Re: How to check the OpenVPN security?
Gert Doering <[email protected]>
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <[email protected]> |
Hi,
On Wed, Nov 01, 2023 at 05:16:52PM +0000, Jason Long via Openvpn-users wrote:
> Hello,Is there a tool to measure the security of OpenVPN connection? Something that tells if the security parameters used in the configuration file are sufficient or not.
For TLS and data channel ciphers, the tool is "trust OpenVPN and your TLS
libraries" (and do not forget to *update* your stuff regularily).
Under normal conditions there is nothing you can do in your config file
which will *improve* security. But there is much you can do wrong.
You do want to use tls-auth or tls-crypt, which is the only thing where
"default" is not good enough.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany [email protected]
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc
(application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE----- iQGcBAEBAgAGBQJlQonFAAoJEB2Cnv7KVigSFhsL/Ru+WvYZSNfk5CzV/KaLSL2s APBV38y7QA0wN4RIrK9KWqm/P+wyo+PmxSNLF/jW7UJvkiG+AwSXP9pr5cCMN/qv nTa6mAg01xuI3K8cdSR7tA+HSrAZgGzKG+GlANrE2w7M9VFREmYZbJPOjz7Ee7yY G1mZFtjWvFT0TqP0/wr9QFfx8ZUbF/GqF+Wvr3yhMjEB/9wvFm+fNJJFLh8PyrTs ndgW2wrx4Gb09wP+QPzfLlnhy/xiO73cojgk5DajG3AmgV2CkXHnoioyC3TtuInj +o3i54U6xwOEHwAZCn3c+bmY9dZCeBPDmraZKglS7KzSx1V/mIB+tlHHOFNUdhee paaUtFFp6x8iOBS9TOL7x7yFg2jFbcKrYnZES7uM8ZL6KqIiDdjcOm2ygCR13LPJ FKOCTfwenHbrVBqlm4c+uy184yy+G3Owtfbw/tRichyH3qemfGpzM2lvaY7ypW3b DkhB9uu3XxCJL9EzakHvQURwyoBnfhBACospYyPmCA== =epKC -----END PGP SIGNATURE-----