Could not disable macOs services

[Nicolas Hyla]

Hello all I search for all a day now and I don't find the problem.

I was using tunnelblick for month now without problem and then in 1 our I don't know why it stop connected. It try to connect but instant disconect and send me this logs with in Red : cannot disable MacOS services. If someones know why...

2023-03-01 02:53:17.275058 WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.7.

2023-03-01 02:53:17.275081 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2023-03-01 02:53:17.276740 Incoming Data Channel: Cipher 'BF-CBC' initialized with 128 bit key
2023-03-01 02:53:17.276934 WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit).  This allows attacks like SWEET32.  Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.7.
2023-03-01 02:53:17.276966 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2023-03-01 02:53:17.276988 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
2023-03-01 02:53:17.279386 Cannot allocate TUN/TAP dev dynamically
2023-03-01 02:53:17.316371 Got bsdname : en53
2023-03-01 02:53:17.316458 Got name : en53
2023-03-01 02:53:17.480599 MANAGEMENT: Client disconnected
2023-03-01 02:53:17.480622 ERROR: Could not disable macOS services on en53
2023-03-01 02:53:17.480626 Exiting due to fatal error
2023-03-01 02:53:18.944360 *Tunnelblick: Expected disconnection occurred.

[Will]

https://tunnelblick.net/cCommonProblems.html#an-openvpn-log-entry-says-cannot-allocate-tuntap-dev-dynamically

[Sergei Savchenko]

same problem, on Tunnelblick 4.0.0beta02 (build 5820, MacOS Ventura

tips from common problems don't help, it doesn't look like an allocation problem:  ERROR: Could not disable macOS services on

пятница, 17 марта 2023 г. в 05:09:51 UTC+3, Will:

[Will]

If it doesn't work, you can try to reinstall Tunnelblick.

[Brandon Wayman]

Reinstall did not fix this for me. 

[Brandon Wayman]

As a side note if I uninstall then reinstall the TUN/TAP extenions it will connect. But putting tunnelblick in Administrator Mode it will not connect. It will stay connected after isntalling hte TUN/TAP extensions but if i need ot reconnect i have to remove and reinstall the TUN extensions if it has been over 5 minutes.

[Brandon Wayman]

I have tried to reinstall same error same problem.

On Monday, March 20, 2023 at 6:50:11 PM UTC-6 Will wrote:

[Alexei Tarnakin]

Plz reinstall tun/tap extensions https://tunnelblick.net/cKextsInstallation.html#intel-big-sur

[Tunnelblick developer]

Thanks, Alexei for pointing out that it is the Tun/Tap extensions that should be uninstalled, not Tunnelblick itself.

Two points:

1. If the tun/tap extensions are already installed, you should first uninstall them using the button on the "Utilities" panel of Tunnelblick's "VPN Details" button, then install them again.
   
2. The installation procedure is different for Intel and Apple Silicon Macs, and for different versions of macOS. The top of the page has links within the page that will show the procedure for your particular setup.
   

[Brandon Wayman]

The install tun and tap system extensions does not pop up any alerts. When going to the privacy and security there is no option to allow Jonathon Bullard (Because this was already done on the initial install). Please advise

[Alexei Tarnakin]

That's only a temporary solution. You need to reinstall tun/tap extension on every vpn reconnection.

Got this issue since Ventura update and only for `dev tap` configs

[Jens Schleede]

The problem is still present in Tunnelblick 4.0.0beta04 (build 5840).

Are there any new fixes instead of reinstall tun/tap extension on every vpn reconnect?

[Tunnelblick developer]

These messages are coming from OpenVPN, not Tunnelblick itself, so it would be helpful to know on which version(s) of OpenVPN this error is happening. 

It would also be helpful to know on which version of macOS this error is happening.

(And by "this error", I mean "ERROR: Could not disable macOS services on…".)

[Tunnelblick developer]

Earlier I wrote that the message is coming from OpenVPN. It is, but the actual source is a patch that Tunnelblick makes to OpenVPN. (So it's Tunnelblick's fault, not OpenVPN's fault : )

The patch is not included in the versions of Tunnelblick before 4.0.0beta01, so using stable version 3.8.8a should avoid the problem.

The patch is in each version of OpenVPN that Tunnelblick 4.0.0betas include except for OpenVPN 2.3.18, so I would expect it to happen on each of the versions that are in common use (2.4.12, 2.5.9, and 2.6.3).

The patch was added to Tunnelblick for OpenVPN 2.4.11 in commit ca5aa4d, in file third_party/sources/openvpn/openvpn-2.4.11/patches/07-apple-iouserethernet.diff, and was added to the newer versions of OpenVPN (2.5 and 2.6) as they were added to Tunnelblick.

The patch added the ability to use native macOS TAP interface instead of Tunnelblick's own interface.

Again, I ask that everyone report on which version of macOS they are seeing the problem.

[Brandon Wayman]

Ventura 13.3.1 (22E261)

Tunnelblick 4.0.0beta04 Build 5820

Thanks

Brandon

[Jens Schleede]

Version 13.3.1 (22E261)

Tunnelblick 4.0.0beta04 (build 5840)

[Attila Simon]

Ventura 13.3.1 (22E261)
Tunnelblick 4.0.0beta04 Build 5820

[Attila Simon]

Getting back, after installing the latest stable version and enabling extensions and installing tap/tun, I can connect to VPN.

On Tuesday, April 25, 2023 at 4:16:11 PM UTC+3 Brandon Wayman wrote:

[Attila Simon]

Hello!

I have done the update from beta03 to beta04 yesterday, doing a full uninstall of the previous version. Yesterday it worked without issues, but after a reboot, today it is not working anymore, having the same issue as above, "ERROR: Could not disable macOS services on en52".

I am running:

Ventura 13.3.1 (22E261)

Tunnelblick 4.0.0beta04 Build 5820

I will try the stable version now.

Cheers!

On Tuesday, April 25, 2023 at 4:16:11 PM UTC+3 Brandon Wayman wrote:

[Tunnelblick developer]

Thanks for everyone who has posted their macOS version.

Does anyone have this problem who is not running macOS Ventura?

You can revert to Tunnelblick 3.8.8a, available on the Downloads page, to avoid the problem. Just download and install 3.8.8a by double-clicking; your settings and configurations will not be changed. You don't need to uninstall Tunnelblick -- uninstalling will not affect the problem.

[xtsxxr xsf]

Reinstall  Tunnelblick 3.8.8b is worked for me, tks