Closed GoogleCodeExporter closed 8 years ago
Please post your configuration file and complete log (restart Tunnelblick first
to clear out old info), X-ing out any sensitive info.
Also, please describe the VPN server/service that you are trying to connect to.
Original comment by jkbull...@gmail.com
on 24 Jan 2011 at 12:00
I'm trying to connect to AirVPN; here's the complete log:
2011-01-24 22:47:23 *Tunnelblick: OS X 10.4.11; Tunnelblick 3.1 (build 2190);
OpenVPN 2.1.4
2011-01-24 22:47:27 *Tunnelblick: Attempting connection with air; Set
nameserver = 1; monitoring connection
2011-01-24 22:47:27 *Tunnelblick:
/Applications/Tunnelblick.app/Contents/Resources/openvpnstart start air.ovpn
XXXX X X X X XX
2011-01-24 22:47:28 *Tunnelblick: kextload:
/Applications/Tunnelblick.app/Contents/Resources/tun.kext loaded successfully
2011-01-24 22:47:27 *Tunnelblick: openvpnstart:
/Applications/Tunnelblick.app/Contents/Resources/openvpn --cd
/Users/XXX/Library/Application Support/Tunnelblick/Configurations --daemon
--management XXX.X.X.X XXX --config /Users/XXX/Library/Application
Support/Tunnelblick/Configurations/air.ovpn --log
/tmp/tunnelblick/logs/-SUsers-SXXX-SLibrary-SApplication
Support-STunnelblick-SConfigurations-Sair.ovpn.X_X_X_X_XX.XXXX.openvpn.log
--management-query-passwords --management-hold --script-security 2 --up
/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -m -w
-d --down
/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -m
-w -d --up-restart
2011-01-24 22:47:28 OpenVPN 2.1.4 i386-apple-darwin10.5.0 [SSL] [LZO2] [PKCS11]
built on Dec 3 2010
2011-01-24 22:47:28 MANAGEMENT: TCP Socket listening on XXX.X.X.X XXX
2011-01-24 22:47:28 Need hold release from management interface, waiting...
2011-01-24 22:47:28 MANAGEMENT: Client connected from XXX.X.X.X XXX
2011-01-24 22:47:28 MANAGEMENT: CMD 'pid'
2011-01-24 22:47:28 MANAGEMENT: CMD 'state on'
2011-01-24 22:47:28 MANAGEMENT: CMD 'state'
2011-01-24 22:47:28 MANAGEMENT: CMD 'hold release'
2011-01-24 22:47:28 NOTE: the current --script-security setting may allow this
configuration to call user-defined scripts
2011-01-24 22:47:28 WARNING: file 'user.key' is group or others accessible
2011-01-24 22:47:28 LZO compression initialized
2011-01-24 22:47:28 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0
EL:0 ]
2011-01-24 22:47:28 Socket Buffers: R=[65535->65536] S=[65535->65536]
2011-01-24 22:47:28 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0
EL:0 AF:3/1 ]
2011-01-24 22:47:28 Local Options hash (VER=V4): '958c5492'
2011-01-24 22:47:28 Expected Remote Options hash (VER=V4): '79ef4284'
2011-01-24 22:47:28 Attempting to establish TCP connection with XXX.X.X.X XXX
[nonblock]
2011-01-24 22:47:28 MANAGEMENT: >STATE:1295880448,TCP_CONNECT,,,
2011-01-24 22:47:29 TCP: connect to XXX.X.X.X XXX failed, will try again in 5
seconds: Connection refused
2011-01-24 22:47:34 MANAGEMENT: >STATE:1295880454,TCP_CONNECT,,,
2011-01-24 22:47:35 TCP: connect to XXX.X.X.X XXX failed, will try again in 5
seconds: Connection refused
2011-01-24 22:47:40 MANAGEMENT: >STATE:1295880460,TCP_CONNECT,,,
2011-01-24 22:47:41 TCP: connect to XXX.X.X.X XXX failed, will try again in 5
seconds: Connection refused
Original comment by mackenzi...@gmail.com
on 24 Jan 2011 at 2:53
And here's the configuration file (including white space):
client
dev tun
proto tcp
remote XX.XX.XXX.XXX XXX
resolv-retry infinite
nobind
persist-key
persist-tun
ca "ca.crt"
cert "user.crt"
key "user.key"
ns-cert-type server
cipher AES-256-CBC
comp-lzo
verb 3
http-proxy XXX.X.X.X XXX
Original comment by mackenzi...@gmail.com
on 24 Jan 2011 at 2:56
The problem is "Connection refused" -- the server is not accepting your
connection. If you are using the free service, maybe they are "full" and not
accepting more connections. Things look OK from Tunnelblick's point of view
(although you are using an out-of-date version of Tunnelblick that has a
security vulnerability -- you should update it). (I assume the .ovpn was
obtained by AirVPN and is correct and complete.)
If you are using the free service, you might try asking in AirVPN's forums. If
you are paying for it, you should contact their tech support.
For a list of other VPN Service Providers (including a couple that are free),
see Tunnelblick's Getting VPN Service page at
http://code.google.com/p/tunnelblick/wiki/wGettingVPNService
Original comment by jkbull...@gmail.com
on 24 Jan 2011 at 4:01
Original comment by jkbull...@gmail.com
on 3 Feb 2011 at 10:19
Original issue reported on code.google.com by
mackenzi...@gmail.com
on 24 Jan 2011 at 10:15