Securing openVPN

[79wjd]

I've been told that the openVPN client that runs on my router (Asus RT-AC68u) is very vulnerable and requires extra configuration settings to be set. Could someone explain why it's so vulnerable and what additional settings need to be set in order to make it secure? 

 

[zMeul]

be sure to be on the latest FW, if the OVPN implementation is "faulty" there's nothing you could do

maybe changing to a 3rd party FW? Tomato / Merlin / DDWRT ?!

[79wjd]

Just now, zMeul said:

be sure to be on the latest FW, if the OVPN implementation is "faulty" there's nothing you could do

maybe changing to a 3rd party FW? Tomato / Merlin / DDWRT ?!

It's not that it's faulty, I've been told that it's missing settings (that can be added in the custom configuration options). But I wanted to know why the settings it has aren't sufficient and what additional settings would be needed.  

[zMeul]

10 minutes ago, djdwosk97 said:

It's not that it's faulty, I've been told that it's missing settings (that can be added in the custom configuration options). But I wanted to know why the settings it has aren't sufficient and what additional settings would be needed.  

that I do not know, heard of before

didn't the person who told you this wasn't he more specific?!

[79wjd]

12 minutes ago, zMeul said:

that I do not know, heard of before

didn't the person who told you this wasn't more specific?!

They kind of were, but I'd be lying if I said I fully understood everything, and also the person was trying to help me set up a secure vpn and not explaining why the implementation isn't secure. 

[Mornincupofhate]

OpenVPN isn't really used as an attack vector as there's really nothing broken with it (atleast from what I've seen)

You should be fine. Just make sure all of your traffic is encrypted.

[Teshy09]

As far as i'm aware the framework itself doesn't contain any vulnerabilities ... Obvious reccomendation would be to check the openvpn website with the version number that you are currently running. 

 

There are other ways of setting up a secure vpn via generating keys yourself (have yet to do this though)