Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-29 Thread Stephan Alz
What helped was to uninstall the app completely then reinstall it and import the new ovpn files again. Sent: Friday, September 26, 2014 at 3:05 PM From: "Steffan Karger" To: "Doug Lytle" Cc: openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] Openvpn security on VP

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-26 Thread Gert Doering
Hi, as far as "admin cannot sniff on vmware or kvm" - well, if the admin controls the hypervisor, he can see all the memory of your VM, and see and control everything it does. If he really wants, he can just flip a few bytes in your virtual /etc/passwd, login as root into your VM, and sniff on t

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-26 Thread Steffan Karger
On 26 Sep 2014 07:37, "Doug Lytle" wrote: > > >> Well my problem with this additional tls-auth method is that the droid version does not support it yet: > > I don't have any problems with tls-auth using Feat-VPN on my Droid. > > http://www.featvpn.com/ Or use the original open source 'OpenVPN for

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-26 Thread Doug Lytle
>> Well my problem with this additional tls-auth method is that the droid >> version does not support it yet: I don't have any problems with tls-auth using Feat-VPN on my Droid. http://www.featvpn.com/ Doug -- Meet PCI

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-26 Thread Stephan Alz
y) regenerating all the certificates (rootca, server, clients) and replacing them on all the devices would help in this case or not.   Sent: Thursday, September 25, 2014 at 5:16 AM From: "Steffan Karger" To: openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] Openvpn secur

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-24 Thread Steffan Karger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On 24-09-14 11:21, David Sommerseth wrote: > On 24/09/14 10:26, David Sommerseth wrote: >> On 24/09/14 10:15, Gert Doering wrote: But to get to the point, that if I setup openvpn on my droplet and let's say an evil admin sniffing my traf

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-24 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24/09/14 10:26, David Sommerseth wrote: > On 24/09/14 10:15, Gert Doering wrote: >>> But to get to the point, that if I setup openvpn on my droplet >>> and let's say an evil admin sniffing my traffic for 3 months >>> with tcpdump then decides to de

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-24 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24/09/14 10:15, Gert Doering wrote: >> But to get to the point, that if I setup openvpn on my droplet >> and let's say an evil admin sniffing my traffic for 3 months with >> tcpdump then decides to decrypt that traffic what tools does he >> have (if

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-24 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24/09/14 09:50, Stephan Alz wrote: [...snip...] > There isn't much point of encrypting the droplet's filesystem when > the key can easily be dumped out of memory. > > But to get to the point, that if I setup openvpn on my droplet and > let's say

Re: [Openvpn-users] Openvpn security on VPS-es

2014-09-24 Thread Gert Doering
Hi, On Wed, Sep 24, 2014 at 09:50:35AM +0200, Stephan Alz wrote: > With the widespread of the cheap vps cloud services lately I wonder what > protection does openvpn offers ... well against the server administrators. If the server admin has root, he can sniff on the tun interface, or grab keys f

[Openvpn-users] Openvpn security on VPS-es

2014-09-24 Thread Stephan Alz
Hello,   With the widespread of the cheap vps cloud services lately I wonder what protection does openvpn offers ... well against the server administrators.   https://www.digitalocean.com/community/tutorials/how-to-secure-traffic-between-vps-using-openvpn   It's obvious that no virtualization tech