gco / tunnelblick

Automatically exported from code.google.com/p/tunnelblick
0 stars 0 forks source link

Untangle configuration not working out-of-box #210

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
NOTE: We suggest that you post on the Tunnelblick Discussion Group before
submitting an "Issue". (http://groups.google.com/group/tunnelblick-discuss)

What steps will reproduce the problem?
1.Create & download Untangle OVPN configuration
2. copy or create configuration for tunnelblick
3. configuration not working, it wont copy and similar

What is the expected output?

What do you see instead?

What version of Tunnelblick are you using? On what version of OS X?
Tunnelblick 3.2.6 (build 2891.3007)  -  OpenVPN 2.2.1
Mac OS X 10.5.8 build 9L31a

Please provide any additional information below. Please include your
configuration file and the contents of the OpenVPN Log window (including
the first few lines with version information), but remember to remove any
sensitive information such as IP addresses.

Untangle create structure explained below:
(folder)untangle-vpn
 - file.conf
 - file.ovpn
 -(folder)untangle-vpn
   -file-ca.crt
  - file-user.crt
  - file-user.key
Solution for working this is to copy file.ovpn, file-ca.crt, file-user.crt and 
file-user.key to same folder, and edit file.ovpn, search for lines 
cert untangle-vpn/file-user.crt
key untangle-vpn/file-user.key
ca untangle-vpn/file-ca.crt

and change it to:

cert file-user.crt
key file-user.key
ca file-ca.crt

It is IMPORTANT to delete file.conf because tunnelblick won't work with .conf & 
.ovpn file in one configuration.

Original issue reported on code.google.com by marjan.p...@gmail.com on 29 Jul 2012 at 8:03

GoogleCodeExporter commented 9 years ago
Thanks for the info on Untangle. Their configuration structure is similar to a 
"Tunnelblick VPN Configuration" (.tblk)[1], and a couple of simple changes to 
Tunnelblick's installation of .tblks would make using Untangle setups pretty 
simple:

     (1) Rename the Untangle setup folder to be ABCD.tblk (where ABCD is the name you want the configuration known by in Tunnelblick).

     (2) Double-click ABCD.tblk to have Tunnelblick install it. Tunnelblick will ask if it is to be shared or private, and then install the configuration after getting a computer admin's username/password. 

I would like to clarify one thing: why are there two configuration files? Are 
the files identical? Is file.conf for Windows and file.ovpn for *nix? If that's 
the case, Tunnelblick could special-case this situation and ignore file.conf if 
file.ovpn exists.

To deal with the keys being in a subfolder, what if Tunnelblick's .tblk 
installer were to modify references to the files that are in the configuration 
file to remove the subfolder prefix when it moves the key, cert, etc. files out 
of subfolder?

These are two relatively simple changes to make in Tunnelblick, and they would 
also help people who get similar  setups from the VPN service provider.

[1] 
http://code.google.com/p/tunnelblick/wiki/cConfigT#Creating_and_Installing_a_Tun
nelblick_VPN_Configuration

Original comment by jkbull...@gmail.com on 1 Aug 2012 at 4:59

GoogleCodeExporter commented 9 years ago
Tunnelblick 3.3beta28 contains the second change:  the configuration file is 
modified to remove any path prefix from references to key and certificate files 
(and script files, etc.). So the configuration file will properly refer to the 
files that are copied into the .tblk.

The first change (ignore .conf if .ovpn is available) is waiting confirmation 
that .conf is for Windows and .ovpn is for *nix. Anyone have any references 
that say that?

Original comment by jkbull...@gmail.com on 25 Oct 2012 at 12:55

GoogleCodeExporter commented 9 years ago
I will try tonight with .conf and with .ovpn and send you results

Original comment by marjan.p...@gmail.com on 25 Oct 2012 at 4:52

GoogleCodeExporter commented 9 years ago
Sorry, I forgot to test it. I have tested it yesterday and found what problem 
is... .ovpn is for *nix, and all files need to be in same folder, not in 
subfolders like untangle created

Original comment by marjan.p...@gmail.com on 20 Nov 2012 at 6:24

GoogleCodeExporter commented 9 years ago
Tunnelblick 3.3beta42 now deals with the subfolders properly.

However, it still complains if both a .ovpn and a .conf file are in a .tblk.

The solution is to delete the .conf file (or the .ovpn file, but from the above 
comments, apparently the .conf file is for Windows).

Original comment by jkbull...@gmail.com on 14 Apr 2013 at 3:05