Tunnelblick

tunnelblick

Free open source OpenVPN VPN client software for macOS.

Detected by net.tunnelblick.tunnelblick | macOS |tunnelblick.net

Sync it tunnelblick.toml

Sync rules

What travels, what stays, what never leaves

Tunnelblick in your home directory Every rule on this page, by file

· ~/Library/Preferences/net.tunnelblick.tunnelblick.plist Sync

· ~/Library/Application Support/Tunnelblick/Configurations/ Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/tunnelblick.tomlThe file this page is generated from

id = "tunnelblick"

name = "Tunnelblick"

homepage = "https://tunnelblick.net"

description = "Free open source OpenVPN VPN client software for macOS."

# The app icon, the favicon on tunnelblick.net.

icon = "https://tunnelblick.net/common/favicon.v1.png"

# Tunnelblick ships no command-line tool, so `detect` is the bundle identifier

# — the one the Homebrew cask quits and whose launchd jobs it unloads

# (`uninstall quit: "net.tunnelblick.tunnelblick"`, launchctl

# net.tunnelblick.tunnelblick.LaunchAtLogin and .tunnelblickd).

detect = ["net.tunnelblick.tunnelblick"]

platforms = ["macos"]

# Tunnelblick's own File Locations page (https://tunnelblick.net/cFileLocations.html)

# is the source for both halves.

# Preferences: "A user's Tunnelblick preferences are contained in

# ~/Library/Preferences/net.tunnelblick.tunnelblick.plist." (The same page adds

# that 3.2beta10 and earlier used com.openvpn.tunnelblick.plist; that spelling

# is old enough not to be worth carrying.)

# Configuration Files: "Private configurations, including both types of files,

# are stored in '~/Library/Application Support/Tunnelblick/Configurations'."

# That is the credential half — see below.

paths = ["[preferences]/net.tunnelblick.tunnelblick.plist"]

exclude = []

# ~/Library/Application Support/Tunnelblick/Configurations is a VPN identity,

# not a settings file. The same page's "Key and Certificate Files" section:

# "Key and certificate files associated with a Tunnelblick VPN Configuration

# (.tblk) are stored inside the configuration itself", with extensions ".cer,

# .crt, .der, .key, .p12, .p7b, .p7c, .pem, or .pfx" — so each .tblk carries

# the private key that authenticates this user to the VPN, and the .ovpn beside

# it may carry an auth-user-pass file too. The whole directory is a credential

# end to end, and it is where this application's configuration would otherwise

# be.

# The shared, deployed and shadow copies the same page lists are all under

# /Library or inside Tunnelblick.app, outside the user's home directory.

secret = ["~/Library/Application Support/Tunnelblick/Configurations/"]

# No machine_lines: the preferences file is a property list, which neither

# prefix nor key_path matching can read.

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/tunnelblick. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps the credential file out.