cannot save credentials to keychain

[GoogleCodeExporter]

logfile (system.log)
Jan  9 23:45:15 macmarc Tunnelblick[409]: Could not save username in Keychain 
'<KeyChain: 0x27f960>'
Jan  9 23:45:15 macmarc Tunnelblick[409]: Can't delete Keychain item for 
service = 'Tunnelblick-Auth-mmielke@fw' account = 'password' after finding it; 
status was -67701; error was 22:
    'Invalid argument'
Jan  9 23:45:15 macmarc Tunnelblick[409]: Can't add Keychain item for service = 
'Tunnelblick-Auth-mmielke@fw' account = 'password'; status was -25299; error 
was 2:

env:
Tunnelblick 3.2.1 (build 2891.2907)  -  OpenVPN 2.2.1
Darwin macmarc.private 11.2.0 Darwin Kernel Version 11.2.0: Tue Aug  9 20:54:00 
PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64 x86_64

Original issue reported on code.google.com by marc.mie...@gmail.com on 9 Jan 2012 at 11:02

[GoogleCodeExporter]

This is because you are using a modified version of a digitally-signed copy of 
Tunnelblick.app, probably a "Deployed" version.

If a digitally-signed application (such as Tunnelblick) is modified, the 
signature is invalidated and the application cannot modify the Keychain. The 
modification could have been done manually or by the automatic restoration of 
the "Deploy" folder from a backup.

Try updating to Tunnelblick 3.2.2. If your current 3.2.1 is Deployed, the 
update will be to an "unsigned" version of Tunnelblick, and you will be asked 
to give the updated version permission to use the Keychain.

See <a 
href="http://code.google.com/p/tunnelblick/wiki/cDigitalSignatures">Tunnelblick 
and Digital Signatures</a> for more details.

Original comment by jkbull...@gmail.com on 9 Jan 2012 at 11:46

• Added labels: Type-Other
• Removed labels: Type-Defect

[GoogleCodeExporter]

My earlier comment was WRONG -- there's a bug that makes Deployed versions of 
Tunnelblick update to the SIGNED instead of UNSIGNED version.

So the only way to fix your problem is to update Tunnelblick manually. To do 
that, you must download and install the "Unsigned" version of Tunnelblick. (It 
will replace the signed version you have now.)

Downloads are available at 
http://code.google.com/p/tunnelblick/wiki/DownloadsEntry?tm=2

Once you have an unsigned version (even 3.2.2), you will be running an unsigned 
version, which will update to unsigned versions.

Original comment by jkbull...@gmail.com on 10 Jan 2012 at 3:29

• Changed state: Started
• Added labels: Type-Defect
• Removed labels: Type-Other

[GoogleCodeExporter]

Fixes for this have been committed to the source code and will be included in 
the 3.2.3 update.

Original comment by jkbull...@gmail.com on 21 Jan 2012 at 8:00

• Changed state: Fixed