Hi vpnuser,
Version 1.4.7 of Viscosity for Mac and Windows use OpenSSL 1.0.1e, which is an affected version. Version 1.4.8 of Viscosity for Mac has been recently released which addresses the issue by upgrading to the latest version of OpenSSL (1.0.1g). The Windows version has not yet been released, however it will be very shortly, and a beta version can be downloaded in the meantime from:
https://www.sparklabs.com/forum/t/beta-latest-build-of-viscosity-for-windows/362/1
Viscosity uses its own statically compiled version of OpenSSL and does not use the 0.9.8 dynamic libraries included with Mac OS X. As far as I am aware there is no easy method to extract the version of OpenSSL being used from OpenVPN (unfortunately its version string does not list it). However a fairly safe assumption is that we’ve used the latest stable version of OpenSSL at the time OpenVPN was compiled (you’ll see the build date listed in the log in Viscosity’s Details window). Alternatively you can always shoot a quick email our way and we can confirm what version is being used.
Regards,
James
