I log in to my VPN without any password. BAD?

castlevania · #1 09-30-2007, 04:20 AM

I log in to my VPN without any password. Is that bad? It feels like anyone can log in to it and do anything they like. Like illegal stuff. Or maybe even spy on my traffic? I use open VPN. Should I talk with my VPN provider and ask him to create a password? Or do you think that all is good as it is?

kerowo · #2 09-30-2007, 09:31 AM

Just get a password.

Freakin · #3 09-30-2007, 01:32 PM

[ QUOTE ]
I log in to my VPN without any password. Is that bad? It feels like anyone can log in to it and do anything they like. Like illegal stuff. Or maybe even spy on my traffic? I use open VPN. Should I talk with my VPN provider and ask him to create a password? Or do you think that all is good as it is?

[/ QUOTE ]

I assume your VPN provider sent you keys & certificates for your computer? People can't log into your VPN unless they verify their authenticity with the keys & certificates. I don't use passwords on the VPNs I sell because I don't think it's necessary.

castlevania · #4 09-30-2007, 06:33 PM

He didn't send me any keys or certificates at all. He just sent me 8 lines of clear text commands to put into a config file. Should I ask for keys & certificates?

Freakin · #5 10-01-2007, 09:04 AM

[ QUOTE ]
He didn't send me any keys or certificates at all. He just sent me 8 lines of clear text commands to put into a config file. Should I ask for keys & certificates?

[/ QUOTE ]

so if you go to c:\program files\openvpn\config then you basically only have one file, which is a .ovpn file?

castlevania · #6 10-01-2007, 09:38 AM

[ QUOTE ]
[ QUOTE ]
He didn't send me any keys or certificates at all. He just sent me 8 lines of clear text commands to put into a config file. Should I ask for keys & certificates?

[/ QUOTE ]

so if you go to c:\program files\openvpn\config then you basically only have one file, which is a .ovpn file?

[/ QUOTE ]

Exactly

Freakin · #7 10-01-2007, 09:43 AM

[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
He didn't send me any keys or certificates at all. He just sent me 8 lines of clear text commands to put into a config file. Should I ask for keys & certificates?

[/ QUOTE ]

so if you go to c:\program files\openvpn\config then you basically only have one file, which is a .ovpn file?

[/ QUOTE ]

Exactly

[/ QUOTE ]

Yeah that's a pretty stupid configuration. Like seriously someone could 'happen' across his/your VPN server and hijack your connection with a little bit of configuration testing...

Tell him you want password or certificate authentication for the VPN.

castlevania · #8 10-01-2007, 10:41 AM

Thanks Freakin! I'll email him now immediatly

Edit: Done