I am running openvpn community edition Version: 2.4.7-1 on debian v10. I am able to connect to server but get no IP. Log files do not show any errors that I can see. I am assuming the issue is related to the fact that the VPN is behind a ATT NVG599 router. I have not been able to find any useful information on what if any router configuration I have to change.
The router does have ip pass thru enabled by default, but not sure what else to check. I checked that ip forwarding was set to 1
and tried a different DNS Server to no avail. No other changes I tried seem to help. Any ideas on what I can try? Thanks!
# Sample OpenVPN 2.0 config file for #
# multi-client server. #
# #
# This file is for the server side #
# of a many-clients <-> one-server #
# OpenVPN configuration. #
# #
# OpenVPN also supports #
# single-machine <-> single-machine #
# configurations (See the Examples page #
# on the web site for more info). #
# #
# This config should work on Windows #
# or Linux/BSD systems. Remember on #
# Windows to quote pathnames and use #
# double backslashes, e.g.: #
# "C:\\Program Files\\OpenVPN\\config\\foo.key" #
# #
# Comments are preceded with '#' or ';' #
#################################################
# Which local IP address should OpenVPN
# listen on? (optional)
;local a.b.c.d
# Which TCP/UDP port should OpenVPN listen on?
# If you want to run multiple OpenVPN instances
# on the same machine, use a different port
# number for each one. You will need to
# open up this port on your firewall.
port 1194
#port 443
# TCP or UDP server?
#proto tcp
proto udp
# "dev tun" will create a routed IP tunnel,
# "dev tap" will create an ethernet tunnel.
# Use "dev tap0" if you are ethernet bridging
# and have precreated a tap0 virtual interface
# and bridged it with your ethernet interface.
# If you want to control access policies
# over the VPN, you must create firewall
# rules for the the TUN/TAP interface.
# On non-Windows systems, you can give
# an explicit unit number, such as tun0.
# On Windows, use "dev-node" for this.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel if you
# have more than one. On XP SP2 or higher,
# you may need to selectively disable the
# Windows firewall for the TAP adapter.
# Non-Windows systems usually don't need this.
;dev-node MyTap
# SSL/TLS root certificate (ca), certificate
# (cert), and private key (key). Each client
# and the server must have their own cert and
# key file. The server and all clients will
# use the same ca file.
#
# See the "easy-rsa" directory for a series
# of scripts for generating RSA certificates
# and private keys. Remember to use
# a unique Common Name for the server
# and each of the client certificates.
#
# Any X509 key management system can be used.
# OpenVPN can also use a PKCS #12 formatted key file
# (see "pkcs12" directive in man page).
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
# Diffie hellman parameters.
# Generate your own with:
# openssl dhparam -out dh2048.pem 2048
#dh dh2048.pem
dh dh.pem
# Network topology
# Should be subnet (addressing via IP)
# unless Windows clients v2.0.9 and lower have to
# be supported (then net30, i.e. a /30 per client)
# Defaults to net30 (not recommended)
;topology subnet
# Configure server mode and supply a VPN subnet
# for OpenVPN to draw client addresses from.
# The server will take 10.8.0.1 for itself,
# the rest will be made available to clients.
# Each client will be able to reach the server
# on 10.8.0.1. Comment this line out if you are
# ethernet bridging. See the man page for more info.
server 10.8.0.0 255.255.255.0
# Maintain a record of client <-> virtual IP address
# associations in this file. If OpenVPN goes down or
# is restarted, reconnecting clients can be assigned
# the same virtual IP address from the pool that was
# previously assigned.
ifconfig-pool-persist /var/log/openvpn/ipp.txt
# Configure server mode for ethernet bridging.
# You must first use your OS's bridging capability
# to bridge the TAP interface with the ethernet
# NIC interface. Then you must manually set the
# IP/netmask on the bridge interface, here we
# assume 10.8.0.4/255.255.255.0. Finally we
# must set aside an IP range in this subnet
# (start=10.8.0.50 end=10.8.0.100) to allocate
# to connecting clients. Leave this line commented
# out unless you are ethernet bridging.
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
# Configure server mode for ethernet bridging
# using a DHCP-proxy, where clients talk
# to the OpenVPN server-side DHCP server
# to receive their IP address allocation
# and DNS server addresses. You must first use
# your OS's bridging capability to bridge the TAP
# interface with the ethernet NIC interface.
# Note: this mode only works on clients (such as
# Windows), where the client-side TAP adapter is
# bound to a DHCP client.
;server-bridge
# Push routes to the client to allow it
# to reach other private subnets behind
# the server. Remember that these
# private subnets will also need
# to know to route the OpenVPN client
# address pool (10.8.0.0/255.255.255.0)
# back to the OpenVPN server.
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
# To assign specific IP addresses to specific
# clients or if a connecting client has a private
# subnet behind it that should also have VPN access,
# use the subdirectory "ccd" for client-specific
# configuration files (see man page for more info).
# EXAMPLE: Suppose the client
# having the certificate common name "Thelonious"
# also has a small subnet behind his connecting
# machine, such as 192.168.40.128/255.255.255.248.
# First, uncomment out these lines:
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
# Then create a file ccd/Thelonious with this line:
# iroute 192.168.40.128 255.255.255.248
# This will allow Thelonious' private subnet to
# access the VPN. This example will only work
# if you are routing, not bridging, i.e. you are
# using "dev tun" and "server" directives.
# EXAMPLE: Suppose you want to give
# Thelonious a fixed VPN IP address of 10.9.0.1.
# First uncomment out these lines:
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
# Then add this line to ccd/Thelonious:
# ifconfig-push 10.9.0.1 10.9.0.2
# Suppose that you want to enable different
# firewall access policies for different groups
# of clients. There are two methods:
# (1) Run multiple OpenVPN daemons, one for each
# group, and firewall the TUN/TAP interface
# for each group/daemon appropriately.
# (2) (Advanced) Create a script to dynamically
# modify the firewall in response to access
# from different clients. See man
# page for more info on learn-address script.
;learn-address ./script
# If enabled, this directive will configure
# all clients to redirect their default
# network gateway through the VPN, causing
# all IP traffic such as web browsing and
# and DNS lookups to go through the VPN
# (The OpenVPN server machine may need to NAT
# or bridge the TUN/TAP interface to the internet
# in order for this to work properly).
push "redirect-gateway def1 bypass-dhcp"
# Certain Windows-specific network settings
# can be pushed to clients, such as DNS
# or WINS server addresses. CAVEAT:
#
http://openvpn.net/faq.html#dhcpcaveats
# The addresses below refer to the public
# DNS servers provided by opendns.com.
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
# Uncomment this directive to allow different
# clients to be able to "see" each other.
# By default, clients will only see the server.
# To force clients to only see the server, you
# will also need to appropriately firewall the
# server's TUN/TAP interface.
;client-to-client
# Uncomment this directive if multiple clients
# might connect with the same certificate/key
# files or common names. This is recommended
# only for testing purposes. For production use,
# each client should have its own certificate/key
# pair.
#
# IF YOU HAVE NOT GENERATED INDIVIDUAL
# CERTIFICATE/KEY PAIRS FOR EACH CLIENT,
# EACH HAVING ITS OWN UNIQUE "COMMON NAME",
# UNCOMMENT THIS LINE OUT.
;duplicate-cn
# The keepalive directive causes ping-like
# messages to be sent back and forth over
# the link so that each side knows when
# the other side has gone down.
# Ping every 10 seconds, assume that remote
# peer is down if no ping received during
# a 120 second time period.
keepalive 10 120
# For extra security beyond that provided
# by SSL/TLS, create an "HMAC firewall"
# to help block DoS attacks and UDP port flooding.
#
# Generate with:
# openvpn --genkey --secret ta.key
#
# The server and each client must have
# a copy of this key.
# The second parameter should be '0'
# on the server and '1' on the clients.
tls-auth ta.key 0 # This file is secret
# Select a cryptographic cipher.
# This config item must be copied to
# the client config file as well.
# Note that v2.4 client/server will automatically
# negotiate AES-256-GCM in TLS mode.
# See also the ncp-cipher option in the manpage
cipher AES-256-CBC
auth SHA256
# Enable compression on the VPN link and push the
# option to the client (v2.4+ only, for earlier
# versions see below)
;compress lz4-v2
;push "compress lz4-v2"
# For compression compatible with older clients use comp-lzo
# If you enable it here, you must also
# enable it in the client config file.
;comp-lzo
# The maximum number of concurrently connected
# clients we want to allow.
;max-clients 100
# It's a good idea to reduce the OpenVPN
# daemon's privileges after initialization.
#
# You can uncomment this out on
# non-Windows systems.
#user nobody
#group nogroup
# The persist options will try to avoid
# accessing certain resources on restart
# that may no longer be accessible because
# of the privilege downgrade.
persist-key
persist-tun
# Output a short status file showing
# current connections, truncated
# and rewritten every minute.
status /var/log/openvpn/openvpn-status.log
# By default, log messages will go to the syslog (or
# on Windows, if running as a service, they will go to
# the "\Program Files\OpenVPN\log" directory).
# Use log or log-append to override this default.
# "log" will truncate the log file on OpenVPN startup,
# while "log-append" will append to it. Use one
# or the other (but not both).
;log /var/log/openvpn/openvpn.log
;log-append /var/log/openvpn/openvpn.log
# Set the appropriate level of log
# file verbosity.
#
# 0 is silent, except for fatal errors
# 4 is reasonable for general usage
# 5 and 6 can help to debug connection problems
# 9 is extremely verbose
verb 4
# Silence repeating messages. At most 20
# sequential messages of the same message
# category will be output to the log.
;mute 20
# Notify the client that when the server restarts so it
# can automatically reconnect.
explicit-exit-notify 1
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server. #
# #
# This configuration can be used by multiple #
# clients, however each client should have #
# its own cert and key files. #
# #
# On Windows, you might want to rename this #
# file so it has a .ovpn extension #
##############################################
# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client
# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap
# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
;proto tcp
proto udp
# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote 192.168.1.74 1194
;remote my-server-2 1194
# Choose a random host from the remote
# list for load-balancing. Otherwise
# try hosts in the order specified.
;remote-random
key-direction 1
# script-security 2
#up /etc/openvpn/update-resolv-conf
#down /etc/openvpn/update-resolv-conf
# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite
# Most clients don't need to bind to
# a specific local port number.
nobind
# Downgrade privileges after initialization (non-Windows only)
#user nobody
#group nogroup
# Try to preserve some state across restarts.
persist-key
persist-tun
# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here. See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
# Wireless networks often produce a lot
# of duplicate packets. Set this flag
# to silence duplicate packet warnings.
;mute-replay-warnings
# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
#ca ca.crt
#cert client.crt
#key client.key
# Verify server certificate by checking that the
# certicate has the correct key usage set.
# This is an important precaution to protect against
# a potential attack discussed here:
#
http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the keyUsage set to
# digitalSignature, keyEncipherment
# and the extendedKeyUsage to
# serverAuth
# EasyRSA can do this for you.
remote-cert-tls server
# If a tls-auth key is used on the server
# then every client must also have the key.
#tls-auth ta.key 1
# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
# Note that v2.4 client/server will automatically
# negotiate AES-256-GCM in TLS mode.
# See also the ncp-cipher option in the manpage
cipher AES-256-CBC
auth SHA256
# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
#comp-lzo
# Set log file verbosity.
verb 4
# Silence repeating messages
;mute 20
<ca>
-----BEGIN CERTIFICATE-----
deleted
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:94:c1:d6:a0:62:e5:a5:27:f6:8a:d3:a3:ed:45:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Easy-RSA CA
Validity
Not Before: Feb 16 22:01:00 2020 GMT
Not After : Jan 31 22:01:00 2023 GMT
Subject: CN=client1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:ba:d4:70:f6:fa:37:35:ec:53:2e:79:22:
d1:b1:7f:11:2a:80:03:30:e7:bb:ea:ea:f6:88:f1:
d6:3a:ff:f3:c7:01:5f:e7:4e:85:b3:9f:c3:50:77:
71:89:ae:dd:20:fa:8b:d8:35:95:3c:3b:b5:90:58:
0f:9c:25:bb:98:15:7b:7f:04:64:9c:34:0b:ae:97:
9c:e4:7a:67:49:f9:f3:0e:d1:f7:00:dd:f4:70:73:
9c:75:32:99:7f:e8:86:5e:e3:91:5d:e6:be:72:ac:
f8:76:3e:3b:90:bc:aa:b2:6c:c4:28:38:2b:85:e5:
c6:c7:90:2c:71:1f:c9:30:9e:a6:5c:4e:4a:ab:53:
86:13:b9:e9:b7:e2:2a:20:a6:3c:21:58:d8:bb:cd:
4e:41:99:df:1d:73:b3:6b:75:0c:30:c7:5b:05:a1:
c2:61:d4:5d:b7:10:e7:33:7c:74:5f:cd:97:ae:02:
93:7f:85:50:1b:85:d6:96:9e:6a:6a:60:3a:60:2e:
9b:16:6f:28:28:0a:a4:69:fd:c0:76:9e:82:4d:38:
d4:ed:18:11:a1:b3:5f:88:1a:13:31:ea:d8:35:e5:
96:63:7e:fc:b4:9a:2d:33:13:3f:f9:f7:ac:21:fc:
07:73:bf:01:ee:c7:76:15:30:47:70:a0:ae:31:ff:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
F2:5A:FA:CB:C0:DF:C7:2C:01:3C:67:34:FB:14:4C:5F:0D:1A:AF:0F
X509v3 Authority Key Identifier:
keyid:0C:26:15:19:C3:D7:46:34:EE:CC:77:41:DE:39:F5:C1:BA:2A:D4:EC
DirName:/CN=Easy-RSA CA
serial:1C:FD:6A:14:23:6E:DA:C1:E8:D5:49:AE:DA:50:14:78:9B:14:F2:A0
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
4a:90:54:54:3b:d9:6d:51:17:ef:89:7b:cc:e9:86:3c:84:9c:
74:4a:e0:de:a2:f4:8f:e4:2b:b9:71:32:4b:f8:7a:b3:b8:8d:
42:55:79:83:70:c3:65:29:02:9c:3c:70:fa:3c:96:60:59:44:
7b:cc:a3:ad:51:dc:ff:23:b4:2b:8b:01:6d:ce:fd:ac:ab:67:
8d:84:10:e7:36:01:6c:c7:40:e9:09:5b:89:1a:77:94:1a:c5:
a5:f5:fe:34:0f:4d:4f:a5:c3:2b:02:07:e8:0d:a4:2e:1c:a6:
6a:67:f2:dc:db:6b:6a:1f:ee:12:2b:91:99:6e:de:1a:c4:33:
27:c4:8d:e3:81:94:c6:35:22:2c:ab:74:10:67:9a:99:77:d1:
26:ad:94:f0:8f:05:4d:2d:fa:99:ad:06:1c:08:0e:e0:b8:44:
da:59:1c:9b:63:71:06:ba:17:9e:28:06:a6:86:0f:d9:52:5f:
b2:00:d0:53:53:73:f2:16:1a:4d:d6:5a:3d:ce:ab:ae:90:e2:
e5:2d:f8:57:03:07:64:b6:ab:a1:93:72:92:3e:03:ab:23:75:
04:b0:fa:e1:7f:f7:47:1a:f7:5f:59:8b:21:9a:9d:4b:e3:2c:
8b:ed:54:62:f9:59:91:8b:34:a2:6b:a4:b0:e3:33:d8:86:87:
cb:f5:c1:53
-----BEGIN CERTIFICATE-----
deleted
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
deleted
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
deleted
-----END OpenVPN Static key V1-----
</tls-auth>
client log:
*Tunnelblick: macOS 10.15.4 (19E266); Tunnelblick 3.8.2 (build 5480); Admin user
git commit 6155bb774cf9652ef0231b712d7784ee03d3c85e
Tunnelblick Log:
2020-03-29 15:40:22.192119 *Tunnelblick: macOS 10.15.4 (19E266); Tunnelblick 3.8.2 (build 5480)
2020-03-29 15:40:22.348191 *Tunnelblick: Attempting connection with client1; Set nameserver = 769; monitoring connection
2020-03-29 15:40:22.348653 *Tunnelblick: openvpnstart start client1.tblk 64098 769 0 3 0 1098032 -ptADGNWradsgnw 2.4.8-openssl-1.1.1e
2020-03-29 15:40:22.539236 OpenVPN 2.4.8 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Mar 22 2020
2020-03-29 15:40:22.539272 library versions: OpenSSL 1.1.1e 17 Mar 2020, LZO 2.10
2020-03-29 15:40:22.540044 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:64098
2020-03-29 15:40:22.540062 Need hold release from management interface, waiting...
2020-03-29 15:40:22.973834 *Tunnelblick: openvpnstart log:
OpenVPN started successfully.
Command used to start OpenVPN (one argument per displayed line):
/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.4.8-openssl-1.1.1e/openvpn
--daemon
--log /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Sclient1.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1098032.64098.openvpn.log
--cd /Library/Application Support/Tunnelblick/Shared/client1.tblk/Contents/Resources
--machine-readable-output
--setenv IV_GUI_VER "net.tunnelblick.tunnelblick 5480 3.8.2 (build 5480)"
--verb 3
--config /Library/Application Support/Tunnelblick/Shared/client1.tblk/Contents/Resources/config.ovpn
--setenv TUNNELBLICK_CONFIG_FOLDER /Library/Application Support/Tunnelblick/Shared/client1.tblk/Contents/Resources
--verb 3
--cd /Library/Application Support/Tunnelblick/Shared/client1.tblk/Contents/Resources
--management 127.0.0.1 64098 /Library/Application Support/Tunnelblick/onakpdejdeippiaigghelngkpalachffenbpgnfa.mip
--management-query-passwords
--management-hold
--script-security 2
--route-up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
--down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
2020-03-29 15:40:22.979683 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:64098
2020-03-29 15:40:23.006731 MANAGEMENT: CMD 'pid'
2020-03-29 15:40:23.006769 MANAGEMENT: CMD 'auth-retry interact'
2020-03-29 15:40:23.006785 MANAGEMENT: CMD 'state on'
2020-03-29 15:40:23.006808 MANAGEMENT: CMD 'state'
2020-03-29 15:40:23.006830 MANAGEMENT: CMD 'bytecount 1'
2020-03-29 15:40:23.007378 *Tunnelblick: Established communication with OpenVPN
2020-03-29 15:40:23.008447 *Tunnelblick: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2020-03-29 15:40:23.009731 MANAGEMENT: CMD 'hold release'
2020-03-29 15:40:23.009821 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2020-03-29 15:40:23.012690 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2020-03-29 15:40:23.015846 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
2020-03-29 15:40:23.016128 TCP/UDP: Preserving recently used remote address: [AF_INET]192.168.1.74:1194
2020-03-29 15:40:23.016180 Socket Buffers: R=[786896->786896] S=[9216->9216]
2020-03-29 15:40:23.016189 UDP link local: (not bound)
2020-03-29 15:40:23.016197 UDP link remote: [AF_INET]192.168.1.74:1194
2020-03-29 15:40:23.016250 MANAGEMENT: >STATE:1585514423,WAIT,,,,,,
2020-03-29 15:40:23.019061 MANAGEMENT: >STATE:1585514423,AUTH,,,,,,
2020-03-29 15:40:23.019088 TLS: Initial packet from [AF_INET]192.168.1.74:1194, sid=d2cc8d61 b646107b
2020-03-29 15:40:23.061310 VERIFY OK: depth=1, CN=Easy-RSA CA
2020-03-29 15:40:23.061577 VERIFY KU OK
2020-03-29 15:40:23.061589 Validating certificate extended key usage
2020-03-29 15:40:23.061620 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2020-03-29 15:40:23.061754 VERIFY EKU OK
2020-03-29 15:40:23.061772 VERIFY OK: depth=0, CN=server
2020-03-29 15:40:23.074233 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA
2020-03-29 15:40:23.074281 [server] Peer Connection Initiated with [AF_INET]192.168.1.74:1194
2020-03-29 15:40:24.179625 MANAGEMENT: >STATE:1585514424,GET_CONFIG,,,,,,
2020-03-29 15:40:24.179793 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2020-03-29 15:40:24.182452 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5,peer-id 0,cipher AES-256-GCM'
2020-03-29 15:40:24.182518 OPTIONS IMPORT: timers and/or timeouts modified
2020-03-29 15:40:24.182526 OPTIONS IMPORT: --ifconfig/up options modified
2020-03-29 15:40:24.182532 OPTIONS IMPORT: route options modified
2020-03-29 15:40:24.182537 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2020-03-29 15:40:24.182542 OPTIONS IMPORT: peer-id set
2020-03-29 15:40:24.182548 OPTIONS IMPORT: adjusting link_mtu to 1624
2020-03-29 15:40:24.182553 OPTIONS IMPORT: data channel crypto options modified
2020-03-29 15:40:24.182558 Data Channel: using negotiated cipher 'AES-256-GCM'
2020-03-29 15:40:24.182629 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-03-29 15:40:24.182637 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
2020-03-29 15:40:24.182869 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2020-03-29 15:40:24.182890 Opening utun (connect(AF_SYS_CONTROL)): Resource busy (errno=16)
2020-03-29 15:40:24.182968 Opened utun device utun2
2020-03-29 15:40:24.183025 MANAGEMENT: >STATE:1585514424,ASSIGN_IP,,10.8.0.6,,,,
2020-03-29 15:40:24.183048 /sbin/ifconfig utun2 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2020-03-29 15:40:24.185630 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2020-03-29 15:40:24.185679 /sbin/ifconfig utun2 10.8.0.6 10.8.0.5 mtu 1500 netmask 255.255.255.255 up
2020-03-29 15:40:24.188052 /sbin/route add -cloning -net 192.168.1.74 -netmask 255.255.255.255 -interface en0
add net 192.168.1.74: gateway en0
2020-03-29 15:40:24.191422 /sbin/route add -net 0.0.0.0 10.8.0.5 128.0.0.0
add net 0.0.0.0: gateway 10.8.0.5
2020-03-29 15:40:24.192819 /sbin/route add -net 128.0.0.0 10.8.0.5 128.0.0.0
add net 128.0.0.0: gateway 10.8.0.5
2020-03-29 15:40:24.194227 MANAGEMENT: >STATE:1585514424,ADD_ROUTES,,,,,,
2020-03-29 15:40:24.194256 /sbin/route add -net 10.8.0.1 10.8.0.5 255.255.255.255
add net 10.8.0.1: gateway 10.8.0.5
15:40:24 *Tunnelblick: **********************************************
15:40:24 *Tunnelblick: Start of output from client.up.tunnelblick.sh
15:40:26 *Tunnelblick: Retrieved from OpenVPN: name server(s) [ 208.67.222.222 208.67.220.220 ], search domain(s) [ ] and SMB server(s) [ ] and using default domain name [ openvpn ]
15:40:26 *Tunnelblick: WARNING: Ignoring ServerAddresses '208.67.222.222 208.67.220.220' because ServerAddresses was set manually and '-allowChangesToManuallySetNetworkSettings' was not specified
15:40:26 *Tunnelblick: Setting search domains to 'openvpn' because the search domains were not set manually (or are allowed to be changed) and 'Prepend domain name to search domains' was not selected
15:40:27 *Tunnelblick: Saved the DNS and SMB configurations so they can be restored
15:40:27 *Tunnelblick: Did not change DNS ServerAddresses setting of '8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220' (but re-set it)
15:40:27 *Tunnelblick: Changed DNS SearchDomains setting from '' to 'openvpn'
15:40:27 *Tunnelblick: Changed DNS DomainName setting from 'attlocal.net' to 'openvpn'
15:40:27 *Tunnelblick: Did not change SMB NetBIOSName setting of ''
15:40:27 *Tunnelblick: Did not change SMB Workgroup setting of ''
15:40:27 *Tunnelblick: Did not change SMB WINSAddresses setting of ''
15:40:27 *Tunnelblick: DNS servers '8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220' were set manually
15:40:27 *Tunnelblick: DNS servers '8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220' will be used for DNS queries when the VPN is active
15:40:27 *Tunnelblick: The DNS servers include only free public DNS servers known to Tunnelblick.
15:40:27 *Tunnelblick: Flushed the DNS cache via dscacheutil
15:40:27 *Tunnelblick: /usr/sbin/discoveryutil not present. Not flushing the DNS cache via discoveryutil
15:40:27 *Tunnelblick: Notified mDNSResponder that the DNS cache was flushed
15:40:27 *Tunnelblick: Notified mDNSResponderHelper that the DNS cache was flushed
15:40:27 *Tunnelblick: Setting up to monitor system configuration with process-network-changes
15:40:27 *Tunnelblick: End of output from client.up.tunnelblick.sh
15:40:27 *Tunnelblick: **********************************************
2020-03-29 15:40:27.846439 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2020-03-29 15:40:27.846461 Initialization Sequence Completed
2020-03-29 15:40:27.846502 MANAGEMENT: >STATE:1585514427,CONNECTED,SUCCESS,10.8.0.6,192.168.1.74,1194,,
2020-03-29 15:40:28.069360 *Tunnelblick: DNS address 208.67.220.220 is being routed through the VPN
2020-03-29 15:40:28.178325 *Tunnelblick: DNS address 208.67.222.222 is being routed through the VPN
2020-03-29 15:40:28.286607 *Tunnelblick: DNS address 8.8.4.4 is being routed through the VPN
2020-03-29 15:40:28.398541 *Tunnelblick: DNS address 8.8.8.8 is being routed through the VPN
2020-03-29 15:41:11.104174 *Tunnelblick: After 30.0 seconds, gave up trying to fetch IP address information using the ipInfo host's name after connecting.
2020-03-29 15:41:49.613564 *Tunnelblick: An error occured fetching IP address information using the ipInfo host's IP address after connecting
2020-03-29 15:40:22.360839 *Tunnelblick: openvpnstart starting OpenVPN
================================================================================
Down log:
(Not found)
================================================================================
Previous down log:
(Not found)
================================================================================
Network services:
An asterisk (*) denotes that a network service is disabled.
Ethernet
Wi-Fi
Bluetooth PAN
Thunderbolt Bridge
Wi-Fi Power (en1): Off
================================================================================
ifconfig output:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.94.0.1 netmask 0xff000000
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=50b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV,CHANNEL_IO>
ether 78:7b:8a:c2:7f:c5
inet 192.168.1.148 netmask 0xffffff00 broadcast 192.168.1.255
media: autoselect (1000baseT <full-duplex,flow-control,energy-efficient-ethernet>)
status: active
en1: flags=8823<UP,BROADCAST,SMART,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether a8:be:27:d2:cb:bc
media: autoselect (<unknown type>)
status: inactive
en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:f8:e5:82:2c:00
media: autoselect <full-duplex>
status: inactive
en3: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=460<TSO4,TSO6,CHANNEL_IO>
ether 82:f8:e5:82:2c:01
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether 82:f8:e5:82:2c:00
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x0
member: en2 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 6 priority 0 path cost 0
member: en3 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 7 priority 0 path cost 0
media: <unknown type>
status: inactive
p2p0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 2304
options=400<CHANNEL_IO>
ether 0a:be:27:d2:cb:bc
media: autoselect
status: inactive
awdl0: flags=8902<BROADCAST,PROMISC,SIMPLEX,MULTICAST> mtu 1484
options=400<CHANNEL_IO>
ether be:42:8b:2d:9e:1d
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: inactive
llw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=400<CHANNEL_IO>
ether be:42:8b:2d:9e:1d
nd6 options=201<PERFORMNUD,DAD>
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::49e7:55f7:f9f9:b220%utun0 prefixlen 64 scopeid 0xc
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::17d8:261b:8bf2:4d63%utun1 prefixlen 64 scopeid 0xd
nd6 options=201<PERFORMNUD,DAD>
utun2: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet 10.8.0.6 --> 10.8.0.5 netmask 0xffffffff
================================================================================
Non-Apple kexts that are loaded:
Index Refs Address Size Wired Name (Version) UUID <Linked Against>
176 0 0xffffff7f85022000 0x88000 0x88000 com.avg.FileShield (4.0.0) C704FE1C-8573-360B-A302-381D62483609 <6 5 1>
177 0 0xffffff7f850aa000 0x7000 0x7000 com.avg.PacketForwarder (2.1) 9A7FE361-ED85-3583-8688-7536F04415A2 <6 5 1>
================================================================================
Quit Log:
2020-03-29 15:39:08.584204 applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes)
2020-03-29 15:39:08.606394 shutDownTunnelblick: started.
2020-03-29 15:39:08.606672 shutDownTunnelblick: Starting cleanup.
2020-03-29 15:39:08.606931 cleanup: Entering cleanup
2020-03-29 15:39:08.607276 cleanup aborted because Tunnelblick did not finish launching
2020-03-29 15:39:08.607418 shutDownTunnelblick: Cleanup finished.
2020-03-29 15:39:08.607680 Finished shutting down Tunnelblick; allowing termination
================================================================================
Console Log:
2020-03-29 15:37:19.096660 Tunnelblick[2191] Tunnelblick: macOS 10.15.4; Tunnelblick 3.8.3beta01 (build 5490)
2020-03-29 15:37:19.480050 Tunnelblick[2191] Need to replace and/or reload 'tunnelblickd':
daemonHashesMatch = NO
plistHashesMatch = YES
activePlistMatches = YES
2020-03-29 15:37:28.408173 Tunnelblick[2191] The Tunnelblick installation was cancelled by the user.
2020-03-29 15:37:28.437632 Tunnelblick[2191] cleanup: Entering cleanup
2020-03-29 15:37:28.437831 Tunnelblick[2191] cleanup aborted because Tunnelblick did not finish launching
2020-03-29 15:37:28.438139 Tunnelblick[2191] Finished shutting down Tunnelblick; allowing termination
2020-03-29 15:38:55.872948 Tunnelblick[2266] Tunnelblick: macOS 10.15.4; Tunnelblick 3.8.2 (build 5480)
2020-03-29 15:38:55.876340 Tunnelblick[2266] Propagating '-resetPrimaryInterfaceAfterDisconnect' preferences that are TRUE to '-resetPrimaryInterfaceAfterUnexpectedDisconnect'
2020-03-29 15:38:56.265204 Tunnelblick[2266] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.
2020-03-29 15:39:07.646971 Tunnelblick[2266] Tunnelblick needs to:
??? Be installed in /Applications as Tunnelblick
??? Change ownership and permissions of the program to secure it
??? Secure configurations
2020-03-29 15:39:07.647030 Tunnelblick[2266] Beginning installation or repair
2020-03-29 15:39:08.485515 Tunnelblick[2266] Installation or repair succeeded; Log:
Tunnelblick installer started 2020-03-29 15:39:07.679305. 1 arguments: 0x0017
getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755
Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0
Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755
Changed permissions from 744 to 755 on /var/log/Tunnelblick
Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/expect-disconnect with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/Users/owings with owner 0:0 and permissions 755
Created .mip
Changed ownership of /Users/owings/Library/Application Support/Tunnelblick from 501:20 to 501:80
Changed ownership of /Users/owings/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80
Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app
Removed any 'com.apple.quarantine' extended attributes
Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0
Need to replace and/or reload 'tunnelblickd':
tunnelblickdHashOK = NO
launchctlPlistHashOK = NO
tunnelblickdPlistOK = YES
socketOK = YES
Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
Used launchctl to load tunnelblickd
Tunnelblick installer finished without error
2020-03-29 15:39:08.597148 Tunnelblick[2278] Tunnelblick: macOS 10.15.4; Tunnelblick 3.8.2 (build 5480)
2020-03-29 15:39:08.606887 Tunnelblick[2266] cleanup: Entering cleanup
2020-03-29 15:39:08.607244 Tunnelblick[2266] cleanup aborted because Tunnelblick did not finish launching
2020-03-29 15:39:08.607645 Tunnelblick[2266] Finished shutting down Tunnelblick; allowing termination
2020-03-29 15:39:09.059869 Tunnelblick[2278] Launching a thread to remove the old login item (if any) so we can use the new mechanism that controls Tunnelblick's launch on login
2020-03-29 15:39:09.067678 Tunnelblick[2278] No old login item to remove
2020-03-29 15:39:21.152032 Tunnelblick[2278] Copied easy-rsa
2020-03-29 15:39:21.152167 Tunnelblick[2278] Changed permissions from 755 to 700 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa
2020-03-29 15:39:21.152432 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-ca
2020-03-29 15:39:21.152542 Tunnelblick[2278] Changed permissions from 755 to 600 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/vars
2020-03-29 15:39:21.152652 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-key-server
2020-03-29 15:39:21.152765 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-key-pass
2020-03-29 15:39:21.152902 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-req
2020-03-29 15:39:21.153011 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-req-pass
2020-03-29 15:39:21.153118 Tunnelblick[2278] Changed permissions from 644 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/libressl.cnf.template
2020-03-29 15:39:21.153307 Tunnelblick[2278] Changed permissions from 755 to 700 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3
2020-03-29 15:39:21.153421 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/ChangeLog
2020-03-29 15:39:21.153528 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README
2020-03-29 15:39:21.153706 Tunnelblick[2278] Changed permissions from 755 to 700 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3
2020-03-29 15:39:21.153888 Tunnelblick[2278] Changed permissions from 755 to 700 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types
2020-03-29 15:39:21.154002 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/ca
2020-03-29 15:39:21.154114 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/server
2020-03-29 15:39:21.154224 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/COMMON
2020-03-29 15:39:21.154333 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/client
2020-03-29 15:39:21.154443 Tunnelblick[2278] Changed permissions from 644 to 600 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/openssl-1.0.cnf
2020-03-29 15:39:21.154553 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/easyrsa
2020-03-29 15:39:21.154661 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/vars.example
2020-03-29 15:39:21.154769 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/COPYING
2020-03-29 15:39:21.154952 Tunnelblick[2278] Changed permissions from 755 to 700 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc
2020-03-29 15:39:21.155065 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Intro-To-PKI.md
2020-03-29 15:39:21.155176 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Readme.md
2020-03-29 15:39:21.155284 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Hacking.md
2020-03-29 15:39:21.155394 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Advanced.md
2020-03-29 15:39:21.155499 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/TODO
2020-03-29 15:39:21.155608 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Upgrade-Notes.md
2020-03-29 15:39:21.155779 Tunnelblick[2278] Changed permissions from 755 to 700 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing
2020-03-29 15:39:21.155892 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing/gpl-2.0.txt
2020-03-29 15:39:21.156000 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/KNOWN_ISSUES
2020-03-29 15:39:21.156108 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README.quickstart.md
2020-03-29 15:39:21.156216 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/clean-all
2020-03-29 15:39:21.156322 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-dh
2020-03-29 15:39:21.156430 Tunnelblick[2278] Changed permissions from 644 to 600 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.6.cnf
2020-03-29 15:39:21.156536 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/pkitool
2020-03-29 15:39:21.156640 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/sign-req
2020-03-29 15:39:21.156748 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-key-pkcs12
2020-03-29 15:39:21.156853 Tunnelblick[2278] Changed permissions from 644 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/whichopensslcnf
2020-03-29 15:39:21.156959 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-inter
2020-03-29 15:39:21.157063 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/README
2020-03-29 15:39:21.157167 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/revoke-full
2020-03-29 15:39:21.157301 Tunnelblick[2278] Changed permissions from 644 to 600 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.8.cnf
2020-03-29 15:39:21.157423 Tunnelblick[2278] Changed permissions from 644 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/readme-libressl.txt
2020-03-29 15:39:21.157529 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/TB-version.txt
2020-03-29 15:39:21.157635 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/list-crl
2020-03-29 15:39:21.157748 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/build-key
2020-03-29 15:39:21.157897 Tunnelblick[2278] Changed permissions from 755 to 500 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/inherit-inter
2020-03-29 15:39:21.158003 Tunnelblick[2278] Changed permissions from 644 to 600 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/openssl-1.0.0.cnf
2020-03-29 15:39:21.158120 Tunnelblick[2278] Changed permissions from 644 to 400 on /Users/owings/Library/Application Support/Tunnelblick/easy-rsa/v3version.txt
2020-03-29 15:39:21.266674 Tunnelblick[2278] Sparkle: ===== Tunnelblick =====
2020-03-29 15:39:21.266923 Tunnelblick[2278] Sparkle: Verified appcast signature
2020-03-29 15:40:05.312504 Tunnelblick[2278] Converting/Installing /Users/owings/vpn/client1.ovpn: Converted OpenVPN configuration
2020-03-29 15:40:13.028715 Tunnelblick[2278] Tunnelblick needs to perform an action that requires a computer administrator's authorization.
2020-03-29 15:40:13.028763 Tunnelblick[2278] Beginning installation or repair
2020-03-29 15:40:13.112842 Tunnelblick[2278] Installation or repair succeeded; Log:
Tunnelblick installer started 2020-03-29 15:40:13.068894. 3 arguments: 0x0001
/Library/Application Support/Tunnelblick/Shared/client1.tblk
/private/var/folders/dr/whjv76yd5233j8t0p51f15wr0000gn/T/Tunnelblick-SMlk2Q/client1.tblk
getuid() = 501; getgid() = 20; geteuid() = 0; getegid() = 20
Copied /private/var/folders/dr/whjv76yd5233j8t0p51f15wr0000gn/T/Tunnelblick-SMlk2Q/client1.tblk
to /Library/Application Support/Tunnelblick/Shared/client1.tblk.temp
Renamed /Library/Application Support/Tunnelblick/Shared/client1.tblk.temp
to /Library/Application Support/Tunnelblick/Shared/client1.tblk
Changed ownership of /Library/Application Support/Tunnelblick/Shared/client1.tblk and its contents from 501:20 to 0:0
Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/client1.tblk
Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/client1.tblk/Contents
Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/client1.tblk/Contents/Resources
Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/client1.tblk/Contents/Resources/config.ovpn
Tunnelblick installer finished without error
2020-03-29 15:41:11.103953 Tunnelblick[2278] currentIPInfo(Name): IP address info could not be fetched within 38.1 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x600002d7a8b0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://tunnelblick.net/ipinfo, NSErrorFailingURLKey=https://tunnelblick.net/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2020-03-29 15:41:49.613352 Tunnelblick[2278] currentIPInfo(Address): IP address info could not be fetched within 38.5 seconds; the error was 'Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x600002db8480 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "The request timed out." UserInfo={NSErrorFailingURLStringKey=https://205.233.73.116/ipinfo, NSErrorFailingURLKey=https://205.233.73.116/ipinfo, _kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4, NSLocalizedDescription=The request timed out.}}, NSErrorFailingURLStringKey=https://205.233.73.116/ipinfo, NSErrorFailingURLKey=https://205.233.73.116/ipinfo, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}'; the response was '(null)'
2020-03-29 15:41:49.613468 Tunnelblick[2278] An error occurred fetching IP address information after connecting
openvpn-status.log:
OpenVPN CLIENT LIST
Updated,Sun Mar 29 15:45:37 2020
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
client1,192.168.1.148:54836,84372,5067,Sun Mar 29 15:40:23 2020
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
10.8.0.6,client1,192.168.1.148:54836,Sun Mar 29 15:43:03 2020
GLOBAL STATS
Max bcast/mcast queue length,0
END
