[tatref]

I have read that the client version of OpenVPN, which is also vulnerable to heartbleed, should be upgraded, as well as the server.

I wonder what could be a possible exploitation on the client side? Obviously, one can not send heartbeat packets to grab the secret key!