Invisible wrote:
> It appears the report was written by somebody other than the author. But
> then, comments like "OpenVPN seems to be using SSL" make me suspicious.
> As does the fact that SSL and TLS both run over TCP, yet OpenVPN seems
> to be using UPD. That looks like a big enough deviation from the
> standard that I'm left wondering how many design decisions have been
> made with potential security implications.
>
> It's not like OpenVPN just calls the OpenSSH crypto library to do its
> bidding; it looks like a complete new implementation.
Wikipedia claims OpenVPN uses the OpenSSL library.
http://en.wikipedia.org/wiki/OpenVPN
Still unclear how it runs SSL over UDP...
--
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*
Post a reply to this message
|