Questions tagged [openvpn]
An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).
232
questions
1
vote
0
answers
36
views
Check for allowed OpenVPN SSL/TLS cipher suites from the client-side
I would like to check cipher suites that the OpenVPN server accepts. I used nmap:
nmap -sU --script ssl-enum-ciphers -p 1194 <IP>
but the results are only:
Host is up (0.0033s latency).
PORT ...
- 1,148
0
votes
2
answers
35
views
OpenVPN algorithms configuration to allow only TLS 1.3
For my OpenVPN configuration, I have chosen only 3 symmetric ciphers: AES-256-GCM, AES-128-GCM, and also CHACHA20-POLY1305.
I don't have any fallback algorithm. I support only modern clients.
Is this ...
- 1,148
0
votes
1
answer
38
views
Is key renegotiation necessary with a larger cipher in OpenVPN?
OpenVPN allows the use of their 'reneg-sec' option to renegotiate keys for the data channel at a specified interval. This helped protect against exploits like Sweet32 with 64 bit block ciphers a while ...
- 99
1
vote
0
answers
104
views
How exactly does OpenVPN's tls-auth option apply HMAC to packet messages?
Update: I've been able to work out everything I was asking about packet structure when I was finally able to get Wireshark to work, but there is one last thing I'm confused on which I detail at the ...
- 99
0
votes
1
answer
175
views
What is the impact of OpenVPN SECLEVEL=0?
OpenVPN throws a "signature digest algorithm too weak" error when I try to connect to a specific VPN.
A common suggestion for a workaround is using the following config:
tls-cipher "...
- 29k
1
vote
1
answer
48
views
Is providing a static TLS key during an OpenVPN handshake useless for commercial providers?
When using OpenVPN, tls-auth and tls-crypt are widely adopted options, allowing a static key to be used in the initial handshake. This helps prevent against DoS attacks, as without the valid key a ...
- 99
0
votes
0
answers
169
views
How to decrypt an OpenVPN EasyRSA Encrypted Private Key?
I want to copy my OpenVPN configuration from a client configuration file to my pfSense firewall. pfSense requires me to provide certificate and key. This is how they look like in the .ovpn ...
- 101
0
votes
0
answers
9
views
OpenVPN Win10 client and odd local routes
I have an OpenVPN server for remote clients, configured with push "redirect-gateway def1".
But on a Win10 machine with the latest OpenVPN client, after connecting I'm not seeing what I ...
0
votes
3
answers
180
views
Best practices for securing SSH access? Is certificate-based VPN server a good solution?
I run a server on a hosting. I want to harden it, but ssh access is giving me a bit of concerns.
I usually access from home most of the times. I have a provider subscription with the usual DHCP setup ...
- 427
1
vote
0
answers
73
views
VPS for Tor & I2P - which other services can I safely run on same?
I'm toying with the idea of setting-up a Tor node (middle/guard) and an I2P node on the same VPS. I think that should be safe(ish)...
But I'm wondering what other services I could run without it/them ...
- 747
0
votes
0
answers
131
views
Azure VPN through Wireguard VPN - 'Name Not Resolved'
I have setup a wireguard (WG) vpn server on a raspberry pi that connects to my home internet and I connect to this with my work laptop through a VPN router.
On my work laptop, I get access to several ...
0
votes
0
answers
84
views
Can we double encrypt VPN traffic with a custom certificate?
I want to forward VPN traffic to an Internal Proxy that uses client certificates to authenticate users. Can we add this second encryption at the VPN Configuration file for example? Or what is the best ...
0
votes
1
answer
118
views
What information is sent through companies VPNs?
I'm currently working at home. My employer provides me a VPN access to the company resources: intranet, ssh access to computers, etc. I was wondering what exactly means to use a VPN, and what type of ...
- 101
0
votes
0
answers
119
views
Connect to VPN Server with SSH from computer connected to the VPN itself?
I think I already responded this question to me (doing some experiments). However, I wanted to ask just for further confirmation.
Context:
I have an OpenVPN server installed on an AWS EC2 instance.
...
0
votes
1
answer
860
views
Which OpenVPN cipher is the more secure?
From a security standpoint, which OpenVPN cipher should I use? I read online that AES-256-GCM is the most secure for OpenVPN but I prefer to have a confirmation.
0
votes
1
answer
81
views
Is duplicating an OpenVPN server secure?
I read this tutorial to create an OpenVPN server, it worked perfectly and was configured correctly, using a dedicated server to create the certificates it requires.
Now I want to create a new OpenVPN ...
- 153
1
vote
2
answers
185
views
Can app / service provider konw when its user using (selfhost) VPN server?
Let's say I setup openVPN at home, then I go out.
I connect my ios with openVPN server at home, then I download Netflix app. then I turn off location and any necessary tracking feature on ios. I ...
- 11
0
votes
0
answers
416
views
OpenVPN client suddenly refuses to connect to my self-hosted VPN
It's been working fine for years, but now suddenly I'm getting a strange error. Does anyone know what problem this points to?
OpenVPN Connect Version 3.0.2 (598), error logs:
[REDACTED IPs]
5/16/2021,...
- 121
0
votes
1
answer
290
views
Can my company track my laptop if I've reinstalled the operating system?
I was given a laptop by my company. I reinstalled everything and now I occasionally open Whatsapp web in the background to reply to messages. Most of the times my laptop is connected to the Company's ...
3
votes
1
answer
162
views
VPN doubt about "encrypting" an IP address
According to Kaspersky
Encryption of your IP address: The primary job of a VPN is to hide
your IP address from your ISP and other third parties. This allows you
to send and receive information online ...
- 41
1
vote
2
answers
722
views
Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't
I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10.
I now want to emulate the "kill switch" feature of most ...
- 485
0
votes
1
answer
118
views
Internet privacy, VPNs, etc. Am I anonymous? [duplicate]
I am a member of a forum that recently disabled my account because their system picked up another account from my household. Anyways their terms of rectifying the situation are pretty invasive to my ...
0
votes
1
answer
98
views
Limiting VPC subnet access for NAT OpenVPN clients
I'm currently testing OpenVPN to give developers limited access to AWS VPC's.
Assuming I have 3 VPC's... VPC-A, VPC-B, VPC-C, each of these with private and public subnets.
The OpenVPN server will be ...
- 905
0
votes
1
answer
243
views
Mixing VPN Protocols
Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
1
vote
0
answers
100
views
Openvpn not hiding dns, using tcp
I am using same configuration files for OpenVPN, same operating system (ubuntu 20) on two different laptops, but I notice with Wireshark, then on one of them, the VPN connection goes through UDP, ...
- 11
0
votes
0
answers
136
views
Routing a site-to-site VPN through my regular VPN service
currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS.
cscotun0
We typically connect to the lab/domain ...
- 1,639
0
votes
1
answer
200
views
How VPN works internally [closed]
The VPN is used to establish a secure connection (creating a tunnel) to another network over the Internet. It masks our IP address and geographical location and also when the information enters the ...
- 390
0
votes
1
answer
827
views
How does openvpn work for only certain servers?
I got a *.openvpn from work and I monitored the traffic on wireshark.
On my normal vpn every traffic is routed via the vpn (as expected).
But with this work vpn only the traffic that uses the work ...
- 103
0
votes
0
answers
106
views
Undetectable Proxy or VPN Protocol
Is there a safe way for creating a proxy, tunnel, or VPN that cannot be detected by the datacenter or ISPs?
I'm living in an oppressing country, but I've access to a VPS with less regulated access to ...
- 1
4
votes
1
answer
969
views
OpenVPN Key Size 1024 vs 2048 and Eavesdrop vs Access?
OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I'm using is somewhat weak and defaults to using a 1024 RSA key size. I'm trying to determine if it's worth ...
- 283
3
votes
4
answers
8k
views
Using OpenVPN on Windows instead of VPN apps: missing certificate
Sorry this might be a noob question, but I subscribed to a VPN provider which ships its own app on Windows. Now I thought I'd prefer to use the OpenVPN client app instead.
I create a profile by ...
- 141
0
votes
0
answers
182
views
How secure is /dev/stdin in UNIX systems?
Is decrypting secrets with ccrypt and piping the result via stdin to openvpn secure?
I've written the following alias to start an openvpn client more easily than before:
sudo bash -c 'cd ...
- 1
0
votes
1
answer
122
views
Which methods should I connect a VPN, via that-vpn-app or through an VPN configuration on network manager linux?
I saw there are 2 available methods (that I know of and currently focusing on) to connect to a vpn. The first one is through their application based of that vpn provider. The others is by configuring ...
1
vote
4
answers
348
views
How to avoid leaking your public IP to installed applications like browsers when using a vpn?
What is the easiest setup to hide your public IP from installed applications and prevent things like WebRTC leaks on a common Linux distro?
- 11
0
votes
1
answer
68
views
Combine router VPN with Client VPN
I would like to combine my router's default VPN with another one I run on my laptop.
Here is what I currently have :
Here is what I would like to have :
Both router (DD-WRT) and laptop use OpenVPN ...
- 142
0
votes
1
answer
176
views
When pushing a DNS resolver to an OpenVPN client, does the resolver see the IP address of the client or the OpenVPn server?
When configuring an OpenVPN server, you have the option of pushing DNS resolvers to the client - like so:
push "dhcp-option DNS "
If this approach is used and a public DNS resolver is defined, will ...
- 103
1
vote
1
answer
789
views
ecdh-curve and tls cipher do not work together
most of my question are already answered by reading in this forum, but "one last thing" is still open.
I am running a OpenVPN server with the following security characters:
SERVER (Raspbian Buster)...
- 11
1
vote
1
answer
199
views
Antivirus/DPI Solution with openvpn server
I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
- 402
1
vote
1
answer
2k
views
Block WireGuard clients' access to specific websites
I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to
either block the VPN clients to access specific websites (i.e. block them access https://...
- 11
0
votes
0
answers
164
views
Opening OpenVPN to the world
I built my own private network with OpenVPN. I bought a VPS at hosting provider A(closer to home) and another two at hosting provider B(cheaper). Using openvpn I connected the two to the OpenVPN ...
- 109
1
vote
2
answers
261
views
Meterpreter Session over OpenVPN [closed]
Last month I made a pentesting course and now they opened a lab for us to practice before we apply for the certification exam. We connect to the lab over OpenVPN in our Kali Linux machine.
I'm trying ...
-1
votes
1
answer
481
views
Does OpenVPN encrypt my traffic between my computer and VPN server?
I set up my own VPN by installing OpenVPN on a Ubuntu server, then I download client.ovpn file from Ubuntu server to my Windows laptop. And then, I import that client.ovpn to OpenVPN GUI app on ...
- 101
-4
votes
1
answer
1k
views
Which VPN offers more security conceptually, SSL VPN or L2TP/IPSEC?
Aside from possible implementation bugs, which VPN concept aims to offer more protection by design?
SSL VPN (implementation example - OpenVPN)
L2TP/IPSEC (implementation example - Strong Swan)
After ...
- 125
0
votes
1
answer
164
views
Can't tell If The OpenVPN Server I Setup Is Encrypted using Wireshark?
This might sound dumb, but I set up an OpenVPN server on a Synology NAS. When I connect via the client at home to the server, everything works for.
I know you can read packets in Wireshark. If I ...
- 111
2
votes
1
answer
2k
views
How to generate an OpenVPN 4096 or 8192 bit static key?
How to create an OpenVPN static / pre-shared key with key size 4096 or 8192 bit?
openvpn --genkey
Creates 2048 bit strong keys only.
Static key. Not CA.
- 660
1
vote
1
answer
707
views
How can I hide my mac address when using a public wifi? [duplicate]
As a new student of cyber security, I have started to see in real-time how an individual can actually scan and view the mac addresses on a public wifi connection.
How can I hide my mac address when ...
- 143
-4
votes
1
answer
768
views
Wireguard vs. OpenVPN [closed]
Which is better in what scenario?
What cons and pros do they have? (optional question)
Which is more secure? (optional question)
Best use case of each one?
Isn't WireGuard based on OpenVPN?
- 1,370
1
vote
1
answer
905
views
Tunnel Openvpn traffic through ssh?
I know similar question have been asked but none of them are explained thoroughly.
I have setup a VPS and setup openvpn using https://github.com/Nyr/openvpn-install on tcp and port 443(I have access ...
- 11
1
vote
1
answer
137
views
If I use a VPN, can an enterprise proxy insert itself in the middle?
I'm using the guest Wi-Fi at a large corporation, and connecting to a commercial VPN provider via the OpenVPN client. I do not know one way or another if a proxy is used on the guest wi-fi, but I ...
- 2,290
0
votes
1
answer
766
views
For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?
Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables?
Assuming my public ip is known (and I don't want to change it), would it provide complete ...
- 261