i am using Tunnelblick 3.2.6 (build 2891.3007) for the ssl connection and I am getting the following issue
I connect fine and acquire ip but 3 seconds later the connection drops and tries to reconnect again.
The certificate are correct since I am able to connect fine in the first place but I am not sure why it disconnects. There is a beta version for mountain users: Beta release 3.3beta20 (build 3105) that may fixes quite few bugs
Relevant log below
2012-09-02 13:46:09 *Tunnelblick: OS X 10.8.1; Tunnelblick 3.2.6 (build 2891.3007)
2012-09-02 13:46:09 *Tunnelblick: Attempting connection with Astaro UTM; Set nameserver = 1; monitoring connection
2012-09-02 13:46:09 *Tunnelblick: /Applications/Tunnelblick.app/Contents/Resources/openvpnstart start Astaro\ UTM.ovpn 1337 1 0 0 0 49 -atDASNGWrdasngw
2012-09-02 13:46:09 *Tunnelblick: openvpnstart message: Loading tun.kext
2012-09-02 13:46:09 *Tunnelblick: Established communication with OpenVPN
2012-09-02 13:46:09 OpenVPN 2.2.1 i386-apple-darwin10.7.1 [SSL] [LZO2] [PKCS11] [eurephia] built on May 2 2012
2012-09-02 13:46:09 MANAGEMENT: TCP Socket listening on 127.0.0.1:1337
2012-09-02 13:46:09 Need hold release from management interface, waiting...
2012-09-02 13:46:09 MANAGEMENT: Client connected from 127.0.0.1:1337
2012-09-02 13:46:09 MANAGEMENT: CMD 'pid'
2012-09-02 13:46:09 MANAGEMENT: CMD 'state on'
2012-09-02 13:46:09 MANAGEMENT: CMD 'state'
2012-09-02 13:46:09 MANAGEMENT: CMD 'hold release'
2012-09-02 13:46:09 *Tunnelblick: openvpnstart: /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.2.1/openvpn --cd /Users/wingman/Library/Application Support/Tunnelblick/Configurations --daemon --management 127.0.0.1 1337 --config /Users/wingman/Library/Application Support/Tunnelblick/Configurations/Astaro UTM.ovpn --log /Library/Application Support/Tunnelblick/Logs/-SUsers-Swingman-SLibrary-SApplication Support-STunnelblick-SConfigurations-SAstaro UTM.ovpn.1_0_0_0_49.1337.openvpn.log --management-query-passwords --management-hold --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w -d -atDASNGWrdasngw --down /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m -w -d -atDASNGWrdasngw --up-restart
2012-09-02 13:46:19 MANAGEMENT: CMD 'username "Auth" "wingman"'
2012-09-02 13:46:19 MANAGEMENT: CMD 'password [...]'
2012-09-02 13:46:19 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
2012-09-02 13:46:19 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2012-09-02 13:46:19 LZO compression initialized
2012-09-02 13:46:19 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
2012-09-02 13:46:19 Socket Buffers: R=[131072->65536] S=[131072->65536]
2012-09-02 13:46:19 MANAGEMENT: >STATE:1346589979,RESOLVE,,,
2012-09-02 13:46:19 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
2012-09-02 13:46:19 Local Options hash (VER=V4): '958c5492'
2012-09-02 13:46:19 Expected Remote Options hash (VER=V4): '79ef4284'
2012-09-02 13:46:19 Attempting to establish TCP connection with 188.223.122.225:4443 [nonblock]
2012-09-02 13:46:19 MANAGEMENT: >STATE:1346589979,TCP_CONNECT,,,
2012-09-02 13:46:20 TCP connection established with 188.223.122.225:4443
2012-09-02 13:46:20 TCPv4_CLIENT link local: [undef]
2012-09-02 13:46:20 TCPv4_CLIENT link remote: 188.223.122.225:4443
2012-09-02 13:46:20 MANAGEMENT: >STATE:1346589980,WAIT,,,
2012-09-02 13:46:20 MANAGEMENT: >STATE:1346589980,AUTH,,,
2012-09-02 13:46:20 TLS: Initial packet from 188.223.122.225:4443, sid=8149148f 5bcdfd87
2012-09-02 13:46:20 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2012-09-02 13:46:21 VERIFY OK: depth=1, /C=gb/L=*****/O=*****/CN=*****_ClientAuth_CA/emailAddress=****@****.gr
2012-09-02 13:46:21 VERIFY X509NAME OK: /C=gb/L=*****/O=*****/CN=*****.dyndns.org
2012-09-02 13:46:21 VERIFY OK: depth=0, /C=gb/L=*****/O=*****/CN=*****.dyndns.org
2012-09-02 13:46:23 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2012-09-02 13:46:23 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2012-09-02 13:46:23 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2012-09-02 13:46:23 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2012-09-02 13:46:23 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2012-09-02 13:46:23 [*****.dyndns.org] Peer Connection Initiated with 188.223.122.225:4443
2012-09-02 13:46:25 MANAGEMENT: >STATE:1346589985,GET_CONFIG,,,
2012-09-02 13:46:26 SENT CONTROL [*****.dyndns.org]: 'PUSH_REQUEST' (status=1)
2012-09-02 13:46:26 PUSH: Received control message: 'PUSH_REPLY,route remote_host 255.255.255.255 net_gateway,redirect-gateway def1,dhcp-option DNS 192.168.2.100,dhcp-option DOMAIN intranet,route 10.242.2.1,topology net30,ping 10,ping-restart 120,ifconfig 10.242.2.6 10.242.2.5'
2012-09-02 13:46:26 OPTIONS IMPORT: timers and/or timeouts modified
2012-09-02 13:46:26 OPTIONS IMPORT: --ifconfig/up options modified
2012-09-02 13:46:26 OPTIONS IMPORT: route options modified
2012-09-02 13:46:26 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2012-09-02 13:46:26 ROUTE default_gateway=192.168.0.1
2012-09-02 13:46:26 TUN/TAP device /dev/tun0 opened
2012-09-02 13:46:26 MANAGEMENT: >STATE:1346589986,ASSIGN_IP,,10.242.2.6,
2012-09-02 13:46:26 /sbin/ifconfig tun0 delete
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
2012-09-02 13:46:26 NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure
2012-09-02 13:46:26 /sbin/ifconfig tun0 10.242.2.6 10.242.2.5 mtu 1500 netmask 255.255.255.255 up
2012-09-02 13:46:26 /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w -d -atDASNGWrdasngw tun0 1500 1560 10.242.2.6 10.242.2.5 init
No such key
2012-09-02 13:46:28 *Tunnelblick client.up.tunnelblick.sh: Retrieved name server(s) [ 192.168.2.100 ], domain name [ intranet ], and WINS server(s) [ ]
2012-09-02 13:46:28 *Tunnelblick client.up.tunnelblick.sh: Up to two 'No such key' warnings are normal and may be ignored
2012-09-02 13:46:28 *Tunnelblick client.up.tunnelblick.sh: Saved the DNS and WINS configurations for later use
2012-09-02 13:46:28 *Tunnelblick client.up.tunnelblick.sh: Set up to monitor system configuration with process-network-changes
2012-09-02 13:46:32 *Tunnelblick: Flushed the DNS cache
2012-09-02 13:46:32 /sbin/route add -net 188.223.122.225 192.168.0.1 255.255.255.255
add net 188.223.122.225: gateway 192.168.0.1
2012-09-02 13:46:32 /sbin/route add -net 0.0.0.0 10.242.2.5 128.0.0.0
add net 0.0.0.0: gateway 10.242.2.5
2012-09-02 13:46:32 /sbin/route add -net 128.0.0.0 10.242.2.5 128.0.0.0
add net 128.0.0.0: gateway 10.242.2.5
2012-09-02 13:46:32 MANAGEMENT: >STATE:1346589992,ADD_ROUTES,,,
2012-09-02 13:46:32 /sbin/route add -net 188.223.122.225 192.168.0.1 255.255.255.255
route: writing to routing socket: File exists
add net 188.223.122.225: gateway 192.168.0.1: File exists
2012-09-02 13:46:32 /sbin/route add -net 10.242.2.1 10.242.2.5 255.255.255.255
add net 10.242.2.1: gateway 10.242.2.5
2012-09-02 13:46:32 Initialization Sequence Completed
2012-09-02 13:46:32 MANAGEMENT: >STATE:1346589992,CONNECTED,SUCCESS,10.242.2.6,188.223.122.225
2012-09-02 13:46:33 *Tunnelblick process-network-changes: SearchDomains changed from
*
* to
* {
* 0 : intranet
* }
* pre-VPN was
*
2012-09-02 13:46:33 *Tunnelblick process-network-changes: SearchDomains changed; sending USR1 to OpenVPN (process ID 273) to restart the connection.
2012-09-02 13:46:34 event_wait : Interrupted system call (code=4)
2012-09-02 13:46:34 TCP/UDP: Closing socket
2012-09-02 13:46:34 /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m -w -d -atDASNGWrdasngw tun0 1500 1560 10.242.2.6 10.242.2.5 restart
2012-09-02 13:46:34 SIGUSR1[hard,] received, process restarting
2012-09-02 13:46:34 MANAGEMENT: >STATE:1346589994,RECONNECTING,SIGUSR1,,
2012-09-02 13:46:34 MANAGEMENT: CMD 'hold release'
2012-09-02 13:46:34 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
2012-09-02 13:46:34 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2012-09-02 13:46:34 Re-using SSL/TLS context
2012-09-02 13:46:34 LZO compression initialized
2012-09-02 13:46:34 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
2012-09-02 13:46:34 Socket Buffers: R=[131072->65536] S=[131072->65536]
2012-09-02 13:46:34 MANAGEMENT: >STATE:1346589994,RESOLVE,,,
2012-09-02 13:46:34 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
2012-09-02 13:46:34 Local Options hash (VER=V4): '958c5492'
2012-09-02 13:46:34 Expected Remote Options hash (VER=V4): '79ef4284'
2012-09-02 13:46:34 Attempting to establish TCP connection with 188.223.122.225:4443 [nonblock]
Thanks
This thread was automatically locked due to age.
