How Secure is my OpenVPN connection?

plp384

Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

The above came from my connection log and it seems to be the only encryption I can tell that is going on. What can you tell me about the security of my connection?

Also im using a cisco wrv210 router that has vpn passthrough for 3 protocols: IPsec, PPTP, and L2TP. I thought that OpenVPN uses SSL/TLS? Am I confused?

Any advice on making my setup more secure would also be appreciated.

maikcat

hello there,

you are using TLS for the control channel with 1024bit keys.

for symmetric encryption you are using blowfish cbc with 128bit key size.

Also im using a cisco wrv210 router that has vpn passthrough for 3 protocols: IPsec, PPTP, and L2TP. I thought that OpenVPN uses SSL/TLS? Am I confused?

openvpn uses ssl/tls...
what is the question...?

Michael.

plp384

I just thought that my router was not capable of OpenVPN pass through because it only supports 3 types of passthrough.

Is there anything I should do to make my connection more secure? I know that I made certificates so...it should be pretty secure, would you think?

Thanks for replying.

maikcat

your router supports "passthrough" for other protocols because they "need" it to work.

f.e ESP (IPSec) wont work behind NAT so you need to enable NAT traversal or you need
your router to handle ESP traffic accordingly,

openvpn uses a simple protocol/port combo (f.e udp/1194) and its NAT friendly.

ps: SSL/TLS works on layer 7.

Michael.