Skip to content
Search found 2313 matches
- by James
- Wed Mar 27, 2024 3:01 pm
- Forum: Viscosity Support (Windows Version)
- Topic: 'CKR_MECHANISM_INVALID' Error using a Nitrokey Pro
- Replies: 2
- Views: 44
Hi Sebastian, Setting tls-version-max and tls-version-min should be sufficient to force the TLS version used by OpenVPN, however it won't necessarily cause OpenSSL to use ciphers/hashes in that TLS suite version it considers insecure. TLS 1.2 also optionally supports RSA PSS if the client TLS sessio...
- by James
- Sat Mar 16, 2024 6:29 pm
- Forum: Viscosity Support (Mac Version)
- Topic: Targeting a named connection in Apple Script conditional
- Replies: 2
- Views: 95
Hi Osleff,
You can use the approach listed in the following post:
viewtopic.php?p=8922#p8924
Cheers,
James
You can use the approach listed in the following post:
viewtopic.php?p=8922#p8924
Cheers,
James
- by James
- Sat Mar 16, 2024 6:26 pm
- Forum: Viscosity Support (Mac Version)
- Topic: IPv6 not blocked
- Replies: 1
- Views: 67
Hi KR15T0, The "Block IPv6 traffic while connected to IPv4-only VPN connections" option only blocks IPv6 traffic if the VPN connection has no IPv6 routing configured. A common misunderstanding of the feature is thinking that it always blocks IPv6, which isn't the case: if your VPN connecti...
- by James
- Fri Mar 08, 2024 1:48 am
- Forum: Viscosity Support (Mac Version)
- Topic: Version 1,11 double prompts for PIN
- Replies: 1
- Views: 131
Hi mihkel, It sounds likely you have your certificate in a slot on your token that has the CKA_ALWAYS_AUTHENTICATE flag set. OpenVPN 2.6 (well technically pkcs11-helper on macOS) properly respects this flag, while older versions would not. When OpenVPN needs to sign data using your token two operati...
- by James
- Fri Feb 23, 2024 3:53 pm
- Forum: Viscosity Support (Mac Version)
- Topic: After updating fails to connect. Keeps in authenticating status
- Replies: 2
- Views: 564
Hi mplarumbe, It looks likely the OpenVPN server is rejecting your connection attempt. It may be significantly out-of-date, or using an incomplete OpenVPN protocol implementation (aka Mikrotik routers). Try adjusting the compatibility setting as described in the following article: https://www.sparkl...
- by James
- Fri Feb 23, 2024 6:51 am
- Forum: Viscosity Support (Mac Version)
- Topic: Viscosity 1.11 breaks VPN
- Replies: 6
- Views: 783
Hi tux84, Viscosity 1.11 provides a new compatibility setting that will allow it to connect to servers running legacy versions of OpenVPN. Please run through the steps listed in the following article, which should get you connecting again: https://www.sparklabs.com/support/kb/article/migrating-from-...
- by James
- Fri Feb 23, 2024 6:45 am
- Forum: Viscosity Support (Mac Version)
- Topic: Updating to 1.11 - No Longer able to Connect
- Replies: 1
- Views: 378
Hi buh,
Please run through the steps listed in the following article:
https://www.sparklabs.com/support/kb/ar ... envpn-2-6/
Cheers,
James
Please run through the steps listed in the following article:
https://www.sparklabs.com/support/kb/ar ... envpn-2-6/
Cheers,
James
- by James
- Fri Feb 16, 2024 4:48 am
- Forum: Viscosity Support (Mac Version)
- Topic: Import list of IP addresses to bypass
- Replies: 2
- Views: 471
Hi patrikr, You can convert them to OpenVPN syntax, and then add them to the advanced commands area for your connection. For example, the first IP range ("3.7.35.0/25") in the txt file would become: route 3.7.35.0 255.255.255.128 net_gateway The second IP range ("3.21.137.128/25"...
- by James
- Tue Feb 06, 2024 10:24 pm
- Forum: Viscosity Support (Mac Version)
- Topic: SSO with security key
- Replies: 1
- Views: 835
Hi andy_p, Frustratingly this is a limitation that Apple introduced a number of macOS updates ago: WebAuthn requests are now blocked in web views. WebAuthn is the browser API used to communicate with FIDO authentication keys. At the time we heard that Apple was working on a solution to re-allow WebA...
- by James
- Mon Jan 22, 2024 9:47 pm
- Forum: Viscosity Support (Mac Version)
- Topic: Troubleshooting problems with DNS requests
- Replies: 3
- Views: 2850
Hi floatingpurr, It's difficult to tell without the full connection log, however as a guess it sounds like the VPN server isn't setting any DNS servers, or setting an invalid one. With Full DNS mode, this means that when you connect your computer won't have any DNS servers set. If this is the case, ...