AES-256-GCM with HMAC-SHA384 for authentication

[SodaStream 7]

Any1 know when will pfsense support AES-256-GCM with HMAC-SHA384 for authentication ?

[go558a83nk 371]

Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA

 

that's in my openvpn log - pfsense 2.3.3. It's not new.  I've used it ever since I began using pfsense.

 

just put tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 in the custom options.

[SodaStream 7]

Does airvpn support any other auth digest algoritm instead of sha1 on pfsense?

[zhang888 1067]

See here:

https://airvpn.org/specs/

[go558a83nk 371]

AES-256-GCM with HMAC-SHA384 for authentication with openvpn 2.4.x is in the specs page.

 

So, does that mean we should be able to use SHA384 for auth digest?

 

I'm just seeing this updated specs page today since I recently updated my mint machine to openvpn 2.4.3 and saw some new ciphers being used in logs.  However, I can't connect with  "auth sha384" in the config.

[jugs 1]

  On 2/25/2017 at 8:57 PM, zhang888 said:

See here:

https://airvpn.org/specs/

 

What do we set auth to in order to get:

 

  Quote

DATA CHANNEL CIPHERS

AES-256-GCM with 256 bit key for authentication^(*)

[go558a83nk 371]

  On 8/20/2017 at 4:33 AM, jugs said:

 

  On 2/25/2017 at 8:57 PM, zhang888 said:

See here:

https://airvpn.org/specs/

 

What do we set auth to in order to get:

 

  Quote

>DATA CHANNEL CIPHERS

AES-256-GCM with 256 bit key for authentication^(*)

 

 

 

automatic when you use openvpn 2.4 and select AES-256-GCM

[Keksjdjdke 35]

  On 8/20/2017 at 2:11 PM, go558a83nk said:

 

 

 

See here:

https://airvpn.org/specs/

What do we set auth to in order to get:

 

 

>DATA CHANNEL CIPHERS

AES-256-GCM with 256 bit key for authentication^(*)

 

automatic when you use openvpn 2.4 and select AES-256-GCM

Eddie use TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA when you connect to any server using OpenVpn 2.4 and above, make sure your using the latest version of Eddie. Download it here Enter