Re: How to check the OpenVPN security?

Gert Doering <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <[email protected]>
Hi,

On Wed, Nov 01, 2023 at 05:16:52PM +0000, Jason Long via Openvpn-users wrote:
> Hello,Is there a tool to measure the security of OpenVPN connection? Something that tells if the security parameters used in the configuration file are sufficient or not.

For TLS and data channel ciphers, the tool is "trust OpenVPN and your TLS
libraries" (and do not forget to *update* your stuff regularily).

Under normal conditions there is nothing you can do in your config file
which will *improve* security.  But there is much you can do wrong.

You do want to use tls-auth or tls-crypt, which is the only thing where
"default" is not good enough.

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc (application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE-----

iQGcBAEBAgAGBQJlQonFAAoJEB2Cnv7KVigSFhsL/Ru+WvYZSNfk5CzV/KaLSL2s
APBV38y7QA0wN4RIrK9KWqm/P+wyo+PmxSNLF/jW7UJvkiG+AwSXP9pr5cCMN/qv
nTa6mAg01xuI3K8cdSR7tA+HSrAZgGzKG+GlANrE2w7M9VFREmYZbJPOjz7Ee7yY
G1mZFtjWvFT0TqP0/wr9QFfx8ZUbF/GqF+Wvr3yhMjEB/9wvFm+fNJJFLh8PyrTs
ndgW2wrx4Gb09wP+QPzfLlnhy/xiO73cojgk5DajG3AmgV2CkXHnoioyC3TtuInj
+o3i54U6xwOEHwAZCn3c+bmY9dZCeBPDmraZKglS7KzSx1V/mIB+tlHHOFNUdhee
paaUtFFp6x8iOBS9TOL7x7yFg2jFbcKrYnZES7uM8ZL6KqIiDdjcOm2ygCR13LPJ
FKOCTfwenHbrVBqlm4c+uy184yy+G3Owtfbw/tRichyH3qemfGpzM2lvaY7ypW3b
DkhB9uu3XxCJL9EzakHvQURwyoBnfhBACospYyPmCA==
=epKC
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.