Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [openvpn]

An open source virtual private networking application written by James Yoan and published under the General Public License (GPL).

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

I tried to use Tryhackme on Kali Linux and got an error

I downloaded the “.ovpn” file from the tryhackme site, ran “openvpn hoochoo224.ovp” and got an error, so I read the error and added “--data-ciphers-fallback BF-CBC” to the “.ovpn” file. Then I got a ...
외계인삐리리's user avatar
1 vote
1 answer
72 views

How does TLS-CRYPT-V2 work in OpenVPN?

I am configuring an OpenVPN server and I would like to use TLS-CRYPT-V2. For that, in the documentation, it is said that I have to create a TLS-CRYPT-V2 key for the server and one for each client, ...
Álvaro García's user avatar
-1 votes
2 answers
139 views

If someone has your VPN password and email address, can they decrypt your VPN traffic?

VPN encrypts your traffic all around. So let's say someone knows your VPN email/password. Would this give them the ability to decrypt all your communications?
Rideboards's user avatar
1 vote
0 answers
80 views

Is this openvpn auth script secure or am I'm just being too naive?

I'd like to setup an openvpn server so that clients either use a certificate to authenticate or send username & password. In certain situations I don't want to issue a certificate for clients and ...
Pablo's user avatar
  • 111
0 votes
1 answer
188 views

How to block 192.168.0.1 for connected clients?

I installed Raspberry Pi OS on a RPi 3B, then I installed NetworkManager, set the Ethernet connection to "Shared to other computers" and connected an ethernet cable between the RPi and a ...
Dzenis Zigo's user avatar
0 votes
1 answer
193 views

Do I need an IP whitelist on top of a VPN?

My company requires me to access resources through a VPN connection -- specifically, an OpenVPN client configured to require a password plus an authenticator token. But the company also restricts ...
Sasgorilla's user avatar
0 votes
3 answers
490 views

Why do most VPN protocols work on the Transport Layer and not on the Network Layer instead?

In both the TCP/IP model and the OSI model, IPSEC offers encryption on the Network Layer (IP), while other VPN protocols such as OpenVPN offer it on the Transport Layer (TCP). Due to encapsulation ...
Bob Ortiz's user avatar
  • 6,665
-1 votes
1 answer
200 views

proxy anonymity level, what is the tehnical difference ? (specific example from hide my name)

By using hidemy name I can check for a proxy if it is up or down, and also check the anonymity level using the app. A sample result looks like this: IP address Port Country, City Speed ...
C.Unbay's user avatar
  • 207
0 votes
0 answers
67 views

Not able to view a webpage or connect to a service on a VM connected using OpenVPN, only able to perform Nmap scans

I've tried asking this question in hack the box forum, but nothing has worked so far. When I connect to a vulnerable machine using a tunneled IP using OpenVPN, all I'm able to do to a box is scan it (...
Karan Bakshi's user avatar
0 votes
1 answer
2k views

OpenVPN & China's Great Firewall

The company I work for has an OpenVPN server so we can access its intranet from home. The problem is that I'm going to move to China and I'll need to connect from there, but I've heard connections ...
anonymous's user avatar
3 votes
1 answer
2k views

Why does the OpenVPN server need to keep client's private key?

When I installed the openvpn server following these instructions, the work flow was like below Create ca.crt Create server.key and cert Create client.key and cert As far as I know, when A and B are ...
Hardguy's user avatar
  • 33
0 votes
0 answers
103 views

Does fragrouter work with OpenVPN?

My goal is to evade IDS/IPS detection and scan the target with nmap. If the scan is detected, the target seems to stop responding for 10s. I think that IP Fragmentation Attack is exactly what I need. ...
ksenia pi's user avatar
2 votes
0 answers
1k views

Check for allowed OpenVPN SSL/TLS cipher suites from the client-side

I would like to check cipher suites that the OpenVPN server accepts. I used nmap: nmap -sU --script ssl-enum-ciphers -p 1194 <IP> but the results are only: Host is up (0.0033s latency). PORT ...
user187205's user avatar
  • 1,333
0 votes
2 answers
1k views

OpenVPN algorithms configuration to allow only TLS 1.3

For my OpenVPN configuration, I have chosen only 3 symmetric ciphers: AES-256-GCM, AES-128-GCM, and also CHACHA20-POLY1305. I don't have any fallback algorithm. I support only modern clients. Is this ...
user187205's user avatar
  • 1,333
0 votes
1 answer
310 views

Is key renegotiation necessary with a larger cipher in OpenVPN?

OpenVPN allows the use of their 'reneg-sec' option to renegotiate keys for the data channel at a specified interval. This helped protect against exploits like Sweet32 with 64 bit block ciphers a while ...
Letal1s's user avatar
  • 109
1 vote
0 answers
517 views

How exactly does OpenVPN's tls-auth option apply HMAC to packet messages?

Update: I've been able to work out everything I was asking about packet structure when I was finally able to get Wireshark to work, but there is one last thing I'm confused on which I detail at the ...
Letal1s's user avatar
  • 109
8 votes
1 answer
9k views

What is the impact of OpenVPN SECLEVEL=0?

OpenVPN throws a "signature digest algorithm too weak" error when I try to connect to a specific VPN. A common suggestion for a workaround is using the following config: tls-cipher "...
tim's user avatar
  • 29.6k
1 vote
1 answer
455 views

Is providing a static TLS key during an OpenVPN handshake useless for commercial providers?

When using OpenVPN, tls-auth and tls-crypt are widely adopted options, allowing a static key to be used in the initial handshake. This helps prevent against DoS attacks, as without the valid key a ...
Letal1s's user avatar
  • 109
0 votes
0 answers
4k views

How to decrypt an OpenVPN EasyRSA Encrypted Private Key?

I want to copy my OpenVPN configuration from a client configuration file to my pfSense firewall. pfSense requires me to provide certificate and key. This is how they look like in the .ovpn ...
Aileron79's user avatar
  • 101
0 votes
3 answers
1k views

Best practices for securing SSH access? Is certificate-based VPN server a good solution?

I run a server on a hosting. I want to harden it, but ssh access is giving me a bit of concerns. I usually access from home most of the times. I have a provider subscription with the usual DHCP setup ...
unsafe_where_true's user avatar
1 vote
0 answers
248 views

VPS for Tor & I2P - which other services can I safely run on same?

I'm toying with the idea of setting-up a Tor node (middle/guard) and an I2P node on the same VPS. I think that should be safe(ish)... But I'm wondering what other services I could run without it/them ...
Baard Kopperud's user avatar
0 votes
0 answers
120 views

Can we double encrypt VPN traffic with a custom certificate?

I want to forward VPN traffic to an Internal Proxy that uses client certificates to authenticate users. Can we add this second encryption at the VPN Configuration file for example? Or what is the best ...
Othmane El Massari's user avatar
0 votes
1 answer
383 views

What information is sent through companies VPNs?

I'm currently working at home. My employer provides me a VPN access to the company resources: intranet, ssh access to computers, etc. I was wondering what exactly means to use a VPN, and what type of ...
Pythonist's user avatar
  • 101
0 votes
1 answer
4k views

Which OpenVPN cipher is the more secure?

From a security standpoint, which OpenVPN cipher should I use? I read online that AES-256-GCM is the most secure for OpenVPN but I prefer to have a confirmation.
Project_piffa's user avatar
0 votes
1 answer
115 views

Is duplicating an OpenVPN server secure?

I read this tutorial to create an OpenVPN server, it worked perfectly and was configured correctly, using a dedicated server to create the certificates it requires. Now I want to create a new OpenVPN ...
Tom's user avatar
  • 174
1 vote
2 answers
581 views

Can app / service provider konw when its user using (selfhost) VPN server?

Let's say I setup openVPN at home, then I go out. I connect my ios with openVPN server at home, then I download Netflix app. then I turn off location and any necessary tracking feature on ios. I ...
user16004927's user avatar
0 votes
0 answers
837 views

OpenVPN client suddenly refuses to connect to my self-hosted VPN

It's been working fine for years, but now suddenly I'm getting a strange error. Does anyone know what problem this points to? OpenVPN Connect Version 3.0.2 (598), error logs: [REDACTED IPs] 5/16/2021,...
knutole's user avatar
  • 121
0 votes
1 answer
3k views

Can my company track my laptop if I've reinstalled the operating system?

I was given a laptop by my company. I reinstalled everything and now I occasionally open Whatsapp web in the background to reply to messages. Most of the times my laptop is connected to the Company's ...
MUHAMMAD QASIM KHAN's user avatar
3 votes
1 answer
226 views

VPN doubt about "encrypting" an IP address

According to Kaspersky Encryption of your IP address: The primary job of a VPN is to hide your IP address from your ISP and other third parties. This allows you to send and receive information online ...
TrueStar's user avatar
1 vote
2 answers
1k views

Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't

I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10. I now want to emulate the "kill switch" feature of most ...
robertspierre's user avatar
0 votes
1 answer
167 views

Internet privacy, VPNs, etc. Am I anonymous? [duplicate]

I am a member of a forum that recently disabled my account because their system picked up another account from my household. Anyways their terms of rectifying the situation are pretty invasive to my ...
Saul Goodman's user avatar
0 votes
1 answer
184 views

Limiting VPC subnet access for NAT OpenVPN clients

I'm currently testing OpenVPN to give developers limited access to AWS VPC's. Assuming I have 3 VPC's... VPC-A, VPC-B, VPC-C, each of these with private and public subnets. The OpenVPN server will be ...
user1751825's user avatar
0 votes
1 answer
453 views

Mixing VPN Protocols

Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
bakingsoda's user avatar
1 vote
0 answers
148 views

Openvpn not hiding dns, using tcp

I am using same configuration files for OpenVPN, same operating system (ubuntu 20) on two different laptops, but I notice with Wireshark, then on one of them, the VPN connection goes through UDP, ...
as2az1's user avatar
  • 11
0 votes
0 answers
196 views

Routing a site-to-site VPN through my regular VPN service

currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS. cscotun0 We typically connect to the lab/domain ...
voices's user avatar
  • 1,779
0 votes
1 answer
317 views

How VPN works internally [closed]

The VPN is used to establish a secure connection (creating a tunnel) to another network over the Internet. It masks our IP address and geographical location and also when the information enters the ...
Sivaram Rasathurai's user avatar
0 votes
1 answer
930 views

How does openvpn work for only certain servers?

I got a *.openvpn from work and I monitored the traffic on wireshark. On my normal vpn every traffic is routed via the vpn (as expected). But with this work vpn only the traffic that uses the work ...
relot's user avatar
  • 103
0 votes
0 answers
220 views

Undetectable Proxy or VPN Protocol

Is there a safe way for creating a proxy, tunnel, or VPN that cannot be detected by the datacenter or ISPs? I'm living in an oppressing country, but I've access to a VPS with less regulated access to ...
Someone's user avatar
5 votes
1 answer
2k views

OpenVPN Key Size 1024 vs 2048 and Eavesdrop vs Access?

OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I'm using is somewhat weak and defaults to using a 1024 RSA key size. I'm trying to determine if it's worth ...
Harry Muscle's user avatar
4 votes
4 answers
15k views

Using OpenVPN on Windows instead of VPN apps: missing certificate

Sorry this might be a noob question, but I subscribed to a VPN provider which ships its own app on Windows. Now I thought I'd prefer to use the OpenVPN client app instead. I create a profile by ...
PlasmaBinturong's user avatar
0 votes
0 answers
297 views

How secure is /dev/stdin in UNIX systems?

Is decrypting secrets with ccrypt and piping the result via stdin to openvpn secure? I've written the following alias to start an openvpn client more easily than before: sudo bash -c 'cd ...
rmercier's user avatar
0 votes
1 answer
165 views

Which methods should I connect a VPN, via that-vpn-app or through an VPN configuration on network manager linux?

I saw there are 2 available methods (that I know of and currently focusing on) to connect to a vpn. The first one is through their application based of that vpn provider. The others is by configuring ...
Discrete Loner's user avatar
1 vote
4 answers
476 views

How to avoid leaking your public IP to installed applications like browsers when using a vpn?

What is the easiest setup to hide your public IP from installed applications and prevent things like WebRTC leaks on a common Linux distro?
Jay's user avatar
  • 11
0 votes
1 answer
109 views

Combine router VPN with Client VPN

I would like to combine my router's default VPN with another one I run on my laptop. Here is what I currently have : Here is what I would like to have : Both router (DD-WRT) and laptop use OpenVPN ...
John Kravicz's user avatar
0 votes
1 answer
243 views

When pushing a DNS resolver to an OpenVPN client, does the resolver see the IP address of the client or the OpenVPn server?

When configuring an OpenVPN server, you have the option of pushing DNS resolvers to the client - like so: push "dhcp-option DNS " If this approach is used and a public DNS resolver is defined, will ...
elliott94's user avatar
  • 103
2 votes
1 answer
2k views

ecdh-curve and tls cipher do not work together

most of my question are already answered by reading in this forum, but "one last thing" is still open. I am running a OpenVPN server with the following security characters: SERVER (Raspbian Buster)...
meltinsands's user avatar
1 vote
1 answer
288 views

Antivirus/DPI Solution with openvpn server

I wish to set up a system that I log into with openVPN on my Raspberry Pi 4. I have already set up an openVPN server with a PKI infrastructure as well as other services that run on the Pi (like pi ...
FalcoGer's user avatar
  • 392
4 votes
1 answer
4k views

Block WireGuard clients' access to specific websites

I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to either block the VPN clients to access specific websites (i.e. block them access https://...
G. Digkas's user avatar
0 votes
0 answers
214 views

Opening OpenVPN to the world

I built my own private network with OpenVPN. I bought a VPS at hosting provider A(closer to home) and another two at hosting provider B(cheaper). Using openvpn I connected the two to the OpenVPN ...
DazDylz's user avatar
  • 109
1 vote
2 answers
384 views

Meterpreter Session over OpenVPN [closed]

Last month I made a pentesting course and now they opened a lab for us to practice before we apply for the certification exam. We connect to the lab over OpenVPN in our Kali Linux machine. I'm trying ...
Eufracio Barrios's user avatar

1
2 3 4 5