4 ms·
As someone who runs a personal OpenVPN server am I correct in assuming that I am not vulnerable to this as long as I have updated my OpenSSL library’s through t
by jareds 13y ago
As someone who runs a personal OpenVPN server am I correct in assuming that I am not vulnerable to this as long as I have updated my OpenSSL library’s through the standard Linux package managers to a recent version that has fixed the Heartbleed bug?
- dserodio 13y agoYou should regenerate the keys after updating because they might've been exposed.
- syzzer 13y agoYou should do that for all your vulnerable peers (i.e. clients too), and restart the daemon to make it load the updated library. Then generate new keys for all of them. While there are vulnerable clients out there, you should consider your (vpn) network compromised.
- jamesbritt 13y agoAre you sure that OpenVPN is not using it's own bundled openssl lib? I believe that was the case with OpenVPN_AS.
- kyllo 13y agoThat was definitely the case with openvpn-as. I updated my openssl package but my VPS was still testing vulnerable until I updated openvpn-as.