Re: [Openvpn-devel] Subject: Potential OpenVPN Vulnerability Report: Repeated TLS Handshake Failures Leading to Denial-of-Service Conditions

[Gert D. <ge...@gr...>]

Hi,

On Mon, Nov 18, 2024 at 09:09:57AM +0200, ?????? ???????? wrote:
> I don't have access to server logs, I sent you the client logs as well as
> the line pointing to the DoS:
> TLS Error: TLS key negotiation failed to occur within 5 seconds
> SIGUSR1[soft,tls-error] received, process restarting

What makes you think it's a DoS that can be fixed by a code change?

If you break the network, programs will not be able to connect - and there
is nothing "a patch to the software" will be able to fix.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             ge...@gr...