{"id":2091,"date":"2013-10-08T22:32:50","date_gmt":"2013-10-08T20:32:50","guid":{"rendered":"http:\/\/blog.wenzlaff.de\/?p=2091"},"modified":"2021-11-22T17:16:00","modified_gmt":"2021-11-22T16:16:00","slug":"wie-koennen-die-verschluesselungs-modus-und-hash-algorithmen-von-openvpn-servern-angezeigt-werden","status":"publish","type":"post","link":"http:\/\/blog.wenzlaff.de\/?p=2091","title":{"rendered":"Wie k\u00f6nnen die verschl\u00fcsselungs Modus und Hash Algorithmen von OpenVPN Servern angezeigt werden?"},"content":{"rendered":"

Auf der Konsole bei laufenden OpenVPN Server k\u00f6nnen alle verf\u00fcgbaren verschl\u00fcsselungs Algorithmen wie folgt angezeigt werden:<\/p>\n

root@OpenWrt:\/# \/usr\/sbin\/openvpn — –show-ciphers<\/strong><\/p>\n

Das Ergebnis:
\n
\nDES-CFB 64 bit default key (fixed)
\nDES-CBC 64 bit default key (fixed)
\nRC2-CBC 128 bit default key (variable)
\nRC2-CFB 128 bit default key (variable)
\nRC2-OFB 128 bit default key (variable)
\nDES-EDE-CBC 128 bit default key (fixed)
\nDES-EDE3-CBC 192 bit default key (fixed)
\nDES-OFB 64 bit default key (fixed)
\nDES-EDE-CFB 128 bit default key (fixed)
\nDES-EDE3-CFB 192 bit default key (fixed)
\nDES-EDE-OFB 128 bit default key (fixed)
\nDES-EDE3-OFB 192 bit default key (fixed)
\nDESX-CBC 192 bit default key (fixed)
\nBF-CBC 128 bit default key (variable)
\nBF-CFB 128 bit default key (variable)
\nBF-OFB 128 bit default key (variable)
\nRC2-40-CBC 40 bit default key (variable)
\nCAST5-CBC 128 bit default key (variable)
\nCAST5-CFB 128 bit default key (variable)
\nCAST5-OFB 128 bit default key (variable)
\nRC2-64-CBC 64 bit default key (variable)
\nAES-128-CBC 128 bit default key (fixed)
\nAES-128-OFB 128 bit default key (fixed)
\nAES-128-CFB 128 bit default key (fixed)
\nAES-192-CBC 192 bit default key (fixed)
\nAES-192-OFB 192 bit default key (fixed)
\nAES-192-CFB 192 bit default key (fixed)
\nAES-256-CBC 256 bit default key (fixed)
\nAES-256-OFB 256 bit default key (fixed)
\nAES-256-CFB 256 bit default key (fixed)
\nAES-128-CFB1 128 bit default key (fixed)
\nAES-192-CFB1 192 bit default key (fixed)
\nAES-256-CFB1 256 bit default key (fixed)
\nAES-128-CFB8 128 bit default key (fixed)
\nAES-192-CFB8 192 bit default key (fixed)
\nAES-256-CFB8 256 bit default key (fixed)
\nDES-CFB1 64 bit default key (fixed)
\nDES-CFB8 64 bit default key (fixed)
\nDES-EDE3-CFB1 192 bit default key (fixed)
\nDES-EDE3-CFB8 192 bit default key (fixed)
\nSEED-CBC 128 bit default key (fixed)
\nSEED-OFB 128 bit default key (fixed)
\nSEED-CFB 128 bit default key (fixed)
\n<\/code><\/p>\n

Die verf\u00fcgbare Hash Algorithmen k\u00f6nnen wie folgt angezeigt werden:<\/p>\n

\/usr\/sbin\/openvpn — –show-digests<\/strong><\/p>\n

Folgende Liste wird geliefert:
\n
\nMD5 128 bit digest size
\nRSA-MD5 128 bit digest size
\nSHA1 160 bit digest size
\nRSA-SHA1 160 bit digest size
\nDSA-SHA1-old 160 bit digest size
\nDSA-SHA1 160 bit digest size
\nRSA-SHA1-2 160 bit digest size
\nDSA 160 bit digest size
\nMD4 128 bit digest size
\nRSA-MD4 128 bit digest size
\nRSA-SHA256 256 bit digest size
\nRSA-SHA384 384 bit digest size
\nRSA-SHA512 512 bit digest size
\nRSA-SHA224 224 bit digest size
\nSHA256 256 bit digest size
\nSHA384 384 bit digest size
\nSHA512 512 bit digest size
\nSHA224 224 bit digest size
\nwhirlpool 512 bit digest size
\n<\/code><\/p>\n

Und root@OpenWrt:\/# \/usr\/sbin\/openvpn — –show-tls<\/strong>
\n
\nAvailable TLS Ciphers,
\nlisted in order of preference:<\/p>\n

SRP-DSS-AES-256-CBC-SHA
\nSRP-RSA-AES-256-CBC-SHA
\nDHE-DSS-AES256-GCM-SHA384
\nDHE-RSA-AES256-GCM-SHA384
\nDHE-RSA-AES256-SHA256
\nDHE-DSS-AES256-SHA256
\nDHE-RSA-AES256-SHA
\nDHE-DSS-AES256-SHA
\nAES256-GCM-SHA384
\nAES256-SHA256
\nAES256-SHA
\nPSK-AES256-CBC-SHA
\nSRP-DSS-3DES-EDE-CBC-SHA
\nSRP-RSA-3DES-EDE-CBC-SHA
\nEDH-RSA-DES-CBC3-SHA
\nEDH-DSS-DES-CBC3-SHA
\nDES-CBC3-SHA
\nPSK-3DES-EDE-CBC-SHA
\nSRP-DSS-AES-128-CBC-SHA
\nSRP-RSA-AES-128-CBC-SHA
\nDHE-DSS-AES128-GCM-SHA256
\nDHE-RSA-AES128-GCM-SHA256
\nDHE-RSA-AES128-SHA256
\nDHE-DSS-AES128-SHA256
\nDHE-RSA-AES128-SHA
\nDHE-DSS-AES128-SHA
\nDHE-RSA-SEED-SHA
\nDHE-DSS-SEED-SHA
\nAES128-GCM-SHA256
\nAES128-SHA256
\nAES128-SHA
\nSEED-SHA
\nPSK-AES128-CBC-SHA
\nRC4-SHA
\nRC4-MD5
\nPSK-RC4-SHA
\nEDH-RSA-DES-CBC-SHA
\nEDH-DSS-DES-CBC-SHA
\nDES-CBC-SHA
\nEXP-EDH-RSA-DES-CBC-SHA
\nEXP-EDH-DSS-DES-CBC-SHA
\nEXP-DES-CBC-SHA
\nEXP-RC2-CBC-MD5
\nEXP-RC4-MD5
\n<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Auf der Konsole bei laufenden OpenVPN Server k\u00f6nnen alle verf\u00fcgbaren verschl\u00fcsselungs Algorithmen wie folgt angezeigt werden: root@OpenWrt:\/# \/usr\/sbin\/openvpn — –show-ciphers Das Ergebnis: DES-CFB 64 bit default key (fixed) DES-CBC 64 bit default key (fixed) RC2-CBC 128 bit default key (variable) RC2-CFB 128 bit default key (variable) RC2-OFB 128 bit default key (variable) DES-EDE-CBC 128 bit … <\/p>\n

\u201eWie k\u00f6nnen die verschl\u00fcsselungs Modus und Hash Algorithmen von OpenVPN Servern angezeigt werden?\u201c <\/span>weiterlesen<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[808],"tags":[1012,988,1011,989],"class_list":["post-2091","post","type-post","status-publish","format-standard","hentry","category-linux-2","tag-hash","tag-openvpn","tag-verschluesselnung","tag-vpn"],"_links":{"self":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts\/2091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2091"}],"version-history":[{"count":0,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=\/wp\/v2\/posts\/2091\/revisions"}],"wp:attachment":[{"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2091"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.wenzlaff.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}