Page 1 of 1

Question regarding TLS 1.x

Posted: Wed Jul 01, 2015 9:01 pm
by plichel
Hello,

may I ask a question regarding the security layer: Currently you support TLS 1.0. However, openssl already offers TLS 1.2. Are there any plans to use openssl TLS 1.2 ?
I already modified and build Softether VPN Server to support TLS 1.2 but I have no good opportunities to build my own Windows Clients.

So my question is: Do you have any reasons to stick with TLS 1.0 ? If not, are planning to support TLS 1.2 ?

Thanks,
plichel

Re: Question regarding TLS 1.x

Posted: Fri Jul 10, 2015 7:16 pm
by 50BMG
I'm curious, did your build support the additional cipher suites of TLS 1.2 or just those present in the original build?

For example:
* Were ECDSA certificates selectable? (non-RSA types)
* Were higher SHA signing levels added?

Re: Question regarding TLS 1.x

Posted: Wed Jun 08, 2016 6:07 pm
by shorty1483
Also interested in this...

Re: Question regarding TLS 1.x

Posted: Fri Jul 01, 2016 8:04 am
by thisjun
This pull request may be useful for you.
https://github.com/SoftEtherVPN/SoftEtherVPN/pull/208

Re: Question regarding TLS 1.x

Posted: Fri Jul 01, 2016 8:53 am
by shorty1483
thisjun wrote:
> This pull request may be useful for you.
> https://github.com/SoftEtherVPN/SoftEtherVPN/pull/208

Will it be included in next server version? I tried to compile my own version with the above pull request included, but unfortunately the process throws out lot of errors.