OpenVPN / OpenVPN/openvpn

VPN with local HTTP proxy doesn't work on MacOS Sonoma

Open
#456 25 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
14.6k
Forks
3.4k
PR merge metrics
No merged PRs in 30d

Description

Describe the bug
I've tried the same .ovpn config on Windows and it works, I don't know why on my mac it just doesn't. The VPN connects but it just gets restarted constantly. Proxy is valid and working, I can connect to it using system proxy, etc.
I've also tried GUI clients like tunnelblick, connect, etc. none of them works either.

Logs:

2023-11-16 00:27:00 add_route_ipv6(::/3 -> :: metric -1) dev utun4
route: writing to routing socket: Network is unreachable
add net ::: gateway utun4: Network is unreachable
2023-11-16 00:27:00 add_route_ipv6(2000::/4 -> :: metric -1) dev utun4
route: writing to routing socket: Network is unreachable
add net 2000::: gateway utun4: Network is unreachable
2023-11-16 00:27:00 add_route_ipv6(3000::/4 -> :: metric -1) dev utun4
route: writing to routing socket: Network is unreachable
add net 3000::: gateway utun4: Network is unreachable
2023-11-16 00:27:00 add_route_ipv6(fc00::/7 -> :: metric -1) dev utun4
route: writing to routing socket: Network is unreachable
add net fc00::: gateway utun4: Network is unreachable
2023-11-16 00:27:00 Initialization Sequence Completed
2023-11-16 00:27:31 Connection reset, restarting [0]
2023-11-16 00:27:31 SIGUSR1[soft,connection-reset] received, process restarting
2023-11-16 00:27:32 TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:8001
2023-11-16 00:27:32 Attempting to establish TCP connection with [AF_INET]127.0.0.1:8001
2023-11-16 00:27:32 TCP connection established with [AF_INET]127.0.0.1:8001
2023-11-16 00:27:34 TCPv4_CLIENT link local: (not bound)
2023-11-16 00:27:34 TCPv4_CLIENT link remote: [AF_INET]127.0.0.1:8001
2023-11-16 00:27:39 Connection reset, restarting [0]
2023-11-16 00:27:39 SIGUSR1[soft,connection-reset] received, process restarting
2023-11-16 00:27:40 TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:8001
2023-11-16 00:27:40 Attempting to establish TCP connection with [AF_INET]127.0.0.1:8001
2023-11-16 00:27:40 TCP connection established with [AF_INET]127.0.0.1:8001
2023-11-16 00:27:42 TCPv4_CLIENT link local: (not bound)
2023-11-16 00:27:42 TCPv4_CLIENT link remote: [AF_INET]127.0.0.1:8001
2023-11-16 00:27:42 Connection reset, restarting [-1]

To Reproduce
My .ovpn config

dev tun
persist-tun
persist-key
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
data-ciphers-fallback AES-256-CBC
auth SHA256
tls-client
client
resolv-retry infinite
remote x.x.x.x 1111 tcp4
nobind
http-proxy 127.0.0.1 8001
auth-user-pass
remote-cert-tls server

<ca>
-----BEGIN CERTIFICATE-----
XXXXXX
-----END CERTIFICATE-----
</ca>
setenv CLIENT_CERT 0
key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
XXXXXX
-----END OpenVPN Static key V1-----
</tls-auth>

I use following command to connect:

sudo openvpn --config ~/path/to/config.ovpn

Expected behavior
It should connect to the server and work just like the Windows version

Version information

  • OS: [MacOS Sonoma 14.1.1]
  • OpenVPN version: [2.6.7]

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the supplied openvpn command and .ovpn configuration on macOS Sonoma, then inspect the connection-reset and IPv6 route messages in the logs. Done means the VPN remains connected through the local HTTP proxy and behaves like the working Windows setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
macos, shell
Domain
networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.