Updating OpenVPN in Tunnelblick 3.5.10

[pollend...@gmail.com]

Hello,

While I have a newer system with El Capitan, I am still using OS X Leopard (10.5.8) and Snow Leopard (10.6.8) on two of my systems because they cannot be upgraded further (Powerbook G4 and late '06 Mac Mini CoreDuo).  I have been grateful that you have kept up support for these older systems by updating OpenVPN and SSL on the 3.5 series of Tunnelblick.  I know that this older branch is not your top priority, and it seems like you may be dropping support entirely soon (noticed that it wasn't updated with the rest this week after the latest OpenSSL issues).  I was just curious if you planned on updating this version again, and if not, how to go about integrating an upgraded OpenSSL and OpenVPN into the build manually?  The newest versions of Tunnelblick are not supported, but I was able to compile OpenVPN 2.3.12, linked against openssl 1.0.2j, on my Powerbook.  What I would like to do is rebuild Tunnelblick 3.5.10 locally, while replacing the components needing an upgrade (openvpn with openssl libraries) to make sure they stay secure.  I tried this a few ways but got a number of failures, on multiple versions of Xcode, on multiple computers.  Do you have any advice for how to do this, if you do not plan on providing any more releases for the older Mac systems?  I would really appreciate any assistance you could provide :)

Thanks!

-Mitch

[Tunnelblick developer]

I would like to continue to support Tunnelblick's 3.5 branch but haven't yet had the time to create a new binary release with the new OpenSSL. I have committed all the changes needed, however, so you can download the source from the 3.5 branch on GitHub and the build will have OpenSSL 1.0.1t and be Tunnelblick 3.5.11 build 4270.4564.

I may still do create a binary release, but I don't know when; maybe this weekend.

Recent versions of Tunnelblick include very detailed instructions for building Tunnelblick. I have just backported those instructions to the 3.5 branch, too, so if you download the source from GitHub now, you will have them.

Good luck! Feel free to ask questions.

PS: I still have a Core Duo Mini, too. A great little machine!

[Tunnelblick developer]

I have released a security update to the old 3.5 version of Tunnelblick.

The release, Tunnelblick 3.5.11, includes OpenSSL version 1.0.1t. See OpenSSL Security Advisory 26 Sep 2016.

It should be used only on OS X 10.4 - 10.7.4.

On OS X 10.7.5 and higher, the latest stable or beta version should be used.

Tunnelblick 3.5.11 may be downloaded from Tunnelblick Deprecated Downloads.

[Tunnelblick developer]

Oops. Sorry, that should have been.

The release, Tunnelblick 3.5.11, includes OpenSSL version 1.0.1tu See OpenSSL Security Advisory 22 Sep 2016.