upgrading from 2.2.2

chrisathome

I have to upgrade my win7 2.2.2 installation and need a couple of answers please.

Can I do an in place upgrade to 2.3.4 on the server and still use the keys and certs generated by the 2.2.2 installation? I have around 10 occasional clients on win xp, 7 & 8 and it would be a pain to have to rebuild and redistribute the keys etc.

If I just upgrade the server, can the clients still connect with their 2.2.2 installs and is there a security risk (Heartbleed etc) by doing so?

Thanks

Christopher

Traffic

chrisathome wroteCan I do an in place upgrade to 2.3.4 on the server and still use the keys and certs generated by the 2.2.2 installation?

Yes .. but be aware your 2.2.2 servers and clients are, and have been for a long time, vulnerable to heartbleed.

It is common practice to assume these certs are now compromised ...

chrisathome wroteIf I just upgrade the server, can the clients still connect with their 2.2.2 installs *1 and is there a security risk (Heartbleed etc) by doing so *2 ?

*1 Yes .. and *2 Yes ..

Unfortunately, you have left your server for a long time and your entire PKI is compromised.

It depends on if you are chatting with your friends or if you are sharing trade secrets as to how seriously you take this.

chrisathome

Thanks for the info, guess I am going to have to do a complete rebuild.

One other question; can I put an install of the server on a spare machine just to create all the server & client files, keys, certs etc then reinstall the server on the working machine and copy the relevant files across? I really don't want to take the tunnel down till I have to.

In the past I created a cd for each user with the installer and the preconfigured client file & keys, but the users have had permission issues with copying the files into the win 7 openvpn folder. Can this be avoided by using an install script? If so, advice would be appreciated.

Sorry if I'm not clued in on this, it's not my day job!

Thanks

Christopher