Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Tunnelblick Mac VPN...

Trying to connect to a new XG firewall. I have already setup 2 other XG firewalls but this one is problematic...

I download the ovpn config from the user portal and install it to tunnelblick but when I try and connect it sits there waiting forever for a password. 

I tested on Win10 and it prompts for a login and works fine.

Not getting any kind of login prompt on my mac. 

Here is the log...

====================

2016-03-25 15:57:21 OpenVPN 2.3.10 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on Mar 19 2016
2016-03-25 15:57:21 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.09
2016-03-25 15:57:21 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:1337
2016-03-25 15:57:21 Need hold release from management interface, waiting...
2016-03-25 15:57:21 *Tunnelblick: OS X 10.11.2; Tunnelblick 3.6.0a (build 4543.4546); prior version 3.5.8 (build 4270.4530)
2016-03-25 15:57:21 *Tunnelblick: Attempting connection with rcapra@hh6434.webhop.net; Set nameserver = 1; monitoring connection
2016-03-25 15:57:21 *Tunnelblick: openvpnstart start rcapra@hh6434.webhop.net.tblk 1337 1 0 3 0 1065264 -ptADGNWradsgnw 2.3.10
2016-03-25 15:57:22 *Tunnelblick: openvpnstart log:
OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.10/openvpn
--daemon
--log
/Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Srcapra@hh6434.webhop.net.tblk-SContents-SResources-Sconfig.ovpn.1_0_3_0_1065264.1337.openvpn.log
--cd
/Library/Application Support/Tunnelblick/Shared/rcapra@hh6434.webhop.net.tblk/Contents/Resources
--verb
3
--config
/Library/Application Support/Tunnelblick/Shared/rcapra@hh6434.webhop.net.tblk/Contents/Resources/config.ovpn
--cd
/Library/Application Support/Tunnelblick/Shared/rcapra@hh6434.webhop.net.tblk/Contents/Resources
--management
127.0.0.1
1337
--management-query-passwords
--management-hold
--script-security
2
--up
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
--down
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

2016-03-25 15:57:21 *Tunnelblick: openvpnstart starting OpenVPN
2016-03-25 15:57:22 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:1337
2016-03-25 15:57:22 *Tunnelblick: Established communication with OpenVPN
2016-03-25 15:57:22 *Tunnelblick: Obtained VPN username and password from the Keychain
2016-03-25 15:57:22 MANAGEMENT: CMD 'pid'
2016-03-25 15:57:22 MANAGEMENT: CMD 'state on'
2016-03-25 15:57:22 MANAGEMENT: CMD 'state'
2016-03-25 15:57:22 MANAGEMENT: CMD 'bytecount 1'
2016-03-25 15:57:22 MANAGEMENT: CMD 'hold release'
2016-03-25 15:57:22 MANAGEMENT: CMD 'username "Auth" ""'
2016-03-25 15:57:22 MANAGEMENT: CMD 'password [...]'
2016-03-25 15:58:27 *Tunnelblick: Disconnecting; notification window disconnect button pressed
2016-03-25 15:58:28 *Tunnelblick: No 'pre-disconnect.sh' script to execute
2016-03-25 15:58:28 *Tunnelblick: Disconnecting using 'kill'
2016-03-25 15:58:28 MANAGEMENT: Client disconnected
2016-03-25 15:58:28 ERROR: could not read Auth username/password/ok/string from management interface
2016-03-25 15:58:28 Exiting due to fatal error
2016-03-25 15:58:29 *Tunnelblick: No 'post-disconnect.sh' script to execute
2016-03-25 15:58:29 *Tunnelblick: Expected disconnection occurred.

====================

Please help.

Thaks,

Rocco



This thread was automatically locked due to age.
  • NM

    Found a solution on the tunnelblick forum...

    =====

    Until that's done, you can "repair" a renamed configuration with the following three commands typed into Terminal:

    defaults delete net.tunnelblick.tunnelblick XXXXXX-keychainHasPrivateKey

    defaults delete net.tunnelblick.tunnelblick XXXXXX-keychainHasUsername

    defaults delete net.tunnelblick.tunnelblick XXXXXX-keychainHasUsernameAndPassword

    where XXXXXX is the configuration name after the rename.