Problem to connect, please, what can I do?

294 views
Skip to first unread message

Cravero, Ricardo Alberto

unread,
Mar 8, 2021, 12:33:26 PM3/8/21
to tunnelbli...@googlegroups.com
*Tunnelblick: macOS 11.2 (20D64); Tunnelblick 3.8.5beta05 (build 5650); Admin user
git commit 8a6bb2d3971a59d95597b2d4561c7c9f08dd93ad + uncommitted changes:
?? ../Build Log - Xcode 12.4 on macOS 10.15.7.txt
The Tunnelblick.app process is not being translated (x86_64)
System Integrity Protection is enabled

Configuration 1-11085996

"Sanitized" condensed configuration file for /Users/rc/Library/Application Support/Tunnelblick/Configurations/1-11085996.tblk:

client
tls-client
dev tap
proto udp
remote fwvpn.unl.edu.ar 1195
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert 1-11085996.crt
key 1-11085996.key
tls-auth ta.key 1
comp-lzo
verb 3


================================================================================

Files in 1-11085996.tblk:
      Contents/Resources/1-1….key
      Contents/Resources/ta.key
      Contents/Resources/ca.crt
      Contents/Resources/1-1….crt
      Contents/Resources/config.ovpn

================================================================================

Tunnelblick Kext Policy Data:

net.tunnelblick.tap|Z2SG5H3HC8|Jonathan Bullard|1|8
net.tunnelblick.tun|Z2SG5H3HC8|Jonathan Bullard|1|8

================================================================================

Configuration preferences:

useDNS = 2
-credentialsGroup =
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:

-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0

================================================================================

Program preferences:

skipWarningAboutBigSur2 = 1
launchAtNextLogin = 1
tunnelblickVersionHistory = (
    "3.8.5beta05 (build 5650)"
)
statusDisplayNumber = 0
lastLaunchTime = 636733298.352303
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
keyboardShortcutIndex = 1
namedCredentialsNames = (
    "1-11085996.crt"
)
updateCheckAutomatically = 1
NSWindow Frame SettingsSheetWindow = 873 83 829 548 0 0 1920 1055
NSWindow Frame ConnectingWindow = 765 658 389 193 0 0 1920 1055
detailsWindowFrameVersion = 5650
detailsWindowFrame = {{672, 388}, {920, 550}}
detailsWindowLeftFrame = {{0, 0}, {167, 430}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = settings
leftNavSelectedDisplayName = 1-11085996
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
haveDealtWithAfterDisconnect = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SULastCheckTime = 2021-03-06 14:24:58 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

================================================================================

Forced preferences:

(None)

================================================================================

Deployed forced preferences:

(None)

================================================================================

Tunnelblick Log:

2021-03-06 11:27:01.338786 *Tunnelblick: macOS 11.2 (20D64); Tunnelblick 3.8.5beta05 (build 5650)
2021-03-06 11:27:01.631839 *Tunnelblick: Attempting connection with 1-11085996 using shadow copy; Set nameserver = 773; monitoring connection
2021-03-06 11:27:01.632036 *Tunnelblick: openvpnstart start 1-11085996.tblk 51380 773 0 1 0 34652530 -ptADGNWradsgnw 2.4.10-openssl-1.1.1j
2021-03-06 11:27:01.694022 *Tunnelblick: openvpnstart starting OpenVPN
2021-03-06 11:27:05.503376 OpenVPN 2.4.10 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Feb 25 2021
2021-03-06 11:27:05.503495 library versions: OpenSSL 1.1.1j  16 Feb 2021, LZO 2.10
2021-03-06 11:27:05.505052 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:51380
2021-03-06 11:27:05.505109 Need hold release from management interface, waiting...
2021-03-06 11:27:06.737796 *Tunnelblick: openvpnstart log:
     The system reported that the tap kext was loaded successfully
     OpenVPN started successfully.
     Command used to start OpenVPN (one argument per displayed line):
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.10-openssl-1.1.1j/openvpn
          --daemon
          --log /Library/Application Support/Tunnelblick/Logs/-SUsers-Src-SLibrary-SApplication Support-STunnelblick-SConfigurations-S1--11085996.tblk-SContents-SResources-Sconfig.ovpn.773_0_1_0_34652530.51380.openvpn.log
          --cd /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources
          --machine-readable-output
          --setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5650 3.8.5beta05 (build 5650)"
          --verb 3
          --config /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources/config.ovpn
          --setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources
          --verb 3
          --cd /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources
          --management 127.0.0.1 51380 /Library/Application Support/Tunnelblick/dbpjnaipoacehahopkjemmcomlngmilpkeppplpe.mip
          --management-query-passwords
          --management-hold
          --script-security 2
          --route-up /Applications/Tunnelblick.app/Contents/Resources/client.1.up.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
          --down /Applications/Tunnelblick.app/Contents/Resources/client.1.down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
2021-03-06 11:27:06.740823 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:51380
2021-03-06 11:27:06.758914 MANAGEMENT: CMD 'pid'
2021-03-06 11:27:06.759004 MANAGEMENT: CMD 'auth-retry interact'
2021-03-06 11:27:06.759035 MANAGEMENT: CMD 'state on'
2021-03-06 11:27:06.759055 MANAGEMENT: CMD 'state'
2021-03-06 11:27:06.759107 MANAGEMENT: CMD 'bytecount 1'
2021-03-06 11:27:06.760057 *Tunnelblick: Established communication with OpenVPN
2021-03-06 11:27:06.765811 *Tunnelblick: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2021-03-06 11:27:06.767085 MANAGEMENT: CMD 'hold release'
2021-03-06 11:27:06.767255 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2021-03-06 11:27:06.767272 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2021-03-06 11:27:06.770133 OpenSSL: error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak
2021-03-06 11:27:06.770215 MANAGEMENT: Client disconnected
2021-03-06 11:27:06.770228 Cannot load certificate file 1-11085996.crt
2021-03-06 11:27:06.770237 Exiting due to fatal error
2021-03-06 11:27:13.766630 *Tunnelblick: Expected disconnection occurred.

================================================================================

Down log:

(Not found)
================================================================================

Previous down log:

(Not found)
================================================================================

Network services:

An asterisk (*) denotes that a network service is disabled.
Wi-Fi
SAMSUNG Modem
HUAWEI_MOBILE
Bluetooth PAN
Thunderbolt Bridge
Thunderbolt Ethernet

Wi-Fi Power (en0): On

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.94.0.1 netmask 0xff000000
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en5: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=50b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV,CHANNEL_IO>
ether a8:60:b6:19:77:bb
inet6 fe80::469:644a:c674:b939%en5 prefixlen 64 secured scopeid 0x4
inet 192.168.1.11 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (1000baseT <full-duplex,flow-control>)
status: active
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether a0:99:9b:1d:5f:bd
inet6 fe80::183d:1cfd:9701:986b%en0 prefixlen 64 secured scopeid 0x5
inet 192.168.1.44 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:17:03:14:ba:40
media: autoselect <full-duplex>
status: inactive
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:17:03:14:ba:41
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 82:17:03:14:ba:40
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x0
member: en1 flags=3<LEARNING,DISCOVER>
       ifmaxaddr 0 port 6 priority 0 path cost 0
member: en2 flags=3<LEARNING,DISCOVER>
       ifmaxaddr 0 port 7 priority 0 path cost 0
nd6 options=201<PERFORMNUD,DAD>
media: <unknown type>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
options=400<CHANNEL_IO>
ether 02:99:9b:1d:5f:bd
media: autoselect
status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
options=400<CHANNEL_IO>
ether d6:57:eb:5f:be:20
inet6 fe80::d457:ebff:fe5f:be20%awdl0 prefixlen 64 scopeid 0xa
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
llw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether d6:57:eb:5f:be:20
inet6 fe80::d457:ebff:fe5f:be20%llw0 prefixlen 64 scopeid 0xb
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::8496:a609:48d:cbe7%utun0 prefixlen 64 scopeid 0xc
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::688a:2922:b48a:64d6%utun1 prefixlen 64 scopeid 0xd
nd6 options=201<PERFORMNUD,DAD>

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address            Size       Wired      Name (Version) UUID <Linked Against>
  184    0 0xffffff7fa2405000 0x15000    0x15000    com.google.drivefs.filesystems.dfsfuse (45.2.0) EDD08C01-C7FE-34A9-89AF-77A99A25E521 <8 6 5 3 1>

================================================================================

Quit Log:

2021-03-06 09:47:58.724607 applicationShouldTerminate: termination because of logout; delayed until 'shutdownTunnelblick' finishes)
2021-03-06 09:47:58.730642 shutDownTunnelblick: started.
2021-03-06 09:47:58.730990 shutDownTunnelblick: Starting cleanup.
2021-03-06 09:47:58.731288 cleanup: Entering cleanup
2021-03-06 09:47:58.756601 synchronized user defaults
2021-03-06 09:48:00.209991 shutDownTunnelblick: Cleanup finished.
2021-03-06 09:48:00.210462 Finished shutting down Tunnelblick; allowing termination

================================================================================

Console Log:

2021-03-06 08:27:06.186456 com.apple.xpc.launchd[1] Caller specified a plist with bad ownership/permissions: path = /Users/rc/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, caller = otherbsd.393
2021-03-06 09:12:14.402545 Tunnelblick[1695] Tunnelblick: macOS 10.16.0; Tunnelblick 3.8.5beta05 (build 5650)
2021-03-06 09:12:14.402980 Tunnelblick[1695] isOnRemoteVolume: will check parent of '/Users/rc/Library/Application Support/Tunnelblick/Configurations'
2021-03-06 09:12:14.405382 Tunnelblick[1695] Propagating '-resetPrimaryInterfaceAfterDisconnect' preferences that are TRUE to '-resetPrimaryInterfaceAfterUnexpectedDisconnect'
2021-03-06 09:12:14.775819 Tunnelblick[1695] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.
2021-03-06 09:12:29.637691 Tunnelblick[1695] Tunnelblick necesita:
                                         • Ser instalado en /Aplicaciones como Tunnelblick
                                         • Cambiar propiedad y permisos del programa para asegurarlo
                                         • Configuraciones seguras
2021-03-06 09:12:29.637760 Tunnelblick[1695] Beginning installation or repair
2021-03-06 09:12:30.546144 Tunnelblick[1695] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-06 09:12:29.677564. 1 arguments: 0x0017
                                       getuid() = 502; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755
                                       Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0
                                       Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755
                                       Changed permissions from 744 to 755 on /var/log/Tunnelblick
                                       Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/expect-disconnect with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755
                                       Created directory /Library/Application Support/Tunnelblick/Users/rc with owner 0:0 and permissions 755
                                       Created .mip
                                       Changed ownership of /Users/rc/Library/Application Support/Tunnelblick from 502:20 to 502:80
                                       Created or checked '/Users/rc/Library/Application Support/Tunnelblick'; owner = 502:80; permissions = 488
                                       Changed ownership of /Users/rc/Library/Application Support/Tunnelblick/Configurations from 502:20 to 502:80
                                       Created or checked '/Users/rc/Library/Application Support/Tunnelblick/Configurations'; owner = 502:80; permissions = 488
                                       Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app
                                       Removed any 'com.apple.quarantine' extended attributes
                                       Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0
                                       Changed permissions from 755 to 744 on /Applications/Tunnelblick.app/Contents/Resources/tunnelblickd
                                       Need to replace and/or reload 'tunnelblickd':
                                           tunnelblickdHashOK   = NO
                                           launchctlPlistHashOK = NO
                                           tunnelblickdPlistOK  = YES
                                           socketOK             = YES
                                       Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
                                       Used launchctl to load tunnelblickd
                                       Tunnelblick installer finished without error
2021-03-06 09:12:30.722651 Tunnelblick[1695] cleanup: Entering cleanup
2021-03-06 09:12:30.723074 Tunnelblick[1695] cleanup aborted because Tunnelblick did not finish launching
2021-03-06 09:12:30.723874 Tunnelblick[1695] Finished shutting down Tunnelblick; allowing termination
2021-03-06 09:12:30.739211 Tunnelblick[1718] Tunnelblick: macOS 10.16.0; Tunnelblick 3.8.5beta05 (build 5650)
2021-03-06 09:12:31.372617 Tunnelblick[1718] Launching a thread to remove the old login item (if any) so we can use the new mechanism that controls Tunnelblick's launch on login
2021-03-06 09:12:31.384126 Tunnelblick[1718] deleteOurLoginItem: LSSharedFileListItemResolve returned status = -43 for item; url was NULL
2021-03-06 09:12:31.390711 Tunnelblick[1718] No old login item to remove
2021-03-06 09:12:42.454072 Tunnelblick[1718] Warning: program has not finished after 10 seconds: /usr/sbin/diskutil
2021-03-06 09:12:43.789141 Tunnelblick[1718] Copied easy-rsa
2021-03-06 09:12:43.789381 Tunnelblick[1718] Changed permissions from 755 to 700 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa
2021-03-06 09:12:43.790061 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-ca
2021-03-06 09:12:43.790355 Tunnelblick[1718] Changed permissions from 755 to 600 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/vars
2021-03-06 09:12:43.790659 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-key-server
2021-03-06 09:12:43.790966 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-key-pass
2021-03-06 09:12:43.791265 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-req
2021-03-06 09:12:43.791582 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-req-pass
2021-03-06 09:12:43.791891 Tunnelblick[1718] Changed permissions from 644 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/libressl.cnf.template
2021-03-06 09:12:43.792402 Tunnelblick[1718] Changed permissions from 755 to 700 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3
2021-03-06 09:12:43.792705 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/ChangeLog
2021-03-06 09:12:43.793029 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README
2021-03-06 09:12:43.793504 Tunnelblick[1718] Changed permissions from 755 to 700 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3
2021-03-06 09:12:43.794011 Tunnelblick[1718] Changed permissions from 755 to 700 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types
2021-03-06 09:12:43.794371 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/ca
2021-03-06 09:12:43.794607 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/server
2021-03-06 09:12:43.794811 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/COMMON
2021-03-06 09:12:43.795081 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/client
2021-03-06 09:12:43.795297 Tunnelblick[1718] Changed permissions from 644 to 600 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/openssl-1.0.cnf
2021-03-06 09:12:43.795517 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/easyrsa
2021-03-06 09:12:43.795825 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/vars.example
2021-03-06 09:12:43.796141 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/COPYING
2021-03-06 09:12:43.796476 Tunnelblick[1718] Changed permissions from 755 to 700 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc
2021-03-06 09:12:43.796752 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Intro-To-PKI.md
2021-03-06 09:12:43.796956 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Readme.md
2021-03-06 09:12:43.797235 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Hacking.md
2021-03-06 09:12:43.797484 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Advanced.md
2021-03-06 09:12:43.797670 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/TODO
2021-03-06 09:12:43.797858 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Upgrade-Notes.md
2021-03-06 09:12:43.798196 Tunnelblick[1718] Changed permissions from 755 to 700 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing
2021-03-06 09:12:43.798406 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing/gpl-2.0.txt
2021-03-06 09:12:43.798649 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/KNOWN_ISSUES
2021-03-06 09:12:43.799003 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README.quickstart.md
2021-03-06 09:12:43.799312 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/clean-all
2021-03-06 09:12:43.799629 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-dh
2021-03-06 09:12:43.799947 Tunnelblick[1718] Changed permissions from 644 to 600 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.6.cnf
2021-03-06 09:12:43.800234 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/pkitool
2021-03-06 09:12:43.800543 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/sign-req
2021-03-06 09:12:43.800857 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-key-pkcs12
2021-03-06 09:12:43.801177 Tunnelblick[1718] Changed permissions from 644 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/whichopensslcnf
2021-03-06 09:12:43.801488 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-inter
2021-03-06 09:12:43.801798 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/README
2021-03-06 09:12:43.802092 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/revoke-full
2021-03-06 09:12:43.802412 Tunnelblick[1718] Changed permissions from 644 to 600 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.8.cnf
2021-03-06 09:12:43.802726 Tunnelblick[1718] Changed permissions from 644 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/readme-libressl.txt
2021-03-06 09:12:43.803033 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/TB-version.txt
2021-03-06 09:12:43.803344 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/list-crl
2021-03-06 09:12:43.803657 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/build-key
2021-03-06 09:12:43.803964 Tunnelblick[1718] Changed permissions from 755 to 500 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/inherit-inter
2021-03-06 09:12:43.804257 Tunnelblick[1718] Changed permissions from 644 to 600 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/openssl-1.0.0.cnf
2021-03-06 09:12:43.804565 Tunnelblick[1718] Changed permissions from 644 to 400 on /Users/rc/Library/Application Support/Tunnelblick/easy-rsa/v3version.txt
2021-03-06 09:12:44.506771 Tunnelblick[1718] Sparkle: ===== Tunnelblick.app =====
2021-03-06 09:12:44.507652 Tunnelblick[1718] Sparkle: Verified appcast signature
2021-03-06 09:13:22.937056 Tunnelblick[1718] isOnRemoteVolume: will check parent of '/private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF'
2021-03-06 09:13:22.937894 Tunnelblick[1718] isOnRemoteVolume: will check parent of '/private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk/Contents/Resources'
2021-03-06 09:13:26.111947 Tunnelblick[1718] Converting/Installing /Users/rc/Documents/1-11085996 2/1-11085996.ovpn at line 10: Copied ca.crt
2021-03-06 09:13:26.112501 Tunnelblick[1718] Changed permissions from 644 to 740 on /private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk/Contents/Resources/ca.crt
2021-03-06 09:13:26.114140 Tunnelblick[1718] Converting/Installing /Users/rc/Documents/1-11085996 2/1-11085996.ovpn at line 11: Copied 1-11085996.crt
2021-03-06 09:13:26.114530 Tunnelblick[1718] Changed permissions from 644 to 740 on /private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk/Contents/Resources/1-11085996.crt
2021-03-06 09:13:26.115723 Tunnelblick[1718] Converting/Installing /Users/rc/Documents/1-11085996 2/1-11085996.ovpn at line 12: Copied 1-11085996.key
2021-03-06 09:13:26.116148 Tunnelblick[1718] Changed permissions from 644 to 740 on /private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk/Contents/Resources/1-11085996.key
2021-03-06 09:13:26.117374 Tunnelblick[1718] Converting/Installing /Users/rc/Documents/1-11085996 2/1-11085996.ovpn at line 13: Copied ta.key
2021-03-06 09:13:26.117661 Tunnelblick[1718] Changed permissions from 644 to 740 on /private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk/Contents/Resources/ta.key
2021-03-06 09:13:26.117777 Tunnelblick[1718] isOnRemoteVolume: will check parent of '/private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk/Contents/Resources/config.ovpn'
2021-03-06 09:13:26.118425 Tunnelblick[1718] Converting/Installing /Users/rc/Documents/1-11085996 2/1-11085996.ovpn: Converted OpenVPN configuration
2021-03-06 09:13:36.970403 Tunnelblick[1718] Tunnelblick necesita ejecutar una acción que requiere la autorización de un administrador de la computadora.
2021-03-06 09:13:36.970486 Tunnelblick[1718] Beginning installation or repair
2021-03-06 09:13:37.056627 Tunnelblick[1718] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-06 09:13:37.014271. 3 arguments: 0x0001
                                            /Users/rc/Library/Application Support/Tunnelblick/Configurations/1-11085996.tblk
                                            /private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk
                                       getuid() = 502; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/rc/Library/Application Support/Tunnelblick'; owner = 502:80; permissions = 488
                                       Created or checked '/Users/rc/Library/Application Support/Tunnelblick/Configurations'; owner = 502:80; permissions = 488
                                       Copied /private/var/folders/_q/_plf1v3x1pz62_g1jq7k05jc0000gp/T/Tunnelblick-IYvliF/1-11085996.tblk
                                           to /Users/rc/Library/Application Support/Tunnelblick/Configurations/1-11085996.tblk.temp
                                       Renamed /Users/rc/Library/Application Support/Tunnelblick/Configurations/1-11085996.tblk.temp
                                            to /Users/rc/Library/Application Support/Tunnelblick/Configurations/1-11085996.tblk
                                       Changed ownership of /Users/rc/Library/Application Support/Tunnelblick/Configurations/1-11085996.tblk and its contents from 502:20 to 502:80
                                       Copied /Users/rc/Library/Application Support/Tunnelblick/Configurations/1-11085996.tblk
                                           to /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk.temp
                                       Renamed /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk.temp
                                            to /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk
                                       Changed ownership of /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk and its contents from 502:80 to 0:0
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents
                                       Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources/1-11085996.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources/ta.key
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources/ca.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources/1-11085996.crt
                                       Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Users/rc/1-11085996.tblk/Contents/Resources/config.ovpn
                                       Created secure (shadow) copy of 1-11085996.tblk
                                       Tunnelblick installer finished without error
2021-03-06 09:13:57.122764 Tunnelblick[1718] Connecting 1-11085996 using OpenVPN 2.4.10 - OpenSSL v1.1.1j which has deprecated options. To see them, reset disabled warnings on the 'Preferences' panel of the 'VPN Details' window and then try again.
2021-03-06 09:14:02.244531 Tunnelblick[1718] runTunnelblickd: no data available from tunnelblickd socket; sleeping 5.000000 seconds...
2021-03-06 09:14:07.245380 Tunnelblick[1718] tunnelblickd status from start: 247
2021-03-06 09:21:32.332441 Tunnelblick[1718] Tunnelblick necesita ejecutar una acción que requiere la autorización de un administrador de la computadora.
2021-03-06 09:21:32.332512 Tunnelblick[1718] Beginning installation or repair
2021-03-06 09:21:32.726057 Tunnelblick[1718] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2021-03-06 09:21:32.382914. 1 arguments: 0x0201
                                       getuid() = 502; getgid() = 20; geteuid() = 0; getegid() = 20
                                       Created or checked '/Users/rc/Library/Application Support/Tunnelblick'; owner = 502:80; permissions = 488
                                       Created or checked '/Users/rc/Library/Application Support/Tunnelblick/Configurations'; owner = 502:80; permissions = 488
                                       Copied /Applications/Tunnelblick.app/Contents/Resources/tun-notarized.kext
                                           to /Library/Extensions/tunnelblick-tun.kext.temp
                                       Renamed /Library/Extensions/tunnelblick-tun.kext.temp
                                            to /Library/Extensions/tunnelblick-tun.kext
                                       Installed tunnelblick-tun.kext in /Library/Extensions
                                       Copied /Applications/Tunnelblick.app/Contents/Resources/tap-notarized.kext
                                           to /Library/Extensions/tunnelblick-tap.kext.temp
                                       Renamed /Library/Extensions/tunnelblick-tap.kext.temp
                                            to /Library/Extensions/tunnelblick-tap.kext
                                       Installed tunnelblick-tap.kext in /Library/Extensions
                                       Tunnelblick installer finished without error
2021-03-06 09:21:56.159969 Tunnelblick[1718] cleanup: Entering cleanup
2021-03-06 09:21:56.184112 Tunnelblick[1718] synchronized user defaults
2021-03-06 09:21:56.807796 Tunnelblick[1718] Set up flag files for shutting down the computer and expecting all configurations to be disconnected
2021-03-06 09:21:56.808232 Tunnelblick[1718] doDisconnectionsForShuttingDownComputer: Set 'expect disconnect 1 ALL'
2021-03-06 09:21:56.808554 Tunnelblick[1718] Started disconnecting all configurations
2021-03-06 09:21:56.808816 Tunnelblick[1718] Skipping cleanup because computer is shutting down or restarting
2021-03-06 09:21:56.809280 Tunnelblick[1718] Finished shutting down Tunnelblick; allowing termination
2021-03-06 09:24:22.082066 com.apple.xpc.launchd[1] Caller specified a plist with bad ownership/permissions: path = /Users/rc/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, caller = otherbsd.409
2021-03-06 09:26:01.329117 Tunnelblick[781] Tunnelblick: macOS 10.16.0; Tunnelblick 3.8.5beta05 (build 5650)
2021-03-06 09:26:03.283145 Tunnelblick[781] Configuration '1-11085996' requires a 'tap' system extension
2021-03-06 09:26:03.769968 Tunnelblick[781] Sparkle: ===== Tunnelblick.app =====
2021-03-06 09:26:03.770452 Tunnelblick[781] Sparkle: Verified appcast signature
2021-03-06 09:26:14.510441 Tunnelblick[781] Connecting 1-11085996 using OpenVPN 2.4.10 - OpenSSL v1.1.1j which has deprecated options. To see them, reset disabled warnings on the 'Preferences' panel of the 'VPN Details' window and then try again.
2021-03-06 09:27:32.774558 Tunnelblick[781] Connecting 1-11085996 using OpenVPN 2.4.10 - OpenSSL v1.1.1j which has deprecated options. To see them, reset disabled warnings on the 'Preferences' panel of the 'VPN Details' window and then try again.
2021-03-06 09:47:58.731228 Tunnelblick[781] cleanup: Entering cleanup
2021-03-06 09:47:58.756545 Tunnelblick[781] synchronized user defaults
2021-03-06 09:47:59.199081 Tunnelblick[781] Set 'expect disconnect 0 ALL'
2021-03-06 09:48:00.210397 Tunnelblick[781] Finished shutting down Tunnelblick; allowing termination
2021-03-06 11:20:39.381100 com.apple.xpc.launchd[1] Caller specified a plist with bad ownership/permissions: path = /Users/rc/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, caller = otherbsd.2073
2021-03-06 11:21:35.980585 com.apple.xpc.launchd[1] Coalition Cache Hit: app<application.net.tunnelblick.tunnelblick.8691438763.8691439017(502)> [821]
2021-03-06 11:21:36.114419 Tunnelblick[2388] Tunnelblick: macOS 10.16.0; Tunnelblick 3.8.5beta05 (build 5650)
2021-03-06 11:21:38.670302 Tunnelblick[2388] Configuration '1-11085996' requires a 'tap' system extension
2021-03-06 11:21:39.036092 Tunnelblick[2388] Sparkle: ===== Tunnelblick.app =====
2021-03-06 11:21:39.036578 Tunnelblick[2388] Sparkle: Verified appcast signature
2021-03-06 11:22:13.005897 Tunnelblick[2388] Connecting 1-11085996 using OpenVPN 2.4.10 - OpenSSL v1.1.1j which has deprecated options. To see them, reset disabled warnings on the 'Preferences' panel of the 'VPN Details' window and then try again.
2021-03-06 11:24:56.303934 Tunnelblick[2388] Sparkle: Verified appcast signature
2021-03-06 11:27:01.627286 Tunnelblick[2388] Connecting 1-11085996 using OpenVPN 2.4.10 - OpenSSL v1.1.1j which has deprecated options. To see them, reset disabled warnings on the 'Preferences' panel of the 'VPN Details' window and then try again.




Ing. Ricardo Cravero
Q-Innova
Leguizamón 243 - Sunchales
Santa Fe - Argentina
Mobile-WAP: +5493493665024
Skype: ricardo.cravero54

Tunnelblick developer

unread,
Mar 8, 2021, 12:51:17 PM3/8/21
to tunnelblick-discuss
This:
     2021-03-06 11:27:06.770133 OpenSSL: error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak
means that the security certificate that you are using is old and does not use modern hashing.

You might be able to connect using OpenVPN 2.3.18 and an older version of LibreSSL. We can't recommend that because the older versions are not supported and may contain security vulnerabilities. But if you want to try, click to select your configuration in the list on the left side of the "Configurations" panel of Tunnelblick's "VPN Details" window, then click on the "Settings" tab on the right side of the window, then select "2.3.18 - OpenSSL v1.0.2u" or "2.3.18 - LibreSSL v2.7.1". (Try each one to see if one works.)

However, using such old and insecure versions of OpenSSL or LibreSSL is a bad idea, so you should contact your university and tell them to update their security certificates.
Reply all
Reply to author
Forward
0 new messages