Vpn disruption when active Virtualbox VM with bridged network

[GoogleCodeExporter]

http://www.virtualbox.org/ticket/6284


What version of Tunnelblick are you using? On what version of OS X?
3.0b28 on OSX 10.6.2

Original issue reported on code.google.com by [email protected] on 25 Feb 2010 at 3:58

[GoogleCodeExporter]

I am seeing this problem with Tunnelblick: OS X 10.6.8; Tunnelblick 3.1.7 
(build 2190.2413); OpenVPN 2.1.4.

VirtualBox 4.0.12 r72916

Original comment by [email protected] on 24 Jul 2011 at 6:55

• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

It would help if there was more of a description than "Vpn disruption".

Please post the full contents of the log and the configuration file.

Original comment by [email protected] on 24 Jul 2011 at 8:07

• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

If I bring up the VirtualBox VM before bringing up the VPN, the VPN stays in 
AUTH state and fails to complete the SSL negotiation. This is with a UDP/TAP 
VPN.

If I bring up the VPN and then the VM, everything works until the VPN drops, 
then the VPN will no longer connect.

Easy to reproduce with a VM with an interface configured as bridged.

I can't be sure if it's a Tunnelblick or VirtualBox problem, but will try to 
get more info so it can be narrowed down. Not at my PC right now but will try 
to sanitize and post some logs later. 

Original comment by [email protected] on 24 Jul 2011 at 9:33

• Added labels: ****
• Removed labels: ****

[GoogleCodeExporter]

My configuration:
client
dev tap
proto udp
remote 172.16.34.1
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert myuser.crt
key myuser.key
ns-cert-type server
comp-lzo
verb 3
port 1194
auth-user-pass


Tunnelblick log:
2011-07-24 17:56:05 *Tunnelblick: OS X 10.6.8; Tunnelblick 3.1.7 (build 
2190.2413); OpenVPN 2.1.4
2011-07-24 17:56:07 *Tunnelblick: Attempting connection with MyVPN; Set 
nameserver = 0; not monitoring connection
2011-07-24 17:56:07 *Tunnelblick: 
/Applications/Tunnelblick.app/Contents/Resources/openvpnstart start MyVPN.tblk 
1337 0 0 0 1 50
2011-07-24 17:56:07 OpenVPN 2.1.4 i386-apple-darwin10.7.1 [SSL] [LZO2] [PKCS11] 
built on Mar  1 2011
2011-07-24 17:56:07 MANAGEMENT: TCP Socket listening on 127.0.0.1:1337
2011-07-24 17:56:07 Need hold release from management interface, waiting...
2011-07-24 17:56:07 MANAGEMENT: Client connected from 127.0.0.1:1337
2011-07-24 17:56:07 MANAGEMENT: CMD 'pid'
2011-07-24 17:56:07 MANAGEMENT: CMD 'state on'
2011-07-24 17:56:07 MANAGEMENT: CMD 'state'
2011-07-24 17:56:07 MANAGEMENT: CMD 'hold release'
2011-07-24 17:56:07 MANAGEMENT: CMD 'username "Auth" "MyUsername"'
2011-07-24 17:56:07 MANAGEMENT: CMD 'password [...]'
2011-07-24 17:56:07 NOTE: the current --script-security setting may allow this 
configuration to call user-defined scripts
2011-07-24 17:56:07 LZO compression initialized
2011-07-24 17:56:07 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 
EL:0 ]
2011-07-24 17:56:07 Socket Buffers: R=[42080->65536] S=[9216->65536]
2011-07-24 17:56:07 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 
EL:0 AF:3/1 ]
2011-07-24 17:56:07 Local Options hash (VER=V4): 'd79ca330'
2011-07-24 17:56:07 Expected Remote Options hash (VER=V4): 'f7df56b8'
2011-07-24 17:56:07 UDPv4 link local: [undef]
2011-07-24 17:56:07 UDPv4 link remote: 172.16.34.1:1194
2011-07-24 17:56:07 MANAGEMENT: >STATE:1311555367,WAIT,,,
2011-07-24 17:56:07 MANAGEMENT: >STATE:1311555367,AUTH,,,
2011-07-24 17:56:07 TLS: Initial packet from 172.16.34.1:1194, sid=c1e3f3cb 
ef258503
2011-07-24 17:56:07 WARNING: this configuration may cache passwords in memory 
-- use the auth-nocache option to prevent this
2011-07-24 17:56:07 *Tunnelblick: openvpnstart: 
/Applications/Tunnelblick.app/Contents/Resources/openvpn --cd 
/Users/myuser/Library/Application 
Support/Tunnelblick/Configurations/MyVPN.tblk/Contents/Resources --daemon 
--management 127.0.0.1 1337 --config /Users/myuser/Library/Application 
Support/Tunnelblick/Configurations/MyVPN.tblk/Contents/Resources/config.ovpn 
--log /Library/Application 
Support/Tunnelblick/Logs/-SUsers-Smyuser-SLibrary-SApplication 
Support-STunnelblick-SConfigurations-SMyVPN.tblk-SContents-SResources-Sconfig.ov
pn.0_0_0_1_50.1337.openvpn.log --management-query-passwords --management-hold 
--script-security 2
2011-07-24 17:56:07 *Tunnelblick: Obtained VPN username and password from the 
Keychain
2011-07-24 17:57:07 TLS Error: TLS key negotiation failed to occur within 60 
seconds (check your network connectivity)
2011-07-24 17:57:07 TLS Error: TLS handshake failed
2011-07-24 17:57:07 TCP/UDP: Closing socket
2011-07-24 17:57:07 SIGUSR1[soft,tls-error] received, process restarting

This is what I always get with the VM running. When I shut down the VM, it 
connects fine.

Original comment by [email protected] on 25 Jul 2011 at 1:04

• Added labels: ****
• Removed labels: ****