Hacking into openvpn with certs in hand- a dumb question.

[Deleted member 27741]

I know openvpn is pretty much (or very much?) unhackable. I am not afraid of being hacked in the slightest, but do have an odd interest in knowing something goofy about openvpn.

I felt like a genuine computer expert when I got openvpn working. Getting everything right on both server and client was necessary even after all my certs were correct.

So pretend you are a hacker... having all the certs in hand but NONE of the configuration, how difficult would it be to figure out the config and get on openvpn? Easy? Difficult?

 

[RMerlin]

I know openvpn is pretty much (or very much?) unhackable. I am not afraid of being hacked in the slightest, but do have an odd interest in knowing something goofy about openvpn.

I felt like a genuine computer expert when I got openvpn working. Getting everything right on both server and client was necessary even after all my certs were correct.

So pretend you are a hacker... having all the certs in hand but NONE of the configuration, how difficult would it be to figure out the config and get on openvpn? Easy? Difficult?

Fairly easy, since there's a finite list of settings to test. Most important would be port and protocol, and ciphers.