Is my openvpn network hacked?

john232

Hello,

i need your help to identify security threats and weaknesses for my network

these are the characteristics of the openvpn network:
- Prot is UDP
- BlueFish encryption with block cipher 64, which have the popular sweat32 attack
- the same client certificate shared among multiple clients
- i have the error log "TLS: new session incoming connection from [AF_INET]" thousands of times
- the client connected properly in spite of the previous error

am i vulnerable to the attacks such as:
MITM Attacks https://www.ietf.org/mail-archive/web/tls/current/msg11337.html
or Triple Handshakes https://www.mitls.org/pages/attacks/3SHAKE
or any other attacks?

TinCanTech

john232 wrote i have the error log "TLS: new session incoming connection from [AF_INET]" thousands of times

Because of this:

john232 wrote the same client certificate shared among multiple clients

Which is generally a bad choice.

Create client certs for all your clients.

john232

what about sweet32 attack is not possible for my case? especially because all users have the same cert?

TinCanTech

Blowfish cipher is susceptible to SWEET32 .. so use another cipher .. eg: AES-256-CBC