Hi, Am new here. I would like to ask if OpenVPN is using SSL tunnel or IPsec tunnel? Am confused by the para below taken off from openvpn website. [i]OpenVPN's security model is based on using SSL/TLS for session authentication and the IPSec ESP protocol for secure tunnel transport over UDP[/i]

This is the key statement " .. [i]is based on[/i] .. " So: [list][*]" .. [i]is based on [/i].. " using SSL/TLS for [u]session authentication[/u] This may help: [url]http://computer.howstuffworks.com/encryption4.htm[/url] [*]" .. [i]is based on [/i].. " the IPSec ESP protocol for [u]secure tunnel transport over [b]UDP[/b][/u] This may help: [url]https://en.wikipedia.org/wiki/IPsec#Encapsulating_Security_Payload[/url][/list] All of which is essentially open source and why OpenVPN uses them.

Openvpn tunnel

mcmxii

Hi,

Am new here. I would like to ask if OpenVPN is using SSL tunnel or IPsec tunnel? Am confused by the para below taken off from openvpn website.

OpenVPN's security model is based on using SSL/TLS for session authentication and the IPSec ESP protocol for secure tunnel transport over UDP

Traffic

This is the key statement " .. is based on .. "

So:

" .. is based on .. " using SSL/TLS for session authentication
This may help: http://computer.howstuffworks.com/encryption4.htm
" .. is based on .. " the IPSec ESP protocol for secure tunnel transport over UDP
This may help: https://en.wikipedia.org/wiki/IPsec#Encapsulating_Security_Payload

All of which is essentially open source and why OpenVPN uses them.

mcmxii

Still not able to grasp the technical details.

I thought its always between choosing either SSL VPN or IPsec VPN. And OpenVPN is touted as the SSL VPN.

Is there still a need for IPsec ESP to secure the tunnel?