help with mac snow leopard

[qlvc...@gmail.com]

hi i'm a noob ... i think i download the correct tunnelblick 3.5.24, 

and i installed the dmg.

then i go to vpn provider's site to download configuration,

and i double click the configuration tblk file, and i get an error in tunnelblick:

"installation failed:

unknown extension 'txt' for /users/*/downloads/*.tblk/*_userpass.txt"

i think i'm doing it somehow wrong this time, because it worked a while ago, and i wiped everything and forgot how to do this i guess

[Tunnelblick developer]

This doesn't have anything to do with Snow Leopard.

Tunnelblick does not know how to secure a file with an extension of ".txt". Because the filename includes "userpass", I assume it contains a username and password, so it should be secured as if it were a "key" file, so it should have an extension of ".key".

So here's what you can do:

1. Rename the "*_userpass.txt" file by adding ".key" at the end of the filename (so it is "*userpass.txt.key").
   
   
2. Edit the OpenVPN configuration file included with what you downloaded (it should have an extension of ".ovpn" or ".conf") and add ".key" at the end of the line that contains _userpass.txt.
   
   
3. Try installing the configuration again.

[qlvc...@gmail.com]

i'm sorry how do i add .key? first of all, i can't find this .txt file.

i mean i searched for it in finder, and the search result is the .zip i downloaded from the vpn provider.

so i double click .zip and only .tblk file shows up. 

i don't see .txt file anywhere near it

2018年9月20日木曜日 20時57分19秒 UTC+9 Tunnelblick developer:

[Tunnelblick developer]

If you downloaded a .tblk file from your VPN service provider, they have created an invalid .tblk, because it shouldn't contain anything with a ".txt" extension. 

But you can probably still fix the problem. The .tblk "file" is actually a macOS package. You can look inside it: hold down the "Control" key while you click on the .tblk in a Finder window, and select "Show Package Contents". That will show you what's inside the .tblk. There should be a folder named "Contents". Inside that is another folder, named "Resources". Inside that is a file named "config.ovpn" and it should also have the .txt file. Rename the .txt file and edit the "config.ovpn" file as I wrote earlier.

But please complain to your VPN service provider: they shouldn't be giving you invalid configurations!

[qlvc...@gmail.com]

ok thank you so much! i did find the .txt file...

may i ask you another question? i have another vpn provider config i would like to use, and i think this one is probably not invalid.

this one is .opvn. and when i double click it, it opens in tunnelblick, 

which says "tunnelblick successfully replaced one configuration."

.... and then nothing happens.

i think i am supposed to put my vpn username and pw, but i don't know where to put it.

2018年9月20日木曜日 21時14分26秒 UTC+9 Tunnelblick developer:

[Tunnelblick developer]

Nothing happens because double-clicking on a configuration doesn't do anything except install or replace the configuration.

If you want to connect to the "ABC" VPN, click on the Tunnelblick icon in the menu bar, then click on "Connect ABC".

[qlvc...@gmail.com]

i did, and i get 

"tunnelblick was unable to start openvpn to connect (vpn provider file). for details, see the log in the vpn details...window."

but i think this happens because i haven't entered my username and password?

2018年9月20日木曜日 22時15分36秒 UTC+9 Tunnelblick developer:

[Tunnelblick developer]

As it says, see the log to find out what the problem is. If you don't understand it, copy the log and paste it here and I'll interpret it for you.

[qlvc...@gmail.com]

thanks. is there anything i should strike out in the logs for privacy?

2018年9月20日木曜日 22時29分37秒 UTC+9 Tunnelblick developer:

[Tunnelblick developer]

Probably not, since you are using a publicly available VPN service provider. But if it has your name or email address (as part of a filename, for example), you might want to strike that out.

[qlvc...@gmail.com]

ok thanks! here it is:

2018-09-20 05:31:55 *Tunnelblick: OS X 10.6.8; Tunnelblick 3.5.24 (build 4270.5031)

2018-09-20 05:31:56 *Tunnelblick: Attempting connection with jp-free-02.protonvpn.com.udp1194 using shadow copy; Set nameserver = 1; monitoring connection

2018-09-20 05:31:56 *Tunnelblick: openvpnstart start jp-free-02.protonvpn.com.udp1194.tblk 1337 1 0 1 0 16688 -ptADGNWradsgnw 2.3.18

2018-09-20 05:31:56 *Tunnelblick:

Could not start OpenVPN (openvpnstart returned with status #251)

                                        Options error: Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/a/jp-free-02.protonvpn.com.udp1194.tblk/Contents/Resources/config.ovpn:37: compress (2.3.18)

                                        Use --help for more information.

Contents of the openvpnstart log:

*Tunnelblick: openvpnstart log:

     OpenVPN returned with status 1, errno = 13:

          Permission denied

     

     Command used to start OpenVPN (one argument per displayed line):

     

          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.18/openvpn

          --daemon

          --log

          /Library/Application Support/Tunnelblick/Logs/-SUsers-Sa-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sjp--free--02.protonvpn.com.udp1194.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_16688.1337.openvpn.log

          --cd

          /Library/Application Support/Tunnelblick/Users/a/jp-free-02.protonvpn.com.udp1194.tblk/Contents/Resources

          --config

          /Library/Application Support/Tunnelblick/Users/a/jp-free-02.protonvpn.com.udp1194.tblk/Contents/Resources/config.ovpn

          --cd

          /Library/Application Support/Tunnelblick/Users/a/jp-free-02.protonvpn.com.udp1194.tblk/Contents/Resources

          --management

          127.0.0.1

          1337

          /Library/Application Support/Tunnelblick/glelldbbcjcmfaboglakleofidaogllnibidmcdg.mip

          --management-query-passwords

          --management-hold

          --script-security

          2

          --up

          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw

          --down

          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -d -f -m -w -ptADGNWradsgnw

     

     Contents of the OpenVPN log:

     

          Options error: Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/a/jp-free-02.protonvpn.com.udp1194.tblk/Contents/Resources/config.ovpn:37: compress (2.3.18)

          Use --help for more information.

          

     More details may be in the Console Log's "All Messages"

2018年9月20日木曜日 22時58分33秒 UTC+9 Tunnelblick developer:

[Tunnelblick developer]

Here's the problem:

Options error: Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/a/jp-free-02.protonvpn.com.udp1194.tblk/Contents/Resources/config.ovpn:37: compress (2.3.18)

The "compress" option is not available in OpenVPN 2.3.18. It is only available in more recent versions of OpenVPN. Try OpenVPN 2.4.4, which you can select in Tunnelblick's "VPN Details" window (on the "Settings" tab.

[qlvc...@gmail.com]

it worked! thanks you are a genius!!! :) 

do you happen to know if i can have a kill switch, too?

2018年9月20日木曜日 23時32分43秒 UTC+9 Tunnelblick developer:

[Tunnelblick developer]

More recent versions of Tunnelblick include a kill switch, but the old version you need to use because you are running Snow Leopard don't include it.

[qlvc...@gmail.com]

alright no problem :) are there settings i should change to get it as close to as "kill switch" as possible? (like "always on" "seamless tunnel" "reconnect on wakeup" options in openvpn app for other OSs)

2018年9月20日木曜日 23時48分10秒 UTC+9 Tunnelblick developer:

[Tunnelblick developer]

"Kill switch" means different things to different programs. "Kill switch" as used by Tunnelblick means to stop all Internet access if/when the VPN is disconnected unexpectedly. But it can also mean "kill a particular program when the VPN is disconnected for any reason (even if you ask it to disconnect)" -- for example, if you're running torrent clients.

But Tunnelblick 3.5 doesn't do either one. That version is several years old now, so it only has had security-related updates, usually to include new versions of OpenVPN and/or OpenSSL.

[Tunnelblick developer]

If you havne't already, you should read Tunnelblick and VPNs: Privacy and Security to understand what a VPN does and doesn't do.