Loadingcome357

Highlighted Articles
News
Installing Tunnelblick
Uninstalling Tunnelblick
Setting up Configurations
Using Tunnelblick
Getting VPN Service
Common Problems
Configuring OpenVPN
Release Notes
Thanks
FAQ

Discussion Group
Read Before You Post

OpenVPN and OpenSSL Versions Included in Tunnelblick

Tunnelblick includes multiple versions of OpenVPN to accomodate several types of use. You may choose which version of OpenVPN will be used to connect a configuration on the 'Settings' tab of the 'Configurations' panel of Tunnelblick's 'VPN Details' window.

Typically, Tunnelblick includes:

• OpenVPN 2.3, which is past its end-of-life and is included only for those who need to connect to old versions of OpenVPN.
• OpenVPN 2.4, which is the current version and is used by default.
• OpenVPN 2.5, which is the next version.

Note that:

• Although OpenVPN 2.5 Beta 3 is included in Tunnelblick 3.8.3a, future stable versions of Tunnelblick will include only released, non-beta versions of OpenVPN.
• Beta versions of Tunnelblick will continue to include unreleased versions of OpenVPN. These versions of OpenVPN should be used only for testing new features of OpenVPN. They have not been as thoroughly tested as released versions of OpenVPN and they may contain serious security vulnerabilities.
• Because OpenVPN 2.3 and the SSL libraries used with it are no longer supported, they may contain security vulnerabilities and should be used only if absolutely necessary to connect to OpenVPN servers that require such old versions. It is strongly recommended that such old versions be updated so that modern, secure versions of OpenVPN and the SSL libraries can be used.

OpenSSL Versions

Tunnelblick's copies of OpenVPN include OpenSSL or LibreSSL libraries:

• OpenVPN 2.4 and 2.5 include only the latest stable version of OpenSSL, 1.1.1, which is a Long Term Support version that will be supported until 2023-09-11.
• OpenVPN 2.3 does not work with OpenSSL 1.1.1, so one of Tunnelblick's copies of OpenVPN 2.3 includes OpenSSL 1.0.2, which is 'out of support and should not be used'. The other copy of OpenVPN 2.3 includes LibreSSL 2.7.1, which is similarly no longer supported.

(This page was updated 2020-09-12.)

Highlighted Articles
News
Installing Tunnelblick
Uninstalling Tunnelblick
Setting up Configurations
Using Tunnelblick
Getting VPN Service
Common Problems
Configuring OpenVPN
Release Notes
Thanks
FAQ

Discussion Group
Read Before You Post

To use Tunnelblick you need access to a VPN server — your computer is one end of the tunnel and the VPN server is the other end.

The Tunnelblick project does not provide access to VPN servers — we are not 'VPN service providers'
— we only create the free software that many VPN service providers recommend or provide to their clients.

There are several ways to get access to a VPN server:

• Your employer may provide a VPN server so you can work from home or the road securely.
• You can set up your own VPN server at home, and use it to access your home network and the Internet securely when at a remote location. The VPN server could be a program running on a Mac, Windows, or Linux computer, or on your home router.
• You can get (free or for a fee) access to a VPN server by using a VPN service provider.

Employer-provided VPN Servers

Your employer should supply you with an OpenVPN configuration file (.ovpn or .conf file), along with the appropriate certificate and key files, or with a Tunnelblick VPN Configuration (.tblk), which includes the certificate and key files within it.

Follow the instructions from your employer or in Installing Tunnelblick to install Tunnelblick and configurations.

Set Up Your Own VPN Server

This is more complicated. It involves creating your own OpenVPN configuration file and creating your own certificate and key files for encryption. There are tutorials about setting up OpenVPN servers — try searching the Internet for 'set up openvpn server'. Tunnelblick includes 'easy-rsa' to help you with creating certificate and key files; there is an 'Open easy-rsa in Terminal' button on the Utilities panel. Instructions on using easy-rsa to create encryption files are available in the OpenVPN FAQ.

If you want to set up a computer to act solely as a router/bridge/firewall, consider ZeroShell. Untangle has a free VPN component.

If you have a router running DD-WRT, you can use OpenVPN on DD-RT. There is a tutorial.

If you want to run an high-performance OpenVPN server 'in the cloud', see Create a Private OpenVPN Service with AWS Client VPN Endpoint [github.com].

If you want to run an OpenVPN server 'in the cloud' which also does ad blocking, take a look at the instructions at Pi-Hole and PiVPN on Google Compute Engine Free Tier with Full Tunnel and Split Tunnel OpenVPN Configurations. (Note that the instructions download and install pi-hole and piVPN by piping from curl to bash. A better practice is to download the install scripts, examine them for problems, and then run the already-examined scripts.)

Runway sketches. Are you looking for the best images of Runway Drawing? We collected 33+ Runway Drawing paintings in our online museum of paintings - PaintingValley.com. LIMITED OFFER: Get 10 free Shutterstock images. Live Runway Sketchin. LIMITED OFFER: Get 10 free Shutterstock images - PICK10FREE. Tags: fashion, runway, sketches. All rights to paintings and other images found on PaintingValley.com are owned by their respective owners (authors, artists), and the Administration of the website doesn't bear responsibility for their use.

VPN Service Providers

Another way to get access to a VPN server is to use a VPN service provider, an organization that makes its VPN servers available (free or for a fee). Some provide you with a customized, and possibly renamed, version of Tunnelblick.

VPN service providers: email webmaster@tunnelblick.net to be listed on this page.

Disclaimer: The products, services, and links on this page are not endorsed or recommended by the Tunnelblick project or its developers. This list is offered solely for the convenience of those wishing to use Tunnelblick.