tunnelblick icon Tunnelblick free software for OpenVPN on macOS We need translators for several languages…

Highlighted Articles
  News
  Installing Tunnelblick
  Uninstalling Tunnelblick
  Setting up Configurations
  Using Tunnelblick
  Getting VPN Service
  Common Problems
  Configuring OpenVPN
  Release Notes
  Thanks
  FAQ

Discussion Group
  Read Before You Post

Release Notes

On This Page
    Version 5.0
    Version 4.0
    Version 3.8
    Version 3.7
    Older Versions of Tunnelblick
    Uninstaller


Version 5.0

5.0.0beta02 build 6010 (2024-03-12)

  • Fixes a problem that caused the loss of the local DNS configuration on disconnection (Issue 789).
  • Fixes a problem that caused Tunnelblick to fail to launch automatically at login.

See Tunnelblick 4 for more information if you update from Tunnelblick 3.


5.0.0beta01 build 6000 (2024-03-08) (SECURITY UPDATE)

  • (none)


Version 4.0

4.0.1 build 5971 (2024-03-12)

  • Fixes a problem that caused the loss of the local DNS configuration on disconnection (Issue 789).
  • Fixes a problem that caused Tunnelblick to fail to launch automatically at login.

See Tunnelblick 4 for more information.


4.0.0 build 5970 (2024-03-08) (SECURITY UPDATE)

  • Adds support for client-pending-auth with WEB_AUTH.
  • Adds commands to install private and shared configurations from the command line.
  • Changes the versions of OpenVPN/OpenSSL that are included.
  • Changes the default version of OpenVPN/OpenSSL used for connecting.
  • Includes several other improvements and fixes many problems.

See Tunnelblick 4 for more information.


4.0.0beta16 build 5960 (2024-02-27) (SECURITY UPDATE)

  • Fixes a security vulnerability when installing Tunnelblick.
  • Fixes a problem when no OpenVPN "dhcp-option: options are specified and Tunnelblick's "Monitor network settings" is checked.
  • Fixes problems loading system extensions automatically.
  • Includes OpenVPN 2.4.12, 2.5.9, and 2.6.9 with OpenSSL 1.1.1w, and OpenVPN 2.6.9 with OpenSSL 3.0.13.

4.0.0beta15 build 5950 (2024-02-12)

  • Defaults to use OpenVPN 2.6 and OpenSSL 3.0 instead of OpenVPN 2.5 and OpenSSL 1.1.1.
  • Includes OpenVPN 2.6.9, replacing 2.6.8. See Changes in OpenVPN 2.6.
  • Allows disabling IPv6 and/or secondary network services even if no dhcp-option is specified.
  • Fixes a problem when Tunnelblick is not installed by double-clicking.
  • Includes OpenVPN 2.4.12, 2.5.9, and 2.6.9 with OpenSSL 1.1.1w, and OpenVPN 2.6.9 with OpenSSL 3.0.13.

4.0.0beta13 build 5930 (2023-11-21) (SECURITY UPDATE)

  • Fixes a problem installing configurations.

4.0.0beta12 build 5920 (2023-11-19) (SECURITY UPDATE)

  • Includes OpenVPN 2.6.8, replacing 2.6.6. See Changes in OpenVPN 2.6.
  • Enables the 'Copy Diagnostic Info to Clipboard' button even if there are no configurations.
  • Always requires administrator authorization to add or modify an OpenVPN configuration file that has an 'client-crresponse' option.
  • Includes OpenVPN 2.4.12, 2.5.9, and 2.6.8 with OpenSSL 1.1.1w, and OpenVPN 2.6.8 with OpenSSL 3.0.12.

4.0.0beta11 build 5910 (2023-11-05) (SECURITY UPDATE)

  • Fixes a problem installing or securing configurations.

4.0.0beta10 build 5900 (2023-10-25) (SECURITY UPDATE)

  • Includes OpenSSL 3.0.12, replacing 3.0.10. See OpenSSL 3.0 Series Release Notes for details.
  • Adds support for client-pending-auth with WEB_AUTH.
  • Runs only on macOS 10.13 and later.
  • Includes OpenVPN 2.4.12, 2.5.9, and 2.6.6 with OpenSSL 1.1.1w, and OpenVPN 2.6.6 with OpenSSL 3.0.12.

4.0.0beta09 build 5890 (2023-09-11) (SECURITY UPDATE)

  • Includes OpenVPN 2.6.6, replacing 2.6.5, and OpenSSL 1.1.1w, replacing 1.1.1v.
  • Includes the installer log in the Diagnostic Info.
  • Updates localization.
  • Fixes several problems.

4.0.0beta08 build 5880 (2023-08-05) (SECURITY UPDATE)

  • Fixes a problem installing Tunnelblick 4.0.0beta07.

4.0.0beta07 build 5870 (2023-08-02) (SECURITY UPDATE)


4.0.0beta06 build 5860 (2023-06-04) (SECURITY UPDATE)


4.0.0beta05 build 5850 (2023-05-05)

  • Adds OpenVPN 2.6.3 with OpenSSL 3.0.8.
  • Removes OpenVPN 2.3.18, OpenSSL 1.0, and LibreSSL.
  • Adds the "install private configurations" AppleScript command.
  • Truncates the OpenVPN log if it becomes too large (GitHub Issue #739).
  • Fixes a problem with Tunnelblick "freezing" when the OpenVPN log grows too quickly.
  • Fixes problems warning about deprecated, removed, and added OpenVPN options.
  • Fixes a problem after importing configurations (GitHub Issue #723).
  • Fixes a problem when usernames or passwords contain CR or LF characters.
  • Fixes a problem when run on macOS versions below 12.3.

4.0.0beta04 build 5840 (2023-04-24)


4.0.0beta03 build 5830 (2023-04-23)

  • Includes OpenVPN 2.6.3, replacing 2.6.0. See Changes in OpenVPN 2.6.
  • Fixes a problem installing configurations with 'up' commands that run binary executables instead of scripts (GitHub Issue #726).
  • Fixes a problem that caused the Tunnelblick login item to be shown as being from an unidentified developer on macOS Ventura (GitHub Issue #742).
  • Fixes a problem that caused the display of long configuration names to be truncated (GitHub Issue #744).
  • Updates localization.

4.0.0beta02 build 5820 (2023-02-16)

  • Fixes a problem on Apple Silicon Macs that do not have Rosetta 2 installed.
  • Includes OpenVPN 2.5.9, replacing 2.5.8. See Changes in OpenVPN 2.5.9.

4.0.0beta01 build 5810 (2023-02-15)



Version 3.8

3.8.8g build 5779.3 (2023-12-03) (SECURITY UPDATE)

  • Fixes a problem running Tunnelblick's privileged helper.

3.8.8f build 5779.2 (2023-11-29) (SECURITY UPDATE)

  • Fixes several problems installing configurations and installing and running Tunnelblick.

3.8.8e build 5779.1 (2023-10-25) (SECURITY UPDATE)

  • Fixes several problems installing and running Tunnelblick.
  • Runs only on macOS 10.13 and later.
  • Includes OpenVPN 2.3.18 with LibreSSL 2.7.1 and OpenSSL 1.0.2u, and OpenVPN 2.4.12 and 2.5.9 with OpenSSL 1.1.1v.

3.8.8d build 5779 (2023-08-05) (SECURITY UPDATE)

  • Fixes a problem installing Tunnelblick 3.8.8c.

3.8.8c build 5778 (2023-08-02) (SECURITY UPDATE)


3.8.8b build 5777 (2023-06-04) (SECURITY UPDATE)


3.8.8a build 5776 (2023-02-16)

  • Fixes a problem on Apple Silicon Macs that do not have Rosetta 2 installed.
  • Includes OpenVPN 2.5.9, replacing 2.5.8. See Changes in OpenVPN 2.5.9.

3.8.8 build 5775 (2023-02-15)


3.8.8beta04 build 5800 (2022-05-05) (SECURITY UPDATE)


3.8.8beta03 build 5790 (2021-12-23)

  • Includes OpenSSL 1.1.1m, replacing 1.1.1l
  • Includes OpenVPN 2.5.5, replacing 2.5.4.
  • Includes a new checkbox, "Disable secondary network interfaces".
  • Always includes OpenSSL 2.3.18; running Tunnelblick in Rosetta is no longer required.
  • Warns if running under Rosetta.
  • Hides the security token checkbox and textbox in the VPN login window if the per-configuration "-loginWindowSecurityTokenIsHidden" preference is true. (The preference should be set using the 'default' command.)
  • Warns if DNS settings are not as expected after connecting.

3.8.8beta02 build 5780 (2021-11-30) (SECURITY UPDATE)

  • (No changes.)

3.8.7a build 5770 (2021-11-30) (SECURITY UPDATE)

  • Fixes a problem connecting configurations in subfolders.
  • Fixes a problem that omitted a version of OpenVPN when running under Rosetta.

3.8.8beta01 build 5760 (2021-11-28) (SECURITY UPDATE)

  • (No changes.)

3.8.7 build 5750 (2021-11-28) (SECURITY UPDATE)

  • Enhances the security of access to the OpenVPN management interface.
  • Fixes problems with some warnings in dark mode.

3.8.7beta03 build 5740 (2021-10-30)

  • Updates OpenVPN to version 2.5.4 from version 2.5.3. (Also includes 2.3.18 and 2.4.11.)
  • Shows the login window on all spaces.
  • Fixes a problem that prevented loading of kexts on macOS Monterey.
  • Fixes problems that caused Tunnelblick to crash or hang.

3.8.7beta02 build 5730 (2021-09-01) (SECURITY UPDATE)

  • Fixes a problem that caused Tunnelblick to crash.

3.8.7beta01 build 5720 (2021-08-24) (SECURITY UPDATE)

  • (No changes)

3.8.6a build 5711 (2021-09-01) (SECURITY UPDATE)

  • Fixes a problem that caused Tunnelblick to crash.

3.8.6 build 5710 (2021-08-24) (SECURITY UPDATE)

  • Updates OpenSSL to 1.1.1l from 1.1.1k. See OpenSSL Security Advisory 24 August 2021.
  • Sets the initial focus of the VPN login window to the security token text field if the password is filled in.
  • Fixes a problem that caused configurations to be disabled when first installed.

3.8.6beta06 build 5707 (2021-08-17)

  • PREVIEW: For testing only. Runs natively on M1 and Intel Macs.
  • Fixes a failure to run post-disconnect.sh scripts when Tunnelblick shuts down.
  • Fixes a problem that caused updates to fail.

3.8.6beta05 build 5706 (2021-06-26)

  • PREVIEW: For testing only. Runs natively on M1 and Intel Macs.
  • Fixes a bug that can cause undefined behavior.

3.8.6beta04 build 5705 (2021-06-19)

  • PREVIEW: For testing only. Runs natively on M1 and Intel Macs.
  • Replaces OpenVPN 2.5.2 with 2.5.3.
  • Changes the default version of OpenVPN from 2.4 to 2.5.
  • Allows the new "auth-token-user" OpenVPN option.
  • Includes additional debugging information.

3.8.6beta03 build 5700 (2021-04-22) (SECURITY UPDATE)

  • Fixes a problem retrieving saved usernames and passwords.

3.8.6beta02 build 5690 (2021-04-21) (SECURITY UPDATE)

  • Updates Openvpn 2.5.1 to 2.5.2. See Overview of changes in 2.5.2 for details.
  • Updates Openvpn 2.4.10 to 2.4.11. See Overview of changes in 2.4.11 for details.
  • Optionally allows the code from an authentication device to be entered in the VPN login window with the username and password.

3.8.6beta01 build 5680 (2021-04-11)

  • If a fatal error occurs in a beta version of Tunnelblick, macOS will force quit Tunnelblick without notifying the user. On the next launch of Tunnelblick the user will be asked to email extended diagnostic data to the developers.

3.8.5a build 5671 (2021-04-21) (SECURITY UPDATE)


3.8.5 build 5670 (2021-04-11)

  • Includes cosmetic changes to Tunnelblick's credits and copyright notice.
  • Updates translations.

3.8.5beta06 build 5660 (2021-04-02) (SECURITY UPDATE)

  • Updates OpenSSL to 1.1.1k from 1.1.1j. See OpenSSL Security Advisory 25 March 2021.
  • Updates the list of 'safe' OpenVPN options.
  • Updates translations.
  • Fixes a problem that caused settings to be changed when disconnecting.
  • Fixes a problem that caused the wrong log to be displayed.

3.8.5beta05 build 5650 (2021-02-25)

  • Replaces OpenVPN 2.5.0 with 2.5.1. See Overview of changes in 2.5.1.
  • Runs OpenVPN and Tunnelblick's system extensions as a native programs on M1 and Intel-64 processors. The Tunnelblick application runs as a native program on Intel-64 processors, and runs under Rosetta 2 on M1 processors.
  • Updates translations.
  • Fixes a problem that caused tabs or buttons in the 'VPN Details' window to be only partially visible.

3.8.5beta04 build 5640 (2021-02-19)

  • Requires macOS 10.10 or higher.
  • Replaces OpenSSL 1.1.1i with 1.1.1j. See OpenSSL Security Advisory 16 February 2021.
  • Tunnelblick's system extensions run as a native programs on M1 and Intel-64 processors. The Tunnelblick application and OpenVPN run as a native program on Intel-64 processors, and run under Rosetta 2 on M1 processors.
  • Updates translations.
  • Fixes a problem that caused the Tunnelblick application to crash.
  • Fixes bad links in warnings.

3.8.5beta03 build 5630 (2021-02-11)

  • Tunnelblick and OpenVPN are now universal binaries built with Xcode 12.4 and run as native programs on both Intel-64 and M1 processors.
  • Includes a new 'Install system extensions' button on the Utilities panel which facilitates installing system extensions on macOS Big Sur if they are required.
  • Disconnects the VPN automatically and complains if a certificate has expired or is not yet valid.
  • Updates translations.
  • Fixes a problem on macOS Big Sur that hid the 'Advanced' button.
  • Fixes a problem that could cause Tunnelblick to hang.
  • Fixes a problem that caused authentication failures if a passphrase was visible.

3.8.5beta02 build 5620 (2020-12-14) (SECURITY UPDATE)

  • Updates OpenSSL to version 1.1.1i from 1.1.1h. (See OpenSSL Security Advisory 08 December 2020.)
  • Updates OpenVPN to version 2.4.10 from 2.4.9.
  • Updates LZ4 to version 1.93 from 1.92.
  • Updates PKCS11 to version 1.27 from 1.26.0.
  • Includes a button to uninstall Tunnelblick. (On the 'Utilities' panel of the 'VPN Details' window.)
  • Skips warning about disabling tun or tap in Big Sur if tun and tap are set to load automatically.
  • Skips warning when the user cancels an uninstall.
  • Fixes a problem that hid some "'do not warn about this again' checkboxes.
  • Fixes several problems that caused hangs or crashes.

3.8.5beta01 build 5610 (2020-11-09)

  • (No changes from 3.8.4.)

3.8.4b build 5602 (2021-04-02) (SECURITY UPDATE)


3.8.4a build 5601 (2020-12-14) (SECURITY UPDATE)


3.8.4 build 5600 (2020-11-09)

  • Updates localization.
  • Fixes a problem showing information about loading Tunnelblick system extensions.

3.8.4beta07 build 5590 (2020-11-01)

  • Includes OpenVPN 2.5.0, replacing 2.5 Release Candidate 3.
  • Notes when a kext failed to load because the user did not give macOS permission to load it.
  • Checks ownership and permissions of /Library/LaunchDaemons.
  • Adds information to the diagnostic info about Tunnelblick kexts that were enabled or disabled by the user.
  • Includes updated translations.
  • Fixes a problem that caused incorrect ownership of a Tunnelblick folder.
  • Fixes a problem when installing configurations.

3.8.4beta06 build 5580 (2020-10-19)

  • Includes OpenVPN 2.5 Release Candidate 3, replacing OpenVPN Release Candidate 2.
  • Disables checking for IP address changes after five successful connections to a VPN. (Checking is easily re-enabled.)
  • Includes updated translations.

3.8.4beta05 build 5570 (2020-09-23) (SECURITY UPDATE)

  • Includes OpenVPN 2.5 Release Candidate 1, replacing OpenVPN 2.5 Beta 4.
  • Includes OpenSSL 1.1.1h, replacing 1.1.1g.
  • Includes a new 'Warnings' menu to display warnings without disturbing your workflow. The presence of warnings is indicated by a caution symbol on the Tunnelblick icon in the menu bar.
  • Includes updated translations.

3.8.4beta04 build 5560 (2020-09-12) (SECURITY UPDATE)


3.8.4beta03 build 5550 (2020-09-03)

  • Replaces OpenVPN 2.5_beta1 with 2.5_beta3 (see Overview of changes in 2.5).
  • Removes the OpenSSL 1.0.2 version of OpenVPN 2.5. OpenSSL 1.0.2 is included only in OpenVPN 2.3 and 2.4.
  • Removes pkcs#11 support from OpenVPN 2.3. pkcs#11 support is included only in OpenVPN 2.4 and 2.5 using OpenSSL 1.1.
  • Updates pkcs11-helper to version 1.26 from 1.22.

3.8.4beta02 build 5540 (2020-08-18)

  • Includes OpenVPN 2.5_beta1 (see Overview of changes in 2.5).
  • Updates handling of system extensions (kexts) on macOS Big Sur.
  • Updates information about system extensions on macOS Big Sur.
  • Attempts to load required system extensions on macOS Big Sur if SIP is disabled.
  • Warns about the deprecated --inetd OpenVPN option.
  • Includes updated translations.
  • Fixes a problem that rejected the --secret OpenVPN option.

3.8.4beta01 build 5530 (2020-07-24)

  • Updates lz4 to version 1.9.2 from version 1.8.1.2.
  • Updates translations.

3.8.3a build 5521 (2020-09-07) (SECURITY UPDATE)

  • Includes OpenVPN 2.5 Beta 3, replacing OpenVPN 2.5 git master cc76e177 dated 2020-05-19.

3.8.3 build 5520 (2020-07-24)

  • (No changes from Tunnelblick 3.8.3beta03.)

3.8.3beta03 build 5510 (2020-07-16)

  • Fixes problems on macOS Big Sur.
  • Warns about problems loading system extensions when Tunnelblick is launched instead of when connecting a configuration.
  • Updates list of deprecated and removed OpenVPN options.
  • Doesn't log 'A system configuration change was ignored' messages.
  • Warns about scripts that do not terminate.
  • Lists forced preferences in the diagnostic info.
  • Includes updated translations and credits.
  • Fixes a problem that caused 'Icon Sets' folders to be shown as configuration folders in the 'VPN Details' window.
  • Fixes a problem detecting failures when creating temporary directories.
  • Fixes a problem causing multiple identical warning windows to appear.
  • Fixes misleading popup help message for the 'Keep connected' checkbox.
  • Fixes a problem detecting script failures.
  • Fixes a problem that caused spurious 'DNS is not being routed through the VPN' warnings.
  • Fixes a problem that caused configurations to be secured repeatedly.

3.8.3beta02 build 5500 (2020-05-22) (SECURITY UPDATE)

  • Adds the ability to create, delete, and rename folders containing configurations, and to copy and move folders and configurations into and out of folders using drag and drop.
  • Replaces OpenVPN 2.4.8 with 2.4.9. See Changes in OpenVPN v2.4.
  • Replaces OpenSSL 1.1.1e with 1.1.g. See OpenSSL 1.1.1 Release Notes.
  • Updates OpenVPN git master version to commit cc76e177 dated 2020-05-19.
  • Uses a secured copy of user's scripts.
  • Simplifies use of the 'Rename Configuration' action item.
  • Shows most warnings only once per Tunnelblick launch.
  • Modernizes the splash screen.
  • Adds the 'TunnelblickConfigurationName' variable (containing the configuration name) to the Environment for Tunnelblick scripts.
  • Allows scripts to set or modify the password before it is sent to OpenVPN.
  • Warns about tun and tap problems in a future version of macOS.
  • Warns that the --secret option is deprecated in OpenVPN 2.4 and will be removed a future version.
  • Includes updated translations.
  • Fixes a problem that did not allow the use of OpenVPN 2.4 with OpenVPN configurations that include --max-routes.
  • Fixes a problem that did not abandon a connection attempt when the user cancelled the username/password dialog.
  • Fixes a problem that mistakenly considered 'utun' as a valid parameter of OpenVPN's --dev-type option.
  • Fixes a problem that caused the Advanced button to not be disabled when the 'disableAdvancedButton' preference was true.
  • Fixes a problem that failed to show an alert that the requested version of OpenVPN was not being used.
  • Fixes a problem that warned too strongly about options that were ignored by OpenVPN.
  • Fixes a problem that caused the informative tooltips to be editable.
  • Fixes losing a saved username when renaming or duplicating a configuration if the password was not saved.
  • Fixes losing preferences (settings) when renaming or duplicating a configuration.

3.8.3beta01 build 5490 (2020-03-22)

  • Clarifies pop-up help for 'Connect when computer starts'.
  • Includes updated translations.

3.8.2a build 5481 (2020-05-22) (SECURITY UPDATE)


3.8.2 build 5480 (2020-03-22) (SECURITY UPDATE)

  • (No changes from Tunnelblick 3.8.2beta07.)

3.8.2beta07 build 5470 (2020-03-17) (SECURITY UPDATE)


3.8.2beta06 build 5460 (2020-03-12)

  • Built on macOS 10.11.6 with Xcode 7.3.1.
  • Fixes problems causing fatal errors.

3.8.2beta05 build 5450 (2020-02-29)

  • Includes OpenVPN 2.5 git master 32723d2 dated 2020-02-20.
  • Built on macOS 10.14.6 with Xcode 10.3.
  • Ignores invisible files and folders when updating configurations.
  • Includes better logging when updating configurations.
  • Fixes problems using non-Tunnelblick OpenVPN binaries.

3.8.2beta04 build 5440 (2020-01-30)

  • Allows the use of custom OpenVPN binaries.
  • Includes better logging of problems when updating configurations.
  • Includes updated localization.
  • Fixes two problems updating configurations using the 'new' method.
  • Fixes a problem updating or installing configurations that include localization.
  • Fixes a problem when resetting disabled warnings.
  • Fixes a cosmetic problem when deleting a configuration enclosed in a folder.
  • Fixes two misleading log entries.

3.8.2beta03 build 5430 (2019-12-20) (SECURITY UPDATE)

  • Allows standard users to install and update "restricted" configurations if allowed by a computer administrator.
  • Includes a new, simpler method of updating configurations.
  • Optionally requires authentication to connect, using TouchID if it is available.
  • Defaults to use OpenSSL 1.1.1 and replaces OpenSSL 1.0.2t with 1.0.2u. (OpenSSL support for 1.0.2 ends 2019-12-31.)
  • Creates an installer package for tuntap which includes Tunnelblick's notarized kexts.
  • Includes updated translations.
  • Corrects a statement about the removal of the comp-lzo OpenVPN option.
  • Fixes a problem exporting a Tunnelblick setup.

3.8.2beta02 build 5420 (2019-11-01)

  • Includes OpenVPN 2.4.8 (changes), OpenVPN 2.5 at git master commit 57623b4 dated 2019-10-28, and OpenVPN 2.3.18.
  • No longer warns about out-of-date builds.
  • Includes updated localization and adds a partial Thai translation.
  • Fixes a problem that briefly showed overlapping contents when switching panels of the 'VPN Details' window.

3.8.2beta01 build 5410 (2019-09-11) (SECURITY UPDATE)

  • (No changes.)

3.8.1 build 5400 (2019-09-11) (SECURITY UPDATE)


3.8.1beta02 build 5390 (2019-09-05)

  • Replaces OpenVPN git master 2.5 ccb636c withd42f070 dated 2019-08-188.
  • Warns about two or more simultaneous connections with at least one set to use 'Set nameserver'.
  • Includes updated translations.
  • Fixes Issue 564 Catastrophic error: Could not create a temporary directory.

3.8.1beta01 build 5380 (2019-07-19)

  • (No changes)

3.8.0 build 5370 (2019-07-19)

  • Includes the macOS build number when displaying the macOS version.
  • Includes updated translations.

3.8.0beta04 build 5360 (2019-07-06)

  • Has more readable text in dark mode.
  • Has better alignment of items in 'VPN Details' window.
  • Updates the list of public DNS servers known to Tunnelblick.
  • Includes updated translations.
  • Includes clarified and expanded log entries during installation.
  • Fixes a problem recognizing IPv6 DNS servers.
  • Fixes a problem that sometimes expanded collapsed folders when a configuration is renamed.
  • Fixes a problem resetting interfaces on an unexpected disconnect.
  • Fixes a problem that caused Tunnelblick installations to fail.

3.8.0beta03 build 5350 (2019-06-27)

  • Adds AppleScript commands to set username/password/passphrase and delete credentials for a configuration.
  • Includes extra logging of Tunnelblick's standard 'up' and 'down' scripts when the 'DB-UP' preference is set.
  • Includes the time of day in log entries for Tunnelblick's standard 'up' and 'down' scripts.
  • Clarifies the wording of an alert about DNS addresses.
  • Fixes several problems that caused network errors after waking, restarting, or shutting down the computer while a VPN was active.
  • Fixes a problem that sometimes caused Tunnelblick to use excessive CPU time when waking from sleep with no Internet access.
  • Fixes a problem on macOS Catalina that caused a 'System Requirements Not Met' warning that the /tmp folder was not secure.
  • Includes updated translations and credits.

3.8.0beta02 build 5340 (2019-06-03) (SECURITY UPDATE)

  • Fixes a failure to restore DNS settings after shutting down or restarting the computer while a VPN was connected.
  • Warns if configurations set to connect when the system starts are not active.
  • Includes entries from a new "Quit Log" in the Diagnostic Info.
  • Uses a modern divider on the Configurations panel.
  • Includes new translations.
  • Fixes a minor memory leak.
  • Fixes several problems with incorrect entries in the Tunnelblick log.
  • Fixes a problem displaying text in alert windows in dark mode.
  • Fixes problems with misalignment of window elements.
  • Fixes a problem that caused incorrect entries in the Console Log.
  • Fixes a problem displaying the complete Tunnelblick version in the splash screen.
  • Fixes a problem that included entries from "Google Software Update Installer" in the Diagnostic Info.

3.8.0beta01 build 5330 (2019-05-22) (SECURITY UPDATE)

  • Includes a button to reveal or hide a password or passphrase as it is entered.
  • By default, sets up DNS after routes have been set up.
  • If available, uses OpenVPN-supplied DNS instead of DHCP-supplied DNS on tap connections.


Version 3.7

3.7.9a build 5321 (2019-06-03) (SECURITY UPDATE)

  • Fixes a failure to restore DNS settings after shutting down or restarting the computer while a VPN was connected.

3.7.9 build 5320 (2019-05-22) (SECURITY UPDATE)

  • Disables IPv6 only if the OpenVPN server is not accessed via IPv6.
  • Add warnings about common DHCP problems for tap connections.
  • Includes a checkbox to always display the username and password dialog, even if both are saved in the Keychain. (Useful for some 2-factor authentication methods.)
  • Updates translations to 40 languages.
  • Displays environment variables when debugging the 'up' script.
  • Fixes a bug that caused Tunnelblick entries to appear in the log in black.

3.7.9beta11 build 5310 (2019-05-13)

  • Tunnelblick is notarized: Apple verifies that it does not contain malware.
  • Fixes problems with the digital signatures of some components.
  • Fixes a problem that caused failures loading tun and tap kexts.

3.7.9beta09 build 5290 (2019-04-29)

  • Updates translations.
  • Fixes problems which caused fatal errors. (Built with Xcode 7.3.1 on macOS 10.11.6.)

3.7.9beta08 build 5270 (2019-04-28)

  • Fixes a problem which caused fatal errors.

3.7.9beta07 build 5260 (2019-04-27)

  • Fixes a problem which caused fatal errors.

3.7.9beta06 build 5250 (2019-04-25)

  • Tailors warnings to the version of macOS in use if a kext cannot be loaded.
  • Asks the user to email developers when a fatal error occurs.
  • Fixes a problem loading Tunnelblick 3.7.9beta05 kexts on macOS 10.14.5 Beta 2.
  • Fixes a problem that caused links in some warning windows to be broken.

3.7.9beta05 build 5240 (2019-04-10)

  • Displays Tunnelblick messages in the log in blue text and OpenVPN messages in black text.
  • Notes in the system log when a warning has not been displayed because the user elected not to see it.
  • Includes updated information in Building Tunnelblick from Source Code.markdown.
  • Fixes a rare fatal error when a network parameter changes to an empty value.
  • Fixes a long delay when a Tunnelblick installation is cancelled.
  • Fixes problems that caused entries in the log to be out of chronological order.
  • Fixes a problem introduced in 3.7.9beta04 that caused errors when using OpenVPN 2.3.
  • Fixes typos and spacing inconsistencies in the log.

3.7.9beta04 build 5230 (2019-04-03)

  • Warns about common problems with DNS settings.
  • Shows microseconds in the Tunnelblick log.
  • Allows the OpenVPN --tls-crypt-v2-verify option.
  • Improves and shortens the Diagnostic Info.
  • Includes updated translations.
  • Was built on macOS 10.13 with Xcode 10.1.
  • Fixes a problem restoring DNS settings when there are both IPv4 and IPv6 DNS servers.
  • Fixes a problem updating the title of the 'VPN Details' window.
  • Fixes formatting problems in some Console log entries for tunnelblickd.

3.7.9beta03 build 5210 (2019-2-27)

  • Includes OpenVPN 2.4.7 and OpenVPN git master commit ccb636c dated 2019-02-06.
  • Includes OpenSSL 1.0.2r and 1.1.1b (see release notes for 1.0.2 and 1.1.1).
  • Adds two new AppleScript commands: 'added or removed configurations' and 'changed openvpn configuration file…' (see Applescript Support).
  • Includes better detection of errors while connecting and disconnecting.
  • Improves detection of insecure system folders.
  • Updates credits for translators.
  • Complains about OpenVPN's 'config' option being used in a configuration file.
  • Fixes problems that caused multiple warnings about the OpenVPN version being used.
  • Fixes problems resetting the primary interface.
  • Fixes problems setting DNS servers.
  • Fixes problems setting NetBIOS names.
  • Fixes a problem displaying the 'Waiting for network access' status message.

3.7.9beta02 build 5200 (2019-01-10)

  • No longer opens '.ovpn' and '.conf' files when you double-click them. (Instead, drag and drop them on the Tunnelblick icon.)
  • Fixes problems involving the disabling and enabling of network services.
  • Fixes problems when no network is reachable.
  • Fixes a problem that caused a checkbox to not be displayed in right-to-left languages.
  • Fixes a problem when an incorrect private key passphrase is used.

3.7.9beta01 build 5190 (2018-11-29)

  • (No changes)

3.7.8 build 5180 (2018-11-29)

  • Ignores any empty "Icon?" files in a .tblk. (Such files are added by Google Drive as part of its synchronization process.)
  • Fixes a problem that caused all disconnections of "Private" configurations to be considered unexpected.
  • Fixes a problem verifying Tunnelblick's digital signature on macOS 10.9 ("Mavericks").

3.7.8beta02 build 5170 (2018-11-20)

  • Includes OpenSSL 1.0.2q and 1.1.1a (see release notes for 1.0.2 and 1.1.1).
  • Includes OpenVPN git master commit 19d6d9c dated 2018-11-18.
  • Runs up-prefix.sh, up-suffix.sh, down-prefix.sh, down-suffix.sh, route-pre-down-prefix.sh, and route-pre-down-suffix.sh before or after the corresponding Tunnelblick script, passing the arguments and including the environment variables the corresponding script was invoked with.
  • Waits for the network to be set up before starting OpenVPN when the system starts.
  • Warns when a VPN's security certificate has expired.
  • Makes the display of the arguments OpenVPN was started with more readable.
  • Refuses to connect a VPN if no network connection is available.
  • Considers disconnections caused by computer restarts and shutdowns, logouts, and quitting Tunnelblick to be expected.
  • Updates translations.
  • Notifies mDNSResponderHelper that the DNS cache was flushed.
  • Adds information on Network Services to the diagnostic info.
  • Fixes a problem disabling and enabling IPv6.
  • Fixes a problem in macOS Mojave's "dark mode".
  • Fixes a problem with resetting the primary interface.
  • Fixes a problem launching Tunnelblick at login.
  • Fixes a problem displaying newly-installed configurations on the Tunnelblick menu if there are more than 100 configurations.
  • Fixes a problem exporting a Tunnelblick setup.
  • Fixes a problem that caused a failure at the end of the client.down script.
  • Fixes a problem that caused VPN status windows to persist after a disconnection.
  • Fixes a problem that caused unreadable help text.

3.7.8beta01 build 5160 (2018-09-29)

  • Inhibits the announcement of a Tunnelblick update if "Do Not Disturb" is active.

3.7.7 build 5150 (2018-09-29)


3.7.7beta06 build 5140 (2018-09-24)

  • Fixes a problem in 3.7.7beta05 that caused crashes.
  • Fixes a problem that allowed update checks even if "Inhibit automatic update checking and IP Address checking" was checked.

3.7.7beta05 build 5130 (2018-09-22)

  • Includes OpenSSL 1.0.2p and 1.1.1 (see release notes for 1.0.2 and 1.1.1).
  • Supports macOS Mojave (10.14) "Dark Mode".
  • Adds the ability to export and import all Tunnelblick configurations in a single operation.
  • Sets DNS servers and domain via networksetup when using 'Set nameserver (alternate 2)'.
  • Improves security by using full paths for system utilities.
  • Explains the cause of certain routing errors.
  • Improves dialogs explaining why Tunnelblick needs a computer administrator's authorization.
  • Adds 'D. Simeonidis' and 'Zack Strulovitch' to translator credits on the Info panel.
  • Fixes a crash when non-default scripts are used and a connection exists when Tunnelblick is launched.
  • Fixes a typo in a log message shown only when debugging.
  • Fixes a problem that caused the 'on unexpected disconnect' button to be disabled.
  • Fixes a problem that caused spurious warnings in the Console log.
  • Fixes a problem that caused certain Console log messages to generate errors.
  • Fixes a problem that caused errors in seriously damaged systems.

3.7.7beta04 build 5120 (2018-07-31)

  • Allows scripts to control challenge/response (useful for TOTP and other authentication devices). See Multi-factor and Two-factor Authentication for details.
  • Includes OpenVPN git master 57d6f10 dated 2018-07-25, and includes two patches (1 and 2) that have been proposed to fix gateway and IPv6 problems.
  • Uses non-modal windows for more activities.
  • Allows OpenVPN's 'management' option in configuration files (but always overrides it).
  • Improves error handling for extremely unlikely errors.
  • Adds Cloudflare/APNIC DNS servers (IPv4 and IPv6, including 1.1.1.1) to the list of known public DNS providers.
  • Includes updated translations.
  • Complains if /tmp, /private, and /private/tmp are do not have the correct ownership and permissions.
  • Fixes several problems with dynamic challenge/response.
  • Fixes a problem and speeds up checking for apparent public IP address changes.

3.7.7beta03 build 5100 (2018-07-18)

  • Adds support for static and dynamic challenge/response.
  • Adds support for IPv6.
  • Improves 'Copy Diagnostic Info to Clipboard'.
  • Updates translations in many languages.
  • Fixes a problem enabling some checkboxes.
  • Fixes a problem disconnecting.

3.7.7beta02 build 5090 (2018-06-26) (SECURITY UPDATE)

  • Includes OpenVPN git master 4376805 dated 2018-06-24 (and 2.4.6 and 2.3.18).

3.7.6a build 5080 (2018-06-26) (SECURITY UPDATE)

  • Includes a partial Hebrew translation.
  • Fixes a problem when a logout is cancelled.
  • Fixes a problem re-enabling network access for certain devices.

3.7.7beta01 build 5070 (2018-06-09) 3.7.6 build 5060 (2018-06-09)

  • Makes a better choice of the version of OpenVPN to use when the requested version is not available.
  • Warns if the Tunnelblick application is more than 180 days old.
  • Removes untranslated text, resulting in a smaller application.
  • Includes updated translations.
  • Fixes a problem that required the selection of Serbian (Cyrillic) in macOS to get the Serbian (Latin) version of Tunnelblick.
  • Fixes a cosmetic problem when /etc/resolv.conf does not exist.

3.7.6beta04 build 5050 (2018-04-26)

  • Includes OpenVPN 2.4.6 and 2.5 git master 1394192 (and 2.3.18).
  • Requires full App Transport Security.
  • Speeds up menu display when there are hundreds or thousands of configurations.
  • Uses a randomly-selected ephemeral port when connecting to OpenVPN management interfaces.
  • Does not include tun and tap kexts that are no longer used. (Signed and unsigned tun and tap kexts are still included.)
  • Ensures that user-mode scripts always use the system commands that were intended (root-mode scripts already did that).
  • Patches OpenSSL 1.1.0h to avoid warnings about incorrect format characters.
  • Fixes a problem that caused a warning about unknown OpenVPN options even when the options were being ignored by OpenVPN.
  • Fixes a problem that caused the new apparent public IP address to show as 0.0.0.0 when DNS is not working.
  • Fixes a problem that logged warnings that the 'maxConfigurationsForUncachedMenu' preference was unknown.
  • Fixes a problem that generated V2 appcast signatures that could not be validated.
  • Fixes a misleading message in the usage output of openvpnstart.
  • Fixes several potential problems in scripts.

3.7.6beta03 build 5031 (2018-03-28) (SECURITY UPDATE)

See OpenSSL Security Advisory 27 March 2017 and LibreSSL 2.7.1 Release Notes.

  • Includes OpenVPN 2.3.18 with OpenSSL 1.0.2o and LibreSSL 2.7.1.
  • Includes OpenVPN 2.4.5 with OpenSSL 1.1.0h and OpenSSL 1.0.2o.
  • Includes OpenVPN 2.5 git-master 8acc40b dated 2018-03-26 with OpenSSL 1.1.0h and OpenSSL 1.0.2o.
  • Includes PKCS#11 support only in OpenVPN with OpenSSL 1.0.2o and LibreSSL 2.7.1.
  • Includes support for TBMinimumTunnelblickVersion and TBMaximumTunnelblickVersion entries in Tunnelblick VPN Configuration Info.plist files.
  • Fixes a problem that caused a message to always be shown in English.
  • Clarifies wording about computer administrator authorization.
  • Includes updated translations.

3.7.6beta02 build 5030 (2018-03-16)

  • Adds a partial Hebrew translation.
  • Fixes a problem that caused fatal errors from 'Signal 13'.
  • Fixes a problem that caused errors when installing configurations.
  • Fixes problems in easy-rsa when certain paths contain spaces.

3.7.6beta01 build 5020 (2018-03-03) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.5, OpenVPN 2.5 git-master b607900 dated 2018-03-02, and OpenVPN 2.3.18.

3.7.5a build 5011 (2018-03-28) (SECURITY UPDATE)


3.7.5 build 5010 (2018-03-03) (SECURITY UPDATE)

  • Secures Tunnelblick's connection to the OpenVPN management interface with a password.
  • Fixes several problems choosing the best version of OpenVPN to connect a configuration.
  • Fixes a problem that made the git master version of OpenVPN unavailable.
  • Fixes a problem when the 'installer' program is used from the command line.
  • Fixes a problem when using a debug version of Tunnelblick and monitoring network changes.

3.7.5beta08 build 5003 (2018-02-20)

  • Fixes using the wrong version of OpenVPN when the default version is specified.

3.7.5beta07 build 5002 (2018-02-16)

  • Fixes a problem in 3.7.5beta06 that caused hangs on High Sierra for certain configurations.
  • Fixes a problem in 3.7.5beta06 that caused it's version information to include 'Unsigned' (which was incorrect -- it was signed).
  • Fixes a problem that caused the phrase 'Tunnelblick needs to:' to sometimes appear in English.

3.7.5beta06 build 5000 (2018-02-15)

  • Does better selection of the OpenVPN version to be used when connecting.
  • Launches Tunnelblick at login if network access was disabled by Tunnelblick.
  • Notifies the user that network access has been disabled when connecting.
  • Does not use DHCP for tap connections if an IP address is detected (thanks to mpsrig).
  • Includes OpenVPN 2.4.4, 2.3.18, and git master 5a0e82c dated 2018-02-14. (The git master version is linked only with OpenSSL; a version with LibreSSL is available for the other versions.)
  • Adds DNS servers common in China to the list of free public DNS servers (thanks to JLHwung).
  • Adds support for LibreSSL to easy-rsa version 2.
  • Replaces lz4 version 1.7.5 with version 1.8.1.2.
  • Adds and updates translations.
  • Fixes problems with waking from sleep, switching users, and shutting down Tunnelblick.
  • Fixes problems that caused 'fatal error 13'.

3.7.5beta05 build 4980 (2017-12-30)

  • Selects the closest match if Tunnelblick doesn't include the version of OpenVPN specified by the user.
  • Offers to enable network access when a connection attempt is made and network access has been disabled.
  • Fixes a problem installing Tunnelblick.

3.7.5beta04 build 4970 (2017-12-07)

  • Includes OpenSSL 1.0.2n. See OpenSSL Security Advisory 07 December 2017.
  • Includes OpenVPN 2.5 git-master 5a0e82c dated 2017-12-05, OpenVPN 2.4.4, and OpenVPN 2.3.18.
  • Fixes a problem in 3.7.5beta03 that caused crashes and weird behavior.

3.7.5beta03 build 4950 (2017-12-02)

  • Adds a 'Kill Switch' which can automatically disable all network access for unexpected VPN disconnections and/or for expected VPN disconnections. Also adds a menu command to re-enable network access.
  • Adds the ability to automatically reset the primary network interface for unexpected VPN disconnections and/or for expected VPN disconnections.
  • Defaults to OpenVPN 2.4 (currently, 2.4.4) instead of 2.3.
  • Replaces LibreSSL 2.6.2 with 2.6.3.
  • Adds help on mouseover for many buttons.
  • Adds Global Cyber Alliance 9.9.9.9 DNS resolver to the known public servers list.
  • Pops up a window highlighting common warnings and errors in the OpenVPN log, including 'certificate expired' and 'unrecognized option'.
  • Fixes a problem that prevented the installation of configurations that specified settings for '-allowChangesToManuallySetNetworkSettings'.
  • Fixes problems showing and hiding status windows.
  • Fixes a problem that caused errors when checking the apparent public IP address.
  • Fixes a warning about the 'userAgreementVersionAgreedTo' preference (which is no longer used).

3.7.4b build 4921 (2017-12-07) (SECURITY UPDATE)


3.7.5beta02 build 4930 (2017-11-10)


3.7.4a build 4920 (2017-11-10)

  • No longer requires that the user agree to terms and conditions before using Tunnelblick.
  • No longer attempts to access tunnelblick.net before installing or updating.
  • Adds an option to keep a VPN's status window visible when it is connected.

3.7.5beta01 build 4910 (2017-11-03)

  • Includes LibreSSL 2.6.2 (from the development branch), replacing 2.5.5 (from the stable branch).
  • Fixes a broken link to a page explaining kext load failures.
  • Fixes a problem reporting the Tunnelblick version number after an update.

3.7.4 build 4900 (2017-11-03) (SECURITY UPDATE)


3.7.4beta01 build 4890 (2017-10-19)

  • Requires the user's consent to terms of use before installing or updating and logs the install or update to the Tunnelblick website. (Other than the IP address, no personally identifiable information is sent.)
  • Replaces multiple dialog windows with a single window when installing Tunnelblick.
  • Allows the installation of configurations that include options that are new in OpenVPN 2.4.
  • Displays a clearer error message when a system extension (kext) fails to load.
  • Never sends any system information (e.g., macOS version) when checking for updates (even if the user previously agreed to it).
  • Fixes a misleading checkbox. (It was "Do not check for IP address change", now it is "Do not warn about this again for any configuration").
  • Fixes a problem detecting corruption in preferences from ancient versions of Tunnelblick.
  • Fixes a problem detecting running Tunnelblick or OpenVPN instances (false positives).
  • Includes updated translations.

3.7.3 build 4880 (2017-10-19)

  • Fixes a problem in Sparkle Updater which caused checking for updates to happen too frequently.

3.7.3beta03 build 4870 (2017-09-27) (SECURITY UPDATE)


3.7.2a build 4851 (2017-09-27) (SECURITY UPDATE)


3.7.3beta02 build 4861 (2017-08-20)

  • Includes better graphics for several controls.
  • Fixes several problems when installing configurations.

3.7.3beta01 build 4860 (2017-08-17)

  • Includes LibreSSL 2.5.5, lz4 1.7.5, lzo 2.10, OpenSSL 1.0.2l, and pkcs#11 1.22.
  • Includes OpenVPN 2.5 git-master 974513e dated 2017-08-17, OpenVPN 2.4.3, and OpenVPN 2.3.17.
  • Allows manual scrolling of the credits on the Info panel of the VPN Details window.
  • Sets IV_GUI_VER so server log analyzers can detect Tunnelblick.
  • Includes updated translations.
  • Fixes problems highlighting the default Tunnelblick icon in the menu bar.
  • Fixes problems with non-UTF8 data.

3.7.2 build 4850 (2017-08-17)

  • Adds a checkbox to "Allow changes to manually-set network settings".
  • Includes updated translations and credits for translations.
  • Fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
  • Fixes problems with configuration names that include a trailing period.

3.7.2beta03 build 4840 (2017-06-21) SECURITY UPDATE

  • Includes additional translations.
  • Fixes problems with configuration names that include a trailing period.
  • Replaces OpenVPN 2.4.2 with OpenVPN 2.4.3 (OpenVPN change log).
  • Replaces OpenVPN 2.3.16 with OpenVPN 2.3.17 (OpenVPN change log).

From the OpenVPN Downloads page:

OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. We recommend you to upgrade to OpenVPN 2.4.3 or 2.3.17 as soon as possible. More details are available in our official security announcement.

[OpenVPN v2.3.17] is a minor release that mostly fixes the security issues mentioned in our security announcement.


3.7.1b build 4813 (2017-06-21) (SECURITY UPDATE)

From the OpenVPN Downloads page:

OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. We recommend you to upgrade to OpenVPN 2.4.3 or 2.3.17 as soon as possible. More details are available in our official security announcement.

[OpenVPN v2.3.17] is a minor release that mostly fixes the security issues mentioned in our security announcement.


3.7.2beta02 build 4830 (2017-05-20) SECURITY UPDATE

  • Fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
  • Replaces OpenVPN 2.3.15 with OpenVPN 2.3.16 (OpenVPN change log). (Also includes OpenVPN 2.4.2.)

From the OpenVPN Downloads page:

"This [OpenVPN 2.3.16] is a minor release that fixes a few bugs. This release was made primarily because CloudFlare managed to serve obsolete pre-release OpenVPN 2.3.15 tarballs which lack the fix for CVE-2017-7478. The official OpenVPN 2.3.15 Windows installers do have the fix. Nevertheless, you are advised to upgrade your OpenVPN installations to 2.3.16 or 2.4.2."


3.7.1a build 4812 (2017-05-20) (SECURITY UPDATE)

  • Replaces OpenVPN 2.3.15 with OpenVPN 2.3.16 (OpenVPN change log). (Also includes OpenVPN 2.4.2.)

From the OpenVPN Downloads page:

"This [OpenVPN 2.3.16] is a minor release that fixes a few bugs. This release was made primarily because CloudFlare managed to serve obsolete pre-release OpenVPN 2.3.15 tarballs which lack the fix for CVE-2017-7478. The official OpenVPN 2.3.15 Windows installers do have the fix. Nevertheless, you are advised to upgrade your OpenVPN installations to 2.3.16 or 2.4.2."


3.7.2beta01 build 4820 (2017-05-12) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
  • Adds a checkbox to "Allow changes to manually-set network settings".
  • Includes a Flemish translation.
  • Includes updated translations and credits for translations.

3.7.1 build 4811 (2017-05-12) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
  • Includes popup help for most checkboxes and buttons when the pointer hovers over the checkbox or button.
  • Includes updated translations and credits for translations.
  • Allows a path in --askpass and --auth-user-pass OpenVPN options.
  • Warns about problems with paths in --ifconfig-pool-persist and other OpenVPN options.
  • Fixes a problem if the last character in a configuration file is a CR (0x0D).

3.7.1beta02 build 4810 (2017-03-24)

  • Includes OpenVPN 2.4.1 and OpenVPN 2.3.14.
  • Includes updated translations and credits for translations.
  • Allows a path in --askpass and --auth-user-pass OpenVPN options.
  • Warns about problems with paths in --ifconfig-pool-persist and other OpenVPN options.
  • Fixes a problem if the last character in a configuration file is a CR (0x0D).

3.7.1beta01 build 4800 (2017-01-30)

  • Includes popup help for most checkboxes and buttons when the pointer hovers over the checkbox or button.
  • Includes OpenVPN 2.5 git-master 4590c38 dated 2017-01-26, OpenVPN 2.4.0, and OpenVPN 2.3.14.
  • Includes updated translations.

3.7.0 build 4790 (2017-01-30) (SECURITY UPDATE)

  • Includes OpenSSL 1.0.2k. See OpenSSL Security Advisory 26 January 2017.
  • Allows 'dhcp-option SEARCH-DOMAIN' in addition to 'dhcp-option DOMAIN-SEARCH'.
  • Fixes several problems that caused invalid parameters to the 'dhcp-option' OpenVPN option to be misinterpreted.
  • Fixes a problem that caused an erroneous 'Waiting for password' status when renegotiating keys for a connection.
  • Fixes a problem that caused unnecessary logging when tunnelblickd needs to be updated.

3.7.0beta01 build 4780 (2017-01-16)

  • Does more stringent validation of update data.
  • No longer allows "downgrades" from a beta version to a stable version using the update mechanism.
  • Updatable configurations no longer require DSA signatures (although they optionally can be required).
  • Fixes a problem when a Keychain item has been deleted.

Older Versions of Tunnelblick

Old Release Notes has release notes for older versions of Tunnelblick.


Uninstaller

The Tunnelblick Uninstaller has been replaced by an "Uninstall" button on the "Utilities" panel of Tunnelblick's "VPN Details" window as of Tunnelblick 3.8.5beta02.

1.13 build 5330 (2019-05-22) (SECURITY UPDATE)

  • Tunnelblick Uninstaller is notarized: Apple verifies that it does not contain malware.

1.12 build 5090 (2018-06-26)

  • Fixes a problem when the user doesn't respond to the uninstall success/failure dialog within a few minutes.
  • Fixes a problem that caused the uninstaller to bounce in the Dock.

1.11 build 5051 (2018-05-08)

  • Fixes a problem that caused the uninstaller to fail on Hackintoshes and Macs with corrupted NVRAM.

1.10 build 5050 (2018-04-26)

  • Tunnelblick Uninstaller is now a 64-bit, Intel-only application for macOS 10.7.5 and higher only.
  • Displays detailed log if user doesn't respond to success/failure dialog.
  • Includes information about Tunnelblick login items and Tunnelblick items in the Dock.
  • Logs activity to a temporary file to help debugging if the uninstaller crashes. (The file is deleted at the end of the uninstall process.)
  • Fixes a problem that caused 'The command exited with a non-zero status' errors.
  • Fixes a problem clearing users' user defaults cache.
  • Fixes problems deleting files and folders when they have been locked.
  • Fixes a problem detecting login items from old versions of Tunnelblick.
  • Fixes several other potential problems.

Version 1.9 build 4990 (2018-01-31)

  • Does a slow 'secure erase' only on non-SSD drives (SSDs do not implement 'secure erase').
  • Clarifies wording in some dialogs.
  • Fixes a problem if an uninstall was followed by an install without restarting the computer.
  • Fixes a bug that caused the success or failure dialog window to be replaced with an Applescript error window if it was not dismissed within two minutes of the completion of the uninstall.

Version 1.8 build 4405 (2015-09-30)

  • Deletes Tunnelblick from all users’ Trash.
  • Includes clearer error messages concerning Keychain items, particularly on OS X 10.4.
  • Corrects the program name displayed by OS X when asking for the users’ username/password.

Version 1.7 (2015-06-20)

  • Uninstalls even if the Tunnelblick application has been damaged or does not exist (for example, it has been put in the Trash).
  • Unloads Tunnelblick daemons if they are loaded.
  • Removes OpenVPN and tunnelblickd crash logs.
  • Removes tunnelblickd logs in rebranded versions of Tunnelblick.
  • Removes the temporary authorization icon.
  • Includes better error messages.
  • Fixes a problem that caused the tunnelblickd daemon to be unloaded even when the uninstaller is only being tested.
  • Fixes a problem that displayed a 'Details' button (which was ignored) when certain error conditions arose.
  • Fixes a problem that sometimes caused an error when removing part of the Tunnelblick application.

Version 1.6 (2015-03-29)

  • Fixes problems when run on a PowerPC G3 processor.

Version 1.5 (2015-01-14)

  • Removes the new entry in /Library/LaunchDaemons made by Tunnelblick 3.4beta05 (build 4204) and higher

Version 1.4 (2014-09-10)

  • Removes the new entries in /Library/LaunchDaemons made by Tunnelblick 3.4beta37 (build 2957) and higher

Version 1.3 (2014-07-10)

  • Removes the new entry in ~/Library/LaunchAgents made by Tunnelblick 3.4beta32 and higher

Version 1.2 (2014-02-11)

  • Fixes a problem causing "application is damaged" warnings on Mavericks
  • Fixes a problem with text being repeated in the opening window
  • Fixes a problem with the opening window not appearing until the Uninstaller icon in the Dock is clicked

Version 1.1 (2014-01-08)

  • Removes preferences cache if it is present
  • Warns user if Tunnelblick or OpenVPN is running
  • Ready for localization

Version 1.0 (2013-03-28)