Re: OpenVPN + Heartbleed question

2014-04-14 Thread Reco
Hi. On Mon, Apr 14, 2014 at 04:31:18AM -0400, shawn wilson wrote: > It might be possible for an openvpn server to initiate a heartbeat sequence > with a client. And therefore for a rogue server to exploit this. I don't > believe > this to be the case however and I can't think of any other way of

Re: OpenVPN + Heartbleed question

2014-04-14 Thread shawn wilson
It might be possible for an openvpn server to initiate a heartbeat sequence with a client. And therefore for a rogue server to exploit this. I don't believe this to be the case however and I can't think of any other way of exploiting this. If you can get openvpn to use named sockets, you should be

OpenVPN + Heartbleed question

2014-04-14 Thread Alan Murrell
Hello All, I am not entirely sure if this is right place to ask, but I thought I would start here. We have a client who has several dozen remote locations all connected to the head office via OpenVPN tunnels. OpenVPN is form the Debian packages. The version of OpenSSL on the head offic