Upgraded to Tunnelblick 3.6.0a, now cannot connect. See message: "Tunnelblick was unable to start OpenVPN to connect client. For details, see the log in the VPN Details… window"

[Eli104]

The subject pretty much states the case. After upgrading to the newest Stable release 3.6.0a, I now see the message: "Tunnelblick was unable to start OpenVPN to connect client. For details, see the log in the VPN Details… window" when I try to connect. 

On another Mac, which has had the same configuration but is still running  3.5.8 (build 4270.4530), everything works fine.

I am not sure if some changes were made in the latest release that I missed, but I would appreciate any input that anyone can offer. Here are the details from the Log... Thanks!:

2016-03-21 11:23:51 *Tunnelblick: OS X 10.11.3; Tunnelblick 3.6.0a (build 4543.4546); prior version 3.5.8 (build 4270.4530)

2016-03-21 11:23:51 *Tunnelblick: Attempting connection with client using shadow copy; Set nameserver = 1; monitoring connection

2016-03-21 11:23:51 *Tunnelblick: openvpnstart start client.tblk 1337 1 0 1 0 1065264 -ptADGNWradsgnw 2.3_git_6a4edc7

2016-03-21 11:23:52 *Tunnelblick:

Could not start OpenVPN (openvpnstart returned with status #251)

Contents of the openvpnstart log:

*Tunnelblick: openvpnstart log:

     OpenVPN returned with status 1, errno = 0:

          Undefined error: 0

     

     Command used to start OpenVPN (one argument per displayed line):

     

          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3_git_6a4edc7/openvpn

          --daemon

          --log

          /Library/Application Support/Tunnelblick/Logs/-SUsers-Selisherer2015-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sclient.tblk-SContents-SResources-Sconfig.ovpn.1_0_1_0_1065264.1337.openvpn.log

          --cd

          /Library/Application Support/Tunnelblick/Users/elisherer2015/client.tblk/Contents/Resources

          --verb

          3

          --config

          /Library/Application Support/Tunnelblick/Users/elisherer2015/client.tblk/Contents/Resources/config.ovpn

          --cd

          /Library/Application Support/Tunnelblick/Users/elisherer2015/client.tblk/Contents/Resources

          --management

          127.0.0.1

          1337

          --management-query-passwords

          --management-hold

          --script-security

          2

          --up

          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

          --down

          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

     

     Contents of the OpenVPN log:

     

          Mon Mar 21 11:23:51 2016 DEPRECATED OPTION: --tls-remote, please update your configuration

          Options error: Unrecognized option or missing or extra parameter(s) in /Library/Application Support/Tunnelblick/Users/elisherer2015/client.tblk/Contents/Resources/config.ovpn:17: float (2.3_git_6a4edc7)

          Use --help for more information.

          

     More details may be in the Console Log's "All Messages"

[jkbull...gmail.com]

You didn't post your configuration file, but I think you probably have something after "float" in line 17 of your configuration file. The "float" option does not accept any arguments. Old versions of OpenVPN ignore this, but recent versions (including the git version you are using) complain about it.

Also, using "float" is unusual in a client configuration. You shouldn't need it unless you expect the VPN server to change its IP address while the client is connected, or there are multiple VPN servers which handle connections from a single client.

Also, "--tls-remote" is deprecated (per the error message from OpenVPN).

Note: You are using the latest "unstable" version of OpenVPN. I'm not sure you really want to do that. You might want to try the default version (2.3.10 in Tunnelblick 3.6.0a).

On Monday, March 21, 2016 at 11:25:13 AM UTC-4, Eli104 wrote:

The subject pretty much states the case. After upgrading to the newest Stable release 3.6.0a, I now see the message: "Tunnelblick was unable to start OpenVPN to connect client. For details, see the log in the VPN Details… window" when I try to connect.

 

   

          Mon Mar 21 11:23:51 2016 DEPRECATED OPTION: --tls-remote, please update your configuration

          Options error: Unrecognized option or missing or extra parameter(s) in /Library/Application Support/Tunnelblick/Users/elisherer2015/client.tblk/Contents/Resources/config.ovpn:17: float (2.3_git_6a4edc7)

          

     More details may be in the Console Log's "All Messages"

[Eli104]

Sorry... I'm not the best at this. The same configuration has been used for a number of years. I will try to contact the guys in my office who use this (it's a connection that allows us to VPN from a Mac to what is normally a Windows specific application). 

Having said that... I DID go back to OpenVPN version 2.3.10 and that seemed to solve the issue for now. Thanks!!

[jkbull...gmail.com]

Don't worry -- as long as you are able to connect you are OK for now.

But at some point the old version of OpenVPN will go away and you'll still have the problem with the "float" option, so it should be fixed by your IT department or whoever set up the VPN. If nobody else can do it, I can step you through the process of fixing it, which should be relatively easy.

[Eli104]

Thanks very much... I may take you up on that offer. First, I have a note out to my IT guys, maybe they have already figured this out.

[jkbull...gmail.com]

After thinking about it, I will document the procedure here for everyone.

It's easy, but my instructions are long because they are very detailed.

To modify an OpenVPN configuration file

A. Make sure it is a "private" configuration, not a "shared" configuration:

1. Launch Tunnelblick.
   
2. Click on the Tunnelblick icon at the top of the screen.
   
3. Click on "VPN Details…".
   
4. In the window that appears, click to select the configuration that is having the problem.
   
5. Click on the little "gear" icon at the bottom of the list of configurations.
   
6. If "Make Configuration Shared" is dim and "Make Configuration Private" can be clicked, click it, enter your username/password and click "OK".
   

B. Open the configuration file in TextEdit:

1. Launch Tunnelblick.
   
2. Click on the Tunnelblick icon at the top of the screen.
   
3. Click on "VPN Details…".
   
4. In the window that appears, click to select the configuration that is having the problem.
   
5. Click on the little "gear" icon at the bottom of the list of configurations.
   
6. Click on "Edit OpenVPN Configuration File…". (If only "Examine OpenVPN Configuration File" is visible, make the configuration "private" (see above).

The configuration file will be opened in TextEdit, the text editor built into OS X.

To fix this particular problem of something after "float":

1. Find the 17th line, which should start with "float". (You might have to scroll down to see that line.)
   
2. Click immediately after the word "float" and type a "#" (shift-3) character so it is between "float" and the rest of the line.
   
3. Close the TextEdit window and save the changes.
   
4. Quit TextEdit if you want to.
   

Note: The first time you try to connect the configuration after modifying the OpenVPN configuration file, you will be asked for a computer administrator's username/password to authorize Tunnelblick to secure the configuration.