tunnelblick icon Tunnelblick free software for OpenVPN on macOS We need translators for several languages…
Home Downloads Support Documents Issues Source Contribute Contact

Highlighted Articles
  News
  Installing Tunnelblick
  Uninstalling Tunnelblick
  Setting up Configurations
  Using Tunnelblick
  Getting VPN Service
  Common Problems
  Configuring OpenVPN
  Release Notes
  Thanks
  FAQ

Discussion Group
  Read Before You Post

Release Notes

On This Page
    Version 3.8
    Version 3.7
    Older Versions of Tunnelblick
    Uninstaller


Version 3.8

3.8.0beta02 build 5340 (2019-06-03) (SECURITY UPDATE)

  • Fixes a failure to restore DNS settings after shutting down or restarting the computer while a VPN was connected.
  • Warns if configurations set to connect when the system starts are not active.
  • Includes entries from a new "Quit Log" in the Diagnostic Info.
  • Uses a modern divider on the Configurations panel.
  • Includes new translations.
  • Fixes a minor memory leak.
  • Fixes several problems with incorrect entries in the Tunnelblick log.
  • Fixes a problem displaying text in alert windows in dark mode.
  • Fixes problems with misalignment of window elements.
  • Fixes a problem that caused incorrect entries in the Console Log.
  • Fixes a problem displaying the complete Tunnelblick version in the splash screen.
  • Fixes a problem that included entries from "Google Software Update Installer" in the Diagnostic Info.

3.8.0beta01 build 5330 (2019-05-22) (SECURITY UPDATE)

  • Includes a button to reveal or hide a password or passphrase as it is entered.
  • By default, sets up DNS after routes have been set up.
  • If available, uses OpenVPN-supplied DNS instead of DHCP-supplied DNS on tap connections.


Version 3.7

3.7.9a build 5321 (2019-06-03) (SECURITY UPDATE)

  • Fixes a failure to restore DNS settings after shutting down or restarting the computer while a VPN was connected.

3.7.9 build 5320 (2019-05-22) (SECURITY UPDATE)

  • Disables IPv6 only if the OpenVPN server is not accessed via IPv6.
  • Add warnings about common DHCP problems for tap connections.
  • Includes a checkbox to always display the username and password dialog, even if both are saved in the Keychain. (Useful for some 2-factor authentication methods.)
  • Updates translations to 40 languages.
  • Displays environment variables when debugging the 'up' script.
  • Fixes a bug that caused Tunnelblick entries to appear in the log in black.

3.7.9beta11 build 5310 (2019-05-13)

  • Tunnelblick is notarized: Apple verifies that it does not contain malware.
  • Fixes problems with the digital signatures of some components.
  • Fixes a problem that caused failures loading tun and tap kexts.

3.7.9beta09 build 5290 (2019-04-29)

  • Updates translations.
  • Fixes problems which caused fatal errors. (Built with Xcode 7.3.1 on macOS 10.11.6.)

3.7.9beta08 build 5270 (2019-04-28)

  • Fixes a problem which caused fatal errors.

3.7.9beta07 build 5260 (2019-04-27)

  • Fixes a problem which caused fatal errors.

3.7.9beta06 build 5250 (2019-04-25)

  • Tailors warnings to the version of macOS in use if a kext cannot be loaded.
  • Asks the user to email developers when a fatal error occurs.
  • Fixes a problem loading Tunnelblick 3.7.9beta05 kexts on macOS 10.14.5 Beta 2.
  • Fixes a problem that caused links in some warning windows to be broken.

3.7.9beta05 build 5240 (2019-04-10)

  • Displays Tunnelblick messages in the log in blue text and OpenVPN messages in black text.
  • Notes in the system log when a warning has not been displayed because the user elected not to see it.
  • Includes updated information in Building Tunnelblick from Source Code.markdown.
  • Fixes a rare fatal error when a network parameter changes to an empty value.
  • Fixes a long delay when a Tunnelblick installation is cancelled.
  • Fixes problems that caused entries in the log to be out of chronological order.
  • Fixes a problem introduced in 3.7.9beta04 that caused errors when using OpenVPN 2.3.
  • Fixes typos and spacing inconsistencies in the log.

3.7.9beta04 build 5230 (2019-04-03)

  • Warns about common problems with DNS settings.
  • Shows microseconds in the Tunnelblick log.
  • Allows the OpenVPN --tls-crypt-v2-verify option.
  • Improves and shortens the Diagnostic Info.
  • Includes updated translations.
  • Was built on macOS 10.13 with Xcode 10.1.
  • Fixes a problem restoring DNS settings when there are both IPv4 and IPv6 DNS servers.
  • Fixes a problem updating the title of the 'VPN Details' window.
  • Fixes formatting problems in some Console log entries for tunnelblickd.

3.7.9beta03 build 5210 (2019-2-27)

  • Includes OpenVPN 2.4.7 and OpenVPN git master commit ccb636c dated 2019-02-06.
  • Includes OpenSSL 1.0.2r and 1.1.1b (see release notes for 1.0.2 and 1.1.1).
  • Adds two new AppleScript commands: 'added or removed configurations' and 'changed openvpn configuration file…' (see Applescript Support).
  • Includes better detection of errors while connecting and disconnecting.
  • Improves detection of insecure system folders.
  • Updates credits for translators.
  • Complains about OpenVPN's 'config' option being used in a configuration file.
  • Fixes problems that caused multiple warnings about the OpenVPN version being used.
  • Fixes problems resetting the primary interface.
  • Fixes problems setting DNS servers.
  • Fixes problems setting NetBIOS names.
  • Fixes a problem displaying the 'Waiting for network access' status message.

3.7.9beta02 build 5200 (2019-01-10)

  • No longer opens '.ovpn' and '.conf' files when you double-click them. (Instead, drag and drop them on the Tunnelblick icon.)
  • Fixes problems involving the disabling and enabling of network services.
  • Fixes problems when no network is reachable.
  • Fixes a problem that caused a checkbox to not be displayed in right-to-left languages.
  • Fixes a problem when an incorrect private key passphrase is used.

3.7.9beta01 build 5190 (2018-11-29)

  • (No changes)

3.7.8 build 5180 (2018-11-29)

  • Ignores any empty "Icon?" files in a .tblk. (Such files are added by Google Drive as part of its synchronization process.)
  • Fixes a problem that caused all disconnections of "Private" configurations to be considered unexpected.
  • Fixes a problem verifying Tunnelblick's digital signature on macOS 10.9 ("Mavericks").

3.7.8beta02 build 5170 (2018-11-20)

  • Includes OpenSSL 1.0.2q and 1.1.1a (see release notes for 1.0.2 and 1.1.1).
  • Includes OpenVPN git master commit 19d6d9c dated 2018-11-18.
  • Runs up-prefix.sh, up-suffix.sh, down-prefix.sh, down-suffix.sh, route-pre-down-prefix.sh, and route-pre-down-suffix.sh before or after the corresponding Tunnelblick script, passing the arguments and including the environment variables the corresponding script was invoked with.
  • Waits for the network to be set up before starting OpenVPN when the system starts.
  • Warns when a VPN's security certificate has expired.
  • Makes the display of the arguments OpenVPN was started with more readable.
  • Refuses to connect a VPN if no network connection is available.
  • Considers disconnections caused by computer restarts and shutdowns, logouts, and quitting Tunnelblick to be expected.
  • Updates translations.
  • Notifies mDNSResponderHelper that the DNS cache was flushed.
  • Adds information on Network Services to the diagnostic info.
  • Fixes a problem disabling and enabling IPv6.
  • Fixes a problem in macOS Mojave's "dark mode".
  • Fixes a problem with resetting the primary interface.
  • Fixes a problem launching Tunnelblick at login.
  • Fixes a problem displaying newly-installed configurations on the Tunnelblick menu if there are more than 100 configurations.
  • Fixes a problem exporting a Tunnelblick setup.
  • Fixes a problem that caused a failure at the end of the client.down script.
  • Fixes a problem that caused VPN status windows to persist after a disconnection.
  • Fixes a problem that caused unreadable help text.

3.7.8beta01 build 5160 (2018-09-29)

  • Inhibits the announcement of a Tunnelblick update if "Do Not Disturb" is active.

3.7.7 build 5150 (2018-09-29)


3.7.7beta06 build 5140 (2018-09-24)

  • Fixes a problem in 3.7.7beta05 that caused crashes.
  • Fixes a problem that allowed update checks even if "Inhibit automatic update checking and IP Address checking" was checked.

3.7.7beta05 build 5130 (2018-09-22)

  • Includes OpenSSL 1.0.2p and 1.1.1 (see release notes for 1.0.2 and 1.1.1).
  • Supports macOS Mojave (10.14) "Dark Mode".
  • Adds the ability to export and import all Tunnelblick configurations in a single operation.
  • Sets DNS servers and domain via networksetup when using 'Set nameserver (alternate 2)'.
  • Improves security by using full paths for system utilities.
  • Explains the cause of certain routing errors.
  • Improves dialogs explaining why Tunnelblick needs a computer administrator's authorization.
  • Adds 'D. Simeonidis' and 'Zack Strulovitch' to translator credits on the Info panel.
  • Fixes a crash when non-default scripts are used and a connection exists when Tunnelblick is launched.
  • Fixes a typo in a log message shown only when debugging.
  • Fixes a problem that caused the 'on unexpected disconnect' button to be disabled.
  • Fixes a problem that caused spurious warnings in the Console log.
  • Fixes a problem that caused certain Console log messages to generate errors.
  • Fixes a problem that caused errors in seriously damaged systems.

3.7.7beta04 build 5120 (2018-07-31)

  • Allows scripts to control challenge/response (useful for TOTP and other authentication devices). See Multi-factor and Two-factor Authentication for details.
  • Includes OpenVPN git master 57d6f10 dated 2018-07-25, and includes two patches (1 and 2) that have been proposed to fix gateway and IPv6 problems.
  • Uses non-modal windows for more activities.
  • Allows OpenVPN's 'management' option in configuration files (but always overrides it).
  • Improves error handling for extremely unlikely errors.
  • Adds Cloudflare/APNIC DNS servers (IPv4 and IPv6, including 1.1.1.1) to the list of known public DNS providers.
  • Includes updated translations.
  • Complains if /tmp, /private, and /private/tmp are do not have the correct ownership and permissions.
  • Fixes several problems with dynamic challenge/response.
  • Fixes a problem and speeds up checking for apparent public IP address changes.

3.7.7beta03 build 5100 (2018-07-18)

  • Adds support for static and dynamic challenge/response.
  • Adds support for IPv6.
  • Improves 'Copy Diagnostic Info to Clipboard'.
  • Updates translations in many languages.
  • Fixes a problem enabling some checkboxes.
  • Fixes a problem disconnecting.

3.7.7beta02 build 5090 (2018-06-26) (SECURITY UPDATE)

  • Includes OpenVPN git master 4376805 dated 2018-06-24 (and 2.4.6 and 2.3.18).

3.7.6a build 5080 (2018-06-26) (SECURITY UPDATE)

  • Includes a partial Hebrew translation.
  • Fixes a problem when a logout is cancelled.
  • Fixes a problem re-enabling network access for certain devices.

3.7.7beta01 build 5070 (2018-06-09)
3.7.6 build 5060 (2018-06-09)

  • Makes a better choice of the version of OpenVPN to use when the requested version is not available.
  • Warns if the Tunnelblick application is more than 180 days old.
  • Removes untranslated text, resulting in a smaller application.
  • Includes updated translations.
  • Fixes a problem that required the selection of Serbian (Cyrillic) in macOS to get the Serbian (Latin) version of Tunnelblick.
  • Fixes a cosmetic problem when /etc/resolv.conf does not exist.

3.7.6beta04 build 5050 (2018-04-26)

  • Includes OpenVPN 2.4.6 and 2.5 git master 1394192 (and 2.3.18).
  • Requires full App Transport Security.
  • Speeds up menu display when there are hundreds or thousands of configurations.
  • Uses a randomly-selected ephemeral port when connecting to OpenVPN management interfaces.
  • Does not include tun and tap kexts that are no longer used. (Signed and unsigned tun and tap kexts are still included.)
  • Ensures that user-mode scripts always use the system commands that were intended (root-mode scripts already did that).
  • Patches OpenSSL 1.1.0h to avoid warnings about incorrect format characters.
  • Fixes a problem that caused a warning about unknown OpenVPN options even when the options were being ignored by OpenVPN.
  • Fixes a problem that caused the new apparent public IP address to show as 0.0.0.0 when DNS is not working.
  • Fixes a problem that logged warnings that the 'maxConfigurationsForUncachedMenu' preference was unknown.
  • Fixes a problem that generated V2 appcast signatures that could not be validated.
  • Fixes a misleading message in the usage output of openvpnstart.
  • Fixes several potential problems in scripts.

3.7.6beta03 build 5031 (2018-03-28) (SECURITY UPDATE)

See OpenSSL Security Advisory 27 March 2017 and LibreSSL 2.7.1 Release Notes.

  • Includes OpenVPN 2.3.18 with OpenSSL 1.0.2o and LibreSSL 2.7.1.
  • Includes OpenVPN 2.4.5 with OpenSSL 1.1.0h and OpenSSL 1.0.2o.
  • Includes OpenVPN 2.5 git-master 8acc40b dated 2018-03-26 with OpenSSL 1.1.0h and OpenSSL 1.0.2o.
  • Includes PKCS#11 support only in OpenVPN with OpenSSL 1.0.2o and LibreSSL 2.7.1.
  • Includes support for TBMinimumTunnelblickVersion and TBMaximumTunnelblickVersion entries in Tunnelblick VPN Configuration Info.plist files.
  • Fixes a problem that caused a message to always be shown in English.
  • Clarifies wording about computer administrator authorization.
  • Includes updated translations.

3.7.6beta02 build 5030 (2018-03-16)

  • Adds a partial Hebrew translation.
  • Fixes a problem that caused fatal errors from 'Signal 13'.
  • Fixes a problem that caused errors when installing configurations.
  • Fixes problems in easy-rsa when certain paths contain spaces.

3.7.6beta01 build 5020 (2018-03-03) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.5, OpenVPN 2.5 git-master b607900 dated 2018-03-02, and OpenVPN 2.3.18.

3.7.5a build 5011 (2018-03-28) (SECURITY UPDATE)


3.7.5 build 5010 (2018-03-03) (SECURITY UPDATE)

  • Secures Tunnelblick's connection to the OpenVPN management interface with a password.
  • Fixes several problems choosing the best version of OpenVPN to connect a configuration.
  • Fixes a problem that made the git master version of OpenVPN unavailable.
  • Fixes a problem when the 'installer' program is used from the command line.
  • Fixes a problem when using a debug version of Tunnelblick and monitoring network changes.

3.7.5beta08 build 5003 (2018-02-20)

  • Fixes using the wrong version of OpenVPN when the default version is specified.

3.7.5beta07 build 5002 (2018-02-16)

  • Fixes a problem in 3.7.5beta06 that caused hangs on High Sierra for certain configurations.
  • Fixes a problem in 3.7.5beta06 that caused it's version information to include 'Unsigned' (which was incorrect -- it was signed).
  • Fixes a problem that caused the phrase 'Tunnelblick needs to:' to sometimes appear in English.

3.7.5beta06 build 5000 (2018-02-15)

  • Does better selection of the OpenVPN version to be used when connecting.
  • Launches Tunnelblick at login if network access was disabled by Tunnelblick.
  • Notifies the user that network access has been disabled when connecting.
  • Does not use DHCP for tap connections if an IP address is detected (thanks to mpsrig).
  • Includes OpenVPN 2.4.4, 2.3.18, and git master 5a0e82c dated 2018-02-14. (The git master version is linked only with OpenSSL; a version with LibreSSL is available for the other versions.)
  • Adds DNS servers common in China to the list of free public DNS servers (thanks to JLHwung).
  • Adds support for LibreSSL to easy-rsa version 2.
  • Replaces lz4 version 1.7.5 with version 1.8.1.2.
  • Adds and updates translations.
  • Fixes problems with waking from sleep, switching users, and shutting down Tunnelblick.
  • Fixes problems that caused 'fatal error 13'.

3.7.5beta05 build 4980 (2017-12-30)

  • Selects the closest match if Tunnelblick doesn't include the version of OpenVPN specified by the user.
  • Offers to enable network access when a connection attempt is made and network access has been disabled.
  • Fixes a problem installing Tunnelblick.

3.7.5beta04 build 4970 (2017-12-07)

  • Includes OpenSSL 1.0.2n. See OpenSSL Security Advisory 07 December 2017.
  • Includes OpenVPN 2.5 git-master 5a0e82c dated 2017-12-05, OpenVPN 2.4.4, and OpenVPN 2.3.18.
  • Fixes a problem in 3.7.5beta03 that caused crashes and weird behavior.

3.7.5beta03 build 4950 (2017-12-02)

  • Adds a 'Kill Switch' which can automatically disable all network access for unexpected VPN disconnections and/or for expected VPN disconnections. Also adds a menu command to re-enable network access.
  • Adds the ability to automatically reset the primary network interface for unexpected VPN disconnections and/or for expected VPN disconnections.
  • Defaults to OpenVPN 2.4 (currently, 2.4.4) instead of 2.3.
  • Replaces LibreSSL 2.6.2 with 2.6.3.
  • Adds help on mouseover for many buttons.
  • Adds Global Cyber Alliance 9.9.9.9 DNS resolver to the known public servers list.
  • Pops up a window highlighting common warnings and errors in the OpenVPN log, including 'certificate expired' and 'unrecognized option'.
  • Fixes a problem that prevented the installation of configurations that specified settings for '-allowChangesToManuallySetNetworkSettings'.
  • Fixes problems showing and hiding status windows.
  • Fixes a problem that caused errors when checking the apparent public IP address.
  • Fixes a warning about the 'userAgreementVersionAgreedTo' preference (which is no longer used).

3.7.4b build 4921 (2017-12-07) (SECURITY UPDATE)


3.7.5beta02 build 4930 (2017-11-10)


3.7.4a build 4920 (2017-11-10)

  • No longer requires that the user agree to terms and conditions before using Tunnelblick.
  • No longer attempts to access tunnelblick.net before installing or updating.
  • Adds an option to keep a VPN's status window visible when it is connected.

3.7.5beta01 build 4910 (2017-11-03)

  • Includes LibreSSL 2.6.2 (from the development branch), replacing 2.5.5 (from the stable branch).
  • Fixes a broken link to a page explaining kext load failures.
  • Fixes a problem reporting the Tunnelblick version number after an update.

3.7.4 build 4900 (2017-11-03) (SECURITY UPDATE)


3.7.4beta01 build 4890 (2017-10-19)

  • Requires the user's consent to terms of use before installing or updating and logs the install or update to the Tunnelblick website. (Other than the IP address, no personally identifiable information is sent.)
  • Replaces multiple dialog windows with a single window when installing Tunnelblick.
  • Allows the installation of configurations that include options that are new in OpenVPN 2.4.
  • Displays a clearer error message when a system extension (kext) fails to load.
  • Never sends any system information (e.g., macOS version) when checking for updates (even if the user previously agreed to it).
  • Fixes a misleading checkbox. (It was "Do not check for IP address change", now it is "Do not warn about this again for any configuration").
  • Fixes a problem detecting corruption in preferences from ancient versions of Tunnelblick.
  • Fixes a problem detecting running Tunnelblick or OpenVPN instances (false positives).
  • Includes updated translations.

3.7.3 build 4880 (2017-10-19)

  • Fixes a problem in Sparkle Updater which caused checking for updates to happen too frequently.

3.7.3beta03 build 4870 (2017-09-27) (SECURITY UPDATE)


3.7.2a build 4851 (2017-09-27) (SECURITY UPDATE)


3.7.3beta02 build 4861 (2017-08-20)

  • Includes better graphics for several controls.
  • Fixes several problems when installing configurations.

3.7.3beta01 build 4860 (2017-08-17)

  • Includes LibreSSL 2.5.5, lz4 1.7.5, lzo 2.10, OpenSSL 1.0.2l, and pkcs#11 1.22.
  • Includes OpenVPN 2.5 git-master 974513e dated 2017-08-17, OpenVPN 2.4.3, and OpenVPN 2.3.17.
  • Allows manual scrolling of the credits on the Info panel of the VPN Details window.
  • Sets IV_GUI_VER so server log analyzers can detect Tunnelblick.
  • Includes updated translations.
  • Fixes problems highlighting the default Tunnelblick icon in the menu bar.
  • Fixes problems with non-UTF8 data.

3.7.2 build 4850 (2017-08-17)

  • Adds a checkbox to "Allow changes to manually-set network settings".
  • Includes updated translations and credits for translations.
  • Fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
  • Fixes problems with configuration names that include a trailing period.

3.7.2beta03 build 4840 (2017-06-21) SECURITY UPDATE

  • Includes additional translations.
  • Fixes problems with configuration names that include a trailing period.
  • Replaces OpenVPN 2.4.2 with OpenVPN 2.4.3 (OpenVPN change log).
  • Replaces OpenVPN 2.3.16 with OpenVPN 2.3.17 (OpenVPN change log).

From the OpenVPN Downloads page:

OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. We recommend you to upgrade to OpenVPN 2.4.3 or 2.3.17 as soon as possible. More details are available in our official security announcement.

[OpenVPN v2.3.17] is a minor release that mostly fixes the security issues mentioned in our security announcement.


3.7.1b build 4813 (2017-06-21) (SECURITY UPDATE)

From the OpenVPN Downloads page:

OpenVPN v2.4.2 was analyzed closely using a fuzzer by Guido Vranken. In the process several vulnerabilities were found, some of which are remotely exploitable in certain circumstances. We recommend you to upgrade to OpenVPN 2.4.3 or 2.3.17 as soon as possible. More details are available in our official security announcement.

[OpenVPN v2.3.17] is a minor release that mostly fixes the security issues mentioned in our security announcement.


3.7.2beta02 build 4830 (2017-05-20) SECURITY UPDATE

  • Fixes an inability to install configurations that use OpenVPN's "tls-crypt" option.
  • Replaces OpenVPN 2.3.15 with OpenVPN 2.3.16 (OpenVPN change log). (Also includes OpenVPN 2.4.2.)

From the OpenVPN Downloads page:

"This [OpenVPN 2.3.16] is a minor release that fixes a few bugs. This release was made primarily because CloudFlare managed to serve obsolete pre-release OpenVPN 2.3.15 tarballs which lack the fix for CVE-2017-7478. The official OpenVPN 2.3.15 Windows installers do have the fix. Nevertheless, you are advised to upgrade your OpenVPN installations to 2.3.16 or 2.4.2."


3.7.1a build 4812 (2017-05-20) (SECURITY UPDATE)

  • Replaces OpenVPN 2.3.15 with OpenVPN 2.3.16 (OpenVPN change log). (Also includes OpenVPN 2.4.2.)

From the OpenVPN Downloads page:

"This [OpenVPN 2.3.16] is a minor release that fixes a few bugs. This release was made primarily because CloudFlare managed to serve obsolete pre-release OpenVPN 2.3.15 tarballs which lack the fix for CVE-2017-7478. The official OpenVPN 2.3.15 Windows installers do have the fix. Nevertheless, you are advised to upgrade your OpenVPN installations to 2.3.16 or 2.4.2."


3.7.2beta01 build 4820 (2017-05-12) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
  • Adds a checkbox to "Allow changes to manually-set network settings".
  • Includes a Flemish translation.
  • Includes updated translations and credits for translations.

3.7.1 build 4811 (2017-05-12) (SECURITY UPDATE)

  • Includes OpenVPN 2.4.2 and 2.3.15. See the OpenVPN Advisory.
  • Includes popup help for most checkboxes and buttons when the pointer hovers over the checkbox or button.
  • Includes updated translations and credits for translations.
  • Allows a path in --askpass and --auth-user-pass OpenVPN options.
  • Warns about problems with paths in --ifconfig-pool-persist and other OpenVPN options.
  • Fixes a problem if the last character in a configuration file is a CR (0x0D).

3.7.1beta02 build 4810 (2017-03-24)

  • Includes OpenVPN 2.4.1 and OpenVPN 2.3.14.
  • Includes updated translations and credits for translations.
  • Allows a path in --askpass and --auth-user-pass OpenVPN options.
  • Warns about problems with paths in --ifconfig-pool-persist and other OpenVPN options.
  • Fixes a problem if the last character in a configuration file is a CR (0x0D).

3.7.1beta01 build 4800 (2017-01-30)

  • Includes popup help for most checkboxes and buttons when the pointer hovers over the checkbox or button.
  • Includes OpenVPN 2.5 git-master 4590c38 dated 2017-01-26, OpenVPN 2.4.0, and OpenVPN 2.3.14.
  • Includes updated translations.

3.7.0 build 4790 (2017-01-30) (SECURITY UPDATE)

  • Includes OpenSSL 1.0.2k. See OpenSSL Security Advisory 26 January 2017.
  • Allows 'dhcp-option SEARCH-DOMAIN' in addition to 'dhcp-option DOMAIN-SEARCH'.
  • Fixes several problems that caused invalid parameters to the 'dhcp-option' OpenVPN option to be misinterpreted.
  • Fixes a problem that caused an erroneous 'Waiting for password' status when renegotiating keys for a connection.
  • Fixes a problem that caused unnecessary logging when tunnelblickd needs to be updated.

3.7.0beta01 build 4780 (2017-01-16)

  • Does more stringent validation of update data.
  • No longer allows "downgrades" from a beta version to a stable version using the update mechanism.
  • Updatable configurations no longer require DSA signatures (although they optionally can be required).
  • Fixes a problem when a Keychain item has been deleted.

Older Versions of Tunnelblick

Old Release Notes has release notes for older versions of Tunnelblick.


Uninstaller

1.13 build 5330 (2019-05-22) (SECURITY UPDATE)

  • Tunnelblick Uninstaller is notarized: Apple verifies that it does not contain malware.

1.12 build 5090 (2018-06-26)

  • Fixes a problem when the user doesn't respond to the uninstall success/failure dialog within a few minutes.
  • Fixes a problem that caused the uninstaller to bounce in the Dock.

1.11 build 5051 (2018-05-08)

  • Fixes a problem that caused the uninstaller to fail on Hackintoshes and Macs with corrupted NVRAM.

1.10 build 5050 (2018-04-26)

  • Tunnelblick Uninstaller is now a 64-bit, Intel-only application for macOS 10.7.5 and higher only.
  • Displays detailed log if user doesn't respond to success/failure dialog.
  • Includes information about Tunnelblick login items and Tunnelblick items in the Dock.
  • Logs activity to a temporary file to help debugging if the uninstaller crashes. (The file is deleted at the end of the uninstall process.)
  • Fixes a problem that caused 'The command exited with a non-zero status' errors.
  • Fixes a problem clearing users' user defaults cache.
  • Fixes problems deleting files and folders when they have been locked.
  • Fixes a problem detecting login items from old versions of Tunnelblick.
  • Fixes several other potential problems.

Version 1.9 build 4990 (2018-01-31)

  • Does a slow 'secure erase' only on non-SSD drives (SSDs do not implement 'secure erase').
  • Clarifies wording in some dialogs.
  • Fixes a problem if an uninstall was followed by an install without restarting the computer.
  • Fixes a bug that caused the success or failure dialog window to be replaced with an Applescript error window if it was not dismissed within two minutes of the completion of the uninstall.

Version 1.8 build 4405 (2015-09-30)

  • Deletes Tunnelblick from all users’ Trash.
  • Includes clearer error messages concerning Keychain items, particularly on OS X 10.4.
  • Corrects the program name displayed by OS X when asking for the users’ username/password.

Version 1.7 (2015-06-20)

  • Uninstalls even if the Tunnelblick application has been damaged or does not exist (for example, it has been put in the Trash).
  • Unloads Tunnelblick daemons if they are loaded.
  • Removes OpenVPN and tunnelblickd crash logs.
  • Removes tunnelblickd logs in rebranded versions of Tunnelblick.
  • Removes the temporary authorization icon.
  • Includes better error messages.
  • Fixes a problem that caused the tunnelblickd daemon to be unloaded even when the uninstaller is only being tested.
  • Fixes a problem that displayed a 'Details' button (which was ignored) when certain error conditions arose.
  • Fixes a problem that sometimes caused an error when removing part of the Tunnelblick application.

Version 1.6 (2015-03-29)

  • Fixes problems when run on a PowerPC G3 processor.

Version 1.5 (2015-01-14)

  • Removes the new entry in /Library/LaunchDaemons made by Tunnelblick 3.4beta05 (build 4204) and higher

Version 1.4 (2014-09-10)

  • Removes the new entries in /Library/LaunchDaemons made by Tunnelblick 3.4beta37 (build 2957) and higher

Version 1.3 (2014-07-10)

  • Removes the new entry in ~/Library/LaunchAgents made by Tunnelblick 3.4beta32 and higher

Version 1.2 (2014-02-11)

  • Fixes a problem causing "application is damaged" warnings on Mavericks
  • Fixes a problem with text being repeated in the opening window
  • Fixes a problem with the opening window not appearing until the Uninstaller icon in the Dock is clicked

Version 1.1 (2014-01-08)

  • Removes preferences cache if it is present
  • Warns user if Tunnelblick or OpenVPN is running
  • Ready for localization

Version 1.0 (2013-03-28)

  Deutsch     Français     中文(简体)     Русский     Español     日本語     …