Question regarding TLS 1.x

[plichel]

Hello,

may I ask a question regarding the security layer: Currently you support TLS 1.0. However, openssl already offers TLS 1.2. Are there any plans to use openssl TLS 1.2 ?
I already modified and build Softether VPN Server to support TLS 1.2 but I have no good opportunities to build my own Windows Clients.

So my question is: Do you have any reasons to stick with TLS 1.0 ? If not, are planning to support TLS 1.2 ?

Thanks,
plichel

[50BMG]

I'm curious, did your build support the additional cipher suites of TLS 1.2 or just those present in the original build?

For example:
* Were ECDSA certificates selectable? (non-RSA types)
* Were higher SHA signing levels added?

[shorty1483]

Also interested in this...

[thisjun]

This pull request may be useful for you.
https://github.com/SoftEtherVPN/SoftEtherVPN/pull/208

[shorty1483]

thisjun wrote:
> This pull request may be useful for you.
> https://github.com/SoftEtherVPN/SoftEtherVPN/pull/208

Will it be included in next server version? I tried to compile my own version with the above pull request included, but unfortunately the process throws out lot of errors.