Re: [Openvpn-users] OpenVPN architecture

2020-04-29 Thread Leroy Tennison via Openvpn-users
Thank you, I appreciate the detailed response. -Original Message- From: Gert Doering To: Leroy Tennison Cc: openvpn-users Sent: Wed, Apr 29, 2020 11:53 am Subject: Re: [Openvpn-users] OpenVPN architecture Hi, On Wed, Apr 29, 2020 at 04:47:56PM +, Leroy Tennison via Openvpn-users

Re: [Openvpn-users] OpenVPN architecture

2020-04-29 Thread Gert Doering
Hi, On Wed, Apr 29, 2020 at 04:47:56PM +, Leroy Tennison via Openvpn-users wrote: > I've seen a couple of replies to this but no direct answer to my question, > sounds like OpenVPN works similar to https, correct? Sort of. It's a bit more complicated, but it boils down to "TLS runs,

Re: [Openvpn-users] OpenVPN architecture

2020-04-29 Thread Leroy Tennison via Openvpn-users
I've seen a couple of replies to this but no direct answer to my question, sounds like OpenVPN works similar to https, correct? -Original Message- From: Leroy Tennison via Openvpn-users To: openvpn-users Sent: Tue, Apr 28, 2020 5:28 pm Subject: [Openvpn-users] OpenVPN architecture

Re: [Openvpn-users] OpenVPN architecture

2020-04-29 Thread Marc SCHAEFER
On Wed, Apr 29, 2020 at 09:37:06AM +0200, Gert Doering wrote: > > HTTPS also has PFS[1] now, does OpenVPN have PFS too ? :)) > > Of course :-) > > (it always had, in TLS mode. Not in p2p --secret mode, but that is > deprecated - no PFS is one of the reasons) Nice! Thanks Gert.

Re: [Openvpn-users] OpenVPN architecture

2020-04-29 Thread Gert Doering
Hi, On Wed, Apr 29, 2020 at 08:57:07AM +0200, Marc SCHAEFER wrote: > On Tue, Apr 28, 2020 at 10:26:40PM +, Leroy Tennison via Openvpn-users > wrote: > > Is OpenVPN architecture similar to HTTPS where the certificate, etc. is > > used to encrypt and transmit a symmetric key which is then

Re: [Openvpn-users] OpenVPN architecture

2020-04-29 Thread Marc SCHAEFER
On Tue, Apr 28, 2020 at 10:26:40PM +, Leroy Tennison via Openvpn-users wrote: > Is OpenVPN architecture similar to HTTPS where the certificate, etc. is used > to encrypt and transmit a symmetric key which is then used for all future > communication? HTTPS also has PFS[1] now, does OpenVPN

[Openvpn-users] OpenVPN architecture

2020-04-28 Thread Leroy Tennison via Openvpn-users
Is OpenVPN architecture similar to HTTPS where the certificate, etc. is used to encrypt and transmit a symmetric key which is then used for all future communication?___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Steffan Karger
On Mon, Nov 30, 2015 at 9:54 AM, Jason Haar wrote: > On 29/11/15 22:56, Steffan Karger wrote: >> OpenVPN makes a distinction between control traffic (key/config >> exchange, etc) and data traffic (actual vpn network packets). For >> control packets, OpenVPN has a

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Steffan Karger
Hi Leroy, On Mon, Nov 30, 2015 at 5:21 AM, Leroy Tennison wrote: > Thank you for your reply, I appreciate it (and the technical > distinctions concerning reliability). Do you have a pointer to a source > for additional information about what is retained in OpenVPN's

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-30 Thread Jason Haar
On 29/11/15 22:56, Steffan Karger wrote: > OpenVPN makes a distinction between control traffic (key/config > exchange, etc) and data traffic (actual vpn network packets). For > control packets, OpenVPN has a reliability layer that ACKs packets, > retransmits, etc. For data packets, OpenVPN does

Re: [Openvpn-users] OpenVPN architecture questions

2015-11-29 Thread Leroy Tennison
Thank you for your reply, I appreciate it (and the technical distinctions concerning reliability). Do you have a pointer to a source for additional information about what is retained in OpenVPN's "state"? I don't mind doing the reading if I just knew where to look (even a well-labeled C

[Openvpn-users] OpenVPN architecture questions

2015-11-28 Thread Leroy Tennison
If I'm correctly reading into how OpenVPN works the server is in some sense stateful in that it has to remember the association of the original source address of a client with the client's VPN address in order to route a reply packet back to it. Are there other things it remembers about the