Page 1 of 1

[iPad Air] cipher_not_found: DES-CBC

Posted: Tue Dec 17, 2013 3:53 pm
by Enrico83
Hi all,
i am an iPad Air user, and i do not have any technical knowledge about OpenVPN, i am rather just a user.

I currently use OpenVPN client over my Windows 7 and i wanted to install and try the iOS version.

After installation, i imported all files from my pc configuration, and everything seems ok,
but when i try the connection i get this:

[DATE...] EVENT: CORE_ERROR cipher_not_found: DES-CBC [ERR]

Is that my fault about configuration, or i am missing something?

Thanks in advance for any hint/suggestion you will provide.

EC

Re: [iPad Air] cipher_not_found: DES-CBC

Posted: Tue Dec 17, 2013 10:27 pm
by jicao
Hi,

Same problem here...
It's a new problem since the update :(
I had no probleme to use it like a charm before the update.

Please fix this asap :)

Re: [iPad Air] cipher_not_found: DES-CBC

Posted: Tue Dec 17, 2013 11:51 pm
by supah
I can confirm this is happening on iPad 3 as well after the update.

Re-import of profiles does not resolve the issue.

Re: [iPad Air] cipher_not_found: DES-CBC

Posted: Fri Dec 20, 2013 2:46 pm
by Enrico83
Oh well, so this should not be my fault, right?

Did you had your VPN working with this cipher before 1.0.2?

Re: [iPad Air] cipher_not_found: DES-CBC

Posted: Fri Dec 20, 2013 11:46 pm
by jamesyonan
We've confirmed that this is an issue with the 1.0.2 update.

1.0.2 links with the iOS crypto provider for data channel encryption (instead of PolarSSL) to take advantage of ARM-64 crypto acceleration.

During this development, we inadvertently excluded the DES-CBC cipher. It will be reinstated in the 1.0.4 release.

Also, keep in mind that DES-CBC is an obsolete, insecure cipher that should no longer be used. It is provided only for compatibility with legacy systems.

James

Re: [iPad Air] cipher_not_found: DES-CBC

Posted: Sat Dec 21, 2013 11:05 am
by Enrico83
Oh well, thank you very much for the great support...

To be honest i am not able to condition how the company manage its security, anyway i will try to sensitize them about this.

Thanks once more, and merry xmas everyone :)