Hi,

On Tue, May 28, 2013 at 11:19:23AM +0200, Christian Stark wrote:
> Here the versions on my Synology box:
> OpenSSL 1.0.1e-fips 11 Feb 2013

This is good.

> OpenVPN 2.1.4 i686-linux-gnu [SSL] [LZO2] [EPOLL] built on Mar  9 2013

This is a bit old, so you might want to ask them to go to 2.3.x - but 
that's more for nice features than for security issues (of which OpenVPN
did not have anything severe - there's the timing oracle which was fixed
in 2.3.1, but that's considered a very theoretical attack).

> And this means that I don't have to worry about openSSL?
> I'm only affected by OpenVPN's own bugs and security issues?
> All right?

Yep.

gert 

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             [email protected]
fax: +49-89-35655025                        [email protected]

Attachment: pgpw0DM05IOD0.pgp
Description: PGP signature

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to