OpenVPN Connection Issue

noobhacker

I keep getting this error and can not find where I went wrong?

*Tunnelblick: OS X 10.9.4; Tunnelblick 3.6.4a (build 4561)
2016-07-08 10:40:12 *Tunnelblick: Attempting connection with austinv2 using shadow copy; Set nameserver = 769; monitoring connection
2016-07-08 10:40:12 *Tunnelblick: openvpnstart start austinv2.tblk 1337 769 0 1 0 1065776 -ptADGNWradsgnw 2.3.11
2016-07-08 10:40:13 *Tunnelblick: 

Could not start OpenVPN (openvpnstart returned with status #251)

Contents of the openvpnstart log:
*Tunnelblick: openvpnstart log:
     OpenVPN returned with status 1, errno = 0:
          Undefined error: 0
     
     Command used to start OpenVPN (one argument per displayed line):
     
          /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.11/openvpn
          --daemon
          --log
          /Library/Application Support/Tunnelblick/Logs/-SUsers-Smodulus-SLibrary-SApplication Support-STunnelblick-SConfigurations-Saustinv2.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065776.1337.openvpn.log
          --cd
          /Library/Application Support/Tunnelblick/Users/modulus/austinv2.tblk/Contents/Resources
          --verb
          3
          --config
          /Library/Application Support/Tunnelblick/Users/modulus/austinv2.tblk/Contents/Resources/config.ovpn
          --verb
          3
          --cd
          /Library/Application Support/Tunnelblick/Users/modulus/austinv2.tblk/Contents/Resources
          --management
          127.0.0.1
          1337
          --management-query-passwords
          --management-hold
          --redirect-gateway
          def1
          --script-security
          2
          --up
          /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
          --down
          /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
     
     Contents of the OpenVPN log:
     
          Fri Jul  8 10:40:12 2016 Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/modulus/austinv2.tblk/Contents/Resources/config.ovpn:14: block-outside-dns (2.3.11)
          Options error: Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/modulus/austinv2.tblk/Contents/Resources/config.ovpn:21: ~ (2.3.11)
          Use --help for more information.
          
     More details may be in the Console Log's "All Messages"

TinCanTech

noobhacker wroteTunnelblick: OS X 10.9.4; Tunnelblick 3.6.4a (build 4561)
<s>
Fri Jul 8 10:40:12 2016 Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/modulus/austinv2.tblk/Contents/Resources/config.ovpn:14: block-outside-dns (2.3.11)

block-outside-dns is only supported by Windows.

For further help, please post your config files.

noobhacker

Yes I am trying to use TunnelBlick on mac so should I change that to something else?

This is my .ovpn file... are there others that would help?

client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote 1195
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-128-CBC
comp-lzo
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ChangeMe
        Validity
            Not Before: Jul  7 15:58:26 2016 GMT
                                                              23,1          14%
        Validity
            Not Before: Jul  7 15:58:26 2016 GMT
            Not After : Jul  5 15:58:26 2026 GMT
        Subject: CN=austin
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)

Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            X509v3 Subject Key Identifier:
                30:21:67:87:14:25:4C:D1:D1:09:5A:B1:DD:DC:0E:9E:24:56:66:5A
            X509v3 Authority Key Identifier:
                keyid:9D:58:36:7C:C1:A0:E6:7A:50:44:BB:80:39:C9:B7:8E:12:A5:A9:16
                DirName:/CN=ChangeMe
                serial:85:8A:49:F8:C8:F3:19:BD

            X509v3 Extended Key Usage:
                TLS Web Client Authentication
            X509v3 Key Usage:
                Digital Signature
    Signature Algorithm: sha256WithRSAEncryption

-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
                                                              132,1         86%
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----
</tls-auth>
~
~
                                                              154,1         Bot
-----END OpenVPN Static key V1-----

TinCanTech

noobhacker wroteYes I am trying to use TunnelBlick on mac so should I change that to something else?

--push "dhcp-option x.x.x.x" from the server ..

noobhacker wrote

setenv opt block-outside-dns

Remove this .. the code only works for windows.

noobhacker

Thanks for helping TinCan

Now I am getting this error and cant figure out how to fix it?

2016-07-12 12:13:54 MANAGEMENT: CMD 'hold release'
2016-07-12 12:13:54 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2016-07-12 12:13:54 OpenSSL: error:0906D064:PEM routines:PEM_read_bio:bad base64 decode
2016-07-12 12:13:54 MANAGEMENT: Client disconnected
2016-07-12 12:13:54 Cannot load CA certificate file [[INLINE]] (no entries were read)
2016-07-12 12:13:54 Exiting due to fatal error
2016-07-12 12:13:55 *Tunnelblick: No 'post-disconnect.sh' script to execute
2016-07-12 12:13:55 *Tunnelblick: Expected disconnection occurred.

TinCanTech

noobhacker wroteCannot load CA certificate file [[INLINE]]

You need to insert the correct data into the config file:
https://community.openvpn.net/openvpn/wiki/IOSinline