Updatable Configuration Methods

151 views
Skip to first unread message

Zoran

unread,
Mar 4, 2025, 4:38:07 PMMar 4
to tunnelblick-discuss
Hi Team,

Do any of the current Updatable Configuration methods allow/support adding new configs & deleting?

Cheers

Shine Yang

unread,
Mar 4, 2025, 9:15:53 PMMar 4
to tunnelbli...@googlegroups.com
It is supported, but the remote url used by my subscription


Zoran <zok...@gmail.com>于2025年3月5日 周三05:38写道:
Hi Team,

Do any of the current Updatable Configuration methods allow/support adding new configs & deleting?

Cheers

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tunnelblick-dis...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/tunnelblick-discuss/fcfed1f1-bbc6-4c0a-82a6-0a6f76e85e29n%40googlegroups.com.

Tunnelblick Developer

unread,
Mar 4, 2025, 10:01:48 PMMar 4
to tunnelblick-discuss
There have been no responses to our 2024-06-25 posts here and here about major changes to automatic updating of configurations, so it is likely that the ability to update configurations automatically will be removed.

Zoran

unread,
Mar 4, 2025, 10:47:27 PMMar 4
to tunnelblick-discuss
Thanks for the info.  That's fine if that is the way forward.  What would be the next best way in include/update configs?  The "auto-install" folder? Rebranding?

Cheers

Tunnelblick Developer

unread,
Mar 5, 2025, 11:08:35 PMMar 5
to tunnelblick-discuss
The auto-install folder is easier because it doesn't require building/signing the Tunnelblick app. For detailed instructions, see Automatically Install Configurations and Forced Preferences.

Zoran

unread,
Mar 6, 2025, 3:38:12 AMMar 6
to tunnelblick-discuss
Great, thank you!  Does the auto-install method support nested configs etc?

Tunnelblick Developer

unread,
Mar 6, 2025, 7:55:39 AMMar 6
to tunnelblick-discuss
Yes, it supports nested .tblks , .tblks inside folders structures, and all the Info.plist preferences-setting entries (which allow you to pre-set preferences for each configuration)..

Zoran

unread,
Mar 6, 2025, 11:11:48 PMMar 6
to tunnelblick-discuss
Thanks Dev!  Ive tried a few times with the latest version (6.0.1) but nested configs doesn't seem to be working.  Singed & Notorized

The below doesn't work
auto-install
- Location01 > Location01.tblk
- Location02 > Location02.tblk

This setup works and when installing Tunnelblick.  It also shows the message "XX configs to will be imported/installed"
auto-install
- Location01.tblk
- Location02.tblk
Message has been deleted

Tunnelblick Developer

unread,
Mar 7, 2025, 5:12:56 PMMar 7
to tunnelblick-discuss
Correction:

You need to imbed the folder structure into an outer .tblk (whose name will never be seen), like this:

auto-install
    FOO.tblk
        Contents
            Resources
                CONFIGURATION-ONE.tblk
                folderA
                    CONFIGURATION-TWO.tblk
                    folderB
                        CONFIGURATION-THREE.tblk

Then the user will see

    CONFIGURATION-ONE
    FolderA
        CONFIGURATION-TWO
        FolderB
            CONFIGURATION-THREE

On Friday, March 7, 2025 at 7:54:42 AM UTC-5 Tunnelblick Developer wrote:
You need to imbed the folder structure into an outer .tblk (whose name will never be seen), like this:

auto-install
    FOO.tblk
        Contents
            Resources
                ONE.tblk
                    folderA
                    TWO.tblk
                    folderB
                        THREE.tblk

Then the user will see

    CONFIGURATION-ONE
    FolderA
        CONFIGURATION-TWO.tblk
        FolderB
            CONFIGURATION-THREE

Zoran

unread,
Mar 7, 2025, 10:39:21 PMMar 7
to tunnelblick-discuss
Cheers got it working now!

Ognyan Penkov

unread,
Jun 9, 2025, 7:52:26 AMJun 9
to tunnelblick-discuss
Could you please confirm whether the "automatic updating of configurations" feature has been removed from the Tunnelblick app? I'm attempting to implement this functionality, but upon connecting, the app does not seem to attempt any connection to the URL specified in "TBConfigurationUpdateURL" (as there are no entries in the Nginx log). If this feature has indeed been removed, it would be futile for me to continue. Thank you in advance!

Tunnelblick Developer

unread,
Jun 9, 2025, 9:02:24 AMJun 9
to tunnelblick-discuss
It has not been removed but might be removed in the future.
Message has been deleted

Ognyan Penkov

unread,
Aug 15, 2025, 5:36:59 PMAug 15
to tunnelblick-discuss
Thank you for confirming. I attempted to use the "New Updatable Config method," but unfortunately, it didn't work. When I try to connect to the VPN, Tunnelblick doesn't initiate any connection to the configuration update URL. There's no activity in the web server log, and I see nothing when monitoring with tcpdump. My Info.plist is as straightforward as the example in the guide:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>TBPackageVersion</key>
    <string>1</string>
    <key>CFBundleVersion</key>
    <string>1.1</string>
    <key>TBConfigurationUpdateURL</key>
    <string>https://ovpn.mydomain.com/configs</string>
</dict>
</plist>
(FY: I am installing the .tblk config as Shared for All users)

I am using macOS Sequoia 15.6 and Tunnelblick 8. From the testing machine, I can successfully reach https://ovpn.mydomain.com/configs/version.txt. Do you have any suggestions for what I might have missed? Could this issue be related to changes in the latest macOS? I've also tried with Sonoma, but still no luck. Since i've followed the guide properly and you have confirmed the feature is not removed i have no more clues how to deal with that. Thank you in advance !

Tunnelblick Developer

unread,
Aug 16, 2025, 9:45:26 AMAug 16
to tunnelblick-discuss
First, enable Tunnelblick to do additional logging about updatable configurations. In /Applications/Utilities/Terminal, copy/paste the following:

     defaults write net.tunnelblick.tunnelblick DB-UC -bool yes

Then look at the logs using /Applications/Utilities/Console.app. Look at all messages for your computer, and filter on DC-UC to show only the relevant messages.

You can disable the additional logging with the following :

     defaults delete net.tunnelblick.tunnelblick DB-UC

Tunnelblick Developer

unread,
Aug 16, 2025, 1:10:58 PMAug 16
to tunnelblick-discuss
Sorry: "filter on DC-UC" was a typo.

It should have been "filter on DB-UC"

Message has been deleted

Ognyan Penkov

unread,
Aug 25, 2025, 10:22:34 AMAug 25
to tunnelblick-discuss
There is nothing in the log using this filter  DB-UC
Reply all
Reply to author
Forward
0 new messages