Network

iSSTP – a SSTP Client for Mac OSX

axot223 Comments

This is a sstp GUI client for Mac, use a modified sstp-client as backend which support server-name TLS extension. Some servers(ex: *.vpnazure.net) require server-name, otherwise the sstp connection will be rejected.

This project will be published to Github soon.

CHANGELOG

2016.10.04 v1.3
fixed: Sierra support

2015.08.15 v1.1
new feature: custom sstpc option support

2015.08.12
fixed: add refuse-eap support

Download iSSTP

  • Phil Conibere

    Will this allow me to connect to an azure VPN? There doesnt seem to be anywhere I can specify the client certificate? Are you able to explain how we use it please?

    • Yes, you can connect to Azure VPN server with this tool, the certification has to be imported into OSX keychain.

      • Phil Conibere

        Great, do you have the source available please?

      • Do you have any details of how to do this. I have imported the certificate but is there any way of guaranteeing it is being picked up?

  • chris

    Hi there. I was wondering if this application forces a certain DNS address and if so is it possible to change it?

    • Okay, I will implement custom DNS support in a few days.

  • Driver28

    Hi! Tried iSSTP but it doesn’t seem to work at all on my setup. os x 10.10.4. Am I supposed to need something else than the downloaded file? I just downloaded from your site, moved to Applications and ran the software. put in display name hostname and credentials but all that happens is “trying to connect”

    • It should work out of box. Did you try to connect your vpn server in Windows?

      • Driver28

        Yes, works like a charm.

        • Could you paste the output follow the steps below,

          Find where iSSTP Downloaded, the follow example stored in /Applications

          (note:
          1. replace your_username to your vpn accout name
          2. replace your_password to your vpn accout password
          3. replace your_vpnserver_ip to your vpn server ip address
          )

          Open Terminal, type commands↓


          cd /Applications/iSSTP.app/Contents/Resources
          sudo ./sstpc --log-level 4 --log-stdout --cert-warn --user your_username --password your_password your_vpnserver_ip usepeerdns require-mschap-v2 noauth noipdefault defaultroute

  • Ben

    I am having issues running this as well, Connects fine from our Windows clients and does have mschap-v2 turned on as well as a valid SSL certificate.

    I ran this:
    sudo ./sstpc –log-level 4 –log-stdout –cert-warn –user ***** –password **** vpn.server,com usepeerdns require-mschap-v2 noauth noipdefault defaultroute

    Output:
    Aug 12 09:42:15 sstpc[405]: Could not create directory: /usr/local/var/run/sstpc, No such file or directory (2)

    Aug 12 09:42:15 sstpc[405]: Could not access or create runtime directory

    Aug 12 09:42:15 sstpc[405]: Could not create directory: /usr/local/var/run/sstpc, No such file or directory (2)

    Aug 12 09:42:15 sstpc[405]: Could not access or create privilege separation directory, /usr/local/var/run/sstpc

    Aug 12 09:42:16 sstpc[405]: Resolved **** to *****

    Aug 12 09:42:16 sstpc[405]: Connected to ******

    Aug 12 09:42:16 sstpc[405]: Sending Connect-Request Message

    Aug 12 09:42:16 sstpc[405]: SSTP CRTL PKT(14)

    Aug 12 09:42:16 sstpc[405]: TYPE(1): CONNECT REQUEST, ATTR(1):

    Aug 12 09:42:16 sstpc[405]: ENCAP PROTO(1): 6

    Aug 12 09:42:16 sstpc[405]: SSTP CRTL PKT(48)

    Aug 12 09:42:16 sstpc[405]: TYPE(2): CONNECT ACK, ATTR(1):

    Aug 12 09:42:16 sstpc[405]: CRYPTO BIND REQ(4): 40

    Aug 12 09:42:16 sstpc[405]: Started PPP Link Negotiation

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(28)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(60)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(19)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(28)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(53)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(53)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(11)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(24)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(10)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(24)

    Aug 12 09:42:16 sstpc[405]: SSTP DATA PKT(12)

    Aug 12 09:42:16 sstpc[405]: SSTP CRTL PKT(20)

    Aug 12 09:42:16 sstpc[405]: TYPE(6): DISCONNECT, ATTR(1):

    Aug 12 09:42:16 sstpc[405]: STATUS INFO(2): 12

    Aug 12 09:42:16 sstpc[405]: Sending Disconnect Ack Message

    Aug 12 09:42:16 sstpc[405]: SSTP CRTL PKT(8)

    Aug 12 09:42:16 sstpc[405]: TYPE(7): DISCONNECT ACK, ATTR(0):

    Aug 12 09:42:16 sstpc[405]: Connection was aborted, Reason was not known

    **Error: Connection was aborted, Reason was not known, (-1)

    Any help would be great

    • Ben

      Turns out it didn’t work because Extensible Authentication Protocol (EAP) was selected as an authentication method on the VPN Server. MS-Chap-V2 is also selected.

      Is there a way around this? If EAP is enabled it won’t let me connect as above

      • Ben

        Turns out by Adding “refuse-eap” it works.

        sudo ./sstpc –log-level 4 –log-stdout –cert-warn –user *****
        –password **** vpn.server,com usepeerdns require-mschap-v2 refuse-eap noauth
        noipdefault defaultroute

        How can I force the GUI connector to use the refuse-eap option? I tried looking for where the connection details are stored but I couldn’t locate it.

        • I updated a new version which already add refuse-eap option, plz try the latest version. GUI custom option will add in the future version.

          • Ben

            Worked perfectly this time around.

            Thank you very much I have been needing this for clients for ages!

  • stalker

    Hi! (first, thanks for the program!)
    When I connected to vpn, default route change to remote VPN. There are any workaround or something to not do this?
    example: i get 192.168.43.X/24 I only want access this network via VPN, not all traffic.

    • I update a new version to support this feature. Download the latest v1.1 version. Now you can edit options which used by sstpc. In your case, you should delete the last ‘defaultroute’ option, after the vpn connection was successfully established, add a static routing.


      sudo route add -net 192.168.43.X/24 gw your_client_ip

      • stalker

        Nice! thanks its working

        One more question: sstpc not call /etc/ppp/if-up . Do you think can i run automatically when connected?

        • You could write the script into /etc/ppp/ip-up (not if-up)


          cat /etc/ppp/ip-up

          #!/bin/sh
          #
          # $1 interface-name
          # $2 tty-device
          # $3 speed
          # $4 local-IP-address
          # $5 remote-IP-address
          # $6 ipparam

          if [[ $4 == 192.168.43.* ]]
          then
          /sbin/route add 192.168.43.0/24 $4
          fi

  • Pingback: OSX SSTP Gui Client | Techkiwi's Blog()

  • Matt

    we had to use single quotes in the password field in order for it to connect for us.

    example: ‘password’

    is this expected?

  • Xi Ow

    Hi, and thanks for thant.

    Do you have an 10.6 version ?

    How can I use it to connect on windows 2008 VPN SSTP Server with the certificate.cer ?

    Thanks

  • Xi Ow

    Hi, and thanks for that.

    Do you have a version for MAC OS 10.6 ?

    Can I use it to connect on windows 2008 VPN SSTP Server with the certificate.cer on MAC OS 10.10 ?

    If I change .cer by .pem with openssl that works ?

    Thanks

    • You do not need import the certificate file, it works out of box.

  • Paul

    I installed it the first time, and could make a connection whit out any problem.
    Only safari was not possible for audio-streaming. I disconnected the VPN and audio on safari was working again.
    I connected the VPN again with the tool and now it remains on try to connect. Any idea what could be the problem?
    I have a macbook pro with OS X Yosemite version 10.10.5

  • steve

    I just run the install and made connection no problem but cannot find the application anywhere on the mac and it will not let me reinstall. anyone any ideas

  • steve

    ignore my earlier post works great thanks just being a little dumb for a moment

  • steve

    Installed and connects no issue but when I use the connection it drops from the far end but the isstp client still thinks its connected. If I close the app then reopen and conect it works a gain for a few minutes and the same happens. Any ideas?

    • Dominik Kupschke

      This is exactly the same problem I had today. I am using isstp with an mikrotik routeros sstp vpn.

      • Carl

        I also have this issue. Have found a solution?
        about 60 seconds its connected and working perfectly and then the connection is lost but the ssts client still thinks it is connected….

        • Could you tell me more details about this issue?

          1. Did this happen when use a Windows client
          2. How often does this bug happen
          3. Could you paste a debug log

  • ILANA Dewitt

    I i’ve been looking SSTP client for Mac so many time.
    Thank you very much. Working perfectly with my VPN service here in China.
    I am using http://vpnprivacy.com Singapore server right now. I am happy.
    Thank you dude!

  • George

    Hi! Thanks for creating a much needed tool. I was trying to access my Softether VPN Azure connection. The connection status was showing a successful connection but web access never worked. It seems to be a DNS issue. Question 1: Is there anything you can do to allow the client automatically find the right DNS server? Question 2: Where can I get information on the usage of the options listed in the edit box? Thanks in advance.

    • 1. the default setting will find DNS server automatically, are you sure it’s a DNS issue
      2. it uses pppd options https://ppp.samba.org/pppd.html

      • George

        Thanks for the reply. I’m a total layman to all this. The reason I suspect a DNS issue was due to the fact that the browser always report “This webpage is not available” for all websites visited when sstp-client is in “connected to server” state. If sstp-client is disabled sites like msn.com and many others can be accessed.
        The default contents in the Edit box is as follows:

        “usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute”.

        I’d appreciate it very much if you could help identify the problem.

        • Did you test Windows machine if sstp works

          • George

            Yes. Softether VPN Client works fine.

          • George

            Hi. I’m still struggling with the above problem. I ran the “nslookup google.com” in Teminal and got the following response:

            ;; Got SERVFAIL rpely from 192.168.1.166, trying next server
            ;; Got SERVFAIL reply from 192.168.1.167#53, trying next server
            Server: 192.168.1.167
            Address: 192.168.1.167#53

            On the status display of iSSTP GUI it shows : “Connected to server, your ip is: 192.168.1.63”
            It’d be greatly appreciated if you could provide some suggestions further narrowing down the root cause based on the above information.

          • I think it also can be a mtu or bridge problem. Could you provide a test accout? If it is possible send a email to axot [at] axot.org

          • George

            I’ve sent you the connection information to the eMail address you provided. Your help is greatly appreciated.

      • tsiddiqui

        hello when i run the ./configure command it shows the error

        checking for pppd/pppd.h… no

        configure: error: pppd.h missing Hint: apt-get install ppp-dev
        but apt-get is not working in mac os x
        so how to install it
        please help

  • Bart

    Hi, works very well. However, I think that –cert-warn is enabled by default now? For added security, I’d like to be able to disable that, so we make sure connection-attempts to incorrect servers are stopped before authentication is tried. Can you add such an option? We use a wildcard cert on the SSTP vpn server, and when using the commandline client, without –cert-warn, it says it’s not matching and stops the connection attempt. Thanks!

    • I will move default –cert-warn to custom options. Please wait few days maybe.

    • I update a new version 1.1.1, can you check out the latest one?

      • Bart

        Great! Just tested it, works very well. Thank you very much!
        Would this ever get in the Mac App Store? That would be awesome!

  • Nicolas De Vita

    Hi!, i am connceting from a Macbook Air with Yosemite OS and when I hit connect, it says that it is connected, I ping the other end and I certainly can reach it, but after two or three succesfully pings, it automatically disconnects. I am connecting to a ForeFront TMG from microsoft. Did this happens to anyone? Thanks!!! (I am from Argetina, and I have a poor English. I hope it is understandable)

  • Sebastian

    Hi! Can someone please post an example how to connect with an Azure network using the modified sstpc version?

    • Okay, if you want use sstpc, basically there are two ways you can do this.

      1. Compile source code by yourself.
      You can get source code from https://github.com/reliablehosting/sstp-client
      and patch from https://github.com/reliablehosting/sstp-client/pull/2

      2. Use the binary version of modified sstpc from iSSTP
      I only explain how to use sstpc in this case.

      # note:
      # 1. replace your_username to your vpn accout name
      # 2. replace your_password to your vpn accout password
      # 3. replace your_vpnserver_ip to your vpn server ip address

      # Open Terminal, type commands
      $ cd /path/to/downloaded/iSSTP.app/Contents/Resources
      $ sudo ./sstpc --cert-warn --user your_username --password your_password your_vpnserver_ip usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute

  • aytac

    it is crashing on el capitan when i click connect

    • I’m using El Capitan, and it works well.
      Can you send a crash report which can be found in Console.app `User Diagnostic Reports` section

      • aytac

        It is working now but when you forget to fillin something it crashes

        • Thank you, I confirmed this issue and will fix it soon

  • Viktor Chukhantsev

    Thanks for your work. Save a lot of mine time. Bug with fields I confirm, sometimes crash even after save button.

    • Thank you for feedback. Could you tell me more details how to reproduce this crash issue?

      • Viktor Chukhantsev

        When you fill login and password, push save button, app still can crash.

  • CyberdogCo

    Zheng Shao, thank you for working on this. I wanted to contribute a bug fix but don’t see this project on github. Here’s the bug, passwords entered into the password field containing special characters are not properly escaped. I noticed this when I could run the program via shell but not via the GUI, using single quotes in the shell to enclose my password for a customer.

    A temporary workaround we’ve been using is using single quotes in the GUI in the password field which works like a charm. I take it you are taking the input from the GUI and copying it straight to the CLI but you may want to parse the input first. Thank you for releasing this tool!

    • Thank you for bug reporting, I’m planning migrate the project to github. This escape bug will be fixed in few days.

  • tsiddiqui

    hi I am very new to it and i want to know that can any one tell how to install using source code step by step this sstp client on mac el capitan..
    thanks in advance

    • I will update a tutorial in a few days.

      • tsiddiqui

        thanks for your support, just tell how to install pppd/pppd.h files as it is not found in my mac el capitan when I run the ./configure command.You told the link (http://ppp.samba.org) to install this but this is for linux and solaris and when I going to configure it, it gives me error..please help


        • # brew edit sstp-client
          ./configure --disable-dependency-tracking --disable-silent-rules --disable-ppp-plugin --with-runtime-dir=/var/run/sstpc

          • tsiddiqui

            thanks so so much,it works I did after this run the make command then i run sudo make install

            Now please tell how to use it please it will be very thankful to you

          • tsiddiqui

            just after installing using sudo make install where to go to use it

      • Jan

        Hi, I am not able to find the tutorial. Could you post the link, please? Thanks in advance, Jan

        • I added a HOW TO COMPILE section in this page.

          • Jan

            Thank you, I was originally interested in all possible parameters like usepeerdns, require-mschap-v2 etc.. I am able to connect to my vpn, but speed is markable lower than from PC, so my idea was if there isn’t some switch to solve this. I am using usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute.
            I would also need to forbid “use default gateway on remote network” property. But I suppose, the only way is to remove defaultroute parameter and call route command as you have suggested lower in discussion.

  • tsiddiqui

    when i do sudo sstpc –cert-warn –user your_username –password your_password your_vpnserver_ip usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute

    following error occurs:

    Feb 19 19:17:08 sstpc[55456]: Unrecoverable SSL error 0

    Feb 19 19:17:08 sstpc[55456]: HTTP handshake with server failed

    **Error: HTTP handshake with server failed, (-1)

    please help

    • Did you replace your_username your_password your_vpnserver_ip

      • tsiddiqui

        yes replaced the username and password after that it says :
        resolved to this ip 130.148.6.121
        connected to this vpnazure.net

        Feb 19 19:17:08 sstpc[55456]: Unrecoverable SSL error 0

        Feb 19 19:17:08 sstpc[55456]: HTTP handshake with server failed

        **Error: HTTP handshake with server failed, (-1)

        • vpnazure.net need a ssl patch, you have to recompile the source code


          git clone https://github.com/reliablehosting/sstp-client.git
          cd sstp-client
          git checkout -b ssl_patch
          git pull origin pull/2/head
          git checkout master
          git merge ssl_patch
          ./configure --disable-dependency-tracking --disable-silent-rules --disable-ppp-plugin --with-runtime-dir=/var/run/sstpc
          make -j4
          make install

          for my mac homebrew env, the configure line maybe like this,

          LDFLAGS="-L/usr/local/lib -L/usr/local/Cellar/openssl/1.0.2d_1/lib" CFLAGS="-I/usr/local/include -I/usr/local/Cellar/openssl/1.0.2d_1/include" ./configure --disable-dependency-tracking --disable-silent-rules --disable-ppp-plugin --with-runtime-dir=/var/run/sstpc

          • tsiddiqui

            still have the same error after running this sir of http handshake with server failed error

          • Could you upload some logs using

            –debug –log-level 4 –log-stdout


            sudo ./sstpc --debug --log-level 3 --log-stdout --cert-warn --user xxx --password yyy zzz.com usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute

          • tsiddiqui

            after run the command that u give that following result occurs

            Feb 20 19:21:40 sstpc[3850]: Resolved zzz.com to 173.192.14.128

            Feb 20 19:21:40 sstpc[3850]: Connected to zzz.com

            Feb 20 19:21:41 sstpc[3850]: Error: Expected HTTP code 200

            Feb 20 19:21:41 sstpc[3850]: HTTP handshake with server failed

            **Error: HTTP handshake with server failed, (-1)

          • U should replace zzz.com to your server address

          • tsiddiqui

            i did replace the server address username and password after that i run the command and get this error

            Feb 20 19:34:51 sstpc[3857]: Connected to jp1se.vpnazure.net

            Feb 20 19:34:52 sstpc[3857]: Unrecoverable SSL error 0

            Feb 20 19:34:52 sstpc[3857]: HTTP handshake with server failed

            **Error: HTTP handshake with server failed, (-1)

          • I tested this server with no SSL problem. Are you sure you did compile correctly? Please see HOW TO COMPILE section in this page.

            > sudo ./sstpc --debug --log-level 4 --log-stdout --cert-warn --user axot --password hello jp1se.vpnazure.net usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute

            Feb 20 23:37:03 sstpc[20170]: Resolved jp1se.vpnazure.net to 130.158.6.125

            Feb 20 23:37:03 sstpc[20170]: Connected to jp1se.vpnazure.net

            Feb 20 23:37:03 sstpc[20170]: The certificate did not match the host: jp1se.vpnazure.net

            Feb 20 23:37:03 sstpc[20170]: Server certificated failed verification, ignoring

            Feb 20 23:37:03 sstpc[20170]: Sending Connect-Request Message

            Feb 20 23:37:03 sstpc[20170]: SSTP CRTL PKT(14)

            Feb 20 23:37:03 sstpc[20170]: TYPE(1): CONNECT REQUEST, ATTR(1):

            Feb 20 23:37:03 sstpc[20170]: ENCAP PROTO(1): 6

            Feb 20 23:37:03 sstpc[20170]: SSTP CRTL PKT(48)

            Feb 20 23:37:03 sstpc[20170]: TYPE(2): CONNECT ACK, ATTR(1):

            Feb 20 23:37:03 sstpc[20170]: CRYPTO BIND REQ(4): 40

            Feb 20 23:37:03 sstpc[20170]: Started PPP Link Negotiation

            Feb 20 23:37:03 sstpc[20170]: SSTP DATA PKT(28)

            Feb 20 23:37:03 sstpc[20170]: SSTP DATA PKT(16)

            Feb 20 23:37:03 sstpc[20170]: SSTP DATA PKT(16)

            ^CFeb 20 23:37:05 sstpc[20170]: Terminating on Interrupt: 2 (2)

            Feb 20 23:37:05 sstpc[20170]: SSTP session was established for 2 seconds

            Feb 20 23:37:05 sstpc[20170]: Received 12 bytes, sent 44 bytes

          • tsiddiqui

            I dont know I followed ur every step ,now i am going to do it from start again
            by the way thankyou sooo much bro for lot of help

          • bedrock

            Having trouble getting this to build on Sierra, I have homebrew and openssl 1.0.2j installed and am passing LDFLAGS and CFLAGS, but .configure is refusing to find openssl. Any help?

          • Yep, openssl was updated. Maybe work with this


            LDFLAGS="-L/usr/local/lib -L/usr/local/Cellar/openssl/*/lib" CFLAGS="-I/usr/local/include -I/usr/local/Cellar/openssl/*/include"

  • tsiddiqui

    which .c file function thenshould be called first from the code to connect the sstp and after this the whole process starts ?
    Zheng Shao please help

  • Bart

    Hi, still works very well. However, one issue that is somewhat cumbersome… DNS suffix or search domain. We connect to our corporate network and using short names (hence, no FQDN) is easier.. I’ve tried using the /etc/hosts file, I’ve tried using the ms-wins directive to use a wins server, however it seems that this doesn’t work. Do you have any tips or ideas to solve this issue? In Mac OSx you can set a DNS suffix per adapter, however, there are no such settings in the GUI for this SSTP connection…

    • This is possible done by adding a /etc/ppp/ip-up and /etc/ppp/ip-down script. Or editing /etc/resolv.conf directly. I will add this feature in the next release. You can also add these scripts manually.

      • Bart

        Sorry, I said I tried using /etc/hosts, but I should have said /etc/resolv.conf. I’ve tested that, but it seems that the system is ignoring it or so. When I edit it, I also get a warning message stating that is is obsolete or something like that…

        • /etc/resolv.conf should work. Could you paste the modification version of /etc/resolv.conf please?

          • Bart

            Well, It’s autogenerated, and after connection with the SSTP VPN, it does add the correct DNS servers. It does not specify the dns search domain, so I add that manually. However, it seems to make no difference:
            These are the contents:
            #
            # Mac OS X Notice
            #
            # This file is not used by the host name and address resolution
            # or the DNS query routing mechanisms used by most processes on
            # this Mac OS X system.
            #
            # This file is automatically generated.
            #
            search corp.company.com
            nameserver 10.11.12.1
            nameserver 10.11.12.2

            I’ve changed the dns name en ip addresses for privacy reasons.

            The Notice in the top of the file suggests that altering this file really has no benefit any longer, but I’m not sure what to do then…

          • Bart

            I think, normally, the way to do this is altering the configuration of the network interface in the GUI.. However, for the SSTP connection, there is no network interface visible there, and so I cannot alter anything…

  • tsiddiqui

    hi I want to run the source code of sstp mac client through xcode and i am unable to do it even after making link to openssl and libevent files,Xcode gives me the error of duplication sometime and linker error for architecture.
    Any one here who did this work before ,
    please help

  • tsiddiqui

    i have connected the sstp through that command
    sudo ./sstpc –debug –log-level 3 –log-stdout –cert-warn –user xxx –password yyy zzz.com usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute

    and its working now how to disconnect it properly through command or any argument that will disconnect it

    • just kill the pid

      • tsiddiqui

        How can i get the pid as it is changed every time the process starts??
        how can i get the specific pid for the sstp only

        • Adam Gaa

          kill -9 $(pidof sstpc)

  • Prateek

    When I run this command – LDFLAGS=”-L/usr/local/lib” CFLAGS=”-I/usr/local/include” ./configure –disable-dependency-tracking –disable-silent-rules –disable-ppp-plugin –with-runtime-dir=/var/run/sstpc

    I get –

    checking whether make supports nested variables… yes

    checking for a BSD-compatible install… /usr/bin/install -c

    checking whether build environment is sane… yes

    checking for a thread-safe mkdir -p… ./install-sh -c -d

    checking for gawk… no

    checking for mawk… no

    checking for nawk… no

    checking for awk… awk

    checking whether make sets $(MAKE)… yes

    checking for gcc… gcc

    checking whether the C compiler works… yes

    checking for C compiler default output file name… a.out

    checking for suffix of executables…

    checking whether we are cross compiling… no

    checking for suffix of object files… o

    checking whether we are using the GNU C compiler… yes

    checking whether gcc accepts -g… yes

    checking for gcc option to accept ISO C89… none needed

    checking for style of include used by make… GNU

    checking dependency style of gcc… none

    checking whether gcc and cc understand -c and -o together… yes

    checking build system type… x86_64-apple-darwin15.3.0

    checking host system type… x86_64-apple-darwin15.3.0

    checking how to print strings… printf

    checking for a sed that does not truncate output… /usr/bin/sed

    checking for grep that handles long lines and -e… /usr/bin/grep

    checking for egrep… /usr/bin/grep -E

    checking for fgrep… /usr/bin/grep -F

    checking for ld used by gcc… /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/ld

    checking if the linker (/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/ld) is GNU ld… no

    checking for BSD- or MS-compatible name lister (nm)… /usr/bin/nm

    checking the name lister (/usr/bin/nm) interface… BSD nm

    checking whether ln -s works… yes

    checking the maximum length of command line arguments… 196608

    checking whether the shell understands some XSI constructs… yes

    checking whether the shell understands “+=”… yes

    checking how to convert x86_64-apple-darwin15.3.0 file names to x86_64-apple-darwin15.3.0 format… func_convert_file_noop

    checking how to convert x86_64-apple-darwin15.3.0 file names to toolchain format… func_convert_file_noop

    checking for /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/ld option to reload object files… -r

    checking for objdump… no

    checking how to recognize dependent libraries… pass_all

    checking for dlltool… no

    checking how to associate runtime and link libraries… printf %sn

    checking for ar… ar

    checking for archiver @FILE support… no

    checking for strip… strip

    checking for ranlib… ranlib

    checking command to parse /usr/bin/nm output from gcc object… ok

    checking for sysroot… no

    checking for mt… no

    checking if : is a manifest tool… no

    checking for dsymutil… dsymutil

    checking for nmedit… nmedit

    checking for lipo… lipo

    checking for otool… otool

    checking for otool64… no

    checking for -single_module linker flag… yes

    checking for -exported_symbols_list linker flag… yes

    checking for -force_load linker flag… yes

    checking how to run the C preprocessor… gcc -E

    checking for ANSI C header files… yes

    checking for sys/types.h… yes

    checking for sys/stat.h… yes

    checking for stdlib.h… yes

    checking for string.h… yes

    checking for memory.h… yes

    checking for strings.h… yes

    checking for inttypes.h… yes

    checking for stdint.h… yes

    checking for unistd.h… yes

    checking for dlfcn.h… yes

    checking for objdir… .libs

    checking if gcc supports -fno-rtti -fno-exceptions… yes

    checking for gcc option to produce PIC… -fno-common -DPIC

    checking if gcc PIC flag -fno-common -DPIC works… yes

    checking if gcc static flag -static works… no

    checking if gcc supports -c -o file.o… yes

    checking if gcc supports -c -o file.o… (cached) yes

    checking whether the gcc linker (/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/ld) supports shared libraries… yes

    checking dynamic linker characteristics… darwin15.3.0 dyld

    checking how to hardcode library paths into programs… immediate

    checking whether stripping libraries is possible… yes

    checking if libtool supports shared libraries… yes

    checking whether to build shared libraries… yes

    checking whether to build static libraries… yes

    checking for pkg-config… no

    checking event.h usability… yes

    checking event.h presence… no

    configure: WARNING: event.h: accepted by the compiler, rejected by the preprocessor!

    configure: WARNING: event.h: proceeding with the compiler’s result

    checking for event.h… yes

    checking for main in -levent… yes

    checking for event_init in -levent… yes

    checking for pkg-config… no

    checking for openssl/ssl.h in /usr/local/ssl… no

    checking for openssl/ssl.h in /usr/lib/ssl… no

    checking for openssl/ssl.h in /usr/ssl… no

    checking for openssl/ssl.h in /usr/pkg… no

    checking for openssl/ssl.h in /usr/local… yes

    checking whether compiling and linking against OpenSSL works… yes

    checking for openpty in -lutil… yes

    checking for linux/rtnetlink.h… no

    configure: WARNING: Compiling without netlink support

    checking for stdbool.h that conforms to C99… yes

    checking for _Bool… yes

    checking arpa/inet.h usability… yes

    checking arpa/inet.h presence… yes

    checking for arpa/inet.h… yes

    checking fcntl.h usability… yes

    checking fcntl.h presence… yes

    checking for fcntl.h… yes

    checking netdb.h usability… yes

    checking netdb.h presence… yes

    checking for netdb.h… yes

    checking paths.h usability… yes

    checking paths.h presence… yes

    checking for paths.h… yes

    checking for stdint.h… (cached) yes

    checking for stdlib.h… (cached) yes

    checking for string.h… (cached) yes

    checking syslog.h usability… yes

    checking syslog.h presence… yes

    checking for syslog.h… yes

    checking pty.h usability… no

    checking pty.h presence… no

    checking for pty.h… no

    checking for sys/types.h… (cached) yes

    checking sys/socket.h usability… yes

    checking sys/socket.h presence… yes

    checking for sys/socket.h… yes

    checking for unistd.h… (cached) yes

    checking for mode_t… yes

    checking for size_t… yes

    checking for uint16_t… yes

    checking for uint32_t… yes

    checking for uint8_t… yes

    checking for working alloca.h… yes

    checking for alloca… yes

    checking for pid_t… yes

    checking vfork.h usability… no

    checking vfork.h presence… no

    checking for vfork.h… no

    checking for fork… yes

    checking for vfork… yes

    checking for working fork… yes

    checking for working vfork… (cached) yes

    checking for uid_t in sys/types.h… yes

    checking for unistd.h… (cached) yes

    checking for working chown… yes

    checking for stdlib.h… (cached) yes

    checking for GNU libc compatible malloc… yes

    checking for dup2… yes

    checking for gethostname… yes

    checking for localtime_r… yes

    checking for memmove… yes

    checking for memset… yes

    checking for mkdir… yes

    checking for socket… yes

    checking for strcasecmp… yes

    checking for strncasecmp… yes

    checking for strchr… yes

    checking for strdup… yes

    checking for strrchr… yes

    checking for strstr… yes

    checking for strtoul… yes

    checking for strtoull… yes

    configure: creating ./config.status

    config.status: creating Makefile

    config.status: creating sstp-client-1.0.pc

    config.status: creating src/Makefile

    config.status: creating include/Makefile

    config.status: creating src/libsstp-log/Makefile

    config.status: creating src/libsstp-api/Makefile

    config.status: creating src/libsstp-compat/Makefile

    config.status: creating src/pppd-plugin/Makefile

    config.status: creating config.h

    config.status: executing depfiles commands

    config.status: executing libtool commands

    sstp-client version 1.0.9

    Prefix………: /usr/local

    Runtime Dir….: /var/run/sstpc

    PPP Plugin Dir.: ${exec_prefix}/lib/pppd/2.4.5

    User:……….: sstpc

    Group:………: sstpc

    Using OpenSSL..: -I/usr/local/include -L/usr/local/lib -lssl -lcrypto

    C Compiler…..: gcc -I/usr/local/include -I/usr/local/include

    Using Event….:

    Linker………: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/ld -L/usr/local/lib -L/usr/local/lib -lutil -levent -lssl -lcrypto

    When I run – make -j4, I get this –

    /Applications/Xcode.app/Contents/Developer/usr/bin/make all-recursive

    Making all in src/libsstp-log

    /bin/sh ../../libtool –tag=CC –mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c -o libsstp_log_la-sstp-log.lo `test -f ‘sstp-log.c’ || echo ‘./’`sstp-log.c

    /bin/sh ../../libtool –tag=CC –mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c -o libsstp_log_la-sstp-log-syslog.lo `test -f ‘sstp-log-syslog.c’ || echo ‘./’`sstp-log-syslog.c

    /bin/sh ../../libtool –tag=CC –mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c -o libsstp_log_la-sstp-log-std.lo `test -f ‘sstp-log-std.c’ || echo ‘./’`sstp-log-std.c

    /bin/sh ../../libtool –tag=CC –mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c -o libsstp_log_la-sstp-log-file.lo `test -f ‘sstp-log-file.c’ || echo ‘./’`sstp-log-file.c

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log.c -fno-common -DPIC -o .libs/libsstp_log_la-sstp-log.o

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log-std.c -fno-common -DPIC -o .libs/libsstp_log_la-sstp-log-std.o

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log-file.c -fno-common -DPIC -o .libs/libsstp_log_la-sstp-log-file.o

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log-syslog.c -fno-common -DPIC -o .libs/libsstp_log_la-sstp-log-syslog.o

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log-std.c -o libsstp_log_la-sstp-log-std.o >/dev/null 2>&1

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log-syslog.c -o libsstp_log_la-sstp-log-syslog.o >/dev/null 2>&1

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log-file.c -o libsstp_log_la-sstp-log-file.o >/dev/null 2>&1

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-log.c -o libsstp_log_la-sstp-log.o >/dev/null 2>&1

    /bin/sh ../../libtool –tag=CC –mode=link gcc -I../../include -I/usr/local/include -I/usr/local/include -L/usr/local/lib -L/usr/local/lib -o libsstp_log.la libsstp_log_la-sstp-log.lo libsstp_log_la-sstp-log-syslog.lo libsstp_log_la-sstp-log-std.lo libsstp_log_la-sstp-log-file.lo -lutil -levent -lssl -lcrypto

    libtool: link: ar cru .libs/libsstp_log.a .libs/libsstp_log_la-sstp-log.o .libs/libsstp_log_la-sstp-log-syslog.o .libs/libsstp_log_la-sstp-log-std.o .libs/libsstp_log_la-sstp-log-file.o

    libtool: link: ranlib .libs/libsstp_log.a

    libtool: link: ( cd “.libs” && rm -f “libsstp_log.la” && ln -s “../libsstp_log.la” “libsstp_log.la” )

    Making all in src/libsstp-api

    /bin/sh ../../libtool –tag=CC –mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c -o libsstp_api_la-sstp-api.lo `test -f ‘sstp-api.c’ || echo ‘./’`sstp-api.c

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-api.c -fno-common -DPIC -o .libs/libsstp_api_la-sstp-api.o

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-api.c -o libsstp_api_la-sstp-api.o >/dev/null 2>&1

    /bin/sh ../../libtool –tag=CC –mode=link gcc -I../../include -I/usr/local/include -I/usr/local/include -export-dynamic -release 0 -L/usr/local/lib -L/usr/local/lib -o libsstp_api.la -rpath /usr/local/lib libsstp_api_la-sstp-api.lo -lutil -levent -lssl -lcrypto

    libtool: link: gcc -dynamiclib -Wl,-undefined -Wl,dynamic_lookup -o .libs/libsstp_api-0.dylib .libs/libsstp_api_la-sstp-api.o -L/usr/local/lib -lutil -levent -lssl -lcrypto -install_name /usr/local/lib/libsstp_api-0.dylib -Wl,-single_module

    libtool: link: (cd “.libs” && rm -f “libsstp_api.dylib” && ln -s “libsstp_api-0.dylib” “libsstp_api.dylib”)

    libtool: link: ar cru .libs/libsstp_api.a libsstp_api_la-sstp-api.o

    libtool: link: ranlib .libs/libsstp_api.a

    libtool: link: ( cd “.libs” && rm -f “libsstp_api.la” && ln -s “../libsstp_api.la” “libsstp_api.la” )

    Making all in src/libsstp-compat

    /bin/sh ../../libtool –tag=CC –mode=compile gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c -o libsstp_compat_la-sstp-compat.lo `test -f ‘sstp-compat.c’ || echo ‘./’`sstp-compat.c

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-compat.c -fno-common -DPIC -o .libs/libsstp_compat_la-sstp-compat.o

    libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../include -I/usr/local/include -I/usr/local/include -c sstp-compat.c -o libsstp_compat_la-sstp-compat.o >/dev/null 2>&1

    /bin/sh ../../libtool –tag=CC –mode=link gcc -I../../include -I/usr/local/include -I/usr/local/include -L/usr/local/lib -L/usr/local/lib -o libsstp_compat.la libsstp_compat_la-sstp-compat.lo -lutil -levent -lssl -lcrypto

    libtool: link: ar cru .libs/libsstp_compat.a .libs/libsstp_compat_la-sstp-compat.o

    libtool: link: ranlib .libs/libsstp_compat.a

    libtool: link: ( cd “.libs” && rm -f “libsstp_compat.la” && ln -s “../libsstp_compat.la” “libsstp_compat.la” )

    Making all in src/pppd-plugin

    make[2]: Nothing to be done for `all’.

    Making all in include

    make[2]: Nothing to be done for `all’.

    Making all in src

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-client.o `test -f ‘sstp-client.c’ || echo ‘./’`sstp-client.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-option.o `test -f ‘sstp-option.c’ || echo ‘./’`sstp-option.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-stream.o `test -f ‘sstp-stream.c’ || echo ‘./’`sstp-stream.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-packet.o `test -f ‘sstp-packet.c’ || echo ‘./’`sstp-packet.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-pppd.o `test -f ‘sstp-pppd.c’ || echo ‘./’`sstp-pppd.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-util.o `test -f ‘sstp-util.c’ || echo ‘./’`sstp-util.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-cmac.o `test -f ‘sstp-cmac.c’ || echo ‘./’`sstp-cmac.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-buff.o `test -f ‘sstp-buff.c’ || echo ‘./’`sstp-buff.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-http.o `test -f ‘sstp-http.c’ || echo ‘./’`sstp-http.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-task.o `test -f ‘sstp-task.c’ || echo ‘./’`sstp-task.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-event.o `test -f ‘sstp-event.c’ || echo ‘./’`sstp-event.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-state.o `test -f ‘sstp-state.c’ || echo ‘./’`sstp-state.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-chap.o `test -f ‘sstp-chap.c’ || echo ‘./’`sstp-chap.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-route.o `test -f ‘sstp-route.c’ || echo ‘./’`sstp-route.c

    gcc -DHAVE_CONFIG_H -I. -I.. -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -c -o sstpc-sstp-fcs.o `test -f ‘sstp-fcs.c’ || echo ‘./’`sstp-fcs.c

    /bin/sh ../libtool –tag=CC –mode=link gcc -I../include -DSSTP_RUNTIME_DIR='”/var/run/sstpc”‘ -I/usr/local/include -I/usr/local/include -L/usr/local/lib -L/usr/local/lib -o sstpc sstpc-sstp-client.o sstpc-sstp-option.o sstpc-sstp-stream.o sstpc-sstp-packet.o sstpc-sstp-pppd.o sstpc-sstp-util.o sstpc-sstp-cmac.o sstpc-sstp-buff.o sstpc-sstp-http.o sstpc-sstp-task.o sstpc-sstp-event.o sstpc-sstp-state.o sstpc-sstp-chap.o sstpc-sstp-route.o sstpc-sstp-fcs.o libsstp-log/libsstp_log.la libsstp-api/libsstp_api.la libsstp-compat/libsstp_compat.la -lutil -levent -lssl -lcrypto

    libtool: link: gcc -I../include -DSSTP_RUNTIME_DIR=”/var/run/sstpc” -I/usr/local/include -I/usr/local/include -o .libs/sstpc sstpc-sstp-client.o sstpc-sstp-option.o sstpc-sstp-stream.o sstpc-sstp-packet.o sstpc-sstp-pppd.o sstpc-sstp-util.o sstpc-sstp-cmac.o sstpc-sstp-buff.o sstpc-sstp-http.o sstpc-sstp-task.o sstpc-sstp-event.o sstpc-sstp-state.o sstpc-sstp-chap.o sstpc-sstp-route.o sstpc-sstp-fcs.o -L/usr/local/lib libsstp-log/.libs/libsstp_log.a libsstp-api/.libs/libsstp_api.dylib libsstp-compat/.libs/libsstp_compat.a -lutil -levent -lssl -lcrypto

    make[2]: Nothing to be done for `all-am’.

    When I run – make install, I get

    Making install in src/libsstp-log

    make[2]: Nothing to be done for `install-exec-am’.

    make[2]: Nothing to be done for `install-data-am’.

    Making install in src/libsstp-api

    ../.././install-sh -c -d ‘/usr/local/lib’

    /bin/sh ../../libtool –mode=install /usr/bin/install -c libsstp_api.la ‘/usr/local/lib’

    libtool: install: /usr/bin/install -c .libs/libsstp_api-0.dylib /usr/local/lib/libsstp_api-0.dylib

    libtool: install: (cd /usr/local/lib & })

    libtool: install: /usr/bin/install -c .libs/libsstp_api.lai /usr/local/lib/libsstp_api.la

    libtool: install: /usr/bin/install -c .libs/libsstp_api.a /usr/local/lib/libsstp_api.a

    libtool: install: chmod 644 /usr/local/lib/libsstp_api.a

    libtool: install: ranlib /usr/local/lib/libsstp_api.a

    make[2]: Nothing to be done for `install-data-am’.

    Making install in src/libsstp-compat

    make[2]: Nothing to be done for `install-exec-am’.

    make[2]: Nothing to be done for `install-data-am’.

    Making install in src/pppd-plugin

    make[2]: Nothing to be done for `install-exec-am’.

    Making install in include

    make[2]: Nothing to be done for `install-exec-am’.

    .././install-sh -c -d ‘/usr/local/include/sstp-client’

    /usr/bin/install -c -m 644 sstp-api.h ‘/usr/local/include/sstp-client’

    Making install in src

    .././install-sh -c -d ‘/usr/local/sbin’

    /bin/sh ../libtool –mode=install /usr/bin/install -c sstpc ‘/usr/local/sbin’

    libtool: install: /usr/bin/install -c .libs/sstpc /usr/local/sbin/sstpc

    make[2]: Nothing to be done for `install-data-am’.

    make[2]: Nothing to be done for `install-exec-am’.

    ./install-sh -c -d ‘/usr/local/share/doc/sstp-client’

    /usr/bin/install -c -m 644 sstp-test.example sstp-test-nopty.example ‘/usr/local/share/doc/sstp-client’

    ./install-sh -c -d ‘/usr/local/share/man/man8’

    /usr/bin/install -c -m 644 sstpc.8 ‘/usr/local/share/man/man8’

    ./install-sh -c -d ‘/usr/local/lib/pkgconfig’

    /usr/bin/install -c -m 644 sstp-client-1.0.pc ‘/usr/local/lib/pkgconfig’

    How come I can’t run sstpc after this? Is there any error when I ran the above commands? I’m noob at programming. So, I don’t even understand what this is saying

    • I recommend the GUI version instead. By the way, sstpc was installed to /usr/local/sbin/sstpc

  • tsiddiqui

    does sstp works on the iphone too ? if yes then please tell how ?

  • stdora

    I found isstp do not work with PPPoE
    It will get PPPoE IP instead of VPN IP

  • Dan

    Finally a GUI of SSTP for the Mac! Downloaded 1.2 version after finding out about this and it worked fine so far. I have been pesting Apple to make it native in OS X and that was years ago. I could never get the sstp cli version to work. Thank you!!

  • Dan

    Possible to see this open sourced and put on github?

  • Bart

    Hi, Is there still some development going on for this? Would be great!

  • Bob

    I installed iSstp yesterday but it’s only been able to connect to CA addresses listed on http://freesstpvpn.com/setup-sstp-vpn/ and http://vpnaccount.org:
    ca.freesstpvpn.com
    ca.vpnaccount.org

    I’ve added connections from the MS-SSTP column on http://www.vpngate.net/en/, but none ever connect.

    Why am I only able to connect to CA addresses (I’m in the US) and what can I do to add others that work?

    Don’t tell me to write commands in some config file unless you provide step-by-step instructions.
    I should be able to get everything going via the GUI anyway.

  • Bob

    Wha’ Happened?

    I had 6 connections in iSStp and had tried connecting to them all.

    I rebooted today and now only one connection remains – the rest are GONE.
    I’m not about to add new connections every time I reboot!

  • Bob

    Icon needs to change color when connected/disconnected.
    And should display a notification when it disconnects.

    Right now there’s no way to tell by looking at the menu bar if it’s connected or not.
    You must click the icon then click Open.

    I use Viscosity too, and its icon changes color, making it immediately apparent what the status is.

  • derhelge

    Hey there 🙂 I tried to use your modified sstp-client. But unfortunately i wasnt that lucky…

    sudo ./sstpc --log-level 4 --log-stderr --cert-warn --user user --password xxx vpn.example.com usepeerdns require-mschap-v2 noauth noipdefault defaultroute

    Aug 28 12:52:15 sstpc[18258]: Resolved vpn.example.com
    Aug 28 12:52:15 sstpc[18258]: Connected to vpn.example.com
    Aug 28 12:52:15 sstpc[18258]: Sending Connect-Request Message
    Aug 28 12:52:15 sstpc[18258]: SSTP CRTL PKT(14)
    Aug 28 12:52:15 sstpc[18258]: TYPE(1): CONNECT REQUEST, ATTR(1):
    Aug 28 12:52:15 sstpc[18258]: ENCAP PROTO(1): 6
    Aug 28 12:52:15 sstpc[18258]: SSTP CRTL PKT(48)
    Aug 28 12:52:15 sstpc[18258]: TYPE(2): CONNECT ACK, ATTR(1):
    Aug 28 12:52:15 sstpc[18258]: CRYPTO BIND REQ(4): 40
    Aug 28 12:52:15 sstpc[18258]: Started PPP Link Negotiation
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(28)
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(61)
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(19)
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(28)
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(54)
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(54)
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(33)
    Aug 28 12:52:15 sstpc[18258]: SSTP DATA PKT(68)
    Aug 28 12:52:16 sstpc[18258]: SSTP DATA PKT(52)
    Aug 28 12:52:16 sstpc[18258]: Sending Connected Message
    Aug 28 12:52:16 sstpc[18258]: SSTP CRTL PKT(112)
    Aug 28 12:52:16 sstpc[18258]: TYPE(4): CONNECTED, ATTR(1):
    Aug 28 12:52:16 sstpc[18258]: CRYPTO BIND(3): 104
    Aug 28 12:52:16 sstpc[18258]: Connection Established
    Aug 28 12:52:16 sstpc[18258]: SSTP DATA PKT(34)
    ...
    ...
    Aug 28 12:52:19 sstpc[18258]: SSTP DATA PKT(10)
    Aug 28 12:52:19 sstpc[18258]: SSTP DATA PKT(35)
    Aug 28 12:52:19 sstpc[18258]: SSTP DATA PKT(35)
    Aug 28 12:52:19 sstpc[18258]: SSTP DATA PKT(24)
    Aug 28 12:52:19 sstpc[18258]: SSTP DATA PKT(12)
    Aug 28 12:52:19 sstpc[18258]: SSTP CRTL PKT(20)
    Aug 28 12:52:19 sstpc[18258]: TYPE(6): DISCONNECT, ATTR(1):
    Aug 28 12:52:19 sstpc[18258]: STATUS INFO(2): 12
    Aug 28 12:52:19 sstpc[18258]: Sending Disconnect Ack Message
    Aug 28 12:52:19 sstpc[18258]: SSTP CRTL PKT(8)
    Aug 28 12:52:19 sstpc[18258]: TYPE(7): DISCONNECT ACK, ATTR(0):
    Aug 28 12:52:19 sstpc[18258]: Connection was aborted, Unknown Status Attribute
    **Error: Connection was aborted, Unknown Status Attribute, (-1)

    and in the system.log:

    Aug 28 12:52:15 mebus.fritz.box pppd[18259]: publish_entry SCDSet() failed: Success!
    Aug 28 12:52:15 --- last message repeated 1 time ---
    Aug 28 12:52:15 mebus.fritz.box pppd[18259]: pppd 2.4.2 (Apple version 786.40.2) started by root, uid 0
    Aug 28 12:52:15 mebus.fritz.box pppd[18259]: Connect: ppp0 /dev/ttys003
    Aug 28 12:52:16 mebus.fritz.box pppd[18259]: local IP address 10.95.7.102
    Aug 28 12:52:16 mebus.fritz.box pppd[18259]: remote IP address 10.95.7.100
    Aug 28 12:52:16 mebus.fritz.box pppd[18259]: primary DNS address 10.95.0.1
    Aug 28 12:52:16 mebus.fritz.box pppd[18259]: secondary DNS address 10.95.0.27
    Aug 28 12:52:16 mebus.fritz.box pppd[18259]: Committed PPP store
    Aug 28 12:52:16 --- last message repeated 1 time ---
    Aug 28 12:52:16 mebus.fritz.box configd[50]: network changed: v4(ppp0+:10.95.7.102, en1) DNS! Proxy! SMB
    Aug 28 12:52:16 mebus.fritz.box networkd[175]: +[NETLedBelly stopFastFail] Clearing ledbelly failure cache
    Aug 28 12:52:16 mebus.local configd[50]: setting hostname to "mebus.local"
    Aug 28 12:52:19 mebus.local configd[50]: network changed: v4(en1:192.168.178.34, ppp0-:10.95.7.102) DNS! Proxy SMB
    Aug 28 12:52:19 mebus.local pppd[18259]: Modem hangup
    Aug 28 12:52:19 mebus.local pppd[18259]: Connection terminated.
    Aug 28 12:52:19 mebus.local pppd[18259]: LCP close (User request).

    any ideas? I would love to use it…

    • derhelge

      Okay. Found the answer by myself: In my case it was essential to deactivate the compression by: the config-option: noccp:
      So it works with:

      sudo ./sstpc --log-level 4 --log-stderr --cert-warn --user user --password xxx vpn.example.com usepeerdns require-mschap-v2 noauth noipdefault defaultroute noccp

      This way it also works with the default sstp-client from homebrew: (brew install sstp-client)

  • Dan

    Was working before under 10.11, but not having luck under 10.12 Sierra. Any idea if there is some sort of bug? Any planned update eta?

    • I will try to add Sierra support in a few days.

      • exactt

        Looking forward to the Sierra update. Make this available in the iTunes store. Lots of folks out there who would pay a buck or two for SSTP support on the mac…

        • It is difficult to public in App store, I’m working on push this to github now.

    • It seems also worked in Sierra, could you try to reinstall it again?

      • Dan

        Hmmm. Not sure why it won’t work then. I formatted and installed Sierra so I have a clean install. I re-installed iSSTP and still the same. Triple checked my server, password, etc and still not working. I downloaded macports and did sudo port install ssts-client and then ran this command and it connects up in seconds without any issues: sudo sstpc –log-level 4 –log-stderr –cert-warn –user myusername –password ‘mypassword’ myvpn.server.com usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute noccp. It wasn’t working until I added refuse-eap which I got from the line in iSSTP settings. But no matter what I tried with iSSTP I can’t get it to work for some reason in Sierra. In 10.11 it was the opposite. I couldln’t get the command line version of SSTP to work and came across iSSTP and it worked flawlessly.

        • Thank you for feedback, I may found the issue now and will be fixed it soon

        • Cloud you try the follow commands,

          # suppose iSSTP was installed into /Applications/
          cd /Applications/iSstp.app/Contents/Resources
          sudo chown root helper
          sudo chmod 4755 helper

          Did iSSTP work after then?

          • Dan

            root was already owner so I only ran the second command of: sudo chmod 4755 helper And that fixed it!! Thank you! Good find!

          • Chris

            Will there be a new download based on the fix you just posted?

  • harry bhmra

    Hi, I a m having issues connecting multiple sessions to Azure VM using iSstp. I have configured Azure VM as RRAS and it works for one MAC but not for other. So it is not able to stay connected for both MACs. Also I m using Self Signed SSL cert.

    • I do not why this happened, did you try to connect multiple clients using windows? May be this is a server issue?

  • Radhe

    When I connect to a VPN network, all other traffic is ignored/stonewalled. In other words, can I let the connection respond to one or more specific domains only?

    • I did not test this function, does it can be done by create a static routing table?

      • Radhe

        No clue. I’m ‘just a user’, not a professional network engineer. But, nevertheless, it should be available, right? I can’t do it through regular network settings, because it’s not in that list. So I need to do it somewhere. And I don’t like creating static routes for every company that wants me to connect through SSTP…

        • I will add this to the feature list. Thanks your feedback.

  • alfonz senki

    Is it possible to add password popup instead of filled up password field?
    Where are the saved password stored?

    • It stored in ~/Library/Preferences/org.axot.iSstp.plist

      • alfonz senki

        thx!
        what about the popup?

        Keep up the good work bro

        • I’m planing publish iSSTP to github, so you can fork it and do everything you want.

          • alfonz senki

            DEAL!

  • bek

    I’m having some issues when trying to establish a connection.
    Would someone point me in the right direction?

    sudo ./sstpc –log-level 4 –log-stderr –cert-warn –user USER –password PASSWD SERVER_ADDR usepeerdns require-mschap-v2 noauth noipdefault defaultroute –debug refuse-eap noccp
    Oct 3 15:29:52 sstpc[6272]: Resolved SERVER_ADDR to 94.xxx.yyy.zzz
    Oct 3 15:29:53 sstpc[6272]: Connected to SERVER_ADDR
    Oct 3 15:29:54 sstpc[6272]: Sending Connect-Request Message
    Oct 3 15:29:54 sstpc[6272]: SEND SSTP CRTL PKT(14)
    Oct 3 15:29:54 sstpc[6272]: TYPE(1): CONNECT REQUEST, ATTR(1):
    Oct 3 15:29:54 sstpc[6272]: ENCAP PROTO(1): 6
    Oct 3 15:29:54 sstpc[6272]: RECV SSTP CRTL PKT(48)
    Oct 3 15:29:54 sstpc[6272]: TYPE(2): CONNECT ACK, ATTR(1):
    Oct 3 15:29:54 sstpc[6272]: CRYPTO BIND REQ(4): 40
    Oct 3 15:29:54 sstpc[6272]: Started PPP Link Negotiation
    Oct 3 15:29:54 sstpc[6272]: SEND SSTP DATA PKT(28)
    Oct 3 15:29:54 sstpc[6272]: PPP LCP ID: 1 CONFREQ ASYNCMAP: 00 00 00 00 MAGIC: 0x3494FDD7
    Oct 3 15:29:55 sstpc[6272]: RECV SSTP DATA PKT(60)
    Oct 3 15:29:55 sstpc[6272]: PPP LCP ID: 0 CONFREQ MRU: 4091 AUTH: EAP MAGIC: 0x229B2BBA CALLBACK: 06 MRRU: 1614 EPDISC: 01 6A 61 A9 2D EE 40 44 59 B4 1A 7E E3 F5 D2 B6 FA 00 00 00 00
    Oct 3 15:29:55 sstpc[6272]: SEND SSTP DATA PKT(19)
    Oct 3 15:29:55 sstpc[6272]: PPP LCP ID: 0 CONFREJ CALLBACK: 06 MRRU: 1614
    Oct 3 15:29:55 sstpc[6272]: RECV SSTP DATA PKT(28)
    Oct 3 15:29:55 sstpc[6272]: PPP LCP ID: 1 CONFACK ASYNCMAP: 00 00 00 00 MAGIC: 0x3494FDD7
    Oct 3 15:29:55 sstpc[6272]: RECV SSTP DATA PKT(53)
    Oct 3 15:29:55 sstpc[6272]: PPP LCP ID: 1 CONFREQ MRU: 4091 AUTH: EAP MAGIC: 0x229B2BBA EPDISC: 01 6A 61 A9 2D EE 40 44 59 B4 1A 7E E3 F5 D2 B6 FA 00 00 00 00
    Oct 3 15:29:55 sstpc[6272]: SEND SSTP DATA PKT(17)
    Oct 3 15:29:55 sstpc[6272]: PPP LCP ID: 1 CONFNAK AUTH: CHAP
    Oct 3 15:29:56 sstpc[6272]: RECV SSTP DATA PKT(54)
    Oct 3 15:29:56 sstpc[6272]: PPP LCP ID: 2 CONFREQ MRU: 4091 AUTH: CHAP MAGIC: 0x229B2BBA EPDISC: 01 6A 61 A9 2D EE 40 44 59 B4 1A 7E E3 F5 D2 B6 FA 00 00 00 00
    Oct 3 15:29:56 sstpc[6272]: SEND SSTP DATA PKT(54)
    Oct 3 15:29:56 sstpc[6272]: PPP LCP ID: 2 CONFACK MRU: 4091 AUTH: CHAP MAGIC: 0x229B2BBA EPDISC: 01 6A 61 A9 2D EE 40 44 59 B4 1A 7E E3 F5 D2 B6 FA 00 00 00 00
    Oct 3 15:29:56 sstpc[6272]: RECV SSTP DATA PKT(42)
    Oct 3 15:29:56 sstpc[6272]: PPP CHAP ID: 0 ID: 0 CHALLENGE [0121B522AE4A12FB71848CCDD8D71B4F], NAME: SERVER_NAME
    Oct 3 15:29:56 sstpc[6272]: SEND SSTP DATA PKT(64)
    Oct 3 15:29:56 sstpc[6272]: PPP CHAP ID: 0 ID: 0 RESPONSE [317E31A55D02A0AFD4640574F91465420000000000000000B8A18D1FE37B03D5927DB0D4CF0294AB1C9F8427C3FA322C00], NAME: USER
    Oct 3 15:29:57 sstpc[6272]: RECV SSTP DATA PKT(20)
    Oct 3 15:29:57 sstpc[6272]: PPP CHAP ID: 0 ID: 0 FAILURE [E=649 R=0 �����SERVER_NAME�~��Ҷ�]
    Oct 3 15:29:57 sstpc[6272]: SEND SSTP DATA PKT(52)
    Oct 3 15:29:57 sstpc[6272]: PPP LCP ID: 2 TERMREQ
    Oct 3 15:29:57 sstpc[6272]: RECV SSTP DATA PKT(24)
    Oct 3 15:29:57 sstpc[6272]: PPP LCP ID: 4 TERMREQ
    Oct 3 15:29:57 sstpc[6272]: Could not complete write of frame
    Oct 3 15:29:57 sstpc[6272]: Could not forward packet to pppd
    Oct 3 15:29:57 sstpc[6272]: RECV SSTP DATA PKT(52)
    Oct 3 15:29:57 sstpc[6272]: PPP LCP ID: 2 TERMACK
    Oct 3 15:29:57 sstpc[6272]: Could not complete write of frame
    Oct 3 15:29:57 sstpc[6272]: Could not forward packet to pppd
    Oct 3 15:29:58 sstpc[6272]: RECV SSTP CRTL PKT(20)
    Oct 3 15:29:58 sstpc[6272]: TYPE(6): DISCONNECT, ATTR(1):
    Oct 3 15:29:58 sstpc[6272]: STATUS INFO(2): 12
    Oct 3 15:29:58 sstpc[6272]: Sending Disconnect Ack Message
    Oct 3 15:29:58 sstpc[6272]: SEND SSTP CRTL PKT(8)
    Oct 3 15:29:58 sstpc[6272]: TYPE(7): DISCONNECT ACK, ATTR(0):
    Oct 3 15:29:58 sstpc[6272]: Connection was aborted, Reason was not known
    **Error: Connection was aborted, Reason was not known, (-1)

    • Did you try to connect to server using Windows client?

      • bek

        This was under mac os x, to a server 2012 R2.
        I’m using the client that came from the installation via: “brew install sstp-client” (sstp-client version 1.0.10)

        • The first error is `PPP CHAP ID: 0 ID: 0 FAILURE`, so I am guessing it is something config about chap. Can you confirm settings in Authentication.

          https://blog.netnerds.net/wp-content/uploads/2015/02/18.png

          • bek

            Now that you mention, under the windows client I’m actually using EAP-MSCHAP-V2 and not MSCHAP-V2 as it looks like in the mac client.
            How would one set this encryption method under the macosx client ?

          • Maybe you can delete refuse-eap option from command line, but I remember sstp-client does support eap mode, give it a try. Also you could change Authentication Method in Server to only MSCHAP-V2.

          • bek

            I tried without refuse-eap and with/without require-mschap-v2.
            Also in NPS auth methods, I allowed not only mschap-v2 but ALL of them.
            In any case another error persists:

            (How do I quote “code” so it is easier on reading?)

            sudo ./sstpc –log-level 4 –log-stderr –cert-warn –user USERNAME –password PASSWD HOSTNAME usepeerdns noauth noipdefault defaultroute –debug noccp
            Oct 4 10:25:08 sstpc[8611]: Resolved HOSTNAME to 94.xxx.yyy.zzz
            Oct 4 10:25:08 sstpc[8611]: Connected to HOSTNAME
            Oct 4 10:25:08 sstpc[8611]: Sending Connect-Request Message
            Oct 4 10:25:08 sstpc[8611]: SEND SSTP CRTL PKT(14)
            Oct 4 10:25:08 sstpc[8611]: TYPE(1): CONNECT REQUEST, ATTR(1):
            Oct 4 10:25:08 sstpc[8611]: ENCAP PROTO(1): 6
            Oct 4 10:25:08 sstpc[8611]: RECV SSTP CRTL PKT(48)
            Oct 4 10:25:08 sstpc[8611]: TYPE(2): CONNECT ACK, ATTR(1):
            Oct 4 10:25:08 sstpc[8611]: CRYPTO BIND REQ(4): 40
            Oct 4 10:25:08 sstpc[8611]: Started PPP Link Negotiation
            Oct 4 10:25:08 sstpc[8611]: SEND SSTP DATA PKT(28)
            Oct 4 10:25:08 sstpc[8611]: PPP LCP ID: 1 CONFREQ ASYNCMAP: 00 00 00 00 MAGIC: 0x77B46DF0
            Oct 4 10:25:08 sstpc[8611]: RECV SSTP DATA PKT(60)
            Oct 4 10:25:08 sstpc[8611]: PPP LCP ID: 0 CONFREQ MRU: 4091 AUTH: EAP MAGIC: 0x02D54BB3 CALLBACK: 06 MRRU: 1614 EPDISC: 01 6A 61 A9 2D EE 40 44 59 B4 1A 7E E3 F5 D2 B6 FA 00 00 00 00
            Oct 4 10:25:08 sstpc[8611]: SEND SSTP DATA PKT(19)
            Oct 4 10:25:08 sstpc[8611]: PPP LCP ID: 0 CONFREJ CALLBACK: 06 MRRU: 1614
            Oct 4 10:25:08 sstpc[8611]: RECV SSTP DATA PKT(28)
            Oct 4 10:25:08 sstpc[8611]: PPP LCP ID: 1 CONFACK ASYNCMAP: 00 00 00 00 MAGIC: 0x77B46DF0
            Oct 4 10:25:08 sstpc[8611]: RECV SSTP DATA PKT(53)
            Oct 4 10:25:08 sstpc[8611]: PPP LCP ID: 1 CONFREQ MRU: 4091 AUTH: EAP MAGIC: 0x02D54BB3 EPDISC: 01 6A 61 A9 2D EE 40 44 59 B4 1A 7E E3 F5 D2 B6 FA 00 00 00 00
            Oct 4 10:25:08 sstpc[8611]: SEND SSTP DATA PKT(53)
            Oct 4 10:25:08 sstpc[8611]: PPP LCP ID: 1 CONFACK MRU: 4091 AUTH: EAP MAGIC: 0x02D54BB3 EPDISC: 01 6A 61 A9 2D EE 40 44 59 B4 1A 7E E3 F5 D2 B6 FA 00 00 00 00
            Oct 4 10:25:08 sstpc[8611]: RECV SSTP DATA PKT(11)
            Oct 4 10:25:08 sstpc[8611]: PPP EAP ID: 0 CONFREQ 0x01
            Oct 4 10:25:08 sstpc[8611]: SEND SSTP DATA PKT(15)
            Oct 4 10:25:08 sstpc[8611]: PPP EAP ID: 0 CONFACK 0x01 0x67 0x69 0x72 0x73
            Oct 4 10:25:08 sstpc[8611]: RECV SSTP DATA PKT(47)
            Oct 4 10:25:08 sstpc[8611]: PPP EAP ID: 1 CONFREQ 0x1A 0x01 0x01 0x00 0x24 0x10 0x72 0xAE 0x37 0x3A 0x69 0xF4 0xF4 0x7A 0x90 0x84 0x62 0x3D 0xF2 0xDE 0x3F 0x12 0x57 0x49 0x4E 0x2D 0x53 0x4E 0x31 0x4F 0x4E 0x31 0x4B 0x4B 0x55 0x4B 0x47
            Oct 4 10:25:20 sstpc[8611]: RECV SSTP DATA PKT(47)
            Oct 4 10:25:20 sstpc[8611]: PPP EAP ID: 1 CONFREQ 0x1A 0x01 0x01 0x00 0x24 0x10 0x72 0xAE 0x37 0x3A 0x69 0xF4 0xF4 0x7A 0x90 0x84 0x62 0x3D 0xF2 0xDE 0x3F 0x12 0x57 0x49 0x4E 0x2D 0x53 0x4E 0x31 0x4F 0x4E 0x31 0x4B 0x4B 0x55 0x4B 0x47
            Oct 4 10:25:32 sstpc[8611]: RECV SSTP DATA PKT(47)
            Oct 4 10:25:32 sstpc[8611]: PPP EAP ID: 1 CONFREQ 0x1A 0x01 0x01 0x00 0x24 0x10 0x72 0xAE 0x37 0x3A 0x69 0xF4 0xF4 0x7A 0x90 0x84 0x62 0x3D 0xF2 0xDE 0x3F 0x12 0x57 0x49 0x4E 0x2D 0x53 0x4E 0x31 0x4F 0x4E 0x31 0x4B 0x4B 0x55 0x4B 0x47
            Oct 4 10:25:44 sstpc[8611]: RECV SSTP DATA PKT(47)
            Oct 4 10:25:44 sstpc[8611]: PPP EAP ID: 1 CONFREQ 0x1A 0x01 0x01 0x00 0x24 0x10 0x72 0xAE 0x37 0x3A 0x69 0xF4 0xF4 0x7A 0x90 0x84 0x62 0x3D 0xF2 0xDE 0x3F 0x12 0x57 0x49 0x4E 0x2D 0x53 0x4E 0x31 0x4F 0x4E 0x31 0x4B 0x4B 0x55 0x4B 0x47
            Oct 4 10:25:56 sstpc[8611]: RECV SSTP DATA PKT(47)
            Oct 4 10:25:56 sstpc[8611]: PPP EAP ID: 1 CONFREQ 0x1A 0x01 0x01 0x00 0x24 0x10 0x72 0xAE 0x37 0x3A 0x69 0xF4 0xF4 0x7A 0x90 0x84 0x62 0x3D 0xF2 0xDE 0x3F 0x12 0x57 0x49 0x4E 0x2D 0x53 0x4E 0x31 0x4F 0x4E 0x31 0x4B 0x4B 0x55 0x4B 0x47
            Oct 4 10:26:07 sstpc[8611]: RECV SSTP CRTL PKT(20)
            Oct 4 10:26:07 sstpc[8611]: TYPE(5): ABORT, ATTR(1):
            Oct 4 10:26:07 sstpc[8611]: STATUS INFO(2): 12
            Oct 4 10:26:07 sstpc[8611]: Connection was aborted, Reason was not known
            **Error: Connection was aborted, Reason was not known, (-1)

          • Did you try use mschap-v2 only without the EAP version.

          • bek

            I managed to get it working!
            But EAP seems to crash the connection as you could notice on the previous log. Had to be with mschap-v2 and parameters require-mschap-v2 and refuse-eap.
            Thanks a lot!

            As last two questions:
            – The gui looks like it keeps trying to connect but never does, is there some update for it, or could this be fixable? I would honestly prefer to use GUI instead of shell.
            – And, I read somewhere on the comments below that you’ll port this to github, can I have a link for this project? Thanks again.

            Just out of curiosity, via shell I managed to get around 40Mbps download and 25Mbps Upload on a 1Gb/100Mb line. (There was between 2-3x the speed on overhead so I was actually pulling more than 100Mbps and sending around 80Mbps).
            Even though, I’m liking it a lot XD

          • EAP not working properly, i’m sorry for that. I just updated a new version which support Sierra, you should try that. And I’m working on publishing this to github now, I suppose the url of this project will be https://github.com/axot/isstp

      • bek

        But Windows client can connect without a problem.

  • Ефремов Дмитрий

    iSSTP stopped to work after update

    • Ефремов Дмитрий

      Found problem, fixed.
      Problem because of no libevent library in search path, but this library exists in Framework directory.
      So I’ve just installed libevent through brew.

  • I’ve successfully connected to my work servers. Though my internet connection is drastically slow when connected (no longer connected to the internet through my local ethernet). I only want access the network via VPN, not all traffic. I’m on OSX Sierra, and my Terminal skills are remedial. Any help would be greatly appreciated.

    • There is no a simple way to imp this now.

      • Bummer… Will keep my eye on your blog with fingers crossed in anticipation that this feature might work its way in. Thanks Zheng!

  • dimm0k

    is there a guide somewhere on how to get this going for a Mac newb? trying to get a process setup so all my Mac friends can connect via SSTP. I’ve downloaded the zip file and installed it. starting up the GUI I put in the server name and my credentials, but it won’t connect. am I missing something? I can’t run sstpc on the command line since it’s not found. HELP 🙁

    • Did you move iSSTP.app to /Applications/ ?

      • dimm0k

        no, but I just moved it there… what’s next? launching it from Applications brings up the GUI, but nothing different than when I had it in Downloads

        • Could you try this again,

          1. Delete /Applications/iSSTP.app

          2. Extract the zip file into /Applications directly

          3. Just lanuch it, it should work now.

          • dimm0k

            done, but still cannot connect. I see the iSstp Application and after launching it, it shows up in the top right next to the time. opening that I see my profile with server address, username and password. pressing Connect tries to connect with “Try to connect nyc.xxx.xxx” and then says “Not Connected!”

          • I updated the download link with a fixed version now, could you give it a try?

          • dimm0k

            it works!! what did you do might I ask? wondering if this can work across all versions of OS X now that it works on my end (10.12 Sierra)…

          • Updated dylib relative paths.

            -- libssl.1.0.0.dylib --

            libssl.1.0.0.dylib:

            /usr/local/opt/openssl/lib/libssl.1.0.0.dylib (compatibility version 1.0.0, current version 1.0.0)

            @executable_path/../Frameworks/libcrypto.1.0.0.dylib (compatibility version 1.0.0, current version 1.0.0)

            -- libsstp_api-0.dylib --

            @executable_path/../Frameworks/libevent-2.0.5.dylib (compatibility version 7.0.0, current version 7.9.0)

            @executable_path/../Frameworks/libssl.1.0.0.dylib (compatibility version 1.0.0, current version 1.0.0)

            @executable_path/../Frameworks/libcrypto.1.0.0.dylib (compatibility version 1.0.0, current version 1.0.0)

          • dimm0k

            looks and working great! is there a way to specify DNS so users can reach machines via DNS rather than IP address?

          • There is no simple way to achieve this now, but we discussed this in other threads, just search `/etc/resolv.conf` as keyword in this page.

          • dimm0k

            as the other poster mentioned about ‘/etc/resolv.conf’, it doesn’t work =( not a big deal for me, just getting connected is enough! thanks!!

          • dimm0k

            Hi, a user has el capitan 10.11.6 and is not able to connect after installing the app and entering the correct login info. does anything need to be different from sierra 10.12?

  • Paul Styles

    Having issues connecting to work VPN. If i have ‘Skipping Certificates Checks’ selected It tries to connect then says Not Connected!. If i uncheck it, I get “Verification of Server Certificate Failed!” then the Not Connected.” message. I have a verified Certificate on my server. I need to connect with the default settings EAP and MS-CHAP v2. Just upgraded to Seirra OS X and lost PPTP. I’ve downloaded the app and moved it to the application folder. For others you need to go to preferences and make it ask for location to get it directly into the application folder. It appears Seirra automatically unzips the file and creates the app in downloads. I’ve tried a variety of things posted on this thread with no luck.

    • bek

      There was an update yesterday that, at least for me, fixed the Not Connected issue on Sierra. Also, I only managed to get the sstp-client (and thus, iSSTP also) to work without EAP. Try to connect with MSCHAP-v2 only.

      • Paul Styles

        I downloaded Shimo and connected over PPTP and iSSTP connected. However, when i disconnect from Shimo, iSSTP won’t stay connected. i removed the refuse-eap and left eap, it stays connected with or without it. I need to know if the status message at the bottom now shows active connections or is specifically for the SSTP protocol and app only. I will try removing Shimo and see if that fixes it (never know weird conflicts). I downloaded from the link above i assume that is the latest copy?

        • BubbaGump

          Not working for me on Sierra 10.12 either. Tried refuse-eap, eap, and certificate check on/off.

        • Adrian Wells

          I’m having the same issue on Sierra. It will only connect if Shimo is connected and disconnects if I disconnect Shimo. This will be an issue soon as I have to use the mac in an environment which will only work with sstp. (I tried changing refuse-eap to eap and I get the same problem).

  • Azure

    Has anyone was able to connect to an Azure P2S VPN with this client? I followed this link to decompose the VPN settings and use this client to connect but wasn’t able to do it: http://www.diaryofaninja.com/blog/2013/11/27/deconstructing-the-azure-point-to-site-vpn-for-command-line-usage

  • Максим Лобков

    hello.
    Do i need install sstp-client for isstp? on sierra 10.12 dont work

    • No, Extract zip file to /Applications, it should work.

      • Максим Лобков

        if i have selfsinged certifacate, where i must put CA certificate? or just install certificate in system?

        • It works without install certification

      • Максим Лобков

        • There is no verbose log. You have to run sstpc command directly.

          • Максим Лобков

            in terminal sstpc say command not found
            i try
            1. Delete /Applications/iSSTP.app

            2. Extract the zip file into /Applications directly

            3. Just lanuch it, it should work now.

            nothing
            maybe it because i install sstp-client by brew?

    • Worked for me on Sierra 10.12.

      • Максим Лобков

        what settings you used?
        What server? I have server sstp in mikrotik.
        Server adress by name or by ip address?

        • I had installed sstp-client (https://sourceforge.net/projects/sstp-client/) then iSSTP. I don’t recall the specific settings, sorry. (I uninstalled and opted for another
          GUI client as I didn’t want all traffic running through the VPN). I believe all I needed was to enter was my server name, user, and password in ISSTP to connect (PPTP). I hope this helps.

          • Tom

            Which one did you switch to? I also do not want to route all traffic through the VPN

          • I went with Shimo. It’s not free, but it’s hassle-free and very friendly to setup. https://www.shimovpn.com/

          • Tom

            As far as I can see Shimo does not support SSTP. Did you get it to work with SSTP? If so, how?

          • Hi Tom. I connect via the (antiquated) PPTP. If that helps.

          • Tom

            Hi Matt, sorry to bother you again but I have been struggling for a while now to get it to work using PPTP. I thought of this: SSTP uses port 443 as far as I know while PPTP uses a different one right? (47…?) I cannot find a way to set the port in Shimo. Do you have any other special settings aside from this port thing?

          • No worries, Tom. I didn’t require setting a port, though I did need to get the target network from our IT admin. Here’s a short how-to on PPTP for Sierra on Shimo’s support page, which had me up and running quickly: http://tinyurl.com/zn4efef

  • dimm0k

    Hi, is there a way to confirm that iSSTP works on el capitan 10.11.6 and lower? have two users here who are not able to connect after installing the app and entering the correct login info. does anything need to be different from sierra 10.12?

  • Adrian Wells

    Hello, I’m having issues on macOS Sierra (10.12) – I installed iSSTP (extracted to Applications from iSSTP_v1.3_20161009.zip) and added my details, but it says “Try to connect to ” then “Not Connected!” when I try to connect

    I installed sstp-client using brew, and when I issue the command:
    sudo ./sstpc –log-stderr –cert-warn –user –password usepeerdns require-mschap-v2 noauth noipdefault defaultroute refuse-eap noccp

    It connects, I am able to use the VPN, and then iSSTP says “Connected to server, your ip is: ”

    Any ideas? I can use the VPN using sstpc, but it would be nice to have the GUI working 🙂

    • I see you used noccp option in sstpc command, did you also add this option in iSSTP?

      • Adrian Wells

        Yes, I copied the options into iSSTP.

        (I got the command line options from an earlier comment on this post.. fwiw I just tried the command line without noccp and it also works)

    • Yury Bondarau

      Than you Adrian for the command line provided. When I put two last parameters (refuse-eap noccp) to iSSTP connection configuration it successfully connected to SSTP VPN.

  • dimm0k

    is there a version for macOS 10.9.5?

    • Sorry I did not test any version in Mavericks.

  • I love isstp! It works for me! Could it be managed by brew somehow?

  • rw

    Hi It shows it is connected to my work vpn, but I also discounted from the internet
    Any suggestion. Thanks
    OSX 10.11.6

  • dimm0k

    so here’s the weird thing… I have macOS 10.12 in a virtual machine and I’m able to use iSSTP with no problems to connect to the work VPN. issue is, I have two users here who recently updated to macOS 10.12 and iSSTP does not work… just stays at not connected. any suggestions?

  • dimm0k

    to continue from my last comment, any idea why iSSTP would work on one machine and not another? how can I verify things were installed properly?

  • dimm0k

    looks like the reason why “10.12” was failing was because users updated their macOS to 10.12.1 and that somehow breaks iSSTP… was able to confirm this on my own VM running macOS… help please!

    EDIT: looks like I was adding domain to the username when connecting… removing the domain portion works… pretty sure it worked previously with domain, but that’s neither here nor there now.

    I’m not sure if the author is from Japan, but if you are, I hope you’re okay!

    • I’m living in Tokyo, it is fine. Thank you. It not works when using user@domain.com as account name? I did not test this case, which sstp server side did you use?

      • dimm0k

        glad to know you’re okay! actually I never tried using user@domain.com as the account name since we have always used domainuser for the username when using Windows’ built-in VPN option. the SSTP server we use here is from Microsoft Windows 2008r2 using Routing & Remote Access.

  • Hi, I was working with 1.2 version on macOs sierra and it was working fine, and unfotunatly I’ve

    updated to 1.3 and now it doesn’t work 🙁

    I see logs:

    Nov 29 14:35:20 sstpc[9194]: Sending Connect-Request Message
    Nov 29 14:35:20 sstpc[9194]: SSTP CRTL PKT(14)
    Nov 29 14:35:20 sstpc[9194]: TYPE(1): CONNECT REQUEST, ATTR(1):
    Nov 29 14:35:20 sstpc[9194]: ENCAP PROTO(1): 6
    Nov 29 14:35:20 sstpc[9194]: SSTP CRTL PKT(48)
    Nov 29 14:35:20 sstpc[9194]: TYPE(2): CONNECT ACK, ATTR(1):
    Nov 29 14:35:20 sstpc[9194]: CRYPTO BIND REQ(4): 40
    Nov 29 14:35:20 sstpc[9194]: Started PPP Link Negotiation
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(28)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(61)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(28)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(19)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(54)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(54)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(35)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(72)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(58)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(52)
    Nov 29 14:35:20 sstpc[9194]: SSTP DATA PKT(52)
    Nov 29 14:35:20 sstpc[9194]: Could not complete write of frame
    Nov 29 14:35:20 sstpc[9194]: Could not forward packet to pppd
    Nov 29 14:35:22 sstpc[9194]: SSTP CRTL PKT(20)
    Nov 29 14:35:22 sstpc[9194]: TYPE(6): DISCONNECT, ATTR(1):
    Nov 29 14:35:22 sstpc[9194]: STATUS INFO(2): 12
    Nov 29 14:35:22 sstpc[9194]: Sending Disconnect Ack Message
    Nov 29 14:35:22 sstpc[9194]: SSTP CRTL PKT(8)
    Nov 29 14:35:22 sstpc[9194]: TYPE(7): DISCONNECT ACK, ATTR(0):
    Nov 29 14:35:22 sstpc[9194]: Connection was aborted, Reason was not known
    **Error: Connection was aborted, Reason was not known, (-1)

    Do you know how to fix this one?
    thanks in advance

    • Could you paste log with `–log-level 4` option for sstpc?

      • that’s already `sudo ./sstpc –debug –log-level 4 –log-stdout –user jan.kowalski myhost.com usepeerdns require-mschap-v2 refuse-eap noauth noipdefault nodefaultroute noccp`

        • As you said it worked in v1.2, did you meaning sstpc command or iSSTP?

          • iSSTP 1.2

          • Okay if iSSTP 1.2 works, it also should works in 1.3. Could try these steps? Suppose iSSTP.app is installed in /Applications.


            cd /Applications/iSstp.app/Contents/Resources
            ls -al
            sudo rm installed
            sudo sh ./install.sh
            ls -al
            otool -L sstpc

            iSSTP should works now. If it now work please paste the result of these commands above.

          • Not Connected! 🙁

            jankowalski@Jans-Retina /Applications/iSstp.app/Contents/Resources
            $ ls -al
            total 1120
            drwxr-xr-x@ 11 jankowalski staff 374 Nov 29 15:22 .
            drwxr-xr-x@ 7 jankowalski staff 238 Nov 29 15:21 ..
            -rw-r–r–@ 1 jankowalski staff 23917 Oct 4 16:44 AppIcon.icns
            drwxr-xr-x@ 3 jankowalski staff 102 Oct 4 16:44 Base.lproj
            -rwsr-xr-x@ 1 root staff 18592 Oct 4 16:44 helper
            -rw-r–r–@ 1 jankowalski staff 253 Oct 4 16:44 install.sh
            -rw-r–r– 1 root staff 0 Nov 29 15:22 installed
            -rwxr-xr-x@ 1 jankowalski staff 341264 Aug 29 04:34 libswiftRemoteMirror.dylib
            -rw-r–r–@ 1 jankowalski staff 60627 Oct 4 16:44 logo.png
            -rwxr-xr-x@ 1 jankowalski staff 94564 Oct 4 16:44 sstpc
            -rw-r–r–@ 1 jankowalski staff 1698 Oct 4 16:44 statusbar_icon.png
            jankowalski@Jans-Retina /Applications/iSstp.app/Contents/Resources
            $ sudo rm installed
            jankowalski@Jans-Retina /Applications/iSstp.app/Contents/Resources
            $ sudo sh ./install.sh
            jankowalski@Jans-Retina /Applications/iSstp.app/Contents/Resources
            $ ls -la
            total 1120
            drwxr-xr-x@ 11 jankowalski staff 374 Nov 29 15:22 .
            drwxr-xr-x@ 7 jankowalski staff 238 Nov 29 15:21 ..
            -rw-r–r–@ 1 jankowalski staff 23917 Oct 4 16:44 AppIcon.icns
            drwxr-xr-x@ 3 jankowalski staff 102 Oct 4 16:44 Base.lproj
            -rwsr-xr-x@ 1 root staff 18592 Oct 4 16:44 helper
            -rw-r–r–@ 1 jankowalski staff 253 Oct 4 16:44 install.sh
            -rw-r–r– 1 root staff 0 Nov 29 15:22 installed
            -rwxr-xr-x@ 1 jankowalski staff 341264 Aug 29 04:34 libswiftRemoteMirror.dylib
            -rw-r–r–@ 1 jankowalski staff 60627 Oct 4 16:44 logo.png
            -rwxr-xr-x@ 1 jankowalski staff 94564 Oct 4 16:44 sstpc
            -rw-r–r–@ 1 jankowalski staff 1698 Oct 4 16:44 statusbar_icon.png
            jankowalski@Jans-Retina /Applications/iSstp.app/Contents/Resources
            $ otool -L sstpc
            sstpc:
            @executable_path/../Frameworks/libsstp_api-0.dylib (compatibility version 0.0.0, current version 0.0.0)
            /usr/lib/libutil.dylib (compatibility version 1.0.0, current version 1.0.0)
            @executable_path/../Frameworks/libevent-2.0.5.dylib (compatibility version 7.0.0, current version 7.9.0)
            @executable_path/../Frameworks/libssl.1.0.0.dylib (compatibility version 1.0.0, current version 1.0.0)
            @executable_path/../Frameworks/libcrypto.1.0.0.dylib (compatibility version 1.0.0, current version 1.0.0)
            /usr/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.8)
            /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1238.0.0)

          • Could you make a test account for test? If it is possible please send it to axot@msn.com

          • Unfortunately I can’t as I don’t run that server I’m only client. The problem is I think in line ” Could not forward packet to pppd” I can’t find any information on web according this one. It looks like sstpc-client problem

            29.11.2016 3:30 PM “Disqus” napisał(a):

          • This error also occurred when username/password is not correct. Any symbols in your password should be escaped? Please check it.

          • Good hint, will check out… Bad error description btw 😉 I would expect “wrong username or password”

          • nope that doesn’t help either 🙁 where should be iSstp logs stored because there is none in /var/log/system.log

          • ok, my account was locked :/ everything is fine now, I wish there was some better error naming 😉

  • Nemanja Nedić

    Hi,

    Is there any chance you could update the code from this version of sstp-client (https://sourceforge.net/projects/sstp-client/)? There are newer commits on SourceForge than there are on GitHub.

  • Jeremy

    Is there any option to add domain name suffix searches? I can find fully qualified domain names but short name lookups do not seem to work. For example “fileserver.mydomain.name” works but “fileserver” doesn’t work because there isn’t a search domain names feature. I tried to add it using the resolv.conf which doesn’t work, I also tried to add it in the GUI configuration under “DNS, Search Domains” and I tried it using the command line option netwroksetup -seatsearchdomains… nothing seems to work.

  • Christopher Capasso

    For some reason I can’t connect. I get a Not Connected within a few seconds. I used to use Easy SSTP but that is not working at all any more either.

  • Bas

    I could not connect on my macbook pro. It gave Not Connected after a few seconds.
    I tried it on my other macbook and it works perfect, something must be wrong in my personal library. Anybody any idea’s on how to raslove this without deleting my account?

  • dimm0k

    help Zheng Shao! I updated MacOS to 10.12.3 and now iSSTP stopped working! I tried uninstalling and installing, but no luck… any suggestions?

  • Yuri

    Hi. I use iSSTP то get SSTP VPN, and it works fine, but i need to start VPN from terminal.

    In iSSTP my advanced settings: usepeerdns require-mschap-v2 refuse-eap noauth noipdefault noccp.

    Command which i use: sstpc –cert-warn –nolaunchpppd –log-level 4 –log-stderr –ipparam –user *** –password *** *** usepeerdns require-mschap-v2 refuse-eap noauth noipdefault noccp

    Result from command:
    Resolved *** to ***
    Mar 6 16:00:05 sstpc[24447]: TLS hostname extension is disabled
    Mar 6 16:00:05 sstpc[24447]: Connected to ***
    Mar 6 16:00:05 sstpc[24447]: The certificate did not match the host: ***
    Mar 6 16:00:05 sstpc[24447]: Server certificated failed verification, ignoring
    Mar 6 16:00:05 sstpc[24447]: Sending Connect-Request Message
    Mar 6 16:00:05 sstpc[24447]: SEND SSTP CRTL PKT(14)
    Mar 6 16:00:05 sstpc[24447]: TYPE(1): CONNECT REQUEST, ATTR(1):
    Mar 6 16:00:05 sstpc[24447]: ENCAP PROTO(1): 6
    Mar 6 16:00:05 sstpc[24447]: RECV SSTP CRTL PKT(48)
    Mar 6 16:00:05 sstpc[24447]: TYPE(2): CONNECT ACK, ATTR(1):
    Mar 6 16:00:05 sstpc[24447]: CRYPTO BIND REQ(4): 40
    Mar 6 16:00:05 sstpc[24447]: Started PPP Link Negotiation
    Mar 6 16:01:05 sstpc[24447]: RECV SSTP CRTL PKT(20)
    Mar 6 16:01:05 sstpc[24447]: TYPE(5): ABORT, ATTR(1):
    Mar 6 16:01:05 sstpc[24447]: STATUS INFO(2): 12
    Mar 6 16:01:05 sstpc[24447]: Connection was aborted, Reason was not known
    **Error: Connection was aborted, Reason was not known, (-1)

    Thats all, and before end it was freezed in 20-30 seconds. Admin not see my connect in VPN log, but from iSSTP all works very well.

    Any ideas? Who how what command generates iSSTP? I need to execute similar command in terminal.

    Thanks.

  • Jon

    Hi,
    Does this put the username and password in the processlist when connecting? I see a Application/iSStp.app/Contents/Resources/helper process that has the password as an argument in the process list with “ps uxa”.

    And is there supposed to be a menu for the GUI? The menu in the top bar is for the previously active application. And closing the iSSTP window still leaves an iSstp process running. Which means I can’t reopen the iSSTP GUI, nor bring back the closed window.

    I’m probably doing something wrong, but I don’t know what.

  • dimm0k

    one thing I noticed that may help others trying to connect is that if you don’t press “Save” or if you have focus in one of the fields, password, username, etc, iSSTP won’t connect for some reason. as soon as you save or move the focus away and press Connect, you’re golden

  • 2498441

    How can I disable remote network default router?
    I’m using usepeerdns require-mschap-v2 refuse-eap noauth noipdefault defaultroute
    If I using usepeerdns require-mschap-v2 refuse-eap noauth noipdefault nodefaultroute, I cannot connect SMB share. Please help.

  • Tim

    If I want to connect to azure, which address is it I need to use ? I have copied the address of my Azure VPN connection on windows … still wont connect. And I have installed my client cert

    • Tim

      run Mac 10.11.6

  • Darren Mason

    Thank you so much for building this and supporting SSTP on Mac! I’m not sure why, but I can’t connect using this GUI on my mac. My connection works via the command line, but when using the gui always says not connected. Here’s my command line:
    sudo /usr/local/Cellar/sstp-client/1.0.11_1/sbin/sstpc vpn.hiddenname.com –user –password –log-stderr –log-level 3 –cert-warn require-mschap-v2 noauth defaultroute refuse-eap noccp