Does Tunnelblick support MacOS Mojave 10.14

636 views

Skip to first unread message

macrosh...@gmail.com

unread,

Jan 10, 2019, 10:19:41 AM1/10/19

to tunnelblick-discuss

I have a user that cannot connect to my OpenVPN server from MacOS Mojave 10.14

ללא שם.png

Looking at the log (which will be attached) I seems that tunnelblick attempts to clear the dns cache using the dscacheutil utility, but according to this website from OSX 10.10.4 that is not the way to do it.

To my untrained eye this seems to be the problematic part of the log:

*******************************************************************************************************************************************************************************************

2019-01-10 15:21:05 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2019-01-10 15:21:05 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2019-01-10 15:21:05 Opened utun device utun2
2019-01-10 15:21:05 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2019-01-10 15:21:05 MANAGEMENT: >STATE:1547126465,ASSIGN_IP,,100.77.2.174,,,,
2019-01-10 15:21:05 /sbin/ifconfig utun2 delete
                                    ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2019-01-10 15:21:05 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2019-01-10 15:21:05 /sbin/ifconfig utun2 100.77.2.174 100.77.2.174 netmask 255.255.0.0 mtu 1500 up
2019-01-10 15:21:05 /sbin/route add -net 100.77.0.0 100.77.2.174 255.255.0.0
                                    add net [100.77.0.0](http://100.77.0.0): gateway 100.77.2.174
2019-01-10 15:21:05 /Applications/Tunnelblick.app/Contents/Resources/ client.up.tunnelblick.sh
-9 -d -f -m -w -ptADGNWradsgnw utun2 1500 1543 100.77.2.174 255.255.0.0 init

                                    **********************************************
                                    Start of output from [client.up.tunnelblick.sh](http://client.up.tunnelblick.sh)
                                    Disabled IPv6 for 'iPhone USB'
                                    Disabled IPv6 for 'Wi-Fi'
                                    Disabled IPv6 for 'Bluetooth PAN'
                                    Disabled IPv6 for 'Thunderbolt Bridge'
                                    Retrieved from OpenVPN: name server(s) \[ 8.8.8.8 8.8.4.4 \], search domain(s) \[ \] and SMB server(s) \[ \] and using default domain name \[ openvpn \]
                                    Not aggregating ServerAddresses because running on macOS 10.6 or higher
                                    Setting search domains to 'openvpn' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                                    Saved the DNS and SMB configurations so they can be restored
                                    Changed DNS ServerAddresses setting from '194.90.1.5 8.8.8.8' to '8.8.8.8 8.8.4.4'
                                    Changed DNS SearchDomains setting from '' to 'openvpn'
                                    Changed DNS DomainName setting from '' to 'openvpn'
                                    Did not change SMB NetBIOSName setting of ''
                                    Did not change SMB Workgroup setting of ''
                                    Did not change SMB WINSAddresses setting of ''
                                    DNS servers '8.8.8.8 8.8.4.4' will be used for DNS queries when the VPN is active
                                    The DNS servers include only free public DNS servers known to Tunnelblick.
                                    Flushed the DNS cache via dscacheutil
                                    /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                                    Notified mDNSResponder that the DNS cache was flushed
                                    Notified mDNSResponderHelper that the DNS cache was flushed
                                    Setting up to monitor system configuration with process-network-changes
                                    End of output from [client.up.tunnelblick.sh](http://client.up.tunnelblick.sh)
                                    **********************************************

2019-01-10 15:21:10 /sbin/route add -net 185.18.205.78 192.168.125.254 255.255.255.255
                                    add net [185.18.205.78](http://185.18.205.78): gateway 192.168.125.254
2019-01-10 15:21:10 /sbin/route add -net 0.0.0.0 100.77.0.1 128.0.0.0
2019-01-10 15:21:10 *Tunnelblick: No 'connected.sh' script to execute
                                    add net [0.0.0.0](http://0.0.0.0): gateway 100.77.0.1
2019-01-10 15:21:10 /sbin/route add -net 128.0.0.0 100.77.0.1 128.0.0.0
                                    add net [128.0.0.0](http://128.0.0.0): gateway 100.77.0.1
2019-01-10 15:21:10 Initialization Sequence Completed
2019-01-10 15:21:10 MANAGEMENT: >STATE:1547126470,CONNECTED,SUCCESS,100.77.2.174,185.18.205.78,143,192.168.124.182,49176
2019-01-10 15:21:49 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2019-01-10 15:22:24 *Tunnelblick: An error occured fetching IP address information using the ipInfo host's IP address after connecting

*******************************************************************************************************************************************************************************************
*******************************************************************************************************************************************************************************************

This is the complete log made following the instructions in tunnelblick's website:

*******************************************************************************************************************************************************************************************

*Tunnelblick: macOS 10.14.0; Tunnelblick 3.7.8 (build 5180); Admin user

git commit 75a15f3fcb6de5a66bb6b7175b720645332ee778

Configuration myconn

"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/myconn.tblk:

dev tun
fast-io
client
persist-key
persist-tun
nobind
remote myconn.myorg.link 143
proto tcp
tls-client
verb 5
mute 10
auth-user-pass userpass.txt.unknown

<ca>
[Security-related line(s) omitted]
</ca>

================================================================================
Non-Apple kexts that are loaded:
Index Refs Address Size Wired Name (Version) UUID <Linked Against>
================================================================================
Files in myconn.tblk:
Contents/Resources/use….unknown
Contents/Resources/config.ovpn
================================================================================
Configuration preferences:
autoConnect = 0
-onSystemStart = 0
-routeAllTrafficThroughVpn = 1
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-keepConnected = 1
-loggingLevel = 3
-lastConnectionSucceeded = 1
================================================================================
Wildcard preferences:
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
================================================================================

Program preferences:
launchAtNextLogin = 1
tunnelblickVersionHistory = ("3.7.8 (build 5180)")
statusDisplayNumber = 0
lastLaunchTime = 568728013.272936
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = myconn
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
NSWindow Frame ConnectingWindow = 445 456 389 187 0 0 1280 777
detailsWindowFrameVersion = 5180
detailsWindowFrame = {{180, 132}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = log
leftNavSelectedDisplayName = myconn
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SULastCheckTime = 2019-01-09 12:00:09 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times
================================================================================

Tunnelblick Log:

*Tunnelblick: macOS 10.14.0; Tunnelblick 3.7.8 (build 5180)
2019-01-10 15:21:01 *Tunnelblick: Attempting connection with myconn; Set nameserver = 769; monitoring connection
2019-01-10 15:21:01 *Tunnelblick: openvpnstart start myconn.tblk 61387 769 0 3 0 1065776 -ptADGNWradsgnw 2.4.6-openssl-1.0.2q
2019-01-10 15:21:02 *Tunnelblick: openvpnstart log:
OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
      /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.6-openssl-1.0.2q/openvpn
      --daemon
      --log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Snfaw.tblk-SContents-SResources-Sconfig.ovpn.769\_0\_3\_0\_1065776.61387.openvpn.log
      --cd /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
      --setenv IV\_GUI\_VER "net.tunnelblick.tunnelblick 5180 3.7.8 (build 5180)"
      --verb 3
      --config /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/config.ovpn
      --setenv TUNNELBLICK\_CONFIG\_FOLDER /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
      --verb 3
      --cd /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
      --management 127.0.0.1 61387 /Library/Application Support/Tunnelblick/biemennghhdcaglpieoooocjknjklkmndjnmfjeo.mip
      --management-query-passwords
      --management-hold
      --redirect-gateway def1
      --script-security 2
      --up /Applications/Tunnelblick.app/Contents/Resources/[client.up.tunnelblick.sh](http://client.up.tunnelblick.sh) -9 -d -f -m -w -ptADGNWradsgnw
      --down /Applications/Tunnelblick.app/Contents/Resources/[client.down.tunnelblick.sh](http://client.down.tunnelblick.sh) -9 -d -f -m -w -ptADGNWradsgnw
2019-01-10 15:21:01 *Tunnelblick: openvpnstart starting OpenVPN
2019-01-10 15:21:02 *Tunnelblick: Established communication with OpenVPN
2019-01-10 15:21:02 >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2019-01-10 15:21:02 OpenVPN 2.4.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Nov 29 2018
2019-01-10 15:21:02 library versions: OpenSSL 1.0.2q 20 Nov 2018, LZO 2.10
2019-01-10 15:21:02 MANAGEMENT: TCP Socket listening on [AF_INET] 127.0.0.1:61387
2019-01-10 15:21:02 Need hold release from management interface, waiting...
2019-01-10 15:21:02 MANAGEMENT: Client connected from [AF_INET] 127.0.0.1:61387
2019-01-10 15:21:02 MANAGEMENT: CMD 'pid'
2019-01-10 15:21:02 MANAGEMENT: CMD 'auth-retry interact'
2019-01-10 15:21:02 MANAGEMENT: CMD 'state on'
2019-01-10 15:21:02 MANAGEMENT: CMD 'state'
2019-01-10 15:21:02 MANAGEMENT: CMD 'bytecount 1'
2019-01-10 15:21:02 MANAGEMENT: CMD 'hold release'
2019-01-10 15:21:02 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2019-01-10 15:21:02 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2019-01-10 15:21:02 NOTE: --fast-io is disabled since we are not using UDP
2019-01-10 15:21:02 MANAGEMENT: >STATE:1547126462,RESOLVE,,,,,,
2019-01-10 15:21:02 TCP/UDP: Preserving recently used remote address: [AF_INET] 185.18.205.78:143
2019-01-10 15:21:02 Socket Buffers: R=[131072->131072] S=[131072->131072]
2019-01-10 15:21:02 Attempting to establish TCP connection with [AF_INET] 185.18.205.78:143
[nonblock]
2019-01-10 15:21:02 MANAGEMENT: >STATE:1547126462,TCP_CONNECT,,,,,,
2019-01-10 15:21:03 TCP connection established with [AF_INET] 185.18.205.78:143
2019-01-10 15:21:03 TCP_CLIENT link local: (not bound)
2019-01-10 15:21:03 TCP_CLIENT link remote: [AF_INET] 185.18.205.78:143
2019-01-10 15:21:03 MANAGEMENT: >STATE:1547126463,WAIT,,,,,,
2019-01-10 15:21:04 MANAGEMENT: >STATE:1547126464,AUTH,,,,,,
2019-01-10 15:21:04 TLS: Initial packet from [AF_INET] 185.18.205.78:143, sid=2f89a7d4 a69e02bd
2019-01-10 15:21:04 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2019-01-10 15:21:04 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=myorg, CN=Fort-Funston CA, name=EasyRSA, emailAddress=m...@myhost.mydomain
2019-01-10 15:21:04 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=myorg, CN=server, name=EasyRSA, emailAddress=m...@myhost.mydomain
2019-01-10 15:21:04 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1543', remote='link-mtu 1544'
2019-01-10 15:21:04 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2019-01-10 15:21:04 [server] Peer Connection Initiated with [AF_INET] 185.18.205.78:143
2019-01-10 15:21:05 MANAGEMENT: >STATE:1547126465,GET_CONFIG,,,,,,
2019-01-10 15:21:05 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2019-01-10 15:21:05 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 100.77.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 100.77.2.174 255.255.0.0'
2019-01-10 15:21:05 OPTIONS IMPORT: timers and/or timeouts modified
2019-01-10 15:21:05 OPTIONS IMPORT: --ifconfig/up options modified
2019-01-10 15:21:05 OPTIONS IMPORT: route options modified
2019-01-10 15:21:05 OPTIONS IMPORT: route-related options modified
2019-01-10 15:21:05 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2019-01-10 15:21:05 Outgoing Data Channel: Cipher 'BF-CBC' initialized with 128 bit key
2019-01-10 15:21:05 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
2019-01-10 15:21:05 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2019-01-10 15:21:05 Incoming Data Channel: Cipher 'BF-CBC' initialized with 128 bit key
2019-01-10 15:21:05 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
2019-01-10 15:21:05 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2019-01-10 15:21:05 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
2019-01-10 15:21:05 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2019-01-10 15:21:05 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2019-01-10 15:21:05 Opened utun device utun2
2019-01-10 15:21:05 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2019-01-10 15:21:05 MANAGEMENT: >STATE:1547126465,ASSIGN_IP,,100.77.2.174,,,,
2019-01-10 15:21:05 /sbin/ifconfig utun2 delete
                                    ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2019-01-10 15:21:05 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2019-01-10 15:21:05 /sbin/ifconfig utun2 100.77.2.174 100.77.2.174 netmask 255.255.0.0 mtu 1500 up
2019-01-10 15:21:05 /sbin/route add -net 100.77.0.0 100.77.2.174 255.255.0.0
                                    add net [100.77.0.0](http://100.77.0.0): gateway 100.77.2.174
2019-01-10 15:21:05 /Applications/Tunnelblick.app/Contents/Resources/ client.up.tunnelblick.sh
-9 -d -f -m -w -ptADGNWradsgnw utun2 1500 1543 100.77.2.174 255.255.0.0 init

                                    **********************************************
                                    Start of output from [client.up.tunnelblick.sh](http://client.up.tunnelblick.sh)
                                    Disabled IPv6 for 'iPhone USB'
                                    Disabled IPv6 for 'Wi-Fi'
                                    Disabled IPv6 for 'Bluetooth PAN'
                                    Disabled IPv6 for 'Thunderbolt Bridge'
                                    Retrieved from OpenVPN: name server(s) \[ 8.8.8.8 8.8.4.4 \], search domain(s) \[ \] and SMB server(s) \[ \] and using default domain name \[ openvpn \]
                                    Not aggregating ServerAddresses because running on macOS 10.6 or higher
                                    Setting search domains to 'openvpn' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                                    Saved the DNS and SMB configurations so they can be restored
                                    Changed DNS ServerAddresses setting from '194.90.1.5 8.8.8.8' to '8.8.8.8 8.8.4.4'
                                    Changed DNS SearchDomains setting from '' to 'openvpn'
                                    Changed DNS DomainName setting from '' to 'openvpn'
                                    Did not change SMB NetBIOSName setting of ''
                                    Did not change SMB Workgroup setting of ''
                                    Did not change SMB WINSAddresses setting of ''
                                    DNS servers '8.8.8.8 8.8.4.4' will be used for DNS queries when the VPN is active
                                    The DNS servers include only free public DNS servers known to Tunnelblick.
                                    Flushed the DNS cache via dscacheutil
                                    /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                                    Notified mDNSResponder that the DNS cache was flushed
                                    Notified mDNSResponderHelper that the DNS cache was flushed
                                    Setting up to monitor system configuration with process-network-changes
                                    End of output from [client.up.tunnelblick.sh](http://client.up.tunnelblick.sh)
                                    **********************************************

2019-01-10 15:21:10 /sbin/route add -net 185.18.205.78 192.168.125.254 255.255.255.255
                                    add net [185.18.205.78](http://185.18.205.78): gateway 192.168.125.254
2019-01-10 15:21:10 /sbin/route add -net 0.0.0.0 100.77.0.1 128.0.0.0
2019-01-10 15:21:10 *Tunnelblick: No 'connected.sh' script to execute
                                    add net [0.0.0.0](http://0.0.0.0): gateway 100.77.0.1
2019-01-10 15:21:10 /sbin/route add -net 128.0.0.0 100.77.0.1 128.0.0.0
                                    add net [128.0.0.0](http://128.0.0.0): gateway 100.77.0.1
2019-01-10 15:21:10 Initialization Sequence Completed
2019-01-10 15:21:10 MANAGEMENT: >STATE:1547126470,CONNECTED,SUCCESS,100.77.2.174,185.18.205.78,143,192.168.124.182,49176
2019-01-10 15:21:49 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2019-01-10 15:22:24 *Tunnelblick: An error occured fetching IP address information using the ipInfo host's IP address after connecting
================================================================================
"Sanitized" full configuration file
dev tun
fast-io
client
persist-key
persist-tun
nobind
remote myconn.myorg.link 143
proto tcp
tls-client
verb 5
mute 10
auth-user-pass userpass.txt.unknown

<ca>
[Security-related line(s) omitted]
</ca>
================================================================================

Network services:
An asterisk (*) denotes that a network service is disabled.
iPhone USB
Wi-Fi
Bluetooth PAN
Thunderbolt Bridge
Wi-Fi Power (en0): On
================================================================================

ifconfig output:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
XHC20: flags=0<> mtu 0
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether a0:99:9b:10:6e:6d
inet 192.168.124.182 netmask 0xfffffe00 broadcast 192.168.125.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether 02:99:9b:10:6e:6d
media: autoselect
status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
ether ee:2f:ac:18:a6:02
inet6 fe80::ec2f:acff:fe18:a602%awdl0 prefixlen 64 scopeid 0x7
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=60<TSO4,TSO6>
ether 4a:00:02:09:a9:a0
media: autoselect <full-duplex>
status: inactive
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=60<TSO4,TSO6>
ether 4a:00:02:09:a9:a1
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 4a:00:02:09:a9:a0

Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en1 flags=3<LEARNING,DISCOVER>
    ifmaxaddr 0 port 8 priority 0 path cost 0
member: en2 flags=3<LEARNING,DISCOVER>
    ifmaxaddr 0 port 9 priority 0 path cost 0
nd6 options=201<PERFORMNUD,DAD>
media: <unknown type>
status: inactiveutun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000

*******************************************************************************************************************************************************************************************

Larry Rosenman

unread,

Jan 10, 2019, 10:38:17 AM1/10/19

to tunnelbli...@googlegroups.com

The latest version does the right thing.

Get Outlook for Android

From: tunnelbli...@googlegroups.com <tunnelbli...@googlegroups.com> on behalf of macrosh...@gmail.com <macrosh...@gmail.com>
Sent: Thursday, January 10, 2019 9:13:41 AM
To: tunnelblick-discuss
Subject: [tunnelblick-discuss] Does Tunnelblick support MacOS Mojave 10.14

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at https://groups.google.com/group/tunnelblick-discuss.
For more options, visit https://groups.google.com/d/optout.

Tunnelblick developer

unread,

Jan 10, 2019, 10:43:12 AM1/10/19

to tunnelblick-discuss

Please note that:

Apple has not documented the correct way to flush the DNS cache and it has often changed with new versions of the OS. For that reason, Tunnelblick uses three methods to flush the DNS cache, if they are available: discoveryutil, dscacheutil, killall -HUP mDNSResponder, and killall -HUP mDNSResponderHelper, so it works on all known existing versions of macOS. Your log shows that it was
The "could not fetch IP address info" warnings were caused by a problem with the tunnelblick.net website which started in the morning (US Eastern time) of 2019-01-09 and lasted until nearly midnight that same day.
Don't use a file named "userpass.txt.unknown" for the username and/or password. Instead, name the file "userpass.key". That ".key" extension tells Tunnelblick to set the ownership and permissions of the file so as to protect access to it (since it contains sensitive information).

Macro Shadow

unread,

Jan 14, 2019, 5:53:56 AM1/14/19

to tunnelbli...@googlegroups.com

Thank you.

I have changed the extension of the userpass file to key.

But the user still gets the IP address errors

Here is the log:

**************************************************************************************************************************************************************************************

auth-user-pass userpass.key

<ca>
[Security-related line(s) omitted]
</ca>

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

================================================================================

Files in myconn.tblk:

Contents/Resources/use….key

Contents/Resources/config.ovpn

================================================================================

Configuration preferences:

autoConnect = 0

-onSystemStart = 0
-routeAllTrafficThroughVpn = 1
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-keepConnected = 1
-loggingLevel = 3
-lastConnectionSucceeded = 1
================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

launchAtNextLogin = 1

tunnelblickVersionHistory = (

"3.7.8 (build 5180)"

)

statusDisplayNumber = 0

lastLaunchTime = 569076486.159826

lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = myconn
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
NSWindow Frame ConnectingWindow = 445 456 389 187 0 0 1280 777
detailsWindowFrameVersion = 5180

detailsWindowFrame = {{121, 144}, {920, 468}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = log
leftNavSelectedDisplayName = myconn
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400

SULastCheckTime = 2019-01-13 12:48:02 +0000

SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: macOS 10.14.0; Tunnelblick 3.7.8 (build 5180)

2019-01-13 14:48:53 *Tunnelblick: Attempting connection with myconn; Set nameserver = 769; monitoring connection
2019-01-13 14:48:53 *Tunnelblick: openvpnstart start myconn.tblk 63024 769 0 3 0 1065776 -ptADGNWradsgnw 2.4.6-openssl-1.0.2q
2019-01-13 14:48:53 *Tunnelblick: openvpnstart log:

OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.6-openssl-1.0.2q/openvpn
--daemon

--log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Snfaw.tblk-SContents-SResources-Sconfig.ovpn.769\_0\_3\_0\_1065776.63024.openvpn.log

      --cd /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
      --setenv IV\_GUI\_VER "net.tunnelblick.tunnelblick 5180 3.7.8 (build 5180)"
      --verb 3
      --config /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/config.ovpn
      --setenv TUNNELBLICK\_CONFIG\_FOLDER /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
      --verb 3
      --cd /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources

--management 127.0.0.1 63024 /Library/Application Support/Tunnelblick/mcijeljmpfckoanpgljaogipfplfdlcjidfecfhi.mip

      --management-query-passwords
      --management-hold
      --redirect-gateway def1
      --script-security 2
      --up /Applications/Tunnelblick.app/Contents/Resources/[client.up.tunnelblick.sh](http://client.up.tunnelblick.sh) -9 -d -f -m -w -ptADGNWradsgnw
      --down /Applications/Tunnelblick.app/Contents/Resources/[client.down.tunnelblick.sh](http://client.down.tunnelblick.sh) -9 -d -f -m -w -ptADGNWradsgnw

2019-01-13 14:48:53 *Tunnelblick: Established communication with OpenVPN
2019-01-13 14:48:53 OpenVPN 2.4.6 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Nov 29 2018
2019-01-13 14:48:53 library versions: OpenSSL 1.0.2q 20 Nov 2018, LZO 2.10
2019-01-13 14:48:53 MANAGEMENT: TCP Socket listening on [AF_INET] 127.0.0.1:63024
2019-01-13 14:48:53 Need hold release from management interface, waiting...
2019-01-13 14:48:53 MANAGEMENT: Client connected from [AF_INET] 127.0.0.1:63024
2019-01-13 14:48:53 MANAGEMENT: CMD 'pid'
2019-01-13 14:48:53 MANAGEMENT: CMD 'auth-retry interact'
2019-01-13 14:48:53 MANAGEMENT: CMD 'state on'
2019-01-13 14:48:53 MANAGEMENT: CMD 'state'
2019-01-13 14:48:53 MANAGEMENT: CMD 'bytecount 1'
2019-01-13 14:48:53 MANAGEMENT: CMD 'hold release'
2019-01-13 14:48:53 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2019-01-13 14:48:53 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2019-01-13 14:48:53 NOTE: --fast-io is disabled since we are not using UDP
2019-01-13 14:48:53 MANAGEMENT: >STATE:1547383733,RESOLVE,,,,,,
2019-01-13 14:48:53 *Tunnelblick: openvpnstart starting OpenVPN
2019-01-13 14:48:54 TCP/UDP: Preserving recently used remote address: [AF_INET] 185.18.205.51:143
2019-01-13 14:48:54 Socket Buffers: R=[131072->131072] S=[131072->131072]
2019-01-13 14:48:54 Attempting to establish TCP connection with [AF_INET] 185.18.205.51:143 [nonblock]
2019-01-13 14:48:54 MANAGEMENT: >STATE:1547383734,TCP_CONNECT,,,,,,
2019-01-13 14:48:55 TCP connection established with [AF_INET] 185.18.205.51:143
2019-01-13 14:48:55 TCP_CLIENT link local: (not bound)
2019-01-13 14:48:55 TCP_CLIENT link remote: [AF_INET] 185.18.205.51:143
2019-01-13 14:48:55 MANAGEMENT: >STATE:1547383735,WAIT,,,,,,
2019-01-13 14:48:55 MANAGEMENT: >STATE:1547383735,AUTH,,,,,,
2019-01-13 14:48:55 TLS: Initial packet from [AF_INET] 185.18.205.51:143, sid=3731bb57 09f3e97b
2019-01-13 14:48:55 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2019-01-13 14:48:55 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=netfree, CN=Fort-Funston CA, name=EasyRSA, emailAddress=m...@myhost.mydomain
2019-01-13 14:48:55 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=netfree, CN=server, name=EasyRSA, emailAddress=m...@myhost.mydomain
2019-01-13 14:48:55 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1543', remote='link-mtu 1544'
2019-01-13 14:48:55 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
2019-01-13 14:48:55 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
2019-01-13 14:48:55 [server] Peer Connection Initiated with [AF_INET] 185.18.205.51:143
2019-01-13 14:48:56 MANAGEMENT: >STATE:1547383736,GET_CONFIG,,,,,,
2019-01-13 14:48:56 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2019-01-13 14:48:56 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route-gateway 100.77.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 100.77.2.174 255.255.0.0'
2019-01-13 14:48:56 OPTIONS IMPORT: timers and/or timeouts modified
2019-01-13 14:48:56 OPTIONS IMPORT: --ifconfig/up options modified
2019-01-13 14:48:56 OPTIONS IMPORT: route options modified
2019-01-13 14:48:56 OPTIONS IMPORT: route-related options modified
2019-01-13 14:48:56 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2019-01-13 14:48:56 Outgoing Data Channel: Cipher 'BF-CBC' initialized with 128 bit key
2019-01-13 14:48:56 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
2019-01-13 14:48:56 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2019-01-13 14:48:56 Incoming Data Channel: Cipher 'BF-CBC' initialized with 128 bit key
2019-01-13 14:48:56 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).
2019-01-13 14:48:56 Incoming Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
2019-01-13 14:48:56 WARNING: cipher with small block size in use, reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.
2019-01-13 14:48:56 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2019-01-13 14:48:56 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2019-01-13 14:48:56 Opened utun device utun2
2019-01-13 14:48:56 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
2019-01-13 14:48:56 MANAGEMENT: >STATE:1547383736,ASSIGN_IP,,100.77.2.174,,,,
2019-01-13 14:48:56 /sbin/ifconfig utun2 delete

ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address

2019-01-13 14:48:56 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2019-01-13 14:48:56 /sbin/ifconfig utun2 100.77.2.174 100.77.2.174 netmask 255.255.0.0 mtu 1500 up
2019-01-13 14:48:56 /sbin/route add -net 100.77.0.0 100.77.2.174 255.255.0.0

add net [100.77.0.0](http://100.77.0.0): gateway 100.77.2.174

2019-01-13 14:48:56 /Applications/Tunnelblick.app/Contents/Resources/ client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw utun2 1500 1543 100.77.2.174 255.255.0.0 init

                                    **********************************************
                                    Start of output from [client.up.tunnelblick.sh](http://client.up.tunnelblick.sh)
                                    Disabled IPv6 for 'iPhone USB'
                                    Disabled IPv6 for 'Wi-Fi'
                                    Disabled IPv6 for 'Bluetooth PAN'
                                    Disabled IPv6 for 'Thunderbolt Bridge'
                                    Retrieved from OpenVPN: name server(s) \[ 8.8.8.8 8.8.4.4 \], search domain(s) \[ \] and SMB server(s) \[ \] and using default domain name \[ openvpn \]
                                    Not aggregating ServerAddresses because running on macOS 10.6 or higher
                                    Setting search domains to 'openvpn' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
                                    Saved the DNS and SMB configurations so they can be restored
                                    Changed DNS ServerAddresses setting from '194.90.1.5 8.8.8.8' to '8.8.8.8 8.8.4.4'
                                    Changed DNS SearchDomains setting from '' to 'openvpn'
                                    Changed DNS DomainName setting from '' to 'openvpn'
                                    Did not change SMB NetBIOSName setting of ''
                                    Did not change SMB Workgroup setting of ''
                                    Did not change SMB WINSAddresses setting of ''
                                    DNS servers '8.8.8.8 8.8.4.4' will be used for DNS queries when the VPN is active
                                    The DNS servers include only free public DNS servers known to Tunnelblick.
                                    Flushed the DNS cache via dscacheutil
                                    /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
                                    Notified mDNSResponder that the DNS cache was flushed

Not notifying mDNSResponderHelper that the DNS cache was flushed because it is not running

                                    Setting up to monitor system configuration with process-network-changes
                                    End of output from [client.up.tunnelblick.sh](http://client.up.tunnelblick.sh)
                                    **********************************************

2019-01-13 14:49:00 *Tunnelblick: No 'connected.sh' script to execute
2019-01-13 14:49:00 /sbin/route add -net 185.18.205.51 192.168.125.254 255.255.255.255
add net [185.18.205.51](http://185.18.205.51): gateway 192.168.125.254
2019-01-13 14:49:00 /sbin/route add -net 0.0.0.0 100.77.0.1 128.0.0.0

add net [0.0.0.0](http://0.0.0.0): gateway 100.77.0.1

2019-01-13 14:49:00 /sbin/route add -net 128.0.0.0 100.77.0.1 128.0.0.0

add net [128.0.0.0](http://128.0.0.0): gateway 100.77.0.1

2019-01-13 14:49:00 Initialization Sequence Completed
2019-01-13 14:49:00 MANAGEMENT: >STATE:1547383740,CONNECTED,SUCCESS,100.77.2.174,185.18.205.51,143,192.168.124.182,56897
2019-01-13 14:49:39 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2019-01-13 14:50:14 *Tunnelblick: An error occured fetching IP address information using the ipInfo host's IP address after connecting

================================================================================

"Sanitized" full configuration file

dev tun
fast-io
client
persist-key
persist-tun
nobind
remote myconn.myorg.link 143
proto tcp
tls-client
verb 5
mute 10

auth-user-pass userpass.key

inet6 fe80::29f2:fb60:2a2a:74ce%utun0 prefixlen 64 scopeid 0xb
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::5d42:ed1:3a67:588e%utun1 prefixlen 64 scopeid 0xe
nd6 options=201<PERFORMNUD,DAD>
en4: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether d6:a3:3d:b9:38:02
inet 169.254.23.228 netmask 0xffff0000 broadcast 169.254.255.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (100baseTX <full-duplex>)
status: active
utun2: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet 100.77.2.174 --> 100.77.2.174 netmask 0xffff0000
================================================================================

Console Log:

2019-01-13 08:55:32 Tunnelblick[40393] currentIPInfo(Name): IP address info could not be fetched within 34.5 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60000220c300 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2019-01-13 08:56:06 Tunnelblick[40393] currentIPInfo(Address): IP address info could not be fetched within 34.3 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60000220db00 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey= https://205.233.73.116/ipinfo, NSErrorFailingURLKey= https://205.233.73.116/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey= https://205.233.73.116/ipinfo, NSErrorFailingURLKey= https://205.233.73.116/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2019-01-13 08:56:06 Tunnelblick[40393] An error occured fetching IP address information after connecting
2019-01-13 08:56:22 Tunnelblick[40393] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Snfaw-Dtblk-SContents-SResources'
2019-01-13 10:43:35 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 10:43:35 Tunnelblick[40393] Error returned from setAttributes: {
                                       NSFilePosixPermissions = 488;
                                   } ofItemAtPath: /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “T” in the folder “jgfmr1194qdf6s6prpr6kqb40000gp”." UserInfo={NSFilePath=/private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T, NSUnderlyingError=0x60000227c390 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (

                                     0   Tunnelblick                         0x0000000101c67376 -\[NSFileManager(TB) tbChangeFileAttributes:atPath:\] + 161
                                     1   Tunnelblick                         0x0000000101ca7a8c createDir + 303
                                     2   Tunnelblick                         0x0000000101ca7ae8 createDir + 395
                                     3   Tunnelblick                         0x0000000101c72b35 -\[ConfigurationManager installConfigurations:skipConfirmationMessage:skipResultMessage:notifyDelegate:disallowCommands:\] + 1578
                                     4   Tunnelblick                         0x0000000101c73177 -\[ConfigurationManager installConfigurations:skipMessages:notifyDelegate:disallowCommands:\] + 77
                                     5   Tunnelblick                         0x0000000101c7866d +\[ConfigurationManager installConfigurationsShowMessagesNotifyDelegateOperation:\] + 93
                                     6   Foundation                          0x00007fff3673e234 \_\_NSThread\_\_start__ + 1218
                                     7   libsystem\_pthread.dylib             0x00007fff6167333d \_pthread_body + 126
                                     8   libsystem\_pthread.dylib             0x00007fff616762a7 \_pthread_start + 70
                                     9   libsystem\_pthread.dylib             0x00007fff61672425 thread\_start + 13
                                   )
2019-01-13 10:43:35 Tunnelblick[40393] Warning: Unable to change permissions from 700 to 750 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T
2019-01-13 10:43:35 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 10:43:35 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn at line 20: Copied userpass.key, removing CR characters
2019-01-13 10:43:35 Tunnelblick[40393] Changed permissions from 644 to 740 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-mYTmBK/myconn.tblk/Contents/Resources/userpass.key
2019-01-13 10:43:35 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn: Converted OpenVPN configuration
2019-01-13 10:43:57 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 10:43:57 Tunnelblick[40393] Error returned from setAttributes: {
                                       NSFilePosixPermissions = 488;
                                   } ofItemAtPath: /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “T” in the folder “jgfmr1194qdf6s6prpr6kqb40000gp”." UserInfo={NSFilePath=/private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T, NSUnderlyingError=0x6000022617d0 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (

                                     0   Tunnelblick                         0x0000000101c67376 -\[NSFileManager(TB) tbChangeFileAttributes:atPath:\] + 161
                                     1   Tunnelblick                         0x0000000101ca7a8c createDir + 303
                                     2   Tunnelblick                         0x0000000101ca7ae8 createDir + 395
                                     3   Tunnelblick                         0x0000000101c72b35 -\[ConfigurationManager installConfigurations:skipConfirmationMessage:skipResultMessage:notifyDelegate:disallowCommands:\] + 1578
                                     4   Tunnelblick                         0x0000000101c73177 -\[ConfigurationManager installConfigurations:skipMessages:notifyDelegate:disallowCommands:\] + 77
                                     5   Tunnelblick                         0x0000000101c7866d +\[ConfigurationManager installConfigurationsShowMessagesNotifyDelegateOperation:\] + 93
                                     6   Foundation                          0x00007fff3673e234 \_\_NSThread\_\_start__ + 1218
                                     7   libsystem\_pthread.dylib             0x00007fff6167333d \_pthread_body + 126
                                     8   libsystem\_pthread.dylib             0x00007fff616762a7 \_pthread_start + 70
                                     9   libsystem\_pthread.dylib             0x00007fff61672425 thread\_start + 13
                                   )
2019-01-13 10:43:57 Tunnelblick[40393] Warning: Unable to change permissions from 700 to 750 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T
2019-01-13 10:43:57 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 10:43:57 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn at line 20: Copied userpass.key, removing CR characters
2019-01-13 10:43:57 Tunnelblick[40393] Changed permissions from 644 to 740 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-JQFT2R/myconn.tblk/Contents/Resources/userpass.key
2019-01-13 10:43:57 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew/myconn.ovpn: Converted OpenVPN configuration
2019-01-13 10:43:59 Tunnelblick[40393] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2019-01-13 10:43:59 Tunnelblick[40393] Beginning installation or repair
2019-01-13 10:43:59 Tunnelblick[40393] Installation or repair succeeded; Log:
                                   Tunnelblick installer started 2019-01-13 10:43:59. 3 arguments: 0x0001
                                        /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                        /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-JQFT2R/myconn.tblk
                                   Copied /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-JQFT2R/myconn.tblk
                                       to /Library/Application Support/Tunnelblick/Shared/myconn.tblk.temp
                                   Renamed /Library/Application Support/Tunnelblick/Shared/myconn.tblk.temp
                                        to /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                   Changed ownership of /Library/Application Support/Tunnelblick/Shared/myconn.tblk and its contents from 502:20 to 0:0
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
                                   Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/userpass.key
                                   Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/config.ovpn
                                   Tunnelblick installer finished without error
2019-01-13 10:44:53 Tunnelblick[40393] currentIPInfo(Name): IP address info could not be fetched within 34.5 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60000224c840 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2019-01-13 10:45:28 Tunnelblick[40393] currentIPInfo(Address): IP address info could not be fetched within 35.0 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6000023b8420 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey= https://205.233.73.116/ipinfo, NSErrorFailingURLKey= https://205.233.73.116/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey= https://205.233.73.116/ipinfo, NSErrorFailingURLKey= https://205.233.73.116/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2019-01-13 10:45:28 Tunnelblick[40393] An error occured fetching IP address information after connecting
2019-01-13 10:47:00 Tunnelblick[40393] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Snfaw-Dtblk-SContents-SResources'
2019-01-13 12:54:28 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 12:54:28 Tunnelblick[40393] Error returned from setAttributes: {
                                       NSFilePosixPermissions = 488;
                                   } ofItemAtPath: /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “T” in the folder “jgfmr1194qdf6s6prpr6kqb40000gp”." UserInfo={NSFilePath=/private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T, NSUnderlyingError=0x600002385260 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (

                                     0   Tunnelblick                         0x0000000101c67376 -\[NSFileManager(TB) tbChangeFileAttributes:atPath:\] + 161
                                     1   Tunnelblick                         0x0000000101ca7a8c createDir + 303
                                     2   Tunnelblick                         0x0000000101ca7ae8 createDir + 395
                                     3   Tunnelblick                         0x0000000101c72b35 -\[ConfigurationManager installConfigurations:skipConfirmationMessage:skipResultMessage:notifyDelegate:disallowCommands:\] + 1578
                                     4   Tunnelblick                         0x0000000101c73177 -\[ConfigurationManager installConfigurations:skipMessages:notifyDelegate:disallowCommands:\] + 77
                                     5   Tunnelblick                         0x0000000101c7866d +\[ConfigurationManager installConfigurationsShowMessagesNotifyDelegateOperation:\] + 93
                                     6   Foundation                          0x00007fff3673e234 \_\_NSThread\_\_start__ + 1218
                                     7   libsystem\_pthread.dylib             0x00007fff6167333d \_pthread_body + 126
                                     8   libsystem\_pthread.dylib             0x00007fff616762a7 \_pthread_start + 70
                                     9   libsystem\_pthread.dylib             0x00007fff61672425 thread\_start + 13
                                   )
2019-01-13 12:54:28 Tunnelblick[40393] Warning: Unable to change permissions from 700 to 750 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T
2019-01-13 12:54:28 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 12:54:28 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn at line 20: The configuration file refers to a file 'userpass.txt' which should be located at '/Users/user/Downloads/Ovpn-configNew 2/userpass.txt' but the file does not exist.
2019-01-13 12:54:52 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 12:54:52 Tunnelblick[40393] Error returned from setAttributes: {
                                       NSFilePosixPermissions = 488;
                                   } ofItemAtPath: /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “T” in the folder “jgfmr1194qdf6s6prpr6kqb40000gp”." UserInfo={NSFilePath=/private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T, NSUnderlyingError=0x6000023f6a60 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (

                                     0   Tunnelblick                         0x0000000101c67376 -\[NSFileManager(TB) tbChangeFileAttributes:atPath:\] + 161
                                     1   Tunnelblick                         0x0000000101ca7a8c createDir + 303
                                     2   Tunnelblick                         0x0000000101ca7ae8 createDir + 395
                                     3   Tunnelblick                         0x0000000101c72b35 -\[ConfigurationManager installConfigurations:skipConfirmationMessage:skipResultMessage:notifyDelegate:disallowCommands:\] + 1578
                                     4   Tunnelblick                         0x0000000101c73177 -\[ConfigurationManager installConfigurations:skipMessages:notifyDelegate:disallowCommands:\] + 77
                                     5   Tunnelblick                         0x0000000101c7866d +\[ConfigurationManager installConfigurationsShowMessagesNotifyDelegateOperation:\] + 93
                                     6   Foundation                          0x00007fff3673e234 \_\_NSThread\_\_start__ + 1218
                                     7   libsystem\_pthread.dylib             0x00007fff6167333d \_pthread_body + 126
                                     8   libsystem\_pthread.dylib             0x00007fff616762a7 \_pthread_start + 70
                                     9   libsystem\_pthread.dylib             0x00007fff61672425 thread\_start + 13
                                   )
2019-01-13 12:54:52 Tunnelblick[40393] Warning: Unable to change permissions from 700 to 750 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T
2019-01-13 12:54:52 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 12:54:52 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn at line 20: Copied userpass.key, removing CR characters
2019-01-13 12:54:52 Tunnelblick[40393] Changed permissions from 644 to 740 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-jX40Wy/myconn.tblk/Contents/Resources/userpass.key
2019-01-13 12:54:52 Tunnelblick[40393] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: Converted OpenVPN configuration
2019-01-13 12:54:55 Tunnelblick[40393] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2019-01-13 12:54:55 Tunnelblick[40393] Beginning installation or repair
2019-01-13 12:54:55 Tunnelblick[40393] Installation or repair succeeded; Log:
                                   Tunnelblick installer started 2019-01-13 12:54:55. 3 arguments: 0x0001
                                        /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                        /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-jX40Wy/myconn.tblk
                                   Copied /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-jX40Wy/myconn.tblk
                                       to /Library/Application Support/Tunnelblick/Shared/myconn.tblk.temp
                                   Renamed /Library/Application Support/Tunnelblick/Shared/myconn.tblk.temp
                                        to /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                   Changed ownership of /Library/Application Support/Tunnelblick/Shared/myconn.tblk and its contents from 502:20 to 0:0
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
                                   Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/userpass.key
                                   Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/config.ovpn
                                   Tunnelblick installer finished without error
2019-01-13 12:55:48 Tunnelblick[40393] currentIPInfo(Name): IP address info could not be fetched within 34.3 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x600002324b40 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2019-01-13 12:56:22 Tunnelblick[40393] currentIPInfo(Address): IP address info could not be fetched within 34.2 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x6000023672a0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey= https://205.233.73.116/ipinfo, NSErrorFailingURLKey= https://205.233.73.116/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey= https://205.233.73.116/ipinfo, NSErrorFailingURLKey= https://205.233.73.116/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2019-01-13 12:56:22 Tunnelblick[40393] An error occured fetching IP address information after connecting
2019-01-13 12:56:36 Tunnelblick[40393] Set 'expect disconnect 1 -SLibrary-SApplication Support-STunnelblick-SShared-Snfaw-Dtblk-SContents-SResources'
2019-01-13 12:56:38 tunnelblickd[43433] Status = 248 from tunnelblick-helper command 'kill 43236'
2019-01-13 12:56:38 Tunnelblick[40393] tunnelblickd status from kill: 248
                                   tunnelblickd stderr:
                                   'killOneOpenvpn(43236): Process does not exist
                                   '
2019-01-13 14:45:38 Tunnelblick[40393] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2019-01-13 14:45:38 Tunnelblick[40393] Set 'expect disconnect 0 ALL'
2019-01-13 14:45:38 Tunnelblick[40393] Finished shutting down Tunnelblick; allowing termination
2019-01-13 14:47:55 Tunnelblick[44992] Tunnelblick: macOS 10.14.0; Tunnelblick 3.7.8 (build 5180)
2019-01-13 14:47:55 Tunnelblick[44992] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.
2019-01-13 14:47:57 Tunnelblick[44992] Tunnelblick needs to:
                                     • Be installed in /Applications as Tunnelblick
                                     • Change ownership and permissions of the program to secure it
                                     • Secure configurations
2019-01-13 14:47:57 Tunnelblick[44992] Beginning installation or repair
2019-01-13 14:47:59 Tunnelblick[44992] Installation or repair succeeded; Log:
                                   Tunnelblick installer started 2019-01-13 14:47:58. 1 arguments: 0x0017
                                   Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755
                                   Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0
                                   Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755
                                   Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755
                                   Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755
                                   Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755
                                   Created directory /Library/Application Support/Tunnelblick/expect-disconnect with owner 0:0 and permissions 755
                                   Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755
                                   Created directory /Library/Application Support/Tunnelblick/Users/user with owner 0:0 and permissions 755
                                   Created .mip
                                   Changed ownership of /Users/user/Library/Application Support/Tunnelblick from 502:20 to 502:80
                                   Changed ownership of /Users/user/Library/Application Support/Tunnelblick/Configurations from 502:20 to 502:80
                                   Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app
                                   Removed all 'com.apple.quarantine' extended attributes
                                   Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0
                                   Need to replace and/or reload 'tunnelblickd':
                                       tunnelblickdHashOK   = NO
                                       launchctlPlistHashOK = NO
                                       tunnelblickdPlistOK = NO
                                       socketOK             = NO
                                   Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
                                   Used launchctl to load tunnelblickd
                                   Tunnelblick installer finished without error
2019-01-13 14:47:59 Tunnelblick[44992] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2019-01-13 14:47:59 Tunnelblick[45002] Tunnelblick: macOS 10.14.0; Tunnelblick 3.7.8 (build 5180)
2019-01-13 14:48:00 Tunnelblick[45002] Copied our 'net.tunnelblick.tunnelblick.LaunchAtLogin.plist' into ~/Library/LaunchAgents
2019-01-13 14:48:00 Tunnelblick[45002] DEPRECATED USE in libdispatch client: dispatch source activated with no event handler set; set a breakpoint on _dispatch_bug_deprecated to debug
2019-01-13 14:48:00 Tunnelblick[44992] Set 'expect disconnect 0 ALL'
2019-01-13 14:48:00 Tunnelblick[45002] Waiting for Tunnelblick installer to terminate
2019-01-13 14:48:01 Tunnelblick[44992] Finished shutting down Tunnelblick; allowing termination
2019-01-13 14:48:01 Tunnelblick[45002] Done waiting for Tunnelblick installer to terminate
2019-01-13 14:48:02 Tunnelblick[45002] Sparkle: ===== Tunnelblick =====
2019-01-13 14:48:02 Tunnelblick[45002] Sparkle: Verified appcast signature
2019-01-13 14:48:06 Tunnelblick[45002] Copied easy-rsa
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 700 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-ca
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 600 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/vars
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-key-server
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-key-pass
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-req
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-req-pass
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/libressl.cnf.template
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 700 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/ChangeLog
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 700 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 700 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/ca
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/server
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/COMMON
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/client
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 600 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/openssl-1.0.cnf
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/easyrsa
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/vars.example
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/COPYING
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 700 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Intro-To-PKI.md
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Readme.md
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Hacking.md
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Advanced.md
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/TODO
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Upgrade-Notes.md
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 700 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing/gpl-2.0.txt
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/KNOWN_ISSUES
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/ README.quickstart.md ~
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/clean-all
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-dh
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 600 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.6.cnf
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/pkitool
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/sign-req
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-key-pkcs12
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/whichopensslcnf
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-inter
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/README
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/revoke-full
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 600 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.8.cnf
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/readme-libressl.txt
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/TB-version.txt
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/list-crl
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/build-key
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 755 to 500 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/inherit-inter
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 600 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/openssl-1.0.0.cnf
2019-01-13 14:48:06 Tunnelblick[45002] Changed permissions from 644 to 400 on /Users/user/Library/Application Support/Tunnelblick/easy-rsa/v3version.txt
2019-01-13 14:48:36 Tunnelblick[45002] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 14:48:36 Tunnelblick[45002] Error returned from setAttributes: {
                                       NSFilePosixPermissions = 488;
                                   } ofItemAtPath: /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “T” in the folder “jgfmr1194qdf6s6prpr6kqb40000gp”." UserInfo={NSFilePath=/private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T, NSUnderlyingError=0x600002216430 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (

                                     0   Tunnelblick                         0x000000010023c376 -\[NSFileManager(TB) tbChangeFileAttributes:atPath:\] + 161
                                     1   Tunnelblick                         0x000000010027ca8c createDir + 303
                                     2   Tunnelblick                         0x000000010027cae8 createDir + 395
                                     3   Tunnelblick                         0x0000000100247b35 -\[ConfigurationManager installConfigurations:skipConfirmationMessage:skipResultMessage:notifyDelegate:disallowCommands:\] + 1578
                                     4   Tunnelblick                         0x0000000100248177 -\[ConfigurationManager installConfigurations:skipMessages:notifyDelegate:disallowCommands:\] + 77
                                     5   Tunnelblick                         0x000000010024d66d +\[ConfigurationManager installConfigurationsShowMessagesNotifyDelegateOperation:\] + 93
                                     6   Foundation                          0x00007fff3673e234 \_\_NSThread\_\_start__ + 1218
                                     7   libsystem\_pthread.dylib             0x00007fff6167333d \_pthread_body + 126
                                     8   libsystem\_pthread.dylib             0x00007fff616762a7 \_pthread_start + 70
                                     9   libsystem\_pthread.dylib             0x00007fff61672425 thread\_start + 13
                                   )
2019-01-13 14:48:36 Tunnelblick[45002] Warning: Unable to change permissions from 700 to 750 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T
2019-01-13 14:48:36 Tunnelblick[45002] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: One or more CR characters have been removed or replaced with LF characters
2019-01-13 14:48:36 Tunnelblick[45002] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn at line 20: Copied userpass.key, removing CR characters
2019-01-13 14:48:36 Tunnelblick[45002] Changed permissions from 644 to 740 on /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-q5Uheh/myconn.tblk/Contents/Resources/userpass.key
2019-01-13 14:48:36 Tunnelblick[45002] Converting/Installing /Users/user/Downloads/Ovpn-configNew 2/myconn.ovpn: Converted OpenVPN configuration
2019-01-13 14:48:42 Tunnelblick[45002] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2019-01-13 14:48:42 Tunnelblick[45002] Beginning installation or repair
2019-01-13 14:48:42 Tunnelblick[45002] Installation or repair succeeded; Log:
                                   Tunnelblick installer started 2019-01-13 14:48:42. 3 arguments: 0x0001
                                        /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                        /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-q5Uheh/myconn.tblk
                                   Copied /private/var/folders/13/jgfmr1194qdf6s6prpr6kqb40000gp/T/Tunnelblick-q5Uheh/myconn.tblk
                                       to /Library/Application Support/Tunnelblick/Shared/myconn.tblk.temp
                                   Renamed /Library/Application Support/Tunnelblick/Shared/myconn.tblk.temp
                                        to /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                   Changed ownership of /Library/Application Support/Tunnelblick/Shared/myconn.tblk and its contents from 502:20 to 0:0
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents
                                   Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources
                                   Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/userpass.key
                                   Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myconn.tblk/Contents/Resources/config.ovpn
                                   Tunnelblick installer finished without error
2019-01-13 14:49:39 Tunnelblick[45002] currentIPInfo(Name): IP address info could not be fetched within 34.0 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x60000205b0f0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey= https://tunnelblick.net/ipinfo, NSErrorFailingURLKey= https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'

**************************************************************************************************************************************************************************************

--
You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/_3zlCVEXMno/unsubscribe.
To unsubscribe from this group and all its topics, send an email to tunnelblick-dis...@googlegroups.com.

Tunnelblick developer

unread,

Jan 14, 2019, 7:17:59 AM1/14/19

to tunnelblick-discuss

There are problems with your OpenVPN configuration. See the following warnings:

2019-01-13 14:48:55 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1543', remote='link-mtu 1544'

2019-01-13 14:48:55 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'

2019-01-13 14:48:56 WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC).

Try consulting some OpenVPN references:

OpenVPN FAQ
OpenVPN HOWTO
OpenVPN 2.3 Man Page
OpenVPN Documentation
OpenVPN Users Forum
OpenVPN Users Mailing List

Macro Shadow

unread,

Jan 14, 2019, 7:22:18 AM1/14/19

to tunnelbli...@googlegroups.com

Thank you. I am aware of those issues but they don't prevent other users from connecting, just this one user is getting the IP errors.