Recompiling the OpenVPN latest community edition to use TLS 1.3 instead of TLS 1.3?

Blonde

Hiya,

I have a VPS based OpenVPN server on CentOS 7.5 x64. In the time of installation of OpenVPN, I couldn't implement TLS 1.3 installation on CentOS 7.5 x64 as the concept was new and there was not much help online available. Now I installed the TLS 1.3 on CentOS 7.5 x64 server and I want to make the OpenVPN use the TLS 1.3 as all default connection profiles. I changed the TLS 1.3 support script in the client .ovpn config file as:

[oconf=Client Config]
tls-version-min 1.3

Then I noticed the Android official OpenVPN-connect client ignoring the implemented client config settings in .ovpn file as I checked the Android OpenVPN-connect logs. The logs said it's connected on 'TLS 1.2'. Thus I used the settings in android client to force the minimum TLS version to 1.3 that lead to I couldn't connect to the CentOS 7.5 x64 OpenVPN server at all as the TLS authentication rejected.

I don't know how to solve this issue to OpenVPN server installed on CentOS 7.5 x64 that now have TLS 1.3 installed on, use the TLS 1.3 for authentication? I think I may need to recompile OpenVPN server but I don't know how?

May someone please help me?

Tnx and best of luck

TinCanTech

OpenVPN 2.5 does TLS 1.3 by default:

Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 384 bit EC, curve: secp384r1

Blonde

Hiya @TinCanTech

How shall I upgrade as my VPS/CentOS7.5-x64 on OpenVPN 2.4 now? I know how to upgrade the installed OpenVPN 2.4 but I don't know if I simple upgrade command will bypass the need for recompiling it as the server while the OpenVPN 2.4 installed was on TLS1.2 and later I installed the TLS1.3? And I don't know how to recompile it, if required please?

How shall I proceed now??

Tnx and best of luck

TinCanTech

Openvpn have released a test beta version of 2.5 .. try downloading that from your upstream provider.

Blonde

TinCanTech wrote Openvpn have released a test beta version of 2.5 .. try downloading that from your upstream provider.

Hiya @TinCanTech

Thanks. If I use the generic update command, will it automatically install this beta version or if not, what command shall I use in CentOS7.5-x64 server's Terminal?

Tnx and best of luck

TinCanTech

Sorry, I do not support CentOS7 on this forum.

If you are absolutely set on achieving your goal and you have the means to financially motivate me then you can contact me privately. Fees will apply ..

tincanteksup <at> gmail dot com