Change key passphrase using Tunnelblick?

[David Rosenstrauch]

Hi. I'm in the process of setting up OpenVPN here in our office, and
need to support users on Windows, Mac, and Linux.

I noticed that the Windows OpenVPN GUI has the capability to change the
passphrase for the user's private key, but I didn't see equivalent
functionality in Tunnelblick. I also did a bit of Google searching on
this, as well as searching through this list's archives, but didn't find
much. However, I did come across one PDF document, containing VPN
configuration instructions for a university in Canada, which contained
screenshots that seemed to show passphrase change capabilities.

So I'm left a bit confused. Does such passphrase change functionality
exist in Tunnelblick? And if so, how would a user access it? I'm using
Tunnelblick v3.1.7, btw.

Thanks,

DR

[jkbull...gmail.com]

Can you post a link to the PDF and indicate where in the PDF this is shown? That might be helpful.

[David Rosenstrauch]

On 09/19/2011 02:05 PM, jkbull...gmail.com wrote:
> Can you post a link to the PDF and indicate where in the PDF this is shown?
> That might be helpful.

Sure. Google on:

tunnelblick "change passphrase"

It's the first link. (i.e.,
http://docs.google.com/viewer?a=v&q=cache:CguBbjde_KQJ:www.ryerson.ca/ccs/software/downloads/security/RU-VPN-Instructions-MAC.pdf+tunnelblick+%22change+passphrase%22&hl=en&gl=us&pid=bl&srcid=ADGEESgyk3tFT6pjxqwric90tjAMCjaU7-BdG4vwmPh7vDI7Ws5_NjzeJfpQp38UGzD1yZOcq_33uYAGMTuk_nLDwoq-1RRWcOp_ZXHILd8lj_uyN2ooVTptp74SEtGr3GYlmti5A7d1&sig=AHIEtbTgcUlKaf1GJoYJddhKWRO_Gw8yag)

All the screenshots in that PDF show a "Change Passphrase..." menu
option in Tunnelblick, and they even document this functionality towards
the end of the doc.

Perhaps it's proprietary functionality that the university wrote
themself? Dunno ...

DR

[jkbull...gmail.com]

Yes, it looks like they added it to Tunnelblick -- it isn't built in.

I will contact them to see if they are willing to make the addition available to the project.

Apparently their modified version is only distributed to their faculty and staff, and it is also possible that they did it in such a way as to not require modification of the source code, so the GPL may not require them to make their modified source code available, but I'll ask.

[David Rosenstrauch]

On 09/19/2011 03:03 PM, jkbull...gmail.com wrote:
> Yes, it looks like they added it to Tunnelblick -- it isn't built in.
>
> I will contact them to see if they are willing to make the addition
> available to the project.
>
> Apparently their modified version is only distributed to their faculty and
> staff, and it is also possible that they did it in such a way as to not

> require modification of the source code, so the GPL may not *require* them

> to make their modified source code available, but I'll ask.

Cool. If you could, please post back whatever you hear from them. I'd
love to see this functionality make it into Tunnelblick.

Thanks,

DR