Menu

#1 Supposedly wrong documentation and an issue with an old TAP adapter

1.0
open
nobody
None
2022-06-29
2022-06-29
Templayer
No

From a discussion I had with Maximilian from OVPN (max.holm@ovpn.com):

(the second paragraph is about this backport)

"That's because Windows XP doesn't support OpenVPN 2.4 or OpenVPN 2.5, which has the more advanced features and ciphers. The one I sent you is the last version that's supported in XP.

The people that made the version in the link you sent me seem to be a bit confused. The yare flat out wrong on many points which doesn't inspire confidence in the project.

As an example, they claim that the official OpenVPN version doesn't support stronger ciphers like AES-256-CBC, which is flat out wrong. OpenVPN 2.3 does support AES-256-CBC. Maybe earlier versions of their client does not, but the official one (that I linked to) does. Additionally, they write "new TAP-Driver with a network speed of 1 GBit/s instead of 10 MBit/s" which is also flat out wrong. The TAP adapter used for OpenVPN GUI is a virtual adapter, not a physical one. It doesn't have a bandwidth cap, the 10 Mbit/s is just a bogus number set on the adapter because it can't have a null value. It in no way limits your bandwidth to 10 Mbit/s.

Additionally, they say they use TAP adapter version 9.9.2 (as if that somehow is what increases throughput from 10 Mbit/s to 1 Gbit/s), but that version of the TAP adapter is from 2013, it's not even the latest version of the TAP adapter included in the official OpenVPN XP version which I believe is 9.21 or 9.22.

What OpenVPN 2.4 adds support for is AES-256-GCM (not CBC), and OpenVPN 2.5 adds support for CHACHA20-POLY1305"

Maybe the TAP adapter should be updated? And the documentation changed, if the other information quoted is correct?

Discussion


Log in to post a comment.

MongoDB Logo MongoDB