How to force Encryption ?

[cyberkat]

Hello,

I have implemented SoftEther and it works well but... :-)

On the client side, it is possible to deactivate the Encryption.
I don't want people to be able do it on this VPN.

How can I prevent that (or force complete encryption to occur) from the server side ?

In my search, I've found this setting on the server : AcceptOnlyTls
Can someone explain what it does on the current version please (as it seems there have been some evolution on it) ?

Thanks a lot in advance !

Regards,

Olivier

[UkrZilla]

Hi Olivier,

> Hello,
>

> On the client side, it is possible to deactivate the Encryption.

How can you do it?

[cyberkat]

in the "SoftEther VPN Client Manager" in Windows :

right click the connection -> Select "Properties..." at the bottom of the menu
Hit the "Advanced Settings..." button at the bottom right of the window
Look at the section "Encryption and Compression" at the upper right of the new window.

You will see this text :
Normally the VPN session is encrypted for secure. You can disable encryption to improve the throughput. Please note that the data flows in plain over the network when disabled."

And checkbox : "Encrypt VPN Session with SSL"

I gave it a try and look at the "Status" window when connected : if unchecked it is stated there is no encryption

[thisjun]

SoftEther VPN doesn't have such function.
Please try to edit the source code around here.

https://github.com/SoftEtherVPN/SoftEth ... Protocol.c
// Get the various flags
use_encrypt = PackGetInt(p, "use_encrypt") == 0 ? false : true;