Is my openvpn network hacked?

[john232]

Hello,

i need your help to identify security threats and weaknesses for my network

these are the characteristics of the openvpn network:
- Prot is UDP
- BlueFish encryption with block cipher 64, which have the popular sweat32 attack
- the same client certificate shared among multiple clients
- i have the error log "TLS: new session incoming connection from [AF_INET]" thousands of times
- the client connected properly in spite of the previous error

am i vulnerable to the attacks such as:
MITM Attacks https://www.ietf.org/mail-archive/web/t ... 11337.html
or Triple Handshakes https://www.mitls.org/pages/attacks/3SHAKE
or any other attacks?

[TinCanTech]

i have the error log "TLS: new session incoming connection from [AF_INET]" thousands of times

Because of this:

the same client certificate shared among multiple clients

Which is generally a bad choice.

Create client certs for all your clients.

[john232]

what about sweet32 attack is not possible for my case? especially because all users have the same cert?

[TinCanTech]

Blowfish cipher is susceptible to SWEET32 .. so use another cipher .. eg: AES-256-CBC