Invisible wrote:

> It appears the report was written by somebody other than the author. But 
> then, comments like "OpenVPN seems to be using SSL" make me suspicious. 
> As does the fact that SSL and TLS both run over TCP, yet OpenVPN seems 
> to be using UPD. That looks like a big enough deviation from the 
> standard that I'm left wondering how many design decisions have been 
> made with potential security implications.
> 
> It's not like OpenVPN just calls the OpenSSH crypto library to do its 
> bidding; it looks like a complete new implementation.

Wikipedia claims OpenVPN uses the OpenSSL library.

http://en.wikipedia.org/wiki/OpenVPN

Still unclear how it runs SSL over UDP...

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message