Old OpenVPN version on Viscosity

Got a problem with Viscosity or need help? Ask here!

markusj

Posts: 6
Joined: Wed May 21, 2014 3:56 am

Post by markusj » Wed May 21, 2014 4:53 am
OpenVPN.exe file in folders
C:\Program Files\Viscosity\Resources\OpenVPN2.3
C:\Program Files\Viscosity\Resources
is version 2.3.2. The latest version of OpenVPN is version 2.3.4. When is this going to be updated in Viscosity? Im not sure if there are security related issues that would require update, but atleast my Kaspersky Antivirus sayes version 2.3.2 is insecure version and should be updated.

Eric

User avatar
Posts: 1146
Joined: Sun Jan 03, 2010 3:27 am

Post by Eric » Wed May 21, 2014 1:04 pm
Hi markusj,

We are currently going through the beta process with 2.3.4 to make sure there are no issues. If you would like early access to the beta, you can find it here - http://www.sparklabs.com/forum/viewtopic.php?f=7&t=482

There are no known security issues with 2.3.2 to our knowledge. Your AV might be flagging it as insecure as the community release of OpenVPN 2.3.2 is built on a heartbleed vulnerable version of OpenSSL, but OpenVPN 2.3.2 included with Viscosity is built on the latest verison of OpenSSL and is not affected by this vulnerability, and OpenVPN 2.2 is built on an older unaffected version of OpenSSL.

Regards,

Eric
Eric Thorpe
Viscosity Developer

Web: http://www.sparklabs.com
Support: http://www.sparklabs.com/support
Twitter: http://twitter.com/sparklabs

markusj

Posts: 6
Joined: Wed May 21, 2014 3:56 am

Post by markusj » Wed May 21, 2014 3:16 pm
:) Thanks for your quick and excellent reply! :)

Sorry, I did not check the "beta version" section, its good that you're working on it. Any ideas about when this beta version might be ready?

Can you satisfy my curiosity...Why there are two files of "openvpn.exe" in my computer (C:\Program Files\Viscosity\Resources\OpenVPN2.3 & C:\Program Files\Viscosity\Resources)? What the purpose of having them both?

Offtopic:
Also, beta version mentions that all connections will go throught one adapter - does this mean that you can set Viscosity so, that no internet connection is possible unless Viscosity is running and VPN is setup? I recall that many people wanted this kind of option for maximum security.

Eric

User avatar
Posts: 1146
Joined: Sun Jan 03, 2010 3:27 am

Post by Eric » Thu May 22, 2014 12:19 am
Hi markusj,

There are two versions, 2.2 and 2.3, which one you would like to use can be changed in the Advanced tab of Preferences. 2.2 is still included as some older server setups can't be connected to with OpenVPN 2.3.

The single adapter model was introduced by popular request. To date, Viscosity will use an adapter per connection, so if you regularly use 10 connections, you will have 10 adapters, one for each. Enabling single adapter mode will have all the connections share a single adapter instead of Viscosity creating 10, but this of course means only one connection can be active at a time.

Please have a look at the following article about preventing traffic leaks and some example scripts if you wish to cut your internet connection on a disconnect - http://www.sparklabs.com/support/preven ... fic_leaks/

An option for this to be built into Viscosity will be included down the line, for now it can be done using Viscosity's scripting support.

Regards,

Eric
Eric Thorpe
Viscosity Developer

Web: http://www.sparklabs.com
Support: http://www.sparklabs.com/support
Twitter: http://twitter.com/sparklabs

markusj

Posts: 6
Joined: Wed May 21, 2014 3:56 am

Post by markusj » Thu May 22, 2014 12:49 am
Thanks for your time and help! :-)
5 posts Page 1 of 1