Re: [Openvpn-users] Recommendations for maximum cryptographic security

2016-12-14 Thread David Sommerseth
On 14/12/16 07:54, Kevin Long wrote: > 1. Use easy-rsa3 or equivalent openssl commands to generate your > keys/certificates using elliptic curve (instead of RSA). I'm no crypto expert, but I believe there are some concerns about EC and post-quantum computing, where it is believed that RSA will be

Re: [Openvpn-users] Recommendations for maximum cryptographic security

2016-12-14 Thread Jan Just Keijser
Hi, David's remarks are correct. I've added some small nuances below, but overall the answers do not change. On 14/12/16 12:40, David Sommerseth wrote: > On 14/12/16 07:54, Kevin Long wrote: >> 1. Use easy-rsa3 or equivalent openssl commands to generate your >> keys/certificates using elliptic c

[Openvpn-users] Can openvpn use compressed config file directly, say ``--config file.tar.gz''?

2016-12-14 Thread Hongyi Zhao
Hi all, Can openvpn use compressed config file directly, say ``--config file.tar.gz''? Regards -- .: Hongyi Zhao [ hongyi.zhao AT gmail.com ] Free as in Freedom :. -- Check out the vibrant tech community on one of the

Re: [Openvpn-users] Can openvpn use compressed config file directly, say ``--config file.tar.gz''?

2016-12-14 Thread Jan Just Keijser
Hi, On 14/12/16 15:49, Hongyi Zhao wrote: > Hi all, > > Can openvpn use compressed config file directly, say ``--config > file.tar.gz''? > > I can only answer: No, the config file needs to be plaintext. HTH, JJK -- Ch

Re: [Openvpn-users] Can openvpn use compressed config file directly, say ``--config file.tar.gz''?

2016-12-14 Thread Gert Doering
Hi, On Wed, Dec 14, 2016 at 02:49:14PM +, Hongyi Zhao wrote: > Can openvpn use compressed config file directly, say ``--config > file.tar.gz''? No. ... and there is no benefit to do so - config files are small, and since you can inline everything in a single .ovpn, no need to lump around a

Re: [Openvpn-users] Can openvpn use compressed config file directly, say ``--config file.tar.gz''?

2016-12-14 Thread John Lauro
Never tried it with openvpn, but the following should work: ``--config <(gunzip Sent: Wednesday, December 14, 2016 9:49 AM To: openvpn-users@lists.sourceforge.net Subject: [Openvpn-users] Can openvpn use compressed config file directly, say ``--config file.tar.gz''? Hi all, Can openvpn use co

[Openvpn-users] Experts' opinions needed: Is my VPN provider using weak or strong encryption algorithms?

2016-12-14 Thread Sebastian Rubenstein
Hi, I hope that some experts here will be able to tell me if my VPN provider uses weak encryption standards with regards to encryption/decryption of control channel authentication and data channel? Thanks. Below is a sample of a redacted config file: remote-random remote somevpn.com 443 proto

[Openvpn-users] Request: Copy or Move openvpn_2.3.14-jessie0_amd64.deb and update hashsums in Packages file

2016-12-14 Thread Sebastian Rubenstein
Hi Samuli When you have time to spare, could you copy/move openvpn_2.3.14-jessie0_amd64.deb to http://swupdate.openvpn.net/apt/pool/jessie/main/o/openvpn/ please? Moreover, please update the Packages file in http://swupdate.openvpn.net/apt/dists/jessie/main/binary-amd64/Packages with the hash

Re: [Openvpn-users] Request: Copy or Move openvpn_2.3.14-jessie0_amd64.deb and update hashsums in Packages file

2016-12-14 Thread Samuli Seppänen
Il 14/12/2016 18:39, Sebastian Rubenstein ha scritto: > Hi Samuli > > When you have time to spare, could you copy/move > openvpn_2.3.14-jessie0_amd64.deb to > http://swupdate.openvpn.net/apt/pool/jessie/main/o/openvpn/ please? > > Moreover, please update the Packages file in > http://swupdate.op

Re: [Openvpn-users] Experts' opinions needed: Is my VPN provider using weak or strong encryption algorithms?

2016-12-14 Thread Steffan Karger
Hi, On 14-12-16 17:31, Sebastian Rubenstein wrote: > I hope that some experts here will be able to tell me if my VPN provider uses > weak encryption standards with regards to encryption/decryption of control > channel authentication and data channel? Thanks. > > Below is a sample of a redacted

Re: [Openvpn-users] Can openvpn use compressed config file directly, say ``--config file.tar.gz''?

2016-12-14 Thread Hongyi Zhao
On Wed, 14 Dec 2016 15:11:00 +, John Lauro wrote: > Never tried it with openvpn, but the following should work: > ``--config <(gunzip http://sdm.link/slashdot ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourcefo

Re: [Openvpn-users] Recommendations for maximum cryptographic security

2016-12-14 Thread debbie10t
On 14/12/16 14:40, Jan Just Keijser wrote: > Hi, > > David's remarks are correct. I've added some small nuances below, but > overall the answers do not change. > > On 14/12/16 12:40, David Sommerseth wrote: >> On 14/12/16 07:54, Kevin Long wrote: >>> 1. Use easy-rsa3 or equivalent openssl command

Re: [Openvpn-users] Recommendations for maximum cryptographic security

2016-12-14 Thread Gregory Sloop
A working Quantum computer with sufficient capacity will obsolete EC, RSA etc. It will all be game-over. End of story. [At least mostly.] But by the time a quantum computer with the sufficient qbits becomes available, we'll likely understand [a lot] better the ramifications of such a machine and

Re: [Openvpn-users] Can openvpn use compressed config file directly, say ``--config file.tar.gz''?

2016-12-14 Thread Gert Doering
Hi, On Wed, Dec 14, 2016 at 03:11:00PM +, John Lauro wrote: > Never tried it with openvpn, but the following should work: > ``--config <(gunzip signature.asc Description: PGP signature -- Check out the vibrant tech

Re: [Openvpn-users] Recommendations for maximum cryptographic security

2016-12-14 Thread Gert Doering
Hi, On Thu, Dec 15, 2016 at 01:22:51AM +, debbie10t wrote: > > in a post-quantum world both EC and RSA will/might be trivial to solve. > > In a 'post' what ? > > I will believe it "when I see it with my own ears" for myself. the point here is: the propability that a quantum computer will ar