gerardo-orozco / tunnelblick Goto Github PK

I OpenVPN server, and set this value in the config
push "dhcp-option DNS 213.186.33.99"

However, my Mac ends up without any name server after connection. No local,
not the one via DHCP. This is quite annoying, since it will lead to the
problem that you can't surf the web.

Could this be fixed?

What steps will reproduce the problem?
1. Connect to a VPN
2. put laptop to sleep
3. move to a different location
4. wake laptop up

The expected behavior is for Tunnelblick to realize that the connection has
been lost, and reconnect. When the laptop wakes up Tunnelblick crashes--
the icon goes away and leave the openvpn client running in the background.
openvpn never seems to die, go away, or unset routes it has set up.

What version of the product are you using? On what operating system?

Tunnelblick 3.0 beta 9 on Mac OS X 10.5.5


Please provide any additional information below.

This seems to happen when the openvpn client has trouble reconnecting, or
when the laptop has trouble finding an internet connection right after
waking up.

What steps will reproduce the problem?
1. enable comp-lzo on client
2. try to connect
3.

What is the expected output? What do you see instead?
Connection

What version of the product are you using? On what operating system?
3b9 on 10.5.4

Please provide any additional information below.
Erorr: Cannot initilize LZO compression library

What steps will reproduce the problem?

1. When I connect the client to the server.
2. A lot of times this occurs when the connection is broken and Tunnelblink
tries to re-establish connection.
3. Following is in the server OpenVPN script:

port 53
proto tcp-server
dev tun
ifconfig 10.88.88.213 10.88.88.214
secret key.txt
keepalive 30 60

4. Following is in the client OpenVPN script:

port 53
proto tcp-client
dev tun
ifconfig 10.88.88.214 10.88.88.213
secret key.txt

What is the expected output? What do you see instead?

I expect:
1. The client and server connects.
2. The client can ping the server.
3. The client can access the server.

I see:
1. Some times Tunnelblink reports "Initialization Sequence Completed", but
I can't ping or access the server.
2. Some times Tunnelblink reports "TCP: connect to xxx.xxx.xxx.xxx failed",
but I can still ping or access the server.

What version of the product are you using? On what operating system?

I'm using Tunnelblink 3.0b9 on Mac OS X 10.5.4.

Please provide any additional information below.

Featured snapshot is Tunnelblink-Universal-3.0b8.dmg. Is that newer than
Tunnelblink_3.0b9.dmg?

What steps will reproduce the problem?
1. Starting Tunnelblick from the console with the following command:
sudo /Applications/Tunnelblick.app/Contents/Resources/openvpn --config
/Users/matthias/Library/openvpn/test2.ovpn

What is the expected output? What do you see instead?
Mon Oct 20 01:41:17 2008 us=892553 Cannot allocate TUN/TAP dev dynamically

What version of the product are you using? On what operating system?
R3.0b9
Leopard

What steps will reproduce the problem?
1. Having the machine sleep

What is the expected output? What do you see instead?
The connection is lost becuase multiple tun-adapters are created. ifconfig
shows tun0, tun1, tun2, tun3, etc depending on how many sleep/wake cycles
it has gone through. Quitting and restarting the daemon does not fix the
issue. Manually deleting all the adapters (ifconfig tunx delete) and
re-launching the application fixes the issue


What version of the product are you using? On what operating system?
Mac OS X Tiger

Please provide any additional information below.
I have shut down the sleeping, HD sleep, etc, but the issue does seem to
appear only after the screen goes off (in my case, 15-minutes) and then is
brought back up. I would be happy with a bash-script (or AppleScript I
suppose) that could run as a cronjob to remove the extra adapters when it
is brought back from sleep.

What steps will reproduce the problem?
1. I cloned my macbook to my new Mac Pro
2.
3.

What is the expected output? What do you see instead?
Aug 16 13:57:56 rick-mac-pro Tunnelblick[489]: openvpnstart helper has
missing set uid bit
Aug 16 13:57:56 rick-mac-pro Tunnelblick[489]: Repairing Application...

This is was I am seeing and tunnelblick never finishes loading. I have
tried searching the whole system and reinstalling.


What version of the product are you using? On what operating system?
The latest

Please provide any additional information below.

What steps will reproduce the problem?
1. Install CISCO AnyConnect -- runs fine
2. Install Tunnelblick
3. Tunnelblick cannot create connection; fails with "Cannot open TUN/TAP dev 
/dev/tun0: No 
such flie or directory (errno-2)

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?
v 3.0b9 on Mac Leopard 10.5.3


Please provide any additional information below.

What steps will reproduce the problem?
1. Install Tunnelblick 3.0b9.
2. Select command-I to get info.
3. Note the lack of a version field.

What is the expected output? What do you see instead?

I expect to see a version field with value "3.0b9"

What version of the product are you using? On what operating system?

Tunnelblick 3.0b9 on Mac OS X 10.5.4

Please provide any additional information below.

What steps will reproduce the problem?
1. Setup a configuration file
2. Try to establish connection
3. See output below.

What is the expected output? What do you see instead?
Fri Jul 25 06:00:59 2008 OpenVPN 2.0.9 i386-apple-darwin8.10.1 [SSL] [LZO] 
built on Jul 24 
2008
Fri Jul 25 06:00:59 2008 WARNING: using --pull/--client and --ifconfig together 
is probably 
not what you want
Fri Jul 25 06:00:59 2008 WARNING: No server certificate verification method has 
been enabled.  
See http://openvpn.net/howto.html#mitm for more info.
Fri Jul 25 06:00:59 2008 Cannot initialize LZO compression library
Fri Jul 25 06:00:59 2008 Exiting

What version of the product are you using? On what operating system?
The latest, Tunnelblick 3.0b9. MacOS X 10.4.11 on a PowerMac G5 dual core.

Please provide any additional information below.
I don't think the issue is with Tunnelblick itself, but the bundled build of 
OpenVPN. I tried 
openvpn directly from the shell and had the same results. AFAIK lzo is supposed 
to be statically 
linked with openvpn, so I'm not sure how this error could even occur, unless I 
guess lzo has 
been disabled in this build. I did confirm that this build of openvpn isn't 
depending on a liblzo 
or what have you, all dynamically linked libraries seem to be found, according 
to otool(1) output. 
So what could cause this error? I successfully use the exact same client 
configuration on 
OpenVPN-GUI on win32 with no problems, so I don't think there is a problem with 
the OpenVPN 
configuration file I'm using.

Other suggestions, please consider assigning a version to the Tunnelblick.app 
application. As it 
is, Finder, at least doesn't report one, so it makes it difficult to identify 
the version number this 
way.

Another suggestion, make sure the application isn't only tested, or is built to 
assume it's always 
installed in the local domain, (/Applications). In my case for example, I 
generally put my 
applications on the network domain (ie, /Network/Applications) so that it is 
available for use on 
all stations on the network. So far I haven't run into any issues related to 
this, other than I did 
notice that I didn't get the "auto -check for updates dialog" when the 
application was running 
from the network domain, but did get that dialog when I ran it from the local 
domain. I'm not 
sure if it's just programmed to ask that question every n times, or only on 
version changes.. and 
if so, it should have asked this question when I first ran 3.0b9, which would 
have been on the 
network domain -- anyhow, could be a bug, so worth testing., if it's even just 
testing the 
application from the user context for that matter (~/Applications or what have 
you).

- rory

What steps will reproduce the problem?
1. Run tunnelblick
2. Connect -> Success
3. Type an URL of a server located on the other side of the VPN

What is the expected output? What do you see instead?
With tunnelblick 3.0b8 or b9 -> server not found
reverting to 3.0b6 -> page displayed

What version of the product are you using? On what operating system?
Leopard 10.5.5 / MacBook

What steps will reproduce the problem?
1. Install Tunnelblick 3.0b9
2. Define two VPN's, each to a different OpenVPN server.
3. Launch Tunnelblick and open both VPN's.
4. Open the Tunnelblick "Details..." window and resize it.  Tunnelblick crashes.

What is the expected output? What do you see instead?

I expect the Details window to resize and properly display the log contents for 
each of the VPN connections.

Instead, Tunnelblick crashes.

8/11/08 9:47:25 AM Tunnelblick[53030] *** -[NSConcreteTextStorage 
attribute:atIndex:longestEffectiveRange:inRange:]: Range or index out of bounds 
8/11/08 9:47:26 AM Tunnelblick[53030] *** -[NSConcreteTextStorage 
attribute:atIndex:longestEffectiveRange:inRange:]: Range or index out of bounds 
8/11/08 9:47:28 AM Tunnelblick[53030] *** -[NSConcreteTextStorage 
attribute:atIndex:longestEffectiveRange:inRange:]: Range or index out of bounds 
8/11/08 9:47:31 AM Tunnelblick[53030] <NSATSTypesetter: 0x15622c70>: Exception 
*** NSRunStorage (0x15624150), _replaceElements(): replaced range {76, 2570} 
extends 
beyond current run storage size 2645. raised during typesetting layout manager 
<NSLayoutManager: 0x15693290>
    1 containers, text backing has 2645 characters
    selected character range {3143, 4294964229} affinity: upstream granularity: character
    marked character range {2645, 0}
    Currently holding 2645 glyphs.
    Glyph tree contents:  2645 characters, 2645 glyphs, 1 nodes, 32 node bytes, 4096 storage bytes, 4128 total bytes, 1.56 bytes per character, 1.56 bytes per glyph
    Layout tree contents:  2645 characters, 2645 glyphs, 76 laid glyphs, 1 laid line fragments, 3 nodes, 96 node bytes, 792 storage bytes, 888 total bytes, 0.34 bytes per 
character, 0.34 bytes per glyph, 76.00 laid glyphs per laid line fragment, 
888.00 bytes per laid line fragment
, glyph range {76 2569}. Ignoring... 
8/11/08 9:47:31 AM Tunnelblick[53030] <NSATSTypesetter: 0x15622c70>: Exception 
*** NSRunStorage (0x15624150), _replaceElements(): replaced range {76, 2570} 
extends 
beyond current run storage size 2645. raised during typesetting layout manager 
<NSLayoutManager: 0x15693290>
    1 containers, text backing has 2645 characters
    selected character range {3143, 4294964229} affinity: upstream granularity: character
    marked character range {2645, 0}
    Currently holding 2645 glyphs.
    Glyph tree contents:  2645 characters, 2645 glyphs, 1 nodes, 32 node bytes, 4096 storage bytes, 4128 total bytes, 1.56 bytes per character, 1.56 bytes per glyph
    Layout tree contents:  2645 characters, 2645 glyphs, 76 laid glyphs, 1 laid line fragments, 3 nodes, 96 node bytes, 792 storage bytes, 888 total bytes, 0.34 bytes per 
character, 0.34 bytes per glyph, 76.00 laid glyphs per laid line fragment, 
888.00 bytes per laid line fragment
, glyph range {76 2569}. Ignoring... 
8/11/08 9:47:38 AM Tunnelblick[53030] *** NSLayoutManager, _getGlyphBuffer(): 
NSZoneMalloc failed! 
8/11/08 9:47:38 AM [0x0-0x807807].com.openvpn.tunnelblick[53030] signal 10 
caught! 
8/11/08 9:47:38 AM [0x0-0x807807].com.openvpn.tunnelblick[53030] Received fatal 
signal. Cleaning up... 

What version of the product are you using? On what operating system?

Tunnelblick 3.0b9 on Mac OS X 10.5.4

Please provide any additional information below.

Tunnelblick has several related bugs which are apparent when you use it to open 
two VPN's simultaneously.

What steps will reproduce the problem?
1. Having the machine sleep

What is the expected output? What do you see instead?
The connection is lost becuase multiple tun-adapters are created. ifconfig
shows tun0, tun1, tun2, tun3, etc depending on how many sleep/wake cycles
it has gone through. Quitting and restarting the daemon does not fix the
issue. Manually deleting all the adapters (ifconfig tunx delete) and
re-launching the application fixes the issue


What version of the product are you using? On what operating system?
Mac OS X Tiger

Please provide any additional information below.
I have shut down the sleeping, HD sleep, etc, but the issue does seem to
appear only after the screen goes off (in my case, 15-minutes) and then is
brought back up. I would be happy with a bash-script (or AppleScript I
suppose) that could run as a cronjob to remove the extra adapters when it
is brought back from sleep.

What steps will reproduce the problem?
1. Create 2 Configuration files
2. Connect the first one
3. When the first one is established, connect the second.

What is the expected output? What do you see instead?
I'd expect both connections to be established. Instead, when the second
connection kicks in, the first one is disconnected and starts attempting to
reconnect. Then, when reconnected the second one is disconnected and the
process starts over again.
The only way to stop it is to disconnect one of the links, then  the other
one establishes normally and stays connected.

What version of the product are you using? On what operating system?

Latest binary, downloaded from the web site a few days ago.

Please provide any additional information below.

Logfiles attached.

Conf files are as follows (with different addresses on different public
networks on each case):

tls-client
client
dev tun
proto udp
tun-mtu 1500
remote my-remote-link-address 1194
pkcs12 aguerrieri.p12
cipher BF-CBC
comp-lzo
verb 3
ns-cert-type server
nobind

I've been able to establish those links at the same time before upgrading
to the latest version, so I assume is an issue introduced by the upgrade
(didn't have this problem before and nothing changed on the conf files nor
the VPN servers).

Regards,

Alex

Tunnelblick.app build from svn does not run because the Sparkle.framework was 
not checked in 
properly.

The following errors are thrown:
com.openvpn.tunnelblick[2694] dyld: Library not loaded: 
@executable_path/../Frameworks/Sparkle.framework/Versions/A/Sparkle 
com.openvpn.tunnelblick[2694]   Referenced from: 
/Applications/Tunnelblick.app/Contents/MacOS/Tunnelblick 
com.openvpn.tunnelblick[2694]   Reason: image not found 

The reason for this error is that the directory structure of the 
Sparkle.framework that was 
checked into svn is incorrect. The structure should look like:

[mhaque@batmobile Sparkle.framework]$ ls -ltrh
total 12K
drwxr-xr-x 4 mhaque staff 136 2008-07-24 20:15 Versions
lrwxr-xr-x 1 mhaque staff  24 2008-07-24 20:16 Sparkle -> 
Versions/Current/Sparkle
lrwxr-xr-x 1 mhaque staff  26 2008-07-24 20:16 Resources -> 
Versions/Current/Resources
lrwxr-xr-x 1 mhaque staff  24 2008-07-24 20:16 Headers -> Versions/Current/Heade

[mhaque@batmobile Sparkle.framework]$ ls -ltrh Versions/
total 4.0K
lrwxr-xr-x 1 mhaque staff   1 2008-07-24 20:15 Current -> A
drwxr-xr-x 5 mhaque staff 170 2008-07-24 20:15 A

[mhaque@batmobile Sparkle.framework]$ ls -ltrh Versions/A/
total 488K
drwxr-xr-x 12 mhaque staff  408 2008-07-24 20:02 Resources
-rwxr-xr-x  1 mhaque staff 488K 2008-07-24 20:02 Sparkle
drwxr-xr-x 41 mhaque staff 1.4K 2008-07-24 20:02 Headers

What steps will reproduce the problem?
1. Clean install under OSX 10.5
2. Enter password, after which it complains about the lack of a config
file, and says it will create one. 
3. Click "continue" ...it opens Textedit, and does nothing.

What is the expected output? What do you see instead?

I expected to see a config file to edit; instead I see a blank Textedit
window, no files are created, and it does nothing.

What version of the product are you using? On what operating system?

OSX 10.5, using 3.0b9 and 3.0b8 (why is this second one listed as the
snapshot?).

Please provide any additional information below.

Frustrating that a 3.0 release is this buggy in the latest OSX version.

What steps will reproduce the problem?
1. Connect to server
2. enter credentials and select Save to Keychain
3. Disconnect

What is the expected output? What do you see instead?
What I see is that an OpenVPN-auth entry is created on connect.
On disconnect, the OpenVPN-auth entry disappears from the login keychain.

What I expect is that the entry in the login keychain stays put and is reused 
when I try to 
reconnect in stead of prompting for user credentials again.

What version of the product are you using? On what operating system?
3.0b8 on OS X 10.5.4 with all available updates.

Please provide any additional information below.
Manually creating the OpenVPN-auth entry doesn't solve the problem.

What I also expect is that the entries in the keychain are created with a name 
depending on the 
connection. I have 3 connections and I expect some entries like:
OpenVPN-auth-connection1
OpenVPN-auth-connection2
OpenVPN-auth-connection3
Otherwise the entries will be overridden every time anyway.

What steps will reproduce the problem?
1. create an openvpn config where the location of the certificate is 
~/Library/openvpn
2. connect to that server

What is the expected output? What do you see instead?
The expected output is a successful connection, instead I get an error message 
the the certificate 
file can not be found/

What version of the product are you using? On what operating system?
3.0b9

Please provide any additional information below.
The fix is to change the ca directive in the config to /Users/username/Library 
for it to work but 
this should not be necessary.

When I launch tunnelblick and click on details, all of my configurations
have (EXITING) after the name and if I connect nothing happens. This is
version b9 and I was using b6 before this on OS X Leopard 10.5.4.

What steps will reproduce the problem?
1. Configure the OpenVPN server with --auth-user-pass-verify.  Configure
the client with --auth-user-pass but do not specify username or password so
OpenVPN/Tunnelblick will prompt.

2. Attempt to connect to the OpenVPN server

3. With a client otherwise correctly, enter an invalid username and/or password

What is the expected output? What do you see instead?
The connection should fail, and depending on the value of the client's
--auth-retry setting either authentication should be re-attempted or the
connection attempt should be dropped.

What version of the product are you using? On what operating system?
3.0b9 on OS X 10.4.11

Please provide any additional information below.
Note that if you enter the correct username and password the connection
succeeds as expected.

Can a "beta" (not suggested for production use) build that includes
openvpn-2.1 release candidates be provided?  I'd like to do some testing.

Also, a way to get version information on the provided openvpn from the
tunnelblick menu would be helpful also.

What steps will reproduce the problem?
1. Creating a config file e.g. /Users/max/Library/openvpn/test.ovpn

2. Start the configuration

What is the expected output? What do you see instead?
The configuration can't be startet b/c: Tunnelblick reports into the
/var/log/system.log
--
File /Users/Max/Library/openvpn/test.ovpn has permissions: 644, is owned by
501 and needs repair...
-- 
several times. And than

---
 Repairing permissions of config file /Users/Max/Library/openvpn/test.ovpn
failed. Not starting.

What's wrong with the permission? It's 644. If I change it to for example
777. Tunnelblick is changeing it back. But it still claims that the
permission is wrong....

What version of the product are you using? On what operating system?
Tunnelblick 3.09b
Leopard

What steps will reproduce the problem?
1. Beeing User with Network Account
2. Starting Tunnelblick
3. Trying to establish a connection

What is the expected output? What do you see instead?
Expected is at least some output. When I use a local user account,
everything works fine, but if I use my network account, nothing happens.


What version of the product are you using? On what operating system?
Mac OS X, Tunnelblick 3.0b8 (same Problem with b7 and b9)


Please provide any additional information below.
The problem I encounter is maybe quite the same I encountered with GnuPG. A
simple solution is, to change configuration that the program uses a local
folder to store the data. I suppose that it is impossible with Mac OS X
(Client + Server) to lock files that are located on a network share. I
can't find a way to change Tunnelblick to use a local folder.

Any suggestions how to solve this problem?

What steps will reproduce the problem?
1. NFS mounted home directory on Leopard/Tiger
2. Start tunnelblick
3. Attempt to 'Connect' to server.

What is the expected output? What do you see instead?
The expected output is connection information in the OpenVPN log.  Instead
nothing is in the VPN log and instead and error is logged to the system log.  

These same configuration files and versions work fine using laptops or
other non NFS mounted directories. 

What version of the product are you using? On what operating system?
Using the latest version of Tunnelblick 3.0b9 also tested older versions.
Leopard and Tiger behave the same.

Please provide any additional information below.

The errorlog on the host is:
hostname [0x0-0xea0ea].com.openvpn.tunnelblick[5791]: 2008-11-19
15:20:46.383 openvpnstart[9832:10b] File
/home/nfs/user/Library/openvpn/connection.conf has permissions: 0, is owned
by (null) and needs repair...
hostname [0x0-0xea0ea].com.openvpn.tunnelblick[5791]: 2008-11-19
15:20:46.386 openvpnstart[9832:10b] Config File needs to be owned by
root:wheel and must not be world writeable.

---

The file is owned by root:wheel as confirmed by ls.

What steps will reproduce the problem?
1. Install Tunnelblick 3.0b9
2. Launch it.
3. Open Activity Monitor. Note that Tunnelblick isn't listed. Instead, find it 
with name "(null)".

What is the expected output? What do you see instead?

The process name is listed as "Tunnelblick" or similar.

What version of the product are you using? On what operating system?

Tunnelblick 3.0b9 on Mac OS X 10.5.4

Please provide any additional information below.

What steps will reproduce the problem?
1. Start Tunnelblick 
2. Connect using conf file (listed below) 
3. Enter username and wrong password

What is the expected output? What do you see instead?

Expected output is an error message indicating authentication failure, but
instead it crashes (and the tunnelblick icon on the top right hand corner
of the screen goes away)

What version of the product are you using? On what operating system?

3.09b on OS X 10.4.11


Please provide any additional information below.


Configuration file:
client
dev tap
proto tcp
remote <>
resolv-retry infinite
nobind
persist-key
persist-tun
ca <>
ns-cert-type server
comp-lzo
verb 1
auth-user-pass

What steps will reproduce the problem?
1. Connect to VPN
2. The tunnel starts to flash - the connection stalls
3. Program crashes and icon in top right of screen disappears

What is the expected output? What do you see instead?

Light at the end of the tunnel - but the icon goes and no connection is 
established

What version of the product are you using? On what operating system?

3.b06 on intel macbook

Please provide any additional information below.

1. Start a VPN connection (in my case a routed TUN connection which has
   the redirect-gateway option set on server side) with the 
   "set nameserver" toggle activated. 
2. Wait until the VPN is active
3. Click on "Disconnect"

Instead of resetting the network configuration to the state before
activating the connection, the name server and network settings are not
reset. In detail:
- /etc/resolv.conf still lists the nameserver of the VPN. I have to execute
  client.up.osx.sh manually in order to get my old nameserver settings
  restored
- netstat -nr shows that the redirect-gateway routes are still active. I
  have to manually remove the net route to the OpenVPN server and add the
  default gateway for the current network in order to get it up again.

I used Tunnelblick 3.0b9 (with the correct version of client.up.osx.sh as
suggested in the discussion group) on Mac OS X 10.5.4

There are files missing in the SVN repository causing the building of openvpn 
to fail. Bellow is 
the output of the failure. It looks like files were missed in the openvpn 
2.1rc9 commit. Patch to 
add the files is attached.

--snip--
Configure OpenVPN for powerpc
Forcefully be clean
make[1]: *** No rule to make target `clean'.  Stop.
autoreconf: Entering directory `.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal 
configure.ac:28: file `version.m4' does not exist
autoreconf: aclocal failed with exit status: 1
configure: error: cannot find sources (syshead.h) in . or ..
Build OpenVPN
make[1]: *** No targets specified and no makefile found.  Stop.
mv: cannot stat `openvpn': No such file or directory
Configure OpenVPN for i686
Forcefully be clean
make[1]: *** No rule to make target `clean'.  Stop.
autoreconf: Entering directory `.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal 
configure.ac:28: file `version.m4' does not exist
autoreconf: aclocal failed with exit status: 1
configure: error: cannot find sources (syshead.h) in . or ..
Build OpenVPN
make[1]: *** No targets specified and no makefile found.  Stop.
mv: cannot stat `openvpn': No such file or directory
# Use lipo to create a universal library
lipo openvpn/openvpn_tblk_* -create -output openvpn/openvpn
lipo: can't open input file: openvpn/openvpn_tblk_* (No such file or directory)
make: *** [openvpn] Error 1
--end snip--

What steps will reproduce the problem?
reboot, change of location

What is the expected output? What do you see instead?
Instad of an established connection, there will be no connection established 
and until a reboot, the 
only message you get if you do a ping or try to connect is "no buffer space 
available"

What version of the product are you using? On what operating system?
3.0b9 / latest os x on a intel macbook pro

Please provide any additional information below.

What steps will reproduce the problem?
1. Configure the server to accept only login and password (no client 
certificate) 
2. Login using a false login or password.
3. Tunnelblick hangs (quits)

With a good login works just fine.

What version of the product are you using? On what operating system?

This behavior happens in Tiger and Leopard (any version) at least since version 
b6 up to b9.

Thanks.

What steps will reproduce the problem?

On attempted launch of Tunnelbick it doesn't open, this problem recorded in
log.  What does this mean, how can I fix it?  I have a Mac 10.4.11 
Loaded most current version of Tunnelbick, appeared to load without
difficulty. 

What steps will reproduce the problem?
1. have a password with \
2. fail to auth every time
3. break keyboard

What is the expected output? What do you see instead?
I expect to log in.  Instead auth fails every time.

What version of the product are you using? On what operating system?
3.0b9

Please provide any additional information below.

What steps will reproduce the problem?
1. Start Tunnelblick and create a VPN connection
2. Click Details and Set "Automatically connect on launch" and close
Details window
3. Connect
4. Disconnect and quit Tunnelblick
5. Relaunch Tunnelblick and VPN connection will be started.
6. Repeat step 4.
7. Relaunch and VPN connection will NOT be started automatically.

What is the expected output? What do you see instead?
The VPN connection defined in step 1 and 2 should be established upon
Tunnelblick launch. But it is not.

What version of the product are you using? On what operating system?
Max Os X 10.5.5, Tunnelblick 3.0b9, running as non-priviledged (i.e.
non-admin) user on Macbook 3.1 Santa Rosa.

Please provide any additional information below.

The current DMG-Image has no documentation at all. There is just a File
called "Tunnelblick". If started, is opens an empty Texteditor. 

And now?

What steps will reproduce the problem?
1. Just start the tunnelbrick app
2. Start a movie in full screen
3. The icon sits in the right top of your movie screen

Please provide any additional information below.
Leopard 10.5.5

More of a "this I know".

To use the Installer like its intended.

(for Leopard)

1. download the dmg image by going to http://code.google.com/p/tunnelblick 
and clicking on [ Featured Downloads: ] Tunnelblick_3.0b9.dmg

2. the disk image (dmg) will download and automount then open the mounted 
image in your finder

3. in the same finder window, drag and drop the Tunnelblick icon into your 
Applications folder, you will be prompted for the system password 

4. click on the Applications folder in the finder window to switch your 
view to the Applications folder and double click the Tunnelblick icon you 
copied there

5. you'll get a warning about starting an app downloaded from the Internet 
[ Continue ]

6. you'll get a warning [ Welcome to OpenVPN on Mac OS X: Please put your 
config file (e.g. openvpn.conf) into 'Library/openvpn/'. ] click [ 
Continue ]

7. you'll get a padlock with the Tunnelblick icon [Tunnelblick requires 
that you type your password. ] Name: Password: enter and click [Ok]

8. you may get a question about auto checking for updates

9. you may get TextEdit opening up a blank window (the exact behavior 
seems to depend if you have ever had a version of openVPN or tunnelblick 
installed on this system and if it retains some of the previous 
preferences) on a fresh system it should open the TextEdit window

A. the important thing to recognize is the TextEdit window is in RTF mode 
and not plain text mode, it will automatically append a hidden .rtf 
extension to any file you save with it unless you change the mode before 
saving. You cannot use 'Save As..' to override the extension, you must 
change the TextEdit mode before saving

B. go to the Apple menu bar and click on TextEdit: -> Format, and 
select 'Make Plain Text'.. the fonts and other RTF options tool bar, 
should disappear in the edit window

C. Type or Cut 'n Paste a sample openVPN client configuration, like this:

NOTE! This example works for me on a Windows system and probably needs 
further modifications to work on a Mac.. this is only to give you some 
ideas and demonstrate how to use the installer to get openVPN Tunnelblick 
to start recognizing the client config file

# ---- john willis
client
dev tun
proto tcp

# Change my.publicdomain.com to your public domain or IP address
remote 165.xx.xx.xx 1194  # where the IP and port is that of the server

resolv-retry infinite
nobind
persist-key
persist-tun

route-method exe
route-delay 2

ca ca.crt
cert client1.crt
key client1.key

ns-cert-type server

#DNS Options here, CHANGE THESE !!
push "dhcp-options DNS 172.24.1.1"
push "dhcp-options DNS 172.24.1.12":

comp-lzo

verb 3

D. TextEdit: -> Save As

E. navigate to the [Macintosh]->[Users]->[jwillis]->[Library]->[openvpn] 
folder

F. change the name from [Untitled.txt] to [openvpn.conf] and uncheck the 
box [x] If no extension is provided, use ".txt" then click Save

G. TextEdit: -> Quit TextEdit

H. Tunnelblick should be happy and running in the toolbar and waiting for 
your command

I. Click on the Tunnelblick icon in the upper right of the Apple menu bar.

J. It should say [ OpenVPN: 0 connections active ] [ Connect 'openvpn' ] [ 
Details... ] [ Quit ]

K. Click on [ Connect 'openvpn' ]

L. Tunneblick requires that you type your password (system password)

M. If you want to look at the status of the link, click on the Tunnelblick 
icon again and select [ Details... ] a window should open and indicate the 
status of the connection.

In my case since I haven't uploaded a certificate yet to my Mac so it says:

Cannot load certificate file client1.crt: No such file or directory

- hope this helps a little, I'll update this when I get it completely 
working but its a bit late on a Saturday night

What steps will reproduce the problem?
1. Connect to a network tunnel
2. type your password wrong
3. Tunnelblick icon disappears out of the menu bar

What is the expected output? What do you see instead?
I expect to get prompted to retype my password instead of getting dumped
and have to relaunch Tunnelblick

What version of the product are you using? On what operating system?
Tunnelblick 3.0b9, Mac OS X 10.5.5

Please provide any additional information below.

Nov  6 22:42:06 macbook openvpn[13826]: AUTH: Received AUTH_FAILED control
message
Nov  6 22:42:06 macbook openvpn[13826]: TCP/UDP: Closing socket
Nov  6 22:42:06 macbook openvpn[13826]: MANAGEMENT: TCP send error: Broken pipe
Nov  6 22:42:06 macbook openvpn[13826]: MANAGEMENT: Client disconnected
Nov  6 22:42:06 macbook openvpn[13826]: SIGTERM[soft,auth-failure]
received, process exiting
Nov  6 22:42:06 macbook [0x0-0x44e44e].com.openvpn.tunnelblick[13585]:
signal 10 caught!
Nov  6 22:42:06 macbook [0x0-0x44e44e].com.openvpn.tunnelblick[13585]:
Received fatal signal. Cleaning up...

The signal 10 implies a crash, but no crash dump is generated.

What steps will reproduce the problem?
1. Open a point-to-point connection with a static key and no auth
2. Wait a while--anywhere from four minutes to several hours
3. openvpn exits when the connnection is lost

Here's info from syslog at verb 4:
...
Sep 22 14:27:48 Wanderer6 openvpn[13182]: UDPv4 link local (bound): [undef]:2196
Sep 22 14:27:48 Wanderer6 openvpn[13182]: UDPv4 link remote: 71.130.51.44:2196
Sep 22 14:27:51 Wanderer6 openvpn[13182]: Peer Connection Initiated with 
71.130.51.44:2196
Sep 22 14:27:51 Wanderer6 openvpn[13182]: Initialization Sequence Completed
Sep 22 22:11:28 Wanderer6 openvpn[13182]: TCP/UDP: Closing socket
Sep 22 22:11:28 Wanderer6 openvpn[13182]: Closing TUN/TAP interface
Sep 22 22:11:28 Wanderer6 openvpn[13182]: SIGTERM[hard,] received, process 
exiting



What version of the product are you using? 
Tunnelblick 3.0b9 binary distribution

On what operating system?
OS X 10.5.5

1. Start a VPN connection with the "set nameserver" toggle activated. 
2. Wait for connection 

The old name server (my router, 192...) is still there as number 0, the new
one as number 1, see scutil trace:
resolver #1
  nameserver[0] : 192.168.2.1
  nameserver[1] : 193.28.153.254
Number 0 is still used for resolving! (This has privacy issues in my case.)

I'm using Tunnelblick-Universal-3.0b6.dmg.asc; OSX 10.4, Intel.

Using the new client.up.osx.sh-script (from the wiki) produced the same
results.

Important: I'm using the "manual" TCP setting in the GUI, giving the
nameserver. If I use DHCP and don't enter a nameserver there, the problem
does not occur.
However, I must use the manual setting...

I tried to get rid of the first nameserver entry using scutil, but didn't
succeed. 

Do you see a solution?

Thank you,

Christian

Should pass the --script-security 2 argument to openvpn regardless if 
useScripts due to the 
possibility that up.down script may be defined in the config file.

Console entry when up/down script defined in config file:
8/25/08 12:44:12 PM openvpn[7102] openvpn_execve: external program may not be 
called due to 
setting of --script-security level 

Patch attached.

third_party/lzo-2.02/staging and everything under it should not be in SVN 
because they are the 
result of compiling lzo. There are also other files that are not part of the 
standard lzo-2.02 
distribution but genereated as a result of running configure. Suggest these 
also be removed.

Cleaning these out guarantees that building from fresh SVN checkouts are clean 
builds

The file list follows:

[mhaque@batmobile tunnelblick-read-only]$ svn st
D      third_party/lzo-2.02/minilzo/Makefile
D      third_party/lzo-2.02/config.log
D      third_party/lzo-2.02/src/Makefile
D      third_party/lzo-2.02/config.h
D      third_party/lzo-2.02/staging
D      third_party/lzo-2.02/tests/Makefile
D      third_party/lzo-2.02/Makefile
D      third_party/lzo-2.02/include/lzo/Makefile
D      third_party/lzo-2.02/include/Makefile
D      third_party/lzo-2.02/config.status
D      third_party/lzo-2.02/stamp-h1
D      third_party/lzo-2.02/libtool
D      third_party/lzo-2.02/lzotest/Makefile
D      third_party/lzo-2.02/examples/Makefile

What steps will reproduce the problem?
1. Start UDP connection.
2. Quit while connection is not yet established (e.g. host not reachable).
3. Check 'ps aux' and 'ifconfig': "openvpn" process and TUN device remains.

What is the expected output? What do you see instead?
I would expect Tunnelblick to properly terminate all "openvpn" processes
and to disconnect all TUN/TAP devices on quit. This would also be a
workaround if there are problems with multiple TUN/TAP devices after the
device has been in sleep mode.

What version of the product are you using? On what operating system?
Tunnelblick 3.0b9 on OS X 10.5.5 (Intel Macbook).

This patch changes the icon placement in the menubar to behave as all other 
apps do and adds 
ability to revert to old right side placement behavior via a defaults setting.

To set icon on the right run in Terminal.app:
defaults write com.openvpn.tunnelblick menuIconOnRight -bool TRUE

To revert:
defaults delete com.openvpn.tunnelblick menuIconOnRight

Patch also resolves the 'may not respond to' errors in the createStatusItem 
method and localized 
formatting cleanup.

I just downloaded and dragged...
when i open it prompts if it shall create a default profile. I click continue, 
but it opens a blank TE 
document. when i click about from the sysline it comes up again and does the 
same.

No file in the openvpn in ~library

rc9 on mac os 10.5.4 MacBook3,1 intel

Localized language file for Norwegian language.

Translation is attached + diff for missing buttons.

--- tunnelblick-read-only/tunnelblick/MenuController.m  2008-11-19
17:25:57.000000000 +0100
+++ tunnelblick/tunnelblick/MenuController.m    2008-11-19 17:22:02.000000000
+0100
@@ -577,6 +577,8 @@
    [editButton setTitle:local([editButton title])];
    [connectButton setTitle:local([connectButton title])];
    [disconnectButton setTitle:local([disconnectButton title])];
+   [useNameserverCheckbox setTitle:local([useNameserverCheckbox title])];


Svein
+   [autoLaunchCheckbox setTitle:local([autoLaunchCheckbox title])];

What steps will reproduce the problem?
1. Open Tunnelblick
2. I think you have to have made a connection already with Tunnelblick, but it 
doesn't need to 
remain connected
3. Enter the zoomed out Spaces view, showing all desktops.

What is the expected output? What do you see instead?
The icon in the status bar should disappear with the rest of the icons, but it 
remains.

What version of the product are you using? On what operating system?
Tunnelblick 3.0b9.  OS X 10.5.4

Please provide any additional information below.
Screenshot attached.

When no config is present, tunnelblick shows NSMenuitem in vpn connection
list. 

1. use tunnelblick
2. brain hurts

solution:
stützstrümpfe!

What steps will reproduce the problem?
1. Launch Tunnelblick.
2. WHAT THE HELL!
3. The icon is fixed next to Spotlight!

What is the expected output? What do you see instead?
The icon should become the leftmost item in my notification bar (or what's it 
name).

What version of the product are you using? On what operating system?
3.09b and 3.06b, Tiger.

Please provide any additional information below.
It would be nice to be able to move the icon, too.