elliptic curve certificates

Official client software for OpenVPN Access Server and OpenVPN Cloud.
Post Reply
eak
OpenVpn Newbie
Posts: 2
Joined: Fri Apr 11, 2014 5:39 pm

elliptic curve certificates

Post by eak » Thu Jan 22, 2015 4:56 pm

I would like to switch from RSA certificates to Elliptic Curve (EC) certificates. Can someone confirm or refute whether OpenVPN Connect iOS support a Certificate Authority (CA) that uses openssl secp521r1 certificate generation? If the EC CAs are supported, are EC client certificates?
Top
orngefish
OpenVpn Newbie
Posts: 1
Joined: Fri Jan 23, 2015 9:07 am

Re: elliptic curve certificates

Post by orngefish » Fri Jan 23, 2015 9:38 am

As far as I can tell ECC is not supported natively with the current official release of openvpn (2.3.6) I think it is set to be released with 2.4.0. I think the ECC code has already been added to the github codebase though so I do believe it is possible to compile openvpn with ECC support on your own but i have not tried it.


But I am unaware if ECC is supported by IOS connect itself.

https://github.com/OpenVPN/openvpn/blob ... /README.ec

I also am interested in switching my servers to ECC.
Top
Apokrif
OpenVpn Newbie
Posts: 11
Joined: Fri Sep 07, 2012 8:04 pm

Re: elliptic curve certificates

Post by Apokrif » Fri Feb 27, 2015 8:33 pm

Me 3!
BTW:
OpenVPN 2.3.2 -- released on 2013.06.03
OpenVPN 2.3.6 -- released on 2014.12.01
If my calculation correct, OpenVPN 2.4.0 will be released around 2016.06.01 :idea:
Top
Post Reply

Return to “OpenVPN Connect (iOS)”