Logs of tunnelblick :
*Tunnelblick: OS X 10.11.6; Tunnelblick 3.6.10 (build 4760); Admin user
git commit 9f798839bcb9c9aaaa46591e672280e6bee491a4
Configuration client
"Sanitized" condensed configuration file for /Users/toto/Library/Application Support/Tunnelblick/Configurations/client.tblk:
client
dev tun
proto tcp-client
remote 10.20.30.40 1300
resolv-retry infinite
cipher AES-256-CBC
ca ca.crt
cert toto.crt
key toto.key
tls-auth ta.key 1
nobind
persist-key
persist-tun
comp-lzo
verb 3
================================================================================
Non-Apple kexts that are loaded:
Index Refs Address Size Wired Name (Version) UUID <Linked Against>
23 0 0xffffff7f80ec2000 0x42000 0x42000 com.logitech.manager.kernel.driver (6.35.1) 4DC50CA3-C380-323F-9FC5-9178595104E0 <22 19 18 16 5 4 3>
81 0 0xffffff7f80fa0000 0x11000 0x11000 com.metakine.handsoff.driver (3.1.3) A4E34014-F19A-376D-8F44-734CEA96ED5F <7 5 4 3 1>
================================================================================
There are no unusual files in client.tblk
================================================================================
Configuration preferences:
useDNS = 1
-resetPrimaryInterfaceAfterDisconnect = 0
-routeAllTrafficThroughVpn = 1
-doNotFlushCache = 0
-useRouteUpInsteadOfUp = 0
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
-keepConnected = 0
-doNotDisableIpv6onTun = 0
-lastConnectionSucceeded = 1
-prependDomainNameToSearchDomains = 1
================================================================================
Wildcard preferences:
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
================================================================================
Program preferences:
placeIconInStandardPositionInStatusBar = 1
launchAtNextLogin = 1
notOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
"3.6.10 (build 4760)"
)
lastLaunchTime = 507324335.896397
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = client
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
updateSendProfileInfo = 0
NSWindow Frame SettingsSheetWindow = 1316 227 829 524 0 0 2560 1417
NSWindow Frame ConnectingWindow = 1085 922 389 187 0 0 2560 1417
detailsWindowFrameVersion = 4760
detailsWindowFrame = {{1207, 545}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = settings
leftNavSelectedDisplayName = client
AdvancedWindowTabIdentifier = sounds
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
SUEnableAutomaticChecks = 1
SUFeedURL = https://www.tunnelblick.net/appcast-s.rss
SUScheduledCheckInterval = 86400
SUSendProfileInfo = 0
SULastCheckTime = 2017-01-28 19:25:38 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times
================================================================================
Tunnelblick Log:
*Tunnelblick: OS X 10.11.6; Tunnelblick 3.6.10 (build 4760)
2017-01-28 23:47:52 *Tunnelblick: Attempting connection with client using shadow copy; Set nameserver = 769; monitoring connection
2017-01-28 23:47:52 *Tunnelblick: openvpnstart start client.tblk 1337 769 0 1 0 1065904 -ptADGNWradsgnw 2.3.14-openssl-1.0.2j
2017-01-28 23:47:52 *Tunnelblick: openvpnstart log:
OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.14-openssl-1.0.2j/openvpn
--daemon
--log
/Library/Application Support/Tunnelblick/Logs/-SUsers-Stoto-SLibrary-SApplication Support-STunnelblick-SConfigurations-Sclient.tblk-SContents-SResources-Sconfig.ovpn.769_0_1_0_1065904.1337.openvpn.log
--cd
/Library/Application Support/Tunnelblick/Users/toto/client.tblk/Contents/Resources
--verb
3
--config
/Library/Application Support/Tunnelblick/Users/toto/client.tblk/Contents/Resources/config.ovpn
--verb
3
--cd
/Library/Application Support/Tunnelblick/Users/toto/client.tblk/Contents/Resources
--management
127.0.0.1
1337
--management-query-passwords
--management-hold
--redirect-gateway
def1
--script-security
2
--up
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -p -w -ptADGNWradsgnw
--down
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -p -w -ptADGNWradsgnw
2017-01-28 23:47:52 *Tunnelblick: openvpnstart starting OpenVPN
2017-01-28 23:47:52 *Tunnelblick: Established communication with OpenVPN
2017-01-28 23:47:52 OpenVPN 2.3.14 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Jan 14 2017
2017-01-28 23:47:52 library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.09
2017-01-28 23:47:52 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2017-01-28 23:47:52 Need hold release from management interface, waiting...
2017-01-28 23:47:52 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2017-01-28 23:47:52 MANAGEMENT: CMD 'pid'
2017-01-28 23:47:52 MANAGEMENT: CMD 'state on'
2017-01-28 23:47:52 MANAGEMENT: CMD 'state'
2017-01-28 23:47:52 MANAGEMENT: CMD 'bytecount 1'
2017-01-28 23:47:52 MANAGEMENT: CMD 'hold release'
2017-01-28 23:47:52 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2017-01-28 23:47:52 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-01-28 23:47:52 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
2017-01-28 23:47:52 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-01-28 23:47:52 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-01-28 23:47:52 Socket Buffers: R=[131072->131072] S=[131072->131072]
2017-01-28 23:47:52 Attempting to establish TCP connection with [AF_INET]10.20.30.40:1300 [nonblock]
2017-01-28 23:47:52 MANAGEMENT: >STATE:1485643672,TCP_CONNECT,,,
2017-01-28 23:47:53 TCP connection established with [AF_INET]10.20.30.40:1300
2017-01-28 23:47:53 TCPv4_CLIENT link local: [undef]
2017-01-28 23:47:53 TCPv4_CLIENT link remote: [AF_INET]10.20.30.40:1300
2017-01-28 23:47:53 MANAGEMENT: >STATE:1485643673,WAIT,,,
2017-01-28 23:47:53 MANAGEMENT: >STATE:1485643673,AUTH,,,
2017-01-28 23:47:53 TLS: Initial packet from [AF_INET]10.20.30.40:1300, sid=00a57ba0 dc4be65e
2017-01-28 23:47:54 VERIFY OK: depth=1, C=FR, ST=FR, L=Paris, O=Paris, OU=VPN, CN=Paris CA, name=EasyRSA, emailAddress=
2017-01-28 23:47:54 VERIFY OK: depth=0, C=FR, ST=FR, L=Paris, O=Paris, OU=VPN, CN=server, name=EasyRSA, emailAddress=
2017-01-28 23:47:55 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-01-28 23:47:55 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-01-28 23:47:55 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2017-01-28 23:47:55 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2017-01-28 23:47:55 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
2017-01-28 23:47:55 [server] Peer Connection Initiated with [AF_INET]10.20.30.40:1300
2017-01-28 23:47:56 MANAGEMENT: >STATE:1485643676,GET_CONFIG,,,
2017-01-28 23:47:57 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2017-01-28 23:47:57 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
2017-01-28 23:47:57 OPTIONS IMPORT: timers and/or timeouts modified
2017-01-28 23:47:57 OPTIONS IMPORT: --ifconfig/up options modified
2017-01-28 23:47:57 OPTIONS IMPORT: route options modified
2017-01-28 23:47:57 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2017-01-28 23:47:57 Opening utun (connect(AF_SYS_CONTROL)): Resource busy
2017-01-28 23:47:57 Opened utun device utun1
2017-01-28 23:47:57 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2017-01-28 23:47:57 MANAGEMENT: >STATE:1485643677,ASSIGN_IP,,10.8.0.6,
2017-01-28 23:47:57 /sbin/ifconfig utun1 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2017-01-28 23:47:57 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2017-01-28 23:47:57 /sbin/ifconfig utun1 10.8.0.6 10.8.0.5 mtu 1500 netmask 255.255.255.255 up
2017-01-28 23:47:57 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -p -w -ptADGNWradsgnw utun1 1500 1560 10.8.0.6 10.8.0.5 init
**********************************************
Start of output from client.up.tunnelblick.sh
Disabled IPv6 for 'Ethernet'
Disabled IPv6 for 'Wi-Fi'
Disabled IPv6 for 'Bluetooth PAN'
Disabled IPv6 for 'Thunderbolt Bridge'
Retrieved from OpenVPN: name server(s) [ 208.67.222.222 208.67.220.220 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
Not aggregating ServerAddresses because running on OS X 10.6 or higher
Prepending 'openvpn' to search domains '' because the search domains were not set manually and 'Prepend domain name to search domains' was selected
Saved the DNS and SMB configurations so they can be restored
Changed DNS ServerAddresses setting from '80.67.169.12 80.67.169.40' to '208.67.222.222 208.67.220.220'
Changed DNS SearchDomains setting from '' to 'openvpn'
Changed DNS DomainName setting from '' to 'openvpn'
Did not change SMB NetBIOSName setting of ''
Did not change SMB Workgroup setting of ''
Did not change SMB WINSAddresses setting of ''
DNS servers '208.67.222.222 208.67.220.220' will be used for DNS queries when the VPN is active
The DNS servers include only free public DNS servers known to Tunnelblick.
Flushed the DNS cache via dscacheutil
/usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
WARNING: Hands Off is running. Not notifying mDNSResponder that the DNS cache was flushed
Setting up to monitor system configuration with process-network-changes
End of output from client.up.tunnelblick.sh
**********************************************
2017-01-28 23:48:01 *Tunnelblick: No 'connected.sh' script to execute
2017-01-28 23:48:01 /sbin/route add -net 10.20.30.40 192.168.0.254 255.255.255.255
add net 10.20.30.40: gateway 192.168.0.254
2017-01-28 23:48:01 /sbin/route add -net 0.0.0.0 10.8.0.5 128.0.0.0
add net 0.0.0.0: gateway 10.8.0.5
2017-01-28 23:48:01 /sbin/route add -net 128.0.0.0 10.8.0.5 128.0.0.0
add net 128.0.0.0: gateway 10.8.0.5
2017-01-28 23:48:01 MANAGEMENT: >STATE:1485643681,ADD_ROUTES,,,
2017-01-28 23:48:01 /sbin/route add -net 10.8.0.1 10.8.0.5 255.255.255.255
add net 10.8.0.1: gateway 10.8.0.5
2017-01-28 23:48:01 Initialization Sequence Completed
2017-01-28 23:48:01 MANAGEMENT: >STATE:1485643681,CONNECTED,SUCCESS,10.8.0.6,10.20.30.40
================================================================================
"Sanitized" full configuration file
# Config Client
client
dev tun
proto tcp-client
remote 10.20.30.40 1300
resolv-retry infinite
cipher AES-256-CBC
# Certificats + Cles
ca ca.crt
cert toto.crt
key toto.key
tls-auth ta.key 1
# Config Securite
nobind
persist-key
persist-tun
comp-lzo
verb 3
================================================================================
ifconfig output:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 28:f0:76:1d:c9:96
inet 192.168.0.49 netmask 0xffffff00 broadcast 192.168.0.255
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
en2: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
options=60<TSO4,TSO6>
ether 1a:00:00:c4:f9:e0
media: autoselect <full-duplex>
status: inactive
en3: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
options=60<TSO4,TSO6>
ether 1a:00:00:c4:f9:e1
media: autoselect <full-duplex>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether 0a:f0:76:1d:c9:96
media: autoselect
status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
ether 8e:0c:c3:e0:0b:6b
inet6 fe80::8c0c:c3ff:fee0:b6b%awdl0 prefixlen 64 scopeid 0x8
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
ether 38:c9:86:1b:9b:db
nd6 options=1<PERFORMNUD>
media: autoselect (none)
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 2a:f0:76:d1:0a:00
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en2 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 5 priority 0 path cost 0
member: en3 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 6 priority 0 path cost 0
nd6 options=1<PERFORMNUD>
media: <unknown type>
status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet6 fe80::d3df:e6:5943:32ee%utun0 prefixlen 64 scopeid 0xc
nd6 options=1<PERFORMNUD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet 10.8.0.6 --> 10.8.0.5 netmask 0xffffffff
================================================================================
Console Log:
2017-01-28 20:25:34 Tunnelblick[430] Tunnelblick: OS X 10.11.6; Tunnelblick 3.6.10 (build 4760)
2017-01-28 20:25:35 Tunnelblick[430] Set program update feedURL to https://www.tunnelblick.net/appcast-s.rss
2017-01-28 20:25:38 Tunnelblick[430] Sparkle: ===== Tunnelblick.app =====
2017-01-28 20:25:38 Tunnelblick[430] Sparkle: Verified appcast signature
2017-01-28 23:46:48 Tunnelblick[430] *** WARNING: Method userSpaceScaleFactor in class NSView is deprecated on 10.7 and later. It should not be used in new applications. Use convertRectToBacking: instead.
