rpr.nospam OpenSSL Security Advisory [05 Jun 2014] lists a couple of new vulnerabilities and flaws in OpenSSL. Is OpenVPN server/client software (especially Access Server) affected by any of these? -- rpr.
[deleted] Hi rpr, Have a look at this announcement: https://forums.openvpn.net/topic16039.html. I also want to add a question though: If you are using the option "tls-auth" are you still vulnerable to the recently discovered MITM attack ? Yours, SjorsH
rpr.nospam In Access Server Release Notes I see that there is also new version of Access Server (v. 2.0.8) which includes OpenSSL 1.0.1h that fixes the security vulnerabilities. -- rpr.
def Will there be an update for the OpenVPN Access Server AWS cloud machine like there was for Heartbleed? Updating these to the latest versions seems fairly complicated (basically reinstalling and reconfiguring), I'd just like to update the bundled openssl libraries.
