ANSWERED openvpn config file compromised

[airvpn666 0]

Hi,

 

I wonder what would happen if the openvpn config file containing the certificates, private key, static key etc. gets stolen (e.g. lost cellphone).

Could an attacker use the private key for decrypting active connections? If not what is the worst case scenario?

Wouldn't it be wise to renew the client keys and certificates once in a while and does AirVPN do so actively or just on request?

 

Thanks and BR, AirVPN666

[Staff 9972]

Hi,

 

I wonder what would happen if the openvpn config file containing the certificates, private key, static key etc. gets stolen (e.g. lost cellphone).

Could an attacker use the private key for decrypting active connections? If not what is the worst case scenario?

 

 

Obviously not, thanks to DHE. Worst case scenario: the person who stole your phone will be able to connect to our VPN servers. You'll need to require a certificate revocation and new key issuing.

 

Kind regards