Page 1 of 1
Currently supported ciphers
Posted: Mon Jan 15, 2024 4:50 pm
by julian
Hello everybody.
I'm currently evaluating which ciphers and encryption methods are supported by softether, especially when using openvpn client to connect and it looks like, that the website might not be 100% up to date anymore.
I was wondering, if elliptic curve cryptographie (e.g. ECDHE) is already supported? Also i was wondering if CBC mode (cipher block chaining) or XDS is supported?
Thanks in advance and best regards,
Julian
Re: Currently supported ciphers
Posted: Mon Jan 15, 2024 8:00 pm
by solo
Re: Currently supported ciphers
Posted: Tue Jan 16, 2024 4:14 pm
by julian
Hi solo,
Thanks for your fast reply.
So if i saw that right, the above mentioned ciphers are not yet integrated/usable or am i missing something?
BR
Julian
Re: Currently supported ciphers
Posted: Wed Jan 17, 2024 8:10 am
by Bauernfeind
I am also curious if the ciphers added in Version SoftEther VPN 4.22 Build 9634 Beta (November 27, 2016) (
https://www.softether.org/5-download/history) are supported?
Thanks!
Best, Florian
Re: Currently supported ciphers
Posted: Wed Jan 17, 2024 10:34 am
by solo
4.42-9798 Network.c
Code: Select all
static char *cipher_list = "RC4-MD5 RC4-SHA AES128-SHA AES256-SHA DES-CBC-SHA DES-CBC3-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES128-SHA256 AES256-GCM-SHA384 AES256-SHA256 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384"
#if OPENSSL_VERSION_NUMBER >= 0x10100000L
" DHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305";
#endif
Re: Currently supported ciphers
Posted: Thu Jan 18, 2024 8:12 am
by julian
Thanks again!
Thats great, I've just seen this is already included in the stable version binary. The only question left for me now is, how can I force the connection to use e.g. ECDHE resp. where I need to configure this?
Re: Currently supported ciphers
Posted: Thu Jan 18, 2024 8:45 am
by solo
Set "Encryption Algorithm Name".