tunnelblick icon Tunnelblick free software for OpenVPN on OS X and macOS We need translators for several languages…
Home Downloads Support Documents Issues Source Contribute Contact

Highlighted Articles
  News
  Installing Tunnelblick
  Uninstalling Tunnelblick
  Setting up Configurations
  Using Tunnelblick
  Getting VPN Service
  Common Problems
  Configuring OpenVPN
  Release Notes
  Thanks
  FAQ

Discussion Group
  Read Before You Post

Release Notes

On This Page
    Version 3.7
    Older Versions of Tunnelblick
    Uninstaller


Version 3.7

3.7.9beta01 build 5190 (2018-11-29)

  • (No changes)

3.7.8 build 5180 (2018-11-29)

  • Ignores any empty "Icon?" files in a .tblk. (Such files are added by Google Drive as part of its synchronization process.)
  • Fixes a problem that caused all disconnections of "Private" configurations to be considered unexpected.
  • Fixes a problem verifying Tunnelblick's digital signature on macOS 10.9 ("Mavericks").

3.7.8beta02 build 5170 (2018-11-20)

  • Includes OpenSSL 1.0.2q and 1.1.1a (see release notes for 1.0.2 and 1.1.1).
  • Includes OpenVPN git master commit 19d6d9c dated 2018-11-18.
  • Runs up-prefix.sh, up-suffix.sh, down-prefix.sh, down-suffix.sh, route-pre-down-prefix.sh, and route-pre-down-suffix.sh before or after the corresponding Tunnelblick script, passing the arguments and including the environment variables the corresponding script was invoked with.
  • Waits for the network to be set up before starting OpenVPN when the system starts.
  • Warns when a VPN's security certificate has expired.
  • Makes the display of the arguments OpenVPN was started with more readable.
  • Refuses to connect a VPN if no network connection is available.
  • Considers disconnections caused by computer restarts and shutdowns, logouts, and quitting Tunnelblick to be expected.
  • Updates translations.
  • Notifies mDNSResponderHelper that the DNS cache was flushed.
  • Adds information on Network Services to the diagnostic info.
  • Fixes a problem disabling and enabling IPv6.
  • Fixes a problem in macOS Mojave's "dark mode".
  • Fixes a problem with resetting the primary interface.
  • Fixes a problem launching Tunnelblick at login.
  • Fixes a problem displaying newly-installed configurations on the Tunnelblick menu if there are more than 100 configurations.
  • Fixes a problem exporting a Tunnelblick setup.
  • Fixes a problem that caused a failure at the end of the client.down script.
  • Fixes a problem that caused VPN status windows to persist after a disconnection.
  • Fixes a problem that caused unreadable help text.

3.7.8beta01 build 5160 (2018-09-29)

  • Inhibits the announcement of a Tunnelblick update if "Do Not Disturb" is active.

3.7.7 build 5150 (2018-09-29)


3.7.7beta06 build 5140 (2018-09-24)

  • Fixes a problem in 3.7.7beta05 that caused crashes.
  • Fixes a problem that allowed update checks even if "Inhibit automatic update checking and IP Address checking" was checked.

3.7.7beta05 build 5130 (2018-09-22)

  • Includes OpenSSL 1.0.2p and 1.1.1 (see release notes for 1.0.2 and 1.1.1).
  • Supports macOS Mojave (10.14) "Dark Mode".
  • Adds the ability to export and import all Tunnelblick configurations in a single operation.
  • Sets DNS servers and domain via networksetup when using 'Set nameserver (alternate 2)'.
  • Improves security by using full paths for system utilities.
  • Explains the cause of certain routing errors.
  • Improves dialogs explaining why Tunnelblick needs a computer administrator's authorization.
  • Adds 'D. Simeonidis' and 'Zack Strulovitch' to translator credits on the Info panel.
  • Fixes a crash when non-default scripts are used and a connection exists when Tunnelblick is launched.
  • Fixes a typo in a log message shown only when debugging.
  • Fixes a problem that caused the 'on unexpected disconnect' button to be disabled.
  • Fixes a problem that caused spurious warnings in the Console log.
  • Fixes a problem that caused certain Console log messages to generate errors.
  • Fixes a problem that caused errors in seriously damaged systems.

3.7.7beta04 build 5120 (2018-07-31)

  • Allows scripts to control challenge/response (useful for TOTP and other authentication devices). See Multi-factor and Two-factor Authentication for details.
  • Includes OpenVPN git master 57d6f10 dated 2018-07-25, and includes two patches (1 and 2) that have been proposed to fix gateway and IPv6 problems.
  • Uses non-modal windows for more activities.
  • Allows OpenVPN's 'management' option in configuration files (but always overrides it).
  • Improves error handling for extremely unlikely errors.
  • Adds Cloudflare/APNIC DNS servers (IPv4 and IPv6, including 1.1.1.1) to the list of known public DNS providers.
  • Includes updated translations.
  • Complains if /tmp, /private, and /private/tmp are do not have the correct ownership and permissions.
  • Fixes several problems with dynamic challenge/response.
  • Fixes a problem and speeds up checking for apparent public IP address changes.

3.7.7beta03 build 5100 (2018-07-18)

  • Adds support for static and dynamic challenge/response.
  • Adds support for IPv6.
  • Improves 'Copy Diagnostic Info to Clipboard'.
  • Updates translations in many languages.
  • Fixes a problem enabling some checkboxes.
  • Fixes a problem disconnecting.

3.7.7beta02 build 5090 (2018-06-26) (SECURITY UPDATE)

  • Includes OpenVPN git master 4376805 dated 2018-06-24 (and 2.4.6 and 2.3.18).

3.7.6a build 5080 (2018-06-26) (SECURITY UPDATE)

  • Includes a partial Hebrew translation.
  • Fixes a problem when a logout is cancelled.
  • Fixes a problem re-enabling network access for certain devices.

3.7.7beta01 build 5070 (2018-06-09)
3.7.6 build 5060 (2018-06-09)

  • Makes a better choice of the version of OpenVPN to use when the requested version is not available.
  • Warns if the Tunnelblick application is more than 180 days old.
  • Removes untranslated text, resulting in a smaller application.
  • Includes updated translations.
  • Fixes a problem that required the selection of Serbian (Cyrillic) in macOS to get the Serbian (Latin) version of Tunnelblick.
  • Fixes a cosmetic problem when /etc/resolv.conf does not exist.

3.7.6beta04 build 5050 (2018-04-26)

  • Includes OpenVPN 2.4.6 and 2.5 git master 1394192 (and 2.3.18).
  • Requires full App Transport Security.
  • Speeds up menu display when there are hundreds or thousands of configurations.
  • Uses a randomly-selected ephemeral port when connecting to OpenVPN management interfaces.
  • Does not include tun and tap kexts that are no longer used. (Signed and unsigned tun and tap kexts are still included.)
  • Ensures that user-mode scripts always use the system commands that were intended (root-mode scripts already did that).
  • Patches OpenSSL 1.1.0h to avoid warnings about incorrect format characters.
  • Fixes a problem that caused a warning about unknown OpenVPN options even when the options were being ignored by OpenVPN.
  • Fixes a problem that caused the new apparent public IP address to show as 0.0.0.0 when DNS is not working.
  • Fixes a problem that logged warnings that the 'maxConfigurationsForUncachedMenu' preference was unknown.
  • Fixes a problem that generated V2 appcast signatures that could not be validated.
  • Fixes a misleading message in the usage output of openvpnstart.
  • Fixes several potential problems in scripts.

3.7.6beta03 build 5031 (2018-03-28) (SECURITY UPDATE)

See OpenSSL Security Advisory 27 March 2017 and LibreSSL 2.7.1 Release Notes.

  • Includes OpenVPN 2.3.18 with OpenSSL 1.0.2o and LibreSSL 2.7.1.
  • Includes OpenVPN 2.4.5 with OpenSSL 1.1.0h and OpenSSL 1.0.2o.
  • Includes OpenVPN 2.5 git-master 8acc40b dated 2018-03-26 with OpenSSL 1.1.0h and OpenSSL 1.0.2o.
  • Includes PKCS#11 support only in OpenVPN with OpenSSL 1.0.2o and LibreSSL 2.7.1.
  • Includes support for TBMinimumTunnelblickVersion and TBMaximumTunnelblickVersion entries in Tunnelblick VPN Configuration Info.plist files.
  • Fixes a problem that caused a message to always be shown in English.
  • Clarifies wording about computer administrator authorization.
  • Includes updated translations.

3.7.6beta02 build 5030 (2018-03-16)

  • Adds a partial Hebrew translation.
  • Fixes a problem that caused fatal errors from 'Signal 13'.
  • Fixes a problem that caused errors when installing configurations.
  • Fixes problems in easy-rsa when certain paths contain spaces.

3.7.6beta01 build 5020 (2018-03-03) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.5, OpenVPN 2.5 git-master b607900 dated 2018-03-02, and OpenVPN 2.3.18.

3.7.5a build 5011 (2018-03-28) (SECURITY UPDATE)


3.7.5 build 5010 (2018-03-03) (SECURITY UPDATE)

  • Secures Tunnelblick's connection to the OpenVPN management interface with a password.
  • Fixes several problems choosing the best version of OpenVPN to connect a configuration.
  • Fixes a problem that made the git master version of OpenVPN unavailable.
  • Fixes a problem when the 'installer' program is used from the command line.
  • Fixes a problem when using a debug version of Tunnelblick and monitoring network changes.

3.7.5beta08 build 5003 (2018-02-20)

  • Fixes using the wrong version of OpenVPN when the default version is specified.

3.7.5beta07 build 5002 (2018-02-16)

  • Fixes a problem in 3.7.5beta06 that caused hangs on High Sierra for certain configurations.
  • Fixes a problem in 3.7.5beta06 that caused it's version information to include 'Unsigned' (which was incorrect -- it was signed).
  • Fixes a problem that caused the phrase 'Tunnelblick needs to:' to sometimes appear in English.

3.7.5beta06 build 5000 (2018-02-15)

  • Does better selection of the OpenVPN version to be used when connecting.
  • Launches Tunnelblick at login if network access was disabled by Tunnelblick.
  • Notifies the user that network access has been disabled when connecting.
  • Does not use DHCP for tap connections if an IP address is detected (thanks to mpsrig).
  • Includes OpenVPN 2.4.4, 2.3.18, and git master 5a0e82c dated 2018-02-14. (The git master version is linked only with OpenSSL; a version with LibreSSL is available for the other versions.)
  • Adds DNS servers common in China to the list of free public DNS servers (thanks to JLHwung).
  • Adds support for LibreSSL to easy-rsa version 2.
  • Replaces lz4 version 1.7.5 with version 1.8.1.2.
  • Adds and updates translations.
  • Fixes problems with waking from sleep, switching users, and shutting down Tunnelblick.
  • Fixes problems that caused 'fatal error 13'.

3.7.5beta05 build 4980 (2017-12-30)

  • Selects the closest match if Tunnelblick doesn't include the version of OpenVPN specified by the user.
  • Offers to enable network access when a connection attempt is made and network access has been disabled.
  • Fixes a problem installing Tunnelblick.

3.7.5beta04 build 4970 (2017-12-07)

  • Includes OpenSSL 1.0.2n. See OpenSSL Security Advisory 07 December 2017.
  • Includes OpenVPN 2.5 git-master 5a0e82c dated 2017-12-05, OpenVPN 2.4.4, and OpenVPN 2.3.18.
  • Fixes a problem in 3.7.5beta03 that caused crashes and weird behavior.

3.7.5beta03 build 4950 (2017-12-02)

  • Adds a 'Kill Switch' which can automatically disable all network access for unexpected VPN disconnections and/or for expected VPN disconnections. Also adds a menu command to re-enable network access.
  • Adds the ability to automatically reset the primary network interface for unexpected VPN disconnections and/or for expected VPN disconnections.
  • Defaults to OpenVPN 2.4 (currently, 2.4.4) instead of 2.3.
  • Replaces LibreSSL 2.6.2 with 2.6.3.
  • Adds help on mouseover for many buttons.
  • Adds Global Cyber Alliance 9.9.9.9 DNS resolver to the known public servers list.
  • Pops up a window highlighting common warnings and errors in the OpenVPN log, including 'certificate expired' and 'unrecognized option'.
  • Fixes a problem that prevented the installation of configurations that specified settings for '-allowChangesToManuallySetNetworkSettings'.
  • Fixes problems showing and hiding status windows.
  • Fixes a problem that caused errors when checking the apparent public IP address.
  • Fixes a warning about the 'userAgreementVersionAgreedTo' preference (which is no longer used).

3.7.4b build 4921 (2017-12-07) (SECURITY UPDATE)


3.7.5beta02 build 4930 (2017-11-10)


3.7.4a build 4920 (2017-11-10)

  • No longer requires that the user agree to terms and conditions before using Tunnelblick.
  • No longer attempts to access tunnelblick.net before installing or updating.
  • Adds an option to keep a VPN's status window visible when it is connected.

3.7.5beta01 build 4910 (2017-11-03)

  • Includes LibreSSL 2.6.2 (from the development branch), replacing 2.5.5 (from the stable branch).
  • Fixes a broken link to a page explaining kext load failures.
  • Fixes a problem reporting the Tunnelblick version number after an update.

3.7.4 build 4900 (2017-11-03) (SECURITY UPDATE)


3.7.4beta01 build 4890 (2017-10-19)

  • Requires the user's consent to terms of use before installing or updating and logs the install or update to the Tunnelblick website. (Other than the IP address, no personally identifiable information is sent.)
  • Replaces multiple dialog windows with a single window when installing Tunnelblick.
  • Allows the installation of configurations that include options that are new in OpenVPN 2.4.
  • Displays a clearer error message when a system extension (kext) fails to load.
  • Never sends any system information (e.g., macOS version) when checking for updates (even if the user previously agreed to it).
  • Fixes a misleading checkbox. (It was "Do not check for IP address change", now it is "Do not warn about this again for any configuration").
  • Fixes a problem detecting corruption in preferences from ancient versions of Tunnelblick.
  • Fixes a problem detecting running Tunnelblick or OpenVPN instances (false positives).
  • Includes updated translations.

3.7.3 build 4880 (2017-10-19)

  • Fixes a problem in Sparkle Updater which caused checking for updates to happen too frequently.

3.7.3beta03 build 4870 (2017-09-27) (SECURITY UPDATE)


3.7.2a build 4851 (2017-09-27) (SECURITY UPDATE)


3.7.3beta02 build 4861 (2017-08-20)

  • Includes better graphics for several controls.
  • Fixes several problems when installing configurations.

3.7.3beta01 build 4860 (2017-08-17)

  • Includes LibreSSL 2.5.5, lz4 1.7.5, lzo 2.10, OpenSSL 1.0.2l, and pkcs#11 1.22.
  • Includes OpenVPN 2.5 git-master 974513e dated 2017-08-17, OpenVPN 2.4.3, and OpenVPN 2.3.17.
  • Allows manual scrolling of the credits on the Info panel of the VPN Details window.
  • Sets IV_GUI_VER so server log analyzers can detect Tunnelblick.
  • Includes updated translations.
  • Fixes problems highlighting the default Tunnelblick icon in the menu bar.
  • Fixes problems with non-UTF8 data.

3.7.2 build 4850 (2017-08-17)

  • Adds a checkbox to "Allow changes to manually-set network settings".
  • Includes updated translations and credits for translations.
  • Fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
  • Fixes problems with configuration names that include a trailing period.

3.7.2beta03 build 4840 (2017-06-21) SECURITY UPDATE

  • Includes additional translations.
  • Fixes problems with configuration names that include a trailing period.
  • Replaces OpenVPN 2.4.2 with OpenVPN 2.4.3 (OpenVPN change log).
  • Replaces OpenVPN 2.3.16 with OpenVPN 2.3.17 (OpenVPN change log).

From the OpenVPN Downloads page:

OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. We recommend you to upgrade to OpenVPN 2.4.3 or 2.3.17 as soon as possible. More details are available in our official security announcement.

[OpenVPN v2.3.17] is a minor release that mostly fixes the security issues mentioned in our security announcement.


3.7.1b build 4813 (2017-06-21) (SECURITY UPDATE)

From the OpenVPN Downloads page:

OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. We recommend you to upgrade to OpenVPN 2.4.3 or 2.3.17 as soon as possible. More details are available in our official security announcement.

[OpenVPN v2.3.17] is a minor release that mostly fixes the security issues mentioned in our security announcement.


3.7.2beta02 build 4830 (2017-05-20) SECURITY UPDATE

  • Fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
  • Replaces OpenVPN 2.3.15 with OpenVPN 2.3.16 (OpenVPN change log). (Also includes OpenVPN 2.4.2.)

From the OpenVPN Downloads page:

"This [OpenVPN 2.3.16] is a minor release that fixes a few bugs. This release was made primarily because CloudFlare managed to serve obsolete pre-release OpenVPN 2.3.15 tarballs which lack the fix for CVE-2017-7478. The official OpenVPN 2.3.15 Windows installers do have the fix. Nevertheless, you are advised to upgrade your OpenVPN installations to 2.3.16 or 2.4.2."


3.7.1a build 4812 (2017-05-20) (SECURITY UPDATE)

  • Replaces OpenVPN 2.3.15 with OpenVPN 2.3.16 (OpenVPN change log). (Also includes OpenVPN 2.4.2.)

From the OpenVPN Downloads page:

"This [OpenVPN 2.3.16] is a minor release that fixes a few bugs. This release was made primarily because CloudFlare managed to serve obsolete pre-release OpenVPN 2.3.15 tarballs which lack the fix for CVE-2017-7478. The official OpenVPN 2.3.15 Windows installers do have the fix. Nevertheless, you are advised to upgrade your OpenVPN installations to 2.3.16 or 2.4.2."


3.7.2beta01 build 4820 (2017-05-12) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
  • Adds a checkbox to "Allow changes to manually-set network settings".
  • Includes a Flemish translation.
  • Includes updated translations and credits for translations.

3.7.1 build 4811 (2017-05-12) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
  • Includes popup help for most checkboxes and buttons when the pointer hovers over the checkbox or button.
  • Includes updated translations and credits for translations.
  • Allows a path in --askpass and --auth-user-pass OpenVPN options.
  • Warns about problems with paths in --ifconfig-pool-persist and other OpenVPN options.
  • Fixes a problem if the last character in a configuration file is a CR (0x0D).

3.7.1beta02 build 4810 (2017-03-24)

  • Includes OpenVPN 2.4.1 and OpenVPN 2.3.14.
  • Includes updated translations and credits for translations.
  • Allows a path in --askpass and --auth-user-pass OpenVPN options.
  • Warns about problems with paths in --ifconfig-pool-persist and other OpenVPN options.
  • Fixes a problem if the last character in a configuration file is a CR (0x0D).

3.7.1beta01 build 4800 (2017-01-30)

  • Includes popup help for most checkboxes and buttons when the pointer hovers over the checkbox or button.
  • Includes OpenVPN 2.5 git-master 4590c38 dated 2017-01-26, OpenVPN 2.4.0, and OpenVPN 2.3.14.
  • Includes updated translations.

3.7.0 build 4790 (2017-01-30) (SECURITY UPDATE)

  • Includes OpenSSL 1.0.2k. See OpenSSL Security Advisory 26 January 2017.
  • Allows 'dhcp-option SEARCH-DOMAIN' in addition to 'dhcp-option DOMAIN-SEARCH'.
  • Fixes several problems that caused invalid parameters to the 'dhcp-option' OpenVPN option to be misinterpreted.
  • Fixes a problem that caused an erroneous 'Waiting for password' status when renegotiating keys for a connection.
  • Fixes a problem that caused unnecessary logging when tunnelblickd needs to be updated.

3.7.0beta01 build 4780 (2017-01-16)

  • Does more stringent validation of update data.
  • No longer allows "downgrades" from a beta version to a stable version using the update mechanism.
  • Updatable configurations no longer require DSA signatures (although they optionally can be required).
  • Fixes a problem when a Keychain item has been deleted.

Older Versions of Tunnelblick

Old Release Notes has release notes for older versions of Tunnelblick.


Uninstaller

1.12 build 5090 (2018-06-26)

  • Fixes a problem when the user doesn't respond to the uninstall success/failure dialog within a few minutes.
  • Fixes a problem that caused the uninstaller to bounce in the Dock.

1.11 build 5051 (2018-05-08)

  • Fixes a problem that caused the uninstaller to fail on Hackintoshes and Macs with corrupted NVRAM.

1.10 build 5050 (2018-04-26)

  • Tunnelblick Uninstaller is now a 64-bit, Intel-only application for macOS 10.7.5 and higher only.
  • Displays detailed log if user doesn't respond to success/failure dialog.
  • Includes information about Tunnelblick login items and Tunnelblick items in the Dock.
  • Logs activity to a temporary file to help debugging if the uninstaller crashes. (The file is deleted at the end of the uninstall process.)
  • Fixes a problem that caused 'The command exited with a non-zero status' errors.
  • Fixes a problem clearing users' user defaults cache.
  • Fixes problems deleting files and folders when they have been locked.
  • Fixes a problem detecting login items from old versions of Tunnelblick.
  • Fixes several other potential problems.

Version 1.9 build 4990 (2018-01-31)

  • Does a slow 'secure erase' only on non-SSD drives (SSDs do not implement 'secure erase').
  • Clarifies wording in some dialogs.
  • Fixes a problem if an uninstall was followed by an install without restarting the computer.
  • Fixes a bug that caused the success or failure dialog window to be replaced with an Applescript error window if it was not dismissed within two minutes of the completion of the uninstall.

Version 1.8 build 4405 (2015-09-30)

  • Deletes Tunnelblick from all users’ Trash.
  • Includes clearer error messages concerning Keychain items, particularly on OS X 10.4.
  • Corrects the program name displayed by OS X when asking for the users’ username/password.

Version 1.7 (2015-06-20)

  • Uninstalls even if the Tunnelblick application has been damaged or does not exist (for example, it has been put in the Trash).
  • Unloads Tunnelblick daemons if they are loaded.
  • Removes OpenVPN and tunnelblickd crash logs.
  • Removes tunnelblickd logs in rebranded versions of Tunnelblick.
  • Removes the temporary authorization icon.
  • Includes better error messages.
  • Fixes a problem that caused the tunnelblickd daemon to be unloaded even when the uninstaller is only being tested.
  • Fixes a problem that displayed a 'Details' button (which was ignored) when certain error conditions arose.
  • Fixes a problem that sometimes caused an error when removing part of the Tunnelblick application.

Version 1.6 (2015-03-29)

  • Fixes problems when run on a PowerPC G3 processor.

Version 1.5 (2015-01-14)

  • Removes the new entry in /Library/LaunchDaemons made by Tunnelblick 3.4beta05 (build 4204) and higher

Version 1.4 (2014-09-10)

  • Removes the new entries in /Library/LaunchDaemons made by Tunnelblick 3.4beta37 (build 2957) and higher

Version 1.3 (2014-07-10)

  • Removes the new entry in ~/Library/LaunchAgents made by Tunnelblick 3.4beta32 and higher

Version 1.2 (2014-02-11)

  • Fixes a problem causing "application is damaged" warnings on Mavericks
  • Fixes a problem with text being repeated in the opening window
  • Fixes a problem with the opening window not appearing until the Uninstaller icon in the Dock is clicked

Version 1.1 (2014-01-08)

  • Removes preferences cache if it is present
  • Warns user if Tunnelblick or OpenVPN is running
  • Ready for localization

Version 1.0 (2013-03-28)

  Deutsch     Français     中文(简体)     Русский     Español     日本語     …