OpenVPN 2.4.2 fixes critical issues discovered in OpenVPN audit reports

Private Internet Access is happy to release the results of our OpenVPN audit. In concurrence with the release of this report, OpenVPN has released OpenVPN 2.4.2 which is the latest update to the recently released OpenVPN 2.4 technology. The privacy and security community has banded together behind this open source technology to use the Internet openly … Continue reading “OpenVPN 2.4.2 fixes critical issues discovered in OpenVPN audit reports”


  • May 11, 2017
  • Caleb Chen
  • Networking, Privacy, Programming, Security,

OpenVPN 2.4 Evaluation Summary and Report

Contents 1 Executive Summary 2 Introduction 2.1 Scope 2.2 Approach 2.3 Classification and Severity Rating 3 Findings 3.1 Summary of Findings 3.2 Static Analysis Results 3.3 Dynamic Analysis Results 3.4 Detailed Findings 3.4.1 OVPN-01: Sensitive authentication token not wiped on certain TLS auth errors 3.4.2 OVPN-02: Potentially flawed TLS control channel encryption 3.4.3 OVPN-03: Insecure … Continue reading “OpenVPN 2.4 Evaluation Summary and Report”