OpenVPN Easy-RSA Weak Encryption Vulnerability Allowing CA Key Brute Force

A vulnerability exists in OpenVPN Easy-RSA versions 3.0.5 through 3.1.7, where a weak encryption algorithm allows local attackers to more easily brute-force the private Certificate Authority (CA) key. This issue arises when the CA key is created using OpenSSL 3.

Impact

Exploitation of this vulnerability could lead to the unauthorized disclosure of the private CA key, potentially allowing an attacker to impersonate the CA or entities it has issued certificates to.