Thanks your for the interest.
The first tool, to grade the server configuration will not be like the
ssh-audit tool you mentioned.
It merely parses a local configuration file and informs the user about the
security of the setup and further suggestions.
The second tool I'm planning to release in near future, will be very much like
the ssh-audit tool. It still requires some tinkering and I'm working on some
issues to receive reliable results. I'll ask for some feedback on that as well,
hopefully soon.
I'm working on some final touches, for what you may call a public beta and I
can send you a link, to test it, this week.
Thank you for the testing and possibly the feedback in advance!
16. Aug 2017 08:43 by chipits...@gmail.com:
>
>
> 2017-08-16 11:21 GMT+05:00 <> open...@keemail.me> >:
>
>> >> Hello,
>>
>> I've developed a Python script to grade OpenVPN server configurations
>> considering the security.
>> The tool mainly focuses on: auth, cipher, tls-cipher, prng, tls-auth,
>> tls-version-min/max, no-replay, no-iv, key-method, ncp-ciphers, ncp-disable,
>> tls-crypt and key-direction.
>>
>> The result is a grade between F and A+ and suggestions on how to enhance the
>> security of the OpenVPN setup.
>>
>> I've tested it with various OpenVPN server configurations, I found online,
>> but I would like to gather some feedback from the community and update the
>> tool accordingly, before releasing it.
>>
>> This tool is intended for server operators, but I'm about to complete a
>> second tool, intended for OpenVPN users.
>>
>> The goal is to help operators to enhance the security of their OpenVPN
>> servers and to help users determine the security of the server they're using.
>>
>
> something like > https://github.com/arthepsy/ssh-audit> ?
> anything ready ? where can I have a look at it ?
>
>>
>> If you're interested in testing the tool and would like to provide some
>> valuable feedback, or have any other questions about the project, please
>> contact me.
>>
>> Thank you and kind regards.
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! >> http://sdm.link/slashdot
>> _______________________________________________
>> Openvpn-users mailing list
>> Openvpn-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>>
>>
>
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
