02-05-2021

Pia Tunnelblick



I've been using the service without problem on OSX using Tunnelblick. Unfortunately, trying to set up the connection on pfSense has proven to be fairly difficult. PIA provides a file called 'ca.crt,' and two files called (for example) 'access.conf' and 'access.ovpn'. I don't have any.key files. Unlike kill switch that’s built into some apps, PIA kill switch completely disables internet when VPN disconnects. I also tried a kill switch by Tunnelblick (open-source app for Mac), but it’s completely different and way too inconvenient. Tunnelblick will ask if you want to add for All users, or just your user. Enter your computer Admin password to allow the configuration file to be added. Click the Tunnelblick icon in the Menu bar to connect; Enter your Username and password when prompted. Do a packet sniff, like: tcpdump -ni eth0 udp and port 1194 on the server and ensure if packets are arriving. If they are there may be problem with firewall dropping packets, if no then most probably there is some problem with port forwarding on the router. I've been using the service without problem on OSX using Tunnelblick. Unfortunately, trying to set up the connection on pfSense has proven to be fairly difficult. PIA provides a file called 'ca.crt,' and two files called (for example) 'access.conf' and 'access.ovpn'. I don't have any.key files.


I am trying to use Tunnelblick with the OpenVPN configuration files that are prepared by Private Internet Access. For example:


us-east.ovpn:

client

dev tun

remote us-east.privateinternetaccess.com 1198 udp

remote us-east.privateinternetaccess.com 502 tcp

resolv-retry infinite

nobind

persist-key

persist-tun

setenv CLIENT_CERT 0

<ca>

-----BEGIN CERTIFICATE-----

[data removed]

-----END CERTIFICATE-----

</ca>


cipher aes-128-cbc

auth sha1

tls-client

remote-cert-tls server

auth-user-pass

comp-lzo

verb 1

reneg-sec 0


<crl-verify>

-----BEGIN X509 CRL-----

[data removed]

-----END X509 CRL-----

</crl-verify>

This is what I get:


Interactive access anydesk.

*Tunnelblick: OS X 10.12.2; Tunnelblick 3.6.9 (build 4685)

2017-01-06 09:28:11 *Tunnelblick: Attempting connection with us-east; Set nameserver = 769; monitoring connection

2017-01-06 09:28:11 *Tunnelblick: openvpnstart start us-east.tblk 1337 769 0 3 0 1065264 -ptADGNWradsgnw 2.3.12-openssl-1.0.2j

2017-01-06 09:28:11 *Tunnelblick:


Could not start OpenVPN (openvpnstart returned with status #251)


Contents of the openvpnstart log:

*Tunnelblick: openvpnstart log:

OpenVPN returned with status 1, errno = 0:

Undefined error: 0

Command used to start OpenVPN (one argument per displayed line):

/Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.12-openssl-1.0.2j/openvpn

--daemon

--log

/Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-Sus--east.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1065264.1337.openvpn.log

--cd

/Library/Application Support/Tunnelblick/Shared/us-east.tblk/Contents/Resources

--verb

3

--config

/Library/Application Support/Tunnelblick/Shared/us-east.tblk/Contents/Resources/config.ovpn

Pia Tunnelblick Meaning

--verb

3

--cd

/Library/Application Support/Tunnelblick/Shared/us-east.tblk/Contents/Resources

--management

127.0.0.1

1337

--management-query-passwords

Pia Tunnelblick Download

--management-hold

--script-security

Pia Tunnelblick Face

Pia Tunnelblick

2

Pia Tunnelblick -

--up

/Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

Pia Tunnelblick Baby

--down

/Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw

Contents of the OpenVPN log:

Options error: --crl-verify fails with '[[INLINE]]': No such file or directory

Options error: Please correct these errors.

Use --help for more information.

More details may be in the Console Log's 'All Messages'