The National Bureau for connection security, a part of the AIVD, has a custom version of the open source software OpenVPN approved for use in the Dutch government on ‘Departmental Confidential” level.
With the approval of the OpenVPN package by the AIVD body to get the Dutch government for the first time to an open-source package for security purposes. The OpenVPN package can now be used by government staff who from home or another location to have access to confidential information. Previously, software was used in a pilot project at the Ministry of Defence.
Before the OpenVPN the approval of the National Bureau for connection security was the opensourcepakket adjusted. Security company Fox-IT took the lead and removed components that is unsafe from the software. Were also adjustments made. So PolarSSL instead of OpenSSL used for data encryption and security essentials cannot be turned off. Fox-IT changed about eight thousand lines of code, and added four thousand lines of documentation to the new OpenVPN-NL.
This government-approved version is on the website of Fox-IT to download for various platforms, while of course also the source code of the software is available. For the sake of security, the customized OpenVPN software, only via this secure channel is available.