Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ

token not working; previous slow connection speeds

Looking for assistance with a cryptostorm connection issue? Post here & we'll help out. Also: if you're not sure where to post, do so here & we'll move things around as needed. Also: for quickest support, email our oddly calm & easygoing support reps at support@cryptostorm.is :)

Topic Author
mgoooo

token not working; previous slow connection speeds

Postby mgoooo » Wed Jun 07, 2017 4:53 pm

So currently, I can't connect to my vpn.. it keeps coming back saying: "The username and password were not accepted by the remote VPN server." The log is this:

*Tunnelblick: OS X 10.12.4; Tunnelblick 3.7.1a (build 4812); prior version 3.7.1 (build 4811); Admin user
git commit e70dc14d7a954d6fe0040b3b8c9007feb98ee29d


Configuration cstorm_Canadaeast

"Sanitized" condensed configuration file for /Users/<mac user>/Library/Application Support/Tunnelblick/Configurations/cstorm_Canadaeast.tblk:

Code: Select all

client
dev tun
resolv-retry 16
remote-random
remote linux-canadaeast.cryptostorm.net 443 udp
remote linux-canadaeast.cryptostorm.nu 443 udp
remote linux-canadaeast.cryptostorm.org 443 udp
remote linux-canadaeast.cstorm.pw 443 udp
explicit-exit-notify 3
mssfix 1400
nobind
comp-lzo
down-pre
reneg-sec 0
hand-window 17
verb 4
mute 3
auth-user-pass
ns-cert-type server
auth SHA512
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA
tls-client
key-method 2
<ca>
[Security-related line(s) omitted]
</ca>


================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) UUID <Linked Against>

================================================================================

There are no unusual files in cstorm_Canadaeast.tblk

================================================================================

Configuration preferences:

Code: Select all

-routeAllTrafficThroughVpn = 1
-keychainHasUsername = 1
-lastConnectionSucceeded = 0

================================================================================

Wildcard preferences:


================================================================================

Program preferences:

Code: Select all

skipWarningAboutSimultaneousConnections = 1
skipWarningThatIPANotFetchedBeforeConnection = 1
placeIconInStandardPositionInStatusBar = 1
launchAtNextLogin = 1
notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
    "3.7.1a (build 4812)",
    "3.7.1 (build 4811)",
    "3.7.0 (build 4790)",
    "3.6.9 (build 4685)"
)
lastLaunchTime = 518528977.235978
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = cstorm_Canadaeast
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
updateSendProfileInfo = 1
NSWindow Frame SettingsSheetWindow = 219 93 829 524 0 0 1280 777
NSWindow Frame ConnectingWindow = 434 370 412 297 0 0 1280 777
NSWindow Frame SUUpdateAlert = 330 299 620 392 0 0 1280 777
detailsWindowFrameVersion = 4811
detailsWindowFrame = {{180, 244}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = settings
leftNavSelectedDisplayName = cstorm_Canadaeast
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
SUEnableAutomaticChecks = 1
SUFeedURL = https://www.tunnelblick.net/appcast-s.rss
SUScheduledCheckInterval = 86400
SUSendProfileInfo = 1
SULastCheckTime = 2017-06-07 11:49:37 +0000
SULastProfileSubmissionDate = 2017-06-01 20:24:56 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times

================================================================================

Tunnelblick Log:


================================================================================

"Sanitized" full configuration file

Code: Select all

# Cryptostorm.is config optimized for Tunnelblick/Viscosity OSX and OpenVPN iOS
client
dev tun
#randomly select a node from the list below, for redundancy against DNS blacklisting-based session blocking attacks.
#see https://openvpn.net/archive/openvpn-users/2004-12/msg00055.html
resolv-retry 16
remote-random
remote linux-canadaeast.cryptostorm.net 443 udp
remote linux-canadaeast.cryptostorm.nu 443 udp
remote linux-canadaeast.cryptostorm.org 443 udp
remote linux-canadaeast.cstorm.pw 443 udp
explicit-exit-notify 3
mssfix 1400
nobind
comp-lzo
down-pre
reneg-sec 0
hand-window 17
verb 4
mute 3
auth-user-pass
ns-cert-type server
auth SHA512
cipher AES-256-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA
tls-client
key-method 2
<ca>
 [Security-related line(s) omitted]
</ca>

# specification & location of server-verification PKI materials
# for details, see https://cryptostorm.org/pki



================================================================================

ifconfig output:

Code: Select all

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
   options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
   inet 127.0.0.1 netmask 0xff000000
   inet6 ::1 prefixlen 128
   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
   nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   ether 3c:15:c2:ce:84:d6
   inet 192.168.0.20 netmask 0xffffff00 broadcast 192.168.0.255
   media: autoselect
   status: active
en1: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
   options=60<TSO4,TSO6>
   ether 72:00:03:e5:2b:b0
   media: autoselect <full-duplex>
   status: inactive
en2: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
   options=60<TSO4,TSO6>
   ether 72:00:03:e5:2b:b1
   media: autoselect <full-duplex>
   status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
   options=63<RXCSUM,TXCSUM,TSO4,TSO6>
   ether 72:00:03:e5:2b:b0
   Configuration:
      id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
      maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
      root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
      ipfilter disabled flags 0x2
   member: en1 flags=3<LEARNING,DISCOVER>
           ifmaxaddr 0 port 5 priority 0 path cost 0
   member: en2 flags=3<LEARNING,DISCOVER>
           ifmaxaddr 0 port 6 priority 0 path cost 0
   media: <unknown type>
   status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
   ether 0e:15:c2:ce:84:d6
   media: autoselect
   status: inactive
awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1484
   ether c6:83:28:3f:c6:d2
   inet6 fe80::c483:28ff:fe3f:c6d2%awdl0 prefixlen 64 scopeid 0x9
   nd6 options=201<PERFORMNUD,DAD>
   media: autoselect
   status: active
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
   inet6 fe80::5c14:489b:2887:7eb9%utun0 prefixlen 64 scopeid 0xa
   nd6 options=201<PERFORMNUD,DAD>

================================================================================

Console Log:

Code: Select all

2017-06-07 11:44:03 Installer[60145] ~~~~~~~ Operator  new url action  : #-http://www.native17mac.com/installer/flow/80801140/199/1000017/1/0/1/0/000000000/42E644B9-709A-5E40-9457-AE468308A9E9/en-US/NO-#
2017-06-07 12:44:46 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:44:46 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:44:47 Tunnelblick[490] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:44:54 tunnelblickd[60193] Status = 248 from tunnelblick-helper command 'kill 60199'
2017-06-07 12:44:54 Tunnelblick[490] tunnelblickd status from kill: 248
                                       tunnelblickd stderr:
                                       'killOneOpenvpn(60199): Process does not exist
                                       '
2017-06-07 12:44:58 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Denmark' account = 'username'
2017-06-07 12:44:58 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Denmark' account = 'username'
2017-06-07 12:45:00 Tunnelblick[490] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Denmark' account = 'password' because it does not exist
2017-06-07 12:45:18 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:45:18 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:45:22 Tunnelblick[490] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:45:31 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:45:31 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:45:43 Tunnelblick[490] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:45:51 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:45:51 Tunnelblick[490] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:45:59 Tunnelblick[490] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:46:08 Tunnelblick[490] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2017-06-07 12:46:08 Tunnelblick[490] Finished shutting down Tunnelblick; allowing termination
2017-06-07 12:46:12 Tunnelblick[60250] Tunnelblick: OS X 10.12.4; Tunnelblick 3.7.1 (build 4811)
2017-06-07 12:46:14 Tunnelblick[60250] Sparkle: ===== Tunnelblick =====
2017-06-07 12:46:14 Tunnelblick[60250] Sparkle: Verified appcast signature
2017-06-07 12:46:22 Tunnelblick[60250] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:46:22 Tunnelblick[60250] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:46:24 Tunnelblick[60250] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:46:32 Tunnelblick[60250] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:46:32 Tunnelblick[60250] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:46:40 Tunnelblick[60250] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:47:33 Tunnelblick[60250] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2017-06-07 12:47:33 Tunnelblick[60250] Finished shutting down Tunnelblick; allowing termination
2017-06-07 12:47:36 Tunnelblick[60287] Tunnelblick: OS X 10.12.4; Tunnelblick 3.7.1 (build 4811)
2017-06-07 12:47:38 Tunnelblick[60287] Sparkle: ===== Tunnelblick =====
2017-06-07 12:47:38 Tunnelblick[60287] Sparkle: Verified appcast signature
2017-06-07 12:47:53 Tunnelblick[60287] Sparkle: Extracting using '/usr/bin/ditto' '-x' '-k' '-' < '/Users/<mac user>/Library/Caches/net.tunnelblick.tunnelblick/org.sparkle-project.Sparkle/Tunnelblick 4812/Tunnelblick_3.7.1a_build_4812.zip' '/Users/<mac user>/Library/Caches/net.tunnelblick.tunnelblick/org.sparkle-project.Sparkle/Tunnelblick 4812'
2017-06-07 12:49:25 Tunnelblick[60287] updater:willInstallUpdate: Starting cleanup.
2017-06-07 12:49:25 Tunnelblick[60287] updater:willInstallUpdate: Cleanup finished.
2017-06-07 12:49:25 Tunnelblick[60287] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2017-06-07 12:49:25 Tunnelblick[60287] pthread_mutex_trylock( &cleanupMutex ) failed; status = 16, errno = 3
2017-06-07 12:49:25 Tunnelblick[60287] pthread_mutex_trylock( &cleanupMutex ) failed is normal and expected when Tunnelblick is updated
2017-06-07 12:49:25 Tunnelblick[60287] Finished shutting down Tunnelblick; allowing termination
2017-06-07 12:49:31 Tunnelblick[60309] Tunnelblick: OS X 10.12.4; Tunnelblick 3.7.1a (build 4812)
2017-06-07 12:49:31 Tunnelblick[60309] Need to replace and/or reload 'tunnelblickd':
                                           daemonHashesMatch  = NO
                                           plistHashesMatch   = YES
                                           activePlistMatches = YES
2017-06-07 12:49:36 Tunnelblick[60309] Tunnelblick needs to:
                                         • Complete the update
2017-06-07 12:49:36 Tunnelblick[60309] Beginning installation or repair
2017-06-07 12:49:36 Tunnelblick[60309] Installation or repair succeeded; Log:
                                       Tunnelblick installer started 2017-06-07 12:49:36. 1 arguments: 0x0101
                                       Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
                                       Used launchctl to load tunnelblickd
                                       Tunnelblick installer finished without error
2017-06-07 12:49:37 Tunnelblick[60309] Sparkle: ===== Tunnelblick =====
2017-06-07 12:49:37 Tunnelblick[60309] Sparkle: Verified appcast signature
2017-06-07 12:49:42 Tunnelblick[60309] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:49:42 Tunnelblick[60309] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:49:44 Tunnelblick[60309] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:51:59 Tunnelblick[60309] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:51:59 Tunnelblick[60309] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:52:01 Tunnelblick[60309] Can't find Keychain item to delete for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'password' because it does not exist
2017-06-07 12:52:54 Tunnelblick[60309] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'
2017-06-07 12:52:54 Tunnelblick[60309] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-cstorm_Canadaeast' account = 'username'



Previously when it has been connected, the connections have been super slow - any assistance on how to boost them?

 ! Message from: parityboy
Further sanitization to protect the innocent. Added code tags for better formatting.

User avatar

parityboy
Site Admin
Posts: 1092
Joined: Wed Feb 05, 2014 3:47 am

Re: token not working; previous slow connection speeds

Postby parityboy » Wed Jun 07, 2017 5:14 pm

@OP

First and foremost, check your token here to make sure you haven't exceeded the maximum number of sessions. Secondly, judging by the log you haven't entered a password. Try entering one (can be anything - even a single character - but it must be something).


Topic Author
mgoooo

Re: token not working; previous slow connection speeds

Postby mgoooo » Wed Jun 07, 2017 5:32 pm

@parityboy

Thanks for the response

Password wise; i've never entered one before and it's worked previously, but i will input one

I checked the token, it is valid but has exceeded max number of sessions - any advice?

Any advice on connection speeds too?

User avatar

parityboy
Site Admin
Posts: 1092
Joined: Wed Feb 05, 2014 3:47 am

Re: token not working; previous slow connection speeds

Postby parityboy » Sat Jun 10, 2017 2:09 pm

@OP

Apologies for the late response. If by now you've waited two minutes for the sessions to reset and they haven't, send the token to support@cryptostorm.is and they will reset it for you.

As for connections speeds, what's the hardware of your Mac and which node are you using?


Return to “member support & tech assistance”

Who is online

Users browsing this forum: Majestic-12 [Bot] and 29 guests

cron

Login