Archlinux 4.14.73-1-ARCH with libsodium 1.0.16-1: key pair created with ./out/quicktun.keypair:

sudo ./out/quicktun -c PROTOCOL salty -c TUN_MODE 1 -c PRIVATE_KEY_FILE priv.key -c PUBLIC_KEY 5206379a6a4d6b06451d64b229687ea4e87dbc4511245a094d6788432a0ef70b
UCIS QuickTun 2.2.6 (c) 2010-2017 Ivo Smits [email protected]
More information: http://wiki.ucis.nl/QuickTun
Initializing UDP socket...
Initializing tun/tap device...
Initializing cryptography...
Encryption key calculation failed
Aborted

works with nacltai

sudo ./out/quicktun -c PROTOCOL nacltai -c TUN_MODE 1 -c PRIVATE_KEY_FILE priv.key -c PUBLIC_KEY 5206379a6a4d6b06451d64b229687ea4e87dbc4511245a094d6788432a0ef70b
UCIS QuickTun 2.2.6 (c) 2010-2017 Ivo Smits [email protected]
More information: http://wiki.ucis.nl/QuickTun
Initializing UDP socket...
Initializing tun/tap device...
Initializing cryptography...
Warning: TIME_WINDOW not set, risking an initial replay attack
The tunnel is now operational!

What am i doing wrong?

Feature request/wish: iOS 9 supposedly makes this easier to do.

Building with ./build.sh fails with

Detected Mac OS X (Darwin)
Cleaning up...
Creating source archive...
tar: Option --transform is not supported
Usage:

as Mac OS X tar doesn't support this flag. Installing GNU tar (gnu-tar) via MacPorts and applying

diff --git a/build.sh b/build.sh
index 1467c9a..f8afa3e 100755
--- a/build.sh
+++ b/build.sh
@@ -17,6 +17,7 @@ elif [ "$(uname -s)" = "Darwin" ]; then
        echo "Detected Mac OS X (Darwin)"
        CFLAGS="$CFLAGS -arch i686"
        LDFLAGS="$LDFLAGS -arch i686"
+       tar=gtar
 fi

 echo Cleaning up...

get's us to

Building combined binary...
In file included from src/proto.raw.c:26:
src/common.c:48:11: fatal error: 'net/if_tun.h' file not found
        #include <net/if_tun.h>
                 ^
1 error generated.

The naive brew install tuntap failed with

tuntap: Building this formula from source isn't possible due to OS X
Yosemite and above's strict unsigned kext ban.

You can install with Homebrew Cask:
  brew install Caskroom/cask/tuntap

You can download from:
  http://sourceforge.net/projects/tuntaposx/files/tuntap/

but alas brew install Caskroom/cask/tuntap doesn't come with if_tun.h nor
is it present in the sources at http://sourceforge.net/projects/tuntaposx/files/tuntap/

Given that one of the point of NaCl is to provide crypto that you can't mess up, it seems really bad to include nacl0 as it is explicitly stated that one should never re-used the same nonce (which is literally what nonce means).

Similarily, the raw protocol doesn't encrypt (obviously) so doesn't actually offer a service normally associated with VPN.

nacltai looks weak, but not obviously broken. It would be better with more random entropy in the nonce.

Hello,

There are some open issues and pull requests. Furthermore, it has been over four years since the last commit. Is the project still being actively maintained? If not, are there any active forks?

Ping on maintainer: @UCIS