 |
DESCRIPTION
Tunnelblick, formerly known as OpenVPN-GUI, is a simple graphical user interface for the great VPN software OpenVPN 2.0 or later. It is written in Cocoa and comes in a ready to use distribution with all necessary binaries and drivers. Versions of OpenVPN older than 2.0 are not supported, because they lack the management interface used by Tunnelblick. Please send feedback and suggestions to info@tunnelblick.net.
WHAT'S NEW
Version 3.0b24:
- New 'Monitor connection' checkbox in the OpenVPN Log window (defaults to checked). When checked, Tunnelblick monitors connection interfaces as it has since 3.0b18. When unchecked, Tunnelblick ignores connection interface changes, as version 3.0b10 did. This allows more users to use the latest version (some users couldn't because of repeated restarts caused by Tunnelblick detecting connection interface changes). Please note that OpenVPN itself restarts connections under certain circumstances. New scripts are used when 'Monitor connection' is not checked and 'Set DNS' is checked: client.nomonitor.up.osx.sh and client.nomonitor.down.osx.sh.
- New 'Options' submenu has entries to change commonly used preferences, check for updates, and view the 'About
' window.
- Tun/tap kernel extensions are loaded when Tunnelblick launches and unloaded when Tunnelblick quits.
- Configuration and other files are now located in ~/Library/Application Support/Tunnelblick/Configurations to conform to OS X standards. The ~/Library/openvpn folder is moved to this new location automatically during the first launch of Tunnelblick after updating to 3.0b24, and is replaced by a symbolic link to the new location. For details see http://groups.google.com/group/tunnelblick-discuss/t/d8f000d1e854b39d.
- Adds Catalā (Catalan) localization, thanks to Aleix Dorca.
- Additional Espaņol (Spanish) and Deutsch (German) localization, thanks to Diego Rivera and Markus Schneider, respectively.
- Adds OS X version information to the start of the OpenVPN Log.
- Adds configuration, 'Set nameserver', and 'Monitor connection' status to the OpenVPN Log before attempting to make a connection.
- Adds new Deployment features:
- Always restores the Resources/Deploy folder from a backup if it does not exist and a backup does. An entry is put in the Console Log, but no other user notification is made. (This happens after an auto-update without the Deploy folder.)
- Monitors Resources/Deploy (if it exists) for changes to configuration files.
- If Deploy contains only *.conf, *.oven, *.up.sh, *.down.sh, and forced-preferences.plist files, then the ~/Library/openvpn folder will be used for all other files (including other scripts).
- If 'Set nameserver' is checked and 'Monitor connection' is checked, then if Deploy/CONFIGNAME.up.sh exists, it will be used instead of Resources/client.up.osx.sh, and if Deploy/CONFIGNAME.down.sh exists, it will be used instead of Resources/client.down.osx.sh.
- If 'Set nameserver' is checked and 'Monitor connection' is not checked, then if Deploy/CONFIGNAME.nomonitor.up.sh exists, it will be used instead of Resources/client.nomonitor.up.osx.sh, and if Deploy/CONFIGNAME.nomonitor.down.sh exists, it will be used instead of Resources/client.nomonitor.down.osx.sh.
- If 'Set nameserver' is checked, then if the 'CONFIGNAME-useDownRootPlugin' preference is true, then Resources/openvpn-down-root.so will be used as a plugin for OpenVPN.
- Sets owner to root:wheel and permissions to 600 for .cer, .crt, .der, .key, .p12, .p7b, .p7c, .pem, and .pfx files in the Deploy folder.
- Adds new per-configuration preferences:
- 'CONFIGNAMEdisableEditConfiguration' is a boolean. If set, disables the 'Edit configuration' button. If cleared (the default), enables the button.
- 'CONFIGNAME-notMonitoringConnection' is a boolean. If present, its value reflects/is used for the 'Monitor connection' checkbox. Default is set.
- 'CONFIGNAME-useDownRootPlugin' is a boolean. If set, causes the 'openvpn-down-root.so' plugin to be loaded. If cleared (the default), the plugin is not loaded.
- Closing a connection, putting the computer to sleep, or quitting Tunnelblick may be delayed a few seconds while Tunnelblick waits for OpenVPN processes to terminate.
- Bug fixes: Fixes bug that sometimes caused authentication failures with usernames or passwords longer than 12 characters. Fixes bug that sometimes caused the 'Retry' button to be interpreted as 'Cancel' in the Authentication Failed dialog. Fixes bug that caused a connection attempt to fail with a 'script failed: could not execute external program' error if 'Set nameserver' is checked and there is a space character in the name of Tunnelblick.app or in the path to it. Fixes bug that caused 'Get Info' of Tunnelblick.app to show incorrect copyright information. Fixes bug that often caused loss of last few lines of OpenVPN Log before disconnecting. Fixes bug that sometimes caused problems restoring connections when awakening from sleep. Fixes bug that sometimes caused the Sparkle updater window to not appear on Snow Leopard. Fixes inconsistent logging of ownership/permissions repairs. Fixes bug that caused Tunnelblick to check for updates at launch even though preference to do so was cleared, not set. Fixes bug that ignored forced-preferences.plist when there was no configuration files in Deploy. Fixes bug with configuration files that are actually symbolic links. Fixes bug that didn't verify that ownership/permissions on Deploy contents copied correctly to backup. Complains with specific message in Console log if a configuration file needs repair but is locked. Fixes problems when a configuration file is a link.
Known Issues: - The standard scripts that "Set nameserver" uses handle DNS for most common setups. You must use custom scripts to do anything else. See the "Using Tunnelblick" wiki for details.
- Localization is not complete.
REQUIREMENTS
Mac OS X 10.4 or later.
| SCREENSHOT
|
|
 |
|  |
 | |  |
| Tunnelblick User Reviews (17 posts) | Write A Review |
 | Nov 2 2009 |
CHEESECAKE I've been using this excellent software for a while to connect to office server running openvpn on windows server 2003 without any problems. If using an opensource solution, I prefer to use freewares on both client and server ends. Other clients on osx are good as well, but I don't think it's a good idea to charge customers for enhanced features of a free solution.
(Version 3.0b20) | |
| [ Reply ] | |
 | May 27 2009 |
PLANBFOROPENOFFICE As of version 3.0b10 and Mac OS X 10.5.7 all works well. I run Tunnelblick very stable. So the comments below of it crashing or not working are obsolete. A big Thank you for a great free tool.
(Version 3.0b10) | |
| [ 1 Reply - Reply ] | |
Replies:
| Aug 6 2009 |
NEUTRALZONE No, the comments below were fair. After Viscosity changed from free to paid software, I actually returned to Tunnelblick for a while, used it for a few more months with an open mind, but yet again it let me down, while Viscosity fixed problems faster. And Viscosity is easily AppleScriptable, which was important to me. So I ended up actually paying for Viscosity and am happy with that. I have respect for the Tunnelblick project, but for my needs, paying for Viscosity was worth it. It is not the only instance in my life where paid software turned out to be worth it over free software in terms of the real costs and benefits. This post is not about pushing Viscosity, but about saying that the reservations expressed about Tunnelblick by multiple users are VALID.
(Version 3.0b12) | |
| Jul 28 2008 |
PIRX Works flawlessly and reliably for me for more than a year, using Witopia VPN. Brilliant app, good work. Upgrade Maniacs on Leopard may have lots of issues with many other softwares as well, so it is not fair hammer each one developer for compatibility issues.
(Version 3.0b9) | |
| [ Reply ] | |
| Jul 24 2008 |
NEUTRALZONE A day too late. I put up with Tunnelblick for months and just yesterday I switched to the new Viscosity, and I am amazed how much nicer and more stable it is.
(Version 3.0b9) | |
| [ Reply ] | |
| Jul 4 2008 |
OTTO_M The developer seems to have given up more than half a year ago. There is an alternative that works fine in Leopard: Viscosity 0.4 Viscosity imports Tunnelblick configurations and has been running without problems for almost a week now.
(Version 3.0b6) | |
| [ Reply ] | |
| Jun 26 2008 |
BUZZARD As with others, I am experiencing constant unexpected quits of Tunnelblick. So much so that the application is extremely frustrating to use. Unfortunately, I am using Witopia, and Witopia packages their paid VPN service with Tunnelblick. Accordingly, I have no other choice than to endure the constant instability of Tunnelblick. I am using OSX 10.5.3
(Version 3.0b6) | |
| [ 1 Reply - Reply ] | |
Replies:
 | Jul 16 2008 |
GOOFBALL Buzzard, there are some alternative options that you could try. For one, WiTopia now offer a free PPTP connection with every personlVPN subscription (http://witopia.net/pptpmore.html). PPTP works fine with OS X's built-in VPN-connector. Additionally, you could try Shimo (shareware, http://www.macupdate.com/info.php/id/22929/shimo) which has proven to be an excellent VPN client and works great with OpenVPN (same VPN-technology used by Tunnelblick) as well as PPTP. Simply import your WiTopia profile (located at ~/Library/openvpn/openvpn.conf) and Shimo will automatically add the necessary keys and certificates (provided you have already installed WiTopia's Tunnelblick package). There also is another OpenVPN client for Mac called Viscosity (freeware, http://www.macupdate.com/info.php/id/27875/viscosity). But I haven't tried this one yet since I use Shimo. Therefore, I can't tell you whether it works well with WiTopia. Since it's free you might want to try it first though. Judging from it's MacUpdate comments it also does a fine job of importing Tunnelblick profiles. BTW, I'm not associated with any of these products, just a satisfied customer of both WiTopia and Shimo.
(Version 3.0b6) | |
 | Mar 2 2008 |
XAD hang on leopard, please fix it!
(Version 3.0b6) | |
| [ Reply ] | |
| Feb 9 2008 |
CHRISTOPH3 Same here. Tunnelblick dies and creates hung ovpn processes.
(Version 3.0b6) | |
| [ Reply ] | |
| Nov 12 2007 |
PSYCHOS Tunnelblick unexpectedly quits for me sometimes. This seems to happen when changing network connections, but not always. (I'm semi-frequently switching between my Airport and an EV-DO card.) When it happens, it leaves behind a stray openvpn process that I have to manually kill before I can establish another VPN connection. Tunnelblick will actually establish a new connection successfully, but it will be unusable unless I've killed the old openvpn process first. I'm running 10.5 on a MBP, clean install. Worked fine under 10.4. Anyone else experiencing this under 10.5?
(Version 3.0b6) | |
| [ Reply ] | |
| Oct 29 2007 |
CHRISTOPH3 Set nameserver is broken with 10.5.
(Version 3.0b5) | |
| [ Reply ] | |
|
| View all 17 posts >> |
|
