[oha...@gmail.com]

Great. Thank you !! :)

[Jason Dreyzehner]

Hey there,

I'm on the latest macOS Sierra – 10.12 Beta (16A270f), and I'm getting crashes now when I attempt to connect. 

"Tunnelblick encountered a fatal error."

"The problem was: Received fatal signal 11"

Happy to provide any additional logging if that would be helpful, please just let me know.

Thanks for the excellent software!

[Tunnelblick developer]

@Jason - Thanks for the report.

Please look in the Console log for anything at the time of the crashes and post it here. There should (among other things) be a stack trace.

[Jason Dreyzehner]

Thanks for getting back to me so quickly. I’ve not been able to reproduce the crash again since yesterday (despite having tried a couple restarts and re-installs before emailing this list), it seems like the issue was probably caused by some other VPN software I was running. I will definitely provide a stack trace for future issues.

For now, the beta seems to be working perfectly – thanks!

[crazyi...@gmail.com]

Hi I am getting the same "The installation or repair took too long or failed. Try again?" error message on my Mac OS X 10.11.6. I just attempted to install "Tunnelblick_3.6.5_build_4566". I've attached my console log below.

6/08/2016 2:14:49.207 PM Tunnelblick[52726] Tunnelblick: OS X 10.11.6; Tunnelblick 3.6.5 (build 4566)

6/08/2016 2:14:49.317 PM Tunnelblick[52726] Error returned from attributesOfItemAtPath: /Users/TimEllis/Library/openvpn;

Error was Error Domain=NSCocoaErrorDomain Code=260 "The file “openvpn” couldn’t be opened because there is no such file." UserInfo={NSFilePath=/Users/TimEllis/Library/openvpn, NSUnderlyingError=0x100756e60 {Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"}}; stack trace: (

0   Tunnelblick                         0x000000010003a0d9 -[NSFileManager(TB) tbFileAttributesAtPath:traverseLink:] + 564

1   Tunnelblick                         0x0000000100012b3f -[MenuController makeSymbolicLink] + 73

2   Tunnelblick                         0x0000000100011888 -[MenuController init] + 8088

3   AppKit                              0x00007fff90234669 -[NSCustomObject nibInstantiate] + 346

4   AppKit                              0x00007fff902344ab -[NSIBObjectData instantiateObject:] + 309

5   AppKit                              0x00007fff90233b2f -[NSIBObjectData nibInstantiateWithOwner:options:topLevelObjects:] + 428

6   AppKit                              0x00007fff9022ad8d loadNib + 384

7   AppKit                              0x00007fff9022a2b3 +[NSBundle(NSNibLoading) _loadNibFile:nameTable:options:withZone:ownerBundle:] + 300

8   AppKit                              0x00007fff9022a07c -[NSBundle(NSNibLoading) loadNibNamed:owner:topLevelObjects:] + 201

9   AppKit                              0x00007fff90229e48 +[NSBundle(NSNibLoading) loadNibNamed:owner:] + 344

10  AppKit                              0x00007fff902250a2 NSApplicationMain + 466

11  Tunnelblick                         0x00000001000011d0 start + 52

12  ???                                 0x0000000000000002 0x0 + 2

)

6/08/2016 2:14:49.318 PM Tunnelblick[52726] Created a symbolic link to /Users/TimEllis/Library/Application Support/Tunnelblick/Configurations at /Users/TimEllis/Library/openvpn

6/08/2016 2:14:49.613 PM Tunnelblick[52726] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.

6/08/2016 2:14:52.647 PM Tunnelblick[52726] Tunnelblick needs to:

  • Be installed in /Applications as Tunnelblick

  • Change ownership and permissions of the program to secure it

  • Secure configurations

6/08/2016 2:14:52.647 PM Tunnelblick[52726] Beginning installation or repair

6/08/2016 2:14:52.661 PM authexec[52735] executing /Volumes/Tunnelblick/Tunnelblick.app/Contents/Resources/installer

6/08/2016 2:14:53.474 PM Tunnelblick[52726] tunnelblickd is not loaded

6/08/2016 2:14:53.474 PM Tunnelblick[52726] installer did not make the necessary changes

6/08/2016 2:14:57.512 PM Tunnelblick[52726] Installation or repair failed; Log:

Tunnelblick installer started 2016-08-06 14:14:52. 1 arguments: 0x0017

Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755

Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0

Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755

Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users/TimEllis with owner 0:0 and permissions 755

Changed ownership of /Users/TimEllis/Library/Application Support/Tunnelblick from 501:20 to 501:80

Changed ownership of /Users/TimEllis/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

6/08/2016 2:14:57.512 PM Tunnelblick[52726] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

6/08/2016 2:14:57.531 PM Tunnelblick[52726] Not unloading kexts and not deleting logs because tunnelblickd is not loaded.

6/08/2016 2:14:57.532 PM Tunnelblick[52726] Finished shutting down Tunnelblick; allowing termination

[Tunnelblick developer]

Please try Tunnelblick 3.6.6beta02, per my earlier comment:

This and all other known problems on Sierra (as of 2016-07-18 18:00 UTC) are fixed in just-released Tunnelblick 3.6.6beta02.

[crazyi...@gmail.com]

Hey just tried 3.6.6 b2. Same error. This is the log for this one:

6/08/2016 9:01:44.617 PM Tunnelblick[53706] Tunnelblick: OS X 10.11.6; Tunnelblick 3.6.6beta02 (build 4581)

6/08/2016 9:01:44.746 PM Tunnelblick[53706] Error returned from attributesOfItemAtPath: /Users/TimEllis/Library/openvpn;

Error was Error Domain=NSCocoaErrorDomain Code=260 "The file “openvpn” couldn’t be opened because there is no such file." UserInfo={NSFilePath=/Users/TimEllis/Library/openvpn, NSUnderlyingError=0x101139350 {Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"}}; stack trace: (

0   Tunnelblick                         0x000000010003bfaa -[NSFileManager(TB) tbFileAttributesAtPath:traverseLink:] + 564

1   Tunnelblick                         0x0000000100012b7b -[MenuController makeSymbolicLink] + 73

2   Tunnelblick                         0x00000001000118c4 -[MenuController init] + 7982

3   AppKit                              0x00007fff90234669 -[NSCustomObject nibInstantiate] + 346

4   AppKit                              0x00007fff902344ab -[NSIBObjectData instantiateObject:] + 309

5   AppKit                              0x00007fff90233b2f -[NSIBObjectData nibInstantiateWithOwner:options:topLevelObjects:] + 428

6   AppKit                              0x00007fff9022ad8d loadNib + 384

7   AppKit                              0x00007fff9022a2b3 +[NSBundle(NSNibLoading) _loadNibFile:nameTable:options:withZone:ownerBundle:] + 300

8   AppKit                              0x00007fff9022a07c -[NSBundle(NSNibLoading) loadNibNamed:owner:topLevelObjects:] + 201

9   AppKit                              0x00007fff90229e48 +[NSBundle(NSNibLoading) loadNibNamed:owner:] + 344

10  AppKit                              0x00007fff902250a2 NSApplicationMain + 466

11  Tunnelblick                         0x00000001000013b8 start + 52

12  ???                                 0x0000000000000002 0x0 + 2

)

6/08/2016 9:01:44.746 PM Tunnelblick[53706] Created a symbolic link to /Users/TimEllis/Library/Application Support/Tunnelblick/Configurations at /Users/TimEllis/Library/openvpn

6/08/2016 9:01:45.166 PM Tunnelblick[53706] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.

6/08/2016 9:01:49.044 PM Tunnelblick[53706] Tunnelblick needs to:

  • Be installed in /Applications as Tunnelblick

  • Change ownership and permissions of the program to secure it

  • Secure configurations

6/08/2016 9:01:49.044 PM Tunnelblick[53706] Beginning installation or repair

6/08/2016 9:01:49.058 PM authexec[53713] executing /Volumes/Tunnelblick/Tunnelblick.app/Contents/Resources/installer

6/08/2016 9:01:49.863 PM Tunnelblick[53706] Need to replace and/or reload 'tunnelblickd'

6/08/2016 9:01:49.863 PM Tunnelblick[53706] installer did not make the necessary changes

6/08/2016 9:01:54.187 PM Tunnelblick[53706] Installation or repair failed; Log:

Tunnelblick installer started 2016-08-06 21:01:49. 1 arguments: 0x0017

Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755

Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0

Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755

Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users/TimEllis with owner 0:0 and permissions 755

Changed ownership of /Users/TimEllis/Library/Application Support/Tunnelblick from 501:20 to 501:80

Changed ownership of /Users/TimEllis/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd'

Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

6/08/2016 9:01:54.187 PM Tunnelblick[53706] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

6/08/2016 9:01:54.203 PM Tunnelblick[53706] Need to replace and/or reload 'tunnelblickd'

6/08/2016 9:01:54.203 PM Tunnelblick[53706] Not unloading kexts and not deleting logs because tunnelblickd is not loaded.

6/08/2016 9:01:54.203 PM Tunnelblick[53706] Finished shutting down Tunnelblick; allowing termination

[Tunnelblick developer]

OK, thanks. The "Error returned from attributesOfItemAtPath" error can be ignored. The problem seems to be with the "tunnelblickd" daemon, which is being properly installed.

Please try restarting your computer and then seeing if Tunnelblick is in /Applications. If so, try to launch it.

If that doesn't work, please try completely uninstalling Tunnelblick and then installing 3.6.6beta02 again.

[crazyi...@gmail.com]

Hey, restarted and attempted to run it from "/Applications" still same error. so I completely uninstalled and reinstalled and restarted and then ran it and still got the same error. Latest console log attached:

8/08/2016 9:46:34.410 AM Tunnelblick[913] Tunnelblick: OS X 10.11.6; Tunnelblick 3.6.6beta02 (build 4581)

8/08/2016 9:46:34.919 AM Tunnelblick[913] Need to replace and/or reload 'tunnelblickd'

8/08/2016 9:46:37.848 AM Tunnelblick[913] Tunnelblick needs to:

  • Complete the update

8/08/2016 9:46:37.848 AM Tunnelblick[913] Beginning installation or repair

8/08/2016 9:46:37.863 AM authexec[920] executing /Applications/Tunnelblick.app/Contents/Resources/installer

8/08/2016 9:46:38.277 AM Tunnelblick[913] Need to replace and/or reload 'tunnelblickd'

8/08/2016 9:46:38.277 AM Tunnelblick[913] installer did not make the necessary changes

8/08/2016 9:46:41.792 AM Tunnelblick[913] Installation or repair failed; Log:

Tunnelblick installer started 2016-08-08 09:46:37. 1 arguments: 0x0101

Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

8/08/2016 9:46:41.793 AM Tunnelblick[913] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

8/08/2016 9:46:41.810 AM Tunnelblick[913] Need to replace and/or reload 'tunnelblickd'

8/08/2016 9:46:41.810 AM Tunnelblick[913] Not unloading kexts and not deleting logs because tunnelblickd is not loaded.

8/08/2016 9:46:41.810 AM Tunnelblick[913] Finished shutting down Tunnelblick; allowing termination

[Jason Dreyzehner]

Started encountering that issue again (after switching wifi networks several times opening the laptop from sleep)

Latest log from open to failure is below.

Thanks!

default 10:14:15.380261 -0400 Tunnelblick Tunnelblick: OS X 10.12.0; Tunnelblick 3.6.6beta02 (build 4581)

default 10:14:15.838948 -0400 Tunnelblick subsystem: com.apple.coreaudio, category: audiocomp, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:15.839619 -0400 Tunnelblick subsystem: com.apple.coreaudio, category: compload, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:15.866779 -0400 Tunnelblick subsystem: com.apple.coreaudio, category: AudioHAL_Client, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:15.957324 -0400 Tunnelblick Set program update feedURL to https://www.tunnelblick.net/appcast-b.rss

default 10:14:16.018802 -0400 Tunnelblick subsystem: com.apple.libsqlite3, category: logging, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 1, privacy_setting: 2

default 10:14:16.043795 -0400 Tunnelblick Faulting in NSHTTPCookieStorage singleton

default 10:14:16.043816 -0400 Tunnelblick Faulting in CFHTTPCookieStorage singleton

default 10:14:16.043827 -0400 Tunnelblick Creating default cookie storage with process/bundle identifier

default 10:14:16.045486 -0400 Tunnelblick subsystem: com.apple.securityd, category: secpref, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.045884 -0400 Tunnelblick subsystem: com.apple.securityd, category: integrity, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.045967 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.046134 -0400 Tunnelblick subsystem: com.apple.securityd, category: handleobj, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.046233 -0400 Tunnelblick subsystem: com.apple.securityd, category: MDS_Scan, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.046388 -0400 Tunnelblick subsystem: com.apple.securityd, category: MDS_API, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.046506 -0400 Tunnelblick subsystem: com.apple.securityd, category: SSclnt, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.047406 -0400 securityd 0x7f9121155f00 client new: pid:50647 session:100008 /Applications/Tunnelblick.app taskPort:75835 uid:501 gid:20

default 10:14:16.047602 -0400 Tunnelblick subsystem: com.apple.securityd, category: MDS_IO, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.047702 -0400 Tunnelblick subsystem: com.apple.securityd, category: mdslock, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.047842 -0400 Tunnelblick subsystem: com.apple.securityd, category: security_exception, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.047873 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.047976 -0400 Tunnelblick subsystem: com.apple.securityd, category: DBOpen, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.048082 -0400 Tunnelblick subsystem: com.apple.securityd, category: dbsession, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.048111 -0400 Tunnelblick DbOpen of /private/var/db/mds/system/mdsDirectory.db

default 10:14:16.048273 -0400 Tunnelblick subsystem: com.apple.securityd, category: atomicfile, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.048305 -0400 Tunnelblick 0x61800007a280 opened /private/var/db/mds/system/mdsDirectory.db: 50744 bytes

default 10:14:16.048335 -0400 Tunnelblick 0x61800007a280 allocated /private/var/db/mds/system/mdsDirectory.db buffer 0x10b328000 size 50744

default 10:14:16.048360 -0400 Tunnelblick 0x61800007a280 closed /private/var/db/mds/system/mdsDirectory.db

default 10:14:16.049347 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.049456 -0400 Tunnelblick subsystem: com.apple.securityd, category: dynamic, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.049559 -0400 Tunnelblick subsystem: com.apple.securityd, category: callback, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.049661 -0400 Tunnelblick subsystem: com.apple.securityd, category: cssm, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.049748 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.049877 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.049958 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.050021 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.050113 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.050239 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.050353 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.050398 -0400 Tunnelblick DbOpen of /Users/MYUSER/Library/Keychains/login.keychain-db

default 10:14:16.050436 -0400 Tunnelblick 0x610000061100 opened /Users/MYUSER/Library/Keychains/login.keychain-db: 1118448 bytes

default 10:14:16.050472 -0400 Tunnelblick 0x610000061100 allocated /Users/MYUSER/Library/Keychains/login.keychain-db buffer 0x10b335000 size 1118448

default 10:14:16.050492 -0400 Tunnelblick 0x610000061100 closed /Users/MYUSER/Library/Keychains/login.keychain-db

default 10:14:16.051445 -0400 Tunnelblick loading /Users/MYUSER/Library/Keychains/login.keychain-db

default 10:14:16.052975 -0400 Tunnelblick subsystem: com.apple.securityd, category: kcreferral, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.053075 -0400 Tunnelblick not attempting migration for /Users/MYUSER/Library/Keychains/login.keychain-db version 512 (1 1 0)

default 10:14:16.053253 -0400 Tunnelblick DbOpen of /Library/Keychains/System.keychain

default 10:14:16.053304 -0400 Tunnelblick 0x6000002664c0 opened /Library/Keychains/System.keychain: 55016 bytes

default 10:14:16.053340 -0400 Tunnelblick 0x6000002664c0 allocated /Library/Keychains/System.keychain buffer 0x10b447000 size 55016

default 10:14:16.053387 -0400 Tunnelblick 0x6000002664c0 closed /Library/Keychains/System.keychain

default 10:14:16.054159 -0400 Tunnelblick loading /Library/Keychains/System.keychain

default 10:14:16.055726 -0400 Tunnelblick not attempting migration for /Library/Keychains/System.keychain version 256 (0 0 1)

default 10:14:16.055784 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.055813 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.055917 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.055938 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.056019 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.056055 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.056400 -0400 Tunnelblick subsystem: com.apple.network, category: , enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.056457 -0400 Tunnelblick TIC TCP Conn Start [1:0x600000180750]

default 10:14:16.097816 -0400 Tunnelblick TIC TCP Conn Event [1:0x600000180750]: 1 Err(0)

default 10:14:16.097834 -0400 Tunnelblick TIC TCP Conn Connected [1:0x600000180750]: Err(0)

default 10:14:16.097949 -0400 Tunnelblick TIC Enabling TLS [1:0x600000180750]

default 10:14:16.143256 -0400 Tunnelblick TIC TLS Event [1:0x600000180750]: 2, Pending(0)

default 10:14:16.143406 -0400 Tunnelblick TIC TLS Event [1:0x600000180750]: 11, Pending(0)

default 10:14:16.143631 -0400 Tunnelblick subsystem: com.apple.securityd, category: dateparse, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.143991 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.144279 -0400 Tunnelblick UNIX error exception: 17

default 10:14:16.144584 -0400 Tunnelblick subsystem: com.apple.securityd, category: SecImpExp, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2

default 10:14:16.145463 -0400 Tunnelblick TIC TLS Event [1:0x600000180750]: 12, Pending(0)

default 10:14:16.145504 -0400 Tunnelblick TIC TLS Event [1:0x600000180750]: 14, Pending(0)

default 10:14:16.146264 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.146324 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.159766 -0400 Tunnelblick TIC TLS Trust Result [1:0x600000180750]: 0

default 10:14:16.180871 -0400 Tunnelblick TIC TLS Event [1:0x600000180750]: 20, Pending(0)

default 10:14:16.181202 -0400 Tunnelblick TIC TCP Conn Event [1:0x600000180750]: 8 Err(0)

default 10:14:16.181223 -0400 Tunnelblick TIC TLS Handshake Complete [1:0x600000180750]

default 10:14:16.181453 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.181480 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.181630 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.181686 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.181849 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.181900 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:16.182049 -0400 Tunnelblick switching to keychain-db: /Users/MYUSER/Library/Keychains/login.keychain-db from /Users/MYUSER/Library/Keychains/login.keychain (0 1 1 1)

default 10:14:16.182072 -0400 Tunnelblick not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

default 10:14:17.026328 -0400 Tunnelblick Received fatal signal Segmentation fault (11); stack trace: (

0   Tunnelblick                         0x000000010007582c callStack + 56

1   Tunnelblick                         0x000000010001a82a signal_handler + 176

2   libsystem_platform.dylib            0x00007fffc372fd7a _sigtramp + 26

3   libobjc.A.dylib                     0x00007fffcc0a42d0 runtimeLock + 0

4   Tunnelblick                         0x0000000100009cf6 -[VPNConnection processState:dated:] + 561

5   Tunnelblick                         0x0000000100009a72 -[VPNConnection setStateFromLine:] + 353

6   Foundation                          0x00007fffafe5bdda __NSThreadPerformPerform + 326

7   CoreFoundation                      0x00007fffae400491 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17

8   CoreFoundation                      0x00007fffae3e163d __CFRunLoopDoSources0 + 557

9   CoreFoundation                      0x00007fffae3e0b36 __CFRunLoopRun + 934

10  CoreFoundation                      0x00007fffae3e0534 CFRunL

default 10:14:21.678993 -0400 Tunnelblick 0x610000061100 free /Users/MYUSER/Library/Keychains/login.keychain-db buffer 0x10b335000

default 10:14:21.679494 -0400 Tunnelblick 0x6000002664c0 free /Library/Keychains/System.keychain buffer 0x10b447000

--
You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/siN1dfdEyw0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at https://groups.google.com/group/tunnelblick-discuss.
For more options, visit https://groups.google.com/d/optout.

[tim....@hiivesystems.com]

Hey any reason why I'm getting the error below in my response?

Cheers

Tim

[Tunnelblick developer]

I don't understand what "error below" you are referring to, or what you mean by "my response"?

[crazyi...@gmail.com]

My apologies mine being mine (crazyivan...). I was signed into my work account when I responded

[Tunnelblick developer]

Ah. I don't understand it and can't reproduce it (on a clean installation of 10.12 (16a270f).

If you can run the following commands and post the output it might help diagnose the problem:

ls -l /Library/Application\ Support/Tunnelblick/tunnelblickd-hash.txt

ls -l /Library/Application\ Support/Tunnelblick/tunnelblickd-launchctl-plist-hash.txt

ls -l /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

ls -l /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

[crazyi...@gmail.com]

My machine is running 10.11.6 (15G31)

ls -l /Library/Application\ Support/Tunnelblick/tunnelblickd-hash.txt

-rw-r--r--  1 root  wheel  64  8 Aug 09:46 /Library/Application Support/Tunnelblick/tunnelblickd-hash.txt

ls -l /Library/Application\ Support/Tunnelblick/tunnelblickd-launchctl-plist-hash.txt

-rw-r--r--  1 root  wheel  64  8 Aug 09:46 /Library/Application Support/Tunnelblick/tunnelblickd-launchctl-plist-hash.txt

ls -l /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

-rw-r--r--  1 root  wheel  876  8 Aug 09:46 /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

ls -l /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

ls: /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket: No such file or directory

So the socket file isn't being created?

Cheers

Tim

[Tunnelblick developer]

Yes, the socket file is not being created. Tunnelblick doesn't create the socket file; that is done by the OS X launchd program. I have no idea why it isn't being created.

[crazyi...@gmail.com]

It seems like the launching of the daemon failed. Is there anything else I can try to get it working? (maybe trying to start the daemon manually, change files to make it think the installation is complete)

Cheers

Tim

[Tunnelblick developer]

You can see if the daemon is "loaded" (registered with OS X) using the following command:

sudo launchctl list | grep tunnelblick

which should result in something like

- 0 net.tunnelblick.tunnelblick.tunnelblickd

(the "-" might be replaced with a process ID, which is a number). The "0" is the exit status the last time the daemon was run.

One thing to try would be to restart your system. Assuming /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist exists, because when the system boots it should automatically load the .plist and create the socket.

You should also be able to manually unload and then load the .plist with the following commands:

sudo launchctl unload  /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

sudo launchctl load    /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

After running them, it would be interesting to see if the socket has been created:

ls -l /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

There are logs for the daemon itself that you can examine in Console: /var/logs/Tunnelblick/tunnelblickd.log. They would show when the daemon was started and stopped, and the status of commands that the daemon executed for Tunnelblick.app.

[Tunnelblick developer]

Tunnelblick 3.6.7beta04, released a few minutes ago, fixes all but one known problem when Tunnelblick is running on macOS Sierra:

• The "auto-install" feature that allows automatic installation of configurations at the same time the Tunnelblick application is installed does not work on Sierra if the installation file has been downloaded from the Internet.

"auto-install" won't work at all from a .zip. For auto-install to work, you will have to create a disk image (.dmg) and the disk image will have to be digitally signed.

(To make a very long story a little bit shorter: When a downloaded application is launched on Sierra, if it is not on a signed disk image the application will be copied to a temporary location before being launched and the copy will be launched instead of the original application. When it is launched in that way, when Tunnelblick looks for an "auto-install" folder in the same folder that the Tunnelblick program itself is located, it won't see one, because the "auto-install" folder was not copied along with the Tunnelblick application.)

The disk image does may not need to be signed by an Apple-recognized developer; a private signature might work, but the user would need to be trained to Control-click on the Tunnelblick icon and select "Open" instead of double-clicking the icon. I don't know if this will work -- I am extrapolating from how an application signed by someone other than an Apple-recognized developer is treated in earlier versions of OS X. It may not work at all.

If you do need to have it signed by an Apple-recognized developer, I think it costs $99/year to become one.

I may be able to get around the need for the disk image to be signed but am undecided about whether it is a good idea. I could have Tunnelblick look in /Volumes/Tunnelblick for the "auto-install" folder. That way, the disk image would not need to be signed. There are problems with this approach, however, which make me hesitate to implement it:

• The disk image would need to mount a disk named "Tunnelblick".
  
  
• This approach would go against the thrust of Apple's new security measures, which are trying to avoid exactly this situation: an unsigned resource being accessed by a signed program. Although Tunnelblick will only install "safe" configurations, it is possible that some unknown vulnerability in Tunnelblick could be exploited by an "auto-install" configuration to do something nasty. (It wouldn't be any worse than any other way that Tunnelblick installs a configuration, but it would be a little less obvious that something else is being installed besides the Tunnelblick application.)

[Tunnelblick developer]

Tunnelblick 3.6.7 and 3.6.8beta02 fix all known problem with Tunnelblick on Sierra except for the "auto-install" feature described in this post.

See the Release Notes for details about changes included in these versions of Tunnelblick.

[tempe...@gmail.com]

Hi, I'm a OSX developer and wanted to chime in here because I worked out the Sierra "App Translocation" issues with my own apps.

"auto-install" won't work at all from a .zip. For auto-install to work, you will have to create a disk image (.dmg) and the disk image will have to be digitally signed.

(To make a very long story a little bit shorter: When a downloaded application is launched on Sierra, if it is not on a signed disk image the application will be copied to a temporary location before being launched and the copy will be launched instead of the original application. When it is launched in that way, when Tunnelblick looks for an "auto-install" folder in the same folder that the Tunnelblick program itself is located, it won't see one, because the "auto-install" folder was not copied along with the Tunnelblick application.)

Is that a quote from the TB dev or from a 3rd party? If TB still has this issue, here's how I made it work:

1. I assume this is about the ability to have the unzipped app copy itself to the App folder or wherever else, right?

2. To solve this, here's a trick: Have your code (or invoke an Applescript cmd) to copy your app from its current location (even if it's translocated) to /Applications. Then issue a shell command like "xattr -dr com.apple.quarantine /Applications/Your.app". This will strip all translocation info. After that, the app can be launched.

[Tunnelblick developer]

Thanks for your comments. See below for mine : )

On Monday, September 19, 2016 at 10:39:46 AM UTC-4, <> wrote:

Hi, I'm a OSX developer and wanted to chime in here because I worked out the Sierra "App Translocation" issues with my own apps.

"auto-install" won't work at all from a .zip. For auto-install to work, you will have to create a disk image (.dmg) and the disk image will have to be digitally signed.

(To make a very long story a little bit shorter: When a downloaded application is launched on Sierra, if it is not on a signed disk image the application will be copied to a temporary location before being launched and the copy will be launched instead of the original application. When it is launched in that way, when Tunnelblick looks for an "auto-install" folder in the same folder that the Tunnelblick program itself is located, it won't see one, because the "auto-install" folder was not copied along with the Tunnelblick application.)

Is that a quote from the TB dev or from a 3rd party?

From me (TB developer).

If TB still has this issue, here's how I made it work:

1. I assume this is about the ability to have the unzipped app copy itself to the App folder or wherever else, right?

No, Tunnelblick has done that for a long time. This is about having the app which is being run "see" a folder that is located in the same folder as the app (see Auto-Install Configurations). If the app is translocated away from the folder, the app won't see it. As I wrote in that same post, I am undecided about creating a workaround for that, for the reasons I gave.

Official Tunnelblick binaries are released as signed disk images, so translocation doesn't affect them. The only folks who are affected are those who repackage Tunnelblick to include "auto-install" folders.

  

[tempe...@gmail.com]

I see. Thanks for clarifying.

[jda...@gmail.com]

I don't know about you but this POS software pins my MacBook CPU at 99% from the first step in adding the configuration files for NordVPN configurations. I expect that for me anyway the app is still problematic as I have other OpenVPN apps that work perfectly on my machine. My experience is the same as the others here where neither the beta or "stable" version works - returning the error `it took too long.......blah blah'    I'm happy to abandon this effort in favor of something that actually works and doesn't take hours of my time to troubleshoot.

[Tunnelblick developer]

Note: Tunnelblick 3.7.3beta02 has fixes for several problems that can occur when installing configurations.

@jdanham:

I'm sorry for the problems you had trying to use Tunnelblick.

From the tone of your post, I assume you don't want to try to help find the problem so it can be fixed, but for anyone else who has this problem (99% CPU use or 100% CPU use and eventual error "it took too long..." when trying to install a configuration), sending to me privately (jkbullard at gmail) a copy of the configuration file that causes the problem would be very helpful:

• If I can reproduce the problem I should be able to fix it.
  
  
• If I can't reproduce the problem, I may have further questions for you, and/or may ask you to try potential fixes.
  

[adrian....@gmail.com]

Your software still doesn't work. Looks like this problem has been going on for 3 years.

Tunnelblick: The installation or repair took too long or failed. Would you like to try again?

Me: No.

[Tunnelblick developer]

Adrian, I'm sorry you don't think it's worth trying to investigate the problem you're encountering.

Tunnelblick works for hundreds of thousands of other folks.

I'd be happy to refund the full purchase price : )

[Tunnelblick developer]

I have added a page about Problems Installing Tunnelblick and am locking this topic.