What's new

Limiting ciphers for OPENVPN, where are the TLS 1.2 ciphers?

  • Thread starter Deleted member 27741
  • Start date
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

D

Deleted member 27741

Guest
Looks like rmerlin runs openvpn 2.3.4. I am limiting my ciphers, and tried to run the TLS 1.2 ciphers from this page-
https://community.openvpn.net/openvpn/wiki/Hardening
TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
TLS-DHE-RSA-WITH-AES-128-CBC-SHA256

I get an error when I try to limit to one of those ciphers (I tried TLS-DHE-RSA-WITH-AES-256-GCM-SHA384). Using one of the TLS 1.0 ciphers works-

So, my question- why are those ciphers apparently not included, as rmerlin runs a sufficiently current version to support them as far as I can tell?
 
Looks like rmerlin runs openvpn 2.3.4. I am limiting my ciphers, and tried to run the TLS 1.2 ciphers from this page-
https://community.openvpn.net/openvpn/wiki/Hardening
TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
TLS-DHE-RSA-WITH-AES-128-CBC-SHA256

I get an error when I try to limit to one of those ciphers (I tried TLS-DHE-RSA-WITH-AES-256-GCM-SHA384). Using one of the TLS 1.0 ciphers works-

So, my question- why are those ciphers apparently not included, as rmerlin runs a sufficiently current version to support them as far as I can tell?

Available TLS and ciphers have nothing to do with the OpenVPN version. These are provided by the OpenSSL library. OpenSSL 1.0.0 only supports TLS 1.0.
 
AHA! Thanks for answering my somewhat noobish question!
 

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top