This question already has an answer here:
This may be a stupid question, but I'll ask anyway. I have been reading quite a bit about the Heart Bleed vulnerability, and I'm curious as to whether it only affects web applications or whether OVPN connections secured with certs produced with OpenSSL would potentially be affected.
I have attempted to scan an OVPN Server I know to be secured with OpenSSL certificates at the website http://filippo.io/Heartbleed/, however I get an error in regards to StartTLS. I don't have the ability to execute the Python script where I am, but I'm wondering if this connection could be vulnerable to this attack.