Bernhard.Linz/openvpn-install
1
0
Fork 0
mirror of https://github.com/angristan/openvpn-install.git synced 2026-09-29 21:23:22 +02:00
Code Issues Projects Releases Wiki Activity
228 Commits 9 Branches 0 Tags
7a5bb93cbe2f78e11ee2e14ac261247e43cae092
Commit Graph
22 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Angristan 7a5bb93cbe AES-256 is not necessarily the most secure cipher 
Indeed, it it most vulnerable to Timing Attacks : https://en.wikipedia.org/wiki/Length_extension_attack

Also, AES 128 is secure enough for every one, so it's still the recommended cipher.
 2016-12-04 17:21:41 +01:00
Angristan 56477bba34 The crypto update 🔐 
- Removed "fast" and "slow" mode (not a good idea, I prefer to give the choice for the parameters directly)
- Corrected some confusion between the cipher for the data channel and the control channel, my bad.
- using TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 by default for the control channel
- using SHA384 by default for HMAC auth and RSA certificate
- giving the choice for the cipher of the data channel, the size of the DH key and the RSA Key

I will explain all my choices here : https://github.com/Angristan/OpenVPN-install#encryption (likely tomorrow)
 2016-11-28 22:13:32 +01:00
Angristan c03a55f11f Making sure a correct DNS option is selected 2016-11-27 14:31:25 +01:00
Angristan 421d69e92d Arch Linux + other changes 2016-11-26 17:20:56 +01:00
Angristan d3b0ec10e7 Remove UFW and MASQUERADE 
See https://github.com/Angristan/OpenVPN-install/commit/17a9d76ae9186975c3ce4edd320334b2b1ef4ba9
 2016-11-25 01:01:10 +01:00
Angristan 17a9d76ae9 Remove ufw and MASQUERADE support 
Not useful, badly implemented.
 2016-11-25 00:59:03 +01:00
Angristan 218e474f85 Add logs 
Can be useful.
 2016-11-24 23:34:15 +01:00
Angristan 2db5ff8adf Avoid DNS leak on W10 2016-11-24 23:04:24 +01:00
Angristan 98ca79a9de Move rc.local and sysctl installation after the confirmation 2016-11-24 20:28:49 +01:00
Angristan f9016fb3b5 Add TCP support 2016-11-23 20:22:57 +01:00
Angristan 80dbca6e63 Add TCP support 
There is now the choice to use TCP or UDP for OpenVPN protocol. You should always use UDP, but TCP can be useful sometimes : on lossy networks or to bypass some blockage
 2016-11-21 19:57:52 +01:00
Angristan 662fe26f5b I don't know why it wasn't like this from the beginning 2016-11-20 23:09:42 +01:00
Angristan 552709059e Fix my previous commit 
My bad.
 2016-11-20 22:50:51 +01:00
Angristan a09ef4868a The user can choose to continue the installer even if its OS is not supported 
At its own risk of course. But usefull if using Ubuntu beta or Debian unstable/testing
 2016-11-20 22:47:23 +01:00
Angristan 457005d03a Add old repo 2016-11-20 16:39:36 +01:00
Angristan cbd57e6416 Add contributors 2016-11-20 16:03:59 +01:00
Angristan 77301f9a9d Some clarification 2016-11-20 15:29:23 +01:00
Angristan 903270be4b Remove OpenNIC servers 
Not consistant and can't really be trusted
 2016-11-20 15:01:42 +01:00
Angristan b0f271bc5f Specify the location of the DNS servers 2016-11-20 14:52:47 +01:00
Angristan 1e80e145f0 Fix title 2016-11-20 14:23:48 +01:00
Angristan 3f58eb781c Some cleanup 2016-11-20 14:22:08 +01:00
Angristan 98d7d7a358 Update date and copyright holder 2016-11-20 13:26:50 +01:00