up)
# Invoke standard up script before setting tap0 to DHCP
/Applications/Utilities/Tunnelblick.app/Contents/Resources/client.up.osx.sh $1

I’ve put something in the down) section, but I’m not sure it’s needed.

This is a known issue in the current Tunnelblick builds (http://code.google.com/p/tunnelblick/wiki/KnownIssues).

i’m just a beginner in using openvpn, let alone using it on mac os. Can anyone point me to where i can find some documentation on how to set up the Certificate Authority (CA) and generate certificates and keys for an OpenVPN server and client?

Thanks

I removed the down ./tap-up-down.sh line from the config file and now everything works as it should. Config file now looks like this…

verb 1
client
dev tap
proto udp
remote xxx.xxx.xxx.xxx 1194
ca “ca.crt”
tls-auth “ta.key” 1
comp-lzo
auth-user-pass
up ./tap-up-down.sh

I am glad in a way that others are having problems with Tunnelblick… I am not able to get this fix working. I have saved the script you provided and made it executable…

ITD001:~/Library/openvpn hburton$ ls -la
total 56
drwxr-xr-x 7 hburton hburton 238 Jan 24 12:01 .
drwx—— 40 hburton hburton 1360 Jan 24 08:03 ..
-rw-r–r– 1 hburton hburton 6148 Jan 24 10:49 .DS_Store
-rwxrwxrwx 1 hburton hburton 1237 Feb 20 2006 ca.crt
-rw-r–r– 1 root wheel 164 Jan 24 12:01 openvpn.conf
-rwxrwxrwx 1 hburton hburton 636 Feb 20 2006 ta.key
-rwxr-xr-x 1 hburton hburton 4339 Jan 24 10:46 tap-up-down.sh

Edited my configuration file so it has the required changes…

verb 1
client
dev tap
proto udp
remote xxx.xxx.xxx.xxx 1194
ca “ca.crt”
tls-auth “ta.key” 1
comp-lzo
auth-user-pass
up ./tap-up-down.sh
down ./tap-up-down.sh

Previously Tunnelblick would ask for my username/password then establish a connection with the server and give the code=5 error message. However now with this new script in place it will not even attempt to connect. When I press the connect button it will briefly flash to connecting and then back to disconnected with no ouput to the log at all. I am using v3.0b6 on OSX 10.4.11. If anyone has any details that might help it would be greatly appreciated.

I tried this on leopard using tunnelblick 3.0b6 but am still getting the tap/tun error=5 errors. The output from scutil –dns also doesn’t seem to change.

Have you tried this fix on leopard? Any help would be greatly appreciated!

Thanks!

thank you very much! Works absolutely brilliant :)

(Maybe just add reminder to chmod +x the .sh script, so people like me don’t forget to do that :))

Cheers,

Karel