Results 1 to 6 of 6
  1. #1
    Newbie
    Join Date
    May 2014
    Posts
    6

    Default OpenVPN warnings Tunnelblick on Mac - Untangle defaults are deprecated

    Hello, I saw a prior thread on this issue from last year, but it was closed with no solution that I could tell.

    I generated some new .opvn files for some users with MacBooks (macOS 10.14.3) from the OpenVPN App in UT 14.1.1 and they are receiving these warnings with Tunnelblick 3.7.8 (build 5180) Is this normal?

    ---------------------
    Upon connecting:
    ---------------------
    Warning: This VPN may not connect in the future.

    The OpenVPN configuration file for 'JVSMT-DBServices3-BrendanM' contains these OpenVPN options:

    'ns-cert-type' was deprecated in OpenVPN 2.4 and removed in OpenVPN 2.5

    'comp-lzo' was deprecated in OpenVPN 2.4 and has been or will be removed in a later version

    'max-routes' was deprecated in OpenVPN 2.4 and has been or will be removed in a later version

    You should update the configuration so it can be used with modern versions of OpenVPN.

    Tunnelblick will use OpenVPN 2.4.6 - OpenSSL v1.0.2q to connect this configuration.

    However, you will not be able to connect to this VPN with future versions of Tunnelblick that do not include a version of OpenVPN that accepts the options.

    -----------------------------------
    Upon closing the connection:
    -----------------------------------
    The OpenVPN log contains the following message:

    "Unrecognized option or missing or extra parameter(s)".

    This error means that an option that is contained in the OpenVPN configuration file or was "pushed" by the OpenVPN server:

    *has been misspelled,

    *has missing or extra arguments, or

    is not implemented by the version of OpenVPN which is being used for this configuration. It may be a new option that is not implemented in an old version of OpenVPN, or an old option that has been removed in a new version of OpenVPN. You can choose what version of OpenVPN to use with this configuration in the "Settings" tab of the "Configurations" panel of Tunnelblick's "VPN Details" window.

    See the VPN log in the "Log" tab of the "Configurations" panel of Tunnelblick's "VPN Details" window for details.

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    7,510

    Default

    Yes, this is a known issue. This is fixed in 14.1.1 for the compress option. Please note OpenVPN settings are not updated when upgrading as it would break all existing client configs. To get the latest settings, OpenVPN must be uninstalled and then reinstall with all the clients recreated.

    The current OpenVPN client for the MAC will work with the previous settings. It is just as some point in the future OpenVPN client (third party) will not allow it.
    Last edited by jcoffin; 01-29-2019 at 05:26 PM.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Newbie
    Join Date
    May 2014
    Posts
    6

    Default

    Should I delete all the Remote Clients first (OpenVPN > Server > Remote Clients), then remove the OpenVPN App, then re-add it? Or will just removing the OpenVPN App clear the existing configs?

    Thanks for your help on this.

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    7,510

    Default

    Quote Originally Posted by JVSMT View Post
    Should I delete all the Remote Clients first (OpenVPN > Server > Remote Clients), then remove the OpenVPN App, then re-add it? Or will just removing the OpenVPN App clear the existing configs?
    Removing OpenVPN app will clear all the settings and clients. No need to remove the clients first.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Newbie
    Join Date
    May 2014
    Posts
    6

    Default

    I'll have to plan for a weekend as I have a site-to-site VPN up with our shipping/warehouse. Luckily it's only a handful of Clients to regen/update, mostly IT, so it won't be that bad.

    Thanks again for the info and fast support.

  6. #6
    Newbie
    Join Date
    May 2014
    Posts
    6

    Default

    I was able to remove the OpenVPN App and re-add. I re-established the site-to-site and started configuring VPN packages for the various remote users. When using Tunnelblick upon connecting I'm not receiving an error dialog anymore, but I am on disconnect:

    Code:
    The OpenVPN log contains the following message: 
    
    "Unrecognized option or missing or extra parameter(s)".
    
    This error means that an option that is contained in the OpenVPN configuration file or was "pushed" by the OpenVPN server:
    
         *has been misspelled,
    
         *has missing or extra arguments, or
    
          is not implemented by the version of OpenVPN which is being used for this configuration. It may be a new option that is not implemented in an old version of OpenVPN, or an old option that has been removed in a new version of OpenVPN. You can choose what version of OpenVPN to use with this configuration in the "Settings" tab of the "Configurations" panel of Tunnelblick's "VPN Details" window.
    
    See the VPN log in the "Log" tab of the "Configurations" panel of Tunnelblick's "VPN Details" window for details.
    Anything more I could try?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2