Tunnelblick 8.0 (build 6300) BUG - Password/DNS

[CptHuhn]

Hello all,

im working in an IT Company and tested Tunnelblick just over an amount of time.

This morning a customer was on the way to the job and had problems connecting to the VPN Tunnel.

The "error-message" said they should try to put in the password ( OP System was MacOS on a Macbook), but the login credentials were in storage (password manager) and saved in the config.

So there hasn't appeared any popup.

Turns out, the "error-message" was because the Internal DNS of the Mac has been set static.

The problem was fixed fast, but the false "error-message" is a "weird" log.

would it be possible in the next rollout, that the right condition would be applied in the logs, so as ex. that it doesn't say the password is wrong, at least, the connection could not be established because of...

Thanks!

If you need any further informations please let me know.

Best regs

[Tunnelblick Developer]

I cannot reproduce that setting static DNS server address(es) causes Tunnelblick to ask for a password.

Note that there are two passwords involved in using Tunnelblick to connect:

1. The users Mac login password, which is used to secure Tunnelblick or configurations when they are installed or modified; and
   
2. The VPN password (which is optional), and is used to connect to the VPN.
   

The first (login) password cannot be stored by the macOS Keychain. The VPN username/ password can be stored in the Keychain by Tunnelblick optionally, and only at the user's request. The VPN username/password can also be stored in the OpenVPN configuration file (see OpenVPN documentation for details of that).

What was the specific error message that the customer saw?