SparkLabs Blog.

The latest news and releases.


Viscosity For Mac & Windows: Version 1.11

Viscosity 1.11 is now available for both macOS and Windows! This is a big update, with OpenVPN 2.6 support, OpenSSL 3.0, significant behind-the-scenes upgrades and improvements, enhanced system identity and token support, IPv6 support improvements, and lots of other new features, improvements, and bug fixes.

OpenVPN 2.6 is a big change that brings several new security and network features to VPN connections. OpenVPN 2.6 is backwards compatible with servers running older versions of OpenVPN, and Viscosity 1.11 will allow you to seamlessly update and use its new features for the vast majority of connections.

As part of this update, Viscosity has also moved to using OpenSSL 3.0. OpenSSL is the security library that Viscosity and OpenVPN use, and it provides the encryption and security protocols used by VPN connections. OpenSSL 3.0 offers many security improvements, as well as deprecating older encryption ciphers, digests, and protocols that are no longer considered secure.

For most users upgrading to OpenVPN 2.6 and OpenSSL 3.0 should be seamless: Viscosity will automatically handle updating most VPN connection configurations. However, some older OpenVPN server setups may not be compatible with OpenVPN 2.6 out-of-the-box. To help ease the transition when connecting to these servers, Viscosity 1.11 introduces a new "Compatibility" setting that makes it easier to connect to servers running older versions of OpenVPN.

The Compatibility setting combines OpenVPN 2.6's new "compat-mode" option with a number of cipher, TLS, and compression changes to match those expected by older versions of OpenVPN. For more information on the Compatibility setting, or for help migrating from OpenVPN 2.5 to version 2.6, please see Migrating from OpenVPN 2.5 to OpenVPN 2.6.

The macOS version also includes several DNS support improvements and fixes, and users of Viscosity 1.11 should see improved DNS performance and reliability.

The Windows version has also had its PKCS#11 support upgraded, with support for additional token and slot types. In particular, it now supports Slot 9c on YubiKey tokens, which has been a requested feature. Signing using the Windows Certificate Store has also been improved, with additional key types supported. The Windows version also includes several IPv6 improvements, including support for assigning DNS servers and domains via RDNSS and DNSSL.

Finally, macOS 10.15 (Catalina) is no longer supported. Users are strongly encouraged to update to macOS 11 or later. Older Viscosity releases can still be found at the Legacy Downloads page if required.


Version 1.11 Mac Release Notes:

added
OpenVPN 2.6 Support
added
OpenVPN server version compatibility option in connection editor
improved
Import support for IPv4 routes being specified with a prefix
improved
Full DNS support when using an iOS mobile device tunnel
improved
Increases the maximum allowable height of the Settings window
improved
Detection of additional mismatched client-server cipher settings
improved
Support for additional System Identity certificate types and tokens
updated
OpenVPN updated to version 2.6.9
updated
OpenSSL updated to version 3.0.13
fixed
Resolves issue where Viscosity helper may crash when updating DNS
fixed
Resolves certain proxy commands getting incorrectly flagged as unsafe
fixed
Resolves certain inline PKCS#12 files not importing correctly
fixed
Resolves issue where Full DNS mode may disable on rapid network changes
fixed
Resolves issue where Viscosity may stop responding after sorting an empty folder
fixed
Resolves issue where a web authentication page may remain in memory after close
fixed
Resolves issue when Import from Server profile URL uses a different domain
fixed
Workaround for login bug in CloudConnexa when using Import from Server
fixed
Resolves Authentication Type menu being mislabelled for some localizations
fixed
Various bug fixes and enhancements
removed
OpenVPN 2.5 removed
removed
macOS 10.15 is no longer supported


Version 1.11 Windows Release Notes:

added
OpenVPN 2.6 Support
added
OpenVPN server version compatibility option in connection editor
added
Support for DNS servers and domains set via IPv6 RAs (RDNSS and DNSSL)
added
Automatic IPv6 RA gateway detection via new route-ipv6-gateway auto flag
improved
Support for additional PKCS#11 tokens and slot types
improved
Import support for IPv4 routes being specified with a prefix
improved
Detection of additional mismatched client-server cipher settings
improved
Support for additional Windows Certificate Store certificate types and tokens
improved
Improved support for IPv6-only TAP connections
updated
OpenVPN updated to version 2.6.9
updated
OpenSSL updated to version 3.0.13
fixed
Resolves issue running on older Windows 10 on ARM64 devices
fixed
Resolves issue when Import from Server profile URL uses a different domain
fixed
Workaround for login bug in CloudConnexa when using Import from Server
fixed
Resolves issue where the reported connection time could be incorrect
fixed
Various bug fixes and enhancements
removed
OpenVPN 2.5 removed

The 1.11 update can be automatically installed from inside Viscosity, or downloaded and manually installed. For support with this version please visit our support section.