TLS 1.3 supported on AirVPN web servers

[Staff 9972]

Hello!

We're very glad to inform you that TLS 1.3 is now supported on all AirVPN web servers.

Why TLS 1.3 is better than 1.2:
https://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.3

TLS 1.0, 1.1 and 1.2 will still be available for backward compatibility.

Kind regards and datalove
AirVPN Staff
 

[go558a83nk 362]

Any change to https://airvpn.org/specs/ with this new capability?

LOL, I misread.  Nevermind! 

[yoyall 5]

Great stuff!  Just wondering whether Eddie can use TLS 1.3 now or will that come in a future release?

[go558a83nk 362]

Looks like I'm not the only one to "misread".

My friends, this applies to *web* servers.

[zhang888 1066]

The OpenVPN connection has less
benefits from TLS 1.3 unlike web.

Most improvements are roundtrip and
overhead related, so nothing OpenVPN can really benefit from,
as well as downgrade attack extra
prevention which are mitigated by
both the client and the server.

This would be supported eventually
by all but not such important as web.

Competitors should follow this as well
better sooner than later

[morning.star 0]

On the config generator page, under Specs, I could only find tls-crypt, tls 1.2
How do I generate config files that support tls-crypt, tls 1.3?

[Staff 9972]

4 hours ago, morning.star said:

On the config generator page, under Specs, I could only find tls-crypt, tls 1.2
How do I generate config files that support tls-crypt, tls 1.3?

Hello!

You can't. TLS 1.3 will be supported starting from OpenVPN 2.4.7 in the near future. Quite irrelevant for OpenVPN currently, but stay tuned. TLS 1.3 is available on all of our web servers, where it is not irrelevant at all.

Kind regards
 

[morning.star 0]

8 hours ago, Staff said:

You can't. TLS 1.3 will be supported starting from OpenVPN 2.4.7 in the near future

I am using OpenVPN 2.4.7 and it supports TLS 1.3. When will I able to connect to your servers using TLS 1.3?
 

8 hours ago, Staff said:

TLS 1.3 is available on all of our web servers, where it is not irrelevant at all.

As mentioned, I am using OpenVPN 2.4.7. Please show me how to connect to your servers using TLS 1.3.

[go558a83nk 362]

5 minutes ago, morning.star said:

I am using OpenVPN 2.4.7 and it supports TLS 1.3. When will I able to connect to your servers using TLS 1.3?
 
As mentioned, I am using OpenVPN 2.4.7. Please show me how to connect to your servers using TLS 1.3.

*web* servers, not VPN servers.

[morning.star 0]

6 hours ago, go558a83nk said:

*web* servers, not VPN servers.

When will AirVPN provide support of TLS 1.3 on its VPN servers?

[OpenSourcerer 1435]

4 hours ago, morning.star said:

When will AirVPN provide support of TLS 1.3 on its VPN servers?

Oh my god, patience! What the hell is wrong with some people nowadays? Everyone expects shit being done the moment they say they need it.
Read Staff's post again... carefully.

[go558a83nk 362]

Firefox is showing this web site as tls 1.2 now. 

Also, SSL Labs scan of airvpn.org shows tls 1.3 isn't supported.

https://www.ssllabs.com/ssltest/analyze.html?d=airvpn.org&s=5.196.64.52

Edit:  A couple hours later and it looks like you've got it fixed now.  Thanks!

[Staff 9972]

@go558a83nk

Hello!

A momentary misconfiguration which has been fixed, thank you.

Kind regards
 

[go558a83nk 362]

Your web server is back to TLS 1.2 again.

https://www.ssllabs.com/ssltest/analyze.html?d=airvpn.org&s=5.196.64.52&hideResults=on

[Staff 9972]

On 2/18/2021 at 11:37 PM, go558a83nk said:

Your web server is back to TLS 1.2 again.

https://www.ssllabs.com/ssltest/analyze.html?d=airvpn.org&s=5.196.64.52&hideResults=on

Thanks. Fixed in some AirVPN domains, in the main domain name (airvpn.org) it will be fixed soon.

UPDATE: Problem has been resolved.

Kind regards
 

[Rashon 0]

Hello community I am completely new to air vpn)OpenVPN ). Networking -cpu ‘s can any body  please explain what does  tls 1.3 do for OpenVPN connections )while using airvpn. Thanks for any help