install

Additional install commands

macOS

Homebrew Caskverified · 100%

brew install --cask tunnelblick

local Homebrew cask metadata

overview

Package summary

Free and open-source OpenVPN client

Project links

Commands and aliases

No executable aliases were found in the local package database.

history

Project history and usage

Tunnelblick is a free and open-source macOS graphical client for managing OpenVPN connections.

Project history

Tunnelblick is a free, GPL-licensed graphical interface for OpenVPN on macOS. The project maintains its own documentation and release infrastructure alongside an official GitHub source repository.

The application evolved from handling standalone OpenVPN configuration files to a Tunnelblick VPN Configuration bundle format that can contain configuration data, keys, certificates, and scripts. Later releases adapted its networking components and privileged integration to changing macOS security requirements.

Adoption history

Tunnelblick became a longstanding native macOS interface for OpenVPN client and server connections. It supports personal installations as well as shared and deployed configurations, making it useful to individual users and managed Mac fleets.

How it is used

Users install or import .tblk, .ovpn, or .conf configurations and control VPN connections from Tunnelblick's menu-bar interface. Administrators can distribute shared, deployed, or per-user configurations and apply forced preferences.

Why package nerds care

Tunnelblick is the graphical macOS counterpart to command-line OpenVPN packaging. Its application bundle integrates OpenVPN, supporting libraries, scripts, privileged helpers, and configuration-bundle handling, so its packaging and upgrade behavior are more involved than those of a self-contained GUI application.

Timeline

Before version 3.0b24: Private configurations were stored in ~/Library/openvpn.
Version 3.0b24: Private configurations moved to ~/Library/Application Support/Tunnelblick/Configurations, with migration support for the old location.
2024: Tunnelblick 4.0 added command-line installation of private and shared configurations and updated its bundled OpenVPN and OpenSSL components.

Related projects

OpenVPN
OpenSSL
easy-rsa
tuntaposx

Sources

Official documentation: https://tunnelblick.net/documents.html
Official file-locations reference: https://tunnelblick.net/cFileLocations.html
Official repository: https://github.com/Tunnelblick/Tunnelblick
Official website: https://tunnelblick.net/

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for tunnelblick. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

macOS: ~/Library/Application Support/Tunnelblick/Configurations/Library/Application Support/Tunnelblick/Shared/Applications/Tunnelblick.app/Contents/Resources/Library/Application Support/Tunnelblick/Users/<username>/Library/Application Support/Tunnelblick/Backup~/Library/Preferences/net.tunnelblick.tunnelblick.plist

executables

Installed executables

Command	Kind	Exposure	Note
No executable data was present.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-11-04

manager version10.0.2,6590

manager updated

local dataok

upstreamnot checked

latest detectednot detected

https://www.tunnelblick.net/

infoNo package-manager update timestamp was available.low confidence
infoRelease/tag comparison is only available for GitHub repositories.https://www.tunnelblick.net/none confidence

install metadata

Package metadata

Package key	cask:tunnelblick
Version	10.0.2,6590
Package manager	Homebrew Cask
Package manager page	https://formulae.brew.sh/cask/tunnelblick
Homepage	https://www.tunnelblick.net/
Upstream docs	https://www.tunnelblick.net/
Source archive	https://tunnelblick.net/iprelease/Tunnelblick_10.0.2_build_6590.dmg
SHA-256	0cbe851ab6d2c61e496ca9dd36b0a62a5759bb6ff9e855188cce0cda15d4d504
Bottle	not recorded
Homebrew post-install	not defined
Service	none declared
Caveats	For security reasons, tunnelblick must be installed to /Applications, and will request to be moved at launch.

registry facts

Source database details

Source Database	Homebrew cask API
Tap	homebrew/cask
Full Token	tunnelblick
Names	Tunnelblick
Depends On	Macos >=: 13
Conflicts With	Cask tunnelblick@beta
Artifacts	App 1 Target 1 Uninstall 1 Uninstall Preflight Steps 1 Zap 1
Auto Updates	yes
Deprecated	no
Disabled	no

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/tunnelblick.yml

Used sources

cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
package relationship graph
package version freshness
package-page enrichment

Install tunnelblick with Homebrew Cask