Hi Christian, Christian Stark wrote: > Hi opnvpn specialists! > > I have a security question regarding to openvpn used libraries like > libcrypto, libssl and so on. > In my scenarios I use (have to use) several openvpn versions. > > Is it right when using the windows installer, all sub libraries are > also included in this package and future fixes to e.g. libssl will be > delivered in a new version of the openvpn installer package? that's correct.
> And on Linux systems openvpn benefits from lib updates form the > distribution? normally openvpn is compiled against the system openssl libraries, so if the distro updates openssl , openvpn benefits from it immediately. > > On one system (Synolgy Linux NAS) there is an outdated 2.1 version > installed but compiled and linked in 2013. So I'm not sure if I have > to make thoughts about security issues because e.g. libssl is > definitely more current? > run 'ldd openvpn' on the synology box to see how it was compiled. HTH, JJK ------------------------------------------------------------------------------ Try New Relic Now & We'll Send You this Cool Shirt New Relic is the only SaaS-based application performance monitoring service that delivers powerful full stack analytics. Optimize and monitor your browser, app, & servers with just a few lines of code. Try New Relic and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
