Viscosity also includes the necessary kexts and I believe it also imbeds an OpenSSL library in its OpenVPN binary. If you want to "do it yourself", you'll need OpenVPN and either a tun or a tap kext (or both, depending on your configurations), and you may want a newer version of OpenVPN. If you use Tunnelblick, that's all you need - it contains everything you need. That is almost always an old version and will not include some high-key-length ciphers, which means they wiil be unavailable. If you use a version of OpenVPN that does not imbed OpenSSL, OpenVPN will use the command-line version of OpenSSL included in your version of OS X. Tunnelblick also includes binaries of two versions of OpenVPN with the latest version of the OpenSSL library imbedded in each. Tunnelblick includes several versions of each of the tun and tap kexts (one for OS X 10.4 and 10.5, one for 10.6 - 10.8, and one for 10.9) and loads/unloads the appropriate version dynamically as the VPN is created/destroyed. The kexts used by Tunnelblick are from the tuntaposx project. The kernel extension (kext) that is needed is either a "tun" or a "tap" kext, depending on which type of VPN you are creating (it is something specified in the OpenVPN configuration file, and must be the same on the server and the client).
0 kommentar(er)
