Downloads for DMG Packages Needed For Older Versions Of Tunnelblick

[xxVOXxx]

Hi, I just reached out to devel...@tunnelblick.net to try to aquire some old versions of Tunnelblick to test for use with my older Mac.  I recieved a response from Jon Bullard asking me to post my issue here so I will post the email that I sent as requested:

I am running a system on OSX 10.8, which has been using Tunnelblick 3.5.26 which is listed as the latest compatible version for OSX 10.4-10.9.  This version, however does not seem to use OpenVPN 2.4, only 2.3 and I was able to connect with AirVPN until they seem to have removed the option to use 2.3 last week.  

The technical support there told me I shoudl try Tunnelblick 3.7 and it should be compatible with my system, this is strange because the TB site says 3.5.26 is the last for my OS.  I checked your GitHub releases and can not find older DMG installer files as I am willing to experiement with versions to see which works. I found a DMG on a 3rd party site (https://www.downloadcrew.com/download/18882/tunnelblick) and it seemed to open and connect with 2.4 BUT I would much rather try official packages for a more permanent, newer, and safer solution just in case.

1. Can you confirm for me which is the absolute final version of Tunnelblick which works with OSX 10.8?  From what I can find it is somewhere around 3.8.4 or 3.8.5 where it switches to OS minimum of 10.10.
2. Can you provide the link for the DMG files to older versions?  I tried my best and even using Wayback machine the links that used to point to the old DMGs are now gone you guys must have taken them down or moved things in the last few years.

Thank you for any help here as getting my VPN to work on my older system is critical as it still needs internet access and Tunnelblick has been my last hope for years.

[Tunnelblick Developer]

By default, Tunnelblick  3.5.26 will use OpenVPN 2.3.18, but it also includes OpenVPN 2.4.4. Both are build to include OpenSSL 1.0.2p. To use OpenVPN 2.4.4:

1. Launch Tunnelblick.
   
2. Click on the Tunnelblick icon in the menu bar and click "VPN Details…". A new window will appear.
   
3. Click on the large "Configurations" button at the top of the window.
4. Click on the configuration you wish to use in the list on the left.
5. Click on the "Settings" tab on the right side of the window.
6. Click on the drop-down that says "Default (OpenVPN 2.3.18)" (to the right of "OpenVPN version").
7. Click on "OpenVPN 2.4.4".

That configuration will now be connected using OpenVPN 2.4.4.

(If you have a lot of configurations, you can change the setting for several at once by holding down the Command key while clicking them or clicking on one and then holding down the Shift key while clicking on a different configuration, which will select those two configurations and all configurations between the two.)

However, the problem may not be that you are not using OpenVPN 2.4. The problem might be that you are using an old version of OpenSSL. (See OpenVPN and OpenSSL Versions Included in Tunnelblick, last updated in 2023.)

To answer (sort of) your specific questions:

1 - The "absolute final version of Tunnelblick which works on 10.8" is 3.5.26. HOWEVER, later versions of Tunnelblick may work on 10.8 if features which are only available in later macOS versions are not used. Whether they are used or not depends on exactly how you use Tunnelblick. So, for you, a later version of Tunnelblick might work without problems.

2 - As a reply to your email, I have sent links to

• Tunnelblick 3.7.0, which includes OpenVPN 2.4.0 with LibreSSL 2.5.0 and OpenSSL 1.0.2k.
  
• Tunnelblick 3.7.9a, which includes OpenVPN 2.4.7 with OpenSSL 1.1.1b and 1.0.2r.

[xxVOXxx]

Thanks for the quick reply and for sending the DMG's.  I ran some tests here were the results:

- Under v3.5.26, switching to OpenVPN 2.4.4 from 2.3.18 as instructed did not connect to the VPN at all it just tries to connect forever no error thrown.

- I sucessfully test installed both v3.7.0 and v3.7.9a fresh to OSX 10.8 with no issues (unlike 3.5.26 which has to be installed over top of existing 3.5.25).  Both of these versions I was able to connect to my VPN using OpenVPN 2.4.0 (v3.7.0) and OpenVPN 2.4.7 (v3.7.9a) which is great.  "openvpn-2.4.7-openssl-1.0.2r" and "openvpn-2.4.7-openssl-1.1.1b" connected for me.  This effectively solves the issue, thank you!

- I also experimented to see if OpenVPN 2.4.7 from the v3.7.9a version would work under v3.5.26 and the answer is yes.  So for anyone who wishes for whatever reason to continue using 3.5.26 and can't get the included OpenVPN 2.4.4 to connect (something seems wrong with it I've never been able to get it to connect for the last couple of years on OSX 10.8, only 2.3.18) all you have to do is show the package contents of the Tunnelblick.app version 3.7.9a (Tunnelblick.app/Contents/Resources/openvpn) and look for either "openvpn-2.4.7-openssl-1.0.2r" or "openvpn-2.4.7-openssl-1.1.1b".  Copy this folder to the installed version of Tunnelblick 3.5.26 (/Applications/Tunnelblick.app/Contents/Resources/openvpn).  You will have to authenticate with your password.  Next is important - You have to reanme the folder from "openvpn-2.4.7-openssl-1.1.1b" to "openvpn-2.4.7" and authenticate again.  If you do not rename the folder, Tunnelblick will crash and Console will show an error similar to this: OpenVPN version ('2.4.7') reported by the program is not consistent with the version ('2.4.7-openssl-1.1.1b') derived from the name of folder 'openvpn-2.4.7-openssl-1.1.1b' in /Applications/Tunnelblick.app/Contents/Resources/openvpn.  Apparently older builds do not show the OpenSSL version in the dropdown box or support the folder structure such as "openvpn-2.4.7-openssl-1.1.1b'" so this is probably why it needs to be renamed.  This is also why you have to choose either 2.4.7 - 1.0.2r OR 2.4.7 - 1.1.1b folder because upon rename there can only be one 2.4.7 folder.

*you will get a warning that the app has been tampered with when you do the folder copy, you can click continue and check don't warn again.

Thanks again for the help and hope this info helps someone else. Cheers.

[Tunnelblick Developer]

You're welcome. Thanks for sharing all that info!