News About Tunnelblick
2024-04-04: Tunnelblick 5.0.1beta01 is available for download
Changes from 5.0.0beta02 to 5.0.1beta01
- Complains and quits Tunnelblick if the user has disabled a background program it requires.
- Updates localization.
- Fixes macOS misidentifying a Tunnelblick background program as "Jonathan Bullard".
- Fixes Tunnelblick problems that caused connection retries to happen too often, sometimes locking up Tunnelblick.
- Fixes a problem installing Tunnelblick VPN Configurations that contain an OpenVPN configuration file not named "config.ovpn".
2024-03-12: Tunnelblick 4.0.1 and 5.0.0beta02 are available for download
Changes from 5.0.0beta01 to 5.0.0beta02
- Fixes a problem that caused the loss of the local DNS configuration on disconnection (Issue 789).
- Fixes a problem that caused Tunnelblick to fail to launch automatically at login.
Changes from 4.0.0 to 4.0.1
- Fixes a problem that caused the loss of the local DNS configuration on disconnection (Issue 789).
- Fixes a problem that caused Tunnelblick to fail to launch automatically at login.
See Tunnelblick 4 for more information.
2024-03-08: Tunnelblick 4.0.0 and 5.0.0beta01 are available for download
Changes from 4.0.0beta16 to 5.0.0beta01 (SECURITY UPDATE)
Changes from 3.8.8g to 4.0.0 (SECURITY UPDATE)
- Adds support for client-pending-auth with WEB_AUTH.
- Adds commands to install private and shared configurations from the command line.
- Changes the versions of OpenVPN/OpenSSL that are included.
- Changes the default version of OpenVPN/OpenSSL used for connecting.
- Includes several other improvements and fixes many problems.
See Tunnelblick 4 for more information.
2024-02-27: Tunnelblick 4.0.0beta16 is available for download
Changes from 3.8.8f to 3.8.8g (SECURITY UPDATE)
- Fixes a security vulnerability when installing Tunnelblick.
- Fixes a problem when no OpenVPN "dhcp-option: options are specified and Tunnelblick's "Monitor network settings" is checked.
- Fixes problems loading system extensions automatically.
2024-02-12: Tunnelblick 4.0.0beta15 is available for download
Changes from 3.8.8f to 3.8.8g (SECURITY UPDATE)
- Defaults to use OpenVPN 2.6 and OpenSSL 3.0 instead of OpenVPN 2.5 and OpenSSL 1.1.1.
- Includes OpenVPN 2.6.9, replacing 2.6.8. See Changes in OpenVPN 2.6.
- Allows disabling IPv6 and/or secondary network services even if no dhcp-option is specified.
- Fixes a problem when Tunnelblick is not installed by double-clicking.
2023-12-03: Tunnelblick 3.8.8g is available for download
Changes from 3.8.8f to 3.8.8g (SECURITY UPDATE)
- Fixes a problem running Tunnelblick's privileged helper.
2023-11-29: Tunnelblick 3.8.8f is available for download
Changes from 3.8.8e to 3.8.8f (SECURITY UPDATE)
- Fixes several problems installing configurations and installing and running Tunnelblick.
2023-11-21: Tunnelblick 4.0.0beta13 is available for download
Changes from 4.0.0beta12 to 4.0.0beta13 (SECURITY UPDATE)
- Fixes a problem installing configurations.
2023-11-19: Tunnelblick 4.0.0beta12 is available for download
Changes from 4.0.0beta11 to 4.0.0beta12 (SECURITY UPDATE)
- Includes OpenVPN 2.6.8, replacing 2.6.6. See Changes in OpenVPN 2.6.
- Enables the 'Copy Diagnostic Info to Clipboard' button even if there are no configurations.
- Always requires administrator authorization to add or modify an OpenVPN configuration file that has an 'client-crresponse' option.
- Includes OpenVPN 2.4.12, 2.5.9, and 2.6.8 with OpenSSL 1.1.1w, and OpenVPN 2.6.8 with OpenSSL 3.0.12.
2023-11-05: Tunnelblick 4.0.0beta11 is available for download
Changes from 4.0.0beta10 to 4.0.0beta11 (SECURITY UPDATE)
- Fixes a problem installing or securing configurations.
2023-10-25: Tunnelblick 3.8.8e and 4.0.0beta10 are available for download
Changes from 4.0.0beta09 to 4.0.0beta10 (SECURITY UPDATE)
- Includes OpenSSL 3.0.12, replacing 3.0.10. See OpenSSL 3.0 Series Release Notes for details.
- Adds support for client-pending-auth with WEB_AUTH.
- Runs only on macOS 10.13 and later.
Changes from 3.8.8d to 3.8.8e (SECURITY UPDATE)
- Fixes several problems installing and running Tunnelblick.
- Runs only on macOS 10.13 and later.
2023-09-11: Tunnelblick 4.0.0beta09 is available for download
Changes from 4.0.0beta08 to 4.0.0beta09 (SECURITY UPDATE)
- Includes OpenVPN 2.6.6, replacing 2.6.5, and OpenSSL 1.1.1w, replacing 1.1.1v.
- Includes the installer log in the Diagnostic Info.
- Updates localization.
- Fixes several problems.
2023-08-05: Tunnelblick 3.8.8d and 4.0.0beta08 are available for download
Changes from 4.0.0beta06 to 4.0.0beta08 (SECURITY UPDATE)
Changes from 3.8.8b to 3.8.8d (SECURITY UPDATE)
2023-08-02: Tunnelblick 3.8.8c and 4.0.0beta07 and 3.5.26 are available for download
Changes from 4.0.0beta06 to 4.0.0beta07 (SECURITY UPDATE)
Changes from 3.8.8b to 3.8.8c (SECURITY UPDATE)
Changes from 3.5.25 to 3.5.26 (SECURITY UPDATE)
- Fixes several security vulnerabilities. See Assisted Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities.
- Includes lzo 2.10, replacing 2.08.
- Warns that updated or modified configurations may run scripts.
- Discontinues migrating old file layout to "new" (new 10 years ago) layout.
- Discontinues converting .ovpn and .conf files found in Tunnelblick's standard folder to Tunnelblick VPN Configurations.
2023-06-04: Tunnelblick 3.8.8b and 4.0.0beta06 are available for download
Changes from 4.0.0beta05 to 4.0.0beta06 (SECURITY UPDATE)
Changes from 3.8.8a to 3.8.8b (SECURITY UPDATE)
2023-05-05: Tunnelblick 4.0.0beta05 is available for download
Changes from 4.0.0beta04 to 4.0.0beta05
- Adds OpenVPN 2.6.3 with OpenSSL 3.0.8.
- Removes OpenVPN 2.3.18, OpenSSL 1.0, and LibreSSL.
- Adds the "install private configurations" AppleScript command.
- Truncates the OpenVPN log if it becomes too large (GitHub Issue #739).
- Fixes several problems.
2023-04-24: Tunnelblick 4.0.0beta04 is available for download
Changes from 4.0.0beta03 to 4.0.0beta04
2023-04-23: Tunnelblick 4.0.0beta03 is available for download
Changes from 4.0.0beta02 to 4.0.0beta03
- Includes OpenVPN 2.6.3, replacing 2.6.0. See Changes in OpenVPN 2.6.
- Fixes a problem installing configurations with 'up' commands that run binary executables instead of scripts (GitHub Issue #726).
- Fixes a problem that caused the Tunnelblick login item to be shown as being from an unidentified developer on macOS Ventura (GitHub Issue #742).
- Fixes a problem that caused the display of long configuration names to be truncated (GitHub Issue #744).
- Updates localization.
2023-02-16: Tunnelblick 3.8.8a and 4.0.0beta02 are available for download
Changes from 3.8.8beta04 to 4.0.0beta02
- Fixes a problem on Apple Silicon Macs that do not have Rosetta 2 installed.
- Includes OpenSSL 1.1.1t, replacing 1.1.1o. See OpenSSL 1.1.1 Change Log.
- Includes OpenVPN 2.5.9, replacing 2.5.6. See Changes in OpenVPN 2.5.9.
- Includes OpenVPN 2.6.0. See Changes in OpenVPN 2.6.
- Does not need TAP device driver; uses macOS built-in driver instead.
- Fixes a misleading error message.
Changes from 3.8.7a to 3.8.8a
2023-02-15: Tunnelblick 3.8.8 and 4.0.0beta01 are available for download
Changes from 3.8.8beta04 to 4.0.0beta01
Changes from 3.8.7a to 3.8.8
2022-05-05: Tunnelblick 3.8.8beta04 is available for download
Changes from 3.8.8beta03 to 3.8.8beta04 (SECURITY UPDATE)
See the Release Notes for details.
2021-12-23: Tunnelblick 3.8.8beta03 is available for download
Changes from 3.8.8beta02 to 3.8.8beta03
- Includes OpenSSL 1.1.1m, replacing 1.1.1l, and OpenVPN 2.5.5, replacing 2.5.4.
- Includes a new checkbox, "Disable secondary network interfaces".
- Always includes OpenSSL 2.3.18; running Tunnelblick in Rosetta is no longer required.
- Includes other enhancements.
See the Release Notes for details.
2021-11-30: Tunnelblick 3.8.7a and 3.8.8beta02 are available for download
Changes from 3.8.7beta03 to 3.8.8beta02 (SECURITY UPDATE)
- Enhances the security of access to the OpenVPN management interface.
- Fixes problems displaying some warnings in dark mode.
- Fixes two problems in 3.8.8beta01.
Changes from 3.8.6a to 3.8.7a (SECURITY UPDATE)
- Enhances the security of access to the OpenVPN management interface.
- Updates OpenVPN to version 2.5.4 from version 2.5.3. (Also includes 2.3.18 and 2.4.11.)
- Shows the login window on all spaces.
- Includes many other improvements and fixes several problems.
See the Release Notes for details.
2021-11-28: Tunnelblick 3.8.7 and 3.8.8beta01 are available for download
Changes from 3.8.7beta03 to 3.8.8beta01 (SECURITY UPDATE)
- Enhances the security of access to the OpenVPN management interface.
- Fixes problems displaying some warnings in dark mode.
Changes from 3.8.6a to 3.8.7 (SECURITY UPDATE)
- Enhances the security of access to the OpenVPN management interface.
- Updates OpenVPN to version 2.5.4 from version 2.5.3. (Also includes 2.3.18 and 2.4.11.)
- Shows the login window on all spaces.
- Includes many other improvements and fixes several problems.
See the Release Notes for details.
2021-10-30: Tunnelblick 3.8.7beta03 is available for download
Changes from 3.8.7beta02 to 3.8.7beta03
- Updates OpenVPN to version 2.5.4 from version 2.5.3. (Also includes 2.3.18 and 2.4.11.)
- Shows the login window on all spaces.
- Fixes a problem that prevented loading of kexts on macOS Monterey.
- Fixes problems that caused Tunnelblick to crash or hang.
See the Release Notes for details.
2021-09-01: Tunnelblick 3.8.6a and 3.8.7beta02 are available for download
Changes from 3.8.7beta01 to 3.8.7beta02 (SECURITY UPDATE)
- Fixes a problem that caused Tunnelblick to crash.
Changes from 3.8.6 to 3.8.6a (SECURITY UPDATE)
- Fixes a problem that caused Tunnelblick to crash.
See the Release Notes for details.
2021-08-24: Tunnelblick 3.8.6 and 3.8.7beta01 are available for download
Changes from 3.8.6beta06 to 3.8.7beta01 (SECURITY UPDATE)
- Updates OpenSSL to 1.1.1l from 1.1.1k. See OpenSSL Security Advisory 24 August 2021.
- Sets the initial focus of the VPN login window to the security token text field if the password is filled in.
- Fixes a problem that caused configurations to be disabled when first installed.
Changes from 3.8.5a to 3.8.6 (SECURITY UPDATE)
- Changes the default version of OpenVPN from 2.4 to 2.5.
- Updates OpenSSL to 1.1.1l from 1.1.1k. See OpenSSL Security Advisory 24 August 2021.
- Updates OpenVPN versions to 2.5.3 and 2.4.11.
- Allows security codes to be appended to passwords.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2021-08-17: Tunnelblick 3.8.6beta06 is available for download
Changes from 3.8.6beta05 to 3.8.6beta06
- PREVIEW: For testing only. Runs natively on M1 and Intel Macs.
- Fixes a failure to run post-disconnect.sh scripts when Tunnelblick shuts down.
- Fixes a problem that caused updates to fail.
2021-06-26: Tunnelblick 3.8.6beta05 is available for download
Changes from 3.8.6beta04 to 3.8.6beta05
- PREVIEW: For testing only. Runs natively on M1 and Intel Macs.
- Fixes a bug that can cause undefined behavior.
2021-06-19: Tunnelblick 3.8.6beta04 is available for download
Changes from 3.8.6beta03 to 3.8.6beta04
- PREVIEW: For testing only. Runs natively on M1 and Intel Macs.
- Replaces OpenVPN 2.5.2 with 2.5.3.
- Changes the default version of OpenVPN from 2.4 to 2.5.
- Allows the new "auth-token-user" OpenVPN option.
- Includes additional debugging information.
2021-04-22: Tunnelblick 3.8.6beta03 is available for download
Changes from 3.8.6beta02 to 3.8.6beta03 (SECURITY UPDATE)
- Fixes a problem retrieving saved usernames and passwords.
2021-04-21: Tunnelblick 3.8.5a and 3.8.6beta02 are available for download
Changes from 3.8.6beta01 to 3.8.6beta02 (SECURITY UPDATE)
- Updates Openvpn 2.5.1 to 2.5.2. See Overview of changes in 2.5.2 for details.
- Updates Openvpn 2.4.10 to 2.4.11. See Overview of changes in 2.4.11 for details.
- Optionally allows the code from an authentication device to be entered in the VPN login window with the username and password.
Changes from 3.8.5 to 3.8.5a (SECURITY UPDATE)
See the Release Notes for details.
2021-04-11: Tunnelblick 3.8.5 and 3.8.6beta01 are available for download
Changes from 3.8.5beta06 to 3.8.6beta01
- If a fatal error occurs in a beta version of Tunnelblick, macOS will force quit Tunnelblick without notifying the user. On the next launch of Tunnelblick the user will be asked to email extended diagnostic data to the developers.
- Includes cosmetic changes to Tunnelblick's copyright notice and credits.
- Updates translations.
Changes from 3.8.4b to 3.8.5
- Requires macOS 10.10 or higher.
- Updates OpenVPN, LZ4, and PKCS11.
- Runs OpenVPN and Tunnelblick's system extensions as a native programs on M1 and Intel-64 processors. The Tunnelblick application runs as a native program on Intel-64 processors, and runs under Rosetta 2 on M1 processors.
- Includes many other improvements and fixes several problems.
See the Release Notes for details.
2021-04-02: Tunnelblick 3.8.4b and 3.8.5beta06 are available for download
Changes from 3.8.5beta05 to 3.8.5beta06 (SECURITY UPDATE)
- Updates OpenSSL to 1.1.1k from 1.1.1j. See OpenSSL Security Advisory 25 March 2021.
- Updates the list of 'safe' OpenVPN options.
- Updates translations.
- Fixes a problem that caused settings to be changed when disconnecting.
- Fixes a problem that caused the wrong log to be displayed.
Changes from 3.8.4a to 3.8.4b (SECURITY UPDATE)
2021-02-25: Tunnelblick 3.8.5beta05 is available for download
Changes from 3.8.5beta04 to 3.8.5beta05
- Replaces OpenVPN 2.5.0 with 2.5.1. See Overview of changes in 2.5.1.
- Runs OpenVPN and Tunnelblick's system extensions as a native programs on M1 and Intel-64 processors. The Tunnelblick application runs as a native program on Intel-64 processors, and runs under Rosetta 2 on M1 processors.
- Updates translations.
- Fixes a problem that caused tabs or buttons in the 'VPN Details' window to be only partially visible.
2021-02-19: Tunnelblick 3.8.5beta04 is available for download
Changes from 3.8.5beta03 to 3.8.5beta04
- Replaces OpenSSL 1.1.1i with 1.1.1j. See OpenSSL Security Advisory 16 February 2021.
- Tunnelblick's system extensions run as a native programs on M1 and Intel-64 processors. The Tunnelblick application and OpenVPN run as a native program on Intel-64 processors, and run under Rosetta 2 on M1 processors.
- Updates translations.
- Fixes a problem that caused the Tunnelblick application to crash.
- Fixes bad links in warnings.
2021-02-11: Tunnelblick 3.8.5beta03 is available for download
Changes from 3.8.5beta02 to 3.8.5beta03
- Tunnelblick and OpenVPN are now universal binaries and run as native programs on both Intel-64 and M1 processors.
- Includes a new 'Install system extensions' button on the Utilities panel which facilitates installing system extensions on macOS Big Sur if they are required.
- Includes other enhancements and fixes several problems.
2020-12-14: Tunnelblick 3.8.4a and 3.8.5beta02 are available for download
Changes from 3.8.4 to 3.8.4a (SECURITY UPDATE)
- Updates OpenSSL to version 1.1.1i from 1.1.1h.
Changes from 3.8.5beta01 to 3.8.5beta02 (SECURITY UPDATE)
- Updates OpenVPN, OpenSSL, LZ4, and PKCS11.
- Includes an "Uninstall" button.
- Fixes several problems that caused hangs or crashes.
- Includes other enhancements and fixes other problems.
2020-11-09: Tunnelblick 3.8.4 and 3.8.5beta01 are available for download
Changes from 3.8.4beta07 to 3.8.5beta01
- Updates localization.
- Fixes a problem showing information about loading Tunnelblick system extensions.
Changes from 3.8.3a to 3.8.4
- Ready for macOS 11 'Big Sur'.
- Includes updated versions of OpenVPN, OpenSSL, PKCS11, and LZ4.
- Includes many improvements and fixes several bugs.
2020-11-01: Tunnelblick 3.8.4beta07 is available for download
Changes from 3.8.4beta06 to 3.8.4beta07
- Includes OpenVPN 2.5.0, replacing 2.5 Release Candidate 3.
- Notes when a kext failed to load because the user did not give macOS permission to load it.
- Checks ownership and permissions of /Library/LaunchDaemons.
- Includes other enhancements and fixes several problems.
2020-10-19: Tunnelblick 3.8.4beta06 is available for download
Changes from 3.8.4beta05 to 3.8.4beta06
- Includes OpenVPN 2.5 Release Candidate 3, replacing OpenVPN Release Candidate 2.
- Disables checking for IP address changes after five successful connections to a VPN. (Checking is easily re-enabled.)
- Includes updated translations.
2020-09-23: Tunnelblick 3.8.4beta05 is available for download
Changes from 3.8.4beta04 to 3.8.4beta05 (SECURITY UPDATE)
- Includes OpenVPN 2.5 Release Candidate 1, replacing OpenVPN 2.5 Beta 4.
- Includes OpenSSL 1.1.1h, replacing 1.1.1g.
- Includes a new 'Warnings' menu to display warnings without disturbing your workflow. The presence of warnings is indicated by a caution symbol on the Tunnelblick icon in the menu bar.
- Includes updated translations.
2020-09-12: Tunnelblick 3.8.4beta04 is available for download
Changes from 3.8.4beta03 to 3.8.4beta04 (SECURITY UPDATE)
2020-09-07: Stable versions of Tunnelblick to include only officially released versions of OpenVPN
Effective with the next release, stable versions of Tunnelblick will include only released versions of OpenVPN.
Our prior practice was to include a recent publicly-available but unreleased version of OpenVPN along with the current released version of OpenVPN and an old version which is required by some users to connect to older VPN servers. This practice will continue for beta versions of Tunnelblick.
If you require OpenVPN 2.5, you can set up Tunnelblick to update to the current beta version of OpenVPN. The setting to do that is on the "Preferences" panel of Tunnelblick's "VPN Details" window. We expect that the next stable version of Tunnelblick will make this change for you automatically.
2020-09-07: Tunnelblick 3.8.3a is available for download
Changes from 3.8.3 to 3.8.3a (SECURITY UPDATE)
- Includes OpenVPN 2.5 Beta 3, replacing OpenVPN 2.5 git master cc76e177 dated 2020-05-19.
2020-09-03: Tunnelblick 3.8.4beta03 is available for download
Changes from 3.8.4beta02 to 3.8.4beta03
- Replaces OpenVPN 2.5_beta1 with 2.5_beta3 (see Overview of changes in 2.5).
- Removes the OpenSSL 1.0.2 version of OpenVPN 2.5. OpenSSL 1.0.2 is included only in OpenVPN 2.3 and 2.4.
- Removes pkcs#11 support from OpenVPN 2.3. pkcs#11 support is included only in OpenVPN 2.4 and 2.5 using OpenSSL 1.1.
- Updates pkcs11-helper to version 1.26 from 1.22.
See the Release Notes for details.
2020-08-18: Tunnelblick 3.8.4beta02 is available for download
Changes from 3.8.4beta01 to 3.8.4beta02
- Includes OpenVPN 2.5_beta1 (see Overview of changes in 2.5).
- Updates handling of system extensions (kexts) on macOS Big Sur.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2020-07-24: Tunnelblick 3.8.3 and 3.8.4beta01 are available for download
Changes from 3.8.3beta03 to 3.8.4beta01
- Updates lz4 to version 1.9.2 from version 1.8.1.2.
- Updates translations.
Changes from 3.8.2a to 3.8.3
- Adds the ability to create, delete, and rename folders containing configurations, and to copy and move these folders and configurations using drag and drop.
- Includes updated versions of OpenVPN and OpenSSL.
- Allows scripts to set or modify the VPN password before it is sent to OpenVPN.
- Includes other enhancements and fixes many problems.
See the Release Notes for details.
2020-07-16: Tunnelblick 3.8.3beta03 is available for download
Changes from 3.8.3beta02 to 3.8.3beta03
- Fixes problems on macOS Big Sur.
- Includes enhancements and fixes several other problems.
See the Release Notes for details.
2020-05-22: Tunnelblick 3.8.2a and 3.8.3beta02 are available for download
Changes from 3.8.3beta01 to 3.8.3beta02 (SECURITY UPDATE)
- Adds the ability to create, delete, move, and rename folders containing configurations, and to move and copy configurations into and out of folders using drag and drop.
- Replaces OpenVPN 2.4.8 with 2.4.9. See Changes in OpenVPN v2.4.
- Replaces OpenSSL 1.1.1e with 1.1.g. See OpenSSL 1.1.1 Release Notes.
- Includes many other enhancements and fixes several problems.
Changes from 3.8.2 to 3.8.2a (SECURITY UPDATE)
See the Release Notes for details.
2020-03-22: Tunnelblick 3.8.2 and 3.8.3beta01 are available for download
Changes from 3.8.2beta07 to 3.8.3beta01
- Clarifies pop-up help for 'Connect when computer starts'.
- Includes updated translations.
Changes from 3.8.1 to 3.8.2 (SECURITY UPDATE)
See the Release Notes for details.
2020-03-17: Tunnelblick 3.8.2beta07 is available for download
Changes from 3.8.2beta06 to 3.8.2beta07 (SECURITY UPDATE)
2020-03-12: Tunnelblick 3.8.2beta06 is available for download
Changes from 3.8.2beta05 to 3.8.2beta06
- Built on macOS 10.11.6 with Xcode 7.3.1.
- Fixes problems causing fatal errors.
2020-03-05: Updates to Tunnelblick 3.8.2beta05 deactivated
Several reports of crashes involving Tunnelblick 3.8.2beta05 have been reported, so updating to that version has been deactivated and updates to 3.8.2beta04 have been reactivated.
Tunnelblick 3.8.2beta04, which does not appear to have this problem, is available on the Deprecated Downloads page.
Tunnelblick 3.8.2beta05 is available on the Downloads page.
2020-02-29: Tunnelblick 3.8.2beta05 is available for download
Changes from 3.8.2beta04 to 3.8.2beta05
- Includes OpenVPN 2.5 git master 32723d2 dated 2020-02-20.
- Built on macOS 10.14.6 with Xcode 10.3.
- Ignores invisible files and folders when updating configurations.
- Includes better logging when updating configurations.
- Fixes problems using non-Tunnelblick OpenVPN binaries.
2020-01-30: Tunnelblick 3.8.2beta04 is available for download
Changes from 3.8.2beta03 to 3.8.2beta04
- Allows the use of custom OpenVPN binaries.
- Includes better logging of problems when updating configurations.
- Includes updated localization.
- Fixes several problems.
See the Release Notes for details.
2019-12-20: Tunnelblick 3.8.2beta03 is available for download
Changes from 3.8.2beta02 to 3.8.2beta03 (SECURITY UPDATE)
See the Release Notes for details.
2019-11-01: Tunnelblick 3.8.2beta02 is available for download
Changes from 3.8.2beta01 to 3.8.2beta02
- Includes OpenVPN 2.4.8 (changes), OpenVPN 2.5 at git master commit 57623b4 dated 2019-10-28, and OpenVPN 2.3.18.
- No longer warns about out-of-date builds.
- Includes updated localization and adds a partial Thai translation.
- Fixes a problem that briefly showed overlapping contents when switching panels of the 'VPN Details' window.
2019-09-11: Tunnelblick 3.8.1 and 3.8.2beta01 are available for download
Changes from 3.8.1beta02 to 3.8.2beta01 (SECURITY UPDATE)
Changes from 3.8.0 to 3.8.1 (SECURITY UPDATE)
- Includes OpenSSL 1.0.2t and 1.1.1d. See OpenSSL Security Advisory 10 September 2019.
- Includes OpenVPN git master d42f070 dated 2019-08-18.
- Warns about two or more simultaneous connections with at least one set to use 'Set nameserver'.
- Includes updated translations.
- Fixes Issue 564 Catastrophic error: Could not create a temporary directory.
- Fixes misspelling of founder Angelo Laub's name in the credits (!).
2019-09-05: Tunnelblick 3.8.1beta02 is available for download
Changes from 3.8.1beta01 to 3.8.1beta02
- Replaces OpenVPN git master 2.5 ccb636c with d42f070 dated 2019-08-18.
- Warns about two or more simultaneous connections with at least one set to use 'Set nameserver'.
- Includes updated translations.
- Fixes Issue 564 Catastrophic error: Could not create a temporary directory.
2019-07-19: Tunnelblick 3.8.0 and 3.8.1beta01 are available for download
Changes from 3.8.0beta04 to 3.8.1beta01
- Includes the macOS build number when displaying the macOS version.
- Includes updated translations.
Changes from 3.7.9a to 3.8.0
- Improves the appearance of windows.
- Adds the ability to show or hide passwords and passphrases while they are being entered.
- Fixes problems restoring DNS and IPv6 settings after shutting down or restarting the computer while a VPN was connected.
- Includes updated translations and other enhancements and fixes many other problems.
See the Release Notes for details.
2019-07-06: Tunnelblick 3.8.0beta04 is available for download
Changes from 3.8.0beta03 to 3.8.0beta04
- Has more readable text in dark mode.
- Has better alignment of items in 'VPN Details' window.
- Updates the list of public DNS servers known to Tunnelblick.
- Includes updated translations and other enhancements and fixes several problems.
See the Release Notes for details.
2019-06-27: Tunnelblick 3.8.0beta03 is available for download
Changes from 3.8.0beta02 to 3.8.0beta03
- Adds AppleScript commands to set username/password/passphrase and delete credentials for a configuration.
- Fixes several problems that caused network errors after waking, restarting, or shutting down the computer while a VPN was active.
- Fixes a problem that sometimes caused Tunnelblick to use excessive CPU time when waking from sleep with no Internet access.
- Includes updated translations and other enhancements and problem fixes.
See the Release Notes for details.
2019-06-03: Tunnelblick 3.7.9a and 3.8.0beta02 are available for download
Changes from 3.8.0beta01 to 3.8.0beta02 (SECURITY UPDATE)
- Fixes a failure to restore DNS settings after shutting down or restarting the computer while a VPN was connected.
- Warns if configurations set to connect when the system starts are not active.
- Includes entries from a new "Quit Log" in the Diagnostic Info.
- Uses a modern divider on the Configurations panel.
- Includes new translations and fixes several other problems.
See the Release Notes for details.
Changes from 3.7.9 to 3.7.9a (SECURITY UPDATE)
- Fixes a failure to restore DNS settings after shutting down or restarting the computer while a VPN was connected.
2019-05-24: Uninstaller 1.13 Deprecated
Tunnelblick Uninstaller has been deprecated; Tunnelblick Uninstaller 1.12 is the best one to use.
2019-05-22: Tunnelblick 3.7.9 and 3.8.0beta01 and Uninstaller 1.13 are available for download
Changes from 3.7.9beta11 to 3.8.0beta01 (SECURITY UPDATE)
- Includes a button to reveal or hide a password or passphrase as it is entered.
- Includes a checkbox to always display the username and password dialog, even if both are saved in the Keychain.
- Disables IPv6 only if the OpenVPN server is not accessed via IPv6.
- If available, uses OpenVPN-supplied DNS instead of DHCP-supplied DNS on tap connections.
- Includes new translations and fixes several cosmetic problems.
Changes from 3.7.8 to 3.7.9 (SECURITY UPDATE)
- Tunnelblick is notarized: Apple verifies that it does not contain malware.
- Includes better detection of errors while connecting and disconnecting.
- Warns about common DNS problems.
- Disables IPv6 only if the OpenVPN server is not accessed via IPv6.
- Includes other enhancements and fixes many problems.
See the Release Notes for details.
Changes from Uninstaller 1.12 to 1.13 (SECURITY UPDATE)
- The uninstaller is notarized: Apple verifies that it does not contain malware.
2019-05-13: Tunnelblick 3.7.9beta11 is available for download
Changes from 3.7.9beta09 to 3.7.9beta11
- Tunnelblick is notarized: Apple verifies that it does not contain malware.
- Fixes problems with the digital signatures of some components.
- Fixes a problem that caused failures loading tun and tap kexts.
Changes from Uninstaller 1.12 to 1.13
- The uninstaller is notarized: Apple verifies that it does not contain malware.
2019-04-29: Tunnelblick 3.7.9beta09 is available for download
Changes from 3.7.9beta08 to 3.7.9beta09
- Updates translations.
- Fixes problems which caused fatal errors. (Built with Xcode 7.3.1 on macOS 10.11.6.)
2019-04-28: Tunnelblick 3.7.9beta08 is available for download
Changes from 3.7.9beta07 to 3.7.9beta08
- Fixes a problem which caused fatal errors.
2019-04-27: Tunnelblick 3.7.9beta07 is available for download
Changes from 3.7.9beta06 to 3.7.9beta07
- Fixes a problem which caused fatal errors.
2019-04-25: Tunnelblick 3.7.9beta06 is available for download
Changes from 3.7.9beta05 to 3.7.9beta06
- Tailors warnings to the version of macOS in use if a kext cannot be loaded.
- Asks the user to email developers when a fatal error occurs.
- Fixes a problem loading Tunnelblick 3.7.9beta05 kexts on macOS 10.14.5 Beta 2.
- Fixes a problem that caused links in some warning windows to be broken.
2019-04-10: Tunnelblick 3.7.9beta05 is available for download
Changes from 3.7.9beta04 to 3.7.9beta05
- Displays Tunnelblick messages in the log in blue text and OpenVPN messages in black text.
- Notes in the system log when a warning has not been displayed because the user elected not to see it.
- Fixes a rare fatal error when a network parameter changes to an empty value.
- Includes other improvements and fixes other problems.
See the Release Notes for details.
2019-04-03: Tunnelblick 3.7.9beta04 is available for download
Changes from 3.7.9beta03 to 3.7.9beta04
- Warns about common problems with DNS settings.
- Shows microseconds in the Tunnelblick log.
- Allows the OpenVPN --tls-crypt-v2-verify option.
- Includes other improvements and fixes several problems.
See the Release Notes for details.
2019-2-27: Tunnelblick 3.7.9beta03 is available for download
Changes from 3.7.9beta02 to 3.7.9beta03
- Includes OpenVPN 2.4.7 and OpenVPN git master commit ccb636c dated 2019-02-06.
- Includes OpenSSL 1.0.2r and 1.1.1b (see release notes for 1.0.2 and 1.1.1).
- Adds two new AppleScript commands: 'added or removed configurations' and 'changed openvpn configuration file…' (see Applescript Support).
- Includes other improvements and fixes several problems.
2019-01-10: Tunnelblick 3.7.9beta02 is available for download
Changes from 3.7.9beta01 to 3.7.9beta02
- No longer opens '.ovpn' and '.conf' files when you double-click them. (Instead, drag and drop them on the Tunnelblick icon.)
- Fixes problems involving the disabling and enabling of network services.
- Fixes problems when no network is reachable.
- Fixes a problem that caused a checkbox to not be displayed in right-to-left languages.
- Fixes a problem when an incorrect private key passphrase is used.
2018-11-29: Tunnelblick 3.7.8 and 3.7.9beta01 are available for download
Changes from 3.7.8beta02 to 3.7.9beta01
- Ignores any empty "Icon?" files in a .tblk. (Such files are added by Google Drive as part of its synchronization process.)
- Fixes a problem that caused all disconnections of "Private" configurations to be considered unexpected.
- Fixes a problem verifying Tunnelblick's digital signature on macOS 10.9 ("Mavericks").
Changes from 3.7.7 to 3.7.8
- Includes OpenSSL 1.0.2q and 1.1.1a (see release notes for 1.0.2 and 1.1.1).
- Inhibits the announcement of a Tunnelblick update if 'Do Not Disturb' is active.
- Waits for the network to be set up before starting OpenVPN when the system starts.
- Fixes a problem disabling and enabling IPv6.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2018-11-20: Tunnelblick 3.7.8beta02 is available for download
Changes from 3.7.8beta01 to 3.7.8beta02
- Includes OpenSSL 1.0.2q and 1.1.1a (see release notes for 1.0.2 and 1.1.1).
- Includes OpenVPN git master commit 19d6d9c dated 2018-11-18.
- Runs up-prefix.sh, up-suffix.sh, down-prefix.sh, down-suffix.sh, route-pre-down-prefix.sh, and route-pre-down-suffix.sh before or after the corresponding Tunnelblick script, passing the arguments and including the environment variables the corresponding script was invoked with.
- Waits for the network to be set up before starting OpenVPN when the system starts.
- Fixes a problem disabling and enabling IPv6.
- Includes other enhancements and fixes several other problems. See the Release Notes for details.
2018-10-01: Antivirus Alerts Update
22:15 UCT:
-
The new releases of Tunnelblick 3.7.7 and 3.7.8beta01 have been reinstated after confirmation that they do not contain malware. Updates to the new releases have been resumed.
-
Eight of the nine alerts have been removed from VirusTotal. Only Qihoo-360 is reporting malware in Tunnelblick 3.7.7 and 3.7.8beta01.
16:15 UCT:
-
Seven of the nine alerts have been removed from VirusTotal. Only F-Secure and Qihoo-360 are reporting malware in Tunnelblick 3.7.7 and 3.7.8beta01.
-
BitDefender now reports Tunnelblick 3.7.6a as "Clean".
-
Unfortunately, VirusTotal now shows five alerts for Tunnelblick 3.7.7beta06, which was released a week ago.
15:00 UCT:
Three more indications that these are "false positives" and there is no malware in the Tunnelblick downloads:
-
Four of the nine alerts have been removed from VirusTotal. They were from Ad-Aware, eScan, GData, and MAX, who each now report the downloads as "Clean".
-
There is a report that with a recent update to their definitions, BitDefender suddenly started alerting about Tunnelblick 3.7.6a, which was released more than three months ago (2018-06-26). That is almost certainly a false positive because we would have heard of malware infections long before now if that download was infected. (We automatically run frequent checks that our web server has not been tampered with and have seen no evidence of that having happened.)
-
Quihoo-360 reports the downloads are infected by "Win32/Application.ea3", which by its name seems to be Windows malware, which would be something completely different from the "MAC.Genio" malware the others are reporting.
12:00 UCT: The developers' understanding is that one should not necessarily be alarmed by a small number of alerts on VirusTotal because multiple malware detectors often use the same source of information. For example, Emsisoft is complaining because BitDefender is complaining.
Tunnelblick's total of 7 alerts from 58 engines seems to fit in that category, however we do not plan to reinstate Tunnelblick 3.7.7 and 3.7.8beta01 until most or all of the alerts are gone.
2018-09-30: Tunnelblick 3.7.7 and 3.7.8beta01 Trigger Antivirus Alerts
Antivirus systems are detecting malware in Tunnelblick 3.7.7 and 3.7.8beta01.
These appear to be "false positive" reports, but until this has been resolved:
- We have disabled updates to these versions of Tunnelblick and removed links to them from the Tunnelblick Downloads page.
- We recommend using Tunnelblick 3.7.6a or 3.7.7beta06.
This page will be updated when the situation changes.
2018-09-29: Tunnelblick 3.7.7 and 3.7.8beta01 and 3.5.25 are available for download
Changes from 3.7.6a to 3.7.7
- Includes OpenSSL 1.0.2p and 1.1.1 (see release notes for 1.0.2 and 1.1.1).
- Supports macOS Mojave (10.14) 'Dark Mode'.
- Adds the ability to export and import all Tunnelblick configurations and settings in a single operation.
- Adds support for static and dynamic challenge/response, including control by scripts (useful for TOTP and other authentication mechanisms). See Multi-factor and Two-factor Authentication for details.
- Adds support for IPv6.
- Includes other enhancements and fixes several problems. See the Release Notes for details.
Changes from 3.7.7beta06 to 3.7.8beta01
- Inhibits the announcement of a Tunnelblick update if "Do Not Disturb" is active.
Changes from 3.5.24 to 3.5.25 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
- Includes OpenSSL 1.0.2p instead of 1.0.2o.
- Includes OpenVPN 2.3.18 and 2.4.4. (More recent versions of OpenVPN do not build properly with OpenSSL 1.0.2p.)
2018-09-24: Tunnelblick 3.7.7beta06 is available for download
Changes from 3.7.7beta04 to 3.7.7beta06
- Includes OpenSSL 1.0.2p and 1.1.1 (see release notes for 1.0.2 and 1.1.1).
- Supports macOS Mojave (10.14) 'Dark Mode'.
- Adds the ability to export and import all Tunnelblick configurations in a single operation.
- Includes other enhancements and fixes several problems. See the Release Notes for details.
2018-09-22: Tunnelblick 3.7.7beta05 is available for download
Changes from 3.7.7beta04 to 3.7.7beta05
- Includes OpenSSL 1.0.2p and 1.1.1 (see release notes for 1.0.2 and 1.1.1).
- Supports macOS Mojave (10.14) "Dark Mode".
- Adds the ability to export and import all Tunnelblick configurations in a single operation.
- Includes other enhancements and fixes several problems. See the Release Notes for details.
2018-07-31: Tunnelblick 3.7.7beta04 is available for download
Changes from 3.7.7beta03 to 3.7.7beta04
- Allows scripts to control challenge/response (useful for TOTP and other authentication devices). See Multi-factor and Two-factor Authentication for details.
- Includes OpenVPN git master 57d6f10 dated 2018-07-25.
- Includes other enhancements and fixes several problems. See the Release Notes for details.
2018-07-18: Tunnelblick 3.7.7beta03 is available for download
Changes from 3.7.7beta02 to 3.7.7beta03
- Adds support for static and dynamic challenge/response.
- Adds support for IPv6.
- Includes other enhancements and problem fixes.
2018-06-26: Tunnelblick 3.7.6a and 3.7.7beta02 and Uninstaller 1.12 are available for download
Changes from 3.7.6 to 3.7.6a (SECURITY UPDATE)
- Includes a partial Hebrew translation.
- Fixes a problem when a logout is cancelled.
- Fixes a problem re-enabling network access for certain devices.
Changes from 3.7.7beta01 to 3.7.7beta02 (SECURITY UPDATE)
- Includes OpenVPN git master 4376805 dated 2018-06-24 (and 2.4.6 and 2.3.18).
- Includes a partial Hebrew translation.
- Fixes a problem when a logout is cancelled.
- Fixes a problem re-enabling network access for certain devices.
Uninstaller Changes from 1.11 to 1.12
- Fixes a problem when the user doesn't respond to the uninstall success/failure dialog within a few minutes.
- Fixes a problem that caused the uninstaller to bounce in the Dock.
2018-06-09: Tunnelblick 3.7.6 and 3.7.7beta01 are available for download
Changes from 3.7.6beta04 to 3.7.7beta01
- Makes a better choice of the version of OpenVPN to use when the requested version is not available.
- Warns if the Tunnelblick application is more than 180 days old.
- Includes other enhancements and fixes several problems.
Changes from 3.7.5a to 3.7.6
- Makes a better choice of the version of OpenVPN to use when the requested version is not available.
- Speeds up menu display when there are hundreds or thousands of configurations.
- Warns if the Tunnelblick application is more than 180 days old.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2018-05-08: Tunnelblick Uninstaller 1.11 is available for download
Changes from Uninstaller 1.10 to Uninstaller 1.11
- Fixes a problem that caused the uninstaller to fail on Hackintoshes and Macs with corrupted NVRAM.
2018-04-26: Tunnelblick 3.7.6beta04 and Uninstaller 1.10 are available for download
Changes from 3.7.6beta03 to 3.7.6beta04
- Includes OpenVPN 2.4.6 and 2.5 git master 1394192 (and 2.3.18).
- Requires full App Transport Security.
- Speeds up menu display when there are hundreds or thousands of configurations.
- Includes several other enhancements and fixes several problems.
Changes from Uninstaller 1.9 to Uninstaller 1.10
- Tunnelblick Uninstaller is now a 64-bit, Intel-only application for macOS 10.7.5 and higher only.
- Displays detailed log if user doesn't respond to success/failure dialog.
- Includes information about Tunnelblick login items and Tunnelblick items in the Dock.
- Includes several other enhancements and fixes several problems.
2018-03-28: Tunnelblick 3.7.5a and 3.7.6beta03 and 3.5.24 are available for download
See OpenSSL Security Advisory 27 March 2017 and LibreSSL 2.7.1 Release Notes.
Changes from 3.7.6beta02 to 3.7.6beta03 (SECURITY UPDATE)
- Includes OpenVPN versions with OpenSSL 1.1.0h, OpenSSL 1.0.2o, and LibreSSL 2.7.1.
- Includes OpenVPN 2.5 git-master 8acc40b dated 2018-03-26.
- Includes PKCS#11 support only in OpenVPN versions with OpenSSL 1.0.2o and LibreSSL 2.7.1.
- Includes other enhancements and fixes several problems.
- See the Release Notes for details.
Changes from 3.7.5 to 3.7.5a (SECURITY UPDATE)
- Replaces OpenSSL 1.0.2n with 1.0.2o and LibreSSL 2.6.3 with 2.7.1.
Changes from 3.5.23 to 3.5.24 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
- Replaces OpenSSL 1.0.2n with 1.0.2o.
2018-03-16: Tunnelblick 3.7.6beta02 is available for download
Changes from 3.7.6beta01 to 3.7.6beta02
- Adds a partial Hebrew translation.
- Fixes a problem that caused fatal errors from 'Signal 13'.
- Fixes a problem that caused errors when installing configurations.
- Fixes problems in easy-rsa when certain paths contain spaces.
2018-03-03: Tunnelblick 3.7.5 and 3.7.6beta01 and 3.5.23 are available for download
Changes from 3.7.5beta08 to 3.7.6beta01 (SECURITY UPDATE)
- Secures Tunnelblick's connection to the OpenVPN management interface with a password.
- Includes OpenVPN 2.5 git-master b607900 dated 2018-03-02, OpenVPN 2.4.5, and OpenVPN 2.3.18.
- Fixes a problem that made the git master version of OpenVPN unavailable.
- Fixes several other problems.
Changes from 3.7.4b to 3.7.5 (SECURITY UPDATE)
- Secures Tunnelblick's connection to the OpenVPN management interface with a password.
- Adds a 'Kill Switch' which can automatically disable all network access for unexpected VPN disconnections and/or for expected VPN disconnections. Also adds a menu command to re-enable network access.
- Defaults to OpenVPN 2.4 (currently, 2.4.4) instead of 2.3.
- Selects the closest match if Tunnelblick doesn't include the version of OpenVPN specified by the user.
- Includes other enhancements and fixes several problems.
Changes from 3.5.22 to 3.5.23 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
- Secures Tunnelblick's connection to the OpenVPN management interface with a password.
2018-02-20: Tunnelblick 3.7.5beta08 is available for download
Changes from 3.7.5beta07 to 3.7.5beta08
- Fixes using wrong version of OpenVPN when the default version is specified.
2018-02-16: Tunnelblick 3.7.5beta07 now available for download
Changes from 3.7.5beta05 to 3.7.5beta07:
- Does better selection of the OpenVPN version to be used when connecting.
- Launches Tunnelblick at login if network access was disabled by Tunnelblick.
- Does not use DHCP for tap connections if an IP address is detected (thanks to mpsrig).
- Includes OpenVPN 2.4.4, 2.3.18, and git master 5a0e82c dated 2018-02-14.
- Includes other enhancements and fixes several problems.
2018-02-15: Tunnelblick 3.7.5beta06 now available for download
Changes from 3.7.5beta05 to 3.7.5beta06 (SECURITY UPDATE):
- Does better selection of the OpenVPN version to be used when connecting.
- Launches Tunnelblick at login if network access was disabled by Tunnelblick.
- Does not use DHCP for tap connections if an IP address is detected (thanks to mpsrig).
- Includes OpenVPN 2.4.4, 2.3.18, and git master 5a0e82c dated 2018-02-14.
- Includes other enhancements and fixes several problems.
2018-01-31: Tunnelblick Uninstaller 1.9 now available for download
Changes from 1.8 to 1.9:
- Does a slow 'secure erase' only on non-SSD drives (SSDs do not implement 'secure erase').
- Clarifies wording in some dialogs.
- Fixes a problem if an uninstall was followed by an install without restarting the computer.
- Fixes a bug that caused the success or failure dialog window to be replaced with an Applescript error window if it was not dismissed within two minutes of the completion of the uninstall.
2018-01-17: Tunnelblick 3.5.22 now available for download
Changes from 3.5.21 to 3.5.22 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher use the latest stable or beta version from the Downloads page.
- Fixes digital signatures that were invalid on older versions of OS X.
2018-01-08: Tunnelblick 3.5.21 now available for download
Changes from 3.5.20 to 3.5.21 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
- Fixes a problem detecting updates.
2017-12-30: Tunnelblick 3.5.20 and 3.7.5beta05 are available for download
Changes from 3.7.5beta04 to 3.7.5beta05 (SECURITY UPDATE):
- Selects the closest match if Tunnelblick doesn't include the version of OpenVPN specified by the user.
- Offers to enable network access when a connection attempt is made and network access has been disabled.
- Fixes a problem installing Tunnelblick.
Changes from 3.5.19 to 3.5.20 (SECURITY UPDATE):
This is a security and stability update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
- Fixes a crash on OS X earlier than 10.6.8 by making OpenVPN 2.4.4 available only on OS X 10.6.8 and higher.
2017-12-07: Tunnelblick 3.5.19, 3.7.4b, and 3.7.5beta04 are available for download
Changes from 3.7.5beta03 to 3.7.5beta04 (SECURITY UPDATE):
- Includes OpenSSL 1.0.2n. See OpenSSL Security Advisory 07 December 2017.
- Includes OpenVPN 2.5 git-master 5a0e82c dated 2017-12-05, OpenVPN 2.4.4, and OpenVPN 2.3.18.
- Fixes a problem in 3.7.5beta03 that caused crashes and weird behavior.
Changes from 3.7.4a to 3.7.4b (SECURITY UPDATE):
Changes from 3.5.18 to 3.5.19 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
2017-12-04: Tunnelblick 3.7.5beta03 has been withdrawn
Tunnelblick 3.7.5beta03 has been withdrawn from distribution and earlier versions will not update to it. It has a bug which can cause unpredictable behavior. Tunnelblick 3.7.5beta04 will correct the bug and be available soon, possibly as early as Thursday December 7, but more likely on Friday, December 8. It will also include OpenSSL version 1.0.2n.
A fix for this bug has been committed to Tunnelblick's GitHub source code repository.
2017-12-02: Tunnelblick 3.5.18 and 3.7.5beta03 are available for download
Changes from 3.7.5beta02 to 3.7.5beta03:
- Adds a 'Kill Switch' which can automatically disable all network access for unexpected VPN disconnections and/or for expected VPN disconnections. Also adds a menu command to re-enable network access.
- Adds the ability to automatically reset the primary network interface for unexpected VPN disconnections and/or for expected VPN disconnections.
- Defaults to OpenVPN 2.4 (currently, 2.4.4) instead of 2.3.
- Replaces LibreSSL 2.6.2 with 2.6.3.
- Includes other enhancements and fixes several problems.
Changes from 3.5.17 to 3.5.18:
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
- Fixes a problem that caused errors when using 'tun' connections.
2017-11-10: Tunnelblick 3.7.4a and 3.7.5beta02 are available for download
Changes from 3.7.5beta01 to 3.7.5beta02:
- No longer requires that the user agree to terms and conditions before using Tunnelblick.
- No longer attempts to access tunnelblick.net before installing or updating.
- Adds an option to keep a VPN's status window visible when it is connected.
Changes from 3.7.4 to 3.7.4a:
- No longer requires that the user agree to terms and conditions before using Tunnelblick.
- No longer attempts to access tunnelblick.net before installing or updating.
- Adds an option to keep a VPN's status window visible when it is connected.
2017-11-03: Tunnelblick 3.5.17, 3.7.4, and 3.7.5beta01 are available for download
Changes from 3.7.4beta01 to 3.7.5beta01 (SECURITY UPDATE):
- Includes OpenSSL 1.0.2m. See OpenSSL 1.0.2 Series Release Notes.
- Includes LibreSSL 2.6.2 (from the development branch), replacing 2.5.5 (from the stable branch).
- Fixes two minor problems.
Changes from 3.7.3 to 3.7.4 (SECURITY UPDATE):
- Includes OpenSSL 1.0.2m. See OpenSSL 1.0.2 Series Release Notes.
- Requires the user's consent to terms of use before installing or updating and logs the install or update to the Tunnelblick website. (Other than the IP address, no personally identifiable information is sent.) See Privacy and Security.
- Replaces multiple dialog windows with a single window when installing Tunnelblick.
- Never sends any system information (e.g., macOS version) when checking for updates (even if the user previously agreed to it).
- Includes other enhancements and fixes several problems.
Changes from 3.5.16 to 3.5.17 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
2017-10-19: Tunnelblick 3.7.3 and 3.7.4beta01 are available for download
Changes from 3.7.3beta03 to 3.7.4beta01:
- Requires the user's consent to terms of use before installing or updating and logs the install or update to the Tunnelblick website. (Other than the IP address, no personally identifiable information is sent.)
- Replaces multiple dialog windows with a single window when installing Tunnelblick.
- Allows the installation of configurations that include options that are new in OpenVPN 2.4.
- Includes other enhancements and fixes several problems.
Changes from 3.7.2a to 3.7.3:
- Includes LibreSSL 2.5.5, lz4 1.7.5, lzo 2.10, OpenSSL 1.0.2l, and pkcs#11 1.22.
- Allows manual scrolling of the credits on the Info panel of the VPN Details window.
- Includes better graphics for several controls.
- Includes other enhancements and fixes several problems.
2017-09-27: The Tunnelblick website is now protected by Cloudflare
A small DDOS attack has been underway against the Tunnelblick website for the past two weeks. We have a small web server, so even a small attack can slow it down. We apologize for any slowdowns or loss of functionality that may have occurred.
As a result of this attack, the website can now be "protected" by Cloudflare. This protection may be turned on or off at any time without warning.
Whether or not protection is on, all accesses to the Tunnelblick website now go through Cloudflare, including browser access to web pages like this one and the Tunnelblick application's access to update information and IP address information. (That is how Cloudflare works — it is a "man in the middle".) When protection is on, Cloudflare may supply responses it has cached from the Tunnelblick website, or it may pass on requests to the Tunnelblick webserver. Because the Tunnelblick website does not change often, Cloudflare's caches should always be up-to-date.
Cloudflare also now handles all DNS queries for tunnelblick.net.
Security implications:
-
In addition to the logging done by the Tunnelblick website host provider, Cloudflare does its own logging. This may include logging of DNS requests and logging of requests to the Tunnelblick website. See What Cloudflare Logs for details.
-
Cloudflare now has SSL certificates for *.tunnelblick.net. These certificates can be found on various Certificate Transparency logs.
Tunnelblick's Privacy and Security page has been updated to reflect these changes.
2017-09-27: Tunnelblick 3.5.16, 3.7.2a, and 3.7.3beta03 are available for download
Changes from 3.7.3beta02 to 3.7.3beta03 (SECURITY UPDATE):
Changes from 3.7.2 to 3.7.2a (SECURITY UPDATE):
Changes from 3.5.15 to 3.5.16 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
2017-08-20: Tunnelblick 3.7.3beta02 is available for download
Changes from 3.7.3beta01 to 3.7.3beta02:
- Includes better graphics for several controls.
- Fixes several problems when installing configurations.
2017-08-17: Tunnelblick 3.7.2 and 3.7.3beta01 are available for download
Changes from 3.7.2beta03 to 3.7.3beta01:
- Includes LibreSSL 2.5.5, lz4 1.7.5, lzo 2.10, OpenSSL 1.0.2l, and pkcs#11 1.22.
- Includes OpenVPN 2.5 git-master 974513e dated 2017-08-17, OpenVPN 2.4.3, and OpenVPN 2.3.17.
- Includes other enhancements and fixes several problems.
Changes from 3.7.1b to 3.7.2:
- Adds a checkbox to "Allow changes to manually-set network settings".
- Includes updated translations and credits for translations.
- Fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
- Fixes problems with configuration names that include a trailing period.
2017-06-21: Tunnelblick 3.5.15, 3.7.1b, and 3.7.2beta03 are available for download
These releases replace OpenVPN 2.4.2 with OpenVPN 2.4.3 and OpenVPN 2.3.16 with OpenVPN 2.3.17. See the 2.4.3 change log and the 2.3.17 change log).
The beta release also includes additional translations and fixes problems with configuration names that include a trailing period.
From the OpenVPN Downloads page:
OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. We recommend you to upgrade to OpenVPN 2.4.3 or 2.3.17 as soon as possible. More details are available in our official security announcement.
[OpenVPN v2.3.17] is a minor release that mostly fixes the security issues mentioned in our security announcement.
2017-05-20: Tunnelblick 3.5.14, 3.7.1a, and 3.7.2beta02 are available for download
These releases replace OpenVPN 2.3.15 with OpenVPN 2.3.16 (OpenVPN change log). (Also includes OpenVPN 2.4.2.)
The beta release also fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
From the OpenVPN Downloads page:
"This [OpenVPN 2.3.16] is a minor release that fixes a few bugs. This release was made primarily because CloudFlare managed to serve obsolete pre-release OpenVPN 2.3.15 tarballs which lack the fix for CVE-2017-7478. The official OpenVPN 2.3.15 Windows installers do have the fix. Nevertheless, you are advised to upgrade your OpenVPN installations to 2.3.16 or 2.4.2."
2017-05-12: Tunnelblick 3.5.13, 3.7.1, and 3.7.2beta01 are available for download
Changes from 3.7.1beta02 to 3.7.2beta01 (SECURITY UPDATE):
- Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
- Adds a checkbox to "Allow changes to manually-set network settings".
- Includes a Flemish translation.
- Includes updated translations and credits for translations.
Changes from 3.7.0 to 3.7.1 (SECURITY UPDATE):
- Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
- Includes popup help for most checkboxes and buttons when the pointer hovers over the checkbox or button.
- Includes other enhancements and fixes several problems.
Changes from 3.5.12 to 3.5.13 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
2017-03-24: Tunnelblick 3.7.1beta02 is available for download
Changes from 3.7.1beta01 to 3.7.1beta02:
- Includes OpenVPN 2.4.1 and OpenVPN 2.3.14.
- Fixes several problems.
2017-01-30: Tunnelblick 3.5.12, 3.7.0, and 3.7.1beta01 are available for download
Changes from 3.7.0beta01 to 3.7.1beta01 (SECURITY UPDATE):
- Includes OpenSSL 1.0.2k. See OpenSSL Security Advisory 26 January 2017.
- Includes OpenVPN 2.5 git-master 4590c38 dated 2017-01-26, OpenVPN 2.4.0, and OpenVPN 2.3.14.
- Mouseover of checkboxes and some buttons now pops up a small help window.
- Includes other enhancements and fixes several problems.
Changes from 3.6.10 to 3.7.0 (SECURITY UPDATE):
Changes from 3.5.11 to 3.5.12 (SECURITY UPDATE):
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
2017-01-16: Tunnelblick 3.6.10 and 3.7.0beta01 are available for download
Changes from 3.6.10beta06 to 3.7.0beta01:
- Does more stringent validation of updates.
- No longer allows "downgrades" from a beta version to a stable version using the update mechanism.
- Updatable configurations no longer require DSA signatures (although they optionally can be required).
- Includes updated translations.
- Fixes a problem when a Keychain item has been deleted.
Changes from 3.6.9 to 3.6.10:
- Includes OpenVPN 2.4.0 and 2.3.14.
- Shows stdout and stderr output from scripts in the Tunnelblick log.
- Includes updated translations.
- Fixes several problems.
Website changes:
- Fixes a problem that caused updates of old versions of Tunnelblick to fail on macOS Sierra.
2016-12-27: Tunnelblick 3.6.10beta06 is available for download
Changes from 3.6.10beta05 to 3.6.10beta06:
- Includes OpenVPN 2.4.0 (and OpenVPN 2.3.14).
2016-12-22: Tunnelblick 3.6.10beta05 is available for download
Changes from 3.6.10beta04 to 3.6.10beta05:
- Includes OpenVPN 2.4_rc2 (and OpenVPN 2.3.14).
- Includes scripts for signing appcasts and updates (for the Tunnelblick application itself and for configurations).
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2016-12-07: Tunnelblick 3.6.10beta04 is available for download
Changes from 3.6.10beta03 to 3.6.10beta04:
- Includes OpenVPN 2.3.14 and 2.4_rc1 (release candidate 1).
- Includes new translations for for Azerbaijani, Catalan, and Indonesian.
See the Release Notes for details.
2016-12-03: Tunnelblick 3.6.10beta03 is available for download
Changes from 3.6.10beta02 to 3.6.10beta03:
- Includes OpenVPN 2.4_rc1 (release candidate 1) and 2.3.13.
- Includes new translations for Korean and adds some Azerbaijani translations.
See the Release Notes for details.
2016-11-29: Tunnelblick 3.6.10beta02 is available for download
Changes from 3.6.10beta01 to 3.6.10beta02:
- Includes OpenVPN 2.4_beta2 and 2.3.13.
- Includes new translations.
See the Release Notes for details.
2016-11-17: Tunnelblick 3.6.9 and 3.6.10beta01 are available for download
Changes from 3.6.9beta02 to 3.6.10beta01:
- Includes OpenVPN 2.4_beta1 and 2.3.13.
- Adds Yandex Public DNS to the list of known DNS providers.
Changes from 3.6.8 to 3.6.9:
- Adds versions of OpenVPN that use LibreSSL 2.5.0. Special thanks to GΛVĪN for his work on this.
- Includes OpenVPN 2.3.13 and OpenVPN 2.3.12.
- Displays the computer's apparent public IP address in the Tunnelblick menu when connected to a VPN.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2016-11-04: Tunnelblick 3.6.9beta02 is available for download
Changes from 3.6.9beta01 to 3.6.9beta02:
- Includes OpenVPN 2.3.13 and OpenVPN 2.4 alpha2 in addition to 2.3.12.
- Displays the computer's apparent public IP address in the Tunnelblick menu when connected to a VPN.
- Includes additional popup help.
- Fixes several problems.
See the Release Notes for details.
2016-10-09: Tunnelblick 3.6.8 and 3.6.9beta01 are available for download
Changes from 3.6.7c to 3.6.8:
- Includes a pre-built icon for authentication dialogs.
- Improves handling of UTF-16 (Windows) files.
- Fixes several problems.
Changes from 3.6.8beta10 to 3.6.9beta01:
- Adds versions of OpenVPN that use LibreSSL 2.5.0. Special thanks to GΛVĪN for his work on this.
- Fixes a problem automatically installing configurations with Tunnelblick when Tunnelblick is not already installed.
- Fixes a problem displaying popup help in some languages.
See the Release Notes for details.
2016-10-02: Tunnelblick 3.5.11 is available for download
This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4.
On OS X 10.7.5 and higher, the latest stable or beta version should be used.
Changes from 3.5.10 to 3.5.11:
See the Release Notes for details.
2016-09-29: Tunnelblick 3.6.8beta10 is available for download
Changes from 3.6.8beta08 to 3.6.8beta10:
- Fixes a problem loading tun or tap kexts on macOS Sierra.
See the Release Notes for details.
2016-09-26: Tunnelblick 3.6.7c and 3.6.8beta08 are available for download
Changes from 3.6.8beta06 to 3.6.8beta08 (SECURITY UPDATE):
Changes from 3.6.7b to 3.6.7c (SECURITY UPDATE):
See the Release Notes for details.
2016-09-25: Tunnelblick 3.6.7b and 3.6.8beta06 are available for download
Changes from 3.6.8beta04 to 3.6.8beta06:
- Fixes two problems that caused Tunnelblick to crash.
Changes from 3.6.7a to 3.6.7b:
- Fixes a problem that caused Tunnelblick to crash.
See the Release Notes for details.
2016-09-22: Tunnelblick 3.6.7a and 3.6.8beta04 are available for download
Changes from 3.6.8beta02 to 3.6.8beta04 (SECURITY UPDATE):
- Updates OpenSSL from version 1.0.2h to version 1.0.2i. See OpenVPN Security Advisory 22 Sep 2016.
- Includes OpenVPN 2.3 git-master 38f98fd dated 2016-09-21 (and OpenVPN 2.3.12).
- Updates localization.
- Fixes problems with long usernames, passwords, passphrase, credentials names, and configuration names.
- Fixes a problem when a configuration file is modified outside of Tunnelblick.
Changes from 3.6.7 to 3.6.7a (SECURITY UPDATE):
See the Release Notes for details.
2016-09-15: Tunnelblick 3.6.7 and 3.6.8beta02 are available for download
Changes from 3.6.7beta04 to 3.6.8beta02:
- Includes OpenVPN 2.3 git-master cbc3c5a dated 2016-09-09.
- Improves handling of UTF-16 (Windows) files.
- Includes other enhancements and fixes several problems.
Changes from 3.6.6 to 3.6.7:
- CRITICAL: Fixes a problem that causes updates to fail when running on macOS Sierra.
- Requires OS X 10.7.
- Adds the ability to drag/drop configurations onto the list of configurations on the left side of the 'Configuration' panel of the 'VPN Details' window.
- Includes the latest version of Sparkle Updater.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2016-09-09: Tunnelblick 3.6.7beta04 is available for download
Changes from 3.6.7beta02 to 3.6.7beta04:
- CRITICAL: Fixes a problem that causes updates to fail when running on macOS Sierra.
- Requires OS X 10.7.
- Includes OpenVPN 2.3 git-master 4db0629 dated 2016-08-26.
- Includes the latest version of Sparkle Updater.
- Fixes several other problems.
See the Release Notes for details.
2016-08-25: Tunnelblick 3.6.6 and 3.6.7beta02 are available for download
Changes from 3.6.6beta02 to 3.6.7beta02:
- Adds the ability to drag/drop configurations onto the list of configurations on the left side of the 'Configuration' panel of the 'VPN Details' window.
- Includes OpenVPN 2.3 git-master 8cba9ff dated 2016-08-24.
- Displays the SSL/TLS library built into Tunnelblick's copies of OpenVPN.
- Fixes several problems.
Changes from 3.6.5 to 3.6.6:
- Enables strict transport security when accessing tunnelblick.net.
- Adds new popup help for the "Place icon near the Spotlight icon" checkbox.
- Includes OpenVPN 2.3 git-master d728ebe dated 2016-07-14.
- Requires OS X 10.6.8 or higher.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2016-07-18: Tunnelblick 3.6.5 and 3.6.6beta02 are available for download
Changes from 3.6.5beta04 to 3.6.6beta02:
-
Enables strict transport security when accessing tunnelblick.net.
-
Adds new popup help for the "Place icon near the Spotlight icon" checkbox.
-
Includes OpenVPN 2.3 git-master d728ebe dated 2016-07-14.
-
Includes other enhancements and fixes several problems. Changes from 3.6.4a to 3.6.5:
-
Includes "admin mode", which temporarily (for five minutes) authorizes changes that require a computer administrator password.
-
Includes and OpenVPN 2.3 git-master ec0c1dc dated 2016-06-20.
-
Fixes several problems.
See the Release Notes for details.
2016-06-23: Tunnelblick 3.6.4a and 3.6.5beta04 are available for download
Changes from 3.6.5beta02 to 3.6.5beta04:
- Includes updated localization.
Changes from 3.6.4 to 3.6.4a:
- Fixes a problem loading kexts on recent versions of OS X (caused by the build number).
See the Release Notes for details.
2016-06-22: SECURITY UPDATE: Tunnelblick 3.5.10, 3.6.4, and 3.6.5beta02 are available for download
Changes from 3.6.4beta04 to 3.6.5beta02:
- Includes OpenVPN 2.3.11 and OpenVPN 2.3 git-master ec0c1dc dated 2016-06-20.
- Includes "admin mode", which temporarily (for five minutes) authorizes changes that require a computer administrator password.
- Includes updated localization and fixes several problems.
Changes from 3.6.3 to 3.6.4:
- Includes OpenVPN version 2.3.11.
- Includes updated localization.
Changes from 3.5.9 to 3.5.10:
Note: Deprecated except for use on OS X 10.6 when running on a 32-bit kernel, or on 10.4 and 10.5.
- Includes OpenVPN version 2.3.11.
See the Release Notes for details.
2016-05-09: Tunnelblick 3.6.4beta04 is available for download
Changes from 3.6.4beta02 to 3.6.4beta04:
- Fixes a problem that sometimes caused the "Reset the primary interface after disconnecting" setting to be ignored.
- Updates localization.
2016-05-03: SECURITY UPDATE: Tunnelblick 3.6.4beta02, 3.6.3, and 3.5.9 are available for download
Changes from 3.6.3beta02 to 3.6.4beta02:
Changes from 3.6.2 to 3.6.3:
- Includes OpenSSL version 1.0.2h. See OpenSSL Security Advisory 3rd May 2016.
- Allows VPN configurations to be installed by dropping them on the Tunnelblick icon in the menu bar.
- Fixes several problems.
Changes from 3.5.8 to 3.5.9:
Note: Deprecated except for use on OS X 10.6 when running on a 32-bit kernel, or on 10.4 and 10.5.
See the Release Notes for details.
2016-04-24: Tunnelblick 3.6.2 and 3.6.3beta02 are available for download
Changes from 3.6.2beta06 to 3.6.3beta02:
- Allows configurations to be installed by dropping them on the Tunnelblick icon in the menu bar.
- Fixes a problem when using the non-outline view of configurations (OS X 10.4).
Changes from 3.6.1 to 3.6.2:
- Adds the ability to set the VPN Log Level from the "Settings" tab.
- Allows configurations using scripts or commands to be installed automatically.
- Does additional checking of the application's digital signature.
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2016-04-08: Tunnelblick 3.6.2beta06 is available for download
Changes from 3.6.2beta02 to 3.6.2beta06:
- Fixes problems with the "Welcome to Tunnelblick" window and other modal windows.
- Fixes a problem that can cause user-supplied up/down scripts to be ignored (affected only 3.6.1beta02).
- Fixes a problem with the 'Copy Diagnostic Info to Clipboard' function.
2016-04-02: Tunnelblick 3.6.1 and 3.6.2beta02 are available for download
Changes from 3.6.1beta02 to 3.6.2beta02:
- Adds the ability to set the VPN Log Level from the "Settings" tab.
- Includes other enhancements and fixes several problems.
Changes from 3.6.0a to 3.6.1:
- Closing a VPN status window prevents it from reappearing until the user attempts to connect its configuration.
- Makes the "VPN Details" window resizable.
- Adds Afrikaans and Croation translations.
- Fixes several problems.
See the Release Notes for details.
2016-03-19: Tunnelblick 3.6.0a is available for download
Tunnelblick 3.6.0a fixes a problem that caused kexts in 3.6.0 to fail to load on OS X 10.11.
2016-03-18: Tunnelblick 3.6.0 and 3.6.1beta02 are available for download
3.6.0:
Tunnelblick 3.6.0 is the result of months of development and testing by tens of thousands of users.
For a detailed list of all changes, see the Release Notes.
3.6.1beta02:
- Includes all changes in 3.6.0.
- Closing a VPN status window prevents it from reappearing until the user attempts to connect its configuration.
- Makes the "VPN Details" window resizable.
For a detailed list of all changes, see the Release Notes.
2016-03-02: SECURITY UPDATE: Tunnelblick 3.5.8 and 3.6beta24 are available for download
3.6beta24:
- Replaces OpenSSL 1.0.2f with 1.0.2g, see OpenSSL Security Advisory 1st March 2016.
- Replaces OpenVPN git-master 3a5a46c with 6a4edc7 dated 2016-02-25.
- Allows the OpenVPN --auth-user-pass option to specify a file containing a username and password.
- Allows empty VPN passwords.
- Includes only the OS X version in the anonymous profile information optionally sent during update checks.
- Updates localization.
- Is built using Xcode 7 and supports only the 64-bit Intel architecture.
- Eliminates spurious Console log entries when OpenVPN exits immediately.
3.5.8:
2016-02-18: SECURITY UPDATE: Tunnelblick 3.5.7 and 3.6beta22 are available for download
3.6beta22:
- Digitally signs all update information to thwart attacks when updating Tunnelblick even if https: access to the update website (or the website itself) is compromised.
- Refuses to install configurations in auto-install folders at the time Tunnelblick is installed if the configurations contain scripts or reference external scripts.
- Does not use UUIDs and removes the UUID stored in the Tunnelblick preferences for the user running Tunnelblick. (We never used this information.)
- Includes several other enhancements and fixes several bugs.
3.5.7:
- Does not install configurations in auto-install folders at the time Tunnelblick is installed.
2016-02-01: SECURITY UPDATE: Tunnelblick 3.5.6 and 3.6beta20 are available for download
3.6beta20:
- Avoids MITM attacks using the update mechanism, see the 2016-01-29 News item below.
- Replaces OpenSSL 1.0.2e with 1.0.2f, see OpenSSL Security Advisory 28th Jan 2016.
- Replaces earlier versions of OpenVPN with version 2.3.10 and version 2.3 git master 417fe4a as of 2016-01-18.
- Updates localization and credits.
- Fixes crash when .tblk contains identically named .conf and .ovpn files.
- Fixes crash when creating console log output.
3.5.6:
2016-01-29: Tunnelblick and the Sparkle Updater MITM attacks
(Updated 2016-01-31 for clarification.)
A recent blog post says that OS X applications which use Sparkle Updater insecurely are vulnerable to a man-in-the-middle (MITM) attack and that applications using older versions of Sparkle are vulnerable to a different attack. The post mentions Tunnelblick as one of the applications using Sparkle, implying that it is vulnerable to these attacks.
Tunnelblick is not vulnerable to the first attack because it uses https: for all traffic having to do with updates.
All versions of Tunnelblick prior to 3.6beta19 (build 4501) are vulnerable to the second attack. However, that attack requires compromise or impersonation of the official tunnelblick.net website. A new version of Tunnelblick without this vulnerability will be released soon.
2015-12-28: Tunnelblick 3.6beta18 is available for download
- Allows a user to replace a configuration's certificate and key files without requiring authorization by an administrator. (Must be enabled by an administrator.)
- Installs forced preferences from auto-install/forced-preferences.plist.
- Replaces OpenVPN 2.3.7 with 2.3.9.
- Replaces OpenVPN git-master 80442ae (2015-11-29) with 0e591a2 (2015-12-27).
- Adds lz4 compression to the OpenVPN git-master version (x86_64 only).
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2015-12-04: SECURITY UPDATE: Tunnelblick 3.5.5 and 3.6beta16 are available for download
3.5.5: Replaces OpenSSL version 1.0.1p with version 1.0.1q.
3.6beta16:
- Replaces OpenSSL version 1.0.2d with version 1.0.2e.
- Includes OpenVPN git-master as of commit 80442ae (2015-11-29), in addition to versions 2.3.7 and 2.3.8.
- Updates localization and adds support for right-to-left languages such as Arabic and Hebrew.
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2015-11-20: Tunnelblick 3.6beta14 is available for download
- Fixes a problem when switching languages.
- Repairs ownership and permissions of reactivateTunnelblick.sh if they are damaged.
2015-11-19: Tunnelblick 3.6beta12 is available for download
- Includes OpenVPN git-master as of commit 7546cba (2015-11-13), in addition to 2.3.7 and 2.3.8.
- Includes the "Tunnelblick Xor Patch" in all versions of OpenVPN and removes versions of OpenVPN without the patch.
- Allows additional operations on multiple configurations at the same time.
- Includes several other enhancements and fixes several bugs.
2015-09-30: Tunnelblick Uninstaller 1.8 is available for download
- Deletes Tunnelblick from all users’ Trash.
- Includes clearer error messages concerning Keychain items, particularly on OS X 10.4.
- Corrects the program name displayed by OS X when asking for the users’ username/password.
2015-09-24: Tunnelblick 3.6beta10 is available for download
- Reverts so that "Route all IPv4 traffic through the VPN" defaults to NO, as it was before 3.6beta09.
2015-09-19: Tunnelblick 3.5.4 and 3.6beta09 are available for download
See the Release Notes for details.
2015-07-23: Tunnelblick website move completed
Tunnelblick has completed the move from Google Code to a dedicated website at tunnelblick.net.
2015-07-17: Tunnelblick downloads on GitHub
All Tunnelblick downloads (including updates) are now hosted by GitHub on amazonaws.com.
2015-07-14: Tunnelblick launches new website
With Google Code shutting down, Tunnelblick needed a new home.
In the first part of a three-part move, the official Tunnelblick website has been moved to tunnelblick.net. The source code repository and issues will be moved from Google Code to GitHub sometime later this month; binary downloads will be moved some time after that.
tunnelblick.net has always been used by Tunnelblick to access information about program updates and to service Tunnelblick's IP address check facility, but the tunnelblick.net "home" page has redirected users to Tunnelblick's Google Code site. Google has announced that Google Code is being discontinued, so the site, source code, and Issues must all move. After careful consideration, GitHub was chosen as the home of Tunnelblick's source code and issues. Hosting the main Tunnelblick website independently instead of on GitHub is being done because most site visitors are interested in downloads and troubleshooting, not the source code or issues. GitHub is great for developers, but it isn't as friendly for these Tunnelblick users.
The goal of the new site is to be clean, easy to use, and "trustworthy" (literally: worthy of your trust). The site does not use Javascript or plugins, it does not collect personally identifiable information, and it does not store cookies or any other data on your computer. You can use your browser's "private" or "incognito" mode to keep your browser from caching site content or browser history. For more information about tunnelblick.net and privacy, see Privacy and Security.
Feel free to comment on the new website on the Tunnelblick Discussion Group.
2015-07-10: SECURITY UPDATE: Tunnelblick 3.5.3 and 3.6beta08 are available for download
See the Release Notes for details.
2015-06-20: Tunnelblick Uninstaller 1.7 is available for download
- Uninstalls even if the Tunnelblick application has been damaged or does not exist (for example, it has been put in the Trash).
- Unloads Tunnelblick daemons if they are loaded.
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2015-06-13: Tunnelblick 3.5.2 and 3.6beta06 are available for download
- 3.5.2: Replaces OpenSSL version 1.0.1n with version 1.0.1o.
- 3.6beta06: Replaces OpenSSL version 1.0.2b with version 1.0.2c.
See the Release notes for details.
2015-06-12: Tunnelblick 3.6beta04 is available for download
- Replaces LZO version 2.08 with version 2.09.
See the Release Notes for details.
2015-06-12: SECURITY UPDATE: Tunnelblick 3.6beta02 is available for download
- Replaces OpenSSL version 1.0.1m with version 1.0.2b.
- Includes OpenVPN versions 2.3.7 in addition to 2.3.6.
- Updates localization, including full Turkish localization and partial Latvian localization.
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2015-06-12: SECURITY UPDATE: Tunnelblick 3.5.1 is available for download
- Replaces OpenSSL version 1.0.1m with version 1.0.1n.
- Fixes problems flushing the DNS cache on some versions of OS X.
2015-04-03: Tunnelblick 3.5.0 is available for download
- This is the first stable version of Tunnelblick 3.5 — many thanks to our tens-of-thousands of beta testers!
- It is identical to 3.5beta10 except for version and build numbers.
See the Release Notes for details.
2015-03-30: Tunnelblick 3.5beta10 is available for download
- Updates localization and credits.
- Adds output from the 'ipconfig' command to the diagnostic info.
- Fixes several problems.
See the Release Notes for details.
2015-03-29: Tunnelblick Uninstaller 1.6 is available for download
- Fixes problems when run on a PowerPC G3 processor.
2015-03-19: SECURITY UPDATE: Tunnelblick 3.5beta08 is available for download
- Includes OpenSSL 1.0.1m. See OpenSSL Security Advisory 19 Mar 2015.
- Updates localization for several languages.
- Adds log entries from helper programs to the output of 'Copy Diagnostic Info to Log'.
- Fixes several problems.
See the Release Notes for details.
2015-03-19: SECURITY UPDATE: Tunnelblick 3.4.4 is available for download
See the Release Notes for details.
2015-01-22: Tunnelblick 3.5beta06 is available for download
- Uses a launchd daemon instead of an SUID helper to start OpenVPN on OS X Version 10.5 ("Leopard") and higher.
- Updates Arabic, Japanese, and Chinese (traditional) localization.
- Fixes several problems.
See the Release Notes for details.
2015-01-08: SECURITY UPDATE: Tunnelblick 3.5beta04 is available for download
See the Release Notes for details.
2015-01-08: SECURITY UPDATE: Tunnelblick 3.4.3 is available for download
See the Release Notes for details.
2014-12-02: SECURITY UPDATE: Tunnelblick 3.5beta02 is available for download
- Includes OpenVPN 2.3.6. See OpenVPN Security Announcement-97597e732b.
- Includes complete localization in 18 languages including Danish and Greek and partial localization in 7 others, including Arabic and Bulgarian.
- Adds the ability to save only the VPN username to the Keychain without saving the VPN password.
- Moves the 'VPN Details' menu item to be above the configurations. May be disabled with the 'putVpnDetailsAtBottom' preference is set TRUE.
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2014-12-01: SECURITY UPDATE: Tunnelblick 3.4.2 is available for download
2014-10-15: SECURITY UPDATE: Tunnelblick 3.4.1 is available for download
- Includes OpenVPN 2.3.6. See OpenVPN Security Announcement-97597e732b.
- Includes complete localization in 18 languages including Greek and Danish and partial localization in 7 others, including Arabic and Bulgarian.
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2014-10-15: SECURITY UPDATE: Tunnelblick 3.5beta02 is available for download
2014-10-03: SECURITY UPDATE: Tunnelblick 3.4.0 is available for download
- Identical to 3.4beta38 (except for version and build numbers).
See the Release Notes for details.
2014-10-01: SECURITY UPDATE: Tunnelblick 3.4beta38 is available for download
- Fixes several security vulnerabilities.
- Includes only OpenVPN 2.3.4. (OpenVPN 2.2.1 is no longer included.)
- Adds a 'Set DNS after routes have been set up' checkbox to the 'Advanced' settings window.
- Includes additional enhancements and fixes several bugs.
See the Release Notes for details.
2014-09-02: Tunnelblick 3.4beta36 is available for download
- Fixes a problem on OS X 10.9.5 ('Mavericks') and 10.10 ('Yosemite') that causes spurious warnings that 'This version has been tampered with'.
- Re-enables the 'Place icon next to Spotlight icon' checkbox on OS X 10.9 ('Mavericks') and higher.
2014-08-07: SECURITY UPDATE: Tunnelblick 3.4beta34 is available for download
See the Release Notes for details.
2014-07-17: Tunnelblick 3.4beta32 is available for download
- Adds the ability to have Tunnelblick VPN Configurations updated the same way that Tunnelblick is updated.
- Uses launchd instead of login items to control the launch of Tunnelblick when the user logs in.
- Fixes several problems.
See the Release Notes for details.
2014-07-08: Tunnelblick 3.4beta30 is available for download
- Includes major enhancements to installing configurations.
- Includes LZO version 2.08.
- Changes many warning dialogs so they do not block other Tunnelblick operations.
- Includes several other enhancements and fixes several problems.
See the Release Notes for details.
2014-06-12: Tunnelblick 3.4beta28 is available for download
- Includes OpenSSL library version 1.0.1h, which fixes several security vulnerabilities (see OpenSSL Security Advisory 05 Jun 2014).
- Includes (some) preparation for OS X 10.10 ('Yosemite').
- Fixes several problems.
See the Release Notes for details.
2014-06-12: Tunnelblick 3.3.4 is available for download
2014-05-02: Tunnelblick 3.4beta26 is available for download
- Replaces OpenVPN version 2.3.3 with version 2.3.4.
- Quits Tunnelblick faster.
- Warns about OpenVPN options that are not allowed on OS X.
- Includes several other enhancements and fixes several problems.
See the Release Notes for details.
2014-04-18: Tunnelblick 3.4beta24 is available for download
- Includes OpenVPN 2.3.3 (as well as 2.2.1 and 2.3.2).
- On OS X 10.6.8 and higher when using OpenVPN 2.3.3 and higher in a TUN configuration, Tunnelblick no longer automatically loads the tunnelblick tun kernel extension (kext). In this situation, OpenVPN will use the UTUN device driver built into OS X.
- Adds additional security checking of programs that Tunnelblick runs as root.
- Moves the 'Copy Diagnostic Info to Clipboard' to the main part of the 'VPN Details' window.
- Adds a 'quit' command forAppleScript which terminates Tunnelblick properly so it is not launched at the next login.
- Includes several other enhancements and fixes several problems.
See the Release Notes for details.
2014-04-08: Tunnelblick 3.3.2 is available for download
- Includes OpenSSL library version 1.0.1g, which does not have the "heartbeat" vulnerability.
- Implements 'Examine OpenVPN Configuration File' for Shared and Deployed configurations.
- Option-click on a checkbox allows the option of changing a setting for all configurations.
- Checks that additional system folders are secure.
- Includes several other enhancements and fixes many problems.
See the Release Notes for details.
2014-04-08: Tunnelblick 3.4beta22 is available for download
- Includes OpenSSL library version 1.0.1g, which does not have the "heartbeat" vulnerability.
- Shows a notification window for the most recently connected configuration upon mouseover of the Tunnelblick icon even if no configuration has been connected since Tunnelblick was launched.
- On OS X 10.9 ('Mavericks'), forces the Tunnelblick icon to be in the standard status icon position (to the left of other icons at the time Tunnelblick is launched). This is a temporary limitation until a bug in OS X is fixed.
- Allows non-ASCII characters (such as accented characters) in token names, passphrases, usernames, and passwords. (Available only in OpenVPN 2.3 and higher.)
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2014-04-08: Yesterday an OpenSSL vulnerability was disclosed (see the OpenSSL Security Advisory).
Although Tunnelblick includes a version of the OpenSSL library which is vulnerable, James Yonan, creator of OpenVPN, has written: "Using the tls-auth option should protect against this vulnerability (assuming that your tls-auth key is not known to the attacker)."
A new version of OpenSSL which is not vulnerable has been committed to the Tunnelblick source code (as r2787) and will be used in the next release of Tunnelblick.
2014-04-01: Tunnelblick no longer loads an image fromPayPal when it displays an alert that an update is available; the image is instead loaded from tunnelblick.net (via https:). This was a change to the tunnelblick.net website, not the program, so it affects all versions of Tunnelblick. (Note: the image is a "Donate" button.)
2014-01-16: Tunnelblick 3.4beta20 is available for download
- Replaces embedded OpenSSL 1.0.1e with 1.0.1f (see OpenSSL Vulnerabilities).
- Checks and corrects ownership/permissions of launchd .plist files when Tunnelblick launches.
- Adds a list of loaded non-Apple kexts to the 'Diagnostic Info'.
- Includes several other enhancements and fixes many bugs.
See the Release Notes for details.
2013-12-18: Tunnelblick 3.4beta18 is available for download
- Includes a new status icon (the icon in the menu bar) more in keeping with recent OS X aesthetics and which includes Retina images. (The old icon may be selected as the 'Tunnelblick 3.3 icon' on the Appearance panel of the 'VPN Details' window.)
- Changes to Tunnelblick's handling of computer sleep:
- Adds a 'Disconnect when computer goes to sleep' checkbox on the 'Advanced' settings window; it is checked by default.
- Before reconnecting any configurations after the computer wakes up from sleep, Tunnelblick waits for an Internet connection if checking that the IP address changed is allowed; or waits for a timeout period (the default is five seconds) if it is not.
- Allows selection of the display on which notification windows will be shown if multiple displays are available.
- Includes several other enhancements and fixes a problem converting some OpenVPN configurations to Tunnelblick VPN Configurations.
See the Release Notes for details.
2013-11-22: Tunnelblick 3.4beta16 is available for download
- Adds the 'Include anonymous profile information' checkbox to the Preferences panel.
- Adds the 'Keep connected' checkbox to the Settings tab of Configurations panel. This will attempt to reconnect a configuration if OpenVPN crashes.
- Allows the 'Place next to Spotlight icon' checkbox (on the Appearance panel) to be checked on OS X 10.9 ("Mavericks") with multiple displays if 'Displays have separate spaces' is unchecked in the Mission Control preferences.
- Fixes a problem with connection restarts (caused, for example, by the OpenVPN --ping-restart option) by not starting OpenVPN with the -up-restart option. Note: the OpenVPN configuration must not contain the 'persist-tun' option or restarts will still fail. (The OpenVPN documentation seems to be incorrect with respect to these two options.)
- Includes several other enhancements and fixes several other problems.
See the Release Notes for details.
2013-10-25: Tunnelblick 3.4beta14 is available for download
- Implements 'Examine OpenVPN Configuration File' for Shared and Deployed configurations.
- On OS X 10.6 ('Snow Leopard') and higher, allows the user to select multiple configurations in the VPN Details window and then change settings for all of the selected configurations. (A confirmation dialog prevents inadvertent changes.) The only setting that cannot be changed this way is the 'Connect' setting.
- Adds per-configuration 'OpenVPN version' selection to the VPN Details window and removes 'OpenVPN version' selection from the Preferences panel.
- Adds a per-configuration 'Check that the apparent IP address changed after connecting' checkbox to the Advanced settings window.
- Includes several other enhancements and fixes several bugs.
See the Release Notes for details.
2013-10-17: Tunnelblick 3.4beta12 is available for download
- Includes several important bug fixes.
See the Release Notes for details.
2013-10-05: Tunnelblick 3.4beta10 is available for download
- Includes additional security checking when Tunnelblick is launched.
- Includes better error checking and reporting when installing a Tunnelblick VPN Configuration.
- Option-click (Alt-click) on most configuration settings checkboxes allows the choice of changing the setting for the selected configuration or for all configurations.
- Includes several other enhancements and bug fixes.
See the Release Notes for details.
2013-09-06: Tunnelblick 3.4beta08 is available for download
- Fixes a problem that caused update checks to fail.
See the Release Notes for details.
2013-09-06: Tunnelblick 3.4beta06 is available for download
- Fixes a crash when accessing checkboxes on the 'Advanced' window.
- Uses digitally signed tun and tap kexts on OS X 10.9 ('Mavericks').
- Recovers more gracefully from some crashes.
- Includes several other minor changes.
See the Release Notes for details.
2013-08-21: Tunnelblick 3.4beta04 is available for download
- Uses https: for update and IP address checks.
- Adds a 'Check for updates to beta versions' checkbox to the 'Preferences' panel. Note: This feature may be used to revert to the latest stable version from a later beta version: if this is un-checked in a beta version, Tunnelblick will offer to install the latest stable version, which may be a 'downgrade' from the beta version to an earlier stable version.
- Includes several other minor changes.
See the Release Notes for details.
2013-08-07: Tunnelblick 3.4beta02 is available for download
This is the first beta release of Tunnelblick 3.4 and includes fixes for several bugs in 3.3.0:
- Fixes a problem installing Tunnelblick VPN Configurations that include .cer, .cert, .der, .p12, .p7b, .p7c, or .pfx files.
- Fixes several problems that cause Tunnelblick to crash or hang.
- Fixes two problems on OS X 10.9 ('Mavericks').
- Includes other enhancements and bug fixes.
See the Release Notes for details.
2013-07-22: Tunnelblick 3.3 is available for download
This is the first stable release of Tunnelblick 3.3. It is identical to version 3.3beta56 except for version information.
Tunnelblick 3.3 Release Notes
2013-07-19: Tunnelblick 3.3beta56 is available for download
Expected to be the last beta before the 3.3 stable release.
- Complete Catalan, Czech, Finnish, French, Hungarian, Italian, Japanese, Korean, Norwegian, Dutch, Portuguese, Russian, Slovak, Swedish, and Chinese (simplified) localization.
- Allows the replacement of a Tunnelblick VPN Configuration that has an Info.plist even if it does not have a CFBundleIdentifier entry.
- Includes several other enhancements and bug fixes.
See the Release Notes for details.
2013-06-08: Tunnelblick 3.3beta54 is available for download
- Includes complete German, Spanish, and Polish localization.
- Includes OpenVPN version 2.3.2.
- Adds the ability to edit a configuration name by clicking on it and editing it directly (OS X 10.6 and higher only).
- Includes other enhancements and fixes several problems.
See the Release Notes for details.
2013-05-20: Tunnelblick 3.3beta52 is available for download
- Fixes several problems converting OpenVPN configurations to Tunnelblick VPN Configurations.
- Fixes several other problems.
See the Release Notes for details.
2013-05-14: Tunnelblick 3.2.9 is available for download
- Preparation for updating to Tunnelblick 3.3.
- Only this and later versions will be able to update to Tunnelblick 3.3 when it becomes available as a stable release.
2013-05-11: Tunnelblick 3.3beta50 is available for download
- Saves and restores folder expansion states and the configuration selected in the configuration list in the 'VPN Details' window.
- Fixes several problems converting OpenVPN configurations to Tunnelblick VPN Configurations.
2013-05-08: Tunnelblick 3.3beta48 is available for download
- Fixes a security issue when installing Tunnelblick VPN Configurations (.tblks).
- Fixes a problem in the build of OpenVPN 2.3.1 that caused it to reject the 'keysize' option.
- Includes several enhancements and fixes several other bugs.
2013-04-22: SECURITY UPDATE: Tunnelblick 3.3beta46 is available for download
2013-04-16: Tunnelblick 3.3beta44 is available for download
-
Fixes a problem when converting an OpenVPN configuration with the 'auth-user-pass' option to a Tunnelblick VPN Configuration.
-
Fixes a problem updating the configurations display when a configuration is added or deleted.
2013-04-13: Tunnelblick 3.3beta42 is available for download
See the Release Notes for details.
2013-04-11: Tunnelblick 3.3beta40 is available for download
- Fixes a problem with Tunnelblick's new 64-bit OpenVPN 2.2.1 by only including the 32-bit versions of OpenVPN.
2013-04-09: Tunnelblick 3.3beta38 is available for download
- Enhances installation of Tunnelblick VPN Configurations with improved error detection and correction.
- Adds an option to force all traffic through the VPN.
- Replaces OpenVPN version 2.3alpha1 with version 2.3.1, and runs OpenVPN, OpenSSL, and LZO in 64-bit mode when it is available (Intel only) — many thanks to HAROLD MOLINA-BULLA.
- Displays configurations in a way that is similar to the 'List View' in a Finder window: contents of folders can be hidden or exposed by clicking on a disclosure triangle next to the folder name. Available only on OS X 10.6 ('Snow Leopard') and higher.
- Includes a button to copy diagnostic information to the Clipboard.
- Includes many other enhancements and fixes several bugs.
2013-03-28: Tunnelblick 3.3beta36 is available for download
- Removes uninstaller from disk image.
2013-03-27: Tunnelblick 3.3beta34 is available for download
- SECURITY UPDATE: Replaces OpenSSL 1.0.1c with 1.0.1e. See OpenSSL Security Advisory 05 Feb 2013.
- Accepts multiple "dhcp-option DOMAIN-SEARCH
<domain>" options in the configuration file or "pushed" by the VPN server. If present and search domains were not manually set, they are prepended to any search domains that came from DHCP.
- Adds an Uninstaller to the Tunnelblick disk image. Double-click to uninstall /Applications/Tunnelblick, or drop a Tunnelblick application onto a copy of the Uninstaller on your boot drive.
- Several bug fixes and some other small changes.
2013-01-08: SECURITY UPDATE: Tunnelblick 3.3beta21b is available for download
- Prepare for Tunnelblick 3.3beta32.**
- Fixes problem detecting Deployed versions of Tunnelblick.
- Fixes problem detecting that Tunnelblick is not installed in /Applications.
2013-01-05: Tunnelblick 3.3beta32 is available for download
- Fixes several security issues.
- Fixes a problem that disabled all choices in the 'Connect' menu on the 'Settings' tab of the 'Configurations' panel of the 'VPN Details' window.
- Fixes a delay when disconnecting if only one configuration is connected.
- Fixes a problem that did not connect a configuration automatically after updating a shadow configuration.
- Fixes problems that caused some scripts in Tunnelblick VPN Configurations to not be executed.
See the Release notes for details.
2012-12-25: Tunnelblick 3.3beta30 is available for download
- Updates the easy-rsa programs to fix bugs in the Tunnelblick patches.
- Secures the easy-rsa folder and its contents.
- Warns the user when trying to install a Tunnelblick VPN Configuration (.tblk) into a Deployed version of Tunnelblick that does not allow shared and/or private configurations.
- Contains several bug fixes.
See the Release notes for details.
2012-10-24: Tunnelblick 3.3beta28 is available for download
- Configurations can share credentials (usernames/passwords and pass phrases) so that the credentials need not be entered separately for each configuration.
- Triple-clicking the Tunnelblick icon opens the VPN Details window.
- Adds 'Speak' to list of connect/disconnect sounds. If selected, connections and unexpected disconnections will be announced with the system default voice.
- Defaults to use the oldest version of OpenVPN available, instead of the newest version.
- Adds the 'Check apparent IP address after connecting' checkbox to the 'Preferences' panel.
- Adds the 'Reconnect when computer wakes up from sleep (if connected when computer went to sleep)' checkbox to the 'Advanced' settings panel.
- Adds the 'Revert Configuration...' menu command to revert a private configuration to it's last secured (shadow) version.
- Contains several other enhancements and bug fixes.
See the Release notes for details.
2012-10-12: Tunnelblick 3.3beta26 is available for download
- Installs, and should be used, only if no Deployed versions of Tunnelblick have previously been installed. (This restriction will probably be removed in later releases.)
- Installs even if there are OpenVPN configurations (.ovpn and .conf files).
- Offers to convert OpenVPN configurations to Tunnelblick VPN Configurations. OpenVPN configurations that are NOT converted are NOT AVAILABLE for connection.
- Contains several other enhancements and bug fixes.
See the Release notes for details.
2012-09-13: Tunnelblick 3.3beta24 is available for download
- Fixes problems installing from disk image.
See the Release notes for details.
2012-09-12: Tunnelblick 3.3beta22 is available for download
- Fixes security issues raised by Tunnelblick Issue 212.
- Installs, and should be used, only if:
- All private configurations are Tunnelblick VPN Configurations (.tblk files);
- It is not a Deployed version; and
- No Deployed versions of Tunnelblick have previously been installed.
- Will install to, and may only be run from, /Applications.
See the Release notes for details.
2012-09-12: Tunnelblick 3.3beta21a is available for download
- Fixes incorrect display of VPN traffic statistics.
- Restores support for PowerPC processors and OS X 10.4 ("Tiger")
- Several other changes and bug fixes.
See the Release notes for details.
2012-08-20: Tunnelblick 3.3beta20 is available for download
- After installing this version, Tunnelblick can only be updated by a computer administrator.
- Attempts IP address check five seconds after a VPN connection is made, with a thirty second timeout. This makes it less likely that the 'No DNS' message will appear when DNS is working properly.
- Refuses to launch if it is a signed version that replaced a Deployed version. It would become become a Deployed version with an invalid digital signature, which causes problems on different versions of OS X.
- Several other changes and bug fixes.
See the Release notes for details.
2012-08-10: Tunnelblick 3.2.8 is available for download
- Fixes several problems caused by digital signatures.
2012-08-06: Tunnelblick 3.2.7 is available for download
- SECURITY UPDATE: Includes OpenSSL 1.0.0j, the latest security update to the 1.0.0 branch of OpenSSL.
- Tunnelblick 3.2 has reverted to using the OpenSSL 1.0.0 branch (from the 1.0.1 branch) because of problems with OpenSSL 1.0.1b on some PowerPC computers.
- Fixes a problem when a Tunnelblick VPN Configuration (.tblk) is not a folder.
- Fixes crashes of the Tunnelblick UI under two separate sets of complex circumstances.
2012-08-04: Tunnelblick 3.3beta18 is available for download
- Fixes several problems on Mountain Lion and temporarily adds extra logging to help diagnose problems.
- Restores the default 'Set nameserver' DNS/WINS setting to restart when 'SearchDomain' is changed.
- Adds a new checkbox on the 'Advanced' settings page that tells Tunnelblick to add the domain name provided by OpenVPN to the start of the list of search domains. This checkbox is disabled and unchecked unless the DNS/WINS setting is set to 'Set nameserver'. Adding the domain name does not take place if the search domains are manually set.
- Checks that the computer's apparent public IP address changes when connected to a VPN. This can help diagnose connection and DNS problems. (Tunnelblick asks for permission to do this the first time it is launched for each user on a computer.)
- Fixes a crash of the Tunnelblick UI in certain complex circumstances.
2012-07-27: Tunnelblick 3.3beta16 is available for download
- Fixes a problem that stops updates from being installed.
2012-07-27: Tunnelblick 3.3beta14 is available for download
- Fixes problems with DNS on OS X 10.8 ("Mountain Lion") when using the default DNS/WINS setting of 'Set nameserver'.
2012-07-24: Tunnelblick 3.3beta12 is available for download
- Reverts to OpenVPN 2.3-alpha1 to fix problems with the build of OpenVPN 2.3_alpha2.
- Fixes problems causing long delays when logging out or sleeping, restarting, or shutting down the computer.
- Fixes a problem causing the Tunnelblick icon to disappear.
2012-07-20: Tunnelblick 3.3beta10 is available for download
- Fixes a problem disabling network connection monitoring.
- Fixes a problem with OpenVPN version 2.3alpha2 being 'unknown' and disabling scripts.
- Fixes a problem implementing preferences having to do with what to do when there are changes to the network settings.
2012-07-19: Tunnelblick 3.3beta08 is available for download
- SECURITY UPDATE: Updates OpenSSL to 1.0.1c (OpenSSL's advisory)
- Tunnelblick is now digitally signed by an Apple 'identified developer', so that it may be installed with the default settings for Gatekeeper on OS X 10.8 ("Mountain Lion").
- Updates to and uses OpenVPN version 2.3alpha2 by default. OpenVPN version 2.2.1 can be used instead by selecting it in the 'Preferences' panel of the 'VPN Details' window.
- Fixes a problem that caused configurations to connect and disconnect repeatedly on OS X 10.8 ("Mountain Lion").
- Fixes a problem that caused a warning on the console log that the 'SUSkippedVersion' preference was unknown.
2012-05-08: Tunnelblick 3.3beta06 is available for download
- Enhances security by digitally signing Sparkle.framework (signed versions only).
- Fixes a problem installing or launching Tunnelblick when a .tblk exists but is not a folder (i.e., not an OS X package).
- Fixes problems on OS X 10.4 ('Tiger').
- Fixes a problem that sometimes caused updates to unsigned versions of Tunnelblick instead of to signed versions.
Note: this was not caused by a problem in Tunnelblick itself — it was caused by a misconfiguration on the tunnelblick.net website (the website used to check for updates). The misconfiguration was fixed on 2012-05-05 at 23:54 +04:00.
2012-05-03: Tunnelblick 3.2.6 is available for download
- Fixes a crash on OS X 10.4 ("Tiger") or PowerPC.
2012-04-29: Tunnelblick 3.2.5 is available for download
- Fixes a problem with the digital signatures of updates in 3.2.4.
See the Release notes for details.
2012-04-28: Tunnelblick 3.3beta04 is available for download
- SECURITY UPDATE: Replaces OpenSSL 1.0.1 with 1.0.1b.
- Enhances security by making all of the application's contents owned by root.
- Fixes several bugs and compiler warnings.
See the Release notes for details.
2012-04-27: Tunnelblick 3.2.4 is available for download
- SECURITY UPDATE: Replaces OpenSSL 1.0.0g with 1.0.1b.
- Fixes a problem with 'While connected' actions not always being saved in the 'Advanced' settings window.
- Disconnects a configuration if a Tunnelblick VPN Configuration script returns a non-zero (mod 256) result.
- Includes enhancements to logging.
- Fixes two bugs and several compiler warnings.
See the Release notes for details.
2012-03-16: Tunnelblick 3.3beta02 is available for download
- Includes several changes to notification windows, including displaying all windows when the pointer (mouse) is over the Tunnelblick icon in the menu bar and displaying 'bandwidth' statistics.
- Includes OpenVPN 2.3alpha1 and OpenSSL 1.0.1.
- Includes 'easy-rsa' scripts for creating certificates and keys, accessed from the new 'Utilities' tab.
- Adds the ability to have a 'route-pre-down.tunnelblick.sh' script that is run before closing a connection. (Requires OpenVPN 2.3alpha1.)
- Adds a 'Suggestion or Bug Report...' menu item to beta versions.
- Includes many other enhancements and bug fixes.
See the Release notes for details.
2012-01-25: Tunnelblick 3.2.3 is available for download
- Fixes a security vulnerability in OpenSSL by updating to OpenSSL version 1.0.0g. See OpenSSL's advisory for details.
- Fixes a bug that sometimes caused repeated restarts of a connection when the search domain changed after the connection was established.
- "Deployed" versions that update from the Tunnelblick website always update to unsigned versions to avoid problems with the OS X Keychain.
- Fixes some French localization.
- At launch, if Tunnelblick is updating from the official Tunnelblick site and has an invalid digital signature (for example, the program is a Deployed version or has been modified in some other way by the user), an update to an unsigned version of Tunnelblick will be offered immediately — even if the user has turned off automatic updates — unless the "updateCheckAutomatically" preference is being forced to false or the user is not an administrator and the "onlyAdminCanUpdate' preference is false or not present.
2012-01-09: Tunnelblick 3.2.2 is available for download
- Fixes six OpenSSL security flaws by updating OpenSSL from 1.0.0e to 1.0.0f. See OpenSSL's advisory for details.
- Fixes a problem that caused a restart of the connection as a result of a DHCP renewal.
- Fixes failure to ask what should be done when the user enters an incorrect private key (passphrase).
2011-12-29: Tunnelblick 3.2.1 is available for download
- Fixes a problem preventing installation/update for some users on OS X 10.4.
- Fixes problems connecting (loading tun/tap kexts) for some users.
2011-12-19: Tunnelblick 3.2 is available for download
- Stable 3.2 release — not a beta release.
- Fixes a security vulnerability found in Tunnelblick 3.2beta36. (See 2011-12-20 Tunnelblick Vulnerability FAQ for details.)
- Includes complete Japanese localization by Yoshihisa Kawamoto.
- Fixes a memory leak and a problem that caused a failure to localize tabs in the "Advanced" settings window.
2011-12-10: Tunnelblick 3.2beta36 is available for download
- Includes additional Japanese localization by Yoshihisa Kawamoto.
- Adds more control over what Tunnelblick does when a network setting changes. Controls are located on the "While Connected" tab of the Advanced configuration settings. (These controls may not be modified if the per-configuration 'CONFIGURATIONNAME-leasewatchOptions' preference is present. That preference is now deprecated.)
- Includes other minor changes and bug fixes.
See the Release notes for details.
2011-11-27: Tunnelblick 3.2beta34 is available for download
- Includes a Hungarian translation by Marcell Szabo and a Czech translation by Petr Šrajer.
- Includes the latest Tuntap release (version 20111101) for Snow Leopard and higher (version 19990913 are used for Tiger and Leopard).
- Automatically updates with the correct signed or unsigned version.
- For an "Unsigned Release" build, " Unsigned" is appended to CFBundleShortVersionString (the marketing version string). Similarly, for a "Debug" build, " Debug" is appended.
See the Release notes for details.
2011-10-12: Tunnelblick 3.2beta32 is available for download
- Includes OpenSSL version 1.0.0e.
- Complete Polish localization by Magdelena Zajac and Łukasz M.
- Improved French localization by Olivier Borowski.
- Removes extra logging by Tuntap kexts introduced in 3.2beta30.
- Does not allow a configuration to be renamed or made private or made shared unless the configuration is disconnected.
- Fixes a problem with configurations set to connect 'when computer starts'.
- Fixes a problem not accepting digits in domain names pushed by the VPN server. Now accepts A-Z, a-z, 0-9, '-', and '.' in domain names. Does NOT accept internationalized domain names.
See the Release notes for details.
2011-08-31: Tunnelblick 3.2beta30 is available for download
- Includes an experimental version of the Tuntap kexts (device drivers) that should fix problems with kernel panics on Lion with some processors.
- Includes both OpenVPN 2.1.4 and OpenVPN 2.2.1.
- Includes complete localization for Catalan, German, Spanish, French, Korean, Norwegian, Dutch, Portuguese, Russian, Swedish, and Chinese (simplified).
- Includes other new features and fixes several bugs.
See the Release notes for details.
2011-07-31: Tunnelblick 3.2beta28 is available for download
- Johan Nilsson and Tim Malmström have provided Swedish localization.
- Prevents kernel panics on OS X 10.7 "Lion".
- Includes other enhancements and fixes several bugs.
See the Release notes for details.
2011-07-20: Tunnelblick 3.2beta26 is available for download
- Aleix Dorca has provided a complete Catalan localization.
- Emma Segev and Tjalling Soldatt have provided complete Dutch localization.
- Peter K. O'Connor has provided complete Chinese (simplified) localization.
- Dennis Ukhanov, Eugene Trufanov, Nail Gilmanov, & Victor Ptichkin have provided complete Russian localization.
- Changes the 'Show/Hide Configuration on Tunnelblick Menu' menu command to be the 'Show on menu' checkbox on the 'Settings' tab.
- Fixes several bugs.
See the Release notes for details.
2011-07-14: Tunnelblick 3.2beta24 is available for download
- Complete German localization by Marcus Schneider.
- Complete French localization by Jeremy Sherman.
- Complete Korean localization by Kyoungmin Kim.
- Complete Norwegian localization by Jon Luberth.
- Complete Portuguese localization by Denis Volpato Martins.
- Includes OpenVPN version 2.2.1.
- Includes other enhancements and fixes several bugs.
See the Release notes for details.
2011-07-01: Tunnelblick 3.2beta22 is available for download
- Includes LZO 2.05, replacing 2.03.
- Sleep/wake change: When the computer wakes up, it now tries to reconnect all configurations that were connected, or were in the process of being connected, when it went to sleep. (Previously, Tunnelblick only tried to reconnect only those configurations that were connected when the computer went to sleep.)
- Adds an additional layer of protection against attacks.
- Fixes several bugs.
See the Release notes for details.
2011-06-29: Tunnelblick 3.2beta20 is available for download
- Fixes a bug causing domains to be ignored when 'Set nameserver' is selected.
See the Release notes for details.
2011-06-27: Tunnelblick 3.2beta18 is available for download
- Changes to the sound settings now take effect immediately.
- Shows a splash screen during installation.
- Cascades status windows when multiple status windows are being displayed simultaneously.
- Fixes a problem that displayed incorrect sound 'on connect' and sound 'on unexpected disconnect' selections when no selections have been made. (Should have displayed 'None' for each, but displayed 'Glass' and 'Basso'.)
- Includes several other small changes and bug fixes.
See the Release notes for details.
2011-06-24: Tunnelblick 3.2beta16 is available for download
- Portuguese localization by Denis Volpato Martins. Thanks!
- Includes a single up/down script pair for Set nameserver which works for both tun and tap devices. Thanks to Nick Williams!
- Implements a new simplified menu and a new 'VPN Details' window:
- Allows easy management of configurations, including renaming, duplicating, and removing them, and the ability to remove a configuration's credentials from the Keychain.
- Includes a new GUI for modifying configuration settings, program preferences, and the appearance of the Tunnelblick icon and menu.
- Optionally plays a sound when the connection is completed or unexpectedly terminated or restarted. By default, the system's 'Glass' sound is used as the tunnel up sound, and the system's 'Basso' sound is used as the tunnel unexpectedly down sound.
- Includes several new features for VPN service providers.
- Fixes several bugs and includes additional security protections.
See the Release notes for details.
2011-05-17: Tunnelblick 3.2beta14 is available for download
- Fixes a crash on startup on OS X 10.4 ("Tiger") and 10.5 ("Leopard").
- Fixes a typo in the help page for the "Appearance" preferences.
See the Release notes for details.
2011-05-16: Tunnelblick 3.2beta12 is available for download
- Tunnelblick now has a preferences window.
- The Tunnelblick menu has been streamlined.
- Tunnelblick is digitally signed to avoid asking the user for permission to access the Keychain.
- Contains other enhancements and fixes several bugs.
See the Release notes for details.
2011-04-29: Tunnelblick 3.2beta10 is available for download
- Includes OpenVPN 2.2 and PKCS#11 1.08.
- Includes complete Portuguese localization by Denis Volpato Martins. Thanks, Denis!
- Removes the 'Clear log' button from the Details window. (It is no longer needed because the log display is cleared at the start of each connection and its size is limited to 100,000 characters. This limit can be overridden by the 'maxLogDisplaySize' preference.).
- Fixes several bugs.
See the Release notes for details.
2011-04-26: Tunnelblick 3.2beta08 is available for download
- No longer uses the down-root plugin if there are no 'user' or 'group' options in the configuration file. (The 'XXX-useDownRootPlugin' preference is removed in this situation.)
- 'Monitor connection' is more tolerant of unimportant changes and may be customized.
- Higher 'verb' levels may be used without performance degradation.
- Fixes several bugs.
See the Release notes for details.
2011-04-06: Tunnelblick 3.2beta06 is available for download
- Allows copy/paste of usernames, passwords, and passphrases in the VPN login window. (For security reasons, passwords and passphrases may only be pasted.)
- Fixes a bug that sometimes failed to alert the user when a VPN username/password or passphrase failed to be authenticated.
- Allows Tunnelblick VPN Configurations ('.tblk' packages) to be uninstalled.
- Includes several other enhancements and bug fixes.
See the Release notes for details.
2011-04-03: Tunnelblick 3.1.7 is available for download
- Fixes problems causing tun/tap kexts to be loaded even though preferences specify that the kext(s) are not to be loaded.
- Fixes a problem with installing some Tunnelblick VPN Configurations (.tblk).
2011-02-19: Tunnelblick 3.1.6 is available for download Full details are in the Release Notes.
- Fixes a bug that caused up/down scripts in Tunnelblick VPN Configurations (.tblks) to be ignored.
2011-02-19: Tunnelblick 3.2beta04 is available for download Full details are in the Release notes.
- Adds AppleScript support.
- Includes complete French localization by Jeremy W. Sherman. Thanks, Jeremy!
- Includes OpenSSL 1.0.0d.
- Unloading of the foo.tap and foo.tun kexts is now attempted only if they are already loaded (previously, it was always attempted and errors were ignored).
- Fixes problems with fast user switching and fixes several bugs.
2011-02-08: Tunnelblick not affected by OpenSSL security flaw
Tunnelblick versions 3.1.5, 3.2beta02, and 3.0.1 are not affected by the OpenSSL security flaw announced today.
2011-02-02: Tunnelblick 3.2beta02 is available for download Full details are in the Release notes.
-
The following scripts may be included in a Tunnelblick VPN Configuration (.tblk package):
-
Fixes problem installing Tunnelblick via double-click when the user's home folder is not on the same volume as /Applications/Tunnelblick.app
-
Other minor changes
2011-02-01: Tunnelblick 3.1.5 is available for download
Fixes a bug causing installation/repair failures on OS X 10.4 ("Tiger") PPC.
2011-01-28: Tunnelblick 3.1.4 is available.
Fixes a bug causing installation/repair failures on OS X 10.4 ("Tiger").
2011-01-28: OS X 10.4 ("Tiger") Installation Failure
Installing or updating to Tunnelblick 3.1.3 on OS X 10.4 ("Tiger") fails. See the first entry in Known Issues for a workaround.
2011-01-27: Security Vulnerability
A bug causing a security vulnerability exists in Tunnelblick versions 3.1, 3.1.1, and 3.1.2. It allows an unprivileged user to erase the contents of any file, including important system files, on any Mac OS X system with a vulnerable version of Tunnelblick installed. As far as is known as of 2011-01-27, the bug cannot be used to take control of the system or obtain root access. All users of Tunnelblick are advised to update to the latest version. For more information including instructions for updating, see the 2011-01-27 Vulnerability FAQ.
2011-01-12: Security Vulnerability
A bug causing an exploitable security problem exists in most Tunnelblick versions before 3.1.1. It allows an unprivileged user to gain root privileges on any Mac OS X system with a vulnerable version of Tunnelblick installed. All users of Tunnelblick are advised to update to the latest version. For more information including instructions for updating, see the 2011-01-12 Vulnerability FAQ.
Thanks to Subreption, LLC for pointing out the security implications of this bug.
2010-12-25: Tunnelblick 3.1.2 is available.
- Removes the 'warns the user when certain unexpected disconnections occur' feature added in version 3.1.1 because it caused Tunnelblick to hang under certain conditions of sleep/wake cycles and/or screensavers. This feature will return in more robust form in a future beta release.
2010-12-18: Tunnelblick 3.1.1 is available. Full details are in the Release notes.
- Fixes several problems and warns the user about unexpected disconnections.
2010-12-05: Tunnelblick 3.1 is available. Full details are in the Release notes.
- Only the version and build numbers were updated.
2010-12-03: Tunnelblick 3.1beta24 is available. Full details are in the Release notes.
- Updates to use OpenSSL 1.0.0c, which fixes several security vulnerabilities.
- Searches for the icon set folder in Tunnelblick.app/Contents/Resources/Deploy and then in /Library/Application Support/Tunnelblick/Shared before defaulting to the version in Tunnelblick.app/Contents/Resources.
- Fixes bug that caused an unneeded folder (dmgFiles) to be built into Tunnelblick.app/Contents/Resources.
2010-12-01: Tunnelblick 3.1beta22 is available. Full details are in the Release notes.
- Updated to include OpenVPN 2.1.4 and OpenSSL 1.0.0b.
- Adds a note to the OpenVPN log (in the Details window) when the computer goes to sleep or wakes up and a connection is terminated/restarted.
- Fixes a problem modifying 'Set nameserver' on other-than-the-first connection.
- Fixes an OpenVPN problem with special case route targets ('remote_host')
2010-10-31: Tunnelblick 3.1beta20 is available. Full details are in the Release notes.
- Removed confusing question when Tunnelblick is launched and foo.tap and/or foo.tun (old Tunnelblick kexts) are loaded. The question asked if foo.tun and foo.tap should be unloaded. Now they are unloaded only as needed to make a connection: foo.tap is unloaded if net.tunnelblick.tap is being loaded for the connection, and foo.tun is unloaded if net.tunnelblick.tun is being loaded for the connection. The 'skipAskingToUnloadFooKexts' preference is no longer used. To override Tunnelblick's automatic loading of the tun or tap kexts required for a connection, see the following per-configuration Preferences: "-doNotLoadTunKext", "-doNotLoadTapKext", "-loadTunKext", and "-loadTapKext".
2010-10-16: Tunnelblick 3.1beta18 is available. Full details are in the Release notes.
- When there are more than eight configurations, the Details window changes to display a list of connections on the left side and a single tab with the log and controls on the right. This was done because of OS X problems when there are a large numbers of tabs. The 'maximumNumberOfTabs' preference specifies the maximum number of tabs to display; if there are more than that many configurations, the display will change as described above. The preference defaults to 8. Set this preference to 0 to always show configurations in a list on the left.
- Streamlines installation by double-clicking to have only one dialog box explaining what will be installed and asking for admin username/password.
- Fixes bug which prevented Standard users from installing Tunnelblick by double-clicking.
- Fixes bugs in automatic installation of .tblks when installing Tunnelblick.
2010-10-08: Tunnelblick 3.1beta16 is available. Full details are in the Release notes.
- Replaces the 'Set nameserver' checkbox with a drop-down list that can display additional choices to allow different up/down scripts to be used.
- Adds the ability to add menu items to the Tunnelblick menu to execute programs (e.g., scripts).
- Adds the ability to specify programs that should be executed when Tunnelblick is launched or when a connection is attempted. (See Additional Menu Commands and Programs for details.)
- Includes localization-related code tweaks by Stefan Bethke and additional German localization by Stefan Bethke, Marcus Schneider, and 'Dr Hok'.
- Fixes a formatting error when displaying file permissions in error messages about being unable to change permissions.
- Fixes a problem causing a connection restart when 'Set nameserver' is used, a DHCP renewal occurs, and there are no WINS settings.
- Fixes issues when using OpenDirectory and the user's home directory is on a non-Mac platform.
2010-09-09: Tunnelblick 3.1beta14 is available. Full details are in the Release notes.
- Fixes a problem that, under certain circumstances, crashes client.down.tunnelblick.sh. (Issue 159.)
- Thanks to Mohammad A. Haque, this release imbeds the OpenSSL version. 1.0.0a library into the included OpenVPN binary. This adds support for over 60 additional digests, ciphers, and TLS ciphers.
- Includes OpenVPN version 2.1.3.
2010-08-08: Tunnelblick 3.1beta12 is available. Full details are in the Release notes.
New features include:
- Italian localization thanks to Pierpaolo Gulla (Grazie!).
- Implements a single, system-wide keyboard shortcut (command-option-F1 by default) to expose the Tunnelblick menu.
- No longer displays Tooltips by default.
- Terminates faster if going to sleep or if no unknown OpenVPN processes exist and no 'when computer starts' configurations are connected.
- Fixes several bugs and includes a workaround for an OpenVPN bug.
2010-07-29: Tunnelblick 3.1beta10 is available. Full details are in the Release notes.
This beta includes an important bug fix:
- Fixes bugs in the shadow copy mechanism that caused connect failures, log-hookup failures, and (possibly) other problems. Thanks to Jim Bo for pointing out the first problem and suggesting a solution. The bugs were introduced in 3.1beta08.
New features include:
- Configurations located in subfolders are displayed in submenus of the main Tunnelblick menu.
- When a Tunnelblick VPN Configuration (.tblk package) is installed, all Tunnelblick VPN Configurations within it will be installed. If these 'inner' configurations are inside subfolders of the outer .tblk, they will be installed as subfolders of the configurations folders and will appear in submenus of the main Tunnelblick menu.
- Automatic installation of configurations from the .dmg has changed: Only one Tunnelblick VPN Configuration (.tblk packages) in the '.auto-install' or '.auto-install' folders and their subfolders is installed.
2010-07-10: Tunnelblick 3.1beta08 is available. Full details are in the Release notes.
In addition to fixing bugs, this release adds several new features:
- Benji Greig has updated the Tunnelblick icon for Coverflow and created a distinctive icon for Tunnelblick VPN Configurations and a new background image for the disk image. Thanks, Benji!
- Log processing and display have been rewritten:
- Log files are created each time a connection is made.
- When displaying the log, the entries are merged such that script log entries follow OpenVPN log entries that have the same date/time.
- The log display now shows the most recent 10000 entries. Earlier entries are not displayed, but are in the log files stored in /tmp/tunnelblick/logs.
- The DNS cache is flushed after a tunnel is established and after it is torn down. This is enabled by default but may be disabled by the per-connection "-doNotFlushCache" preference.
- Tunnelblick VPN Configurations (.tblk packages) may now be shadow copied.
- Configurations (.conf, .ovpn, and .tblk) may be stored in subfolders. Note that .tblk configurations are installed at the top level of the shared or private folder; they must then be moved to a subfolder if that is desired.
2010-06-07: Tunnelblick 3.1beta06 is available.
This is mainly a bug-fix release, but it adds one new feature: It runs new scripts, pre-connect.sh and post-disconnect.sh, as root before connecting and/or after disconnecting if the scripts exist. (They must be in a .tblk package). This allows manipulation of kexts and/or the network configuration before the tun/tap kexts are loaded and OpenVPN is run and after OpenVPN exits and the kexts are unloaded.
The full list of changes is in the Release notes.
2010-05-27: Tunnelblick 3.1beta04 is available.
This is mainly a bug-fix release, but there are some new features:
- The pipes for script output to "Details" window are created on demand instead of when Tunnelblick launches, so if you have 50 configurations, Tunnelblick won't create 50 pipes when launched.
- A DHCP renew which restores the original DNS and/or WINS information no longer causes the connection to restart. This new behavior can reversed be by setting Tunnelblick the boolean preferences '-doNotRestoreOnDnsReset' and/or '-doNotRestoreOnWinsReset' to TRUE.
- The up, down, and leasewatch scripts have been modified to implement options for the scripts which Tunnelblick causes OpenVPN to put first (before OpenVPN parameters) in the command line which starts the up/down scripts.
The full list of changes is in the Release notes.
2010-05-14: Tunnelblick 3.1beta02 is available.
The full list of changes is in the Release notes.
New features include:
- Tunnelblick VPN Configurations: All of the files associated with one configuration may be collected together and put into a Tunnelblick VPN Configuration. Tunnelblick VPN Configurations include features such as version control that make them easy to use for distribution to multiple Tunnelblick users.
- Shared configurations: Tunnelblick VPN Configurations may be shared by all users of a computer without being installed for each user individually. A button on the "Details" window switches a configuration from Shared to Private or Private to Shared.
- Connect when computer starts: Shared and Deployed Tunnelblick VPN Configurations may be set to automatically connect when the computer starts, before anyone is logged in. Such connections can persist through login and logout and may be controlled by Tunnelblick when a user is logged in.
- Tunnelblick deals with the .tun and .tap kexts more flexibly.
|
