I have an OpenVPN server and a client that can successfully connect to said server. The traffic over the tunnel is encrypted. The tunnel works quite well.
However what is NOT encrypted (cleartext) is the session setup, or at least the common name and other information from my client and certificate files. I spotted it by using tcpdump and analysing the payload stream.
I was shocked to see that there was ANY unencrypted traffic taking place.
Is there a way to encrypt, or exclude the exchange of this information in cleartext, when OpenVPN first establishes the connection?
My goal is to have a 100% encrypted session, including the setup.
Thanks!