17
Tunneling WireGuard over HTTPS using Wstunnel (kroon.email)
submitted 1 year ago by to c/netsec@lemmy.world
8 comments fedilink hide all child comments
 

WireGuard is a great VPN protocol. However, you may come across networks blocking VPN connections, sometimes including WireGuard. For such cases, try tunneling WireGuard over HTTPS, which is typically (far) less often blocked. Here's how to do so, using Wstunnel.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago (7 children)

It looks really interesting but the link is giving me an SSL error :/

  • permalink
  • fedilink
  • source
  • hideshow 7 child comments
    •
  • [–] 5 points 1 year ago

    testssl.sh's client simulation:

     Running client simulations via sockets 

 Browser                      Protocol  Cipher Suite Name (OpenSSL)       Forward Secrecy
------------------------------------------------------------------------------------------------
 Android 7.0 (native)         No connection
 Android 8.1 (native)         No connection
 Android 9.0 (native)         No connection
 Android 10.0 (native)        No connection
 Android 11/12 (native)       No connection
 Android 13/14 (native)       No connection
 Android 15 (native)          TLSv1.3   TLS_AES_128_GCM_SHA256            X25519MLKEM768
 Chrome 101 (Win 10)          No connection
 Chromium 137 (Win 11)        TLSv1.3   TLS_AES_128_GCM_SHA256            X25519MLKEM768
 Firefox 100 (Win 10)         No connection
 Firefox 137 (Win 11)         TLSv1.3   TLS_AES_128_GCM_SHA256            X25519MLKEM768
 IE 8 Win 7                   No connection
 IE 11 Win 7                  No connection
 IE 11 Win 8.1                No connection
 IE 11 Win Phone 8.1          No connection
 IE 11 Win 10                 No connection
 Edge 15 Win 10               No connection
 Edge 101 Win 10 21H2         No connection
 Edge 133 Win 11 23H2         TLSv1.3   TLS_AES_128_GCM_SHA256            X25519MLKEM768
 Safari 18.4 (iOS 18.4)       No connection
 Safari 15.4 (macOS 12.3.1)   No connection
 Safari 18.4 (macOS 15.4)     No connection
 Java 7u25                    No connection
 Java 8u442 (OpenJDK)         No connection
 Java 11.0.2 (OpenJDK)        No connection
 Java 17.0.3 (OpenJDK)        No connection
 Java 21.0.6 (OpenJDK)        No connection
 go 1.17.8                    No connection
 LibreSSL 3.3.6 (macOS)       No connection
 OpenSSL 1.0.2e               No connection
 OpenSSL 1.1.1d (Debian)      No connection
 OpenSSL 3.0.15 (Debian)      No connection
 OpenSSL 3.5.0 (git)          TLSv1.3   TLS_AES_128_GCM_SHA256            X25519MLKEM768
 Apple Mail (16.0)            No connection
 Thunderbird (91.9)           No connection

    For me, very fresh browser and/or SSL/TLS library needed.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 1 year ago (3 children)

    Same here, but saving the post just in case is solved.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] [S] 2 points 1 year ago (2 children)

    Does https://pq.cloudflareresearch.com/ confirm your browser is using X25519MLKEM768?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 1 year ago*

    I've multiple Firefox-based browsers (including Firefox proper) in Android that are shown as not supporting it. The only one that supported it was IronFox (and even that only showed after a page reload for some reason). Chrome & Cromite do as well. Good to know, thank you!

  • permalink
  • fedilink
  • source
  • parent